Function at 0x1400319c0
Capabilities:
Get graphical window text
Inspect section memory permissions

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8f8]
sub rsp, 0x9d0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1402cf910]
xor rax, rsp
mov qword [rbp + 0x8b0], rax
mov r14, rcx
mov qword [rsp + 0x38], rcx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x34], r13d
lea rsi, [r13 - 1]
lea r15d, [r13 + 3]
test dl, dl
je 0x14003276e
mov qword [rsp + 0x40], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e13
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x34], 0x1000
mov edx, 0x92
lea rcx, [rsp + 0x40]
call fcn.140003220
mov qword [rbp + 0x6d0], 0xf
mov dword [rbp + 0x6d8], 0xbe
mov rbx, qword [rsp + 0x40]
mov qword [rbp + 0x6e0], rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031a80
mov dword [rbp + 0x6e8], eax
mov dword [rbp + 0x6ec], r13d
lea rdi, [r14 + 0x5d0]
lea r8, [rbp + 0x6d0]
xor edx, edx
mov rcx, rdi
call fcn.140038140
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031ace
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x48], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e1e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x34], 0x4000
mov edx, 0x97
lea rcx, [rsp + 0x48]
call fcn.140003220
mov qword [rbp + 0x708], 0xf
mov dword [rbp + 0x710], 0x82
mov rbx, qword [rsp + 0x48]
mov qword [rbp + 0x718], rbx
mov rax, rsi
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031b30
mov dword [rbp + 0x720], eax
mov dword [rbp + 0x724], 1
lea r8, [rbp + 0x708]
mov edx, 1
mov rcx, rdi
call fcn.140038140
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031b7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x50], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e29
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x34], 0x8000
mov edx, 0x96
lea rcx, [rsp + 0x50]
call fcn.140003220
mov qword [rbp + 0x7a0], 0xf
mov dword [rbp + 0x7a8], 0x82
mov rbx, qword [rsp + 0x50]
mov qword [rbp + 0x7b0], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031be0
mov dword [rbp + 0x7b8], eax
mov dword [rbp + 0x7bc], 2
lea r8, [rbp + 0x7a0]
mov edx, 2
mov rcx, rdi
call fcn.140038140
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031c2c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
mov r8d, 0xe0e0e0
mov rcx, rdi
call fcn.140038b20
xor edx, edx
lea r8d, [rdx + 0x20]
mov rcx, rdi
call fcn.140038980
mov edx, 2
mov r8d, 0xf0f0f0
mov rcx, rdi
call fcn.140038b20
mov edx, 2
lea r8d, [rdx + 0x1e]
mov rcx, rdi
call fcn.140038980
nop
mov qword [rsp + 0x58], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e34
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x30], 0x40000000
mov edx, 0x98
lea rcx, [rsp + 0x58]
call fcn.140003220
mov qword [rbp + 0x130], 3
mov dword [rbp + 0x138], r13d
mov rbx, qword [rsp + 0x58]
mov qword [rbp + 0x148], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031cd0
mov dword [rbp + 0x150], eax
mov qword [rbp + 0x13c], r13
mov dword [rbp + 0x154], r13d
mov qword [rbp + 0x158], r13
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x30], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031d23
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x60], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e3f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0x80000000
mov edx, 0x9c
lea rcx, [rsp + 0x60]
call fcn.140003220
mov dword [rbp + 0x190], r15d
mov qword [rbp + 0x194], 1
mov rbx, qword [rsp + 0x60]
mov qword [rbp + 0x1a8], rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031d80
mov dword [rbp + 0x1b0], eax
mov qword [rbp + 0x19c], r13
mov dword [rbp + 0x1b4], r13d
mov qword [rbp + 0x1b8], r13
lea rdx, [rbp + 0x190]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x30], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031dd3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x68], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e4a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x34], 1
mov edx, 0x99
lea rcx, [rsp + 0x68]
call fcn.140003220
mov dword [rbp + 0x1f0], r15d
mov qword [rbp + 0x1f4], 2
mov rbx, qword [rsp + 0x68]
mov qword [rbp + 0x208], rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031e30
mov dword [rbp + 0x210], eax
mov qword [rbp + 0x1fc], r13
mov dword [rbp + 0x214], r13d
mov qword [rbp + 0x218], r13
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031e83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x70], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e55
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x34], 2
mov edx, 0xa6
lea rcx, [rsp + 0x70]
call fcn.140003220
mov dword [rbp + 0x250], r15d
mov qword [rbp + 0x254], 3
mov rbx, qword [rsp + 0x70]
mov qword [rbp + 0x268], rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031ee0
mov dword [rbp + 0x270], eax
mov qword [rbp + 0x25c], r13
mov dword [rbp + 0x274], r13d
mov qword [rbp + 0x278], r13
lea rdx, [rbp + 0x250]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031f33
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x78], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e60
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x34], 4
mov edx, 0xa7
lea rcx, [rsp + 0x78]
call fcn.140003220
mov dword [rbp + 0x2b0], r15d
mov qword [rbp + 0x2b4], 4
mov rbx, qword [rsp + 0x78]
mov qword [rbp + 0x2c8], rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140031f90
mov dword [rbp + 0x2d0], eax
mov qword [rbp + 0x2bc], r13
mov dword [rbp + 0x2d4], r13d
mov qword [rbp + 0x2d8], r13
lea rdx, [rbp + 0x2b0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140031fe3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x80], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e6b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
mov dword [rsp + 0x34], 8
mov edx, 0x9a
lea rcx, [rbp - 0x80]
call fcn.140003220
mov dword [rbp + 0x310], r15d
mov qword [rbp + 0x314], 5
mov rbx, qword [rbp - 0x80]
mov qword [rbp + 0x328], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032040
mov dword [rbp + 0x330], eax
mov qword [rbp + 0x31c], r13
mov dword [rbp + 0x334], r13d
mov qword [rbp + 0x338], r13
lea rdx, [rbp + 0x310]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032093
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x78], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e76
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
mov dword [rsp + 0x34], 0x10
mov edx, 0x9b
lea rcx, [rbp - 0x78]
call fcn.140003220
mov dword [rbp + 0x370], r15d
mov qword [rbp + 0x374], 6
mov rbx, qword [rbp - 0x78]
mov qword [rbp + 0x388], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400320f0
mov dword [rbp + 0x390], eax
mov qword [rbp + 0x37c], r13
mov dword [rbp + 0x394], r13d
mov qword [rbp + 0x398], r13
lea rdx, [rbp + 0x370]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032143
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x70], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e81
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
mov dword [rsp + 0x34], 0x10000
mov edx, LoadRegTypeLib
lea rcx, [rbp - 0x70]
call fcn.140003220
mov dword [rbp + 0xd0], r15d
mov qword [rbp + 0xd4], 7
mov rbx, qword [rbp - 0x70]
mov qword [rbp + 0xe8], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400321a0
mov dword [rbp + 0xf0], eax
mov qword [rbp + 0xdc], r13
mov dword [rbp + 0xf4], r13d
mov qword [rbp + 0xf8], r13
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400321f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x68], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e8c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
mov dword [rsp + 0x34], 0x2000
mov edx, LoadRegTypeLib
lea rcx, [rbp - 0x68]
call fcn.140003220
mov dword [rbp + 0x3d0], r15d
mov qword [rbp + 0x3d4], 8
mov rbx, qword [rbp - 0x68]
mov qword [rbp + 0x3e8], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032250
mov dword [rbp + 0x3f0], eax
mov qword [rbp + 0x3dc], r13
mov dword [rbp + 0x3f4], r13d
mov qword [rbp + 0x3f8], r13
lea rdx, [rbp + 0x3d0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400322a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x60], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e97
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
mov dword [rsp + 0x34], 0x800
mov edx, LoadRegTypeLib
lea rcx, [rbp - 0x60]
call fcn.140003220
mov dword [rbp + 0x430], r15d
mov qword [rbp + 0x434], 9
mov rbx, qword [rbp - 0x60]
mov qword [rbp + 0x448], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032300
mov dword [rbp + 0x450], eax
mov qword [rbp + 0x43c], r13
mov dword [rbp + 0x454], r13d
mov qword [rbp + 0x458], r13
lea rdx, [rbp + 0x430]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032353
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x58], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ea2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x34], 0x400
mov edx, LoadRegTypeLib
lea rcx, [rbp - 0x58]
call fcn.140003220
mov dword [rbp + 0x490], r15d
mov qword [rbp + 0x494], 0xa
mov rbx, qword [rbp - 0x58]
mov qword [rbp + 0x4a8], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400323b0
mov dword [rbp + 0x4b0], eax
mov qword [rbp + 0x49c], r13
mov dword [rbp + 0x4b4], r13d
mov qword [rbp + 0x4b8], r13
lea rdx, [rbp + 0x490]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032403
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x50], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ead
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
mov dword [rsp + 0x34], 0x200
mov edx, reloc.OLEAUT32.dll_LoadRegTypeLib
lea rcx, [rbp - 0x50]
call fcn.140003220
mov dword [rbp + 0x4f0], r15d
mov qword [rbp + 0x4f4], VariantTimeToDosDateTime
mov rbx, qword [rbp - 0x50]
mov qword [rbp + 0x508], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032460
mov dword [rbp + 0x510], eax
mov qword [rbp + 0x4fc], r13
mov dword [rbp + 0x514], r13d
mov qword [rbp + 0x518], r13
lea rdx, [rbp + 0x4f0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400324b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x48], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033eb8
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov dword [rsp + 0x34], 0x100
mov edx, 0xa2
lea rcx, [rbp - 0x48]
call fcn.140003220
mov dword [rbp + 0x550], r15d
mov qword [rbp + 0x554], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rbx, qword [rbp - 0x48]
mov qword [rbp + 0x568], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032510
mov dword [rbp + 0x570], eax
mov qword [rbp + 0x55c], r13
mov dword [rbp + 0x574], r13d
mov qword [rbp + 0x578], r13
lea rdx, [rbp + 0x550]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032563
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x40], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ec3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x34], 0x80
mov edx, 0xa3
lea rcx, [rbp - 0x40]
call fcn.140003220
mov dword [rbp + 0x5b0], r15d
mov qword [rbp + 0x5b4], 0xd
mov rbx, qword [rbp - 0x40]
mov qword [rbp + 0x5c8], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400325c0
mov dword [rbp + 0x5d0], eax
mov qword [rbp + 0x5bc], r13
mov dword [rbp + 0x5d4], r13d
mov qword [rbp + 0x5d8], r13
lea rdx, [rbp + 0x5b0]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032613
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x38], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ece
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
mov dword [rsp + 0x34], 0x20
mov edx, 0xa4
lea rcx, [rbp - 0x38]
call fcn.140003220
mov dword [rbp + 0x610], r15d
mov qword [rbp + 0x614], 0xe
mov rbx, qword [rbp - 0x38]
mov qword [rbp + 0x628], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032670
mov dword [rbp + 0x630], eax
mov qword [rbp + 0x61c], r13
mov dword [rbp + 0x634], r13d
mov qword [rbp + 0x638], r13
lea rdx, [rbp + 0x610]
mov rcx, rdi
call fcn.140037de0
mov dword [rsp + 0x34], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400326c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rbp - 0x30], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ed9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x34], 0x40
mov edx, 0xa5
lea rcx, [rbp - 0x30]
call fcn.140003220
mov dword [rbp + 0x670], r15d
mov qword [rbp + 0x674], 0xf
mov rbx, qword [rbp - 0x30]
mov qword [rbp + 0x688], rbx
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140032720
mov dword [rbp + 0x690], eax
mov qword [rbp + 0x67c], r13
mov dword [rbp + 0x694], r13d
mov qword [rbp + 0x698], r13
lea rdx, [rbp + 0x670]
mov rcx, rdi
call fcn.140037de0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003276e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r12d, 1
mov r15, qword [r14 + 0x180]
add r15, 0x1c70
mov ecx, r13d
lea rax, [r14 + 0x188]
nop dword [rax]
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov dword [rax + 0x20], edx
mov byte [rax], cl
inc ecx
lea rax, [rax + 0x24]
cmp ecx, 0x10
jl 0x140032790
movzx r13d, byte [r15]
mov r9d, r13d
lea r8, [0x14028346c]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
add r14, 0x5d0
lea r9, [rbp + 0x7e0]
xor edx, edx
mov r8d, r12d
mov rcx, r14
call fcn.14007331c
test r13b, r13b
je 0x140032866
xor edx, edx
lea r12d, [rdx + 4]
mov r8d, 0x3030ff
mov rcx, r14
call fcn.140038810
xor edx, edx
lea r8d, [r12 + 0x1d]
mov rcx, r14
call fcn.140038650
nop
xor edi, edi
mov qword [rbp - 0x28], rdi
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ee4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
mov dword [rsp + 0x30], 0x800000
mov edx, 0xc4
lea rcx, [rbp - 0x28]
call fcn.140003220
mov rbx, qword [rbp - 0x28]
mov r9, rbx
xor edx, edx
lea r8d, [r12 - 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], edi
jmp 0x1400328ba
xor edi, edi
mov qword [rbp - 0x20], rdi
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033eef
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov dword [rsp + 0x30], 0x1000000
mov edx, 0xc2
lea rcx, [rbp - 0x20]
call fcn.140003220
mov rbx, qword [rbp - 0x20]
mov r9, rbx
xor edx, edx
lea r8d, [rdi + 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], edi
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400328d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x38]
add rdi, 0x1a0
mov qword [rdi], r13
movzx r13d, byte [r15 + 6]
mov r9d, r13d
lea r8, [0x14028346c]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 1
mov r8d, edx
mov rcx, r14
call fcn.14007331c
test r13b, r13b
je 0x1400329ac
mov edx, 1
lea r12d, [rdx + 3]
mov r8d, 0x3030ff
mov rcx, r14
call fcn.140038810
lea edx, [r12 - 3]
lea r8d, [r12 + 0x1d]
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp - 0x18], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033efa
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
mov dword [rsp + 0x30], 0x1000
mov edx, 0xc4
lea rcx, [rbp - 0x18]
call fcn.140003220
mov rbx, qword [rbp - 0x18]
mov r9, rbx
lea edx, [r12 - 3]
lea r8d, [r12 - 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x140032a09
mov qword [rbp - 0x10], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f05
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
mov dword [rsp + 0x30], 0x400000
mov edx, 0xc2
lea rcx, [rbp - 0x10]
call fcn.140003220
mov rbx, qword [rbp - 0x10]
mov r9, rbx
mov edx, 1
lea r8d, [rdx + 1]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032a22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r13
mov r13, qword [rsp + 0x38]
mov qword [r13 + 0x1c4], rax
movzx eax, word [r15 + 1]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x1402923f8]
cvtpd2ps xmm6, xmm0
mov rax, qword [r13 + 0x170]
mov rcx, qword [rax + 0x18]
mov edx, dword [rcx + 0xb8]
test edx, edx
je 0x140032ad4
sub edx, 1
je 0x140032ab0
cmp edx, 1
jne 0x140032af4
cvtps2pd xmm3, xmm6
movaps xmm0, xmm3
mulsd xmm0, qword [0x1402923b0]
divsd xmm0, qword [0x1402923a8]
addsd xmm0, qword [0x1402923b8]
movsd qword [rsp + 0x20], xmm0
movq r9, xmm3
lea r8, str._.1f_C____.1f_F
mov edx, 0x20
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
jmp 0x140032af4
cvtps2pd xmm3, xmm6
mulsd xmm3, qword [0x1402923b0]
divsd xmm3, qword [0x1402923a8]
addsd xmm3, qword [0x1402923b8]
lea r8, str._.1f_F
jmp 0x140032ade
cvtps2pd xmm3, xmm6
lea r8, str._.1f_C
movq r9, xmm3
mov edx, 0x20
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 2
lea r8d, [rdx - 1]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp - 8], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f10
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
mov dword [rsp + 0x30], 4
mov edx, 0xc2
lea rcx, [rbp - 8]
call fcn.140003220
mov rbx, qword [rbp - 8]
mov r9, rbx
mov edx, 2
mov r8d, edx
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032b82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movaps xmm0, xmm6
mulss xmm0, dword [0x140292430]
cvttss2si rcx, xmm0
mov ecx, ecx
mov qword [r13 + 0x1e8], rcx
cvttss2si ecx, xmm6
mov rax, qword [r13 + 0x180]
mov dword [rax + 0x328], ecx
mov qword [rbp], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f1b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp], rax
mov dword [rsp + 0x30], 2
mov edx, 0xa8
lea rcx, [rbp]
call fcn.140003220
mov rbx, qword [rbp]
mov qword [rsp + 0x20], rbx
mov r9d, dword [r15 + 0xc0]
lea r8, str._d__s
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032c32
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r9, [rbp + 0x7e0]
mov ebx, 3
lea r8d, [rbx - 2]
mov edx, ebx
mov rcx, r14
call fcn.14007331c
cmp dword [r15 + 0xc0], 0
jbe 0x140032ce0
cmp r12d, 4
cmovne r12d, ebx
mov r8d, 0x30ffff
mov edx, ebx
mov rcx, r14
call fcn.140038810
lea r8d, [rbx + 0x1d]
mov edx, ebx
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 8], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f26
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
mov dword [rsp + 0x30], 0x2000
mov edx, 0xcd
lea rcx, [rbp + 8]
call fcn.140003220
mov rbx, qword [rbp + 8]
mov r9, rbx
mov edx, 3
lea r8d, [rdx - 1]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x140032d3d
mov qword [rbp + 0x10], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f31
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
mov dword [rsp + 0x30], 0x4000
mov edx, 0xc2
lea rcx, [rbp + 0x10]
call fcn.140003220
mov rbx, qword [rbp + 0x10]
mov r9, rbx
mov edx, 3
lea r8d, [rdx - 1]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032d56
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [r15 + 0xc0]
mov qword [r13 + 0x20c], rax
mov qword [rbp + 0x18], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f3c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
mov dword [rsp + 0x30], 1
mov edx, 0xa8
lea rcx, [rbp + 0x18]
call fcn.140003220
mov rbx, qword [rbp + 0x18]
mov qword [rsp + 0x20], rbx
mov r9d, dword [r15 + 0xc4]
lea r8, str._d__s
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032dea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r9, [rbp + 0x7e0]
mov edx, 4
lea r8d, [rdx - 3]
mov rcx, r14
call fcn.14007331c
cmp dword [r15 + 0xc4], 0
jbe 0x140032e97
mov edx, 4
mov r12d, edx
mov r8d, 0x3030ff
mov rcx, r14
call fcn.140038810
mov edx, r12d
mov r8d, 0x21
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 0x20], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f47
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x20], rax
mov dword [rsp + 0x30], 0x8000
mov edx, 0xc4
lea rcx, [rbp + 0x20]
call fcn.140003220
mov rbx, qword [rbp + 0x20]
mov r9, rbx
mov edx, 4
lea r8d, [rdx - 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x140032ef4
mov qword [rbp + 0x28], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f52
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x28], rax
mov dword [rsp + 0x30], 0x10000
mov edx, 0xc2
lea rcx, [rbp + 0x28]
call fcn.140003220
mov rbx, qword [rbp + 0x28]
mov r9, rbx
mov edx, 4
lea r8d, [rdx - 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140032f0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [r15 + 0xc4]
mov qword [r13 + 0x230], rax
movzx eax, byte [r15 + 4]
movzx r9d, byte [r15 + 3]
mov dword [rsp + 0x20], eax
lea r8, str._d______d_
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 5
lea r8d, [rdx - 4]
mov rcx, r14
call fcn.14007331c
movzx eax, byte [r15 + 3]
movzx ecx, byte [r15 + 4]
cmp al, cl
ja 0x140032ff8
mov edx, 5
lea r12d, [rdx - 1]
mov r8d, 0x3030ff
mov rcx, r14
call fcn.140038810
lea edx, [r12 + 1]
lea r8d, [r12 + 0x1d]
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 0x30], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f5d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x30], rax
mov dword [rsp + 0x30], 0x20000
mov edx, 0xc4
lea rcx, [rbp + 0x30]
call fcn.140003220
mov rbx, qword [rbp + 0x30]
mov r9, rbx
lea edx, [r12 + 1]
lea r8d, [r12 - 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x1400330ef
add ecx, 0xa
cmp eax, ecx
ja 0x140033092
cmp r12d, 4
mov eax, 3
cmovne r12d, eax
lea edx, [rax + 2]
mov r8d, 0x30ffff
mov rcx, r14
call fcn.140038810
mov edx, 5
lea r8d, [rdx + 0x1b]
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 0x38], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f68
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
mov dword [rsp + 0x30], 0x10000000
mov edx, 0xcd
lea rcx, [rbp + 0x38]
call fcn.140003220
mov rbx, qword [rbp + 0x38]
mov r9, rbx
mov edx, 5
lea r8d, [rdx - 3]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x1400330ef
mov qword [rbp + 0x40], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f73
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
mov dword [rsp + 0x30], 0x20000000
mov edx, 0xc2
lea rcx, [rbp + 0x40]
call fcn.140003220
mov rbx, qword [rbp + 0x40]
mov r9, rbx
mov edx, 5
lea r8d, [rdx - 3]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033108
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movzx eax, byte [r15 + 3]
mov qword [r13 + 0x254], rax
movzx r9d, byte [r15 + 5]
lea r8, str._d___
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 6
lea r8d, [rdx - 5]
mov rcx, r14
call fcn.14007331c
cmp byte [r15 + 5], 0x5a
jb 0x1400331e3
cmp r12d, 4
mov eax, 3
cmovne r12d, eax
lea edx, [rax + 3]
mov r8d, 0x30ffff
mov rcx, r14
call fcn.140038810
mov edx, 6
lea r8d, [rdx + 0x1a]
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 0x48], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f7e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
mov dword [rsp + 0x30], 0x40000
mov edx, 0xcd
lea rcx, [rbp + 0x48]
call fcn.140003220
mov rbx, qword [rbp + 0x48]
mov r9, rbx
mov edx, 6
lea r8d, [rdx - 4]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x140033240
mov qword [rbp + 0x50], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f89
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
mov dword [rsp + 0x30], 0x80000
mov edx, 0xc2
lea rcx, [rbp + 0x50]
call fcn.140003220
mov rbx, qword [rbp + 0x50]
mov r9, rbx
mov edx, 6
lea r8d, [rdx - 4]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033259
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movzx eax, byte [r15 + 5]
mov qword [r13 + 0x278], rax
imul rax, qword [r15 + 0x20], 0x7d000
cqo
and edx, 0x3fffffff
add rax, rdx
sar rax, 0x1e
mov r13, rax
mov r9, rax
lea r8, [0x140288180]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 7
lea r8d, [rdx - 6]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x58], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f94
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
mov dword [rsp + 0x30], 0x800
mov edx, 0xc2
lea rcx, [rbp + 0x58]
call fcn.140003220
mov rbx, qword [rbp + 0x58]
mov r9, rbx
mov edx, 7
lea r8d, [rdx - 5]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033329
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x29c], r13
imul rax, qword [r15 + 0x30], 0x7d000
cqo
and edx, 0x3fffffff
add rax, rdx
sar rax, 0x1e
mov r13, rax
mov r9, rax
lea r8, [0x140288180]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 8
lea r8d, [rdx - 7]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x60], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033f9f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
mov dword [rsp + 0x30], 0x400
mov edx, 0xc2
lea rcx, [rbp + 0x60]
call fcn.140003220
mov rbx, qword [rbp + 0x60]
mov r9, rbx
mov edx, 8
lea r8d, [rdx - 6]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400333f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x2c0], r13
mov r9, qword [r15 + 0x40]
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 9
lea r8d, [rdx - 8]
mov rcx, r14
call fcn.14007331c
nop
xor r13d, r13d
mov qword [rbp + 0x68], r13
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033faa
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
mov dword [rsp + 0x30], 0x200
mov edx, 0xc2
lea rcx, [rbp + 0x68]
call fcn.140003220
mov rbx, qword [rbp + 0x68]
mov r9, rbx
lea edx, [r13 + 9]
lea r8d, [r13 + 2]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], r13d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400334ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x40]
mov r13, qword [rsp + 0x38]
mov qword [r13 + 0x2e4], rax
mov r9, qword [r15 + 0x50]
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 0xa
lea r8d, [rdx - 9]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x70], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fb5
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
mov dword [rsp + 0x30], 0x100
mov edx, 0xc2
lea rcx, [rbp + 0x70]
call fcn.140003220
mov rbx, qword [rbp + 0x70]
mov r9, rbx
mov edx, 0xa
lea r8d, [rdx - 8]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033566
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x50]
mov qword [r13 + 0x308], rax
mov qword [rbp + 0x78], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fc0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
mov dword [rsp + 0x30], 0x80
mov edx, 0xa8
lea rcx, [rbp + 0x78]
call fcn.140003220
mov rbx, qword [rbp + 0x78]
mov qword [rsp + 0x20], rbx
mov r9, qword [r15 + 0x60]
lea r8, str._I64d__s
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400335f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r9, [rbp + 0x7e0]
mov edx, VariantTimeToDosDateTime
lea r8d, [rdx - 0xa]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x80], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fcb
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
mov dword [rsp + 0x30], 0x40
mov edx, 0xc2
lea rcx, [rbp + 0x80]
call fcn.140003220
mov rbx, qword [rbp + 0x80]
mov r9, rbx
mov edx, VariantTimeToDosDateTime
lea r8d, [rdx - 9]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003368f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x60]
mov qword [r13 + 0x32c], rax
mov r9, qword [r15 + 0x70]
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea r8d, [rdx - 0xb]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x88], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fd6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x88], rax
mov dword [rsp + 0x30], 0x20
mov edx, 0xc2
lea rcx, [rbp + 0x88]
call fcn.140003220
mov rbx, qword [rbp + 0x88]
mov r9, rbx
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea r8d, [rdx - 0xa]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033751
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x70]
mov qword [r13 + 0x350], rax
mov r9, qword [r15 + 0x90]
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 0xd
lea r8d, [rdx - 0xc]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0x90], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fe1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x90], rax
mov dword [rsp + 0x30], 0x10
mov edx, 0xc2
lea rcx, [rbp + 0x90]
call fcn.140003220
mov rbx, qword [rbp + 0x90]
mov r9, rbx
mov edx, 0xd
lea r8d, [rdx - 0xb]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033816
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r15 + 0x90]
mov qword [r13 + 0x374], rax
mov r13, qword [r15 + 0xa0]
mov r9, r13
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 0xe
lea r8d, [rdx - 0xd]
mov rcx, r14
call fcn.14007331c
test r13, r13
jle 0x140033902
cmp r12d, 4
mov eax, 3
cmovne r12d, eax
lea edx, [rax + 0xb]
mov r8d, 0x30ffff
mov rcx, r14
call fcn.140038810
mov edx, 0xe
lea r8d, [rdx + 0x12]
mov rcx, r14
call fcn.140038650
nop
mov qword [rbp + 0x98], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033fec
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x98], rax
mov dword [rsp + 0x30], 0x100000
mov edx, 0xcd
lea rcx, [rbp + 0x98]
call fcn.140003220
mov rbx, qword [rbp + 0x98]
mov r9, rbx
mov edx, 0xe
lea r8d, [rdx - 0xc]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
jmp 0x14003396b
mov qword [rbp + 0xa0], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033ff7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa0], rax
mov dword [rsp + 0x30], 0x200000
mov edx, 0xc2
lea rcx, [rbp + 0xa0]
call fcn.140003220
mov rbx, qword [rbp + 0xa0]
mov r9, rbx
mov edx, 0xe
lea r8d, [rdx - 0xc]
mov rcx, r14
call fcn.14007331c
mov dword [rsp + 0x30], 0
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033984
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x398], r13
mov r9, qword [r15 + 0xb0]
lea r8, [0x140282f48]
mov edx, 0x64
lea rcx, [rbp + 0x7e0]
call fcn.140002ed0
lea r9, [rbp + 0x7e0]
mov edx, 0xf
lea r8d, [rdx - 0xe]
mov rcx, r14
call fcn.14007331c
nop
mov qword [rbp + 0xa8], 0
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140034002
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa8], rax
mov dword [rsp + 0x30], 8
mov edx, 0xc2
lea rcx, [rbp + 0xa8]
call fcn.140003220
mov rbx, qword [rbp + 0xa8]
mov r9, rbx
mov edx, 0xf
lea r8d, [rdx - 0xd]
mov rcx, r14
call fcn.14007331c
xor ecx, ecx
mov dword [rsp + 0x30], ecx
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140033a4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor ecx, ecx
mov rax, qword [r15 + 0xb0]
mov r13, qword [rsp + 0x38]
mov qword [r13 + 0x3bc], rax
sub r12d, 3
je 0x140033c19
cmp r12d, 1
je 0x140033b45
mov qword [rbp + 0xb0], rcx
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14003400d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb0], rax
mov dword [rsp + 0x30], 0x8000000
mov edx, 0xc2
lea rcx, [rbp + 0xb0]
call fcn.140003220
lea r15, [r13 + 0xb70]
mov rdx, qword [rbp + 0xb0]
lea r14, [rdx - 0x18]
mov rbx, qword [r15]
sub rbx, 0x18
cmp r14, rbx
je 0x140033b1e
cmp dword [rbx + 0x10], 0
jl 0x140033b11
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140033b11
mov rcx, r14
call fcn.14000cbe0
mov r13, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140033b03
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r13 + 0x18]
mov qword [r15], rax
mov r13, qword [rsp + 0x38]
jmp 0x140033b1e
mov r8d, dword [rdx - 0x10]
mov rcx, r15
call fcn.140003400
nop
lock xadd dword [r14 + 0x10], esi
sub esi, 1
jg 0x140033b35
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [r13 + 0xad8], 0xc000
jmp 0x140033ce8
mov qword [rbp + 0xb8], rcx
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140034018
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb8], rax
mov dword [rsp + 0x30], 0x4000000
mov edx, 0xc4
lea rcx, [rbp + 0xb8]
call fcn.140003220
lea r15, [r13 + 0xb70]
mov rdx, qword [rbp + 0xb8]
lea r14, [rdx - 0x18]
mov rbx, qword [r15]
sub rbx, 0x18
cmp r14, rbx
je 0x140033bf2
cmp dword [rbx + 0x10], 0
jl 0x140033be5
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140033be5
mov rcx, r14
call fcn.14000cbe0
mov r13, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140033bd7
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r13 + 0x18]
mov qword [r15], rax
mov r13, qword [rsp + 0x38]
jmp 0x140033bf2
mov r8d, dword [rdx - 0x10]
mov rcx, r15
call fcn.140003400
nop
lock xadd dword [r14 + 0x10], esi
sub esi, 1
jg 0x140033c09
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [r13 + 0xad8], 0xc0
jmp 0x140033ce8
mov qword [rbp + 0xc0], rcx
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140033e08
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc0], rax
mov dword [rsp + 0x30], 0x2000000
mov edx, 0xcd
lea rcx, [rbp + 0xc0]
call fcn.140003220
lea r15, [r13 + 0xb70]
mov rdx, qword [rbp + 0xc0]
lea r14, [rdx - 0x18]
mov rbx, qword [r15]
sub rbx, 0x18
cmp r14, rbx
je 0x140033cc6
cmp dword [rbx + 0x10], 0
jl 0x140033cb9
mov rax, qword [rbx]
cmp qword [r14], rax
jne 0x140033cb9
mov rcx, r14
call fcn.14000cbe0
mov r13, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140033cab
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r13 + 0x18]
mov qword [r15], rax
mov r13, qword [rsp + 0x38]
jmp 0x140033cc6
mov r8d, dword [rdx - 0x10]
mov rcx, r15
call fcn.140003400
nop
lock xadd dword [r14 + 0x10], esi
sub esi, 1
jg 0x140033cdd
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [r13 + 0xad8], 0xc0f0
xor eax, eax
mov ebx, eax
nop dword [rax]
mov dword [rbp + 0x740], 4
mov dword [rbp + 0x744], ebx
mov qword [rbp + 0x748], 0
mov dword [rbp + 0x750], eax
mov qword [rbp + 0x758], rax
mov qword [rbp + 0x760], 0
mov qword [rbp + 0x768], rax
lea r9, [rbp + 0x740]
xor r8d, r8d
mov edx, 0x104b
mov rcx, qword [r13 + 0x610]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rdi - 0x18]
mov rax, qword [rbp + 0x768]
mov qword [rax], rcx
mov rcx, qword [rdi]
mov rax, rcx
sar rax, 8
mov byte [rdi - 0x13], al
sar rcx, 9
mov byte [rdi - 0x12], cl
mov eax, dword [rdi]
sar rax, 0xa
mov byte [rdi - 0x11], al
mov eax, dword [rdi]
sar rax, 0xb
mov byte [rdi - 0x10], al
mov eax, dword [rdi]
sar rax, 0xc
mov byte [rdi - 0xf], al
mov eax, dword [rdi]
sar rax, 0xd
mov byte [rdi - 0xe], al
lea eax, [rbx + 1]
mov byte [rdi - 0xc], al
inc ebx
lea rdi, [rdi + 0x24]
cmp ebx, 0x10
mov eax, 0
jl 0x140033cf0
mov r8, qword [r13 + 0x170]
mov rax, qword [r8 + 0x18]
cmp dword [rax + 0x120], 0
je 0x140033dd1
cmp byte [r8 + 0x1e1ec8], 0
jne 0x140033dd1
mov edx, 1
mov rcx, r13
call fcn.140034030
mov al, 1
mov rcx, qword [rbp + 0x8b0]
xor rcx, rsp
call fcn.1401ee030
lea r11, [rsp + 0x9d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
int3