Function at 0x1400968b0
Capabilities:
Delete registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov qword [rsp + 0xf0], rbx
xor r14d, r14d
mov qword [rbp - 0x19], r14
mov dword [rbp - 0x11], r14d
mov qword [rbp - 9], r14
mov qword [rbp - 0x69], r14
mov qword [rbp - 0x61], r14
mov qword [rbp - 0x59], r14
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x77], rbx
lea rdx, str.7E9286F3_152C_497F_94C3_521544037651
test rdx, 0xffffffffffff0000
jne 0x14009693e
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1400017e0
test rax, rax
je 0x140096951
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0x77]
call fcn.140001f70
jmp 0x14009694d
mov r8d, Ordinal_43
lea rcx, [rbp + 0x77]
call fcn.140001e80
mov rbx, qword [rbp + 0x77]
lea rcx, [rbp + 0x77]
mov rax, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x61]
cmp rcx, rdi
jae 0x140096a22
lea rcx, [rbp + 0x77]
cmp rax, rcx
ja 0x140096a22
lea r12, [rbp + 0x77]
sub r12, rax
sar r12, 3
movabs rsi, 0x1fffffffffffffff
movabs r13, 0x1ffffffffffffffe
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x1400969f8
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x1400969b8
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x1400969f8
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x1400969dd
mov rdx, r14
jmp 0x1400969e0
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov rax, qword [rbp - 0x69]
mov qword [rbp + 0x6f], rdi
mov qword [rbp + 0x7f], rdi
test rdi, rdi
je 0x140096a1d
mov rcx, qword [rax + r12*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
jmp 0x140096ab9
movabs rsi, 0x1fffffffffffffff
movabs r13, 0x1ffffffffffffffe
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096a98
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096a5c
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096a98
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096a81
mov rdx, r14
jmp 0x140096a84
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov qword [rbp + 0x6f], rdi
mov qword [rbp + 0x7f], rdi
test rdi, rdi
je 0x140096ab9
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
add rdi, 8
mov qword [rbp - 0x61], rdi
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140096adc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x7f], rbx
lea rdx, str.C93BE4DA_D97D_49AC_B718_E723EAA9D091
test rdx, 0xffffffffffff0000
jne 0x140096b27
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1400017e0
test rax, rax
je 0x140096b3a
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0x7f]
call fcn.140001f70
jmp 0x140096b36
mov r8d, Ordinal_43
lea rcx, [rbp + 0x7f]
call fcn.140001e80
mov rbx, qword [rbp + 0x7f]
lea rcx, [rbp + 0x7f]
mov rax, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x61]
cmp rcx, rdi
jae 0x140096bf7
lea rcx, [rbp + 0x7f]
cmp rax, rcx
ja 0x140096bf7
lea r12, [rbp + 0x7f]
sub r12, rax
sar r12, 3
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096bcd
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096b8d
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096bcd
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096bb2
mov rdx, r14
jmp 0x140096bb5
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov rax, qword [rbp - 0x69]
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rdi
test rdi, rdi
je 0x140096bf2
mov rcx, qword [rax + r12*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
jmp 0x140096c7a
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096c59
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096c1d
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096c59
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096c42
mov rdx, r14
jmp 0x140096c45
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140096c7a
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
add rdi, 8
mov qword [rbp - 0x61], rdi
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140096c9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x41], rbx
lea rdx, str.4EE3B587_5512_4A71_BB81_ADFC0559687B
test rdx, 0xffffffffffff0000
jne 0x140096ce8
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1400017e0
test rax, rax
je 0x140096cfb
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x41]
call fcn.140001f70
jmp 0x140096cf7
mov r8d, Ordinal_43
lea rcx, [rbp - 0x41]
call fcn.140001e80
mov rbx, qword [rbp - 0x41]
lea rcx, [rbp - 0x41]
mov rax, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x61]
cmp rcx, rdi
jae 0x140096db8
lea rcx, [rbp - 0x41]
cmp rax, rcx
ja 0x140096db8
lea r12, [rbp - 0x41]
sub r12, rax
sar r12, 3
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096d8e
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096d4e
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096d8e
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096d73
mov rdx, r14
jmp 0x140096d76
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov rax, qword [rbp - 0x69]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140096db3
mov rcx, qword [rax + r12*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
jmp 0x140096e3b
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096e1a
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096dde
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096e1a
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096e03
mov rdx, r14
jmp 0x140096e06
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140096e3b
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
add rdi, 8
mov qword [rbp - 0x61], rdi
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140096e5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x31], rbx
lea rdx, str.FF400668_95B6_41CA_922E_125E5482B0B7
test rdx, 0xffffffffffff0000
jne 0x140096ea9
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1400017e0
test rax, rax
je 0x140096ebc
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.140001f70
jmp 0x140096eb8
mov r8d, Ordinal_43
lea rcx, [rbp - 0x31]
call fcn.140001e80
mov rbx, qword [rbp - 0x31]
lea rcx, [rbp - 0x31]
mov rax, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x61]
cmp rcx, rdi
jae 0x140096f79
lea rcx, [rbp - 0x31]
cmp rax, rcx
ja 0x140096f79
lea r12, [rbp - 0x31]
sub r12, rax
sar r12, 3
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096f4f
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096f0f
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096f4f
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096f34
mov rdx, r14
jmp 0x140096f37
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov rax, qword [rbp - 0x69]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140096f74
mov rcx, qword [rax + r12*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
jmp 0x140096ffc
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140096fdb
mov rcx, rdi
sub rcx, rax
sar rcx, 3
cmp rcx, r13
jbe 0x140096f9f
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rcx
sub rdx, rax
sar rdx, 3
cmp rcx, rdx
jbe 0x140096fdb
mov r8, rdx
shr r8, 1
mov rax, rsi
sub rax, r8
cmp rax, rdx
jae 0x140096fc4
mov rdx, r14
jmp 0x140096fc7
add rdx, r8
cmp rdx, rcx
cmovb rdx, rcx
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140096ffc
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
add rdi, 8
mov qword [rbp - 0x61], rdi
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009701f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x21], rbx
lea rdx, str.A0D941C5_A6B6_4838_9D90_48D4BDF42BF8
test rdx, 0xffffffffffff0000
jne 0x14009706a
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1400017e0
test rax, rax
je 0x14009707d
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.140001f70
jmp 0x140097079
mov r8d, Ordinal_43
lea rcx, [rbp - 0x21]
call fcn.140001e80
mov rbx, qword [rbp - 0x21]
lea rax, [rbp - 0x21]
mov rcx, qword [rbp - 0x69]
mov rdi, qword [rbp - 0x61]
cmp rax, rdi
jae 0x140097137
lea rax, [rbp - 0x21]
cmp rcx, rax
ja 0x140097137
lea r12, [rbp - 0x21]
sub r12, rcx
sar r12, 3
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x14009710d
mov rax, rdi
sub rax, rcx
sar rax, 3
cmp rax, r13
jbe 0x1400970d0
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rax
sub rdx, rcx
sar rdx, 3
cmp rax, rdx
jbe 0x14009710d
mov rcx, rdx
shr rcx, 1
sub rsi, rcx
cmp rsi, rdx
jae 0x1400970f2
mov rdx, r14
jmp 0x1400970f5
add rdx, rcx
cmp rdx, rax
cmovb rdx, rax
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov rcx, qword [rbp - 0x69]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x140097132
mov rcx, qword [rcx + r12*8]
sub rcx, 0x18
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
jmp 0x1400971b7
mov rdx, qword [rbp - 0x59]
cmp rdi, rdx
jne 0x140097196
mov rax, rdi
sub rax, rcx
sar rax, 3
cmp rax, r13
jbe 0x14009715d
lea rcx, str.vector_T__too_long
call qword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rax
sub rdx, rcx
sar rdx, 3
cmp rax, rdx
jbe 0x140097196
mov rcx, rdx
shr rcx, 1
sub rsi, rcx
cmp rsi, rdx
jae 0x14009717f
mov rdx, r14
jmp 0x140097182
add rdx, rcx
cmp rdx, rax
cmovb rdx, rax
lea rcx, [rbp - 0x69]
call fcn.14000dcf0
mov rdi, qword [rbp - 0x61]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x39], rdi
test rdi, rdi
je 0x1400971b7
lea rcx, [rbx - 0x18]
call fcn.140001b90
add rax, 0x18
mov qword [rdi], rax
mov rdi, qword [rbp - 0x61]
add rdi, 8
mov qword [rbp - 0x61], rdi
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400971da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x49], rax
lea rcx, [0x14011d880]
mov rax, qword [0x14011d880]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x6f], rbx
mov r9d, 0x2001f
lea r8, str.SOFTWAREMicrosoftInternet_ExplorerActiveX_Compatibility
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x19]
call fcn.140008440
test eax, eax
jne 0x140097372
mov edi, r14d
mov rax, qword [rbp - 0x61]
sub rax, qword [rbp - 0x69]
sar rax, 3
test rax, rax
je 0x14009735b
mov rbx, r14
nop dword [rax]
mov r8d, reloc.ATL100.DLL_Ordinal_58
lea rdx, str.SOFTWAREMicrosoftInternet_ExplorerActiveX_Compatibility
lea rcx, [rbp - 0x49]
call fcn.140001e80
lea r8, [0x1400ddd20]
lea rdx, [rbp - 0x49]
lea rcx, [rbp + 0x17]
call fcn.140002ce0
nop
mov rcx, qword [rbp - 0x69]
lea r8, [rcx + rbx*8]
mov rdx, rax
lea rcx, [rbp + 7]
call fcn.140008ad0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x49]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400972ed
cmp dword [rbx + 0x10], 0
jl 0x1400972df
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400972df
call fcn.140001b90
mov rsi, rax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400972d5
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x49], rax
jmp 0x1400972ed
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x49]
call fcn.140001e80
nop
mov rdx, qword [rbp + 7]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009730d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x17]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009732c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x49]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
inc edi
movsxd rbx, edi
mov rax, qword [rbp - 0x61]
sub rax, qword [rbp - 0x69]
sar rax, 3
cmp rbx, rax
jb 0x140097250
mov rbx, qword [rbp + 0x6f]
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14009736e
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x19], r14
mov dword [rbp - 0x11], r14d
call fcn.14001a970
cmp eax, 9
jne 0x140097653
mov r9d, 0x2001f
lea r8, str.SOFTWAREWow6432NodeMicrosoftInternet_ExplorerActiveX_Compatibility
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x19]
call fcn.140008440
test eax, eax
jne 0x140097653
mov r15d, r14d
mov rax, qword [rbp - 0x61]
sub rax, qword [rbp - 0x69]
sar rax, 3
test rax, rax
je 0x14009763c
nop dword [rax]
mov esi, dword [rbx - 0x10]
lea rdi, str.SOFTWAREWow6432NodeMicrosoftInternet_ExplorerActiveX_Compatibility
sub rdi, rbx
sar rdi, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x46
or eax, ecx
jge 0x1400973f4
mov edx, 0x46
lea rcx, [rbp + 0x6f]
call fcn.140001c20
mov rbx, qword [rbp + 0x6f]
movsxd rdx, dword [rbx - 0xc]
mov r9d, 0x8c
mov rcx, rbx
add rdx, rdx
cmp rdi, rsi
ja 0x140097415
lea r8, [rbx + rdi*2]
call qword [sym.imp.MSVCR100.dll_memmove_s]
jmp 0x140097422
lea r8, str.SOFTWAREWow6432NodeMicrosoftInternet_ExplorerActiveX_Compatibility
call qword [sym.imp.MSVCR100.dll_memcpy_s]
cmp dword [rbx - 0xc], 0x46
jl 0x140097631
mov dword [rbx - 0x10], 0x46
mov word [rbx + 0x8c], r14w
lea r8, [0x1400ddd20]
lea rdx, [rbp + 0x6f]
lea rcx, [rbp + 0xf]
call fcn.140002ce0
nop
movsxd rdx, r15d
mov rcx, qword [rbp - 0x69]
lea r8, [rcx + rdx*8]
mov rdx, rax
lea rcx, [rbp - 1]
call fcn.140008ad0
nop
mov r13, qword [rax]
lea rcx, [r13 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140097596
cmp dword [rdi + 0x10], 0
jl 0x1400974ba
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400974ba
call fcn.140001b90
mov rbx, rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1400974ad
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x6f], rax
jmp 0x140097596
movsxd rsi, dword [r13 - 0x10]
test esi, esi
jne 0x140097519
mov rsi, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140097596
cmp dword [rdi + 0x10], 0
jge 0x1400974ec
cmp dword [rbx - 0xc], 0
jl 0x140097605
mov dword [rbx - 0x10], r14d
mov word [rbx], r14w
jmp 0x140097596
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x140097506
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x6f], rax
jmp 0x140097596
test r13, r13
je 0x140097626
mov r14d, dword [rbx - 0x10]
mov r12, r13
sub r12, rbx
sar r12, 1
test esi, esi
js 0x14009761b
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, esi
or eax, ecx
jge 0x140097557
mov edx, esi
lea rcx, [rbp + 0x6f]
call fcn.140001c20
mov rbx, qword [rbp + 0x6f]
lea rdi, [rsi + rsi]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
mov r9, rdi
add rdx, rdx
cmp r12, r14
ja 0x140097579
lea r8, [rbx + r12*2]
call qword [sym.imp.MSVCR100.dll_memmove_s]
jmp 0x140097582
mov r8, r13
call qword [sym.imp.MSVCR100.dll_memcpy_s]
cmp esi, dword [rbx - 0xc]
jg 0x140097610
mov dword [rbx - 0x10], esi
xor r14d, r14d
mov word [rdi + rbx], r14w
mov rdx, qword [rbp - 1]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400975b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0xf]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400975d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x6f]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
inc r15d
mov rcx, qword [rbp - 0x61]
sub rcx, qword [rbp - 0x69]
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jae 0x14009763c
jmp 0x1400973c0
mov ecx, 0x80070057
call fcn.140001000
int3
mov ecx, 0x80070057
call fcn.140001000
int3
mov ecx, 0x80070057
call fcn.140001000
int3
mov ecx, 0x80070057
call fcn.140001000
nop
mov ecx, 0x80070057
call fcn.140001000
int3
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14009764f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp - 0x19], r14
mov dword [rbp - 0x11], r14d
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009766f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x49]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009768f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
cmp qword [rbp - 0x69], 0
je 0x1400976e3
lea rcx, [rbp - 0x69]
call qword [sym.imp.MSVCP100.dll_public:_void___cdecl_std::_Container_base0::_Orphan_all_void____ptr64]
mov rdi, qword [rbp - 0x61]
mov rbx, qword [rbp - 0x69]
cmp rbx, rdi
je 0x1400976db
nop dword [rax]
mov rdx, qword [rbx]
sub rdx, 0x18
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400976ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rbx, 8
cmp rbx, rdi
jne 0x1400976b0
mov rbx, qword [rbp - 0x69]
mov rcx, rbx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rbp - 0x69], r14
mov qword [rbp - 0x61], r14
mov qword [rbp - 0x59], r14
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x1400976fe
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret