Function at 0x14000ea00
Capabilities:
Get geographical location
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x140], rbx
mov rax, qword [0x140030020]
xor rax, rsp
mov qword [rsp + 0xe8], rax
mov r12, rdx
mov r15, rcx
mov qword [rsp + 0xb0], rcx
xor r13d, r13d
mov qword [rsp + 0x50], r13
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [0x140023ef0]
xor edx, edx
lea r8d, [r13 + 0x17]
lea rcx, [0x140023ee0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
lea r14d, [r13 + 1]
test eax, eax
js 0x14000ec37
mov qword [rsp + 0x48], r13
lea rcx, str.Poller
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x14000eaac
mov ecx, 0x8007000e
call fcn.140002460
nop
mov si, r13w
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
lea rcx, str.GetXML_Data_with_Live_Network
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x14000eadd
mov ecx, 0x8007000e
call fcn.140002460
int3
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x1400243c0]
xor edx, edx
lea r8d, [rdx + 0x17]
lea rcx, [0x140024318]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14000eba7
mov dword [rsp + 0x60], r13d
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + 0x38]
mov ebp, eax
mov ecx, dword [rsp + 0x60]
test cl, 4
jne 0x14000eb33
test cl, 0x10
je 0x14000eb36
or esi, 0xffffffff
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000eb4b
mov qword [rsp + 0x30], r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
test ebp, ebp
js 0x14000eba7
test si, si
je 0x14000eba7
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov edx, r14d
mov r9, rbx
mov r8, rdi
call qword [rax + 0x50]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000eb7e
mov qword [rsp + 0x50], r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000eb8f
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x14000ec37
lea rsi, str.GetXML_Data_failed_with_no_network
cmp rsi, rbx
je 0x14000ebdd
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x14000ebdd
mov ecx, 0x8007000e
call fcn.140002460
int3
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov edx, 1
mov r9, rbx
mov r8, rdi
call qword [rax + 0x50]
or dword [r12], 0x20
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000ec09
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000ec2d
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, 0x80004005
jmp 0x14000f9e0
mov rbx, r13
mov qword [rsp + 0x88], rbx
mov rcx, qword [r15]
mov rax, qword [rcx]
lea rdx, [rsp + 0xb8]
call qword [rax + 0x88]
mov rdi, qword [rsp + 0xb8]
test rdi, rdi
je 0x14000ec8f
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x88], rax
test rax, rax
jne 0x14000ec8f
mov ecx, 0x8007000e
call fcn.140002460
int3
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
jne 0x14000ecd5
lea rdi, str.http:__webservices.autodesk.com_CommCntrLinkCollectionRequest
cmp rdi, rbx
je 0x14000ecd5
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x88], rax
test rax, rax
jne 0x14000ecd5
mov ecx, 0x8007000e
call fcn.140002460
nop
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
lea rcx, str.ProductInfo
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rdi, rax
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x14000ed02
mov ecx, 0x8007000e
call fcn.140002460
int3
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x58], r13
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x140025808]
mov r8d, r14d
xor edx, edx
lea rcx, [0x1400235c0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r9, [rsp + 0x80]
lea r8, [0x1400235a0]
mov edx, dword [r15 + 0x10]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000ed65
mov qword [rsp + 0x58], r13
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsp + 0x68], r13
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea r8, [rsp + 0x68]
lea rdx, [0x1400257d8]
call qword [rax]
mov esi, eax
test eax, eax
js 0x14000f995
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + 0x58]
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000edef
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rsi
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000ede7
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000edef
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + 0x88]
lea rcx, [0x140024be0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, [0x140024be0]
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000ee2f
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000ee90
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000ee90
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000eebd
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000ee88
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000eebd
mov ecx, eax
call fcn.140002460
int3
lea rcx, [0x140024bfc]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, [0x140024bfc]
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000eebd
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + 0x68]
lea rcx, str.Locale
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.Locale
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000eefa
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000ef47
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000ef3f
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000ef47
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + 0xd8]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000efec
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000efec
lea rcx, str.SubscriptionID
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.SubscriptionID
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000ef9f
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000efec
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000efe4
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000efec
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + 0xe8]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000f091
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f091
lea rcx, str.SubscriptionMacID
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.SubscriptionMacID
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f044
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f091
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f089
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000f091
mov ecx, eax
call fcn.140002460
int3
mov qword [rsp + 0x90], r13
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x90]
call qword [rax + 0x48]
lea rcx, str.CadManagerControlCommunicationCenter
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.CadManagerControlCommunicationCenter
lea rcx, [rsp + 0x90]
call fcn.14000c020
test eax, eax
jns 0x14000f0dc
mov ecx, eax
call fcn.140002460
int3
mov rsi, r13
mov qword [rsp + 0xc8], r13
mov dword [rsp + 0xd0], r13d
mov qword [rsp + 0x40], r13
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, qword [rsp + 0x90]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000f1af
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0xc8], rsi
mov dword [rsp + 0x98], r13d
mov dword [rsp + 0xa8], 4
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, str.EnableSerialNumberPassing
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x98], 0
jne 0x14000f184
mov r14w, r13w
test rsi, rsi
je 0x14000f19d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rsi, r13
mov qword [rsp + 0xc8], r13
mov dword [rsp + 0xd0], r13d
test r14w, r14w
je 0x14000f2bb
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x30]
call qword [rax + 0x98]
lea rcx, str.id1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.id1
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f1f4
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f241
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f239
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000f241
mov ecx, eax
call fcn.140002460
int3
lea rcx, str.id2
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.id2
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f26e
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f2bb
mov qword [rsp + 0x40], r13
lea r8, [rsp + 0x40]
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f2b3
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x40]
mov qword [rsp + 0x38], r11
jmp 0x14000f2bb
mov ecx, eax
call fcn.140002460
int3
lea rcx, str.Preview
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.Preview
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f2e8
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [r15]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + 0x80]
cmp word [rsp + 0x60], 0
je 0x14000f32e
lea rcx, [0x140024d2c]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, [0x140024d2c]
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f35b
mov ecx, eax
call fcn.140002460
int3
lea rcx, [0x140024d30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, [0x140024d30]
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f35b
mov ecx, eax
call fcn.140002460
int3
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
test rsi, rsi
je 0x14000f376
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [r15]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
call qword [rax + VarDecFix]
mov edi, eax
test eax, eax
jns 0x14000f405
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000f3c4
mov rdx, qword [rcx]
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000f3d8
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000f3fe
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, edi
jmp 0x14000f9e0
cmp word [rsp + 0x78], 0
jne 0x14000f43a
lea rcx, str.LiveUpdateOnly1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, str.LiveUpdateOnly1
lea rcx, [rsp + 0x38]
call fcn.14000c020
test eax, eax
jns 0x14000f43a
mov ecx, eax
call fcn.140002460
int3
lea rcx, [0x140024d5c]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
lea rdx, [0x140024d5c]
lea rcx, [rsp + 0x88]
call fcn.14000c020
test eax, eax
jns 0x14000f46a
mov ecx, eax
call fcn.140002460
int3
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f4bd
mov qword [rsp + 0x48], r13
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rbx, qword [rsp + 0x88]
mov rcx, rbx
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f4b5
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rdi, qword [rsp + 0x48]
mov qword [rsp + 0x88], rdi
jmp 0x14000f4c5
mov ecx, eax
call fcn.140002460
int3
mov rdi, qword [rsp + 0x88]
lea rcx, [0x140024d60]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x14000f4ea
mov ecx, 0x8007000e
call fcn.140002460
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f52d
mov qword [rsp + 0x48], r13
lea r8, [rsp + 0x48]
mov rdx, rdi
mov rcx, rbx
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f525
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rbx
jmp 0x14000f52d
mov ecx, eax
call fcn.140002460
int3
mov rdx, rbx
mov rcx, r15
call fcn.140011fd0
lea r11, [rsp + 0xa0]
mov qword [rsp + 0x20], r11
lea r9, [0x1400245b0]
xor edx, edx
lea r8d, [rdx + 0x15]
lea rcx, [0x1400245c0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
je 0x14000f606
lea rbp, str.GetXMLData___failed_to_init_AcInetEngine
cmp rbp, rbx
je 0x14000f59d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbp
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x14000f59d
mov ecx, 0x8007000e
call fcn.140002460
int3
mov rdx, rbx
mov rcx, r15
call fcn.140011fd0
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000f5c4
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000f5d8
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000f5fc
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, 0x80004005
jmp 0x14000f9e0
mov qword [rsp + 0x70], r13
test rdi, rdi
jne 0x14000f615
mov r14, r13
jmp 0x14000f62c
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov r14, rax
mov qword [rsp + 0x90], r14
test rdi, rdi
je 0x14000f649
test r14, r14
jne 0x14000f649
mov ecx, 0x8007000e
call fcn.140002460
nop
mov dword [rsp + 0x9c], r13d
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r13
lea rdx, [rsp + 0x9c]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x70]
mov r8d, 0x2a
mov rdx, r14
call qword [rax + 0x18]
mov r8d, dword [rsp + 0x9c]
cmp r8d, 0x3e8
je 0x14000f83e
cmp r8d, 0x3f8
je 0x14000f83e
lea rdx, [0x140023f60]
lea rcx, [rsp + 0xc8]
call fcn.14000be50
lea rbp, str.GetXMLData___failed_to_transfer_file_from_remote_server_to_local._Error_code_
cmp rbp, rbx
je 0x14000f6eb
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbp
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x14000f6eb
mov ecx, 0x8007000e
call fcn.140002460
int3
lea rcx, [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r12, eax
test rbx, rbx
je 0x14000f709
test eax, eax
je 0x14000f7a6
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
movsxd rbp, eax
lea r15d, [rbp + r12]
cmp r15d, ebp
jl 0x14000f833
mov edx, r15d
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14000f833
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f767
mov r9, rbp
add r9, r9
movsxd rdx, r15d
add rdx, rdx
mov r8, rbx
mov r15, qword [rsp + 0x48]
mov rcx, r15
call fcn.140007d70
jmp 0x14000f76c
mov r15, qword [rsp + 0x48]
lea rdx, [r12 + r12]
lea rcx, [r15 + rbp*2]
mov r9, rdx
lea r8, [rsp + 0xc8]
call fcn.140007d70
lea r11, [r12 + rbp]
mov word [r15 + r11*2], r13w
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, r15
mov qword [rsp + 0x30], rbx
mov r15, qword [rsp + 0xb0]
mov rdx, rbx
mov rcx, r15
call fcn.140011fd0
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000f7f1
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000f805
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000f829
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, 0x80004005
jmp 0x14000f9e0
mov ecx, 0x8007000e
call fcn.140002460
int3
lea rbp, str.GetXMLData___successfully_transfer_file_from_remote_server_to_local_file:
cmp rbp, rbx
je 0x14000f874
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbp
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x14000f874
mov ecx, 0x8007000e
call fcn.140002460
int3
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f8bc
mov qword [rsp + 0x48], r13
lea r8, [rsp + 0x48]
mov rdx, rbp
mov rcx, rbx
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x14000f8b4
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rbx
jmp 0x14000f8bc
mov ecx, eax
call fcn.140002460
int3
mov rdx, rbx
mov rcx, r15
call fcn.140011fd0
mov rcx, qword [r15 + 8]
cmp rcx, qword [rsp + 0x70]
je 0x14000f919
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov r11, qword [rsp + 0x70]
test r11, r11
je 0x14000f900
mov rcx, r11
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov r13, rax
mov r11, qword [rsp + 0x70]
mov qword [r15 + 8], r13
test r11, r11
je 0x14000f919
test r13, r13
jne 0x14000f919
mov ecx, 0x8007000e
call fcn.140002460
int3
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000f959
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000f96d
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000f991
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
xor eax, eax
jmp 0x14000f9e0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000f9a6
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14000f9ba
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000f9de
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov eax, esi
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.14001fb00
mov rbx, qword [rsp + 0x140]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret