Function at 0x1400262e4
Capabilities:
Check os version
Get common file path

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rax - 0x898]
sub rsp, 0x970
mov qword [rbp + 0x278], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x14009a008]
xor rax, rsp
mov qword [rbp + 0x860], rax
mov rsi, rdx
mov r15, rcx
and dword [rsp + 0x30], 0
mov ebx, VarUI4FromDisp
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x530]
call fcn.1400463f0
mov dword [rbp + 0x530], ebx
lea rcx, [rbp + 0x530]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rbp + 0x534], 6
jb 0x140027412
xor eax, eax
mov qword [rbp + 0x318], rax
lea r8, [0x14009d258]
lea rdx, [0x14009d308]
lea rcx, [rbp - 0x60]
call fcn.1400059f4
nop
lea r8, [0x14009d1f0]
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400059f4
nop
lea rbx, [0x14009d270]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400059f4
nop
lea r8, [0x14009d1a0]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400059f4
nop
lea r8, [0x14009d198]
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400059f4
nop
lea r8, [0x14009d0e8]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400059f4
nop
lea r8, [0x14009d240]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.1400059f4
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026453
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026473
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026493
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400264b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400264d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400264f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026510
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002652f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002654d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
je 0x1400273e8
call fcn.140006438
mov rcx, rax
xor eax, eax
test rcx, rcx
setne al
test eax, eax
jne 0x140026585
mov ecx, 0x80004005
call fcn.140006760
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x310], rax
lea r8, [0x14009d328]
lea rdx, [0x14009d308]
lea rcx, [rbp + 0x38]
call fcn.1400059f4
nop
lea r8, [0x14009d320]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.1400059f4
nop
lea r8, [0x14009d1f0]
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1400059f4
nop
lea r8, [0x14009d200]
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.1400059f4
nop
lea r8, [0x14009d338]
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400059f4
nop
lea r8, [0x14009d2a0]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400059f4
nop
lea r8, [0x14009d220]
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1400059f4
nop
lea r8, [0x14009d1e8]
mov rdx, rax
lea rcx, [rbp]
call fcn.1400059f4
nop
lea r8, [0x14009d2a0]
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.1400059f4
nop
lea r8, [0x14009d318]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400059f4
nop
lea r8, [0x14009d220]
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400059f4
nop
lea r8, [0x14009d240]
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.1400059f4
nop
lea r8, [0x14009d1f0]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400059f4
nop
lea r8, [0x14009d1f8]
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1400059f4
nop
lea r8, [0x14009d2f8]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400059f4
nop
lea r8, [0x14009d230]
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1400059f4
nop
lea r8, [0x14009d200]
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400059f4
nop
lea r8, [0x14009d258]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400059f4
nop
mov rdx, qword [rax]
lea rcx, [rbp + 0x310]
call fcn.14002cfe8
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026741
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026760
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002677f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002679e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400267bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400267dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400267fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002681a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026839
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026858
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026877
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026896
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400268b5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400268d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400268f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026912
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026931
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026950
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002696e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x310]
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [r15 + 0x630], rax
test rax, rax
je 0x1400273c3
lea r9, [rbp + 0x300]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140070c40]
call rax
test eax, eax
js 0x1400273c3
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x330]
call fcn.1400463f0
lea rcx, [rbp + 0x330]
call fcn.14002b1c0
nop
xor eax, eax
mov qword [rbp + 0x308], rax
lea r8, [0x14009d100]
lea rdx, [0x14009d100]
lea rcx, [rbp + 0x168]
call fcn.1400059f4
nop
lea r8, [0x14009d0d8]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400059f4
nop
lea r8, [0x14009d318]
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.1400059f4
nop
lea r8, [0x14009d300]
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.1400059f4
nop
lea r8, [0x14009d2c0]
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.1400059f4
nop
lea rbx, [0x14009d358]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400059f4
nop
lea r8, [0x14009d1d8]
mov rdx, rax
lea rcx, [rbp + 0x130]
call fcn.1400059f4
nop
lea r8, [0x14009d1d8]
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.1400059f4
nop
lea r8, [0x14009d2c0]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.1400059f4
nop
lea r15, [0x14009d108]
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400059f4
nop
lea r8, [0x14009d1d8]
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.1400059f4
nop
lea r8, [0x14009d198]
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.1400059f4
nop
lea r8, [0x14009d1b0]
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.1400059f4
nop
lea r8, [0x14009d1a8]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.1400059f4
nop
lea r8, [0x14009d1c0]
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.1400059f4
nop
lea r8, [0x14009d1c0]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.1400059f4
nop
lea r8, [0x14009d1d0]
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.1400059f4
nop
lea r8, [0x14009d1a8]
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.1400059f4
nop
lea r8, [0x14009d300]
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.1400059f4
nop
lea r8, [0x14009d1b0]
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.1400059f4
nop
lea r8, [0x14009d310]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.1400059f4
nop
lea r8, [0x14009d1a0]
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.1400059f4
nop
lea r8, [0x14009d1a0]
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400059f4
nop
lea r8, [0x14009d1d0]
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.1400059f4
nop
lea r8, [0x14009d198]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400059f4
nop
lea r8, [0x14009d300]
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.1400059f4
nop
lea r8, [0x14009d190]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400059f4
nop
lea r8, [0x14009d0d8]
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.1400059f4
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026d4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026d69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026d88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026da7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026dc6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026de5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026e04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026e23
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026e45
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026e67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026e89
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026eab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026ecd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026eef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026f11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026f33
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026f55
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026f77
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026f99
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026fbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026fdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140026fff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027021
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xf8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027043
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x100]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027065
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x108]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027087
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400270a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x118]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400270cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x120]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400270ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x128]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002710f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027131
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027153
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027175
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027197
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400271b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400271db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400271fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002721e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x308]
mov rdx, qword [rbp + 0x300]
lea rcx, [rbp + 0x340]
call fcn.140030858
mov rcx, rax
mov rdx, rbx
call fcn.14002bba0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x330]
call fcn.14002b0c4
cmp qword [rax + 0x18], 8
jb 0x140027260
mov rax, qword [rax]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectory]
test eax, eax
je 0x140027280
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140027280
xor bl, bl
jmp 0x140027282
mov bl, 1
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x280]
call fcn.14002e888
test bl, bl
je 0x140027364
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x330]
call fcn.14002b0c4
nop
mov r8, rax
mov rdx, rsi
call fcn.1400261bc
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2a0]
call fcn.14002e888
nop
mov rdx, qword [rbp + 0x308]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400272ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x3c8]
call fcn.14002b0e4
nop
lea rax, [0x14007c550]
mov qword [rbp + 0x3c8], rax
lea rcx, [rbp + 0x3c8]
call fcn.140043a40
nop
mov rdx, qword [rbp + 0x310]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027339
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x318]
add rdx, 0xffffffffffffffe8
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
add ecx, edi
test ecx, ecx
jg 0x140027e0e
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x140027e0e
mov rcx, qword [rbp + 0x300]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rdx, qword [rbp + 0x308]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027394
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x3c8]
call fcn.14002b0e4
nop
lea rax, [0x14007c550]
mov qword [rbp + 0x3c8], rax
lea rcx, [rbp + 0x3c8]
call fcn.140043a40
nop
mov rbx, qword [rbp + 0x310]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400273e8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x318]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027dfe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140027dfe
lea rax, [rbp + 0x650]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1c]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x140027dfe
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x430]
call fcn.1400463f0
lea rcx, [rbp + 0x430]
call fcn.14002b1c0
nop
xor eax, eax
mov qword [rbp + 0x320], rax
lea r8, [0x14009d100]
lea rdx, [0x14009d100]
lea rcx, [rsp + 0x58]
call fcn.1400059f4
nop
lea r8, [0x14009d0d8]
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1400059f4
nop
lea r8, [0x14009d318]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400059f4
nop
lea rdi, [0x14009d300]
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400059f4
nop
lea r8, [0x14009d2c0]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400059f4
nop
lea rbx, [0x14009d358]
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.1400059f4
nop
lea r14, [0x14009d1d8]
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.1400059f4
nop
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x258]
call fcn.1400059f4
nop
lea r8, [0x14009d2c0]
mov rdx, rax
lea rcx, [rbp + 0x250]
call fcn.1400059f4
nop
lea r15, [0x14009d108]
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.1400059f4
nop
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.1400059f4
nop
lea r8, [0x14009d198]
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.1400059f4
nop
lea r8, [0x14009d1b0]
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.1400059f4
nop
lea r8, [0x14009d1a8]
mov rdx, rax
lea rcx, [rbp + 0x218]
call fcn.1400059f4
nop
lea r8, [0x14009d1c0]
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.1400059f4
nop
lea r8, [0x14009d1c0]
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x1f8]
call fcn.1400059f4
nop
lea r8, [0x14009d1d0]
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1400059f4
nop
lea r8, [0x14009d1a8]
mov rdx, rax
lea rcx, [rbp + 0x1e8]
call fcn.1400059f4
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1400059f4
nop
lea r8, [0x14009d1b0]
mov rdx, rax
lea rcx, [rbp + 0x1d8]
call fcn.1400059f4
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400059f4
nop
lea r8, [0x14009d310]
mov rdx, rax
lea rcx, [rbp + 0x1c8]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1c0]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400059f4
nop
lea r8, [0x14009d1a0]
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.1400059f4
nop
lea r8, [0x14009d1c8]
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1400059f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1400059f4
nop
lea r8, [0x14009d1a0]
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.1400059f4
nop
lea r8, [0x14009d1d0]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400059f4
nop
lea r8, [0x14009d198]
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.1400059f4
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.1400059f4
nop
lea r8, [0x14009d190]
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.1400059f4
nop
lea r8, [0x14009d0d8]
mov rdx, rax
lea rcx, [rbp + 0x320]
call fcn.1400059f4
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400277de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027800
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027822
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027844
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027866
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027888
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400278aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400278cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400278ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027910
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027932
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027954
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027976
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027998
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400279ba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1e8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400279dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400279fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1f8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027a20
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027a42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027a64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027a86
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027aa8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027aca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x228]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027aec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x230]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027b0e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x238]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027b30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x240]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027b52
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x248]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027b74
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x250]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027b96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x258]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027bb8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x260]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027bda
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x268]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027bfc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x270]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027c1e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027c3e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027c5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027c7e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027c9e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027cbd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x320]
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0x440]
call fcn.140030858
mov rcx, rax
mov rdx, rbx
call fcn.14002bba0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14002b0c4
cmp qword [rax + 0x18], 8
jb 0x140027cff
mov rax, qword [rax]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectory]
test eax, eax
je 0x140027d1f
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140027d1f
xor bl, bl
jmp 0x140027d21
mov bl, 1
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2c0]
call fcn.14002e888
test bl, bl
je 0x140027db4
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x430]
call fcn.14002b0c4
nop
mov r8, rax
mov rdx, rsi
call fcn.1400261bc
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2e0]
call fcn.14002e888
nop
mov rdx, qword [rbp + 0x320]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027d8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x4c8]
call fcn.14002b0e4
nop
lea rax, [0x14007c550]
mov qword [rbp + 0x4c8], rax
lea rcx, [rbp + 0x4c8]
call fcn.140043a40
nop
jmp 0x140027e0e
mov rdx, qword [rbp + 0x320]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027dd6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x4c8]
call fcn.14002b0e4
nop
lea rax, [0x14007c550]
mov qword [rbp + 0x4c8], rax
lea rcx, [rbp + 0x4c8]
call fcn.140043a40
nop
mov qword [rsi + 0x18], 0xf
and qword [rsi + 0x10], 0
mov byte [rsi], 0
mov rax, rsi
mov rcx, qword [rbp + 0x860]
xor rcx, rsp
call fcn.140041c20
mov rbx, qword [rsp + 0x9b0]
add rsp, 0x970
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret