Function at 0x140001010
Capabilities:
Accept command line arguments
Delete directory
Encode data using xor
Get common file path
Get disk information
Get file attributes
Get file size
Get geographical location
Identify system language via api
Manipulate console buffer
Move file
Resume thread
Set console window title
Set file attributes
Set thread local storage value
Terminate process
Write file on windows

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1dc18
call fcn.1401482f0
sub rsp, rax
lea rax, [rsp + 0x1d730]
lea rcx, str.lexicography_tightwad
mov rdi, rax
mov rsi, rcx
mov ecx, PathMakeUniqueName
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d6d8]
lea rcx, str.landlady
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.SHELL32.dll_ILClone
rep movsb byte [rdi], byte [rsi]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x1d6f0]
call fcn.140148250
lea rax, [rsp + 0x1d708]
lea rcx, str.Lubricious_Depends
mov rdi, rax
mov rsi, rcx
mov ecx, 0x26
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x36c0], 0x5094
mov dword [rsp + 0x36c4], 0xef61
movabs rax, 0x744ebc887e696f
mov qword [rsp + 0x6318], rax
mov dword [rsp + 0x36c8], 0x73ed
mov eax, 0x368
mov word [rsp + 0xaf4], ax
mov eax, dword [rsp + 0x36c0]
add eax, 0x2a6c
mov dword [rsp + 0x36c0], eax
movabs rax, 0x7b966299da2cb5
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
movsx eax, word [rsp + 0xaf4]
and eax, 0x7f5
mov word [rsp + 0xaf4], ax
mov eax, dword [rsp + 0x36c0]
or eax, 0x7785
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x36c0]
shl eax, 0x14
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x36c0]
xor eax, 0x32c7
mov dword [rsp + 0x36c0], eax
movsx eax, word [rsp + 0xaf4]
sar eax, 0xa
mov word [rsp + 0xaf4], ax
mov eax, dword [rsp + 0x36c8]
add eax, 0xe
mov dword [rsp + 0x36c8], eax
movsx eax, word [rsp + 0xaf4]
sub eax, 0xf6
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
add eax, 0x2a6
mov word [rsp + 0xaf4], ax
movabs rax, 0x706adce93ff69c
mov rcx, qword [rsp + 0x6318]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
movsx eax, word [rsp + 0xaf4]
add eax, 0x67f
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
sub eax, 0x5ad
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
add eax, 0x331
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
sub eax, 0x420
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
sar eax, 9
mov word [rsp + 0xaf4], ax
mov eax, dword [rsp + 0x36c0]
shl eax, 0x1b
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x36c0]
xor eax, 0x2fd0
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x36c0]
or eax, 0xadb3
mov dword [rsp + 0x36c0], eax
cmp dword [rsp + 0x36c8], 0x75f3
jbe 0x1400010dc
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x6320], rax
movabs rax, 0x7668792485111b
cmp qword [rsp + 0x6320], rax
je 0x14000129e
jmp 0x1400012e2
mov eax, dword [rsp + 0x36c0]
add eax, 0x42a3
mov dword [rsp + 0x36c0], eax
mov dword [rsp + 0x20], 0x60
movzx r9d, word [rsp + 0xaf4]
mov r8d, dword [rsp + 0x36c0]
movzx edx, word [rsp + 0xaf4]
mov ecx, ILFindChild
call fcn.140147590
nop
jmp 0x140146ee8
cmp dword [rsp + 0x36c0], 0x2f30
je 0x140146e76
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x6328], rax
movabs rax, 0x75b0eb729bf5a1
cmp qword [rsp + 0x6328], rax
je 0x140001319
jmp 0x14000133e
movabs rax, 0x7000b5cedc7be0
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
jmp 0x140001423
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x6330], rax
movabs rax, 0x7000c4c81b4680
cmp qword [rsp + 0x6330], rax
je 0x1400013e9
movabs rax, 0x704bd84888b5b3
cmp qword [rsp + 0x6330], rax
je 0x14000137f
jmp 0x140001423
lea rax, [rsp + 0x36cc]
mov qword [rsp + 0x20], rax
mov r9d, 0xeb
lea r8, [rsp + 0x6318]
lea rdx, [rsp + 0x6338]
mov rcx, qword [rsp + 0x6338]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x36cc], eax
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x6318]
mov edx, reloc.SHELL32.dll_ILRemoveLastID
movzx ecx, word [rsp + 0xaf4]
call fcn.140147e40
nop
jmp 0x140001423
movabs rax, 0x7aa242fef4d4df
mov rcx, qword [section..data]
and rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov eax, 0x8b5
mov word [rsp + 0xaf8], ax
mov rax, qword [section..data]
mov qword [rsp + 0x6340], rax
movzx eax, word [rsp + 0xaf4]
mov word [rsp + 0xafc], ax
mov dword [rsp + 0x36d0], 0x5abc
movsx eax, word [rsp + 0xafc]
mov dword [rsp + 0x36d4], eax
cmp dword [rsp + 0x36d4], 0
je 0x14000146d
cmp dword [rsp + 0x36d4], 0x457
je 0x1400015a2
jmp 0x140001666
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x6348], rax
movsx eax, word [rsp + 0xaf4]
add eax, 0x6db
movsx ecx, word [rsp + 0xafc]
cmp eax, ecx
je 0x140001567
movsx eax, word [rsp + 0xafc]
sub eax, 0x4d0
movsx ecx, word [rsp + 0xaf4]
cmp eax, ecx
jl 0x14000154f
movsx eax, word [rsp + 0xaf4]
mov dword [rsp + 0x36d8], eax
cmp dword [rsp + 0x36d8], 0x58c
je 0x140001532
cmp dword [rsp + 0x36d8], 0x708
je 0x1400014e2
jmp 0x14000154f
movzx eax, word [rsp + 0xaf8]
add eax, 0x737
mov word [rsp + 0xaf8], ax
lea r8, [rsp + 0x1d6b8]
lea rdx, [rsp + 0x1d6f0]
lea rcx, [rsp + 0xafc]
call sub.gdiplus.dll_GdiplusStartup
mov dword [rsp + 0x36dc], eax
movzx eax, word [rsp + 0xaf8]
sub eax, 0x32b
mov word [rsp + 0xaf8], ax
jmp 0x14000154f
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x6348]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov dword [rsp + 0x36e0], 0x815e
mov dword [rsp + 0x36e4], 0x1cf4
jmp 0x140001592
lea r9, [rsp + 0x6350]
lea r8, [rsp + 0x36c0]
lea rdx, [fcn.1401477c0]
mov rcx, qword [rsp + 0x6358]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x36e8], eax
mov dword [rsp + 0x36ec], 0xb0cc
jmp 0x140001666
movsx eax, word [rsp + 0xafc]
or eax, 0x674
movsx ecx, word [rsp + 0xaf4]
cmp eax, ecx
jg 0x140001666
mov rax, qword [section..data]
movzx ecx, al
mov rax, qword [rsp + 0x6348]
shr rax, cl
mov qword [rsp + 0x6340], rax
movzx eax, word [rsp + 0xaf8]
mov dword [rsp + 0x36f0], eax
cmp dword [rsp + 0x36f0], 0xc90
je 0x1400015fa
jmp 0x140001652
mov r9d, 0x47
mov r8d, 0xc7
mov edx, ILCreateFromPathW
mov rcx, qword [rsp + 0x6360]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x6368], rax
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x6318]
mov edx, 0x34
movzx ecx, word [rsp + 0xafc]
call fcn.140147e40
nop
jmp 0x140001666
mov rax, qword [rsp + 0x6318]
shl rax, 0x1a
mov qword [rsp + 0x6318], rax
lea rax, [rsp + 0x6348]
mov qword [rsp + 0x6370], rax
movsx eax, word [rsp + 0xafc]
and eax, 0x1f4
mov word [rsp + 0xaf4], ax
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x36dc], eax
movsx eax, word [rsp + 0xafc]
add eax, 0x581
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, word [rsp + 0xaf4]
sub eax, 0x731
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, word [rsp + 0xafc]
and eax, 0x6e
mov word [rsp + 0xaf4], ax
movabs rax, 0x7db43144b3d0d0
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, word [rsp + 0xaf4]
add eax, 0x546
mov word [rsp + 0xafc], ax
movsx eax, word [rsp + 0xafc]
xor eax, 0x273
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
or rax, rcx
mov qword [section..data], rax
movsx eax, word [rsp + 0xaf4]
sar eax, 9
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6370]
mov qword [rsp + 0x6378], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6378]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movabs rax, 0x71e2720163ec40
mov rcx, qword [rsp + 0x6318]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6340], rax
movzx eax, word [rsp + 0xaf8]
add eax, 0x6a9
mov word [rsp + 0xaf8], ax
movabs rax, 0x7835e2644afad3
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36c4]
add eax, 0x68
mov dword [rsp + 0x36c4], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36c0]
shr eax, 0x16
mov dword [rsp + 0x36dc], eax
mov eax, dword [rsp + 0x36c0]
shl eax, 0x1c
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movabs rax, 0x784ac99ec7089f
mov rcx, qword [rsp + 0x6318]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
movsx eax, word [rsp + 0xafc]
add eax, 0x64
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movabs rax, 0x7e5941110ff0fa
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [section..data]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
cmp dword [rsp + 0x36c4], 0x11591
jbe 0x140001676
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov qword [rsp + 0x6380], rax
cmp qword [rsp + 0x6380], 0
je 0x140001ae9
movabs rax, 0x7e25729fff59df
cmp qword [rsp + 0x6380], rax
je 0x140001b18
jmp 0x140001c9c
lea rax, [rsp + 0xaf8]
mov qword [rsp + 0x6388], rax
movzx eax, word [rsp + 0xafc]
mov word [rsp + 0xb00], ax
mov dword [0x140161310], 0x6908
jmp 0x140001c9c
mov r9d, SHTestTokenMembership
lea r8, [rsp + 0x6388]
lea rdx, [fcn.1401477c0]
mov rcx, qword [rsp + 0x6390]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x36f4], eax
mov eax, dword [0x140161310]
mov dword [rsp + 0x36f8], eax
cmp dword [rsp + 0x36f8], 0x6167
je 0x140001b60
jmp 0x140001c7c
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xafc]
and eax, ecx
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
imul eax, ecx
movsx ecx, word [rsp + 0xaf4]
cmp eax, ecx
jg 0x140001bcb
movzx eax, word [rsp + 0xaf8]
or eax, 0xefa
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
shl eax, cl
mov word [rsp + 0xb00], ax
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x36fc], eax
cmp dword [rsp + 0x36fc], 0x9b78
je 0x140001be8
jmp 0x140001c5f
mov r9d, ILRemoveLastID
mov r8d, 0x77
mov edx, SHTestTokenMembership
mov rcx, qword [rsp + 0x6390]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x6398], rax
mov eax, dword [rsp + 0x36dc]
xor eax, 0xdf24
mov dword [rsp + 0x36c0], eax
mov r8d, 0x72
mov rdx, qword [rsp + 0x6390]
mov rcx, qword [rsp + 0x6358]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0x6340]
movzx ecx, al
mov rax, qword [section..data]
shr rax, cl
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
jmp 0x140001c7a
mov r8, qword [rsp + 0x6318]
mov edx, dword [0x140161310]
mov ecx, dword [rsp + 0x36c0]
call fcn.140147c40
nop
jmp 0x140001c9c
movabs rax, 0x7cd037cd1de942
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov dword [rsp + 0x3700], 0x57e1
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov word [rsp + 0xb04], ax
mov dword [rsp + 0x3704], 0x94fc
movabs rax, 0x73458db554db75
mov rcx, qword [rsp + 0x63a0]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x6318]
je 0x140146d2b
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x3708], eax
movsx eax, word [rsp + 0xaf4]
mov dword [rsp + 0x370c], eax
cmp dword [rsp + 0x370c], 0x67
je 0x140001d38
cmp dword [rsp + 0x370c], 0x4ea
je 0x140001e88
jmp 0x140001f50
mov eax, dword [rsp + 0x36dc]
mov dword [rsp + 0x3710], eax
cmp dword [rsp + 0x3710], 0xfffa
je 0x140001d65
cmp dword [rsp + 0x3710], 0x30000000
je 0x140001dd0
jmp 0x140001e83
mov r9d, 0x26
lea r8, [rsp + 0x63a8]
lea rdx, [fcn.140147c40]
mov rcx, qword [rsp + 0x6358]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x36f4], eax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
movabs rax, 0x7d34c19aca4fce
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
jmp 0x140001e83
movabs rax, 0x7a541b70d69e74
mov rcx, qword [rsp + 0x63a0]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x6318]
jge 0x140001e2f
lea rax, [rsp + 0x6340]
mov qword [rsp + 0x63b0], rax
mov dword [rsp + 0x3714], 0x916c
lea rax, [rsp + 0xb04]
mov qword [rsp + 0x63b8], rax
mov dword [rsp + 0x3718], 0xea95
mov byte [rsp + 0x40], 0x4d
jmp 0x140001e78
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
add eax, ecx
movsx ecx, word [rsp + 0xb00]
cmp eax, ecx
jne 0x140001e78
lea r9, [rsp + 0x63b8]
lea r8, [rsp + 0x6388]
lea rdx, [fcn.1401477c0]
mov rcx, qword [rsp + 0x6390]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x371c], eax
mov dword [rsp + 0x3720], 0x6045
jmp 0x140001f50
mov rcx, qword [rsp + 0x6340]
call fcn.140148220
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sar eax, cl
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov dword [rsp + 0x3724], eax
cmp dword [rsp + 0x3724], 0x4d5
je 0x140001ed6
jmp 0x140001f2f
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xaf8], ax
mov edx, 0xd9
mov rcx, qword [rsp + 0x63c0]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [rsp + 0x3728], eax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaf8], ax
jmp 0x140001f50
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
cmp dword [rsp + 0x3718], 0xe9c0
jb 0x140002387
mov eax, dword [rsp + 0x3718]
sub eax, 3
mov dword [rsp + 0x3718], eax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
movabs rax, 0x74f8414b2614fb
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb04]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x3708]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
movsx eax, byte [rsp + 0x40]
sar eax, 5
mov byte [rsp + 0x40], al
movabs rax, 0x7094271baaa5e6
mov rcx, qword [rsp + 0x6318]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb04]
shl eax, cl
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb04], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movabs rax, 0x75558c01bc06c4
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb04], ax
movsx eax, byte [rsp + 0x40]
sar eax, 5
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6370]
mov qword [rsp + 0x63c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x63c8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6340], rax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x6340]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6340], rax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x36dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb00]
sub eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
jmp 0x140001f50
mov rax, qword [rsp + 0x63a0]
mov qword [rsp + 0x63d0], rax
lea rax, [rsp + 0x6348]
mov qword [rsp + 0x63d8], rax
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x36c0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov dword [rsp + 0x372c], 0x9cb3
mov eax, dword [0x140161310]
mov dword [rsp + 0x3730], eax
mov dword [rsp + 0x3734], 0x667d
mov dword [rsp + 0x3738], 0xd9c3
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x373c], al
cmp byte [rsp + 0x373c], 0
je 0x140002413
cmp byte [rsp + 0x373c], 0x12
je 0x140002470
jmp 0x140002507
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
lea rax, [rsp + 0xb00]
mov qword [rsp + 0x63e0], rax
mov dword [rsp + 0x3740], 0xa28
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov word [rsp + 0xb08], ax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x63e8], rax
jmp 0x140002507
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
shl eax, 4
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x3744], al
cmp byte [rsp + 0x3744], 0x64
je 0x14000249a
jmp 0x1400024ed
lea rdx, [rsp + 0x1d9c0]
lea rcx, str.C:HydroxidesjailsAirplayGorgeunmade
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x63f0], rax
mov eax, dword [rsp + 0x3730]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0xb00]
mov r8d, dword [rsp + 0x36dc]
mov rax, qword [rsp + 0x63e0]
movzx edx, word [rax]
mov ecx, dword [rsp + 0x3730]
call fcn.140147590
nop
jmp 0x140002507
mov eax, dword [rsp + 0x3708]
movzx ecx, al
mov eax, dword [rsp + 0x36c0]
shr eax, cl
mov dword [rsp + 0x36dc], eax
mov eax, dword [rsp + 0x3730]
mov dword [rsp + 0x3748], eax
cmp dword [rsp + 0x3748], 0x6378
je 0x140002538
cmp dword [rsp + 0x3748], 0x6908
je 0x1400025b6
jmp 0x1400026de
lea r8, [rsp + 0x63c0]
mov edx, 0xfa
lea rcx, str.C:_flamingcodling
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov dword [rsp + 0x3728], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [0x140160008]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x6318]
mov edx, dword [rsp + 0x3730]
mov rax, qword [rsp + 0x63e0]
movzx ecx, word [rax]
call fcn.140147e40
nop
jmp 0x1400026de
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
or eax, ecx
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x63b8]
movzx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jne 0x140002693
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0xb04]
movzx edx, word [rsp + 0xaf8]
sub ecx, edx
cmp eax, ecx
jle 0x140002691
mov eax, dword [0x140161310]
sub eax, 0x21cb
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x1d6b8]
mov r8d, 0xc4
lea rdx, [rsp + 0xaf4]
mov rcx, qword [rsp + 0x63f8]
call qword [sym.imp.KERNEL32.dll_BackupRead]
mov dword [rsp + 0x3728], eax
jmp 0x1400026de
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
add eax, ecx
movzx ecx, word [rsp + 0xaf8]
mov rdx, qword [rsp + 0x6388]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
je 0x1400026de
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaf4], ax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6400], rax
lea rax, [rsp + 0xaf8]
mov qword [rsp + 0x6408], rax
mov rax, qword [rsp + 0x6400]
movzx eax, byte [rax]
mov byte [rsp + 0x374c], al
cmp byte [rsp + 0x374c], 0
je 0x1400027fc
cmp byte [rsp + 0x374c], 0x75
je 0x14000272a
jmp 0x140002ad4
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
movsx ecx, word [rsp + 0xb00]
mov dword [rsp + 0x3750], ecx
mov rdx, qword [rsp + 0x63e0]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x3750]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x1400027b9
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xb04]
sar eax, cl
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63a0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x63a0]
mov r8, qword [rsp + 0x63d0]
mov edx, dword [rsp + 0x3730]
movzx ecx, word [rsp + 0xb00]
call fcn.140147e40
nop
jmp 0x1400027f7
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
or eax, ecx
movsx ecx, byte [rsp + 0x40]
cmp eax, ecx
jg 0x1400027f7
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
xor eax, ecx
mov word [rsp + 0xb00], ax
jmp 0x140002ad4
mov eax, dword [0x140161310]
mov dword [rsp + 0x3754], eax
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x3758], eax
cmp dword [rsp + 0x3758], 0x445a
je 0x14000283a
cmp dword [rsp + 0x3758], 0xf7ff500d
je 0x140002992
jmp 0x140002ac9
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
cmp eax, ecx
jge 0x140002944
mov edx, 0x7d
mov ecx, 0x7f
call qword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov eax, dword [rsp + 0x36dc]
mov dword [rsp + 0x375c], eax
cmp dword [rsp + 0x375c], 0xee91
je 0x1400028b3
jmp 0x140002922
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
lea rdx, [rsp + 0x1d6b8]
mov rcx, qword [rsp + 0x6410]
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov dword [rsp + 0x3728], eax
mov eax, dword [rsp + 0x3754]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0xafc]
mov r8d, dword [rsp + 0x36dc]
movzx edx, word [rsp + 0xafc]
mov ecx, dword [0x140161310]
call fcn.140147590
nop
jmp 0x140002942
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
jmp 0x14000298d
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
and eax, ecx
movsx ecx, word [rsp + 0xaf4]
movsx edx, word [rsp + 0xb00]
imul ecx, edx
cmp eax, ecx
jge 0x14000298d
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
jmp 0x140002ac9
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6348]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x140002ac9
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6418], rax
lea rax, [rsp + 0xb04]
mov qword [rsp + 0x6420], rax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x36c0]
and ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x3708]
ja 0x140002ac9
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6428], rax
mov eax, dword [rsp + 0x3708]
movzx ecx, al
mov eax, dword [rsp + 0x36c0]
shl eax, cl
cmp eax, dword [rsp + 0x36dc]
jbe 0x140002ac9
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
mov dword [rsp + 0x3760], ecx
mov rdx, qword [rsp + 0x6428]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x3760]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140002abe
mov eax, dword [rsp + 0x3754]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0xaf4]
mov r8d, dword [rsp + 0x36c0]
movzx edx, word [rsp + 0xaf4]
mov ecx, dword [rsp + 0x3730]
call fcn.140147590
nop
mov dword [rsp + 0x3764], 0x310b
mov dword [rsp + 0x3768], 0xb5fb
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6348]
mov qword [rsp + 0x6430], rax
movabs rax, 0x729863375d8037
cmp qword [rsp + 0x6430], rax
je 0x140002b69
movabs rax, 0x7a3fdda56a07d5
cmp qword [rsp + 0x6430], rax
je 0x140002b2a
jmp 0x140002bb3
mov r8, qword [rsp + 0x6438]
mov edx, ILFree
mov ecx, 0xd7
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x36f4], eax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
jmp 0x140002bb3
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x63e8]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140002bb3
mov r8, qword [rsp + 0x6318]
mov edx, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x36c0]
call fcn.140147c40
nop
cmp dword [rsp + 0x3738], 0xf47b
jae 0x14000300d
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3754]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3708]
movzx ecx, al
mov eax, dword [rsp + 0x36c0]
shl eax, cl
mov dword [rsp + 0x36dc], eax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
sub ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x40], al
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63d8]
mov qword [rsp + 0x6440], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6440]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6318]
or rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xaf8]
xor eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
shl eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x40], al
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3738]
add eax, 0x72
mov dword [rsp + 0x3738], eax
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaf4], ax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
jmp 0x140002bb3
lea rax, [rsp + 0x3730]
mov qword [rsp + 0x6448], rax
mov rax, qword [0x140160008]
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
cdq
idiv ecx
movsx ecx, word [rsp + 0xafc]
mov dword [rsp + 0x376c], ecx
movsx edx, word [rsp + 0xaf4]
movzx ecx, dl
mov edx, dword [rsp + 0x376c]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140146c30
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov word [rsp + 0xb00], ax
cmp dword [rsp + 0x3768], 0x9e5b
jbe 0x140003647
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [section..data]
movzx ecx, al
mov rax, qword [rsp + 0x6340]
shl rax, cl
mov qword [rsp + 0x6348], rax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov eax, dword [0x140161310]
movzx ecx, al
mov eax, dword [rsp + 0x3754]
sar eax, cl
mov dword [rsp + 0x3730], eax
mov eax, dword [rsp + 0x3768]
sub eax, 0xbd
mov dword [rsp + 0x3768], eax
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x63d0]
xor rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
movsx eax, word [rsp + 0xaf4]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xafc], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov word [rsp + 0xb08], ax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xaf4]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3730]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6450]
sub rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
xor eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x40], al
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3754], eax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [0x140161310]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6318]
mov rcx, qword [0x140160008]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov eax, dword [0x140161310]
mov rcx, qword [rsp + 0x6448]
mov qword [rsp + 0x6458], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6458]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63b0]
mov qword [rsp + 0x6460], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6460]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb08], ax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb00]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
jmp 0x14000308c
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x3770], eax
cmp dword [rsp + 0x3770], 0x34cc
je 0x140146a4d
cmp dword [rsp + 0x3770], 0x697108
je 0x14000367b
jmp 0x140146a7a
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6450]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
xor eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3730], eax
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x36c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov rax, qword [0x140160008]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xafc]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xafc], ax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x6318]
movzx ecx, al
mov rax, qword [rsp + 0x6450]
sar rax, cl
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3730]
xor ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
mov eax, dword [rsp + 0x3754]
mov rcx, qword [rsp + 0x6448]
mov qword [rsp + 0x6468], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6468]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
and eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
sub eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
add eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x63d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x372c]
add eax, 0xf3
mov dword [rsp + 0x372c], eax
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x36dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
sub eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x6348]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
cmp dword [rsp + 0x372c], 0xbcf9
jne 0x14000367b
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x6400]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jl 0x140146981
cmp dword [rsp + 0x3740], 0x1a9
jb 0x140003cc2
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
or eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6318]
movzx ecx, al
mov rax, qword [rsp + 0x63a0]
shl rax, cl
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov eax, dword [rsp + 0x3740]
sub eax, 0x91
mov dword [rsp + 0x3740], eax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140161310], eax
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
add eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
jmp 0x140003b53
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x63a0]
mov qword [rsp + 0x6470], rax
movabs rax, 0xff022764f1017cb7
cmp qword [rsp + 0x6470], rax
je 0x140003e25
movabs rax, 0x7782e18800b655
cmp qword [rsp + 0x6470], rax
je 0x140003d1c
jmp 0x140003eb0
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x63b0]
mov qword [rsp + 0x6478], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6478]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6340], rax
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x36c0]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x36dc]
mov edx, dword [rsp + 0x3774]
or edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140003dfa
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x3778], eax
cmp dword [rsp + 0x3778], 0x5cd
je 0x140003de1
cmp dword [rsp + 0x3778], 0x4700
je 0x140003dc2
jmp 0x140003dfa
mov rdx, qword [rsp + 0x6480]
mov rcx, qword [rsp + 0x6488]
call qword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
mov dword [rsp + 0x36f4], eax
jmp 0x140003dfa
mov eax, dword [rsp + 0x3730]
movzx ecx, al
mov eax, dword [rsp + 0x3754]
sar eax, cl
mov dword [0x140161310], eax
mov r9d, dword [rsp + 0x3754]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov edx, dword [0x140161310]
mov ecx, dword [rsp + 0x3754]
call fcn.1401477c0
nop
jmp 0x140003eb0
lea rax, [rsp + 0xb04]
mov qword [rsp + 0x6490], rax
mov eax, dword [0x140161310]
cdq
mov rcx, qword [rsp + 0x6448]
idiv dword [rcx]
mov ecx, dword [rsp + 0x3754]
mov edx, dword [rsp + 0x3730]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x140003e7b
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
jmp 0x140003ea5
movsx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaf4], ax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6498], rax
mov dword [rsp + 0x377c], 0xa516
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov dword [rsp + 0x3780], eax
cmp dword [rsp + 0x3780], 0
je 0x14000402b
cmp dword [rsp + 0x3780], 0x6f3
je 0x140003f06
jmp 0x140004210
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3730]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6340]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x140003f92
lea rdx, [rsp + 0x1d6b8]
lea rcx, str.C:Expiationembattled_fleshing
call qword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
mov dword [rsp + 0x3784], eax
mov r8, qword [rsp + 0x63a0]
mov edx, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3708]
call fcn.140147c40
nop
jmp 0x140004026
mov rax, qword [rsp + 0x6340]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6348]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x140004026
mov eax, dword [rsp + 0x36dc]
mov dword [rsp + 0x3774], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
mov r8d, 0xde
lea rdx, [rsp + 0x36dc]
mov rcx, qword [rsp + 0x6410]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x371c], eax
mov rax, qword [rsp + 0x6340]
movzx ecx, al
mov rax, qword [rsp + 0x6348]
shr rax, cl
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
jmp 0x140004210
mov eax, dword [rsp + 0x3784]
mov dword [rsp + 0x3788], eax
cmp dword [rsp + 0x3788], 0x3403
je 0x14000404b
jmp 0x14000410d
mov rcx, qword [rsp + 0x6348]
call fcn.140148220
nop
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x64a0], rax
movabs rax, 0x7afb69dfedf810
cmp qword [rsp + 0x64a0], rax
je 0x140004093
movabs rax, 0x7c10e8b05e1238
cmp qword [rsp + 0x64a0], rax
je 0x1400040ce
jmp 0x140004108
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x40], al
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
shl eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
jmp 0x140004108
lea rax, [rsp + 0x1d6f0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x378c]
mov r8d, dword [rsp + 0x3790]
lea rdx, [rsp + 0x3730]
mov rcx, qword [rsp + 0x63c0]
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
mov dword [rsp + 0x371c], eax
jmp 0x140004210
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x64a8], rax
movabs rax, 0x7037e2806b1622
cmp qword [rsp + 0x64a8], rax
je 0x140004136
jmp 0x140004210
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
xor eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x63d0]
mov qword [rsp + 0x64b0], rax
movabs rax, 0x72ea86feb233ed
cmp qword [rsp + 0x64b0], rax
je 0x140004190
movabs rax, 0x7bb02cfa4829c6
cmp qword [rsp + 0x64b0], rax
je 0x1400041f4
jmp 0x140004210
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov r8d, reloc.SHELL32.dll_ILAppendID
lea rdx, [rsp + 0x1d708]
lea rcx, str.C:Embraced_federationTributeUnicornsMind
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov dword [rsp + 0x3794], eax
jmp 0x140004210
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
and eax, ecx
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x63b8]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jge 0x1400043bc
mov eax, dword [rsp + 0x3754]
mov rcx, qword [rsp + 0x6448]
mov qword [rsp + 0x64b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x64b8]
mov eax, dword [rax]
shl eax, cl
mov ecx, dword [0x140161310]
mov edx, dword [rsp + 0x3730]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14000429f
mov rdx, qword [rsp + 0x6438]
mov rcx, qword [rsp + 0x64c0]
call qword [sym.imp.KERNEL32.dll_SetFileShortNameW]
mov dword [rsp + 0x371c], eax
jmp 0x1400042c4
mov eax, dword [rsp + 0x36c0]
movzx ecx, al
mov eax, dword [rsp + 0x3708]
shr eax, cl
mov ecx, dword [rsp + 0x3784]
mov edx, dword [rsp + 0x36dc]
and edx, ecx
mov ecx, edx
lea rcx, [rsp + 0xaf4]
call qword [sym.imp.KERNEL32.dll_GetNumaHighestNodeNumber]
mov dword [rsp + 0x3728], eax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6348]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x1400043b7
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x64c8], rax
movabs rax, 0x7772aa98d27a92
cmp qword [rsp + 0x64c8], rax
je 0x140004359
jmp 0x140004377
mov r8, qword [rsp + 0x6450]
mov edx, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3774]
call fcn.140147c40
nop
jmp 0x1400043b7
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov word [rsp + 0xafc], ax
jmp 0x1401468e0
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x6400]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x1401468e0
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xaf4]
sub ecx, edx
cmp eax, ecx
jge 0x140004451
mov rax, qword [rsp + 0x6450]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140160008]
mov r8, qword [rsp + 0x6450]
mov edx, dword [0x140161310]
mov rax, qword [rsp + 0x63e0]
movzx ecx, word [rax]
call fcn.140147e40
nop
jmp 0x14000454f
mov rax, qword [rsp + 0x6348]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6340]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x14000454f
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov dword [rsp + 0x3798], eax
cmp dword [rsp + 0x3798], 0x3b8
je 0x1400044c5
jmp 0x140004536
mov edx, 0x45
mov rcx, qword [rsp + 0x63c0]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [rsp + 0x3728], eax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
shl eax, cl
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x63a0]
mov rax, qword [rsp + 0x6448]
mov edx, dword [rax]
movzx ecx, word [rsp + 0xafc]
call fcn.140147e40
nop
jmp 0x14000454f
mov eax, dword [rsp + 0x3754]
movzx ecx, al
mov eax, dword [0x140161310]
sar eax, cl
mov dword [rsp + 0x3730], eax
mov eax, dword [rsp + 0x3708]
mov dword [rsp + 0x3794], eax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6450]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
add eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [rsp + 0x3754]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6498]
mov byte [rcx], al
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xaf8]
shl eax, cl
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
sar eax, cl
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x3774]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov qword [section..data], rax
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [0x140161310]
movzx ecx, al
mov eax, dword [rsp + 0x3754]
shl eax, cl
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov eax, dword [rsp + 0x3714]
sub eax, 0xfe
mov dword [rsp + 0x3714], eax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
cmp dword [rsp + 0x3714], 0x5ada
ja 0x14000454f
mov eax, dword [0x140161310]
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov qword [rsp + 0x64d0], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov eax, dword [rsp + 0x3734]
add eax, 0x6f
mov dword [rsp + 0x3734], eax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xaf8], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
xor eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63d8]
mov qword [rsp + 0x64d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x64d8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
or eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
shl eax, cl
mov word [rsp + 0xaf8], ax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xafc], ax
cmp dword [rsp + 0x3734], 0x7e56
jne 0x1400049cd
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov word [rsp + 0xaf8], ax
cmp dword [rsp + 0x3700], 0xb01
jb 0x14000515a
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov eax, dword [rsp + 0x3784]
mov ecx, dword [rsp + 0x3708]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x63d8]
mov qword [rsp + 0x64e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x64e0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x140161310], eax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x40], al
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
and eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x64d0], rax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov eax, dword [rsp + 0x3700]
sub eax, 0xf0
mov dword [rsp + 0x3700], eax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x40], al
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb08]
sar eax, cl
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3774]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x6450]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [rsp + 0x379c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x63d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [0x140160008]
mov rcx, qword [rsp + 0x63d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3708]
movzx ecx, al
mov eax, dword [rsp + 0x36dc]
shl eax, cl
mov dword [rsp + 0x36c0], eax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x379c]
or ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
movsx eax, word [rsp + 0xaf4]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb00], ax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xb04]
xor eax, ecx
mov word [rsp + 0xaf8], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaf8], ax
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
add eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x64d0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3730]
and ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x6348]
movzx ecx, al
mov rax, qword [rsp + 0x6340]
shr rax, cl
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
shl eax, cl
mov word [rsp + 0xb00], ax
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x3794]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x6450]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
jmp 0x140004bbc
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3774]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3708]
mov edx, dword [rsp + 0x3784]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140005247
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov rdx, qword [rsp + 0x63d8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x14000522f
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
lea rdx, [rsp + 0xb00]
mov rcx, qword [rsp + 0x64e8]
call qword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x379c]
and ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov word [rsp + 0xb0c], ax
jmp 0x14000533f
mov rax, qword [0x140160008]
mov qword [rsp + 0x64f0], rax
movabs rax, 0x72aeda4b50c413
cmp qword [rsp + 0x64f0], rax
je 0x140005283
movabs rax, 0x7be8aa9336f19a
cmp qword [rsp + 0x64f0], rax
je 0x1400052e8
jmp 0x14000533f
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
shl eax, cl
mov word [rsp + 0xb00], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov qword [rsp + 0x6480], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x40], al
jmp 0x14000533f
mov r8d, 0xc8
lea rdx, [rsp + 0x3754]
lea rcx, [rsp + 0x64f8]
call qword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6370]
mov qword [rsp + 0x6500], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6500]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
lea rax, [rsp + 0x6318]
mov qword [rsp + 0x6508], rax
mov rax, qword [rsp + 0x6418]
movzx eax, byte [rax]
mov byte [rsp + 0x37a0], al
cmp byte [rsp + 0x37a0], 0
je 0x140005370
jmp 0x1400054fb
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6450]
imul rcx, qword [rsp + 0x6318]
cmp rax, rcx
jl 0x1400054f9
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x3774]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x36c0]
mov edx, dword [rsp + 0x3708]
add edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x1400054f9
mov rax, qword [rsp + 0x6450]
mov qword [rsp + 0x6510], rax
movabs rax, 0x70d79eb4ec5eb5
cmp qword [rsp + 0x6510], rax
je 0x140005410
movabs rax, 0x75589002bc8004
cmp qword [rsp + 0x6510], rax
je 0x14000549e
jmp 0x1400054f9
mov eax, dword [rsp + 0x3774]
mov dword [rsp + 0x37a4], eax
cmp dword [rsp + 0x37a4], 0x8fe7
je 0x14000542d
jmp 0x140005482
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x379c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x63e0]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0x36c0]
movzx edx, word [rsp + 0xaf4]
mov ecx, dword [rsp + 0x3730]
call fcn.140147590
nop
jmp 0x14000549c
mov edx, 0x7f
mov rcx, qword [rsp + 0x6518]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [rsp + 0x371c], eax
jmp 0x1400054f9
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov word [0x140160010], ax
mov dword [rsp + 0x37a8], 0xc117
mov eax, dword [rsp + 0x3784]
mov ecx, dword [rsp + 0x3708]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3794], eax
mov dword [rsp + 0x37ac], 0xb8a2
mov rax, qword [rsp + 0x63e0]
movzx eax, word [rax]
mov word [rsp + 0xb10], ax
jmp 0x140005515
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63a0]
mov rdx, qword [rsp + 0x63d0]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14000566d
mov rax, qword [rsp + 0x6428]
movzx eax, byte [rax]
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov qword [rsp + 0x6520], rax
cmp qword [rsp + 0x6520], 0
je 0x140005594
movabs rax, 0x773390feb302f7
cmp qword [rsp + 0x6520], rax
je 0x14000563f
jmp 0x140005660
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb0c], ax
mov dword [rsp + 0x37b0], 0x2b0b
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x6528], rax
movabs rax, 0x79a858bbf19d86
cmp qword [rsp + 0x6528], rax
je 0x1400055e5
jmp 0x14000561e
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0xaf4]
mov r8d, dword [rsp + 0x3794]
movzx edx, word [rsp + 0xb10]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.140147590
nop
jmp 0x14000563d
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [0x140160010]
xor eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
jmp 0x140005660
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov dword [rsp + 0x37b4], 0xebaf
jmp 0x1400056bf
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3730], eax
lea rcx, [rsp + 0x64d0]
call qword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
mov dword [rsp + 0x36f4], eax
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x3774], eax
mov rcx, qword [rsp + 0x6438]
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [rsp + 0x371c], eax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
and eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
sub eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x64d0], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sar eax, cl
mov word [rsp + 0xb04], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x41], al
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xb10]
xor eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
or eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb0c]
and eax, ecx
mov word [rsp + 0xb04], ax
mov eax, dword [rsp + 0x3784]
mov ecx, dword [rsp + 0x36dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6348]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [rsp + 0x379c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb04], ax
mov eax, dword [rsp + 0x36e0]
sub eax, 0xbc
mov dword [rsp + 0x36e0], eax
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb0c]
sub eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xb10], ax
cmp dword [rsp + 0x36e0], 0x3ade
ja 0x1400056bf
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb08]
sar eax, cl
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xb0c]
or ecx, edx
cmp eax, ecx
jl 0x14014671f
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63d0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63a0]
mov rdx, qword [rsp + 0x6450]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x140005a8c
lea r9, [rsp + 0x6350]
mov r8d, 0xd1
lea rdx, [rsp + 0x1d730]
lea rcx, str.C:orphanageJadedlymaterial
call qword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
mov dword [rsp + 0x36f4], eax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
movsx eax, word [rsp + 0xb10]
movsx ecx, word [rsp + 0xb00]
sar eax, cl
mov word [rsp + 0xafc], ax
lea r9, [rsp + 0x64d0]
mov r8d, 0xd1
lea rdx, [rsp + 0x3728]
mov rcx, qword [rsp + 0x63c0]
call qword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
mov dword [rsp + 0x371c], eax
mov r8, qword [rsp + 0x63d0]
mov rax, qword [rsp + 0x6448]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x3794]
call fcn.140147c40
nop
cmp dword [rsp + 0x36e4], 0x4aef
ja 0x140005ce8
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
xor eax, ecx
mov rcx, qword [rsp + 0x6498]
mov byte [rcx], al
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x6508]
mov qword [rsp + 0x6530], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6530]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
movzx eax, word [0x140160010]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov word [rsp + 0xb0c], ax
mov eax, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63d0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
movsx eax, word [rsp + 0xaf4]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
movzx eax, word [0x140160010]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x64d0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3754]
mov rcx, qword [rsp + 0x6448]
mov qword [rsp + 0x6538], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6538]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov eax, dword [rsp + 0x36e4]
add eax, 0x95
mov dword [rsp + 0x36e4], eax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6508]
mov qword [rsp + 0x6540], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6540]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3784]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
jmp 0x140005a8c
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov word [rsp + 0xaf4], ax
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [rsp + 0x3754]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
or eax, ecx
mov word [rsp + 0xb04], ax
mov eax, dword [rsp + 0x3754]
movzx ecx, al
mov eax, dword [rsp + 0x379c]
sar eax, cl
mov dword [rsp + 0x3730], eax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xb10]
xor eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, word [rsp + 0xb04]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb08], ax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x379c], eax
mov eax, dword [rsp + 0x37b4]
sub eax, 0x1c
mov dword [rsp + 0x37b4], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x41]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb0c], ax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6498]
mov byte [rcx], al
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x6508]
mov qword [rsp + 0x6548], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6548]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x64d0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6348], rax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x379c]
xor ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
mov eax, dword [rsp + 0x36c0]
movzx ecx, al
mov eax, dword [rsp + 0x3784]
shl eax, cl
mov dword [rsp + 0x36dc], eax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [0x140160010]
and eax, ecx
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3730]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [0x140160008]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xb0c]
shl eax, cl
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
sar eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x64d0], rax
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3754]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3774]
mov dword [rsp + 0x3784], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
add eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
cmp dword [rsp + 0x37b4], 0xea43
jae 0x140005ce8
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6550], rax
lea rax, [rsp + 0xb10]
mov qword [rsp + 0x6558], rax
cmp dword [rsp + 0x36ec], 0x6b9e
jbe 0x140006533
mov eax, dword [rsp + 0x36ec]
sub eax, 0xfd
mov dword [rsp + 0x36ec], eax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x379c], eax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3774]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [0x140160008]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x63d0], rax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x64d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63a0]
movzx ecx, al
mov rax, qword [rsp + 0x63d0]
sar rax, cl
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
shl eax, cl
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x41], al
movzx eax, word [rsp + 0xaf8]
movzx ecx, word [rsp + 0xb0c]
xor eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3730]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x379c], eax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3794], eax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x3794]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x64d0], rax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3754], eax
mov rax, qword [rsp + 0x6318]
movzx ecx, al
mov rax, qword [rsp + 0x63d0]
shl rax, cl
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140160010], ax
movsx eax, word [rsp + 0xb10]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
jmp 0x14000626a
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
and eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb04]
mov word [rsp + 0xb14], ax
mov byte [rsp + 0x42], 0x5e
mov dword [rsp + 0x37b8], 0x1672
lea rax, [rsp + 0x42]
mov qword [rsp + 0x6560], rax
mov eax, dword [rsp + 0x3784]
mov dword [rsp + 0x37bc], eax
cmp dword [rsp + 0x37bc], 0
je 0x1400065aa
cmp dword [rsp + 0x37bc], 0x3d39
je 0x140146665
jmp 0x1401466ba
movzx eax, word [rsp + 0xb0c]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0xb14]
movzx edx, word [rsp + 0xaf8]
sub ecx, edx
cmp eax, ecx
jge 0x14000669a
mov rax, qword [rsp + 0x6508]
mov rcx, qword [0x140160008]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3774]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov eax, dword [rsp + 0x3794]
mov dword [rsp + 0x37c0], eax
cmp dword [rsp + 0x37c0], 0x4a26
je 0x14000662f
jmp 0x140006683
lea rdx, [rsp + 0x379c]
mov ecx, 0x62
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [rsp + 0x371c], eax
mov rax, qword [rsp + 0x63d0]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x6508]
mov r9, qword [rax]
mov rax, qword [rsp + 0x6508]
mov r8, qword [rax]
mov edx, dword [rsp + 0x379c]
movzx ecx, word [rsp + 0xaf4]
call fcn.140147e40
nop
jmp 0x140006695
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
or eax, 0x3d
mov byte [rsp + 0x42], al
jmp 0x1400067e5
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x6420]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x1400067e5
mov rcx, qword [rsp + 0x6568]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [rsp + 0x3754], eax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb10]
sar eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movsx eax, word [rsp + 0xaf4]
mov dword [rsp + 0x37c4], eax
cmp dword [rsp + 0x37c4], 0x28
je 0x1400067c1
cmp dword [rsp + 0x37c4], 0x10b
je 0x140006730
jmp 0x1400067e5
movzx eax, byte [rsp + 0x42]
xor eax, 0x2e
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
cmp eax, ecx
jl 0x1400067a2
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
lea rdx, [rsp + 0x371c]
mov rcx, qword [rsp + 0x6570]
call qword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
mov dword [rsp + 0x36e8], eax
jmp 0x1400067bf
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb14]
sub eax, ecx
mov word [rsp + 0xb0c], ax
jmp 0x1400067e5
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
lea rax, [rsp + 0x379c]
mov qword [rsp + 0x6578], rax
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
mov dword [rsp + 0x37c8], eax
cmp dword [rsp + 0x37c8], 0x28c
je 0x140006819
jmp 0x1400068f9
movzx eax, byte [rsp + 0x42]
sub eax, 0xc7
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
cmp eax, ecx
je 0x1400068f4
mov rax, qword [rsp + 0x6348]
mov qword [rsp + 0x6580], rax
movabs rax, 0x73bef213258010
cmp qword [rsp + 0x6580], rax
je 0x14000685c
jmp 0x1400068be
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x36c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63d0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x41]
sub eax, ecx
mov byte [rsp + 0x40], al
jmp 0x1400068f4
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1f
mov r9d, 0xfd
mov r8d, 0x86
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0x6518]
call qword [sym.imp.KERNEL32.dll_SetTapePosition]
mov dword [rsp + 0x36c0], eax
jmp 0x140006a3d
mov eax, dword [rsp + 0x3774]
movzx ecx, al
mov eax, dword [rsp + 0x3794]
shr eax, cl
mov ecx, dword [rsp + 0x3784]
mov edx, dword [rsp + 0x3708]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140006a02
lea rax, [rsp + 0xb10]
mov qword [rsp + 0x6588], rax
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
mov dword [rsp + 0x37cc], eax
cmp dword [rsp + 0x37cc], 0
je 0x140006954
jmp 0x1400069c8
mov rax, qword [rsp + 0x6498]
movzx eax, byte [rax]
mov byte [rsp + 0x37d0], al
cmp byte [rsp + 0x37d0], 0
je 0x1400069b7
cmp byte [rsp + 0x37d0], 0x26
je 0x14000697c
jmp 0x1400069c6
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
or eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
xor eax, ecx
mov word [rsp + 0xb14], ax
jmp 0x1400069c6
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
mov byte [rsp + 0x43], al
jmp 0x140006a02
mov rax, qword [rsp + 0x6578]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x63e0]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0x3774]
mov rax, qword [rsp + 0x63e0]
movzx edx, word [rax]
mov ecx, dword [rsp + 0x3754]
call fcn.140147590
nop
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x36dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3784], eax
mov rax, qword [rsp + 0x6340]
mov qword [0x140161318], rax
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov qword [rsp + 0x6590], rax
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3730], eax
movzx eax, word [rsp + 0xaf8]
mov dword [rsp + 0x37d4], eax
cmp dword [rsp + 0x37d4], 0
je 0x140006aed
cmp dword [rsp + 0x37d4], 0xdd9
je 0x140006a82
jmp 0x140006b7f
mov rcx, qword [rsp + 0x6410]
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov dword [rsp + 0x37d8], eax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6348], rax
movzx eax, byte [rsp + 0x42]
movzx ecx, byte [rsp + 0x43]
add eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb10], ax
jmp 0x140006b7f
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov dword [rsp + 0x37dc], eax
cmp dword [rsp + 0x37dc], 0xb90
je 0x140006b0e
jmp 0x140006b7f
lea r9, [rsp + 0x6588]
mov r8d, 0x72
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x63f0]
call qword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
mov dword [rsp + 0x3728], eax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43]
add eax, ecx
mov byte [rsp + 0x42], al
lea rax, [rsp + 0x36dc]
mov qword [rsp + 0x20], rax
mov r9d, 0x33
mov r8d, SHDoDragDrop
mov edx, SHTestTokenMembership
mov rcx, qword [rsp + 0x6598]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x36e8], eax
cmp dword [rsp + 0x36d0], 0x7ed7
jae 0x140007043
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb0c]
sub eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x41]
add eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6450]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140160008], rax
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x3774]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x6340]
shl rax, cl
mov qword [rsp + 0x64d0], rax
mov eax, dword [rsp + 0x3730]
movzx ecx, al
mov eax, dword [rsp + 0x379c]
sar eax, cl
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
or eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
xor eax, ecx
mov byte [rsp + 0x43], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
add eax, ecx
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
movsx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6590], rax
movzx eax, byte [rsp + 0x42]
movzx ecx, byte [rsp + 0x43]
sub eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov eax, dword [rsp + 0x36d0]
add eax, 0xed
mov dword [rsp + 0x36d0], eax
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
movzx eax, word [rsp + 0xb14]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
shl eax, cl
mov byte [rsp + 0x43], al
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x140161318], rax
mov rax, qword [0x140160008]
mov rcx, qword [rsp + 0x6590]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x379c]
mov rcx, qword [rsp + 0x6578]
mov qword [rsp + 0x65a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x65a0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6550]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x43]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x42], al
movsx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb14], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6578]
mov rcx, qword [rsp + 0x6448]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x64d0], rax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63d0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
sar eax, cl
mov byte [rsp + 0x41], al
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb0c]
xor eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43], al
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov rcx, qword [rsp + 0x6448]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3794]
mov dword [rsp + 0x3774], eax
jmp 0x140006b7f
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
movsx eax, word [rsp + 0xb00]
mov dword [rsp + 0x37e0], eax
cmp dword [rsp + 0x37e0], 0
je 0x140007082
jmp 0x14000714e
mov rax, qword [rsp + 0x6418]
movzx eax, byte [rax]
mov byte [rsp + 0x44], al
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x37e4], al
cmp byte [rsp + 0x37e4], 0
je 0x1400070ac
jmp 0x14000712f
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6318]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6450]
mov rdx, qword [rsp + 0x63a0]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14000711d
lea rax, [rsp + 0xaf8]
mov qword [rsp + 0x65a8], rax
lea rax, [rsp + 0x43]
mov qword [rsp + 0x65b0], rax
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, word [rsp + 0xb0c]
mov word [rsp + 0xb18], ax
jmp 0x14000714c
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
jmp 0x14000716a
mov r8, qword [rsp + 0x63a0]
mov edx, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3794]
call fcn.140147c40
nop
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov qword [rsp + 0x65b8], rax
movabs rax, 0x7a2b880ccf6d22
cmp qword [rsp + 0x65b8], rax
je 0x140007196
jmp 0x14000728a
movsx eax, word [rsp + 0xafc]
mov dword [rsp + 0x37e8], eax
cmp dword [rsp + 0x37e8], 0x1d2
je 0x1400071c8
cmp dword [rsp + 0x37e8], 0x486
je 0x14000726c
jmp 0x140007285
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x64d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6340]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jb 0x14000721a
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63d0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x63a0], rax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x64d0]
shr rax, cl
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov word [rsp + 0x20], ILFindChild
mov r9d, 0x79
lea r8, [rsp + 0x1d730]
mov edx, 0x85
mov ecx, 0x4b
call qword [sym.imp.KERNEL32.dll_GetGeoInfoW]
mov dword [rsp + 0x3754], eax
jmp 0x140007285
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3784]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
jmp 0x1400073aa
movsx eax, byte [rsp + 0x44]
movsx ecx, byte [rsp + 0x40]
and eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
mov byte [rsp + 0x45], al
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x6498]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x14000736f
movsx eax, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x6400]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
je 0x140007346
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb10]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov r8, qword [rsp + 0x6318]
mov edx, dword [0x140161310]
mov ecx, dword [rsp + 0x36dc]
call fcn.140147c40
nop
jmp 0x14000736d
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb00]
sub eax, ecx
movsx ecx, word [rsp + 0xafc]
mov rdx, qword [rsp + 0x6558]
movsx edx, word [rdx]
add ecx, edx
jmp 0x1400073aa
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
movsx ecx, word [rsp + 0xaf4]
movsx edx, word [rsp + 0xafc]
sub ecx, edx
cmp eax, ecx
jge 0x1400073aa
movsx eax, byte [rsp + 0x44]
movsx ecx, byte [rsp + 0x41]
shl eax, cl
mov byte [rsp + 0x40], al
movsx eax, word [rsp + 0xb10]
movsx ecx, word [rsp + 0xb00]
sar eax, cl
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov byte [rsp + 0x37ec], al
cmp byte [rsp + 0x37ec], 0xc0
je 0x1400073e5
jmp 0x1400074a4
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x6318]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x3794]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3774], eax
movsx eax, word [rsp + 0xb10]
mov dword [rsp + 0x37f0], eax
cmp dword [rsp + 0x37f0], 0x2c0
je 0x14000744a
cmp dword [rsp + 0x37f0], 0x63d
je 0x14000746b
jmp 0x14000749f
mov rax, qword [rsp + 0x6508]
mov r8, qword [rax]
mov edx, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x3794]
call fcn.140147c40
nop
jmp 0x14000749f
mov rcx, qword [rsp + 0x6570]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x37d8], eax
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf4], ax
jmp 0x140146582
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
sub eax, ecx
movsx ecx, byte [rsp + 0x44]
mov rdx, qword [rsp + 0x6498]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jl 0x140146420
mov rax, qword [0x140160008]
mov qword [rsp + 0x65c0], rax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
movsx ecx, word [rsp + 0xaf4]
movsx edx, word [rsp + 0xafc]
add ecx, edx
cmp eax, ecx
jge 0x140007605
mov edx, 0x47
mov rcx, qword [rsp + 0x65c8]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x37d8], eax
mov rax, qword [rsp + 0x6590]
mov rcx, qword [rsp + 0x6318]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6450]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x1400075cd
mov eax, dword [rsp + 0x3754]
movzx ecx, al
mov eax, dword [rsp + 0x379c]
sar eax, cl
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
xor eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
or eax, ecx
mov word [rsp + 0xb04], ax
lea r9, [rsp + 0x36c0]
lea r8, [rsp + 0x45]
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x64c0]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x3728], eax
jmp 0x140007605
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x45]
add eax, ecx
movzx ecx, byte [rsp + 0x42]
mov rdx, qword [rsp + 0x6560]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jl 0x140007605
movsx eax, byte [rsp + 0x41]
movsx ecx, byte [rsp + 0x40]
shl eax, cl
mov rcx, qword [rsp + 0x6428]
mov byte [rcx], al
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x37f4], eax
cmp dword [rsp + 0x37f4], 0x21b0
je 0x140007682
cmp dword [rsp + 0x37f4], 0x7176
je 0x140007635
jmp 0x1400076da
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x41], al
mov dword [rsp + 0x20], 0xc1
lea r9, [rsp + 0x6480]
lea r8, [rsp + 0x36cc]
lea rdx, [rsp + 0x6418]
mov rcx, qword [rsp + 0x6570]
call qword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatus]
mov dword [rsp + 0x3728], eax
jmp 0x1400076da
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
mov rcx, qword [rsp + 0x6588]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140161310], eax
mov r8, qword [rsp + 0x6318]
mov rax, qword [rsp + 0x6448]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x36c0]
call fcn.140147c40
nop
cmp dword [rsp + 0x37b8], 0xc1c
jb 0x140007b39
mov rax, qword [rsp + 0x63a0]
mov rcx, qword [rsp + 0x63d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov rcx, qword [rsp + 0x6448]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x379c], eax
mov eax, dword [rsp + 0x3784]
mov ecx, dword [rsp + 0x36dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3794], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x64d0], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
mov eax, dword [rsp + 0x37b8]
sub eax, 0xbd
mov dword [rsp + 0x37b8], eax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x44], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb0c]
add eax, ecx
mov word [rsp + 0xb14], ax
movzx eax, byte [rsp + 0x42]
movzx ecx, byte [rsp + 0x43]
add eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6578]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3730]
sar eax, cl
mov dword [0x140161310], eax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x379c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6340]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x65c0]
mov rcx, qword [rsp + 0x6508]
mov qword [rsp + 0x65d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x65d0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3708]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb10], ax
movzx eax, byte [rsp + 0x43]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x45], al
mov rax, qword [rsp + 0x65a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb14]
sub eax, ecx
mov word [rsp + 0xb04], ax
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x65a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3754]
mov rcx, qword [rsp + 0x6448]
mov qword [rsp + 0x65d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x65d8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x65a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
or eax, ecx
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45]
xor eax, ecx
mov byte [rsp + 0x43], al
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6550]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x63e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
add eax, ecx
mov word [0x140160010], ax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x6578]
mov rcx, qword [rsp + 0x6448]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43]
sub eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6450]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb04], ax
movzx eax, byte [rsp + 0x45]
movzx ecx, byte [rsp + 0x42]
add eax, ecx
mov byte [rsp + 0x43], al
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3754]
sar eax, cl
mov dword [0x140161310], eax
jmp 0x1400076da
mov eax, dword [rsp + 0x36dc]
mov dword [rsp + 0x37f8], eax
cmp dword [rsp + 0x37f8], 0xae5e
je 0x140007b56
jmp 0x140007bb9
lea rcx, [rsp + 0x6508]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0x65e0], rax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6590]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x65c0], rax
mov r9d, dword [rsp + 0x3730]
mov rax, qword [rsp + 0x6578]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x379c]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.1401477c0
nop
jmp 0x140007c56
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
xor eax, ecx
movsx ecx, byte [rsp + 0x40]
mov dword [rsp + 0x37fc], ecx
movsx edx, byte [rsp + 0x41]
movzx ecx, dl
mov edx, dword [rsp + 0x37fc]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140007c4b
mov rax, qword [rsp + 0x6578]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3730]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x36c0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3708], eax
mov r8, qword [rsp + 0x6438]
mov edx, 0xe7
mov ecx, SHGetNewLinkInfoW
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x3800], eax
mov dword [rsp + 0x3804], 0x592d
mov eax, dword [rsp + 0x3754]
mov dword [rsp + 0x3808], eax
cmp dword [rsp + 0x3808], 0
je 0x140007c84
cmp dword [rsp + 0x3808], 0x4d2d
je 0x1401463c8
jmp 0x14014640e
movsx eax, word [rsp + 0xb10]
mov dword [rsp + 0x380c], eax
cmp dword [rsp + 0x380c], 0x418
je 0x140007ca2
jmp 0x140007cf7
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
movzx eax, byte [rsp + 0x45]
mov byte [rsp + 0x20], al
movzx r9d, word [rsp + 0xb0c]
mov rax, qword [rsp + 0x6508]
mov r8, qword [rax]
movzx edx, word [rsp + 0xb0c]
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rax]
call fcn.140146fb0
nop
jmp 0x140007d32
mov rax, qword [rsp + 0x63e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x41]
add eax, ecx
mov byte [rsp + 0x44], al
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0x46], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [0x140160010]
sub eax, ecx
mov word [rsp + 0xaf8], ax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x63a0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6318], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov rcx, qword [rsp + 0x6448]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov eax, dword [rsp + 0x3784]
mov ecx, dword [rsp + 0x3708]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3794], eax
movsx eax, word [rsp + 0xb00]
movsx ecx, word [rsp + 0xb10]
shl eax, cl
mov word [rsp + 0xaf4], ax
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
sar eax, cl
mov rcx, qword [rsp + 0x6550]
mov byte [rcx], al
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb10], ax
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0x65b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x43], al
mov eax, dword [rsp + 0x37a8]
sub eax, 0x8e
mov dword [rsp + 0x37a8], eax
mov rax, qword [section..data]
mov rcx, qword [rsp + 0x64d0]
add rcx, rax
mov rax, rcx
mov qword [0x140161318], rax
mov rax, qword [rsp + 0x6590]
mov rcx, qword [rsp + 0x6450]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x3754]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x379c], eax
movsx eax, byte [rsp + 0x44]
movsx ecx, byte [rsp + 0x41]
sub eax, ecx
mov rcx, qword [rsp + 0x6550]
mov byte [rcx], al
cmp dword [rsp + 0x37a8], 0xb71b
ja 0x140007d32
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb10], ax
movsx eax, byte [rsp + 0x44]
movsx ecx, byte [rsp + 0x40]
and eax, ecx
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x41]
sub ecx, edx
cmp eax, ecx
jle 0x140007fab
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x65c0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x6450]
mov rdx, qword [rsp + 0x63d0]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jl 0x140007f6c
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
sub eax, ecx
mov byte [rsp + 0x46], al
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb14]
and eax, ecx
mov rcx, qword [rsp + 0x6490]
mov word [rcx], ax
lea rdx, [rsp + 0x65e8]
mov rcx, qword [rsp + 0x65f0]
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov dword [rsp + 0x3728], eax
jmp 0x14000808a
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x6388]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xb04]
or ecx, edx
cmp eax, ecx
je 0x14000808a
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov qword [rsp + 0x65f8], rax
movabs rax, 0x71d71453a523e2
cmp qword [rsp + 0x65f8], rax
je 0x14000801a
movabs rax, 0x7e65f7249fe942
cmp qword [rsp + 0x65f8], rax
je 0x140008076
jmp 0x14000808a
movzx eax, word [rsp + 0xb0c]
movzx ecx, word [rsp + 0xaf8]
sub eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
mov byte [rcx], al
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x65c0], rax
jmp 0x14000808a
mov rcx, qword [rsp + 0x6570]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x371c], eax
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x3784]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3794]
mov edx, dword [rsp + 0x36dc]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x1400081da
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x64d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x65c0]
mov qword [rsp + 0x6600], rax
movabs rax, 0x788a30dd0e59cb
cmp qword [rsp + 0x6600], rax
je 0x140008118
movabs rax, 0x78971e0c5b847e
cmp qword [rsp + 0x6600], rax
je 0x1400081c4
jmp 0x1400081d5
mov rax, qword [rsp + 0x6448]
mov rcx, qword [rsp + 0x6578]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x379c], eax
movsx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sar eax, cl
movsx ecx, word [rsp + 0xb10]
movsx edx, word [rsp + 0xaf4]
or ecx, edx
cmp eax, ecx
je 0x1400081c2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x84
mov r9d, 0xc8
mov r8d, ILRemoveLastID
mov edx, 0xa2
mov rcx, qword [rsp + 0x63f0]
call qword [sym.imp.KERNEL32.dll_SetTapePosition]
mov dword [rsp + 0x3784], eax
movzx eax, byte [rsp + 0x45]
movzx ecx, byte [rsp + 0x46]
shl eax, cl
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x44], al
jmp 0x1400081d5
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rax]
call fcn.140148220
nop
jmp 0x1400082d2
lea rax, [rsp + 0xaf8]
mov qword [rsp + 0x6608], rax
movsx eax, word [rsp + 0xb10]
mov dword [rsp + 0x3810], eax
cmp dword [rsp + 0x3810], 0
je 0x1400082b6
cmp dword [rsp + 0x3810], 0x33
je 0x140008216
jmp 0x1400082d2
lea rdx, [rsp + 0x45]
mov rcx, qword [rsp + 0x6518]
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov dword [rsp + 0x3814], eax
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x63e8]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
je 0x1400082b4
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb00]
add eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb00], ax
jmp 0x1400082d2
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140160014], ax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x64d0], rax
mov dword [rsp + 0x3818], 0xdca
mov rax, qword [rsp + 0x6578]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov edx, dword [rsp + 0x3730]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x140146235
movzx eax, byte [rsp + 0x45]
mov byte [rsp + 0x47], al
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x381c], eax
cmp dword [rsp + 0x381c], 0
je 0x140008365
cmp dword [rsp + 0x381c], 0x3a3
je 0x1400085a8
jmp 0x1400085c4
mov rax, qword [rsp + 0x6450]
mov qword [rsp + 0x6610], rax
movabs rax, 0x71b50ee804781f
cmp qword [rsp + 0x6610], rax
je 0x14000856e
movabs rax, 0x1975def0bbbf9f7c
cmp qword [rsp + 0x6610], rax
je 0x1400083a6
jmp 0x1400085a6
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov rdx, qword [rsp + 0x63d8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jb 0x140008523
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x64d0]
shl rax, cl
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x63b0]
mov rdx, qword [rdx]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
jae 0x140008495
movsx eax, word [rsp + 0xb10]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
movzx ecx, word [0x140160010]
add eax, ecx
mov rcx, qword [rsp + 0x6608]
mov word [rcx], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x6408]
movzx r9d, word [rax]
mov r8, qword [rsp + 0x65c0]
movzx edx, word [rsp + 0xaf8]
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rax]
call fcn.140146fb0
nop
jmp 0x140008521
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x379c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6578]
mov ecx, dword [rcx]
mov edx, dword [0x140161310]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140008521
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x379c]
add ecx, eax
mov eax, ecx
mov dword [0x140160018], eax
mov dword [rsp + 0x3820], 0x2219
mov dword [rsp + 0x3824], 0x228b
movsx eax, byte [rsp + 0x44]
movsx ecx, byte [rsp + 0x40]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6590]
mov rcx, qword [rsp + 0x63d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x65c0], rax
jmp 0x14000856c
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x47]
movzx edx, byte [rsp + 0x43]
add ecx, edx
cmp eax, ecx
je 0x14000856c
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
jmp 0x1400085a6
lea rax, [rsp + 0x63a8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x3828]
mov r8d, 0x35
mov rdx, qword [rsp + 0x6488]
mov rcx, qword [rsp + 0x6618]
call qword [sym.imp.KERNEL32.dll_ReadConsoleOutputCharacterW]
mov dword [rsp + 0x37d8], eax
jmp 0x1400085c4
mov eax, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3754]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x64d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x6340]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x1400086be
mov eax, dword [rsp + 0x3708]
mov ecx, dword [rsp + 0x3784]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3794], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov dword [rsp + 0x382c], eax
cmp dword [rsp + 0x382c], 0x116
je 0x140008643
cmp dword [rsp + 0x382c], 0x596
je 0x14000869b
jmp 0x1400086be
lea r9, [rsp + 0x1d708]
mov r8d, 7
lea rdx, str.Moulding_soundtrack
lea rcx, str.C:AurasDurationsmerryLampooninghungrily
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x36dc], eax
mov rax, qword [rsp + 0x6448]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x379c]
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rax]
call fcn.1401477c0
nop
jmp 0x1400086be
mov rax, qword [rsp + 0x65a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6608]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x65a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov byte [rsp + 0x48], al
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb14]
shl eax, cl
movzx ecx, word [rsp + 0xaf8]
mov rdx, qword [rsp + 0x6490]
movzx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jle 0x140008743
movsx eax, byte [rsp + 0x41]
movsx ecx, byte [rsp + 0x40]
xor eax, ecx
mov byte [rsp + 0x44], al
mov rax, qword [rsp + 0x63d0]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x6508]
mov r9, qword [rax]
mov rax, qword [rsp + 0x6508]
mov r8, qword [rax]
mov edx, dword [rsp + 0x3730]
movzx ecx, word [rsp + 0xafc]
call fcn.140147e40
nop
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x3784]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x36c0]
mov edx, dword [rsp + 0x3774]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140008849
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d0]
mov rdx, qword [rsp + 0x6318]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x140008803
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
mov byte [0x140161314], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov byte [rsp + 0x49], al
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x65c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x63d0], rax
jmp 0x140008849
mov eax, dword [rsp + 0x36dc]
mov ecx, dword [rsp + 0x36c0]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3708]
mov edx, dword [rsp + 0x3784]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140008849
lea rdx, [rsp + 0x63e0]
lea rcx, [rsp + 0x36c0]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x6620], rax
mov rax, qword [rsp + 0x64d0]
mov qword [rsp + 0x6628], rax
mov rax, qword [rsp + 0x6550]
movzx eax, byte [rax]
mov byte [rsp + 0x3830], al
cmp byte [rsp + 0x3830], 0
je 0x140008888
cmp byte [rsp + 0x3830], 0x7e
je 0x1400089df
jmp 0x140008aba
mov eax, dword [rsp + 0x36c0]
mov dword [rsp + 0x3834], eax
cmp dword [rsp + 0x3834], 0
je 0x1400088a5
jmp 0x1400089be
lea rax, [rsp + 0x36c0]
mov qword [rsp + 0x6630], rax
lea rax, [rsp + 0x379c]
mov qword [rsp + 0x6638], rax
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0xb00]
movsx edx, word [rsp + 0xaf4]
add ecx, edx
cmp eax, ecx
jle 0x1400089bc
mov rax, qword [rsp + 0x65c0]
mov rcx, qword [rsp + 0x6508]
mov qword [rsp + 0x6640], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6640]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x6648], rax
mov rax, qword [0x140160008]
cqo
idiv qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x6648]
cmp rcx, rax
jle 0x14000899e
movzx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xaf8], ax
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xb10]
and eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
movzx eax, word [rsp + 0xb14]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140160010], ax
jmp 0x1400089bc
lea rdx, [rsp + 0x3784]
lea rcx, [rsp + 0x65f0]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x6650], rax
jmp 0x1400089da
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x44], al
jmp 0x140008aba
movsx eax, word [rsp + 0xb00]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x63e0]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140008a82
lea rdx, str.C:Temerity_flickery
lea rcx, str.C:BalaclavaFrightful
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov dword [rsp + 0x36f4], eax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43]
and eax, ecx
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x63b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [section..data]
shl rax, cl
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
jmp 0x140008aba
movsx eax, byte [rsp + 0x41]
movsx ecx, byte [rsp + 0x44]
sub eax, ecx
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x40]
add ecx, edx
cmp eax, ecx
jl 0x140008aba
lea rcx, [rsp + 0x65e0]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0x6658], rax
mov rax, qword [rsp + 0x6638]
mov rcx, qword [rsp + 0x6578]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov ecx, dword [0x140160018]
mov rdx, qword [rsp + 0x6448]
mov edx, dword [rdx]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140008b32
mov rax, qword [rsp + 0x6638]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x379c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6590]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rcx, qword [0x140161318]
call fcn.140148220
nop
lea rax, [rsp + 0x3708]
mov qword [rsp + 0x6660], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
and eax, ecx
mov word [rsp + 0xb00], ax
movzx eax, byte [rsp + 0x46]
mov rcx, qword [rsp + 0x65b0]
movzx ecx, byte [rcx]
sub eax, ecx
movzx ecx, byte [rsp + 0x42]
mov rdx, qword [rsp + 0x6560]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
je 0x140008bd1
mov rax, qword [rsp + 0x65a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb0c]
sub eax, ecx
mov word [0x140160010], ax
lea r9, [rsp + 0x1d730]
lea r8, [rsp + 0x6668]
lea rdx, [rsp + 0x44]
mov rcx, qword [rsp + 0x65f0]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x3838], eax
jmp 0x140008d09
mov rax, qword [rsp + 0x6630]
mov ecx, dword [rsp + 0x3784]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6660]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x3774]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x140008d09
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x6558]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x140008ce8
mov rax, qword [rsp + 0x6630]
mov rcx, qword [rsp + 0x6660]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x36c0]
mov edx, dword [rsp + 0x3708]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x140008caa
movzx eax, byte [rsp + 0x42]
movzx ecx, byte [rsp + 0x45]
sar eax, cl
mov byte [rsp + 0x47], al
movzx eax, word [0x140160014]
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x47]
sub eax, ecx
mov byte [rsp + 0x48], al
mov rax, qword [rsp + 0x6578]
mov eax, dword [rax]
mov dword [rsp + 0x383c], eax
jmp 0x140008ce8
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x47]
or eax, ecx
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x46]
xor ecx, edx
cmp eax, ecx
je 0x140008ce8
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x3784]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6628]
mov rcx, qword [rsp + 0x64d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3794]
mov dword [rsp + 0x3840], eax
cmp dword [rsp + 0x3840], 0x52a8
je 0x140008d5c
cmp dword [rsp + 0x3840], 0xb77c
je 0x140008d36
jmp 0x140008e01
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6590], rax
jmp 0x140008e01
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [rsp + 0x41]
mov rdx, qword [rsp + 0x6550]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140008de5
mov dword [rsp + 0x20], 0x75
lea r9, [rsp + 0x6668]
lea r8, [rsp + 0x6318]
mov edx, 0xc4
mov rcx, qword [rsp + 0x6488]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [rsp + 0x3784], eax
mov rax, qword [rsp + 0x6448]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x379c]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.1401477c0
nop
jmp 0x140008e01
movzx eax, word [rsp + 0xb0c]
movzx ecx, word [0x140160010]
add eax, ecx
mov rcx, qword [rsp + 0x65a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45]
add eax, ecx
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movzx eax, word [rsp + 0xaf8]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb14], ax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov eax, dword [rsp + 0x37b0]
sub eax, 0xce
mov dword [rsp + 0x37b0], eax
mov eax, dword [rsp + 0x36dc]
movzx ecx, al
mov eax, dword [rsp + 0x3708]
shr eax, cl
mov rcx, qword [rsp + 0x6630]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6638]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3754]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45]
and eax, ecx
mov byte [0x140161314], al
movzx eax, word [rsp + 0xb0c]
mov rcx, qword [rsp + 0x6608]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb18], ax
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
add eax, ecx
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x41]
sub eax, ecx
mov byte [rsp + 0x44], al
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x3708]
movzx ecx, al
mov eax, dword [rsp + 0x3794]
shr eax, cl
mov rcx, qword [rsp + 0x6660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x65c0]
movzx ecx, al
mov rax, qword [rsp + 0x6318]
shl rax, cl
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6608]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x46]
or eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x41]
and eax, ecx
mov byte [rsp + 0x44], al
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [0x140160014]
sub eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov eax, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x383c], eax
mov rax, qword [rsp + 0x6590]
mov rcx, qword [0x140160008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6630]
mov ecx, dword [rsp + 0x3784]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3794], eax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6628]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x64d0], rax
movsx eax, word [rsp + 0xb10]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xafc], ax
cmp dword [rsp + 0x37b0], 0x1af3
ja 0x140008e01
mov rax, qword [rsp + 0x6420]
movzx eax, word [rax]
mov dword [rsp + 0x3844], eax
cmp dword [rsp + 0x3844], 0
je 0x14000919e
cmp dword [rsp + 0x3844], 0xd7c
je 0x140009150
jmp 0x140146179
lea r8, [rsp + 0x63d8]
lea rdx, [rsp + 0x36cc]
mov rcx, qword [rsp + 0x65c8]
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov dword [rsp + 0x3848], eax
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
jmp 0x140146179
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x383c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [0x140160008]
mov qword [rsp + 0x6670], rax
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb00], ax
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x4a], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6608]
mov word [rcx], ax
mov rax, qword [rsp + 0x6630]
mov ecx, dword [rsp + 0x36c0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6660]
mov edx, dword [rsp + 0x3794]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jne 0x140009387
mov rax, qword [rsp + 0x6660]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x36dc]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3784]
mov edx, dword [rsp + 0x3774]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x14000933f
mov eax, dword [rsp + 0x379c]
mov dword [rsp + 0x384c], eax
cmp dword [rsp + 0x384c], 0x2e14
je 0x1400092a1
cmp dword [rsp + 0x384c], 0x7298
je 0x14000931f
jmp 0x14000933f
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x47], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rcx, qword [rsp + 0x65f0]
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov dword [rsp + 0x3850], eax
mov eax, dword [rsp + 0x3850]
mov dword [rsp + 0x3828], eax
mov rax, qword [rsp + 0x65c0]
mov rcx, qword [0x140160008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x63a0], rax
jmp 0x14000933f
mov rax, qword [rsp + 0x6630]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x36dc]
shl eax, cl
mov rcx, qword [rsp + 0x6660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6638]
mov ecx, dword [rsp + 0x383c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3754], eax
lea rax, [rsp + 0x6348]
mov qword [rsp + 0x6678], rax
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x140160012], al
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov qword [rsp + 0x6680], rax
movabs rax, 0x771640bfec38a5
cmp qword [rsp + 0x6680], rax
je 0x140145fec
movabs rax, 0x19860f00c3c45d80
cmp qword [rsp + 0x6680], rax
je 0x1400093cb
jmp 0x1401460a0
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x6678]
mov rdx, qword [rsp + 0x63d8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jb 0x140145f72
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x64d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6670], rax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x6608]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x63b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x46]
and eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x44]
shl eax, cl
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x36dc]
mov rcx, qword [rsp + 0x6660]
mov qword [rsp + 0x6688], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6688]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x6630]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6670]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6678]
mov rcx, qword [0x140161318]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x6348], rax
mov rax, qword [rsp + 0x6490]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x63b8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb0c], ax
movsx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140160014], ax
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0x65b0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
mov eax, dword [rsp + 0x3818]
add eax, 0x98
mov dword [rsp + 0x3818], eax
movsx eax, word [rsp + 0xaf4]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4a], al
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6578]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x65c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6590], rax
mov rax, qword [rsp + 0x63b0]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6630]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x3794]
shl eax, cl
mov rcx, qword [rsp + 0x6660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb1c]
xor eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x140160012], al
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb18], ax
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x44]
and eax, ecx
mov byte [rsp + 0x4a], al
movzx eax, word [rsp + 0xb0c]
movzx ecx, word [rsp + 0xb18]
add eax, ecx
mov rcx, qword [rsp + 0x6408]
mov word [rcx], ax
mov rax, qword [rsp + 0x6590]
mov rcx, qword [0x140160008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6660]
mov rcx, qword [rsp + 0x6630]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3708], eax
mov eax, dword [rsp + 0x3754]
mov ecx, dword [rsp + 0x379c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
movsx ecx, word [0x140160014]
sub eax, ecx
mov word [rsp + 0xb10], ax
movsx eax, byte [rsp + 0x41]
movsx ecx, byte [rsp + 0x44]
add eax, ecx
mov byte [0x140160012], al
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x42], al
movzx eax, byte [0x140161314]
movzx ecx, byte [rsp + 0x42]
sar eax, cl
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6420]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb0c], ax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45]
xor eax, ecx
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x6660]
mov ecx, dword [rsp + 0x3794]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3708], eax
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6628]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6348], rax
mov eax, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3730]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x383c], eax
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x63d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6670], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140160014], ax
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6550]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x63b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov word [rsp + 0xb14], ax
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6588]
mov word [rcx], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x6608]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb14], ax
mov rax, qword [rsp + 0x6630]
mov ecx, dword [rsp + 0x3774]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6660]
mov dword [rcx], eax
mov rax, qword [rsp + 0x65c0]
mov rcx, qword [rsp + 0x6670]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6340]
mov rcx, qword [rsp + 0x6678]
mov qword [rsp + 0x6690], rcx
movzx ecx, al
mov rax, qword [rsp + 0x6690]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x6678]
mov qword [rcx], rax
cmp dword [rsp + 0x3818], 0x174a
jbe 0x140009406
mov rax, qword [rsp + 0x6508]
mov rax, qword [rax]
mov qword [rsp + 0x6698], rax
movabs rax, 0x74e91a0cc149a4
cmp qword [rsp + 0x6698], rax
je 0x1400099f0
movabs rax, 0x2a69b8e1363dca78
cmp qword [rsp + 0x6698], rax
je 0x140009a3f
jmp 0x140145eac
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb14]
sub eax, ecx
mov rcx, qword [rsp + 0x6608]
mov word [rcx], ax
mov rax, qword [rsp + 0x6578]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x6638]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x3754]
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rax]
call fcn.1401477c0
nop
jmp 0x140145eac
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
lea rax, [rsp + 0x4a]
mov qword [rsp + 0x66a0], rax
mov rax, qword [rsp + 0x6678]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6628], rax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov qword [rsp + 0x66a8], rax
cmp qword [rsp + 0x66a8], 0
je 0x140009ac1
movabs rax, 0x73e8b6d6d726e0
cmp qword [rsp + 0x66a8], rax
je 0x140009c5c
jmp 0x140009cc8
movzx eax, word [rsp + 0xb18]
movzx ecx, word [rsp + 0xb14]
add eax, ecx
movzx ecx, word [rsp + 0xaf8]
movzx edx, word [rsp + 0xb0c]
and ecx, edx
cmp eax, ecx
je 0x140009c16
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0xafc]
movsx edx, word [rsp + 0xb00]
or ecx, edx
cmp eax, ecx
jne 0x140009b5a
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6450]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x6318], rax
mov eax, dword [rsp + 0x3794]
mov ecx, dword [rsp + 0x3708]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6630]
mov dword [rcx], eax
jmp 0x140009c14
mov eax, dword [rsp + 0x3794]
movzx ecx, al
mov eax, dword [rsp + 0x36c0]
shl eax, cl
mov ecx, dword [rsp + 0x3774]
mov rdx, qword [rsp + 0x6660]
mov edx, dword [rdx]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x140009c14
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x40]
add eax, ecx
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x63e8]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x140009c5a
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4a], al
jmp 0x140009cc8
movzx eax, word [rsp + 0xb04]
mov dword [rsp + 0x3854], eax
cmp dword [rsp + 0x3854], 0x7c2
je 0x140009c7a
jmp 0x140009cab
xor edx, edx
mov rcx, qword [rsp + 0x6410]
call qword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
mov dword [rsp + 0x36e8], eax
movzx eax, byte [0x140161314]
movzx ecx, byte [rsp + 0x45]
add eax, ecx
mov rcx, qword [rsp + 0x65b0]
mov byte [rcx], al
jmp 0x140009cc8
mov rax, qword [rsp + 0x6588]
movsx eax, word [rax]
mov dword [rsp + 0x3858], eax
cmp dword [rsp + 0x3858], 0
je 0x140009ce9
mov rax, qword [rsp + 0x6638]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3754]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x49]
movzx ecx, byte [rsp + 0x43]
shl eax, cl
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x42]
or ecx, edx
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140161314], al
mov r9d, 0x66
mov r8d, 0x5b
mov edx, 0x3c
mov rcx, qword [rsp + 0x6360]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x1d690], rax
mov rax, qword [rsp + 0x6558]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6588]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov r9, qword [rsp + 0x6438]
mov r8d, ILFree
mov edx, 0xeb
mov ecx, 0xcf
call qword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
mov dword [rsp + 0x62e8], eax
mov rax, qword [rsp + 0x6498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4a]
and eax, ecx
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x6400]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x140145fca
mov r9d, dword [rsp + 0x383c]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x383c]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.1401477c0
nop
mov rax, qword [rsp + 0x6660]
mov rcx, qword [rsp + 0x6630]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x3794], eax
jmp 0x1401460a0
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0xb1c]
mov rdx, qword [rsp + 0x6588]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jg 0x140146071
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb0c]
shl eax, cl
mov rcx, qword [rsp + 0x6608]
mov word [rcx], ax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x383c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3754], eax
lea rdx, [rsp + 0x6558]
mov rcx, qword [rsp + 0x1d698]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x36f4], eax
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov dword [rsp + 0x3784], eax
mov r8, qword [rsp + 0x6450]
mov rax, qword [rsp + 0x6638]
mov edx, dword [rax]
mov rax, qword [rsp + 0x6660]
mov ecx, dword [rax]
call fcn.140147c40
nop
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6450]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x63d0]
mov rdx, qword [rsp + 0x65c0]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x1401460d3
jmp 0x1401460f3
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x6558]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xafc], ax
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0x6560]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x46], al
mov dword [rsp + 0x38], 0x7c
lea rax, [rsp + 0x1d708]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb04]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x41]
mov r8d, SHGetNewLinkInfoW
lea rdx, [rsp + 0x1d6d8]
lea rcx, str.C:GuffawedAccumulationsCatcherexpandable
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
mov dword [rsp + 0x3800], eax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xb10]
sub eax, ecx
mov rcx, qword [rsp + 0x6558]
mov word [rcx], ax
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x65b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140161314], al
mov rax, qword [rsp + 0x6428]
movzx eax, byte [rax]
mov byte [rsp + 0x62ec], al
cmp byte [rsp + 0x62ec], 0x65
je 0x1401461b5
jmp 0x1401461dc
mov ecx, 0x31
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x45]
shl eax, cl
mov byte [rsp + 0x47], al
lea rcx, [rsp + 0x6508]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x36e8], eax
movsx eax, byte [rsp + 0x40]
movsx ecx, byte [rsp + 0x44]
add eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0x6428]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6418]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x6550]
mov byte [rcx], al
jmp 0x1401462ab
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x379c], eax
mov rax, qword [rsp + 0x6550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6498]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x6400]
mov byte [rcx], al
lea rax, [rsp + 0x6418]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6360]
lea r8, [rsp + 0x371c]
lea rdx, [rsp + 0x6450]
mov rcx, qword [rsp + 0x64e8]
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [rsp + 0x3814], eax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
or eax, ecx
mov ecx, dword [rsp + 0x3754]
mov edx, dword [rsp + 0x3730]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14014633f
lea r9, [rsp + 0x65b0]
lea r8, [rsp + 0x1d6f0]
lea rdx, [rsp + 0x63a8]
mov rcx, qword [rsp + 0x6438]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x37d8], eax
mov eax, dword [0x140161310]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x6588]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0x3708]
mov rax, qword [rsp + 0x63e0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x6578]
mov ecx, dword [rax]
call fcn.140147590
nop
jmp 0x1401463c6
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x64d0]
shr rax, cl
mov rcx, qword [rsp + 0x63b0]
mov rdx, qword [rsp + 0x6348]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jae 0x1401463c6
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x3708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3784], eax
mov edx, 0x42
mov rcx, qword [rsp + 0x67a8]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0x65c0]
mov rcx, qword [0x140160008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
jmp 0x14014640e
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x64d0], rax
lea r9, [rsp + 0x65b0]
lea r8, [rsp + 0x42]
mov edx, 0xc1
mov rcx, qword [rsp + 0x63f0]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0x6568], rax
mov rcx, qword [0x140161318]
call fcn.140148220
nop
jmp 0x140146556
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0x62f0], al
cmp byte [rsp + 0x62f0], 0x20
je 0x140146449
cmp byte [rsp + 0x62f0], 0x7c
je 0x140146535
jmp 0x140146556
mov edx, DrawInsert
mov rcx, qword [rsp + 0x1d6a0]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x371c], eax
movzx eax, word [rsp + 0xb0c]
mov rcx, qword [rsp + 0x65a8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6408]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x6420]
movzx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
jne 0x140146517
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0x62f4], al
cmp byte [rsp + 0x62f4], 0x7a
je 0x1401464af
jmp 0x140146504
movzx eax, word [rsp + 0xb14]
movzx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0xb0c], ax
mov edx, 0xa6
mov rcx, qword [rsp + 0x63c0]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x36f4], eax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
and eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
jmp 0x140146515
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rax]
call fcn.140148220
nop
jmp 0x140146533
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov word [0x140160010], ax
jmp 0x140146556
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6340]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x65b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x43]
and eax, ecx
mov rcx, qword [rsp + 0x6560]
mov byte [rcx], al
movzx eax, byte [rsp + 0x42]
movzx ecx, byte [rsp + 0x43]
add eax, ecx
mov byte [rsp + 0x45], al
mov rax, qword [rsp + 0x6560]
movzx eax, byte [rax]
mov byte [rsp + 0x62f8], al
cmp byte [rsp + 0x62f8], 0xa2
je 0x14014662f
cmp byte [rsp + 0x62f8], 0xd5
je 0x1401465b1
jmp 0x140146663
mov rcx, qword [rsp + 0x64c0]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x36e8], eax
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x379c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rsp + 0x6370]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x6348], rax
lea r9, [rsp + 0x63b8]
mov r8d, 0xb7
lea rdx, [rsp + 0xb14]
mov rcx, qword [rsp + 0x6518]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x62e8], eax
jmp 0x140146663
mov eax, dword [rsp + 0x379c]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0xafc]
mov r8d, dword [rsp + 0x3794]
mov rax, qword [rsp + 0x63e0]
movzx edx, word [rax]
mov ecx, dword [rsp + 0x3730]
call fcn.140147590
nop
jmp 0x1401466ba
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x63e0]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0x3708]
movzx edx, word [rsp + 0xb00]
mov ecx, dword [rsp + 0x3730]
call fcn.140147590
nop
movzx eax, word [rsp + 0xb0c]
mov rcx, qword [rsp + 0x6490]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x6420]
mov word [rcx], ax
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x379c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x3730], eax
mov r9d, 0x5d
lea r8, [rsp + 0xaf4]
mov edx, 0xdb
mov rcx, qword [rsp + 0x65e8]
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov dword [rsp + 0x36f4], eax
jmp 0x140146898
movsx eax, word [rsp + 0xb10]
movsx ecx, word [rsp + 0xb00]
xor eax, ecx
mov rcx, qword [rsp + 0x63e0]
movsx ecx, word [rcx]
mov dword [rsp + 0x62fc], ecx
movsx edx, word [rsp + 0xaf4]
movzx ecx, dl
mov edx, dword [rsp + 0x62fc]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140146898
mov rax, qword [rsp + 0x6340]
mov qword [rsp + 0x1d6a8], rax
movabs rax, 0x723787c8eda6ac
cmp qword [rsp + 0x1d6a8], rax
je 0x140146787
jmp 0x140146789
jmp 0x1401467a2
mov eax, dword [rsp + 0x3774]
mov ecx, dword [rsp + 0x3794]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x36c0], eax
mov rax, qword [rsp + 0x6508]
mov rcx, qword [rsp + 0x6318]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x140160008]
mov rdx, qword [rsp + 0x6450]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x14014680c
mov rax, qword [rsp + 0x64d0]
mov rcx, qword [rsp + 0x6348]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
mov eax, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
mov edx, 0xec
mov rcx, qword [rsp + 0x6568]
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov dword [rsp + 0x3728], eax
mov rax, qword [rsp + 0x6318]
mov rcx, qword [rsp + 0x63d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x6450], rax
mov rax, qword [rsp + 0x6348]
mov rcx, qword [rsp + 0x6340]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x379c]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x63e0]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0x3708]
movzx edx, word [rsp + 0xafc]
mov ecx, dword [0x140161310]
call fcn.140147590
nop
mov rax, qword [rsp + 0x6450]
mov rcx, qword [rsp + 0x63a0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x6508]
mov qword [rcx], rax
mov r9d, dword [rsp + 0x3730]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x379c]
mov ecx, dword [rsp + 0x379c]
call fcn.1401477c0
nop
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x6300], al
cmp byte [rsp + 0x6300], 0x7d
je 0x1401468f8
jmp 0x1401468fa
jmp 0x140146917
mov rax, qword [rsp + 0x63d0]
mov rcx, qword [rsp + 0x6318]
or rcx, rax
mov rax, rcx
mov qword [0x140160008], rax
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x6348], rax
mov edx, 0x5a
mov rcx, qword [rsp + 0x63f8]
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov dword [rsp + 0x371c], eax
mov rax, qword [rsp + 0x63d8]
mov rcx, qword [rax]
call fcn.140148220
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
jmp 0x1401469aa
mov rax, qword [rsp + 0x6448]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x3730]
mov edx, dword [0x140161310]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.1401477c0
nop
mov eax, dword [0x140161310]
mov ecx, dword [rsp + 0x3730]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3754], eax
mov eax, dword [rsp + 0x3730]
mov dword [rsp + 0x6304], eax
cmp dword [rsp + 0x6304], 0x2854
je 0x1401469e1
jmp 0x1401469fb
lea rdx, [rsp + 0x1d760]
mov ecx, 0xff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [rsp + 0x3774], eax
lea rcx, [rsp + 0x6418]
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov qword [rsp + 0x6668], rax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0xaf8]
sar eax, cl
mov word [rsp + 0xb04], ax
jmp 0x140146a7a
mov rax, qword [rsp + 0x6448]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x6448]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x3730]
call fcn.1401477c0
nop
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
or eax, ecx
movsx ecx, byte [rsp + 0x40]
mov dword [rsp + 0x6308], ecx
mov rdx, qword [rsp + 0x63e8]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x6308]
shl edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140146c2b
mov eax, dword [rsp + 0x3754]
mov dword [rsp + 0x630c], eax
cmp dword [rsp + 0x630c], 0x7403
je 0x140146adf
jmp 0x140146c0e
mov dword [rsp + 0x20], 0x7f
lea r9, [rsp + 0x6438]
lea r8, [rsp + 0x6350]
lea rdx, str.C:unmutilated_behavedporkerSynapse_nits
lea rcx, str.C:DucklingsChairlift
call qword [sym.imp.KERNEL32.dll_MoveFileWithProgressW]
mov dword [rsp + 0x371c], eax
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb00]
sar eax, cl
mov rcx, qword [rsp + 0x63e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x6428]
movzx eax, byte [rax]
mov byte [rsp + 0x6310], al
cmp byte [rsp + 0x6310], 0x61
je 0x140146b61
cmp byte [rsp + 0x6310], 0x71
je 0x140146beb
jmp 0x140146c0c
mov rax, qword [rsp + 0x63e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xaf4]
and eax, ecx
movsx ecx, word [rsp + 0xafc]
movsx edx, word [rsp + 0xb00]
add ecx, edx
cmp eax, ecx
je 0x140146bca
movzx eax, word [rsp + 0xb04]
movzx ecx, word [rsp + 0xb08]
sub eax, ecx
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x6370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6340]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x63d8]
mov qword [rcx], rax
mov r8, qword [rsp + 0x6480]
mov edx, 0x88
mov ecx, 0x67
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x371c], eax
jmp 0x140146c0c
mov rax, qword [rsp + 0x63d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x6348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6340], rax
jmp 0x140146c2b
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rsp + 0x3730]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x6448]
mov dword [rcx], eax
jmp 0x140146ce7
movsx eax, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x63e8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x6400]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x6418]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jge 0x140146ce7
mov rax, qword [rsp + 0x6418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [rsp + 0x63e8]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jl 0x140146ccb
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
mov word [rsp + 0xaf8], ax
mov r9d, dword [rsp + 0x3754]
mov rax, qword [rsp + 0x6448]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x6448]
mov edx, dword [rax]
mov rax, qword [rsp + 0x6448]
mov ecx, dword [rax]
call fcn.1401477c0
nop
mov rax, qword [rsp + 0x6400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x6428]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x63d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x63b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x6448]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3754]
add ecx, eax
mov eax, ecx
mov dword [0x140161310], eax
jmp 0x140146dce
cmp dword [0x140161310], 0x599b
jge 0x140146dce
mov rax, qword [rsp + 0x6348]
mov qword [rsp + 0x1d6b0], rax
movabs rax, 0x7d664165f3a30c
cmp qword [rsp + 0x1d6b0], rax
je 0x140146d61
jmp 0x140146db4
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sub eax, ecx
mov rcx, qword [rsp + 0x6388]
mov word [rcx], ax
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x6318]
mov edx, dword [0x140161310]
movzx ecx, word [rsp + 0xafc]
call fcn.140147e40
nop
jmp 0x140146dce
movsx eax, word [rsp + 0xafc]
movsx ecx, word [rsp + 0xaf4]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
imul eax, ecx
movzx ecx, word [rsp + 0xb04]
cmp eax, ecx
jle 0x140146e13
mov rax, qword [rsp + 0x6370]
mov rcx, qword [rsp + 0x6348]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x6370]
mov qword [rcx], rax
jmp 0x140146e74
mov rax, qword [rsp + 0x6388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
movzx ecx, word [rsp + 0xb04]
cmp eax, ecx
jge 0x140146e74
mov r9d, 0x92
mov r8d, 0x4c
mov edx, 0xfb
mov rcx, qword [rsp + 0x67b0]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0x64f8], rax
movsx eax, word [rsp + 0xaf4]
movsx ecx, word [rsp + 0xafc]
add eax, ecx
mov word [rsp + 0xb00], ax
jmp 0x140146ed3
movsx eax, word [rsp + 0xaf4]
cmp eax, 0x7ec
jl 0x140146ed3
lea rdx, [rsp + 0x6488]
lea rcx, [rsp + 0xaf4]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x63a8], rax
mov rax, qword [rsp + 0x6318]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x6318]
mov r8, qword [rsp + 0x6318]
mov edx, 0x7d
movzx ecx, word [rsp + 0xaf4]
call fcn.140147e40
nop
movsx eax, word [rsp + 0xaf4]
sub eax, 0x1a6
mov word [rsp + 0xaf4], ax
movsx eax, word [rsp + 0xaf4]
and eax, 0x5de
mov word [rsp + 0xaf4], ax
movabs rax, 0x7476278c26d734
cmp qword [rsp + 0x6318], rax
jne 0x140146f5a
lea rdx, [rsp + 0xaf4]
mov rcx, qword [rsp + 0x6488]
call qword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [rsp + 0x371c], eax
mov dword [rsp + 0x20], 0xc3
movzx r9d, word [rsp + 0xaf4]
mov r8d, dword [rsp + 0x36c0]
movzx edx, word [rsp + 0xaf4]
mov ecx, 0xa
call fcn.140147590
nop
movabs rax, 0x77820633043097
mov rcx, qword [rsp + 0x6318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6318], rax
lea rcx, [rsp + 0x371c]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0x6350], rax
mov eax, dword [rsp + 0x4c24]
add rsp, 0x1dc18
pop rdi
pop rsi
ret