Function at 0x140006efc
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xcc8]
sub rsp, 0xda0
mov rax, qword [0x140032370]
xor rax, rsp
mov qword [rbp + 0xc90], rax
xor r13d, r13d
lea rcx, [rbp + 0xa80]
mov r15, r8
mov qword [rsp + 0x50], r13
mov r8d, 0x20a
mov dword [rsp + 0x38], r13d
xor edx, edx
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
movdqa xmm0, xmmword [0x140028850]
lea ebx, [r13 + 1]
xorps xmm1, xmm1
mov word [rbp + 0x98], r13w
movdqu xmmword [rbp + 0xa8], xmm0
mov dword [rsp + 0x48], r13d
xor r8d, r8d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm1
xor edx, edx
movss dword [rbp + 0x30], xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov r14d, ebx
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp], xmm1
mov dword [rbp + 0x20], 0x2d0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
call fcn.1400137bc
movss xmm1, dword [0x140028840]
lea edx, [rbx + 7]
xorps xmm0, xmm0
movss dword [rbp + 0x30], xmm1
lea rcx, [rbp + 0x30]
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x48], r13
call fcn.140012e00
lea rcx, [rbp + 0xc0]
call fcn.140016188
xorps xmm0, xmm0
mov qword [rsp + 0x68], r13
movdqu xmmword [rsp + 0x58], xmm0
xor ecx, ecx
call fcn.140009390
mov dword [0x140032abc], 5
xor ecx, ecx
call fcn.140009390
cmp qword [0x140032cd0], r13
mov eax, r13d
jne 0x140007065
lea rcx, [0x140032c38]
call fcn.14000b1c0
test eax, eax
jns 0x14000705a
mov eax, r13d
jmp 0x140007065
call fcn.14000af08
test eax, eax
cmovs eax, r13d
mov ecx, eax
call fcn.140009390
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx]
movzx r12d, r13b
lea rdx, [rsp + 0x30]
test eax, eax
mov dword [rsp + 0x30], r13d
mov rcx, r15
cmovns r12d, ebx
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
lea rdi, [0x1400323d0]
mov rbx, rax
mov esi, r13d
cmp dword [rsp + 0x30], r13d
jle 0x1400071d3
mov rdx, qword [rbx]
lea rcx, [rbp + 0x70]
call fcn.140009758
mov rcx, qword [rbx]
lea rdx, str._printhelp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
test eax, eax
jne 0x140007111
lea rcx, str.sedlauncher.exe___printhelp_
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__putws]
lea rcx, str.sedlauncher.exe___manual____RunPlugin:_pluginname__
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__putws]
lea rcx, str.sedlauncher.exe___cv:_correlation_vector__
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__putws]
lea rcx, str.sedlauncher.exe___RunInvokeSetupDialog_
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__putws]
lea rcx, str.sedlauncher.exe___RunUsoScanOnly_
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__putws]
jmp 0x1400071ba
mov rcx, qword [rbx]
lea rdx, str._RunPlugin
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsnicmp]
test eax, eax
jne 0x140007144
lea rcx, [rbp + 0x70]
mov byte [0x140032b38], r14b
call fcn.1400094bc
lea rcx, [0x1400323b0]
jmp 0x140007187
mov rcx, qword [rbx]
lea rdx, str._manual
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
test eax, eax
jne 0x140007161
mov byte [0x140032aa8], r14b
jmp 0x1400071ba
mov rcx, qword [rbx]
lea rdx, [0x1400235f8]
mov r8d, 3
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsnicmp]
test eax, eax
jne 0x140007196
lea rcx, [rbp + 0x70]
call fcn.1400094bc
mov rcx, rdi
lea rdx, [rbp + 0x70]
lea r8, [rax + 1]
call fcn.1400095a8
jmp 0x1400071ba
mov rcx, qword [rbx]
lea rdx, str._RunInvokeSetupDialog
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
test eax, eax
je 0x1400071ba
mov rcx, qword [rbx]
lea rdx, str._RunUsoScanOnly
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
lea rcx, [rbp + 0x70]
call fcn.14000b958
inc esi
add rbx, 8
cmp esi, dword [rsp + 0x30]
jl 0x1400070ab
cmp qword [0x1400323e0], r13
jbe 0x14000720e
cmp qword [0x1400323e8], 8
lea rcx, [rbp + 0x980]
mov r8d, 0x81
cmovae rdi, qword [0x1400323d0]
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_wcstombs]
lea rcx, [rbp + 0x980]
call fcn.1400086e8
movzx ecx, byte [0x140032aa8]
lea rsi, [fcn.140008c60]
mov rdx, rsi
lea r9, str.Initializing_the_application
xor r8d, r8d
call fcn.140006cf4
mov r8d, 0x104
lea rdx, [rbp + 0xa80]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_GetModuleFileNameW]
test eax, eax
je 0x140007bdd
movzx ecx, byte [0x140032aa8]
lea r9, str.Checking_if_process_is_running_in_elevated_mode
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
lea rdx, [rsp + 0x34]
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x34], r13d
call fcn.14001bc3c
cmp dword [rsp + 0x30], r13d
jne 0x14000729d
movzx ecx, byte [0x140032aa8]
lea r9, str.Application_is_not_running_in_Administrator_mode._If_you_encounter_any_error__please_run_the_application_in_administrator_mode.
