Function at 0x1800142fc
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x350
mov qword [r11 - 0x258], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
mov rax, qword [0x18008f230]
xor rax, rsp
mov qword [rsp + 0x348], rax
mov rsi, rdx
mov r13, rcx
mov qword [rsp + 0x80], rcx
xor r15d, r15d
mov r14d, r15d
mov qword [r11 - 0x2b0], r15
mov qword [rsp + 0x68], r15
lea rcx, [rsp + 0x68]
call fcn.180039304
mov ebx, eax
test eax, eax
jns 0x180014369
lfence
jmp 0x1800143b7
mov qword [rsp + 0x38], r15
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [0x18006c448]
mov edi, 1
mov r8d, edi
xor edx, edx
lea rcx, [0x1800729f8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x1800143cd
lfence
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800143b7
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x10]
call qword [case.0x180062b2e.0]
nop
cmp qword [rsp + 0x68], r15
je 0x18001452a
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x18001452a
mov word [rsp + 0xb0], r15w
lea rcx, [rsp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 8
mov word [rsp + 0xb0], ax
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0xb8], rax
test rax, rax
jne 0x180014410
test rsi, rsi
jne 0x1800151f0
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x130], xmm0
movsd xmm1, qword [rsp + 0xc0]
movsd qword [rsp + 0x140], xmm1
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x130]
mov rax, qword [rax + 0x1d0]
call qword [case.0x180062b2e.0]
mov r12d, eax
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x180014531
lfence
mov qword [rsp + 0x80], r15
mov dword [rsp + 0x30], r15d
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x1e0]
lea rdx, [rsp + 0x80]
call qword [case.0x180062b2e.0]
lea rcx, [0x18008d218]
mov r10, qword [0x18008d218]
cmp r10, rcx
je 0x1800144d8
test byte [r10 + 0x1c], dil
je 0x1800144d8
mov r8d, 0x306
test eax, eax
cmove r8d, dword [rsp + 0x30]
mov edx, 0xa
mov dword [rsp + 0x20], r8d
mov r9, rsi
lea r8, [0x180072a08]
mov rcx, qword [r10 + 0x10]
call fcn.1800013c4
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1800144f3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
lea rcx, [rsp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001451a
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
cmp qword [rsp + 0x68], r15
je 0x180014527
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, r12d
mov eax, ebx
jmp 0x1800151c3
mov qword [rsp + 0xa8], r15
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r8, [rsp + 0xa8]
lea rdx, str.event
mov rax, qword [rax + 0x1b8]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x18001520c
mov qword [rsp + 0x48], r15
mov ebx, 0xa
lea esi, [rbx + 5]
mov r12d, 0xffff
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
mov rax, qword [rax + 0x48]
call qword [case.0x180062b2e.0]
cmp eax, edi
je 0x1800147cf
mov rcx, r15
mov qword [rsp + 0x58], rcx
mov r9, qword [rsp + 0x48]
test r9, r9
je 0x1800145cc
mov rax, qword [r9]
lea r8, [rsp + 0x58]
lea rdx, [0x180072a18]
mov rcx, r9
mov rax, qword [rax]
call qword [case.0x180062b2e.0]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rsi
mov byte [rsp + 0x200], r15b
mov qword [rsp + 0x230], r15
mov qword [rsp + 0x238], rsi
mov byte [rsp + 0x220], r15b
mov rax, qword [rcx]
lea r8, [rsp + 0x180]
lea rdx, str.value
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x180015217
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x150]
lea rdx, str.symbol
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x180015221
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x168]
lea rdx, str.template
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x18001522b
mov rdx, qword [rsp + 0x158]
test rdx, rdx
jne 0x1800146d3
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1800146a5
mov qword [rsp + 0x48], r15
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
lea rcx, [rsp + 0x200]
call fcn.180015340
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x180014578
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
jmp 0x180014578
lea rcx, [rsp + 0x200]
call fcn.18001414c
test eax, eax
js 0x180015235
mov rdx, qword [rsp + 0x170]
lea rcx, [rsp + 0x220]
test rdx, rdx
je 0x18001470c
call fcn.18001414c
test eax, eax
js 0x18001523f
jmp 0x180014720
lea rdx, [0x180071e48]
call fcn.18001414c
test eax, eax
js 0x180015249
mov qword [rsp + 0x240], r15
mov r8d, ebx
xor edx, edx
mov rcx, qword [rsp + 0x188]
call fcn.180053640
cmp rax, r12
ja 0x180015253
mov word [rsp + 0x2f0], ax
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x2f8]
call fcn.180015b24
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x318]
call fcn.180015b24
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x338], rax
lea rdx, [rsp + 0x2f0]
mov rcx, r13
call fcn.18001654c
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x1f0]
mov rcx, r13
call fcn.1800165d4
nop
lea rcx, [rsp + 0x2f8]
call fcn.180015340
jmp 0x180014688
mov qword [rsp + 0xa0], r15
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r8, [rsp + 0xa0]
lea rdx, str.template
mov rax, qword [rax + 0x1b8]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x180015261
mov qword [rsp + 0x78], r15
mov r12d, 0x1000
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
mov rax, qword [rax + 0x48]
call qword [case.0x180062b2e.0]
cmp eax, edi
je 0x180014efd
mov rcx, r15
mov qword [rsp + 0x90], rcx
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x18001486b
mov rax, qword [r9]
lea r8, [rsp + 0x90]
lea rdx, [0x180072a18]
mov rcx, r9
mov rax, qword [rax]
call qword [case.0x180062b2e.0]
mov rcx, qword [rsp + 0x90]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x1c8]
lea rdx, [0x180072910]
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x18001526c
mov qword [rsp + 0x50], r15
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
lea rdx, str.data
mov rax, qword [rax + 0x190]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x180015277
mov qword [rsp + 0x60], r15
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
mov rax, qword [rax + 0x48]
call qword [case.0x180062b2e.0]
cmp eax, edi
je 0x180014d2f
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x268], rsi
mov byte [rsp + 0x250], r15b
mov qword [rsp + 0x88], r15
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x18001494d
mov rax, qword [rcx]
lea r8, [rsp + 0x88]
lea rdx, [0x180072a18]
mov rax, qword [rax]
call qword [case.0x180062b2e.0]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r15
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov rax, qword [rax + 0x110]
call qword [case.0x180062b2e.0]
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea r8, [rsp + 0x198]
lea rdx, str.name
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x180015282
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea r8, [rsp + 0x1b0]
lea rdx, str.inType
mov rax, qword [rax + 0x160]
call qword [case.0x180062b2e.0]
test eax, eax
js 0x18001528c
mov rdx, qword [rsp + 0x1a0]
lea rcx, [rsp + 0x250]
call fcn.18001414c
test eax, eax
js 0x180015296
mov dword [rsp + 0x270], r15d
lea rcx, [rsp + 0x250]
cmp qword [rsp + 0x268], 0x10
cmovae rcx, qword [rsp + 0x250]
lea rdx, str.SigSeq
call fcn.180053240
mov ecx, dword [rsp + 0x270]
test eax, eax
cmove ecx, edi
mov dword [rsp + 0x270], ecx
mov qword [rsp + 0x288], r15
mov qword [rsp + 0x290], rsi
mov byte [rsp + 0x278], r15b
mov rdx, qword [rsp + 0x1b8]
lea rcx, [rsp + 0x278]
call fcn.18001414c
test eax, eax
js 0x1800152a1
lea rsi, [rsp + 0x278]
mov r13, qword [rsp + 0x278]
cmp qword [rsp + 0x290], 0x10
cmovae rsi, r13
or r10d, 0xffffffff
mov r12, qword [rsp + 0x288]
mov rax, rsi
and eax, 3
mov rcx, r15
cmp r12, 4
cmovae rcx, rax
mov eax, 4
sub rax, rcx
neg rcx
sbb r8, r8
and r8, rax
mov r11, r12
sub r11, r8
and r11, 0xfffffffffffffff8
cmp r12, 4
cmovb r11, r15
sub r12, r11
sub r12, r8
test r8, r8
je 0x180014aec
mov ecx, r10d
movzx eax, byte [rsi]
xor rcx, rax
movzx edx, cl
mov eax, r10d
shr eax, 8
lea rcx, [0x180000000]
mov r10d, dword [rcx + rdx*4 + 0x74c70]
xor r10d, eax
add rsi, rdi
sub r8, rdi
jne 0x180014ac0
shr r11, 3
test r11, r11
je 0x180014b9c
xor r10d, dword [rsi]
mov r8d, dword [rsi + 4]
mov r9d, r10d
mov eax, r8d
shr rax, 0x10
movzx edx, al
mov eax, r8d
shr rax, 8
movzx ecx, al
lea rax, [0x180000000]
mov r10d, dword [rax + rdx*4 + 0x75870]
lea rdx, [0x180000000]
xor r10d, dword [rdx + rcx*4 + 0x76470]
mov eax, r9d
shr rax, 0x10
movzx ecx, al
xor r10d, dword [rdx + rcx*4 + 0x76070]
mov eax, r9d
shr rax, 8
movzx ecx, al
xor r10d, dword [rdx + rcx*4 + 0x75c70]
mov eax, r8d
shr rax, 0x18
xor r10d, dword [rdx + rax*4 + 0x74c70]
mov eax, r9d
shr rax, 0x18
xor r10d, dword [rdx + rax*4 + 0x75470]
movzx eax, r8b
xor r10d, dword [rdx + rax*4 + 0x75070]
movzx eax, r9b
xor r10d, dword [rdx + rax*4 + 0x74870]
add rsi, 8
sub r11, rdi
jne 0x180014af9
test r12, r12
je 0x180014bcd
mov ecx, r10d
movzx eax, byte [rsi]
xor rcx, rax
movzx edx, cl
mov eax, r10d
shr eax, 8
lea rcx, [0x180000000]
mov r10d, dword [rcx + rdx*4 + 0x74c70]
xor r10d, eax
add rsi, rdi
sub r12, rdi
jne 0x180014ba1
mov dword [rsp + 0x274], r10d
cmp qword [rsp + 0xe0], rbx
je 0x180014c11
lea rdx, [rsp + 0x250]
mov rcx, rbx
call fcn.180015b24
mov eax, dword [rsp + 0x270]
mov dword [rbx + 0x20], eax
mov eax, dword [rsp + 0x274]
mov dword [rbx + 0x24], eax
add rbx, 0x28
mov qword [rsp + 0xd8], rbx
jmp 0x180014c31
lea r8, [rsp + 0x250]
mov rdx, rbx
lea rcx, [rsp + 0xd0]
call fcn.180015f5c
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180014c4e
mov qword [rsp + 0x60], r15
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rax, qword [rsp + 0x290]
mov r12d, 0x1000
cmp rax, 0x10
jb 0x180014c8f
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, r12
jb 0x180014c87
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152ac
mov rcx, r13
call fcn.180040d20
mov qword [rsp + 0x288], r15
mov esi, 0xf
mov qword [rsp + 0x290], rsi
mov byte [rsp + 0x278], r15b
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x180014cd3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rdx, qword [rsp + 0x268]
cmp rdx, 0x10
jb 0x180014d12
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, r12
jb 0x180014d0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152b2
call fcn.180040d20
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x268], rsi
mov byte [rsp + 0x250], r15b
jmp 0x1800148e4
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov byte [rsp + 0x298], r15b
mov rdx, qword [rsp + 0x1d0]
lea rcx, [rsp + 0x298]
call fcn.18001414c
test eax, eax
js 0x1800152b8
mov r13, qword [rsp + 0x80]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x2b8]
call fcn.180015b24
nop
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x2d8]
call fcn.18001638c
nop
lea rdx, [rsp + 0x2b8]
lea rcx, [r13 + 0x10]
call fcn.180016710
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x1e0]
lea rcx, [r13 + 0x10]
call fcn.180016794
nop
lea rcx, [rsp + 0x2d8]
call fcn.180015c08
mov rdx, qword [rsp + 0x2d0]
cmp rdx, 0x10
jb 0x180014e10
inc rdx
mov rcx, qword [rsp + 0x2b8]
mov rax, rcx
cmp rdx, r12
jb 0x180014e0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152c2
call fcn.180040d20
mov qword [rsp + 0x2c8], r15
mov qword [rsp + 0x2d0], rsi
mov byte [rsp + 0x2b8], r15b
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180014e45
mov qword [rsp + 0x78], r15
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rdx, qword [rsp + 0x2b0]
cmp rdx, 0x10
jb 0x180014e84
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, r12
jb 0x180014e7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152c8
call fcn.180040d20
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov byte [rsp + 0x298], r15b
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180014eb4
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180014ecc
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
lea rcx, [rsp + 0xd0]
call fcn.180015c08
nop
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x18001480e
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
jmp 0x18001480e
mov rsi, qword [r13]
mov rbx, qword [rsi]
cmp rbx, rsi
je 0x18001507e
lea r12, [rbx + 0x48]
mov rcx, qword [r12 + 0x10]
test rcx, rcx
je 0x180015025
mov rdi, qword [r13 + 0x10]
mov r13, qword [rdi + 8]
mov qword [rsp + 0x50], rdi
jmp 0x180014f98
lea rax, [r13 + 0x20]
mov r9, r12
cmp qword [r12 + 0x18], 0x10
jb 0x180014f41
mov r9, qword [r12]
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x40], rdx
cmp qword [rax + 0x18], 0x10
jb 0x180014f54
mov rax, qword [rax]
mov r8, rdx
cmp rcx, rdx
cmovb r8, rcx
mov rdx, r9
mov rcx, rax
call fcn.1800630b0
mov rcx, qword [r12 + 0x10]
test eax, eax
jne 0x180014f84
cmp qword [rsp + 0x40], rcx
jae 0x180014f7e
or eax, 0xffffffff
jmp 0x180014f84
mov eax, r15d
seta al
shr eax, 0x1f
test al, al
je 0x180014f91
mov r13, qword [r13 + 0x10]
jmp 0x180014f98
mov rdi, r13
mov r13, qword [r13]
cmp byte [r13 + 0x19], r15b
je 0x180014f2e
mov r13, qword [rsp + 0x50]
cmp rdi, r13
je 0x180015009
lea rdx, [rdi + 0x20]
mov rcx, qword [rdx + 0x10]
mov qword [rsp + 0x50], rcx
cmp qword [rdx + 0x18], 0x10
jb 0x180014fbf
mov rdx, qword [rdx]
mov rax, qword [r12 + 0x10]
mov qword [rsp + 0x40], rax
cmp qword [r12 + 0x18], 0x10
jb 0x180014fd5
mov r12, qword [r12]
mov r8, rax
cmp rcx, rax
cmovb r8, rcx
mov rcx, r12
call fcn.1800630b0
test eax, eax
jne 0x180015002
mov rcx, qword [rsp + 0x40]
cmp rcx, qword [rsp + 0x50]
jae 0x180014ffc
or eax, 0xffffffff
jmp 0x180015002
mov eax, r15d
seta al
shr eax, 0x1f
test al, al
je 0x18001500c
mov rdi, r13
cmp rdi, r13
je 0x1800152ce
add rdi, 0x40
mov qword [rbx + 0x68], rdi
mov r13, qword [rsp + 0x80]
cmp byte [rbx + 0x19], r15b
jne 0x180014f04
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], r15b
jne 0x18001505d
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], r15b
jne 0x180014f04
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], r15b
je 0x180015049
jmp 0x180014f04
mov rax, qword [rbx + 8]
jmp 0x180015070
cmp rbx, qword [rax + 0x10]
jne 0x180015076
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r15b
je 0x180015063
mov rbx, rax
jmp 0x180014f04
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180015096
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1800150b1
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1800150c9
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1800150e4
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
jmp 0x1800150f1
mov r12d, dword [rsp + 0x30]
mov edi, 1
test r12d, r12d
jns 0x18001517f
lfence
lea rcx, [0x18008d218]
mov rax, qword [0x18008d218]
cmp rax, rcx
je 0x180015133
test byte [rax + 0x1c], dil
je 0x180015133
lea edx, [rdi + 0xb]
mov r9d, r12d
lea r8, [0x180072a08]
mov rcx, qword [rax + 0x10]
call fcn.180001330
nop
lea rcx, [rsp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001515a
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
cmp qword [rsp + 0x68], r15
je 0x180015168
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x18001517a
call fcn.1800535dc
mov eax, r12d
jmp 0x1800151c3
lea rcx, [rsp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800151a6
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x180062b2e.0]
nop
cmp qword [rsp + 0x68], r15
je 0x1800151b4
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
test r14, r14
je 0x1800151c1
mov rcx, r14
call fcn.1800535dc
xor eax, eax
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.180040cc0
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea ebx, [rax + 0xa]
mov word [rsp + 0xb0], bx
mov dword [rsp + 0xb8], 0x8007000e
call fcn.180013fe0
nop
lfence
mov ecx, eax
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, 0x80070216
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
lfence
mov ecx, eax
call fcn.1800358d8
nop
lfence
mov ecx, eax
call fcn.1800358d8
nop
call fcn.18004afbc
nop
call fcn.18004afbc
nop
lfence
mov ecx, eax
call fcn.1800358d8
call fcn.18004afbc
nop
call fcn.18004afbc
nop
lea rcx, [0x18008d218]
mov rax, qword [0x18008d218]
cmp rax, rcx
je 0x18001530a
test byte [rax + 0x1c], 1
je 0x18001530a
lea r9, [rbx + 0x28]
cmp qword [r9 + 0x18], 0x10
jb 0x1800152f5
mov r9, qword [r9]
mov edx, 0xb
lea r8, [0x180072a08]
mov rcx, qword [rax + 0x10]
call fcn.18000618c
mov ecx, 0x80070490
call fcn.1800358d8
int3