Function at 0x140028320
Capabilities:
Get disk information
Get file size
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x908]
sub rsp, 0xa08
mov rax, qword [0x14007f080]
xor rax, rsp
mov qword [rbp + 0x8f0], rax
mov r15, r9
mov qword [rsp + 0x40], r9
mov r13, r8
mov rbx, rdx
mov r14, rcx
mov rax, qword [rbp + 0x970]
mov qword [rsp + 0x60], rax
xor r8d, r8d
test rdx, rdx
je 0x14002902b
mov r12, 0xffffffffffffffff
mov rax, r12
inc rax
cmp word [rdx + rax*2], r8w
jne 0x140028380
cmp rax, 5
jb 0x14002902b
mov rax, qword [rcx + 0x30d8]
sub rdx, rax
nop
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x1400283b7
add rax, 2
test cx, cx
jne 0x1400283a0
mov eax, r8d
jmp 0x1400283bc
sbb eax, eax
or eax, 1
test eax, eax
je 0x14002843e
movzx edi, word [rbx]
cmp di, 0x5c
jne 0x1400283cd
mov al, 1
jmp 0x14002841a
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xf0]
call fcn.14005fd20
mov word [rbp + 0xe0], di
mov dword [rbp + 0xe2], 0x5c003a
xor eax, eax
mov word [rbp + 0xe6], ax
mov r8d, 0x400
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
sete al
mov byte [r14 + 0x3166], al
mov r8, r12
inc r8
cmp word [rbx + r8*2], 0
jne 0x140028424
mov rdx, rbx
lea rcx, [r14 + 0x30d8]
call fcn.140002da0
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x14002905b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb8], rax
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140029066
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb0], rax
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140029071
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd8], rax
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r14 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002864d
cmp r14w, word [rbx]
je 0x14002858d
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x14002907c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc8], rax
cmp rbx, 0x10000
jae 0x140028524
movzx edx, bx
lea rcx, [rbp + 0xc8]
call fcn.140002950
jmp 0x14002854b
mov r8, r12
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140028530
mov rdx, rbx
lea rcx, [rbp + 0xc8]
call fcn.140002da0
nop
lea rcx, [rbp + 0xc8]
call fcn.140005e70
mov rax, qword [rbp + 0xc8]
cmp dword [rax - 0x10], 2
jl 0x140028573
movzx ecx, word [rax]
cmp cx, 0x5c
jne 0x1400285d8
cmp word [rax + 2], cx
je 0x1400285e4
lea rdx, [rax - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002858d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, 0x14
mov edi, r14d
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140028605
inc edi
cmp edi, esi
jb 0x140028595
jmp 0x14002860e
cmp cx, 0x2f
jne 0x140028573
cmp word [rax + 2], cx
jne 0x140028573
lea rdx, [rax - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400285fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, 0x190
jmp 0x140028592
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, rbx
call fcn.14002a5a0
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140028fbf
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp eax, 0xffffffff
je 0x140028fb1
lea rcx, [rsi + 2]
call fcn.14003ef40
mov r14, rax
lea r8, [rsi + 2]
xor edx, edx
mov rcx, rax
call fcn.14005fd20
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
mov r8d, esi
mov rdx, r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140028fa4
cmp dword [rbp + 0xc0], esi
jne 0x140028fa4
test rdi, rdi
je 0x1400286c1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
cmp esi, 2
jbe 0x1400286e8
movzx eax, word [r14]
mov ecx, 0xfeff
cmp ax, cx
jne 0x1400286da
mov bl, 1
jmp 0x1400286e8
mov ecx, 0xfffe
cmp ax, cx
je 0x140028fbf
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x14002907c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa8], rax
test bl, bl
jne 0x140028780
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x70]
call fcn.14005fd20
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
mov r8d, 3
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.140006030
nop
mov rdx, qword [rsp + 0x70]
test rdx, rdx
jne 0x14002874f
xor eax, eax
mov r8d, eax
jmp 0x14002875d
mov r8, r12
inc r8
cmp word [rdx + r8*2], 0
jne 0x140028752
lea rcx, [rbp + 0xa8]
call fcn.140002da0
nop
lea rax, [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
je 0x1400287aa
call fcn.14004b808
jmp 0x1400287aa
lea rdx, [r14 + 2]
test rdx, rdx
jne 0x140028790
xor eax, eax
mov r8d, eax
jmp 0x14002879e
mov r8, r12
inc r8
cmp word [rdx + r8*2], 0
jne 0x140028793
lea rcx, [rbp + 0xa8]
call fcn.140002da0
mov edx, 1
mov rcx, r14
call fcn.14003eed0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rax
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140029087
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x88], rax
xor r14d, r14d
mov dword [rbp + 0x98], r14d
mov dword [rbp + 0x90], r14d
lea rcx, [rbp + 0x88]
call fcn.140002ef0
nop
mov rdx, qword [rbp + 0xa8]
cmp dword [rdx - 8], 1
jle 0x14002882d
mov edx, dword [rdx - 0x10]
lea rcx, [rbp + 0xa8]
call fcn.140002cd0
mov rdx, qword [rbp + 0xa8]
mov dword [rbp + 0x90], r14d
test rdx, rdx
je 0x14002887b
mov rax, r12
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140028840
test rax, rax
je 0x14002887b
mov r8, r12
inc r8
cmp word [rdx + r8*2], 0
jne 0x140028852
lea rcx, [rbp + 0x88]
call fcn.140002da0
mov rax, qword [rbp + 0x88]
mov ecx, dword [rax - 0x10]
mov dword [rbp + 0x98], ecx
jmp 0x140028887
lea rcx, [rbp + 0x88]
call fcn.140002ef0
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140029092
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x14002909d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x90], r14
lea r9, [rbp + 0x90]
lea r8, [0x14006f46c]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x88]
call fcn.140011860
nop
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140004960
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028921
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x80]
mov eax, dword [rbx - 0x10]
test eax, eax
je 0x140028c0a
mov ecx, 0xa0d
cmp eax, 1
jne 0x140028960
cmp word [rbx], cx
je 0x140028c0a
cmp word [rbx], 0x23
je 0x140028c0a
cmp word [rbx], 0x3b
je 0x140028c0a
nop word [rax + rax]
mov rdi, rbx
movzx ecx, word [rbx]
call fcn.14004cfe0
test eax, eax
je 0x140028a22
add rdi, 2
movzx ecx, word [rdi]
call fcn.14004cfe0
test eax, eax
jne 0x140028973
cmp rdi, rbx
je 0x140028a22
sub rdi, rbx
sar rdi, 1
mov edx, dword [rbx - 0x10]
test edx, edx
js 0x1400290b8
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x1400289c1
lea rcx, [rbp + 0x80]
call fcn.140002b00
mov rbx, qword [rbp + 0x80]
movsxd rax, edi
lea rdx, [rbx + rax*2]
mov ecx, dword [rbx - 0x10]
mov esi, ecx
sub esi, edi
lea eax, [rsi + 1]
movsxd r8, eax
add r8, r8
je 0x140028a06
test rbx, rbx
je 0x140028f83
test rdx, rdx
je 0x140028f83
lea eax, [rcx + 1]
movsxd rcx, eax
add rcx, rcx
cmp rcx, r8
jb 0x1400290a8
mov rcx, rbx
call fcn.14005f680
test esi, esi
js 0x1400290b8
cmp esi, dword [rbx - 0xc]
jg 0x1400290b8
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], r14w
mov edi, dword [rbx - 0x10]
test edi, edi
js 0x1400290b8
cmp word [rbx], 0x5b
jne 0x140028d5c
cmp edi, 1
jl 0x140028a9f
dec edi
lea esi, [rdi + 1]
cmp dword [rbx - 8], 1
jle 0x140028a5d
mov edx, dword [rbx - 0x10]
lea rcx, [rbp + 0x80]
call fcn.140002cd0
mov rbx, qword [rbp + 0x80]
movsxd r8, esi
add r8, r8
lea rdx, [rbx + 2]
je 0x140028a83
test rbx, rbx
je 0x140028f83
test rdx, rdx
je 0x140028f83
mov rcx, rbx
call fcn.14005f680
test edi, edi
js 0x1400290b8
cmp edi, dword [rbx - 0xc]
jg 0x1400290b8
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
cmp dword [rbx - 0x10], 0
jle 0x140028b76
mov edx, 0x5d
mov rcx, rbx
call fcn.140040ca0
mov rdi, rax
test rax, rax
je 0x140028b76
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x140028b76
mov r15d, 1
mov esi, dword [rbx - 0x10]
test edi, edi
jns 0x140028ae9
mov edi, r14d
mov ecx, r14d
mov r14d, esi
jmp 0x140028afa
mov ecx, edi
mov r14d, esi
cmp edi, 0x7ffffffe
jg 0x140029050
lea eax, [rdi + 1]
cmp eax, esi
jle 0x140028cc9
mov r15d, esi
sub r15d, edi
mov r14d, r15d
test r15d, r15d
jg 0x140028ccc
xor r14d, r14d
lea rcx, [rbx - 0x18]
mov rdi, qword [rbp + 0xa0]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140028b71
cmp dword [rdi + 0x10], 0
jl 0x140028d44
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140028d44
call fcn.140004a00
mov rbx, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140028b66
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0xa0], rax
mov r15, qword [rsp + 0x40]
mov eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
test eax, eax
js 0x140028f93
lea r9, [rbp + 0x90]
lea r8, [0x14006f46c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x88]
call fcn.140011860
nop
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140004960
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028bd9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x80]
mov eax, dword [rbx - 0x10]
test eax, eax
je 0x140028c0a
cmp eax, 1
jne 0x140028960
mov eax, 0xa0d
cmp word [rbx], ax
je 0x140028c0a
cmp word [rbx], 0x23
je 0x140028c0a
cmp word [rbx], 0x3b
jne 0x140028960
mov dword [rbp + 0x94], r14d
lea rcx, [rbp + 0x88]
call fcn.140002ef0
mov dword [rbp + 0x98], r14d
mov bl, 1
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028c48
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028c6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov dword [rbp + 0x94], r14d
lea rcx, [rbp + 0x88]
call fcn.140002ef0
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028c9f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028fc1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140028fc1
sub r14d, ecx
sub esi, r15d
sub r14d, r15d
inc r14d
cmp dword [rbx - 8], 1
jle 0x140028cf1
mov edx, dword [rbx - 0x10]
lea rcx, [rbp + 0x80]
call fcn.140002cd0
mov rbx, qword [rbp + 0x80]
movsxd r8, r14d
mov ecx, edi
mov eax, r15d
add rax, rcx
lea rdx, [rbx + rax*2]
lea rcx, [rbx + rcx*2]
add r8, r8
je 0x140028d20
test rcx, rcx
je 0x140028f83
test rdx, rdx
je 0x140028f83
call fcn.14005f680
test esi, esi
js 0x1400290b8
cmp esi, dword [rbx - 0xc]
jg 0x1400290b8
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor r14d, r14d
mov word [rbx + rax*2], r14w
jmp 0x140028b1a
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rbp + 0xa0]
call fcn.140002da0
jmp 0x140028b71
test edi, edi
jg 0x140028d65
mov edi, r12d
jmp 0x140028d85
mov edx, 0x3d
mov rcx, rbx
call fcn.140040ca0
mov rdi, rax
test rax, rax
jne 0x140028d7f
mov edi, r12d
jmp 0x140028d85
sub rdi, rbx
sar rdi, 1
mov r9d, edi
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x80]
call fcn.140011a20
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0xb8]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140028e02
cmp dword [rbx + 0x10], 0
jl 0x140028df1
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140028df1
call fcn.140004a00
mov rsi, rax
mov ecx, r12d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140028de4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp + 0xb8], rax
jmp 0x140028e02
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.140002da0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028e21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [rdi + 1]
mov rax, qword [rbp + 0x80]
mov r9d, dword [rax - 0x10]
sub r9d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x80]
call fcn.140011a20
nop
mov rdx, qword [rsp + 0x58]
lea rbx, [rdx - 0x18]
mov rdi, qword [rbp + 0xb0]
add rdi, 0xffffffffffffffe8
cmp rbx, rdi
je 0x140028eaf
cmp dword [rdi + 0x10], 0
jl 0x140028e9e
mov rax, qword [rdi]
cmp qword [rbx], rax
jne 0x140028e9e
mov rcx, rbx
call fcn.140004a00
mov rsi, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140028e91
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp + 0xb0], rax
jmp 0x140028eaf
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xb0]
call fcn.140002da0
nop
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x140028ec8
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [r13 + 8]
cmp rbx, qword [r13 + 0x10]
je 0x140028ef0
mov rcx, qword [rbp + 0xa0]
add rcx, 0xffffffffffffffe8
call fcn.140004a00
add rax, 0x18
mov qword [rbx], rax
add qword [r13 + 8], 8
jmp 0x140028f02
lea r8, [rbp + 0xa0]
mov rdx, rbx
mov rcx, r13
call fcn.140011bc0
mov rbx, qword [r15 + 8]
cmp rbx, qword [r15 + 0x10]
je 0x140028f2a
mov rcx, qword [rbp + 0xb8]
add rcx, 0xffffffffffffffe8
call fcn.140004a00
add rax, 0x18
mov qword [rbx], rax
add qword [r15 + 8], 8
jmp 0x140028f3c
lea r8, [rbp + 0xb8]
mov rdx, rbx
mov rcx, r15
call fcn.140011bc0
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rdi + 8]
cmp rbx, qword [rdi + 0x10]
je 0x140028f6c
mov rcx, qword [rbp + 0xb0]
add rcx, 0xffffffffffffffe8
call fcn.140004a00
add rax, 0x18
mov qword [rbx], rax
add qword [rdi + 8], 8
jmp 0x140028b76
lea r8, [rbp + 0xb0]
mov rdx, rbx
mov rcx, rdi
call fcn.140011bc0
jmp 0x140028b76
call fcn.14004b500
mov dword [rax], 0x16
jmp 0x1400290b3
lea rcx, [rbp + 0x80]
call fcn.140002ef0
jmp 0x140028c0a
mov edx, 1
mov rcx, r14
call fcn.14003eed0
test rdi, rdi
je 0x140028fbf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028fe3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140029005
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x140029026
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, bl
jmp 0x14002902d
xor al, al
mov rcx, qword [rbp + 0x8f0]
xor rcx, rsp
call fcn.14003f1d0
add rsp, 0xa08
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80070216
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
nop
call fcn.14004b500
mov dword [rax], 0x22
call fcn.14004b3dc
mov ecx, 0x80070057
call fcn.1400018b0
int3