Function at 0x140077340
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf8]
sub rsp, 0x1f8
mov r12, rdx
xor r14d, r14d
mov r8d, dword [0x1401a9af0]
mov rax, qword gs:[0x58]
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
mov r9, qword [rax + r8*8]
mov eax, dword [rcx + r9]
cmp dword [0x14018e6f0], eax
jg 0x14007a234
mov qword [rsp + 0x20], r14
mov rax, qword [r12 + 0xb0]
lea rsi, [0x140189c80]
mov r13, 0xffffffffffffffff
test rax, rax
je 0x14007751a
cmp word [rax], 0
je 0x14007751a
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x1400773e7
mov rax, r14
cmp dword [rsi + rax*4 + 0x450], 0x26
je 0x14007751a
inc rax
cmp rax, rcx
jl 0x1400773d1
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077416
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140077419
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14007746e
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007746e
test rbx, rbx
je 0x14007746e
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007744f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077461
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
mov rdx, qword [r12 + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400774b3
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x1400774b6
mov rdi, r14
test rdi, rdi
je 0x14007a2c9
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14007750b
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007750b
test rbx, rbx
je 0x14007750b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400774ec
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400774fe
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x40]
call fcn.1400176f0
mov rax, qword [r12 + 0xb8]
test rax, rax
je 0x140077690
cmp word [rax], 0
je 0x140077690
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x14007755d
mov rax, r14
cmp dword [rsi + rax*4 + 0x450], 0x409
je 0x140077690
inc rax
cmp rax, rcx
jl 0x140077544
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14007758c
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007758f
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400775e4
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400775e4
test rbx, rbx
je 0x1400775e4
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400775c5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400775d7
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
mov rdx, qword [r12 + 0xb8]
lea rcx, [rsp + 0x48]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077629
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007762c
mov rdi, r14
test rdi, rdi
je 0x14007a2d4
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140077681
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077681
test rbx, rbx
je 0x140077681
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077662
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077674
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x48]
call fcn.1400176f0
mov rax, qword [r12 + 0x390]
test rax, rax
je 0x140077d56
cmp word [rax], 0
je 0x140077d56
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x1400776d9
mov rax, r14
nop word [rax + rax]
cmp dword [rsi + rax*4 + 0x450], 0x408
je 0x140077d56
inc rax
cmp rax, rcx
jl 0x1400776c0
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077708
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007770b
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140077760
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077760
test rbx, rbx
je 0x140077760
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077741
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077753
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rdx, str.Command_Line:_n
lea rcx, [rsp + 0x50]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400777a4
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x1400777a7
mov rdi, r14
test rdi, rdi
je 0x14007a2df
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400777fc
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400777fc
test rbx, rbx
je 0x1400777fc
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400777dd
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400777ef
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x50]
call fcn.1400176f0
mov rcx, qword [r12 + 0x390]
call fcn.1400e81d8
mov rdx, rax
mov qword [rbp + 0x38], rax
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140077822
cmp rcx, 0x64
jbe 0x140077d29
mov esi, r14d
mov dword [rbp + 0x158], r14d
mov rax, r13
inc rax
cmp word [rdx + rax*2], si
jne 0x140077843
cmp rax, 0x64
jbe 0x140077cf4
mov rax, r14
mov rdi, rdx
nop dword [rax]
add rax, 0x64
mov qword [rbp + 0x40], rax
lea rax, [rdx + rax*2]
mov qword [rbp + 0x70], rax
movzx ecx, word [rax]
mov word [rbp + 0x150], cx
mov word [rax], r14w
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400778be
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400778c1
test rdi, rdi
jne 0x14007a142
jmp 0x1400778c1
mov rbx, r14
mov qword [rbp + 0xc0], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x98], rax
test rax, rax
je 0x1400779fd
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140077916
mov rcx, qword [rcx]
test rcx, rcx
je 0x140077916
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140077919
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007792c
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x14007792f
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a14d
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a14d
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140077975
test r14d, r14d
jne 0x14007a14d
jmp 0x1400779f8
