Function at 0x14002fb50
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x14031b940]
xor rax, rsp
mov qword [rbp + 0x770], rax
xor esi, esi
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp + 0x204]
call fcn.140254b70
mov dword [rbp + 0x200], 0x11c
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
lea rdi, [rsi - 1]
lea r15, vtable.srl::GroupID.0
lea r12, vtable.srl::Name.0
test eax, eax
je 0x140030d09
cmp dword [rbp + 0x204], 6
jb 0x14002fc1b
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x28]
call fcn.14002e470
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
cmp dword [rbp + 0x204], ecx
jne 0x14002fc05
cmp dword [rbp + 0x208], eax
je 0x14002fc1b
mov dword [rbp + 0x204], ecx
mov dword [rbp + 0x208], eax
mov eax, dword [rsp + 0x20]
mov dword [rbp + 0x20c], eax
lea rcx, [rbp - 0x20]
call fcn.140019350
nop
movzx ebx, word [rbp + 0x20c]
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.140019580
mov rcx, rax
mov dl, 0x2e
call fcn.14002a820
mov rcx, rax
mov edx, dword [rbp + 0x208]
call fcn.140019580
mov rcx, rax
mov dl, 0x2e
call fcn.14002a820
mov rcx, rax
mov edx, ebx
call fcn.140019580
lea rdx, [rbp + 0x500]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
lea rdx, [rbp + 0x500]
lea rcx, [rbp - 0x50]
call fcn.140077590
mov rbx, rax
mov edx, 0x1168d
lea rcx, [rbp + 0x6e0]
call fcn.140022530
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.1400511e0
nop
lea rcx, [rbp + 0x6e0]
call fcn.1400226c0
nop
lea rbx, vtable.srl::Version.0
mov qword [rbp - 0x50], rbx
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002fce1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r14, vtable.srl::Value.0
mov qword [rbp - 0x50], r14
mov r8, qword [rbp + 0x518]
cmp r8, 7
jbe 0x14002fd0c
mov rdx, qword [rbp + 0x500]
lea rcx, [rbp + 0x500]
call fcn.140009718
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rsp + 0x40], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030ed3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 7
jbe 0x14002fd64
mov rdx, qword [rbp + 0x4a0]
test rdx, rdx
jne 0x14002fd64
mov r8d, esi
jmp 0x14002fd7b
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002fd70
lea rcx, [rsp + 0x48]
call fcn.140002b6c
nop
mov edx, 0x115a0
lea rcx, [rbp + 0x560]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x560], r15
mov rdx, qword [rbp + 0x580]
cmp rdx, 7
jbe 0x14002fdf6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fdf1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030ede
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x578], xmm0
mov word [rbp + 0x568], si
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002fe30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x40], r14
mov rdx, qword [rbp + 0x4b8]
cmp rdx, 7
jbe 0x14002fe7b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030ee4
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x340]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 7
cmova rdx, qword [rbp + 0x340]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x350]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 7
jbe 0x14002ff0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.140019580
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rsp + 0x50], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030eea
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], 7
jbe 0x14002ff71
mov rdx, qword [rbp + 0x4c0]
test rdx, rdx
jne 0x14002ff71
mov r8d, esi
jmp 0x14002ff7f
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002ff74
lea rcx, [rsp + 0x58]
call fcn.140002b6c
nop
mov edx, 0x116c7
lea rcx, [rbp + 0x680]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x680], r15
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 7
jbe 0x14002fffa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fff5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030ef5
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x698], xmm0
mov word [rbp + 0x688], si
mov qword [rsp + 0x50], rbx
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030034
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x50], r14
mov rdx, qword [rbp + 0x4d8]
cmp rdx, 7
jbe 0x14003007f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003007a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030efb
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x360]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x360]
cmp qword [rbp + 0x378], 7
cmova rdx, qword [rbp + 0x360]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x370]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x378]
cmp rdx, 7
jbe 0x14003010e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030109
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
mov edx, dword [rbp + 0x208]
lea rcx, [rbp - 0x10]
call fcn.140019580
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rsp + 0x60], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f01
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 7
jbe 0x140030175
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
jne 0x140030175
mov r8d, esi
jmp 0x14003018b
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030180
lea rcx, [rsp + 0x68]
call fcn.140002b6c
nop
mov edx, 0x116c8
lea rcx, [rbp + 0x590]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rsp + 0x60]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x590], r15
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 7
jbe 0x140030206
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030201
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f0c
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x5a8], xmm0
mov word [rbp + 0x598], si
mov qword [rsp + 0x60], rbx
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030240
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x60], r14
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 7
jbe 0x14003028b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030286
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f12
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x380]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x380]
cmp qword [rbp + 0x398], 7
cmova rdx, qword [rbp + 0x380]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x390]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x398]
cmp rdx, 7
jbe 0x14003031a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030315
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
movzx edx, word [rbp + 0x20c]
lea rcx, [rbp - 0x10]
call fcn.140019580
lea rdx, [rbp + 0x400]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rsp + 0x70], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f18
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], 7
jbe 0x140030382
mov rdx, qword [rbp + 0x400]
test rdx, rdx
jne 0x140030382
mov r8d, esi
jmp 0x140030390
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030385
lea rcx, [rsp + 0x78]
call fcn.140002b6c
nop
mov edx, 0x116c6
lea rcx, [rbp + 0x5c0]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rsp + 0x70]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x5c0], r15
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 7
jbe 0x14003040b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030406
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f23
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x5d8], xmm0
mov word [rbp + 0x5c8], si
mov qword [rsp + 0x70], rbx
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030445
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x418]
cmp rdx, 7
jbe 0x140030490
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003048b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f29
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x3a0]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 7
cmova rdx, qword [rbp + 0x3a0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3b0]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 7
jbe 0x14003051f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003051a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
movzx edx, word [rbp + 0x314]
lea rcx, [rbp - 0x10]
call fcn.140034010
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rbp - 0x80], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f2f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x420]
cmp qword [rbp + 0x438], 7
jbe 0x140030585
mov rdx, qword [rbp + 0x420]
test rdx, rdx
jne 0x140030585
mov r8d, esi
jmp 0x14003059b
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030590
lea rcx, [rbp - 0x78]
call fcn.140002b6c
nop
mov edx, 0x116c4
lea rcx, [rbp + 0x5f0]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rbp - 0x80]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x5f0], r15
mov rdx, qword [rbp + 0x610]
cmp rdx, 7
jbe 0x140030614
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003060f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f3a
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x608], xmm0
mov word [rbp + 0x5f8], si
mov qword [rbp - 0x80], rbx
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003064c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x80], r14
mov rdx, qword [rbp + 0x438]
cmp rdx, 7
jbe 0x140030696
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030691
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f40
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x3c0]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 7
cmova rdx, qword [rbp + 0x3c0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3d0]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 7
jbe 0x140030725
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030720
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
movzx edx, word [rbp + 0x316]
lea rcx, [rbp - 0x10]
call fcn.140034010
lea rdx, [rbp + 0x440]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rbp - 0x70], rbx
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f46
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x440]
cmp qword [rbp + 0x458], 7
jbe 0x14003078b
mov rdx, qword [rbp + 0x440]
test rdx, rdx
jne 0x14003078b
mov r8d, esi
jmp 0x14003079b
mov r8, rdi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030790
lea rcx, [rbp - 0x68]
call fcn.140002b6c
nop
mov edx, 0x116c5
lea rcx, [rbp + 0x620]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rbp - 0x70]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x620], r15
mov rdx, qword [rbp + 0x640]
cmp rdx, 7
jbe 0x140030814
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x628]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003080f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f51
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x638], xmm0
mov word [rbp + 0x628], si
mov qword [rbp - 0x70], rbx
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003084c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x70], r14
mov rdx, qword [rbp + 0x458]
cmp rdx, 7
jbe 0x140030896
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030891
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f57
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x3e0]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 7
cmova rdx, qword [rbp + 0x3e0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3f0]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 7
jbe 0x140030925
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030920
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f5d
call fcn.140003e94
movzx edx, word [rbp + 0x318]
lea rcx, [rbp - 0x10]
call fcn.140034010
lea rdx, [rbp + 0x460]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
mov qword [rsp + 0x30], r12
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f63
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x460]
cmp qword [rbp + 0x478], 7
jbe 0x140030994
mov rdx, qword [rbp + 0x460]
test rdx, rdx
jne 0x140030994
lea rcx, [rsp + 0x38]
call fcn.140002984
jmp 0x1400309b6
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400309a0
lea rcx, [rsp + 0x38]
call fcn.140002b6c
nop
mov edx, 0x116c3
lea rcx, [rbp + 0x650]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rsp + 0x30]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x650], r15
mov rdx, qword [rbp + 0x670]
cmp rdx, 7
jbe 0x140030a26
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x658]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030a21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f6e
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x668], xmm0
mov word [rbp + 0x658], si
mov qword [rsp + 0x30], r12
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030a60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x30], r14
mov rdx, qword [rbp + 0x478]
cmp rdx, 7
jbe 0x140030aab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030aa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f74
call fcn.140003e94
lea rdx, [0x1402c96bc]
lea rcx, [rbp + 0x320]
call fcn.1400092fc
nop
lea rcx, [rbp - 8]
call fcn.14001ae30
lea rdx, [rbp + 0x320]
cmp qword [rbp + 0x338], 7
cmova rdx, qword [rbp + 0x320]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x330]
lea rcx, [rbp - 8]
call fcn.140021c40
nop
mov r8, qword [rbp + 0x338]
cmp r8, 7
jbe 0x140030b14
mov rdx, qword [rbp + 0x320]
lea rcx, [rbp + 0x320]
call fcn.140009718
movzx edx, byte [rbp + 0x31a]
lea rcx, [rbp - 0x10]
call fcn.140012dc0
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 8]
call fcn.140019f80
nop
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 0x40]
call fcn.14004c760
mov rbx, rax
mov edx, 0x116c2
lea rcx, [rbp + 0x710]
call fcn.140022530
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.1400511e0
nop
lea rcx, [rbp + 0x710]
call fcn.1400226c0
nop
mov qword [rbp - 0x40], r12
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030b97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x40], r14
mov r8, qword [rbp + 0x538]
cmp r8, 7
jbe 0x140030bbb
mov rdx, qword [rbp + 0x520]
lea rcx, [rbp + 0x520]
call fcn.140009718
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov ebx, eax
lea rcx, [rbp + 0x100]
call fcn.140019350
nop
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
mov ecx, dword [rbp + rdx + 0x128]
and ecx, 0xfffff9ff
bts ecx, 0xb
mov dword [rbp + rdx + 0x128], ecx
mov edx, 4
lea rcx, [rbp + 0xe8]
call fcn.140223820
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x110]
add rcx, rdx
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
mov eax, 0x30
mov word [rbp + rcx + 0x168], ax
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
or dword [rbp + rcx + 0x128], 4
mov edx, ebx
lea rcx, [rbp + 0x110]
call fcn.140019580
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x118]
call fcn.140019f80
nop
lea rdx, [rbp + 0x540]
lea rcx, [rbp - 0x30]
call fcn.14004c760
mov rbx, rax
mov edx, 0x116dc
lea rcx, [rbp + 0x740]
call fcn.140022530
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.1400511e0
nop
lea rcx, [rbp + 0x740]
call fcn.1400226c0
nop
mov qword [rbp - 0x30], r12
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030cce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x30], r14
mov r8, qword [rbp + 0x558]
cmp r8, 7
jbe 0x140030cf3
mov rdx, qword [rbp + 0x540]
lea rcx, [rbp + 0x540]
call fcn.140009718
nop
lea rcx, [rbp + 0x100]
call fcn.140019240
nop
lea rcx, [rbp - 0x20]
call fcn.140019240
mov rax, qword [0x14032ac98]
test rax, rax
jne 0x140030d3f
mov ecx, 0xd8
call fcn.140084d70
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140030d35
mov rcx, rax
call fcn.140010a50
jmp 0x140030d38
mov rax, rsi
mov qword [0x14032ac98], rax
mov rdx, qword [rax + 0x10]
lea rcx, [rbp + 0x480]
call fcn.1400092fc
nop
mov qword [rbp - 0x60], r12
call fcn.140010070
mov rcx, rax
test rax, rax
je 0x140030f7a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 7
jbe 0x140030d9b
mov rdx, qword [rbp + 0x480]
test rdx, rdx
jne 0x140030d9b
lea rcx, [rbp - 0x58]
call fcn.140002984
jmp 0x140030db5
mov r8, rdi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030da0
lea rcx, [rbp - 0x58]
call fcn.140002b6c
nop
mov edx, 0x11627
lea rcx, [rbp + 0x6b0]
call fcn.140022530
nop
xor r9d, r9d
lea r8, [rbp - 0x60]
mov rdx, rax
call fcn.1400511e0
nop
mov qword [rbp + 0x6b0], r15
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 7
jbe 0x140030e24
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030e1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030f85
call fcn.140003e94
movdqa xmm0, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x6c8], xmm0
mov word [rbp + 0x6b8], si
mov qword [rbp - 0x60], r12
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140030e5b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x498]
cmp rdx, 7
jbe 0x140030e9d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030e98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030ecd
call fcn.140003e94
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.140220eb0
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
int3
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
mov ecx, 0x80004005
call fcn.140002e3c
nop
call fcn.14022a650
int3