Function at 0x140026e10
Capabilities:
Terminate thread

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x80], rbx
mov rdi, rcx
lea rax, [0x1401a3cf8]
mov qword [rcx], rax
lea rax, [0x1401a3f68]
mov qword [rcx + 0xa8], rax
lea rax, [0x1401a4018]
mov qword [rcx + 0xb8], rax
lea rax, [0x1401a4030]
mov qword [rcx + 0x1f0], rax
lea rax, [0x1401a4048]
mov qword [rcx + 0x2c8], rax
mov rcx, qword [rcx + 0xc0]
xor r13d, r13d
test rcx, rcx
je 0x140026ea7
call fcn.1401488f4
mov rcx, qword [rdi + 0xc0]
test rcx, rcx
je 0x140026ea7
mov rax, qword [rcx]
lea edx, [r13 + 1]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0xc0], r13
mov rcx, qword [rdi + 0xc8]
test rcx, rcx
je 0x140026ed6
call fcn.140148c6c
mov rcx, qword [rdi + 0xc8]
test rcx, rcx
je 0x140026ed6
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0xc8], r13
mov rcx, qword [rdi + 0x420]
test rcx, rcx
je 0x140026ef3
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [rdi + 0x420], r13
mov rbx, qword [rdi + 0x428]
test rbx, rbx
je 0x140026f6c
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140026f25
call fcn.1401488f4
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140026f21
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 8], r13
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140026f4b
call fcn.140148c6c
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140026f47
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x10], r13
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140026f5d
call fcn.14013d06c
mov qword [rbx + 0x18], r13
mov rcx, rbx
call fcn.14013d06c
mov qword [rdi + 0x428], r13
mov rbx, qword [rdi + 0x430]
test rbx, rbx
je 0x140026fe5
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140026f9e
call fcn.1401488f4
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140026f9a
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 8], r13
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140026fc4
call fcn.140148c6c
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140026fc0
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x10], r13
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140026fd6
call fcn.14013d06c
mov qword [rbx + 0x18], r13
mov rcx, rbx
call fcn.14013d06c
mov qword [rdi + 0x430], r13
or r8, 0xffffffffffffffff
xor edx, edx
lea rcx, [rdi + 0x3b8]
call fcn.14014ed94
nop
lea rsi, [rdi + 0x440]
mov qword [rsp + 0x78], rsi
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140027031
nop
mov rcx, rbx
test rbx, rbx
je 0x14002702b
mov rbx, qword [rbx]
mov rcx, qword [rcx + 0x10]
call fcn.14013d06c
test rbx, rbx
jne 0x140027010
jmp 0x140027031
call fcn.14013d908
int3
mov rcx, rsi
call fcn.14014efc8
nop
mov rcx, rsi
call fcn.14014f144
nop
cmp qword [rdi + 0x418], 0
je 0x1400270a8
mov rcx, qword [rdi + 0x408]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x2710
mov rcx, qword [rdi + 0x410]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, 0x2710
mov rcx, qword [rdi + 0x418]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140027094
xor edx, edx
mov rcx, qword [rdi + 0x418]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x418]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + 0x418], r13
mov rcx, qword [rdi + 0x408]
test rcx, rcx
je 0x1400270c1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + 0x408], r13
mov rcx, qword [rdi + 0x410]
test rcx, rcx
je 0x1400270da
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + 0x410], r13
lea rcx, [rdi + 0x3b8]
call fcn.14014ed80
nop
lea rcx, [rdi + 0x340]
call fcn.140153a60
nop
lea rcx, [rdi + 0x308]
call fcn.14014f144
nop
lea rax, [0x1401a68f0]
mov qword [rdi + 0x2c8], rax
cmp qword [rdi + 0x2f0], 0
je 0x140027137
mov rcx, qword [rdi + 0x2f0]
test rcx, rcx
je 0x140027130
mov rax, qword [rcx]
mov edx, 1
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0x2f0], r13
lea rax, [0x1401a4c98]
mov qword [rdi + 0x1f0], rax
lea rbx, [rdi + 0x230]
mov esi, 6
cmp qword [rbx], 0
je 0x140027162
mov rcx, qword [rbx]
call fcn.14013d06c
mov qword [rbx], r13
add rbx, 8
sub rsi, 1
jne 0x140027151
lea rax, [0x1401a1a18]
mov qword [rdi + 0xa8], rax
lea rax, [0x1401a1ac8]
mov qword [rdi + 0xb8], rax
lea rcx, [rdi + 0xa8]
call fcn.14001a710
nop
mov rcx, rdi
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.140143b7c