Function at 0x140027780
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2250]
mov eax, 0x2350
call fcn.140216080
sub rsp, rax
mov rax, qword [0x14033e810]
xor rax, rsp
mov qword [rbp + 0x2240], rax
mov qword [rbp + 8], rdx
mov r12, rcx
mov qword [rbp - 0x20], rcx
xor r15d, r15d
mov r14d, r15d
mov dword [rsp + 0x60], r15d
mov ebx, dword [rbp + 0x22c0]
or ebx, 0x20019
mov dword [rbp - 0x78], ebx
mov rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.14001fc70
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140028464
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [0x1402e82f0]
lea rsi, [r15 - 1]
cmp rdx, 0x10000
jae 0x14002782b
movzx edx, dx
lea rcx, [rsp + 0x68]
call fcn.14000d610
jmp 0x140027848
mov rax, rsi
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027830
mov r8d, eax
lea rcx, [rsp + 0x68]
call fcn.14000df90
nop
lea rcx, [rbp - 0x68]
call fcn.140032350
lea rdi, [0x1402ed690]
cmp eax, 1
jne 0x140027a5b
cmp r12, 0xffffffff80000001
jne 0x140027a5b
cmp dword [rbp - 0x68], 0
jne 0x140027a5b
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x14002846f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x50]
call fcn.140033b90
cmp eax, 1
jne 0x140027a39
lea rcx, [rbp + 0xa0]
call fcn.140032840
cmp eax, 1
jne 0x140027a39
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x1400278d1
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x28], r15
cmp qword [rbp + 0x30], 0
je 0x140027929
cmp dword [rbp + 0x38], 0
jne 0x140027929
mov qword [rbp + 0x30], r15
lea rcx, [rbp + 0x40]
call fcn.14000e0b0
lea rcx, [rbp + 0x48]
call fcn.14000e0b0
lea rcx, [rbp + 0x50]
call fcn.14000e0b0
lea rcx, [rbp + 0x58]
call fcn.14000e0b0
mov qword [rbp + 0x28], r15
mov dword [rbp + 0x38], r15d
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], r15
mov dword [rbp + 0x80], r15d
mov qword [rbp + 0x30], r15
xor r8d, r8d
mov r12, 0xffffffff80000003
mov qword [rbp - 0x20], r12
mov rdx, r12
lea rcx, [rbp + 0x20]
call fcn.140020050
nop
mov rbx, qword [rbp - 0x50]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14002795f
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140027971
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14002847a
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
mov dword [rsp + 0x60], 2
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x140027993
mov dword [rsp + 0x20], eax
mov r9, rdi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.1400220f0
mov rdx, qword [rbp + 0x10]
lea rbx, [rdx - 0x18]
mov rdi, qword [rsp + 0x68]
add rdi, 0xffffffffffffffe8
cmp rbx, rdi
je 0x140027a19
mov eax, dword [rdi + 0x10]
shr eax, 0x1f
test al, al
jne 0x140027a0b
mov rax, qword [rdi]
cmp qword [rbx], rax
jne 0x140027a0b
mov rcx, rbx
call fcn.14000de80
mov r14, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140027a00
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsp + 0x68], rax
jmp 0x140027a19
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.14000df90
mov dword [rsp + 0x60], r15d
mov eax, esi
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x140027a36
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rbp - 0x78]
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027a56
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14d, dword [rsp + 0x60]
lea rdx, [0x1402eddb0]
mov rax, rsi
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027a65
mov r8d, eax
lea rcx, [rsp + 0x68]
call fcn.1400157c0
mov r8d, ebx
mov rbx, qword [rsp + 0x68]
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.1400210b0
cmp eax, 1
jne 0x140028407
mov dword [rsp + 0x64], r15d
mov r13d, eax
cmp dword [rbp + 0x60], 0
jbe 0x14002840a
mov rdi, qword [rbp + 0xa0]
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140028459
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x1400284c7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x80]
mov edx, r15d
lea rcx, [rbp + 0x20]
call fcn.140020810
cmp eax, 1
jne 0x1400283c3
mov rdx, r12
lea rcx, [rbp + 0xb0]
call fcn.14001fc70
nop
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140027b31
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140027b41
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
nop
test rax, rax
je 0x1400284bc
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
or r14d, 4
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x20], r13d
lea r9, [0x1402ed690]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400220f0
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.140029cf0
nop
and r14d, 0xfffffffb
mov dword [rsp + 0x60], r14d
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027bb9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x1400284b1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x1400284a6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov r8d, dword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0xb0]
call fcn.1400210b0
cmp eax, 1
jne 0x14002835b
xor r12b, r12b
mov rcx, qword [rbp - 0x70]
add rcx, 0xffffffffffffffe8
call fcn.14000de80
lea rbx, [rax + 0x18]
mov qword [rbp - 0x40], rbx
movsxd r14, dword [rbx - 0x10]
test r14d, r14d
js 0x14002849b
mov ecx, r13d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140027c5a
mov edx, r14d
lea rcx, [rbp - 0x40]
call fcn.14000df10
mov rbx, qword [rbp - 0x40]
lea eax, [r14 + 1]
movsxd rdx, eax
mov rcx, rbx
call fcn.14024c294
cmp r14d, dword [rbx - 0xc]
jg 0x14002849b
mov dword [rbx - 0x10], r14d
xor ecx, ecx
mov word [rbx + r14*2], cx
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x90]
mov r14, qword [rbp + 8]
mov rcx, r14
call fcn.140029b40
nop
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140027cb0
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x90]
cmp rbx, qword [r14]
je 0x140027e68
mov rax, qword [rbx + 0x28]
mov byte [rax + 0xe8], 1
mov r12b, 1
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x10c]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x140027d52
movzx eax, word [rbp + 0x120]
mov ecx, 0x7b2
sub ax, cx
mov ecx, 0x406
cmp ax, cx
ja 0x140027d46
movzx eax, word [rbp + 0x122]
dec ax
cmp ax, 0xb
ja 0x140027d46
movzx eax, word [rbp + 0x126]
dec ax
cmp ax, 0x1e
ja 0x140027d46
cmp word [rbp + 0x128], 0x17
ja 0x140027d46
cmp word [rbp + 0x12a], 0x3b
ja 0x140027d46
cmp word [rbp + 0x12c], 0x3b
ja 0x140027d46
mov rax, qword [rbp + 0x10c]
jmp 0x140027d58
xor r15d, r15d
mov qword [rbp - 0x10], r15
mov eax, r15d
jmp 0x140027d58
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp - 0x38], rax
mov rcx, qword [rbx + 0x28]
add rcx, 0x78
lea rdx, [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jne 0x140027e43
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027d95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027db3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027dd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0xb0]
call fcn.14001feb0
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027dfc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027e19
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15d, dword [rsp + 0x64]
inc r15d
mov dword [rsp + 0x64], r15d
mov rbx, qword [rsp + 0x68]
cmp r15d, dword [rbp + 0x60]
jae 0x14002840a
mov r14d, dword [rsp + 0x60]
mov r12, qword [rbp - 0x20]
jmp 0x140027ab2
mov rax, qword [rbx + 0x28]
mov rcx, qword [rax + 0x10]
sub rcx, 0x18
call fcn.14000de80
add rax, 0x18
mov qword [rbp], rax
lea rdx, [rbp]
mov rcx, r14
call fcn.14003fbe0
xor r15d, r15d
mov r14d, r15d
mov dword [rbp - 0x74], r15d
mov dword [rbp - 0x64], 4
mov dword [rbp - 0x60], 4
mov rax, qword [rbp + 0xb0]
lea rcx, [rbp - 0x64]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x74]
lea r8, [rbp - 0x60]
lea rdx, str.WindowsInstaller
lea rcx, [rbp + 0xb0]
call qword [rax + pe_nt_image_headers64]
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140028490
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
cmp dword [rbp - 0x74], 1
jne 0x140027eda
mov r14d, r13d
jmp 0x140028124
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140028485
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x98], rax
mov dword [rbp - 0x5c], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x240]
call fcn.140241ba0
mov dword [rbp - 0x58], r13d
mov rax, qword [rbp + 0xb0]
lea rcx, [rbp - 0x5c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x240]
lea r8, [rbp - 0x58]
lea rdx, str.UninstallString
lea rcx, [rbp + 0xb0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x140027f73
lea rcx, [rbp + 0x240]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140027f60
lea rdx, [rbp + 0x240]
jmp 0x140027ff1
lea rcx, [rsp + 0x78]
call fcn.14000e0b0
mov dword [rbp - 0x54], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x1240]
call fcn.140241ba0
mov dword [rsp + 0x70], r13d
mov rax, qword [rbp + 0xb0]
lea rcx, [rbp - 0x54]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x1240]
lea r8, [rsp + 0x70]
lea rdx, str.UninstallTWestAnsiStrng
lea rcx, [rbp + 0xb0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x1400280f0
lea rcx, [rbp + 0x1240]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140027fe0
lea rdx, [rbp + 0x1240]
mov r8d, eax
lea rcx, [rsp + 0x78]
call fcn.14000df90
mov rbx, qword [rsp + 0x78]
lea rcx, [rbx - 0x18]
mov eax, dword [rcx + 8]
test eax, eax
je 0x1400280b4
cmp eax, 0xb
jg 0x140028026
call fcn.14000de80
add rax, 0x18
mov qword [rbp - 0x30], rax
jmp 0x140028061
mov rcx, qword [rcx]
test rcx, rcx
je 0x140028039
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140028048
call fcn.1400a2364
nop
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov r9, rax
mov r8d, VariantTimeToDosDateTime
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140015720
mov rax, qword [rbp - 0x30]
mov r8d, dword [rsp + 0x60]
or r8d, 0x10
or r8d, 1
mov dword [rsp + 0x60], r8d
mov rcx, r15
lea r9, str.MsiExec.exe
nop dword [rax]
movzx edx, word [rax + rcx*2]
cmp dx, word [r9 + rcx*2]
jne 0x1400280a7
movzx edx, word [rax + rcx*2 + 2]
cmp dx, word [r9 + rcx*2 + 2]
jne 0x1400280a7
add rcx, 2
cmp rcx, 0xc
jne 0x140028080
mov ecx, r15d
jmp 0x1400280ac
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x1400280bd
mov bl, 1
jmp 0x1400280bf
mov rax, qword [rbp - 0x30]
mov r8d, dword [rsp + 0x60]
xor bl, bl
test r8b, 1
je 0x1400280e7
and r8d, 0xfffffffe
mov dword [rsp + 0x60], r8d
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400280e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x1400280fb
mov r14d, r13d
jmp 0x1400280fb
lea rcx, [rsp + 0x78]
call fcn.14000e0b0
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002811b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x1400282ef
xor edx, edx
mov r8d, 0xfe
lea rcx, [rbp + 0x142]
call fcn.140241ba0
mov word [rbp + 0x140], r15w
lea rdx, [rbp + 0x130]
mov rbx, qword [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
js 0x1400282c4
movzx eax, word [rbx + 2]
mov word [rbp + 0x14e], ax
movzx eax, word [rbx + 4]
mov word [rbp + 0x14c], ax
movzx eax, word [rbx + 6]
mov word [rbp + 0x14a], ax
movzx eax, word [rbx + 8]
mov word [rbp + 0x148], ax
movzx eax, word [rbx + 0xa]
mov word [rbp + 0x146], ax
movzx eax, word [rbx + 0xc]
mov word [rbp + 0x144], ax
movzx eax, word [rbx + 0xe]
mov word [rbp + 0x142], ax
movzx eax, word [rbx + 0x10]
mov word [rbp + 0x140], ax
movzx eax, word [rbx + 0x14]
mov word [rbp + 0x156], ax
movzx eax, word [rbx + 0x16]
mov word [rbp + 0x154], ax
movzx eax, word [rbx + 0x18]
mov word [rbp + 0x152], ax
movzx eax, word [rbx + 0x1a]
mov word [rbp + 0x150], ax
movzx eax, word [rbx + 0x1e]
mov word [rbp + 0x15e], ax
movzx eax, word [rbx + 0x20]
mov word [rbp + 0x15c], ax
movzx eax, word [rbx + 0x22]
mov word [rbp + 0x15a], ax
movzx eax, word [rbx + 0x24]
mov word [rbp + 0x158], ax
movzx eax, word [rbx + 0x28]
mov word [rbp + 0x162], ax
movzx eax, word [rbx + 0x2a]
mov word [rbp + 0x160], ax
movzx eax, word [rbx + 0x2c]
mov word [rbp + 0x166], ax
movzx eax, word [rbx + 0x2e]
mov word [rbp + 0x164], ax
movzx eax, word [rbx + 0x32]
mov word [rbp + 0x16a], ax
movzx eax, word [rbx + 0x34]
mov word [rbp + 0x168], ax
movzx eax, word [rbx + 0x36]
mov word [rbp + 0x16e], ax
movzx eax, word [rbx + 0x38]
mov word [rbp + 0x16c], ax
movzx eax, word [rbx + 0x3a]
mov word [rbp + 0x172], ax
movzx eax, word [rbx + 0x3c]
mov word [rbp + 0x170], ax
movzx eax, word [rbx + 0x3e]
mov word [rbp + 0x176], ax
movzx eax, word [rbx + 0x40]
mov word [rbp + 0x174], ax
movzx eax, word [rbx + 0x42]
mov word [rbp + 0x17a], ax
movzx eax, word [rbx + 0x44]
mov word [rbp + 0x178], ax
movzx eax, word [rbx + 0x46]
mov word [rbp + 0x17e], ax
movzx eax, word [rbx + 0x48]
mov word [rbp + 0x17c], ax
mov word [rbp + 0x180], r15w
lea rcx, [rbp + 0x140]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400282d0
mov r8d, eax
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x18]
call fcn.14000df90
jmp 0x1400282f3
mov rbx, qword [rbp - 0x80]
mov byte [rsp + 0x50], r12b
mov eax, dword [rbp + 0x22c0]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], rdi
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x30], eax
mov rdx, qword [rbp + 8]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], r14d
mov r9, rbx
mov rbx, qword [rbp - 0x18]
mov r8, rbx
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x20]
call fcn.1400248b0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028356
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r15d, dword [rsp + 0x64]
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002837a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028398
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400283b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0xb0]
call fcn.14001feb0
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400283e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027e1e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140027e1e
mov r13d, r15d
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140028423
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
lea rcx, [rbp + 0x20]
call fcn.14001feb0
mov eax, r13d
mov rcx, qword [rbp + 0x2240]
xor rcx, rsp
call fcn.1402155d0
mov rbx, qword [rsp + 0x23a0]
add rsp, 0x2350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
int3