Function at 0x180003010
Capabilities:
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x1800786a0]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov rsi, rcx
mov qword [rsp + 0x78], rcx
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e66
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
xor edx, edx
lea r8d, [rdx + 0x20]
mov rcx, qword [rsi + 0x148]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rsi + 0x150], rax
lea rdi, [rsi + 0x140]
lea rdx, [rsi + 0x148]
mov rcx, rdi
call fcn.180005620
mov rcx, qword [rdi]
cmp dword [rcx - 8], 1
jle 0x1800030b7
mov edx, dword [rcx - 0x10]
mov rcx, rdi
call fcn.180005e20
mov rcx, qword [rdi]
call qword [sym.imp.SHLWAPI.dll_PathStripPathW]
mov rcx, qword [rdi]
xor r13d, r13d
test rcx, rcx
jne 0x1800030cd
mov eax, r13d
jmp 0x1800030de
movsxd rdx, dword [rcx - 0xc]
call fcn.18003feac
test eax, eax
js 0x180003e5b
mov rcx, qword [rdi]
cmp eax, dword [rcx - 0xc]
jg 0x180003e5b
mov dword [rcx - 0x10], eax
mov ecx, eax
mov rax, qword [rdi]
mov word [rax + rcx*2], r13w
cmp qword [rsi + 0x150], r13
jne 0x18000317f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Mapping_file_error__code_d
lea rcx, [rsp + 0x40]
call fcn.180005bb0
xor r8d, r8d
lea edx, [r8 + 0x10]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.18000d61c
nop
lea rdx, [rbx - 0x18]
mov r12, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x18000314f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.180038b70
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rsi + 0x138], r13d
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e71
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e7c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e87
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e92
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
mov ecx, r13d
mov rdx, qword [rsi + 0x150]
mov r9d, 0x5a4d
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
mov r8, rdx
sub r8, rax
mov qword [rsp + 0x50], r8
mov r12, 0xffffffffffffffff
cmp word [r8], r9w
je 0x18000324e
inc ecx
cmp ecx, 2
jle 0x180003220
lea rcx, str.Invalid_PE_File_
jmp 0x180003daa
mov rcx, r8
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov rcx, rax
mov qword [rsp + 0x70], rax
cmp dword [rax], 0x4550
je 0x180003273
lea rcx, str.Invalid_NT_Header_
jmp 0x180003daa
movzx eax, word [rax + 4]
mov edx, 0x200
mov r8d, 0x8664
cmp ax, r8w
je 0x180003294
cmp ax, dx
je 0x180003294
mov r14, qword [rsp + 0x68]
jmp 0x1800032a1
mov dword [rsi + 0x138], 1
mov r14, rcx
mov eax, 0x2000
test word [rcx + 0x16], ax
jne 0x1800032b8
lea rcx, str.The_target_is_not_a_dynamic_link_library_
jmp 0x180003daa
cmp dword [rsi + 0x138], 0
je 0x1800032e7
cmp dword [r14 + 0x88], 0
je 0x180003da3
cmp dword [r14 + 0x8c], 0
je 0x180003da3
movzx edi, word [r14 + 0x14]
add rdi, r14
jmp 0x180003308
cmp dword [rcx + 0x88], 0
je 0x180003da3
cmp dword [rcx + 0x8c], 0
je 0x180003da3
movzx edi, word [rcx + 0x14]
add rdi, rcx
add rdi, 0x18
lea r15, [rsi + 0x158]
mov rax, qword [r15]
mov qword [r15 + 8], rax
cmp dword [rsi + 0x138], 0
movzx esi, r13w
je 0x18000337b
cmp r13w, word [r14 + 6]
jae 0x1800033c8
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x18000335b
movups xmm0, xmmword [rdi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movsd xmm0, qword [rdi + 0x20]
movsd qword [rdx + 0x20], xmm0
add qword [r15 + 8], 0x28
jmp 0x180003366
mov r8, rdi
mov rcx, r15
call fcn.1800050f0
add rdi, 0x28
inc si
cmp si, word [r14 + 6]
jb 0x180003332
mov rcx, qword [rsp + 0x70]
jmp 0x1800033c8
cmp r13w, word [rcx + 6]
jae 0x1800033c8
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x1800033ab
movups xmm0, xmmword [rdi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movsd xmm0, qword [rdi + 0x20]
movsd qword [rdx + 0x20], xmm0
add qword [r15 + 8], 0x28
jmp 0x1800033bb
mov r8, rdi
mov rcx, r15
call fcn.1800050f0
mov rcx, qword [rsp + 0x70]
add rdi, 0x28
inc si
cmp si, word [rcx + 6]
jb 0x180003382
mov rsi, qword [rsp + 0x78]
cmp dword [rsi + 0x138], 0
je 0x1800033df
mov ecx, dword [r14 + 0x88]
jmp 0x1800033e5
mov ecx, dword [rcx + 0x88]
mov r14, qword [rsp + 0x50]
add ecx, r14d
mov eax, ecx
mov qword [rsp + 0x50], rax
mov edi, dword [rcx + 0xc]
add rdi, r14
mov edx, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x18000346c
lea rax, [rbp + 0x48]
mov qword [rbp + 0x40], rax
mov r8d, 3
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.180004af0
nop
mov rdx, qword [rbp + 0x40]
test rdx, rdx
jne 0x180003435
mov eax, r13d
jmp 0x18000344a
mov rax, r12
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003440
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.1800057c0
nop
lea rax, [rbp + 0x48]
mov rcx, qword [rbp + 0x40]
cmp rcx, rax
je 0x18000348d
call fcn.1800433e8
jmp 0x18000348d
lea rdx, [0x180069068]
mov rax, r12
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003476
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.1800057c0
lea rdi, [rsi + 0x170]
mov qword [rbp - 0x70], rdi
mov rdx, qword [rdi + 8]
mov rcx, qword [rdi]
call fcn.1800015d0
mov rax, qword [rdi]
mov qword [rdi + 8], rax
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax + 0x1c]
add rcx, r14
mov qword [rbp - 0x68], rcx
mov eax, dword [rax + 0x20]
add rax, r14
mov qword [rsp + 0x68], rax
mov ecx, 0x68
call fcn.180006840
mov rdi, rax
test rax, rax
je 0x180003517
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e50
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rdi + 0x18], rax
call fcn.18000ddb8
mov rcx, rax
test rax, rax
je 0x180003e50
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rdi + 0x60], rax
jmp 0x18000351a
mov rdi, r13
mov esi, r13d
mov dword [rsp + 0x48], r13d
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x14], r13d
jbe 0x180003882
lea r9, [rdi + 0x18]
mov dword [rdi], 1
mov ecx, dword [rax + 0x10]
add ecx, esi
mov dword [rdi + 4], ecx
mov eax, esi
mov rcx, qword [rbp - 0x68]
mov ecx, dword [rcx + rax*4]
mov dword [rdi + 8], ecx
mov qword [rdi + 0xc], r13
mov r8d, 3
lea rdx, [0x180069078]
mov rcx, r9
call fcn.1800057c0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x48], r13
mov qword [rdi + 0x50], r13
mov dword [rdi + 0x58], r13d
cmp dword [rdi + 8], eax
je 0x18000386e
mov rdx, qword [rsp + 0x50]
mov eax, dword [rdx + 0x24]
add rax, r14
mov ecx, r13d
mov edx, dword [rdx + 0x18]
test edx, edx
je 0x18000363f
cmp si, word [rax]
je 0x1800035bb
add rax, 2
inc ecx
cmp ecx, edx
jb 0x1800035a7
jmp 0x18000363f
mov dword [rdi], r13d
movzx eax, word [rax]
mov dword [rdi + 0xc], eax
mov eax, ecx
mov rcx, qword [rsp + 0x68]
mov ecx, dword [rcx + rax*4]
mov dword [rdi + 0x10], ecx
lea rdx, [r14 + rcx]
lea rax, [rbp + 0x158]
mov qword [rbp + 0x150], rax
mov r8d, 3
lea rcx, [rbp + 0x150]
call fcn.180004af0
nop
mov rdx, qword [rbp + 0x150]
test rdx, rdx
jne 0x180003607
mov eax, r13d
jmp 0x18000361a
mov rax, r12
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003610
mov r8d, eax
lea rcx, [rdi + 0x18]
call fcn.1800057c0
nop
lea rax, [rbp + 0x158]
mov rcx, qword [rbp + 0x150]
cmp rcx, rax
je 0x18000363f
call fcn.1800433e8
mov dword [rdi + 0x48], 1
mov eax, dword [str.ERROR_]
mov dword [rdi + 0x20], eax
movzx eax, word [0x180069084]
mov word [rdi + 0x24], ax
movzx eax, byte [0x180069086]
mov byte [rdi + 0x26], al
mov rdx, qword [r15]
mov r9, qword [r15 + 8]
cmp rdx, r9
je 0x18000383f
mov r8d, dword [rdi + 8]
nop dword [rax + rax]
movups xmm1, xmmword [rdx]
movups xmm3, xmmword [rdx + 0x10]
movsd xmm2, qword [rdx + 0x20]
movsd qword [rbp - 0x40], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rcx, xmm0
shr rcx, 0x20
cmp r8d, ecx
jb 0x1800036bc
movdqa xmm0, xmm1
psrldq xmm0, 8
movd eax, xmm0
add ecx, eax
cmp r8d, ecx
jbe 0x1800036cb
add rdx, 0x28
cmp rdx, r9
je 0x18000383f
jmp 0x180003680
movups xmmword [rdi + 0x20], xmm1
movups xmmword [rdi + 0x30], xmm3
movsd qword [rdi + 0x40], xmm2
mov eax, dword [rbp - 0x3c]
bt eax, 0x1d
jae 0x1800036f1
mov dword [rdi + 0x4c], 1
mov dword [rdi + 0x48], r13d
jmp 0x18000383f
bt eax, 0x1e
jae 0x180003a4c
mov edx, 8
test eax, eax
js 0x1800037b4
lea rsi, [r14 + r8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180003968
lea rdx, [0x180069088]
mov rcx, rsi
call fcn.18003adb4
test rax, rax
je 0x18000391c
mov dword [rdi + 0x50], 1
mov dword [rdi + 0x48], r13d
lea rax, [rbp + 0x268]
mov qword [rbp + 0x260], rax
mov r8d, 3
mov rdx, rsi
lea rcx, [rbp + 0x260]
call fcn.180004af0
nop
lea rcx, [rdi + 0x60]
mov rdx, qword [rbp + 0x260]
test rdx, rdx
jne 0x180003779
mov eax, r13d
jmp 0x18000378a
mov rax, r12
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003780
mov r8d, eax
call fcn.1800057c0
nop
lea rax, [rbp + 0x268]
mov rcx, qword [rbp + 0x260]
cmp rcx, rax
je 0x18000383b
call fcn.1800433e8
jmp 0x18000383b
mov dword [rdi + 0x54], 1
mov dword [rdi + 0x48], r13d
mov rcx, qword [rsp + 0x78]
lea rsi, [r8 + r14]
cmp dword [rcx + 0x138], 0
mov rcx, rsi
je 0x180003801
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800039b4
cmp qword [rsi], 0
je 0x18000382e
mov eax, dword [rdi + 0x58]
nop dword [rax + rax]
inc eax
mov dword [rdi + 0x58], eax
lea rsi, [rsi + 8]
cmp qword [rsi], 0
jne 0x1800037f0
jmp 0x18000382e
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180003a00
cmp dword [rsi], eax
je 0x18000382e
mov eax, dword [rdi + 0x58]
nop word [rax + rax]
inc eax
mov dword [rdi + 0x58], eax
lea rsi, [rsi + 4]
cmp dword [rsi], 0
jne 0x180003820
cmp dword [rdi + 0x58], 0
jne 0x18000383b
mov dword [rdi + 0x58], 1
mov esi, dword [rsp + 0x48]
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx + 8]
cmp rax, qword [rcx + 0x10]
je 0x180003863
mov rdx, rdi
mov rcx, rax
call fcn.180002f50
mov rax, qword [rbp - 0x70]
add qword [rax + 8], 0x68
jmp 0x18000386e
mov r8, rdi
mov rdx, rax
call fcn.180004e70
inc esi
mov dword [rsp + 0x48], esi
mov rax, qword [rsp + 0x50]
cmp esi, dword [rax + 0x14]
jb 0x180003531
test rdi, rdi
je 0x1800038d5
mov rdx, qword [rdi + 0x60]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800038a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rdi + 0x18]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800038c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, 0x68
mov rcx, rdi
call fcn.180001760
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x70]
movzx r8d, word [rdi + 4]
cmp r8d, 0x14c
je 0x180003a9c
cmp r8d, 0x200
je 0x180003a7f
cmp r8d, 0x8664
je 0x180003a69
lea rdx, str.Machine___d
lea rcx, [rsp + 0x58]
call fcn.180005bb0
jmp 0x180003abd
lea rcx, [rdi + 0x18]
call fcn.180005be0
mov qword [rsp + 0x20], rax
mov r9d, dword [rdi + 8]
mov r8d, dword [rdi + 4]
lea rdx, str.Unknown_.rdata_section_data__continue__r_nord:_d_r_nfunc_rva:_08X_r_nname:_s
lea rcx, [rsp + 0x40]
call fcn.180005bb0
lea rcx, [rsp + 0x40]
call fcn.180005be0
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 0x10]
call fcn.18000d61c
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rdi + 0x18]
call fcn.180005be0
mov qword [rsp + 0x20], rax
mov r9d, dword [rdi + 8]
mov r8d, dword [rdi + 4]
lea rdx, str.Try_to_read_.rdata_section_data_exception__continue__r_nord:_d_r_nfunc_rva:_08X_r_nname:_s
lea rcx, [rsp + 0x40]
call fcn.180005bb0
lea rcx, [rsp + 0x40]
call fcn.180005be0
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 0x10]
call fcn.18000d61c
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rdi + 0x18]
call fcn.180005be0
mov qword [rsp + 0x20], rax
mov r9d, dword [rdi + 8]
mov r8d, dword [rdi + 4]
lea rdx, str.Try_to_read_.data_section_data_exception__r_nord:_d_r_nfunc_rva:_08X_r_nname:_s
lea rcx, [rsp + 0x40]
call fcn.180005bb0
lea rcx, [rsp + 0x40]
call fcn.180005be0
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 0x10]
call fcn.18000d61c
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rdi + 0x18]
call fcn.180005be0
mov qword [rsp + 0x20], rax
mov r9d, dword [rdi + 8]
mov r8d, dword [rdi + 4]
lea rdx, str.Try_to_read_.data_section_data_exception__r_nord:_d_r_nfunc_rva:_08X_r_nname:_s
lea rcx, [rsp + 0x40]
call fcn.180005bb0
lea rcx, [rsp + 0x40]
call fcn.180005be0
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 0x10]
call fcn.18000d61c
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor r8d, r8d
xor edx, edx
lea rcx, str.Unrecognized_export_function_
call fcn.18000d61c
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, str.IMAGE_FILE_MACHINE_AMD64
mov rax, r12
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003a73
jmp 0x180003ab0
lea rdx, str.IMAGE_FILE_MACHINE_IA64
mov rax, r12
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003a90
jmp 0x180003ab0
lea rdx, str.IMAGE_FILE_MACHINE_I386
mov rax, r12
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003aa6
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.1800057c0
lea rcx, [rdi + 8]
call fcn.180043038
test rax, rax
je 0x180003af9
mov rcx, rax
call fcn.180043360
mov rdx, rax
test rax, rax
je 0x180003aed
mov rax, r12
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x180003ae0
mov r13d, eax
mov r8d, r13d
lea rcx, [rbp - 0x78]
call fcn.1800057c0
mov rsi, qword [rsp + 0x78]
lea rcx, [rsi + 0x270]
mov rdx, qword [rsp + 0x60]
call fcn.180016ab0
lea rcx, [rsi + 0x358]
mov rdx, qword [rsp + 0x58]
call fcn.180016ab0
lea rcx, [rsi + 0x440]
mov rdx, qword [rbp - 0x78]
call fcn.180016ab0
lea rcx, [rsi + 0x528]
mov rdx, qword [rsi + 0x148]
call fcn.180016ab0
mov rdx, qword [rsi + 0x148]
lea rcx, [rdx - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x180003ba5
cmp dword [rdi + 0x10], 0
jl 0x180003b92
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x180003b92
call fcn.1800056b0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x180003b87
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rbx, 0x18
mov qword [rsp + 0x40], rbx
jmp 0x180003ba5
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.1800057c0
mov rbx, qword [rsp + 0x40]
lea rdx, str..cpp
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRenameExtensionW]
lea rcx, [rsi + 0x610]
mov rdx, rbx
call fcn.180016ab0
mov rbx, qword [rsi + 0x170]
mov rdi, qword [rsi + 0x178]
cmp rbx, rdi
je 0x180003d74
nop dword [rax + rax]
mov eax, dword [rbx]
mov dword [rbp - 0x30], eax
mov eax, dword [rbx + 4]
mov dword [rbp - 0x2c], eax
mov eax, dword [rbx + 8]
mov dword [rbp - 0x28], eax
mov eax, dword [rbx + 0xc]
mov dword [rbp - 0x24], eax
mov eax, dword [rbx + 0x10]
mov dword [rbp - 0x20], eax
mov rcx, qword [rbx + 0x18]
sub rcx, 0x18
call fcn.1800056b0
add rax, 0x18
mov qword [rbp - 0x18], rax
movups xmm0, xmmword [rbx + 0x20]
movaps xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rbx + 0x30]
movaps xmmword [rbp], xmm1
movsd xmm0, qword [rbx + 0x40]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [rbx + 0x48]
mov dword [rbp + 0x18], eax
mov eax, dword [rbx + 0x4c]
mov dword [rbp + 0x1c], eax
mov eax, dword [rbx + 0x50]
mov dword [rbp + 0x20], eax
mov eax, dword [rbx + 0x54]
mov dword [rbp + 0x24], eax
mov eax, dword [rbx + 0x58]
mov dword [rbp + 0x28], eax
mov rcx, qword [rbx + 0x60]
sub rcx, 0x18
call fcn.1800056b0
add rax, 0x18
mov qword [rbp + 0x30], rax
cmp dword [rbp + 0x1c], 0
je 0x180003c71
lea rdx, str._04X____08X____s___hs_r_n
jmp 0x180003cf4
cmp dword [rbp + 0x20], 0
je 0x180003ca9
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x28]
mov r8d, dword [rbp - 0x2c]
lea rdx, str._04X____08X____s___hs___s_r_n
lea rcx, [rsp + 0x40]
call fcn.180005bb0
jmp 0x180003d18
cmp dword [rbp + 0x24], 0
je 0x180003ce3
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x28]
mov r8d, dword [rbp - 0x2c]
lea rdx, str._04X____08X____s___hs__DATA__d__r_n
lea rcx, [rsp + 0x40]
call fcn.180005bb0
jmp 0x180003d18
cmp dword [rbp + 0x18], 0
je 0x180003d86
lea rdx, str._04X____08X____s___hs______r_n
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x28]
mov r8d, dword [rbp - 0x2c]
lea rcx, [rsp + 0x40]
call fcn.180005bb0
mov rdx, qword [rsp + 0x40]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.180005bf0
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003d49
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003d67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rbx, 0x68
cmp rbx, rdi
jne 0x180003be0
lea rcx, [rsi + 0x188]
mov rdx, qword [rbp - 0x80]
call fcn.180016ab0
jmp 0x180003db6
xor r8d, r8d
xor edx, edx
lea rcx, [0x180069468]
call fcn.18000d61c
mov ecx, 0xfffffffe
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.Export_table_does_not_exist_
xor r8d, r8d
lea edx, [r8 + 0x10]
call fcn.18000d61c
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003de3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003e02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003e22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180003e42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
jmp 0x18000313a
mov ecx, 0x80004005
call fcn.180006300
nop
mov ecx, 0x80070057
call fcn.180006300
nop
mov ecx, 0x80004005
call fcn.180006300
nop
mov ecx, 0x80004005
call fcn.180006300
nop
mov ecx, 0x80004005
call fcn.180006300
nop
mov ecx, 0x80004005
call fcn.180006300
nop
mov ecx, 0x80004005
call fcn.180006300
int3