Function at 0x14000a4a0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x740]
sub rsp, 0x840
mov rax, qword [0x140104200]
xor rax, rsp
mov qword [rbp + 0x730], rax
movzx r14d, cl
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xor r15d, r15d
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r15w
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov r8d, 0x101
lea rdx, [rbp + 0x310]
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x14000a64a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
mov ebx, eax
jle 0x14000a558
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
js 0x14000a561
mov ebx, 0x80004005
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000a571
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14000a580
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14000a58f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14000a59e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x14000a5ad
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14000a5bc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14000a5cb
mov rax, qword [rcx]
call qword [rax + 0x10]
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14000a617
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a612
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b337
call fcn.1400816f4
movzx eax, bl
mov rcx, qword [rbp + 0x730]
xor rcx, rsp
call fcn.140081690
lea r11, [rsp + 0x840]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov r8d, 0x111
lea rdx, [rbp + 0xe0]
lea rcx, str.USERDOMAIN
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14000a543
lea r8, [0x1400db480]
mov edx, 0x111
lea rcx, [rbp + 0xe0]
call fcn.1400887ec
lea r8, [rbp + 0x310]
mov edx, 0x111
lea rcx, [rbp + 0xe0]
call fcn.1400887ec
mov r8d, 0xc
lea rdx, str.Autorun_for
lea rcx, [rbp + 0xc0]
call fcn.1400084e0
lea rax, [rbp + 0x310]
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], 0
jne 0x14000a6c3
mov rsi, qword [rbp + 0xd0]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14000a723
lea rax, [rdi + rsi]
mov qword [rbp + 0xd0], rax
lea rbx, [rbp + 0xc0]
cmp rcx, 8
cmovae rbx, qword [rbp + 0xc0]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
lea rdx, [rbp + 0x310]
call fcn.140083ba0
lea rax, [rsi + rdi]
mov word [rbx + rax*2], r15w
jmp 0x14000a743
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x310]
movzx r8d, byte [rbp - 0x70]
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.14000be20
mov r8d, 0x104
lea rdx, [rbp + 0x520]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x1400cb0e0]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1400cb0f0]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x50]
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rsp + 0x68], xmm0
movsd xmm0, qword [rbp + 0x30]
movsd qword [rsp + 0x58], xmm0
lea rcx, [rbp + 0x48]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x48]
movups xmmword [rbp + 0x38], xmm0
movsd xmm0, qword [rbp + 0x58]
movsd qword [rsp + 0x60], xmm0
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rbp - 0x48]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x68]
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm0, qword [rsp + 0x58]
movsd qword [rbp + 0xb0], xmm0
movups xmm0, xmmword [rbp + 0x38]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [rsp + 0x60]
movsd qword [rbp + 0x70], xmm0
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x80], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x90], xmm0
movups xmm0, xmmword [rbp - 0x20]
movaps xmmword [rbp], xmm0
movsd xmm1, qword [rbp - 0x10]
movsd qword [rbp + 0x10], xmm1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x60]
lea r8, [rbp + 0x80]
lea rdx, [rbp]
mov rcx, qword [rsp + 0x78]
call rbx
mov ebx, eax
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x48]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
js 0x14000a561
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x38]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000a8f0
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x1400db4a8]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2a8
jmp 0x14000a8f3
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b29d
lea r8, [rbp - 0x68]
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x78]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
mov r12d, 8
test ebx, ebx
jns 0x14000aa87
mov qword [rsp + 0x50], r15
mov rax, qword [rsp + 0x78]
mov rdx, qword [rax]
mov rdi, qword [rdx + 0x38]
lea ecx, [r12 + 0x10]
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000a977
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x1400db480]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2b3
jmp 0x14000a97a
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b33d
lea r8, [rsp + 0x50]
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x78]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
test ebx, ebx
js 0x14000a561
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x58]
mov word [rbp - 0x58], r12w
lea rcx, [0x1400d9e70]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14000b348
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rbp - 0x48]
movsd qword [rsp + 0x58], xmm0
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000aa26
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [0x1400db4a8]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2be
jmp 0x14000aa29
mov rbx, r15
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14000b353
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp], xmm0
movsd xmm1, qword [rsp + 0x58]
movsd qword [rbp + 0x10], xmm1
lea r9, [rbp - 0x68]
lea r8, [rbp]
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x60]
call fcn.14000a420
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x14000aa87
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000a561
mov qword [rsp + 0x50], r15
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x68]
lea rdi, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rdi, qword [rbp + 0xc0]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000aaec
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000aaef
test rdi, rdi
jne 0x14000b2c9
jmp 0x14000aaef
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b35e
lea r8, [rsp + 0x50]
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x68]
call rsi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
test ebx, ebx
js 0x14000ab40
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov edx, 0xffffffff
call qword [rax + 0x58]
mov ebx, eax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
jns 0x14000a561
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea r8, [rbp - 0x80]
xor edx, edx
call qword [rax + 0x48]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rbp - 0x60]
call qword [rax + 0x38]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x50]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000abbb
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0xe0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2d4
jmp 0x14000abbe
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b29d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x60]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
test ebx, ebx
js 0x14000a561
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rbp - 0x78]
call qword [rax + 0x58]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0xb0]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x80]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rax, qword [rbp - 0x78]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0xe0]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000ac7e
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.PT0S
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2df
jmp 0x14000ac81
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b29d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x78]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
test ebx, ebx
js 0x14000a561
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x90]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx]
mov edx, 4
call qword [rax + 0x110]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x48]
mov ebx, eax
test eax, eax
js 0x14000a561
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x50], r15
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
mov edx, 9
call qword [rax + 0x50]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
lea rdx, [0x1400cb100]
call qword [rax]
mov ebx, eax
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x48]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000ad95
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.Trigger1
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2ea
jmp 0x14000ad98
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b3a0
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
nop
lea rcx, [rsp + 0x58]
call fcn.14000a420
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0xa8]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000ae07
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.PT03S
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b2f5
jmp 0x14000ae0a
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b3a0
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
nop
lea rcx, [rsp + 0x58]
call fcn.14000a420
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0xb8]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000ae79
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0xe0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b300
jmp 0x14000ae7c
mov rbx, r15
mov qword [rsp + 0x58], rbx
test rbx, rbx
je 0x14000b3a0
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x58]
call fcn.14000a420
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + 0x88]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x58]
xor edx, edx
call qword [rax + 0x60]
mov ebx, eax
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
lea rdx, str.MbLk
call qword [rax]
mov ebx, eax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x58]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000af79
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0x520]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b30b
jmp 0x14000af7c
mov rbx, r15
mov qword [rsp + 0x68], rbx
test rbx, rbx
je 0x14000b369
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
mov ebx, eax
lea rcx, [rsp + 0x68]
call fcn.14000a420
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov qword [rsp + 0x50], r15
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x78]
mov ebx, eax
test eax, eax
js 0x14000a561
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x40]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000b01a
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, str.Principal1
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b316
jmp 0x14000b01d
mov rbx, r15
mov qword [rsp + 0x68], rbx
test rbx, rbx
je 0x14000b395
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
nop
lea rcx, [rsp + 0x68]
call fcn.14000a420
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x60]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000b089
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0xe0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000b321
jmp 0x14000b08c
mov rbx, r15
mov qword [rsp + 0x68], rbx
test rbx, rbx
je 0x14000b395
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x50]
call rdi
nop
lea rcx, [rsp + 0x68]
call fcn.14000a420
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov edx, 3
call qword [rax + 0x70]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
test r14b, r14b
je 0x14000b0d3
mov edx, 1
jmp 0x14000b0d5
xor edx, edx
call qword [rax + 0x90]
mov ebx, eax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebx, ebx
js 0x14000a561
mov word [rbp - 0x58], r12w
lea rcx, str.D:_A__FA___WD_
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14000b374
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
mov r14, qword [rcx + 0x88]
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rbp - 0x48]
movsd qword [rsp + 0x68], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x38], xmm0
movsd xmm0, qword [rbp + 0x30]
movsd qword [rsp + 0x58], xmm0
mov word [rbp - 0x20], r12w
lea rcx, [rbp + 0xe0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x14000b37f
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp + 0x48], xmm0
movsd xmm0, qword [rbp - 0x10]
movsd qword [rsp + 0x60], xmm0
mov rsi, qword [rbp - 0x80]
lea rdi, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rdi, qword [rbp + 0xc0]
mov ecx, 0x18
call fcn.1400816b0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000b1d9
mov qword [rax + 8], r15
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000b1dc
test rdi, rdi
jne 0x14000b32c
jmp 0x14000b1dc
mov rbx, r15
mov qword [rsp + 0x50], rbx
test rbx, rbx
je 0x14000b38a
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp], xmm0
movsd xmm1, qword [rsp + 0x68]
movsd qword [rbp + 0x10], xmm1
movups xmm0, xmmword [rbp + 0x38]
movaps xmmword [rbp + 0x80], xmm0
movsd xmm1, qword [rsp + 0x58]
movsd qword [rbp + 0x90], xmm1
movups xmm0, xmmword [rbp + 0x48]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x60]
movsd qword [rbp + 0x70], xmm1
lea rax, [rbp - 0x38]
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 3
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 6
mov r8, rsi
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x68]
call r14
mov ebx, eax
lea rcx, [rsp + 0x50]
call fcn.14000a420
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x14000a561
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
call fcn.140088774
nop
mov ecx, 0x8007000e
call fcn.140082920
int3
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
int3
mov ecx, 0x8007000e
call fcn.140082920
int3
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
nop
mov ecx, 0x8007000e
call fcn.140082920
int3
mov ecx, 0x8007000e
call fcn.140082920
int3