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x1400779bd
mov rdx, qword [rdi]
test rdx, rdx
je 0x1400779bd
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x1400779bd
cmp r9, r8
jb 0x1400779a3
call fcn.1400e3010
jmp 0x1400779bd
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rbx]
test rdx, rdx
je 0x1400779f8
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x1400779f8
test rcx, rcx
jne 0x1400779f3
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
xor r14d, r14d
jmp 0x140077a00
call fcn.1400e3010
xor r14d, r14d
jmp 0x140077a00
mov rsi, r14
test rsi, rsi
je 0x14007a2f5
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140077a55
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140077a55
test rdi, rdi
je 0x140077a55
mov rcx, qword [rdi]
test rcx, rcx
je 0x140077a36
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140077a48
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077a97
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077a78
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077a8a
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140077ad3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str._n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a158
jmp 0x140077ad6
mov rbx, r14
mov qword [rbp + 0xc8], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140077c0f
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140077b28
mov rcx, qword [rcx]
test rcx, rcx
je 0x140077b28
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140077b2b
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077b3e
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140077b41
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a163
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a163
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140077b87
test r14d, r14d
jne 0x14007a163
jmp 0x140077c0a
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140077bcf
mov rdx, qword [rdi]
test rdx, rdx
je 0x140077bcf
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x140077bcf
cmp r9, r8
jb 0x140077bb5
call fcn.1400e3010
jmp 0x140077bcf
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rbx]
test rdx, rdx
je 0x140077c0a
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x140077c0a
test rcx, rcx
jne 0x140077c05
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
xor r14d, r14d
jmp 0x140077c12
call fcn.1400e3010
xor r14d, r14d
jmp 0x140077c12
mov rsi, r14
test rsi, rsi
je 0x14007a2ea
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140077c67
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140077c67
test rdi, rdi
je 0x140077c67
mov rcx, qword [rdi]
test rcx, rcx
je 0x140077c48
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140077c5a
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077ca9
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077c8a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077c9c
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov rax, qword [rbp + 0x70]
movzx ecx, word [rbp + 0x150]
mov word [rax], cx
mov esi, dword [rbp + 0x158]
add esi, 0x64
mov dword [rbp + 0x158], esi
movsxd rax, esi
mov rdx, qword [rbp + 0x38]
lea rdi, [rdx + rax*2]
mov rax, r13
inc rax
cmp word [rdi + rax*2], 0
jne 0x140077cd4
cmp rax, 0x64
jbe 0x140077ced
mov rax, qword [rbp + 0x40]
jmp 0x140077860
mov r12, qword [rbp + 0x148]
movsxd rax, esi
lea rdx, [rdx + rax*2]
lea rcx, [rsp + 0x38]
call fcn.140005360
nop
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rsp + 0x38]
call fcn.1400176f0
lea rsi, [0x140189c80]
jmp 0x140077d56
mov rdx, qword [r12 + 0x390]
lea rcx, [rsp + 0x60]
call fcn.140005360
nop
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rsp + 0x60]
call fcn.1400176f0
mov rax, qword [r12 + 0xc0]
test rax, rax
je 0x140077f72
cmp word [rax], 0
je 0x140077f72
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x140077d99
mov rax, r14
cmp dword [rsi + rax*4 + 0x450], 0x425
je 0x140077f72
inc rax
cmp rax, rcx
jl 0x140077d80
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077dc8
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140077dcb
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140077e20
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077e20
test rbx, rbx
je 0x140077e20
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077e01
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077e13
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rdx, str.Path:_n
lea rcx, [rsp + 0x68]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077e64
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140077e67
mov rdi, r14
test rdi, rdi
je 0x14007a300
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140077ebc
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077ebc
test rbx, rbx
je 0x140077ebc
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077e9d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077eaf
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x68]
call fcn.1400176f0
mov rdx, qword [r12 + 0xc0]
lea rcx, [rsp + 0x70]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077f0b
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140077f0e
mov rdi, r14
test rdi, rdi
je 0x14007a30b
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140077f63
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140077f63
test rbx, rbx
je 0x140077f63
mov rcx, qword [rbx]
test rcx, rcx
je 0x140077f44
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140077f56
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x70]
call fcn.1400176f0
mov rax, qword [r12 + 0x3c0]
test rax, rax
je 0x14007818f
cmp word [rax], 0
je 0x14007818f
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x140077fb9
mov rax, r14
nop dword [rax]
cmp dword [rsi + rax*4 + 0x450], 0x676
je 0x14007818f
inc rax
cmp rax, rcx
jl 0x140077fa0
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140077fe8
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140077feb
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078040
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078040
test rbx, rbx
je 0x140078040
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078021
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078033
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rdx, str.Package:_n
lea rcx, [rsp + 0x78]
call fcn.140055890
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078084
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140078087
mov rdi, r14
test rdi, rdi
je 0x14007a316
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400780dc
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400780dc
test rbx, rbx
je 0x1400780dc
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400780bd
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400780cf
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x78]
call fcn.1400176f0
mov rdx, qword [r12 + 0x3c0]
lea rcx, [rbp - 0x80]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078129
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007812c
mov rdi, r14
test rdi, rdi
je 0x14007a321
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078181
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078181
test rbx, rbx
je 0x140078181
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078162
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078174
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x80]
call fcn.1400176f0
mov rax, qword [r12 + 0x388]
test rax, rax
je 0x1400783af
cmp word [rax], 0
je 0x1400783af
movsxd rcx, dword [0x14018a00c]
test rcx, rcx
jle 0x1400781d9
mov rax, r14
nop dword [rax]
cmp dword [rsi + rax*4 + 0x450], 0x49d
je 0x1400783af
inc rax
cmp rax, rcx
jl 0x1400781c0
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078208
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007820b
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078260
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078260
test rbx, rbx
je 0x140078260
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078241
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078253
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rdx, str.Comment:_n
lea rcx, [rbp - 0x78]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400782a2
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x1400782a5
mov rdi, r14
test rdi, rdi
je 0x14007a32c
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400782fa
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400782fa
test rbx, rbx
je 0x1400782fa
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400782db
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400782ed
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x78]
call fcn.1400176f0
mov rdx, qword [r12 + 0x388]
lea rcx, [rsp + 0x58]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078348
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007834b
mov rdi, r14
test rdi, rdi
je 0x14007a337
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400783a0
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400783a0
test rbx, rbx
je 0x1400783a0
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078381
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078393
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x58]
call fcn.1400176f0
cmp qword [r12 + 0x3e0], 0
je 0x140079182
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rdi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400784f9
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140078403
mov rcx, qword [rcx]
test rcx, rcx
je 0x140078403
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140078406
mov r15d, r14d
mov rax, qword [0x14018e6e8]
test rax, rax
je 0x140078423
mov rcx, qword [rax]
test rcx, rcx
je 0x140078423
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r14d, eax
lea esi, [r15 + r14]
cmp esi, r14d
jb 0x14007a16e
mov eax, esi
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a16e
lea edx, [rsi + rsi]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rdi], rax
test rax, rax
jne 0x140078466
test esi, esi
jne 0x14007a16e
jmp 0x1400784f4
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400784ae
mov rdx, qword [rbx]
test rdx, rdx
je 0x1400784ae
lea r8d, [r15 + 1]
lea r9d, [rsi + 1]
add r9, r9
add r8, r8
je 0x1400784ae
cmp r9, r8
jb 0x140078494
call fcn.1400e3010
jmp 0x1400784ae
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rax, qword [0x14018e6e8]
test rax, rax
je 0x1400784f4
mov rdx, qword [rax]
test rdx, rdx
je 0x1400784f4
lea r8d, [r14 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rdi]
lea rcx, [rax + rcx*2]
je 0x1400784f4
test rcx, rcx
jne 0x1400784ef
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
xor r14d, r14d
jmp 0x1400784fc
call fcn.1400e3010
xor r14d, r14d
jmp 0x1400784fc
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078551
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078551
test rbx, rbx
je 0x140078551
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078532
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078544
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rdx, str.rundll32.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
test eax, eax
jne 0x14007875b
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400785b1
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.Rundll_Target:_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a179
jmp 0x1400785b4
mov rbx, r14
mov qword [rbp + 0xd0], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400786b8
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140078609
mov rcx, qword [rcx]
test rcx, rcx
je 0x140078609
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x14007860c
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007861f
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140078622
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a184
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a184
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140078665
test r14d, r14d
jne 0x14007a184
jmp 0x1400786ac
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x14007868a
mov r8, qword [rdi]
test r8, r8
je 0x14007868a
lea r9d, [r15 + 1]
add r9, r9
lea edx, [r14 + 1]
add rdx, rdx
call fcn.14002a4c0
mov r8, qword [rbx]
test r8, r8
je 0x1400786ac
lea edx, [r12 + 1]
add rdx, rdx
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
mov r9, rdx
call fcn.14002a4c0
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x1400786bb
mov rsi, r14
test rsi, rsi
je 0x14007a342
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140078710
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140078710
test rdi, rdi
je 0x140078710
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400786f1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140078703
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078a9b
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078737
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078749
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
jmp 0x140078a9b
call fcn.1400e1108
mov rdi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078795
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.COM_Class:_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14007a18f
jmp 0x140078798
mov rdi, r14
mov qword [rbp + 0xa8], rdi
test rdi, rdi
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400788e2
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x1400787ed
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400787ed
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x1400787f0
mov r15d, r14d
mov rcx, qword [rdi]
test rcx, rcx
je 0x140078803
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140078806
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a19a
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a19a
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x14007884c
test r14d, r14d
jne 0x14007a19a
jmp 0x1400788d6
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078894
mov rdx, qword [rbx]
test rdx, rdx
je 0x140078894
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x140078894
cmp r9, r8
jb 0x14007887a
call fcn.1400e3010
jmp 0x140078894
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rdi]
test rdx, rdx
je 0x1400788d6
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x1400788d6
test rcx, rcx
jne 0x1400788d1
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x1400788e5
call fcn.1400e3010
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x1400788e5
mov rsi, r14
test rsi, rsi
je 0x14007a34d
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14007893a
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007893a
test rbx, rbx
je 0x14007893a
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007891b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14007892d
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
lea rcx, [rbp + 0xa8]
call fcn.1400176f0
mov rdx, qword [r12 + 0x3c8]
test rdx, rdx
je 0x140078a9b
lea rcx, [rbp - 0x68]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078992
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140078995
mov rdi, r14
test rdi, rdi
je 0x14007a358
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400789ea
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400789ea
test rbx, rbx
je 0x1400789ea
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400789cb
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400789dd
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x68]
call fcn.1400176f0
lea rdx, [0x140132990]
lea rcx, [rbp - 0x60]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078a35
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140078a38
mov rdi, r14
test rdi, rdi
je 0x14007a363
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078a8d
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078a8d
test rbx, rbx
je 0x140078a8d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078a6e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078a80
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x60]
call fcn.1400176f0
mov rdi, qword [r12 + 0x3e0]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078ae3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140078ae6
test rdi, rdi
jne 0x14007a1a5
jmp 0x140078ae6
mov rbx, r14
mov qword [rbp + 0xd8], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078c30
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140078b3b
mov rcx, qword [rcx]
test rcx, rcx
je 0x140078b3b
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140078b3e
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078b51
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140078b54
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a1b0
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a1b0
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140078b9a
test r14d, r14d
jne 0x14007a1b0
jmp 0x140078c24
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140078be2
mov rdx, qword [rdi]
test rdx, rdx
je 0x140078be2
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x140078be2
cmp r9, r8
jb 0x140078bc8
call fcn.1400e3010
jmp 0x140078be2
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rbx]
test rdx, rdx
je 0x140078c24
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x140078c24
test rcx, rcx
jne 0x140078c1f
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x140078c33
call fcn.1400e3010
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x140078c33
mov rsi, r14
test rsi, rsi
je 0x14007a36e
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140078c88
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140078c88
test rdi, rdi
je 0x140078c88
mov rcx, qword [rdi]
test rcx, rcx
je 0x140078c69
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140078c7b
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078cca
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078cab
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078cbd
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
cmp qword [r12 + 0x3d8], 0
je 0x140078fe9
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078d18
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x140132990]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a1bb
jmp 0x140078d1b
mov rbx, r14
mov qword [rbp - 0x58], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078d54
lea r8, [rbp - 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140078d57
mov rdi, r14
test rdi, rdi
je 0x14007a379
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140078dac
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078dac
test rbx, rbx
je 0x140078dac
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078d8d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078d9f
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x58]
call fcn.1400176f0
mov rdi, qword [r12 + 0x3d8]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078e02
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140078e05
test rdi, rdi
jne 0x14007a1c6
jmp 0x140078e05
mov rbx, r14
mov qword [rbp + 0xe0], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140078f4f
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140078e5a
mov rcx, qword [rcx]
test rcx, rcx
je 0x140078e5a
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140078e5d
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078e70
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140078e73
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a1d1
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a1d1
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140078eb9
test r14d, r14d
jne 0x14007a1d1
jmp 0x140078f43
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140078f01
mov rdx, qword [rdi]
test rdx, rdx
je 0x140078f01
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x140078f01
cmp r9, r8
jb 0x140078ee7
call fcn.1400e3010
jmp 0x140078f01
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rbx]
test rdx, rdx
je 0x140078f43
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x140078f43
test rcx, rcx
jne 0x140078f3e
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x140078f52
call fcn.1400e3010
mov r12, qword [rbp + 0x148]
xor r14d, r14d
jmp 0x140078f52
mov rsi, r14
test rsi, rsi
je 0x14007a384
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140078fa7
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140078fa7
test rdi, rdi
je 0x140078fa7
mov rcx, qword [rdi]
test rcx, rcx
je 0x140078f88
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140078f9a
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140078fe9
mov rcx, qword [rbx]
test rcx, rcx
je 0x140078fca
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140078fdc
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
cmp qword [r12 + 0x3d0], 0
je 0x140079c58
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079037
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x140132990]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a1dc
jmp 0x14007903a
mov rbx, r14
mov qword [rbp - 0x50], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079073
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140079076
mov rdi, r14
test rdi, rdi
je 0x14007a38f
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400790cb
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400790cb
test rbx, rbx
je 0x1400790cb
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400790ac
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400790be
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x50]
call fcn.1400176f0
mov rdx, qword [r12 + 0x3d0]
lea rcx, [rbp - 0x48]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079117
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007911a
mov rdi, r14
test rdi, rdi
je 0x14007a39a
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14007916f
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007916f
test rbx, rbx
je 0x14007916f
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079150
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079162
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x48]
call fcn.1400176f0
jmp 0x140079c58
lea rdx, str.taskeng.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079b60
lea rdx, str.taskhost.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079b60
lea rdx, str.taskhostex.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079b60
lea rdx, str.taskhostw.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079b60
lea rdx, str.iexplore.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079ac1
lea rdx, str.iexplore.exe
mov rcx, qword [r12 + 0x118]
call fcn.1400e89f4
test eax, eax
je 0x140079ac1
cmp qword [r12 + 0x3f0], 0
je 0x140079687
lea rdx, [0x14018e6e8]
lea rcx, [rsp + 0x20]
call fcn.140055990
lea rdx, str.WMI_Providers:
lea rcx, [rbp - 0x40]
call fcn.140005360
nop
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp - 0x40]
call fcn.1400176f0
mov rsi, qword [r12 + 0x3f0]
test rsi, rsi
je 0x140079c58
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x158], rax
test rax, rax
je 0x1400792c3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str._n____
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a1e7
jmp 0x1400792c6
mov rbx, r14
mov qword [rbp - 0x38], rbx
test rbx, rbx
je 0x14007a408
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400792fc
lea r8, [rbp - 0x38]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x1400792ff
mov rdi, r14
test rdi, rdi
je 0x14007a3dc
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079354
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079354
test rbx, rbx
je 0x140079354
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079335
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079347
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x38]
call fcn.1400176f0
mov rdx, qword [rsi]
lea rcx, [rbp - 0x30]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140079398
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007939b
mov rdi, r14
test rdi, rdi
je 0x14007a3d1
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400793f0
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400793f0
test rbx, rbx
je 0x1400793f0
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400793d1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400793e3
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x30]
call fcn.1400176f0
lea rdx, str.__n_______Namespace:
lea rcx, [rbp - 0x28]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x98], rax
test rax, rax
je 0x14007943b
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007943e
mov rdi, r14
test rdi, rdi
je 0x14007a3c6
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079493
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079493
test rbx, rbx
je 0x140079493
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079474
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079486
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x28]
call fcn.1400176f0
mov rdx, qword [rsi + 8]
lea rcx, [rbp - 0x20]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400794db
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x1400794de
mov rdi, r14
test rdi, rdi
je 0x14007a3bb
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079533
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079533
test rbx, rbx
je 0x140079533
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079514
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079526
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.1400176f0
lea rdx, str._n_______DLL:
lea rcx, [rbp - 0x18]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14007957b
lea r8, [rbp - 0x18]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007957e
mov rdi, r14
test rdi, rdi
je 0x14007a3b0
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400795d3
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400795d3
test rbx, rbx
je 0x1400795d3
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400795b4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400795c6
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x18]
call fcn.1400176f0
mov rdx, qword [rsi + 0x10]
lea rcx, [rbp - 0x10]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x38], rax
test rax, rax
je 0x140079618
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007961b
mov rdi, r14
test rdi, rdi
je 0x14007a3a5
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079670
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079670
test rbx, rbx
je 0x140079670
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079651
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079663
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x10]
call fcn.1400176f0
mov rsi, qword [rsi + 0x18]
jmp 0x14007927b
test byte [r12 + 0xf8], 0x20
je 0x140079c58
cmp qword [r12 + 0x3e8], 0
je 0x140079721
lea rdx, [0x140132bbc]
lea rcx, [rbp - 8]
call fcn.140005360
nop
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp - 8]
call fcn.1400176f0
mov rdx, qword [r12 + 0x3e8]
lea rcx, [rbp]
call fcn.140005360
nop
lea rdx, [rbp]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp]
call fcn.1400176f0
lea rdx, [0x140132bc4]
lea rcx, [rbp + 8]
call fcn.140005360
nop
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp + 8]
call fcn.1400176f0
lea rdx, [0x14018e6e8]
lea rcx, [rsp + 0x20]
call fcn.140055990
lea rdx, [0x140132bc8]
lea rcx, [rbp + 0x10]
call fcn.140005360
nop
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp + 0x10]
call fcn.1400176f0
lea rcx, [0x1401a0860]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r12d, r14d
mov ecx, dword [0x1401a0844]
shl rcx, 3
call fcn.1400e8270
mov r15, rax
mov qword [rbp + 0x150], rax
mov edx, dword [0x1401a0844]
test edx, edx
jle 0x1400798df
xor esi, esi
mov r13, qword [rbp + 0x148]
nop dword [rax + rax]
mov ecx, dword [r13 + 0x24]
mov rax, qword [0x1401a0888]
cmp dword [rsi + rax + 0x2c], ecx
jne 0x1400798c1
xor ebx, ebx
mov qword [rsp + 0x30], rbx
lea rdx, [0x140132bdc]
lea rcx, [rbp + 0x78]
call fcn.140055890
nop
mov rcx, qword [0x1401a0888]
mov r8, rax
mov rdx, qword [rsi + rcx + 8]
lea rcx, [rbp + 0xa0]
call fcn.1400056b0
mov rdi, rax
mov rdx, qword [0x1401a0888]
mov rdx, qword [rsi + rdx]
lea rcx, [rbp + 0x18]
call fcn.140005360
nop
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x68]
mov rcx, rdi
call fcn.140017ab0
mov rdi, rax
lea rdx, [0x140128698]
lea rcx, [rbp + 0x60]
call fcn.140055890
nop
mov r8, rax
lea rdx, [rbp + 0x58]
mov rcx, rdi
call fcn.140017ab0
xor edi, edi
lea rcx, [rsp + 0x30]
cmp rcx, rax
je 0x140079858
mov rbx, qword [rax]
mov qword [rsp + 0x30], rbx
mov rdi, rbx
test rbx, rbx
je 0x140079858
lock inc dword [rbx + 0x10]
mov rbx, qword [rsp + 0x30]
lea rcx, [rbp + 0x58]
call fcn.1400176f0
nop
lea rcx, [rbp + 0x60]
call fcn.1400176f0
nop
lea rcx, [rbp + 0x68]
call fcn.1400176f0
nop
lea rcx, [rbp + 0x18]
call fcn.1400176f0
nop
lea rcx, [rbp + 0xa0]
call fcn.1400176f0
nop
lea rcx, [rbp + 0x78]
call fcn.1400176f0
test rdi, rdi
je 0x1400798a0
mov rcx, qword [rbx]
jmp 0x1400798a2
xor ecx, ecx
call fcn.1400e81d8
mov qword [r15], rax
inc r12d
add r15, 8
lea rcx, [rsp + 0x30]
call fcn.1400176f0
mov edx, dword [0x1401a0844]
inc r14d
add rsi, 0x38
cmp r14d, edx
jl 0x1400797a0
mov r13, 0xffffffffffffffff
mov r15, qword [rbp + 0x150]
movsxd r14, r12d
lea r9, [0x14008da00]
mov r8d, 8
mov rdx, r14
mov rcx, r15
call fcn.1400fd030
test r12d, r12d
jle 0x140079aa0
xor r12d, r12d
mov esi, r12d
nop dword [rax]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x158], rax
test rax, rax
je 0x14007994f
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x140132990]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14007a1f2
jmp 0x140079952
mov rbx, r12
mov qword [rbp + 0x20], rbx
test rbx, rbx
je 0x14007a3fd
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140079988
lea r8, [rbp + 0x20]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x14007998b
mov rdi, r12
test rdi, rdi
je 0x14007a3f2
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x1400799e0
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400799e0
test rbx, rbx
je 0x1400799e0
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400799c1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400799d3
call fcn.1400e0fb8
mov qword [rbx + 8], r12
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp + 0x20]
call fcn.1400176f0
mov rdx, qword [r15 + rsi*8]
lea rcx, [rbp + 0x28]
call fcn.140005360
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140079a25
lea r8, [rbp + 0x28]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140079a28
mov rdi, r12
test rdi, rdi
je 0x14007a3e7
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079a7d
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079a7d
test rbx, rbx
je 0x140079a7d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079a5e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079a70
call fcn.1400e0fb8
mov qword [rbx + 8], r12
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
lea rcx, [rbp + 0x28]
call fcn.1400176f0
mov rcx, qword [r15 + rsi*8]
call fcn.1400e825c
inc rsi
cmp rsi, r14
jl 0x140079910
lea rcx, [0x1401a0860]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, r15
call fcn.1400e825c
mov r12, qword [rbp + 0x148]
jmp 0x140079c58
cmp word [r12 + 0x28], 0x37
jb 0x140079c58
mov rcx, qword [r12 + 0x138]
test rcx, rcx
je 0x140079c58
lea rdx, str.iexplore.exe
mov rcx, qword [rcx + 0x118]
call fcn.1400e89f4
test eax, eax
jne 0x140079c58
lea rdx, [0x14018e6e8]
lea rcx, [rsp + 0x20]
call fcn.140055990
lea rdx, str.Tabs:
lea rcx, [rbp + 0x30]
call fcn.140005360
nop
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp + 0x30]
call fcn.1400176f0
mov qword [rbp + 0xb0], r12
lea rax, [rsp + 0x20]
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xb0]
lea rcx, [0x140075ff0]
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x140079c58
mov ecx, dword [r12 + 0x24]
call fcn.14008c4d0
mov rsi, rax
test rax, rax
je 0x140079c58
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079ba5
lea r8, [0x14018e6e8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400051c0
mov rdi, rax
jmp 0x140079ba8
mov rdi, r14
test rdi, rdi
je 0x14007a408
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079bfd
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079bfd
test rbx, rbx
je 0x140079bfd
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079bde
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079bf0
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
mov rdx, rsi
lea rcx, [rbp + 0x88]
call fcn.140005360
nop
mov r8, rax
lea rdx, str.Tasks:_n
lea rcx, [rbp + 0x80]
call fcn.1400056b0
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140055990
nop
lea rcx, [rbp + 0x80]
call fcn.1400176f0
nop
lea rcx, [rbp + 0x88]
call fcn.1400176f0
mov rcx, rsi
call fcn.1400e825c
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x140079c78
mov rcx, qword [rax]
test rcx, rcx
je 0x140079c78
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
jne 0x14007a03d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rdi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079dbc
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140079cc1
mov rcx, qword [rcx]
test rcx, rcx
je 0x140079cc1
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140079cc4
xor r15d, r15d
mov rax, qword [0x14018e6e8]
test rax, rax
je 0x140079ce3
mov rcx, qword [rax]
test rcx, rcx
je 0x140079ce3
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r14d, eax
jmp 0x140079ce6
xor r14d, r14d
lea esi, [r14 + r15]
cmp esi, r14d
jb 0x14007a1fd
mov eax, esi
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a1fd
lea edx, [rsi + rsi]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rdi], rax
test rax, rax
jne 0x140079d29
test esi, esi
jne 0x14007a1fd
jmp 0x140079db7
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079d71
mov rdx, qword [rbx]
test rdx, rdx
je 0x140079d71
lea r8d, [r15 + 1]
lea r9d, [rsi + 1]
add r9, r9
add r8, r8
je 0x140079d71
cmp r9, r8
jb 0x140079d57
call fcn.1400e3010
jmp 0x140079d71
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rax, qword [0x14018e6e8]
test rax, rax
je 0x140079db7
mov rdx, qword [rax]
test rdx, rdx
je 0x140079db7
lea r8d, [r14 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rdi]
lea rcx, [rax + rcx*2]
je 0x140079db7
test rcx, rcx
jne 0x140079db2
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
xor r14d, r14d
jmp 0x140079dc2
call fcn.1400e3010
xor r14d, r14d
jmp 0x140079dc2
xor r14d, r14d
mov edi, r14d
test rdi, rdi
je 0x14007a229
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x140079e17
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140079e17
test rbx, rbx
je 0x140079e17
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079df8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140079e0a
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov qword [rsp + 0x20], rdi
mov rdi, qword [r12 + 0x118]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079e64
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140079e67
test rdi, rdi
jne 0x14007a208
jmp 0x140079e67
mov rbx, r14
mov qword [rbp + 0xe8], rbx
test rbx, rbx
je 0x14007a229
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rsi, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140079fa3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140079ebc
mov rcx, qword [rcx]
test rcx, rcx
je 0x140079ebc
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r15d, eax
jmp 0x140079ebf
mov r15d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140079ed2
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x140079ed5
mov r12d, r14d
lea r14d, [r12 + r15]
cmp r14d, r12d
jb 0x14007a213
mov eax, r14d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14007a213
lea edx, [r14 + r14]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [rsi], rax
test rax, rax
jne 0x140079f1b
test r14d, r14d
jne 0x14007a213
jmp 0x140079f9e
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140079f63
mov rdx, qword [rdi]
test rdx, rdx
je 0x140079f63
lea r8d, [r15 + 1]
lea r9d, [r14 + 1]
add r9, r9
add r8, r8
je 0x140079f63
cmp r9, r8
jb 0x140079f49
call fcn.1400e3010
jmp 0x140079f63
mov r8, r9
xor edx, edx
call fcn.1400e36c0
call fcn.1400e864c
mov dword [rax], 0x22
call fcn.1400e8140
mov rdx, qword [rbx]
test rdx, rdx
je 0x140079f9e
lea r8d, [r12 + 1]
add r8, r8
mov ecx, r15d
mov rax, qword [rsi]
lea rcx, [rax + rcx*2]
je 0x140079f9e
test rcx, rcx
jne 0x140079f99
call fcn.1400e864c
mov dword [rax], SafeArrayPutElement
call fcn.1400e8140
xor r14d, r14d
jmp 0x140079fa6
call fcn.1400e3010
xor r14d, r14d
jmp 0x140079fa6
mov rsi, r14
test rsi, rsi
je 0x14007a137
mov rdi, qword [rsp + 0x20]
test rdi, rdi
je 0x140079ffb
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x140079ffb
test rdi, rdi
je 0x140079ffb
mov rcx, qword [rdi]
test rcx, rcx
je 0x140079fdc
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140079fee
call fcn.1400e0fb8
mov qword [rdi + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rdi
call fcn.1400e0fb8
mov qword [rsp + 0x20], rsi
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14007a03d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007a01e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14007a030
call fcn.1400e0fb8
mov qword [rbx + 8], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov rax, qword [rsp + 0x20]
xor esi, esi
test rax, rax
je 0x14007a04e
mov rdx, qword [rax]
jmp 0x14007a051
mov rdx, rsi
mov rax, qword [0x14018e6e8]
test rax, rax
je 0x14007a062
mov rcx, qword [rax]
jmp 0x14007a065
mov rcx, rsi
mov rax, r13
nop dword [rax + rax]
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x14007a070
lea rdi, [rdx + rax*2]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14007a0bf
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14007a0c2
test rdi, rdi
jne 0x14007a21e
jmp 0x14007a0c2
mov rbx, rsi
mov rdi, qword [rbp + 0x140]
mov qword [rdi], rbx
test rbx, rbx
je 0x14007a229
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x14007a120
lock xadd dword [rbx + 0x10], r13d
cmp r13d, 1
jne 0x14007a120
test rbx, rbx
je 0x14007a120
mov rcx, qword [rbx]
test rcx, rcx
je 0x14007a101
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14007a113
call fcn.1400e0fb8
mov qword [rbx + 8], rsi
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.1400e0fb8
mov rax, rdi
add rsp, 0x1f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
lea rcx, [0x14018e6f0]
call fcn.1400e151c
cmp dword [0x14018e6f0], 0xffffffff
jne 0x140077394
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400e1108
mov rbx, rax
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14007a291
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x14011f2b4]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14007a294
mov ecx, 0x8007000e
call fcn.1400e0b70
int3
mov rbx, r14
mov qword [0x14018e6e8], rbx
test rbx, rbx
jne 0x14007a2ab
mov ecx, 0x8007000e
call fcn.1400e0b70
int3
lea rcx, [0x14011b780]
call fcn.1400e137c
nop
lea rcx, [0x14018e6f0]
call fcn.1400e14bc
jmp 0x140077394
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
nop
mov ecx, 0x8007000e
call fcn.1400e0b70
int3
mov ecx, 0x8007000e
call fcn.1400e0b70
int3