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
movzx ecx, byte [0x140032aa8]
lea r9, str.Trying_to_pull_Application_Settings_from_Cloud
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
lea r8, [rsp + 0x30]
mov dword [rsp + 0x30], r13d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x70]
call fcn.14000669c
mov edx, 0x105
lea rcx, [rbp + 0xa80]
mov edi, eax
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
movzx ecx, byte [0x140032aa8]
lea rbx, [fcn.140008a40]
test edi, edi
js 0x140007408
lea r9, str.Application_settings_successfully_Updated
mov r8d, edi
mov rdx, rsi
call fcn.140006cf4
movzx ecx, byte [0x140032aa8]
lea r9, str.Checking_if_the_application_need_to_be_updated
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0xc0]
call fcn.140006778
mov dword [rsp + 0x38], eax
test eax, eax
js 0x1400073ed
cmp dword [rsp + 0x48], r13d
je 0x1400073ed
cmp qword [rbp + 0x898], 8
lea rcx, [rbp + 0x880]
lea rax, [rbp + 0x8a0]
cmovae rcx, qword [rbp + 0x880]
cmp qword [rbp + 0x8b8], 8
mov qword [rbp + 0x80], rcx
lea rcx, [rbp + 0x70]
cmovae rax, qword [rbp + 0x8a0]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0xa80]
mov qword [rbp + 0x78], rax
call fcn.14001b35c
mov dword [rsp + 0x38], eax
test eax, eax
js 0x1400073b8
call fcn.14001452c
mov dword [rsp + 0x38], eax
test eax, eax
jns 0x14000741c
lea rdx, str.Failed_to_delete_iteration_counts
jmp 0x1400073bf
lea rdx, str.Failed_to_update_the_plugins_payload
mov ecx, eax
call fcn.140008a40
mov r8d, dword [rsp + 0x38]
test r8d, r8d
jns 0x14000741c
movzx ecx, byte [0x140032aa8]
lea r9, str.Failed_to_update_the_application_to_latest._Ignoring_the_error.
mov rdx, rbx
call fcn.140006cf4
mov dword [rsp + 0x38], r13d
jmp 0x14000741c
movzx ecx, byte [0x140032aa8]
lea r9, str.Application_update_not_required.
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
jmp 0x14000741c
mov r8d, dword [rsp + 0x30]
lea r9, str.Failed_to_update_the_Application_Settings.
mov rdx, rbx
call fcn.140006cf4
mov al, byte [0x140032aa8]
test al, al
je 0x140007573
cmp qword [rbp + 0x7b0], r13
ja 0x14000744e
mov r14d, 0x80070057
movzx ecx, al
mov r8d, r14d
lea r9, str.No_plugins_currently_enabled.
mov rdx, rbx
jmp 0x140007c09
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp + 0x980]
call fcn.140009bc8
movdqa xmm0, xmmword [0x140028850]
movdqu xmmword [rbp + 0x80], xmm0
mov word [rbp + 0x70], r13w
jmp 0x140007486
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.1400082c8
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x980]
call fcn.14000d680
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
je 0x140007478
lea rcx, [rbp + 0x70]
call fcn.14000b958
lea rcx, [rbp + 0xa18]
call fcn.140009aec
lea rax, [0x1400201e0]
lea rcx, [rbp + 0xa18]
mov qword [rbp + 0xa18], rax
call fcn.140006320
cmp byte [0x140032b38], r13b
je 0x140007573
mov rax, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
cmp rax, r9
je 0x14000755b
cmp qword [0x1400323c8], 8
lea rcx, [0x1400323b0]
mov r8, rax
cmovae rcx, qword [0x1400323b0]
cmp qword [rax + 0x18], 8
jb 0x140007513
mov r8, qword [rax]
mov rdx, qword [rax + 0x10]
cmp rdx, qword [0x1400323c0]
jne 0x140007547
test rdx, rdx
je 0x140007540
sub r8, rcx
movzx r10d, word [rcx + r8]
movzx r11d, word [rcx]
cmp r10w, r11w
jne 0x14000754d
add rcx, 2
sub rdx, r14
jne 0x140007528
mov ecx, r13d
test ecx, ecx
je 0x140007556
add rax, 0x20
jmp 0x1400074ea
sbb ecx, ecx
and ecx, 0xfffffffe
inc ecx
jmp 0x140007543
cmp rax, r9
jne 0x140007573
mov r14d, 0x80004005
lea r9, str.Either_specified_plugin_name_is_not_valid_or_it_has_not_been_enabled.
mov r8d, r14d
mov rdx, rbx
jmp 0x140007c02
call fcn.140008e78
mov rsi, rax
lea rdx, str.2019.8D
movabs rcx, 0x800000000001
lea rdi, [0x140021d4c]
cmp dword [rax], r14d
jbe 0x140007695
test qword [rax + 0x10], rcx
je 0x140007695
mov rax, qword [rax + 0x18]
and rax, rcx
cmp rax, qword [rsi + 0x18]
jne 0x140007695
mov qword [rbp + 0x9a0], rdx
mov qword [rbp + 0x9a8], 8
call fcn.1400084d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x9b0], rax
mov qword [rbp + 0x9b8], 8
call fcn.1400087e8
mov rdx, rdi
mov rcx, r13
test rax, rax
je 0x14000760a
mov rdx, rax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x140007601
lea eax, [rcx + 1]
mov qword [rbp + 0x9c0], rdx
mov dword [rbp + 0x9c8], eax
lea rax, str.SedLauncher
mov qword [rbp + 0x9d0], rax
lea rax, [rsp + 0x34]
mov qword [rbp + 0x9e0], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x9f0], rax
mov dword [rbp + 0x9cc], r13d
mov qword [rbp + 0x9d8], 0x18
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x9e8], 4
mov dword [rsp + 0x30], r14d
mov qword [rbp + 0x9f8], 4
lea rax, [rbp + 0x980]
mov rcx, rsi
mov qword [rsp + 0x28], rax
lea rdx, [0x140029e07]
mov dword [rsp + 0x20], 8
call fcn.140001078
lea rsi, [fcn.140008c60]
xor r8d, r8d
mov rdx, rsi
lea r9, str.Attempting_to_load_Application_DLL_file
xor ecx, ecx
call fcn.140006cf4
lea rcx, [rsp + 0x50]
call fcn.140014014
test al, al
je 0x140007bb8
lea r9, str.Application_DLL_file_loading_Successful
xor r8d, r8d
mov rdx, rsi
xor ecx, ecx
call fcn.140006cf4
mov al, byte [0x140032aa8]
test al, al
jne 0x140007935
mov rcx, qword [rsp + 0x50]
lea rdx, str.ExecuteShell
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x140007bb1
call fcn.140008e78
mov rbx, rax
cmp dword [rax], r14d
jbe 0x140007801
movabs rax, 0x800000000001
test qword [rbx + 0x10], rax
je 0x140007801
mov rcx, qword [rbx + 0x18]
and rcx, rax
cmp rcx, qword [rbx + 0x18]
jne 0x140007801
lea rax, str.2019.8D
mov qword [rbp + 0x9a8], 8
mov qword [rbp + 0x9a0], rax
call fcn.1400084d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x9b0], rax
mov qword [rbp + 0x9b8], 8
call fcn.1400087e8
mov rdx, rdi
mov rcx, r13
test rax, rax
je 0x140007792
mov rdx, rax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x140007789
lea eax, [rcx + 1]
mov qword [rbp + 0x9c0], rdx
mov dword [rbp + 0x9c8], eax
lea rax, str.SedLauncher
mov qword [rbp + 0x9d0], rax
lea rax, [rsp + 0x34]
mov qword [rbp + 0x9e0], rax
mov dword [rbp + 0x9cc], r13d
mov qword [rbp + 0x9d8], 0x18
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x9e8], 4
lea rax, [rbp + 0x980]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rdx, [0x14002a03e]
mov dword [rsp + 0x20], 7
call fcn.140001078
xor r8d, r8d
xor edx, edx
mov rcx, r15
mov rax, rsi
call qword [0x1400217b8]
mov dword [rsp + 0x38], eax
neg eax
sbb eax, eax
and r14d, eax
call fcn.140008e78
mov rbx, rax
cmp dword [rax], 1
jbe 0x140007bb1
movabs rax, 0x800000000001
test qword [rbx + 0x10], rax
je 0x140007bb1
mov rcx, qword [rbx + 0x18]
and rcx, rax
cmp rcx, qword [rbx + 0x18]
jne 0x140007bb1
lea rax, str.2019.8D
mov qword [rbp + 0x9a8], 8
mov qword [rbp + 0x9a0], rax
call fcn.1400084d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x9b0], rax
mov qword [rbp + 0x9b8], 8
call fcn.1400087e8
mov rcx, r13
test rax, rax
je 0x1400078aa
mov rdi, rax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x1400078a1
lea eax, [rcx + 1]
mov qword [rbp + 0x9c0], rdi
mov dword [rbp + 0x9c8], eax
lea rax, str.SedLauncher
mov qword [rbp + 0x9d0], rax
lea rax, [rsp + 0x34]
mov qword [rbp + 0x9e0], rax
lea rax, [rsp + 0x38]
mov qword [rbp + 0x9f0], rax
mov dword [rbp + 0x9cc], r13d
mov qword [rbp + 0x9d8], 0x18
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x9e8], 4
mov qword [rbp + 0x9f8], 4
lea rax, [rbp + 0x980]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rdx, [0x140029c65]
mov dword [rsp + 0x20], 8
call fcn.140001078
jmp 0x140007bb1
lea r9, str.Gathering_Information_for_plugins_to_run
movzx ecx, al
xor r8d, r8d
mov rdx, rsi
call fcn.140006cf4
call fcn.140008e78
mov rsi, rax
movabs r15, 0x800000000001
cmp dword [rax], r14d
jbe 0x140007a49
test qword [rax + 0x10], r15
je 0x140007a49
mov rcx, qword [rax + 0x18]
and rcx, r15
cmp rcx, qword [rax + 0x18]
jne 0x140007a49
lea rax, str.2019.8D
mov qword [rbp + 0x9a8], 8
mov qword [rbp + 0x9a0], rax
call fcn.1400084d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x9b0], rax
mov qword [rbp + 0x9b8], 8
call fcn.1400087e8
mov rdx, rdi
mov rcx, r13
test rax, rax
je 0x1400079da
mov rdx, rax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x1400079d1
lea eax, [rcx + 1]
mov qword [rbp + 0x9c0], rdx
mov dword [rbp + 0x9c8], eax
lea rax, str.SedLauncher
mov qword [rbp + 0x9d0], rax
lea rax, [rsp + 0x34]
mov qword [rbp + 0x9e0], rax
mov dword [rbp + 0x9cc], r13d
mov qword [rbp + 0x9d8], 0x18
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x9e8], 4
lea rax, [rbp + 0x980]
mov rcx, rsi
mov qword [rsp + 0x28], rax
lea rdx, [0x14002a03e]
mov dword [rsp + 0x20], 7
call fcn.140001078
lea rax, [rsp + 0x70]
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0x70]
lea rax, [rsp + 0x50]
mov qword [rbp + 0x78], rax
lea rax, [rsp + 0x78]
mov qword [rbp + 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x88], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x90], rax
call fcn.140007e30
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x140007aa8
movzx ecx, byte [0x140032aa8]
lea r9, str.Failed_to_run_some_all_of_the_plugins
mov r8d, eax
mov rdx, rbx
call fcn.140006cf4
call fcn.140008e78
mov rbx, rax
cmp dword [rax], r14d
jbe 0x140007bb1
test qword [rax + 0x10], r15
je 0x140007bb1
mov rcx, qword [rax + 0x18]
and rcx, r15
cmp rcx, qword [rax + 0x18]
jne 0x140007bb1
lea rax, str.2019.8D
mov qword [rbp + 0x9a8], 8
mov qword [rbp + 0x9a0], rax
call fcn.1400084d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x9b0], rax
mov qword [rbp + 0x9b8], 8
call fcn.1400087e8
mov rcx, r13
test rax, rax
je 0x140007b2b
mov rdi, rax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x140007b22
lea eax, [rcx + 1]
mov qword [rbp + 0x9c0], rdi
mov dword [rbp + 0x9c8], eax
lea rax, str.SedLauncher
mov qword [rbp + 0x9d0], rax
lea rax, [rsp + 0x34]
mov qword [rbp + 0x9e0], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x9f0], rax
mov dword [rbp + 0x9cc], r13d
mov qword [rbp + 0x9d8], 0x18
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x9e8], 4
mov qword [rbp + 0x9f8], 4
lea rax, [rbp + 0x980]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rdx, [0x140029c65]
mov dword [rsp + 0x20], 8
call fcn.140001078
call fcn.140014120
jmp 0x140007c0e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx r8d, ax
lea r9, str.Application_DLL_file_loading_Failed
or r8d, 0x80070000
mov rdx, rbx
test eax, eax
cmovle r8d, eax
xor ecx, ecx
jmp 0x140007c09
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx r8d, ax
lea r9, str.Application_Loading_failed
or r8d, 0x80070000
lea rdx, [fcn.140008a40]
test eax, eax
cmovle r8d, eax
movzx ecx, byte [0x140032aa8]
call fcn.140006cf4
call fcn.140008994
lea rcx, [rsp + 0x58]
call fcn.140008428
lea rcx, [rbp + 0x960]
call fcn.14000b958
lea rcx, [rbp + 0x940]
call fcn.14000b958
lea rcx, [rbp + 0x920]
call fcn.14000b958
lea rcx, [rbp + 0x900]
call fcn.14000b958
lea rcx, [rbp + 0x8e0]
call fcn.14000b958
lea rcx, [rbp + 0x8c0]
call fcn.14000b958
lea rcx, [rbp + 0x8a0]
call fcn.14000b958
lea rcx, [rbp + 0x880]
call fcn.14000b958
lea rcx, [rbp + 0x860]
call fcn.14000b958
lea rcx, [rbp + 0x840]
call fcn.14000b958
lea rcx, [rbp + 0x820]
call fcn.14000b958
lea rcx, [rbp + 0x800]
call fcn.14000b958
lea rcx, [rbp + 0x7e0]
call fcn.14000b958
lea rcx, [rbp + 0x7c0]
call fcn.14000b958
lea rcx, [rbp + 0x7a0]
call fcn.14000b958
lea rcx, [rbp + 0x780]
call fcn.14000b958
lea rcx, [rbp + 0x5b0]
call fcn.140012920
lea rcx, [rbp + 0x5a0]
call fcn.140012998
lea rcx, [rbp + 0x1b8]
call fcn.14000b958
lea rcx, [rbp + 0x198]
call fcn.14000b958
lea rcx, [rbp + 0x178]
call fcn.14000b958
lea rcx, [rbp + 0x158]
call fcn.14000b958
lea rcx, [rbp - 0x70]
call fcn.140011740
lea rcx, [rbp + 0x48]
call fcn.140012920
lea rcx, [rbp + 0x38]
call fcn.140012998
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x140007d5a
mov qword [rbp + 0x28], r13
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x1400217b8]
mov rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
test r12b, r12b
je 0x140007df1
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
lea rcx, [rbp + 0x98]
call fcn.14000b958
mov eax, r14d
mov rcx, qword [rbp + 0xc90]
xor rcx, rsp
call fcn.14001c430
lea r11, [rsp + 0xda0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret