Function at 0x180014960
Capabilities:
Accept command line arguments

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x368]
sub rsp, 0x468
mov rax, qword [0x18005c020]
xor rax, rsp
mov qword [rbp + 0x350], rax
mov r13d, r9d
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0x110], rdx
mov qword [rbp + 0x118], r8
xor r12d, r12d
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r12w
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], r12w
cmp qword [rcx + 0x18], 8
jb 0x1800149fd
mov rcx, qword [rcx]
mov edx, 0x5c
call fcn.18001c97c
mov r15, 0xffffffffffffffff
test rax, rax
je 0x180014af1
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x180014a24
mov rcx, qword [rdi]
mov edx, 0x5c
call fcn.18001c97c
mov r8, r15
inc r8
cmp word [rax + r8*2 + 2], 0
jne 0x180014a31
lea rdx, [rax + 2]
lea rcx, [rbp + 0x120]
call fcn.180011260
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x180014a5a
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
sub r8, qword [rbp + 0x130]
dec r8
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1f8], r12
mov qword [rbp + 0x200], 7
lea rcx, [rbp + 0x1e8]
call fcn.180011260
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x180014ad3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014ace
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c0
call fcn.18001ae7c
movups xmm0, xmmword [rbp + 0x1e8]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rbp + 0x1f8]
movups xmmword [rbp + 0x150], xmm1
jmp 0x180014b1a
lea rax, [rbp + 0x120]
cmp rax, rdi
je 0x180014b1a
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x180014b0a
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp + 0x120]
call fcn.180011260
mov qword [rbp + 0xb0], r12
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [0x180047bb8]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x180047dc8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x180014d2b
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x180014b9c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180014b97
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c6
call fcn.18001ae7c
mov word [rbp + 0x140], r12w
mov qword [rbp + 0x158], 7
mov qword [rbp + 0x150], r12
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x180014bfc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180014bf7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016099
call fcn.18001ae7c
mov word [rbp + 0x120], r12w
mov qword [rbp + 0x138], 7
mov qword [rbp + 0x130], r12
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x180014c55
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
mov rcx, qword [rdi]
jb 0x180014c50
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160cc
mov rcx, r8
call fcn.18001ae7c
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 7
mov word [rdi], r12w
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x180014ca4
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
mov rcx, qword [rsi]
jb 0x180014c9f
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160d2
mov rcx, r8
call fcn.18001ae7c
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 7
mov word [rsi], r12w
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x180014cf3
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x180014cee
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160d8
mov rcx, r8
call fcn.18001ae7c
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], 7
mov word [r14], r12w
mov eax, 1
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.18001ae20
add rsp, 0x468
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x168], xmm0
movsd xmm0, qword [rsp + 0x70]
movsd qword [rbp + 0xa8], xmm0
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [rbp]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 8], xmm0
movsd xmm0, qword [rbp + 0x1c0]
movsd qword [rbp + 0x198], xmm0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x168]
movaps xmmword [rbp + 0x20], xmm0
movsd xmm0, qword [rbp + 0xa8]
movsd qword [rbp + 0x30], xmm0
movups xmm0, xmmword [rsp + 0x78]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp - 0x60], xmm0
movups xmm0, xmmword [rbp + 8]
movaps xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [rbp + 0x198]
movsd qword [rbp - 0x40], xmm0
movups xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp - 0x30], xmm0
movsd xmm1, qword [rbp + 0x1e0]
movsd qword [rbp - 0x20], xmm1
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x70]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x30]
call qword [rax + 0x50]
mov ebx, eax
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x180014e6c
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0x98], r12
lea r12, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae r12, qword [rbp + 0x140]
mov ecx, 0x18
call fcn.18001ae40
mov rbx, rax
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x180014ed6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rax
mov dword [rbx + 0x10], 1
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x180014ed8
test r12, r12
jne 0x180016078
jmp 0x180014ed8
xor ebx, ebx
mov qword [rbp + 0x1a0], rbx
test rbx, rbx
je 0x18001609f
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
lea r8, [rbp + 0x98]
mov rdx, qword [rbx]
call qword [rax + 0x38]
mov r12d, eax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180014f47
mov rcx, qword [rbx]
test rcx, rcx
je 0x180014f24
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180014f3a
call fcn.18001ae7c
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.18001ae7c
test r12d, r12d
jns 0x180015114
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x180014faa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c6
call fcn.18001ae7c
xor ebx, ebx
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], bx
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x18001500b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180015006
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016099
call fcn.18001ae7c
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], bx
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x180015063
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x18001505e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160cc
mov rcx, r8
call fcn.18001ae7c
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x1800150b1
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1800150ac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160d2
mov rcx, r8
call fcn.18001ae7c
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 7
mov word [rsi], bx
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x1800150ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1800150fa
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800160d8
mov rcx, r8
call fcn.18001ae7c
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 7
mov word [r14], bx
jmp 0x180014d03
lea r12, [rbp + 0x120]
cmp qword [rbp + 0x138], 8
cmovae r12, qword [rbp + 0x120]
mov ecx, 0x18
call fcn.18001ae40
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015178
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rax
mov dword [rbx + 0x10], 1
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x180015173
test r12, r12
jne 0x1800160aa
xor r12d, r12d
jmp 0x18001517e
xor r12d, r12d
mov ebx, r12d
mov qword [rbp + 0x48], rbx
test rbx, rbx
je 0x18001609f
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x78]
nop
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1800151dc
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800151bd
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800151cf
call fcn.18001ae7c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.18001ae7c
mov qword [rbp + 0x90], r12
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
lea r8, [rbp + 0x90]
xor edx, edx
call qword [rax + 0x48]
mov ebx, eax
mov rcx, qword [rbp + 0xb0]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x18001521e
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xc8], r12
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
lea rdx, [rbp + 0xc8]
call qword [rax + 0x38]
test eax, eax
jns 0x18001525c
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x180015269
mov rdx, qword [r14]
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x40]
test eax, eax
jns 0x180015299
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rcx]
lea rdx, str.Microsoft_Corporation
call qword [rax + 0x50]
mov ebx, eax
mov rcx, qword [rbp + 0xc8]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x1800152df
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xd0], r12
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
lea rdx, [rbp + 0xd0]
call qword [rax + 0x78]
test eax, eax
jns 0x18001531d
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov rcx, qword [rbp + 0xd0]
mov rax, qword [rcx]
mov edx, 5
call qword [rax + 0x70]
test eax, eax
jns 0x180015352
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x1800153a3
mov rcx, qword [rbp + 0xd0]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x90]
mov ebx, eax
mov rcx, qword [rbp + 0xd0]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x1800153a3
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xa0], r12
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
lea rdx, [rbp + 0xa0]
call qword [rax + 0x58]
test eax, eax
jns 0x1800153e1
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0xd0]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x90]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x80]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x150]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x130]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
mov edx, r15d
call qword [rax + 0xb0]
mov ebx, eax
mov rcx, qword [rbp + 0xa0]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x180015486
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xd8], r12
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
lea rdx, [rbp + 0xd8]
call qword [rax + 0x48]
test eax, eax
jns 0x1800154c4
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xe0], r12
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rcx]
lea r8, [rbp + 0xe0]
mov edx, 1
call qword [rax + 0x50]
mov ebx, eax
mov rcx, qword [rbp + 0xd8]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x180015516
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov qword [rbp + 0xb8], r12
mov rcx, qword [rbp + 0xe0]
mov rax, qword [rcx]
lea r8, [rbp + 0xb8]
lea rdx, [0x180047c98]
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0xe0]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x180015569
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x180014b4f
mov ecx, 0x18
call fcn.18001ae40
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1800155b2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r12
mov dword [rbx + 0x10], 1
lea rcx, str.Trigger1
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180016083
jmp 0x1800155b5
mov rbx, r12
mov qword [rbp + 0x40], rbx
test rbx, rbx
je 0x18001609f
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x48]
nop
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x180015610
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800155f1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180015603
call fcn.18001ae7c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.18001ae7c
lea rcx, [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp + 0x174]
add ax, 0x14
mov word [rbp + 0x174], ax
movzx ecx, word [rbp + 0x172]
cmp ax, 0x3c
jb 0x180015651
inc cx
mov word [rbp + 0x172], cx
sub ax, 0x3c
mov word [rbp + 0x174], ax
movzx eax, ax
movzx ecx, cx
movzx edx, word [rbp + 0x170]
movzx r10d, word [rbp + 0x16e]
movzx r9d, word [rbp + 0x16a]
movzx r8d, word [rbp + 0x168]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._4d__02d__02dT_02d:_02d:_02d
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_wsprintfW]
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], 7
mov word [rbp + 0x178], r12w
lea rax, [rbp + 0x280]
mov r8, r15
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800156d0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x178]
call fcn.180011260
nop
lea r12, [rbp + 0x178]
cmp qword [rbp + 0x190], 8
cmovae r12, qword [rbp + 0x178]
mov ecx, 0x18
call fcn.18001ae40
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015753
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rax
mov dword [rbx + 0x10], 1
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x18001574e
test r12, r12
jne 0x1800160b5
xor r12d, r12d
jmp 0x180015759
xor r12d, r12d
mov ebx, r12d
mov qword [rbp + 8], rbx
test rbx, rbx
je 0x18001606d
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x78]
nop
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1800157b4
mov rcx, qword [rbx]
test rcx, rcx
je 0x180015795
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800157a7
call fcn.18001ae7c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.18001ae7c
mov qword [rbp + 0xe8], r12
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx]
lea rdx, [rbp + 0xe8]
call qword [rax + 0x50]
mov ebx, eax
mov rcx, qword [rbp + 0xb8]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x18001586c
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 8
jb 0x18001584d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180015848
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c0
call fcn.18001ae7c
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], 7
mov word [rbp + 0x178], r12w
jmp 0x180014b56
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
mov dword [rbp + 0x270], eax
mov r8d, r13d
lea rdx, str.PT_dM
lea rcx, [rbp + 0x210]
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, 0x18
call fcn.18001ae40
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015901
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r12
mov dword [rbx + 0x10], 1
lea rcx, [rbp + 0x210]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x18001608e
jmp 0x180015904
mov rbx, r12
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x18001606d
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x40]
mov r12d, eax
lock xadd dword [rbx + 0x10], r15d
cmp r15d, 1
jne 0x180015969
mov rcx, qword [rbx]
test rcx, rcx
je 0x180015947
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor r15d, r15d
mov qword [rbx], r15
jmp 0x18001594a
xor r15d, r15d
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18001595c
call fcn.18001ae7c
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.18001ae7c
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
jns 0x180015ab1
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 8
jb 0x1800159e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800159e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c0
call fcn.18001ae7c
xor r12d, r12d
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], 7
mov word [rbp + 0x178], r12w
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x180015a49
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180015a44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800160c6
call fcn.18001ae7c
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], 7
mov word [rbp + 0x140], r12w
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x180014bfc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014bf7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016099
jmp 0x180014bf7
xor r12d, r12d
mov qword [rbp + 0xf0], r12
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
lea rdx, [rbp + 0xf0]
call qword [rax + 0x88]
test eax, eax
jns 0x180015b3d
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lea rcx, [rbp + 0x178]
call fcn.180001580
nop
lea rcx, [rbp + 0x140]
call fcn.180001580
nop
lea rcx, [rbp + 0x120]
call fcn.180001580
nop
mov rcx, rdi
call fcn.180001580
nop
mov rcx, rsi
call fcn.180001580
nop
mov rcx, r14
call fcn.180001580
jmp 0x180014d03
mov qword [rbp + 0xf8], r12
mov rcx, qword [rbp + 0xf0]
mov rax, qword [rcx]
lea r8, [rbp + 0xf8]
xor edx, edx
call qword [rax + 0x60]
mov ebx, eax
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180015ad6
mov qword [rbp + 0xc0], r12
mov rcx, qword [rbp + 0xf8]
mov rax, qword [rcx]
lea r8, [rbp + 0xc0]
lea rdx, str.MbLk
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0xf8]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180015ad6
mov dword [rbp + 0x160], r12d
mov rcx, rsi
call fcn.180001570
mov rcx, rax
lea rdx, [rbp + 0x160]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r15, rax
test rax, rax
je 0x180015ad6
mov rdx, qword [rax]
lea rcx, [rbp + 0x1e8]
call fcn.180016700
nop
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
mov ebx, 1
movsxd rax, dword [rbp + 0x160]
cmp rbx, rax
jae 0x180015c72
nop word [rax + rax]
mov r8, qword [r15 + rbx*8]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x70]
call fcn.1800168f0
nop
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.180016840
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.180016660
lea rcx, [rbp + 0x50]
call fcn.180001580
nop
lea rcx, [rbp + 0x70]
call fcn.180001580
inc rbx
movsxd rax, dword [rbp + 0x160]
cmp rbx, rax
jb 0x180015c20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rcx, [rbp + 0x1e8]
call fcn.180001570
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.1800145d0
nop
mov r8, qword [rbp + 0xc0]
mov r9, qword [r8]
mov rcx, rax
call fcn.1800146d0
mov rdx, rax
mov rcx, r8
call qword [r9 + 0x58]
mov ebx, eax
lea rcx, [rbp + 0xa8]
call fcn.180014660
cmp qword [rbp + 0x1c0], 0
jbe 0x180015d11
lea rcx, [rbp + 0x1b0]
call fcn.180001570
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1800145d0
nop
mov r8, qword [rbp + 0xc0]
mov r9, qword [r8]
mov rcx, rax
call fcn.1800146d0
mov rdx, rax
mov rcx, r8
call qword [r9 + 0x68]
mov ebx, eax
lea rcx, [rbp + 0x198]
call fcn.180014660
mov rcx, qword [rbp + 0xc0]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rbp + 0x1b0]
call fcn.180001580
nop
lea rcx, [rbp + 0x1e8]
call fcn.180001580
test ebx, ebx
js 0x180015ad6
mov qword [rbp + 0x100], r12
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x180015ec2
mov dword [rbp + 0x198], 0xc
mov qword [rbp + 0xa8], r12
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
lea r9, [rbp + 0x198]
lea r8, [rbp + 0x1a0]
xor edx, edx
lea ecx, [rdx + 0x16]
call qword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidW]
mov rdx, qword [rbp + 0xa8]
lea rcx, [rbp + 0x1d0]
call fcn.180014720
lea rcx, [rbp + 0x20]
call fcn.1800146e0
nop
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [rax + 0x10]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x78]
movaps xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp - 0x20], xmm0
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x50], xmm0
movsd xmm1, qword [rsp + 0x70]
movsd qword [rbp - 0x40], xmm1
movups xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rbp + 0x1e0]
movsd qword [rbp - 0x60], xmm1
lea rcx, [rbp + 0x120]
call fcn.180001570
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1800145d0
nop
mov r10, qword [rbp + 0x98]
mov r11, qword [r10]
mov rcx, rax
call fcn.1800146d0
mov rdx, rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 4
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 6
mov r8, qword [rbp + 0x90]
mov rcx, r10
call qword [r11 + 0x88]
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.180014660
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x1d0]
jmp 0x180015fe9
lea rcx, [rbp + 0x20]
call fcn.1800146e0
nop
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [rax + 0x10]
movsd qword [rsp + 0x58], xmm0
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbp + 8], xmm0
movsd xmm0, qword [rbp]
movsd qword [rbp + 0xa8], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x78]
movaps xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rsp + 0x58]
movsd qword [rbp - 0x20], xmm0
movups xmm0, xmmword [rbp + 8]
movaps xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [rbp + 0xa8]
movsd qword [rbp - 0x40], xmm0
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rsp + 0x70]
movsd qword [rbp - 0x60], xmm1
lea rcx, [rbp + 0x120]
call fcn.180001570
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1800145d0
nop
mov r10, qword [rbp + 0x98]
mov r11, qword [r10]
mov rcx, rax
call fcn.1800146d0
mov rdx, rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 3
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 6
mov r8, qword [rbp + 0x90]
mov rcx, r10
call qword [r11 + 0x88]
mov ebx, eax
lea rcx, [rbp + 0x1a0]
call fcn.180014660
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x180015af0
mov rcx, qword [rbp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lea rcx, [rbp + 0x178]
call fcn.180001580
nop
lea rcx, [rbp + 0x140]
call fcn.180001580
nop
lea rcx, [rbp + 0x120]
call fcn.180001580
nop
mov rcx, rdi
call fcn.180001580
nop
mov rcx, rsi
call fcn.180001580
nop
mov rcx, r14
call fcn.180001580
xor eax, eax
jmp 0x180014d08
mov ecx, 0x8007000e
call fcn.18001be10
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
call fcn.18001ff34
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
mov ecx, 0x8007000e
call fcn.18001be10
nop
call fcn.18001ff34
nop
call fcn.18001ff34
nop
call fcn.18001ff34
nop
call fcn.18001ff34
nop
call fcn.18001ff34
int3