Function at 0x14002fc60
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rbp + 0x770], rax
xor esi, esi
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp + 0x204]
call fcn.140225390
mov dword [rbp + 0x200], 0x11c
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
lea rdi, [rsi - 1]
lea r15, vtable.srl::GroupID.0
lea r12, vtable.srl::Name.0
test eax, eax
je 0x140030ef8
cmp dword [rbp + 0x204], 6
jb 0x14002fd2b
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x28]
call fcn.14002e4a0
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
cmp dword [rbp + 0x204], ecx
jne 0x14002fd15
cmp dword [rbp + 0x208], eax
je 0x14002fd2b
mov dword [rbp + 0x204], ecx
mov dword [rbp + 0x208], eax
mov eax, dword [rsp + 0x20]
mov dword [rbp + 0x20c], eax
lea rcx, [rbp - 0x20]
call fcn.1400194c0
nop
movzx ebx, word [rbp + 0x20c]
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.1400196c0
mov rcx, rax
mov dl, 0x2e
call fcn.14002aa30
mov rcx, rax
mov edx, dword [rbp + 0x208]
call fcn.1400196c0
mov rcx, rax
mov dl, 0x2e
call fcn.14002aa30
mov rcx, rax
mov edx, ebx
call fcn.1400196c0
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 0x40]
call fcn.140076f70
mov rbx, rax
mov edx, 0x1168d
lea rcx, [rbp + 0x6e0]
call fcn.1400227a0
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.140050650
nop
lea rcx, [rbp + 0x6e0]
call fcn.140022930
nop
lea rbx, vtable.srl::Version.0
mov qword [rbp - 0x40], rbx
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002fdf1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r14, vtable.srl::Value.0
mov qword [rbp - 0x40], r14
mov rdx, qword [rbp + 0x538]
cmp rdx, 8
jb 0x14002fe42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310c3
call fcn.140004144
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rsp + 0x50], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x1400310c9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], 8
jb 0x14002fe9a
mov rdx, qword [rbp + 0x4c0]
test rdx, rdx
jne 0x14002fe9a
mov r8d, esi
jmp 0x14002feab
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002fea0
lea rcx, [rsp + 0x58]
call fcn.140002a9c
nop
mov edx, 0x115a0
lea rcx, [rbp + 0x680]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x680], r15
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 8
jb 0x14002ff26
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310d4
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x698], xmm0
mov word [rbp + 0x688], si
mov qword [rsp + 0x50], rbx
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002ff60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x50], r14
mov rdx, qword [rbp + 0x4d8]
cmp rdx, 8
jb 0x14002ffab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ffa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310da
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x320]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x320]
cmp qword [rbp + 0x338], 8
cmovae rdx, qword [rbp + 0x320]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x330]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x338]
cmp rdx, 8
jb 0x14003003a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030035
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.1400196c0
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rsp + 0x60], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x1400310e0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 8
jb 0x1400300a1
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
jne 0x1400300a1
mov r8d, esi
jmp 0x1400300af
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400300a4
lea rcx, [rsp + 0x68]
call fcn.140002a9c
nop
mov edx, 0x116c7
lea rcx, [rbp + 0x630]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rsp + 0x60]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x630], r15
mov rdx, qword [rbp + 0x650]
cmp rdx, 8
jb 0x14003012a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x638]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030125
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310eb
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x648], xmm0
mov word [rbp + 0x638], si
mov qword [rsp + 0x60], rbx
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030164
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x60], r14
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 8
jb 0x1400301af
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400301aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310f1
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x340]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 8
cmovae rdx, qword [rbp + 0x340]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x350]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 8
jb 0x14003023e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030239
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
mov edx, dword [rbp + 0x208]
lea rcx, [rbp - 0x10]
call fcn.1400196c0
lea rdx, [rbp + 0x500]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rsp + 0x70], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x1400310f7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x500]
cmp qword [rbp + 0x518], 8
jb 0x1400302a5
mov rdx, qword [rbp + 0x500]
test rdx, rdx
jne 0x1400302a5
mov r8d, esi
jmp 0x1400302bb
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400302b0
lea rcx, [rsp + 0x78]
call fcn.140002a9c
nop
mov edx, 0x116c8
lea rcx, [rbp + 0x540]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rsp + 0x70]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x540], r15
mov rdx, qword [rbp + 0x560]
cmp rdx, 8
jb 0x140030336
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030331
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031102
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x558], xmm0
mov word [rbp + 0x548], si
mov qword [rsp + 0x70], rbx
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030370
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x518]
cmp rdx, 8
jb 0x1400303bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x500]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400303b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031108
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x360]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x360]
cmp qword [rbp + 0x378], 8
cmovae rdx, qword [rbp + 0x360]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x370]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x378]
cmp rdx, 8
jb 0x14003044a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030445
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
movzx edx, word [rbp + 0x20c]
lea rcx, [rbp - 0x10]
call fcn.1400196c0
lea rdx, [rbp + 0x400]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rbp - 0x80], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x14003110e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], 8
jb 0x1400304b0
mov rdx, qword [rbp + 0x400]
test rdx, rdx
jne 0x1400304b0
mov r8d, esi
jmp 0x1400304be
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400304b3
lea rcx, [rbp - 0x78]
call fcn.140002a9c
nop
mov edx, 0x116c6
lea rcx, [rbp + 0x570]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rbp - 0x80]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x570], r15
mov rdx, qword [rbp + 0x590]
cmp rdx, 8
jb 0x140030537
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030532
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031119
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x588], xmm0
mov word [rbp + 0x578], si
mov qword [rbp - 0x80], rbx
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003056f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x80], r14
mov rdx, qword [rbp + 0x418]
cmp rdx, 8
jb 0x1400305b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400305b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003111f
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x380]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x380]
cmp qword [rbp + 0x398], 8
cmovae rdx, qword [rbp + 0x380]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x390]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x398]
cmp rdx, 8
jb 0x140030648
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030643
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
movzx edx, word [rbp + 0x314]
lea rcx, [rbp - 0x10]
call fcn.1400341a0
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rbp - 0x70], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140031125
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x420]
cmp qword [rbp + 0x438], 8
jb 0x1400306ae
mov rdx, qword [rbp + 0x420]
test rdx, rdx
jne 0x1400306ae
mov r8d, esi
jmp 0x1400306bc
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400306b1
lea rcx, [rbp - 0x68]
call fcn.140002a9c
nop
mov edx, 0x116c4
lea rcx, [rbp + 0x5a0]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rbp - 0x70]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x5a0], r15
mov rdx, qword [rbp + 0x5c0]
cmp rdx, 8
jb 0x140030735
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030730
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031130
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x5b8], xmm0
mov word [rbp + 0x5a8], si
mov qword [rbp - 0x70], rbx
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003076d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x70], r14
mov rdx, qword [rbp + 0x438]
cmp rdx, 8
jb 0x1400307b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400307b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031136
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3a0]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 8
cmovae rdx, qword [rbp + 0x3a0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3b0]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 8
jb 0x140030846
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030841
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
movzx edx, word [rbp + 0x316]
lea rcx, [rbp - 0x10]
call fcn.1400341a0
lea rdx, [rbp + 0x440]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rbp - 0x60], rbx
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x14003113c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x440]
cmp qword [rbp + 0x458], 8
jb 0x1400308ac
mov rdx, qword [rbp + 0x440]
test rdx, rdx
jne 0x1400308ac
mov r8d, esi
jmp 0x1400308bb
mov r8, rdi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400308b0
lea rcx, [rbp - 0x58]
call fcn.140002a9c
nop
mov edx, 0x116c5
lea rcx, [rbp + 0x5d0]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rbp - 0x60]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x5d0], r15
mov rdx, qword [rbp + 0x5f0]
cmp rdx, 8
jb 0x140030934
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003092f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031147
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x5e8], xmm0
mov word [rbp + 0x5d8], si
mov qword [rbp - 0x60], rbx
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003096c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x1400309b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400309b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003114d
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3c0]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 8
cmovae rdx, qword [rbp + 0x3c0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3d0]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 8
jb 0x140030a45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030a40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
movzx edx, word [rbp + 0x318]
lea rcx, [rbp - 0x10]
call fcn.1400341a0
lea rdx, [rbp + 0x460]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rsp + 0x30], r12
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140031153
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x460]
cmp qword [rbp + 0x478], 8
jb 0x140030ab4
mov rdx, qword [rbp + 0x460]
test rdx, rdx
jne 0x140030ab4
lea rcx, [rsp + 0x38]
call fcn.1400028b4
jmp 0x140030ad6
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030ac0
lea rcx, [rsp + 0x38]
call fcn.140002a9c
nop
mov edx, 0x116c3
lea rcx, [rbp + 0x600]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rsp + 0x30]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x600], r15
mov rdx, qword [rbp + 0x620]
cmp rdx, 8
jb 0x140030b46
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030b41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003115e
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x618], xmm0
mov word [rbp + 0x608], si
mov qword [rsp + 0x30], r12
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030b80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x30], r14
mov rdx, qword [rbp + 0x478]
cmp rdx, 8
jb 0x140030bcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030bc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031164
call fcn.140004144
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3e0]
call fcn.14000953c
nop
lea rcx, [rbp - 8]
call fcn.14001af80
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 8
cmovae rdx, qword [rbp + 0x3e0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3f0]
lea rcx, [rbp - 8]
call fcn.140021e50
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 8
jb 0x140030c5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030c55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.140004144
movzx edx, byte [rbp + 0x31a]
lea rcx, [rbp - 0x10]
call fcn.140012fa0
lea rdx, [rbp + 0x480]
lea rcx, [rbp - 8]
call fcn.14001a0c0
nop
mov qword [rsp + 0x40], r12
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140031170
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 8
jb 0x140030cc9
mov rdx, qword [rbp + 0x480]
test rdx, rdx
jne 0x140030cc9
lea rcx, [rsp + 0x48]
call fcn.1400028b4
jmp 0x140030ce6
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030cd0
lea rcx, [rsp + 0x48]
call fcn.140002a9c
nop
mov edx, 0x116c2
lea rcx, [rbp + 0x710]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rdx, rax
call fcn.140050650
nop
lea rcx, [rbp + 0x710]
call fcn.140022930
nop
mov qword [rsp + 0x40], r12
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030d39
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x40], r14
mov rdx, qword [rbp + 0x498]
cmp rdx, 8
jb 0x140030d84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030d7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003117b
call fcn.140004144
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov ebx, eax
lea rcx, [rbp + 0x100]
call fcn.1400194c0
nop
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
mov ecx, dword [rbp + rdx + 0x128]
and ecx, 0xfffff9ff
bts ecx, 0xb
mov dword [rbp + rdx + 0x128], ecx
mov edx, 4
lea rcx, [rbp + 0xe8]
call fcn.140222ea0
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x110]
add rcx, rdx
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
mov eax, 0x30
mov word [rbp + rcx + 0x168], ax
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
or dword [rbp + rcx + 0x128], 4
mov edx, ebx
lea rcx, [rbp + 0x110]
call fcn.1400196c0
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x118]
call fcn.14001a0c0
nop
lea rdx, [rbp + 0x660]
lea rcx, [rbp - 0x30]
call fcn.14004bae0
mov rbx, rax
mov edx, 0x116dc
lea rcx, [rbp + 0x740]
call fcn.1400227a0
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.140050650
nop
lea rcx, [rbp + 0x740]
call fcn.140022930
nop
mov qword [rbp - 0x30], r12
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030e97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x30], r14
mov rdx, qword [rbp + 0x678]
cmp rdx, 8
jb 0x140030ee2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x660]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030edc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031181
call fcn.140004144
nop
lea rcx, [rbp + 0x100]
call fcn.1400193b0
nop
lea rcx, [rbp - 0x20]
call fcn.1400193b0
mov rax, qword [0x140329c68]
test rax, rax
jne 0x140030f2e
mov ecx, 0xd8
call fcn.140084798
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140030f24
mov rcx, rax
call fcn.140010c30
jmp 0x140030f27
mov rax, rsi
mov qword [0x140329c68], rax
mov rdx, qword [rax + 0x10]
lea rcx, [rbp + 0x4a0]
call fcn.14000953c
nop
mov qword [rbp - 0x50], r12
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140031187
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 8
jb 0x140030f8a
mov rdx, qword [rbp + 0x4a0]
test rdx, rdx
jne 0x140030f8a
lea rcx, [rbp - 0x48]
call fcn.1400028b4
jmp 0x140030fa5
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030f90
lea rcx, [rbp - 0x48]
call fcn.140002a9c
nop
mov edx, 0x11627
lea rcx, [rbp + 0x6b0]
call fcn.1400227a0
nop
xor r9d, r9d
lea r8, [rbp - 0x50]
mov rdx, rax
call fcn.140050650
nop
mov qword [rbp + 0x6b0], r15
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 8
jb 0x140031014
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003100f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031192
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x6c8], xmm0
mov word [rbp + 0x6b8], si
mov qword [rbp - 0x50], r12
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14003104b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x4b8]
cmp rdx, 8
jb 0x14003108d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031088
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400310bd
call fcn.140004144
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.140220510
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
int3
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
nop
call fcn.140229804
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.140229804
int3