Function at 0x1400529c0
Capabilities:
Delete registry key

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
mov qword [rsp + 0x110], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r15, r9
mov rsi, r8
mov r13, rdx
call fcn.140069504
mov rax, qword [rax + 8]
mov qword [rsp + 0x48], rax
call fcn.1400696cc
mov rdx, rax
xor r14d, r14d
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052a25
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
or r12, 0xffffffffffffffff
test rsi, rsi
je 0x140052a83
test rsi, 0xffffffffffff0000
jne 0x140052a6f
movzx edi, si
mov ecx, edi
call fcn.1400696b8
test rax, rax
je 0x140052a9b
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140003a40
mov rbx, qword [rsp + 0x58]
jmp 0x140052a9b
xor eax, eax
mov rcx, r12
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x140052a86
mov ecx, r14d
mov r8d, ecx
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140003c40
mov rbx, qword [rsp + 0x58]
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052abb
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rsi, [rbx - 0x18]
mov qword [rsp + 0x100], rsi
mov rcx, qword [rsi]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rsi + 0x10], 0
jl 0x140052aff
cmp rax, qword [rsi]
jne 0x140052aff
mov rdi, rsi
lock add dword [rsi + 0x10], 1
mov rbx, qword [rsp + 0x58]
jmp 0x140052b3e
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rsi + 8]
call qword [rax]
mov rdi, rax
test rax, rax
jne 0x140052b1b
call fcn.1400019f0
int3
mov eax, dword [rsi + 8]
mov dword [rdi + 8], eax
mov eax, dword [rsi + 8]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
lea r8, [rsi + 0x18]
add rdx, rdx
lea rcx, [rdi + 0x18]
call fcn.140080540
lea rax, [rdi + 0x18]
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xd8]
call fcn.140027420
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052b7c
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbp, [rax + 0x18]
mov qword [rsp + 0x20], rbp
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052bae
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x28], rsi
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052be0
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x30], rdi
call fcn.140015a10
cmp eax, 2
je 0x140053745
cmp eax, 3
je 0x140053745
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140052c29
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
test r13, r13
je 0x140052c84
test r13, 0xffffffffffff0000
jne 0x140052c70
movzx ebx, r13w
mov ecx, ebx
call fcn.1400696b8
test rax, rax
je 0x140052c9c
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140003a40
mov rdi, qword [rsp + 0x40]
jmp 0x140052c9c
xor eax, eax
mov rcx, r12
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x140052c87
mov ecx, r14d
mov r8d, ecx
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140003c40
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
jle 0x1400532a4
mov dx, 0x5c
mov rcx, rdi
call fcn.1400804a0
test rax, rax
je 0x1400532a4
sub rax, rdi
sar rax, 1
cmp eax, 0xffffffff
je 0x1400532a4
call fcn.1400696cc
mov rcx, rax
test rax, rax
setne r14b
test r14d, r14d
jne 0x140052ce9
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov r13d, dword [rdi - 0x10]
lea rdx, str.NONE
mov rcx, qword [rsp + 0x50]
call fcn.1400807e0
test eax, eax
je 0x140052fe4
mov r15, qword [rsp + 0x48]
lea rdx, [r15 + 0x5d8]
lea r8, [0x1400a81a8]
lea rcx, [rsp + 0x88]
call fcn.14000b5c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x140052d91
cmp dword [rsi + 0x10], 0
jl 0x140052d82
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x140052d82
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rsi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140052d77
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x140052d91
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140052db5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [r13 - 1]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x40]
call fcn.140003710
nop
mov r8, rax
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x108]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x20]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140052e42
cmp dword [rdi + 0x10], 0
jl 0x140052e33
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140052e33
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140052e28
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x140052e42
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0x108]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140052e67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140052e8b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dx, 0x5c
mov rdi, qword [rsp + 0x20]
mov rcx, rdi
call fcn.140080890
test rax, rax
jne 0x140052ea6
mov eax, r12d
jmp 0x140052eac
sub rax, rdi
sar rax, 1
mov r8d, eax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x20]
call fcn.1400038a0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x38]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140052f1f
cmp dword [rdi + 0x10], 0
jl 0x140052f10
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140052f10
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140052f05
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140052f1f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140052f40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbp, qword [rsp + 0x20]
mov rdx, rbp
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rbp
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdi, qword [rsp + 0x38]
mov rdx, rdi
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140052f8d
mov rdx, rdi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rsi, qword [rsp + 0x28]
mov rdx, rsi
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140052fe9
mov rdx, rsi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140052fe9
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x140052fe9
mov r15, qword [rsp + 0x48]
mov rdx, qword [r15 + 0x5d8]
lea rcx, [rdx - 0x18]
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x14005304c
cmp dword [rsi + 0x10], 0
jl 0x14005303e
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x14005303e
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rsi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x14005302e
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
mov rbp, qword [rsp + 0x20]
jmp 0x14005304c
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
lea r8d, [r13 - 1]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x40]
call fcn.140003710
nop
mov r8, rax
lea rdx, [r15 + 0x5d8]
lea rcx, [rsp + 0xa8]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbp, 0xffffffffffffffe8
cmp rcx, rbp
je 0x1400530d8
cmp dword [rbp + 0x10], 0
jl 0x1400530c9
mov rax, qword [rbp]
cmp qword [rcx], rax
jne 0x1400530c9
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbp + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x1400530be
mov rcx, qword [rbp]
mov rax, qword [rcx]
mov rdx, rbp
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x1400530d8
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400530fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xf8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053121
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dx, 0x5c
mov rdi, qword [rsp + 0x20]
mov rcx, rdi
call fcn.140080890
test rax, rax
jne 0x14005313c
mov eax, r12d
jmp 0x140053142
sub rax, rdi
sar rax, 1
mov r8d, eax
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x20]
call fcn.1400038a0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x38]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400531b8
cmp dword [rdi + 0x10], 0
jl 0x1400531a9
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400531a9
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x14005319e
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x1400531b8
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400531dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x20]
mov rdx, rdi
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rdi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdi, qword [rsp + 0x38]
mov rdx, rdi
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053229
mov rdx, rdi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rbx, qword [rsp + 0x28]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x14005327f
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x14005327f
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
nop
lea rdx, [rdi - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053710
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140053710
lea rdx, str.NONE
mov rcx, qword [rsp + 0x50]
call fcn.1400807e0
test eax, eax
je 0x1400534e7
mov r15, qword [rsp + 0x48]
lea rdx, [r15 + 0x5d8]
lea r8, [0x1400a81a8]
lea rcx, [rsp + 0xe8]
call fcn.14000b5c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x140053339
cmp dword [rsi + 0x10], 0
jl 0x14005332a
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x14005332a
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rsi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x14005331f
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x140053339
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14005335d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, r13
lea rcx, [rsp + 0x90]
call fcn.140004ec0
mov rdi, rax
lea r8, [0x1400a3ff4]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x80]
call fcn.14000b5c0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x20]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400533fe
cmp dword [rdi + 0x10], 0
jl 0x1400533ef
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400533ef
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x1400533e4
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x1400533fe
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053423
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053448
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14005346c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbp, qword [rsp + 0x20]
mov rdx, rbp
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rbp
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rsi, qword [rsp + 0x28]
mov rdx, rsi
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x1400534ec
mov rdx, rsi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x1400534ec
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x1400534ec
mov r15, qword [rsp + 0x48]
mov rdx, qword [r15 + 0x5d8]
lea rcx, [rdx - 0x18]
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x14005354f
cmp dword [rsi + 0x10], 0
jl 0x140053541
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x140053541
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rsi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053531
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
mov rbp, qword [rsp + 0x20]
jmp 0x14005354f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x14005356f
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
test r13, r13
je 0x1400535c5
test r13, 0xffffffffffff0000
jne 0x1400535b1
movzx edi, r13w
mov ecx, edi
call fcn.1400696b8
test rax, rax
je 0x1400535d9
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140003a40
jmp 0x1400535d9
xor eax, eax
mov rcx, r12
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x1400535c8
mov ecx, r14d
mov r8d, ecx
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.140003c40
nop
lea rdx, [r15 + 0x5d0]
lea r8, [rsp + 0x60]
lea rcx, [rsp + 0xa0]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbp, 0xffffffffffffffe8
cmp rcx, rbp
je 0x140053650
cmp dword [rbp + 0x10], 0
jl 0x140053641
mov rax, qword [rbp]
cmp qword [rcx], rax
jne 0x140053641
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbp + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053636
mov rcx, qword [rbp]
mov rax, qword [rcx]
mov rdx, rbp
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x140053650
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053675
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053696
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x20]
mov rdx, rdi
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rdi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdi, qword [rsp + 0x28]
mov rdx, rdi
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053710
mov rdx, rdi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053710
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14005373b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x30]
jmp 0x140053fe8
mov rdi, qword [rsp + 0x30]
jmp 0x140053fe8
cmp dword [rbx - 0x10], 0
jl 0x14005376a
lea rdx, [0x1400a8300]
mov rcx, rbx
call fcn.1400804d0
test rax, rax
je 0x14005376a
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
jne 0x140053788
mov rsi, qword [rsp + 0x48]
mov rdx, qword [rsi + 0x580]
mov rcx, r15
call fcn.14002cc30
test eax, eax
js 0x140053fe8
jmp 0x14005378d
mov rsi, qword [rsp + 0x48]
lea rdx, str.NONE
mov rcx, qword [rsp + 0x50]
call fcn.1400807e0
test eax, eax
jne 0x140053ac2
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400537c6
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
test r13, r13
je 0x14005381c
test r13, 0xffffffffffff0000
jne 0x140053808
movzx edi, r13w
mov ecx, edi
call fcn.1400696b8
test rax, rax
je 0x140053830
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140003a40
jmp 0x140053830
xor eax, eax
mov rcx, r12
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x14005381f
mov ecx, r14d
mov r8d, ecx
mov rdx, r13
lea rcx, [rsp + 0x68]
call fcn.140003c40
nop
lea rdx, [rsi + 0x5d0]
lea r8, [rsp + 0x68]
lea rcx, [rsp + 0xb0]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbp, 0xffffffffffffffe8
cmp rcx, rbp
je 0x1400538a7
cmp dword [rbp + 0x10], 0
jl 0x140053898
mov rax, qword [rbp]
cmp qword [rcx], rax
jne 0x140053898
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbp + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x14005388d
mov rcx, qword [rbp]
mov rax, qword [rcx]
mov rdx, rbp
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x1400538a7
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400538cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400538ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsi + 0x5d8]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x28]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140053955
cmp dword [rdi + 0x10], 0
jl 0x140053942
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140053942
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053937
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rbx, 0x18
mov qword [rsp + 0x28], rbx
jmp 0x140053955
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
mov rbx, qword [rsp + 0x28]
mov rdx, qword [rsi + 0x5e8]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x30]
lea rsi, [rdi - 0x18]
cmp rcx, rsi
je 0x1400539c2
cmp dword [rsi + 0x10], 0
jl 0x1400539af
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x1400539af
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rsi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x14005399f
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rdi, 0x18
mov qword [rsp + 0x30], rdi
mov rbx, qword [rsp + 0x28]
jmp 0x1400539c2
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140003c40
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x20]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053a46
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053a46
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rsi
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053fe8
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053fe8
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
jmp 0x140053fe8
call fcn.1400696cc
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140053ae2
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
test r13, r13
je 0x140053b38
test r13, 0xffffffffffff0000
jne 0x140053b24
movzx edi, r13w
mov ecx, edi
call fcn.1400696b8
test rax, rax
je 0x140053b4c
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140003a40
jmp 0x140053b4c
xor eax, eax
mov rcx, r12
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x140053b3b
mov ecx, r14d
mov r8d, ecx
mov rdx, r13
lea rcx, [rsp + 0x70]
call fcn.140003c40
nop
lea r8, str._FAX_
lea rdx, [rsi + 0x5d8]
lea rcx, [rsp + 0xd0]
call fcn.14000b5c0
nop
lea r8, [rsp + 0x70]
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.140003ec0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbp, 0xffffffffffffffe8
cmp rcx, rbp
je 0x140053bdb
cmp dword [rbp + 0x10], 0
jl 0x140053bcc
mov rax, qword [rbp]
cmp qword [rcx], rax
jne 0x140053bcc
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbp + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053bc1
mov rcx, qword [rbp]
mov rax, qword [rcx]
mov rdx, rbp
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x140053bdb
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053c00
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053c25
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053c46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8, [0x1400a81a8]
lea rdx, [rsi + 0x5d8]
lea rcx, [rsp + 0xe0]
call fcn.14000b5c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x28]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140053cc2
cmp dword [rdi + 0x10], 0
jl 0x140053cb3
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140053cb3
call fcn.1400031e0
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053ca8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x140053cc2
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140003c40
nop
mov rdx, qword [rsp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140053ce6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsi + 0x5e8]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x30]
lea rbx, [rdi - 0x18]
cmp rcx, rbx
je 0x140053d4e
cmp dword [rbx + 0x10], 0
jl 0x140053d3b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140053d3b
call fcn.1400031e0
mov rdi, rax
mov ecx, r12d
lock xadd dword [rbx + 0x10], ecx
add ecx, 0xffffffff
test ecx, ecx
jg 0x140053d30
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rdi, 0x18
mov qword [rsp + 0x30], rdi
jmp 0x140053d4e
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140003c40
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x20]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rbx, qword [rsp + 0x28]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053dd7
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053dd7
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rsi
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053e46
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053e46
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
cmp dword [rsi - 0x10], 0
jl 0x140053e82
lea rdx, [0x1400a81a8]
mov rcx, rsi
call fcn.1400804d0
test rax, rax
je 0x140053e82
sub rax, rsi
sar rax, 1
cmp eax, 0xffffffff
je 0x140053e82
mov r8d, 4
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.140024620
mov rsi, qword [rsp + 0x20]
cmp dword [rbx - 0x10], 0
jl 0x140053ebe
lea rdx, [0x1400a81a8]
mov rcx, rbx
call fcn.1400804d0
test rax, rax
je 0x140053ebe
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x140053ebe
mov r8d, 4
mov edx, eax
lea rcx, [rsp + 0x28]
call fcn.140024620
mov rbx, qword [rsp + 0x28]
cmp dword [rdi - 0x10], 0
jl 0x140053efa
lea rdx, [0x1400a81a8]
mov rcx, rdi
call fcn.1400804d0
test rax, rax
je 0x140053efa
sub rax, rdi
sar rax, 1
cmp eax, 0xffffffff
je 0x140053efa
mov r8d, 4
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.140024620
mov rdi, qword [rsp + 0x30]
mov rdx, rsi
mov rcx, 0xffffffff80000002
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rbx
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053f79
mov rdx, rbx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call fcn.1400223e0
cmp eax, 1
jne 0x140053f79
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rsi
mov rcx, 0xffffffff80000001
call fcn.1400222b0
mov rdx, rsi
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053fe8
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call fcn.1400223e0
cmp eax, 1
jne 0x140053fe8
lea rdx, str.SOFTWARECANON_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx - 8], 0
jl 0x140054016
cmp rax, qword [rbx - 0x18]
jne 0x140054016
lea rsi, [rbx - 0x18]
lock add dword [rbx - 8], 1
mov rdi, qword [rsp + 0x30]
jmp 0x140054054
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rbx - 0x10]
call qword [rax]
mov rsi, rax
test rax, rax
jne 0x140054032
call fcn.1400019f0
int3
mov eax, dword [rbx - 0x10]
mov dword [rsi + 8], eax
mov eax, dword [rbx - 0x10]
add eax, 1
movsxd rdx, eax
lea r9, [rdx + rdx]
mov r8, rbx
add rdx, rdx
lea rcx, [rsi + 0x18]
call fcn.140080540
lea rax, [rsi + 0x18]
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xf0]
call fcn.140025ad0
nop
lea rdx, [rdi - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14005408b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400540ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400540cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400540f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x100]
lock xadd dword [rdx + 0x10], r12d
add r12d, 0xffffffff
test r12d, r12d
jg 0x140054111
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 1
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret