Function at 0x180030ed4
Capabilities:
Check for time delay via queryperformancecounter
Delete internet cache
Enumerate internet cache
Resolve dns

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x690
mov qword [rsp + 0x2c8], 0xfffffffffffffffe
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x1800ba600]
xor rax, rsp
mov qword [rsp + 0x670], rax
mov r13, r9
mov rbx, r8
mov qword [rsp + 0x50], rbx
mov esi, edx
mov r15, rcx
mov qword [rsp + 0x98], rbx
mov eax, 0x880bdac0
cmp edx, eax
ja 0x180032321
cmp edx, eax
je 0x180032077
mov eax, 0x4f6e321d
cmp edx, eax
ja 0x18003180a
cmp edx, eax
je 0x1800317ba
mov eax, 0x2ed3f154
cmp edx, eax
ja 0x1800312a1
cmp edx, eax
je 0x180033c45
cmp edx, 0xeb1c9a3
je 0x180031193
cmp edx, 0x11a0af66
je 0x180033c45
cmp edx, 0x199f3f7f
je 0x180031169
cmp edx, 0x1bec4a44
je 0x180031380
cmp edx, 0x1d3b4ac3
je 0x18003110f
cmp edx, 0x1de00715
je 0x180031073
cmp edx, 0x26bc0310
jne 0x180033865
lea rdi, [rcx + 0xa0]
mov rsi, qword [rdi]
mov r14d, 1
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov ebx, eax
xor edx, edx
mov r15, qword [rsp + 0x50]
mov rcx, r15
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov edx, eax
lea r9, [rsp + 0x140]
mov r8d, ebx
mov rcx, rdi
call qword [rsi + 0x78]
mov ebx, dword [rsp + 0x140]
lea esi, [r14 + 2]
cmp word [r13], si
jne 0x180031020
mov dword [r13 + 8], ebx
jmp 0x180033d46
cmp word [r13], 0xa
jne 0x180031031
mov dword [r13 + 8], ebx
jmp 0x180033d46
mov ecx, VariantTimeToDosDateTime
cmp word [r13], cx
jne 0x18003104c
neg ebx
sbb ax, ax
mov word [r13 + 8], ax
jmp 0x180033d46
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180031065
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
mov dword [r13 + 8], ebx
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x160]
xor r12d, r12d
cmp rbx, r12
je 0x1800310a3
mov rdx, qword [rbx]
jmp 0x1800310a6
mov rdx, r12
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x80]
nop
cmp rbx, r12
je 0x180033c45
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c45
mov rbx, qword [rsp + 0x160]
cmp qword [rbx], r12
je 0x1800310e9
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800310f7
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
add rcx, 0xa0
mov rax, qword [rcx]
lea rdx, [rsp + 0x178]
call qword [rax + VarDecFix]
mov rdx, qword [rsp + 0x178]
mov rcx, r13
call fcn.18000d838
mov rcx, qword [rsp + 0x178]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor r12d, r12d
cmp eax, r12d
jge 0x180033c45
mov ecx, eax
call fcn.18007d370
int3
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.180016ad0
nop
xor r12d, r12d
mov qword [rsp + 0xe8], r12
mov rdi, qword [rsp + 0x1c8]
cmp rdi, r12
je 0x1800311de
cmp qword [rdi + 8], r12
jne 0x1800311d8
mov rcx, qword [rdi]
call fcn.18007d5b0
mov qword [rdi + 8], rax
mov rdx, qword [rdi + 8]
jmp 0x1800311e1
mov rdx, r12
lea r8, [rsp + 0xe8]
mov rcx, r15
call fcn.18002a800
cmp al, r12b
je 0x180031232
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x18003120c
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov rbx, qword [rsp + 0xe8]
mov qword [r13 + 8], rbx
cmp rbx, r12
je 0x18003123a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x18003123a
mov rbx, qword [rsp + 0xe8]
cmp rbx, r12
je 0x180031249
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
cmp rdi, r12
je 0x180033c45
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x180033c45
mov rbx, qword [rsp + 0x1c8]
cmp qword [rbx], r12
je 0x18003127b
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180031289
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp edx, 0x3071671b
je 0x18003166e
cmp edx, 0x38402e3d
je 0x180031612
cmp edx, 0x41089a7c
je 0x1800315a4
cmp edx, 0x41d7253b
je 0x180031380
cmp edx, 0x4717da39
je 0x180031332
cmp edx, 0x4f58558b
jne 0x180033865
lea rdi, [rcx + 0xa0]
mov rsi, qword [rdi]
mov r14d, 1
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rbx, rax
xor edx, edx
mov r15, qword [rsp + 0x50]
mov rcx, r15
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov edx, eax
mov r8, rbx
mov rcx, rdi
call qword [rsi + 0x60]
jmp 0x180033d46
mov rbx, qword [rcx + 0xc8]
mov rcx, r9
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180031352
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], rbx
cmp rbx, r12
je 0x180033c45
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r14d, [rsi - 8]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov r13, rdx
sar r13, 2
mov rax, r13
shr rax, 0x3f
add r13, rax
xor r12d, r12d
cmp r13d, r12d
jbe 0x180033c45
mov rdi, r12
mov qword [rsp + 0x70], r12
mov rbx, r12
mov qword [rsp + 0x108], rbx
mov eax, r12d
mov dword [rsp + 0x5c], eax
cmp r13d, r12d
jbe 0x1800314d4
lea r14d, [r12 + 1]
mov r15, qword [rsp + 0x50]
mov edx, eax
mov rcx, r15
call fcn.180023a18
mov rdi, rax
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, rdi
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, r12d
jl 0x1800314cc
movzx ecx, word [rsp + 0x1f0]
sub ecx, 8
je 0x180031478
sub ecx, r14d
je 0x18003143a
cmp ecx, 0xd
jne 0x18003148b
lea rcx, [rsp + 0x1f0]
call fcn.180028448
jmp 0x18003148b
lea rcx, [rsp + 0x1f0]
call fcn.18000d684
mov rdi, rax
cmp rbx, rax
je 0x18003148b
cmp rax, r12
je 0x18003145d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
cmp rbx, r12
je 0x18003146b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov rbx, rdi
mov qword [rsp + 0x108], rbx
jmp 0x18003148b
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x70]
call fcn.180007978
nop
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [rsp + 0x5c]
add eax, r14d
mov dword [rsp + 0x5c], eax
cmp eax, r13d
jb 0x1800313df
mov rdi, qword [rsp + 0x70]
cmp rdi, r12
je 0x1800314df
cmp qword [rdi], r12
je 0x1800314c7
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
jmp 0x1800314e2
mov eax, r12d
jmp 0x1800314e2
mov ecx, eax
call fcn.18007d370
int3
mov r14d, 1
mov r15, qword [rsp + 0x50]
mov eax, r12d
cmp eax, r12d
jbe 0x18003154b
cmp esi, 0x41d7253b
jne 0x180031510
lea rax, [fcn.180055bc0]
mov qword [rsp + 0x270], rax
mov dword [rsp + 0x278], r12d
lea rax, [rsp + 0x270]
jmp 0x18003152f
lea rax, [fcn.180055bc0]
mov qword [rsp + 0x1e0], rax
mov dword [rsp + 0x1e8], r12d
lea rax, [rsp + 0x1e0]
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x3a0], xmm0
lea rcx, [rsp + 0x70]
call fcn.180016a48
mov rdi, qword [rsp + 0x70]
cmp rbx, r12
je 0x18003155a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
cmp rdi, r12
je 0x180033d46
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x180033d46
mov rbx, qword [rsp + 0x70]
cmp qword [rbx], r12
je 0x180031589
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180031597
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.1800284c8
mov ecx, eax
pxor xmm6, xmm6
cvtsi2ss xmm6, rcx
pxor xmm0, xmm0
cvtsi2ss xmm0, qword [r15 + 0x140]
divss xmm6, xmm0
mov esi, 4
cmp word [r13], si
je 0x1800315fc
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x1800315f7
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
movss dword [r13 + 8], xmm6
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rbx, rax
cmp qword [r15 + 0xb8], rax
je 0x180033c45
xor r12d, r12d
cmp rax, r12
je 0x180031645
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15 + 0xb8]
cmp rcx, r12
je 0x180031657
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r15 + 0xb8], rbx
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov dword [rsp + 0x5c], 0x70
mov ecx, 0x70
call fcn.180065cac
mov rdi, rax
mov rsi, rax
lea r8, [rsp + 0x5c]
mov rdx, rax
lea r13, str.cookie:
mov rcx, r13
call qword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov rbx, rax
xor r12d, r12d
cmp rax, r12
jne 0x1800316f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, rsi
call fcn.180064200
cmp ebx, 0x7a
jne 0x1800316e6
mov ecx, dword [rsp + 0x5c]
call fcn.180065cac
mov rdi, rax
mov rsi, rax
lea r8, [rsp + 0x5c]
mov rdx, rax
mov rcx, r13
call qword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov rbx, rax
cmp rax, r12
jne 0x1800316f6
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp rbx, r12
je 0x180031797
mov rcx, qword [rsi + 8]
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
cmp eax, r12d
jne 0x180031746
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, rdi
call fcn.180064200
cmp ebx, 0x7a
jne 0x180031797
mov ecx, dword [rsp + 0x5c]
call fcn.180065cac
mov rdi, rax
mov rsi, rax
lea r8, [rsp + 0x5c]
mov rdx, rax
mov rcx, r13
call qword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov rbx, rax
lea r8, [rsp + 0x5c]
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.WININET.dll_FindNextUrlCacheEntryA]
cmp eax, r12d
jne 0x1800316f6
mov rcx, rdi
call fcn.180064200
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x180031797
mov ecx, dword [rsp + 0x5c]
call fcn.180065cac
mov rdi, rax
mov rsi, rax
lea r8, [rsp + 0x5c]
mov rdx, rax
mov rcx, r13
call qword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov rbx, rax
jmp 0x1800316f6
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rdx, rbx
call fcn.18002b14c
mov dil, al
mov ebx, VariantTimeToDosDateTime
cmp word [r13], bx
je 0x1800317ef
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x1800317ea
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], bx
neg dil
sbb ax, ax
mov word [r13 + 8], ax
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov eax, 0x6cb8c653
cmp edx, eax
ja 0x180031b89
cmp edx, eax
je 0x180031af0
cmp edx, 0x4feb9baa
je 0x1800319d8
cmp edx, 0x51030a05
je 0x180033c45
cmp edx, 0x578b54d5
je 0x1800318f3
cmp edx, 0x5dd7d1ca
je 0x180031880
cmp edx, 0x6556f038
je 0x180033c45
cmp edx, 0x6a335042
jne 0x180033865
add rcx, 0x148
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.180016ad0
nop
mov rax, qword [rsp + 0x1d8]
xor r12d, r12d
cmp rax, r12
je 0x1800318ae
mov r12, qword [rax]
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 0xc0]
nop
lea rcx, [rsp + 0x1d8]
call fcn.180007744
nop
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r14d, 1
cmp edx, r14d
jbe 0x180033d33
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.180016ad0
nop
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rbx, rax
lea rcx, [r15 + 0xd0]
lea rdx, [rsp + 0x138]
call fcn.1800308e4
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor r12d, r12d
cmp eax, r12d
jge 0x18003197e
mov ecx, eax
call fcn.18007d370
nop
mov rax, qword [rsp + 0x138]
cmp rax, r12
je 0x180033d3a
or rsi, 0xffffffffffffffff
mov ecx, esi
lock xadd dword [rax + 0x10], ecx
add ecx, esi
jne 0x180033d41
mov rbx, qword [rsp + 0x138]
cmp qword [rbx], r12
je 0x1800319b8
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800319c6
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
lea rdx, [0x18008cc60]
lea rcx, [rsp + 0x170]
call fcn.180002188
nop
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.1800283a0
mov r11, rax
xor r12d, r12d
mov rcx, r12
mov qword [rsp + 0xc8], rcx
cmp rax, r12
je 0x180031a34
mov rax, qword [rax]
lea r8, [rsp + 0xc8]
lea rdx, [0x1800912c8]
mov rcx, r11
call qword [rax]
mov rcx, qword [rsp + 0xc8]
cmp rcx, r12
je 0x180031a6c
mov r14d, 1
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rsp + 0x378]
mov edx, r14d
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
cmp eax, r12d
jne 0x180031a62
mov rcx, qword [rsp + 0xc8]
jmp 0x180031a3f
mov rcx, qword [rsp + 0xc8]
jmp 0x180031a72
mov r14d, 1
cmp rcx, r12
je 0x180031a7e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x180031a96
mov rax, qword [rsp + 0x170]
cmp rax, r12
je 0x180033d25
or rsi, 0xffffffffffffffff
mov ecx, esi
lock xadd dword [rax + 0x10], ecx
add ecx, esi
jne 0x180033d2c
mov rbx, qword [rsp + 0x170]
cmp qword [rbx], r12
je 0x180031ad0
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180031ade
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x1b0]
xor r12d, r12d
cmp rbx, r12
je 0x180031b20
mov rdx, qword [rbx]
jmp 0x180031b23
mov rdx, r12
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
nop
cmp rbx, r12
je 0x180033c45
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c45
mov rbx, qword [rsp + 0x1b0]
cmp qword [rbx], r12
je 0x180031b63
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180031b71
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp edx, 0x72411906
je 0x180031ed7
cmp edx, 0x75179568
je 0x180033616
cmp edx, 0x77d32f59
je 0x180031eaa
cmp edx, 0x84fdeb47
je 0x180031e5d
cmp edx, 0x86a18f8f
je 0x180031ced
cmp edx, 0x87c93a30
jne 0x180033865
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xor r12d, r12d
cmp edx, r12d
jbe 0x180033c45
mov rbx, r12
mov qword [rsp + 0x2c0], rbx
cmp edx, 2
jne 0x180031c56
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.180028448
mov esi, eax
lea r14d, [r12 + 1]
mov edx, r14d
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rdi, rax
cmp rax, r12
je 0x180031c93
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rbx, rdi
jmp 0x180031c93
mov esi, dword [r15 + 0x120]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rdi, rax
cmp rax, r12
je 0x180031c8d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rbx, rdi
mov r14d, 1
jmp 0x180031c93
mov r14d, 1
lea rax, [0x18002debc]
mov qword [rsp + 0x1e0], rax
mov dword [rsp + 0x1e8], r12d
movaps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x2f0], xmm0
lea r9, [rsp + 0x2f0]
mov r8, rbx
mov edx, esi
mov rcx, r15
call fcn.1800282a4
nop
cmp rbx, r12
je 0x180033d1e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.180016ad0
nop
xor r12d, r12d
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x180], r15
cmp r15, r12
je 0x180031d2a
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, rbx
lea rcx, [rsp + 0x3e8]
call fcn.18001cab0
mov r11, qword [rbx + 0x30]
mov qword [rsp + 0x418], r11
mov rbx, qword [rsp + 0x128]
mov qword [rsp + 0x228], rbx
cmp rbx, r12
je 0x180031d70
mov r14d, 1
lock add dword [rbx + 0x10], r14d
mov rbx, qword [rsp + 0x128]
jmp 0x180031d76
mov r14d, 1
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x228]
call fcn.180027480
cmp eax, r12d
jne 0x180031de3
mov rdi, qword [rsp + 0xf8]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180031dc6
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], rdi
cmp rdi, r12
je 0x180031de3
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x180]
cmp rcx, r12
je 0x180031df7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xf8]
cmp rcx, r12
je 0x180031e0b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
cmp rbx, r12
je 0x180033d10
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033d17
mov rbx, qword [rsp + 0x128]
cmp qword [rbx], r12
je 0x180031e3d
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180031e4b
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
call fcn.18005aeb0
mov dil, al
mov ebx, VariantTimeToDosDateTime
cmp word [r13], bx
je 0x180031e8f
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180031e8a
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], bx
neg dil
sbb ax, ax
mov word [r13 + 8], ax
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [rcx + 0x128]
xor r12d, r12d
cmp rcx, r12
je 0x180033c45
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x88]
lea r14d, [r12 + 1]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r14d, 1
cmp edx, r14d
jbe 0x180032068
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.180016ad0
nop
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov qword [rsp + 0xb8], rax
xor r12d, r12d
cmp rax, r12
je 0x180031f58
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0xb8]
cmp rax, r12
je 0x180031fcc
mov rbx, qword [rsp + 0xd8]
cmp rbx, r12
je 0x180031f82
cmp qword [rbx + 8], r12
jne 0x180031f7c
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rdx, qword [rbx + 8]
jmp 0x180031f85
mov rdx, r12
lea r8, [rsp + 0xb8]
lea rcx, [rsp + 0x348]
call fcn.18005dca4
nop
mov rdx, rax
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, r12d
jge 0x180031fb4
mov ecx, eax
call fcn.18007d370
nop
lea rcx, [rsp + 0x348]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rax, qword [rsp + 0xb8]
jmp 0x180032007
mov ebx, SafeArrayUnaccessData
cmp word [r13], bx
je 0x180031ffb
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180031fee
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], bx
mov rax, qword [rsp + 0xb8]
mov dword [r13 + 8], r12d
mov rbx, qword [rsp + 0xd8]
cmp rax, r12
je 0x180032016
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
nop
cmp rbx, r12
je 0x180033d02
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033d09
mov rbx, qword [rsp + 0xd8]
cmp qword [rbx], r12
je 0x180032048
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180032056
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, rbx
call fcn.1800082b0
xor al, al
jmp 0x180033d51
lea rdx, str.dialog
lea rcx, [rsp + 0x148]
call fcn.180002188
nop
xor r12d, r12d
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0x1d0], r15
cmp r15, r12
je 0x1800320ae
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, rbx
lea rcx, [rsp + 0x3b0]
call fcn.18001cab0
mov r11, qword [rbx + 0x30]
mov qword [rsp + 0x3e0], r11
mov rbx, qword [rsp + 0x148]
mov qword [rsp + 0x238], rbx
cmp rbx, r12
je 0x1800320f4
mov r14d, 1
lock add dword [rbx + 0x10], r14d
mov rbx, qword [rsp + 0x148]
jmp 0x1800320fa
mov r14d, 1
lea rax, [rsp + 0x3b0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x238]
call fcn.180027480
cmp eax, r12d
jne 0x1800322a7
mov rdi, qword [rsp + 0xa0]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x18003214e
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], rdi
cmp rdi, r12
je 0x18003216a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15 + 0x110]
cmp rcx, r12
je 0x1800321a8
mov rax, qword [rcx]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov word [rsp + 0x20], r14w
mov r9d, 0x400
lea r8, [0x180098608]
mov edx, 0x3a213282
call qword [rax + 0x30]
mov rdi, qword [rsp + 0xa0]
cmp qword [r15 + 0x110], rdi
je 0x1800321e0
cmp rdi, r12
je 0x1800321c7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15 + 0x110]
cmp rcx, r12
je 0x1800321d9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r15 + 0x110], rdi
mov dword [rsp + 0x150], 0xfffffffd
mov qword [rsp + 0x2b0], r15
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov word [rsp + 0x280], si
mov qword [rsp + 0x288], r15
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, [rsp + 0x280]
mov qword [rsp + 0x258], rax
mov dword [rsp + 0x268], r14d
mov dword [rsp + 0x26c], r14d
lea rax, [rsp + 0x150]
mov qword [rsp + 0x260], rax
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
mov esi, 4
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
lea rdx, [rsp + 0x258]
mov qword [rsp + 0x28], rdx
mov word [rsp + 0x20], si
mov r9d, 0x400
lea r8, [0x180098608]
mov edx, 0xeda1ebe2
call qword [rax + 0x30]
nop
lea rcx, [rsp + 0x280]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1d0]
cmp rcx, r12
je 0x1800322bb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1800322cf
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
cmp rbx, r12
je 0x180033cf4
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033cfb
mov rbx, qword [rsp + 0x148]
cmp qword [rbx], r12
je 0x180032301
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x18003230f
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov eax, 0xbfe2c933
cmp edx, eax
ja 0x180032f5a
cmp edx, eax
je 0x180032ef3
mov eax, 0xb5d6f395
cmp edx, eax
ja 0x180032abd
cmp edx, eax
je 0x1800328f7
cmp edx, 0x94945bf4
je 0x1800328d0
cmp edx, 0x9a3aa108
je 0x180032789
cmp edx, 0x9e149f69
je 0x180032718
cmp edx, 0xa3a22822
je 0x180032686
cmp edx, 0xa4c1b7c9
je 0x180032587
cmp edx, 0xaea8f8c4
je 0x1800323f1
cmp edx, 0xb4bb2fe4
jne 0x180033865
lea r8, [rcx + 0xc8]
lea rdx, str.document
lea rcx, [rsp + 0x318]
call fcn.18005dca4
nop
mov rdx, rax
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor r12d, r12d
cmp eax, r12d
jge 0x1800323d3
mov ecx, eax
call fcn.18007d370
nop
lea rcx, [rsp + 0x318]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r14d, 1
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, qword [rax + 8]
lea rcx, [rsp + 0x1c0]
call fcn.18000d450
mov rbx, rax
xor edx, edx
mov rsi, qword [rsp + 0x50]
mov rcx, rsi
call fcn.180023a18
mov rdx, qword [rax + 8]
lea rcx, [rsp + 0x190]
call fcn.18000d450
mov qword [rsp + 0x108], rax
mov rbx, qword [rbx]
xor r12d, r12d
cmp rbx, r12
je 0x180032469
cmp qword [rbx + 8], r12
jne 0x180032463
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x108]
mov rdi, qword [rbx + 8]
jmp 0x18003246c
mov rdi, r12
mov rbx, qword [rax]
cmp rbx, r12
je 0x18003248c
cmp qword [rbx + 8], r12
jne 0x180032486
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rbx, qword [rbx + 8]
jmp 0x18003248f
mov rbx, r12
mov edx, 2
mov rcx, rsi
call fcn.180023a18
movsx r9d, word [rax + 8]
mov r8, rdi
mov rdx, rbx
mov rcx, qword [r15 + 0x118]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edi, eax
mov rbx, qword [rsp + 0x190]
cmp rbx, r12
je 0x180032505
or rsi, 0xffffffffffffffff
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
add ecx, esi
jne 0x1800324fb
cmp rbx, r12
je 0x1800324fb
cmp qword [rbx], r12
je 0x1800324e5
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800324f3
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov qword [rsp + 0x190], r12
jmp 0x180032509
or rsi, 0xffffffffffffffff
mov rbx, qword [rsp + 0x1c0]
cmp rbx, r12
je 0x180032552
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x18003254a
cmp rbx, r12
je 0x18003254a
cmp qword [rbx], r12
je 0x180032534
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180032542
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov qword [rsp + 0x1c0], r12
mov ebx, SafeArrayUnaccessData
cmp word [r13], bx
je 0x180032579
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180032574
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], bx
mov dword [r13 + 8], edi
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x158]
xor r12d, r12d
cmp rbx, r12
je 0x1800325b7
mov rdx, qword [rbx]
jmp 0x1800325ba
mov rdx, r12
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
lea r8, [rsp + 0x1a0]
call qword [rax + 0x58]
mov rdi, qword [rsp + 0x1a0]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x1800325ed
mov ecx, eax
call fcn.18007d370
int3
mov eax, 8
mov word [r13], ax
cmp rdi, r12
jne 0x180032602
mov qword [r13 + 8], r12
jmp 0x18003261f
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r13 + 8], rax
cmp rax, r12
jne 0x18003261f
mov ecx, 0x8007000e
call fcn.18007d370
int3
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
cmp rbx, r12
je 0x180033c45
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c45
mov rbx, qword [rsp + 0x158]
cmp qword [rbx], r12
je 0x180032660
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x18003266e
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rdi, qword [rcx + 0xa0]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov edx, eax
lea r8, [rsp + 0x250]
lea rcx, [r15 + 0xa0]
call qword [rdi + 0x70]
mov rbx, qword [rsp + 0x250]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x1800326d6
mov ecx, eax
call fcn.18007d370
int3
mov eax, 8
mov word [r13], ax
cmp rbx, r12
jne 0x1800326f7
mov qword [r13 + 8], r12
lea r14d, [rax - 7]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r13 + 8], rax
cmp rax, r12
jne 0x180033c45
mov ecx, 0x8007000e
call fcn.18007d370
int3
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r14d, 1
cmp edx, r14d
jb 0x180033ced
xor r12d, r12d
cmp qword [r15 + 0x128], r12
je 0x180033ce6
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d72c
mov rcx, qword [r15 + 0x128]
mov r8, qword [rcx]
mov edx, eax
call qword [r8 + 0x80]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x90]
xor r12d, r12d
cmp rbx, r12
je 0x1800327cc
cmp qword [rbx + 8], r12
jne 0x1800327c6
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rdx, qword [rbx + 8]
jmp 0x1800327cf
mov rdx, r12
lea rcx, [rsp + 0x168]
call fcn.18005c2c0
nop
mov rbx, qword [rax]
cmp rbx, r12
je 0x1800327fd
cmp qword [rbx + 8], r12
jne 0x1800327f7
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rdi, qword [rbx + 8]
jmp 0x180032800
mov rdi, r12
mov rbx, qword [rsp + 0x168]
cmp rbx, r12
je 0x18003284f
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180032845
cmp rbx, r12
je 0x180032845
cmp qword [rbx], r12
je 0x18003282f
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x18003283d
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov qword [rsp + 0x168], r12
jmp 0x180032853
or rsi, 0xffffffffffffffff
mov rdx, rdi
lea rcx, [rsp + 0x90]
call fcn.1800077a0
lea rdx, [rsp + 0x90]
mov rcx, r13
call fcn.18000d7ac
nop
mov rax, qword [rsp + 0x90]
cmp rax, r12
je 0x180033c45
mov ecx, esi
lock xadd dword [rax + 0x10], ecx
add ecx, esi
jne 0x180033c45
mov rbx, qword [rsp + 0x90]
cmp qword [rbx], r12
je 0x1800328aa
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800328b8
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
add rcx, 0xc0
xor r12d, r12d
cmp qword [rcx], r12
je 0x180033c45
call fcn.18005e3b0
lea r14d, [r12 + 1]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor r12d, r12d
mov qword [rsp + 0x118], r12
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.180016ad0
nop
mov rdi, r12
mov qword [rsp + 0x78], r12
mov rcx, qword [rbx + 0x20]
sub rcx, qword [rbx + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea r14d, [r12 + 1]
cmp edx, r14d
jbe 0x18003296f
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180007978
mov rdi, qword [rsp + 0x78]
mov qword [rsp + 0x248], rdi
cmp rdi, r12
je 0x180032986
lock add dword [rdi + 0x10], r14d
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x88]
mov qword [rsp + 0x220], rbx
cmp rbx, r12
je 0x1800329ad
lock add dword [rbx + 0x10], r14d
mov rbx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x78]
lea r8, [rsp + 0x118]
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x220]
call fcn.18005bbe0
cmp eax, r12d
jne 0x180032a0a
mov r15, qword [rsp + 0x118]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x1800329ed
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], r15
cmp r15, r12
je 0x180032a0a
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp rdi, r12
je 0x180032a5b
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x180032a51
mov rbx, qword [rsp + 0x78]
cmp qword [rbx], r12
je 0x180032a31
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180032a3f
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov rbx, qword [rsp + 0x88]
jmp 0x180032a5f
mov rbx, qword [rsp + 0x88]
jmp 0x180032a5f
or rsi, 0xffffffffffffffff
cmp rbx, r12
je 0x180032a9c
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180032a9c
mov rbx, qword [rsp + 0x88]
cmp qword [rbx], r12
je 0x180032a85
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180032a93
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
nop
mov rcx, qword [rsp + 0x118]
cmp rcx, r12
je 0x180033cdf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp edx, 0xb78cc28d
je 0x180032dcf
cmp edx, 0xb866eb1e
je 0x180032da1
cmp edx, 0xb87de520
je 0x180032c12
cmp edx, 0xba3f531e
je 0x180032b52
cmp edx, 0xbeba5d77
je 0x180032b35
cmp edx, 0xbef45dbb
jne 0x180033865
mov rdi, qword [rcx + 0xa0]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rdx, rax
lea rcx, [r15 + 0xa0]
call qword [rdi + 0x30]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
add rcx, 0xa0
mov rax, qword [rcx]
call qword [rax + 0x48]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rdi, qword [rcx + 0xa0]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov edx, eax
lea r8, [rsp + 0x60]
lea rcx, [r15 + 0xa0]
call qword [rdi + 0x68]
mov ebx, dword [rsp + 0x60]
mov esi, 3
cmp word [r13], si
jne 0x180032ba0
mov dword [r13 + 8], ebx
lea r14d, [rsi - 2]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp word [r13], 0xa
jne 0x180032bbc
mov dword [r13 + 8], ebx
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov ecx, VariantTimeToDosDateTime
cmp word [r13], cx
jne 0x180032be0
neg ebx
sbb ax, ax
mov word [r13 + 8], ax
lea r14d, [rcx - 0xa]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180032bf9
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
mov dword [r13 + 8], ebx
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.180016ad0
nop
mov rax, qword [rsp + 0x80]
xor r12d, r12d
cmp rax, r12
je 0x180032c42
mov rdx, qword [rax]
jmp 0x180032c45
mov rdx, r12
mov r8d, 0x100
lea rcx, [rsp + 0x460]
call fcn.180067c44
lea rcx, [rsp + 0x460]
call qword [sym.imp.WS2_32.dll_gethostbyname]
cmp rax, r12
jne 0x180032ca0
mov ebx, SafeArrayUnaccessData
cmp word [r13], bx
je 0x180032c91
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180032c8c
mov ecx, eax
call fcn.18007d370
mov word [r13], bx
mov dword [r13 + 8], r12d
mov r14d, 1
jmp 0x180032d76
mov rax, qword [rax + 0x18]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rbx, rax
mov qword [rsp + 0x440], 0xf
mov qword [rsp + 0x438], r12
mov byte [rsp + 0x428], r12b
mov rcx, rax
call fcn.180064df0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x420]
call fcn.180005ecc
nop
mov eax, dword [rsp + 0x438]
inc eax
movsxd rdi, eax
mov eax, 2
mul rdi
mov rsi, 0xffffffffffffffff
cmovo rax, rsi
mov rcx, rax
call fcn.180065cac
mov rbx, rax
cmp rax, r12
jne 0x180032d25
xor edx, edx
mov rcx, r13
call fcn.18000d898
jmp 0x180032d5e
lea rdx, [rsp + 0x428]
cmp qword [rsp + 0x440], 0x10
cmovae rdx, qword [rsp + 0x428]
mov r8, rdi
mov rcx, rax
call fcn.180067ecc
mov rdx, rbx
mov rcx, r13
call fcn.18000d838
mov rcx, rbx
call fcn.180064200
nop
xor r8d, r8d
lea r14d, [r8 + 1]
mov dl, r14b
lea rcx, [rsp + 0x420]
call fcn.1800040b0
nop
lea rcx, [rsp + 0x80]
call fcn.180007744
nop
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [rcx + 0x128]
xor r12d, r12d
cmp rcx, r12
je 0x180033c45
mov rax, qword [rcx]
lea r14d, [r12 + 1]
mov edx, r14d
call qword [rax + 0x88]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x188]
xor r12d, r12d
cmp rbx, r12
je 0x180032e07
mov rax, qword [rbx]
mov qword [rsp + 0x80], rax
jmp 0x180032e0f
mov qword [rsp + 0x80], r12
mov rsi, qword [r15 + 0xa0]
mov r14d, 1
mov edx, r14d
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov r8d, eax
lea r9, [rsp + 0x240]
mov rdx, qword [rsp + 0x80]
lea rcx, [r15 + 0xa0]
call qword [rsi + 0xa8]
mov rdi, qword [rsp + 0x240]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180032e6f
mov ecx, eax
call fcn.18007d370
int3
mov eax, 8
mov word [r13], ax
cmp rdi, r12
jne 0x180032e84
mov qword [r13 + 8], r12
jmp 0x180032ea1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r13 + 8], rax
cmp rax, r12
jne 0x180032ea1
mov ecx, 0x8007000e
call fcn.18007d370
nop
cmp rbx, r12
je 0x180033cd1
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033cd8
mov rbx, qword [rsp + 0x188]
cmp qword [rbx], r12
je 0x180032ed3
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180032ee1
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
add rcx, 0x150
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [r15 + 0x150]
sub edi, dword [r15 + 0x148]
mov esi, reloc.OLEAUT32.dll_SafeArrayUnaccessData
cmp word [r13], si
je 0x180032f38
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180032f33
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
mov dword [r13 + 8], edi
mov rax, qword [r15 + 0x150]
mov qword [r15 + 0x148], rax
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov eax, 0xee99f52a
cmp edx, eax
ja 0x180033821
cmp edx, eax
je 0x180033691
cmp edx, 0xc7d7adb1
je 0x180033616
cmp edx, 0xdc4d867b
je 0x180033506
cmp edx, 0xdd3481e4
je 0x18003331c
cmp edx, 0xe18eb512
je 0x1800332c0
cmp edx, 0xe4936a26
je 0x1800331d8
cmp edx, 0xe9546311
jne 0x180033865
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.180016ad0
nop
xor r12d, r12d
cmp qword [r15 + 0xc8], r12
je 0x180033178
mov rbx, r12
mov qword [rsp + 0x230], rbx
mov rax, qword [r15 + 0xc8]
cmp rax, r12
je 0x180033012
mov rbx, rax
cmp rax, r12
je 0x18003300a
mov rax, qword [rax]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x230], rbx
mov qword [rsp + 0xe0], r12
mov rax, qword [rbx]
lea r8, [rsp + 0xe0]
lea rdx, [0x18008ef50]
mov rcx, rbx
call qword [rax]
cmp eax, r12d
jne 0x18003314b
mov eax, 8
mov word [rsp + 0x298], ax
mov rdi, qword [rsp + 0xb0]
cmp rdi, r12
je 0x180033061
mov rax, qword [rdi]
mov qword [rsp + 0x2a0], rax
jmp 0x180033069
mov qword [rsp + 0x2a0], r12
mov r13d, r12d
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsi + 0x20]
sub rcx, qword [rsi + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov r14d, 1
cmp edx, r14d
jbe 0x1800330ca
mov edx, r14d
mov rcx, rsi
call fcn.180023a18
lea ecx, [r14 + 0xa]
cmp cx, word [rax]
jne 0x1800330ca
mov edx, r14d
mov rcx, rsi
call fcn.180023a18
mov rcx, rax
call fcn.180028314
movzx r13d, al
mov esi, 3
mov word [rsp + 0x2d0], si
neg r13d
sbb eax, eax
and eax, 0x7fc
add eax, 4
mov dword [rsp + 0x2d8], eax
mov word [rsp + 0x300], r12w
mov word [rsp + 0x360], r12w
mov word [rsp + 0x330], r12w
mov rcx, qword [rsp + 0xe0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x330]
mov qword [rsp + 0x28], rdx
lea rdx, [rsp + 0x360]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x300]
lea r8, [rsp + 0x2d0]
lea rdx, [rsp + 0x298]
call qword [rax + OleTranslateColor]
jmp 0x180033159
mov r14d, 1
mov rdi, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xe0]
cmp rcx, r12
je 0x18003316d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
jmp 0x180033186
mov r14d, 1
mov rdi, qword [rsp + 0xb0]
cmp rdi, r12
je 0x180033cc3
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x180033cca
mov rbx, qword [rsp + 0xb0]
cmp qword [rbx], r12
je 0x1800331b8
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800331c6
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xor r12d, r12d
cmp edx, r12d
jbe 0x180033c45
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rcx, qword [r15 + 0x110]
cmp rcx, rax
je 0x180033c45
cmp rcx, r12
je 0x180033267
mov rax, qword [rcx]
lea r14d, [r12 + 1]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov word [rsp + 0x20], r14w
mov r9d, 0x400
lea r8, [0x180098608]
mov edx, 0x3a213282
call qword [rax + 0x30]
jmp 0x18003326d
mov r14d, 1
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rbx, rax
cmp qword [r15 + 0x110], rax
je 0x180033cb9
cmp rax, r12
je 0x18003329d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15 + 0x110]
cmp rcx, r12
je 0x1800332af
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r15 + 0x110], rbx
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d684
mov rbx, rax
cmp qword [r15 + 0xc8], rax
je 0x180033c45
xor r12d, r12d
cmp rax, r12
je 0x1800332f3
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r15 + 0xc8]
cmp rcx, r12
je 0x180033305
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r15 + 0xc8], rbx
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor r12d, r12d
mov qword [rsp + 0x68], r12
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp edx, r12d
jbe 0x18003349e
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.180007978
mov r11, qword [rsp + 0x68]
mov qword [rsp + 0x210], r11
cmp r11, r12
je 0x180033385
lea r14d, [r12 + 1]
lock add dword [r11 + 0x10], r14d
jmp 0x18003338b
mov r14d, 1
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x388]
call fcn.18005c134
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x448], xmm0
mov r8d, SafeArrayGetLBound
lea rdx, [0x180098608]
lea rcx, [rsp + 0x448]
call fcn.1800642d0
cmp eax, r12d
jne 0x180033427
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.18000d72c
mov ecx, eax
lea rdx, [rsp + 0x560]
call fcn.18005ba74
cmp al, r12b
je 0x18003340d
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x68]
call fcn.1800077a0
or rsi, 0xffffffffffffffff
jmp 0x1800334a8
lea rdx, [0x18008cc60]
lea rcx, [rsp + 0x68]
call fcn.1800077a0
or rsi, 0xffffffffffffffff
jmp 0x1800334a8
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x198]
call fcn.18005bec0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.180016828
mov rbx, qword [rsp + 0x198]
cmp rbx, r12
je 0x180033498
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x18003348e
cmp rbx, r12
je 0x18003348e
cmp qword [rbx], r12
je 0x180033478
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180033486
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov qword [rsp + 0x198], r12
jmp 0x1800334a8
or rsi, 0xffffffffffffffff
jmp 0x1800334a8
mov r14d, 1
or rsi, 0xffffffffffffffff
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.18000d7ac
nop
mov rax, qword [rsp + 0x68]
cmp rax, r12
je 0x180033ca5
mov ecx, esi
lock xadd dword [rax + 0x10], ecx
add ecx, esi
jne 0x180033caf
mov rbx, qword [rsp + 0x68]
cmp qword [rbx], r12
je 0x1800334e6
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800334f4
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.180016ad0
nop
xor r12d, r12d
mov qword [rsp + 0xf0], r12
mov rbx, qword [rsp + 0x100]
mov qword [rsp + 0x218], rbx
cmp rbx, r12
je 0x180033555
lea r14d, [r12 + 1]
lock add dword [rbx + 0x10], r14d
mov rbx, qword [rsp + 0x100]
jmp 0x18003355b
mov r14d, 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x218]
call fcn.18005bb44
cmp eax, r12d
jne 0x1800335b0
mov rdi, qword [rsp + 0xf0]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180033593
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], rdi
cmp rdi, r12
je 0x1800335b0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xf0]
cmp rcx, r12
je 0x1800335c4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
cmp rbx, r12
je 0x180033c91
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c9b
mov rbx, qword [rsp + 0x100]
cmp qword [rbx], r12
je 0x1800335f6
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180033604
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
add rcx, 0xa0
mov rax, qword [rcx]
lea rdx, [rsp + 0x208]
call qword [rax + QueryPathOfRegTypeLib]
mov rbx, qword [rsp + 0x208]
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x18003364f
mov ecx, eax
call fcn.18007d370
int3
mov eax, 8
mov word [r13], ax
cmp rbx, r12
jne 0x180033670
mov qword [r13 + 8], r12
lea r14d, [rax - 7]
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r13 + 8], rax
cmp rax, r12
jne 0x180033c45
mov ecx, 0x8007000e
call fcn.18007d370
int3
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.180016ad0
nop
mov r14d, 1
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.180016ad0
nop
xor r12d, r12d
mov dword [rsp + 0xa8], r12d
mov rdi, qword [rsp + 0x1a8]
cmp rdi, r12
je 0x1800336eb
mov r8, qword [rdi]
jmp 0x1800336ee
mov r8, r12
mov rbx, qword [rsp + 0xc0]
cmp rbx, r12
je 0x180033700
mov rdx, qword [rbx]
jmp 0x180033703
mov rdx, r12
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
lea r9, [rsp + 0xa8]
call qword [rax + 0x88]
mov r15d, dword [rsp + 0xa8]
mov esi, 3
cmp word [r13], si
jne 0x180033735
mov dword [r13 + 8], r15d
jmp 0x18003377b
cmp word [r13], 0xa
jne 0x180033743
mov dword [r13 + 8], r15d
jmp 0x18003377b
mov ecx, VariantTimeToDosDateTime
cmp word [r13], cx
jne 0x18003375c
neg r15d
sbb ax, ax
mov word [r13 + 8], ax
jmp 0x18003377b
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180033772
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
mov dword [r13 + 8], r15d
cmp rdi, r12
je 0x1800337cf
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x1800337c5
mov rbx, qword [rsp + 0x1a8]
cmp qword [rbx], r12
je 0x1800337a5
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800337b3
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov rbx, qword [rsp + 0xc0]
jmp 0x1800337d3
mov rbx, qword [rsp + 0xc0]
jmp 0x1800337d3
or rsi, 0xffffffffffffffff
cmp rbx, r12
je 0x180033c7d
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c87
mov rbx, qword [rsp + 0xc0]
cmp qword [rbx], r12
je 0x180033801
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x18003380f
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
cmp edx, 0xf274d9d0
je 0x180033bb8
cmp edx, 0xf432f000
je 0x180033b3e
cmp edx, 0xf6e40c49
je 0x180033c45
cmp edx, 0xf7aa23a1
je 0x180033afc
cmp edx, 0xfd802f10
je 0x180033a42
cmp edx, 0xfdf94c33
je 0x180033874
mov rcx, rbx
call fcn.1800082b0
xor al, al
jmp 0x180033d51
mov rcx, qword [r8 + 0x20]
sub rcx, qword [r8 + 0x18]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov rsi, rdx
sar rsi, 2
mov rax, rsi
shr rax, 0x3f
add rsi, rax
xor r12d, r12d
cmp esi, r12d
jbe 0x180033c45
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180016ad0
nop
mov rdi, r12
mov qword [rsp + 0x110], r12
lea r14d, [r12 + 1]
cmp esi, r14d
jbe 0x180033916
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.180007978
mov rdi, qword [rsp + 0x110]
cmp rdi, r12
je 0x180033916
cmp qword [rdi + 8], r12
jne 0x180033910
mov rcx, qword [rdi]
call fcn.18007d5b0
mov qword [rdi + 8], rax
mov rsi, qword [rdi + 8]
jmp 0x180033919
mov rsi, r12
mov rbx, qword [rsp + 0xd0]
cmp rbx, r12
je 0x18003393e
cmp qword [rbx + 8], r12
jne 0x180033938
mov rcx, qword [rbx]
call fcn.18007d5b0
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
jmp 0x180033941
mov rcx, r12
mov rdx, rsi
call fcn.18005f090
neg al
sbb r15w, r15w
mov esi, 2
cmp word [r13], si
jne 0x180033962
mov word [r13 + 8], r15w
jmp 0x18003399c
mov ecx, VariantTimeToDosDateTime
cmp word [r13], cx
jne 0x18003397c
neg r15w
sbb ax, ax
mov word [r13 + 8], ax
jmp 0x18003399c
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180033992
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], si
mov word [r13 + 8], r15w
cmp rdi, r12
je 0x1800339f0
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdi + 0x10], eax
add eax, esi
jne 0x1800339e6
mov rbx, qword [rsp + 0x110]
cmp qword [rbx], r12
je 0x1800339c6
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x1800339d4
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov rbx, qword [rsp + 0xd0]
jmp 0x1800339f4
mov rbx, qword [rsp + 0xd0]
jmp 0x1800339f4
or rsi, 0xffffffffffffffff
cmp rbx, r12
je 0x180033c69
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c73
mov rbx, qword [rsp + 0xd0]
cmp qword [rbx], r12
je 0x180033a22
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180033a30
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r14d, 1
mov edx, r14d
mov rcx, rbx
call fcn.180023a18
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.180016ad0
nop
mov rbx, qword [rsp + 0x1b8]
xor r12d, r12d
cmp rbx, r12
je 0x180033a79
mov r13, qword [rbx]
jmp 0x180033a7c
mov r13, r12
mov rsi, qword [r15 + 0xa0]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.180023a18
mov rcx, rax
call fcn.18000d604
mov edx, eax
mov r8, r13
lea rcx, [r15 + 0xa0]
call qword [rsi + 0x98]
nop
cmp rbx, r12
je 0x180033c55
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 0x10], eax
add eax, esi
jne 0x180033c5f
mov rbx, qword [rsp + 0x1b8]
cmp qword [rbx], r12
je 0x180033adc
mov rcx, qword [rbx]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x180033aea
call fcn.180064200
mov rcx, rbx
call fcn.18006419c
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov ebx, SafeArrayUnaccessData
cmp word [r9], bx
je 0x180033b27
mov rcx, r9
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
xor r12d, r12d
cmp eax, r12d
jge 0x180033b20
mov ecx, eax
call fcn.18007d370
int3
mov word [r13], bx
jmp 0x180033b2a
xor r12d, r12d
mov dword [r13 + 8], r12d
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
xor edx, edx
mov rcx, rbx
call fcn.180023a18
mov rcx, rax
call fcn.1800283a0
xor r12d, r12d
mov rdx, r12
mov qword [rsp + 0x120], rdx
cmp rax, r12
je 0x180033b83
mov r9, qword [rax]
lea r8, [rsp + 0x120]
lea rdx, [0x18008d378]
mov rcx, rax
call qword [r9]
mov rdx, qword [rsp + 0x120]
lea rcx, [r15 + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x50]
nop
mov rcx, qword [rsp + 0x120]
cmp rcx, r12
je 0x180033c45
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r9, qword [rcx + 0xc8]
xor r12d, r12d
mov rcx, r12
mov qword [rsp + 0x130], rcx
cmp r9, r12
je 0x180033bf1
mov rax, qword [r9]
lea r8, [rsp + 0x130]
lea rdx, [0x1800913e0]
mov rcx, r9
call qword [rax]
mov rcx, qword [rsp + 0x130]
cmp rcx, r12
je 0x180033c2a
mov qword [rsp + 0x2b8], r12
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, r12d
jge 0x180033c14
mov ecx, eax
call fcn.18007d370
int3
mov esi, 9
mov word [r13], si
mov qword [r13 + 8], r12
mov rcx, qword [rsp + 0x130]
cmp rcx, r12
je 0x180033c45
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r14d, 1
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
jmp 0x180033d46
mov r15, qword [rsp + 0x50]
mov rcx, r15
call fcn.1800082b0
mov al, r14b
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.180064d20
movaps xmm6, xmmword [rsp + 0x680]
add rsp, 0x690
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret