Function at 0x1400248b0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13200]
mov eax, 0x13300
call fcn.140216080
sub rsp, rax
mov rax, qword [0x14033e810]
xor rax, rsp
mov qword [rbp + 0x131f0], rax
mov r13, r9
mov qword [rbp + 0x10], r9
mov qword [rbp + 0x18], r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [rbp + 0x13268]
mov qword [rbp + 0x140], rax
xor r12d, r12d
mov eax, r12d
mov ebx, dword [rbp + 0x13288]
cmp ebx, 0x100
sete al
mov dword [rbp - 0x58], eax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e48
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
lea r15, [r12 - 1]
test rsi, rsi
je 0x14002496c
cmp rsi, 0x10000
jae 0x14002495d
movzx edx, si
lea rcx, [rbp + 8]
call fcn.14000d610
jmp 0x14002497f
mov rax, r15
inc rax
cmp word [rsi + rax*2], 0
jne 0x140024960
jmp 0x14002496f
mov eax, r12d
mov r8d, eax
mov rdx, rsi
lea rcx, [rbp + 8]
call fcn.14000df90
nop
mov rcx, qword [rbp + 8]
cmp dword [rcx - 0x10], 0
jl 0x140024995
lea rdx, str.InstallerUserData_
call fcn.14024112c
mov r14d, ebx
or r14d, 0x20019
mov dword [rsp + 0x68], r14d
mov ecx, 0x100
call fcn.140095d1c
mov rbx, rax
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400249e6
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_CInstalledAppData_.0
mov qword [rbx], rax
lea rcx, [rbx + 0x10]
call fcn.140039600
jmp 0x1400249e9
mov rbx, r12
lea rax, [rbx + 0x10]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.14001fc70
nop
mov r8d, r14d
mov rdx, rsi
lea rcx, [rbp + 0xc0]
call fcn.1400210b0
test eax, eax
je 0x140026da7
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e53
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e5e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x1402e82f0]
cmp rdx, 0x10000
jae 0x140024a83
movzx edx, dx
lea rcx, [rsp + 0x58]
call fcn.14000d610
jmp 0x140024a9e
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140024a86
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.14000df90
nop
mov dword [rbp + 0x58], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x1f0]
call fcn.140241ba0
mov dword [rbp + 0x5c], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x1f0]
lea r8, [rbp + 0x5c]
lea rdx, str.UninstallString
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
mov edi, dword [rbp + 0x13260]
test eax, eax
je 0x140024b19
lea rcx, [rbp + 0x1f0]
mov rax, r15
inc rax
cmp word [rcx + rax*2], 0
jne 0x140024b03
lea rdx, [rbp + 0x1f0]
jmp 0x140024b97
lea rcx, [rsp + 0x58]
call fcn.14000e0b0
mov dword [rbp + 0x60], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x11f0]
call fcn.140241ba0
mov dword [rbp + 0x78], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x11f0]
lea r8, [rbp + 0x78]
lea rdx, str.UninstallTWestAnsiStrng
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x140024c02
lea rcx, [rbp + 0x11f0]
mov rax, r15
inc rax
cmp word [rcx + rax*2], 0
jne 0x140024b86
lea rdx, [rbp + 0x11f0]
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.14000df90
mov rcx, qword [rsp + 0x58]
call fcn.14002e250
test eax, eax
jne 0x140024c61
cmp edi, 1
jne 0x140026d64
lea rdx, str.MsiExec.exe__X
mov rax, r15
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140024bd0
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.1400157c0
test r13, r13
jne 0x140024bf1
mov eax, r12d
jmp 0x140024c50
mov rax, r15
inc rax
cmp word [r13 + rax*2], 0
jne 0x140024bf4
jmp 0x140024c50
lea rcx, [rsp + 0x58]
call fcn.14000e0b0
cmp edi, 1
jne 0x140026d64
lea rdx, str.MsiExec.exe__X
mov rax, r15
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140024c20
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.1400157c0
test r13, r13
jne 0x140024c41
mov eax, r12d
jmp 0x140024c50
mov rax, r15
inc rax
cmp word [r13 + rax*2], 0
jne 0x140024c44
mov r8d, eax
mov rdx, r13
lea rcx, [rsp + 0x58]
call fcn.1400157c0
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e69
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb0], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp], rax
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x7fff
or ecx, edx
jge 0x140024cc5
mov edx, 0x7fff
lea rcx, [rbp]
call fcn.14000df10
mov rax, qword [rbp]
cmp dword [rax - 0xc], 0x7fff
jl 0x140026e7f
mov dword [rax - 0x10], 0x7fff
mov word [rax + 0xfffe], r12w
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x11c]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x140024d5b
mov ecx, 0x7b2
movzx eax, word [rbp + 0x198]
sub ax, cx
mov ecx, 0x406
cmp ax, cx
ja 0x140024d5b
movzx eax, word [rbp + 0x19a]
dec ax
cmp ax, 0xb
ja 0x140024d5b
movzx eax, word [rbp + 0x19e]
dec ax
cmp ax, 0x1e
ja 0x140024d5b
cmp word [rbp + 0x1a0], 0x17
ja 0x140024d5b
cmp word [rbp + 0x1a2], 0x3b
ja 0x140024d5b
cmp word [rbp + 0x1a4], 0x3b
mov r14, qword [rbp + 0x11c]
jbe 0x140024d5e
mov r14, r12
mov rax, qword [rbp - 0x50]
mov qword [rax + 0x78], r14
mov dword [rsp + 0x7c], r12d
mov dword [rbp + 0x7c], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x21f0]
call fcn.140241ba0
mov dword [rbp + 0x54], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x7c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x21f0]
lea r8, [rbp + 0x54]
lea rdx, str.DisplayName
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x140026d19
lea rcx, [rbp + 0x21f0]
mov rax, r15
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140024dd0
mov r8d, eax
lea rdx, [rbp + 0x21f0]
lea rcx, [rbp - 0x68]
call fcn.14000df90
lea rdx, str.Microsoft_Edge
mov rbx, qword [rbp - 0x68]
mov rcx, rbx
call fcn.14024bf20
test eax, eax
je 0x140024e17
lea rdx, str.Microsoft_Edge_WebView2_Runtime
mov rcx, rbx
call fcn.14024bf20
test eax, eax
jne 0x140024e1f
mov dword [rsp + 0x7c], 1
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e8a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
mov dword [rbp + 0x80], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x31f0]
call fcn.140241ba0
mov dword [rbp + 0x84], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x31f0]
lea r8, [rbp + 0x84]
lea rdx, str.DisplayVersion
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x140024ecf
lea rcx, [rbp + 0x31f0]
mov rax, r15
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140024eb0
mov r8d, eax
lea rdx, [rbp + 0x31f0]
lea rcx, [rbp - 8]
call fcn.14000df90
jmp 0x140024ed8
lea rcx, [rbp - 8]
call fcn.14000e0b0
mov rcx, rbx
call fcn.14002ecb0
cmp eax, 1
je 0x140026cf9
mov rcx, rbx
call fcn.14002e250
test eax, eax
jne 0x140024f3c
test edi, edi
jne 0x140026cf9
mov rcx, r13
call fcn.14002ecb0
test eax, eax
jne 0x140026cf9
test r13, r13
jne 0x140024f17
mov eax, r12d
jmp 0x140024f2c
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [r13 + rax*2], 0
jne 0x140024f20
mov r8d, eax
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.14000df90
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140024f5a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x48]
mov dword [rdi + 0x88], 2
lea rcx, [rdi + 8]
test r13, r13
jne 0x140024f77
mov eax, r12d
jmp 0x140024f8c
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [r13 + rax*2], 0
jne 0x140024f80
mov r8d, eax
mov rdx, r13
call fcn.14000df90
lea rdx, [rbp + 0xf8]
mov rcx, rdi
call fcn.14000d7c0
lea rcx, [rdi + 0x10]
test rsi, rsi
jne 0x140024fb4
mov eax, r12d
jmp 0x140024fca
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rsi + rax*2], 0
jne 0x140024fc0
mov r8d, eax
mov rdx, rsi
call fcn.14000df90
lea rsi, [rdi + 0x18]
mov qword [rbp - 0x48], rsi
mov rdx, qword [rbp - 0x68]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp rcx, rbx
je 0x14002503f
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025033
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140025033
call fcn.14000de80
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140025025
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsi], rax
mov rdi, qword [rsp + 0x48]
jmp 0x14002503f
mov r8d, dword [rcx + 8]
mov rcx, rsi
call fcn.14000df90
lea rsi, [rdi + 0x20]
mov qword [rbp + 0x130], rsi
mov rdx, qword [rsp + 0x58]
lea rcx, [rdx - 0x18]
mov qword [rbp + 0x138], rcx
mov rbx, qword [rsi]
sub rbx, 0x18
cmp rcx, rbx
je 0x1400250b0
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400250a3
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400250a3
call fcn.14000de80
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002509a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsi], rax
jmp 0x1400250b0
mov r8d, dword [rcx + 8]
mov rcx, rsi
call fcn.14000df90
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.14002c0c0
mov rbx, qword [rsp + 0x70]
lea rdi, [rbx - 0x18]
movsxd rsi, dword [rdi + 8]
cmp esi, 8
jg 0x140025106
mov rcx, rdi
call fcn.14000de80
lea rbx, [rax + 0x18]
mov qword [rbp + 0x90], rbx
jmp 0x14002514b
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025119
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140025127
call fcn.1400a2364
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x20]
add rbx, 0xfffffffffffffff0
lea rdx, [rbx + rsi*2]
mov r9, rax
mov r8d, 8
lea rcx, [rbp + 0x90]
call fcn.140015720
mov rbx, qword [rbp + 0x90]
lea rdx, [0x1402ed9a8]
mov rcx, rbx
call fcn.14024bf20
test eax, eax
sete sil
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002517a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test sil, sil
je 0x1400251d6
mov rbx, qword [rdi]
cmp dword [rdi + 8], 0
je 0x1400251d6
mov eax, dword [rdi + 0x10]
shr eax, 0x1f
test al, al
je 0x1400251ab
cmp dword [rdi + 0xc], 0
jl 0x140026ea0
mov dword [rdi + 8], r12d
mov rax, qword [rsp + 0x70]
mov word [rax], r12w
jmp 0x1400251d6
mov eax, r15d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x1400251c4
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0x48]
cmp byte [rbp + 0x13290], 0
je 0x14002521d
lea rsi, [r13 + 0x28]
mov qword [rbp - 0x78], rsi
mov rcx, qword [rsi]
cmp dword [rcx - 0x10], 0
je 0x14002521d
add rcx, 0xffffffffffffffe8
call fcn.14000de80
add rax, 0x18
mov qword [rbp + 0x98], rax
lea rcx, [rbp + 0x98]
call fcn.140032ea0
test eax, eax
jne 0x1400257e0
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026eab
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x78], r12d
cmp dword [rbp + 0x13260], 1
jne 0x140025347
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026eb6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x14002529d
cmp rcx, 0x10000
jae 0x14002528e
movzx edx, cx
lea rcx, [rbp - 0x40]
call fcn.14000d610
jmp 0x1400252b0
mov rax, r15
inc rax
cmp word [rcx + rax*2], 0
jne 0x140025291
jmp 0x1400252a0
mov eax, r12d
mov r8d, eax
mov rdx, rcx
lea rcx, [rbp - 0x40]
call fcn.14000df90
nop
mov r9d, dword [rsp + 0x68]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.140022c00
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0xb1f0]
call fcn.140241ba0
mov r8d, 0x1000
lea rdx, [rbp + 0xb1f0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rcx, [rbp + 0xb1f0]
mov rax, r15
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140025300
mov r8d, eax
lea rdx, [rbp + 0xb1f0]
lea rcx, [rsp + 0x40]
call fcn.14000df90
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002533d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
lea rcx, [rbx - 0x18]
cmp dword [rcx + 8], 0
je 0x140025375
call fcn.14000de80
add rax, 0x18
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xa0]
call fcn.140032ea0
test eax, eax
jne 0x14002564a
mov dword [rbp + 0x88], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x41f0]
call fcn.140241ba0
mov dword [rbp + 0x20], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x41f0]
lea r8, [rbp + 0x20]
lea rdx, str.DisplayIcon
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x1400255cd
lea rcx, [rbp + 0x41f0]
mov rax, r15
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400253e0
mov r8d, eax
lea rdx, [rbp + 0x41f0]
lea rcx, [rsp + 0x40]
call fcn.14000df90
mov rbx, qword [rsp + 0x40]
lea rdi, [rbx - 0x18]
cmp dword [rdi + 8], 0
jle 0x14002564a
mov edx, 0x2c
mov rcx, rbx
call fcn.140241344
test rax, rax
je 0x14002564a
sub rax, rbx
sar rax, 1
mov qword [rbp - 0x78], rax
cmp eax, 0xffffffff
je 0x14002564a
add eax, 1
mov esi, r12d
cmovns esi, eax
mov eax, 0x7fffffff
sub eax, esi
cmp eax, 1
jl 0x140026ec1
lea eax, [rsi + 1]
mov edx, dword [rdi + 8]
mov ecx, 1
cmp eax, edx
jle 0x140025466
mov ecx, edx
sub ecx, esi
mov r13d, r12d
cmp esi, edx
cmovle r13d, ecx
test esi, esi
jne 0x14002548d
lea eax, [rsi + r13]
cmp eax, edx
jne 0x14002548d
mov rcx, rdi
call fcn.14000de80
lea rcx, [rax + 0x18]
mov qword [rbp + 0x68], rcx
jmp 0x1400254c8
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400254a0
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x1400254ae
call fcn.1400a2364
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x20]
movsxd rcx, esi
lea rdx, [rbx + rcx*2]
mov r9, rax
mov r8d, r13d
lea rcx, [rbp + 0x68]
call fcn.140015720
mov rcx, qword [rbp + 0x68]
call fcn.14024d890
mov dword [rsp + 0x78], eax
mov esi, r12d
mov rax, qword [rbp - 0x78]
test eax, eax
cmovns esi, eax
cmp esi, dword [rdi + 8]
jl 0x1400254f7
mov rcx, rdi
call fcn.14000de80
lea rdx, [rax + 0x18]
mov qword [rbp + 0xa8], rdx
jmp 0x140025534
mov rcx, qword [rdi]
test rcx, rcx
je 0x14002550a
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140025518
call fcn.1400a2364
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x20]
mov r9, rax
mov r8d, esi
mov rdx, rbx
lea rcx, [rbp + 0xa8]
call fcn.140015720
mov rdx, qword [rbp + 0xa8]
lea rbx, [rdx - 0x18]
cmp rbx, rdi
je 0x14002558e
mov eax, dword [rdi + 0x10]
shr eax, 0x1f
test al, al
jne 0x14002557f
mov rax, qword [rdi]
cmp qword [rbx], rax
jne 0x14002557f
mov rcx, rbx
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140025574
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x14002558e
mov r8d, dword [rbx + 8]
lea rcx, [rsp + 0x40]
call fcn.14000df90
nop
mov eax, r15d
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x1400255a8
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400255c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x48]
jmp 0x140025645
lea rcx, [rsp + 0x40]
call fcn.14000e0b0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
mov rbx, qword [rsp + 0x40]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14002564a
mov eax, dword [rdi + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025632
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140025632
call fcn.14000de80
mov rbx, rax
mov ecx, r15d
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140025622
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rbx, 0x18
mov qword [rsp + 0x40], rbx
mov r13, qword [rsp + 0x48]
jmp 0x14002564a
mov r8d, dword [rcx + 8]
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.14000df90
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 8], 1
jle 0x140025662
mov edx, dword [rbx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14000dd30
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
test rbx, rbx
jne 0x140025675
mov eax, r12d
jmp 0x140025689
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.14024bd08
test eax, eax
js 0x140026e37
cmp eax, dword [rbx - 0xc]
jg 0x140026e37
mov dword [rbx - 0x10], eax
mov eax, eax
mov word [rbx + rax*2], r12w
cmp dword [rbx - 0x10], 0
je 0x1400256c6
lea rcx, [rbx - 0x18]
call fcn.14000de80
add rax, 0x18
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0xb8]
call fcn.140032ea0
test eax, eax
jne 0x1400256e3
mov r8d, dword [rsp + 0x68]
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp + 0x10]
call fcn.140022e40
mov dword [rsp + 0x78], r12d
mov rbx, qword [rsp + 0x40]
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0xd1f0]
call fcn.140241ba0
mov r8d, 0x1000
lea rdx, [rbp + 0xd1f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rcx, [rbp + 0xd1f0]
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140025720
mov r8d, eax
lea rdx, [rbp + 0xd1f0]
lea rcx, [rsp + 0x40]
call fcn.14000df90
lea rcx, [rsp + 0x40]
call fcn.14002a2b0
lea rsi, [r13 + 0x28]
mov qword [rbp - 0x78], rsi
mov rdx, qword [rsp + 0x40]
lea rdi, [rdx - 0x18]
mov rbx, qword [rsi]
sub rbx, 0x18
cmp rdi, rbx
je 0x1400257ba
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400257ae
mov rax, qword [rbx]
cmp qword [rdi], rax
jne 0x1400257ae
mov rcx, rdi
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14002579c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov rcx, qword [rbp - 0x78]
mov qword [rcx], rax
mov r13, qword [rsp + 0x48]
jmp 0x1400257ba
mov r8d, dword [rdi + 8]
mov rcx, rsi
call fcn.14000df90
mov eax, dword [rsp + 0x78]
mov dword [r13 + 0x30], eax
mov eax, r15d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x1400257db
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13, qword [rsp + 0x48]
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026ecc
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov dword [rbp + 0x24], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x51f0]
call fcn.140241ba0
mov dword [rbp + 0x28], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x24]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x51f0]
lea r8, [rbp + 0x28]
lea rdx, str.DisplayVersion
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x14002587f
lea rcx, [rbp + 0x51f0]
mov rax, r15
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140025860
mov r8d, eax
lea rdx, [rbp + 0x51f0]
lea rcx, [rbp - 0x20]
call fcn.14000df90
jmp 0x140025888
lea rcx, [rbp - 0x20]
call fcn.14000e0b0
mov rdx, qword [rbp - 0x20]
lea rcx, [rdx - 0x18]
mov rbx, qword [r13 + 0x50]
sub rbx, 0x18
cmp rcx, rbx
je 0x1400258ee
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400258e0
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400258e0
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400258d1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r13 + 0x50], rax
mov r13, qword [rsp + 0x48]
jmp 0x1400258ee
mov r8d, dword [rcx + 8]
lea rcx, [r13 + 0x50]
call fcn.14000df90
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026ed7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026ee2
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x60], rdi
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026eed
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026ef8
mov rax, qword [rax]
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rbp + 0x70], rsi
mov dword [rbp - 0x70], r12d
mov dword [rbp + 0x2c], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x61f0]
call fcn.140241ba0
mov dword [rbp + 0x30], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x2c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x61f0]
lea r8, [rbp + 0x30]
lea rdx, str.InstallLocation
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x1400259ef
lea rcx, [rbp + 0x61f0]
mov rax, r15
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400259d0
mov r8d, eax
lea rdx, [rbp + 0x61f0]
lea rcx, [rbp - 0x80]
call fcn.14000df90
jmp 0x1400259f8
lea rcx, [rbp - 0x80]
call fcn.14000e0b0
mov rbx, qword [rbp - 0x80]
lea rcx, [rbx - 0x18]
mov r8d, dword [rcx + 8]
test r8d, r8d
je 0x140025b21
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x140025a6e
mov eax, dword [rsi + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025a62
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x140025a62
call fcn.14000de80
mov rbx, rax
mov ecx, r15d
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x140025a4a
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rbp + 0x70], rax
mov r13, qword [rsp + 0x48]
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x60]
jmp 0x140025a6e
mov rdx, rbx
lea rcx, [rbp + 0x70]
call fcn.14000df90
mov rcx, rbx
call fcn.140031bd0
test eax, eax
je 0x140025b21
xor edx, edx
mov r8d, 0x4000
lea rcx, [rbp + 0xf1f0]
call fcn.140241ba0
lea rcx, [rbp + 0xf1f0]
lea rax, [rbp + 0xf1f0]
sub rbx, rax
mov edx, 0x2000
nop dword [rax + rax]
lea rax, [rdx + 0x7fffdffe]
test rax, rax
je 0x140025ad2
movzx eax, word [rbx + rcx]
test ax, ax
je 0x140025ad2
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140025ab0
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0xf1f0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rcx, [rbp + 0xf1f0]
mov rax, r15
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140025b00
mov r8d, eax
lea rdx, [rbp + 0xf1f0]
lea rcx, [rbp - 0x80]
call fcn.14000df90
mov rbx, qword [rbp - 0x80]
cmp dword [rbx - 0x10], 0
je 0x140025b95
mov rcx, rbx
call fcn.14002c340
test eax, eax
jne 0x140025b95
mov rcx, qword [rbx - 0x18]
mov qword [rbp - 0x60], rcx
cmp dword [rbx - 0x10], eax
je 0x140025b95
mov eax, dword [rbx - 8]
shr eax, 0x1f
test al, al
je 0x140025b5e
cmp dword [rbx - 0xc], 0
jl 0x140026f03
mov dword [rbx - 0x10], r12d
mov word [rbx], r12w
jmp 0x140025b95
mov eax, r15d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x140025b7d
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x80], rbx
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x60]
lea rax, [rbx - 0x18]
mov qword [rbp - 0x60], rax
cmp dword [rax + 8], 0
je 0x140025bb4
mov r9, qword [rbp - 0x78]
mov rsi, qword [r9]
cmp dword [rsi - 0x10], 0
jne 0x140025c8f
mov rcx, qword [rbp + 0x130]
mov rcx, qword [rcx]
sub rcx, 0x18
call fcn.14000de80
add rax, 0x18
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp + 0x13260]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp - 0x58]
mov dword [rsp + 0x28], eax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x10]
mov rcx, qword [rbp - 0x48]
call fcn.140023d70
mov r9, qword [rbp - 0x78]
mov rsi, qword [r9]
mov rdi, qword [rsp + 0x60]
cmp dword [rsi - 0x10], 0
jne 0x140025c8f
mov rcx, qword [rbp - 0x10]
add rcx, 0xffffffffffffffe8
mov r8d, dword [rcx + 8]
test r8d, r8d
je 0x140025c8f
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x140025c8f
mov eax, dword [rsi + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025c83
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x140025c83
call fcn.14000de80
mov rbx, rax
mov ecx, r15d
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x140025c68
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov rcx, qword [rbp - 0x78]
mov qword [rcx], rax
mov r13, qword [rsp + 0x48]
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x60]
jmp 0x140025c8f
mov rdx, qword [rbp - 0x10]
mov rcx, r9
call fcn.14000df90
mov rcx, qword [rbp - 0x60]
mov r8d, dword [rcx + 8]
test r8d, r8d
jne 0x140025d92
lea rsi, [rdi - 0x18]
cmp dword [rsi + 8], r8d
je 0x140025d92
cmp dword [rbp - 0x70], r8d
je 0x140025d92
mov rcx, rdi
call fcn.14002c700
test eax, eax
je 0x140025d39
lea rcx, [r13 + 0x38]
mov qword [rbp - 0x48], rcx
mov rbx, qword [rcx]
sub rbx, 0x18
cmp rsi, rbx
je 0x140025dfc
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025d2d
mov rax, qword [rbx]
cmp qword [rsi], rax
jne 0x140025d2d
mov rcx, rsi
call fcn.14000de80
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140025d13
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov rcx, qword [rbp - 0x48]
mov qword [rcx], rax
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x60]
jmp 0x140025dfc
mov r8d, dword [rsi + 8]
mov rdx, rdi
jmp 0x140025df7
mov rbx, qword [rsi]
cmp dword [rsi + 8], 0
je 0x140025d90
mov eax, dword [rsi + 0x10]
shr eax, 0x1f
test al, al
je 0x140025d60
cmp dword [rsi + 0xc], 0
jl 0x140026f0e
mov dword [rsi + 8], r12d
mov word [rdi], r12w
jmp 0x140025d90
mov eax, r15d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x140025d79
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x60], rdi
mov r13, qword [rsp + 0x48]
jmp 0x140025dfc
lea r9, [r13 + 0x38]
mov qword [rbp - 0x48], r9
mov rsi, qword [r9]
sub rsi, 0x18
cmp rcx, rsi
je 0x140025dfc
mov eax, dword [rsi + 0x10]
shr eax, 0x1f
test al, al
jne 0x140025df1
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x140025df1
call fcn.14000de80
mov rbx, rax
mov ecx, r15d
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x140025dda
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov rcx, qword [rbp - 0x48]
mov qword [rcx], rax
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x60]
jmp 0x140025dfc
mov rdx, rbx
mov rcx, r9
call fcn.14000df90
lea rcx, [r13 + 0x38]
call fcn.14002a2b0
cmp dword [rbp - 0x70], 0
jne 0x140025e63
lea rdx, [rdi - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140025e63
mov eax, dword [rdx + 0x10]
shr eax, 0x1f
test al, al
je 0x140025e36
cmp dword [rdx + 0xc], 0
jl 0x140026f19
mov dword [rdx + 8], r12d
mov word [rdi], r12w
jmp 0x140025e63
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140025e4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x60], rdi
mov r13, qword [rsp + 0x48]
mov rsi, qword [rbp + 0x138]
cmp dword [rsi + 8], 0
jl 0x140025f90
lea rdx, str.__uninstall_app_id
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.14024112c
test rax, rax
je 0x140025f90
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x140025f90
cmp dword [rsi + 8], 0
jl 0x140025f90
lea rdx, str.__profile_
mov rcx, rbx
call fcn.14024112c
test rax, rax
je 0x140025f90
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x140025f90
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140025f38
mov eax, dword [rdx + 0x10]
shr eax, 0x1f
test al, al
je 0x140025f06
cmp dword [rdx + 0xc], 0
jl 0x140026f24
mov dword [rdx + 8], r12d
mov rax, qword [rsp + 0x70]
mov word [rax], r12w
jmp 0x140025f38
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140025f1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x60]
lea rdx, [rdi - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140025f90
mov eax, dword [rdx + 0x10]
shr eax, 0x1f
test al, al
je 0x140025f63
cmp dword [rdx + 0xc], 0
jl 0x140026f2f
mov dword [rdx + 8], r12d
mov word [rdi], r12w
jmp 0x140025f90
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140025f79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov r13, qword [rsp + 0x48]
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026f3a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x148], rax
mov rax, qword [rbp - 0x50]
mov qword [rax + 0x78], r14
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026f45
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
mov dword [rbp + 0x34], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x71f0]
call fcn.140241ba0
mov dword [rbp + 0x38], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x34]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x71f0]
lea r8, [rbp + 0x38]
lea rdx, str.Publisher
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x14002605f
lea rcx, [rbp + 0x71f0]
mov rax, r15
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140026040
mov r8d, eax
lea rdx, [rbp + 0x71f0]
lea rcx, [rbp - 0x18]
call fcn.14000df90
jmp 0x140026068
lea rcx, [rbp - 0x18]
call fcn.14000e0b0
mov rdx, qword [rbp - 0x18]
lea rcx, [rdx - 0x18]
mov rbx, qword [r13 + 0x60]
sub rbx, 0x18
cmp rcx, rbx
je 0x1400260ce
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400260c0
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400260c0
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400260b1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r13 + 0x60], rax
mov r13, qword [rsp + 0x48]
jmp 0x1400260ce
mov r8d, dword [rcx + 8]
lea rcx, [r13 + 0x60]
call fcn.14000df90
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026f50
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
mov dword [rbp + 0x3c], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x81f0]
call fcn.140241ba0
mov dword [rbp + 0x40], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x3c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x81f0]
lea r8, [rbp + 0x40]
lea rdx, str.HelpLink
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x14002616f
lea rcx, [rbp + 0x81f0]
mov rax, r15
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140026150
mov r8d, eax
lea rdx, [rbp + 0x81f0]
lea rcx, [rbp - 0x28]
call fcn.14000df90
jmp 0x140026178
lea rcx, [rbp - 0x28]
call fcn.14000e0b0
mov rdx, qword [rbp - 0x28]
lea rcx, [rdx - 0x18]
mov rbx, qword [r13 + 0x68]
sub rbx, 0x18
cmp rcx, rbx
je 0x1400261de
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400261d0
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400261d0
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400261c1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r13 + 0x68], rax
mov r13, qword [rsp + 0x48]
jmp 0x1400261de
mov r8d, dword [rcx + 8]
lea rcx, [r13 + 0x68]
call fcn.14000df90
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026f5b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov dword [rbp + 0x44], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x91f0]
call fcn.140241ba0
mov dword [rbp + 0x48], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x44]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x91f0]
lea r8, [rbp + 0x48]
lea rdx, str.Comments
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x14002627f
lea rcx, [rbp + 0x91f0]
mov rax, r15
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140026260
mov r8d, eax
lea rdx, [rbp + 0x91f0]
lea rcx, [rbp - 0x30]
call fcn.14000df90
jmp 0x140026288
lea rcx, [rbp - 0x30]
call fcn.14000e0b0
mov rdx, qword [rbp - 0x30]
lea rcx, [rdx - 0x18]
mov rbx, qword [r13 + 0x70]
sub rbx, 0x18
cmp rcx, rbx
je 0x1400262ee
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x1400262e0
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400262e0
call fcn.14000de80
mov rsi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400262d1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [r13 + 0x70], rax
mov r13, qword [rsp + 0x48]
jmp 0x1400262ee
mov r8d, dword [rcx + 8]
lea rcx, [r13 + 0x70]
call fcn.14000df90
nop
call fcn.1400a2364
mov rcx, rax
test rax, rax
je 0x140026f66
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
mov dword [rbp + 0x4c], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0xa1f0]
call fcn.140241ba0
mov dword [rbp + 0x50], 1
mov rax, qword [rbp + 0xc0]
lea rcx, [rbp + 0x4c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xa1f0]
lea r8, [rbp + 0x50]
lea rdx, str.ParentKeyName
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
test eax, eax
je 0x1400263a4
lea rcx, [rbp + 0xa1f0]
mov rax, r15
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140026370
mov r8d, eax
lea rdx, [rbp + 0xa1f0]
lea rcx, [rbp - 0x38]
call fcn.14000df90
mov rax, qword [rbp - 0x38]
mov ecx, r12d
cmp dword [rax - 0x10], ecx
setne cl
mov rax, qword [rbp - 0x50]
sub rax, 0xffffffffffffff80
jmp 0x1400263b7
lea rcx, [rbp - 0x38]
call fcn.14000e0b0
mov ecx, r12d
lea rax, [r13 + 0x80]
mov dword [rax], ecx
cmp dword [rsp + 0x7c], 0
je 0x1400263cd
mov dword [r13 + 0x84], 1
jmp 0x14002642d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x7c], 4
mov dword [rbp - 0x50], 4
mov rax, qword [rbp + 0xc0]
lea rcx, [rsp + 0x7c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x50]
lea rdx, str.SystemComponent
lea rcx, [rbp + 0xc0]
call qword [rax + pe_nt_image_headers64]
cmp eax, 1
jne 0x140026426
cmp dword [rsp + 0x68], eax
je 0x14002641d
mov eax, r12d
mov dword [r13 + 0x84], eax
jmp 0x14002642d
mov dword [r13 + 0x84], r12d
mov eax, dword [rbp - 0x58]
mov dword [r13 + 0x90], eax
mov eax, r12d
cmp dword [rbp + 0x13260], 1
sete al
mov dword [r13 + 0x94], eax
lea rbx, [r13 + 0xd8]
mov rdx, rbx
lea rcx, [r13 + 0x18]
call fcn.140029630
test al, al
jne 0x14002646e
lea rdx, [r13 + 0x18]
mov rcx, rbx
call fcn.14000d7c0
mov r8, qword [rbx]
movsxd rdi, dword [r8 - 0x10]
test edi, edi
js 0x140026f83
mov ecx, 1
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, edi
or eax, ecx
jge 0x14002649d
mov edx, edi
mov rcx, rbx
call fcn.14000df10
mov r8, qword [rbx]
lea eax, [rdi + 1]
movsxd rdx, eax
mov rcx, r8
call fcn.14024c294
mov rax, qword [rbx]
cmp edi, dword [rax - 0xc]
jg 0x140026f83
mov dword [rax - 0x10], edi
mov rax, qword [rbx]
mov word [rax + rdi*2], r12w
lea rdi, [r13 + 0xe0]
lea rdx, [r13 + 0x18]
mov rcx, rdi
call fcn.14000d7c0
mov r8, qword [rdi]
movsxd rbx, dword [r8 - 0x10]
test ebx, ebx
js 0x140026f83
mov ecx, 1
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, ebx
or eax, ecx
jge 0x140026504
mov edx, ebx
mov rcx, rdi
call fcn.14000df10
mov r8, qword [rdi]
lea eax, [rbx + 1]
movsxd rdx, eax
mov rcx, r8
call fcn.14024c294
mov rax, qword [rdi]
cmp ebx, dword [rax - 0xc]
jg 0x140026f83
mov dword [rax - 0x10], ebx
mov rax, qword [rdi]
mov word [rax + rbx*2], r12w
mov rcx, qword [r13 + 0x20]
cmp dword [rcx - 0x10], 0
je 0x140026bb2
jl 0x140026559
lea rdx, str..exe
call fcn.14024112c
test rax, rax
je 0x140026559
mov rdx, qword [r13 + 0x20]
sub rax, rdx
sar rax, 1
cmp eax, 0xffffffff
jne 0x140026586
mov rcx, qword [r13 + 0x20]
cmp dword [rcx - 0x10], 0
jl 0x140026b93
lea rdx, str..EXE
call fcn.14024112c
test rax, rax
je 0x140026b93
mov rdx, qword [r13 + 0x20]
sub rax, rdx
sar rax, 1
test eax, eax
jle 0x140026b93
cmp eax, dword [rdx - 0x10]
jge 0x140026963
cdqe
lea rcx, [rdx + rax*2]
mov edx, 0x20
call fcn.140241344
mov rdi, rax
mov rdx, qword [r13 + 0x20]
test rax, rax
je 0x140026963
sub rdi, rdx
sar rdi, 1
cmp edi, 0xffffffff
jle 0x140026963
cmp edi, dword [rdx - 0x10]
jl 0x1400265de
lea rcx, [rdx - 0x18]
call fcn.14000de80
lea rbx, [rax + 0x18]
mov qword [rbp - 0x58], rbx
jmp 0x140026617
mov rcx, qword [rdx - 0x18]
test rcx, rcx
je 0x1400265f2
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140026600
call fcn.1400a2364
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x20]
mov r9, rax
mov r8d, edi
mov rdx, qword [r13 + 0x20]
lea rcx, [rbp - 0x58]
call fcn.140015720
mov rbx, qword [rbp - 0x58]
mov rdx, rbx
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], 7
mov word [rbp + 0x158], r12w
mov r8, r15
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x140026640
lea rcx, [rbp + 0x158]
call fcn.14000d9b0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026672
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [r13 + 0x20]
mov eax, dword [rcx - 0x10]
sub eax, edi
sub eax, 1
cmovns r12d, eax
add rcx, 0xffffffffffffffe8
movsxd rbx, dword [rcx + 8]
cmp r12d, ebx
jl 0x14002669e
call fcn.14000de80
lea rbx, [rax + 0x18]
mov qword [rbp + 0x18], rbx
jmp 0x1400266e3
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400266b1
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x1400266bf
call fcn.1400a2364
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x20]
mov rdx, rbx
movsxd rcx, r12d
sub rdx, rcx
mov rcx, qword [r13 + 0x20]
lea rdx, [rcx + rdx*2]
mov r9, rax
mov r8d, r12d
lea rcx, [rbp + 0x18]
call fcn.140015720
mov rbx, qword [rbp + 0x18]
mov rdx, rbx
mov rdi, qword [rsp + 0x48]
add rdi, 0xb8
mov r8, r15
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400266f5
mov rcx, rdi
call fcn.14000d9b0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026723
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rdi
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x140026733
mov rax, qword [rdi]
cmp word [rax], 0x20
jne 0x14002676f
mov r8, qword [rdi + 0x10]
mov eax, 1
cmp r8, rax
cmovb rax, r8
mov rcx, rdi
cmp rdx, 8
jb 0x140026755
mov rcx, qword [rdi]
sub r8, rax
mov qword [rdi + 0x10], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rax*2]
call fcn.1402414f0
jmp 0x140026723
lea rax, [rbp + 0x158]
mov r9, qword [rbp + 0x158]
mov r10, qword [rbp + 0x170]
cmp r10, 8
cmovae rax, r9
mov r11, qword [rbp + 0x168]
lea rbx, [rax + r11*2]
lea rax, [rbp + 0x158]
cmovae rax, r9
lea r8, [rax + r11*2]
lea rcx, [rbp + 0x158]
cmovae rcx, r9
cmp rcx, r8
je 0x140026801
cmp word [rcx], 0x22
je 0x1400267c5
add rcx, 2
cmp rcx, r8
jne 0x1400267b6
cmp rcx, r8
je 0x140026801
lea rax, [rcx + 2]
cmp rax, r8
je 0x140026801
movzx edx, word [rax]
cmp dx, 0x22
je 0x1400267e3
mov word [rcx], dx
add rcx, 2
add rax, 2
cmp rax, r8
jne 0x1400267d3
mov r10, qword [rbp + 0x170]
mov r11, qword [rbp + 0x168]
mov r9, qword [rbp + 0x158]
lea rax, [rbp + 0x158]
cmp r10, 8
cmovae rax, r9
mov rdx, rcx
sub rdx, rax
sar rdx, 1
sub rbx, rcx
sar rbx, 1
mov rax, r11
sub rax, rdx
cmp rax, rbx
cmovb rbx, rax
lea rax, [rbp + 0x158]
cmp r10, 8
cmovae rax, r9
lea rcx, [rax + rdx*2]
sub r11, rbx
mov qword [rbp + 0x168], r11
sub r11, rdx
lea r8, [r11*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1402414f0
lea rbx, [rbp + 0x158]
cmp qword [rbp + 0x170], 8
cmovae rbx, qword [rbp + 0x158]
lea rcx, [rbp + 0x158]
cmovae rcx, qword [rbp + 0x158]
mov rax, qword [rbp + 0x168]
lea rdi, [rcx + rax*2]
cmp rbx, rdi
je 0x1400268a7
movzx ecx, word [rbx]
call fcn.14024ba34
mov word [rbx], ax
add rbx, 2
cmp rbx, rdi
jne 0x140026893
mov r13, qword [rsp + 0x48]
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x1a8]
call fcn.14000fca0
mov rdx, rax
lea rcx, [r13 + 0x98]
call fcn.14000f1f0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 8
jb 0x140026915
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002690f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026f71
call fcn.1400081a0
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 8
jb 0x140026b93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140026b8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026e42
jmp 0x140026b8e
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], 7
mov word [rbp + 0x178], r12w
mov r8, r15
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140026990
lea rcx, [rbp + 0x178]
call fcn.14000d9b0
nop
lea rax, [rbp + 0x178]
mov r9, qword [rbp + 0x178]
mov r10, qword [rbp + 0x190]
cmp r10, 8
cmovae rax, r9
mov r11, qword [rbp + 0x188]
lea rbx, [rax + r11*2]
lea rax, [rbp + 0x178]
cmovae rax, r9
lea r8, [rax + r11*2]
lea rcx, [rbp + 0x178]
cmovae rcx, r9
cmp rcx, r8
je 0x140026a3e
nop
cmp word [rcx], 0x22
je 0x1400269ff
add rcx, 2
cmp rcx, r8
jne 0x1400269f0
cmp rcx, r8
je 0x140026a3e
lea rax, [rcx + 2]
cmp rax, r8
je 0x140026a3e
nop dword [rax]
movzx edx, word [rax]
cmp dx, 0x22
je 0x140026a20
mov word [rcx], dx
add rcx, 2
add rax, 2
cmp rax, r8
jne 0x140026a10
mov r10, qword [rbp + 0x190]
mov r11, qword [rbp + 0x188]
mov r9, qword [rbp + 0x178]
lea rax, [rbp + 0x178]
cmp r10, 8
cmovae rax, r9
mov rdx, rcx
sub rdx, rax
sar rdx, 1
sub rbx, rcx
sar rbx, 1
mov rax, r11
sub rax, rdx
cmp rax, rbx
cmovb rbx, rax
lea rax, [rbp + 0x178]
cmp r10, 8
cmovae rax, r9
lea rcx, [rax + rdx*2]
sub r11, rbx
mov qword [rbp + 0x188], r11
sub r11, rdx
lea r8, [r11*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.1402414f0
lea rbx, [rbp + 0x178]
cmp qword [rbp + 0x190], 8
cmovae rbx, qword [rbp + 0x178]
lea rcx, [rbp + 0x178]
cmovae rcx, qword [rbp + 0x178]
mov rax, qword [rbp + 0x188]
lea rdi, [rcx + rax*2]
cmp rbx, rdi
je 0x140026ae4
movzx ecx, word [rbx]
call fcn.14024ba34
mov word [rbx], ax
add rbx, 2
cmp rbx, rdi
jne 0x140026ad0
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x1c8]
call fcn.14000fca0
mov rdx, rax
lea rcx, [r13 + 0x98]
call fcn.14000f1f0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 8
jb 0x140026b4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140026b47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026f77
call fcn.1400081a0
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 8
jb 0x140026b93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140026b8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026f7d
call fcn.1400081a0
mov byte [r13 + 0xe8], 1
lea rdx, [rsp + 0x48]
mov rcx, qword [rbp + 0x140]
call fcn.14003f730
movzx r12d, al
jmp 0x140026bb8
mov r12d, 1
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026bd7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026bf6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026c15
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026c34
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026c56
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026c75
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026c94
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026cb4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026cd3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026cf2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
jmp 0x140026cfd
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026d23
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140026d23
lea rcx, [rbp - 0x68]
call fcn.14000e0b0
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026d42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026d64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026d84
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026da2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.14001feb0
nop
test rbx, rbx
je 0x140026dec
mov eax, r15d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140026dec
mov rbx, qword [rsp + 0x50]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140026dec
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x140026e0a
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r12d
mov rcx, qword [rbp + 0x131f0]
xor rcx, rsp
call fcn.1402155d0
mov rbx, qword [rsp + 0x13340]
add rsp, 0x13300
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80070057
call fcn.1400080b0
nop
call fcn.14024b534
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
int3
mov ecx, 0x80070216
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80070057
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
mov ecx, 0x80004005
call fcn.1400080b0
nop
call fcn.14024b534
nop
call fcn.14024b534
nop
call fcn.14024b534
int3
mov ecx, 0x80070057
call fcn.1400080b0
int3